2 * NXP Wireless LAN device driver: commands and events
4 * Copyright 2011-2020 NXP
6 * This software file (the "File") is distributed by NXP
7 * under the terms of the GNU General Public License Version 2, June 1991
8 * (the "License"). You may use, redistribute and/or modify this File in
9 * accordance with the terms and conditions of the License, a copy of which
10 * is available by writing to the Free Software Foundation, Inc.,
11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16 * ARE EXPRESSLY DISCLAIMED. The License provides additional details about
17 * this warranty disclaimer.
20 #include <asm/unaligned.h>
29 static void mwifiex_cancel_pending_ioctl(struct mwifiex_adapter
*adapter
);
32 * This function initializes a command node.
34 * The actual allocation of the node is not done by this function. It only
35 * initiates a node by filling it with default parameters. Similarly,
36 * allocation of the different buffers used (IOCTL buffer, data buffer) are
37 * not done by this function either.
40 mwifiex_init_cmd_node(struct mwifiex_private
*priv
,
41 struct cmd_ctrl_node
*cmd_node
,
42 u32 cmd_no
, void *data_buf
, bool sync
)
44 cmd_node
->priv
= priv
;
45 cmd_node
->cmd_no
= cmd_no
;
48 cmd_node
->wait_q_enabled
= true;
49 cmd_node
->cmd_wait_q_woken
= false;
50 cmd_node
->condition
= &cmd_node
->cmd_wait_q_woken
;
52 cmd_node
->data_buf
= data_buf
;
53 cmd_node
->cmd_skb
= cmd_node
->skb
;
57 * This function returns a command node from the free queue depending upon
60 static struct cmd_ctrl_node
*
61 mwifiex_get_cmd_node(struct mwifiex_adapter
*adapter
)
63 struct cmd_ctrl_node
*cmd_node
;
65 spin_lock_bh(&adapter
->cmd_free_q_lock
);
66 if (list_empty(&adapter
->cmd_free_q
)) {
67 mwifiex_dbg(adapter
, ERROR
,
68 "GET_CMD_NODE: cmd node not available\n");
69 spin_unlock_bh(&adapter
->cmd_free_q_lock
);
72 cmd_node
= list_first_entry(&adapter
->cmd_free_q
,
73 struct cmd_ctrl_node
, list
);
74 list_del(&cmd_node
->list
);
75 spin_unlock_bh(&adapter
->cmd_free_q_lock
);
81 * This function cleans up a command node.
83 * The function resets the fields including the buffer pointers.
84 * This function does not try to free the buffers. They must be
85 * freed before calling this function.
87 * This function will however call the receive completion callback
88 * in case a response buffer is still available before resetting
92 mwifiex_clean_cmd_node(struct mwifiex_adapter
*adapter
,
93 struct cmd_ctrl_node
*cmd_node
)
96 cmd_node
->cmd_flag
= 0;
97 cmd_node
->data_buf
= NULL
;
98 cmd_node
->wait_q_enabled
= false;
100 if (cmd_node
->cmd_skb
)
101 skb_trim(cmd_node
->cmd_skb
, 0);
103 if (cmd_node
->resp_skb
) {
104 adapter
->if_ops
.cmdrsp_complete(adapter
, cmd_node
->resp_skb
);
105 cmd_node
->resp_skb
= NULL
;
110 * This function returns a command to the command free queue.
112 * The function also calls the completion callback if required, before
113 * cleaning the command node and re-inserting it into the free queue.
116 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter
*adapter
,
117 struct cmd_ctrl_node
*cmd_node
)
122 if (cmd_node
->wait_q_enabled
)
123 mwifiex_complete_cmd(adapter
, cmd_node
);
125 mwifiex_clean_cmd_node(adapter
, cmd_node
);
127 /* Insert node into cmd_free_q */
128 spin_lock_bh(&adapter
->cmd_free_q_lock
);
129 list_add_tail(&cmd_node
->list
, &adapter
->cmd_free_q
);
130 spin_unlock_bh(&adapter
->cmd_free_q_lock
);
133 /* This function reuses a command node. */
134 void mwifiex_recycle_cmd_node(struct mwifiex_adapter
*adapter
,
135 struct cmd_ctrl_node
*cmd_node
)
137 struct host_cmd_ds_command
*host_cmd
= (void *)cmd_node
->cmd_skb
->data
;
139 mwifiex_insert_cmd_to_free_q(adapter
, cmd_node
);
141 atomic_dec(&adapter
->cmd_pending
);
142 mwifiex_dbg(adapter
, CMD
,
143 "cmd: FREE_CMD: cmd=%#x, cmd_pending=%d\n",
144 le16_to_cpu(host_cmd
->command
),
145 atomic_read(&adapter
->cmd_pending
));
149 * This function sends a host command to the firmware.
151 * The function copies the host command into the driver command
152 * buffer, which will be transferred to the firmware later by the
155 static int mwifiex_cmd_host_cmd(struct mwifiex_private
*priv
,
156 struct host_cmd_ds_command
*cmd
,
157 struct mwifiex_ds_misc_cmd
*pcmd_ptr
)
159 /* Copy the HOST command to command buffer */
160 memcpy(cmd
, pcmd_ptr
->cmd
, pcmd_ptr
->len
);
161 mwifiex_dbg(priv
->adapter
, CMD
,
162 "cmd: host cmd size = %d\n", pcmd_ptr
->len
);
167 * This function downloads a command to the firmware.
169 * The function performs sanity tests, sets the command sequence
170 * number and size, converts the header fields to CPU format before
171 * sending. Afterwards, it logs the command ID and action for debugging
172 * and sets up the command timeout timer.
174 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private
*priv
,
175 struct cmd_ctrl_node
*cmd_node
)
178 struct mwifiex_adapter
*adapter
= priv
->adapter
;
180 struct host_cmd_ds_command
*host_cmd
;
184 if (!adapter
|| !cmd_node
)
187 host_cmd
= (struct host_cmd_ds_command
*) (cmd_node
->cmd_skb
->data
);
190 if (host_cmd
== NULL
|| host_cmd
->size
== 0) {
191 mwifiex_dbg(adapter
, ERROR
,
192 "DNLD_CMD: host_cmd is null\t"
193 "or cmd size is 0, not sending\n");
194 if (cmd_node
->wait_q_enabled
)
195 adapter
->cmd_wait_q
.status
= -1;
196 mwifiex_recycle_cmd_node(adapter
, cmd_node
);
200 cmd_code
= le16_to_cpu(host_cmd
->command
);
201 cmd_node
->cmd_no
= cmd_code
;
202 cmd_size
= le16_to_cpu(host_cmd
->size
);
204 if (adapter
->hw_status
== MWIFIEX_HW_STATUS_RESET
&&
205 cmd_code
!= HostCmd_CMD_FUNC_SHUTDOWN
&&
206 cmd_code
!= HostCmd_CMD_FUNC_INIT
) {
207 mwifiex_dbg(adapter
, ERROR
,
208 "DNLD_CMD: FW in reset state, ignore cmd %#x\n",
210 mwifiex_recycle_cmd_node(adapter
, cmd_node
);
211 queue_work(adapter
->workqueue
, &adapter
->main_work
);
215 /* Set command sequence number */
217 host_cmd
->seq_num
= cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
219 cmd_node
->priv
->bss_num
,
220 cmd_node
->priv
->bss_type
));
222 spin_lock_bh(&adapter
->mwifiex_cmd_lock
);
223 adapter
->curr_cmd
= cmd_node
;
224 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
226 /* Adjust skb length */
227 if (cmd_node
->cmd_skb
->len
> cmd_size
)
229 * cmd_size is less than sizeof(struct host_cmd_ds_command).
230 * Trim off the unused portion.
