2 * Copyright (c) 2011 Broadcom Corporation
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
17 #include <linux/init.h>
18 #include <linux/kernel.h>
19 #include <linux/module.h>
20 #include <linux/kthread.h>
21 #include <linux/slab.h>
22 #include <linux/skbuff.h>
23 #include <linux/netdevice.h>
24 #include <linux/spinlock.h>
25 #include <linux/ethtool.h>
26 #include <linux/fcntl.h>
28 #include <linux/uaccess.h>
29 #include <linux/firmware.h>
30 #include <linux/usb.h>
31 #include <linux/vmalloc.h>
32 #include <net/cfg80211.h>
35 #include <brcmu_utils.h>
36 #include <brcmu_wifi.h>
43 #define IOCTL_RESP_TIMEOUT 2000
45 #define BRCMF_USB_SYNC_TIMEOUT 300 /* ms */
46 #define BRCMF_USB_DLIMAGE_SPINWAIT 100 /* in unit of ms */
47 #define BRCMF_USB_DLIMAGE_LIMIT 500 /* spinwait limit (ms) */
49 #define BRCMF_POSTBOOT_ID 0xA123 /* ID to detect if dongle
51 #define BRCMF_USB_RESETCFG_SPINWAIT 1 /* wait after resetcfg (ms) */
53 #define BRCMF_USB_NRXQ 50
54 #define BRCMF_USB_NTXQ 50
56 #define CONFIGDESC(usb) (&((usb)->actconfig)->desc)
57 #define IFPTR(usb, idx) ((usb)->actconfig->interface[(idx)])
58 #define IFALTS(usb, idx) (IFPTR((usb), (idx))->altsetting[0])
59 #define IFDESC(usb, idx) IFALTS((usb), (idx)).desc
60 #define IFEPDESC(usb, idx, ep) (IFALTS((usb), (idx)).endpoint[(ep)]).desc
65 #define BRCMF_USB_CBCTL_WRITE 0
66 #define BRCMF_USB_CBCTL_READ 1
67 #define BRCMF_USB_MAX_PKT_SIZE 1600
69 #define BRCMF_USB_43236_FW_NAME "brcm/brcmfmac43236b.bin"
71 enum usbdev_suspend_state
{
72 USBOS_SUSPEND_STATE_DEVICE_ACTIVE
= 0, /* Device is busy, won't allow
74 USBOS_SUSPEND_STATE_SUSPEND_PENDING
, /* Device is idle, can be
75 * suspended. Wating PM to
78 USBOS_SUSPEND_STATE_SUSPENDED
/* Device suspended */
81 struct brcmf_usb_probe_info
{
83 struct usb_device
*usb
; /* USB device pointer from OS */
84 uint rx_pipe
, tx_pipe
, intr_pipe
, rx_pipe2
;
85 int intr_size
; /* Size of interrupt message */
86 int interval
; /* Interrupt polling interval */
89 enum usb_device_speed device_speed
;
90 enum usbdev_suspend_state suspend_state
;
91 struct usb_interface
*intf
;
93 static struct brcmf_usb_probe_info usbdev_probe_info
;
95 struct brcmf_usb_image
{
99 static struct brcmf_usb_image g_image
= { NULL
, 0 };
101 struct intr_transfer_buf
{
106 struct brcmf_usbdev_info
{
107 struct brcmf_usbdev bus_pub
; /* MUST BE FIRST */
109 struct list_head rx_freeq
;
110 struct list_head rx_postq
;
111 struct list_head tx_freeq
;
112 struct list_head tx_postq
;
113 enum usbdev_suspend_state suspend_state
;
114 uint rx_pipe
, tx_pipe
, intr_pipe
, rx_pipe2
;
117 int rx_low_watermark
;
118 int tx_low_watermark
;
119 int tx_high_watermark
;
124 struct brcmf_usbreq
*tx_reqs
;
125 struct brcmf_usbreq
*rx_reqs
;
127 u8
*image
; /* buffer for combine fw and nvram */
130 wait_queue_head_t wait
;
134 struct usb_device
*usbdev
;
136 enum usb_device_speed device_speed
;
138 int ctl_in_pipe
, ctl_out_pipe
;
139 struct urb
*ctl_urb
; /* URB for control endpoint */
140 struct usb_ctrlrequest ctl_write
;
141 struct usb_ctrlrequest ctl_read
;
142 u32 ctl_urb_actual_length
;
145 wait_queue_head_t ioctl_resp_wait
;
146 wait_queue_head_t ctrl_wait
;
149 bool rxctl_deferrespok
;
151 struct urb
*bulk_urb
; /* used for FW download */
152 struct urb
*intr_urb
; /* URB for interrupt endpoint */
153 int intr_size
; /* Size of interrupt message */
154 int interval
; /* Interrupt polling interval */
155 struct intr_transfer_buf intr
; /* Data buffer for interrupt endpoint */
157 struct brcmf_usb_probe_info probe_info
;
161 static void brcmf_usb_rx_refill(struct brcmf_usbdev_info
*devinfo
,
162 struct brcmf_usbreq
*req
);
164 MODULE_AUTHOR("Broadcom Corporation");
165 MODULE_DESCRIPTION("Broadcom 802.11n wireless LAN fullmac usb driver.");
166 MODULE_SUPPORTED_DEVICE("Broadcom 802.11n WLAN fullmac usb cards");
167 MODULE_LICENSE("Dual BSD/GPL");
169 static struct brcmf_usbdev
*brcmf_usb_get_buspub(struct device
*dev
)
171 struct brcmf_bus
*bus_if
= dev_get_drvdata(dev
);
172 return bus_if
->bus_priv
.usb
;
175 static struct brcmf_usbdev_info
*brcmf_usb_get_businfo(struct device
*dev
)
177 return brcmf_usb_get_buspub(dev
)->devinfo
;
182 brcmf_usb_txflowcontrol(struct brcmf_usbdev_info
*devinfo
, bool onoff
)
184 dhd_txflowcontrol(devinfo
->bus_pub
.netdev
, 0, onoff
);
188 static int brcmf_usb_ioctl_resp_wait(struct brcmf_usbdev_info
*devinfo
,
189 uint
*condition
, bool *pending
)
191 DECLARE_WAITQUEUE(wait
, current
);
192 int timeout
= IOCTL_RESP_TIMEOUT
;
