1/* 2 * ============================================================================ 3 * Copyright (c) 1996-2002 Winbond Electronic Corporation 4 * 5 * Module Name: 6 * Wb35Rx.c 7 * 8 * Abstract: 9 * Processing the Rx message from down layer 10 * 11 * ============================================================================ 12 */ 13#include <linux/usb.h> 14#include <linux/slab.h> 15 16#include "core.h" 17#include "sysdef.h" 18#include "wb35rx_f.h" 19 20static void packet_came(struct ieee80211_hw *hw, char *pRxBufferAddress, int PacketSize) 21{ 22 struct wbsoft_priv *priv = hw->priv; 23 struct sk_buff *skb; 24 struct ieee80211_rx_status rx_status = {0}; 25 26 if (!priv->enabled) 27 return; 28 29 skb = dev_alloc_skb(PacketSize); 30 if (!skb) { 31 printk("Not enough memory for packet, FIXME\n"); 32 return; 33 } 34 35 memcpy(skb_put(skb, PacketSize), pRxBufferAddress, PacketSize); 36 37 memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status)); 38 ieee80211_rx_irqsafe(hw, skb); 39} 40 41static void Wb35Rx_adjust(struct wb35_descriptor *pRxDes) 42{ 43 u32 *pRxBufferAddress; 44 u32 DecryptionMethod; 45 u32 i; 46 u16 BufferSize; 47 48 DecryptionMethod = pRxDes->R01.R01_decryption_method; 49 pRxBufferAddress = pRxDes->buffer_address[0]; 50 BufferSize = pRxDes->buffer_size[0]; 51 52 /* Adjust the last part of data. Only data left */ 53 BufferSize -= 4; /* For CRC-32 */ 54 if (DecryptionMethod) 55 BufferSize -= 4; 56 if (DecryptionMethod == 3) /* For CCMP */ 57 BufferSize -= 4; 58 59 /* Adjust the IV field which after 802.11 header and ICV field. */ 60 if (DecryptionMethod == 1) { /* For WEP */ 61 for (i = 6; i > 0; i--) 62 pRxBufferAddress[i] = pRxBufferAddress[i - 1]; 63 pRxDes->buffer_address[0] = pRxBufferAddress + 1; 64 BufferSize -= 4; /* 4 byte for IV */ 65 } else if (DecryptionMethod) { /* For TKIP and CCMP */ 66 for (i = 7; i > 1; i--) 67 pRxBufferAddress[i] = pRxBufferAddress[i - 2]; 68 pRxDes->buffer_address[0] = pRxBufferAddress + 2; /* Update the descriptor, shift 8 byte */ 69 BufferSize -= 8; /* 8 byte for IV + ICV */ 70 } 71 pRxDes->buffer_size[0] = BufferSize; 72} 73 74static u16 Wb35Rx_indicate(struct ieee80211_hw *hw) 75{ 76 struct wbsoft_priv *priv = hw->priv; 77 struct hw_data *pHwData = &priv->sHwData; 78 struct wb35_descriptor RxDes; 79 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx; 80 u8 *pRxBufferAddress; 81 u16 PacketSize; 82 u16 stmp, BufferSize, stmp2 = 0; 83 u32 RxBufferId; 84 85 /* Only one thread be allowed to run into the following */ 86 do { 87 RxBufferId = pWb35Rx->RxProcessIndex; 88 if (pWb35Rx->RxOwner[RxBufferId]) /* Owner by VM */ 89 break; 90 91 pWb35Rx->RxProcessIndex++; 92 pWb35Rx->RxProcessIndex %= MAX_USB_RX_BUFFER_NUMBER; 93 94 pRxBufferAddress = pWb35Rx->pDRx; 95 BufferSize = pWb35Rx->RxBufferSize[RxBufferId]; 96 97 /* Parse the bulkin buffer */ 98 while (BufferSize >= 4) { 99 if ((cpu_to_le32(*(u32 *)pRxBufferAddress) & 0x0fffffff) == RX_END_TAG) /* Is ending? */ 100 break; 101 102 /* Get the R00 R01 first */ 103 RxDes.R00.value = le32_to_cpu(*(u32 *)pRxBufferAddress); 104 PacketSize = (u16)RxDes.R00.R00_receive_byte_count; 105 RxDes.R01.value = le32_to_cpu(*((u32 *)(pRxBufferAddress + 4))); 106 /* For new DMA 4k */ 107 if ((PacketSize & 0x03) > 0) 108 PacketSize -= 4; 109 110 /* Basic check for Rx length. Is length valid? */ 111 if (PacketSize > MAX_PACKET_SIZE) { 112#ifdef _PE_RX_DUMP_ 113 printk("Serious ERROR : Rx data size too long, size =%d\n", PacketSize); 114#endif 115 116 pWb35Rx->EP3vm_state = VM_STOP; 117 pWb35Rx->Ep3ErrorCount2++; 118 break; 119 } 120 121 /* 122 * Wb35Rx_indicate() is called synchronously so it isn't 123 * necessary to set "RxDes.Desctriptor_ID = RxBufferID;" 124 */ 125 BufferSize -= 8; /* subtract 8 byte for 35's USB header length */ 126 pRxBufferAddress += 8; 127 128 RxDes.buffer_address[0] = pRxBufferAddress; 129 RxDes.buffer_size[0] = PacketSize; 130 RxDes.buffer_number = 1; 131 RxDes.buffer_start_index = 0; 132 RxDes.buffer_total_size = RxDes.buffer_size[0]; 133 Wb35Rx_adjust(&RxDes); 134 135 packet_came(hw, pRxBufferAddress, PacketSize); 136 137 /* Move RxBuffer point to the next */ 138 stmp = PacketSize + 3; 139 stmp &= ~0x03; /* 4n alignment */ 140 pRxBufferAddress += stmp; 141 BufferSize -= stmp; 142 stmp2 += stmp; 143 } 144 145 /* Reclaim resource */ 146 pWb35Rx->RxOwner[RxBufferId] = 1; 147 } while (true); 148 return stmp2; 149} 150 151static void Wb35Rx(struct ieee80211_hw *hw); 152 153static void Wb35Rx_Complete(struct urb *urb) 154{ 155 struct ieee80211_hw *hw = urb->context; 156 struct wbsoft_priv *priv = hw->priv; 157 struct hw_data *pHwData = &priv->sHwData; 158 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx; 159 u8 *pRxBufferAddress; 160 u32 SizeCheck; 161 u16 BulkLength; 162 u32 RxBufferId; 163 R00_DESCRIPTOR R00; 164 165 /* Variable setting */ 166 pWb35Rx->EP3vm_state = VM_COMPLETED; 167 pWb35Rx->EP3VM_status = urb->status; /* Store the last result of Irp */ 168 169 RxBufferId = pWb35Rx->CurrentRxBufferId; 170 171 pRxBufferAddress = pWb35Rx->pDRx; 172 BulkLength = (u16)urb->actual_length; 173 174 /* The IRP is completed */ 175 pWb35Rx->EP3vm_state = VM_COMPLETED; 176 177 if (pHwData->SurpriseRemove || pHwData->HwStop) /* Must be here, or RxBufferId is invalid */ 178 goto error; 179 180 if (pWb35Rx->rx_halt) 181 goto error; 182 183 /* Start to process the data only in successful condition */ 184 pWb35Rx->RxOwner[RxBufferId] = 0; /* Set the owner to driver */ 185 R00.value = le32_to_cpu(*(u32 *)pRxBufferAddress); 186 187 /* The URB is completed, check the result */ 188 if (pWb35Rx->EP3VM_status != 0) { 189#ifdef _PE_USB_STATE_DUMP_ 190 printk("EP3 IoCompleteRoutine return error\n"); 191#endif 192 pWb35Rx->EP3vm_state = VM_STOP; 193 goto error; 194 } 195 196 /* For recovering. check if operating in single USB mode */ 197 if (!HAL_USB_MODE_BURST(pHwData)) { 198 SizeCheck = R00.R00_receive_byte_count; 199 if ((SizeCheck & 0x03) > 0) 200 SizeCheck -= 4; 201 SizeCheck = (SizeCheck + 3) & ~0x03; 202 SizeCheck += 12; /* 8 + 4 badbeef */ 203 if ((BulkLength > 1600) || 204 (SizeCheck > 1600) || 205 (BulkLength != SizeCheck) || 206 (BulkLength == 0)) { /* Add for fail Urb */ 207 pWb35Rx->EP3vm_state = VM_STOP; 208 pWb35Rx->Ep3ErrorCount2++; 209 } 210 } 211 212 /* Indicating the receiving data */ 213 pWb35Rx->ByteReceived += BulkLength; 214 pWb35Rx->RxBufferSize[RxBufferId] = BulkLength; 215 216 if (!pWb35Rx->RxOwner[RxBufferId]) 217 Wb35Rx_indicate(hw); 218 219 kfree(pWb35Rx->pDRx); 220 /* Do the next receive */ 221 Wb35Rx(hw); 222 return; 223 224error: 225 pWb35Rx->RxOwner[RxBufferId] = 1; /* Set the owner to hardware */ 226 atomic_dec(&pWb35Rx->RxFireCounter); 227 pWb35Rx->EP3vm_state = VM_STOP; 228} 229 230/* This function cannot reentrain */ 231static void Wb35Rx(struct ieee80211_hw *hw) 232{ 233 struct wbsoft_priv *priv = hw->priv; 234 struct hw_data *pHwData = &priv->sHwData; 235 