232 skb_trim(cmd_node
->cmd_skb
, cmd_size
);
233 else if (cmd_node
->cmd_skb
->len
< cmd_size
)
235 * cmd_size is larger than sizeof(struct host_cmd_ds_command)
236 * because we have appended custom IE TLV. Increase skb length
239 skb_put(cmd_node
->cmd_skb
, cmd_size
- cmd_node
->cmd_skb
->len
);
241 mwifiex_dbg(adapter
, CMD
,
242 "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n",
244 get_unaligned_le16((u8
*)host_cmd
+ S_DS_GEN
),
245 cmd_size
, le16_to_cpu(host_cmd
->seq_num
));
246 mwifiex_dbg_dump(adapter
, CMD_D
, "cmd buffer:", host_cmd
, cmd_size
);
248 if (adapter
->iface_type
== MWIFIEX_USB
) {
249 skb_push(cmd_node
->cmd_skb
, MWIFIEX_TYPE_LEN
);
250 put_unaligned_le32(MWIFIEX_USB_TYPE_CMD
,
251 cmd_node
->cmd_skb
->data
);
252 adapter
->cmd_sent
= true;
253 ret
= adapter
->if_ops
.host_to_card(adapter
,
254 MWIFIEX_USB_EP_CMD_EVENT
,
255 cmd_node
->cmd_skb
, NULL
);
256 skb_pull(cmd_node
->cmd_skb
, MWIFIEX_TYPE_LEN
);
258 cmd_node
->cmd_skb
= NULL
;
260 skb_push(cmd_node
->cmd_skb
, adapter
->intf_hdr_len
);
261 ret
= adapter
->if_ops
.host_to_card(adapter
, MWIFIEX_TYPE_CMD
,
262 cmd_node
->cmd_skb
, NULL
);
263 skb_pull(cmd_node
->cmd_skb
, adapter
->intf_hdr_len
);
267 mwifiex_dbg(adapter
, ERROR
,
268 "DNLD_CMD: host to card failed\n");
269 if (adapter
->iface_type
== MWIFIEX_USB
)
270 adapter
->cmd_sent
= false;
271 if (cmd_node
->wait_q_enabled
)
272 adapter
->cmd_wait_q
.status
= -1;
273 mwifiex_recycle_cmd_node(adapter
, adapter
->curr_cmd
);
275 spin_lock_bh(&adapter
->mwifiex_cmd_lock
);
276 adapter
->curr_cmd
= NULL
;
277 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
279 adapter
->dbg
.num_cmd_host_to_card_failure
++;
283 /* Save the last command id and action to debug log */
284 adapter
->dbg
.last_cmd_index
=
285 (adapter
->dbg
.last_cmd_index
+ 1) % DBG_CMD_NUM
;
286 adapter
->dbg
.last_cmd_id
[adapter
->dbg
.last_cmd_index
] = cmd_code
;
287 adapter
->dbg
.last_cmd_act
[adapter
->dbg
.last_cmd_index
] =
288 get_unaligned_le16((u8
*)host_cmd
+ S_DS_GEN
);
290 /* Setup the timer after transmit command, except that specific
291 * command might not have command response.
293 if (cmd_code
!= HostCmd_CMD_FW_DUMP_EVENT
)
294 mod_timer(&adapter
->cmd_timer
,
295 jiffies
+ msecs_to_jiffies(MWIFIEX_TIMER_10S
));
297 /* Clear BSS_NO_BITS from HostCmd */
298 cmd_code
&= HostCmd_CMD_ID_MASK
;
304 * This function downloads a sleep confirm command to the firmware.
306 * The function performs sanity tests, sets the command sequence
307 * number and size, converts the header fields to CPU format before
310 * No responses are needed for sleep confirm command.
312 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter
*adapter
)
315 struct mwifiex_private
*priv
;
316 struct mwifiex_opt_sleep_confirm
*sleep_cfm_buf
=
317 (struct mwifiex_opt_sleep_confirm
*)
318 adapter
->sleep_cfm
->data
;
319 struct sk_buff
*sleep_cfm_tmp
;
321 priv
= mwifiex_get_priv(adapter
, MWIFIEX_BSS_ROLE_ANY
);
324 sleep_cfm_buf
->seq_num
=
325 cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
326 (adapter
->seq_num
, priv
->bss_num
,
329 mwifiex_dbg(adapter
, CMD
,
330 "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n",
331 le16_to_cpu(sleep_cfm_buf
->command
),
332 le16_to_cpu(sleep_cfm_buf
->action
),
333 le16_to_cpu(sleep_cfm_buf
->size
),
334 le16_to_cpu(sleep_cfm_buf
->seq_num
));
335 mwifiex_dbg_dump(adapter
, CMD_D
, "SLEEP_CFM buffer: ", sleep_cfm_buf
,
336 le16_to_cpu(sleep_cfm_buf
->size
));
338 if (adapter
->iface_type
== MWIFIEX_USB
) {
340 dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm
)
342 if (!sleep_cfm_tmp
) {
343 mwifiex_dbg(adapter
, ERROR
,
344 "SLEEP_CFM: dev_alloc_skb failed\n");
348 skb_put(sleep_cfm_tmp
, sizeof(struct mwifiex_opt_sleep_confirm
)
350 put_unaligned_le32(MWIFIEX_USB_TYPE_CMD
, sleep_cfm_tmp
->data
);
351 memcpy(sleep_cfm_tmp
->data
+ MWIFIEX_TYPE_LEN
,
352 adapter
->sleep_cfm
->data
,
353 sizeof(struct mwifiex_opt_sleep_confirm
));
354 ret
= adapter
->if_ops
.host_to_card(adapter
,
355 MWIFIEX_USB_EP_CMD_EVENT
,
356 sleep_cfm_tmp
, NULL
);
358 dev_kfree_skb_any(sleep_cfm_tmp
);
360 skb_push(adapter
->sleep_cfm
, adapter
->intf_hdr_len
);
361 ret
= adapter
->if_ops
.host_to_card(adapter
, MWIFIEX_TYPE_CMD
,
362 adapter
->sleep_cfm
, NULL
);
363 skb_pull(adapter
->sleep_cfm
, adapter
->intf_hdr_len
);
367 mwifiex_dbg(adapter
, ERROR
, "SLEEP_CFM: failed\n");
368 adapter
->dbg
.num_cmd_sleep_cfm_host_to_card_failure
++;
372 if (!le16_to_cpu(sleep_cfm_buf
->resp_ctrl
))
373 /* Response is not needed for sleep confirm command */
374 adapter
->ps_state
= PS_STATE_SLEEP
;
376 adapter
->ps_state
= PS_STATE_SLEEP_CFM
;
378 if (!le16_to_cpu(sleep_cfm_buf
->resp_ctrl
) &&
379 (test_bit(MWIFIEX_IS_HS_CONFIGURED
, &adapter
->work_flags
) &&
380 !adapter
->sleep_period
.period
)) {
381 adapter
->pm_wakeup_card_req
= true;
382 mwifiex_hs_activated_event(mwifiex_get_priv
383 (adapter
, MWIFIEX_BSS_ROLE_ANY
), true);
390 * This function allocates the command buffers and links them to
391 * the command free queue.
393 * The driver uses a pre allocated number of command buffers, which
394 * are created at driver initializations and freed at driver cleanup.
395 * Every command needs to obtain a command buffer from this pool before
396 * it can be issued. The command free queue lists the command buffers
397 * currently free to use, while the command pending queue lists the
398 * command buffers already in use and awaiting handling. Command buffers
399 * are returned to the free queue after use.
401 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter
*adapter
)
403 struct cmd_ctrl_node
*cmd_array
;
406 /* Allocate and initialize struct cmd_ctrl_node */
407 cmd_array
= kcalloc(MWIFIEX_NUM_OF_CMD_BUFFER
,
408 sizeof(struct cmd_ctrl_node
), GFP_KERNEL
);
412 adapter
->cmd_pool
= cmd_array
;
414 /* Allocate and initialize command buffers */
415 for (i
= 0; i
< MWIFIEX_NUM_OF_CMD_BUFFER
; i
++) {
416 cmd_array
[i
].skb
= dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER
);
417 if (!cmd_array
[i
].skb
) {
418 mwifiex_dbg(adapter
, ERROR
,
419 "unable to allocate command buffer\n");
424 for (i
= 0; i
< MWIFIEX_NUM_OF_CMD_BUFFER
; i
++)
425 mwifiex_insert_cmd_to_free_q(adapter
, &cmd_array
[i
]);
431 * This function frees the command buffers.
433 * The function calls the completion callback for all the command
434 * buffers that still have response buffers associated with them.
436 void mwifiex_free_cmd_buffer(struct mwifiex_adapter
*adapter
)
438 struct cmd_ctrl_node
*cmd_array
;
441 /* Need to check if cmd pool is allocated or not */
442 if (!adapter
->cmd_pool
) {
443 mwifiex_dbg(adapter
, FATAL
,
444 "info: FREE_CMD_BUF: cmd_pool is null\n");
448 cmd_array
= adapter
->cmd_pool
;
450 /* Release shared memory buffers */
451 for (i
= 0; i
< MWIFIEX_NUM_OF_CMD_BUFFER
; i
++) {
452 if (cmd_array
[i
].skb
) {
453 mwifiex_dbg(adapter
, CMD
,
454 "cmd: free cmd buffer %d\n", i
);
455 dev_kfree_skb_any(cmd_array
[i
].skb
);
457 if (!cmd_array
[i
].resp_skb
)
460 if (adapter
->iface_type
== MWIFIEX_USB
)
461 adapter
->if_ops
.cmdrsp_complete(adapter
,
462 cmd_array
[i
].resp_skb
);
464 dev_kfree_skb_any(cmd_array
[i
].resp_skb
);
466 /* Release struct cmd_ctrl_node */
467 if (adapter
->cmd_pool
) {
468 mwifiex_dbg(adapter
, CMD
,
469 "cmd: free cmd pool\n");
470 kfree(adapter
->cmd_pool
);
471 adapter
->cmd_pool
= NULL
;
476 * This function handles events generated by firmware.
