1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _USB_OPS_LINUX_C_
8 
9 #include <drv_types.h>
10 #include <recv_osdep.h>
11 #include <rtw_sreset.h>
12 
13 #define RTW_USB_CONTROL_MSG_TIMEOUT	500 /* ms */
14 
15 #define MAX_USBCTRL_VENDORREQ_TIMES	10
16 
17 #define ALIGNMENT_UNIT			16
18 #define MAX_VENDOR_REQ_CMD_SIZE	254
19 #define MAX_USB_IO_CTL_SIZE	(MAX_VENDOR_REQ_CMD_SIZE + ALIGNMENT_UNIT)
20 
21 #define REALTEK_USB_VENQT_READ	(USB_DIR_IN | USB_TYPE_VENDOR | USB_RECIP_DEVICE)
22 #define REALTEK_USB_VENQT_WRITE	(USB_DIR_OUT | USB_TYPE_VENDOR | USB_RECIP_DEVICE)
23 
24 #define REALTEK_USB_VENQT_CMD_REQ	0x05
25 #define REALTEK_USB_VENQT_CMD_IDX	0x00
26 
interrupt_handler_8188eu(struct adapter * adapt,u16 pkt_len,u8 * pbuf)27 static void interrupt_handler_8188eu(struct adapter *adapt, u16 pkt_len, u8 *pbuf)
28 {
29 	struct hal_data_8188e *haldata = adapt->HalData;
30 
31 	if (pkt_len != INTERRUPT_MSG_FORMAT_LEN) {
32 		DBG_88E("%s Invalid interrupt content length (%d)!\n", __func__, pkt_len);
33 		return;
34 	}
35 
36 	/*  HISR */
37 	memcpy(&haldata->IntArray[0], &pbuf[USB_INTR_CONTENT_HISR_OFFSET], 4);
38 	memcpy(&haldata->IntArray[1], &pbuf[USB_INTR_CONTENT_HISRE_OFFSET], 4);
39 
40 	/*  C2H Event */
41 	if (pbuf[0] != 0)
42 		memcpy(&haldata->C2hArray[0],
43 		       &pbuf[USB_INTR_CONTENT_C2H_OFFSET], 16);
44 }
45 
recvbuf2recvframe(struct adapter * adapt,struct sk_buff * pskb)46 static int recvbuf2recvframe(struct adapter *adapt, struct sk_buff *pskb)
47 {
48 	u8 *pbuf;
49 	u8 shift_sz = 0;
50 	u16 pkt_cnt;
51 	u32 pkt_offset, skb_len, alloc_sz;
52 	s32 transfer_len;
53 	struct recv_stat *prxstat;
54 	struct phy_stat *pphy_status = NULL;
55 	struct sk_buff *pkt_copy = NULL;
56 	struct recv_frame *precvframe = NULL;
57 	struct rx_pkt_attrib *pattrib = NULL;
58 	struct hal_data_8188e *haldata = adapt->HalData;
59 	struct recv_priv *precvpriv = &adapt->recvpriv;
60 	struct __queue *pfree_recv_queue = &precvpriv->free_recv_queue;
61 
62 	transfer_len = (s32)pskb->len;
63 	pbuf = pskb->data;
64 
65 	prxstat = (struct recv_stat *)pbuf;
66 	pkt_cnt = (le32_to_cpu(prxstat->rxdw2) >> 16) & 0xff;
67 
68 	do {
69 		RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
70 			 ("%s: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
71 			  __func__, prxstat->rxdw0, prxstat->rxdw1,
72 			  prxstat->rxdw2, prxstat->rxdw4));
73 
74 		prxstat = (struct recv_stat *)pbuf;
75 
76 		precvframe = rtw_alloc_recvframe(pfree_recv_queue);
77 		if (!precvframe) {
78 			RT_TRACE(_module_rtl871x_recv_c_, _drv_err_,
79 				 ("%s: precvframe==NULL\n", __func__));
80 			DBG_88E("%s()-%d: rtw_alloc_recvframe() failed! RX Drop!\n", __func__, __LINE__);
81 			goto _exit_recvbuf2recvframe;
82 		}
83 
84 		INIT_LIST_HEAD(&precvframe->list);
85 
86 		update_recvframe_attrib_88e(precvframe, prxstat);
87 
88 		pattrib = &precvframe->attrib;
89 
90 		if ((pattrib->crc_err) || (pattrib->icv_err)) {
91 			DBG_88E("%s: RX Warning! crc_err=%d icv_err=%d, skip!\n", __func__, pattrib->crc_err, pattrib->icv_err);
92 
93 			rtw_free_recvframe(precvframe, pfree_recv_queue);
94 			goto _exit_recvbuf2recvframe;
95 		}
96 
97 		if ((pattrib->physt) && (pattrib->pkt_rpt_type == NORMAL_RX))
