usb.c 34.4 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
/*
 * Copyright (c) 2011 Broadcom Corporation
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#include <linux/kernel.h>
#include <linux/module.h>
#include <linux/firmware.h>
#include <linux/usb.h>
21
#include <linux/vmalloc.h>
22 23

#include <brcmu_utils.h>
24
#include <brcm_hw_ids.h>
25 26 27 28
#include <brcmu_wifi.h>
#include <dhd_bus.h>
#include <dhd_dbg.h>

29
#include "firmware.h"
30 31 32
#include "usb_rdl.h"
#include "usb.h"

33
#define IOCTL_RESP_TIMEOUT		2000
34

35 36
#define BRCMF_USB_RESET_GETVER_SPINWAIT	100	/* in unit of ms */
#define BRCMF_USB_RESET_GETVER_LOOP_CNT	10
37 38 39

#define BRCMF_POSTBOOT_ID		0xA123  /* ID to detect if dongle
						   has boot up */
40 41
#define BRCMF_USB_NRXQ			50
#define BRCMF_USB_NTXQ			50
42

43 44 45
#define BRCMF_USB_CBCTL_WRITE		0
#define BRCMF_USB_CBCTL_READ		1
#define BRCMF_USB_MAX_PKT_SIZE		1600
46

47 48 49 50
#define BRCMF_USB_43143_FW_NAME		"brcm/brcmfmac43143.bin"
#define BRCMF_USB_43236_FW_NAME		"brcm/brcmfmac43236b.bin"
#define BRCMF_USB_43242_FW_NAME		"brcm/brcmfmac43242a.bin"
#define BRCMF_USB_43569_FW_NAME		"brcm/brcmfmac43569.bin"
51 52

struct brcmf_usb_image {
53 54 55 56
	struct list_head list;
	s8 *fwname;
	u8 *image;
	int image_len;
57 58 59 60 61 62 63 64 65
};

struct brcmf_usbdev_info {
	struct brcmf_usbdev bus_pub; /* MUST BE FIRST */
	spinlock_t qlock;
	struct list_head rx_freeq;
	struct list_head rx_postq;
	struct list_head tx_freeq;
	struct list_head tx_postq;
66
	uint rx_pipe, tx_pipe;
67 68 69 70

	int rx_low_watermark;
	int tx_low_watermark;
	int tx_high_watermark;
71 72
	int tx_freecount;
	bool tx_flowblock;
73
	spinlock_t tx_flowblock_lock;
74 75 76 77

	struct brcmf_usbreq *tx_reqs;
	struct brcmf_usbreq *rx_reqs;

78
	const u8 *image;	/* buffer for combine fw and nvram */
79 80 81 82 83 84 85 86 87 88 89 90 91 92
	int image_len;

	struct usb_device *usbdev;
	struct device *dev;

	int ctl_in_pipe, ctl_out_pipe;
	struct urb *ctl_urb; /* URB for control endpoint */
	struct usb_ctrlrequest ctl_write;
	struct usb_ctrlrequest ctl_read;
	u32 ctl_urb_actual_length;
	int ctl_urb_status;
	int ctl_completed;
	wait_queue_head_t ioctl_resp_wait;
	ulong ctl_op;
93
	u8 ifnum;
94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111

	struct urb *bulk_urb; /* used for FW download */
};

static void brcmf_usb_rx_refill(struct brcmf_usbdev_info *devinfo,
				struct brcmf_usbreq  *req);

static struct brcmf_usbdev *brcmf_usb_get_buspub(struct device *dev)
{
	struct brcmf_bus *bus_if = dev_get_drvdata(dev);
	return bus_if->bus_priv.usb;
}

static struct brcmf_usbdev_info *brcmf_usb_get_businfo(struct device *dev)
{
	return brcmf_usb_get_buspub(dev)->devinfo;
}

112
static int brcmf_usb_ioctl_resp_wait(struct brcmf_usbdev_info *devinfo)
113
{
114 115 116
	return wait_event_timeout(devinfo->ioctl_resp_wait,
				  devinfo->ctl_completed,
				  msecs_to_jiffies(IOCTL_RESP_TIMEOUT));
117 118
}

