1// SPDX-License-Identifier: GPL-2.0-only
2/*
3 * NXP Wireless LAN device driver: USB specific handling
4 *
5 * Copyright 2011-2020 NXP
6 */
7
8#include "main.h"
9#include "usb.h"
10
11#define USB_VERSION	"1.0"
12
13static struct mwifiex_if_ops usb_ops;
14
15static const struct usb_device_id mwifiex_usb_table[] = {
16	/* 8766 */
17	{USB_DEVICE(USB8XXX_VID, USB8766_PID_1)},
18	{USB_DEVICE_AND_INTERFACE_INFO(USB8XXX_VID, USB8766_PID_2,
19				       USB_CLASS_VENDOR_SPEC,
20				       USB_SUBCLASS_VENDOR_SPEC, 0xff)},
21	/* 8797 */
22	{USB_DEVICE(USB8XXX_VID, USB8797_PID_1)},
23	{USB_DEVICE_AND_INTERFACE_INFO(USB8XXX_VID, USB8797_PID_2,
24				       USB_CLASS_VENDOR_SPEC,
25				       USB_SUBCLASS_VENDOR_SPEC, 0xff)},
26	/* 8801 */
27	{USB_DEVICE(USB8XXX_VID, USB8801_PID_1)},
28	{USB_DEVICE_AND_INTERFACE_INFO(USB8XXX_VID, USB8801_PID_2,
29				       USB_CLASS_VENDOR_SPEC,
30				       USB_SUBCLASS_VENDOR_SPEC, 0xff)},
31	/* 8997 */
32	{USB_DEVICE(USB8XXX_VID, USB8997_PID_1)},
33	{USB_DEVICE_AND_INTERFACE_INFO(USB8XXX_VID, USB8997_PID_2,
34				       USB_CLASS_VENDOR_SPEC,
35				       USB_SUBCLASS_VENDOR_SPEC, 0xff)},
36	{ }	/* Terminating entry */
37};
38
39MODULE_DEVICE_TABLE(usb, mwifiex_usb_table);
40
41static int mwifiex_usb_submit_rx_urb(struct urb_context *ctx, int size);
42
43/* This function handles received packet. Necessary action is taken based on
44 * cmd/event/data.
45 */
46static int mwifiex_usb_recv(struct mwifiex_adapter *adapter,
47			    struct sk_buff *skb, u8 ep)
48{
49	u32 recv_type;
50	__le32 tmp;
51	int ret;
52
53	if (adapter->hs_activated)
54		mwifiex_process_hs_config(adapter);
55
56	if (skb->len < INTF_HEADER_LEN) {
57		mwifiex_dbg(adapter, ERROR,
58			    "%s: invalid skb->len\n", __func__);
59		return -1;
60	}
61
62	switch (ep) {
63	case MWIFIEX_USB_EP_CMD_EVENT:
64		mwifiex_dbg(adapter, EVENT,
65			    "%s: EP_CMD_EVENT\n", __func__);
66		skb_copy_from_linear_data(skb, &tmp, INTF_HEADER_LEN);
67		recv_type = le32_to_cpu(tmp);
68		skb_pull(skb, INTF_HEADER_LEN);
69
70		switch (recv_type) {
71		case MWIFIEX_USB_TYPE_CMD:
72			if (skb->len > MWIFIEX_SIZE_OF_CMD_BUFFER) {
73				mwifiex_dbg(adapter, ERROR,
74					    "CMD: skb->len too large\n");
75				ret = -1;
76				goto exit_restore_skb;
77			} else if (!adapter->curr_cmd) {
78				mwifiex_dbg(adapter, WARN, "CMD: no curr_cmd\n");
79				if (adapter->ps_state == PS_STATE_SLEEP_CFM) {
80					mwifiex_process_sleep_confirm_resp(
81							adapter, skb->data,
82							skb->len);
83					ret = 0;
84					goto exit_restore_skb;
85				}
86				ret = -1;
87				goto exit_restore_skb;
88			}
89
90			adapter->curr_cmd->resp_skb = skb;
91			adapter->cmd_resp_received = true;
92			break;
93		case MWIFIEX_USB_TYPE_EVENT:
94			if (skb->len < sizeof(u32)) {
95				mwifiex_dbg(adapter, ERROR,
96					    "EVENT: skb->len too small\n");
97				ret = -1;
98				goto exit_restore_skb;
99			}
100			skb_copy_from_linear_data(skb, &tmp, sizeof(u32));
101			adapter->event_cause = le32_to_cpu(tmp);
102			mwifiex_dbg(adapter, EVENT,
103				    "event_cause %#x\n", adapter->event_cause);
104
105			if (skb->len > MAX_EVENT_SIZE) {
106				mwifiex_dbg(adapter, ERROR,
107					    "EVENT: event body too large\n");
108				ret = -1;
109				goto exit_restore_skb;
110			}
111
112			memcpy(adapter->event_body, skb->data +
113			       MWIFIEX_EVENT_HEADER_LEN, skb->len);
114
115			adapter->event_received = true;
116			adapter->event_skb = skb;
117			break;
118		default:
119			mwifiex_dbg(adapter, ERROR,
120				    "unknown recv_type %#x\n", recv_type);
121			ret = -1;
122			goto exit_restore_skb;
123		}
124		break;
125	case MWIFIEX_USB_EP_DATA:
126		mwifiex_dbg(adapter, DATA, "%s: EP_DATA\n", __func__);
127		if (skb->len > MWIFIEX_RX_DATA_BUF_SIZE) {
128			mwifiex_dbg(adapter, ERROR,
129				    "DATA: skb->len too large\n");
130			return -1;
131		}
132
133		skb_queue_tail(&adapter->rx_data_q, skb);
134		adapter->data_received = true;
135		atomic_inc(&adapter->rx_pending);
136		break;
137	default:
138		mwifiex_dbg(adapter, ERROR,
139			    "%s: unknown endport %#x\n", __func__, ep);
140		return -1;
141	}
142
143	return -EINPROGRESS;
144
145exit_restore_skb:
146	/* The buffer will be reused for further cmds/events */
147	skb_push(skb, INTF_HEADER_LEN);
148
149	return ret;
150}
151
152static void mwifiex_usb_rx_complete(struct urb *urb)
153{
154	struct urb_context *context = (struct urb_context *)urb->context;
155	struct mwifiex_adapter *adapter = context->adapter;
156	struct sk_buff *skb = context->skb;
157	struct usb_card_rec *card;
158	int recv_length = urb->actual_length;
159	int size, status;
160
161	if (!adapter || !adapter->card) {
162		pr_err("mwifiex adapter or card structure is not valid\n");
163		return;
164	}
165
166	card = (struct usb_card_rec *)adapter->card;
167	if (card->rx_cmd_ep == context->ep)
168		atomic_dec(&card->rx_cmd_urb_pending);
169	else
170		atomic_dec(&card->rx_data_urb_pending);
171
172	if (recv_length) {
173		if (urb->status ||
174		    test_bit(MWIFIEX_SURPRISE_REMOVED, &adapter->work_flags)) {
175			mwifiex_dbg(adapter, ERROR,
176				    "URB status is failed: %d\n", urb->status);
177			/* Do not free skb in case of command ep */
178			if (card->rx_cmd_ep != context->ep)
179				dev_kfree_skb_any(skb);
180			goto setup_for_next;
181		}
182		if (skb->len > recv_length)
183			skb_trim(skb, recv_length);
184		else
185			skb_put(skb, recv_length - skb->len);
186
187		status = mwifiex_usb_recv(adapter, skb, context->ep);
188
189		mwifiex_dbg(adapter, INFO,
190			    "info: recv_length=%d, status=%d\n",
191			    recv_length, status);