98 			pphy_status = (struct phy_stat *)(pbuf + RXDESC_OFFSET);
99 
100 		pkt_offset = RXDESC_SIZE + pattrib->drvinfo_sz + pattrib->shift_sz + pattrib->pkt_len;
101 
102 		if ((pattrib->pkt_len <= 0) || (pkt_offset > transfer_len)) {
103 			RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
104 				 ("%s: pkt_len<=0\n", __func__));
105 			DBG_88E("%s()-%d: RX Warning!,pkt_len<=0 or pkt_offset> transfer_len\n", __func__, __LINE__);
106 			rtw_free_recvframe(precvframe, pfree_recv_queue);
107 			goto _exit_recvbuf2recvframe;
108 		}
109 
110 		/*	Modified by Albert 20101213 */
111 		/*	For 8 bytes IP header alignment. */
112 		if (pattrib->qos)	/*	Qos data, wireless lan header length is 26 */
113 			shift_sz = 6;
114 		else
115 			shift_sz = 0;
116 
117 		skb_len = pattrib->pkt_len;
118 
119 		/*  for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet. */
120 		/*  modify alloc_sz for recvive crc error packet by thomas 2011-06-02 */
121 		if ((pattrib->mfrag == 1) && (pattrib->frag_num == 0)) {
122 			if (skb_len <= 1650)
123 				alloc_sz = 1664;
124 			else
125 				alloc_sz = skb_len + 14;
126 		} else {
127 			alloc_sz = skb_len;
128 			/*	6 is for IP header 8 bytes alignment in QoS packet case. */
129 			/*	8 is for skb->data 4 bytes alignment. */
130 			alloc_sz += 14;
131 		}
132 
133 		pkt_copy = netdev_alloc_skb(adapt->pnetdev, alloc_sz);
134 		if (pkt_copy) {
135 			pkt_copy->dev = adapt->pnetdev;
136 			precvframe->pkt = pkt_copy;
137 			skb_reserve(pkt_copy, 8 - ((size_t)(pkt_copy->data) & 7));/* force pkt_copy->data at 8-byte alignment address */
138 			skb_reserve(pkt_copy, shift_sz);/* force ip_hdr at 8-byte alignment address according to shift_sz. */
139 			skb_put_data(pkt_copy, (pbuf + pattrib->drvinfo_sz + RXDESC_SIZE), skb_len);
140 		} else {
141 			DBG_88E("%s: alloc_skb fail , drop frag frame\n",
142 				__func__);
143 			rtw_free_recvframe(precvframe, pfree_recv_queue);
144 			goto _exit_recvbuf2recvframe;
145 		}
146 
147 		switch (haldata->UsbRxAggMode) {
148 		case USB_RX_AGG_DMA:
149 		case USB_RX_AGG_MIX:
150 			pkt_offset = (u16)round_up(pkt_offset, 128);
151 			break;
152 		case USB_RX_AGG_USB:
153 			pkt_offset = (u16)round_up(pkt_offset, 4);
154 			break;
155 		case USB_RX_AGG_DISABLE:
156 		default:
157 			break;
158 		}
159 		if (pattrib->pkt_rpt_type == NORMAL_RX) { /* Normal rx packet */
160 			if (pattrib->physt)
161 				update_recvframe_phyinfo_88e(precvframe, pphy_status);
162 			if (rtw_recv_entry(precvframe) != _SUCCESS) {
163 				RT_TRACE(_module_rtl871x_recv_c_, _drv_err_,
164 					 ("%s: rtw_recv_entry(precvframe) != _SUCCESS\n",
165 					 __func__));
166 			}
167 		} else if (pattrib->pkt_rpt_type == TX_REPORT1) {
168 			/* CCX-TXRPT ack for xmit mgmt frames. */
169 			handle_txrpt_ccx_88e(adapt, precvframe->pkt->data);
170 			rtw_free_recvframe(precvframe, pfree_recv_queue);
171 		} else if (pattrib->pkt_rpt_type == TX_REPORT2) {
172 			ODM_RA_TxRPT2Handle_8188E(&haldata->odmpriv,
173 						  precvframe->pkt->data,
174 						  pattrib->pkt_len,
175 						  pattrib->MacIDValidEntry[0],
176 						  pattrib->MacIDValidEntry[1]);
177 			rtw_free_recvframe(precvframe, pfree_recv_queue);