119
static void brcmf_usb_ioctl_resp_wake(struct brcmf_usbdev_info *devinfo)
120 121
{
	if (waitqueue_active(&devinfo->ioctl_resp_wait))
122
		wake_up(&devinfo->ioctl_resp_wait);
123 124 125 126 127
}

static void
brcmf_usb_ctl_complete(struct brcmf_usbdev_info *devinfo, int type, int status)
{
128
	brcmf_dbg(USB, "Enter, status=%d\n", status);
129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155

	if (unlikely(devinfo == NULL))
		return;

	if (type == BRCMF_USB_CBCTL_READ) {
		if (status == 0)
			devinfo->bus_pub.stats.rx_ctlpkts++;
		else
			devinfo->bus_pub.stats.rx_ctlerrs++;
	} else if (type == BRCMF_USB_CBCTL_WRITE) {
		if (status == 0)
			devinfo->bus_pub.stats.tx_ctlpkts++;
		else
			devinfo->bus_pub.stats.tx_ctlerrs++;
	}

	devinfo->ctl_urb_status = status;
	devinfo->ctl_completed = true;
	brcmf_usb_ioctl_resp_wake(devinfo);
}

static void
brcmf_usb_ctlread_complete(struct urb *urb)
{
	struct brcmf_usbdev_info *devinfo =
		(struct brcmf_usbdev_info *)urb->context;

156
	brcmf_dbg(USB, "Enter\n");
157 158 159 160 161 162 163 164 165 166 167
	devinfo->ctl_urb_actual_length = urb->actual_length;
	brcmf_usb_ctl_complete(devinfo, BRCMF_USB_CBCTL_READ,
		urb->status);
}

static void
brcmf_usb_ctlwrite_complete(struct urb *urb)
{
	struct brcmf_usbdev_info *devinfo =
		(struct brcmf_usbdev_info *)urb->context;

168
	brcmf_dbg(USB, "Enter\n");
169 170 171 172 173 174 175 176 177 178
	brcmf_usb_ctl_complete(devinfo, BRCMF_USB_CBCTL_WRITE,
		urb->status);
}

static int
brcmf_usb_send_ctl(struct brcmf_usbdev_info *devinfo, u8 *buf, int len)
{
	int ret;
	u16 size;

179
	brcmf_dbg(USB, "Enter\n");
180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199
	if (devinfo == NULL || buf == NULL ||
	    len == 0 || devinfo->ctl_urb == NULL)
		return -EINVAL;

	size = len;
	devinfo->ctl_write.wLength = cpu_to_le16p(&size);
	devinfo->ctl_urb->transfer_buffer_length = size;
	devinfo->ctl_urb_status = 0;
	devinfo->ctl_urb_actual_length = 0;

	usb_fill_control_urb(devinfo->ctl_urb,
		devinfo->usbdev,
		devinfo->ctl_out_pipe,
		(unsigned char *) &devinfo->ctl_write,
		buf, size,
		(usb_complete_t)brcmf_usb_ctlwrite_complete,
		devinfo);

	ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
	if (ret < 0)
200
		brcmf_err("usb_submit_urb failed %d\n", ret);
201 202 203 204 205 206 207 208 209 210

	return ret;
}

static int
brcmf_usb_recv_ctl(struct brcmf_usbdev_info *devinfo, u8 *buf, int len)
{
	int ret;
	u16 size;

211
	brcmf_dbg(USB, "Enter\n");
212 213 214 215 216 217 218 219
	if ((devinfo == NULL) || (buf == NULL) || (len == 0)
		|| (devinfo->ctl_urb == NULL))
		return -EINVAL;

	size = len;
	devinfo->ctl_read.wLength = cpu_to_le16p(&size);
	devinfo->ctl_urb->transfer_buffer_length = size;

220 221 222
	devinfo->ctl_read.bRequestType = USB_DIR_IN
		| USB_TYPE_CLASS | USB_RECIP_INTERFACE;
	devinfo->ctl_read.bRequest = 1;
223 224 225 226 227 228 229 230 231 232 233

	usb_fill_control_urb(devinfo->ctl_urb,
		devinfo->usbdev,
		devinfo->ctl_in_pipe,
		(unsigned char *) &devinfo->ctl_read,
		buf, size,
		(usb_complete_t)brcmf_usb_ctlread_complete,
		devinfo);

	ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
	if (ret < 0)
234
		brcmf_err("usb_submit_urb failed %d\n", ret);
235 236 237 238 239 240 241 242 243 244

	return ret;
}

static int brcmf_usb_tx_ctlpkt(struct device *dev, u8 *buf, u32 len)
{
	int err = 0;
	int timeout = 0;
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);

245
	brcmf_dbg(USB, "Enter\n");
H
Hante Meuleman 已提交
246
	if (devinfo->bus_pub.state != BRCMFMAC_USB_STATE_UP)
247 248 249 250 251
		return -EIO;

	if (test_and_set_bit(0, &devinfo->ctl_op))
		return -EIO;

