projects / deliverable / linux.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
brcmfmac: Add 43242 USB support.
[deliverable/linux.git] / drivers / net / wireless / brcm80211 / brcmfmac / usb.c
CommitLineData
71bb244b
AS		 1/*
2 * Copyright (c) 2011 Broadcom Corporation
3 *
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
7 *
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 */
16
17#include <linux/init.h>
18#include <linux/kernel.h>
19#include <linux/module.h>
20#include <linux/kthread.h>
21#include <linux/slab.h>
22#include <linux/skbuff.h>
23#include <linux/netdevice.h>
24#include <linux/spinlock.h>
25#include <linux/ethtool.h>
26#include <linux/fcntl.h>
27#include <linux/fs.h>
28#include <linux/uaccess.h>
29#include <linux/firmware.h>
30#include <linux/usb.h>
edb9bc9a 31#include <linux/vmalloc.h>
71bb244b
AS		 32#include <net/cfg80211.h>
33
34#include <defs.h>
35#include <brcmu_utils.h>
36#include <brcmu_wifi.h>
37#include <dhd_bus.h>
38#include <dhd_dbg.h>
39
40#include "usb_rdl.h"
41#include "usb.h"
42
43#define IOCTL_RESP_TIMEOUT 2000
44
45#define BRCMF_USB_SYNC_TIMEOUT 300 /* ms */
46#define BRCMF_USB_DLIMAGE_SPINWAIT 100 /* in unit of ms */
47#define BRCMF_USB_DLIMAGE_LIMIT 500 /* spinwait limit (ms) */
48
49#define BRCMF_POSTBOOT_ID 0xA123 /* ID to detect if dongle
50 has boot up */
51#define BRCMF_USB_RESETCFG_SPINWAIT 1 /* wait after resetcfg (ms) */
52
53#define BRCMF_USB_NRXQ 50
54#define BRCMF_USB_NTXQ 50
55
56#define CONFIGDESC(usb) (&((usb)->actconfig)->desc)
57#define IFPTR(usb, idx) ((usb)->actconfig->interface[(idx)])
58#define IFALTS(usb, idx) (IFPTR((usb), (idx))->altsetting[0])
59#define IFDESC(usb, idx) IFALTS((usb), (idx)).desc
60#define IFEPDESC(usb, idx, ep) (IFALTS((usb), (idx)).endpoint[(ep)]).desc
61
62#define CONTROL_IF 0
63#define BULK_IF 0
64
65#define BRCMF_USB_CBCTL_WRITE 0
66#define BRCMF_USB_CBCTL_READ 1
67#define BRCMF_USB_MAX_PKT_SIZE 1600
68
fda82417 69#define BRCMF_USB_43236_FW_NAME "brcm/brcmfmac43236b.bin"
1212d370 70#define BRCMF_USB_43242_FW_NAME "brcm/brcmfmac43242a.bin"
71bb244b
AS		 71
72enum usbdev_suspend_state {
73 USBOS_SUSPEND_STATE_DEVICE_ACTIVE = 0, /* Device is busy, won't allow
74 suspend */
75 USBOS_SUSPEND_STATE_SUSPEND_PENDING, /* Device is idle, can be
76 * suspended. Wating PM to
77 * suspend the device
78 */
79 USBOS_SUSPEND_STATE_SUSPENDED /* Device suspended */
80};
81
82struct brcmf_usb_probe_info {
83 void *usbdev_info;
84 struct usb_device *usb; /* USB device pointer from OS */
85 uint rx_pipe, tx_pipe, intr_pipe, rx_pipe2;
86 int intr_size; /* Size of interrupt message */
87 int interval; /* Interrupt polling interval */
88 int vid;
89 int pid;
90 enum usb_device_speed device_speed;
91 enum usbdev_suspend_state suspend_state;
92 struct usb_interface *intf;
93};
94static struct brcmf_usb_probe_info usbdev_probe_info;
95
96struct brcmf_usb_image {
97 void *data;
98 u32 len;
99};
100static struct brcmf_usb_image g_image = { NULL, 0 };
101
102struct intr_transfer_buf {
103 u32 notification;
104 u32 reserved;
105};
106
107struct brcmf_usbdev_info {
108 struct brcmf_usbdev bus_pub; /* MUST BE FIRST */
109 spinlock_t qlock;
110 struct list_head rx_freeq;
111 struct list_head rx_postq;
112 struct list_head tx_freeq;
113 struct list_head tx_postq;
114 enum usbdev_suspend_state suspend_state;
115 uint rx_pipe, tx_pipe, intr_pipe, rx_pipe2;
116
117 bool activity;
118 int rx_low_watermark;
119 int tx_low_watermark;
120 int tx_high_watermark;
121 bool txoff;
122 bool rxoff;
123 bool txoverride;
124
125 struct brcmf_usbreq *tx_reqs;
126 struct brcmf_usbreq *rx_reqs;
127
128 u8 *image; /* buffer for combine fw and nvram */
129 int image_len;
130
131 wait_queue_head_t wait;
132 bool waitdone;
133 int sync_urb_status;
134
135 struct usb_device *usbdev;
136 struct device *dev;
137 enum usb_device_speed device_speed;
138
139 int ctl_in_pipe, ctl_out_pipe;
140 struct urb *ctl_urb; /* URB for control endpoint */
141 struct usb_ctrlrequest ctl_write;
142 struct usb_ctrlrequest ctl_read;
143 u32 ctl_urb_actual_length;
144 int ctl_urb_status;
145 int ctl_completed;
146 wait_queue_head_t ioctl_resp_wait;
147 wait_queue_head_t ctrl_wait;
148 ulong ctl_op;
149
150 bool rxctl_deferrespok;
151
152 struct urb *bulk_urb; /* used for FW download */
153 struct urb *intr_urb; /* URB for interrupt endpoint */
154 int intr_size; /* Size of interrupt message */
155 int interval; /* Interrupt polling interval */
156 struct intr_transfer_buf intr; /* Data buffer for interrupt endpoint */
157
158 struct brcmf_usb_probe_info probe_info;
159
160};
161
162static void brcmf_usb_rx_refill(struct brcmf_usbdev_info *devinfo,
163 struct brcmf_usbreq *req);
164
165MODULE_AUTHOR("Broadcom Corporation");
166MODULE_DESCRIPTION("Broadcom 802.11n wireless LAN fullmac usb driver.");
167MODULE_SUPPORTED_DEVICE("Broadcom 802.11n WLAN fullmac usb cards");
168MODULE_LICENSE("Dual BSD/GPL");
169
170static struct brcmf_usbdev *brcmf_usb_get_buspub(struct device *dev)
171{
172 struct brcmf_bus *bus_if = dev_get_drvdata(dev);
173 return bus_if->bus_priv.usb;
174}
175
176static struct brcmf_usbdev_info *brcmf_usb_get_businfo(struct device *dev)
177{
178 return brcmf_usb_get_buspub(dev)->devinfo;
179}
180
181#if 0
182static void
183brcmf_usb_txflowcontrol(struct brcmf_usbdev_info *devinfo, bool onoff)
184{
185 dhd_txflowcontrol(devinfo->bus_pub.netdev, 0, onoff);
186}
187#endif
188
189static int brcmf_usb_ioctl_resp_wait(struct brcmf_usbdev_info *devinfo,
190 uint *condition, bool *pending)
191{
192 DECLARE_WAITQUEUE(wait, current);
193 int timeout = IOCTL_RESP_TIMEOUT;
