drivers/staging/winbond/wb35rx.c

   1 /*
   2  * ============================================================================
   3  *  Copyright (c) 1996-2002 Winbond Electronic Corporation
   4  *
   5  *  Module Name:
   6  *    Wb35Rx.c
   7  *
   8  *  Abstract:
   9  *    Processing the Rx message from down layer
  10  *
  11  * ============================================================================
  12  */
  13 #include <linux/usb.h>
  14 #include <linux/slab.h>
  15
  16 #include "core.h"
  17 #include "sysdef.h"
  18 #include "wb35rx_f.h"
  19
  20 static void packet_came(struct ieee80211_hw *hw, char *pRxBufferAddress, int PacketSize)
  21 {
  22         struct wbsoft_priv *priv = hw->priv;
  23         struct sk_buff *skb;
  24         struct ieee80211_rx_status rx_status = {0};
  25
  26         if (!priv->enabled)
  27                 return;
  28
  29         skb = dev_alloc_skb(PacketSize);
  30         if (!skb) {
  31                 printk("Not enough memory for packet, FIXME\n");
  32                 return;
  33         }
  34
  35         memcpy(skb_put(skb, PacketSize), pRxBufferAddress, PacketSize);
  36
  37         memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
  38         ieee80211_rx_irqsafe(hw, skb);
  39 }
  40
  41 static void Wb35Rx_adjust(struct wb35_descriptor *pRxDes)
  42 {
  43         u32     *pRxBufferAddress;
  44         u32     DecryptionMethod;
  45         u32     i;
  46         u16     BufferSize;
  47
  48         DecryptionMethod = pRxDes->R01.R01_decryption_method;
  49         pRxBufferAddress = pRxDes->buffer_address[0];
  50         BufferSize = pRxDes->buffer_size[0];
  51
  52         /* Adjust the last part of data. Only data left */
  53         BufferSize -= 4; /* For CRC-32 */
  54         if (DecryptionMethod)
  55                 BufferSize -= 4;
  56         if (DecryptionMethod == 3) /* For CCMP */
  57                 BufferSize -= 4;
  58
  59         /* Adjust the IV field which after 802.11 header and ICV field. */
  60         if (DecryptionMethod == 1) { /* For WEP */
  61                 for (i = 6; i > 0; i--)
  62                         pRxBufferAddress[i] = pRxBufferAddress[i - 1];
  63                 pRxDes->buffer_address[0] = pRxBufferAddress + 1;
  64                 BufferSize -= 4; /* 4 byte for IV */
  65         } else if (DecryptionMethod) { /* For TKIP and CCMP */
  66                 for (i = 7; i > 1; i--)
  67                         pRxBufferAddress[i] = pRxBufferAddress[i - 2];
  68                 pRxDes->buffer_address[0] = pRxBufferAddress + 2; /* Update the descriptor, shift 8 byte */
  69                 BufferSize -= 8; /* 8 byte for IV + ICV */
  70         }
  71         pRxDes->buffer_size[0] = BufferSize;
  72 }
  73
  74 static u16 Wb35Rx_indicate(struct ieee80211_hw *hw)
  75 {
  76         struct wbsoft_priv      *priv = hw->priv;
  77         struct hw_data          *pHwData = &priv->sHwData;
  78         struct wb35_descriptor  RxDes;
  79         struct wb35_rx          *pWb35Rx = &pHwData->Wb35Rx;
  80         u8                      *pRxBufferAddress;
  81         u16                     PacketSize;
  82         u16                     stmp, BufferSize, stmp2 = 0;
  83         u32                     RxBufferId;
  84
  85         /* Only one thread be allowed to run into the following */
  86         do {
  87                 RxBufferId = pWb35Rx->RxProcessIndex;
  88                 if (pWb35Rx->RxOwner[RxBufferId]) /* Owner by VM */
  89                         break;
  90
  91                 pWb35Rx->RxProcessIndex++;