252
	devinfo->ctl_completed = false;
253 254
	err = brcmf_usb_send_ctl(devinfo, buf, len);
	if (err) {
255
		brcmf_err("fail %d bytes: %d\n", err, len);
256
		clear_bit(0, &devinfo->ctl_op);
257 258
		return err;
	}
259
	timeout = brcmf_usb_ioctl_resp_wait(devinfo);
260 261
	clear_bit(0, &devinfo->ctl_op);
	if (!timeout) {
262
		brcmf_err("Txctl wait timed out\n");
263 264 265 266 267 268 269 270 271 272 273
		err = -EIO;
	}
	return err;
}

static int brcmf_usb_rx_ctlpkt(struct device *dev, u8 *buf, u32 len)
{
	int err = 0;
	int timeout = 0;
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);

274
	brcmf_dbg(USB, "Enter\n");
H
Hante Meuleman 已提交
275
	if (devinfo->bus_pub.state != BRCMFMAC_USB_STATE_UP)
276
		return -EIO;
H
Hante Meuleman 已提交
277

278 279 280
	if (test_and_set_bit(0, &devinfo->ctl_op))
		return -EIO;

281
	devinfo->ctl_completed = false;
282 283
	err = brcmf_usb_recv_ctl(devinfo, buf, len);
	if (err) {
284
		brcmf_err("fail %d bytes: %d\n", err, len);
285
		clear_bit(0, &devinfo->ctl_op);
286 287
		return err;
	}
288
	timeout = brcmf_usb_ioctl_resp_wait(devinfo);
289 290 291
	err = devinfo->ctl_urb_status;
	clear_bit(0, &devinfo->ctl_op);
	if (!timeout) {
292
		brcmf_err("rxctl wait timed out\n");
293 294 295 296 297 298 299 300 301
		err = -EIO;
	}
	if (!err)
		return devinfo->ctl_urb_actual_length;
	else
		return err;
}

static struct brcmf_usbreq *brcmf_usb_deq(struct brcmf_usbdev_info *devinfo,
302
					  struct list_head *q, int *counter)
303 304 305 306 307 308 309 310 311 312
{
	unsigned long flags;
	struct brcmf_usbreq  *req;
	spin_lock_irqsave(&devinfo->qlock, flags);
	if (list_empty(q)) {
		spin_unlock_irqrestore(&devinfo->qlock, flags);
		return NULL;
	}
	req = list_entry(q->next, struct brcmf_usbreq, list);
	list_del_init(q->next);
313 314
	if (counter)
		(*counter)--;
315 316 317 318 319 320
	spin_unlock_irqrestore(&devinfo->qlock, flags);
	return req;

}

static void brcmf_usb_enq(struct brcmf_usbdev_info *devinfo,
321 322
			  struct list_head *q, struct brcmf_usbreq *req,
			  int *counter)
323 324 325 326
{
	unsigned long flags;
	spin_lock_irqsave(&devinfo->qlock, flags);
	list_add_tail(&req->list, q);
327 328
	if (counter)
		(*counter)++;
329 330 331 332 333 334 335 336 337
	spin_unlock_irqrestore(&devinfo->qlock, flags);
}

static struct brcmf_usbreq *
brcmf_usbdev_qinit(struct list_head *q, int qsize)
{
	int i;
	struct brcmf_usbreq *req, *reqs;

338 339
	reqs = kcalloc(qsize, sizeof(struct brcmf_usbreq), GFP_ATOMIC);
	if (reqs == NULL)
340
		return NULL;
341

342 343 344 345 346 347 348 349 350 351 352 353 354
	req = reqs;

	for (i = 0; i < qsize; i++) {
		req->urb = usb_alloc_urb(0, GFP_ATOMIC);
		if (!req->urb)
			goto fail;

		INIT_LIST_HEAD(&req->list);
		list_add_tail(&req->list, q);
		req++;
	}
	return reqs;
fail:
355
	brcmf_err("fail!\n");
356 357 358 359 360 361 362 363 364 365 366 367 368 369 370
	while (!list_empty(q)) {
		req = list_entry(q->next, struct brcmf_usbreq, list);
		if (req && req->urb)
			usb_free_urb(req->urb);
		list_del(q->next);
	}
	return NULL;

