hif_usb.c 23.0 KB
Newer Older
S
Sujith 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19
/*
 * Copyright (c) 2010 Atheros Communications Inc.
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include "htc.h"

static struct usb_device_id ath9k_hif_usb_ids[] = {
20 21 22 23 24 25 26 27 28 29 30
	{ USB_DEVICE(0x0cf3, 0x9271) }, /* Atheros */
	{ USB_DEVICE(0x0cf3, 0x1006) }, /* Atheros */
	{ USB_DEVICE(0x0cf3, 0x7010) }, /* Atheros */
	{ USB_DEVICE(0x0cf3, 0x7015) }, /* Atheros */
	{ USB_DEVICE(0x0846, 0x9030) }, /* Netgear N150 */
	{ USB_DEVICE(0x0846, 0x9018) }, /* Netgear WNDA3200 */
	{ USB_DEVICE(0x07D1, 0x3A10) }, /* Dlink Wireless 150 */
	{ USB_DEVICE(0x13D3, 0x3327) }, /* Azurewave */
	{ USB_DEVICE(0x13D3, 0x3328) }, /* Azurewave */
	{ USB_DEVICE(0x04CA, 0x4605) }, /* Liteon */
	{ USB_DEVICE(0x083A, 0xA704) }, /* SMC Networks */
S
Sujith 已提交
31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48
	{ },
};

MODULE_DEVICE_TABLE(usb, ath9k_hif_usb_ids);

static int __hif_usb_tx(struct hif_device_usb *hif_dev);

static void hif_usb_regout_cb(struct urb *urb)
{
	struct cmd_buf *cmd = (struct cmd_buf *)urb->context;

	switch (urb->status) {
	case 0:
		break;
	case -ENOENT:
	case -ECONNRESET:
	case -ENODEV:
	case -ESHUTDOWN:
S
Sujith 已提交
49
		goto free;
S
Sujith 已提交
50 51 52 53 54 55 56 57 58
	default:
		break;
	}

	if (cmd) {
		ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
					  cmd->skb, 1);
		kfree(cmd);
	}
S
Sujith 已提交
59 60 61

	return;
free:
62
	kfree_skb(cmd->skb);
S
Sujith 已提交
63
	kfree(cmd);
S
Sujith 已提交
64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90
}

static int hif_usb_send_regout(struct hif_device_usb *hif_dev,
			       struct sk_buff *skb)
{
	struct urb *urb;
	struct cmd_buf *cmd;
	int ret = 0;

	urb = usb_alloc_urb(0, GFP_KERNEL);
	if (urb == NULL)
		return -ENOMEM;

	cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
	if (cmd == NULL) {
		usb_free_urb(urb);
		return -ENOMEM;
	}

	cmd->skb = skb;
	cmd->hif_dev = hif_dev;

	usb_fill_int_urb(urb, hif_dev->udev,
			 usb_sndintpipe(hif_dev->udev, USB_REG_OUT_PIPE),
			 skb->data, skb->len,
			 hif_usb_regout_cb, cmd, 1);

S
Sujith 已提交
91
	usb_anchor_urb(urb, &hif_dev->regout_submitted);
S
Sujith 已提交
92 93
	ret = usb_submit_urb(urb, GFP_KERNEL);
	if (ret) {
S
Sujith 已提交
94
		usb_unanchor_urb(urb);
S
Sujith 已提交
95 96
		kfree(cmd);
	}
S
Sujith 已提交
97
	usb_free_urb(urb);
S
Sujith 已提交
98 99 100 101

	return ret;
}

S
Sujith 已提交
102 103 104 105 106 107 108 109 110 111 112
static inline void ath9k_skb_queue_purge(struct hif_device_usb *hif_dev,
					 struct sk_buff_head *list)
{
	struct sk_buff *skb;

	while ((skb = __skb_dequeue(list)) != NULL) {
		dev_kfree_skb_any(skb);
		TX_STAT_INC(skb_dropped);
	}
}

S
Sujith 已提交
113 114 115
static void hif_usb_tx_cb(struct urb *urb)
{
	struct tx_buf *tx_buf = (struct tx_buf *) urb->context;
116
	struct hif_device_usb *hif_dev;
S
Sujith 已提交
117 118
	struct sk_buff *skb;

119
	if (!tx_buf || !tx_buf->hif_dev)
S
Sujith 已提交
120 121
		return;

122 123
	hif_dev = tx_buf->hif_dev;

S
Sujith 已提交
124 125 126 127 128 129 130
	switch (urb->status) {
	case 0:
		break;
	case -ENOENT:
	case -ECONNRESET:
	case -ENODEV:
	case -ESHUTDOWN:
S
Sujith 已提交
131 132 133 134 135
		/*
		 * The URB has been killed, free the SKBs
		 * and return.
		 */
		ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue);
S
Sujith 已提交
136 137 138 139 140
		return;
	default:
		break;
	}