192		if (status == -EINPROGRESS) {
193			mwifiex_queue_main_work(adapter);
194
195			/* urb for data_ep is re-submitted now;
196			 * urb for cmd_ep will be re-submitted in callback
197			 * mwifiex_usb_recv_complete
198			 */
199			if (card->rx_cmd_ep == context->ep)
200				return;
201		} else {
202			if (status == -1)
203				mwifiex_dbg(adapter, ERROR,
204					    "received data processing failed!\n");
205
206			/* Do not free skb in case of command ep */
207			if (card->rx_cmd_ep != context->ep)
208				dev_kfree_skb_any(skb);
209		}
210	} else if (urb->status) {
211		if (!test_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags)) {
212			mwifiex_dbg(adapter, FATAL,
213				    "Card is removed: %d\n", urb->status);
214			set_bit(MWIFIEX_SURPRISE_REMOVED, &adapter->work_flags);
215		}
216		dev_kfree_skb_any(skb);
217		return;
218	} else {
219		/* Do not free skb in case of command ep */
220		if (card->rx_cmd_ep != context->ep)
221			dev_kfree_skb_any(skb);
222
223		/* fall through setup_for_next */
224	}
225
226setup_for_next:
227	if (card->rx_cmd_ep == context->ep)
228		size = MWIFIEX_RX_CMD_BUF_SIZE;
229	else
230		size = MWIFIEX_RX_DATA_BUF_SIZE;
231
232	if (card->rx_cmd_ep == context->ep) {
233		mwifiex_usb_submit_rx_urb(context, size);
234	} else {
235		if (atomic_read(&adapter->rx_pending) <= HIGH_RX_PENDING) {
236			mwifiex_usb_submit_rx_urb(context, size);
237		} else {
238			context->skb = NULL;
239		}
240	}
241
242	return;
243}
244
245static void mwifiex_usb_tx_complete(struct urb *urb)
246{
247	struct urb_context *context = (struct urb_context *)(urb->context);
248	struct mwifiex_adapter *adapter = context->adapter;
249	struct usb_card_rec *card = adapter->card;
250	struct usb_tx_data_port *port;
251	int i;
252
253	mwifiex_dbg(adapter, INFO,
254		    "%s: status: %d\n", __func__, urb->status);
255
256	if (context->ep == card->tx_cmd_ep) {
257		mwifiex_dbg(adapter, CMD,
258			    "%s: CMD\n", __func__);
259		atomic_dec(&card->tx_cmd_urb_pending);
260		adapter->cmd_sent = false;
261	} else {
262		mwifiex_dbg(adapter, DATA,
263			    "%s: DATA\n", __func__);
264		mwifiex_write_data_complete(adapter, context->skb, 0,
265					    urb->status ? -1 : 0);
266		for (i = 0; i < MWIFIEX_TX_DATA_PORT; i++) {
267			port = &card->port[i];
268			if (context->ep == port->tx_data_ep) {
269				atomic_dec(&port->tx_data_urb_pending);
270				port->block_status = false;
271				break;
272			}
273		}
274		adapter->data_sent = false;
275	}
276
277	if (card->mc_resync_flag)
278		mwifiex_multi_chan_resync(adapter);
279
280	mwifiex_queue_main_work(adapter);
281
282	return;
283}
284
285static int mwifiex_usb_submit_rx_urb(struct urb_context *ctx, int size)
286{
287	struct mwifiex_adapter *adapter = ctx->adapter;
288	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
289
290	if (test_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags)) {
291		if (card->rx_cmd_ep == ctx->ep) {
292			mwifiex_dbg(adapter, INFO, "%s: free rx_cmd skb\n",
293				    __func__);
294			dev_kfree_skb_any(ctx->skb);
295			ctx->skb = NULL;
296		}
297		mwifiex_dbg(adapter, ERROR,
298			    "%s: card removed/suspended, EP %d rx_cmd URB submit skipped\n",
299			    __func__, ctx->ep);
300		return -1;
301	}
302
303	if (card->rx_cmd_ep != ctx->ep) {
304		ctx->skb = dev_alloc_skb(size);
305		if (!ctx->skb) {
306			mwifiex_dbg(adapter, ERROR,
307				    "%s: dev_alloc_skb failed\n", __func__);
308			return -ENOMEM;
309		}
310	}
311
312	if (card->rx_cmd_ep == ctx->ep &&
313	    card->rx_cmd_ep_type == USB_ENDPOINT_XFER_INT)
314		usb_fill_int_urb(ctx->urb, card->udev,
315				 usb_rcvintpipe(card->udev, ctx->ep),
316				 ctx->skb->data, size, mwifiex_usb_rx_complete,
317				 (void *)ctx, card->rx_cmd_interval);
318	else
319		usb_fill_bulk_urb(ctx->urb, card->udev,
320				  usb_rcvbulkpipe(card->udev, ctx->ep),
321				  ctx->skb->data, size, mwifiex_usb_rx_complete,
322				  (void *)ctx);
323
324	if (card->rx_cmd_ep == ctx->ep)
325		atomic_inc(&card->rx_cmd_urb_pending);
326	else
327		atomic_inc(&card->rx_data_urb_pending);
328
329	if (usb_submit_urb(ctx->urb, GFP_ATOMIC)) {
330		mwifiex_dbg(adapter, ERROR, "usb_submit_urb failed\n");
331		dev_kfree_skb_any(ctx->skb);
332		ctx->skb = NULL;
333
334		if (card->rx_cmd_ep == ctx->ep)
335			atomic_dec(&card->rx_cmd_urb_pending);
336		else
337			atomic_dec(&card->rx_data_urb_pending);
338
339		return -1;
340	}
341
342	return 0;
343}
344
345static void mwifiex_usb_free(struct usb_card_rec *card)
346{
347	struct usb_tx_data_port *port;
348	int i, j;
349
350	if (atomic_read(&card->rx_cmd_urb_pending) && card->rx_cmd.urb)
351		usb_kill_urb(card->rx_cmd.urb);
352
353	usb_free_urb(card->rx_cmd.urb);
354	card->rx_cmd.urb = NULL;
355
356	if (atomic_read(&card->rx_data_urb_pending))
357		for (i = 0; i < MWIFIEX_RX_DATA_URB; i++)
358			if (card->rx_data_list[i].urb)
359				usb_kill_urb(card->rx_data_list[i].urb);
360
361	for (i = 0; i < MWIFIEX_RX_DATA_URB; i++) {
362		usb_free_urb(card->rx_data_list[i].urb);
363		card->rx_data_list[i].urb = NULL;
364	}
365
366	for (i = 0; i < MWIFIEX_TX_DATA_PORT; i++) {
367		port = &card->port[i];
368		for (j = 0; j < MWIFIEX_TX_DATA_URB; j++) {
369			usb_kill_urb(port->tx_data_list[j].urb);
370			usb_free_urb(port->tx_data_list[j].urb);
371			port->tx_data_list[j].urb = NULL;
372		}
373	}
374
375	usb_free_urb(card->tx_cmd.urb);
376	card->tx_cmd.urb = NULL;
377
378	return;
379}
380
381/* This function probes an mwifiex device and registers it. It allocates
382 * the card structure, initiates the device registration and initialization
383 * procedure by adding a logical interface.
