1 /* src/prism2/driver/hfa384x_usb.c
3 * Functions that talk to the USB variantof the Intersil hfa384x MAC
5 * Copyright (C) 1999 AbsoluteValue Systems, Inc. All Rights Reserved.
6 * --------------------------------------------------------------------
10 * The contents of this file are subject to the Mozilla Public
11 * License Version 1.1 (the "License"); you may not use this file
12 * except in compliance with the License. You may obtain a copy of
13 * the License at http://www.mozilla.org/MPL/
15 * Software distributed under the License is distributed on an "AS
16 * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
17 * implied. See the License for the specific language governing
18 * rights and limitations under the License.
20 * Alternatively, the contents of this file may be used under the
21 * terms of the GNU Public License version 2 (the "GPL"), in which
22 * case the provisions of the GPL are applicable instead of the
23 * above. If you wish to allow the use of your version of this file
24 * only under the terms of the GPL and not to allow others to use
25 * your version of this file under the MPL, indicate your decision
26 * by deleting the provisions above and replace them with the notice
27 * and other provisions required by the GPL. If you do not delete
28 * the provisions above, a recipient may use your version of this
29 * file under either the MPL or the GPL.
31 * --------------------------------------------------------------------
33 * Inquiries regarding the linux-wlan Open Source project can be
36 * AbsoluteValue Systems Inc.
38 * http://www.linux-wlan.com
40 * --------------------------------------------------------------------
42 * Portions of the development of this software were funded by
43 * Intersil Corporation as part of PRISM(R) chipset product development.
45 * --------------------------------------------------------------------
47 * This file implements functions that correspond to the prism2/hfa384x
48 * 802.11 MAC hardware and firmware host interface.
50 * The functions can be considered to represent several levels of
51 * abstraction. The lowest level functions are simply C-callable wrappers
52 * around the register accesses. The next higher level represents C-callable
53 * prism2 API functions that match the Intersil documentation as closely
54 * as is reasonable. The next higher layer implements common sequences
55 * of invocations of the API layer (e.g. write to bap, followed by cmd).
58 * hfa384x_drvr_xxx Highest level abstractions provided by the
59 * hfa384x code. They are driver defined wrappers
60 * for common sequences. These functions generally
61 * use the services of the lower levels.
63 * hfa384x_drvr_xxxconfig An example of the drvr level abstraction. These
64 * functions are wrappers for the RID get/set
65 * sequence. They call copy_[to|from]_bap() and
66 * cmd_access(). These functions operate on the
67 * RIDs and buffers without validation. The caller
68 * is responsible for that.
70 * API wrapper functions:
71 * hfa384x_cmd_xxx functions that provide access to the f/w commands.
72 * The function arguments correspond to each command
73 * argument, even command arguments that get packed
74 * into single registers. These functions _just_
75 * issue the command by setting the cmd/parm regs
76 * & reading the status/resp regs. Additional
77 * activities required to fully use a command
78 * (read/write from/to bap, get/set int status etc.)
79 * are implemented separately. Think of these as
80 * C-callable prism2 commands.
82 * Lowest Layer Functions:
83 * hfa384x_docmd_xxx These functions implement the sequence required
84 * to issue any prism2 command. Primarily used by the
85 * hfa384x_cmd_xxx functions.
87 * hfa384x_bap_xxx BAP read/write access functions.
88 * Note: we usually use BAP0 for non-interrupt context
89 * and BAP1 for interrupt context.
91 * hfa384x_dl_xxx download related functions.
93 * Driver State Issues:
94 * Note that there are two pairs of functions that manage the
95 * 'initialized' and 'running' states of the hw/MAC combo. The four
96 * functions are create(), destroy(), start(), and stop(). create()
97 * sets up the data structures required to support the hfa384x_*
98 * functions and destroy() cleans them up. The start() function gets
99 * the actual hardware running and enables the interrupts. The stop()
100 * function shuts the hardware down. The sequence should be:
104 * . Do interesting things w/ the hardware
109 * Note that destroy() can be called without calling stop() first.
110 * --------------------------------------------------------------------
113 #include <linux/module.h>
114 #include <linux/kernel.h>
115 #include <linux/sched.h>
116 #include <linux/types.h>
117 #include <linux/slab.h>
118 #include <linux/wireless.h>
119 #include <linux/netdevice.h>
120 #include <linux/timer.h>
121 #include <linux/io.h>
122 #include <linux/delay.h>
123 #include <asm/byteorder.h>
124 #include <linux/bitops.h>
125 #include <linux/list.h>
126 #include <linux/usb.h>
127 #include <linux/byteorder/generic.h>
129 #define SUBMIT_URB(u, f) usb_submit_urb(u, f)
131 #include "p80211types.h"
132 #include "p80211hdr.h"
133 #include "p80211mgmt.h"
134 #include "p80211conv.h"
135 #include "p80211msg.h"
136 #include "p80211netdev.h"
137 #include "p80211req.h"
138 #include "p80211metadef.h"
139 #include "p80211metastruct.h"
141 #include "prism2mgmt.h"
148 #define THROTTLE_JIFFIES (HZ / 8)
149 #define URB_ASYNC_UNLINK 0
150 #define USB_QUEUE_BULK 0
152 #define ROUNDUP64(a) (((a) + 63) & ~63)
155 static void dbprint_urb(struct urb
*urb
);
159 hfa384x_int_rxmonitor(wlandevice_t
*wlandev
, hfa384x_usb_rxfrm_t
*rxfrm
);
161 static void hfa384x_usb_defer(struct work_struct
*data
);
163 static int submit_rx_urb(hfa384x_t
*hw
, gfp_t flags
);
165 static int submit_tx_urb(hfa384x_t
*hw
, struct urb
*tx_urb
, gfp_t flags
);
167 /*---------------------------------------------------*/
169 static void hfa384x_usbout_callback(struct urb
*urb
);
170 static void hfa384x_ctlxout_callback(struct urb
*urb
);
171 static void hfa384x_usbin_callback(struct urb
*urb
);
174 hfa384x_usbin_txcompl(wlandevice_t
*wlandev
, hfa384x_usbin_t
*usbin
);
176 static void hfa384x_usbin_rx(wlandevice_t
*wlandev
, struct sk_buff
*skb
);
178 static void hfa384x_usbin_info(wlandevice_t
*wlandev
, hfa384x_usbin_t
*usbin
);
180 static void hfa384x_usbin_ctlx(hfa384x_t
*hw
, hfa384x_usbin_t
*usbin
,
183 /*---------------------------------------------------*/
184 /* Functions to support the prism2 usb command queue */
186 static void hfa384x_usbctlxq_run(hfa384x_t
*hw
);
188 static void hfa384x_usbctlx_reqtimerfn(unsigned long data
);
190 static void hfa384x_usbctlx_resptimerfn(unsigned long data
);
192 static void hfa384x_usb_throttlefn(unsigned long data
);
194 static void hfa384x_usbctlx_completion_task(unsigned long data
);
196 static void hfa384x_usbctlx_reaper_task(unsigned long data
);
198 static int hfa384x_usbctlx_submit(hfa384x_t
*hw
, hfa384x_usbctlx_t
*ctlx
);
200 static void unlocked_usbctlx_complete(hfa384x_t
*hw
, hfa384x_usbctlx_t
*ctlx
);
202 struct usbctlx_completor
{
203 int (*complete
)(struct usbctlx_completor
*);
207 hfa384x_usbctlx_complete_sync(hfa384x_t
*hw
,
208 hfa384x_usbctlx_t
*ctlx
,
209 struct usbctlx_completor
*completor
);
212 unlocked_usbctlx_cancel_async(hfa384x_t
*hw
, hfa384x_usbctlx_t
*ctlx
);
214 static void hfa384x_cb_status(hfa384x_t
*hw
, const hfa384x_usbctlx_t
*ctlx
);
216 static void hfa384x_cb_rrid(hfa384x_t
*hw
, const hfa384x_usbctlx_t
*ctlx
);
219 usbctlx_get_status(const hfa384x_usb_cmdresp_t
*cmdresp
,
220 hfa384x_cmdresult_t
*result
);
223 usbctlx_get_rridresult(const hfa384x_usb_rridresp_t
*rridresp
,
224 hfa384x_rridresult_t
*result
);
226 /*---------------------------------------------------*/
227 /* Low level req/resp CTLX formatters and submitters */
229 hfa384x_docmd(hfa384x_t
*hw
,
231 hfa384x_metacmd_t
*cmd
,
232 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
);
235 hfa384x_dorrid(hfa384x_t
*hw
,
239 unsigned int riddatalen
,
240 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
);
243 hfa384x_dowrid(hfa384x_t
*hw
,
247 unsigned int riddatalen
,
248 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
);
251 hfa384x_dormem(hfa384x_t
*hw
,
257 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
);
260 hfa384x_dowmem(hfa384x_t
*hw
,
266 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
);
268 static int hfa384x_isgood_pdrcode(u16 pdrcode
);
270 static inline const char *ctlxstr(CTLX_STATE s
)
272 static const char * const ctlx_str
[] = {
277 "Request packet submitted",
278 "Request packet completed",
279 "Response packet completed"
285 static inline hfa384x_usbctlx_t
*get_active_ctlx(hfa384x_t
*hw
)
287 return list_entry(hw
->ctlxq
.active
.next
, hfa384x_usbctlx_t
, list
);
291 void dbprint_urb(struct urb
*urb
)
293 pr_debug("urb->pipe=0x%08x\n", urb
->pipe
);
294 pr_debug("urb->status=0x%08x\n", urb
->status
);
295 pr_debug("urb->transfer_flags=0x%08x\n", urb
->transfer_flags
);
296 pr_debug("urb->transfer_buffer=0x%08x\n",
297 (unsigned int)urb
->transfer_buffer
);
298 pr_debug("urb->transfer_buffer_length=0x%08x\n",
299 urb
->transfer_buffer_length
);
300 pr_debug("urb->actual_length=0x%08x\n", urb
->actual_length
);
301 pr_debug("urb->bandwidth=0x%08x\n", urb
->bandwidth
);
302 pr_debug("urb->setup_packet(ctl)=0x%08x\n",
303 (unsigned int)urb
->setup_packet
);
304 pr_debug("urb->start_frame(iso/irq)=0x%08x\n", urb
->start_frame
);
305 pr_debug("urb->interval(irq)=0x%08x\n", urb
->interval
);
306 pr_debug("urb->error_count(iso)=0x%08x\n", urb
->error_count
);
307 pr_debug("urb->timeout=0x%08x\n", urb
->timeout
);
308 pr_debug("urb->context=0x%08x\n", (unsigned int)urb
->context
);
309 pr_debug("urb->complete=0x%08x\n", (unsigned int)urb
->complete
);
313 /*----------------------------------------------------------------
316 * Listen for input data on the BULK-IN pipe. If the pipe has
317 * stalled then schedule it to be reset.
321 * memflags memory allocation flags
324 * error code from submission
328 ----------------------------------------------------------------*/
329 static int submit_rx_urb(hfa384x_t
*hw
, gfp_t memflags
)
334 skb
= dev_alloc_skb(sizeof(hfa384x_usbin_t
));
340 /* Post the IN urb */
341 usb_fill_bulk_urb(&hw
->rx_urb
, hw
->usb
,
343 skb
->data
, sizeof(hfa384x_usbin_t
),
344 hfa384x_usbin_callback
, hw
->wlandev
);
346 hw
->rx_urb_skb
= skb
;
349 if (!hw
->wlandev
->hwremoved
&&
350 !test_bit(WORK_RX_HALT
, &hw
->usb_flags
)) {
351 result
= SUBMIT_URB(&hw
->rx_urb
, memflags
);
353 /* Check whether we need to reset the RX pipe */
354 if (result
== -EPIPE
) {
355 netdev_warn(hw
->wlandev
->netdev
,
356 "%s rx pipe stalled: requesting reset\n",
357 hw
->wlandev
->netdev
->name
);
358 if (!test_and_set_bit(WORK_RX_HALT
, &hw
->usb_flags
))
359 schedule_work(&hw
->usb_work
);
363 /* Don't leak memory if anything should go wrong */
366 hw
->rx_urb_skb
= NULL
;
373 /*----------------------------------------------------------------
376 * Prepares and submits the URB of transmitted data. If the
377 * submission fails then it will schedule the output pipe to
382 * tx_urb URB of data for transmission
383 * memflags memory allocation flags
386 * error code from submission
390 ----------------------------------------------------------------*/
391 static int submit_tx_urb(hfa384x_t
*hw
, struct urb
*tx_urb
, gfp_t memflags
)
393 struct net_device
*netdev
= hw
->wlandev
->netdev
;
397 if (netif_running(netdev
)) {
398 if (!hw
->wlandev
->hwremoved
&&
399 !test_bit(WORK_TX_HALT
, &hw
->usb_flags
)) {
400 result
= SUBMIT_URB(tx_urb
, memflags
);
402 /* Test whether we need to reset the TX pipe */
403 if (result
== -EPIPE
) {
404 netdev_warn(hw
->wlandev
->netdev
,
405 "%s tx pipe stalled: requesting reset\n",
407 set_bit(WORK_TX_HALT
, &hw
->usb_flags
);
408 schedule_work(&hw
->usb_work
);
409 } else if (result
== 0) {
410 netif_stop_queue(netdev
);
418 /*----------------------------------------------------------------
421 * There are some things that the USB stack cannot do while
422 * in interrupt context, so we arrange this function to run
423 * in process context.
426 * hw device structure
432 * process (by design)
433 ----------------------------------------------------------------*/
434 static void hfa384x_usb_defer(struct work_struct
*data
)
436 hfa384x_t
*hw
= container_of(data
, struct hfa384x
, usb_work
);
437 struct net_device
*netdev
= hw
->wlandev
->netdev
;
439 /* Don't bother trying to reset anything if the plug
440 * has been pulled ...
442 if (hw
->wlandev
->hwremoved
)
445 /* Reception has stopped: try to reset the input pipe */
446 if (test_bit(WORK_RX_HALT
, &hw
->usb_flags
)) {
449 usb_kill_urb(&hw
->rx_urb
); /* Cannot be holding spinlock! */
451 ret
= usb_clear_halt(hw
->usb
, hw
->endp_in
);
453 netdev_err(hw
->wlandev
->netdev
,
454 "Failed to clear rx pipe for %s: err=%d\n",
457 netdev_info(hw
->wlandev
->netdev
, "%s rx pipe reset complete.\n",
459 clear_bit(WORK_RX_HALT
, &hw
->usb_flags
);
460 set_bit(WORK_RX_RESUME
, &hw
->usb_flags
);
464 /* Resume receiving data back from the device. */
465 if (test_bit(WORK_RX_RESUME
, &hw
->usb_flags
)) {
468 ret
= submit_rx_urb(hw
, GFP_KERNEL
);
470 netdev_err(hw
->wlandev
->netdev
,
471 "Failed to resume %s rx pipe.\n",
474 clear_bit(WORK_RX_RESUME
, &hw
->usb_flags
);
478 /* Transmission has stopped: try to reset the output pipe */
479 if (test_bit(WORK_TX_HALT
, &hw
->usb_flags
)) {
482 usb_kill_urb(&hw
->tx_urb
);
483 ret
= usb_clear_halt(hw
->usb
, hw
->endp_out
);
485 netdev_err(hw
->wlandev
->netdev
,
486 "Failed to clear tx pipe for %s: err=%d\n",
489 netdev_info(hw
->wlandev
->netdev
, "%s tx pipe reset complete.\n",
491 clear_bit(WORK_TX_HALT
, &hw
->usb_flags
);
492 set_bit(WORK_TX_RESUME
, &hw
->usb_flags
);
494 /* Stopping the BULK-OUT pipe also blocked
495 * us from sending any more CTLX URBs, so
496 * we need to re-run our queue ...