S
Sujith 已提交
141 142 143
	/* Check if TX has been stopped */
	spin_lock(&hif_dev->tx.tx_lock);
	if (hif_dev->tx.flags & HIF_USB_TX_STOP) {
S
Sujith 已提交
144
		spin_unlock(&hif_dev->tx.tx_lock);
S
Sujith 已提交
145 146
		ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue);
		goto add_free;
S
Sujith 已提交
147
	}
S
Sujith 已提交
148
	spin_unlock(&hif_dev->tx.tx_lock);
S
Sujith 已提交
149

S
Sujith 已提交
150 151 152 153 154
	/* Complete the queued SKBs. */
	while ((skb = __skb_dequeue(&tx_buf->skb_queue)) != NULL) {
		ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
					  skb, 1);
		TX_STAT_INC(skb_completed);
155
	}
S
Sujith 已提交
156 157 158 159 160 161 162 163 164 165 166 167 168 169

add_free:
	/* Re-initialize the SKB queue */
	tx_buf->len = tx_buf->offset = 0;
	__skb_queue_head_init(&tx_buf->skb_queue);

	/* Add this TX buffer to the free list */
	spin_lock(&hif_dev->tx.tx_lock);
	list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
	hif_dev->tx.tx_buf_cnt++;
	if (!(hif_dev->tx.flags & HIF_USB_TX_STOP))
		__hif_usb_tx(hif_dev); /* Check for pending SKBs */
	TX_STAT_INC(buf_completed);
	spin_unlock(&hif_dev->tx.tx_lock);
170 171
}

S
Sujith 已提交
172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188
/* TX lock has to be taken */
static int __hif_usb_tx(struct hif_device_usb *hif_dev)
{
	struct tx_buf *tx_buf = NULL;
	struct sk_buff *nskb = NULL;
	int ret = 0, i;
	u16 *hdr, tx_skb_cnt = 0;
	u8 *buf;

	if (hif_dev->tx.tx_skb_cnt == 0)
		return 0;

	/* Check if a free TX buffer is available */
	if (list_empty(&hif_dev->tx.tx_buf))
		return 0;

	tx_buf = list_first_entry(&hif_dev->tx.tx_buf, struct tx_buf, list);
S
Sujith 已提交
189
	list_move_tail(&tx_buf->list, &hif_dev->tx.tx_pending);
S
Sujith 已提交
190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228
	hif_dev->tx.tx_buf_cnt--;

	tx_skb_cnt = min_t(u16, hif_dev->tx.tx_skb_cnt, MAX_TX_AGGR_NUM);

	for (i = 0; i < tx_skb_cnt; i++) {
		nskb = __skb_dequeue(&hif_dev->tx.tx_skb_queue);

		/* Should never be NULL */
		BUG_ON(!nskb);

		hif_dev->tx.tx_skb_cnt--;

		buf = tx_buf->buf;
		buf += tx_buf->offset;
		hdr = (u16 *)buf;
		*hdr++ = nskb->len;
		*hdr++ = ATH_USB_TX_STREAM_MODE_TAG;
		buf += 4;
		memcpy(buf, nskb->data, nskb->len);
		tx_buf->len = nskb->len + 4;

		if (i < (tx_skb_cnt - 1))
			tx_buf->offset += (((tx_buf->len - 1) / 4) + 1) * 4;

		if (i == (tx_skb_cnt - 1))
			tx_buf->len += tx_buf->offset;

		__skb_queue_tail(&tx_buf->skb_queue, nskb);
		TX_STAT_INC(skb_queued);
	}

	usb_fill_bulk_urb(tx_buf->urb, hif_dev->udev,
			  usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
			  tx_buf->buf, tx_buf->len,
			  hif_usb_tx_cb, tx_buf);

	ret = usb_submit_urb(tx_buf->urb, GFP_ATOMIC);
	if (ret) {
		tx_buf->len = tx_buf->offset = 0;
229
		ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue);
S
Sujith 已提交
230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295
		__skb_queue_head_init(&tx_buf->skb_queue);
		list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
		hif_dev->tx.tx_buf_cnt++;
	}

	if (!ret)
		TX_STAT_INC(buf_queued);

	return ret;
}

static int hif_usb_send_tx(struct hif_device_usb *hif_dev, struct sk_buff *skb,
			   struct ath9k_htc_tx_ctl *tx_ctl)
{
	unsigned long flags;

	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);

	if (hif_dev->tx.flags & HIF_USB_TX_STOP) {
		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
		return -ENODEV;
	}

	/* Check if the max queue count has been reached */
	if (hif_dev->tx.tx_skb_cnt > MAX_TX_BUF_NUM) {
		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
		return -ENOMEM;
	}