194 /* Convert timeout in millsecond to jiffies */
195 timeout
= msecs_to_jiffies(timeout
);
196 /* Wait until control frame is available */
197 add_wait_queue(&devinfo
->ioctl_resp_wait
, &wait
);
198 set_current_state(TASK_INTERRUPTIBLE
);
201 while (!(*condition
) && (!signal_pending(current
) && timeout
)) {
202 timeout
= schedule_timeout(timeout
);
203 /* Wait until control frame is available */
207 if (signal_pending(current
))
210 set_current_state(TASK_RUNNING
);
211 remove_wait_queue(&devinfo
->ioctl_resp_wait
, &wait
);
216 static int brcmf_usb_ioctl_resp_wake(struct brcmf_usbdev_info
*devinfo
)
218 if (waitqueue_active(&devinfo
->ioctl_resp_wait
))
219 wake_up_interruptible(&devinfo
->ioctl_resp_wait
);
225 brcmf_usb_ctl_complete(struct brcmf_usbdev_info
*devinfo
, int type
, int status
)
228 if (unlikely(devinfo
== NULL
))
231 if (type
== BRCMF_USB_CBCTL_READ
) {
233 devinfo
->bus_pub
.stats
.rx_ctlpkts
++;
235 devinfo
->bus_pub
.stats
.rx_ctlerrs
++;
236 } else if (type
== BRCMF_USB_CBCTL_WRITE
) {
238 devinfo
->bus_pub
.stats
.tx_ctlpkts
++;
240 devinfo
->bus_pub
.stats
.tx_ctlerrs
++;
243 devinfo
->ctl_urb_status
= status
;
244 devinfo
->ctl_completed
= true;
245 brcmf_usb_ioctl_resp_wake(devinfo
);
249 brcmf_usb_ctlread_complete(struct urb
*urb
)
251 struct brcmf_usbdev_info
*devinfo
=
252 (struct brcmf_usbdev_info
*)urb
->context
;
254 devinfo
->ctl_urb_actual_length
= urb
->actual_length
;
255 brcmf_usb_ctl_complete(devinfo
, BRCMF_USB_CBCTL_READ
,
260 brcmf_usb_ctlwrite_complete(struct urb
*urb
)
262 struct brcmf_usbdev_info
*devinfo
=
263 (struct brcmf_usbdev_info
*)urb
->context
;
265 brcmf_usb_ctl_complete(devinfo
, BRCMF_USB_CBCTL_WRITE
,
269 static int brcmf_usb_pnp(struct brcmf_usbdev_info
*devinfo
, uint state
)
275 brcmf_usb_send_ctl(struct brcmf_usbdev_info
*devinfo
, u8
*buf
, int len
)
280 if (devinfo
== NULL
|| buf
== NULL
||
281 len
== 0 || devinfo
->ctl_urb
== NULL
)
284 /* If the USB/HSIC bus in sleep state, wake it up */
285 if (devinfo
->suspend_state
== USBOS_SUSPEND_STATE_SUSPENDED
)
286 if (brcmf_usb_pnp(devinfo
, BCMFMAC_USB_PNP_RESUME
) != 0) {
287 brcmf_dbg(ERROR
, "Could not Resume the bus!\n");
291 devinfo
->activity
= true;
293 devinfo
->ctl_write
.wLength
= cpu_to_le16p(&size
);
294 devinfo
->ctl_urb
->transfer_buffer_length
= size
;
295 devinfo
->ctl_urb_status
= 0;
296 devinfo
->ctl_urb_actual_length
= 0;
298 usb_fill_control_urb(devinfo
->ctl_urb
,
300 devinfo
->ctl_out_pipe
,
301 (unsigned char *) &devinfo
->ctl_write
,
303 (usb_complete_t
)brcmf_usb_ctlwrite_complete
,
306 ret
= usb_submit_urb(devinfo
->ctl_urb
, GFP_ATOMIC
);
308 brcmf_dbg(ERROR
, "usb_submit_urb failed %d\n", ret
);
314 brcmf_usb_recv_ctl(struct brcmf_usbdev_info
*devinfo
, u8
*buf
, int len
)
319 if ((devinfo
== NULL
) || (buf
== NULL
) || (len
== 0)
320 || (devinfo
->ctl_urb
== NULL
))
324 devinfo
->ctl_read
.wLength
= cpu_to_le16p(&size
);
325 devinfo
->ctl_urb
->transfer_buffer_length
= size
;
327 if (devinfo
->rxctl_deferrespok
) {
329 devinfo
->ctl_read
.bRequestType
= USB_DIR_IN
330 | USB_TYPE_VENDOR
| USB_RECIP_INTERFACE
;
331 devinfo
->ctl_read
.bRequest
= DL_DEFER_RESP_OK
;
333 /* full dongle model */
334 devinfo
->ctl_read
.bRequestType
= USB_DIR_IN
335 | USB_TYPE_CLASS
| USB_RECIP_INTERFACE
;
336 devinfo
->ctl_read
.bRequest
= 1;
339 usb_fill_control_urb(devinfo
->ctl_urb
,
341 devinfo
->ctl_in_pipe
,
342 (unsigned char *) &devinfo
->ctl_read
,
344 (usb_complete_t
)brcmf_usb_ctlread_complete
,
347 ret
= usb_submit_urb(devinfo
->ctl_urb
, GFP_ATOMIC
);
349 brcmf_dbg(ERROR
, "usb_submit_urb failed %d\n", ret
);
354 static int brcmf_usb_tx_ctlpkt(struct device
*dev
, u8
*buf
, u32 len
)
359 struct brcmf_usbdev_info
*devinfo
= brcmf_usb_get_businfo(dev
);
361 if (devinfo
->bus_pub
.state
!= BCMFMAC_USB_STATE_UP
) {
362 /* TODO: handle suspend/resume */
366 if (test_and_set_bit(0, &devinfo
->ctl_op
))
369 err
= brcmf_usb_send_ctl(devinfo
, buf
, len
);
371 brcmf_dbg(ERROR
, "fail %d bytes: %d\n", err
, len
);
375 devinfo
->ctl_completed
= false;
376 timeout
= brcmf_usb_ioctl_resp_wait(devinfo
, &devinfo
->ctl_completed
,
378 clear_bit(0, &devinfo
->ctl_op
);
380 brcmf_dbg(ERROR
, "Txctl wait timed out\n");
386 static int brcmf_usb_rx_ctlpkt(struct device
*dev
, u8
*buf
, u32 len
)
391 struct brcmf_usbdev_info
*devinfo
= brcmf_usb_get_businfo(dev
);
393 if (devinfo
->bus_pub
.state
!= BCMFMAC_USB_STATE_UP
) {
394 /* TODO: handle suspend/resume */
397 if (test_and_set_bit(0, &devinfo