178 		} else if (pattrib->pkt_rpt_type == HIS_REPORT) {
179 			interrupt_handler_8188eu(adapt, pattrib->pkt_len, precvframe->pkt->data);
180 			rtw_free_recvframe(precvframe, pfree_recv_queue);
181 		}
182 		pkt_cnt--;
183 		transfer_len -= pkt_offset;
184 		pbuf += pkt_offset;
185 		precvframe = NULL;
186 		pkt_copy = NULL;
187 
188 		if (transfer_len > 0 && pkt_cnt == 0)
189 			pkt_cnt = (le32_to_cpu(prxstat->rxdw2) >> 16) & 0xff;
190 
191 	} while ((transfer_len > 0) && (pkt_cnt > 0));
192 
193 _exit_recvbuf2recvframe:
194 
195 	return _SUCCESS;
196 }
197 
ffaddr2pipehdl(struct dvobj_priv * pdvobj,u32 addr)198 static unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr)
199 {
200 	unsigned int pipe = 0, ep_num = 0;
201 	struct usb_device *pusbd = pdvobj->pusbdev;
202 
203 	if (addr == RECV_BULK_IN_ADDR) {
204 		pipe = usb_rcvbulkpipe(pusbd, pdvobj->RtInPipe[0]);
205 	} else if (addr == RECV_INT_IN_ADDR) {
206 		pipe = usb_rcvbulkpipe(pusbd, pdvobj->RtInPipe[1]);
207 	} else if (addr < HW_QUEUE_ENTRY) {
208 		ep_num = pdvobj->Queue2Pipe[addr];
209 		pipe = usb_sndbulkpipe(pusbd, ep_num);
210 	}
211 
212 	return pipe;
213 }
214 
215 static int
usbctrl_vendorreq(struct adapter * adapt,u16 value,void * pdata,u16 len,u8 reqtype)216 usbctrl_vendorreq(struct adapter *adapt, u16 value, void *pdata, u16 len, u8 reqtype)
217 {
218 	struct dvobj_priv *dvobjpriv = adapter_to_dvobj(adapt);
219 	struct usb_device *udev = dvobjpriv->pusbdev;
220 	unsigned int pipe;
221 	int status = 0;
222 	u8 *pIo_buf;
223 	int vendorreq_times = 0;
224 
225 	if ((adapt->bSurpriseRemoved) || (adapt->pwrctrlpriv.pnp_bstop_trx)) {
226 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
227 			 ("%s:(adapt->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n",
228 			  __func__));
229 		status = -EPERM;
230 		goto exit;
231 	}
232 
233 	if (len > MAX_VENDOR_REQ_CMD_SIZE) {
234 		DBG_88E("[%s] Buffer len error ,vendor request failed\n", __func__);
235 		status = -EINVAL;
236 		goto exit;
237 	}
238 
239 	if (mutex_lock_interruptible(&dvobjpriv->usb_vendor_req_mutex)) {
240 		status = -ERESTARTSYS;
241 		goto exit;
242 	}
243 
244 	/*  Acquire IO memory for vendorreq */
245 	pIo_buf = kmalloc(MAX_USB_IO_CTL_SIZE, GFP_ATOMIC);
246 
247 	if (!pIo_buf) {
248 		status = -ENOMEM;
249 		goto release_mutex;
250 	}
251 
252 	if (reqtype == REALTEK_USB_VENQT_READ) {
253 		pipe = usb_rcvctrlpipe(udev, 0);
254 	} else if (reqtype == REALTEK_USB_VENQT_WRITE) {
255 		pipe = usb_sndctrlpipe(udev, 0);
256 	} else {
257 		status = -EINVAL;
258 		goto free_buf;
259 	}
260 
261 	while (++vendorreq_times <= MAX_USBCTRL_VENDORREQ_TIMES) {
262 		if (reqtype == REALTEK_USB_VENQT_READ)
263 			memset(pIo_buf, 0, len);
264 		else
265 			memcpy(pIo_buf, pdata, len);
266 
267 		status = usb_control_msg(udev, pipe, REALTEK_USB_VENQT_CMD_REQ,
268 					 reqtype, value, REALTEK_USB_VENQT_CMD_IDX,
269 					 pIo_buf, len, RTW_USB_CONTROL_MSG_TIMEOUT);
270 
271 		if (status == len) {   /*  Success this control transfer. */
272 			if (reqtype == REALTEK_USB_VENQT_READ)
273 				memcpy(pdata, pIo_buf,  len);
274 		} else { /*  error cases */
275 			DBG_88E("reg 0x%x, usb %s %u fail, status:%d value=0x%x, vendorreq_times:%d\n",