478 * Event body of events received from firmware are not used (though they are
479 * saved), only the event ID is used. Some events are re-invoked by
480 * the driver, with a new event body.
482 * After processing, the function calls the completion callback
485 int mwifiex_process_event(struct mwifiex_adapter
*adapter
)
488 struct mwifiex_private
*priv
=
489 mwifiex_get_priv(adapter
, MWIFIEX_BSS_ROLE_ANY
);
490 struct sk_buff
*skb
= adapter
->event_skb
;
492 struct mwifiex_rxinfo
*rx_info
;
494 if ((adapter
->event_cause
& EVENT_ID_MASK
) == EVENT_RADAR_DETECTED
) {
495 for (i
= 0; i
< adapter
->priv_num
; i
++) {
496 priv
= adapter
->priv
[i
];
497 if (priv
&& mwifiex_is_11h_active(priv
)) {
498 adapter
->event_cause
|=
499 ((priv
->bss_num
& 0xff) << 16) |
500 ((priv
->bss_type
& 0xff) << 24);
506 eventcause
= adapter
->event_cause
;
508 /* Save the last event to debug log */
509 adapter
->dbg
.last_event_index
=
510 (adapter
->dbg
.last_event_index
+ 1) % DBG_CMD_NUM
;
511 adapter
->dbg
.last_event
[adapter
->dbg
.last_event_index
] =
514 /* Get BSS number and corresponding priv */
515 priv
= mwifiex_get_priv_by_id(adapter
, EVENT_GET_BSS_NUM(eventcause
),
516 EVENT_GET_BSS_TYPE(eventcause
));
518 priv
= mwifiex_get_priv(adapter
, MWIFIEX_BSS_ROLE_ANY
);
520 /* Clear BSS_NO_BITS from event */
521 eventcause
&= EVENT_ID_MASK
;
522 adapter
->event_cause
= eventcause
;
525 rx_info
= MWIFIEX_SKB_RXCB(skb
);
526 memset(rx_info
, 0, sizeof(*rx_info
));
527 rx_info
->bss_num
= priv
->bss_num
;
528 rx_info
->bss_type
= priv
->bss_type
;
529 mwifiex_dbg_dump(adapter
, EVT_D
, "Event Buf:",
530 skb
->data
, skb
->len
);
533 mwifiex_dbg(adapter
, EVENT
, "EVENT: cause: %#x\n", eventcause
);
535 if (priv
->bss_role
== MWIFIEX_BSS_ROLE_UAP
)
536 ret
= mwifiex_process_uap_event(priv
);
538 ret
= mwifiex_process_sta_event(priv
);
540 adapter
->event_cause
= 0;
541 adapter
->event_skb
= NULL
;
542 adapter
->if_ops
.event_complete(adapter
, skb
);
548 * This function prepares a command and send it to the firmware.
550 * Preparation includes -
551 * - Sanity tests to make sure the card is still present or the FW
553 * - Getting a new command node from the command free queue
554 * - Initializing the command node for default parameters
555 * - Fill up the non-default parameters and buffer pointers
556 * - Add the command to pending queue
558 int mwifiex_send_cmd(struct mwifiex_private
*priv
, u16 cmd_no
,
559 u16 cmd_action
, u32 cmd_oid
, void *data_buf
, bool sync
)
562 struct mwifiex_adapter
*adapter
= priv
->adapter
;
563 struct cmd_ctrl_node
*cmd_node
;
564 struct host_cmd_ds_command
*cmd_ptr
;
567 pr_err("PREP_CMD: adapter is NULL\n");
571 if (test_bit(MWIFIEX_IS_SUSPENDED
, &adapter
->work_flags
)) {
572 mwifiex_dbg(adapter
, ERROR
,
573 "PREP_CMD: device in suspended state\n");
577 if (test_bit(MWIFIEX_IS_HS_ENABLING
, &adapter
->work_flags
) &&
578 cmd_no
!= HostCmd_CMD_802_11_HS_CFG_ENH
) {
579 mwifiex_dbg(adapter
, ERROR
,
580 "PREP_CMD: host entering sleep state\n");
584 if (test_bit(MWIFIEX_SURPRISE_REMOVED
, &adapter
->work_flags
)) {
585 mwifiex_dbg(adapter
, ERROR
,
586 "PREP_CMD: card is removed\n");
590 if (test_bit(MWIFIEX_IS_CMD_TIMEDOUT
, &adapter
->work_flags
)) {
591 mwifiex_dbg(adapter
, ERROR
,
592 "PREP_CMD: FW is in bad state\n");
596 if (adapter
->hw_status
== MWIFIEX_HW_STATUS_RESET
) {
597 if (cmd_no
!= HostCmd_CMD_FUNC_INIT
) {
598 mwifiex_dbg(adapter
, ERROR
,
599 "PREP_CMD: FW in reset state\n");
603 /* We don't expect commands in manufacturing mode. They are cooked
604 * in application and ready to download buffer is passed to the driver
606 if (adapter
->mfg_mode
&& cmd_no
) {
607 dev_dbg(adapter
->dev
, "Ignoring commands in manufacturing mode\n");
612 /* Get a new command node */
613 cmd_node
= mwifiex_get_cmd_node(adapter
);
616 mwifiex_dbg(adapter
, ERROR
,
617 "PREP_CMD: no free cmd node\n");
621 /* Initialize the command node */
622 mwifiex_init_cmd_node(priv
, cmd_node
, cmd_no
, data_buf
, sync
);
624 if (!cmd_node
->cmd_skb
) {
625 mwifiex_dbg(adapter
, ERROR
,
626 "PREP_CMD: no free cmd buf\n");
630 skb_put_zero(cmd_node
->cmd_skb
, sizeof(struct host_cmd_ds_command
));
632 cmd_ptr
= (struct host_cmd_ds_command
*) (cmd_node
->cmd_skb
->data
);
633 cmd_ptr
->command
= cpu_to_le16(cmd_no
);
636 /* Prepare command */
639 case HostCmd_CMD_UAP_SYS_CONFIG
:
640 case HostCmd_CMD_UAP_BSS_START
:
641 case HostCmd_CMD_UAP_BSS_STOP
:
642 case HostCmd_CMD_UAP_STA_DEAUTH
:
643 case HOST_CMD_APCMD_SYS_RESET
:
644 case HOST_CMD_APCMD_STA_LIST
:
645 ret
= mwifiex_uap_prepare_cmd(priv
, cmd_no
, cmd_action
,
650 ret
= mwifiex_sta_prepare_cmd(priv
, cmd_no
, cmd_action
,
656 ret
= mwifiex_cmd_host_cmd(priv
, cmd_ptr
, data_buf
);
657 cmd_node
->cmd_flag
|= CMD_F_HOSTCMD
;
660 /* Return error, since the command preparation failed */
662 mwifiex_dbg(adapter
, ERROR
,
663 "PREP_CMD: cmd %#x preparation failed\n",
665 mwifiex_insert_cmd_to_free_q(adapter
, cmd_node
);
670 if (cmd_no
== HostCmd_CMD_802_11_SCAN
||
671 cmd_no
== HostCmd_CMD_802_11_SCAN_EXT
) {
672 mwifiex_queue_scan_cmd(priv
, cmd_node
);
674 mwifiex_insert_cmd_to_pending_q(adapter
, cmd_node
);
675 queue_work(adapter
->workqueue
, &adapter
->main_work
);
676 if (cmd_node
->wait_q_enabled
)
677 ret
= mwifiex_wait_queue_complete(adapter
, cmd_node
);
684 * This function queues a command to the command pending queue.
686 * This in effect adds the command to the command list to be executed.
687 * Exit PS command is handled specially, by placing it always to the
688 * front of the command queue.