}

static void brcmf_usb_free_q(struct list_head *q, bool pending)
{
	struct brcmf_usbreq *req, *next;
	int i = 0;
	list_for_each_entry_safe(req, next, q, list) {
371
		if (!req->urb) {
372
			brcmf_err("bad req\n");
373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399
			break;
		}
		i++;
		if (pending) {
			usb_kill_urb(req->urb);
		} else {
			usb_free_urb(req->urb);
			list_del_init(&req->list);
		}
	}
}

static void brcmf_usb_del_fromq(struct brcmf_usbdev_info *devinfo,
				struct brcmf_usbreq *req)
{
	unsigned long flags;

	spin_lock_irqsave(&devinfo->qlock, flags);
	list_del_init(&req->list);
	spin_unlock_irqrestore(&devinfo->qlock, flags);
}


static void brcmf_usb_tx_complete(struct urb *urb)
{
	struct brcmf_usbreq *req = (struct brcmf_usbreq *)urb->context;
	struct brcmf_usbdev_info *devinfo = req->devinfo;
400
	unsigned long flags;
401

402 403
	brcmf_dbg(USB, "Enter, urb->status=%d, skb=%p\n", urb->status,
		  req->skb);
404 405
	brcmf_usb_del_fromq(devinfo, req);

406
	brcmf_txcomplete(devinfo->dev, req->skb, urb->status == 0);
407
	req->skb = NULL;
408
	brcmf_usb_enq(devinfo, &devinfo->tx_freeq, req, &devinfo->tx_freecount);
409
	spin_lock_irqsave(&devinfo->tx_flowblock_lock, flags);
410 411 412 413 414
	if (devinfo->tx_freecount > devinfo->tx_high_watermark &&
		devinfo->tx_flowblock) {
		brcmf_txflowblock(devinfo->dev, false);
		devinfo->tx_flowblock = false;
	}
415
	spin_unlock_irqrestore(&devinfo->tx_flowblock_lock, flags);
416 417 418 419 420 421 422 423
}

static void brcmf_usb_rx_complete(struct urb *urb)
{
	struct brcmf_usbreq  *req = (struct brcmf_usbreq *)urb->context;
	struct brcmf_usbdev_info *devinfo = req->devinfo;
	struct sk_buff *skb;

424
	brcmf_dbg(USB, "Enter, urb->status=%d\n", urb->status);
425 426 427 428
	brcmf_usb_del_fromq(devinfo, req);
	skb = req->skb;
	req->skb = NULL;

429
	/* zero lenght packets indicate usb "failure". Do not refill */
430
	if (urb->status != 0 || !urb->actual_length) {
431
		brcmu_pkt_buf_free_skb(skb);
432
		brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req, NULL);
433 434 435
		return;
	}

H
Hante Meuleman 已提交
436
	if (devinfo->bus_pub.state == BRCMFMAC_USB_STATE_UP) {
437
		skb_put(skb, urb->actual_length);
438
		brcmf_rx_frame(devinfo->dev, skb);
439
		brcmf_usb_rx_refill(devinfo, req);
440
	} else {
441
		brcmu_pkt_buf_free_skb(skb);
442
		brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req, NULL);
443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458
	}
	return;

}

static void brcmf_usb_rx_refill(struct brcmf_usbdev_info *devinfo,
				struct brcmf_usbreq  *req)
{
	struct sk_buff *skb;
	int ret;

	if (!req || !devinfo)
		return;

	skb = dev_alloc_skb(devinfo->bus_pub.bus_mtu);
	if (!skb) {
459
		brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req, NULL);
460 461 462 463 464 465 466 467
		return;
	}
	req->skb = skb;

	usb_fill_bulk_urb(req->urb, devinfo->usbdev, devinfo->rx_pipe,
			  skb->data, skb_tailroom(skb), brcmf_usb_rx_complete,
			  req);
	req->devinfo = devinfo;
468
	brcmf_usb_enq(devinfo, &devinfo->rx_postq, req, NULL);
469 470

	ret = usb_submit_urb(req->urb, GFP_ATOMIC);
471 472
	if (ret) {
		brcmf_usb_del_fromq(devinfo, req);
473
		brcmu_pkt_buf_free_skb(req->skb);
474
		req->skb = NULL;
475
		brcmf_usb_enq(devinfo, &devinfo->rx_freeq, req, NULL);
476 477 478 479 480 481 482 483
	}
	return;
}

static void brcmf_usb_rx_fill_all(struct brcmf_usbdev_info *devinfo)
{
	struct brcmf_usbreq *req;

H
Hante Meuleman 已提交
484
	if (devinfo->bus_pub.state != BRCMFMAC_USB_STATE_UP) {
485
		brcmf_err("bus is not up=%d\n", devinfo->bus_pub.state);
486 487
		return;
	}
488
	while ((req = brcmf_usb_deq(devinfo, &devinfo->rx_freeq, NULL)) != NULL)
489 490 491 492 493 494 495 496 497
		brcmf_usb_rx_refill(devinfo, req);
}

static void
brcmf_usb_state_change(struct brcmf_usbdev_info *devinfo, int state)
{
	struct brcmf_bus *bcmf_bus = devinfo->bus_pub.bus;
	int old_state;