276 				value, (reqtype == REALTEK_USB_VENQT_READ) ? "read" : "write",
277 				len, status, *(u32 *)pdata, vendorreq_times);
278 
279 			if (status < 0) {
280 				if (status == -ESHUTDOWN || status == -ENODEV)
281 					adapt->bSurpriseRemoved = true;
282 				else
283 					adapt->HalData->srestpriv.wifi_error_status = USB_VEN_REQ_CMD_FAIL;
284 			} else { /*  status != len && status >= 0 */
285 				if (status > 0) {
286 					if (reqtype == REALTEK_USB_VENQT_READ) {
287 						/*  For Control read transfer, we have to copy the read data from pIo_buf to pdata. */
288 						memcpy(pdata, pIo_buf,  len);
289 					}
290 				}
291 			}
292 		}
293 
294 		/*  firmware download is checksummed, don't retry */
295 		if ((value >= FW_8188E_START_ADDRESS && value <= FW_8188E_END_ADDRESS) || status == len)
296 			break;
297 	}
298 
299 free_buf:
300 	kfree(pIo_buf);
301 release_mutex:
302 	mutex_unlock(&dvobjpriv->usb_vendor_req_mutex);
303 exit:
304 	return status;
305 }
306 
usb_read8(struct adapter * adapter,u32 addr)307 u8 usb_read8(struct adapter *adapter, u32 addr)
308 {
309 	u16 wvalue = (u16)(addr & 0xffff);
310 	u8 data;
311 
312 	usbctrl_vendorreq(adapter, wvalue, &data, 1, REALTEK_USB_VENQT_READ);
313 
314 	return data;
315 }
316 
usb_read16(struct adapter * adapter,u32 addr)317 u16 usb_read16(struct adapter *adapter, u32 addr)
318 {
319 	u16 wvalue = (u16)(addr & 0xffff);
320 	__le32 data;
321 
322 	usbctrl_vendorreq(adapter, wvalue, &data, 2, REALTEK_USB_VENQT_READ);
323 
324 	return (u16)(le32_to_cpu(data) & 0xffff);
325 }
326 
usb_read32(struct adapter * adapter,u32 addr)327 u32 usb_read32(struct adapter *adapter, u32 addr)
328 {
329 	u16 wvalue = (u16)(addr & 0xffff);
330 	__le32 data;
331 
332 	usbctrl_vendorreq(adapter, wvalue, &data, 4, REALTEK_USB_VENQT_READ);
333 
334 	return le32_to_cpu(data);
335 }
336 
usb_read_port_complete(struct urb * purb)337 static void usb_read_port_complete(struct urb *purb)
338 {
339 	struct recv_buf *precvbuf = (struct recv_buf *)purb->context;
340 	struct adapter *adapt = (struct adapter *)precvbuf->adapter;
341 	struct recv_priv *precvpriv = &adapt->recvpriv;
342 
343 	RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("%s!!!\n", __func__));
344 
345 	if (adapt->bSurpriseRemoved || adapt->bDriverStopped || adapt->bReadPortCancel) {
346 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
347 			 ("%s:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n",
348 			 __func__, adapt->bDriverStopped,
349 			 adapt->bSurpriseRemoved));
350 
351 		precvbuf->reuse = true;
352 		DBG_88E("%s() RX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bReadPortCancel(%d)\n",
353 			__func__, adapt->bDriverStopped,
354 			adapt->bSurpriseRemoved, adapt->bReadPortCancel);
355 		return;
356 	}
357 
358 	if (purb->status == 0) { /* SUCCESS */
359 		if ((purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)) {
360 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
361 				 ("%s: (purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)\n",
362 				 __func__));
363 			precvbuf->reuse = true;
364 			usb_read_port(adapt, RECV_BULK_IN_ADDR, precvbuf);
365 			DBG_88E("%s()-%d: RX Warning!\n", __func__, __LINE__);