498 hfa384x_usbctlxq_run(hw
);
502 /* Resume transmitting. */
503 if (test_and_clear_bit(WORK_TX_RESUME
, &hw
->usb_flags
))
504 netif_wake_queue(hw
->wlandev
->netdev
);
507 /*----------------------------------------------------------------
510 * Sets up the hfa384x_t data structure for use. Note this
511 * does _not_ initialize the actual hardware, just the data structures
512 * we use to keep track of its state.
515 * hw device structure
516 * irq device irq number
517 * iobase i/o base address for register access
518 * membase memory base address for register access
527 ----------------------------------------------------------------*/
528 void hfa384x_create(hfa384x_t
*hw
, struct usb_device
*usb
)
530 memset(hw
, 0, sizeof(hfa384x_t
));
533 /* set up the endpoints */
534 hw
->endp_in
= usb_rcvbulkpipe(usb
, 1);
535 hw
->endp_out
= usb_sndbulkpipe(usb
, 2);
537 /* Set up the waitq */
538 init_waitqueue_head(&hw
->cmdq
);
540 /* Initialize the command queue */
541 spin_lock_init(&hw
->ctlxq
.lock
);
542 INIT_LIST_HEAD(&hw
->ctlxq
.pending
);
543 INIT_LIST_HEAD(&hw
->ctlxq
.active
);
544 INIT_LIST_HEAD(&hw
->ctlxq
.completing
);
545 INIT_LIST_HEAD(&hw
->ctlxq
.reapable
);
547 /* Initialize the authentication queue */
548 skb_queue_head_init(&hw
->authq
);
550 tasklet_init(&hw
->reaper_bh
,
551 hfa384x_usbctlx_reaper_task
, (unsigned long)hw
);
552 tasklet_init(&hw
->completion_bh
,
553 hfa384x_usbctlx_completion_task
, (unsigned long)hw
);
554 INIT_WORK(&hw
->link_bh
, prism2sta_processing_defer
);
555 INIT_WORK(&hw
->usb_work
, hfa384x_usb_defer
);
557 setup_timer(&hw
->throttle
, hfa384x_usb_throttlefn
, (unsigned long)hw
);
559 setup_timer(&hw
->resptimer
, hfa384x_usbctlx_resptimerfn
,
562 setup_timer(&hw
->reqtimer
, hfa384x_usbctlx_reqtimerfn
,
565 usb_init_urb(&hw
->rx_urb
);
566 usb_init_urb(&hw
->tx_urb
);
567 usb_init_urb(&hw
->ctlx_urb
);
569 hw
->link_status
= HFA384x_LINK_NOTCONNECTED
;
570 hw
->state
= HFA384x_STATE_INIT
;
572 INIT_WORK(&hw
->commsqual_bh
, prism2sta_commsqual_defer
);
573 setup_timer(&hw
->commsqual_timer
, prism2sta_commsqual_timer
,
577 /*----------------------------------------------------------------
580 * Partner to hfa384x_create(). This function cleans up the hw
581 * structure so that it can be freed by the caller using a simple
582 * kfree. Currently, this function is just a placeholder. If, at some
583 * point in the future, an hw in the 'shutdown' state requires a 'deep'
584 * kfree, this is where it should be done. Note that if this function
585 * is called on a _running_ hw structure, the drvr_stop() function is
589 * hw device structure
592 * nothing, this function is not allowed to fail.
598 ----------------------------------------------------------------*/
599 void hfa384x_destroy(hfa384x_t
*hw
)
603 if (hw
->state
== HFA384x_STATE_RUNNING
)
604 hfa384x_drvr_stop(hw
);
605 hw
->state
= HFA384x_STATE_PREINIT
;
607 kfree(hw
->scanresults
);
608 hw
->scanresults
= NULL
;
610 /* Now to clean out the auth queue */
611 while ((skb
= skb_dequeue(&hw
->authq
)))
615 static hfa384x_usbctlx_t
*usbctlx_alloc(void)
617 hfa384x_usbctlx_t
*ctlx
;
619 ctlx
= kzalloc(sizeof(*ctlx
),
620 in_interrupt() ? GFP_ATOMIC
: GFP_KERNEL
);
622 init_completion(&ctlx
->done
);
628 usbctlx_get_status(const hfa384x_usb_cmdresp_t
*cmdresp
,
629 hfa384x_cmdresult_t
*result
)
631 result
->status
= le16_to_cpu(cmdresp
->status
);
632 result
->resp0
= le16_to_cpu(cmdresp
->resp0
);
633 result
->resp1
= le16_to_cpu(cmdresp
->resp1
);
634 result
->resp2
= le16_to_cpu(cmdresp
->resp2
);
636 pr_debug("cmdresult:status=0x%04x resp0=0x%04x resp1=0x%04x resp2=0x%04x\n",
637 result
->status
, result
->resp0
, result
->resp1
, result
->resp2
);
639 return result
->status
& HFA384x_STATUS_RESULT
;
643 usbctlx_get_rridresult(const hfa384x_usb_rridresp_t
*rridresp
,
644 hfa384x_rridresult_t
*result
)
646 result
->rid
= le16_to_cpu(rridresp
->rid
);
647 result
->riddata
= rridresp
->data
;
648 result
->riddata_len
= ((le16_to_cpu(rridresp
->frmlen
) - 1) * 2);
651 /*----------------------------------------------------------------
653 * This completor must be passed to hfa384x_usbctlx_complete_sync()
654 * when processing a CTLX that returns a hfa384x_cmdresult_t structure.
655 ----------------------------------------------------------------*/
656 struct usbctlx_cmd_completor
{
657 struct usbctlx_completor head
;
659 const hfa384x_usb_cmdresp_t
*cmdresp
;
660 hfa384x_cmdresult_t
*result
;
663 static inline int usbctlx_cmd_completor_fn(struct usbctlx_completor
*head
)
665 struct usbctlx_cmd_completor
*complete
;
667 complete
= (struct usbctlx_cmd_completor
*)head
;
668 return usbctlx_get_status(complete
->cmdresp
, complete
->result
);
671 static inline struct usbctlx_completor
*init_cmd_completor(
672 struct usbctlx_cmd_completor
674 const hfa384x_usb_cmdresp_t
676 hfa384x_cmdresult_t
*result
)
678 completor
->head
.complete
= usbctlx_cmd_completor_fn
;
679 completor
->cmdresp
= cmdresp
;
680 completor
->result
= result
;
681 return &(completor
->head
);
684 /*----------------------------------------------------------------
686 * This completor must be passed to hfa384x_usbctlx_complete_sync()
687 * when processing a CTLX that reads a RID.
688 ----------------------------------------------------------------*/
689 struct usbctlx_rrid_completor
{
690 struct usbctlx_completor head
;
692 const hfa384x_usb_rridresp_t
*rridresp
;
694 unsigned int riddatalen
;
697 static int usbctlx_rrid_completor_fn(struct usbctlx_completor
*head
)
699 struct usbctlx_rrid_completor
*complete
;
700 hfa384x_rridresult_t rridresult
;
702 complete
= (struct usbctlx_rrid_completor
*)head
;
703 usbctlx_get_rridresult(complete
->rridresp
, &rridresult
);
705 /* Validate the length, note body len calculation in bytes */
706 if (rridresult
.riddata_len
!= complete
->riddatalen
) {
707 pr_warn("RID len mismatch, rid=0x%04x hlen=%d fwlen=%d\n",
709 complete
->riddatalen
, rridresult
.riddata_len
);
713 memcpy(complete
->riddata
, rridresult
.riddata
, complete
->riddatalen
);
717 static inline struct usbctlx_completor
*init_rrid_completor(
718 struct usbctlx_rrid_completor
720 const hfa384x_usb_rridresp_t
723 unsigned int riddatalen
)
725 completor
->head
.complete
= usbctlx_rrid_completor_fn
;
726 completor
->rridresp
= rridresp
;
727 completor
->riddata
= riddata
;
728 completor
->riddatalen
= riddatalen
;
729 return &(completor
->head
);
732 /*----------------------------------------------------------------
734 * Interprets the results of a synchronous RID-write
735 ----------------------------------------------------------------*/
736 #define init_wrid_completor init_cmd_completor
738 /*----------------------------------------------------------------
740 * Interprets the results of a synchronous memory-write
741 ----------------------------------------------------------------*/
742 #define init_wmem_completor init_cmd_completor
744 /*----------------------------------------------------------------
746 * Interprets the results of a synchronous memory-read
747 ----------------------------------------------------------------*/
748 struct usbctlx_rmem_completor
{
749 struct usbctlx_completor head
;
751 const hfa384x_usb_rmemresp_t
*rmemresp
;
756 static int usbctlx_rmem_completor_fn(struct usbctlx_completor
*head
)
758 struct usbctlx_rmem_completor
*complete
=
759 (struct usbctlx_rmem_completor
*)head
;
761 pr_debug("rmemresp:len=%d\n", complete
->rmemresp
->frmlen
);
762 memcpy(complete
->data
, complete
->rmemresp
->data
, complete
->len
);
766 static inline struct usbctlx_completor
*init_rmem_completor(
767 struct usbctlx_rmem_completor
769 hfa384x_usb_rmemresp_t
774 completor
->head
.complete
= usbctlx_rmem_completor_fn
;
775 completor
->rmemresp
= rmemresp
;
776 completor
->data
= data
;
777 completor
->len
= len
;
778 return &(completor
->head
);
781 /*----------------------------------------------------------------
784 * Ctlx_complete handler for async CMD type control exchanges.
785 * mark the hw struct as such.
787 * Note: If the handling is changed here, it should probably be
788 * changed in docmd as well.
792 * ctlx completed CTLX
801 ----------------------------------------------------------------*/
802 static void hfa384x_cb_status(hfa384x_t
*hw
, const hfa384x_usbctlx_t
*ctlx
)
804 if (ctlx
->usercb
!= NULL
) {
805 hfa384x_cmdresult_t cmdresult
;
807 if (ctlx
->state
!= CTLX_COMPLETE
) {
808 memset(&cmdresult
, 0, sizeof(cmdresult
));
810 HFA384x_STATUS_RESULT_SET(HFA384x_CMD_ERR
);
812 usbctlx_get_status(&ctlx
->inbuf
.cmdresp
, &cmdresult
);
815 ctlx
->usercb(hw
, &cmdresult
, ctlx
->usercb_data
);
819 /*----------------------------------------------------------------
822 * CTLX completion handler for async RRID type control exchanges.
824 * Note: If the handling is changed here, it should probably be
825 * changed in dorrid as well.
829 * ctlx completed CTLX
838 ----------------------------------------------------------------*/
839 static void hfa384x_cb_rrid(hfa384x_t
*hw
, const hfa384x_usbctlx_t
*ctlx
)
841 if (ctlx
->usercb
!= NULL
) {
842 hfa384x_rridresult_t rridresult
;
844 if (ctlx
->state
!= CTLX_COMPLETE
) {
845 memset(&rridresult
, 0, sizeof(rridresult
));
846 rridresult
.rid
= le16_to_cpu(ctlx
->outbuf
.rridreq
.rid
);
848 usbctlx_get_rridresult(&ctlx
->inbuf
.rridresp
,
852 ctlx
->usercb(hw
, &rridresult
, ctlx
->usercb_data
);
856 static inline int hfa384x_docmd_wait(hfa384x_t
*hw
, hfa384x_metacmd_t
*cmd
)
858 return hfa384x_docmd(hw
, DOWAIT
, cmd
, NULL
, NULL
, NULL
);
862 hfa384x_docmd_async(hfa384x_t
*hw
,
863 hfa384x_metacmd_t
*cmd
,
864 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
)
866 return hfa384x_docmd(hw
, DOASYNC
, cmd
, cmdcb
, usercb
, usercb_data
);
870 hfa384x_dorrid_wait(hfa384x_t
*hw
, u16 rid
, void *riddata
,
871 unsigned int riddatalen
)
873 return hfa384x_dorrid(hw
, DOWAIT
,
874 rid
, riddata
, riddatalen
, NULL
, NULL
, NULL
);
878 hfa384x_dorrid_async(hfa384x_t
*hw
,
879 u16 rid
, void *riddata
, unsigned int riddatalen
,
881 ctlx_usercb_t usercb
, void *usercb_data
)
883 return hfa384x_dorrid(hw
, DOASYNC
,
884 rid
, riddata
, riddatalen
,
885 cmdcb
, usercb
, usercb_data
);
889 hfa384x_dowrid_wait(hfa384x_t
*hw
, u16 rid
, void *riddata
,
890 unsigned int riddatalen
)
892 return hfa384x_dowrid(hw
, DOWAIT
,
893 rid
, riddata
, riddatalen
, NULL
, NULL
, NULL
);
897 hfa384x_dowrid_async(hfa384x_t
*hw
,
898 u16 rid
, void *riddata
, unsigned int riddatalen
,
900 ctlx_usercb_t usercb
, void *usercb_data
)
902 return hfa384x_dowrid(hw
, DOASYNC
,
903 rid
, riddata
, riddatalen
,
904 cmdcb
, usercb
, usercb_data
);
908 hfa384x_dormem_wait(hfa384x_t
*hw
,
909 u16 page
, u16 offset
, void *data
, unsigned int len
)
911 return hfa384x_dormem(hw
, DOWAIT
,
912 page
, offset
, data
, len
, NULL
, NULL
, NULL
);
916 hfa384x_dormem_async(hfa384x_t
*hw
,
917 u16 page
, u16 offset
, void *data
, unsigned int len
,
919 ctlx_usercb_t usercb
, void *usercb_data
)
921 return hfa384x_dormem(hw
, DOASYNC
,
922 page
, offset
, data
, len
,
923 cmdcb
, usercb
, usercb_data
);
927 hfa384x_dowmem_wait(hfa384x_t
*hw
,
928 u16 page
, u16 offset
, void *data
, unsigned int len
)
930 return hfa384x_dowmem(hw
, DOWAIT
,
931 page
, offset
, data
, len
, NULL
, NULL
, NULL
);
935 hfa384x_dowmem_async(hfa384x_t
*hw
,
941 ctlx_usercb_t usercb
, void *usercb_data
)
943 return hfa384x_dowmem(hw
, DOASYNC
,
944 page
, offset
, data
, len
,
945 cmdcb
, usercb
, usercb_data
);
948 /*----------------------------------------------------------------
949 * hfa384x_cmd_initialize
951 * Issues the initialize command and sets the hw->state based
955 * hw device structure
959 * >0 f/w reported error - f/w status code
960 * <0 driver reported error
966 ----------------------------------------------------------------*/
967 int hfa384x_cmd_initialize(hfa384x_t
*hw
)
971 hfa384x_metacmd_t cmd
;
973 cmd
.cmd
= HFA384x_CMDCODE_INIT
;
978 result
= hfa384x_docmd_wait(hw
, &cmd
);
980 pr_debug("cmdresp.init: status=0x%04x, resp0=0x%04x, resp1=0x%04x, resp2=0x%04x\n",
982 cmd
.result
.resp0
, cmd
.result
.resp1
, cmd
.result
.resp2
);
984 for (i
= 0; i
< HFA384x_NUMPORTS_MAX
; i
++)
985 hw
->port_enabled
[i
] = 0;
988 hw
->link_status
= HFA384x_LINK_NOTCONNECTED
;
993 /*----------------------------------------------------------------
994 * hfa384x_cmd_disable
996 * Issues the disable command to stop communications on one of
1000 * hw device structure
1001 * macport MAC port number (host order)
1005 * >0 f/w reported failure - f/w status code
1006 * <0 driver reported error (timeout|bad arg)
1012 ----------------------------------------------------------------*/
1013 int hfa384x_cmd_disable(hfa384x_t
*hw
, u16 macport
)
1015 hfa384x_metacmd_t cmd
;
1017 cmd
.cmd
= HFA384x_CMD_CMDCODE_SET(HFA384x_CMDCODE_DISABLE
) |
1018 HFA384x_CMD_MACPORT_SET(macport
);
1023 return hfa384x_docmd_wait(hw
, &cmd
);
1026 /*----------------------------------------------------------------
1027 * hfa384x_cmd_enable
1029 * Issues the enable command to enable communications on one of
1033 * hw device structure
1034 * macport MAC port number
1038 * >0 f/w reported failure - f/w status code
1039 * <0 driver reported error (timeout|bad arg)
1045 ----------------------------------------------------------------*/
1046 int hfa384x_cmd_enable(hfa384x_t
*hw
, u16 macport
)
1048 hfa384x_metacmd_t cmd
;
1050 cmd
.cmd
= HFA384x_CMD_CMDCODE_SET(HFA384x_CMDCODE_ENABLE
) |
1051 HFA384x_CMD_MACPORT_SET(macport
);
1056 return hfa384x_docmd_wait(hw
, &cmd
);
1059 /*----------------------------------------------------------------
1060 * hfa384x_cmd_monitor
1062 * Enables the 'monitor mode' of the MAC. Here's the description of
1063 * monitor mode that I've received thus far:
1065 * "The "monitor mode" of operation is that the MAC passes all
1066 * frames for which the PLCP checks are correct. All received
1067 * MPDUs are passed to the host with MAC Port = 7, with a
1068 * receive status of good, FCS error, or undecryptable. Passing
1069 * certain MPDUs is a violation of the 802.11 standard, but useful
1070 * for a debugging tool." Normal communication is not possible
1071 * while monitor mode is enabled.
