usb.c 34.5 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
/*
 * Copyright (c) 2011 Broadcom Corporation
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/firmware.h>
#include <linux/usb.h>
21
#include <linux/vmalloc.h>
22 23

#include <brcmu_utils.h>
24
#include <brcm_hw_ids.h>
25 26 27 28
#include <brcmu_wifi.h>
#include <dhd_bus.h>
#include <dhd_dbg.h>

29
#include "firmware.h"
30 31 32
#include "usb_rdl.h"
#include "usb.h"

33
#define IOCTL_RESP_TIMEOUT		2000
34

35 36
#define BRCMF_USB_RESET_GETVER_SPINWAIT	100	/* in unit of ms */
#define BRCMF_USB_RESET_GETVER_LOOP_CNT	10
37 38 39

#define BRCMF_POSTBOOT_ID		0xA123  /* ID to detect if dongle
						   has boot up */
40 41
#define BRCMF_USB_NRXQ			50
#define BRCMF_USB_NTXQ			50
42

43 44 45
#define BRCMF_USB_CBCTL_WRITE		0
#define BRCMF_USB_CBCTL_READ		1
#define BRCMF_USB_MAX_PKT_SIZE		1600
46

47 48 49 50
#define BRCMF_USB_43143_FW_NAME		"brcm/brcmfmac43143.bin"
#define BRCMF_USB_43236_FW_NAME		"brcm/brcmfmac43236b.bin"
#define BRCMF_USB_43242_FW_NAME		"brcm/brcmfmac43242a.bin"
#define BRCMF_USB_43569_FW_NAME		"brcm/brcmfmac43569.bin"
51 52

struct brcmf_usb_image {
53 54 55 56
	struct list_head list;
	s8 *fwname;
	u8 *image;
	int image_len;
57 58 59 60 61 62 63 64 65
};

struct brcmf_usbdev_info {
	struct brcmf_usbdev bus_pub; /* MUST BE FIRST */
	spinlock_t qlock;
	struct list_head rx_freeq;
	struct list_head rx_postq;
	struct list_head tx_freeq;
	struct list_head tx_postq;
66
	uint rx_pipe, tx_pipe;
67 68 69 70

	int rx_low_watermark;
	int tx_low_watermark;
	int tx_high_watermark;
71 72
	int tx_freecount;
	bool tx_flowblock;
73
	spinlock_t tx_flowblock_lock;
74 75 76 77

	struct brcmf_usbreq *tx_reqs;
	struct brcmf_usbreq *rx_reqs;

78
	const u8 *image;	/* buffer for combine fw and nvram */
79 80 81 82 83 84 85 86 87 88 89 90 91 92
	int image_len;

	struct usb_device *usbdev;
	struct device *dev;

	int ctl_in_pipe, ctl_out_pipe;
	struct urb *ctl_urb; /* URB for control endpoint */
	struct usb_ctrlrequest ctl_write;
	struct usb_ctrlrequest ctl_read;
	u32 ctl_urb_actual_length;
	int ctl_urb_status;
	int ctl_completed;
	wait_queue_head_t ioctl_resp_wait;
	ulong ctl_op;
93
	u8 ifnum;
94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111

	struct urb *bulk_urb; /* used for FW download */
};

static void brcmf_usb_rx_refill(struct brcmf_usbdev_info *devinfo,
				struct brcmf_usbreq  *req);

static struct brcmf_usbdev *brcmf_usb_get_buspub(struct device *dev)
{
	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
	return bus_if->bus_priv.usb;
}

static struct brcmf_usbdev_info *brcmf_usb_get_businfo(struct device *dev)
{
	return brcmf_usb_get_buspub(dev)->devinfo;
}

112
static int brcmf_usb_ioctl_resp_wait(struct brcmf_usbdev_info *devinfo)
113
{
114 115 116
	return wait_event_timeout(devinfo->ioctl_resp_wait,
				  devinfo->ctl_completed,
				  msecs_to_jiffies(IOCTL_RESP_TIMEOUT));
117 118
}

119
static void brcmf_usb_ioctl_resp_wake(struct brcmf_usbdev_info *devinfo)
120 121
{
	if (waitqueue_active(&devinfo->ioctl_resp_wait))
122
		wake_up(&devinfo->ioctl_resp_wait);
123 124 125 126 127
}

static void
brcmf_usb_ctl_complete(struct brcmf_usbdev_info *devinfo, int type, int status)
{
128
	brcmf_dbg(USB, "Enter, status=%d\n", status);
129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155

	if (unlikely(devinfo == NULL))
		return;

	if (type == BRCMF_USB_CBCTL_READ) {
		if (status == 0)
			devinfo->bus_pub.stats.rx_ctlpkts++;
		else
			devinfo->bus_pub.stats.rx_ctlerrs++;
	} else if (type == BRCMF_USB_CBCTL_WRITE) {
		if (status == 0)
			devinfo->bus_pub.stats.tx_ctlpkts++;
		else
			devinfo->bus_pub.stats.tx_ctlerrs++;
	}

	devinfo->ctl_urb_status = status;
	devinfo->ctl_completed = true;
	brcmf_usb_ioctl_resp_wake(devinfo);
}

static void
brcmf_usb_ctlread_complete(struct urb *urb)
{
	struct brcmf_usbdev_info *devinfo =
		(struct brcmf_usbdev_info *)urb->context;

156
	brcmf_dbg(USB, "Enter\n");
157 158 159 160 161 162 163 164 165 166 167
	devinfo->ctl_urb_actual_length = urb->actual_length;
	brcmf_usb_ctl_complete(devinfo, BRCMF_USB_CBCTL_READ,
		urb->status);
}

static void
brcmf_usb_ctlwrite_complete(struct urb *urb)
{
	struct brcmf_usbdev_info *devinfo =
		(struct brcmf_usbdev_info *)urb->context;

168
	brcmf_dbg(USB, "Enter\n");
169 170 171 172 173 174 175 176 177 178
	brcmf_usb_ctl_complete(devinfo, BRCMF_USB_CBCTL_WRITE,
		urb->status);
}

static int
brcmf_usb_send_ctl(struct brcmf_usbdev_info *devinfo, u8 *buf, int len)
{
	int ret;
	u16 size;

179
	brcmf_dbg(USB, "Enter\n");
180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199
	if (devinfo == NULL || buf == NULL ||
	    len == 0 || devinfo->ctl_urb == NULL)
		return -EINVAL;

	size = len;
	devinfo->ctl_write.wLength = cpu_to_le16p(&size);
	devinfo->ctl_urb->transfer_buffer_length = size;
	devinfo->ctl_urb_status = 0;
	devinfo->ctl_urb_actual_length = 0;

	usb_fill_control_urb(devinfo->ctl_urb,
		devinfo->usbdev,
		devinfo->ctl_out_pipe,
		(unsigned char *) &devinfo->ctl_write,
		buf, size,
		(usb_complete_t)brcmf_usb_ctlwrite_complete,
		devinfo);

	ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
	if (ret < 0)
200
		brcmf_err("usb_submit_urb failed %d\n", ret);
201 202 203 204 205 206 207 208 209 210

	return ret;
}

static int
brcmf_usb_recv_ctl(struct brcmf_usbdev_info *devinfo, u8 *buf, int len)
{
	int ret;
	u16 size;

211
	brcmf_dbg(USB, "Enter\n");
212 213 214 215 216 217 218 219
	if ((devinfo == NULL) || (buf == NULL) || (len == 0)
		|| (devinfo->ctl_urb == NULL))
		return -EINVAL;

	size = len;
	devinfo->ctl_read.wLength = cpu_to_le16p(&size);
	devinfo->ctl_urb->transfer_buffer_length = size;

220 221 222
	devinfo->ctl_read.bRequestType = USB_DIR_IN
		| USB_TYPE_CLASS | USB_RECIP_INTERFACE;
	devinfo->ctl_read.bRequest = 1;
223 224 225 226 227 228 229 230 231 232 233

	usb_fill_control_urb(devinfo->ctl_urb,
		devinfo->usbdev,
		devinfo->ctl_in_pipe,
		(unsigned char *) &devinfo->ctl_read,
		buf, size,
		(usb_complete_t)brcmf_usb_ctlread_complete,
		devinfo);

	ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
	if (ret < 0)
234
		brcmf_err("usb_submit_urb failed %d\n", ret);
235 236 237 238 239 240 241 242 243 244

	return ret;
}

static int brcmf_usb_tx_ctlpkt(struct device *dev, u8 *buf, u32 len)
{
	int err = 0;
	int timeout = 0;
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);

245
	brcmf_dbg(USB, "Enter\n");
H
Hante Meuleman 已提交
246
	if (devinfo->bus_pub.state != BRCMFMAC_USB_STATE_UP)
247 248 249 250 251
		return -EIO;

	if (test_and_set_bit(0, &devinfo->ctl_op))
		return -EIO;

252
	devinfo->ctl_completed = false;
253 254
	err = brcmf_usb_send_ctl(devinfo, buf, len);
	if (err) {
255
		brcmf_err("fail %d bytes: %d\n", err, len);
256
		clear_bit(0, &devinfo->ctl_op);
257 258
		return err;
	}
259
	timeout = brcmf_usb_ioctl_resp_wait(devinfo);
260 261
	clear_bit(0, &devinfo->ctl_op);
	if (!timeout) {
262
		brcmf_err("Txctl wait timed out\n");
263 264 265 266 267 268 269 270 271 272 273
		err = -EIO;
	}
	return err;
}

static int brcmf_usb_rx_ctlpkt(struct device *dev, u8 *buf, u32 len)
{
	int err = 0;
	int timeout = 0;
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);

274
	brcmf_dbg(USB, "Enter\n");
H
Hante Meuleman 已提交
275
	if (devinfo->bus_pub.state != BRCMFMAC_USB_STATE_UP)
276
		return -EIO;
H
Hante Meuleman 已提交
277

278 279 280
	if (test_and_set_bit(0, &devinfo->ctl_op))
		return -EIO;

281
	devinfo->ctl_completed = false;
282 283
	err = brcmf_usb_recv_ctl(devinfo, buf, len);
	if (err) {
284
		brcmf_err("fail %d bytes: %d\n", err, len);
285
		clear_bit(0, &devinfo->ctl_op);
286 287
		return err;
	}
288
	timeout = brcmf_usb_ioctl_resp_wait(devinfo);
289 290 291
	err = devinfo->ctl_urb_status;
	clear_bit(0, &devinfo->ctl_op);
	if (!timeout) {
292
		brcmf_err("rxctl wait timed out\n");
293 294 295 296 297 298 299 300 301
		err = -EIO;
	}
	if (!err)
		return devinfo->ctl_urb_actual_length;
	else
		return err;
}

static struct brcmf_usbreq *brcmf_usb_deq(struct brcmf_usbdev_info *devinfo,
302
					  struct list_head *q, int *counter)
303 304 305 306 307 308 309 310 311 312
{
	unsigned long flags;
	struct brcmf_usbreq  *req;
	spin_lock_irqsave(&devinfo->qlock, flags);
	if (list_empty(q)) {
		spin_unlock_irqrestore(&devinfo->qlock, flags);
		return NULL;
	}
	req = list_entry(q->next, struct brcmf_usbreq, list);
	list_del_init(q->next);
313 314
	if (counter)
		(*counter)--;
315 316 317 318 319 320
	spin_unlock_irqrestore(&devinfo->qlock, flags);
	return req;

}

static void brcmf_usb_enq(struct brcmf_usbdev_info *devinfo,
321 322
			  struct list_head *q, struct brcmf_usbreq *req,
			  int *counter)
323 324 325 326
{
	unsigned long flags;
	spin_lock_irqsave(&devinfo->qlock, flags);
	list_add_tail(&req->list, q);
327 328
	if (counter)
		(*counter)++;
329 330 331 332 333 334 335 336 337
	spin_unlock_irqrestore(&devinfo->qlock, flags);
}

static struct brcmf_usbreq *
brcmf_usbdev_qinit(struct list_head *q, int qsize)
{
	int i;
	struct brcmf_usbreq *req, *reqs;

338 339
	reqs = kcalloc(qsize, sizeof(struct brcmf_usbreq), GFP_ATOMIC);
	if (reqs == NULL)
340
		return NULL;
341

342 343 344 345 346 347 348 349 350 351 352 353 354
	req = reqs;

	for (i = 0; i < qsize; i++) {
		req->urb = usb_alloc_urb(0, GFP_ATOMIC);
		if (!req->urb)
			goto fail;

		INIT_LIST_HEAD(&req->list);
		list_add_tail(&req->list, q);
		req++;
	}
	return reqs;
fail:
355
	brcmf_err("fail!\n");
356 357 358 359 360 361 362 363 364 365 366 367 368 369 370
	while (!list_empty(q)) {
		req = list_entry(q->next, struct brcmf_usbreq, list);
		if (req && req->urb)
			usb_free_urb(req->urb);
		list_del(q->next);
	}
	return NULL;

}

static void brcmf_usb_free_q(struct list_head *q, bool pending)
{
	struct brcmf_usbreq *req, *next;
	int i = 0;
	list_for_each_entry_safe(req, next, q, list) {
371
		if (!req->urb) {
372
			brcmf_err("bad req\n");
373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399
			break;
		}
		i++;
		if (pending) {
			usb_kill_urb(req->urb);
		} else {
			usb_free_urb(req->urb);
			list_del_init(&req->list);
		}
	}
}

static void brcmf_usb_del_fromq(struct brcmf_usbdev_info *devinfo,
				struct brcmf_usbreq *req)
{
	unsigned long flags;

	spin_lock_irqsave(&devinfo->qlock, flags);
	list_del_init(&req->list);
	spin_unlock_irqrestore(&devinfo->qlock, flags);
}


static void brcmf_usb_tx_complete(struct urb *urb)
{
	struct brcmf_usbreq *req = (struct brcmf_usbreq *)urb->context;
	struct brcmf_usbdev_info *devinfo = req->devinfo;
400
	unsigned long flags;
401