366 		} else {
367 			skb_put(precvbuf->pskb, purb->actual_length);
368 			skb_queue_tail(&precvpriv->rx_skb_queue, precvbuf->pskb);
369 
370 			if (skb_queue_len(&precvpriv->rx_skb_queue) <= 1)
371 				tasklet_schedule(&precvpriv->recv_tasklet);
372 
373 			precvbuf->pskb = NULL;
374 			precvbuf->reuse = false;
375 			usb_read_port(adapt, RECV_BULK_IN_ADDR, precvbuf);
376 		}
377 	} else {
378 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
379 			 ("%s : purb->status(%d) != 0\n",
380 			  __func__, purb->status));
381 
382 		DBG_88E("###=> %s => urb status(%d)\n", __func__, purb->status);
383 		skb_put(precvbuf->pskb, purb->actual_length);
384 		precvbuf->pskb = NULL;
385 
386 		switch (purb->status) {
387 		case -EINVAL:
388 		case -EPIPE:
389 		case -ENODEV:
390 		case -ESHUTDOWN:
391 			adapt->bSurpriseRemoved = true;
392 			fallthrough;
393 		case -ENOENT:
394 			adapt->bDriverStopped = true;
395 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
396 				 ("%s:bDriverStopped=true\n", __func__));
397 			break;
398 		case -EPROTO:
399 		case -EOVERFLOW:
400 			adapt->HalData->srestpriv.wifi_error_status = USB_READ_PORT_FAIL;
401 			precvbuf->reuse = true;
402 			usb_read_port(adapt, RECV_BULK_IN_ADDR, precvbuf);
403 			break;
404 		case -EINPROGRESS:
405 			DBG_88E("ERROR: URB IS IN PROGRESS!\n");
406 			break;
407 		default:
408 			break;
409 		}
410 	}
411 }
412 
usb_read_port(struct adapter * adapter,u32 addr,struct recv_buf * precvbuf)413 u32 usb_read_port(struct adapter *adapter, u32 addr, struct recv_buf *precvbuf)
414 {
415 	struct urb *purb = NULL;
416 	struct dvobj_priv *pdvobj = adapter_to_dvobj(adapter);
417 	struct recv_priv *precvpriv = &adapter->recvpriv;
418 	struct usb_device *pusbd = pdvobj->pusbdev;
419 	int err;
420 	unsigned int pipe;
421 	u32 ret = _SUCCESS;
422 
423 	if (adapter->bDriverStopped || adapter->bSurpriseRemoved ||
424 	    adapter->pwrctrlpriv.pnp_bstop_trx) {
425 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
426 			 ("%s:(adapt->bDriverStopped ||adapt->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n",
427 			  __func__));
428 		return _FAIL;
429 	}
430 
431 	if (!precvbuf) {
432 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
433 			 ("%s:precvbuf==NULL\n", __func__));
434 		return _FAIL;
435 	}
436 
437 	if (!precvbuf->reuse || !precvbuf->pskb) {
438 		precvbuf->pskb = skb_dequeue(&precvpriv->free_recv_skb_queue);
439 		if (precvbuf->pskb)
440 			precvbuf->reuse = true;
441 	}
442 
443 	/* re-assign for linux based on skb */
444 	if (!precvbuf->reuse || !precvbuf->pskb) {
445 		precvbuf->pskb = netdev_alloc_skb(adapter->pnetdev, MAX_RECVBUF_SZ);
446 		if (!precvbuf->pskb) {
447 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("init_recvbuf(): alloc_skb fail!\n"));
448 			DBG_88E("#### %s() alloc_skb fail!#####\n", __func__);
449 			return _FAIL;
450 		}
451 	} else { /* reuse skb */
452 		precvbuf->reuse = false;
453 	}
454 
455 	purb = precvbuf->purb;
456 
457 	/* translate DMA FIFO addr to pipehandle */
458 	pipe = ffaddr2pipehdl(pdvobj, addr);
459 
460 	usb_fill_bulk_urb(purb, pusbd, pipe,
461 			  precvbuf->pskb->data,
462 			  MAX_RECVBUF_SZ,
463 			  usb_read_port_complete,