691 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter
*adapter
,
692 struct cmd_ctrl_node
*cmd_node
)
694 struct host_cmd_ds_command
*host_cmd
= NULL
;
696 bool add_tail
= true;
698 host_cmd
= (struct host_cmd_ds_command
*) (cmd_node
->cmd_skb
->data
);
700 mwifiex_dbg(adapter
, ERROR
, "QUEUE_CMD: host_cmd is NULL\n");
704 command
= le16_to_cpu(host_cmd
->command
);
706 /* Exit_PS command needs to be queued in the header always. */
707 if (command
== HostCmd_CMD_802_11_PS_MODE_ENH
) {
708 struct host_cmd_ds_802_11_ps_mode_enh
*pm
=
709 &host_cmd
->params
.psmode_enh
;
710 if ((le16_to_cpu(pm
->action
) == DIS_PS
) ||
711 (le16_to_cpu(pm
->action
) == DIS_AUTO_PS
)) {
712 if (adapter
->ps_state
!= PS_STATE_AWAKE
)
717 spin_lock_bh(&adapter
->cmd_pending_q_lock
);
719 list_add_tail(&cmd_node
->list
, &adapter
->cmd_pending_q
);
721 list_add(&cmd_node
->list
, &adapter
->cmd_pending_q
);
722 spin_unlock_bh(&adapter
->cmd_pending_q_lock
);
724 atomic_inc(&adapter
->cmd_pending
);
725 mwifiex_dbg(adapter
, CMD
,
726 "cmd: QUEUE_CMD: cmd=%#x, cmd_pending=%d\n",
727 command
, atomic_read(&adapter
->cmd_pending
));
731 * This function executes the next command in command pending queue.
733 * This function will fail if a command is already in processing stage,
734 * otherwise it will dequeue the first command from the command pending
735 * queue and send to the firmware.
737 * If the device is currently in host sleep mode, any commands, except the
738 * host sleep configuration command will de-activate the host sleep. For PS
739 * mode, the function will put the firmware back to sleep if applicable.
741 int mwifiex_exec_next_cmd(struct mwifiex_adapter
*adapter
)
743 struct mwifiex_private
*priv
;
744 struct cmd_ctrl_node
*cmd_node
;
746 struct host_cmd_ds_command
*host_cmd
;
748 /* Check if already in processing */
749 if (adapter
->curr_cmd
) {
750 mwifiex_dbg(adapter
, FATAL
,
751 "EXEC_NEXT_CMD: cmd in processing\n");
755 spin_lock_bh(&adapter
->mwifiex_cmd_lock
);
756 /* Check if any command is pending */
757 spin_lock_bh(&adapter
->cmd_pending_q_lock
);
758 if (list_empty(&adapter
->cmd_pending_q
)) {
759 spin_unlock_bh(&adapter
->cmd_pending_q_lock
);
760 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
763 cmd_node
= list_first_entry(&adapter
->cmd_pending_q
,
764 struct cmd_ctrl_node
, list
);
766 host_cmd
= (struct host_cmd_ds_command
*) (cmd_node
->cmd_skb
->data
);
767 priv
= cmd_node
->priv
;
769 if (adapter
->ps_state
!= PS_STATE_AWAKE
) {
770 mwifiex_dbg(adapter
, ERROR
,
771 "%s: cannot send cmd in sleep state,\t"
772 "this should not happen\n", __func__
);
773 spin_unlock_bh(&adapter
->cmd_pending_q_lock
);
774 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
778 list_del(&cmd_node
->list
);
779 spin_unlock_bh(&adapter
->cmd_pending_q_lock
);
781 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
782 ret
= mwifiex_dnld_cmd_to_fw(priv
, cmd_node
);
783 priv
= mwifiex_get_priv(adapter
, MWIFIEX_BSS_ROLE_ANY
);
784 /* Any command sent to the firmware when host is in sleep
785 * mode should de-configure host sleep. We should skip the
786 * host sleep configuration command itself though
788 if (priv
&& (host_cmd
->command
!=
789 cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH
))) {
790 if (adapter
->hs_activated
) {
791 clear_bit(MWIFIEX_IS_HS_CONFIGURED
,
792 &adapter
->work_flags
);
793 mwifiex_hs_activated_event(priv
, false);
801 * This function handles the command response.
803 * After processing, the function cleans the command node and puts
804 * it back to the command free queue.
806 int mwifiex_process_cmdresp(struct mwifiex_adapter
*adapter
)
808 struct host_cmd_ds_command
*resp
;
809 struct mwifiex_private
*priv
=
810 mwifiex_get_priv(adapter
, MWIFIEX_BSS_ROLE_ANY
);
812 uint16_t orig_cmdresp_no
;
814 uint16_t cmdresp_result
;
816 if (!adapter
->curr_cmd
|| !adapter
->curr_cmd
->resp_skb
) {
817 resp
= (struct host_cmd_ds_command
*) adapter
->upld_buf
;
818 mwifiex_dbg(adapter
, ERROR
,
819 "CMD_RESP: NULL curr_cmd, %#x\n",
820 le16_to_cpu(resp
->command
));
824 resp
= (struct host_cmd_ds_command
*)adapter
->curr_cmd
->resp_skb
->data
;
825 orig_cmdresp_no
= le16_to_cpu(resp
->command
);
826 cmdresp_no
= (orig_cmdresp_no
& HostCmd_CMD_ID_MASK
);
828 if (adapter
->curr_cmd
->cmd_no
!= cmdresp_no
) {
829 mwifiex_dbg(adapter
, ERROR
,
830 "cmdresp error: cmd=0x%x cmd_resp=0x%x\n",
831 adapter
->curr_cmd
->cmd_no
, cmdresp_no
);
834 /* Now we got response from FW, cancel the command timer */
835 del_timer_sync(&adapter
->cmd_timer
);
836 clear_bit(MWIFIEX_IS_CMD_TIMEDOUT
, &adapter
->work_flags
);
838 if (adapter
->curr_cmd
->cmd_flag
& CMD_F_HOSTCMD
) {
839 /* Copy original response back to response buffer */
840 struct mwifiex_ds_misc_cmd
*hostcmd
;
841 uint16_t size
= le16_to_cpu(resp
->size
);
842 mwifiex_dbg(adapter
, INFO
,
843 "info: host cmd resp size = %d\n", size
);
844 size
= min_t(u16
, size
, MWIFIEX_SIZE_OF_CMD_BUFFER
);
845 if (adapter
->curr_cmd
->data_buf
) {
846 hostcmd
= adapter
->curr_cmd
->data_buf
;
848 memcpy(hostcmd
->cmd
, resp
, size
);
852 /* Get BSS number and corresponding priv */
853 priv
= mwifiex_get_priv_by_id(adapter
,
854 HostCmd_GET_BSS_NO(le16_to_cpu(resp
->seq_num
)),
855 HostCmd_GET_BSS_TYPE(le16_to_cpu(resp
->seq_num
)));
857 priv
= mwifiex_get_priv(adapter
, MWIFIEX_BSS_ROLE_ANY
);
858 /* Clear RET_BIT from HostCmd */
859 resp
->command
= cpu_to_le16(orig_cmdresp_no
& HostCmd_CMD_ID_MASK
);
861 cmdresp_no
= le16_to_cpu(resp
->command
);
862 cmdresp_result
= le16_to_cpu(resp
->result
);
864 /* Save the last command response to debug log */
865 adapter
->dbg
.last_cmd_resp_index
=
866 (adapter
->dbg
.last_cmd_resp_index
+ 1) % DBG_CMD_NUM
;
867 adapter
->dbg
.last_cmd_resp_id
[adapter
->dbg
.last_cmd_resp_index
] =
870 mwifiex_dbg(adapter
, CMD
,
871 "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n",
872 orig_cmdresp_no
, cmdresp_result
,
873 le16_to_cpu(resp
->size
), le16_to_cpu(resp
->seq_num
));
874 mwifiex_dbg_dump(adapter
, CMD_D
, "CMD_RESP buffer:", resp
,
875 le16_to_cpu(resp
->size
));
877 if (!(orig_cmdresp_no
& HostCmd_RET_BIT
)) {
878 mwifiex_dbg(adapter
, ERROR
, "CMD_RESP: invalid cmd resp\n");
879 if (adapter
->curr_cmd
->wait_q_enabled
)
880 adapter
->cmd_wait_q
.status
= -1;
882 mwifiex_recycle_cmd_node(adapter
, adapter
->curr_cmd
);
883 spin_lock_bh(&adapter
->mwifiex_cmd_lock
);
884 adapter
->curr_cmd
= NULL
;
885 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
889 if (adapter
->curr_cmd
->cmd_flag
& CMD_F_HOSTCMD
) {
890 adapter
->curr_cmd
->cmd_flag
&= ~CMD_F_HOSTCMD
;
891 if ((cmdresp_result
== HostCmd_RESULT_OK
) &&
892 (cmdresp_no
== HostCmd_CMD_802_11_HS_CFG_ENH
))
893 ret
= mwifiex_ret_802_11_hs_cfg(priv
, resp
);
895 /* handle response */
896 ret
= mwifiex_process_sta_cmdresp(priv
, cmdresp_no
, resp
);
899 /* Check init command response */
900 if (adapter
->hw_status
== MWIFIEX_HW_STATUS_INITIALIZING
) {
902 mwifiex_dbg(adapter
, ERROR
,
903 "%s: cmd %#x failed during\t"
904 "initialization\n", __func__
, cmdresp_no
);
905 mwifiex_init_fw_complete(adapter
);
907 } else if (adapter
->last_init_cmd
== cmdresp_no
)
908 adapter
->hw_status
= MWIFIEX_HW_STATUS_INIT_DONE
;
911 if (adapter
->curr_cmd
) {
912 if (adapter
->curr_cmd
->wait_q_enabled
)
913 adapter
->cmd_wait_q
.status
= ret
;
915 mwifiex_recycle_cmd_node(adapter
, adapter
->curr_cmd
);
917 spin_lock_bh(&adapter
->mwifiex_cmd_lock
);
918 adapter
->curr_cmd
= NULL
;
919 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
926 * This function handles the timeout of command sending.