->ctl_op
))
400 err
= brcmf_usb_recv_ctl(devinfo
, buf
, len
);
402 brcmf_dbg(ERROR
, "fail %d bytes: %d\n", err
, len
);
405 devinfo
->ctl_completed
= false;
406 timeout
= brcmf_usb_ioctl_resp_wait(devinfo
, &devinfo
->ctl_completed
,
408 err
= devinfo
->ctl_urb_status
;
409 clear_bit(0, &devinfo
->ctl_op
);
411 brcmf_dbg(ERROR
, "rxctl wait timed out\n");
415 return devinfo
->ctl_urb_actual_length
;
420 static struct brcmf_usbreq
*brcmf_usb_deq(struct brcmf_usbdev_info
*devinfo
,
424 struct brcmf_usbreq
*req
;
425 spin_lock_irqsave(&devinfo
->qlock
, flags
);
427 spin_unlock_irqrestore(&devinfo
->qlock
, flags
);
430 req
= list_entry(q
->next
, struct brcmf_usbreq
, list
);
431 list_del_init(q
->next
);
432 spin_unlock_irqrestore(&devinfo
->qlock
, flags
);
437 static void brcmf_usb_enq(struct brcmf_usbdev_info
*devinfo
,
438 struct list_head
*q
, struct brcmf_usbreq
*req
)
441 spin_lock_irqsave(&devinfo
->qlock
, flags
);
442 list_add_tail(&req
->list
, q
);
443 spin_unlock_irqrestore(&devinfo
->qlock
, flags
);
446 static struct brcmf_usbreq
*
447 brcmf_usbdev_qinit(struct list_head
*q
, int qsize
)
450 struct brcmf_usbreq
*req
, *reqs
;
452 reqs
= kzalloc(sizeof(struct brcmf_usbreq
) * qsize
, GFP_ATOMIC
);
454 brcmf_dbg(ERROR
, "fail to allocate memory!\n");
459 for (i
= 0; i
< qsize
; i
++) {
460 req
->urb
= usb_alloc_urb(0, GFP_ATOMIC
);
464 INIT_LIST_HEAD(&req
->list
);
465 list_add_tail(&req
->list
, q
);
470 brcmf_dbg(ERROR
, "fail!\n");
471 while (!list_empty(q
)) {
472 req
= list_entry(q
->next
, struct brcmf_usbreq
, list
);
474 usb_free_urb(req
->urb
);
481 static void brcmf_usb_free_q(struct list_head
*q
, bool pending
)
483 struct brcmf_usbreq
*req
, *next
;
485 list_for_each_entry_safe(req
, next
, q
, list
) {
487 brcmf_dbg(ERROR
, "bad req\n");
492 usb_kill_urb(req
->urb
);
494 usb_free_urb(req
->urb
);
495 list_del_init(&req
->list
);
500 static void brcmf_usb_del_fromq(struct brcmf_usbdev_info
*devinfo
,
501 struct brcmf_usbreq
*req
)
505 spin_lock_irqsave(&devinfo
->qlock
, flags
);
506 list_del_init(&req
->list
);
507 spin_unlock_irqrestore(&devinfo
->qlock
, flags
);
511 static void brcmf_usb_tx_complete(struct urb
*urb
)
513 struct brcmf_usbreq
*req
= (struct brcmf_usbreq
*)urb
->context
;
514 struct brcmf_usbdev_info
*devinfo
= req
->devinfo
;
516 brcmf_usb_del_fromq(devinfo
, req
);
517 if (urb
->status
== 0)
518 devinfo
->bus_pub
.bus
->dstats
.tx_packets
++;
520 devinfo
->bus_pub
.bus
->dstats
.tx_errors
++;
522 brcmu_pkt_buf_free_skb(req
->skb
);
524 brcmf_usb_enq(devinfo
, &devinfo
->tx_freeq
, req
);
528 static void brcmf_usb_rx_complete(struct urb
*urb
)
530 struct brcmf_usbreq
*req
= (struct brcmf_usbreq
*)urb
->context
;
531 struct brcmf_usbdev_info
*devinfo
= req
->devinfo
;
535 brcmf_usb_del_fromq(devinfo
, req
);
539 if (urb
->status
== 0) {
540 devinfo
->bus_pub
.bus
->dstats
.rx_packets
++;
542 devinfo
->bus_pub
.bus
->dstats
.rx_errors
++;
543 brcmu_pkt_buf_free_skb(skb
);
544 brcmf_usb_enq(devinfo
, &devinfo
->rx_freeq
, req
);
548 if (devinfo
->bus_pub
.state
== BCMFMAC_USB_STATE_UP
) {
549 skb_put(skb
, urb
->actual_length
);
550 if (brcmf_proto_hdrpull(devinfo
->dev
, &ifidx
, skb
) != 0) {
551 brcmf_dbg(ERROR
, "rx protocol error\n");
552 brcmu_pkt_buf_free_skb(skb
);
553 devinfo
->bus_pub
.bus
->dstats
.rx_errors
++;
555 brcmf_rx_packet(devinfo
->dev
, ifidx
, skb
);
556 brcmf_usb_rx_refill(devinfo
, req
);
559 brcmu_pkt_buf_free_skb(skb
);
565 static void brcmf_usb_rx_refill(struct brcmf_usbdev_info
*devinfo
,
566 struct brcmf_usbreq
*req
)
571 if (!req
|| !devinfo
)
574 skb
= dev_alloc_skb(devinfo
->bus_pub
.bus_mtu
);
576 brcmf_usb_enq(devinfo
, &devinfo
->rx_freeq
, req
);
581 usb_fill_bulk_urb(req
->urb
, devinfo
->usbdev
, devinfo
->rx_pipe
,
582 skb
->data
, skb_tailroom(skb
), brcmf_usb_rx_complete
,
584 req
->devinfo
= devinfo
;
586 ret
= usb_submit_urb(req
->urb
, GFP_ATOMIC
);
588 brcmf_usb_enq(devinfo
, &devinfo
->rx_postq
, req
);
590 brcmu_pkt_buf_free_skb(req
->skb
);
592 brcmf_usb_enq(devinfo
, &devinfo
->rx_freeq
, req
);
597 static void brcmf_usb_rx_fill_all(struct brcmf_usbdev_info
*devinfo
)
599 struct brcmf_usbreq
*req
;
601 if (devinfo
->bus_pub
.state
!= BCMFMAC_USB_STATE_UP
) {
602 brcmf_dbg(ERROR
, "bus is not up\n");
605 while ((req
= brcmf_usb_deq(devinfo
, &devinfo
->rx_freeq
)) != NULL
)
606 brcmf_usb_rx_refill(devinfo
, req
);
610 brcmf_usb_state_change(struct brcmf_usbdev_info
*devinfo
, int state
)
612 struct brcmf_bus
*bcmf_bus
= devinfo