464 			  precvbuf);/* context is precvbuf */
465 
466 	err = usb_submit_urb(purb, GFP_ATOMIC);
467 	if ((err) && (err != (-EPERM))) {
468 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
469 			 ("cannot submit rx in-token(err=0x%.8x), URB_STATUS =0x%.8x",
470 			 err, purb->status));
471 		DBG_88E("cannot submit rx in-token(err = 0x%08x),urb_status = %d\n",
472 			err, purb->status);
473 		ret = _FAIL;
474 	}
475 
476 	return ret;
477 }
478 
rtw_hal_inirp_deinit(struct adapter * padapter)479 void rtw_hal_inirp_deinit(struct adapter *padapter)
480 {
481 	int i;
482 	struct recv_buf *precvbuf;
483 
484 	precvbuf = padapter->recvpriv.precv_buf;
485 
486 	DBG_88E("%s\n", __func__);
487 
488 	padapter->bReadPortCancel = true;
489 
490 	for (i = 0; i < NR_RECVBUFF; i++) {
491 		precvbuf->reuse = true;
492 		if (precvbuf->purb)
493 			usb_kill_urb(precvbuf->purb);
494 		precvbuf++;
495 	}
496 }
497 
usb_write8(struct adapter * adapter,u32 addr,u8 val)498 int usb_write8(struct adapter *adapter, u32 addr, u8 val)
499 {
500 	u16 wvalue = (u16)(addr & 0xffff);
501 	u8 data = val;
502 
503 	return usbctrl_vendorreq(adapter, wvalue, &data, 1, REALTEK_USB_VENQT_WRITE);
504 }
505 
usb_write16(struct adapter * adapter,u32 addr,u16 val)506 int usb_write16(struct adapter *adapter, u32 addr, u16 val)
507 {
508 	u16 wvalue = (u16)(addr & 0xffff);
509 	__le32 data = cpu_to_le32(val & 0xffff);
510 
511 	return usbctrl_vendorreq(adapter, wvalue, &data, 2, REALTEK_USB_VENQT_WRITE);
512 }
513 
usb_write32(struct adapter * adapter,u32 addr,u32 val)514 int usb_write32(struct adapter *adapter, u32 addr, u32 val)
515 {
516 	u16 wvalue = (u16)(addr & 0xffff);
517 	__le32 data = cpu_to_le32(val);
518 
519 	return usbctrl_vendorreq(adapter, wvalue, &data, 4, REALTEK_USB_VENQT_WRITE);
520 }
521 
usb_write_port_complete(struct urb * purb)522 static void usb_write_port_complete(struct urb *purb)
523 {
524 	struct xmit_buf *pxmitbuf = (struct xmit_buf *)purb->context;
525 	struct adapter *padapter = pxmitbuf->padapter;
526 	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
527 
528 	switch (pxmitbuf->flags) {
529 	case VO_QUEUE_INX:
530 		pxmitpriv->voq_cnt--;
531 		break;
532 	case VI_QUEUE_INX:
533 		pxmitpriv->viq_cnt--;
534 		break;
535 	case BE_QUEUE_INX:
536 		pxmitpriv->beq_cnt--;
537 		break;
538 	case BK_QUEUE_INX:
539 		pxmitpriv->bkq_cnt--;
540 		break;
541 	case HIGH_QUEUE_INX:
542 #ifdef CONFIG_88EU_AP_MODE
543 		rtw_chk_hi_queue_cmd(padapter);
544 #endif
545 		break;
546 	default:
547 		break;
548 	}
549 
550 	if (padapter->bSurpriseRemoved || padapter->bDriverStopped ||
551 	    padapter->bWritePortCancel) {
552 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
553 			 ("%s:bDriverStopped(%d) OR bSurpriseRemoved(%d)",
554 			  __func__, padapter->bDriverStopped,
555 			  padapter->bSurpriseRemoved));
556 		DBG_88E("%s(): TX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bWritePortCancel(%d) pxmitbuf->ext_tag(%x)\n",
557 			__func__, padapter->bDriverStopped,
558 			padapter->bSurpriseRemoved, padapter->bReadPortCancel,
559 			pxmitbuf->ext_tag);
560 
561 		goto check_completion;
562 	}
563 
564 	if (purb->status) {
565 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