194
195 /* Convert timeout in millsecond to jiffies */
196 timeout = msecs_to_jiffies(timeout);
197 /* Wait until control frame is available */
198 add_wait_queue(&devinfo->ioctl_resp_wait, &wait);
199 set_current_state(TASK_INTERRUPTIBLE);
200
201 smp_mb();
202 while (!(*condition) && (!signal_pending(current) && timeout)) {
203 timeout = schedule_timeout(timeout);
204 /* Wait until control frame is available */
205 smp_mb();
206 }
207
208 if (signal_pending(current))
209 *pending = true;
210
211 set_current_state(TASK_RUNNING);
212 remove_wait_queue(&devinfo->ioctl_resp_wait, &wait);
213
214 return timeout;
215}
216
217static int brcmf_usb_ioctl_resp_wake(struct brcmf_usbdev_info *devinfo)
218{
219 if (waitqueue_active(&devinfo->ioctl_resp_wait))
220 wake_up_interruptible(&devinfo->ioctl_resp_wait);
221
222 return 0;
223}
224
225static void
226brcmf_usb_ctl_complete(struct brcmf_usbdev_info *devinfo, int type, int status)
227{
228
229 if (unlikely(devinfo == NULL))
230 return;
231
232 if (type == BRCMF_USB_CBCTL_READ) {
233 if (status == 0)
234 devinfo->bus_pub.stats.rx_ctlpkts++;
235 else
236 devinfo->bus_pub.stats.rx_ctlerrs++;
237 } else if (type == BRCMF_USB_CBCTL_WRITE) {
238 if (status == 0)
239 devinfo->bus_pub.stats.tx_ctlpkts++;
240 else
241 devinfo->bus_pub.stats.tx_ctlerrs++;
242 }
243
244 devinfo->ctl_urb_status = status;
245 devinfo->ctl_completed = true;
246 brcmf_usb_ioctl_resp_wake(devinfo);
247}
248
249static void
250brcmf_usb_ctlread_complete(struct urb *urb)
251{
252 struct brcmf_usbdev_info *devinfo =
253 (struct brcmf_usbdev_info *)urb->context;
254
255 devinfo->ctl_urb_actual_length = urb->actual_length;
256 brcmf_usb_ctl_complete(devinfo, BRCMF_USB_CBCTL_READ,
257 urb->status);
258}
259
260static void
261brcmf_usb_ctlwrite_complete(struct urb *urb)
262{
263 struct brcmf_usbdev_info *devinfo =
264 (struct brcmf_usbdev_info *)urb->context;
265
266 brcmf_usb_ctl_complete(devinfo, BRCMF_USB_CBCTL_WRITE,
267 urb->status);
268}
269
270static int brcmf_usb_pnp(struct brcmf_usbdev_info *devinfo, uint state)
271{
272 return 0;
273}
274
275static int
276brcmf_usb_send_ctl(struct brcmf_usbdev_info *devinfo, u8 *buf, int len)
277{
278 int ret;
279 u16 size;
280
281 if (devinfo == NULL || buf == NULL ||
282 len == 0 || devinfo->ctl_urb == NULL)
283 return -EINVAL;
284
285 /* If the USB/HSIC bus in sleep state, wake it up */
286 if (devinfo->suspend_state == USBOS_SUSPEND_STATE_SUSPENDED)
287 if (brcmf_usb_pnp(devinfo, BCMFMAC_USB_PNP_RESUME) != 0) {
288 brcmf_dbg(ERROR, "Could not Resume the bus!\n");
289 return -EIO;
290 }
291
292 devinfo->activity = true;
293 size = len;
294 devinfo->ctl_write.wLength = cpu_to_le16p(&size);
295 devinfo->ctl_urb->transfer_buffer_length = size;
296 devinfo->ctl_urb_status = 0;
297 devinfo->ctl_urb_actual_length = 0;
298
299 usb_fill_control_urb(devinfo->ctl_urb,
300 devinfo->usbdev,
301 devinfo->ctl_out_pipe,
302 (unsigned char *) &devinfo->ctl_write,
303 buf, size,
304 (usb_complete_t)brcmf_usb_ctlwrite_complete,
305 devinfo);
306
307 ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
308 if (ret < 0)
309 brcmf_dbg(ERROR, "usb_submit_urb failed %d\n", ret);
310
311 return ret;
312}
313
314static int
315brcmf_usb_recv_ctl(struct brcmf_usbdev_info *devinfo, u8 *buf, int len)
316{
317 int ret;
318 u16 size;
319
320 if ((devinfo == NULL) || (buf == NULL) || (len == 0)
321 || (devinfo->ctl_urb == NULL))
322 return -EINVAL;
323
324 size = len;
325 devinfo->ctl_read.wLength = cpu_to_le16p(&size);
326 devinfo->ctl_urb->transfer_buffer_length = size;
327
328 if (devinfo->rxctl_deferrespok) {
329 /* BMAC model */
330 devinfo->ctl_read.bRequestType = USB_DIR_IN
331 | USB_TYPE_VENDOR | USB_RECIP_INTERFACE;
332 devinfo->ctl_read.bRequest = DL_DEFER_RESP_OK;
333 } else {
334 /* full dongle model */
335 devinfo->ctl_read.bRequestType = USB_DIR_IN
336 | USB_TYPE_CLASS | USB_RECIP_INTERFACE;
337 devinfo->ctl_read.bRequest = 1;
338 }
339
340 usb_fill_control_urb(devinfo->ctl_urb,
341 devinfo->usbdev,
342 devinfo->ctl_in_pipe,
343 (unsigned char *) &devinfo->ctl_read,
344 buf, size,
345 (usb_complete_t)brcmf_usb_ctlread_complete,
346 devinfo);
347
348 ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
349 if (ret < 0)
350 brcmf_dbg(ERROR, "usb_submit_urb failed %d\n", ret);
351
352 return ret;
353}
354
355static int brcmf_usb_tx_ctlpkt(struct device *dev, u8 *buf, u32 len)
356{
357 int err = 0;
358 int timeout = 0;
359 bool pending;
360 struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);
361
362 if (devinfo->bus_pub.state != BCMFMAC_USB_STATE_UP) {
363 /* TODO: handle suspend/resume */
364 return -EIO;
365 }
366
367 if (test_and_set_bit(0, &devinfo->ctl_op))
368 return -EIO;
369
a77f5747 370 devinfo->ctl_completed = false;
71bb244b
AS		 371 err = brcmf_usb_send_ctl(devinfo, buf, len);
372 if (err) {
373 brcmf_dbg(ERROR, "fail %d bytes: %d\n", err, len);
374 return err;
375 }
376
71bb244b
AS		 377 timeout = brcmf_usb_ioctl_resp_wait(devinfo, &devinfo->ctl_completed,
378 &pending);
379 clear_bit(0, &devinfo->ctl_op);
380 if (!timeout) {
381 brcmf_dbg(ERROR, "Txctl wait timed out\n");
382 err = -EIO;
383 }
384 return err;
385}
386
387static int brcmf_usb_rx_ctlpkt(struct device *dev, u8 *buf, u32 len)
388{
389 int err = 0;
390 int timeout = 0;
391 bool pending;
392 struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);
393
394 if (devinfo->bus_pub.state != BCMFMAC_USB_STATE_UP) {
395 /* TODO: handle suspend/resume */
396 return -EIO;
397 }
398 if (test_and_set_bit(0, &devinfo->ctl_op))
399 return -EIO;
400
401 err = brcmf_usb_recv_ctl(devinfo, buf, len);