	__skb_queue_tail(&hif_dev->tx.tx_skb_queue, skb);
	hif_dev->tx.tx_skb_cnt++;

	/* Send normal frames immediately */
	if (!tx_ctl || (tx_ctl && (tx_ctl->type == ATH9K_HTC_NORMAL)))
		__hif_usb_tx(hif_dev);

	/* Check if AMPDUs have to be sent immediately */
	if (tx_ctl && (tx_ctl->type == ATH9K_HTC_AMPDU) &&
	    (hif_dev->tx.tx_buf_cnt == MAX_TX_URB_NUM) &&
	    (hif_dev->tx.tx_skb_cnt < 2)) {
		__hif_usb_tx(hif_dev);
	}

	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);

	return 0;
}

static void hif_usb_start(void *hif_handle, u8 pipe_id)
{
	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
	unsigned long flags;

	hif_dev->flags |= HIF_USB_START;

	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
	hif_dev->tx.flags &= ~HIF_USB_TX_STOP;
	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
}

static void hif_usb_stop(void *hif_handle, u8 pipe_id)
{
	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
	unsigned long flags;

	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
296
	ath9k_skb_queue_purge(hif_dev, &hif_dev->tx.tx_skb_queue);
S
Sujith 已提交
297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315
	hif_dev->tx.tx_skb_cnt = 0;
	hif_dev->tx.flags |= HIF_USB_TX_STOP;
	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
}

static int hif_usb_send(void *hif_handle, u8 pipe_id, struct sk_buff *skb,
			struct ath9k_htc_tx_ctl *tx_ctl)
{
	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
	int ret = 0;

	switch (pipe_id) {
	case USB_WLAN_TX_PIPE:
		ret = hif_usb_send_tx(hif_dev, skb, tx_ctl);
		break;
	case USB_REG_OUT_PIPE:
		ret = hif_usb_send_regout(hif_dev, skb);
		break;
	default:
S
Sujith 已提交
316 317
		dev_err(&hif_dev->udev->dev,
			"ath9k_htc: Invalid TX pipe: %d\n", pipe_id);
S
Sujith 已提交
318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339
		ret = -EINVAL;
		break;
	}

	return ret;
}

static struct ath9k_htc_hif hif_usb = {
	.transport = ATH9K_HIF_USB,
	.name = "ath9k_hif_usb",

	.control_ul_pipe = USB_REG_OUT_PIPE,
	.control_dl_pipe = USB_REG_IN_PIPE,

	.start = hif_usb_start,
	.stop = hif_usb_stop,
	.send = hif_usb_send,
};

static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev,
				    struct sk_buff *skb)
{
S
Sujith 已提交
340
	struct sk_buff *nskb, *skb_pool[MAX_PKT_NUM_IN_TRANSFER];
S
Sujith 已提交
341 342 343 344 345
	int index = 0, i = 0, chk_idx, len = skb->len;
	int rx_remain_len = 0, rx_pkt_len = 0;
	u16 pkt_len, pkt_tag, pool_index = 0;
	u8 *ptr;

S
Sujith 已提交
346 347
	spin_lock(&hif_dev->rx_lock);

S
Sujith 已提交
348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373
	rx_remain_len = hif_dev->rx_remain_len;
	rx_pkt_len = hif_dev->rx_transfer_len;

	if (rx_remain_len != 0) {
		struct sk_buff *remain_skb = hif_dev->remain_skb;

		if (remain_skb) {
			ptr = (u8 *) remain_skb->data;

			index = rx_remain_len;
			rx_remain_len -= hif_dev->rx_pad_len;
			ptr += rx_pkt_len;

			memcpy(ptr, skb->data, rx_remain_len);

			rx_pkt_len += rx_remain_len;
			hif_dev->rx_remain_len = 0;
			skb_put(remain_skb, rx_pkt_len);

			skb_pool[pool_index++] = remain_skb;

		} else {
			index = rx_remain_len;
		}
	}

S
Sujith 已提交
374 375
	spin_unlock(&hif_dev->rx_lock);

S
Sujith 已提交
376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392
	while (index < len) {
		ptr = (u8 *) skb->data;

		pkt_len = ptr[index] + (ptr[index+1] << 8);
		pkt_tag = ptr[index+2] + (ptr[index+3] << 8);

		if (pkt_tag == ATH_USB_RX_STREAM_MODE_TAG) {
			u16 pad_len;

			pad_len = 4 - (pkt_len & 0x3);
			if (pad_len == 4)
				pad_len = 0;

			chk_idx = index;
			index = index + 4 + pkt_len + pad_len;

			if (index > MAX_RX_BUF_SIZE) {
S
Sujith 已提交
393
				spin_lock(&hif_dev->rx_lock);
S
Sujith 已提交
394 395 396 397 398 399 400 401 402 403 404
				hif_dev->rx_remain_len = index - MAX_RX_BUF_SIZE;
				hif_dev->rx_transfer_len =
					MAX_RX_BUF_SIZE - chk_idx - 4;
				hif_dev->rx_pad_len = pad_len;