1074 * hw device structure
1075 * enable a code (0x0b|0x0f) that enables/disables
1076 * monitor mode. (host order)
1080 * >0 f/w reported failure - f/w status code
1081 * <0 driver reported error (timeout|bad arg)
1087 ----------------------------------------------------------------*/
1088 int hfa384x_cmd_monitor(hfa384x_t
*hw
, u16 enable
)
1090 hfa384x_metacmd_t cmd
;
1092 cmd
.cmd
= HFA384x_CMD_CMDCODE_SET(HFA384x_CMDCODE_MONITOR
) |
1093 HFA384x_CMD_AINFO_SET(enable
);
1098 return hfa384x_docmd_wait(hw
, &cmd
);
1101 /*----------------------------------------------------------------
1102 * hfa384x_cmd_download
1104 * Sets the controls for the MAC controller code/data download
1105 * process. The arguments set the mode and address associated
1106 * with a download. Note that the aux registers should be enabled
1107 * prior to setting one of the download enable modes.
1110 * hw device structure
1111 * mode 0 - Disable programming and begin code exec
1112 * 1 - Enable volatile mem programming
1113 * 2 - Enable non-volatile mem programming
1114 * 3 - Program non-volatile section from NV download
1118 * highaddr For mode 1, sets the high & low order bits of
1119 * the "destination address". This address will be
1120 * the execution start address when download is
1121 * subsequently disabled.
1122 * For mode 2, sets the high & low order bits of
1123 * the destination in NV ram.
1124 * For modes 0 & 3, should be zero. (host order)
1125 * NOTE: these are CMD format.
1126 * codelen Length of the data to write in mode 2,
1127 * zero otherwise. (host order)
1131 * >0 f/w reported failure - f/w status code
1132 * <0 driver reported error (timeout|bad arg)
1138 ----------------------------------------------------------------*/
1139 int hfa384x_cmd_download(hfa384x_t
*hw
, u16 mode
, u16 lowaddr
,
1140 u16 highaddr
, u16 codelen
)
1142 hfa384x_metacmd_t cmd
;
1144 pr_debug("mode=%d, lowaddr=0x%04x, highaddr=0x%04x, codelen=%d\n",
1145 mode
, lowaddr
, highaddr
, codelen
);
1147 cmd
.cmd
= (HFA384x_CMD_CMDCODE_SET(HFA384x_CMDCODE_DOWNLD
) |
1148 HFA384x_CMD_PROGMODE_SET(mode
));
1150 cmd
.parm0
= lowaddr
;
1151 cmd
.parm1
= highaddr
;
1152 cmd
.parm2
= codelen
;
1154 return hfa384x_docmd_wait(hw
, &cmd
);
1157 /*----------------------------------------------------------------
1160 * Perform a reset of the hfa38xx MAC core. We assume that the hw
1161 * structure is in its "created" state. That is, it is initialized
1162 * with proper values. Note that if a reset is done after the
1163 * device has been active for awhile, the caller might have to clean
1164 * up some leftover cruft in the hw structure.
1167 * hw device structure
1168 * holdtime how long (in ms) to hold the reset
1169 * settletime how long (in ms) to wait after releasing
1179 ----------------------------------------------------------------*/
1180 int hfa384x_corereset(hfa384x_t
*hw
, int holdtime
, int settletime
, int genesis
)
1184 result
= usb_reset_device(hw
->usb
);
1186 netdev_err(hw
->wlandev
->netdev
, "usb_reset_device() failed, result=%d.\n",
1193 /*----------------------------------------------------------------
1194 * hfa384x_usbctlx_complete_sync
1196 * Waits for a synchronous CTLX object to complete,
1197 * and then handles the response.
1200 * hw device structure
1202 * completor functor object to decide what to
1203 * do with the CTLX's result.
1207 * -ERESTARTSYS Interrupted by a signal
1209 * -ENODEV Adapter was unplugged
1210 * ??? Result from completor
1216 ----------------------------------------------------------------*/
1217 static int hfa384x_usbctlx_complete_sync(hfa384x_t
*hw
,
1218 hfa384x_usbctlx_t
*ctlx
,
1219 struct usbctlx_completor
*completor
)
1221 unsigned long flags
;
1224 result
= wait_for_completion_interruptible(&ctlx
->done
);
1226 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
1229 * We can only handle the CTLX if the USB disconnect
1230 * function has not run yet ...
1233 if (hw
->wlandev
->hwremoved
) {
1234 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
1236 } else if (result
!= 0) {
1240 * We were probably interrupted, so delete
1241 * this CTLX asynchronously, kill the timers
1242 * and the URB, and then start the next
1245 * NOTE: We can only delete the timers and
1246 * the URB if this CTLX is active.
1248 if (ctlx
== get_active_ctlx(hw
)) {
1249 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
1251 del_singleshot_timer_sync(&hw
->reqtimer
);
1252 del_singleshot_timer_sync(&hw
->resptimer
);
1253 hw
->req_timer_done
= 1;
1254 hw
->resp_timer_done
= 1;
1255 usb_kill_urb(&hw
->ctlx_urb
);
1257 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
1262 * This scenario is so unlikely that I'm
1263 * happy with a grubby "goto" solution ...
1265 if (hw
->wlandev
->hwremoved
)
1270 * The completion task will send this CTLX
1271 * to the reaper the next time it runs. We
1272 * are no longer in a hurry.
1275 ctlx
->state
= CTLX_REQ_FAILED
;
1276 list_move_tail(&ctlx
->list
, &hw
->ctlxq
.completing
);
1278 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
1281 hfa384x_usbctlxq_run(hw
);
1283 if (ctlx
->state
== CTLX_COMPLETE
) {
1284 result
= completor
->complete(completor
);
1286 netdev_warn(hw
->wlandev
->netdev
, "CTLX[%d] error: state(%s)\n",
1287 le16_to_cpu(ctlx
->outbuf
.type
),
1288 ctlxstr(ctlx
->state
));
1292 list_del(&ctlx
->list
);
1293 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
1300 /*----------------------------------------------------------------
1303 * Constructs a command CTLX and submits it.
1305 * NOTE: Any changes to the 'post-submit' code in this function
1306 * need to be carried over to hfa384x_cbcmd() since the handling
1307 * is virtually identical.
1310 * hw device structure
1311 * mode DOWAIT or DOASYNC
1312 * cmd cmd structure. Includes all arguments and result
1313 * data points. All in host order. in host order
1314 * cmdcb command-specific callback
1315 * usercb user callback for async calls, NULL for DOWAIT calls
1316 * usercb_data user supplied data pointer for async calls, NULL
1322 * -ERESTARTSYS Awakened on signal
1323 * >0 command indicated error, Status and Resp0-2 are
1331 ----------------------------------------------------------------*/
1333 hfa384x_docmd(hfa384x_t
*hw
,
1335 hfa384x_metacmd_t
*cmd
,
1336 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
)
1339 hfa384x_usbctlx_t
*ctlx
;
1341 ctlx
= usbctlx_alloc();
1347 /* Initialize the command */
1348 ctlx
->outbuf
.cmdreq
.type
= cpu_to_le16(HFA384x_USB_CMDREQ
);
1349 ctlx
->outbuf
.cmdreq
.cmd
= cpu_to_le16(cmd
->cmd
);
1350 ctlx
->outbuf
.cmdreq
.parm0
= cpu_to_le16(cmd
->parm0
);
1351 ctlx
->outbuf
.cmdreq
.parm1
= cpu_to_le16(cmd
->parm1
);
1352 ctlx
->outbuf
.cmdreq
.parm2
= cpu_to_le16(cmd
->parm2
);
1354 ctlx
->outbufsize
= sizeof(ctlx
->outbuf
.cmdreq
);
1356 pr_debug("cmdreq: cmd=0x%04x parm0=0x%04x parm1=0x%04x parm2=0x%04x\n",
1357 cmd
->cmd
, cmd
->parm0
, cmd
->parm1
, cmd
->parm2
);
1359 ctlx
->reapable
= mode
;
1360 ctlx
->cmdcb
= cmdcb
;
1361 ctlx
->usercb
= usercb
;
1362 ctlx
->usercb_data
= usercb_data
;
1364 result
= hfa384x_usbctlx_submit(hw
, ctlx
);
1367 } else if (mode
== DOWAIT
) {
1368 struct usbctlx_cmd_completor completor
;
1371 hfa384x_usbctlx_complete_sync(hw
, ctlx
,
1372 init_cmd_completor(&completor
,
1384 /*----------------------------------------------------------------
1387 * Constructs a read rid CTLX and issues it.
1389 * NOTE: Any changes to the 'post-submit' code in this function
1390 * need to be carried over to hfa384x_cbrrid() since the handling
1391 * is virtually identical.
1394 * hw device structure
1395 * mode DOWAIT or DOASYNC
1396 * rid Read RID number (host order)
1397 * riddata Caller supplied buffer that MAC formatted RID.data
1398 * record will be written to for DOWAIT calls. Should
1399 * be NULL for DOASYNC calls.
1400 * riddatalen Buffer length for DOWAIT calls. Zero for DOASYNC calls.
1401 * cmdcb command callback for async calls, NULL for DOWAIT calls
1402 * usercb user callback for async calls, NULL for DOWAIT calls
1403 * usercb_data user supplied data pointer for async calls, NULL
1409 * -ERESTARTSYS Awakened on signal
1410 * -ENODATA riddatalen != macdatalen
1411 * >0 command indicated error, Status and Resp0-2 are
1417 * interrupt (DOASYNC)
1418 * process (DOWAIT or DOASYNC)
1419 ----------------------------------------------------------------*/
1421 hfa384x_dorrid(hfa384x_t
*hw
,
1425 unsigned int riddatalen
,
1426 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
)
1429 hfa384x_usbctlx_t
*ctlx
;
1431 ctlx
= usbctlx_alloc();
1437 /* Initialize the command */
1438 ctlx
->outbuf
.rridreq
.type
= cpu_to_le16(HFA384x_USB_RRIDREQ
);
1439 ctlx
->outbuf
.rridreq
.frmlen
=
1440 cpu_to_le16(sizeof(ctlx
->outbuf
.rridreq
.rid
));
1441 ctlx
->outbuf
.rridreq
.rid
= cpu_to_le16(rid
);
1443 ctlx
->outbufsize
= sizeof(ctlx
->outbuf
.rridreq
);
1445 ctlx
->reapable
= mode
;
1446 ctlx
->cmdcb
= cmdcb
;
1447 ctlx
->usercb
= usercb
;
1448 ctlx
->usercb_data
= usercb_data
;
1450 /* Submit the CTLX */
1451 result
= hfa384x_usbctlx_submit(hw
, ctlx
);
1454 } else if (mode
== DOWAIT
) {
1455 struct usbctlx_rrid_completor completor
;
1458 hfa384x_usbctlx_complete_sync(hw
, ctlx
,
1461 &ctlx
->inbuf
.rridresp
,
1462 riddata
, riddatalen
));
1469 /*----------------------------------------------------------------
1472 * Constructs a write rid CTLX and issues it.
1474 * NOTE: Any changes to the 'post-submit' code in this function
1475 * need to be carried over to hfa384x_cbwrid() since the handling
1476 * is virtually identical.
1479 * hw device structure
1480 * enum cmd_mode DOWAIT or DOASYNC
1482 * riddata Data portion of RID formatted for MAC
1483 * riddatalen Length of the data portion in bytes
1484 * cmdcb command callback for async calls, NULL for DOWAIT calls
1485 * usercb user callback for async calls, NULL for DOWAIT calls
1486 * usercb_data user supplied data pointer for async calls
1490 * -ETIMEDOUT timed out waiting for register ready or
1491 * command completion
1492 * >0 command indicated error, Status and Resp0-2 are
1498 * interrupt (DOASYNC)
1499 * process (DOWAIT or DOASYNC)
1500 ----------------------------------------------------------------*/
1502 hfa384x_dowrid(hfa384x_t
*hw
,
1506 unsigned int riddatalen
,
1507 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
)
1510 hfa384x_usbctlx_t
*ctlx
;
1512 ctlx
= usbctlx_alloc();
1518 /* Initialize the command */
1519 ctlx
->outbuf
.wridreq
.type
= cpu_to_le16(HFA384x_USB_WRIDREQ
);
1520 ctlx
->outbuf
.wridreq
.frmlen
= cpu_to_le16((sizeof
1521 (ctlx
->outbuf
.wridreq
.rid
) +
1522 riddatalen
+ 1) / 2);
1523 ctlx
->outbuf
.wridreq
.rid
= cpu_to_le16(rid
);
1524 memcpy(ctlx
->outbuf
.wridreq
.data
, riddata
, riddatalen
);
1526 ctlx
->outbufsize
= sizeof(ctlx
->outbuf
.wridreq
.type
) +
1527 sizeof(ctlx
->outbuf
.wridreq
.frmlen
) +
1528 sizeof(ctlx
->outbuf
.wridreq
.rid
) + riddatalen
;
1530 ctlx
->reapable
= mode
;
1531 ctlx
->cmdcb
= cmdcb
;
1532 ctlx
->usercb
= usercb
;
1533 ctlx
->usercb_data
= usercb_data
;
1535 /* Submit the CTLX */
1536 result
= hfa384x_usbctlx_submit(hw
, ctlx
);
1539 } else if (mode
== DOWAIT
) {
1540 struct usbctlx_cmd_completor completor
;
1541 hfa384x_cmdresult_t wridresult
;
1543 result
= hfa384x_usbctlx_complete_sync(hw
,
1547 &ctlx
->inbuf
.wridresp
,
1555 /*----------------------------------------------------------------
1558 * Constructs a readmem CTLX and issues it.