  92                 pWb35Rx->RxProcessIndex %= MAX_USB_RX_BUFFER_NUMBER;
  93
  94                 pRxBufferAddress = pWb35Rx->pDRx;
  95                 BufferSize = pWb35Rx->RxBufferSize[RxBufferId];
  96
  97                 /* Parse the bulkin buffer */
  98                 while (BufferSize >= 4) {
  99                         if ((cpu_to_le32(*(u32 *)pRxBufferAddress) & 0x0fffffff) == RX_END_TAG) /* Is ending? */
 100                                 break;
 101
 102                         /* Get the R00 R01 first */
 103                         RxDes.R00.value = le32_to_cpu(*(u32 *)pRxBufferAddress);
 104                         PacketSize = (u16)RxDes.R00.R00_receive_byte_count;
 105                         RxDes.R01.value = le32_to_cpu(*((u32 *)(pRxBufferAddress + 4)));
 106                         /* For new DMA 4k */
 107                         if ((PacketSize & 0x03) > 0)
 108                                 PacketSize -= 4;
 109
 110                         /* Basic check for Rx length. Is length valid? */
 111                         if (PacketSize > MAX_PACKET_SIZE) {
 112 #ifdef _PE_RX_DUMP_
 113                                 printk("Serious ERROR : Rx data size too long, size =%d\n", PacketSize);
 114 #endif
 115
 116                                 pWb35Rx->EP3vm_state = VM_STOP;
 117                                 pWb35Rx->Ep3ErrorCount2++;
 118                                 break;
 119                         }
 120
 121                         /*
 122                          * Wb35Rx_indicate() is called synchronously so it isn't
 123                          * necessary to set "RxDes.Desctriptor_ID = RxBufferID;"
 124                          */
 125                         BufferSize -= 8; /* subtract 8 byte for 35's USB header length */
 126                         pRxBufferAddress += 8;
 127
 128                         RxDes.buffer_address[0] = pRxBufferAddress;
 129                         RxDes.buffer_size[0] = PacketSize;
 130                         RxDes.buffer_number = 1;
 131                         RxDes.buffer_start_index = 0;
 132                         RxDes.buffer_total_size = RxDes.buffer_size[0];
 133                         Wb35Rx_adjust(&RxDes);
 134
 135                         packet_came(hw, pRxBufferAddress, PacketSize);
 136
 137                         /* Move RxBuffer point to the next */
 138                         stmp = PacketSize + 3;
 139                         stmp &= ~0x03; /* 4n alignment */
 140                         pRxBufferAddress += stmp;
 141                         BufferSize -= stmp;
 142                         stmp2 += stmp;
 143                 }
 144
 145                 /* Reclaim resource */
 146                 pWb35Rx->RxOwner[RxBufferId] = 1;
 147         } while (true);
 148         return stmp2;
 149 }
 150
 151 static void Wb35Rx(struct ieee80211_hw *hw);
 152
 153 static void Wb35Rx_Complete(struct urb *urb)
 154 {
 155         struct ieee80211_hw     *hw = urb->context;
 156         struct wbsoft_priv      *priv = hw->priv;
 157         struct hw_data          *pHwData = &priv->sHwData;
 158         struct wb35_rx          *pWb35Rx = &pHwData->Wb35Rx;
 159         u8                      *pRxBufferAddress;
 160         u32                     SizeCheck;
 161         u16                     BulkLength;
 162         u32                     RxBufferId;
 163         R00_DESCRIPTOR          R00;
 164
 165         /* Variable setting */
 166         pWb35Rx->EP3vm_state = VM_COMPLETED;
 167         pWb35Rx->EP3VM_status = urb->status; /* Store the last result of Irp */
