1 //============================================================================
2 // Copyright (c) 1996-2002 Winbond Electronic Corporation
8 // Processing the Rx message from down layer
10 //============================================================================
11 #include <linux/usb.h>
17 static void packet_came(struct ieee80211_hw
*hw
, char *pRxBufferAddress
, int PacketSize
)
19 struct wbsoft_priv
*priv
= hw
->priv
;
21 struct ieee80211_rx_status rx_status
= {0};
26 skb
= dev_alloc_skb(PacketSize
);
28 printk("Not enough memory for packet, FIXME\n");
32 memcpy(skb_put(skb
, PacketSize
),
38 rx_status.channel = 1;
39 rx_status.freq = 12345;
40 rx_status.phymode = MODE_IEEE80211B;
43 memcpy(IEEE80211_SKB_RXCB(skb
), &rx_status
, sizeof(rx_status
));
44 ieee80211_rx_irqsafe(hw
, skb
);
47 static void Wb35Rx_adjust(struct wb35_descriptor
*pRxDes
)
49 u32
* pRxBufferAddress
;
54 DecryptionMethod
= pRxDes
->R01
.R01_decryption_method
;
55 pRxBufferAddress
= pRxDes
->buffer_address
[0];
56 BufferSize
= pRxDes
->buffer_size
[0];
58 // Adjust the last part of data. Only data left
59 BufferSize
-= 4; // For CRC-32
62 if (DecryptionMethod
== 3) // For CCMP
65 // Adjust the IV field which after 802.11 header and ICV field.
66 if (DecryptionMethod
== 1) // For WEP
69 pRxBufferAddress
[i
] = pRxBufferAddress
[i
-1];
70 pRxDes
->buffer_address
[0] = pRxBufferAddress
+ 1;
71 BufferSize
-= 4; // 4 byte for IV
73 else if( DecryptionMethod
) // For TKIP and CCMP
76 pRxBufferAddress
[i
] = pRxBufferAddress
[i
-2];
77 pRxDes
->buffer_address
[0] = pRxBufferAddress
+ 2;//Update the descriptor, shift 8 byte
78 BufferSize
-= 8; // 8 byte for IV + ICV
80 pRxDes
->buffer_size
[0] = BufferSize
;
83 static u16
Wb35Rx_indicate(struct ieee80211_hw
*hw
)
85 struct wbsoft_priv
*priv
= hw
->priv
;
86 struct hw_data
* pHwData
= &priv
->sHwData
;
87 struct wb35_descriptor RxDes
;
88 struct wb35_rx
*pWb35Rx
= &pHwData
->Wb35Rx
;
89 u8
* pRxBufferAddress
;
91 u16 stmp
, BufferSize
, stmp2
= 0;
94 // Only one thread be allowed to run into the following
96 RxBufferId
= pWb35Rx
->RxProcessIndex
;
97 if (pWb35Rx
->RxOwner
[ RxBufferId
]) //Owner by VM
100 pWb35Rx
->RxProcessIndex
++;
101 pWb35Rx
->RxProcessIndex
%= MAX_USB_RX_BUFFER_NUMBER
;
103 pRxBufferAddress
= pWb35Rx
->pDRx
;
104 BufferSize
= pWb35Rx
->RxBufferSize
[ RxBufferId
];
106 // Parse the bulkin buffer
107 while (BufferSize
>= 4) {
108 if ((cpu_to_le32(*(u32
*)pRxBufferAddress
) & 0x0fffffff) == RX_END_TAG
) //Is ending? 921002.9.a
111 // Get the R00 R01 first
112 RxDes
.R00
.value
= le32_to_cpu(*(u32
*)pRxBufferAddress
);
113 PacketSize
= (u16
)RxDes
.R00
.R00_receive_byte_count
;
114 RxDes
.R01
.value
= le32_to_cpu(*((u32
*)(pRxBufferAddress
+4)));
116 if ((PacketSize
& 0x03) > 0)
119 // Basic check for Rx length. Is length valid?
120 if (PacketSize
> MAX_PACKET_SIZE
) {
122 printk("Serious ERROR : Rx data size too long, size =%d\n", PacketSize
);
125 pWb35Rx
->EP3vm_state
= VM_STOP
;
126 pWb35Rx
->Ep3ErrorCount2
++;
130 // Start to process Rx buffer
131 // RxDes.Descriptor_ID = RxBufferId; // Due to synchronous indicate, the field doesn't necessary to use.