1560 * NOTE: Any changes to the 'post-submit' code in this function
1561 * need to be carried over to hfa384x_cbrmem() since the handling
1562 * is virtually identical.
1565 * hw device structure
1566 * mode DOWAIT or DOASYNC
1567 * page MAC address space page (CMD format)
1568 * offset MAC address space offset
1569 * data Ptr to data buffer to receive read
1570 * len Length of the data to read (max == 2048)
1571 * cmdcb command callback for async calls, NULL for DOWAIT calls
1572 * usercb user callback for async calls, NULL for DOWAIT calls
1573 * usercb_data user supplied data pointer for async calls
1577 * -ETIMEDOUT timed out waiting for register ready or
1578 * command completion
1579 * >0 command indicated error, Status and Resp0-2 are
1585 * interrupt (DOASYNC)
1586 * process (DOWAIT or DOASYNC)
1587 ----------------------------------------------------------------*/
1589 hfa384x_dormem(hfa384x_t
*hw
,
1595 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
)
1598 hfa384x_usbctlx_t
*ctlx
;
1600 ctlx
= usbctlx_alloc();
1606 /* Initialize the command */
1607 ctlx
->outbuf
.rmemreq
.type
= cpu_to_le16(HFA384x_USB_RMEMREQ
);
1608 ctlx
->outbuf
.rmemreq
.frmlen
=
1609 cpu_to_le16(sizeof(ctlx
->outbuf
.rmemreq
.offset
) +
1610 sizeof(ctlx
->outbuf
.rmemreq
.page
) + len
);
1611 ctlx
->outbuf
.rmemreq
.offset
= cpu_to_le16(offset
);
1612 ctlx
->outbuf
.rmemreq
.page
= cpu_to_le16(page
);
1614 ctlx
->outbufsize
= sizeof(ctlx
->outbuf
.rmemreq
);
1616 pr_debug("type=0x%04x frmlen=%d offset=0x%04x page=0x%04x\n",
1617 ctlx
->outbuf
.rmemreq
.type
,
1618 ctlx
->outbuf
.rmemreq
.frmlen
,
1619 ctlx
->outbuf
.rmemreq
.offset
, ctlx
->outbuf
.rmemreq
.page
);
1621 pr_debug("pktsize=%zd\n", ROUNDUP64(sizeof(ctlx
->outbuf
.rmemreq
)));
1623 ctlx
->reapable
= mode
;
1624 ctlx
->cmdcb
= cmdcb
;
1625 ctlx
->usercb
= usercb
;
1626 ctlx
->usercb_data
= usercb_data
;
1628 result
= hfa384x_usbctlx_submit(hw
, ctlx
);
1631 } else if (mode
== DOWAIT
) {
1632 struct usbctlx_rmem_completor completor
;
1635 hfa384x_usbctlx_complete_sync(hw
, ctlx
,
1638 &ctlx
->inbuf
.rmemresp
, data
,
1646 /*----------------------------------------------------------------
1649 * Constructs a writemem CTLX and issues it.
1651 * NOTE: Any changes to the 'post-submit' code in this function
1652 * need to be carried over to hfa384x_cbwmem() since the handling
1653 * is virtually identical.
1656 * hw device structure
1657 * mode DOWAIT or DOASYNC
1658 * page MAC address space page (CMD format)
1659 * offset MAC address space offset
1660 * data Ptr to data buffer containing write data
1661 * len Length of the data to read (max == 2048)
1662 * cmdcb command callback for async calls, NULL for DOWAIT calls
1663 * usercb user callback for async calls, NULL for DOWAIT calls
1664 * usercb_data user supplied data pointer for async calls.
1668 * -ETIMEDOUT timed out waiting for register ready or
1669 * command completion
1670 * >0 command indicated error, Status and Resp0-2 are
1676 * interrupt (DOWAIT)
1677 * process (DOWAIT or DOASYNC)
1678 ----------------------------------------------------------------*/
1680 hfa384x_dowmem(hfa384x_t
*hw
,
1686 ctlx_cmdcb_t cmdcb
, ctlx_usercb_t usercb
, void *usercb_data
)
1689 hfa384x_usbctlx_t
*ctlx
;
1691 pr_debug("page=0x%04x offset=0x%04x len=%d\n", page
, offset
, len
);
1693 ctlx
= usbctlx_alloc();
1699 /* Initialize the command */
1700 ctlx
->outbuf
.wmemreq
.type
= cpu_to_le16(HFA384x_USB_WMEMREQ
);
1701 ctlx
->outbuf
.wmemreq
.frmlen
=
1702 cpu_to_le16(sizeof(ctlx
->outbuf
.wmemreq
.offset
) +
1703 sizeof(ctlx
->outbuf
.wmemreq
.page
) + len
);
1704 ctlx
->outbuf
.wmemreq
.offset
= cpu_to_le16(offset
);
1705 ctlx
->outbuf
.wmemreq
.page
= cpu_to_le16(page
);
1706 memcpy(ctlx
->outbuf
.wmemreq
.data
, data
, len
);
1708 ctlx
->outbufsize
= sizeof(ctlx
->outbuf
.wmemreq
.type
) +
1709 sizeof(ctlx
->outbuf
.wmemreq
.frmlen
) +
1710 sizeof(ctlx
->outbuf
.wmemreq
.offset
) +
1711 sizeof(ctlx
->outbuf
.wmemreq
.page
) + len
;
1713 ctlx
->reapable
= mode
;
1714 ctlx
->cmdcb
= cmdcb
;
1715 ctlx
->usercb
= usercb
;
1716 ctlx
->usercb_data
= usercb_data
;
1718 result
= hfa384x_usbctlx_submit(hw
, ctlx
);
1721 } else if (mode
== DOWAIT
) {
1722 struct usbctlx_cmd_completor completor
;
1723 hfa384x_cmdresult_t wmemresult
;
1725 result
= hfa384x_usbctlx_complete_sync(hw
,
1729 &ctlx
->inbuf
.wmemresp
,
1737 /*----------------------------------------------------------------
1738 * hfa384x_drvr_disable
1740 * Issues the disable command to stop communications on one of
1741 * the MACs 'ports'. Only macport 0 is valid for stations.
1742 * APs may also disable macports 1-6. Only ports that have been
1743 * previously enabled may be disabled.
1746 * hw device structure
1747 * macport MAC port number (host order)
1751 * >0 f/w reported failure - f/w status code
1752 * <0 driver reported error (timeout|bad arg)
1758 ----------------------------------------------------------------*/
1759 int hfa384x_drvr_disable(hfa384x_t
*hw
, u16 macport
)
1763 if ((!hw
->isap
&& macport
!= 0) ||
1764 (hw
->isap
&& !(macport
<= HFA384x_PORTID_MAX
)) ||
1765 !(hw
->port_enabled
[macport
])) {
1768 result
= hfa384x_cmd_disable(hw
, macport
);
1770 hw
->port_enabled
[macport
] = 0;
1775 /*----------------------------------------------------------------
1776 * hfa384x_drvr_enable
1778 * Issues the enable command to enable communications on one of
1779 * the MACs 'ports'. Only macport 0 is valid for stations.
1780 * APs may also enable macports 1-6. Only ports that are currently
1781 * disabled may be enabled.
1784 * hw device structure
1785 * macport MAC port number
1789 * >0 f/w reported failure - f/w status code
1790 * <0 driver reported error (timeout|bad arg)
1796 ----------------------------------------------------------------*/
1797 int hfa384x_drvr_enable(hfa384x_t
*hw
, u16 macport
)
1801 if ((!hw
->isap
&& macport
!= 0) ||
1802 (hw
->isap
&& !(macport
<= HFA384x_PORTID_MAX
)) ||
1803 (hw
->port_enabled
[macport
])) {
1806 result
= hfa384x_cmd_enable(hw
, macport
);
1808 hw
->port_enabled
[macport
] = 1;
1813 /*----------------------------------------------------------------
1814 * hfa384x_drvr_flashdl_enable
1816 * Begins the flash download state. Checks to see that we're not
1817 * already in a download state and that a port isn't enabled.
1818 * Sets the download state and retrieves the flash download
1819 * buffer location, buffer size, and timeout length.
1822 * hw device structure
1826 * >0 f/w reported error - f/w status code
1827 * <0 driver reported error
1833 ----------------------------------------------------------------*/
1834 int hfa384x_drvr_flashdl_enable(hfa384x_t
*hw
)
1839 /* Check that a port isn't active */
1840 for (i
= 0; i
< HFA384x_PORTID_MAX
; i
++) {
1841 if (hw
->port_enabled
[i
]) {
1842 pr_debug("called when port enabled.\n");
1847 /* Check that we're not already in a download state */
1848 if (hw
->dlstate
!= HFA384x_DLSTATE_DISABLED
)
1851 /* Retrieve the buffer loc&size and timeout */
1852 result
= hfa384x_drvr_getconfig(hw
, HFA384x_RID_DOWNLOADBUFFER
,
1853 &(hw
->bufinfo
), sizeof(hw
->bufinfo
));
1857 hw
->bufinfo
.page
= le16_to_cpu(hw
->bufinfo
.page
);
1858 hw
->bufinfo
.offset
= le16_to_cpu(hw
->bufinfo
.offset
);
1859 hw
->bufinfo
.len
= le16_to_cpu(hw
->bufinfo
.len
);
1860 result
= hfa384x_drvr_getconfig16(hw
, HFA384x_RID_MAXLOADTIME
,
1865 hw
->dltimeout
= le16_to_cpu(hw
->dltimeout
);
1867 pr_debug("flashdl_enable\n");
1869 hw
->dlstate
= HFA384x_DLSTATE_FLASHENABLED
;
1874 /*----------------------------------------------------------------
1875 * hfa384x_drvr_flashdl_disable
1877 * Ends the flash download state. Note that this will cause the MAC
1878 * firmware to restart.
1881 * hw device structure
1885 * >0 f/w reported error - f/w status code
1886 * <0 driver reported error
1892 ----------------------------------------------------------------*/
1893 int hfa384x_drvr_flashdl_disable(hfa384x_t
*hw
)
1895 /* Check that we're already in the download state */
1896 if (hw
->dlstate
!= HFA384x_DLSTATE_FLASHENABLED
)
1899 pr_debug("flashdl_enable\n");
1901 /* There isn't much we can do at this point, so I don't */
1902 /* bother w/ the return value */
1903 hfa384x_cmd_download(hw
, HFA384x_PROGMODE_DISABLE
, 0, 0, 0);
1904 hw
->dlstate
= HFA384x_DLSTATE_DISABLED
;
1909 /*----------------------------------------------------------------
1910 * hfa384x_drvr_flashdl_write
1912 * Performs a FLASH download of a chunk of data. First checks to see
1913 * that we're in the FLASH download state, then sets the download
1914 * mode, uses the aux functions to 1) copy the data to the flash
1915 * buffer, 2) sets the download 'write flash' mode, 3) readback and
1916 * compare. Lather rinse, repeat as many times an necessary to get
1917 * all the given data into flash.
1918 * When all data has been written using this function (possibly
1919 * repeatedly), call drvr_flashdl_disable() to end the download state
1920 * and restart the MAC.
1923 * hw device structure
1924 * daddr Card address to write to. (host order)
1925 * buf Ptr to data to write.
1926 * len Length of data (host order).
1930 * >0 f/w reported error - f/w status code
1931 * <0 driver reported error
1937 ----------------------------------------------------------------*/
1938 int hfa384x_drvr_flashdl_write(hfa384x_t
*hw
, u32 daddr
, void *buf
, u32 len
)
1955 pr_debug("daddr=0x%08x len=%d\n", daddr
, len
);
1957 /* Check that we're in the flash download state */
1958 if (hw
->dlstate
!= HFA384x_DLSTATE_FLASHENABLED
)
1961 netdev_info(hw
->wlandev
->netdev
,
1962 "Download %d bytes to flash @0x%06x\n", len
, daddr
);
1964 /* Convert to flat address for arithmetic */
1965 /* NOTE: dlbuffer RID stores the address in AUX format */
1967 HFA384x_ADDR_AUX_MKFLAT(hw
->bufinfo
.page
, hw
->bufinfo
.offset
);
1968 pr_debug("dlbuf.page=0x%04x dlbuf.offset=0x%04x dlbufaddr=0x%08x\n",
1969 hw
->bufinfo
.page
, hw
->bufinfo
.offset
, dlbufaddr
);
1970 /* Calculations to determine how many fills of the dlbuffer to do
1971 * and how many USB wmemreq's to do for each fill. At this point
1972 * in time, the dlbuffer size and the wmemreq size are the same.
1973 * Therefore, nwrites should always be 1. The extra complexity
1974 * here is a hedge against future changes.
1977 /* Figure out how many times to do the flash programming */
1978 nburns
= len
/ hw
->bufinfo
.len
;
1979 nburns
+= (len
% hw
->bufinfo
.len
) ? 1 : 0;
1981 /* For each flash program cycle, how many USB wmemreq's are needed? */
1982 nwrites
= hw
->bufinfo
.len
/ HFA384x_USB_RWMEM_MAXLEN
;
1983 nwrites
+= (hw
->bufinfo
.len
% HFA384x_USB_RWMEM_MAXLEN
) ? 1 : 0;
1986 for (i
= 0; i
< nburns
; i
++) {
1987 /* Get the dest address and len */
1988 burnlen
= (len
- (hw
->bufinfo
.len
* i
)) > hw
->bufinfo
.len
?