402 403
	brcmf_dbg(USB, "Enter, urb->status=%d, skb=%p\n", urb->status,
		  req->skb);
404 405
	brcmf_usb_del_fromq(devinfo, req);

406
	brcmf_txcomplete(devinfo->dev, req->skb, urb->status == 0);
407
	req->skb = NULL;
408
	brcmf_usb_enq(devinfo, &devinfo->tx_freeq, req, &devinfo->tx_freecount);
409
	spin_lock_irqsave(&devinfo->tx_flowblock_lock, flags);
410 411 412 413 414
	if (devinfo->tx_freecount > devinfo->tx_high_watermark &&
		devinfo->tx_flowblock) {
		brcmf_txflowblock(devinfo->dev, false);
		devinfo->tx_flowblock = false;
	}
415
	spin_unlock_irqrestore(&devinfo->tx_flowblock_lock, flags);
416 417 418 419 420 421 422 423
}

static void brcmf_usb_rx_complete(struct urb *urb)
{
	struct brcmf_usbreq  *req = (struct brcmf_usbreq *)urb->context;
	struct brcmf_usbdev_info *devinfo = req->devinfo;
	struct sk_buff *skb;

424
	brcmf_dbg(USB, "Enter, urb->status=%d\n", urb->status);
425 426 427 428
	brcmf_usb_del_fromq(devinfo, req);
	skb = req->skb;
	req->skb = NULL;

429
	/* zero lenght packets indicate usb "failure". Do not refill */
430
	if (urb->status != 0 || !urb->actual_length) {
431
		brcmu_pkt_buf_free_skb(skb);
432
		brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req, NULL);
433 434 435
		return;
	}

H
Hante Meuleman 已提交
436
	if (devinfo->bus_pub.state == BRCMFMAC_USB_STATE_UP) {
437
		skb_put(skb, urb->actual_length);
438
		brcmf_rx_frame(devinfo->dev, skb);
439
		brcmf_usb_rx_refill(devinfo, req);
440
	} else {
441
		brcmu_pkt_buf_free_skb(skb);
442
		brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req, NULL);
443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458
	}
	return;

}

static void brcmf_usb_rx_refill(struct brcmf_usbdev_info *devinfo,
				struct brcmf_usbreq  *req)
{
	struct sk_buff *skb;
	int ret;

	if (!req || !devinfo)
		return;

	skb = dev_alloc_skb(devinfo->bus_pub.bus_mtu);
	if (!skb) {
459
		brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req, NULL);
460 461 462 463 464 465 466 467
		return;
	}
	req->skb = skb;

	usb_fill_bulk_urb(req->urb, devinfo->usbdev, devinfo->rx_pipe,
			  skb->data, skb_tailroom(skb), brcmf_usb_rx_complete,
			  req);
	req->devinfo = devinfo;
468
	brcmf_usb_enq(devinfo, &devinfo->rx_postq, req, NULL);
469 470

	ret = usb_submit_urb(req->urb, GFP_ATOMIC);
471 472
	if (ret) {
		brcmf_usb_del_fromq(devinfo, req);
473
		brcmu_pkt_buf_free_skb(req->skb);
474
		req->skb = NULL;
475
		brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req, NULL);
476 477 478 479 480 481 482 483
	}
	return;
}

static void brcmf_usb_rx_fill_all(struct brcmf_usbdev_info *devinfo)
{
	struct brcmf_usbreq *req;

H
Hante Meuleman 已提交
484
	if (devinfo->bus_pub.state != BRCMFMAC_USB_STATE_UP) {
485
		brcmf_err("bus is not up=%d\n", devinfo->bus_pub.state);
486 487
		return;
	}
488
	while ((req = brcmf_usb_deq(devinfo, &devinfo->rx_freeq, NULL)) != NULL)
489 490 491 492 493 494 495 496 497
		brcmf_usb_rx_refill(devinfo, req);
}

static void
brcmf_usb_state_change(struct brcmf_usbdev_info *devinfo, int state)
{
	struct brcmf_bus *bcmf_bus = devinfo->bus_pub.bus;
	int old_state;

498 499
	brcmf_dbg(USB, "Enter, current state=%d, new state=%d\n",
		  devinfo->bus_pub.state, state);
500 501 502 503 504

	if (devinfo->bus_pub.state == state)
		return;

	old_state = devinfo->bus_pub.state;
H
Hante Meuleman 已提交
505
	devinfo->bus_pub.state = state;
506 507

	/* update state of upper layer */
H
Hante Meuleman 已提交
508
	if (state == BRCMFMAC_USB_STATE_DOWN) {
509
		brcmf_dbg(USB, "DBUS is down\n");
510
		brcmf_bus_change_state(bcmf_bus, BRCMF_BUS_DOWN);
H
Hante Meuleman 已提交
511 512
	} else if (state == BRCMFMAC_USB_STATE_UP) {
		brcmf_dbg(USB, "DBUS is up\n");
513
		brcmf_bus_change_state(bcmf_bus, BRCMF_BUS_DATA);
514
	} else {
515
		brcmf_dbg(USB, "DBUS current state=%d\n", state);
516 517 518 519 520 521 522 523
	}
}

static int brcmf_usb_tx(struct device *dev, struct sk_buff *skb)
{
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);
	struct brcmf_usbreq  *req;
	int ret;
524
	unsigned long flags;
525

526
	brcmf_dbg(USB, "Enter, skb=%p\n", skb);
527 528 529 530
	if (devinfo->bus_pub.state != BRCMFMAC_USB_STATE_UP) {
		ret = -EIO;
		goto fail;
	}
531

532 533
	req = brcmf_usb_deq(devinfo, &devinfo->tx_freeq,
					&devinfo->tx_freecount);
534
	if (!req) {
535
		brcmf_err("no req to send\n");
536 537
		ret = -ENOMEM;
		goto fail;
538 539 540 541 542 543 544
	}

	req->skb = skb;
	req->devinfo = devinfo;
	usb_fill_bulk_urb(req->urb, devinfo->usbdev, devinfo->tx_pipe,
			  skb->data, skb->len, brcmf_usb_tx_complete, req);
	req->urb->transfer_flags |= URB_ZERO_PACKET;
545
	brcmf_usb_enq(devinfo, &devinfo->tx_postq, req, NULL);
546
	ret = usb_submit_urb(req->urb, GFP_ATOMIC);
547
	if (ret) {
548
		brcmf_err("brcmf_usb_tx usb_submit_urb FAILED\n");
549
		brcmf_usb_del_fromq(devinfo, req);
550
		req->skb = NULL;
551
		brcmf_usb_enq(devinfo, &devinfo->tx_freeq, req,
552 553
			      &devinfo->tx_freecount);
		goto fail;
554 555
	}