402 if (err) {
403 brcmf_dbg(ERROR, "fail %d bytes: %d\n", err, len);
404 return err;
405 }
406 devinfo->ctl_completed = false;
407 timeout = brcmf_usb_ioctl_resp_wait(devinfo, &devinfo->ctl_completed,
408 &pending);
409 err = devinfo->ctl_urb_status;
410 clear_bit(0, &devinfo->ctl_op);
411 if (!timeout) {
412 brcmf_dbg(ERROR, "rxctl wait timed out\n");
413 err = -EIO;
414 }
415 if (!err)
416 return devinfo->ctl_urb_actual_length;
417 else
418 return err;
419}
420
421static struct brcmf_usbreq *brcmf_usb_deq(struct brcmf_usbdev_info *devinfo,
422 struct list_head *q)
423{
424 unsigned long flags;
425 struct brcmf_usbreq *req;
426 spin_lock_irqsave(&devinfo->qlock, flags);
427 if (list_empty(q)) {
428 spin_unlock_irqrestore(&devinfo->qlock, flags);
429 return NULL;
430 }
431 req = list_entry(q->next, struct brcmf_usbreq, list);
432 list_del_init(q->next);
433 spin_unlock_irqrestore(&devinfo->qlock, flags);
434 return req;
435
436}
437
438static void brcmf_usb_enq(struct brcmf_usbdev_info *devinfo,
439 struct list_head *q, struct brcmf_usbreq *req)
440{
441 unsigned long flags;
442 spin_lock_irqsave(&devinfo->qlock, flags);
443 list_add_tail(&req->list, q);
444 spin_unlock_irqrestore(&devinfo->qlock, flags);
445}
446
447static struct brcmf_usbreq *
448brcmf_usbdev_qinit(struct list_head *q, int qsize)
449{
450 int i;
451 struct brcmf_usbreq *req, *reqs;
452
453 reqs = kzalloc(sizeof(struct brcmf_usbreq) * qsize, GFP_ATOMIC);
454 if (reqs == NULL) {
455 brcmf_dbg(ERROR, "fail to allocate memory!\n");
456 return NULL;
457 }
458 req = reqs;
459
460 for (i = 0; i < qsize; i++) {
461 req->urb = usb_alloc_urb(0, GFP_ATOMIC);
462 if (!req->urb)
463 goto fail;
464
465 INIT_LIST_HEAD(&req->list);
466 list_add_tail(&req->list, q);
467 req++;
468 }
469 return reqs;
470fail:
471 brcmf_dbg(ERROR, "fail!\n");
472 while (!list_empty(q)) {
473 req = list_entry(q->next, struct brcmf_usbreq, list);
474 if (req && req->urb)
475 usb_free_urb(req->urb);
476 list_del(q->next);
477 }
478 return NULL;
479
480}
481
482static void brcmf_usb_free_q(struct list_head *q, bool pending)
483{
484 struct brcmf_usbreq *req, *next;
485 int i = 0;
486 list_for_each_entry_safe(req, next, q, list) {
d4ca0099 487 if (!req->urb) {
71bb244b
AS		 488 brcmf_dbg(ERROR, "bad req\n");
489 break;
490 }
491 i++;
492 if (pending) {
493 usb_kill_urb(req->urb);
494 } else {
495 usb_free_urb(req->urb);
496 list_del_init(&req->list);
497 }
498 }
499}
500
501static void brcmf_usb_del_fromq(struct brcmf_usbdev_info *devinfo,
502 struct brcmf_usbreq *req)
503{
504 unsigned long flags;
505
506 spin_lock_irqsave(&devinfo->qlock, flags);
507 list_del_init(&req->list);
508 spin_unlock_irqrestore(&devinfo->qlock, flags);
509}
510
511
512static void brcmf_usb_tx_complete(struct urb *urb)
513{
514 struct brcmf_usbreq *req = (struct brcmf_usbreq *)urb->context;
515 struct brcmf_usbdev_info *devinfo = req->devinfo;
516
517 brcmf_usb_del_fromq(devinfo, req);
518 if (urb->status == 0)
1d9c1796 519 devinfo->bus_pub.bus->dstats.tx_packets++;
71bb244b 520 else
1d9c1796 521 devinfo->bus_pub.bus->dstats.tx_errors++;
71bb244b
AS		 522
523 dev_kfree_skb(req->skb);
524 req->skb = NULL;
525 brcmf_usb_enq(devinfo, &devinfo->tx_freeq, req);
526
527}
528
529static void brcmf_usb_rx_complete(struct urb *urb)
530{
531 struct brcmf_usbreq *req = (struct brcmf_usbreq *)urb->context;
532 struct brcmf_usbdev_info *devinfo = req->devinfo;
533 struct sk_buff *skb;
534 int ifidx = 0;
535
536 brcmf_usb_del_fromq(devinfo, req);
537 skb = req->skb;
538 req->skb = NULL;
539
540 if (urb->status == 0) {
1d9c1796 541 devinfo->bus_pub.bus->dstats.rx_packets++;
71bb244b 542 } else {
1d9c1796 543 devinfo->bus_pub.bus->dstats.rx_errors++;
71bb244b
AS		 544 dev_kfree_skb(skb);
545 brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req);
546 return;
547 }
548
549 if (devinfo->bus_pub.state == BCMFMAC_USB_STATE_UP) {
550 skb_put(skb, urb->actual_length);
551 if (brcmf_proto_hdrpull(devinfo->dev, &ifidx, skb) != 0) {
552 brcmf_dbg(ERROR, "rx protocol error\n");
553 brcmu_pkt_buf_free_skb(skb);
554 devinfo->bus_pub.bus->dstats.rx_errors++;
555 } else {
556 brcmf_rx_packet(devinfo->dev, ifidx, skb);
557 brcmf_usb_rx_refill(devinfo, req);
558 }
559 } else {
560 dev_kfree_skb(skb);
561 }
562 return;
563
564}
565
566static void brcmf_usb_rx_refill(struct brcmf_usbdev_info *devinfo,
567 struct brcmf_usbreq *req)
568{
569 struct sk_buff *skb;
570 int ret;
571
572 if (!req || !devinfo)
573 return;
574
575 skb = dev_alloc_skb(devinfo->bus_pub.bus_mtu);
576 if (!skb) {
577 brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req);
578 return;
579 }
580 req->skb = skb;
581
582 usb_fill_bulk_urb(req->urb, devinfo->usbdev, devinfo->rx_pipe,
583 skb->data, skb_tailroom(skb), brcmf_usb_rx_complete,
584 req);
585 req->urb->transfer_flags |= URB_ZERO_PACKET;
586 req->devinfo = devinfo;
587
588 ret = usb_submit_urb(req->urb, GFP_ATOMIC);
589 if (ret == 0) {
590 brcmf_usb_enq(devinfo, &devinfo->rx_postq, req);
591 } else {
592 dev_kfree_skb(req->skb);
593 req->skb = NULL;
594 brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req);
595 }
596 return;
597}
598
599static void brcmf_usb_rx_fill_all(struct brcmf_usbdev_info *devinfo)
600{
601 struct brcmf_usbreq *req;
602
603 if (devinfo->bus_pub.state != BCMFMAC_USB_STATE_UP) {
604 brcmf_dbg(ERROR, "bus is not up\n");
605 return;
606 }
607 while ((req = brcmf_usb_deq(devinfo, &devinfo->rx_freeq)) != NULL)
608 brcmf_usb_rx_refill(devinfo, req);
609}
610
611static void
612brcmf_usb_state_change(struct brcmf_usbdev_info *devinfo, int state)
613{