1989 hw
->bufinfo
.len
: (len
- (hw
->bufinfo
.len
* i
));
1990 burndaddr
= daddr
+ (hw
->bufinfo
.len
* i
);
1991 burnlo
= HFA384x_ADDR_CMD_MKOFF(burndaddr
);
1992 burnhi
= HFA384x_ADDR_CMD_MKPAGE(burndaddr
);
1994 netdev_info(hw
->wlandev
->netdev
, "Writing %d bytes to flash @0x%06x\n",
1995 burnlen
, burndaddr
);
1997 /* Set the download mode */
1998 result
= hfa384x_cmd_download(hw
, HFA384x_PROGMODE_NV
,
1999 burnlo
, burnhi
, burnlen
);
2001 netdev_err(hw
->wlandev
->netdev
,
2002 "download(NV,lo=%x,hi=%x,len=%x) cmd failed, result=%d. Aborting d/l\n",
2003 burnlo
, burnhi
, burnlen
, result
);
2007 /* copy the data to the flash download buffer */
2008 for (j
= 0; j
< nwrites
; j
++) {
2010 (i
* hw
->bufinfo
.len
) +
2011 (j
* HFA384x_USB_RWMEM_MAXLEN
);
2013 writepage
= HFA384x_ADDR_CMD_MKPAGE(dlbufaddr
+
2014 (j
* HFA384x_USB_RWMEM_MAXLEN
));
2015 writeoffset
= HFA384x_ADDR_CMD_MKOFF(dlbufaddr
+
2016 (j
* HFA384x_USB_RWMEM_MAXLEN
));
2018 writelen
= burnlen
- (j
* HFA384x_USB_RWMEM_MAXLEN
);
2019 writelen
= writelen
> HFA384x_USB_RWMEM_MAXLEN
?
2020 HFA384x_USB_RWMEM_MAXLEN
: writelen
;
2022 result
= hfa384x_dowmem_wait(hw
,
2025 writebuf
, writelen
);
2028 /* set the download 'write flash' mode */
2029 result
= hfa384x_cmd_download(hw
,
2030 HFA384x_PROGMODE_NVWRITE
,
2033 netdev_err(hw
->wlandev
->netdev
,
2034 "download(NVWRITE,lo=%x,hi=%x,len=%x) cmd failed, result=%d. Aborting d/l\n",
2035 burnlo
, burnhi
, burnlen
, result
);
2039 /* TODO: We really should do a readback and compare. */
2044 /* Leave the firmware in the 'post-prog' mode. flashdl_disable will */
2045 /* actually disable programming mode. Remember, that will cause the */
2046 /* the firmware to effectively reset itself. */
2051 /*----------------------------------------------------------------
2052 * hfa384x_drvr_getconfig
2054 * Performs the sequence necessary to read a config/info item.
2057 * hw device structure
2058 * rid config/info record id (host order)
2059 * buf host side record buffer. Upon return it will
2060 * contain the body portion of the record (minus the
2062 * len buffer length (in bytes, should match record length)
2066 * >0 f/w reported error - f/w status code
2067 * <0 driver reported error
2068 * -ENODATA length mismatch between argument and retrieved
2075 ----------------------------------------------------------------*/
2076 int hfa384x_drvr_getconfig(hfa384x_t
*hw
, u16 rid
, void *buf
, u16 len
)
2078 return hfa384x_dorrid_wait(hw
, rid
, buf
, len
);
2081 /*----------------------------------------------------------------
2082 * hfa384x_drvr_getconfig_async
2084 * Performs the sequence necessary to perform an async read of
2085 * of a config/info item.
2088 * hw device structure
2089 * rid config/info record id (host order)
2090 * buf host side record buffer. Upon return it will
2091 * contain the body portion of the record (minus the
2093 * len buffer length (in bytes, should match record length)
2094 * cbfn caller supplied callback, called when the command
2095 * is done (successful or not).
2096 * cbfndata pointer to some caller supplied data that will be
2097 * passed in as an argument to the cbfn.
2100 * nothing the cbfn gets a status argument identifying if
2103 * Queues an hfa384x_usbcmd_t for subsequent execution.
2107 ----------------------------------------------------------------*/
2109 hfa384x_drvr_getconfig_async(hfa384x_t
*hw
,
2110 u16 rid
, ctlx_usercb_t usercb
, void *usercb_data
)
2112 return hfa384x_dorrid_async(hw
, rid
, NULL
, 0,
2113 hfa384x_cb_rrid
, usercb
, usercb_data
);
2116 /*----------------------------------------------------------------
2117 * hfa384x_drvr_setconfig_async
2119 * Performs the sequence necessary to write a config/info item.
2122 * hw device structure
2123 * rid config/info record id (in host order)
2124 * buf host side record buffer
2125 * len buffer length (in bytes)
2126 * usercb completion callback
2127 * usercb_data completion callback argument
2131 * >0 f/w reported error - f/w status code
2132 * <0 driver reported error
2138 ----------------------------------------------------------------*/
2140 hfa384x_drvr_setconfig_async(hfa384x_t
*hw
,
2143 u16 len
, ctlx_usercb_t usercb
, void *usercb_data
)
2145 return hfa384x_dowrid_async(hw
, rid
, buf
, len
,
2146 hfa384x_cb_status
, usercb
, usercb_data
);
2149 /*----------------------------------------------------------------
2150 * hfa384x_drvr_ramdl_disable
2152 * Ends the ram download state.
2155 * hw device structure
2159 * >0 f/w reported error - f/w status code
2160 * <0 driver reported error
2166 ----------------------------------------------------------------*/
2167 int hfa384x_drvr_ramdl_disable(hfa384x_t
*hw
)
2169 /* Check that we're already in the download state */
2170 if (hw
->dlstate
!= HFA384x_DLSTATE_RAMENABLED
)
2173 pr_debug("ramdl_disable()\n");
2175 /* There isn't much we can do at this point, so I don't */
2176 /* bother w/ the return value */
2177 hfa384x_cmd_download(hw
, HFA384x_PROGMODE_DISABLE
, 0, 0, 0);
2178 hw
->dlstate
= HFA384x_DLSTATE_DISABLED
;
2183 /*----------------------------------------------------------------
2184 * hfa384x_drvr_ramdl_enable
2186 * Begins the ram download state. Checks to see that we're not
2187 * already in a download state and that a port isn't enabled.
2188 * Sets the download state and calls cmd_download with the
2189 * ENABLE_VOLATILE subcommand and the exeaddr argument.
2192 * hw device structure
2193 * exeaddr the card execution address that will be
2194 * jumped to when ramdl_disable() is called
2199 * >0 f/w reported error - f/w status code
2200 * <0 driver reported error
2206 ----------------------------------------------------------------*/
2207 int hfa384x_drvr_ramdl_enable(hfa384x_t
*hw
, u32 exeaddr
)
2214 /* Check that a port isn't active */
2215 for (i
= 0; i
< HFA384x_PORTID_MAX
; i
++) {
2216 if (hw
->port_enabled
[i
]) {
2217 netdev_err(hw
->wlandev
->netdev
,
2218 "Can't download with a macport enabled.\n");
2223 /* Check that we're not already in a download state */
2224 if (hw
->dlstate
!= HFA384x_DLSTATE_DISABLED
) {
2225 netdev_err(hw
->wlandev
->netdev
, "Download state not disabled.\n");
2229 pr_debug("ramdl_enable, exeaddr=0x%08x\n", exeaddr
);
2231 /* Call the download(1,addr) function */
2232 lowaddr
= HFA384x_ADDR_CMD_MKOFF(exeaddr
);
2233 hiaddr
= HFA384x_ADDR_CMD_MKPAGE(exeaddr
);
2235 result
= hfa384x_cmd_download(hw
, HFA384x_PROGMODE_RAM
,
2236 lowaddr
, hiaddr
, 0);
2239 /* Set the download state */
2240 hw
->dlstate
= HFA384x_DLSTATE_RAMENABLED
;
2242 pr_debug("cmd_download(0x%04x, 0x%04x) failed, result=%d.\n",
2243 lowaddr
, hiaddr
, result
);
2249 /*----------------------------------------------------------------
2250 * hfa384x_drvr_ramdl_write
2252 * Performs a RAM download of a chunk of data. First checks to see
2253 * that we're in the RAM download state, then uses the [read|write]mem USB
2254 * commands to 1) copy the data, 2) readback and compare. The download
2255 * state is unaffected. When all data has been written using
2256 * this function, call drvr_ramdl_disable() to end the download state
2257 * and restart the MAC.
2260 * hw device structure
2261 * daddr Card address to write to. (host order)
2262 * buf Ptr to data to write.
2263 * len Length of data (host order).
2267 * >0 f/w reported error - f/w status code
2268 * <0 driver reported error
2274 ----------------------------------------------------------------*/
2275 int hfa384x_drvr_ramdl_write(hfa384x_t
*hw
, u32 daddr
, void *buf
, u32 len
)
2286 /* Check that we're in the ram download state */
2287 if (hw
->dlstate
!= HFA384x_DLSTATE_RAMENABLED
)
2290 netdev_info(hw
->wlandev
->netdev
, "Writing %d bytes to ram @0x%06x\n",
2293 /* How many dowmem calls? */
2294 nwrites
= len
/ HFA384x_USB_RWMEM_MAXLEN
;
2295 nwrites
+= len
% HFA384x_USB_RWMEM_MAXLEN
? 1 : 0;
2297 /* Do blocking wmem's */
2298 for (i
= 0; i
< nwrites
; i
++) {
2299 /* make address args */
2300 curraddr
= daddr
+ (i
* HFA384x_USB_RWMEM_MAXLEN
);
2301 currpage
= HFA384x_ADDR_CMD_MKPAGE(curraddr
);
2302 curroffset
= HFA384x_ADDR_CMD_MKOFF(curraddr
);
2303 currlen
= len
- (i
* HFA384x_USB_RWMEM_MAXLEN
);
2304 if (currlen
> HFA384x_USB_RWMEM_MAXLEN
)
2305 currlen
= HFA384x_USB_RWMEM_MAXLEN
;
2307 /* Do blocking ctlx */
2308 result
= hfa384x_dowmem_wait(hw
,
2312 (i
* HFA384x_USB_RWMEM_MAXLEN
),
2318 /* TODO: We really should have a readback. */
2324 /*----------------------------------------------------------------
2325 * hfa384x_drvr_readpda
2327 * Performs the sequence to read the PDA space. Note there is no
2328 * drvr_writepda() function. Writing a PDA is
2329 * generally implemented by a calling component via calls to
2330 * cmd_download and writing to the flash download buffer via the
2334 * hw device structure
2335 * buf buffer to store PDA in
2340 * >0 f/w reported error - f/w status code
2341 * <0 driver reported error
2342 * -ETIMEDOUT timeout waiting for the cmd regs to become
2343 * available, or waiting for the control reg
2344 * to indicate the Aux port is enabled.
2345 * -ENODATA the buffer does NOT contain a valid PDA.
2346 * Either the card PDA is bad, or the auxdata
2347 * reads are giving us garbage.
2353 * process or non-card interrupt.
2354 ----------------------------------------------------------------*/
2355 int hfa384x_drvr_readpda(hfa384x_t
*hw
, void *buf
, unsigned int len
)
2361 int currpdr
= 0; /* word offset of the current pdr */
2363 u16 pdrlen
; /* pdr length in bytes, host order */
2364 u16 pdrcode
; /* pdr code, host order */
2372 HFA3842_PDA_BASE
, 0}, {
2373 HFA3841_PDA_BASE
, 0}, {
2374 HFA3841_PDA_BOGUS_BASE
, 0}
2377 /* Read the pda from each known address. */
2378 for (i
= 0; i
< ARRAY_SIZE(pdaloc
); i
++) {
2380 currpage
= HFA384x_ADDR_CMD_MKPAGE(pdaloc
[i
].cardaddr
);
2381 curroffset
= HFA384x_ADDR_CMD_MKOFF(pdaloc
[i
].cardaddr
);
2383 /* units of bytes */
2384 result
= hfa384x_dormem_wait(hw
, currpage
, curroffset
, buf
,
2388 netdev_warn(hw
->wlandev
->netdev
,
2389 "Read from index %zd failed, continuing\n",
2394 /* Test for garbage */
2395 pdaok
= 1; /* initially assume good */
2397 while (pdaok
&& morepdrs
) {
2398 pdrlen
= le16_to_cpu(pda
[currpdr
]) * 2;
2399 pdrcode
= le16_to_cpu(pda
[currpdr
+ 1]);
2400 /* Test the record length */
2401 if (pdrlen
> HFA384x_PDR_LEN_MAX
|| pdrlen
== 0) {
2402 netdev_err(hw
->wlandev
->netdev
,
2403 "pdrlen invalid=%d\n", pdrlen
);
2408 if (!hfa384x_isgood_pdrcode(pdrcode
)) {
2409 netdev_err(hw
->wlandev
->netdev
, "pdrcode invalid=%d\n",
2414 /* Test for completion */
2415 if (pdrcode
== HFA384x_PDR_END_OF_PDA
)
2418 /* Move to the next pdr (if necessary) */
2420 /* note the access to pda[], need words here */
2421 currpdr
+= le16_to_cpu(pda
[currpdr
]) + 1;
2425 netdev_info(hw
->wlandev
->netdev
,
2426 "PDA Read from 0x%08x in %s space.\n",
2428 pdaloc
[i
].auxctl
== 0 ? "EXTDS" :
2429 pdaloc
[i
].auxctl
== 1 ? "NV" :
2430 pdaloc
[i
].auxctl
== 2 ? "PHY" :
2431 pdaloc
[i
].auxctl
== 3 ? "ICSRAM" :
2436 result
= pdaok
? 0 : -ENODATA
;
2439 pr_debug("Failure: pda is not okay\n");
2444 /*----------------------------------------------------------------
2445 * hfa384x_drvr_setconfig
2447 * Performs the sequence necessary to write a config/info item.
2450 * hw device structure
2451 * rid config/info record id (in host order)
2452 * buf host side record buffer
2453 * len buffer length (in bytes)
2457 * >0 f/w reported error - f/w status code
2458 * <0 driver reported error
2464 ----------------------------------------------------------------*/
2465 int hfa384x_drvr_setconfig(hfa384x_t
*hw
, u16 rid
, void *buf
, u16 len
)
2467 return hfa384x_dowrid_wait(hw
, rid
, buf
, len
);
2470 /*----------------------------------------------------------------
2471 * hfa384x_drvr_start
2473 * Issues the MAC initialize command, sets up some data structures,
2474 * and enables the interrupts. After this function completes, the
2475 * low-level stuff should be ready for any/all commands.
2478 * hw device structure
2481 * >0 f/w reported error - f/w status code
2482 * <0 driver reported error
2488 ----------------------------------------------------------------*/
2490 int hfa384x_drvr_start(hfa384x_t
*hw
)
2492 int result
, result1
, result2
;
2497 /* Clear endpoint stalls - but only do this if the endpoint
2498 * is showing a stall status. Some prism2 cards seem to behave
2499 * badly if a clear_halt is called when the endpoint is already
2503 usb_get_status(hw
->usb
, USB_RECIP_ENDPOINT
, hw
->endp_in
, &status
);
2505 netdev_err(hw
->wlandev
->netdev
, "Cannot get bulk in endpoint status.\n");
2508 if ((status
== 1) && usb_clear_halt(hw
->usb
, hw
->endp_in
))
2509 netdev_err(hw
->wlandev
->netdev
, "Failed to reset bulk in endpoint.\n");
2512 usb_get_status(hw
->usb
, USB_RECIP_ENDPOINT
, hw
->endp_out
, &status
);
2514 netdev_err(hw
->wlandev
->netdev
, "Cannot get bulk out endpoint status.\n");
2517 if ((status
== 1) && usb_clear_halt(hw
->usb
, hw
->endp_out
))
2518 netdev_err(hw
->wlandev
->netdev
, "Failed to reset bulk out endpoint.\n");
2520 /* Synchronous unlink, in case we're trying to restart the driver */
2521 usb_kill_urb(&hw
->rx_urb
);
2523 /* Post the IN urb */
2524 result
= submit_rx_urb(hw
, GFP_KERNEL
);
2526 netdev_err(hw
->wlandev
->netdev
,
2527 "Fatal, failed to submit RX URB, result=%d\n",
2532 /* Call initialize twice, with a 1 second sleep in between.