556
	spin_lock_irqsave(&devinfo->tx_flowblock_lock, flags);
557 558 559 560 561
	if (devinfo->tx_freecount < devinfo->tx_low_watermark &&
	    !devinfo->tx_flowblock) {
		brcmf_txflowblock(dev, true);
		devinfo->tx_flowblock = true;
	}
562
	spin_unlock_irqrestore(&devinfo->tx_flowblock_lock, flags);
563 564 565
	return 0;

fail:
566 567 568 569 570 571 572 573
	return ret;
}


static int brcmf_usb_up(struct device *dev)
{
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);

574
	brcmf_dbg(USB, "Enter\n");
H
Hante Meuleman 已提交
575
	if (devinfo->bus_pub.state == BRCMFMAC_USB_STATE_UP)
576 577
		return 0;

578
	/* Success, indicate devinfo is fully up */
H
Hante Meuleman 已提交
579
	brcmf_usb_state_change(devinfo, BRCMFMAC_USB_STATE_UP);
580 581 582 583 584 585 586 587 588 589

	if (devinfo->ctl_urb) {
		devinfo->ctl_in_pipe = usb_rcvctrlpipe(devinfo->usbdev, 0);
		devinfo->ctl_out_pipe = usb_sndctrlpipe(devinfo->usbdev, 0);

		/* CTL Write */
		devinfo->ctl_write.bRequestType =
			USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE;
		devinfo->ctl_write.bRequest = 0;
		devinfo->ctl_write.wValue = cpu_to_le16(0);
590
		devinfo->ctl_write.wIndex = cpu_to_le16(devinfo->ifnum);
591 592 593 594 595 596

		/* CTL Read */
		devinfo->ctl_read.bRequestType =
			USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE;
		devinfo->ctl_read.bRequest = 1;
		devinfo->ctl_read.wValue = cpu_to_le16(0);
597
		devinfo->ctl_read.wIndex = cpu_to_le16(devinfo->ifnum);
598 599 600 601 602 603 604 605 606
	}
	brcmf_usb_rx_fill_all(devinfo);
	return 0;
}

static void brcmf_usb_down(struct device *dev)
{
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);

607
	brcmf_dbg(USB, "Enter\n");
608 609 610
	if (devinfo == NULL)
		return;

H
Hante Meuleman 已提交
611
	if (devinfo->bus_pub.state == BRCMFMAC_USB_STATE_DOWN)
612 613
		return;

H
Hante Meuleman 已提交
614
	brcmf_usb_state_change(devinfo, BRCMFMAC_USB_STATE_DOWN);
615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631

	if (devinfo->ctl_urb)
		usb_kill_urb(devinfo->ctl_urb);

	if (devinfo->bulk_urb)
		usb_kill_urb(devinfo->bulk_urb);
	brcmf_usb_free_q(&devinfo->tx_postq, true);

	brcmf_usb_free_q(&devinfo->rx_postq, true);
}

static void
brcmf_usb_sync_complete(struct urb *urb)
{
	struct brcmf_usbdev_info *devinfo =
			(struct brcmf_usbdev_info *)urb->context;

632 633
	devinfo->ctl_completed = true;
	brcmf_usb_ioctl_resp_wake(devinfo);
634 635
}

636 637
static int brcmf_usb_dl_cmd(struct brcmf_usbdev_info *devinfo, u8 cmd,
			    void *buffer, int buflen)
638
{
639
	int ret;
640 641 642 643
	char *tmpbuf;
	u16 size;

	if ((!devinfo) || (devinfo->ctl_urb == NULL))
644
		return -EINVAL;
645 646 647

	tmpbuf = kmalloc(buflen, GFP_ATOMIC);
	if (!tmpbuf)
648
		return -ENOMEM;
649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664

	size = buflen;
	devinfo->ctl_urb->transfer_buffer_length = size;

	devinfo->ctl_read.wLength = cpu_to_le16p(&size);
	devinfo->ctl_read.bRequestType = USB_DIR_IN | USB_TYPE_VENDOR |
		USB_RECIP_INTERFACE;
	devinfo->ctl_read.bRequest = cmd;

	usb_fill_control_urb(devinfo->ctl_urb,
		devinfo->usbdev,
		usb_rcvctrlpipe(devinfo->usbdev, 0),
		(unsigned char *) &devinfo->ctl_read,
		(void *) tmpbuf, size,
		(usb_complete_t)brcmf_usb_sync_complete, devinfo);

665
	devinfo->ctl_completed = false;
666 667
	ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
	if (ret < 0) {
668
		brcmf_err("usb_submit_urb failed %d\n", ret);
669
		goto finalize;
670 671
	}

672 673
	if (!brcmf_usb_ioctl_resp_wait(devinfo)) {
		usb_kill_urb(devinfo->ctl_urb);
674
		ret = -ETIMEDOUT;
675
	} else {
676
		memcpy(buffer, tmpbuf, buflen);
677
	}
678

679 680
finalize:
	kfree(tmpbuf);
681
	return ret;
682 683 684 685 686 687 688 689
}

static bool
brcmf_usb_dlneeded(struct brcmf_usbdev_info *devinfo)
{
	struct bootrom_id_le id;
	u32 chipid, chiprev;

690
	brcmf_dbg(USB, "Enter\n");
691 692 693 694 695 696

	if (devinfo == NULL)
		return false;

	/* Check if firmware downloaded already by querying runtime ID */
	id.chip = cpu_to_le32(0xDEAD);
697
	brcmf_usb_dl_cmd(devinfo, DL_GETVER, &id, sizeof(id));
698 699 700 701 702

	chipid = le32_to_cpu(id.chip);
	chiprev = le32_to_cpu(id.chiprev);

	if ((chipid & 0x4300) == 0x4300)
703
		brcmf_dbg(USB, "chip %x rev 0x%x\n", chipid, chiprev);
704
	else
705
		brcmf_dbg(USB, "chip %d rev 0x%x\n", chipid, chiprev);
706
	if (chipid == BRCMF_POSTBOOT_ID) {
707
		brcmf_dbg(USB, "firmware already downloaded\n");
708
		brcmf_usb_dl_cmd(devinfo, DL_RESETCFG, &id, sizeof(id));
709 710
		return false;
	} else {
711 712
		devinfo->bus_pub.devid = chipid;
		devinfo->bus_pub.chiprev = chiprev;
713 714 715 716 717 718 719 720
	}
	return true;
}

static int
brcmf_usb_resetcfg(struct brcmf_usbdev_info *devinfo)
{
	struct bootrom_id_le id;
721
	u32 loop_cnt;
722
	int err;
723

724
	brcmf_dbg(USB, "Enter\n");
725

726 727 728 729
	loop_cnt = 0;
	do {
		mdelay(BRCMF_USB_RESET_GETVER_SPINWAIT);
		loop_cnt++;
730
		id.chip = cpu_to_le32(0xDEAD);       /* Get the ID */
731 732 733
		err = brcmf_usb_dl_cmd(devinfo, DL_GETVER, &id, sizeof(id));
		if ((err) && (err != -ETIMEDOUT))
			return err;
734 735
		if (id.chip == cpu_to_le32(BRCMF_POSTBOOT_ID))
			break;
736
	} while (loop_cnt < BRCMF_USB_RESET_GETVER_LOOP_CNT);
737 738

	if (id.chip == cpu_to_le32(BRCMF_POSTBOOT_ID)) {
739 740
		brcmf_dbg(USB, "postboot chip 0x%x/rev 0x%x\n",
			  le32_to_cpu(id.chip), le32_to_cpu(id.chiprev));
741