->bus_pub
.bus
;
616 if (devinfo
->bus_pub
.state
== state
)
619 old_state
= devinfo
->bus_pub
.state
;
620 brcmf_dbg(TRACE
, "dbus state change from %d to to %d\n",
623 /* Don't update state if it's PnP firmware re-download */
624 if (state
!= BCMFMAC_USB_STATE_PNP_FWDL
) /* TODO */
625 devinfo
->bus_pub
.state
= state
;
627 if ((old_state
== BCMFMAC_USB_STATE_SLEEP
)
628 && (state
== BCMFMAC_USB_STATE_UP
)) {
629 brcmf_usb_rx_fill_all(devinfo
);
632 /* update state of upper layer */
633 if (state
== BCMFMAC_USB_STATE_DOWN
) {
634 brcmf_dbg(INFO
, "DBUS is down\n");
635 bcmf_bus
->state
= BRCMF_BUS_DOWN
;
637 brcmf_dbg(INFO
, "DBUS current state=%d\n", state
);
642 brcmf_usb_intr_complete(struct urb
*urb
)
644 struct brcmf_usbdev_info
*devinfo
=
645 (struct brcmf_usbdev_info
*)urb
->context
;
651 if (unlikely(urb
->status
)) {
652 if (devinfo
->suspend_state
==
653 USBOS_SUSPEND_STATE_SUSPEND_PENDING
)
656 if ((urb
->status
== -ENOENT
&& (!killed
))
657 || urb
->status
== -ESHUTDOWN
||
658 urb
->status
== -ENODEV
) {
659 brcmf_usb_state_change(devinfo
, BCMFMAC_USB_STATE_DOWN
);
663 if (devinfo
->bus_pub
.state
== BCMFMAC_USB_STATE_DOWN
) {
664 brcmf_dbg(ERROR
, "intr cb when DBUS down, ignoring\n");
668 if (devinfo
->bus_pub
.state
== BCMFMAC_USB_STATE_UP
)
669 usb_submit_urb(devinfo
->intr_urb
, GFP_ATOMIC
);
672 static int brcmf_usb_tx(struct device
*dev
, struct sk_buff
*skb
)
674 struct brcmf_usbdev_info
*devinfo
= brcmf_usb_get_businfo(dev
);
675 struct brcmf_usbreq
*req
;
678 if (devinfo
->bus_pub
.state
!= BCMFMAC_USB_STATE_UP
) {
679 /* TODO: handle suspend/resume */
683 req
= brcmf_usb_deq(devinfo
, &devinfo
->tx_freeq
);
685 brcmf_dbg(ERROR
, "no req to send\n");
689 brcmf_dbg(ERROR
, "no urb for req %p\n", req
);
694 req
->devinfo
= devinfo
;
695 usb_fill_bulk_urb(req
->urb
, devinfo
->usbdev
, devinfo
->tx_pipe
,
696 skb
->data
, skb
->len
, brcmf_usb_tx_complete
, req
);
697 req
->urb
->transfer_flags
|= URB_ZERO_PACKET
;
698 ret
= usb_submit_urb(req
->urb
, GFP_ATOMIC
);
700 brcmf_usb_enq(devinfo
, &devinfo
->tx_postq
, req
);
703 brcmf_usb_enq(devinfo
, &devinfo
->tx_freeq
, req
);
710 static int brcmf_usb_up(struct device
*dev
)
712 struct brcmf_usbdev_info
*devinfo
= brcmf_usb_get_businfo(dev
);
715 if (devinfo
->bus_pub
.state
== BCMFMAC_USB_STATE_UP
)
718 /* If the USB/HSIC bus in sleep state, wake it up */
719 if (devinfo
->suspend_state
== USBOS_SUSPEND_STATE_SUSPENDED
) {
720 if (brcmf_usb_pnp(devinfo
, BCMFMAC_USB_PNP_RESUME
) != 0) {
721 brcmf_dbg(ERROR
, "Could not Resume the bus!\n");
725 devinfo
->activity
= true;
727 /* Success, indicate devinfo is fully up */
728 brcmf_usb_state_change(devinfo
, BCMFMAC_USB_STATE_UP
);
730 if (devinfo
->intr_urb
) {
733 usb_fill_int_urb(devinfo
->intr_urb
, devinfo
->usbdev
,
737 (usb_complete_t
)brcmf_usb_intr_complete
,
741 ret
= usb_submit_urb(devinfo
->intr_urb
, GFP_ATOMIC
);
743 brcmf_dbg(ERROR
, "USB_SUBMIT_URB failed with status %d\n",
749 if (devinfo
->ctl_urb
) {
750 devinfo
->ctl_in_pipe
= usb_rcvctrlpipe(devinfo
->usbdev
, 0);
751 devinfo
->ctl_out_pipe
= usb_sndctrlpipe(devinfo
->usbdev
, 0);
753 ifnum
= IFDESC(devinfo
->usbdev
, CONTROL_IF
).bInterfaceNumber
;
756 devinfo
->ctl_write
.bRequestType
=
757 USB_DIR_OUT
| USB_TYPE_CLASS
| USB_RECIP_INTERFACE
;
758 devinfo
->ctl_write
.bRequest
= 0;
759 devinfo
->ctl_write
.wValue
= cpu_to_le16(0);
760 devinfo
->ctl_write
.wIndex
= cpu_to_le16p(&ifnum
);
763 devinfo
->ctl_read
.bRequestType
=
764 USB_DIR_IN
| USB_TYPE_CLASS
| USB_RECIP_INTERFACE
;
765 devinfo
->ctl_read
.bRequest
= 1;
766 devinfo
->ctl_read
.wValue
= cpu_to_le16(0);
767 devinfo
->ctl_read
.wIndex
= cpu_to_le16p(&ifnum
);
769 brcmf_usb_rx_fill_all(devinfo
);
773 static void brcmf_usb_down(struct device
*dev
)
775 struct brcmf_usbdev_info
*devinfo
= brcmf_usb_get_businfo(dev
);
780 brcmf_dbg(TRACE
, "enter\n");
781 if (devinfo
->bus_pub
.state
== BCMFMAC_USB_STATE_DOWN
)
784 brcmf_usb_state_change(devinfo
, BCMFMAC_USB_STATE_DOWN
);
785 if (devinfo
->intr_urb
)
786 usb_kill_urb(devinfo
->intr_urb
);
788 if (devinfo
->ctl_urb
)
789 usb_kill_urb(devinfo
->ctl_urb
);
791 if (devinfo
->bulk_urb
)
792 usb_kill_urb(devinfo
->bulk_urb
);
793 brcmf_usb_free_q(&devinfo
->tx_postq
, true);
795 brcmf_usb_free_q(&devinfo
->rx_postq
, true);
799 brcmf_usb_sync_wait(struct brcmf_usbdev_info
*devinfo
, u16 time
)
805 ret
= wait_event_interruptible_timeout(devinfo
->wait
,
806 devinfo
->waitdone
== true, (ms
* HZ
/ 1000));
808 if ((devinfo