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx; 236 u8 *pRxBufferAddress; 237 struct urb *urb = pWb35Rx->RxUrb; 238 int retv; 239 u32 RxBufferId; 240 241 /* Issuing URB */ 242 if (pHwData->SurpriseRemove || pHwData->HwStop) 243 goto error; 244 245 if (pWb35Rx->rx_halt) 246 goto error; 247 248 /* Get RxBuffer's ID */ 249 RxBufferId = pWb35Rx->RxBufferId; 250 if (!pWb35Rx->RxOwner[RxBufferId]) { 251 /* It's impossible to run here. */ 252#ifdef _PE_RX_DUMP_ 253 printk("Rx driver fifo unavailable\n"); 254#endif 255 goto error; 256 } 257 258 /* Update buffer point, then start to bulkin the data from USB */ 259 pWb35Rx->RxBufferId++; 260 pWb35Rx->RxBufferId %= MAX_USB_RX_BUFFER_NUMBER; 261 262 pWb35Rx->CurrentRxBufferId = RxBufferId; 263 264 pWb35Rx->pDRx = kzalloc(MAX_USB_RX_BUFFER, GFP_ATOMIC); 265 if (!pWb35Rx->pDRx) { 266 printk("w35und: Rx memory alloc failed\n"); 267 goto error; 268 } 269 pRxBufferAddress = pWb35Rx->pDRx; 270 271 usb_fill_bulk_urb(urb, pHwData->WbUsb.udev, 272 usb_rcvbulkpipe(pHwData->WbUsb.udev, 3), 273 pRxBufferAddress, MAX_USB_RX_BUFFER, 274 Wb35Rx_Complete, hw); 275 276 pWb35Rx->EP3vm_state = VM_RUNNING; 277 278 retv = usb_submit_urb(urb, GFP_ATOMIC); 279 280 if (retv != 0) { 281 printk("Rx URB sending error\n"); 282 goto error; 283 } 284 return; 285 286error: 287 /* VM stop */ 288 pWb35Rx->EP3vm_state = VM_STOP; 289 atomic_dec(&pWb35Rx->RxFireCounter); 290} 291 292void Wb35Rx_start(struct ieee80211_hw *hw) 293{ 294 struct wbsoft_priv *priv = hw->priv; 295 struct hw_data *pHwData = &priv->sHwData; 296 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx; 297 298 /* Allow only one thread to run into the Wb35Rx() function */ 299 if (atomic_inc_return(&pWb35Rx->RxFireCounter) == 1) { 300 pWb35Rx->EP3vm_state = VM_RUNNING; 301 Wb35Rx(hw); 302 } else 303 atomic_dec(&pWb35Rx->RxFireCounter); 304} 305 306static void Wb35Rx_reset_descriptor(struct hw_data *pHwData) 307{ 308 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx; 309 u32 i; 310 311 pWb35Rx->ByteReceived = 0; 312 pWb35Rx->RxProcessIndex = 0; 313 pWb35Rx->RxBufferId = 0; 314 pWb35Rx->EP3vm_state = VM_STOP; 315 pWb35Rx->rx_halt = 0; 316 317 /* Initial the Queue. The last buffer is reserved for used if the Rx resource is unavailable. */ 318 for (i = 0; i < MAX_USB_RX_BUFFER_NUMBER; i++) 319 pWb35Rx->RxOwner[i] = 1; 320} 321 322unsigned char Wb35Rx_initial(struct hw_data *pHwData) 323{ 324 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx; 325 326 /* Initial the Buffer Queue */ 327 Wb35Rx_reset_descriptor(pHwData); 328 329 pWb35Rx->RxUrb = usb_alloc_urb(0, GFP_ATOMIC); 330 return !!pWb35Rx->RxUrb; 331} 332 333void Wb35Rx_stop(struct hw_data *pHwData) 334{ 335 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx; 336 337 /* Canceling the Irp if already sends it out. */ 338 if (pWb35Rx->EP3vm_state == VM_RUNNING) { 339 usb_unlink_urb(pWb35Rx->RxUrb); /* Only use unlink, let Wb35Rx_destroy to free them */ 340#ifdef _PE_RX_DUMP_ 341 printk("EP3 Rx stop\n"); 342#endif 343 } 344} 345 346/* Needs process context */ 347void Wb35Rx_destroy(struct hw_data *pHwData) 348{ 349 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx; 350 351 do { 352 msleep(10); /* Delay for waiting function enter */ 353 } while (pWb35Rx->EP3vm_state != VM_STOP); 354 msleep(10); /* Delay for waiting function exit */ 355 356 if (pWb35Rx->RxUrb) 357 usb_free_urb(pWb35Rx->RxUrb); 358#ifdef _PE_RX_DUMP_ 359 printk("Wb35Rx_destroy OK\n"); 360#endif 361} 362