742
		brcmf_usb_dl_cmd(devinfo, DL_RESETCFG, &id, sizeof(id));
743 744
		return 0;
	} else {
745
		brcmf_err("Cannot talk to Dongle. Firmware is not UP, %d ms\n",
746
			  BRCMF_USB_RESET_GETVER_SPINWAIT * loop_cnt);
747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766
		return -EINVAL;
	}
}


static int
brcmf_usb_dl_send_bulk(struct brcmf_usbdev_info *devinfo, void *buffer, int len)
{
	int ret;

	if ((devinfo == NULL) || (devinfo->bulk_urb == NULL))
		return -EINVAL;

	/* Prepare the URB */
	usb_fill_bulk_urb(devinfo->bulk_urb, devinfo->usbdev,
			  devinfo->tx_pipe, buffer, len,
			  (usb_complete_t)brcmf_usb_sync_complete, devinfo);

	devinfo->bulk_urb->transfer_flags |= URB_ZERO_PACKET;

767
	devinfo->ctl_completed = false;
768 769
	ret = usb_submit_urb(devinfo->bulk_urb, GFP_ATOMIC);
	if (ret) {
770
		brcmf_err("usb_submit_urb failed %d\n", ret);
771 772
		return ret;
	}
773 774
	ret = brcmf_usb_ioctl_resp_wait(devinfo);
	return (ret == 0);
775 776 777 778 779 780 781 782 783 784
}

static int
brcmf_usb_dl_writeimage(struct brcmf_usbdev_info *devinfo, u8 *fw, int fwlen)
{
	unsigned int sendlen, sent, dllen;
	char *bulkchunk = NULL, *dlpos;
	struct rdl_state_le state;
	u32 rdlstate, rdlbytes;
	int err = 0;
785 786

	brcmf_dbg(USB, "Enter, fw %p, len %d\n", fw, fwlen);
787 788 789 790 791 792 793 794

	bulkchunk = kmalloc(RDL_CHUNK, GFP_ATOMIC);
	if (bulkchunk == NULL) {
		err = -ENOMEM;
		goto fail;
	}

	/* 1) Prepare USB boot loader for runtime image */
795
	brcmf_usb_dl_cmd(devinfo, DL_START, &state, sizeof(state));
796 797 798 799 800 801

	rdlstate = le32_to_cpu(state.state);
	rdlbytes = le32_to_cpu(state.bytes);

	/* 2) Check we are in the Waiting state */
	if (rdlstate != DL_WAITING) {
802
		brcmf_err("Failed to DL_START\n");
803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828 829 830
		err = -EINVAL;
		goto fail;
	}
	sent = 0;
	dlpos = fw;
	dllen = fwlen;

	/* Get chip id and rev */
	while (rdlbytes != dllen) {
		/* Wait until the usb device reports it received all
		 * the bytes we sent */
		if ((rdlbytes == sent) && (rdlbytes != dllen)) {
			if ((dllen-sent) < RDL_CHUNK)
				sendlen = dllen-sent;
			else
				sendlen = RDL_CHUNK;

			/* simply avoid having to send a ZLP by ensuring we
			 * never have an even
			 * multiple of 64
			 */
			if (!(sendlen % 64))
				sendlen -= 4;

			/* send data */
			memcpy(bulkchunk, dlpos, sendlen);
			if (brcmf_usb_dl_send_bulk(devinfo, bulkchunk,
						   sendlen)) {
831
				brcmf_err("send_bulk failed\n");
832 833 834 835 836 837 838
				err = -EINVAL;
				goto fail;
			}

			dlpos += sendlen;
			sent += sendlen;
		}
839 840 841 842
		err = brcmf_usb_dl_cmd(devinfo, DL_GETSTATE, &state,
				       sizeof(state));
		if (err) {
			brcmf_err("DL_GETSTATE Failed\n");
843 844 845 846 847 848 849 850
			goto fail;
		}

		rdlstate = le32_to_cpu(state.state);
		rdlbytes = le32_to_cpu(state.bytes);

		/* restart if an error is reported */
		if (rdlstate == DL_BAD_HDR || rdlstate == DL_BAD_CRC) {
851
			brcmf_err("Bad Hdr or Bad CRC state %d\n",
852 853 854 855 856 857 858 859
				  rdlstate);
			err = -EINVAL;
			goto fail;
		}
	}

fail:
	kfree(bulkchunk);
860
	brcmf_dbg(USB, "Exit, err=%d\n", err);
861 862 863 864 865 866 867
	return err;
}

static int brcmf_usb_dlstart(struct brcmf_usbdev_info *devinfo, u8 *fw, int len)
{
	int err;

868
	brcmf_dbg(USB, "Enter\n");
869 870 871 872

	if (devinfo == NULL)
		return -EINVAL;

873
	if (devinfo->bus_pub.devid == 0xDEAD)
874 875 876 877
		return -EINVAL;

	err = brcmf_usb_dl_writeimage(devinfo, fw, len);
	if (err == 0)
H
Hante Meuleman 已提交
878
		devinfo->bus_pub.state = BRCMFMAC_USB_STATE_DL_DONE;
879
	else
H
Hante Meuleman 已提交
880
		devinfo->bus_pub.state = BRCMFMAC_USB_STATE_DL_FAIL;
881
	brcmf_dbg(USB, "Exit, err=%d\n", err);
882 883 884 885 886 887 888 889

	return err;
}

static int brcmf_usb_dlrun(struct brcmf_usbdev_info *devinfo)
{
	struct rdl_state_le state;

890
	brcmf_dbg(USB, "Enter\n");
891 892 893
	if (!devinfo)
		return -EINVAL;

894
	if (devinfo->bus_pub.devid == 0xDEAD)
895 896 897
		return -EINVAL;

	/* Check we are runnable */
898 899
	state.state = 0;
	brcmf_usb_dl_cmd(devinfo, DL_GETSTATE, &state, sizeof(state));
900 901 902

	/* Start the image */
	if (state.state == cpu_to_le32(DL_RUNNABLE)) {
903
		if (brcmf_usb_dl_cmd(devinfo, DL_GO, &state, sizeof(state)))
904 905 906 907 908
			return -ENODEV;
		if (brcmf_usb_resetcfg(devinfo))
			return -ENODEV;
		/* The Dongle may go for re-enumeration. */
	} else {
909
		brcmf_err("Dongle not runnable\n");
910 911
		return -EINVAL;
	}
912
	brcmf_dbg(USB, "Exit\n");
913 914 915 916 917 918
	return 0;
}

static bool brcmf_usb_chip_support(int chipid, int chiprev)
{
	switch(chipid) {
919
	case BRCM_CC_43143_CHIP_ID:
920
		return true;
921 922 923
	case BRCM_CC_43235_CHIP_ID:
	case BRCM_CC_43236_CHIP_ID:
	case BRCM_CC_43238_CHIP_ID:
924
		return (chiprev == 3);
925
	case BRCM_CC_43242_CHIP_ID:
926
		return true;
927 928
	case BRCM_CC_43566_CHIP_ID:
	case BRCM_CC_43569_CHIP_ID:
929
		return true;
930 931 932 933 934 935 936 937 938
	default:
		break;
	}
	return false;
}

static int
brcmf_usb_fw_download(struct brcmf_usbdev_info *devinfo)
{
939
	int devid, chiprev;
940 941
	int err;