 168
 169         RxBufferId = pWb35Rx->CurrentRxBufferId;
 170
 171         pRxBufferAddress = pWb35Rx->pDRx;
 172         BulkLength = (u16)urb->actual_length;
 173
 174         /* The IRP is completed */
 175         pWb35Rx->EP3vm_state = VM_COMPLETED;
 176
 177         if (pHwData->SurpriseRemove || pHwData->HwStop) /* Must be here, or RxBufferId is invalid */
 178                 goto error;
 179
 180         if (pWb35Rx->rx_halt)
 181                 goto error;
 182
 183         /* Start to process the data only in successful condition */
 184         pWb35Rx->RxOwner[RxBufferId] = 0; /* Set the owner to driver */
 185         R00.value = le32_to_cpu(*(u32 *)pRxBufferAddress);
 186
 187         /* The URB is completed, check the result */
 188         if (pWb35Rx->EP3VM_status != 0) {
 189 #ifdef _PE_USB_STATE_DUMP_
 190                 printk("EP3 IoCompleteRoutine return error\n");
 191 #endif
 192                 pWb35Rx->EP3vm_state = VM_STOP;
 193                 goto error;
 194         }
 195
 196         /* For recovering. check if operating in single USB mode */
 197         if (!HAL_USB_MODE_BURST(pHwData)) {
 198                 SizeCheck = R00.R00_receive_byte_count;
 199                 if ((SizeCheck & 0x03) > 0)
 200                         SizeCheck -= 4;
 201                 SizeCheck = (SizeCheck + 3) & ~0x03;
 202                 SizeCheck += 12; /* 8 + 4 badbeef */
 203                 if ((BulkLength > 1600) ||
 204                         (SizeCheck > 1600) ||
 205                         (BulkLength != SizeCheck) ||
 206                         (BulkLength == 0)) { /* Add for fail Urb */
 207                         pWb35Rx->EP3vm_state = VM_STOP;
 208                         pWb35Rx->Ep3ErrorCount2++;
 209                 }
 210         }
 211
 212         /* Indicating the receiving data */
 213         pWb35Rx->ByteReceived += BulkLength;
 214         pWb35Rx->RxBufferSize[RxBufferId] = BulkLength;
 215
 216         if (!pWb35Rx->RxOwner[RxBufferId])
 217                 Wb35Rx_indicate(hw);
 218
 219         kfree(pWb35Rx->pDRx);
 220         /* Do the next receive */
 221         Wb35Rx(hw);
 222         return;
 223
 224 error:
 225         pWb35Rx->RxOwner[RxBufferId] = 1; /* Set the owner to hardware */
 226         atomic_dec(&pWb35Rx->RxFireCounter);
 227         pWb35Rx->EP3vm_state = VM_STOP;
 228 }
 229
 230 /* This function cannot reentrain */
 231 static void Wb35Rx(struct ieee80211_hw *hw)
 232 {
 233         struct wbsoft_priv      *priv = hw->priv;
 234         struct hw_data          *pHwData = &priv->sHwData;
 235         struct wb35_rx          *pWb35Rx = &pHwData->Wb35Rx;
 236         u8                      *pRxBufferAddress;
 237         struct urb              *urb = pWb35Rx->RxUrb;
 238         int                     retv;
 239         u32                     RxBufferId;
 240
 241         /* Issuing URB */
 242         if (pHwData->SurpriseRemove || pHwData->HwStop)
 243                 goto error;
 244
 245         if (pWb35Rx->rx_halt)
 246                 goto error;
 247
 248         /* Get RxBuffer's ID */
 249         RxBufferId = pWb35Rx->RxBufferId;
 250         if (!pWb35Rx->RxOwner[RxBufferId]) {
 251                 /* It's impossible to run here. */
 252 #ifdef _PE_RX_DUMP_
 253                 printk("Rx driver fifo unavailable\n");
 254 #endif
 255                 goto error;
 256         }
 257
 258         /* Update buffer point, then start to bulkin the data from USB */
 259         pWb35Rx->RxBufferId++;