928 * It will re-send the same command again.
931 mwifiex_cmd_timeout_func(struct timer_list
*t
)
933 struct mwifiex_adapter
*adapter
= from_timer(adapter
, t
, cmd_timer
);
934 struct cmd_ctrl_node
*cmd_node
;
936 set_bit(MWIFIEX_IS_CMD_TIMEDOUT
, &adapter
->work_flags
);
937 if (!adapter
->curr_cmd
) {
938 mwifiex_dbg(adapter
, ERROR
,
939 "cmd: empty curr_cmd\n");
942 cmd_node
= adapter
->curr_cmd
;
944 adapter
->dbg
.timeout_cmd_id
=
945 adapter
->dbg
.last_cmd_id
[adapter
->dbg
.last_cmd_index
];
946 adapter
->dbg
.timeout_cmd_act
=
947 adapter
->dbg
.last_cmd_act
[adapter
->dbg
.last_cmd_index
];
948 mwifiex_dbg(adapter
, MSG
,
949 "%s: Timeout cmd id = %#x, act = %#x\n", __func__
,
950 adapter
->dbg
.timeout_cmd_id
,
951 adapter
->dbg
.timeout_cmd_act
);
953 mwifiex_dbg(adapter
, MSG
,
954 "num_data_h2c_failure = %d\n",
955 adapter
->dbg
.num_tx_host_to_card_failure
);
956 mwifiex_dbg(adapter
, MSG
,
957 "num_cmd_h2c_failure = %d\n",
958 adapter
->dbg
.num_cmd_host_to_card_failure
);
960 mwifiex_dbg(adapter
, MSG
,
961 "is_cmd_timedout = %d\n",
962 test_bit(MWIFIEX_IS_CMD_TIMEDOUT
,
963 &adapter
->work_flags
));
964 mwifiex_dbg(adapter
, MSG
,
965 "num_tx_timeout = %d\n",
966 adapter
->dbg
.num_tx_timeout
);
968 mwifiex_dbg(adapter
, MSG
,
969 "last_cmd_index = %d\n",
970 adapter
->dbg
.last_cmd_index
);
971 mwifiex_dbg(adapter
, MSG
,
972 "last_cmd_id: %*ph\n",
973 (int)sizeof(adapter
->dbg
.last_cmd_id
),
974 adapter
->dbg
.last_cmd_id
);
975 mwifiex_dbg(adapter
, MSG
,
976 "last_cmd_act: %*ph\n",
977 (int)sizeof(adapter
->dbg
.last_cmd_act
),
978 adapter
->dbg
.last_cmd_act
);
980 mwifiex_dbg(adapter
, MSG
,
981 "last_cmd_resp_index = %d\n",
982 adapter
->dbg
.last_cmd_resp_index
);
983 mwifiex_dbg(adapter
, MSG
,
984 "last_cmd_resp_id: %*ph\n",
985 (int)sizeof(adapter
->dbg
.last_cmd_resp_id
),
986 adapter
->dbg
.last_cmd_resp_id
);
988 mwifiex_dbg(adapter
, MSG
,
989 "last_event_index = %d\n",
990 adapter
->dbg
.last_event_index
);
991 mwifiex_dbg(adapter
, MSG
,
992 "last_event: %*ph\n",
993 (int)sizeof(adapter
->dbg
.last_event
),
994 adapter
->dbg
.last_event
);
996 mwifiex_dbg(adapter
, MSG
,
997 "data_sent=%d cmd_sent=%d\n",
998 adapter
->data_sent
, adapter
->cmd_sent
);
1000 mwifiex_dbg(adapter
, MSG
,
1001 "ps_mode=%d ps_state=%d\n",
1002 adapter
->ps_mode
, adapter
->ps_state
);
1004 if (cmd_node
->wait_q_enabled
) {
1005 adapter
->cmd_wait_q
.status
= -ETIMEDOUT
;
1006 mwifiex_cancel_pending_ioctl(adapter
);
1009 if (adapter
->hw_status
== MWIFIEX_HW_STATUS_INITIALIZING
) {
1010 mwifiex_init_fw_complete(adapter
);
1014 if (adapter
->if_ops
.device_dump
)
1015 adapter
->if_ops
.device_dump(adapter
);
1017 if (adapter
->if_ops
.card_reset
)
1018 adapter
->if_ops
.card_reset(adapter
);
1022 mwifiex_cancel_pending_scan_cmd(struct mwifiex_adapter
*adapter
)
1024 struct cmd_ctrl_node
*cmd_node
= NULL
, *tmp_node
;
1026 /* Cancel all pending scan command */
1027 spin_lock_bh(&adapter
->scan_pending_q_lock
);
1028 list_for_each_entry_safe(cmd_node
, tmp_node
,
1029 &adapter
->scan_pending_q
, list
) {
1030 list_del(&cmd_node
->list
);
1031 cmd_node
->wait_q_enabled
= false;
1032 mwifiex_insert_cmd_to_free_q(adapter
, cmd_node
);
1034 spin_unlock_bh(&adapter
->scan_pending_q_lock
);
1038 * This function cancels all the pending commands.
1040 * The current command, all commands in command pending queue and all scan
1041 * commands in scan pending queue are cancelled. All the completion callbacks
1042 * are called with failure status to ensure cleanup.
1045 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter
*adapter
)
1047 struct cmd_ctrl_node
*cmd_node
= NULL
, *tmp_node
;
1049 spin_lock_bh(&adapter
->mwifiex_cmd_lock
);
1050 /* Cancel current cmd */
1051 if ((adapter
->curr_cmd
) && (adapter
->curr_cmd
->wait_q_enabled
)) {
1052 adapter
->cmd_wait_q
.status
= -1;
1053 mwifiex_complete_cmd(adapter
, adapter
->curr_cmd
);
1054 adapter
->curr_cmd
->wait_q_enabled
= false;
1055 /* no recycle probably wait for response */
1057 /* Cancel all pending command */
1058 spin_lock_bh(&adapter
->cmd_pending_q_lock
);
1059 list_for_each_entry_safe(cmd_node
, tmp_node
,
1060 &adapter
->cmd_pending_q
, list
) {
1061 list_del(&cmd_node
->list
);
1063 if (cmd_node
->wait_q_enabled
)
1064 adapter
->cmd_wait_q
.status
= -1;
1065 mwifiex_recycle_cmd_node(adapter
, cmd_node
);
1067 spin_unlock_bh(&adapter
->cmd_pending_q_lock
);
1068 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
1070 mwifiex_cancel_scan(adapter
);
1074 * This function cancels all pending commands that matches with
1075 * the given IOCTL request.
1077 * Both the current command buffer and the pending command queue are
1078 * searched for matching IOCTL request. The completion callback of
1079 * the matched command is called with failure status to ensure cleanup.