942
	brcmf_dbg(USB, "Enter\n");
943 944 945
	if (devinfo == NULL)
		return -ENODEV;

946 947
	devid = devinfo->bus_pub.devid;
	chiprev = devinfo->bus_pub.chiprev;
948

949
	if (!brcmf_usb_chip_support(devid, chiprev)) {
950
		brcmf_err("unsupported chip %d rev %d\n",
951
			  devid, chiprev);
952 953 954 955
		return -EINVAL;
	}

	if (!devinfo->image) {
956
		brcmf_err("No firmware!\n");
957 958 959 960
		return -ENOENT;
	}

	err = brcmf_usb_dlstart(devinfo,
961
		(u8 *)devinfo->image, devinfo->image_len);
962 963 964 965 966 967
	if (err == 0)
		err = brcmf_usb_dlrun(devinfo);
	return err;
}


968
static void brcmf_usb_detach(struct brcmf_usbdev_info *devinfo)
969
{
970
	brcmf_dbg(USB, "Enter, devinfo %p\n", devinfo);
971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003

	/* free the URBS */
	brcmf_usb_free_q(&devinfo->rx_freeq, false);
	brcmf_usb_free_q(&devinfo->tx_freeq, false);

	usb_free_urb(devinfo->ctl_urb);
	usb_free_urb(devinfo->bulk_urb);

	kfree(devinfo->tx_reqs);
	kfree(devinfo->rx_reqs);
}

#define TRX_MAGIC       0x30524448      /* "HDR0" */
#define TRX_VERSION     1               /* Version 1 */
#define TRX_MAX_LEN     0x3B0000        /* Max length */
#define TRX_NO_HEADER   1               /* Do not write TRX header */
#define TRX_MAX_OFFSET  3               /* Max number of individual files */
#define TRX_UNCOMP_IMAGE        0x20    /* Trx contains uncompressed image */

struct trx_header_le {
	__le32 magic;		/* "HDR0" */
	__le32 len;		/* Length of file including header */
	__le32 crc32;		/* CRC from flag_version to end of file */
	__le32 flag_version;	/* 0:15 flags, 16:31 version */
	__le32 offsets[TRX_MAX_OFFSET]; /* Offsets of partitions from start of
					 * header */
};

static int check_file(const u8 *headers)
{
	struct trx_header_le *trx;
	int actual_len = -1;

1004
	brcmf_dbg(USB, "Enter\n");
1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018
	/* Extract trx header */
	trx = (struct trx_header_le *) headers;
	if (trx->magic != cpu_to_le32(TRX_MAGIC))
		return -1;

	headers += sizeof(struct trx_header_le);

	if (le32_to_cpu(trx->flag_version) & TRX_UNCOMP_IMAGE) {
		actual_len = le32_to_cpu(trx->offsets[TRX_OFFSETS_DLFWLEN_IDX]);
		return actual_len + sizeof(struct trx_header_le);
	}
	return -1;
}

1019 1020 1021
static const char *brcmf_usb_get_fwname(struct brcmf_usbdev_info *devinfo)
{
	switch (devinfo->bus_pub.devid) {
1022
	case BRCM_CC_43143_CHIP_ID:
1023
		return BRCMF_USB_43143_FW_NAME;
1024 1025 1026
	case BRCM_CC_43235_CHIP_ID:
	case BRCM_CC_43236_CHIP_ID:
	case BRCM_CC_43238_CHIP_ID:
1027
		return BRCMF_USB_43236_FW_NAME;
1028
	case BRCM_CC_43242_CHIP_ID:
1029
		return BRCMF_USB_43242_FW_NAME;
1030 1031
	case BRCM_CC_43566_CHIP_ID:
	case BRCM_CC_43569_CHIP_ID:
1032
		return BRCMF_USB_43569_FW_NAME;
1033 1034 1035 1036
	default:
		return NULL;
	}
}
1037 1038 1039


static
1040 1041
struct brcmf_usbdev *brcmf_usb_attach(struct brcmf_usbdev_info *devinfo,
				      int nrxq, int ntxq)
1042
{
1043 1044
	brcmf_dbg(USB, "Enter\n");

1045 1046 1047 1048
	devinfo->bus_pub.nrxq = nrxq;
	devinfo->rx_low_watermark = nrxq / 2;
	devinfo->bus_pub.devinfo = devinfo;
	devinfo->bus_pub.ntxq = ntxq;
H
Hante Meuleman 已提交
1049
	devinfo->bus_pub.state = BRCMFMAC_USB_STATE_DOWN;
1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060

	/* flow control when too many tx urbs posted */
	devinfo->tx_low_watermark = ntxq / 4;
	devinfo->tx_high_watermark = devinfo->tx_low_watermark * 3;
	devinfo->bus_pub.bus_mtu = BRCMF_USB_MAX_PKT_SIZE;

	/* Initialize other structure content */
	init_waitqueue_head(&devinfo->ioctl_resp_wait);

	/* Initialize the spinlocks */
	spin_lock_init(&devinfo->qlock);
1061
	spin_lock_init(&devinfo->tx_flowblock_lock);
1062 1063 1064 1065 1066 1067 1068

	INIT_LIST_HEAD(&devinfo->rx_freeq);
	INIT_LIST_HEAD(&devinfo->rx_postq);

	INIT_LIST_HEAD(&devinfo->tx_freeq);
	INIT_LIST_HEAD(&devinfo->tx_postq);

1069 1070
	devinfo->tx_flowblock = false;

1071 1072 1073 1074 1075 1076 1077
	devinfo->rx_reqs = brcmf_usbdev_qinit(&devinfo->rx_freeq, nrxq);
	if (!devinfo->rx_reqs)
		goto error;

	devinfo->tx_reqs = brcmf_usbdev_qinit(&devinfo->tx_freeq, ntxq);
	if (!devinfo->tx_reqs)
		goto error;
1078
	devinfo->tx_freecount = ntxq;
1079 1080 1081

	devinfo->ctl_urb = usb_alloc_urb(0, GFP_ATOMIC);
	if (!devinfo->ctl_urb) {
1082
		brcmf_err("usb_alloc_urb (ctl) failed\n");
1083 1084 1085 1086
		goto error;
	}
	devinfo->bulk_urb = usb_alloc_urb(0, GFP_ATOMIC);
	if (!devinfo->bulk_urb) {
1087
		brcmf_err("usb_alloc_urb (bulk) failed\n");
1088 1089 1090 1091 1092 1093
		goto error;
	}

	return &devinfo->bus_pub;

error:
1094
	brcmf_err("failed!\n");
1095
	brcmf_usb_detach(devinfo);
1096 1097 1098
	return NULL;
}