132 BufferSize
-= 8; //subtract 8 byte for 35's USB header length
133 pRxBufferAddress
+= 8;
135 RxDes
.buffer_address
[0] = pRxBufferAddress
;
136 RxDes
.buffer_size
[0] = PacketSize
;
137 RxDes
.buffer_number
= 1;
138 RxDes
.buffer_start_index
= 0;
139 RxDes
.buffer_total_size
= RxDes
.buffer_size
[0];
140 Wb35Rx_adjust(&RxDes
);
142 packet_came(hw
, pRxBufferAddress
, PacketSize
);
144 // Move RxBuffer point to the next
145 stmp
= PacketSize
+ 3;
146 stmp
&= ~0x03; // 4n alignment
147 pRxBufferAddress
+= stmp
;
153 pWb35Rx
->RxOwner
[ RxBufferId
] = 1;
159 static void Wb35Rx(struct ieee80211_hw
*hw
);
161 static void Wb35Rx_Complete(struct urb
*urb
)
163 struct ieee80211_hw
*hw
= urb
->context
;
164 struct wbsoft_priv
*priv
= hw
->priv
;
165 struct hw_data
* pHwData
= &priv
->sHwData
;
166 struct wb35_rx
*pWb35Rx
= &pHwData
->Wb35Rx
;
167 u8
* pRxBufferAddress
;
174 pWb35Rx
->EP3vm_state
= VM_COMPLETED
;
175 pWb35Rx
->EP3VM_status
= urb
->status
;//Store the last result of Irp
177 RxBufferId
= pWb35Rx
->CurrentRxBufferId
;
179 pRxBufferAddress
= pWb35Rx
->pDRx
;
180 BulkLength
= (u16
)urb
->actual_length
;
182 // The IRP is completed
183 pWb35Rx
->EP3vm_state
= VM_COMPLETED
;
185 if (pHwData
->SurpriseRemove
|| pHwData
->HwStop
) // Must be here, or RxBufferId is invalid
188 if (pWb35Rx
->rx_halt
)
191 // Start to process the data only in successful condition
192 pWb35Rx
->RxOwner
[ RxBufferId
] = 0; // Set the owner to driver
193 R00
.value
= le32_to_cpu(*(u32
*)pRxBufferAddress
);
195 // The URB is completed, check the result
196 if (pWb35Rx
->EP3VM_status
!= 0) {
197 #ifdef _PE_USB_STATE_DUMP_
198 printk("EP3 IoCompleteRoutine return error\n");
200 pWb35Rx
->EP3vm_state
= VM_STOP
;
204 // 20060220 For recovering. check if operating in single USB mode
205 if (!HAL_USB_MODE_BURST(pHwData
)) {
206 SizeCheck
= R00
.R00_receive_byte_count
; //20060926 anson's endian
207 if ((SizeCheck
& 0x03) > 0)
209 SizeCheck
= (SizeCheck
+ 3) & ~0x03;
210 SizeCheck
+= 12; // 8 + 4 badbeef
211 if ((BulkLength
> 1600) ||
212 (SizeCheck
> 1600) ||
213 (BulkLength
!= SizeCheck
) ||
214 (BulkLength
== 0)) { // Add for fail Urb
215 pWb35Rx
->EP3vm_state
= VM_STOP
;
216 pWb35Rx
->Ep3ErrorCount2
++;
220 // Indicating the receiving data
221 pWb35Rx
->ByteReceived
+= BulkLength
;
222 pWb35Rx
->RxBufferSize
[ RxBufferId
] = BulkLength
;
224 if (!pWb35Rx
->RxOwner
[ RxBufferId
])
227 kfree(pWb35Rx
->pDRx
);
228 // Do the next receive
233 pWb35Rx
->RxOwner
[ RxBufferId
] = 1; // Set the owner to hardware
234 atomic_dec(&pWb35Rx
->RxFireCounter
);
235 pWb35Rx
->EP3vm_state
= VM_STOP
;
238 // This function cannot reentrain
239 static void Wb35Rx(struct ieee80211_hw
*hw
)
241 struct wbsoft_priv
*priv
= hw
->priv
;
242 struct hw_data
* pHwData
= &priv
->sHwData
;
243 struct wb35_rx
*pWb35Rx
= &pHwData
->Wb35Rx
;
244 u8
* pRxBufferAddress
;
245 struct urb
*urb
= pWb35Rx
->RxUrb
;
252 if (pHwData
->SurpriseRemove
|| pHwData
->HwStop
)
255 if (pWb35Rx
->rx_halt
)
259 RxBufferId
= pWb35Rx
->RxBufferId
;
260 if (!pWb35Rx
->RxOwner
[RxBufferId
]) {
261 // It's impossible to run here.