2533 * This is a nasty work-around since many prism2 cards seem to
2534 * need time to settle after an init from cold. The second
2535 * call to initialize in theory is not necessary - but we call
2536 * it anyway as a double insurance policy:
2537 * 1) If the first init should fail, the second may well succeed
2538 * and the card can still be used
2539 * 2) It helps ensures all is well with the card after the first
2540 * init and settle time.
2542 result1
= hfa384x_cmd_initialize(hw
);
2544 result
= hfa384x_cmd_initialize(hw
);
2548 netdev_err(hw
->wlandev
->netdev
,
2549 "cmd_initialize() failed on two attempts, results %d and %d\n",
2551 usb_kill_urb(&hw
->rx_urb
);
2554 pr_debug("First cmd_initialize() failed (result %d),\n",
2556 pr_debug("but second attempt succeeded. All should be ok\n");
2558 } else if (result2
!= 0) {
2559 netdev_warn(hw
->wlandev
->netdev
, "First cmd_initialize() succeeded, but second attempt failed (result=%d)\n",
2561 netdev_warn(hw
->wlandev
->netdev
,
2562 "Most likely the card will be functional\n");
2566 hw
->state
= HFA384x_STATE_RUNNING
;
2572 /*----------------------------------------------------------------
2575 * Shuts down the MAC to the point where it is safe to unload the
2576 * driver. Any subsystem that may be holding a data or function
2577 * ptr into the driver must be cleared/deinitialized.
2580 * hw device structure
2583 * >0 f/w reported error - f/w status code
2584 * <0 driver reported error
2590 ----------------------------------------------------------------*/
2591 int hfa384x_drvr_stop(hfa384x_t
*hw
)
2597 /* There's no need for spinlocks here. The USB "disconnect"
2598 * function sets this "removed" flag and then calls us.
2600 if (!hw
->wlandev
->hwremoved
) {
2601 /* Call initialize to leave the MAC in its 'reset' state */
2602 hfa384x_cmd_initialize(hw
);
2604 /* Cancel the rxurb */
2605 usb_kill_urb(&hw
->rx_urb
);
2608 hw
->link_status
= HFA384x_LINK_NOTCONNECTED
;
2609 hw
->state
= HFA384x_STATE_INIT
;
2611 del_timer_sync(&hw
->commsqual_timer
);
2613 /* Clear all the port status */
2614 for (i
= 0; i
< HFA384x_NUMPORTS_MAX
; i
++)
2615 hw
->port_enabled
[i
] = 0;
2620 /*----------------------------------------------------------------
2621 * hfa384x_drvr_txframe
2623 * Takes a frame from prism2sta and queues it for transmission.
2626 * hw device structure
2627 * skb packet buffer struct. Contains an 802.11
2629 * p80211_hdr points to the 802.11 header for the packet.
2631 * 0 Success and more buffs available
2632 * 1 Success but no more buffs
2633 * 2 Allocation failure
2634 * 4 Buffer full or queue busy
2640 ----------------------------------------------------------------*/
2641 int hfa384x_drvr_txframe(hfa384x_t
*hw
, struct sk_buff
*skb
,
2642 union p80211_hdr
*p80211_hdr
,
2643 struct p80211_metawep
*p80211_wep
)
2645 int usbpktlen
= sizeof(hfa384x_tx_frame_t
);
2650 if (hw
->tx_urb
.status
== -EINPROGRESS
) {
2651 netdev_warn(hw
->wlandev
->netdev
, "TX URB already in use\n");
2656 /* Build Tx frame structure */
2657 /* Set up the control field */
2658 memset(&hw
->txbuff
.txfrm
.desc
, 0, sizeof(hw
->txbuff
.txfrm
.desc
));
2660 /* Setup the usb type field */
2661 hw
->txbuff
.type
= cpu_to_le16(HFA384x_USB_TXFRM
);
2663 /* Set up the sw_support field to identify this frame */
2664 hw
->txbuff
.txfrm
.desc
.sw_support
= 0x0123;
2666 /* Tx complete and Tx exception disable per dleach. Might be causing
2669 /* #define DOEXC SLP -- doboth breaks horribly under load, doexc less so. */
2671 hw
->txbuff
.txfrm
.desc
.tx_control
=
2672 HFA384x_TX_MACPORT_SET(0) | HFA384x_TX_STRUCTYPE_SET(1) |
2673 HFA384x_TX_TXEX_SET(1) | HFA384x_TX_TXOK_SET(1);
2674 #elif defined(DOEXC)
2675 hw
->txbuff
.txfrm
.desc
.tx_control
=
2676 HFA384x_TX_MACPORT_SET(0) | HFA384x_TX_STRUCTYPE_SET(1) |
2677 HFA384x_TX_TXEX_SET(1) | HFA384x_TX_TXOK_SET(0);
2679 hw
->txbuff
.txfrm
.desc
.tx_control
=
2680 HFA384x_TX_MACPORT_SET(0) | HFA384x_TX_STRUCTYPE_SET(1) |
2681 HFA384x_TX_TXEX_SET(0) | HFA384x_TX_TXOK_SET(0);
2683 hw
->txbuff
.txfrm
.desc
.tx_control
=
2684 cpu_to_le16(hw
->txbuff
.txfrm
.desc
.tx_control
);
2686 /* copy the header over to the txdesc */
2687 memcpy(&(hw
->txbuff
.txfrm
.desc
.frame_control
), p80211_hdr
,
2688 sizeof(union p80211_hdr
));
2690 /* if we're using host WEP, increase size by IV+ICV */
2691 if (p80211_wep
->data
) {
2692 hw
->txbuff
.txfrm
.desc
.data_len
= cpu_to_le16(skb
->len
+ 8);
2695 hw
->txbuff
.txfrm
.desc
.data_len
= cpu_to_le16(skb
->len
);
2698 usbpktlen
+= skb
->len
;
2700 /* copy over the WEP IV if we are using host WEP */
2701 ptr
= hw
->txbuff
.txfrm
.data
;
2702 if (p80211_wep
->data
) {
2703 memcpy(ptr
, p80211_wep
->iv
, sizeof(p80211_wep
->iv
));
2704 ptr
+= sizeof(p80211_wep
->iv
);
2705 memcpy(ptr
, p80211_wep
->data
, skb
->len
);
2707 memcpy(ptr
, skb
->data
, skb
->len
);
2709 /* copy over the packet data */
2712 /* copy over the WEP ICV if we are using host WEP */
2713 if (p80211_wep
->data
)
2714 memcpy(ptr
, p80211_wep
->icv
, sizeof(p80211_wep
->icv
));
2716 /* Send the USB packet */
2717 usb_fill_bulk_urb(&(hw
->tx_urb
), hw
->usb
,
2719 &(hw
->txbuff
), ROUNDUP64(usbpktlen
),
2720 hfa384x_usbout_callback
, hw
->wlandev
);
2721 hw
->tx_urb
.transfer_flags
|= USB_QUEUE_BULK
;
2724 ret
= submit_tx_urb(hw
, &hw
->tx_urb
, GFP_ATOMIC
);
2726 netdev_err(hw
->wlandev
->netdev
,
2727 "submit_tx_urb() failed, error=%d\n", ret
);
2735 void hfa384x_tx_timeout(wlandevice_t
*wlandev
)
2737 hfa384x_t
*hw
= wlandev
->priv
;
2738 unsigned long flags
;
2740 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
2742 if (!hw
->wlandev
->hwremoved
) {
2745 sched
= !test_and_set_bit(WORK_TX_HALT
, &hw
->usb_flags
);
2746 sched
|= !test_and_set_bit(WORK_RX_HALT
, &hw
->usb_flags
);
2748 schedule_work(&hw
->usb_work
);
2751 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
2754 /*----------------------------------------------------------------
2755 * hfa384x_usbctlx_reaper_task
2757 * Tasklet to delete dead CTLX objects
2760 * data ptr to a hfa384x_t
2766 ----------------------------------------------------------------*/
2767 static void hfa384x_usbctlx_reaper_task(unsigned long data
)
2769 hfa384x_t
*hw
= (hfa384x_t
*)data
;
2770 hfa384x_usbctlx_t
*ctlx
, *temp
;
2771 unsigned long flags
;
2773 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
2775 /* This list is guaranteed to be empty if someone
2776 * has unplugged the adapter.
2778 list_for_each_entry_safe(ctlx
, temp
, &hw
->ctlxq
.reapable
, list
) {
2779 list_del(&ctlx
->list
);
2783 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
2786 /*----------------------------------------------------------------
2787 * hfa384x_usbctlx_completion_task
2789 * Tasklet to call completion handlers for returned CTLXs
2792 * data ptr to hfa384x_t
2799 ----------------------------------------------------------------*/
2800 static void hfa384x_usbctlx_completion_task(unsigned long data
)
2802 hfa384x_t
*hw
= (hfa384x_t
*)data
;
2803 hfa384x_usbctlx_t
*ctlx
, *temp
;
2804 unsigned long flags
;
2808 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
2810 /* This list is guaranteed to be empty if someone
2811 * has unplugged the adapter ...
2813 list_for_each_entry_safe(ctlx
, temp
, &hw
->ctlxq
.completing
, list
) {
2814 /* Call the completion function that this
2815 * command was assigned, assuming it has one.
2817 if (ctlx
->cmdcb
!= NULL
) {
2818 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
2819 ctlx
->cmdcb(hw
, ctlx
);
2820 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
2822 /* Make sure we don't try and complete
2823 * this CTLX more than once!
2827 /* Did someone yank the adapter out
2828 * while our list was (briefly) unlocked?
2830 if (hw
->wlandev
->hwremoved
) {
2837 * "Reapable" CTLXs are ones which don't have any
2838 * threads waiting for them to die. Hence they must
2839 * be delivered to The Reaper!
2841 if (ctlx
->reapable
) {
2842 /* Move the CTLX off the "completing" list (hopefully)
2843 * on to the "reapable" list where the reaper task
2844 * can find it. And "reapable" means that this CTLX
2845 * isn't sitting on a wait-queue somewhere.
2847 list_move_tail(&ctlx
->list
, &hw
->ctlxq
.reapable
);
2851 complete(&ctlx
->done
);
2853 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
2856 tasklet_schedule(&hw
->reaper_bh
);
2859 /*----------------------------------------------------------------
2860 * unlocked_usbctlx_cancel_async
2862 * Mark the CTLX dead asynchronously, and ensure that the
2863 * next command on the queue is run afterwards.
2866 * hw ptr to the hfa384x_t structure
2867 * ctlx ptr to a CTLX structure
2870 * 0 the CTLX's URB is inactive
2871 * -EINPROGRESS the URB is currently being unlinked
2874 * Either process or interrupt, but presumably interrupt
2875 ----------------------------------------------------------------*/
2876 static int unlocked_usbctlx_cancel_async(hfa384x_t
*hw
,
2877 hfa384x_usbctlx_t
*ctlx
)
2882 * Try to delete the URB containing our request packet.
2883 * If we succeed, then its completion handler will be
2884 * called with a status of -ECONNRESET.
2886 hw
->ctlx_urb
.transfer_flags
|= URB_ASYNC_UNLINK
;
2887 ret
= usb_unlink_urb(&hw
->ctlx_urb
);
2889 if (ret
!= -EINPROGRESS
) {
2891 * The OUT URB had either already completed
2892 * or was still in the pending queue, so the
2893 * URB's completion function will not be called.
2894 * We will have to complete the CTLX ourselves.
2896 ctlx
->state
= CTLX_REQ_FAILED
;
2897 unlocked_usbctlx_complete(hw
, ctlx
);
2904 /*----------------------------------------------------------------
2905 * unlocked_usbctlx_complete
2907 * A CTLX has completed. It may have been successful, it may not
2908 * have been. At this point, the CTLX should be quiescent. The URBs
2909 * aren't active and the timers should have been stopped.
2911 * The CTLX is migrated to the "completing" queue, and the completing
2912 * tasklet is scheduled.
2915 * hw ptr to a hfa384x_t structure
2916 * ctlx ptr to a ctlx structure
2924 * Either, assume interrupt
2925 ----------------------------------------------------------------*/
2926 static void unlocked_usbctlx_complete(hfa384x_t
*hw
, hfa384x_usbctlx_t
*ctlx
)
2928 /* Timers have been stopped, and ctlx should be in
2929 * a terminal state. Retire it from the "active"
2932 list_move_tail(&ctlx
->list
, &hw
->ctlxq
.completing
);
2933 tasklet_schedule(&hw
->completion_bh
);
2935 switch (ctlx
->state
) {
2937 case CTLX_REQ_FAILED
:
2938 /* This are the correct terminating states. */
2942 netdev_err(hw
->wlandev
->netdev
, "CTLX[%d] not in a terminating state(%s)\n",
2943 le16_to_cpu(ctlx
->outbuf
.type
),
2944 ctlxstr(ctlx
->state
));
2949 /*----------------------------------------------------------------
2950 * hfa384x_usbctlxq_run
2952 * Checks to see if the head item is running. If not, starts it.
2955 * hw ptr to hfa384x_t
2964 ----------------------------------------------------------------*/
2965 static void hfa384x_usbctlxq_run(hfa384x_t
*hw
)
2967 unsigned long flags
;
2970 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
2972 /* Only one active CTLX at any one time, because there's no
2973 * other (reliable) way to match the response URB to the
2976 * Don't touch any of these CTLXs if the hardware
2977 * has been removed or the USB subsystem is stalled.
2979 if (!list_empty(&hw
->ctlxq
.active
) ||
2980 test_bit(WORK_TX_HALT
, &hw
->usb_flags
) || hw
->wlandev
->hwremoved
)
2983 while (!list_empty(&hw
->ctlxq
.pending
)) {
2984 hfa384x_usbctlx_t
*head
;
2987 /* This is the first pending command */
2988 head
= list_entry(hw
->ctlxq
.pending
.next
,
2989 hfa384x_usbctlx_t
, list
);
2991 /* We need to split this off to avoid a race condition */
2992 list_move_tail(&head
->list
, &hw
->ctlxq
.active
);
2994 /* Fill the out packet */
2995 usb_fill_bulk_urb(&(hw
->ctlx_urb
), hw
->usb
,
2997 &(head
->outbuf
), ROUNDUP64(head
->outbufsize
),
2998 hfa384x_ctlxout_callback
, hw
);
2999 hw
->ctlx_urb
.transfer_flags
|= USB_QUEUE_BULK
;
3001 /* Now submit the URB and update the CTLX's state */
3002 result
= SUBMIT_URB(&hw
->ctlx_urb
, GFP_ATOMIC
);
3004 /* This CTLX is now running on the active queue */
3005 head
->state
= CTLX_REQ_SUBMITTED
;
3007 /* Start the OUT wait timer */
3008 hw
->req_timer_done
= 0;
3009 hw
->reqtimer
.expires
= jiffies
+ HZ
;
3010 add_timer(&hw
->reqtimer
);
3012 /* Start the IN wait timer */
3013 hw
->resp_timer_done
= 0;
3014 hw
->resptimer
.expires
= jiffies
+ 2 * HZ
;
3015 add_timer(&hw
->resptimer
);
3020 if (result
== -EPIPE
) {
3021 /* The OUT pipe needs resetting, so put
3022 * this CTLX back in the "pending" queue
3023 * and schedule a reset ...