614 struct brcmf_bus *bcmf_bus = devinfo->bus_pub.bus;
615 int old_state;
616
617
618 if (devinfo->bus_pub.state == state)
619 return;
620
621 old_state = devinfo->bus_pub.state;
622 brcmf_dbg(TRACE, "dbus state change from %d to to %d\n",
623 old_state, state);
624
625 /* Don't update state if it's PnP firmware re-download */
626 if (state != BCMFMAC_USB_STATE_PNP_FWDL) /* TODO */
627 devinfo->bus_pub.state = state;
628
629 if ((old_state == BCMFMAC_USB_STATE_SLEEP)
630 && (state == BCMFMAC_USB_STATE_UP)) {
631 brcmf_usb_rx_fill_all(devinfo);
632 }
633
634 /* update state of upper layer */
635 if (state == BCMFMAC_USB_STATE_DOWN) {
636 brcmf_dbg(INFO, "DBUS is down\n");
637 bcmf_bus->state = BRCMF_BUS_DOWN;
638 } else {
639 brcmf_dbg(INFO, "DBUS current state=%d\n", state);
640 }
641}
642
643static void
644brcmf_usb_intr_complete(struct urb *urb)
645{
646 struct brcmf_usbdev_info *devinfo =
647 (struct brcmf_usbdev_info *)urb->context;
648 bool killed;
649
650 if (devinfo == NULL)
651 return;
652
653 if (unlikely(urb->status)) {
654 if (devinfo->suspend_state ==
655 USBOS_SUSPEND_STATE_SUSPEND_PENDING)
656 killed = true;
657
658 if ((urb->status == -ENOENT && (!killed))
659 || urb->status == -ESHUTDOWN ||
660 urb->status == -ENODEV) {
661 brcmf_usb_state_change(devinfo, BCMFMAC_USB_STATE_DOWN);
662 }
663 }
664
665 if (devinfo->bus_pub.state == BCMFMAC_USB_STATE_DOWN) {
666 brcmf_dbg(ERROR, "intr cb when DBUS down, ignoring\n");
667 return;
668 }
669
670 if (devinfo->bus_pub.state == BCMFMAC_USB_STATE_UP)
671 usb_submit_urb(devinfo->intr_urb, GFP_ATOMIC);
672}
673
674static int brcmf_usb_tx(struct device *dev, struct sk_buff *skb)
675{
676 struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);
677 struct brcmf_usbreq *req;
678 int ret;
679
680 if (devinfo->bus_pub.state != BCMFMAC_USB_STATE_UP) {
681 /* TODO: handle suspend/resume */
682 return -EIO;
683 }
684
685 req = brcmf_usb_deq(devinfo, &devinfo->tx_freeq);
686 if (!req) {
687 brcmf_dbg(ERROR, "no req to send\n");
688 return -ENOMEM;
689 }
690 if (!req->urb) {
691 brcmf_dbg(ERROR, "no urb for req %p\n", req);
692 return -ENOBUFS;
693 }
694
695 req->skb = skb;
696 req->devinfo = devinfo;
697 usb_fill_bulk_urb(req->urb, devinfo->usbdev, devinfo->tx_pipe,
698 skb->data, skb->len, brcmf_usb_tx_complete, req);
699 req->urb->transfer_flags |= URB_ZERO_PACKET;
700 ret = usb_submit_urb(req->urb, GFP_ATOMIC);
701 if (!ret) {
702 brcmf_usb_enq(devinfo, &devinfo->tx_postq, req);
703 } else {
704 req->skb = NULL;
705 brcmf_usb_enq(devinfo, &devinfo->tx_freeq, req);
706 }
707
708 return ret;
709}
710
711
712static int brcmf_usb_up(struct device *dev)
713{
714 struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);
715 u16 ifnum;
716
d4ca0099
DC		 717 if (devinfo->bus_pub.state == BCMFMAC_USB_STATE_UP)
718 return 0;
719
71bb244b
AS		 720 /* If the USB/HSIC bus in sleep state, wake it up */
721 if (devinfo->suspend_state == USBOS_SUSPEND_STATE_SUSPENDED) {
722 if (brcmf_usb_pnp(devinfo, BCMFMAC_USB_PNP_RESUME) != 0) {
723 brcmf_dbg(ERROR, "Could not Resume the bus!\n");
724 return -EIO;
725 }
726 }
727 devinfo->activity = true;
728
729 /* Success, indicate devinfo is fully up */
730 brcmf_usb_state_change(devinfo, BCMFMAC_USB_STATE_UP);
731
732 if (devinfo->intr_urb) {
733 int ret;
734
735 usb_fill_int_urb(devinfo->intr_urb, devinfo->usbdev,
736 devinfo->intr_pipe,
737 &devinfo->intr,
738 devinfo->intr_size,
739 (usb_complete_t)brcmf_usb_intr_complete,
740 devinfo,
741 devinfo->interval);
742
743 ret = usb_submit_urb(devinfo->intr_urb, GFP_ATOMIC);
744 if (ret) {
745 brcmf_dbg(ERROR, "USB_SUBMIT_URB failed with status %d\n",
746 ret);
747 return -EINVAL;
748 }
749 }
750
751 if (devinfo->ctl_urb) {
752 devinfo->ctl_in_pipe = usb_rcvctrlpipe(devinfo->usbdev, 0);
753 devinfo->ctl_out_pipe = usb_sndctrlpipe(devinfo->usbdev, 0);
754
755 ifnum = IFDESC(devinfo->usbdev, CONTROL_IF).bInterfaceNumber;
756
757 /* CTL Write */
758 devinfo->ctl_write.bRequestType =
759 USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE;
760 devinfo->ctl_write.bRequest = 0;
761 devinfo->ctl_write.wValue = cpu_to_le16(0);
762 devinfo->ctl_write.wIndex = cpu_to_le16p(&ifnum);
763
764 /* CTL Read */
765 devinfo->ctl_read.bRequestType =
766 USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE;
767 devinfo->ctl_read.bRequest = 1;
768 devinfo->ctl_read.wValue = cpu_to_le16(0);
769 devinfo->ctl_read.wIndex = cpu_to_le16p(&ifnum);
770 }
771 brcmf_usb_rx_fill_all(devinfo);
772 return 0;
773}
774
775static void brcmf_usb_down(struct device *dev)
776{
777 struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);
778
779 if (devinfo == NULL)
780 return;
781
782 brcmf_dbg(TRACE, "enter\n");
783 if (devinfo->bus_pub.state == BCMFMAC_USB_STATE_DOWN)
784 return;
785
786 brcmf_usb_state_change(devinfo, BCMFMAC_USB_STATE_DOWN);
787 if (devinfo->intr_urb)
788 usb_kill_urb(devinfo->intr_urb);
789
790 if (devinfo->ctl_urb)
791 usb_kill_urb(devinfo->ctl_urb);
792
793 if (devinfo->bulk_urb)
794 usb_kill_urb(devinfo->bulk_urb);
795 brcmf_usb_free_q(&devinfo->tx_postq, true);
796
797 brcmf_usb_free_q(&devinfo->rx_postq, true);
798}
799
800static int
801brcmf_usb_sync_wait(struct brcmf_usbdev_info *devinfo, u16 time)
802{
803 int ret;
804 int err = 0;
805 int ms = time;
806
807 ret = wait_event_interruptible_timeout(devinfo->wait,
808 devinfo->waitdone == true, (ms * HZ / 1000));
809
810 if ((devinfo->waitdone == false) || (devinfo->sync_urb_status)) {
811 brcmf_dbg(ERROR, "timeout(%d) or urb err=%d\n",
812 ret, devinfo->sync_urb_status);
813 err = -EINVAL;
814 }
815 devinfo->waitdone = false;