263 printk("Rx driver fifo unavailable\n");
268 // Update buffer point, then start to bulkin the data from USB
269 pWb35Rx
->RxBufferId
++;
270 pWb35Rx
->RxBufferId
%= MAX_USB_RX_BUFFER_NUMBER
;
272 pWb35Rx
->CurrentRxBufferId
= RxBufferId
;
274 pWb35Rx
->pDRx
= kzalloc(MAX_USB_RX_BUFFER
, GFP_ATOMIC
);
275 if (!pWb35Rx
->pDRx
) {
276 printk("w35und: Rx memory alloc failed\n");
279 pRxBufferAddress
= pWb35Rx
->pDRx
;
281 usb_fill_bulk_urb(urb
, pHwData
->WbUsb
.udev
,
282 usb_rcvbulkpipe(pHwData
->WbUsb
.udev
, 3),
283 pRxBufferAddress
, MAX_USB_RX_BUFFER
,
284 Wb35Rx_Complete
, hw
);
286 pWb35Rx
->EP3vm_state
= VM_RUNNING
;
288 retv
= usb_submit_urb(urb
, GFP_ATOMIC
);
291 printk("Rx URB sending error\n");
298 pWb35Rx
->EP3vm_state
= VM_STOP
;
299 atomic_dec(&pWb35Rx
->RxFireCounter
);
302 void Wb35Rx_start(struct ieee80211_hw
*hw
)
304 struct wbsoft_priv
*priv
= hw
->priv
;
305 struct hw_data
* pHwData
= &priv
->sHwData
;
306 struct wb35_rx
*pWb35Rx
= &pHwData
->Wb35Rx
;
308 // Allow only one thread to run into the Wb35Rx() function
309 if (atomic_inc_return(&pWb35Rx
->RxFireCounter
) == 1) {
310 pWb35Rx
->EP3vm_state
= VM_RUNNING
;
313 atomic_dec(&pWb35Rx
->RxFireCounter
);
316 //=====================================================================================
317 static void Wb35Rx_reset_descriptor( struct hw_data
* pHwData
)
319 struct wb35_rx
*pWb35Rx
= &pHwData
->Wb35Rx
;
322 pWb35Rx
->ByteReceived
= 0;
323 pWb35Rx
->RxProcessIndex
= 0;
324 pWb35Rx
->RxBufferId
= 0;
325 pWb35Rx
->EP3vm_state
= VM_STOP
;
326 pWb35Rx
->rx_halt
= 0;
328 // Initial the Queue. The last buffer is reserved for used if the Rx resource is unavailable.
329 for( i
=0; i
<MAX_USB_RX_BUFFER_NUMBER
; i
++ )
330 pWb35Rx
->RxOwner
[i
] = 1;
333 unsigned char Wb35Rx_initial(struct hw_data
* pHwData
)
335 struct wb35_rx
*pWb35Rx
= &pHwData
->Wb35Rx
;
337 // Initial the Buffer Queue
338 Wb35Rx_reset_descriptor( pHwData
);
340 pWb35Rx
->RxUrb
= usb_alloc_urb(0, GFP_ATOMIC
);
341 return (!!pWb35Rx
->RxUrb
);
344 void Wb35Rx_stop(struct hw_data
* pHwData
)
346 struct wb35_rx
*pWb35Rx
= &pHwData
->Wb35Rx
;
348 // Canceling the Irp if already sends it out.
349 if (pWb35Rx
->EP3vm_state
== VM_RUNNING
) {
350 usb_unlink_urb( pWb35Rx
->RxUrb
); // Only use unlink, let Wb35Rx_destroy to free them
352 printk("EP3 Rx stop\n");
357 // Needs process context
358 void Wb35Rx_destroy(struct hw_data
* pHwData
)
360 struct wb35_rx
*pWb35Rx
= &pHwData
->Wb35Rx
;
363 msleep(10); // Delay for waiting function enter 940623.1.a
364 } while (pWb35Rx
->EP3vm_state
!= VM_STOP
);
365 msleep(10); // Delay for waiting function exit 940623.1.b
368 usb_free_urb( pWb35Rx
->RxUrb
);
370 printk("Wb35Rx_destroy OK\n");