				nskb = __dev_alloc_skb(pkt_len + 32,
						       GFP_ATOMIC);
				if (!nskb) {
					dev_err(&hif_dev->udev->dev,
					"ath9k_htc: RX memory allocation"
					" error\n");
S
Sujith 已提交
405
					spin_unlock(&hif_dev->rx_lock);
S
Sujith 已提交
406 407 408 409 410 411 412 413 414 415
					goto err;
				}
				skb_reserve(nskb, 32);
				RX_STAT_INC(skb_allocated);

				memcpy(nskb->data, &(skb->data[chk_idx+4]),
				       hif_dev->rx_transfer_len);

				/* Record the buffer pointer */
				hif_dev->remain_skb = nskb;
S
Sujith 已提交
416
				spin_unlock(&hif_dev->rx_lock);
S
Sujith 已提交
417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452
			} else {
				nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
				if (!nskb) {
					dev_err(&hif_dev->udev->dev,
					"ath9k_htc: RX memory allocation"
					" error\n");
					goto err;
				}
				skb_reserve(nskb, 32);
				RX_STAT_INC(skb_allocated);

				memcpy(nskb->data, &(skb->data[chk_idx+4]), pkt_len);
				skb_put(nskb, pkt_len);
				skb_pool[pool_index++] = nskb;
			}
		} else {
			RX_STAT_INC(skb_dropped);
			return;
		}
	}

err:
	for (i = 0; i < pool_index; i++) {
		ath9k_htc_rx_msg(hif_dev->htc_handle, skb_pool[i],
				 skb_pool[i]->len, USB_WLAN_RX_PIPE);
		RX_STAT_INC(skb_completed);
	}
}

static void ath9k_hif_usb_rx_cb(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct hif_device_usb *hif_dev = (struct hif_device_usb *)
		usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
	int ret;

S
Sujith 已提交
453 454 455
	if (!skb)
		return;

S
Sujith 已提交
456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479
	if (!hif_dev)
		goto free;

	switch (urb->status) {
	case 0:
		break;
	case -ENOENT:
	case -ECONNRESET:
	case -ENODEV:
	case -ESHUTDOWN:
		goto free;
	default:
		goto resubmit;
	}

	if (likely(urb->actual_length != 0)) {
		skb_put(skb, urb->actual_length);
		ath9k_hif_usb_rx_stream(hif_dev, skb);
	}

resubmit:
	skb_reset_tail_pointer(skb);
	skb_trim(skb, 0);

S
Sujith 已提交
480
	usb_anchor_urb(urb, &hif_dev->rx_submitted);
S
Sujith 已提交
481
	ret = usb_submit_urb(urb, GFP_ATOMIC);
S
Sujith 已提交
482 483
	if (ret) {
		usb_unanchor_urb(urb);
S
Sujith 已提交
484
		goto free;
S
Sujith 已提交
485
	}
S
Sujith 已提交
486 487 488

	return;
free:
489
	kfree_skb(skb);
S
Sujith 已提交
490 491 492 493 494 495 496 497 498 499
}

static void ath9k_hif_usb_reg_in_cb(struct urb *urb)
{
	struct sk_buff *skb = (struct sk_buff *) urb->context;
	struct sk_buff *nskb;
	struct hif_device_usb *hif_dev = (struct hif_device_usb *)
		usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
	int ret;

S
Sujith 已提交
500 501 502
	if (!skb)
		return;

S
Sujith 已提交
503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520
	if (!hif_dev)
		goto free;

	switch (urb->status) {
	case 0:
		break;
	case -ENOENT:
	case -ECONNRESET:
	case -ENODEV:
	case -ESHUTDOWN:
		goto free;
	default:
		goto resubmit;
	}

	if (likely(urb->actual_length != 0)) {
		skb_put(skb, urb->actual_length);

521 522 523 524 525
		/* Process the command first */
		ath9k_htc_rx_msg(hif_dev->htc_handle, skb,
				 skb->len, USB_REG_IN_PIPE);