->waitdone
== false) || (devinfo
->sync_urb_status
)) {
809 brcmf_dbg(ERROR
, "timeout(%d) or urb err=%d\n",
810 ret
, devinfo
->sync_urb_status
);
813 devinfo
->waitdone
= false;
818 brcmf_usb_sync_complete(struct urb
*urb
)
820 struct brcmf_usbdev_info
*devinfo
=
821 (struct brcmf_usbdev_info
*)urb
->context
;
823 devinfo
->waitdone
= true;
824 wake_up_interruptible(&devinfo
->wait
);
825 devinfo
->sync_urb_status
= urb
->status
;
828 static bool brcmf_usb_dl_cmd(struct brcmf_usbdev_info
*devinfo
, u8 cmd
,
829 void *buffer
, int buflen
)
835 if ((!devinfo
) || (devinfo
->ctl_urb
== NULL
))
838 tmpbuf
= kmalloc(buflen
, GFP_ATOMIC
);
843 devinfo
->ctl_urb
->transfer_buffer_length
= size
;
845 devinfo
->ctl_read
.wLength
= cpu_to_le16p(&size
);
846 devinfo
->ctl_read
.bRequestType
= USB_DIR_IN
| USB_TYPE_VENDOR
|
848 devinfo
->ctl_read
.bRequest
= cmd
;
850 usb_fill_control_urb(devinfo
->ctl_urb
,
852 usb_rcvctrlpipe(devinfo
->usbdev
, 0),
853 (unsigned char *) &devinfo
->ctl_read
,
854 (void *) tmpbuf
, size
,
855 (usb_complete_t
)brcmf_usb_sync_complete
, devinfo
);
857 ret
= usb_submit_urb(devinfo
->ctl_urb
, GFP_ATOMIC
);
859 brcmf_dbg(ERROR
, "usb_submit_urb failed %d\n", ret
);
864 ret
= brcmf_usb_sync_wait(devinfo
, BRCMF_USB_SYNC_TIMEOUT
);
865 memcpy(buffer
, tmpbuf
, buflen
);
872 brcmf_usb_dlneeded(struct brcmf_usbdev_info
*devinfo
)
874 struct bootrom_id_le id
;
877 brcmf_dbg(TRACE
, "enter\n");
882 /* Check if firmware downloaded already by querying runtime ID */
883 id
.chip
= cpu_to_le32(0xDEAD);
884 brcmf_usb_dl_cmd(devinfo
, DL_GETVER
, &id
,
885 sizeof(struct bootrom_id_le
));
887 chipid
= le32_to_cpu(id
.chip
);
888 chiprev
= le32_to_cpu(id
.chiprev
);
890 if ((chipid
& 0x4300) == 0x4300)
891 brcmf_dbg(INFO
, "chip %x rev 0x%x\n", chipid
, chiprev
);
893 brcmf_dbg(INFO
, "chip %d rev 0x%x\n", chipid
, chiprev
);
894 if (chipid
== BRCMF_POSTBOOT_ID
) {
895 brcmf_dbg(INFO
, "firmware already downloaded\n");
896 brcmf_usb_dl_cmd(devinfo
, DL_RESETCFG
, &id
,
897 sizeof(struct bootrom_id_le
));
900 devinfo
->bus_pub
.devid
= chipid
;
901 devinfo
->bus_pub
.chiprev
= chiprev
;
907 brcmf_usb_resetcfg(struct brcmf_usbdev_info
*devinfo
)
909 struct bootrom_id_le id
;
910 u16 wait
= 0, wait_time
;
912 brcmf_dbg(TRACE
, "enter\n");
917 /* Give dongle chance to boot */
918 wait_time
= BRCMF_USB_DLIMAGE_SPINWAIT
;
919 while (wait
< BRCMF_USB_DLIMAGE_LIMIT
) {
922 id
.chip
= cpu_to_le32(0xDEAD); /* Get the ID */
923 brcmf_usb_dl_cmd(devinfo
, DL_GETVER
, &id
,
924 sizeof(struct bootrom_id_le
));
925 if (id
.chip
== cpu_to_le32(BRCMF_POSTBOOT_ID
))
929 if (id
.chip
== cpu_to_le32(BRCMF_POSTBOOT_ID
)) {
930 brcmf_dbg(INFO
, "download done %d ms postboot chip 0x%x/rev 0x%x\n",
931 wait
, le32_to_cpu(id
.chip
), le32_to_cpu(id
.chiprev
));
933 brcmf_usb_dl_cmd(devinfo
, DL_RESETCFG
, &id
,
934 sizeof(struct bootrom_id_le
));
936 /* XXX this wait may not be necessary */
937 mdelay(BRCMF_USB_RESETCFG_SPINWAIT
);
940 brcmf_dbg(ERROR
, "Cannot talk to Dongle. Firmware is not UP, %d ms\n",
948 brcmf_usb_dl_send_bulk(struct brcmf_usbdev_info
*devinfo
, void *buffer
, int len
)
952 if ((devinfo
== NULL
) || (devinfo
->bulk_urb
== NULL
))
955 /* Prepare the URB */
956 usb_fill_bulk_urb(devinfo
->bulk_urb
, devinfo
->usbdev
,
957 devinfo
->tx_pipe
, buffer
, len
,
958 (usb_complete_t
)brcmf_usb_sync_complete
, devinfo
);
960 devinfo
->bulk_urb
->transfer_flags
|= URB_ZERO_PACKET
;
962 ret
= usb_submit_urb(devinfo
->bulk_urb
, GFP_ATOMIC
);
964 brcmf_dbg(ERROR
, "usb_submit_urb failed %d\n", ret
);
967 ret
= brcmf_usb_sync_wait(devinfo
, BRCMF_USB_SYNC_TIMEOUT
);
972 brcmf_usb_dl_writeimage(struct brcmf_usbdev_info
*devinfo
, u8
*fw
, int fwlen
)
974 unsigned int sendlen
, sent
, dllen
;
975 char *bulkchunk
= NULL
, *dlpos
;
976 struct rdl_state_le state
;
977 u32 rdlstate
, rdlbytes
;
979 brcmf_dbg(TRACE
, "fw %p, len %d\n", fw
, fwlen
);
981 bulkchunk
= kmalloc(RDL_CHUNK
, GFP_ATOMIC
);
982 if (bulkchunk
== NULL
) {
987 /* 1) Prepare USB boot loader for runtime image */
988 brcmf_usb_dl_cmd(devinfo
, DL_START
, &state
,
989 sizeof(struct rdl_state_le
));
991 rdlstate
= le32_to_cpu(state
.state
);
992 rdlbytes
= le32_to_cpu(state
.bytes
);
994 /* 2) Check we are in the Waiting state */
995 if (rdlstate
!= DL_WAITING
) {
996 brcmf_dbg(ERROR
, "Failed to DL_START\n");
1004 /* Get chip id and rev */
1005 while (rdlbytes
!= dllen
) {
1006 /* Wait until the usb device reports it received all
1007 * the bytes we sent */