384 */
385static int mwifiex_usb_probe(struct usb_interface *intf,
386			     const struct usb_device_id *id)
387{
388	struct usb_device *udev = interface_to_usbdev(intf);
389	struct usb_host_interface *iface_desc = intf->cur_altsetting;
390	struct usb_endpoint_descriptor *epd;
391	int ret, i;
392	struct usb_card_rec *card;
393	u16 id_vendor, id_product, bcd_device;
394
395	card = devm_kzalloc(&intf->dev, sizeof(*card), GFP_KERNEL);
396	if (!card)
397		return -ENOMEM;
398
399	init_completion(&card->fw_done);
400
401	id_vendor = le16_to_cpu(udev->descriptor.idVendor);
402	id_product = le16_to_cpu(udev->descriptor.idProduct);
403	bcd_device = le16_to_cpu(udev->descriptor.bcdDevice);
404	pr_debug("info: VID/PID = %X/%X, Boot2 version = %X\n",
405		 id_vendor, id_product, bcd_device);
406
407	/* PID_1 is used for firmware downloading only */
408	switch (id_product) {
409	case USB8766_PID_1:
410	case USB8797_PID_1:
411	case USB8801_PID_1:
412	case USB8997_PID_1:
413		card->usb_boot_state = USB8XXX_FW_DNLD;
414		break;
415	case USB8766_PID_2:
416	case USB8797_PID_2:
417	case USB8801_PID_2:
418	case USB8997_PID_2:
419		card->usb_boot_state = USB8XXX_FW_READY;
420		break;
421	default:
422		pr_warn("unknown id_product %#x\n", id_product);
423		card->usb_boot_state = USB8XXX_FW_DNLD;
424		break;
425	}
426
427	card->udev = udev;
428	card->intf = intf;
429
430	pr_debug("info: bcdUSB=%#x Device Class=%#x SubClass=%#x Protocol=%#x\n",
431		 le16_to_cpu(udev->descriptor.bcdUSB),
432		 udev->descriptor.bDeviceClass,
433		 udev->descriptor.bDeviceSubClass,
434		 udev->descriptor.bDeviceProtocol);
435
436	for (i = 0; i < iface_desc->desc.bNumEndpoints; ++i) {
437		epd = &iface_desc->endpoint[i].desc;
438		if (usb_endpoint_dir_in(epd) &&
439		    usb_endpoint_num(epd) == MWIFIEX_USB_EP_CMD_EVENT &&
440		    (usb_endpoint_xfer_bulk(epd) ||
441		     usb_endpoint_xfer_int(epd))) {
442			card->rx_cmd_ep_type = usb_endpoint_type(epd);
443			card->rx_cmd_interval = epd->bInterval;
444			pr_debug("info: Rx CMD/EVT:: max pkt size: %d, addr: %d, ep_type: %d\n",
445				 le16_to_cpu(epd->wMaxPacketSize),
446				 epd->bEndpointAddress, card->rx_cmd_ep_type);
447			card->rx_cmd_ep = usb_endpoint_num(epd);
448			atomic_set(&card->rx_cmd_urb_pending, 0);
449		}
450		if (usb_endpoint_dir_in(epd) &&
451		    usb_endpoint_num(epd) == MWIFIEX_USB_EP_DATA &&
452		    usb_endpoint_xfer_bulk(epd)) {
453			pr_debug("info: bulk IN: max pkt size: %d, addr: %d\n",
454				 le16_to_cpu(epd->wMaxPacketSize),
455				 epd->bEndpointAddress);
456			card->rx_data_ep = usb_endpoint_num(epd);
457			atomic_set(&card->rx_data_urb_pending, 0);
458		}
459		if (usb_endpoint_dir_out(epd) &&
460		    usb_endpoint_num(epd) == MWIFIEX_USB_EP_DATA &&
461		    usb_endpoint_xfer_bulk(epd)) {
462			pr_debug("info: bulk OUT: max pkt size: %d, addr: %d\n",
463				 le16_to_cpu(epd->wMaxPacketSize),
464				 epd->bEndpointAddress);
465			card->port[0].tx_data_ep = usb_endpoint_num(epd);
466			atomic_set(&card->port[0].tx_data_urb_pending, 0);
467		}
468		if (usb_endpoint_dir_out(epd) &&
469		    usb_endpoint_num(epd) == MWIFIEX_USB_EP_DATA_CH2 &&
470		    usb_endpoint_xfer_bulk(epd)) {
471			pr_debug("info: bulk OUT chan2:\t"
472				 "max pkt size: %d, addr: %d\n",
473				 le16_to_cpu(epd->wMaxPacketSize),
474				 epd->bEndpointAddress);
475			card->port[1].tx_data_ep = usb_endpoint_num(epd);
476			atomic_set(&card->port[1].tx_data_urb_pending, 0);
477		}
478		if (usb_endpoint_dir_out(epd) &&
479		    usb_endpoint_num(epd) == MWIFIEX_USB_EP_CMD_EVENT &&
480		    (usb_endpoint_xfer_bulk(epd) ||
481		     usb_endpoint_xfer_int(epd))) {
482			card->tx_cmd_ep_type = usb_endpoint_type(epd);
483			card->tx_cmd_interval = epd->bInterval;
484			pr_debug("info: bulk OUT: max pkt size: %d, addr: %d\n",
485				 le16_to_cpu(epd->wMaxPacketSize),
486				 epd->bEndpointAddress);
487			pr_debug("info: Tx CMD:: max pkt size: %d, addr: %d, ep_type: %d\n",
488				 le16_to_cpu(epd->wMaxPacketSize),
489				 epd->bEndpointAddress, card->tx_cmd_ep_type);
490			card->tx_cmd_ep = usb_endpoint_num(epd);
491			atomic_set(&card->tx_cmd_urb_pending, 0);
492			card->bulk_out_maxpktsize =
493					le16_to_cpu(epd->wMaxPacketSize);
494		}
495	}
496
497	switch (card->usb_boot_state) {
498	case USB8XXX_FW_DNLD:
499		/* Reject broken descriptors. */
500		if (!card->rx_cmd_ep || !card->tx_cmd_ep)
501			return -ENODEV;
502		if (card->bulk_out_maxpktsize == 0)
503			return -ENODEV;
504		break;
505	case USB8XXX_FW_READY:
506		/* Assume the driver can handle missing endpoints for now. */
507		break;
508	default:
509		WARN_ON(1);
510		return -ENODEV;
511	}
512
513	usb_set_intfdata(intf, card);
514
515	ret = mwifiex_add_card(card, &card->fw_done, &usb_ops,
516			       MWIFIEX_USB, &card->udev->dev);
517	if (ret) {
518		pr_err("%s: mwifiex_add_card failed: %d\n", __func__, ret);
519		usb_reset_device(udev);
520		return ret;
521	}
522
523	usb_get_dev(udev);
524
525	return 0;
526}
527
528/* Kernel needs to suspend all functions separately. Therefore all
529 * registered functions must have drivers with suspend and resume
530 * methods. Failing that the kernel simply removes the whole card.
531 *
532 * If already not suspended, this function allocates and sends a
533 * 'host sleep activate' request to the firmware and turns off the traffic.
534 */
535static int mwifiex_usb_suspend(struct usb_interface *intf, pm_message_t message)
536{
537	struct usb_card_rec *card = usb_get_intfdata(intf);
538	struct mwifiex_adapter *adapter;
539	struct usb_tx_data_port *port;
540	int i, j;
541
542	/* Might still be loading firmware */
543	wait_for_completion(&card->fw_done);
544
545	adapter = card->adapter;
546	if (!adapter) {
547		dev_err(&intf->dev, "card is not valid\n");
548		return 0;
549	}
550
551	if (unlikely(test_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags)))
552		mwifiex_dbg(adapter, WARN,
553			    "Device already suspended\n");
554
555	/* Enable the Host Sleep */
556	if (!mwifiex_enable_hs(adapter)) {
557		mwifiex_dbg(adapter, ERROR,
558			    "cmd: failed to suspend\n");
559		clear_bit(MWIFIEX_IS_HS_ENABLING, &adapter->work_flags);
560		return -EFAULT;
561	}
562
563
564	/* 'MWIFIEX_IS_SUSPENDED' bit indicates device is suspended.
565	 * It must be set here before the usb_kill_urb() calls. Reason
566	 * is in the complete handlers, urb->status(= -ENOENT) and
567	 * this flag is used in combination to distinguish between a
568	 * 'suspended' state and a 'disconnect' one.
569	 */
570	set_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags);
571	clear_bit(MWIFIEX_IS_HS_ENABLING, &adapter->work_flags);
572
573	if (atomic_read(&card->rx_cmd_urb_pending) && card->rx_cmd.urb)
574		usb_kill_urb(card->rx_cmd.urb);
575
576	if (atomic_read(&card->rx_data_urb_pending))
577		for (i = 0; i < MWIFIEX_RX_DATA_URB; i++)
578			if (card->rx_data_list[i].urb)
579				usb_kill_urb(card->rx_data_list[i].urb);
580
581	for (i = 0; i < MWIFIEX_TX_DATA_PORT; i++) {
582		port = &card->port[i];
583		for (j = 0; j < MWIFIEX_TX_DATA_URB; j++) {
584			if (port->tx_data_list[j].urb)
585				usb_kill_urb(port->tx_data_list[j].urb);
586		}
587	}
588
589	if (card->tx_cmd.urb)
590		usb_kill_urb(card->tx_cmd.urb);
591
592	return 0;
593}
594
595/* Kernel needs to suspend all functions separately. Therefore all
596 * registered functions must have drivers with suspend and resume
597 * methods. Failing that the kernel simply removes the whole card.
598 *
599 * If already not resumed, this function turns on the traffic and
600 * sends a 'host sleep cancel' request to the firmware.