3025 netdev_warn(hw
->wlandev
->netdev
,
3026 "%s tx pipe stalled: requesting reset\n",
3027 hw
->wlandev
->netdev
->name
);
3028 list_move(&head
->list
, &hw
->ctlxq
.pending
);
3029 set_bit(WORK_TX_HALT
, &hw
->usb_flags
);
3030 schedule_work(&hw
->usb_work
);
3034 if (result
== -ESHUTDOWN
) {
3035 netdev_warn(hw
->wlandev
->netdev
, "%s urb shutdown!\n",
3036 hw
->wlandev
->netdev
->name
);
3040 netdev_err(hw
->wlandev
->netdev
, "Failed to submit CTLX[%d]: error=%d\n",
3041 le16_to_cpu(head
->outbuf
.type
), result
);
3042 unlocked_usbctlx_complete(hw
, head
);
3046 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3049 /*----------------------------------------------------------------
3050 * hfa384x_usbin_callback
3052 * Callback for URBs on the BULKIN endpoint.
3055 * urb ptr to the completed urb
3064 ----------------------------------------------------------------*/
3065 static void hfa384x_usbin_callback(struct urb
*urb
)
3067 wlandevice_t
*wlandev
= urb
->context
;
3069 hfa384x_usbin_t
*usbin
= (hfa384x_usbin_t
*)urb
->transfer_buffer
;
3070 struct sk_buff
*skb
= NULL
;
3081 if (!wlandev
|| !wlandev
->netdev
|| wlandev
->hwremoved
)
3088 skb
= hw
->rx_urb_skb
;
3089 BUG_ON(!skb
|| (skb
->data
!= urb
->transfer_buffer
));
3091 hw
->rx_urb_skb
= NULL
;
3093 /* Check for error conditions within the URB */
3094 switch (urb
->status
) {
3098 /* Check for short packet */
3099 if (urb
->actual_length
== 0) {
3100 wlandev
->netdev
->stats
.rx_errors
++;
3101 wlandev
->netdev
->stats
.rx_length_errors
++;
3107 netdev_warn(hw
->wlandev
->netdev
, "%s rx pipe stalled: requesting reset\n",
3108 wlandev
->netdev
->name
);
3109 if (!test_and_set_bit(WORK_RX_HALT
, &hw
->usb_flags
))
3110 schedule_work(&hw
->usb_work
);
3111 wlandev
->netdev
->stats
.rx_errors
++;
3118 if (!test_and_set_bit(THROTTLE_RX
, &hw
->usb_flags
) &&
3119 !timer_pending(&hw
->throttle
)) {
3120 mod_timer(&hw
->throttle
, jiffies
+ THROTTLE_JIFFIES
);
3122 wlandev
->netdev
->stats
.rx_errors
++;
3127 wlandev
->netdev
->stats
.rx_over_errors
++;
3133 pr_debug("status=%d, device removed.\n", urb
->status
);
3139 pr_debug("status=%d, urb explicitly unlinked.\n", urb
->status
);
3144 pr_debug("urb status=%d, transfer flags=0x%x\n",
3145 urb
->status
, urb
->transfer_flags
);
3146 wlandev
->netdev
->stats
.rx_errors
++;
3151 urb_status
= urb
->status
;
3153 if (action
!= ABORT
) {
3154 /* Repost the RX URB */
3155 result
= submit_rx_urb(hw
, GFP_ATOMIC
);
3158 netdev_err(hw
->wlandev
->netdev
,
3159 "Fatal, failed to resubmit rx_urb. error=%d\n",
3164 /* Handle any USB-IN packet */
3165 /* Note: the check of the sw_support field, the type field doesn't
3166 * have bit 12 set like the docs suggest.
3168 type
= le16_to_cpu(usbin
->type
);
3169 if (HFA384x_USB_ISRXFRM(type
)) {
3170 if (action
== HANDLE
) {
3171 if (usbin
->txfrm
.desc
.sw_support
== 0x0123) {
3172 hfa384x_usbin_txcompl(wlandev
, usbin
);
3174 skb_put(skb
, sizeof(*usbin
));
3175 hfa384x_usbin_rx(wlandev
, skb
);
3181 if (HFA384x_USB_ISTXFRM(type
)) {
3182 if (action
== HANDLE
)
3183 hfa384x_usbin_txcompl(wlandev
, usbin
);
3187 case HFA384x_USB_INFOFRM
:
3188 if (action
== ABORT
)
3190 if (action
== HANDLE
)
3191 hfa384x_usbin_info(wlandev
, usbin
);
3194 case HFA384x_USB_CMDRESP
:
3195 case HFA384x_USB_WRIDRESP
:
3196 case HFA384x_USB_RRIDRESP
:
3197 case HFA384x_USB_WMEMRESP
:
3198 case HFA384x_USB_RMEMRESP
:
3199 /* ALWAYS, ALWAYS, ALWAYS handle this CTLX!!!! */
3200 hfa384x_usbin_ctlx(hw
, usbin
, urb_status
);
3203 case HFA384x_USB_BUFAVAIL
:
3204 pr_debug("Received BUFAVAIL packet, frmlen=%d\n",
3205 usbin
->bufavail
.frmlen
);
3208 case HFA384x_USB_ERROR
:
3209 pr_debug("Received USB_ERROR packet, errortype=%d\n",
3210 usbin
->usberror
.errortype
);
3214 pr_debug("Unrecognized USBIN packet, type=%x, status=%d\n",
3215 usbin
->type
, urb_status
);
3225 /*----------------------------------------------------------------
3226 * hfa384x_usbin_ctlx
3228 * We've received a URB containing a Prism2 "response" message.
3229 * This message needs to be matched up with a CTLX on the active
3230 * queue and our state updated accordingly.
3233 * hw ptr to hfa384x_t
3234 * usbin ptr to USB IN packet
3235 * urb_status status of this Bulk-In URB
3244 ----------------------------------------------------------------*/
3245 static void hfa384x_usbin_ctlx(hfa384x_t
*hw
, hfa384x_usbin_t
*usbin
,
3248 hfa384x_usbctlx_t
*ctlx
;
3250 unsigned long flags
;
3253 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
3255 /* There can be only one CTLX on the active queue
3256 * at any one time, and this is the CTLX that the
3257 * timers are waiting for.
3259 if (list_empty(&hw
->ctlxq
.active
))
3262 /* Remove the "response timeout". It's possible that
3263 * we are already too late, and that the timeout is
3264 * already running. And that's just too bad for us,
3265 * because we could lose our CTLX from the active
3268 if (del_timer(&hw
->resptimer
) == 0) {
3269 if (hw
->resp_timer_done
== 0) {
3270 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3274 hw
->resp_timer_done
= 1;
3277 ctlx
= get_active_ctlx(hw
);
3279 if (urb_status
!= 0) {
3281 * Bad CTLX, so get rid of it. But we only
3282 * remove it from the active queue if we're no
3283 * longer expecting the OUT URB to complete.
3285 if (unlocked_usbctlx_cancel_async(hw
, ctlx
) == 0)
3288 const __le16 intype
= (usbin
->type
& ~cpu_to_le16(0x8000));
3291 * Check that our message is what we're expecting ...
3293 if (ctlx
->outbuf
.type
!= intype
) {
3294 netdev_warn(hw
->wlandev
->netdev
,
3295 "Expected IN[%d], received IN[%d] - ignored.\n",
3296 le16_to_cpu(ctlx
->outbuf
.type
),
3297 le16_to_cpu(intype
));
3301 /* This URB has succeeded, so grab the data ... */
3302 memcpy(&ctlx
->inbuf
, usbin
, sizeof(ctlx
->inbuf
));
3304 switch (ctlx
->state
) {
3305 case CTLX_REQ_SUBMITTED
:
3307 * We have received our response URB before
3308 * our request has been acknowledged. Odd,
3309 * but our OUT URB is still alive...
3311 pr_debug("Causality violation: please reboot Universe\n");
3312 ctlx
->state
= CTLX_RESP_COMPLETE
;
3315 case CTLX_REQ_COMPLETE
:
3317 * This is the usual path: our request
3318 * has already been acknowledged, and
3319 * now we have received the reply too.
3321 ctlx
->state
= CTLX_COMPLETE
;
3322 unlocked_usbctlx_complete(hw
, ctlx
);
3328 * Throw this CTLX away ...
3330 netdev_err(hw
->wlandev
->netdev
,
3331 "Matched IN URB, CTLX[%d] in invalid state(%s). Discarded.\n",
3332 le16_to_cpu(ctlx
->outbuf
.type
),
3333 ctlxstr(ctlx
->state
));
3334 if (unlocked_usbctlx_cancel_async(hw
, ctlx
) == 0)
3341 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3344 hfa384x_usbctlxq_run(hw
);
3347 /*----------------------------------------------------------------
3348 * hfa384x_usbin_txcompl
3350 * At this point we have the results of a previous transmit.
3353 * wlandev wlan device
3354 * usbin ptr to the usb transfer buffer
3363 ----------------------------------------------------------------*/
3364 static void hfa384x_usbin_txcompl(wlandevice_t
*wlandev
,
3365 hfa384x_usbin_t
*usbin
)
3369 status
= le16_to_cpu(usbin
->type
); /* yeah I know it says type... */
3371 /* Was there an error? */
3372 if (HFA384x_TXSTATUS_ISERROR(status
))
3373 prism2sta_ev_txexc(wlandev
, status
);
3375 prism2sta_ev_tx(wlandev
, status
);
3378 /*----------------------------------------------------------------
3381 * At this point we have a successful received a rx frame packet.
3384 * wlandev wlan device
3385 * usbin ptr to the usb transfer buffer
3394 ----------------------------------------------------------------*/
3395 static void hfa384x_usbin_rx(wlandevice_t
*wlandev
, struct sk_buff
*skb
)
3397 hfa384x_usbin_t
*usbin
= (hfa384x_usbin_t
*)skb
->data
;
3398 hfa384x_t
*hw
= wlandev
->priv
;
3400 struct p80211_rxmeta
*rxmeta
;
3404 /* Byte order convert once up front. */
3405 usbin
->rxfrm
.desc
.status
= le16_to_cpu(usbin
->rxfrm
.desc
.status
);
3406 usbin
->rxfrm
.desc
.time
= le32_to_cpu(usbin
->rxfrm
.desc
.time
);
3408 /* Now handle frame based on port# */
3409 switch (HFA384x_RXSTATUS_MACPORT_GET(usbin
->rxfrm
.desc
.status
)) {
3411 fc
= le16_to_cpu(usbin
->rxfrm
.desc
.frame_control
);
3413 /* If exclude and we receive an unencrypted, drop it */
3414 if ((wlandev
->hostwep
& HOSTWEP_EXCLUDEUNENCRYPTED
) &&
3415 !WLAN_GET_FC_ISWEP(fc
)) {
3419 data_len
= le16_to_cpu(usbin
->rxfrm
.desc
.data_len
);
3421 /* How much header data do we have? */
3422 hdrlen
= p80211_headerlen(fc
);
3424 /* Pull off the descriptor */
3425 skb_pull(skb
, sizeof(hfa384x_rx_frame_t
));
3427 /* Now shunt the header block up against the data block
3428 * with an "overlapping" copy
3430 memmove(skb_push(skb
, hdrlen
),
3431 &usbin
->rxfrm
.desc
.frame_control
, hdrlen
);
3433 skb
->dev
= wlandev
->netdev
;
3434 skb
->dev
->last_rx
= jiffies
;
3436 /* And set the frame length properly */
3437 skb_trim(skb
, data_len
+ hdrlen
);
3439 /* The prism2 series does not return the CRC */
3440 memset(skb_put(skb
, WLAN_CRC_LEN
), 0xff, WLAN_CRC_LEN
);
3442 skb_reset_mac_header(skb
);
3444 /* Attach the rxmeta, set some stuff */
3445 p80211skb_rxmeta_attach(wlandev
, skb
);
3446 rxmeta
= P80211SKB_RXMETA(skb
);
3447 rxmeta
->mactime
= usbin
->rxfrm
.desc
.time
;
3448 rxmeta
->rxrate
= usbin
->rxfrm
.desc
.rate
;
3449 rxmeta
->signal
= usbin
->rxfrm
.desc
.signal
- hw
->dbmadjust
;
3450 rxmeta
->noise
= usbin
->rxfrm
.desc
.silence
- hw
->dbmadjust
;
3452 p80211netdev_rx(wlandev
, skb
);
3457 if (!HFA384x_RXSTATUS_ISFCSERR(usbin
->rxfrm
.desc
.status
)) {
3458 /* Copy to wlansnif skb */
3459 hfa384x_int_rxmonitor(wlandev
, &usbin
->rxfrm
);
3462 pr_debug("Received monitor frame: FCSerr set\n");
3467 netdev_warn(hw
->wlandev
->netdev
, "Received frame on unsupported port=%d\n",
3468 HFA384x_RXSTATUS_MACPORT_GET(
3469 usbin
->rxfrm
.desc
.status
));
3474 /*----------------------------------------------------------------
3475 * hfa384x_int_rxmonitor
3477 * Helper function for int_rx. Handles monitor frames.
3478 * Note that this function allocates space for the FCS and sets it
3479 * to 0xffffffff. The hfa384x doesn't give us the FCS value but the
3480 * higher layers expect it. 0xffffffff is used as a flag to indicate
3484 * wlandev wlan device structure
3485 * rxfrm rx descriptor read from card in int_rx
3491 * Allocates an skb and passes it up via the PF_PACKET interface.