1080 * In case of scan commands, all pending commands in scan pending queue
1084 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter
*adapter
)
1086 struct cmd_ctrl_node
*cmd_node
= NULL
;
1088 if ((adapter
->curr_cmd
) &&
1089 (adapter
->curr_cmd
->wait_q_enabled
)) {
1090 spin_lock_bh(&adapter
->mwifiex_cmd_lock
);
1091 cmd_node
= adapter
->curr_cmd
;
1092 /* setting curr_cmd to NULL is quite dangerous, because
1093 * mwifiex_process_cmdresp checks curr_cmd to be != NULL
1094 * at the beginning then relies on it and dereferences
1096 * this probably works since mwifiex_cmd_timeout_func
1097 * is the only caller of this function and responses
1100 adapter
->curr_cmd
= NULL
;
1101 spin_unlock_bh(&adapter
->mwifiex_cmd_lock
);
1103 mwifiex_recycle_cmd_node(adapter
, cmd_node
);
1106 mwifiex_cancel_scan(adapter
);
1110 * This function sends the sleep confirm command to firmware, if
1113 * The sleep confirm command cannot be issued if command response,
1114 * data response or event response is awaiting handling, or if we
1115 * are in the middle of sending a command, or expecting a command
1119 mwifiex_check_ps_cond(struct mwifiex_adapter
*adapter
)
1121 if (!adapter
->cmd_sent
&& !atomic_read(&adapter
->tx_hw_pending
) &&
1122 !adapter
->curr_cmd
&& !IS_CARD_RX_RCVD(adapter
))
1123 mwifiex_dnld_sleep_confirm_cmd(adapter
);
1125 mwifiex_dbg(adapter
, CMD
,
1126 "cmd: Delay Sleep Confirm (%s%s%s%s)\n",
1127 (adapter
->cmd_sent
) ? "D" : "",
1128 atomic_read(&adapter
->tx_hw_pending
) ? "T" : "",
1129 (adapter
->curr_cmd
) ? "C" : "",
1130 (IS_CARD_RX_RCVD(adapter
)) ? "R" : "");
1134 * This function sends a Host Sleep activated event to applications.
1136 * This event is generated by the driver, with a blank event body.
1139 mwifiex_hs_activated_event(struct mwifiex_private
*priv
, u8 activated
)
1142 if (test_bit(MWIFIEX_IS_HS_CONFIGURED
,
1143 &priv
->adapter
->work_flags
)) {
1144 priv
->adapter
->hs_activated
= true;
1145 mwifiex_update_rxreor_flags(priv
->adapter
,
1146 RXREOR_FORCE_NO_DROP
);
1147 mwifiex_dbg(priv
->adapter
, EVENT
,
1148 "event: hs_activated\n");
1149 priv
->adapter
->hs_activate_wait_q_woken
= true;
1150 wake_up_interruptible(
1151 &priv
->adapter
->hs_activate_wait_q
);
1153 mwifiex_dbg(priv
->adapter
, EVENT
,
1154 "event: HS not configured\n");
1157 mwifiex_dbg(priv
->adapter
, EVENT
,
1158 "event: hs_deactivated\n");
1159 priv
->adapter
->hs_activated
= false;
1164 * This function handles the command response of a Host Sleep configuration
1167 * Handling includes changing the header fields into CPU format
1168 * and setting the current host sleep activation status in driver.
1170 * In case host sleep status change, the function generates an event to
1171 * notify the applications.
1173 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private
*priv
,
1174 struct host_cmd_ds_command
*resp
)
1176 struct mwifiex_adapter
*adapter
= priv
->adapter
;
1177 struct host_cmd_ds_802_11_hs_cfg_enh
*phs_cfg
=
1178 &resp
->params
.opt_hs_cfg
;
1179 uint32_t conditions
= le32_to_cpu(phs_cfg
->params
.hs_config
.conditions
);
1181 if (phs_cfg
->action
== cpu_to_le16(HS_ACTIVATE
) &&
1182 adapter
->iface_type
!= MWIFIEX_USB
) {
1183 mwifiex_hs_activated_event(priv
, true);
1186 mwifiex_dbg(adapter
, CMD
,
1187 "cmd: CMD_RESP: HS_CFG cmd reply\t"
1188 " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1189 resp
->result
, conditions
,
1190 phs_cfg
->params
.hs_config
.gpio
,
1191 phs_cfg
->params
.hs_config
.gap
);
1193 if (conditions
!= HS_CFG_CANCEL
) {
1194 set_bit(MWIFIEX_IS_HS_CONFIGURED
, &adapter
->work_flags
);
1195 if (adapter
->iface_type
== MWIFIEX_USB
)
1196 mwifiex_hs_activated_event(priv
, true);
1198 clear_bit(MWIFIEX_IS_HS_CONFIGURED
, &adapter
->work_flags
);
1199 if (adapter
->hs_activated
)
1200 mwifiex_hs_activated_event(priv
, false);
1207 * This function wakes up the adapter and generates a Host Sleep
1208 * cancel event on receiving the power up interrupt.
1211 mwifiex_process_hs_config(struct mwifiex_adapter
*adapter
)
1213 mwifiex_dbg(adapter
, INFO
,
1214 "info: %s: auto cancelling host sleep\t"
1215 "since there is interrupt from the firmware\n",
1218 adapter
->if_ops
.wakeup(adapter
);
1219 adapter
->hs_activated
= false;
1220 clear_bit(MWIFIEX_IS_HS_CONFIGURED
, &adapter
->work_flags
);
1221 clear_bit(MWIFIEX_IS_SUSPENDED
, &adapter
->work_flags
);
1222 mwifiex_hs_activated_event(mwifiex_get_priv(adapter
,
1223 MWIFIEX_BSS_ROLE_ANY
),
1226 EXPORT_SYMBOL_GPL(mwifiex_process_hs_config
);
1229 * This function handles the command response of a sleep confirm command.
1231 * The function sets the card state to SLEEP if the response indicates success.
1234 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter
*adapter
,
1235 u8
*pbuf
, u32 upld_len
)
1237 struct host_cmd_ds_command
*cmd
= (struct host_cmd_ds_command
*) pbuf
;
1238 struct mwifiex_private
*priv
=
1239 mwifiex_get_priv(adapter
, MWIFIEX_BSS_ROLE_ANY
);
1240 uint16_t result
= le16_to_cpu(cmd
->result
);
1241 uint16_t command
= le16_to_cpu(cmd
->command
);
1242 uint16_t seq_num
= le16_to_cpu(cmd
->seq_num
);
1245 mwifiex_dbg(adapter
, ERROR
,
1246 "%s: cmd size is 0\n", __func__
);
1250 mwifiex_dbg(adapter
, CMD
,
1251 "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n",
1252 command
, result
, le16_to_cpu(cmd
->size
), seq_num
);
1254 /* Get BSS number and corresponding priv */
1255 priv
= mwifiex_get_priv_by_id(adapter
, HostCmd_GET_BSS_NO(seq_num
),
1256 HostCmd_GET_BSS_TYPE(seq_num
));
1258 priv
= mwifiex_get_priv(adapter
, MWIFIEX_BSS_ROLE_ANY
);
1260 /* Update sequence number */
1261 seq_num
= HostCmd_GET_SEQ_NO(seq_num
);
1262 /* Clear RET_BIT from HostCmd */
1263 command
&= HostCmd_CMD_ID_MASK
;
1265 if (command
!= HostCmd_CMD_802_11_PS_MODE_ENH
) {
1266 mwifiex_dbg(adapter
, ERROR
,
1267 "%s: rcvd unexpected resp for cmd %#x, result = %x\n",
1268 __func__
, command
, result
);
1273 mwifiex_dbg(adapter
, ERROR
,
1274 "%s: sleep confirm cmd failed\n",
1276 adapter
->pm_wakeup_card_req
= false;
1277 adapter
->ps_state
= PS_STATE_AWAKE
;
1280 adapter
->pm_wakeup_card_req
= true;
1281 if (test_bit(MWIFIEX_IS_HS_CONFIGURED
, &adapter
->work_flags
))
1282 mwifiex_hs_activated_event(mwifiex_get_priv
1283 (adapter
, MWIFIEX_BSS_ROLE_ANY
),
1285 adapter
->ps_state
= PS_STATE_SLEEP
;
1286 cmd
->command
= cpu_to_le16(command
);
1287 cmd
->seq_num
= cpu_to_le16(seq_num
);
1289 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp
);
1292 * This function prepares an enhanced power mode command.
1294 * This function can be used to disable power save or to configure
1295 * power save with auto PS or STA PS or auto deep sleep.