526
		nskb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_ATOMIC);
527 528 529 530 531 532
		if (!nskb) {
			dev_err(&hif_dev->udev->dev,
				"ath9k_htc: REG_IN memory allocation failure\n");
			urb->context = NULL;
			return;
		}
S
Sujith 已提交
533 534 535 536 537 538 539 540

		usb_fill_int_urb(urb, hif_dev->udev,
				 usb_rcvintpipe(hif_dev->udev, USB_REG_IN_PIPE),
				 nskb->data, MAX_REG_IN_BUF_SIZE,
				 ath9k_hif_usb_reg_in_cb, nskb, 1);

		ret = usb_submit_urb(urb, GFP_ATOMIC);
		if (ret) {
541
			kfree_skb(nskb);
542
			urb->context = NULL;
S
Sujith 已提交
543 544 545 546 547 548 549 550 551 552 553 554 555 556 557
		}

		return;
	}

resubmit:
	skb_reset_tail_pointer(skb);
	skb_trim(skb, 0);

	ret = usb_submit_urb(urb, GFP_ATOMIC);
	if (ret)
		goto free;

	return;
free:
558
	kfree_skb(skb);
S
Sujith 已提交
559
	urb->context = NULL;
S
Sujith 已提交
560 561 562 563 564 565
}

static void ath9k_hif_usb_dealloc_tx_urbs(struct hif_device_usb *hif_dev)
{
	struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;

S
Sujith 已提交
566 567 568
	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
				 &hif_dev->tx.tx_buf, list) {
		usb_kill_urb(tx_buf->urb);
S
Sujith 已提交
569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617
		list_del(&tx_buf->list);
		usb_free_urb(tx_buf->urb);
		kfree(tx_buf->buf);
		kfree(tx_buf);
	}

	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
				 &hif_dev->tx.tx_pending, list) {
		usb_kill_urb(tx_buf->urb);
		list_del(&tx_buf->list);
		usb_free_urb(tx_buf->urb);
		kfree(tx_buf->buf);
		kfree(tx_buf);
	}
}

static int ath9k_hif_usb_alloc_tx_urbs(struct hif_device_usb *hif_dev)
{
	struct tx_buf *tx_buf;
	int i;

	INIT_LIST_HEAD(&hif_dev->tx.tx_buf);
	INIT_LIST_HEAD(&hif_dev->tx.tx_pending);
	spin_lock_init(&hif_dev->tx.tx_lock);
	__skb_queue_head_init(&hif_dev->tx.tx_skb_queue);

	for (i = 0; i < MAX_TX_URB_NUM; i++) {
		tx_buf = kzalloc(sizeof(struct tx_buf), GFP_KERNEL);
		if (!tx_buf)
			goto err;

		tx_buf->buf = kzalloc(MAX_TX_BUF_SIZE, GFP_KERNEL);
		if (!tx_buf->buf)
			goto err;

		tx_buf->urb = usb_alloc_urb(0, GFP_KERNEL);
		if (!tx_buf->urb)
			goto err;

		tx_buf->hif_dev = hif_dev;
		__skb_queue_head_init(&tx_buf->skb_queue);

		list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
	}

	hif_dev->tx.tx_buf_cnt = MAX_TX_URB_NUM;

	return 0;
err:
618 619 620 621
	if (tx_buf) {
		kfree(tx_buf->buf);
		kfree(tx_buf);
	}
S
Sujith 已提交
622 623 624 625 626 627
	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
	return -ENOMEM;
}

static void ath9k_hif_usb_dealloc_rx_urbs(struct hif_device_usb *hif_dev)
{
S
Sujith 已提交
628
	usb_kill_anchored_urbs(&hif_dev->rx_submitted);
S
Sujith 已提交
629 630 631 632
}

static int ath9k_hif_usb_alloc_rx_urbs(struct hif_device_usb *hif_dev)
{
S
Sujith 已提交
633 634
	struct urb *urb = NULL;
	struct sk_buff *skb = NULL;
S
Sujith 已提交
635 636
	int i, ret;

S
Sujith 已提交
637
	init_usb_anchor(&hif_dev->rx_submitted);
S
Sujith 已提交
638
	spin_lock_init(&hif_dev->rx_lock);
S
Sujith 已提交
639

S
Sujith 已提交
640 641 642
	for (i = 0; i < MAX_RX_URB_NUM; i++) {

		/* Allocate URB */
S
Sujith 已提交
643 644
		urb = usb_alloc_urb(0, GFP_KERNEL);
		if (urb == NULL) {
S
Sujith 已提交
645
			ret = -ENOMEM;
S
Sujith 已提交
646
			goto err_urb;
S
Sujith 已提交
647 648 649
		}

		/* Allocate buffer */
650
		skb = alloc_skb(MAX_RX_BUF_SIZE, GFP_KERNEL);
S
Sujith 已提交
651 652 653 654
		if (!skb) {
			ret = -ENOMEM;
			goto err_skb;
		}
S
Sujith 已提交
655

S
Sujith 已提交
656 657 658 659 660 661 662 663
		usb_fill_bulk_urb(urb, hif_dev->udev,
				  usb_rcvbulkpipe(hif_dev->udev,
						  USB_WLAN_RX_PIPE),
				  skb->data, MAX_RX_BUF_SIZE,
				  ath9k_hif_usb_rx_cb, skb);