601 */
602static int mwifiex_usb_resume(struct usb_interface *intf)
603{
604	struct usb_card_rec *card = usb_get_intfdata(intf);
605	struct mwifiex_adapter *adapter;
606	int i;
607
608	if (!card->adapter) {
609		dev_err(&intf->dev, "%s: card->adapter is NULL\n",
610			__func__);
611		return 0;
612	}
613	adapter = card->adapter;
614
615	if (unlikely(!test_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags))) {
616		mwifiex_dbg(adapter, WARN,
617			    "Device already resumed\n");
618		return 0;
619	}
620
621	/* Indicate device resumed. The netdev queue will be resumed only
622	 * after the urbs have been re-submitted
623	 */
624	clear_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags);
625
626	if (!atomic_read(&card->rx_data_urb_pending))
627		for (i = 0; i < MWIFIEX_RX_DATA_URB; i++)
628			mwifiex_usb_submit_rx_urb(&card->rx_data_list[i],
629						  MWIFIEX_RX_DATA_BUF_SIZE);
630
631	if (!atomic_read(&card->rx_cmd_urb_pending)) {
632		card->rx_cmd.skb = dev_alloc_skb(MWIFIEX_RX_CMD_BUF_SIZE);
633		if (card->rx_cmd.skb)
634			mwifiex_usb_submit_rx_urb(&card->rx_cmd,
635						  MWIFIEX_RX_CMD_BUF_SIZE);
636	}
637
638	/* Disable Host Sleep */
639	if (adapter->hs_activated)
640		mwifiex_cancel_hs(mwifiex_get_priv(adapter,
641						   MWIFIEX_BSS_ROLE_ANY),
642				  MWIFIEX_ASYNC_CMD);
643
644	return 0;
645}
646
647static void mwifiex_usb_disconnect(struct usb_interface *intf)
648{
649	struct usb_card_rec *card = usb_get_intfdata(intf);
650	struct mwifiex_adapter *adapter;
651
652	wait_for_completion(&card->fw_done);
653
654	adapter = card->adapter;
655	if (!adapter || !adapter->priv_num)
656		return;
657
658	if (card->udev->state != USB_STATE_NOTATTACHED && !adapter->mfg_mode) {
659		mwifiex_deauthenticate_all(adapter);
660
661		mwifiex_init_shutdown_fw(mwifiex_get_priv(adapter,
662							  MWIFIEX_BSS_ROLE_ANY),
663					 MWIFIEX_FUNC_SHUTDOWN);
664	}
665
666	mwifiex_dbg(adapter, FATAL,
667		    "%s: removing card\n", __func__);
668	mwifiex_remove_card(adapter);
669
670	usb_put_dev(interface_to_usbdev(intf));
671}
672
673static void mwifiex_usb_coredump(struct device *dev)
674{
675	struct usb_interface *intf = to_usb_interface(dev);
676	struct usb_card_rec *card = usb_get_intfdata(intf);
677
678	mwifiex_fw_dump_event(mwifiex_get_priv(card->adapter,
679					       MWIFIEX_BSS_ROLE_ANY));
680}
681
682static struct usb_driver mwifiex_usb_driver = {
683	.name = "mwifiex_usb",
684	.probe = mwifiex_usb_probe,
685	.disconnect = mwifiex_usb_disconnect,
686	.id_table = mwifiex_usb_table,
687	.suspend = mwifiex_usb_suspend,
688	.resume = mwifiex_usb_resume,
689	.soft_unbind = 1,
690	.driver = {
691		.coredump = mwifiex_usb_coredump,
692	},
693};
694
695static int mwifiex_write_data_sync(struct mwifiex_adapter *adapter, u8 *pbuf,
696				   u32 *len, u8 ep, u32 timeout)
697{
698	struct usb_card_rec *card = adapter->card;
699	int actual_length, ret;
700
701	if (!(*len % card->bulk_out_maxpktsize))
702		(*len)++;
703
704	/* Send the data block */
705	ret = usb_bulk_msg(card->udev, usb_sndbulkpipe(card->udev, ep), pbuf,
706			   *len, &actual_length, timeout);
707	if (ret) {
708		mwifiex_dbg(adapter, ERROR,
709			    "usb_bulk_msg for tx failed: %d\n", ret);
710		return ret;
711	}
712
713	*len = actual_length;
714
715	return ret;
716}
717
718static int mwifiex_read_data_sync(struct mwifiex_adapter *adapter, u8 *pbuf,
719				  u32 *len, u8 ep, u32 timeout)
720{
721	struct usb_card_rec *card = adapter->card;
722	int actual_length, ret;
723
724	/* Receive the data response */
725	ret = usb_bulk_msg(card->udev, usb_rcvbulkpipe(card->udev, ep), pbuf,
726			   *len, &actual_length, timeout);
727	if (ret) {
728		mwifiex_dbg(adapter, ERROR,
729			    "usb_bulk_msg for rx failed: %d\n", ret);
730		return ret;
731	}
732
733	*len = actual_length;
734
735	return ret;
736}
737
738static void mwifiex_usb_port_resync(struct mwifiex_adapter *adapter)
739{
740	struct usb_card_rec *card = adapter->card;
741	u8 active_port = MWIFIEX_USB_EP_DATA;
742	struct mwifiex_private *priv = NULL;
743	int i;
744
745	if (adapter->usb_mc_status) {
746		for (i = 0; i < adapter->priv_num; i++) {
747			priv = adapter->priv[i];
748			if (!priv)
749				continue;
750			if ((priv->bss_role == MWIFIEX_BSS_ROLE_UAP &&
751			     !priv->bss_started) ||
752			    (priv->bss_role == MWIFIEX_BSS_ROLE_STA &&
753			     !priv->media_connected))
754				priv->usb_port = MWIFIEX_USB_EP_DATA;
755		}
756		for (i = 0; i < MWIFIEX_TX_DATA_PORT; i++)
757			card->port[i].block_status = false;
758	} else {
759		for (i = 0; i < adapter->priv_num; i++) {
760			priv = adapter->priv[i];
761			if (!priv)
762				continue;
763			if ((priv->bss_role == MWIFIEX_BSS_ROLE_UAP &&
764			     priv->bss_started) ||
765			    (priv->bss_role == MWIFIEX_BSS_ROLE_STA &&
766			     priv->media_connected)) {
767				active_port = priv->usb_port;
768				break;
769			}
770		}
771		for (i = 0; i < adapter->priv_num; i++) {
772			priv = adapter->priv[i];
773			if (priv)
774				priv->usb_port = active_port;
775		}
776		for (i = 0; i < MWIFIEX_TX_DATA_PORT; i++) {
777			if (active_port == card->port[i].tx_data_ep)
778				card->port[i].block_status = false;
779			else
780				card->port[i].block_status = true;
781		}
782	}
783}
784
785static bool mwifiex_usb_is_port_ready(struct mwifiex_private *priv)
786{
787	struct usb_card_rec *card = priv->adapter->card;
788	int idx;
789
790	for (idx = 0; idx < MWIFIEX_TX_DATA_PORT; idx++) {
791		if (priv->usb_port == card->port[idx].tx_data_ep)
792			return !card->port[idx].block_status;
793	}
794
795	return false;
796}
797
798static inline u8 mwifiex_usb_data_sent(struct mwifiex_adapter *adapter)
799{
800	struct usb_card_rec *card = adapter->card;
801	int i;
802
803	for (i = 0; i < MWIFIEX_TX_DATA_PORT; i++)
804		if (!card->port[i].block_status)
805			return false;
806
807	return true;
808}
809
810static int mwifiex_usb_construct_send_urb(struct mwifiex_adapter *adapter,
811					  struct usb_tx_data_port *port, u8 ep,
812					  struct urb_context *context,
813					  struct sk_buff *skb_send)
814{
815	struct usb_card_rec *card = adapter->card;
816	int ret = -EINPROGRESS;
817	struct urb *tx_urb;
818
819	context->adapter = adapter;
820	context->ep = ep;
821	context->skb = skb_send;
822	tx_urb = context->urb;
823
824	if (ep == card->tx_cmd_ep &&