A
Arend van Spriel 已提交
1099 1100 1101 1102 1103 1104 1105
static struct brcmf_bus_ops brcmf_usb_bus_ops = {
	.txdata = brcmf_usb_tx,
	.stop = brcmf_usb_down,
	.txctl = brcmf_usb_tx_ctlpkt,
	.rxctl = brcmf_usb_rx_ctlpkt,
};

1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130
static int brcmf_usb_bus_setup(struct brcmf_usbdev_info *devinfo)
{
	int ret;

	/* Attach to the common driver interface */
	ret = brcmf_attach(devinfo->dev);
	if (ret) {
		brcmf_err("brcmf_attach failed\n");
		return ret;
	}

	ret = brcmf_usb_up(devinfo->dev);
	if (ret)
		goto fail;

	ret = brcmf_bus_start(devinfo->dev);
	if (ret)
		goto fail;

	return 0;
fail:
	brcmf_detach(devinfo->dev);
	return ret;
}

1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165
static void brcmf_usb_probe_phase2(struct device *dev,
				   const struct firmware *fw,
				   void *nvram, u32 nvlen)
{
	struct brcmf_bus *bus = dev_get_drvdata(dev);
	struct brcmf_usbdev_info *devinfo;
	int ret;

	brcmf_dbg(USB, "Start fw downloading\n");
	ret = check_file(fw->data);
	if (ret < 0) {
		brcmf_err("invalid firmware\n");
		release_firmware(fw);
		goto error;
	}

	devinfo = bus->bus_priv.usb->devinfo;
	devinfo->image = fw->data;
	devinfo->image_len = fw->size;

	ret = brcmf_usb_fw_download(devinfo);
	release_firmware(fw);
	if (ret)
		goto error;

	ret = brcmf_usb_bus_setup(devinfo);
	if (ret)
		goto error;

	return;
error:
	brcmf_dbg(TRACE, "failed: dev=%s, err=%d\n", dev_name(dev), ret);
	device_release_driver(dev);
}

H
Hante Meuleman 已提交
1166
static int brcmf_usb_probe_cb(struct brcmf_usbdev_info *devinfo)
1167 1168 1169
{
	struct brcmf_bus *bus = NULL;
	struct brcmf_usbdev *bus_pub = NULL;
1170
	struct device *dev = devinfo->dev;
1171
	int ret;
1172

1173
	brcmf_dbg(USB, "Enter\n");
1174
	bus_pub = brcmf_usb_attach(devinfo, BRCMF_USB_NRXQ, BRCMF_USB_NTXQ);
1175 1176
	if (!bus_pub)
		return -ENODEV;
1177 1178 1179 1180 1181 1182 1183

	bus = kzalloc(sizeof(struct brcmf_bus), GFP_ATOMIC);
	if (!bus) {
		ret = -ENOMEM;
		goto fail;
	}

A
Arend van Spriel 已提交
1184
	bus->dev = dev;
1185 1186 1187
	bus_pub->bus = bus;
	bus->bus_priv.usb = bus_pub;
	dev_set_drvdata(dev, bus);
A
Arend van Spriel 已提交
1188
	bus->ops = &brcmf_usb_bus_ops;
1189
	bus->proto_type = BRCMF_PROTO_BCDC;
1190
	bus->always_use_fws_queue = true;
1191

1192 1193 1194 1195
	if (!brcmf_usb_dlneeded(devinfo)) {
		ret = brcmf_usb_bus_setup(devinfo);
		if (ret)
			goto fail;
1196
	}
1197 1198 1199
	bus->chip = bus_pub->devid;
	bus->chiprev = bus_pub->chiprev;

1200 1201 1202
	/* request firmware here */
	brcmf_fw_get_firmwares(dev, 0, brcmf_usb_get_fwname(devinfo), NULL,
			       brcmf_usb_probe_phase2);
1203
	return 0;
1204

1205 1206 1207
fail:
	/* Release resources in reverse order */
	kfree(bus);
1208
	brcmf_usb_detach(devinfo);
1209 1210 1211 1212
	return ret;
}

static void
1213
brcmf_usb_disconnect_cb(struct brcmf_usbdev_info *devinfo)
1214
{
1215
	if (!devinfo)
1216
		return;
1217
	brcmf_dbg(USB, "Enter, bus_pub %p\n", devinfo);
1218

1219 1220 1221
	brcmf_detach(devinfo->dev);
	kfree(devinfo->bus_pub.bus);
	brcmf_usb_detach(devinfo);
1222 1223 1224 1225 1226 1227
}

static int
brcmf_usb_probe(struct usb_interface *intf, const struct usb_device_id *id)
{
	struct usb_device *usb = interface_to_usbdev(intf);
1228
	struct brcmf_usbdev_info *devinfo;
1229 1230 1231 1232 1233
	struct usb_interface_descriptor	*desc;
	struct usb_endpoint_descriptor *endpoint;
	int ret = 0;
	u32 num_of_eps;
	u8 endpoint_num, ep;
1234

1235
	brcmf_dbg(USB, "Enter 0x%04x:0x%04x\n", id->idVendor, id->idProduct);
1236

1237 1238 1239
	devinfo = kzalloc(sizeof(*devinfo), GFP_ATOMIC);
	if (devinfo == NULL)
		return -ENOMEM;
1240

1241 1242 1243
	devinfo->usbdev = usb;
	devinfo->dev = &usb->dev;
	usb_set_intfdata(intf, devinfo);
1244 1245 1246

	/* Check that the device supports only one configuration */
	if (usb->descriptor.bNumConfigurations != 1) {
1247 1248 1249
		brcmf_err("Number of configurations: %d not supported\n",
			  usb->descriptor.bNumConfigurations);
		ret = -ENODEV;
1250 1251 1252
		goto fail;
	}

1253 1254 1255 1256 1257 1258
	if ((usb->descriptor.bDeviceClass != USB_CLASS_VENDOR_SPEC) &&
	    (usb->descriptor.bDeviceClass != USB_CLASS_MISC) &&
	    (usb->descriptor.bDeviceClass != USB_CLASS_WIRELESS_CONTROLLER)) {
		brcmf_err("Device class: 0x%x not supported\n",
			  usb->descriptor.bDeviceClass);
		ret = -ENODEV;
1259 1260 1261
		goto fail;
	}

1262 1263 1264 1265 1266 1267 1268 1269
	desc = &intf->altsetting[0].desc;
	if ((desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) ||
	    (desc->bInterfaceSubClass != 2) ||
	    (desc->bInterfaceProtocol != 0xff)) {
		brcmf_err("non WLAN interface %d: 0x%x:0x%x:0x%x\n",
			  desc->bInterfaceNumber, desc->bInterfaceClass,
			  desc->bInterfaceSubClass, desc->bInterfaceProtocol);
		ret = -ENODEV;
1270 1271 1272
		goto fail;
	}