		/* Anchor URB */
		usb_anchor_urb(urb, &hif_dev->rx_submitted);
S
Sujith 已提交
664

S
Sujith 已提交
665 666 667 668 669 670
		/* Submit URB */
		ret = usb_submit_urb(urb, GFP_KERNEL);
		if (ret) {
			usb_unanchor_urb(urb);
			goto err_submit;
		}
S
Sujith 已提交
671 672 673 674 675 676

		/*
		 * Drop reference count.
		 * This ensures that the URB is freed when killing them.
		 */
		usb_free_urb(urb);
S
Sujith 已提交
677 678 679 680
	}

	return 0;

S
Sujith 已提交
681
err_submit:
682
	kfree_skb(skb);
S
Sujith 已提交
683 684 685
err_skb:
	usb_free_urb(urb);
err_urb:
S
Sujith 已提交
686 687 688 689 690 691 692 693
	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
	return ret;
}

static void ath9k_hif_usb_dealloc_reg_in_urb(struct hif_device_usb *hif_dev)
{
	if (hif_dev->reg_in_urb) {
		usb_kill_urb(hif_dev->reg_in_urb);
S
Sujith 已提交
694
		if (hif_dev->reg_in_urb->context)
695
			kfree_skb((void *)hif_dev->reg_in_urb->context);
S
Sujith 已提交
696 697 698 699 700 701 702 703 704 705 706 707 708
		usb_free_urb(hif_dev->reg_in_urb);
		hif_dev->reg_in_urb = NULL;
	}
}

static int ath9k_hif_usb_alloc_reg_in_urb(struct hif_device_usb *hif_dev)
{
	struct sk_buff *skb;

	hif_dev->reg_in_urb = usb_alloc_urb(0, GFP_KERNEL);
	if (hif_dev->reg_in_urb == NULL)
		return -ENOMEM;

709
	skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_KERNEL);
S
Sujith 已提交
710 711 712 713 714 715 716 717 718
	if (!skb)
		goto err;

	usb_fill_int_urb(hif_dev->reg_in_urb, hif_dev->udev,
			 usb_rcvintpipe(hif_dev->udev, USB_REG_IN_PIPE),
			 skb->data, MAX_REG_IN_BUF_SIZE,
			 ath9k_hif_usb_reg_in_cb, skb, 1);

	if (usb_submit_urb(hif_dev->reg_in_urb, GFP_KERNEL) != 0)
S
Sujith 已提交
719
		goto err;
S
Sujith 已提交
720 721 722 723 724 725 726 727 728 729

	return 0;

err:
	ath9k_hif_usb_dealloc_reg_in_urb(hif_dev);
	return -ENOMEM;
}

static int ath9k_hif_usb_alloc_urbs(struct hif_device_usb *hif_dev)
{
S
Sujith 已提交
730 731 732
	/* Register Write */
	init_usb_anchor(&hif_dev->regout_submitted);

S
Sujith 已提交
733 734 735 736 737 738 739 740
	/* TX */
	if (ath9k_hif_usb_alloc_tx_urbs(hif_dev) < 0)
		goto err;

	/* RX */
	if (ath9k_hif_usb_alloc_rx_urbs(hif_dev) < 0)
		goto err;

S
Sujith 已提交
741
	/* Register Read */
S
Sujith 已提交
742 743 744 745 746 747 748 749
	if (ath9k_hif_usb_alloc_reg_in_urb(hif_dev) < 0)
		goto err;

	return 0;
err:
	return -ENOMEM;
}

750 751 752 753 754 755 756 757
static void ath9k_hif_usb_dealloc_urbs(struct hif_device_usb *hif_dev)
{
	usb_kill_anchored_urbs(&hif_dev->regout_submitted);
	ath9k_hif_usb_dealloc_reg_in_urb(hif_dev);
	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
}

S
Sujith 已提交
758 759 760 761 762 763 764
static int ath9k_hif_usb_download_fw(struct hif_device_usb *hif_dev)
{
	int transfer, err;
	const void *data = hif_dev->firmware->data;
	size_t len = hif_dev->firmware->size;
	u32 addr = AR9271_FIRMWARE;
	u8 *buf = kzalloc(4096, GFP_KERNEL);
S
Sujith 已提交
765
	u32 firm_offset;
S
Sujith 已提交
766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788

	if (!buf)
		return -ENOMEM;

	while (len) {
		transfer = min_t(int, len, 4096);
		memcpy(buf, data, transfer);

		err = usb_control_msg(hif_dev->udev,
				      usb_sndctrlpipe(hif_dev->udev, 0),
				      FIRMWARE_DOWNLOAD, 0x40 | USB_DIR_OUT,
				      addr >> 8, 0, buf, transfer, HZ);
		if (err < 0) {
			kfree(buf);
			return err;
		}

		len -= transfer;
		data += transfer;
		addr += transfer;
	}
	kfree(buf);