825	    card->tx_cmd_ep_type == USB_ENDPOINT_XFER_INT)
826		usb_fill_int_urb(tx_urb, card->udev,
827				 usb_sndintpipe(card->udev, ep), skb_send->data,
828				 skb_send->len, mwifiex_usb_tx_complete,
829				 (void *)context, card->tx_cmd_interval);
830	else
831		usb_fill_bulk_urb(tx_urb, card->udev,
832				  usb_sndbulkpipe(card->udev, ep),
833				  skb_send->data, skb_send->len,
834				  mwifiex_usb_tx_complete, (void *)context);
835
836	tx_urb->transfer_flags |= URB_ZERO_PACKET;
837
838	if (ep == card->tx_cmd_ep)
839		atomic_inc(&card->tx_cmd_urb_pending);
840	else
841		atomic_inc(&port->tx_data_urb_pending);
842
843	if (ep != card->tx_cmd_ep &&
844	    atomic_read(&port->tx_data_urb_pending) ==
845					MWIFIEX_TX_DATA_URB) {
846		port->block_status = true;
847		adapter->data_sent = mwifiex_usb_data_sent(adapter);
848		ret = -ENOSR;
849	}
850
851	if (usb_submit_urb(tx_urb, GFP_ATOMIC)) {
852		mwifiex_dbg(adapter, ERROR,
853			    "%s: usb_submit_urb failed\n", __func__);
854		if (ep == card->tx_cmd_ep) {
855			atomic_dec(&card->tx_cmd_urb_pending);
856		} else {
857			atomic_dec(&port->tx_data_urb_pending);
858			port->block_status = false;
859			adapter->data_sent = false;
860			if (port->tx_data_ix)
861				port->tx_data_ix--;
862			else
863				port->tx_data_ix = MWIFIEX_TX_DATA_URB;
864		}
865		ret = -1;
866	}
867
868	return ret;
869}
870
871static int mwifiex_usb_prepare_tx_aggr_skb(struct mwifiex_adapter *adapter,
872					   struct usb_tx_data_port *port,
873					   struct sk_buff **skb_send)
874{
875	struct sk_buff *skb_aggr, *skb_tmp;
876	u8 *payload, pad;
877	u16 align = adapter->bus_aggr.tx_aggr_align;
878	struct mwifiex_txinfo *tx_info = NULL;
879	bool is_txinfo_set = false;
880
881	/* Packets in aggr_list will be send in either skb_aggr or
882	 * write complete, delete the tx_aggr timer
883	 */
884	if (port->tx_aggr.timer_cnxt.is_hold_timer_set) {
885		del_timer(&port->tx_aggr.timer_cnxt.hold_timer);
886		port->tx_aggr.timer_cnxt.is_hold_timer_set = false;
887		port->tx_aggr.timer_cnxt.hold_tmo_msecs = 0;
888	}
889
890	skb_aggr = mwifiex_alloc_dma_align_buf(port->tx_aggr.aggr_len,
891					       GFP_ATOMIC);
892	if (!skb_aggr) {
893		mwifiex_dbg(adapter, ERROR,
894			    "%s: alloc skb_aggr failed\n", __func__);
895
896		while ((skb_tmp = skb_dequeue(&port->tx_aggr.aggr_list)))
897			mwifiex_write_data_complete(adapter, skb_tmp, 0, -1);
898
899		port->tx_aggr.aggr_num = 0;
900		port->tx_aggr.aggr_len = 0;
901		return -EBUSY;
902	}
903
904	tx_info = MWIFIEX_SKB_TXCB(skb_aggr);
905	memset(tx_info, 0, sizeof(*tx_info));
906
907	while ((skb_tmp = skb_dequeue(&port->tx_aggr.aggr_list))) {
908		/* padding for aligning next packet header*/
909		pad = (align - (skb_tmp->len & (align - 1))) % align;
910		payload = skb_put(skb_aggr, skb_tmp->len + pad);
911		memcpy(payload, skb_tmp->data, skb_tmp->len);
912		if (skb_queue_empty(&port->tx_aggr.aggr_list)) {
913			/* do not padding for last packet*/
914			*(__le16 *)payload = cpu_to_le16(skb_tmp->len);
915			*(__le16 *)&payload[2] =
916				cpu_to_le16(MWIFIEX_TYPE_AGGR_DATA_V2 | 0x80);
917			skb_trim(skb_aggr, skb_aggr->len - pad);
918		} else {
919			/* add aggregation interface header */
920			*(__le16 *)payload = cpu_to_le16(skb_tmp->len + pad);
921			*(__le16 *)&payload[2] =
922				cpu_to_le16(MWIFIEX_TYPE_AGGR_DATA_V2);
923		}
924
925		if (!is_txinfo_set) {
926			tx_info->bss_num = MWIFIEX_SKB_TXCB(skb_tmp)->bss_num;
927			tx_info->bss_type = MWIFIEX_SKB_TXCB(skb_tmp)->bss_type;
928			is_txinfo_set = true;
929		}
930
931		port->tx_aggr.aggr_num--;
932		port->tx_aggr.aggr_len -= (skb_tmp->len + pad);
933		mwifiex_write_data_complete(adapter, skb_tmp, 0, 0);
934	}
935
936	tx_info->pkt_len = skb_aggr->len -
937			(sizeof(struct txpd) + adapter->intf_hdr_len);
938	tx_info->flags |= MWIFIEX_BUF_FLAG_AGGR_PKT;
939
940	port->tx_aggr.aggr_num = 0;
941	port->tx_aggr.aggr_len = 0;
942	*skb_send = skb_aggr;
943
944	return 0;
945}
946
947/* This function prepare data packet to be send under usb tx aggregation
948 * protocol, check current usb aggregation status, link packet to aggrgation
949 * list if possible, work flow as below:
950 * (1) if only 1 packet available, add usb tx aggregation header and send.
951 * (2) if packet is able to aggregated, link it to current aggregation list.
952 * (3) if packet is not able to aggregated, aggregate and send exist packets
953 *     in aggrgation list. Then, link packet in the list if there is more
954 *     packet in transmit queue, otherwise try to transmit single packet.
955 */
956static int mwifiex_usb_aggr_tx_data(struct mwifiex_adapter *adapter, u8 ep,
957				    struct sk_buff *skb,
958				    struct mwifiex_tx_param *tx_param,
959				    struct usb_tx_data_port *port)
960{
961	u8 *payload, pad;
962	u16 align = adapter->bus_aggr.tx_aggr_align;
963	struct sk_buff *skb_send = NULL;
964	struct urb_context *context = NULL;
965	struct txpd *local_tx_pd =
966		(struct txpd *)((u8 *)skb->data + adapter->intf_hdr_len);
967	u8 f_send_aggr_buf = 0;
968	u8 f_send_cur_buf = 0;
969	u8 f_precopy_cur_buf = 0;
970	u8 f_postcopy_cur_buf = 0;
971	u32 timeout;
972	int ret;
973
974	/* padding to ensure each packet alginment */
975	pad = (align - (skb->len & (align - 1))) % align;
976
977	if (tx_param && tx_param->next_pkt_len) {
978		/* next packet available in tx queue*/
979		if (port->tx_aggr.aggr_len + skb->len + pad >
980		    adapter->bus_aggr.tx_aggr_max_size) {
981			f_send_aggr_buf = 1;
982			f_postcopy_cur_buf = 1;
983		} else {
984			/* current packet could be aggregated*/
985			f_precopy_cur_buf = 1;
986
987			if (port->tx_aggr.aggr_len + skb->len + pad +
988			    tx_param->next_pkt_len >
989			    adapter->bus_aggr.tx_aggr_max_size ||
990			    port->tx_aggr.aggr_num + 2 >
991			    adapter->bus_aggr.tx_aggr_max_num) {
992			    /* next packet could not be aggregated
993			     * send current aggregation buffer
994			     */
995				f_send_aggr_buf = 1;
996			}
997		}
998	} else {
999		/* last packet in tx queue */
1000		if (port->tx_aggr.aggr_num > 0) {
1001			/* pending packets in aggregation buffer*/
1002			if (port->tx_aggr.aggr_len + skb->len + pad >
1003			    adapter->bus_aggr.tx_aggr_max_size) {
1004				/* current packet not be able to aggregated,
1005				 * send aggr buffer first, then send packet.