816 return err;
817}
818
819static void
820brcmf_usb_sync_complete(struct urb *urb)
821{
822 struct brcmf_usbdev_info *devinfo =
823 (struct brcmf_usbdev_info *)urb->context;
824
825 devinfo->waitdone = true;
826 wake_up_interruptible(&devinfo->wait);
827 devinfo->sync_urb_status = urb->status;
828}
829
830static bool brcmf_usb_dl_cmd(struct brcmf_usbdev_info *devinfo, u8 cmd,
831 void *buffer, int buflen)
832{
833 int ret = 0;
834 char *tmpbuf;
835 u16 size;
836
837 if ((!devinfo) || (devinfo->ctl_urb == NULL))
838 return false;
839
840 tmpbuf = kmalloc(buflen, GFP_ATOMIC);
841 if (!tmpbuf)
842 return false;
843
844 size = buflen;
845 devinfo->ctl_urb->transfer_buffer_length = size;
846
847 devinfo->ctl_read.wLength = cpu_to_le16p(&size);
848 devinfo->ctl_read.bRequestType = USB_DIR_IN | USB_TYPE_VENDOR |
849 USB_RECIP_INTERFACE;
850 devinfo->ctl_read.bRequest = cmd;
851
852 usb_fill_control_urb(devinfo->ctl_urb,
853 devinfo->usbdev,
854 usb_rcvctrlpipe(devinfo->usbdev, 0),
855 (unsigned char *) &devinfo->ctl_read,
856 (void *) tmpbuf, size,
857 (usb_complete_t)brcmf_usb_sync_complete, devinfo);
858
859 ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
860 if (ret < 0) {
861 brcmf_dbg(ERROR, "usb_submit_urb failed %d\n", ret);
862 kfree(tmpbuf);
863 return false;
864 }
865
866 ret = brcmf_usb_sync_wait(devinfo, BRCMF_USB_SYNC_TIMEOUT);
867 memcpy(buffer, tmpbuf, buflen);
868 kfree(tmpbuf);
869
870 return (ret == 0);
871}
872
873static bool
874brcmf_usb_dlneeded(struct brcmf_usbdev_info *devinfo)
875{
876 struct bootrom_id_le id;
877 u32 chipid, chiprev;
878
879 brcmf_dbg(TRACE, "enter\n");
880
881 if (devinfo == NULL)
882 return false;
883
884 /* Check if firmware downloaded already by querying runtime ID */
885 id.chip = cpu_to_le32(0xDEAD);
886 brcmf_usb_dl_cmd(devinfo, DL_GETVER, &id,
887 sizeof(struct bootrom_id_le));
888
889 chipid = le32_to_cpu(id.chip);
890 chiprev = le32_to_cpu(id.chiprev);
891
892 if ((chipid & 0x4300) == 0x4300)
893 brcmf_dbg(INFO, "chip %x rev 0x%x\n", chipid, chiprev);
894 else
895 brcmf_dbg(INFO, "chip %d rev 0x%x\n", chipid, chiprev);
896 if (chipid == BRCMF_POSTBOOT_ID) {
897 brcmf_dbg(INFO, "firmware already downloaded\n");
898 brcmf_usb_dl_cmd(devinfo, DL_RESETCFG, &id,
899 sizeof(struct bootrom_id_le));
900 return false;
901 } else {
ac94f196
AS		 902 devinfo->bus_pub.devid = chipid;
903 devinfo->bus_pub.chiprev = chiprev;
71bb244b
AS		 904 }
905 return true;
906}
907
908static int
909brcmf_usb_resetcfg(struct brcmf_usbdev_info *devinfo)
910{
911 struct bootrom_id_le id;
912 u16 wait = 0, wait_time;
913
914 brcmf_dbg(TRACE, "enter\n");
915
916 if (devinfo == NULL)
917 return -EINVAL;
918
919 /* Give dongle chance to boot */
920 wait_time = BRCMF_USB_DLIMAGE_SPINWAIT;
921 while (wait < BRCMF_USB_DLIMAGE_LIMIT) {
922 mdelay(wait_time);
923 wait += wait_time;
924 id.chip = cpu_to_le32(0xDEAD); /* Get the ID */
925 brcmf_usb_dl_cmd(devinfo, DL_GETVER, &id,
926 sizeof(struct bootrom_id_le));
927 if (id.chip == cpu_to_le32(BRCMF_POSTBOOT_ID))
928 break;
929 }
930
931 if (id.chip == cpu_to_le32(BRCMF_POSTBOOT_ID)) {
932 brcmf_dbg(INFO, "download done %d ms postboot chip 0x%x/rev 0x%x\n",
933 wait, le32_to_cpu(id.chip), le32_to_cpu(id.chiprev));
934
935 brcmf_usb_dl_cmd(devinfo, DL_RESETCFG, &id,
936 sizeof(struct bootrom_id_le));
937
938 /* XXX this wait may not be necessary */
939 mdelay(BRCMF_USB_RESETCFG_SPINWAIT);
940 return 0;
941 } else {
942 brcmf_dbg(ERROR, "Cannot talk to Dongle. Firmware is not UP, %d ms\n",
943 wait);
944 return -EINVAL;
945 }
946}
947
948
949static int
950brcmf_usb_dl_send_bulk(struct brcmf_usbdev_info *devinfo, void *buffer, int len)
951{
952 int ret;
953
954 if ((devinfo == NULL) || (devinfo->bulk_urb == NULL))
955 return -EINVAL;
956
957 /* Prepare the URB */
958 usb_fill_bulk_urb(devinfo->bulk_urb, devinfo->usbdev,
959 devinfo->tx_pipe, buffer, len,
960 (usb_complete_t)brcmf_usb_sync_complete, devinfo);
961
962 devinfo->bulk_urb->transfer_flags |= URB_ZERO_PACKET;
963
964 ret = usb_submit_urb(devinfo->bulk_urb, GFP_ATOMIC);
965 if (ret) {
966 brcmf_dbg(ERROR, "usb_submit_urb failed %d\n", ret);
967 return ret;
968 }
969 ret = brcmf_usb_sync_wait(devinfo, BRCMF_USB_SYNC_TIMEOUT);
970 return ret;
971}
972
973static int
974brcmf_usb_dl_writeimage(struct brcmf_usbdev_info *devinfo, u8 *fw, int fwlen)
975{
976 unsigned int sendlen, sent, dllen;
977 char *bulkchunk = NULL, *dlpos;
978 struct rdl_state_le state;
979 u32 rdlstate, rdlbytes;
980 int err = 0;
981 brcmf_dbg(TRACE, "fw %p, len %d\n", fw, fwlen);
982
983 bulkchunk = kmalloc(RDL_CHUNK, GFP_ATOMIC);
984 if (bulkchunk == NULL) {
985 err = -ENOMEM;
986 goto fail;
987 }
988
989 /* 1) Prepare USB boot loader for runtime image */
990 brcmf_usb_dl_cmd(devinfo, DL_START, &state,
991 sizeof(struct rdl_state_le));
992
993 rdlstate = le32_to_cpu(state.state);
994 rdlbytes = le32_to_cpu(state.bytes);
995
996 /* 2) Check we are in the Waiting state */
997 if (rdlstate != DL_WAITING) {
998 brcmf_dbg(ERROR, "Failed to DL_START\n");
999 err = -EINVAL;
1000 goto fail;
1001 }
1002 sent = 0;
1003 dlpos = fw;
1004 dllen = fwlen;
1005
1006 /* Get chip id and rev */
1007 while (rdlbytes != dllen) {
1008 /* Wait until the usb device reports it received all
1009 * the bytes we sent */
1010 if ((rdlbytes == sent) && (rdlbytes != dllen)) {
1011 if ((dllen-sent) < RDL_CHUNK)
1012 sendlen = dllen-sent;
1013 else
1014 sendlen = RDL_CHUNK;
1015
1016 /* simply avoid having to send a ZLP by ensuring we
1017 * never have an even
1018 * multiple of 64
1019 */
1020 if (!(sendlen % 64))