1297 * Preparation includes -
1298 * - Setting command ID, action and proper size
1299 * - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1300 * auto deep sleep TLV (as required)
1301 * - Ensuring correct endian-ness
1303 int mwifiex_cmd_enh_power_mode(struct mwifiex_private
*priv
,
1304 struct host_cmd_ds_command
*cmd
,
1305 u16 cmd_action
, uint16_t ps_bitmap
,
1306 struct mwifiex_ds_auto_ds
*auto_ds
)
1308 struct host_cmd_ds_802_11_ps_mode_enh
*psmode_enh
=
1309 &cmd
->params
.psmode_enh
;
1313 cmd
->command
= cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH
);
1314 if (cmd_action
== DIS_AUTO_PS
) {
1315 psmode_enh
->action
= cpu_to_le16(DIS_AUTO_PS
);
1316 psmode_enh
->params
.ps_bitmap
= cpu_to_le16(ps_bitmap
);
1317 cmd
->size
= cpu_to_le16(S_DS_GEN
+ sizeof(psmode_enh
->action
) +
1318 sizeof(psmode_enh
->params
.ps_bitmap
));
1319 } else if (cmd_action
== GET_PS
) {
1320 psmode_enh
->action
= cpu_to_le16(GET_PS
);
1321 psmode_enh
->params
.ps_bitmap
= cpu_to_le16(ps_bitmap
);
1322 cmd
->size
= cpu_to_le16(S_DS_GEN
+ sizeof(psmode_enh
->action
) +
1323 sizeof(psmode_enh
->params
.ps_bitmap
));
1324 } else if (cmd_action
== EN_AUTO_PS
) {
1325 psmode_enh
->action
= cpu_to_le16(EN_AUTO_PS
);
1326 psmode_enh
->params
.ps_bitmap
= cpu_to_le16(ps_bitmap
);
1327 cmd_size
= S_DS_GEN
+ sizeof(psmode_enh
->action
) +
1328 sizeof(psmode_enh
->params
.ps_bitmap
);
1329 tlv
= (u8
*) cmd
+ cmd_size
;
1330 if (ps_bitmap
& BITMAP_STA_PS
) {
1331 struct mwifiex_adapter
*adapter
= priv
->adapter
;
1332 struct mwifiex_ie_types_ps_param
*ps_tlv
=
1333 (struct mwifiex_ie_types_ps_param
*) tlv
;
1334 struct mwifiex_ps_param
*ps_mode
= &ps_tlv
->param
;
1335 ps_tlv
->header
.type
= cpu_to_le16(TLV_TYPE_PS_PARAM
);
1336 ps_tlv
->header
.len
= cpu_to_le16(sizeof(*ps_tlv
) -
1337 sizeof(struct mwifiex_ie_types_header
));
1338 cmd_size
+= sizeof(*ps_tlv
);
1339 tlv
+= sizeof(*ps_tlv
);
1340 mwifiex_dbg(priv
->adapter
, CMD
,
1341 "cmd: PS Command: Enter PS\n");
1342 ps_mode
->null_pkt_interval
=
1343 cpu_to_le16(adapter
->null_pkt_interval
);
1344 ps_mode
->multiple_dtims
=
1345 cpu_to_le16(adapter
->multiple_dtim
);
1346 ps_mode
->bcn_miss_timeout
=
1347 cpu_to_le16(adapter
->bcn_miss_time_out
);
1348 ps_mode
->local_listen_interval
=
1349 cpu_to_le16(adapter
->local_listen_interval
);
1350 ps_mode
->adhoc_wake_period
=
1351 cpu_to_le16(adapter
->adhoc_awake_period
);
1352 ps_mode
->delay_to_ps
=
1353 cpu_to_le16(adapter
->delay_to_ps
);
1354 ps_mode
->mode
= cpu_to_le16(adapter
->enhanced_ps_mode
);
1357 if (ps_bitmap
& BITMAP_AUTO_DS
) {
1358 struct mwifiex_ie_types_auto_ds_param
*auto_ds_tlv
=
1359 (struct mwifiex_ie_types_auto_ds_param
*) tlv
;
1362 auto_ds_tlv
->header
.type
=
1363 cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM
);
1364 auto_ds_tlv
->header
.len
=
1365 cpu_to_le16(sizeof(*auto_ds_tlv
) -
1366 sizeof(struct mwifiex_ie_types_header
));
1367 cmd_size
+= sizeof(*auto_ds_tlv
);
1368 tlv
+= sizeof(*auto_ds_tlv
);
1370 idletime
= auto_ds
->idle_time
;
1371 mwifiex_dbg(priv
->adapter
, CMD
,
1372 "cmd: PS Command: Enter Auto Deep Sleep\n");
1373 auto_ds_tlv
->deep_sleep_timeout
= cpu_to_le16(idletime
);
1375 cmd
->size
= cpu_to_le16(cmd_size
);
1381 * This function handles the command response of an enhanced power mode
1384 * Handling includes changing the header fields into CPU format
1385 * and setting the current enhanced power mode in driver.
1387 int mwifiex_ret_enh_power_mode(struct mwifiex_private
*priv
,
1388 struct host_cmd_ds_command
*resp
,
1389 struct mwifiex_ds_pm_cfg
*pm_cfg
)
1391 struct mwifiex_adapter
*adapter
= priv
->adapter
;
1392 struct host_cmd_ds_802_11_ps_mode_enh
*ps_mode
=
1393 &resp
->params
.psmode_enh
;
1394 uint16_t action
= le16_to_cpu(ps_mode
->action
);
1395 uint16_t ps_bitmap
= le16_to_cpu(ps_mode
->params
.ps_bitmap
);
1396 uint16_t auto_ps_bitmap
=
1397 le16_to_cpu(ps_mode
->params
.ps_bitmap
);
1399 mwifiex_dbg(adapter
, INFO
,
1400 "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1401 __func__
, resp
->result
, action
);
1402 if (action
== EN_AUTO_PS
) {
1403 if (auto_ps_bitmap
& BITMAP_AUTO_DS
) {
1404 mwifiex_dbg(adapter
, CMD
,
1405 "cmd: Enabled auto deep sleep\n");
1406 priv
->adapter
->is_deep_sleep
= true;
1408 if (auto_ps_bitmap
& BITMAP_STA_PS
) {
1409 mwifiex_dbg(adapter
, CMD
,
1410 "cmd: Enabled STA power save\n");
1411 if (adapter
->sleep_period
.period
)
1412 mwifiex_dbg(adapter
, CMD
,
1413 "cmd: set to uapsd/pps mode\n");
1415 } else if (action
== DIS_AUTO_PS
) {
1416 if (ps_bitmap
& BITMAP_AUTO_DS
) {
1417 priv
->adapter
->is_deep_sleep
= false;
1418 mwifiex_dbg(adapter
, CMD
,
1419 "cmd: Disabled auto deep sleep\n");
1421 if (ps_bitmap
& BITMAP_STA_PS
) {
1422 mwifiex_dbg(adapter
, CMD
,
1423 "cmd: Disabled STA power save\n");
1424 if (adapter
->sleep_period
.period
) {
1425 adapter
->delay_null_pkt
= false;
1426 adapter
->tx_lock_flag
= false;
1427 adapter
->pps_uapsd_mode
= false;
1430 } else if (action
== GET_PS
) {
1431 if (ps_bitmap
& BITMAP_STA_PS
)
1432 adapter
->ps_mode
= MWIFIEX_802_11_POWER_MODE_PSP
;
1434 adapter
->ps_mode
= MWIFIEX_802_11_POWER_MODE_CAM
;
1436 mwifiex_dbg(adapter
, CMD
,
1437 "cmd: ps_bitmap=%#x\n", ps_bitmap
);
1440 /* This section is for get power save mode */
1441 if (ps_bitmap
& BITMAP_STA_PS
)
1442 pm_cfg
->param
.ps_mode
= 1;
1444 pm_cfg
->param
.ps_mode
= 0;
1451 * This function prepares command to get hardware specifications.