1006				 */
1007				f_send_cur_buf = 1;
1008			} else {
1009				/* last packet, Aggregation and send */
1010				f_precopy_cur_buf = 1;
1011			}
1012
1013			f_send_aggr_buf = 1;
1014		} else {
1015			/* no pending packets in aggregation buffer,
1016			 * send current packet immediately
1017			 */
1018			 f_send_cur_buf = 1;
1019		}
1020	}
1021
1022	if (local_tx_pd->flags & MWIFIEX_TxPD_POWER_MGMT_NULL_PACKET) {
1023		/* Send NULL packet immediately*/
1024		if (f_precopy_cur_buf) {
1025			if (skb_queue_empty(&port->tx_aggr.aggr_list)) {
1026				f_precopy_cur_buf = 0;
1027				f_send_aggr_buf = 0;
1028				f_send_cur_buf = 1;
1029			} else {
1030				f_send_aggr_buf = 1;
1031			}
1032		} else if (f_postcopy_cur_buf) {
1033			f_send_cur_buf = 1;
1034			f_postcopy_cur_buf = 0;
1035		}
1036	}
1037
1038	if (f_precopy_cur_buf) {
1039		skb_queue_tail(&port->tx_aggr.aggr_list, skb);
1040		port->tx_aggr.aggr_len += (skb->len + pad);
1041		port->tx_aggr.aggr_num++;
1042		if (f_send_aggr_buf)
1043			goto send_aggr_buf;
1044
1045		/* packet will not been send immediately,
1046		 * set a timer to make sure it will be sent under
1047		 * strict time limit. Dynamically fit the timeout
1048		 * value, according to packets number in aggr_list
1049		 */
1050		if (!port->tx_aggr.timer_cnxt.is_hold_timer_set) {
1051			port->tx_aggr.timer_cnxt.hold_tmo_msecs =
1052					MWIFIEX_USB_TX_AGGR_TMO_MIN;
1053			timeout =
1054				port->tx_aggr.timer_cnxt.hold_tmo_msecs;
1055			mod_timer(&port->tx_aggr.timer_cnxt.hold_timer,
1056				  jiffies + msecs_to_jiffies(timeout));
1057			port->tx_aggr.timer_cnxt.is_hold_timer_set = true;
1058		} else {
1059			if (port->tx_aggr.timer_cnxt.hold_tmo_msecs <
1060			    MWIFIEX_USB_TX_AGGR_TMO_MAX) {
1061				/* Dyanmic fit timeout */
1062				timeout =
1063				++port->tx_aggr.timer_cnxt.hold_tmo_msecs;
1064				mod_timer(&port->tx_aggr.timer_cnxt.hold_timer,
1065					  jiffies + msecs_to_jiffies(timeout));
1066			}
1067		}
1068	}
1069
1070send_aggr_buf:
1071	if (f_send_aggr_buf) {
1072		ret = mwifiex_usb_prepare_tx_aggr_skb(adapter, port, &skb_send);
1073		if (!ret) {
1074			context = &port->tx_data_list[port->tx_data_ix++];
1075			ret = mwifiex_usb_construct_send_urb(adapter, port, ep,
1076							     context, skb_send);
1077			if (ret == -1)
1078				mwifiex_write_data_complete(adapter, skb_send,
1079							    0, -1);
1080		}
1081	}
1082
1083	if (f_send_cur_buf) {
1084		if (f_send_aggr_buf) {
1085			if (atomic_read(&port->tx_data_urb_pending) >=
1086			    MWIFIEX_TX_DATA_URB) {
1087				port->block_status = true;
1088				adapter->data_sent =
1089					mwifiex_usb_data_sent(adapter);
1090				/* no available urb, postcopy packet*/
1091				f_postcopy_cur_buf = 1;
1092				goto postcopy_cur_buf;
1093			}
1094
1095			if (port->tx_data_ix >= MWIFIEX_TX_DATA_URB)
1096				port->tx_data_ix = 0;
1097		}
1098
1099		payload = skb->data;
1100		*(__le16 *)&payload[2] =
1101			cpu_to_le16(MWIFIEX_TYPE_AGGR_DATA_V2 | 0x80);
1102		*(__le16 *)payload = cpu_to_le16(skb->len);
1103		skb_send = skb;
1104		context = &port->tx_data_list[port->tx_data_ix++];
1105		return mwifiex_usb_construct_send_urb(adapter, port, ep,
1106						      context, skb_send);
1107	}
1108
1109postcopy_cur_buf:
1110	if (f_postcopy_cur_buf) {
1111		skb_queue_tail(&port->tx_aggr.aggr_list, skb);
1112		port->tx_aggr.aggr_len += (skb->len + pad);
1113		port->tx_aggr.aggr_num++;
1114		/* New aggregation begin, start timer */
1115		if (!port->tx_aggr.timer_cnxt.is_hold_timer_set) {
1116			port->tx_aggr.timer_cnxt.hold_tmo_msecs =
1117					MWIFIEX_USB_TX_AGGR_TMO_MIN;
1118			timeout = port->tx_aggr.timer_cnxt.hold_tmo_msecs;
1119			mod_timer(&port->tx_aggr.timer_cnxt.hold_timer,
1120				  jiffies + msecs_to_jiffies(timeout));
1121			port->tx_aggr.timer_cnxt.is_hold_timer_set = true;
1122		}
1123	}
1124
1125	return -EINPROGRESS;
1126}
1127
1128static void mwifiex_usb_tx_aggr_tmo(struct timer_list *t)
1129{
1130	struct urb_context *urb_cnxt = NULL;
1131	struct sk_buff *skb_send = NULL;
1132	struct tx_aggr_tmr_cnxt *timer_context =
1133		from_timer(timer_context, t, hold_timer);
1134	struct mwifiex_adapter *adapter = timer_context->adapter;
1135	struct usb_tx_data_port *port = timer_context->port;
1136	int err = 0;
1137
1138	spin_lock_bh(&port->tx_aggr_lock);
1139	err = mwifiex_usb_prepare_tx_aggr_skb(adapter, port, &skb_send);
1140	if (err) {
1141		mwifiex_dbg(adapter, ERROR,
1142			    "prepare tx aggr skb failed, err=%d\n", err);
1143		goto unlock;
1144	}
1145
1146	if (atomic_read(&port->tx_data_urb_pending) >=
1147	    MWIFIEX_TX_DATA_URB) {
1148		port->block_status = true;
1149		adapter->data_sent =
1150			mwifiex_usb_data_sent(adapter);
1151		err = -1;
1152		goto done;
1153	}
1154
1155	if (port->tx_data_ix >= MWIFIEX_TX_DATA_URB)
1156		port->tx_data_ix = 0;
1157
1158	urb_cnxt = &port->tx_data_list[port->tx_data_ix++];
1159	err = mwifiex_usb_construct_send_urb(adapter, port, port->tx_data_ep,
1160					     urb_cnxt, skb_send);
1161done:
1162	if (err == -1)
1163		mwifiex_write_data_complete(adapter, skb_send, 0, -1);
1164unlock:
1165	spin_unlock_bh(&port->tx_aggr_lock);
1166}
1167
1168/* This function write a command/data packet to card. */
1169static int mwifiex_usb_host_to_card(struct mwifiex_adapter *adapter, u8 ep,
1170				    struct sk_buff *skb,
1171				    struct mwifiex_tx_param *tx_param)
1172{
1173	struct usb_card_rec *card = adapter->card;
1174	struct urb_context *context = NULL;
1175	struct usb_tx_data_port *port = NULL;
1176	int idx, ret;
1177
1178	if (test_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags)) {
1179		mwifiex_dbg(adapter, ERROR,
1180			    "%s: not allowed while suspended\n", __func__);
1181		return -1;
1182	}
1183
1184	if (test_bit(MWIFIEX_SURPRISE_REMOVED, &adapter->work_flags)) {
1185		mwifiex_dbg(adapter, ERROR, "%s: device removed\n", __func__);
1186		return -1;
1187	}
1188
1189	mwifiex_dbg(adapter, INFO, "%s: ep=%d\n", __func__, ep);
1190
1191	if (ep == card->tx_cmd_ep) {
1192		context = &card->tx_cmd;
1193	} else {
1194		/* get the data port structure for endpoint */
1195		for (idx = 0; idx < MWIFIEX_TX_DATA_PORT; idx++) {
1196			if (ep == card->port[idx].tx_data_ep) {
1197				port = &card->port[idx];