566 			 ("%s : purb->status(%d) != 0\n",
567 			  __func__, purb->status));
568 		DBG_88E("###=> %s status(%d)\n", __func__, purb->status);
569 		if ((purb->status == -EPIPE) || (purb->status == -EPROTO)) {
570 			sreset_set_wifi_error_status(padapter, USB_WRITE_PORT_FAIL);
571 		} else if (purb->status == -EINPROGRESS) {
572 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
573 				 ("%s: EINPROGRESS\n", __func__));
574 			goto check_completion;
575 		} else if (purb->status == -ENOENT) {
576 			DBG_88E("%s: -ENOENT\n", __func__);
577 			goto check_completion;
578 		} else if (purb->status == -ECONNRESET) {
579 			DBG_88E("%s: -ECONNRESET\n", __func__);
580 			goto check_completion;
581 		} else if (purb->status == -ESHUTDOWN) {
582 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
583 				 ("%s: ESHUTDOWN\n", __func__));
584 			padapter->bDriverStopped = true;
585 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
586 				 ("%s:bDriverStopped = true\n", __func__));
587 			goto check_completion;
588 		} else {
589 			padapter->bSurpriseRemoved = true;
590 			DBG_88E("bSurpriseRemoved = true\n");
591 			RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
592 				 ("%s:bSurpriseRemoved = true\n", __func__));
593 			goto check_completion;
594 		}
595 	}
596 
597 check_completion:
598 	rtw_sctx_done_err(&pxmitbuf->sctx,
599 			  purb->status ? RTW_SCTX_DONE_WRITE_PORT_ERR :
600 			  RTW_SCTX_DONE_SUCCESS);
601 
602 	rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
603 
604 	tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
605 }
606 
usb_write_port(struct adapter * padapter,u32 addr,u32 cnt,struct xmit_buf * xmitbuf)607 u32 usb_write_port(struct adapter *padapter, u32 addr, u32 cnt, struct xmit_buf *xmitbuf)
608 {
609 	unsigned long irqL;
610 	unsigned int pipe;
611 	int status;
612 	u32 ret = _FAIL;
613 	struct urb *purb = NULL;
614 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
615 	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
616 	struct xmit_frame *pxmitframe = (struct xmit_frame *)xmitbuf->priv_data;
617 	struct usb_device *pusbd = pdvobj->pusbdev;
618 
619 	RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("+%s\n", __func__));
620 
621 	if ((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||
622 	    (padapter->pwrctrlpriv.pnp_bstop_trx)) {
623 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
624 			 ("%s:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n",
625 			  __func__));
626 		rtw_sctx_done_err(&xmitbuf->sctx, RTW_SCTX_DONE_TX_DENY);
627 		goto exit;
628 	}
629 
630 	spin_lock_irqsave(&pxmitpriv->lock, irqL);
631 
632 	switch (addr) {
633 	case VO_QUEUE_INX:
634 		pxmitpriv->voq_cnt++;
635 		xmitbuf->flags = VO_QUEUE_INX;
636 		break;
637 	case VI_QUEUE_INX:
638 		pxmitpriv->viq_cnt++;
639 		xmitbuf->flags = VI_QUEUE_INX;
640 		break;
641 	case BE_QUEUE_INX:
642 		pxmitpriv->beq_cnt++;
643 		xmitbuf->flags = BE_QUEUE_INX;
644 		break;
645 	case BK_QUEUE_INX:
646 		pxmitpriv->bkq_cnt++;
647 		xmitbuf->flags = BK_QUEUE_INX;
648 		break;
649 	case HIGH_QUEUE_INX:
650 		xmitbuf->flags = HIGH_QUEUE_INX;
651 		break;
652 	default:
653 		xmitbuf->flags = MGT_QUEUE_INX;