1008 if ((rdlbytes
== sent
) && (rdlbytes
!= dllen
)) {
1009 if ((dllen
-sent
) < RDL_CHUNK
)
1010 sendlen
= dllen
-sent
;
1012 sendlen
= RDL_CHUNK
;
1014 /* simply avoid having to send a ZLP by ensuring we
1015 * never have an even
1018 if (!(sendlen
% 64))
1022 memcpy(bulkchunk
, dlpos
, sendlen
);
1023 if (brcmf_usb_dl_send_bulk(devinfo
, bulkchunk
,
1025 brcmf_dbg(ERROR
, "send_bulk failed\n");
1033 if (!brcmf_usb_dl_cmd(devinfo
, DL_GETSTATE
, &state
,
1034 sizeof(struct rdl_state_le
))) {
1035 brcmf_dbg(ERROR
, "DL_GETSTATE Failed xxxx\n");
1040 rdlstate
= le32_to_cpu(state
.state
);
1041 rdlbytes
= le32_to_cpu(state
.bytes
);
1043 /* restart if an error is reported */
1044 if (rdlstate
== DL_BAD_HDR
|| rdlstate
== DL_BAD_CRC
) {
1045 brcmf_dbg(ERROR
, "Bad Hdr or Bad CRC state %d\n",
1054 brcmf_dbg(TRACE
, "err=%d\n", err
);
1058 static int brcmf_usb_dlstart(struct brcmf_usbdev_info
*devinfo
, u8
*fw
, int len
)
1062 brcmf_dbg(TRACE
, "enter\n");
1064 if (devinfo
== NULL
)
1067 if (devinfo
->bus_pub
.devid
== 0xDEAD)
1070 err
= brcmf_usb_dl_writeimage(devinfo
, fw
, len
);
1072 devinfo
->bus_pub
.state
= BCMFMAC_USB_STATE_DL_DONE
;
1074 devinfo
->bus_pub
.state
= BCMFMAC_USB_STATE_DL_PENDING
;
1075 brcmf_dbg(TRACE
, "exit: err=%d\n", err
);
1080 static int brcmf_usb_dlrun(struct brcmf_usbdev_info
*devinfo
)
1082 struct rdl_state_le state
;
1084 brcmf_dbg(TRACE
, "enter\n");
1088 if (devinfo
->bus_pub
.devid
== 0xDEAD)
1091 /* Check we are runnable */
1092 brcmf_usb_dl_cmd(devinfo
, DL_GETSTATE
, &state
,
1093 sizeof(struct rdl_state_le
));
1095 /* Start the image */
1096 if (state
.state
== cpu_to_le32(DL_RUNNABLE
)) {
1097 if (!brcmf_usb_dl_cmd(devinfo
, DL_GO
, &state
,
1098 sizeof(struct rdl_state_le
)))
1100 if (brcmf_usb_resetcfg(devinfo
))
1102 /* The Dongle may go for re-enumeration. */
1104 brcmf_dbg(ERROR
, "Dongle not runnable\n");
1107 brcmf_dbg(TRACE
, "exit\n");
1111 static bool brcmf_usb_chip_support(int chipid
, int chiprev
)
1117 return (chiprev
== 3);
1125 brcmf_usb_fw_download(struct brcmf_usbdev_info
*devinfo
)
1130 brcmf_dbg(TRACE
, "enter\n");
1131 if (devinfo
== NULL
)
1134 devid
= devinfo
->bus_pub
.devid
;
1135 chiprev
= devinfo
->bus_pub
.chiprev
;
1137 if (!brcmf_usb_chip_support(devid
, chiprev
)) {
1138 brcmf_dbg(ERROR
, "unsupported chip %d rev %d\n",
1143 if (!devinfo
->image
) {
1144 brcmf_dbg(ERROR
, "No firmware!\n");
1148 err
= brcmf_usb_dlstart(devinfo
,
1149 devinfo
->image
, devinfo
->image_len
);
1151 err
= brcmf_usb_dlrun(devinfo
);
1156 static void brcmf_usb_detach(const struct brcmf_usbdev
*bus_pub
)
1158 struct brcmf_usbdev_info
*devinfo
=
1159 (struct brcmf_usbdev_info
*)bus_pub
;
1161 brcmf_dbg(TRACE
, "devinfo %p\n", devinfo
);
1163 /* store the image globally */
1164 g_image
.data
= devinfo
->image
;
1165 g_image
.len
= devinfo
->image_len
;
1168 brcmf_usb_free_q(&devinfo
->rx_freeq
, false);
1169 brcmf_usb_free_q(&devinfo
->tx_freeq
, false);
1171 usb_free_urb(devinfo
->intr_urb
);
1172 usb_free_urb(devinfo
->ctl_urb
);
1173 usb_free_urb(devinfo
->bulk_urb
);
1175 kfree(devinfo
->tx_reqs
);
1176 kfree(devinfo
->rx_reqs
);
1180 #define TRX_MAGIC 0x30524448 /* "HDR0" */
1181 #define TRX_VERSION 1 /* Version 1 */
1182 #define TRX_MAX_LEN 0x3B0000 /* Max length */
1183 #define TRX_NO_HEADER 1 /* Do not write TRX header */
1184 #define TRX_MAX_OFFSET 3 /* Max number of individual files */
1185 #define TRX_UNCOMP_IMAGE 0x20 /* Trx contains uncompressed image */
1187 struct trx_header_le
{
1188 __le32 magic
; /* "HDR0" */
1189 __le32 len
; /* Length of file including header */
1190 __le32 crc32
; /* CRC from flag_version to end of file */
1191 __le32 flag_version
; /* 0:15 flags, 16:31 version */
1192 __le32 offsets
[TRX_MAX_OFFSET
]; /* Offsets of partitions from start of
1196 static int check_file(const u8
*headers
)
1198 struct trx_header_le
*trx
;
1199 int actual_len
= -1;
1201 /* Extract trx header */
1202 trx
= (struct trx_header_le
*) headers
;
1203 if (trx
->magic
!= cpu_to_le32(TRX_MAGIC
))
1206 headers
+= sizeof(struct trx_header_le
);
1208 if (le32_to_cpu(trx
->flag_version
) & TRX_UNCOMP_IMAGE
) {
1209 actual_len
= le32_to_cpu(trx
->offsets
[TRX_OFFSETS_DLFWLEN_IDX
]);
1210 return actual_len
+ sizeof(struct trx_header_le
);
1215 static int brcmf_usb_get_fw(struct brcmf_usbdev_info
*devinfo
)
1218 const struct firmware
*fw
;
1221 devinfo
->image
= g_image
.data
;
1222 devinfo
->image_len
= g_image
.len
;
1225 * if we have an image we can leave here.