1198				if (atomic_read(&port->tx_data_urb_pending)
1199				    >= MWIFIEX_TX_DATA_URB) {
1200					port->block_status = true;
1201					adapter->data_sent =
1202						mwifiex_usb_data_sent(adapter);
1203					return -EBUSY;
1204				}
1205				if (port->tx_data_ix >= MWIFIEX_TX_DATA_URB)
1206					port->tx_data_ix = 0;
1207				break;
1208			}
1209		}
1210
1211		if (!port) {
1212			mwifiex_dbg(adapter, ERROR, "Wrong usb tx data port\n");
1213			return -1;
1214		}
1215
1216		if (adapter->bus_aggr.enable) {
1217			spin_lock_bh(&port->tx_aggr_lock);
1218			ret =  mwifiex_usb_aggr_tx_data(adapter, ep, skb,
1219							tx_param, port);
1220			spin_unlock_bh(&port->tx_aggr_lock);
1221			return ret;
1222		}
1223
1224		context = &port->tx_data_list[port->tx_data_ix++];
1225	}
1226
1227	return mwifiex_usb_construct_send_urb(adapter, port, ep, context, skb);
1228}
1229
1230static int mwifiex_usb_tx_init(struct mwifiex_adapter *adapter)
1231{
1232	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
1233	struct usb_tx_data_port *port;
1234	int i, j;
1235
1236	card->tx_cmd.adapter = adapter;
1237	card->tx_cmd.ep = card->tx_cmd_ep;
1238
1239	card->tx_cmd.urb = usb_alloc_urb(0, GFP_KERNEL);
1240	if (!card->tx_cmd.urb)
1241		return -ENOMEM;
1242
1243	for (i = 0; i < MWIFIEX_TX_DATA_PORT; i++) {
1244		port = &card->port[i];
1245		if (!port->tx_data_ep)
1246			continue;
1247		port->tx_data_ix = 0;
1248		skb_queue_head_init(&port->tx_aggr.aggr_list);
1249		if (port->tx_data_ep == MWIFIEX_USB_EP_DATA)
1250			port->block_status = false;
1251		else
1252			port->block_status = true;
1253		for (j = 0; j < MWIFIEX_TX_DATA_URB; j++) {
1254			port->tx_data_list[j].adapter = adapter;
1255			port->tx_data_list[j].ep = port->tx_data_ep;
1256			port->tx_data_list[j].urb =
1257					usb_alloc_urb(0, GFP_KERNEL);
1258			if (!port->tx_data_list[j].urb)
1259				return -ENOMEM;
1260		}
1261
1262		port->tx_aggr.timer_cnxt.adapter = adapter;
1263		port->tx_aggr.timer_cnxt.port = port;
1264		port->tx_aggr.timer_cnxt.is_hold_timer_set = false;
1265		port->tx_aggr.timer_cnxt.hold_tmo_msecs = 0;
1266		timer_setup(&port->tx_aggr.timer_cnxt.hold_timer,
1267			    mwifiex_usb_tx_aggr_tmo, 0);
1268	}
1269
1270	return 0;
1271}
1272
1273static int mwifiex_usb_rx_init(struct mwifiex_adapter *adapter)
1274{
1275	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
1276	int i;
1277
1278	card->rx_cmd.adapter = adapter;
1279	card->rx_cmd.ep = card->rx_cmd_ep;
1280
1281	card->rx_cmd.urb = usb_alloc_urb(0, GFP_KERNEL);
1282	if (!card->rx_cmd.urb)
1283		return -ENOMEM;
1284
1285	card->rx_cmd.skb = dev_alloc_skb(MWIFIEX_RX_CMD_BUF_SIZE);
1286	if (!card->rx_cmd.skb)
1287		return -ENOMEM;
1288
1289	if (mwifiex_usb_submit_rx_urb(&card->rx_cmd, MWIFIEX_RX_CMD_BUF_SIZE))
1290		return -1;
1291
1292	for (i = 0; i < MWIFIEX_RX_DATA_URB; i++) {
1293		card->rx_data_list[i].adapter = adapter;
1294		card->rx_data_list[i].ep = card->rx_data_ep;
1295
1296		card->rx_data_list[i].urb = usb_alloc_urb(0, GFP_KERNEL);
1297		if (!card->rx_data_list[i].urb)
1298			return -1;
1299		if (mwifiex_usb_submit_rx_urb(&card->rx_data_list[i],
1300					      MWIFIEX_RX_DATA_BUF_SIZE))
1301			return -1;
1302	}
1303
1304	return 0;
1305}
1306
1307/* This function register usb device and initialize parameter. */
1308static int mwifiex_register_dev(struct mwifiex_adapter *adapter)
1309{
1310	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
1311
1312	card->adapter = adapter;
1313
1314	switch (le16_to_cpu(card->udev->descriptor.idProduct)) {
1315	case USB8997_PID_1:
1316	case USB8997_PID_2:
1317		adapter->tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_4K;
1318		strcpy(adapter->fw_name, USB8997_DEFAULT_FW_NAME);
1319		adapter->ext_scan = true;
1320		break;
1321	case USB8766_PID_1:
1322	case USB8766_PID_2:
1323		adapter->tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
1324		strcpy(adapter->fw_name, USB8766_DEFAULT_FW_NAME);
1325		adapter->ext_scan = true;
1326		break;
1327	case USB8801_PID_1:
1328	case USB8801_PID_2:
1329		adapter->tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
1330		strcpy(adapter->fw_name, USB8801_DEFAULT_FW_NAME);
1331		adapter->ext_scan = false;
1332		break;
1333	case USB8797_PID_1:
1334	case USB8797_PID_2:
1335	default:
1336		adapter->tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
1337		strcpy(adapter->fw_name, USB8797_DEFAULT_FW_NAME);
1338		break;
1339	}
1340
1341	adapter->usb_mc_status = false;
1342	adapter->usb_mc_setup = false;
1343
1344	return 0;
1345}
1346
1347static void mwifiex_usb_cleanup_tx_aggr(struct mwifiex_adapter *adapter)
1348{
1349	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
1350	struct usb_tx_data_port *port;
1351	struct sk_buff *skb_tmp;
1352	int idx;
1353
1354	for (idx = 0; idx < MWIFIEX_TX_DATA_PORT; idx++) {
1355		port = &card->port[idx];
1356		if (adapter->bus_aggr.enable)
1357			while ((skb_tmp =
1358				skb_dequeue(&port->tx_aggr.aggr_list)))
1359				mwifiex_write_data_complete(adapter, skb_tmp,
1360							    0, -1);
1361		if (port->tx_aggr.timer_cnxt.hold_timer.function)
1362			del_timer_sync(&port->tx_aggr.timer_cnxt.hold_timer);
1363		port->tx_aggr.timer_cnxt.is_hold_timer_set = false;
1364		port->tx_aggr.timer_cnxt.hold_tmo_msecs = 0;
1365	}
1366}
1367
1368static void mwifiex_unregister_dev(struct mwifiex_adapter *adapter)
1369{
1370	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
1371
1372	mwifiex_usb_free(card);
1373
1374	mwifiex_usb_cleanup_tx_aggr(adapter);
1375
1376	card->adapter = NULL;
1377}
1378
1379static int mwifiex_prog_fw_w_helper(struct mwifiex_adapter *adapter,
1380				    struct mwifiex_fw_image *fw)
1381{
1382	int ret = 0;
1383	u8 *firmware = fw->fw_buf, *recv_buff;
1384	u32 retries = USB8XXX_FW_MAX_RETRY + 1;
1385	u32 dlen;
1386	u32 fw_seqnum = 0, tlen = 0, dnld_cmd = 0;
1387	struct fw_data *fwdata;
1388	struct fw_sync_header sync_fw;
1389	u8 check_winner = 1;
1390
1391	if (!firmware) {
1392		mwifiex_dbg(adapter, ERROR,
1393			    "No firmware image found! Terminating download\n");
1394		ret = -1;
1395		goto fw_exit;
1396	}
1397
1398	/* Allocate memory for transmit */
1399	fwdata = kzalloc(FW_DNLD_TX_BUF_SIZE, GFP_KERNEL);
1400	if (!fwdata) {
1401		ret = -ENOMEM;
1402		goto fw_exit;
1403	}
1404