S
Sujith 已提交
789 790 791 792 793
	if (hif_dev->device_id == 0x7010)
		firm_offset = AR7010_FIRMWARE_TEXT;
	else
		firm_offset = AR9271_FIRMWARE_TEXT;

S
Sujith 已提交
794 795 796 797 798 799
	/*
	 * Issue FW download complete command to firmware.
	 */
	err = usb_control_msg(hif_dev->udev, usb_sndctrlpipe(hif_dev->udev, 0),
			      FIRMWARE_DOWNLOAD_COMP,
			      0x40 | USB_DIR_OUT,
S
Sujith 已提交
800
			      firm_offset >> 8, 0, NULL, 0, HZ);
S
Sujith 已提交
801 802 803 804
	if (err)
		return -EIO;

	dev_info(&hif_dev->udev->dev, "ath9k_htc: Transferred FW: %s, size: %ld\n",
S
Sujith 已提交
805
		 hif_dev->fw_name, (unsigned long) hif_dev->firmware->size);
S
Sujith 已提交
806 807 808 809

	return 0;
}

S
Sujith 已提交
810
static int ath9k_hif_usb_dev_init(struct hif_device_usb *hif_dev)
S
Sujith 已提交
811 812 813 814
{
	int ret;

	/* Request firmware */
S
Sujith 已提交
815 816
	ret = request_firmware(&hif_dev->firmware, hif_dev->fw_name,
			       &hif_dev->udev->dev);
S
Sujith 已提交
817 818
	if (ret) {
		dev_err(&hif_dev->udev->dev,
S
Sujith 已提交
819
			"ath9k_htc: Firmware - %s not found\n", hif_dev->fw_name);
S
Sujith 已提交
820 821 822 823 824 825 826 827 828 829 830
		goto err_fw_req;
	}

	/* Alloc URBs */
	ret = ath9k_hif_usb_alloc_urbs(hif_dev);
	if (ret) {
		dev_err(&hif_dev->udev->dev,
			"ath9k_htc: Unable to allocate URBs\n");
		goto err_urb;
	}

831 832 833 834
	/* Download firmware */
	ret = ath9k_hif_usb_download_fw(hif_dev);
	if (ret) {
		dev_err(&hif_dev->udev->dev,
S
Sujith 已提交
835 836
			"ath9k_htc: Firmware - %s download failed\n",
			hif_dev->fw_name);
837 838 839
		goto err_fw_download;
	}

S
Sujith 已提交
840 841 842
	return 0;

err_fw_download:
843 844
	ath9k_hif_usb_dealloc_urbs(hif_dev);
err_urb:
S
Sujith 已提交
845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879
	release_firmware(hif_dev->firmware);
err_fw_req:
	hif_dev->firmware = NULL;
	return ret;
}

static void ath9k_hif_usb_dev_deinit(struct hif_device_usb *hif_dev)
{
	ath9k_hif_usb_dealloc_urbs(hif_dev);
	if (hif_dev->firmware)
		release_firmware(hif_dev->firmware);
}

static int ath9k_hif_usb_probe(struct usb_interface *interface,
			       const struct usb_device_id *id)
{
	struct usb_device *udev = interface_to_usbdev(interface);
	struct hif_device_usb *hif_dev;
	int ret = 0;

	hif_dev = kzalloc(sizeof(struct hif_device_usb), GFP_KERNEL);
	if (!hif_dev) {
		ret = -ENOMEM;
		goto err_alloc;
	}

	usb_get_dev(udev);
	hif_dev->udev = udev;
	hif_dev->interface = interface;
	hif_dev->device_id = id->idProduct;
#ifdef CONFIG_PM
	udev->reset_resume = 1;
#endif
	usb_set_intfdata(interface, hif_dev);

880 881 882 883 884 885 886
	hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev, &hif_usb,
						 &hif_dev->udev->dev);
	if (hif_dev->htc_handle == NULL) {
		ret = -ENOMEM;
		goto err_htc_hw_alloc;
	}

S
Sujith 已提交
887 888 889
	/* Find out which firmware to load */

	switch(hif_dev->device_id) {
S
Sujith 已提交
890
	case 0x7010:
891
	case 0x9018:
S
Sujith 已提交
892 893 894 895 896
		if (le16_to_cpu(udev->descriptor.bcdDevice) == 0x0202)
			hif_dev->fw_name = "ar7010_1_1.fw";
		else
			hif_dev->fw_name = "ar7010.fw";
		break;
S
Sujith 已提交
897
	default:
898
		hif_dev->fw_name = "ar9271.fw";
S
Sujith 已提交
899 900 901 902 903 904 905 906 907
		break;
	}

	if (!hif_dev->fw_name) {
		dev_err(&udev->dev, "Can't determine firmware !\n");
		goto err_htc_hw_alloc;
	}

	ret = ath9k_hif_usb_dev_init(hif_dev);
S
Sujith 已提交
908 909 910 911 912
	if (ret) {
		ret = -EINVAL;
		goto err_hif_init_usb;
	}