1230 fwname
= BRCMF_USB_43236_FW_NAME
;
1232 err
= request_firmware(&fw
, fwname
, devinfo
->dev
);
1234 brcmf_dbg(ERROR
, "fail to request firmware %s\n", fwname
);
1237 if (check_file(fw
->data
) < 0) {
1238 brcmf_dbg(ERROR
, "invalid firmware %s\n", fwname
);
1242 devinfo
->image
= vmalloc(fw
->size
); /* plus nvram */
1243 if (!devinfo
->image
)
1246 memcpy(devinfo
->image
, fw
->data
, fw
->size
);
1247 devinfo
->image_len
= fw
->size
;
1249 release_firmware(fw
);
1255 struct brcmf_usbdev
*brcmf_usb_attach(int nrxq
, int ntxq
, struct device
*dev
)
1257 struct brcmf_usbdev_info
*devinfo
;
1259 devinfo
= kzalloc(sizeof(struct brcmf_usbdev_info
), GFP_ATOMIC
);
1260 if (devinfo
== NULL
)
1263 devinfo
->bus_pub
.nrxq
= nrxq
;
1264 devinfo
->rx_low_watermark
= nrxq
/ 2;
1265 devinfo
->bus_pub
.devinfo
= devinfo
;
1266 devinfo
->bus_pub
.ntxq
= ntxq
;
1268 /* flow control when too many tx urbs posted */
1269 devinfo
->tx_low_watermark
= ntxq
/ 4;
1270 devinfo
->tx_high_watermark
= devinfo
->tx_low_watermark
* 3;
1272 devinfo
->usbdev
= usbdev_probe_info
.usb
;
1273 devinfo
->tx_pipe
= usbdev_probe_info
.tx_pipe
;
1274 devinfo
->rx_pipe
= usbdev_probe_info
.rx_pipe
;
1275 devinfo
->rx_pipe2
= usbdev_probe_info
.rx_pipe2
;
1276 devinfo
->intr_pipe
= usbdev_probe_info
.intr_pipe
;
1278 devinfo
->interval
= usbdev_probe_info
.interval
;
1279 devinfo
->intr_size
= usbdev_probe_info
.intr_size
;
1281 memcpy(&devinfo
->probe_info
, &usbdev_probe_info
,
1282 sizeof(struct brcmf_usb_probe_info
));
1283 devinfo
->bus_pub
.bus_mtu
= BRCMF_USB_MAX_PKT_SIZE
;
1285 /* Initialize other structure content */
1286 init_waitqueue_head(&devinfo
->ioctl_resp_wait
);
1288 /* Initialize the spinlocks */
1289 spin_lock_init(&devinfo
->qlock
);
1291 INIT_LIST_HEAD(&devinfo
->rx_freeq
);
1292 INIT_LIST_HEAD(&devinfo
->rx_postq
);
1294 INIT_LIST_HEAD(&devinfo
->tx_freeq
);
1295 INIT_LIST_HEAD(&devinfo
->tx_postq
);
1297 devinfo
->rx_reqs
= brcmf_usbdev_qinit(&devinfo
->rx_freeq
, nrxq
);
1298 if (!devinfo
->rx_reqs
)
1301 devinfo
->tx_reqs
= brcmf_usbdev_qinit(&devinfo
->tx_freeq
, ntxq
);
1302 if (!devinfo
->tx_reqs
)
1305 devinfo
->intr_urb
= usb_alloc_urb(0, GFP_ATOMIC
);
1306 if (!devinfo
->intr_urb
) {
1307 brcmf_dbg(ERROR
, "usb_alloc_urb (intr) failed\n");
1310 devinfo
->ctl_urb
= usb_alloc_urb(0, GFP_ATOMIC
);
1311 if (!devinfo
->ctl_urb
) {
1312 brcmf_dbg(ERROR
, "usb_alloc_urb (ctl) failed\n");
1315 devinfo
->rxctl_deferrespok
= 0;
1317 devinfo
->bulk_urb
= usb_alloc_urb(0, GFP_ATOMIC
);
1318 if (!devinfo
->bulk_urb
) {
1319 brcmf_dbg(ERROR
, "usb_alloc_urb (bulk) failed\n");
1323 init_waitqueue_head(&devinfo
->wait
);
1324 if (!brcmf_usb_dlneeded(devinfo
))
1325 return &devinfo
->bus_pub
;
1327 brcmf_dbg(TRACE
, "start fw downloading\n");
1328 if (brcmf_usb_get_fw(devinfo
))
1331 if (brcmf_usb_fw_download(devinfo
))
1334 return &devinfo
->bus_pub
;
1337 brcmf_dbg(ERROR
, "failed!\n");
1338 brcmf_usb_detach(&devinfo
->bus_pub
);
1342 static int brcmf_usb_probe_cb(struct device
*dev
, const char *desc
,
1343 u32 bustype
, u32 hdrlen
)
1345 struct brcmf_bus
*bus
= NULL
;
1346 struct brcmf_usbdev
*bus_pub
= NULL
;
1350 bus_pub
= brcmf_usb_attach(BRCMF_USB_NRXQ
, BRCMF_USB_NTXQ
, dev
);
1356 bus
= kzalloc(sizeof(struct brcmf_bus
), GFP_ATOMIC
);
1363 bus
->brcmf_bus_txdata
= brcmf_usb_tx
;
1364 bus
->brcmf_bus_init
= brcmf_usb_up
;
1365 bus
->brcmf_bus_stop
= brcmf_usb_down
;
1366 bus
->brcmf_bus_txctl
= brcmf_usb_tx_ctlpkt
;
1367 bus
->brcmf_bus_rxctl
= brcmf_usb_rx_ctlpkt
;
1368 bus
->type
= bustype
;
1369 bus
->bus_priv
.usb
= bus_pub
;
1370 dev_set_drvdata(dev
, bus
);
1372 /* Attach to the common driver interface */
1373 ret
= brcmf_attach(hdrlen
, dev
);
1375 brcmf_dbg(ERROR
, "dhd_attach failed\n");
1379 ret
= brcmf_bus_start(dev
);
1380 if (ret
== -ENOLINK
) {
1381 brcmf_dbg(ERROR
, "dongle is not responding\n");
1388 /* Release resources in reverse order */
1390 brcmf_usb_detach(bus_pub
);
1396 brcmf_usb_disconnect_cb(struct brcmf_usbdev
*bus_pub
)
1400 brcmf_dbg(TRACE
, "enter: bus_pub %p\n", bus_pub
);
1402 brcmf_detach(bus_pub
->devinfo
->dev
);
1403 kfree(bus_pub
->bus
);
1404 brcmf_usb_detach(bus_pub
);
1409 brcmf_usb_probe(struct usb_interface
*intf
, const struct usb_device_id
*id
)
1412 struct usb_endpoint_descriptor
*endpoint
;
1414 struct usb_device
*usb
= interface_to_usbdev(intf
);
1418 brcmf_dbg(TRACE
, "enter\n");
1420 usbdev_probe_info
.usb
= usb
;
1421 usbdev_probe_info
.intf
= intf
;
1424 usbdev_probe_info
.vid
= id
->idVendor
;
1425 usbdev_probe_info
.pid
= id
->idProduct
;
1428 usb_set_intfdata(intf
, &usbdev_probe_info
);
1430 /* Check that the device supports only one configuration */
1431 if (usb
->descriptor
.bNumConfigurations
!= 1) {
1436 if (usb
->descriptor
.bDeviceClass
!= USB_CLASS_VENDOR_SPEC
) {
1442 * Only the BDC interface configuration is supported:
1443 * Device class: USB_CLASS_VENDOR_SPEC