3494 ----------------------------------------------------------------*/
3495 static void hfa384x_int_rxmonitor(wlandevice_t
*wlandev
,
3496 hfa384x_usb_rxfrm_t
*rxfrm
)
3498 hfa384x_rx_frame_t
*rxdesc
= &(rxfrm
->desc
);
3499 unsigned int hdrlen
= 0;
3500 unsigned int datalen
= 0;
3501 unsigned int skblen
= 0;
3504 struct sk_buff
*skb
;
3505 hfa384x_t
*hw
= wlandev
->priv
;
3507 /* Remember the status, time, and data_len fields are in host order */
3508 /* Figure out how big the frame is */
3509 fc
= le16_to_cpu(rxdesc
->frame_control
);
3510 hdrlen
= p80211_headerlen(fc
);
3511 datalen
= le16_to_cpu(rxdesc
->data_len
);
3513 /* Allocate an ind message+framesize skb */
3514 skblen
= sizeof(struct p80211_caphdr
) + hdrlen
+ datalen
+ WLAN_CRC_LEN
;
3516 /* sanity check the length */
3518 (sizeof(struct p80211_caphdr
) +
3519 WLAN_HDR_A4_LEN
+ WLAN_DATA_MAXLEN
+ WLAN_CRC_LEN
)) {
3520 pr_debug("overlen frm: len=%zd\n",
3521 skblen
- sizeof(struct p80211_caphdr
));
3524 skb
= dev_alloc_skb(skblen
);
3528 /* only prepend the prism header if in the right mode */
3529 if ((wlandev
->netdev
->type
== ARPHRD_IEEE80211_PRISM
) &&
3530 (hw
->sniffhdr
!= 0)) {
3531 struct p80211_caphdr
*caphdr
;
3532 /* The NEW header format! */
3533 datap
= skb_put(skb
, sizeof(struct p80211_caphdr
));
3534 caphdr
= (struct p80211_caphdr
*)datap
;
3536 caphdr
->version
= htonl(P80211CAPTURE_VERSION
);
3537 caphdr
->length
= htonl(sizeof(struct p80211_caphdr
));
3538 caphdr
->mactime
= __cpu_to_be64(rxdesc
->time
) * 1000;
3539 caphdr
->hosttime
= __cpu_to_be64(jiffies
);
3540 caphdr
->phytype
= htonl(4); /* dss_dot11_b */
3541 caphdr
->channel
= htonl(hw
->sniff_channel
);
3542 caphdr
->datarate
= htonl(rxdesc
->rate
);
3543 caphdr
->antenna
= htonl(0); /* unknown */
3544 caphdr
->priority
= htonl(0); /* unknown */
3545 caphdr
->ssi_type
= htonl(3); /* rssi_raw */
3546 caphdr
->ssi_signal
= htonl(rxdesc
->signal
);
3547 caphdr
->ssi_noise
= htonl(rxdesc
->silence
);
3548 caphdr
->preamble
= htonl(0); /* unknown */
3549 caphdr
->encoding
= htonl(1); /* cck */
3552 /* Copy the 802.11 header to the skb
3553 (ctl frames may be less than a full header) */
3554 datap
= skb_put(skb
, hdrlen
);
3555 memcpy(datap
, &(rxdesc
->frame_control
), hdrlen
);
3557 /* If any, copy the data from the card to the skb */
3559 datap
= skb_put(skb
, datalen
);
3560 memcpy(datap
, rxfrm
->data
, datalen
);
3562 /* check for unencrypted stuff if WEP bit set. */
3563 if (*(datap
- hdrlen
+ 1) & 0x40) /* wep set */
3564 if ((*(datap
) == 0xaa) && (*(datap
+ 1) == 0xaa))
3565 /* clear wep; it's the 802.2 header! */
3566 *(datap
- hdrlen
+ 1) &= 0xbf;
3569 if (hw
->sniff_fcs
) {
3571 datap
= skb_put(skb
, WLAN_CRC_LEN
);
3572 memset(datap
, 0xff, WLAN_CRC_LEN
);
3575 /* pass it back up */
3576 p80211netdev_rx(wlandev
, skb
);
3579 /*----------------------------------------------------------------
3580 * hfa384x_usbin_info
3582 * At this point we have a successful received a Prism2 info frame.
3585 * wlandev wlan device
3586 * usbin ptr to the usb transfer buffer
3595 ----------------------------------------------------------------*/
3596 static void hfa384x_usbin_info(wlandevice_t
*wlandev
, hfa384x_usbin_t
*usbin
)
3598 usbin
->infofrm
.info
.framelen
=
3599 le16_to_cpu(usbin
->infofrm
.info
.framelen
);
3600 prism2sta_ev_info(wlandev
, &usbin
->infofrm
.info
);
3603 /*----------------------------------------------------------------
3604 * hfa384x_usbout_callback
3606 * Callback for URBs on the BULKOUT endpoint.
3609 * urb ptr to the completed urb
3618 ----------------------------------------------------------------*/
3619 static void hfa384x_usbout_callback(struct urb
*urb
)
3621 wlandevice_t
*wlandev
= urb
->context
;
3627 if (wlandev
&& wlandev
->netdev
) {
3628 switch (urb
->status
) {
3630 prism2sta_ev_alloc(wlandev
);
3635 hfa384x_t
*hw
= wlandev
->priv
;
3637 netdev_warn(hw
->wlandev
->netdev
,
3638 "%s tx pipe stalled: requesting reset\n",
3639 wlandev
->netdev
->name
);
3640 if (!test_and_set_bit
3641 (WORK_TX_HALT
, &hw
->usb_flags
))
3642 schedule_work(&hw
->usb_work
);
3643 wlandev
->netdev
->stats
.tx_errors
++;
3651 hfa384x_t
*hw
= wlandev
->priv
;
3653 if (!test_and_set_bit
3654 (THROTTLE_TX
, &hw
->usb_flags
) &&
3655 !timer_pending(&hw
->throttle
)) {
3656 mod_timer(&hw
->throttle
,
3657 jiffies
+ THROTTLE_JIFFIES
);
3659 wlandev
->netdev
->stats
.tx_errors
++;
3660 netif_stop_queue(wlandev
->netdev
);
3666 /* Ignorable errors */
3670 netdev_info(wlandev
->netdev
, "unknown urb->status=%d\n",
3672 wlandev
->netdev
->stats
.tx_errors
++;
3678 /*----------------------------------------------------------------
3679 * hfa384x_ctlxout_callback
3681 * Callback for control data on the BULKOUT endpoint.
3684 * urb ptr to the completed urb
3693 ----------------------------------------------------------------*/
3694 static void hfa384x_ctlxout_callback(struct urb
*urb
)
3696 hfa384x_t
*hw
= urb
->context
;
3697 int delete_resptimer
= 0;
3700 hfa384x_usbctlx_t
*ctlx
;
3701 unsigned long flags
;
3703 pr_debug("urb->status=%d\n", urb
->status
);
3707 if ((urb
->status
== -ESHUTDOWN
) ||
3708 (urb
->status
== -ENODEV
) || (hw
== NULL
))
3712 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
3715 * Only one CTLX at a time on the "active" list, and
3716 * none at all if we are unplugged. However, we can
3717 * rely on the disconnect function to clean everything
3718 * up if someone unplugged the adapter.
3720 if (list_empty(&hw
->ctlxq
.active
)) {
3721 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3726 * Having something on the "active" queue means
3727 * that we have timers to worry about ...
3729 if (del_timer(&hw
->reqtimer
) == 0) {
3730 if (hw
->req_timer_done
== 0) {
3732 * This timer was actually running while we
3733 * were trying to delete it. Let it terminate
3734 * gracefully instead.
3736 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3740 hw
->req_timer_done
= 1;
3743 ctlx
= get_active_ctlx(hw
);
3745 if (urb
->status
== 0) {
3746 /* Request portion of a CTLX is successful */
3747 switch (ctlx
->state
) {
3748 case CTLX_REQ_SUBMITTED
:
3749 /* This OUT-ACK received before IN */
3750 ctlx
->state
= CTLX_REQ_COMPLETE
;
3753 case CTLX_RESP_COMPLETE
:
3754 /* IN already received before this OUT-ACK,
3755 * so this command must now be complete.
3757 ctlx
->state
= CTLX_COMPLETE
;
3758 unlocked_usbctlx_complete(hw
, ctlx
);
3763 /* This is NOT a valid CTLX "success" state! */
3764 netdev_err(hw
->wlandev
->netdev
,
3765 "Illegal CTLX[%d] success state(%s, %d) in OUT URB\n",
3766 le16_to_cpu(ctlx
->outbuf
.type
),
3767 ctlxstr(ctlx
->state
), urb
->status
);
3771 /* If the pipe has stalled then we need to reset it */
3772 if ((urb
->status
== -EPIPE
) &&
3773 !test_and_set_bit(WORK_TX_HALT
, &hw
->usb_flags
)) {
3774 netdev_warn(hw
->wlandev
->netdev
,
3775 "%s tx pipe stalled: requesting reset\n",
3776 hw
->wlandev
->netdev
->name
);
3777 schedule_work(&hw
->usb_work
);
3780 /* If someone cancels the OUT URB then its status
3781 * should be either -ECONNRESET or -ENOENT.
3783 ctlx
->state
= CTLX_REQ_FAILED
;
3784 unlocked_usbctlx_complete(hw
, ctlx
);
3785 delete_resptimer
= 1;
3790 if (delete_resptimer
) {
3791 timer_ok
= del_timer(&hw
->resptimer
);
3793 hw
->resp_timer_done
= 1;
3796 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3798 if (!timer_ok
&& (hw
->resp_timer_done
== 0)) {
3799 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
3804 hfa384x_usbctlxq_run(hw
);
3807 /*----------------------------------------------------------------
3808 * hfa384x_usbctlx_reqtimerfn
3810 * Timer response function for CTLX request timeouts. If this
3811 * function is called, it means that the callback for the OUT
3812 * URB containing a Prism2.x XXX_Request was never called.
3815 * data a ptr to the hfa384x_t
3824 ----------------------------------------------------------------*/
3825 static void hfa384x_usbctlx_reqtimerfn(unsigned long data
)
3827 hfa384x_t
*hw
= (hfa384x_t
*)data
;
3828 unsigned long flags
;
3830 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
3832 hw
->req_timer_done
= 1;
3834 /* Removing the hardware automatically empties
3835 * the active list ...
3837 if (!list_empty(&hw
->ctlxq
.active
)) {
3839 * We must ensure that our URB is removed from
3840 * the system, if it hasn't already expired.
3842 hw
->ctlx_urb
.transfer_flags
|= URB_ASYNC_UNLINK
;
3843 if (usb_unlink_urb(&hw
->ctlx_urb
) == -EINPROGRESS
) {
3844 hfa384x_usbctlx_t
*ctlx
= get_active_ctlx(hw
);
3846 ctlx
->state
= CTLX_REQ_FAILED
;
3848 /* This URB was active, but has now been
3849 * cancelled. It will now have a status of
3850 * -ECONNRESET in the callback function.
3852 * We are cancelling this CTLX, so we're
3853 * not going to need to wait for a response.
3854 * The URB's callback function will check
3855 * that this timer is truly dead.
3857 if (del_timer(&hw
->resptimer
) != 0)
3858 hw
->resp_timer_done
= 1;
3862 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3865 /*----------------------------------------------------------------
3866 * hfa384x_usbctlx_resptimerfn
3868 * Timer response function for CTLX response timeouts. If this
3869 * function is called, it means that the callback for the IN
3870 * URB containing a Prism2.x XXX_Response was never called.
3873 * data a ptr to the hfa384x_t
3882 ----------------------------------------------------------------*/
3883 static void hfa384x_usbctlx_resptimerfn(unsigned long data
)
3885 hfa384x_t
*hw
= (hfa384x_t
*)data
;
3886 unsigned long flags
;
3888 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
3890 hw
->resp_timer_done
= 1;
3892 /* The active list will be empty if the
3893 * adapter has been unplugged ...
3895 if (!list_empty(&hw
->ctlxq
.active
)) {
3896 hfa384x_usbctlx_t
*ctlx
= get_active_ctlx(hw
);
3898 if (unlocked_usbctlx_cancel_async(hw
, ctlx
) == 0) {
3899 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3900 hfa384x_usbctlxq_run(hw
);
3904 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3907 /*----------------------------------------------------------------
3908 * hfa384x_usb_throttlefn
3921 ----------------------------------------------------------------*/
3922 static void hfa384x_usb_throttlefn(unsigned long data
)
3924 hfa384x_t
*hw
= (hfa384x_t
*)data
;
3925 unsigned long flags
;
3927 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
3930 * We need to check BOTH the RX and the TX throttle controls,
3931 * so we use the bitwise OR instead of the logical OR.
3933 pr_debug("flags=0x%lx\n", hw
->usb_flags
);
3934 if (!hw
->wlandev
->hwremoved
&&
3935 ((test_and_clear_bit(THROTTLE_RX
, &hw
->usb_flags
) &&
3936 !test_and_set_bit(WORK_RX_RESUME
, &hw
->usb_flags
)) |
3937 (test_and_clear_bit(THROTTLE_TX
, &hw
->usb_flags
) &&
3938 !test_and_set_bit(WORK_TX_RESUME
, &hw
->usb_flags
))
3940 schedule_work(&hw
->usb_work
);
3943 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3946 /*----------------------------------------------------------------
3947 * hfa384x_usbctlx_submit
3949 * Called from the doxxx functions to submit a CTLX to the queue
3952 * hw ptr to the hw struct
3953 * ctlx ctlx structure to enqueue
3956 * -ENODEV if the adapter is unplugged
3962 * process or interrupt
3963 ----------------------------------------------------------------*/
3964 static int hfa384x_usbctlx_submit(hfa384x_t
*hw
, hfa384x_usbctlx_t
*ctlx
)
3966 unsigned long flags
;
3968 spin_lock_irqsave(&hw
->ctlxq
.lock
, flags
);
3970 if (hw
->wlandev
->hwremoved
) {
3971 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3975 ctlx
->state
= CTLX_PENDING
;
3976 list_add_tail(&ctlx
->list
, &hw
->ctlxq
.pending
);
3977 spin_unlock_irqrestore(&hw
->ctlxq
.lock
, flags
);
3978 hfa384x_usbctlxq_run(hw
);
3983 /*----------------------------------------------------------------
3984 * hfa384x_isgood_pdrcore
3986 * Quick check of PDR codes.
3989 * pdrcode PDR code number (host order)
3998 ----------------------------------------------------------------*/
3999 static int hfa384x_isgood_pdrcode(u16 pdrcode
)
4002 case HFA384x_PDR_END_OF_PDA
:
4003 case HFA384x_PDR_PCB_PARTNUM
:
4004 case HFA384x_PDR_PDAVER
:
4005 case HFA384x_PDR_NIC_SERIAL
:
4006 case HFA384x_PDR_MKK_MEASUREMENTS
:
4007 case HFA384x_PDR_NIC_RAMSIZE
:
4008 case HFA384x_PDR_MFISUPRANGE
:
4009 case HFA384x_PDR_CFISUPRANGE
:
4010 case HFA384x_PDR_NICID
:
4011 case HFA384x_PDR_MAC_ADDRESS
:
4012 case HFA384x_PDR_REGDOMAIN
:
4013 case HFA384x_PDR_ALLOWED_CHANNEL
:
4014 case HFA384x_PDR_DEFAULT_CHANNEL
:
4015 case HFA384x_PDR_TEMPTYPE
:
4016 case HFA384x_PDR_IFR_SETTING
:
4017 case HFA384x_PDR_RFR_SETTING
:
4018 case HFA384x_PDR_HFA3861_BASELINE
:
4019 case HFA384x_PDR_HFA3861_SHADOW
:
4020 case HFA384x_PDR_HFA3861_IFRF
:
4021 case HFA384x_PDR_HFA3861_CHCALSP
:
4022 case HFA384x_PDR_HFA3861_CHCALI
:
4023 case HFA384x_PDR_3842_NIC_CONFIG
:
4024 case HFA384x_PDR_USB_ID
:
4025 case HFA384x_PDR_PCI_ID
:
4026 case HFA384x_PDR_PCI_IFCONF
:
4027 case HFA384x_PDR_PCI_PMCONF
:
4028 case HFA384x_PDR_RFENRGY
:
4029 case HFA384x_PDR_HFA3861_MANF_TESTSP
:
4030 case HFA384x_PDR_HFA3861_MANF_TESTI
:
4034 if (pdrcode
< 0x1000) {
4035 /* code is OK, but we don't know exactly what it is */
4036 pr_debug("Encountered unknown PDR#=0x%04x, assuming it's ok.\n",
4043 pr_debug("Encountered unknown PDR#=0x%04x, (>=0x1000), assuming it's bad.\n",