913 914
	ret = ath9k_htc_hw_init(hif_dev->htc_handle,
				&hif_dev->udev->dev, hif_dev->device_id);
S
Sujith 已提交
915 916 917 918 919 920 921 922 923 924 925 926
	if (ret) {
		ret = -EINVAL;
		goto err_htc_hw_init;
	}

	dev_info(&hif_dev->udev->dev, "ath9k_htc: USB layer initialized\n");

	return 0;

err_htc_hw_init:
	ath9k_hif_usb_dev_deinit(hif_dev);
err_hif_init_usb:
927 928
	ath9k_htc_hw_free(hif_dev->htc_handle);
err_htc_hw_alloc:
S
Sujith 已提交
929 930 931 932 933 934 935
	usb_set_intfdata(interface, NULL);
	kfree(hif_dev);
	usb_put_dev(udev);
err_alloc:
	return ret;
}

S
Sujith 已提交
936 937 938 939 940 941
static void ath9k_hif_usb_reboot(struct usb_device *udev)
{
	u32 reboot_cmd = 0xffffffff;
	void *buf;
	int ret;

942
	buf = kmemdup(&reboot_cmd, 4, GFP_KERNEL);
S
Sujith 已提交
943 944 945 946 947 948 949 950 951 952 953
	if (!buf)
		return;

	ret = usb_bulk_msg(udev, usb_sndbulkpipe(udev, USB_REG_OUT_PIPE),
			   buf, 4, NULL, HZ);
	if (ret)
		dev_err(&udev->dev, "ath9k_htc: USB reboot failed\n");

	kfree(buf);
}

S
Sujith 已提交
954 955 956 957 958 959 960
static void ath9k_hif_usb_disconnect(struct usb_interface *interface)
{
	struct usb_device *udev = interface_to_usbdev(interface);
	struct hif_device_usb *hif_dev =
		(struct hif_device_usb *) usb_get_intfdata(interface);

	if (hif_dev) {
S
Sujith 已提交
961 962
		ath9k_htc_hw_deinit(hif_dev->htc_handle,
		    (udev->state == USB_STATE_NOTATTACHED) ? true : false);
S
Sujith 已提交
963 964 965 966 967 968
		ath9k_htc_hw_free(hif_dev->htc_handle);
		ath9k_hif_usb_dev_deinit(hif_dev);
		usb_set_intfdata(interface, NULL);
	}

	if (hif_dev->flags & HIF_USB_START)
S
Sujith 已提交
969
		ath9k_hif_usb_reboot(udev);
S
Sujith 已提交
970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044

	kfree(hif_dev);
	dev_info(&udev->dev, "ath9k_htc: USB layer deinitialized\n");
	usb_put_dev(udev);
}

#ifdef CONFIG_PM
static int ath9k_hif_usb_suspend(struct usb_interface *interface,
				 pm_message_t message)
{
	struct hif_device_usb *hif_dev =
		(struct hif_device_usb *) usb_get_intfdata(interface);

	ath9k_hif_usb_dealloc_urbs(hif_dev);

	return 0;
}

static int ath9k_hif_usb_resume(struct usb_interface *interface)
{
	struct hif_device_usb *hif_dev =
		(struct hif_device_usb *) usb_get_intfdata(interface);
	int ret;

	ret = ath9k_hif_usb_alloc_urbs(hif_dev);
	if (ret)
		return ret;

	if (hif_dev->firmware) {
		ret = ath9k_hif_usb_download_fw(hif_dev);
		if (ret)
			goto fail_resume;
	} else {
		ath9k_hif_usb_dealloc_urbs(hif_dev);
		return -EIO;
	}

	mdelay(100);

	ret = ath9k_htc_resume(hif_dev->htc_handle);

	if (ret)
		goto fail_resume;

	return 0;

fail_resume:
	ath9k_hif_usb_dealloc_urbs(hif_dev);

	return ret;
}
#endif

static struct usb_driver ath9k_hif_usb_driver = {
	.name = "ath9k_hif_usb",
	.probe = ath9k_hif_usb_probe,
	.disconnect = ath9k_hif_usb_disconnect,
#ifdef CONFIG_PM
	.suspend = ath9k_hif_usb_suspend,
	.resume = ath9k_hif_usb_resume,
	.reset_resume = ath9k_hif_usb_resume,
#endif
	.id_table = ath9k_hif_usb_ids,
	.soft_unbind = 1,
};

int ath9k_hif_usb_init(void)
{
	return usb_register(&ath9k_hif_usb_driver);
}

void ath9k_hif_usb_exit(void)
{
	usb_deregister(&ath9k_hif_usb_driver);
}