1021 sendlen -= 4;
1022
1023 /* send data */
1024 memcpy(bulkchunk, dlpos, sendlen);
1025 if (brcmf_usb_dl_send_bulk(devinfo, bulkchunk,
1026 sendlen)) {
1027 brcmf_dbg(ERROR, "send_bulk failed\n");
1028 err = -EINVAL;
1029 goto fail;
1030 }
1031
1032 dlpos += sendlen;
1033 sent += sendlen;
1034 }
1035 if (!brcmf_usb_dl_cmd(devinfo, DL_GETSTATE, &state,
1036 sizeof(struct rdl_state_le))) {
1037 brcmf_dbg(ERROR, "DL_GETSTATE Failed xxxx\n");
1038 err = -EINVAL;
1039 goto fail;
1040 }
1041
1042 rdlstate = le32_to_cpu(state.state);
1043 rdlbytes = le32_to_cpu(state.bytes);
1044
1045 /* restart if an error is reported */
1046 if (rdlstate == DL_BAD_HDR || rdlstate == DL_BAD_CRC) {
1047 brcmf_dbg(ERROR, "Bad Hdr or Bad CRC state %d\n",
1048 rdlstate);
1049 err = -EINVAL;
1050 goto fail;
1051 }
1052 }
1053
1054fail:
1055 kfree(bulkchunk);
1056 brcmf_dbg(TRACE, "err=%d\n", err);
1057 return err;
1058}
1059
1060static int brcmf_usb_dlstart(struct brcmf_usbdev_info *devinfo, u8 *fw, int len)
1061{
1062 int err;
1063
1064 brcmf_dbg(TRACE, "enter\n");
1065
1066 if (devinfo == NULL)
1067 return -EINVAL;
1068
ac94f196 1069 if (devinfo->bus_pub.devid == 0xDEAD)
71bb244b
AS		 1070 return -EINVAL;
1071
1072 err = brcmf_usb_dl_writeimage(devinfo, fw, len);
1073 if (err == 0)
1074 devinfo->bus_pub.state = BCMFMAC_USB_STATE_DL_DONE;
1075 else
1076 devinfo->bus_pub.state = BCMFMAC_USB_STATE_DL_PENDING;
1077 brcmf_dbg(TRACE, "exit: err=%d\n", err);
1078
1079 return err;
1080}
1081
1082static int brcmf_usb_dlrun(struct brcmf_usbdev_info *devinfo)
1083{
1084 struct rdl_state_le state;
1085
1086 brcmf_dbg(TRACE, "enter\n");
1087 if (!devinfo)
1088 return -EINVAL;
1089
ac94f196 1090 if (devinfo->bus_pub.devid == 0xDEAD)
71bb244b
AS		 1091 return -EINVAL;
1092
1093 /* Check we are runnable */
1094 brcmf_usb_dl_cmd(devinfo, DL_GETSTATE, &state,
1095 sizeof(struct rdl_state_le));
1096
1097 /* Start the image */
1098 if (state.state == cpu_to_le32(DL_RUNNABLE)) {
1099 if (!brcmf_usb_dl_cmd(devinfo, DL_GO, &state,
1100 sizeof(struct rdl_state_le)))
1101 return -ENODEV;
1102 if (brcmf_usb_resetcfg(devinfo))
1103 return -ENODEV;
1104 /* The Dongle may go for re-enumeration. */
1105 } else {
1106 brcmf_dbg(ERROR, "Dongle not runnable\n");
1107 return -EINVAL;
1108 }
1109 brcmf_dbg(TRACE, "exit\n");
1110 return 0;
1111}
1112
1113static bool brcmf_usb_chip_support(int chipid, int chiprev)
1114{
1115 switch(chipid) {
1116 case 43235:
1117 case 43236:
1118 case 43238:
1119 return (chiprev == 3);
1212d370
HM		 1120 case 43242:
1121 return true;
71bb244b
AS		 1122 default:
1123 break;
1124 }
1125 return false;
1126}
1127
1128static int
1129brcmf_usb_fw_download(struct brcmf_usbdev_info *devinfo)
1130{
ac94f196 1131 int devid, chiprev;
71bb244b
AS		 1132 int err;
1133
1134 brcmf_dbg(TRACE, "enter\n");
1135 if (devinfo == NULL)
1136 return -ENODEV;
1137
ac94f196
AS		 1138 devid = devinfo->bus_pub.devid;
1139 chiprev = devinfo->bus_pub.chiprev;
71bb244b 1140
ac94f196 1141 if (!brcmf_usb_chip_support(devid, chiprev)) {
71bb244b 1142 brcmf_dbg(ERROR, "unsupported chip %d rev %d\n",
ac94f196 1143 devid, chiprev);
71bb244b
AS		 1144 return -EINVAL;
1145 }
1146
1147 if (!devinfo->image) {
1148 brcmf_dbg(ERROR, "No firmware!\n");
1149 return -ENOENT;
1150 }
1151
1152 err = brcmf_usb_dlstart(devinfo,
1153 devinfo->image, devinfo->image_len);
1154 if (err == 0)
1155 err = brcmf_usb_dlrun(devinfo);
1156 return err;
1157}
1158
1159
1160static void brcmf_usb_detach(const struct brcmf_usbdev *bus_pub)
1161{
1162 struct brcmf_usbdev_info *devinfo =
1163 (struct brcmf_usbdev_info *)bus_pub;
1164
1165 brcmf_dbg(TRACE, "devinfo %p\n", devinfo);
1166
1167 /* store the image globally */
1168 g_image.data = devinfo->image;
1169 g_image.len = devinfo->image_len;
1170
1171 /* free the URBS */
1172 brcmf_usb_free_q(&devinfo->rx_freeq, false);
1173 brcmf_usb_free_q(&devinfo->tx_freeq, false);
1174
1175 usb_free_urb(devinfo->intr_urb);
1176 usb_free_urb(devinfo->ctl_urb);
1177 usb_free_urb(devinfo->bulk_urb);
1178
1179 kfree(devinfo->tx_reqs);
1180 kfree(devinfo->rx_reqs);
1181 kfree(devinfo);
1182}
1183
1184#define TRX_MAGIC 0x30524448 /* "HDR0" */
1185#define TRX_VERSION 1 /* Version 1 */
1186#define TRX_MAX_LEN 0x3B0000 /* Max length */
1187#define TRX_NO_HEADER 1 /* Do not write TRX header */
1188#define TRX_MAX_OFFSET 3 /* Max number of individual files */
1189#define TRX_UNCOMP_IMAGE 0x20 /* Trx contains uncompressed image */
1190
1191struct trx_header_le {
1192 __le32 magic; /* "HDR0" */
1193 __le32 len; /* Length of file including header */
1194 __le32 crc32; /* CRC from flag_version to end of file */
1195 __le32 flag_version; /* 0:15 flags, 16:31 version */
1196 __le32 offsets[TRX_MAX_OFFSET]; /* Offsets of partitions from start of
1197 * header */
1198};
1199
1200static int check_file(const u8 *headers)
1201{
1202 struct trx_header_le *trx;
1203 int actual_len = -1;
1204
1205 /* Extract trx header */
1206 trx = (struct trx_header_le *) headers;
1207 if (trx->magic != cpu_to_le32(TRX_MAGIC))
1208 return -1;
1209
1210 headers += sizeof(struct trx_header_le);
1211
1212 if (le32_to_cpu(trx->flag_version) & TRX_UNCOMP_IMAGE) {
1213 actual_len = le32_to_cpu(trx->offsets[TRX_OFFSETS_DLFWLEN_IDX]);
1214 return actual_len + sizeof(struct trx_header_le);
1215 }
1216 return -1;
1217}
1218
1219static int brcmf_usb_get_fw(struct brcmf_usbdev_info *devinfo)
1220{
1221 s8 *fwname;
1222 const struct firmware *fw;
1223 int err;
1224
1225 devinfo->image = g_image.data;
1226 devinfo->image_len = g_image.len;
1227
1228 /*
1229 * if we have an image we can leave here.