1273 1274 1275 1276 1277 1278 1279 1280
	num_of_eps = desc->bNumEndpoints;
	for (ep = 0; ep < num_of_eps; ep++) {
		endpoint = &intf->altsetting[0].endpoint[ep].desc;
		endpoint_num = usb_endpoint_num(endpoint);
		if (!usb_endpoint_xfer_bulk(endpoint))
			continue;
		if (usb_endpoint_dir_in(endpoint)) {
			if (!devinfo->rx_pipe)
1281
				devinfo->rx_pipe =
1282 1283
					usb_rcvbulkpipe(usb, endpoint_num);
		} else {
1284 1285 1286
			if (!devinfo->tx_pipe)
				devinfo->tx_pipe =
					usb_sndbulkpipe(usb, endpoint_num);
1287 1288
		}
	}
1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300
	if (devinfo->rx_pipe == 0) {
		brcmf_err("No RX (in) Bulk EP found\n");
		ret = -ENODEV;
		goto fail;
	}
	if (devinfo->tx_pipe == 0) {
		brcmf_err("No TX (out) Bulk EP found\n");
		ret = -ENODEV;
		goto fail;
	}

	devinfo->ifnum = desc->bInterfaceNumber;
1301

1302
	if (usb->speed == USB_SPEED_SUPER)
1303
		brcmf_dbg(USB, "Broadcom super speed USB WLAN interface detected\n");
1304
	else if (usb->speed == USB_SPEED_HIGH)
1305
		brcmf_dbg(USB, "Broadcom high speed USB WLAN interface detected\n");
1306
	else
1307
		brcmf_dbg(USB, "Broadcom full speed USB WLAN interface detected\n");
1308

H
Hante Meuleman 已提交
1309
	ret = brcmf_usb_probe_cb(devinfo);
1310 1311 1312 1313 1314 1315 1316
	if (ret)
		goto fail;

	/* Success */
	return 0;

fail:
1317
	kfree(devinfo);
1318 1319 1320 1321 1322 1323 1324
	usb_set_intfdata(intf, NULL);
	return ret;
}

static void
brcmf_usb_disconnect(struct usb_interface *intf)
{
1325
	struct brcmf_usbdev_info *devinfo;
1326

1327
	brcmf_dbg(USB, "Enter\n");
1328 1329 1330
	devinfo = (struct brcmf_usbdev_info *)usb_get_intfdata(intf);
	brcmf_usb_disconnect_cb(devinfo);
	kfree(devinfo);
1331
	brcmf_dbg(USB, "Exit\n");
1332 1333 1334
}

/*
H
Hante Meuleman 已提交
1335
 * only need to signal the bus being down and update the state.
1336 1337 1338 1339 1340 1341
 */
static int brcmf_usb_suspend(struct usb_interface *intf, pm_message_t state)
{
	struct usb_device *usb = interface_to_usbdev(intf);
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(&usb->dev);

1342
	brcmf_dbg(USB, "Enter\n");
H
Hante Meuleman 已提交
1343 1344
	devinfo->bus_pub.state = BRCMFMAC_USB_STATE_SLEEP;
	brcmf_detach(&usb->dev);
1345 1346 1347 1348
	return 0;
}

/*
H
Hante Meuleman 已提交
1349
 * (re-) start the bus.
1350 1351 1352 1353 1354 1355
 */
static int brcmf_usb_resume(struct usb_interface *intf)
{
	struct usb_device *usb = interface_to_usbdev(intf);
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(&usb->dev);

1356
	brcmf_dbg(USB, "Enter\n");
1357
	return brcmf_usb_bus_setup(devinfo);
1358 1359
}

H
Hante Meuleman 已提交
1360 1361 1362 1363
static int brcmf_usb_reset_resume(struct usb_interface *intf)
{
	struct usb_device *usb = interface_to_usbdev(intf);
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(&usb->dev);
1364

H
Hante Meuleman 已提交
1365 1366
	brcmf_dbg(USB, "Enter\n");

1367 1368 1369
	return brcmf_fw_get_firmwares(&usb->dev, 0,
				      brcmf_usb_get_fwname(devinfo), NULL,
				      brcmf_usb_probe_phase2);
H
Hante Meuleman 已提交
1370 1371
}

1372 1373
#define BRCMF_USB_DEVICE(dev_id)	\
	{ USB_DEVICE(BRCM_USB_VENDOR_ID_BROADCOM, dev_id) }
1374 1375

static struct usb_device_id brcmf_usb_devid_table[] = {
1376 1377 1378 1379
	BRCMF_USB_DEVICE(BRCM_USB_43143_DEVICE_ID),
	BRCMF_USB_DEVICE(BRCM_USB_43236_DEVICE_ID),
	BRCMF_USB_DEVICE(BRCM_USB_43242_DEVICE_ID),
	BRCMF_USB_DEVICE(BRCM_USB_43569_DEVICE_ID),
1380
	/* special entry for device with firmware loaded and running */
1381 1382
	BRCMF_USB_DEVICE(BRCM_USB_BCMFW_DEVICE_ID),
	{ /* end: all zeroes */ }
1383
};
1384

1385
MODULE_DEVICE_TABLE(usb, brcmf_usb_devid_table);
1386
MODULE_FIRMWARE(BRCMF_USB_43143_FW_NAME);
1387
MODULE_FIRMWARE(BRCMF_USB_43236_FW_NAME);
1388
MODULE_FIRMWARE(BRCMF_USB_43242_FW_NAME);
1389
MODULE_FIRMWARE(BRCMF_USB_43569_FW_NAME);
1390 1391 1392 1393 1394 1395 1396 1397

static struct usb_driver brcmf_usbdrvr = {
	.name = KBUILD_MODNAME,
	.probe = brcmf_usb_probe,
	.disconnect = brcmf_usb_disconnect,
	.id_table = brcmf_usb_devid_table,
	.suspend = brcmf_usb_suspend,
	.resume = brcmf_usb_resume,
H
Hante Meuleman 已提交
1398
	.reset_resume = brcmf_usb_reset_resume,
1399
	.supports_autosuspend = 1,
1400
	.disable_hub_initiated_lpm = 1,
1401 1402
};

1403 1404 1405 1406 1407 1408 1409 1410
static int brcmf_usb_reset_device(struct device *dev, void *notused)
{
	/* device past is the usb interface so we
	 * need to use parent here.
	 */
	brcmf_dev_reset(dev->parent);
	return 0;
}
1411

1412 1413
void brcmf_usb_exit(void)
{
1414 1415 1416
	struct device_driver *drv = &brcmf_usbdrvr.drvwrap.driver;
	int ret;

1417
	brcmf_dbg(USB, "Enter\n");
1418 1419
	ret = driver_for_each_device(drv, NULL, NULL,
				     brcmf_usb_reset_device);
1420 1421 1422
	usb_deregister(&brcmf_usbdrvr);
}

1423
void brcmf_usb_register(void)
1424
{
1425
	brcmf_dbg(USB, "Enter\n");
1426
	usb_register(&brcmf_usbdrvr);
1427
}