 260         pWb35Rx->RxBufferId %= MAX_USB_RX_BUFFER_NUMBER;
 261
 262         pWb35Rx->CurrentRxBufferId = RxBufferId;
 263
 264         pWb35Rx->pDRx = kzalloc(MAX_USB_RX_BUFFER, GFP_ATOMIC);
 265         if (!pWb35Rx->pDRx) {
 266                 printk("w35und: Rx memory alloc failed\n");
 267                 goto error;
 268         }
 269         pRxBufferAddress = pWb35Rx->pDRx;
 270
 271         usb_fill_bulk_urb(urb, pHwData->WbUsb.udev,
 272                           usb_rcvbulkpipe(pHwData->WbUsb.udev, 3),
 273                           pRxBufferAddress, MAX_USB_RX_BUFFER,
 274                           Wb35Rx_Complete, hw);
 275
 276         pWb35Rx->EP3vm_state = VM_RUNNING;
 277
 278         retv = usb_submit_urb(urb, GFP_ATOMIC);
 279
 280         if (retv != 0) {
 281                 printk("Rx URB sending error\n");
 282                 goto error;
 283         }
 284         return;
 285
 286 error:
 287         /* VM stop */
 288         pWb35Rx->EP3vm_state = VM_STOP;
 289         atomic_dec(&pWb35Rx->RxFireCounter);
 290 }
 291
 292 void Wb35Rx_start(struct ieee80211_hw *hw)
 293 {
 294         struct wbsoft_priv      *priv = hw->priv;
 295         struct hw_data          *pHwData = &priv->sHwData;
 296         struct wb35_rx          *pWb35Rx = &pHwData->Wb35Rx;
 297
 298         /* Allow only one thread to run into the Wb35Rx() function */
 299         if (atomic_inc_return(&pWb35Rx->RxFireCounter) == 1) {
 300                 pWb35Rx->EP3vm_state = VM_RUNNING;
 301                 Wb35Rx(hw);
 302         } else
 303                 atomic_dec(&pWb35Rx->RxFireCounter);
 304 }
 305
 306 static void Wb35Rx_reset_descriptor(struct hw_data *pHwData)
 307 {
 308         struct wb35_rx  *pWb35Rx = &pHwData->Wb35Rx;
 309         u32             i;
 310
 311         pWb35Rx->ByteReceived = 0;
 312         pWb35Rx->RxProcessIndex = 0;
 313         pWb35Rx->RxBufferId = 0;
 314         pWb35Rx->EP3vm_state = VM_STOP;
 315         pWb35Rx->rx_halt = 0;
 316
 317         /* Initial the Queue. The last buffer is reserved for used if the Rx resource is unavailable. */
 318         for (i = 0; i < MAX_USB_RX_BUFFER_NUMBER; i++)
 319                 pWb35Rx->RxOwner[i] = 1;
 320 }
 321
 322 unsigned char Wb35Rx_initial(struct hw_data *pHwData)
 323 {
 324         struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
 325
 326         /* Initial the Buffer Queue */
 327         Wb35Rx_reset_descriptor(pHwData);
 328
 329         pWb35Rx->RxUrb = usb_alloc_urb(0, GFP_ATOMIC);
 330         return !!pWb35Rx->RxUrb;
 331 }
 332
 333 void Wb35Rx_stop(struct hw_data *pHwData)
 334 {
 335         struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
 336
 337         /* Canceling the Irp if already sends it out. */
 338         if (pWb35Rx->EP3vm_state == VM_RUNNING) {
 339                 usb_unlink_urb(pWb35Rx->RxUrb); /* Only use unlink, let Wb35Rx_destroy to free them */
 340 #ifdef _PE_RX_DUMP_
 341                 printk("EP3 Rx stop\n");
 342 #endif
 343         }
 344 }
 345
 346 /* Needs process context */
 347 void Wb35Rx_destroy(struct hw_data *pHwData)
 348 {
 349         struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
 350
 351         do {
 352                 msleep(10); /* Delay for waiting function enter */
 353         } while (pWb35Rx->EP3vm_state != VM_STOP);
 354         msleep(10); /* Delay for waiting function exit */
 355
 356         if (pWb35Rx->RxUrb)
 357                 usb_free_urb(pWb35Rx->RxUrb);
 358 #ifdef _PE_RX_DUMP_
 359         printk("Wb35Rx_destroy OK\n");
 360 #endif
 361 }
 362