1230 */
1231 if (devinfo->image)
1232 return 0;
1233
1212d370
HM		 1234 switch (devinfo->bus_pub.devid) {
1235 case 43235:
1236 case 43236:
1237 case 43238:
1238 fwname = BRCMF_USB_43236_FW_NAME;
1239 break;
1240 case 43242:
1241 fwname = BRCMF_USB_43242_FW_NAME;
1242 break;
1243 default:
1244 return -EINVAL;
1245 break;
1246 }
71bb244b
AS		 1247
1248 err = request_firmware(&fw, fwname, devinfo->dev);
1249 if (!fw) {
1250 brcmf_dbg(ERROR, "fail to request firmware %s\n", fwname);
1251 return err;
1252 }
1253 if (check_file(fw->data) < 0) {
1254 brcmf_dbg(ERROR, "invalid firmware %s\n", fwname);
1255 return -EINVAL;
1256 }
1257
edb9bc9a 1258 devinfo->image = vmalloc(fw->size); /* plus nvram */
71bb244b
AS		 1259 if (!devinfo->image)
1260 return -ENOMEM;
1261
1262 memcpy(devinfo->image, fw->data, fw->size);
1263 devinfo->image_len = fw->size;
1264
1265 release_firmware(fw);
1266 return 0;
1267}
1268
1269
1270static
1271struct brcmf_usbdev *brcmf_usb_attach(int nrxq, int ntxq, struct device *dev)
1272{
1273 struct brcmf_usbdev_info *devinfo;
1274
1275 devinfo = kzalloc(sizeof(struct brcmf_usbdev_info), GFP_ATOMIC);
1276 if (devinfo == NULL)
1277 return NULL;
1278
1279 devinfo->bus_pub.nrxq = nrxq;
1280 devinfo->rx_low_watermark = nrxq / 2;
1281 devinfo->bus_pub.devinfo = devinfo;
1282 devinfo->bus_pub.ntxq = ntxq;
1283
1284 /* flow control when too many tx urbs posted */
1285 devinfo->tx_low_watermark = ntxq / 4;
1286 devinfo->tx_high_watermark = devinfo->tx_low_watermark * 3;
1287 devinfo->dev = dev;
1288 devinfo->usbdev = usbdev_probe_info.usb;
1289 devinfo->tx_pipe = usbdev_probe_info.tx_pipe;
1290 devinfo->rx_pipe = usbdev_probe_info.rx_pipe;
1291 devinfo->rx_pipe2 = usbdev_probe_info.rx_pipe2;
1292 devinfo->intr_pipe = usbdev_probe_info.intr_pipe;
1293
1294 devinfo->interval = usbdev_probe_info.interval;
1295 devinfo->intr_size = usbdev_probe_info.intr_size;
1296
1297 memcpy(&devinfo->probe_info, &usbdev_probe_info,
1298 sizeof(struct brcmf_usb_probe_info));
1299 devinfo->bus_pub.bus_mtu = BRCMF_USB_MAX_PKT_SIZE;
1300
1301 /* Initialize other structure content */
1302 init_waitqueue_head(&devinfo->ioctl_resp_wait);
1303
1304 /* Initialize the spinlocks */
1305 spin_lock_init(&devinfo->qlock);
1306
1307 INIT_LIST_HEAD(&devinfo->rx_freeq);
1308 INIT_LIST_HEAD(&devinfo->rx_postq);
1309
1310 INIT_LIST_HEAD(&devinfo->tx_freeq);
1311 INIT_LIST_HEAD(&devinfo->tx_postq);
1312
1313 devinfo->rx_reqs = brcmf_usbdev_qinit(&devinfo->rx_freeq, nrxq);
1314 if (!devinfo->rx_reqs)
1315 goto error;
1316
1317 devinfo->tx_reqs = brcmf_usbdev_qinit(&devinfo->tx_freeq, ntxq);
1318 if (!devinfo->tx_reqs)
1319 goto error;
1320
1321 devinfo->intr_urb = usb_alloc_urb(0, GFP_ATOMIC);
1322 if (!devinfo->intr_urb) {
1323 brcmf_dbg(ERROR, "usb_alloc_urb (intr) failed\n");
1324 goto error;
1325 }
1326 devinfo->ctl_urb = usb_alloc_urb(0, GFP_ATOMIC);
1327 if (!devinfo->ctl_urb) {
1328 brcmf_dbg(ERROR, "usb_alloc_urb (ctl) failed\n");
1329 goto error;
1330 }
1331 devinfo->rxctl_deferrespok = 0;
1332
1333 devinfo->bulk_urb = usb_alloc_urb(0, GFP_ATOMIC);
1334 if (!devinfo->bulk_urb) {
1335 brcmf_dbg(ERROR, "usb_alloc_urb (bulk) failed\n");
1336 goto error;
1337 }
1338
1339 init_waitqueue_head(&devinfo->wait);
1340 if (!brcmf_usb_dlneeded(devinfo))
1341 return &devinfo->bus_pub;
1342
1343 brcmf_dbg(TRACE, "start fw downloading\n");
1344 if (brcmf_usb_get_fw(devinfo))
1345 goto error;
1346
1347 if (brcmf_usb_fw_download(devinfo))
1348 goto error;
1349
1350 return &devinfo->bus_pub;
1351
1352error:
1353 brcmf_dbg(ERROR, "failed!\n");
1354 brcmf_usb_detach(&devinfo->bus_pub);
1355 return NULL;
1356}
1357
1358static int brcmf_usb_probe_cb(struct device *dev, const char *desc,
1359 u32 bustype, u32 hdrlen)
1360{
1361 struct brcmf_bus *bus = NULL;
1362 struct brcmf_usbdev *bus_pub = NULL;
1363 int ret;
1364
1365
1366 bus_pub = brcmf_usb_attach(BRCMF_USB_NRXQ, BRCMF_USB_NTXQ, dev);
1367 if (!bus_pub) {
1368 ret = -ENODEV;
1369 goto fail;
1370 }
1371
1372 bus = kzalloc(sizeof(struct brcmf_bus), GFP_ATOMIC);
1373 if (!bus) {
1374 ret = -ENOMEM;
1375 goto fail;
1376 }
1377
1378 bus_pub->bus = bus;
1379 bus->brcmf_bus_txdata = brcmf_usb_tx;
1380 bus->brcmf_bus_init = brcmf_usb_up;
1381 bus->brcmf_bus_stop = brcmf_usb_down;
1382 bus->brcmf_bus_txctl = brcmf_usb_tx_ctlpkt;
1383 bus->brcmf_bus_rxctl = brcmf_usb_rx_ctlpkt;
1384 bus->type = bustype;
1385 bus->bus_priv.usb = bus_pub;
1386 dev_set_drvdata(dev, bus);
1387
1388 /* Attach to the common driver interface */
1389 ret = brcmf_attach(hdrlen, dev);
1390 if (ret) {
1391 brcmf_dbg(ERROR, "dhd_attach failed\n");
1392 goto fail;
1393 }
1394
1395 ret = brcmf_bus_start(dev);
1396 if (ret == -ENOLINK) {
1397 brcmf_dbg(ERROR, "dongle is not responding\n");
1398 brcmf_detach(dev);
1399 goto fail;
1400 }
1401
71bb244b
AS		 1402 return 0;
1403fail:
1404 /* Release resources in reverse order */
1405 if (bus_pub)
1406 brcmf_usb_detach(bus_pub);
1407 kfree(bus);
1408 return ret;
1409}
1410
1411static void
1412brcmf_usb_disconnect_cb(struct brcmf_usbdev *bus_pub)
1413{
1414 if (!bus_pub)
1415 return;
1416 brcmf_dbg(TRACE, "enter: bus_pub %p\n", bus_pub);
1417
1418 brcmf_detach(bus_pub->devinfo->dev);
1419 kfree(bus_pub->bus);
1420 brcmf_usb_detach(bus_pub);
1421
1422}
1423
1424static int
1425brcmf_usb_probe(struct usb_interface *intf, const struct usb_device_id *id)
1426{
1427 int ep;
1428 struct usb_endpoint_descriptor *endpoint;
1429 int ret = 0;
1430 struct usb_device *usb = interface_to_usbdev(intf);
1431 int num_of_eps;
1432 u8 endpoint_num;
1433
1434 brcmf_dbg(TRACE, "enter\n");
1435
1436 usbdev_probe_info.usb = usb;
1437 usbdev_probe_info.intf = intf;
1438
1439 if (id != NULL) {
1440 usbdev_probe_info.vid = id->idVendor;
1441 usbdev_probe_info.pid = id->idProduct;
1442 }
1443
1444 usb_set_intfdata(intf, &usbdev_probe_info);
1445
1446 /* Check that the device supports only one configuration */
1447 if (usb->descriptor.bNumConfigurations != 1) {
1448 ret = -1;
1449 goto fail;
1450 }
1451
1452 if (usb->descriptor.bDeviceClass != USB_CLASS_VENDOR_SPEC) {