1444 * if0 class: USB_CLASS_VENDOR_SPEC
1447 * if0/ep2: bulk out (ok if swapped with bulk in)
1449 if (CONFIGDESC(usb
)->bNumInterfaces
!= 1) {
1454 /* Check interface */
1455 if (IFDESC(usb
, CONTROL_IF
).bInterfaceClass
!= USB_CLASS_VENDOR_SPEC
||
1456 IFDESC(usb
, CONTROL_IF
).bInterfaceSubClass
!= 2 ||
1457 IFDESC(usb
, CONTROL_IF
).bInterfaceProtocol
!= 0xff) {
1458 brcmf_dbg(ERROR
, "invalid control interface: class %d, subclass %d, proto %d\n",
1459 IFDESC(usb
, CONTROL_IF
).bInterfaceClass
,
1460 IFDESC(usb
, CONTROL_IF
).bInterfaceSubClass
,
1461 IFDESC(usb
, CONTROL_IF
).bInterfaceProtocol
);
1466 /* Check control endpoint */
1467 endpoint
= &IFEPDESC(usb
, CONTROL_IF
, 0);
1468 if ((endpoint
->bmAttributes
& USB_ENDPOINT_XFERTYPE_MASK
)
1469 != USB_ENDPOINT_XFER_INT
) {
1470 brcmf_dbg(ERROR
, "invalid control endpoint %d\n",
1471 endpoint
->bmAttributes
& USB_ENDPOINT_XFERTYPE_MASK
);
1476 endpoint_num
= endpoint
->bEndpointAddress
& USB_ENDPOINT_NUMBER_MASK
;
1477 usbdev_probe_info
.intr_pipe
= usb_rcvintpipe(usb
, endpoint_num
);
1479 usbdev_probe_info
.rx_pipe
= 0;
1480 usbdev_probe_info
.rx_pipe2
= 0;
1481 usbdev_probe_info
.tx_pipe
= 0;
1482 num_of_eps
= IFDESC(usb
, BULK_IF
).bNumEndpoints
- 1;
1484 /* Check data endpoints and get pipes */
1485 for (ep
= 1; ep
<= num_of_eps
; ep
++) {
1486 endpoint
= &IFEPDESC(usb
, BULK_IF
, ep
);
1487 if ((endpoint
->bmAttributes
& USB_ENDPOINT_XFERTYPE_MASK
) !=
1488 USB_ENDPOINT_XFER_BULK
) {
1489 brcmf_dbg(ERROR
, "invalid data endpoint %d\n", ep
);
1494 endpoint_num
= endpoint
->bEndpointAddress
&
1495 USB_ENDPOINT_NUMBER_MASK
;
1496 if ((endpoint
->bEndpointAddress
& USB_ENDPOINT_DIR_MASK
)
1498 if (!usbdev_probe_info
.rx_pipe
) {
1499 usbdev_probe_info
.rx_pipe
=
1500 usb_rcvbulkpipe(usb
, endpoint_num
);
1502 usbdev_probe_info
.rx_pipe2
=
1503 usb_rcvbulkpipe(usb
, endpoint_num
);
1506 usbdev_probe_info
.tx_pipe
=
1507 usb_sndbulkpipe(usb
, endpoint_num
);
1511 /* Allocate interrupt URB and data buffer */
1512 /* RNDIS says 8-byte intr, our old drivers used 4-byte */
1513 if (IFEPDESC(usb
, CONTROL_IF
, 0).wMaxPacketSize
== cpu_to_le16(16))
1514 usbdev_probe_info
.intr_size
= 8;
1516 usbdev_probe_info
.intr_size
= 4;
1518 usbdev_probe_info
.interval
= IFEPDESC(usb
, CONTROL_IF
, 0).bInterval
;
1520 usbdev_probe_info
.device_speed
= usb
->speed
;
1521 if (usb
->speed
== USB_SPEED_HIGH
)
1522 brcmf_dbg(INFO
, "Broadcom high speed USB wireless device detected\n");
1524 brcmf_dbg(INFO
, "Broadcom full speed USB wireless device detected\n");
1526 ret
= brcmf_usb_probe_cb(&usb
->dev
, "", USB_BUS
, 0);
1534 brcmf_dbg(ERROR
, "failed with errno %d\n", ret
);
1535 usb_set_intfdata(intf
, NULL
);
1541 brcmf_usb_disconnect(struct usb_interface
*intf
)
1543 struct usb_device
*usb
= interface_to_usbdev(intf
);
1545 brcmf_dbg(TRACE
, "enter\n");
1546 brcmf_usb_disconnect_cb(brcmf_usb_get_buspub(&usb
->dev
));
1547 usb_set_intfdata(intf
, NULL
);
1551 * only need to signal the bus being down and update the suspend state.
1553 static int brcmf_usb_suspend(struct usb_interface
*intf
, pm_message_t state
)
1555 struct usb_device
*usb
= interface_to_usbdev(intf
);
1556 struct brcmf_usbdev_info
*devinfo
= brcmf_usb_get_businfo(&usb
->dev
);
1558 brcmf_dbg(TRACE
, "enter\n");
1559 devinfo
->bus_pub
.state
= BCMFMAC_USB_STATE_DOWN
;
1560 devinfo
->suspend_state
= USBOS_SUSPEND_STATE_SUSPENDED
;
1565 * mark suspend state active and crank up the bus.
1567 static int brcmf_usb_resume(struct usb_interface
*intf
)
1569 struct usb_device
*usb
= interface_to_usbdev(intf
);
1570 struct brcmf_usbdev_info
*devinfo
= brcmf_usb_get_businfo(&usb
->dev
);
1572 brcmf_dbg(TRACE
, "enter\n");
1573 devinfo
->suspend_state
= USBOS_SUSPEND_STATE_DEVICE_ACTIVE
;
1574 brcmf_bus_start(&usb
->dev
);
1578 #define BRCMF_USB_VENDOR_ID_BROADCOM 0x0a5c
1579 #define BRCMF_USB_DEVICE_ID_43236 0xbd17
1580 #define BRCMF_USB_DEVICE_ID_BCMFW 0x0bdc
1582 static struct usb_device_id brcmf_usb_devid_table
[] = {
1583 { USB_DEVICE(BRCMF_USB_VENDOR_ID_BROADCOM
, BRCMF_USB_DEVICE_ID_43236
) },
1584 /* special entry for device with firmware loaded and running */
1585 { USB_DEVICE(BRCMF_USB_VENDOR_ID_BROADCOM
, BRCMF_USB_DEVICE_ID_BCMFW
) },
1588 MODULE_DEVICE_TABLE(usb
, brcmf_usb_devid_table
);
1589 MODULE_FIRMWARE(BRCMF_USB_43236_FW_NAME
);
1591 /* TODO: suspend and resume entries */
1592 static struct usb_driver brcmf_usbdrvr
= {
1593 .name
= KBUILD_MODNAME
,
1594 .probe
= brcmf_usb_probe
,
1595 .disconnect
= brcmf_usb_disconnect
,
1596 .id_table
= brcmf_usb_devid_table
,
1597 .suspend
= brcmf_usb_suspend
,
1598 .resume
= brcmf_usb_resume
,
1599 .supports_autosuspend
= 1,
1600 .disable_hub_initiated_lpm
= 1,
1603 void brcmf_usb_exit(void)
1605 usb_deregister(&brcmf_usbdrvr
);
1606 vfree(g_image
.data
);
1607 g_image
.data
= NULL
;
1611 void brcmf_usb_init(void)
1613 usb_register(&brcmf_usbdrvr
);