1405	/* Allocate memory for receive */
1406	recv_buff = kzalloc(FW_DNLD_RX_BUF_SIZE, GFP_KERNEL);
1407	if (!recv_buff) {
1408		ret = -ENOMEM;
1409		goto cleanup;
1410	}
1411
1412	do {
1413		/* Send pseudo data to check winner status first */
1414		if (check_winner) {
1415			memset(&fwdata->fw_hdr, 0, sizeof(struct fw_header));
1416			dlen = 0;
1417		} else {
1418			/* copy the header of the fw_data to get the length */
1419			memcpy(&fwdata->fw_hdr, &firmware[tlen],
1420			       sizeof(struct fw_header));
1421
1422			dlen = le32_to_cpu(fwdata->fw_hdr.data_len);
1423			dnld_cmd = le32_to_cpu(fwdata->fw_hdr.dnld_cmd);
1424			tlen += sizeof(struct fw_header);
1425
1426			/* Command 7 doesn't have data length field */
1427			if (dnld_cmd == FW_CMD_7)
1428				dlen = 0;
1429
1430			memcpy(fwdata->data, &firmware[tlen], dlen);
1431
1432			fwdata->seq_num = cpu_to_le32(fw_seqnum);
1433			tlen += dlen;
1434		}
1435
1436		/* If the send/receive fails or CRC occurs then retry */
1437		while (--retries) {
1438			u8 *buf = (u8 *)fwdata;
1439			u32 len = FW_DATA_XMIT_SIZE;
1440
1441			/* send the firmware block */
1442			ret = mwifiex_write_data_sync(adapter, buf, &len,
1443						MWIFIEX_USB_EP_CMD_EVENT,
1444						MWIFIEX_USB_TIMEOUT);
1445			if (ret) {
1446				mwifiex_dbg(adapter, ERROR,
1447					    "write_data_sync: failed: %d\n",
1448					    ret);
1449				continue;
1450			}
1451
1452			buf = recv_buff;
1453			len = FW_DNLD_RX_BUF_SIZE;
1454
1455			/* Receive the firmware block response */
1456			ret = mwifiex_read_data_sync(adapter, buf, &len,
1457						MWIFIEX_USB_EP_CMD_EVENT,
1458						MWIFIEX_USB_TIMEOUT);
1459			if (ret) {
1460				mwifiex_dbg(adapter, ERROR,
1461					    "read_data_sync: failed: %d\n",
1462					    ret);
1463				continue;
1464			}
1465
1466			memcpy(&sync_fw, recv_buff,
1467			       sizeof(struct fw_sync_header));
1468
1469			/* check 1st firmware block resp for highest bit set */
1470			if (check_winner) {
1471				if (le32_to_cpu(sync_fw.cmd) & 0x80000000) {
1472					mwifiex_dbg(adapter, WARN,
1473						    "USB is not the winner %#x\n",
1474						    sync_fw.cmd);
1475
1476					/* returning success */
1477					ret = 0;
1478					goto cleanup;
1479				}
1480
1481				mwifiex_dbg(adapter, MSG,
1482					    "start to download FW...\n");
1483
1484				check_winner = 0;
1485				break;
1486			}
1487
1488			/* check the firmware block response for CRC errors */
1489			if (sync_fw.cmd) {
1490				mwifiex_dbg(adapter, ERROR,
1491					    "FW received block with CRC %#x\n",
1492					    sync_fw.cmd);
1493				ret = -1;
1494				continue;
1495			}
1496
1497			retries = USB8XXX_FW_MAX_RETRY + 1;
1498			break;
1499		}
1500		fw_seqnum++;
1501	} while ((dnld_cmd != FW_HAS_LAST_BLOCK) && retries);
1502
1503cleanup:
1504	mwifiex_dbg(adapter, MSG,
1505		    "info: FW download over, size %d bytes\n", tlen);
1506
1507	kfree(recv_buff);
1508	kfree(fwdata);
1509
1510	if (retries)
1511		ret = 0;
1512fw_exit:
1513	return ret;
1514}
1515
1516static int mwifiex_usb_dnld_fw(struct mwifiex_adapter *adapter,
1517			struct mwifiex_fw_image *fw)
1518{
1519	int ret;
1520	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
1521
1522	if (card->usb_boot_state == USB8XXX_FW_DNLD) {
1523		ret = mwifiex_prog_fw_w_helper(adapter, fw);
1524		if (ret)
1525			return -1;
1526
1527		/* Boot state changes after successful firmware download */
1528		if (card->usb_boot_state == USB8XXX_FW_DNLD)
1529			return -1;
1530	}
1531
1532	ret = mwifiex_usb_rx_init(adapter);
1533	if (!ret)
1534		ret = mwifiex_usb_tx_init(adapter);
1535
1536	return ret;
1537}
1538
1539static void mwifiex_submit_rx_urb(struct mwifiex_adapter *adapter, u8 ep)
1540{
1541	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
1542
1543	skb_push(card->rx_cmd.skb, INTF_HEADER_LEN);
1544	if ((ep == card->rx_cmd_ep) &&
1545	    (!atomic_read(&card->rx_cmd_urb_pending)))
1546		mwifiex_usb_submit_rx_urb(&card->rx_cmd,
1547					  MWIFIEX_RX_CMD_BUF_SIZE);
1548
1549	return;
1550}
1551
1552static int mwifiex_usb_cmd_event_complete(struct mwifiex_adapter *adapter,
1553				       struct sk_buff *skb)
1554{
1555	mwifiex_submit_rx_urb(adapter, MWIFIEX_USB_EP_CMD_EVENT);
1556
1557	return 0;
1558}
1559
1560/* This function wakes up the card. */
1561static int mwifiex_pm_wakeup_card(struct mwifiex_adapter *adapter)
1562{
1563	/* Simulation of HS_AWAKE event */
1564	adapter->pm_wakeup_fw_try = false;
1565	del_timer(&adapter->wakeup_timer);
1566	adapter->pm_wakeup_card_req = false;
1567	adapter->ps_state = PS_STATE_AWAKE;
1568
1569	return 0;
1570}
1571
1572static void mwifiex_usb_submit_rem_rx_urbs(struct mwifiex_adapter *adapter)
1573{
1574	struct usb_card_rec *card = (struct usb_card_rec *)adapter->card;
1575	int i;
1576	struct urb_context *ctx;
1577
1578	for (i = 0; i < MWIFIEX_RX_DATA_URB; i++) {
1579		if (card->rx_data_list[i].skb)
1580			continue;
1581		ctx = &card->rx_data_list[i];
1582		mwifiex_usb_submit_rx_urb(ctx, MWIFIEX_RX_DATA_BUF_SIZE);
1583	}
1584}
1585
1586/* This function is called after the card has woken up. */
1587static inline int
1588mwifiex_pm_wakeup_card_complete(struct mwifiex_adapter *adapter)
1589{
1590	return 0;
1591}
1592
1593static struct mwifiex_if_ops usb_ops = {
1594	.register_dev =		mwifiex_register_dev,
1595	.unregister_dev =	mwifiex_unregister_dev,
1596	.wakeup =		mwifiex_pm_wakeup_card,
1597	.wakeup_complete =	mwifiex_pm_wakeup_card_complete,
1598
1599	/* USB specific */
1600	.dnld_fw =		mwifiex_usb_dnld_fw,
1601	.cmdrsp_complete =	mwifiex_usb_cmd_event_complete,
1602	.event_complete =	mwifiex_usb_cmd_event_complete,
1603	.host_to_card =		mwifiex_usb_host_to_card,
1604	.submit_rem_rx_urbs =	mwifiex_usb_submit_rem_rx_urbs,
1605	.multi_port_resync =	mwifiex_usb_port_resync,
1606	.is_port_ready =	mwifiex_usb_is_port_ready,
1607};
1608
1609module_usb_driver(mwifiex_usb_driver);
1610
1611MODULE_AUTHOR("Marvell International Ltd.");
1612MODULE_DESCRIPTION("Marvell WiFi-Ex USB Driver version" USB_VERSION);
1613MODULE_VERSION(USB_VERSION);
1614MODULE_LICENSE("GPL v2");
1615MODULE_FIRMWARE(USB8766_DEFAULT_FW_NAME);
1616MODULE_FIRMWARE(USB8797_DEFAULT_FW_NAME);
1617MODULE_FIRMWARE(USB8801_DEFAULT_FW_NAME);
1618MODULE_FIRMWARE(USB8997_DEFAULT_FW_NAME);
1619