1453 * Preparation includes -
1454 * - Setting command ID, action and proper size
1455 * - Setting permanent address parameter
1456 * - Ensuring correct endian-ness
1458 int mwifiex_cmd_get_hw_spec(struct mwifiex_private
*priv
,
1459 struct host_cmd_ds_command
*cmd
)
1461 struct host_cmd_ds_get_hw_spec
*hw_spec
= &cmd
->params
.hw_spec
;
1463 cmd
->command
= cpu_to_le16(HostCmd_CMD_GET_HW_SPEC
);
1465 cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec
) + S_DS_GEN
);
1466 memcpy(hw_spec
->permanent_addr
, priv
->curr_addr
, ETH_ALEN
);
1472 * This function handles the command response of get hardware
1475 * Handling includes changing the header fields into CPU format
1476 * and saving/updating the following parameters in driver -
1477 * - Firmware capability information
1478 * - Firmware band settings
1479 * - Ad-hoc start band and channel
1480 * - Ad-hoc 11n activation status
1481 * - Firmware release number
1482 * - Number of antennas
1483 * - Hardware address
1484 * - Hardware interface version
1485 * - Firmware version
1487 * - 11n capabilities
1488 * - MCS support fields
1491 int mwifiex_ret_get_hw_spec(struct mwifiex_private
*priv
,
1492 struct host_cmd_ds_command
*resp
)
1494 struct host_cmd_ds_get_hw_spec
*hw_spec
= &resp
->params
.hw_spec
;
1495 struct mwifiex_adapter
*adapter
= priv
->adapter
;
1496 struct mwifiex_ie_types_header
*tlv
;
1497 struct hw_spec_api_rev
*api_rev
;
1498 struct hw_spec_max_conn
*max_conn
;
1499 u16 resp_size
, api_id
;
1500 int i
, left_len
, parsed_len
= 0;
1502 adapter
->fw_cap_info
= le32_to_cpu(hw_spec
->fw_cap_info
);
1504 if (IS_SUPPORT_MULTI_BANDS(adapter
))
1505 adapter
->fw_bands
= (u8
) GET_FW_DEFAULT_BANDS(adapter
);
1507 adapter
->fw_bands
= BAND_B
;
1509 adapter
->config_bands
= adapter
->fw_bands
;
1511 if (adapter
->fw_bands
& BAND_A
) {
1512 if (adapter
->fw_bands
& BAND_GN
) {
1513 adapter
->config_bands
|= BAND_AN
;
1514 adapter
->fw_bands
|= BAND_AN
;
1516 if (adapter
->fw_bands
& BAND_AN
) {
1517 adapter
->adhoc_start_band
= BAND_A
| BAND_AN
;
1518 adapter
->adhoc_11n_enabled
= true;
1520 adapter
->adhoc_start_band
= BAND_A
;
1522 priv
->adhoc_channel
= DEFAULT_AD_HOC_CHANNEL_A
;
1523 } else if (adapter
->fw_bands
& BAND_GN
) {
1524 adapter
->adhoc_start_band
= BAND_G
| BAND_B
| BAND_GN
;
1525 priv
->adhoc_channel
= DEFAULT_AD_HOC_CHANNEL
;
1526 adapter
->adhoc_11n_enabled
= true;
1527 } else if (adapter
->fw_bands
& BAND_G
) {
1528 adapter
->adhoc_start_band
= BAND_G
| BAND_B
;
1529 priv
->adhoc_channel
= DEFAULT_AD_HOC_CHANNEL
;
1530 } else if (adapter
->fw_bands
& BAND_B
) {
1531 adapter
->adhoc_start_band
= BAND_B
;
1532 priv
->adhoc_channel
= DEFAULT_AD_HOC_CHANNEL
;
1535 adapter
->fw_release_number
= le32_to_cpu(hw_spec
->fw_release_number
);
1536 adapter
->fw_api_ver
= (adapter
->fw_release_number
>> 16) & 0xff;
1537 adapter
->number_of_antenna
=
1538 le16_to_cpu(hw_spec
->number_of_antenna
) & 0xf;
1540 if (le32_to_cpu(hw_spec
->dot_11ac_dev_cap
)) {
1541 adapter
->is_hw_11ac_capable
= true;
1544 adapter
->hw_dot_11ac_dev_cap
=
1545 le32_to_cpu(hw_spec
->dot_11ac_dev_cap
);
1546 adapter
->usr_dot_11ac_dev_cap_bg
= adapter
->hw_dot_11ac_dev_cap
1547 & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK
;
1548 adapter
->usr_dot_11ac_dev_cap_a
= adapter
->hw_dot_11ac_dev_cap
1549 & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK
;
1552 adapter
->hw_dot_11ac_mcs_support
=
1553 le32_to_cpu(hw_spec
->dot_11ac_mcs_support
);
1554 adapter
->usr_dot_11ac_mcs_support
=
1555 adapter
->hw_dot_11ac_mcs_support
;
1557 adapter
->is_hw_11ac_capable
= false;
1560 resp_size
= le16_to_cpu(resp
->size
) - S_DS_GEN
;
1561 if (resp_size
> sizeof(struct host_cmd_ds_get_hw_spec
)) {
1562 /* we have variable HW SPEC information */
1563 left_len
= resp_size
- sizeof(struct host_cmd_ds_get_hw_spec
);
1564 while (left_len
> sizeof(struct mwifiex_ie_types_header
)) {
1565 tlv
= (void *)&hw_spec
->tlvs
+ parsed_len
;
1566 switch (le16_to_cpu(tlv
->type
)) {
1567 case TLV_TYPE_API_REV
:
1568 api_rev
= (struct hw_spec_api_rev
*)tlv
;
1569 api_id
= le16_to_cpu(api_rev
->api_id
);
1571 case KEY_API_VER_ID
:
1572 adapter
->key_api_major_ver
=
1574 adapter
->key_api_minor_ver
=
1576 mwifiex_dbg(adapter
, INFO
,
1578 adapter
->key_api_major_ver
,
1579 adapter
->key_api_minor_ver
);
1582 adapter
->fw_api_ver
=
1584 mwifiex_dbg(adapter
, INFO
,
1585 "Firmware api version %d.%d\n",
1586 adapter
->fw_api_ver
,
1587 api_rev
->minor_ver
);
1589 case UAP_FW_API_VER_ID
:
1590 mwifiex_dbg(adapter
, INFO
,
1591 "uAP api version %d.%d\n",
1593 api_rev
->minor_ver
);
1595 case CHANRPT_API_VER_ID
:
1596 mwifiex_dbg(adapter
, INFO
,
1597 "channel report api version %d.%d\n",
1599 api_rev
->minor_ver
);
1602 mwifiex_dbg(adapter
, FATAL
,
1603 "Unknown api_id: %d\n",
1608 case TLV_TYPE_MAX_CONN
:
1609 max_conn
= (struct hw_spec_max_conn
*)tlv
;
1610 adapter
->max_p2p_conn
= max_conn
->max_p2p_conn
;
1611 adapter
->max_sta_conn
= max_conn
->max_sta_conn
;
1612 mwifiex_dbg(adapter
, INFO
,
1613 "max p2p connections: %u\n",
1614 adapter
->max_p2p_conn
);
1615 mwifiex_dbg(adapter
, INFO
,
1616 "max sta connections: %u\n",
1617 adapter
->max_sta_conn
);
1620 mwifiex_dbg(adapter
, FATAL
,
1621 "Unknown GET_HW_SPEC TLV type: %#x\n",
1622 le16_to_cpu(tlv
->type
));
1625 parsed_len
+= le16_to_cpu(tlv
->len
) +
1626 sizeof(struct mwifiex_ie_types_header
);
1627 left_len
-= le16_to_cpu(tlv
->len
) +
1628 sizeof(struct mwifiex_ie_types_header
);
1632 mwifiex_dbg(adapter
, INFO
,
1633 "info: GET_HW_SPEC: fw_release_number- %#x\n",
1634 adapter
->fw_release_number
);
1635 mwifiex_dbg(adapter
, INFO
,
1636 "info: GET_HW_SPEC: permanent addr: %pM\n",
1637 hw_spec
->permanent_addr
);
1638 mwifiex_dbg(adapter
, INFO
,
1639 "info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n",
1640 le16_to_cpu(hw_spec
->hw_if_version
),
1641 le16_to_cpu(hw_spec
->version
));
1643 ether_addr_copy(priv
->adapter
->perm_addr
, hw_spec
->permanent_addr
);
1644 adapter
->region_code
= le16_to_cpu(hw_spec
->region_code
);
1646 for (i
= 0; i
< MWIFIEX_MAX_REGION_CODE
; i
++)
1647 /* Use the region code to search for the index */
1648 if (adapter
->region_code
== region_code_index
[i
])
1651 /* If it's unidentified region code, use the default (world) */
1652 if (i
>= MWIFIEX_MAX_REGION_CODE
) {
1653 adapter
->region_code
= 0x00;
1654 mwifiex_dbg(adapter
, WARN
,
1655 "cmd: unknown region code, use default (USA)\n");
1658 adapter
->hw_dot_11n_dev_cap
= le32_to_cpu(hw_spec
->dot_11n_dev_cap
);
1659 adapter
->hw_dev_mcs_support
= hw_spec
->dev_mcs_support
;
1660 adapter
->user_dev_mcs_support
= adapter
->hw_dev_mcs_support
;
1662 if (adapter
->if_ops
.update_mp_end_port
)
1663 adapter
->if_ops
.update_mp_end_port(adapter
,
1664 le16_to_cpu(hw_spec
->mp_end_port
));
1666 if (adapter
->fw_api_ver
== MWIFIEX_FW_V15
)
1667 adapter
->scan_chan_gap_enabled
= true;
1672 /* This function handles the command response of hs wakeup reason
1675 int mwifiex_ret_wakeup_reason(struct mwifiex_private
*priv
,
1676 struct host_cmd_ds_command
*resp
,
1677 struct host_cmd_ds_wakeup_reason
*wakeup_reason
)
1679 wakeup_reason
->wakeup_reason
=
1680 resp
->params
.hs_wakeup_reason
.wakeup_reason
;