654 		break;
655 	}
656 
657 	spin_unlock_irqrestore(&pxmitpriv->lock, irqL);
658 
659 	purb	= xmitbuf->pxmit_urb[0];
660 
661 	/* translate DMA FIFO addr to pipehandle */
662 	pipe = ffaddr2pipehdl(pdvobj, addr);
663 
664 	usb_fill_bulk_urb(purb, pusbd, pipe,
665 			  pxmitframe->buf_addr, /*  xmitbuf->pbuf */
666 			  cnt,
667 			  usb_write_port_complete,
668 			  xmitbuf);/* context is xmitbuf */
669 
670 	status = usb_submit_urb(purb, GFP_ATOMIC);
671 	if (status) {
672 		rtw_sctx_done_err(&xmitbuf->sctx, RTW_SCTX_DONE_WRITE_PORT_ERR);
673 		DBG_88E("%s, status =%d\n", __func__, status);
674 		RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
675 			 ("%s(): usb_submit_urb, status =%x\n",
676 			  __func__, status));
677 
678 		if (status == -ENODEV)
679 			padapter->bDriverStopped = true;
680 
681 		goto exit;
682 	}
683 
684 	ret = _SUCCESS;
685 
686 	RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("-%s\n", __func__));
687 
688 exit:
689 	if (ret != _SUCCESS)
690 		rtw_free_xmitbuf(pxmitpriv, xmitbuf);
691 	return ret;
692 }
693 
usb_write_port_cancel(struct adapter * padapter)694 void usb_write_port_cancel(struct adapter *padapter)
695 {
696 	int i, j;
697 	struct xmit_buf *pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmitbuf;
698 
699 	DBG_88E("%s\n", __func__);
700 
701 	padapter->bWritePortCancel = true;
702 
703 	for (i = 0; i < NR_XMITBUFF; i++) {
704 		for (j = 0; j < 8; j++) {
705 			if (pxmitbuf->pxmit_urb[j])
706 				usb_kill_urb(pxmitbuf->pxmit_urb[j]);
707 		}
708 		pxmitbuf++;
709 	}
710 
711 	pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmit_extbuf;
712 	for (i = 0; i < NR_XMIT_EXTBUFF; i++) {
713 		for (j = 0; j < 8; j++) {
714 			if (pxmitbuf->pxmit_urb[j])
715 				usb_kill_urb(pxmitbuf->pxmit_urb[j]);
716 		}
717 		pxmitbuf++;
718 	}
719 }
720 
rtl8188eu_recv_tasklet(struct tasklet_struct * t)721 void rtl8188eu_recv_tasklet(struct tasklet_struct *t)
722 {
723 	struct sk_buff *pskb;
724 	struct adapter *adapt = from_tasklet(adapt, t, recvpriv.recv_tasklet);
725 	struct recv_priv *precvpriv = &adapt->recvpriv;
726 
727 	while (NULL != (pskb = skb_dequeue(&precvpriv->rx_skb_queue))) {
728 		if ((adapt->bDriverStopped) || (adapt->bSurpriseRemoved)) {
729 			DBG_88E("recv_tasklet => bDriverStopped or bSurpriseRemoved\n");
730 			dev_kfree_skb_any(pskb);
731 			break;
732 		}
733 		recvbuf2recvframe(adapt, pskb);
734 		skb_reset_tail_pointer(pskb);
735 		pskb->len = 0;
736 		skb_queue_tail(&precvpriv->free_recv_skb_queue, pskb);
737 	}
738 }
739 
rtl8188eu_xmit_tasklet(struct tasklet_struct * t)740 void rtl8188eu_xmit_tasklet(struct tasklet_struct *t)
741 {
742 	struct adapter *adapt = from_tasklet(adapt, t, xmitpriv.xmit_tasklet);
743 	struct xmit_priv *pxmitpriv = &adapt->xmitpriv;
744 
745 	if (check_fwstate(&adapt->mlmepriv, _FW_UNDER_SURVEY))
746 		return;
747 
748 	while (1) {
749 		if ((adapt->bDriverStopped) ||
750 		    (adapt->bSurpriseRemoved) ||
751 		    (adapt->bWritePortCancel)) {
752 			DBG_88E("xmit_tasklet => bDriverStopped or bSurpriseRemoved or bWritePortCancel\n");
753 			break;
754 		}
755 
756 		if (!rtl8188eu_xmitframe_complete(adapt, pxmitpriv))
757 			break;
758 	}
759 }
760