1453 ret = -1;
1454 goto fail;
1455 }
1456
1457 /*
1458 * Only the BDC interface configuration is supported:
1459 * Device class: USB_CLASS_VENDOR_SPEC
1460 * if0 class: USB_CLASS_VENDOR_SPEC
1461 * if0/ep0: control
1462 * if0/ep1: bulk in
1463 * if0/ep2: bulk out (ok if swapped with bulk in)
1464 */
1465 if (CONFIGDESC(usb)->bNumInterfaces != 1) {
1466 ret = -1;
1467 goto fail;
1468 }
1469
1470 /* Check interface */
1471 if (IFDESC(usb, CONTROL_IF).bInterfaceClass != USB_CLASS_VENDOR_SPEC ||
1472 IFDESC(usb, CONTROL_IF).bInterfaceSubClass != 2 ||
1473 IFDESC(usb, CONTROL_IF).bInterfaceProtocol != 0xff) {
1474 brcmf_dbg(ERROR, "invalid control interface: class %d, subclass %d, proto %d\n",
1475 IFDESC(usb, CONTROL_IF).bInterfaceClass,
1476 IFDESC(usb, CONTROL_IF).bInterfaceSubClass,
1477 IFDESC(usb, CONTROL_IF).bInterfaceProtocol);
1478 ret = -1;
1479 goto fail;
1480 }
1481
1482 /* Check control endpoint */
1483 endpoint = &IFEPDESC(usb, CONTROL_IF, 0);
1484 if ((endpoint->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK)
1485 != USB_ENDPOINT_XFER_INT) {
1486 brcmf_dbg(ERROR, "invalid control endpoint %d\n",
1487 endpoint->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK);
1488 ret = -1;
1489 goto fail;
1490 }
1491
1492 endpoint_num = endpoint->bEndpointAddress & USB_ENDPOINT_NUMBER_MASK;
1493 usbdev_probe_info.intr_pipe = usb_rcvintpipe(usb, endpoint_num);
1494
1495 usbdev_probe_info.rx_pipe = 0;
1496 usbdev_probe_info.rx_pipe2 = 0;
1497 usbdev_probe_info.tx_pipe = 0;
1498 num_of_eps = IFDESC(usb, BULK_IF).bNumEndpoints - 1;
1499
1500 /* Check data endpoints and get pipes */
1501 for (ep = 1; ep <= num_of_eps; ep++) {
1502 endpoint = &IFEPDESC(usb, BULK_IF, ep);
1503 if ((endpoint->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK) !=
1504 USB_ENDPOINT_XFER_BULK) {
1505 brcmf_dbg(ERROR, "invalid data endpoint %d\n", ep);
1506 ret = -1;
1507 goto fail;
1508 }
1509
1510 endpoint_num = endpoint->bEndpointAddress &
1511 USB_ENDPOINT_NUMBER_MASK;
1512 if ((endpoint->bEndpointAddress & USB_ENDPOINT_DIR_MASK)
1513 == USB_DIR_IN) {
1514 if (!usbdev_probe_info.rx_pipe) {
1515 usbdev_probe_info.rx_pipe =
1516 usb_rcvbulkpipe(usb, endpoint_num);
1517 } else {
1518 usbdev_probe_info.rx_pipe2 =
1519 usb_rcvbulkpipe(usb, endpoint_num);
1520 }
1521 } else {
1522 usbdev_probe_info.tx_pipe =
1523 usb_sndbulkpipe(usb, endpoint_num);
1524 }
1525 }
1526
1527 /* Allocate interrupt URB and data buffer */
1528 /* RNDIS says 8-byte intr, our old drivers used 4-byte */
1529 if (IFEPDESC(usb, CONTROL_IF, 0).wMaxPacketSize == cpu_to_le16(16))
1530 usbdev_probe_info.intr_size = 8;
1531 else
1532 usbdev_probe_info.intr_size = 4;
1533
1534 usbdev_probe_info.interval = IFEPDESC(usb, CONTROL_IF, 0).bInterval;
1535
1536 usbdev_probe_info.device_speed = usb->speed;
1537 if (usb->speed == USB_SPEED_HIGH)
1538 brcmf_dbg(INFO, "Broadcom high speed USB wireless device detected\n");
1539 else
1540 brcmf_dbg(INFO, "Broadcom full speed USB wireless device detected\n");
1541
1542 ret = brcmf_usb_probe_cb(&usb->dev, "", USB_BUS, 0);
1543 if (ret)
1544 goto fail;
1545
1546 /* Success */
1547 return 0;
1548
1549fail:
1550 brcmf_dbg(ERROR, "failed with errno %d\n", ret);
1551 usb_set_intfdata(intf, NULL);
1552 return ret;
1553
1554}
1555
1556static void
1557brcmf_usb_disconnect(struct usb_interface *intf)
1558{
1559 struct usb_device *usb = interface_to_usbdev(intf);
1560
1561 brcmf_dbg(TRACE, "enter\n");
1562 brcmf_usb_disconnect_cb(brcmf_usb_get_buspub(&usb->dev));
1563 usb_set_intfdata(intf, NULL);
1564}
1565
1566/*
1567 * only need to signal the bus being down and update the suspend state.
1568 */
1569static int brcmf_usb_suspend(struct usb_interface *intf, pm_message_t state)
1570{
1571 struct usb_device *usb = interface_to_usbdev(intf);
1572 struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(&usb->dev);
1573
1574 brcmf_dbg(TRACE, "enter\n");
1575 devinfo->bus_pub.state = BCMFMAC_USB_STATE_DOWN;
1576 devinfo->suspend_state = USBOS_SUSPEND_STATE_SUSPENDED;
1577 return 0;
1578}
1579
1580/*
1581 * mark suspend state active and crank up the bus.
1582 */
1583static int brcmf_usb_resume(struct usb_interface *intf)
1584{
1585 struct usb_device *usb = interface_to_usbdev(intf);
1586 struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(&usb->dev);
1587
1588 brcmf_dbg(TRACE, "enter\n");
1589 devinfo->suspend_state = USBOS_SUSPEND_STATE_DEVICE_ACTIVE;
1590 brcmf_bus_start(&usb->dev);
1591 return 0;
1592}
1593
1594#define BRCMF_USB_VENDOR_ID_BROADCOM 0x0a5c
1595#define BRCMF_USB_DEVICE_ID_43236 0xbd17
1212d370 1596#define BRCMF_USB_DEVICE_ID_43242 0xbd1f
71bb244b
AS		 1597#define BRCMF_USB_DEVICE_ID_BCMFW 0x0bdc
1598
1599static struct usb_device_id brcmf_usb_devid_table[] = {
1600 { USB_DEVICE(BRCMF_USB_VENDOR_ID_BROADCOM, BRCMF_USB_DEVICE_ID_43236) },
1212d370 1601 { USB_DEVICE(BRCMF_USB_VENDOR_ID_BROADCOM, BRCMF_USB_DEVICE_ID_43242) },
71bb244b
AS		 1602 /* special entry for device with firmware loaded and running */
1603 { USB_DEVICE(BRCMF_USB_VENDOR_ID_BROADCOM, BRCMF_USB_DEVICE_ID_BCMFW) },
1604 { }
1605};
1606MODULE_DEVICE_TABLE(usb, brcmf_usb_devid_table);
fda82417 1607MODULE_FIRMWARE(BRCMF_USB_43236_FW_NAME);
1212d370 1608MODULE_FIRMWARE(BRCMF_USB_43242_FW_NAME);
71bb244b
AS		 1609
1610/* TODO: suspend and resume entries */
1611static struct usb_driver brcmf_usbdrvr = {
1612 .name = KBUILD_MODNAME,
1613 .probe = brcmf_usb_probe,
1614 .disconnect = brcmf_usb_disconnect,
1615 .id_table = brcmf_usb_devid_table,
1616 .suspend = brcmf_usb_suspend,
1617 .resume = brcmf_usb_resume,
c51fa668 1618 .supports_autosuspend = 1,
e1f12eb6 1619 .disable_hub_initiated_lpm = 1,
71bb244b
AS		 1620};
1621
1622void brcmf_usb_exit(void)
1623{
1624 usb_deregister(&brcmf_usbdrvr);
edb9bc9a 1625 vfree(g_image.data);
71bb244b
AS		 1626 g_image.data = NULL;
1627 g_image.len = 0;
1628}
1629
549040ab 1630void brcmf_usb_init(void)
71bb244b 1631{
549040ab 1632 usb_register(&brcmf_usbdrvr);
71bb244b 1633}
Linux kernel - Deliverables
This page took 0.133833 seconds and 5 git commands to generate.