498 499
	brcmf_dbg(USB, "Enter, current state=%d, new state=%d\n",
		  devinfo->bus_pub.state, state);
500 501 502 503 504

	if (devinfo->bus_pub.state == state)
		return;

	old_state = devinfo->bus_pub.state;
H
Hante Meuleman 已提交
505
	devinfo->bus_pub.state = state;
506 507

	/* update state of upper layer */
H
Hante Meuleman 已提交
508
	if (state == BRCMFMAC_USB_STATE_DOWN) {
509
		brcmf_dbg(USB, "DBUS is down\n");
510
		brcmf_bus_change_state(bcmf_bus, BRCMF_BUS_DOWN);
H
Hante Meuleman 已提交
511 512
	} else if (state == BRCMFMAC_USB_STATE_UP) {
		brcmf_dbg(USB, "DBUS is up\n");
513
		brcmf_bus_change_state(bcmf_bus, BRCMF_BUS_DATA);
514
	} else {
515
		brcmf_dbg(USB, "DBUS current state=%d\n", state);
516 517 518 519 520 521 522 523
	}
}

static int brcmf_usb_tx(struct device *dev, struct sk_buff *skb)
{
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);
	struct brcmf_usbreq  *req;
	int ret;
524
	unsigned long flags;
525

526
	brcmf_dbg(USB, "Enter, skb=%p\n", skb);
527 528 529 530
	if (devinfo->bus_pub.state != BRCMFMAC_USB_STATE_UP) {
		ret = -EIO;
		goto fail;
	}
531

532 533
	req = brcmf_usb_deq(devinfo, &devinfo->tx_freeq,
					&devinfo->tx_freecount);
534
	if (!req) {
535
		brcmf_err("no req to send\n");
536 537
		ret = -ENOMEM;
		goto fail;
538 539 540 541 542 543 544
	}

	req->skb = skb;
	req->devinfo = devinfo;
	usb_fill_bulk_urb(req->urb, devinfo->usbdev, devinfo->tx_pipe,
			  skb->data, skb->len, brcmf_usb_tx_complete, req);
	req->urb->transfer_flags |= URB_ZERO_PACKET;
545
	brcmf_usb_enq(devinfo, &devinfo->tx_postq, req, NULL);
546
	ret = usb_submit_urb(req->urb, GFP_ATOMIC);
547
	if (ret) {
548
		brcmf_err("brcmf_usb_tx usb_submit_urb FAILED\n");
549
		brcmf_usb_del_fromq(devinfo, req);
550
		req->skb = NULL;
551
		brcmf_usb_enq(devinfo, &devinfo->tx_freeq, req,
552 553
			      &devinfo->tx_freecount);
		goto fail;
554 555
	}

556
	spin_lock_irqsave(&devinfo->tx_flowblock_lock, flags);
557 558 559 560 561
	if (devinfo->tx_freecount < devinfo->tx_low_watermark &&
	    !devinfo->tx_flowblock) {
		brcmf_txflowblock(dev, true);
		devinfo->tx_flowblock = true;
	}
562
	spin_unlock_irqrestore(&devinfo->tx_flowblock_lock, flags);
563 564 565
	return 0;

fail:
566 567 568 569 570 571 572 573
	return ret;
}


static int brcmf_usb_up(struct device *dev)
{
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);

574
	brcmf_dbg(USB, "Enter\n");
H
Hante Meuleman 已提交
575
	if (devinfo->bus_pub.state == BRCMFMAC_USB_STATE_UP)
576 577
		return 0;

578
	/* Success, indicate devinfo is fully up */
H
Hante Meuleman 已提交
579
	brcmf_usb_state_change(devinfo, BRCMFMAC_USB_STATE_UP);
580 581 582 583 584 585 586 587 588 589

	if (devinfo->ctl_urb) {
		devinfo->ctl_in_pipe = usb_rcvctrlpipe(devinfo->usbdev, 0);
		devinfo->ctl_out_pipe = usb_sndctrlpipe(devinfo->usbdev, 0);

		/* CTL Write */
		devinfo->ctl_write.bRequestType =
			USB_DIR_OUT | USB_TYPE_CLASS | USB_RECIP_INTERFACE;
		devinfo->ctl_write.bRequest = 0;
		devinfo->ctl_write.wValue = cpu_to_le16(0);
590
		devinfo->ctl_write.wIndex = cpu_to_le16(devinfo->ifnum);
591 592 593 594 595 596

		/* CTL Read */
		devinfo->ctl_read.bRequestType =
			USB_DIR_IN | USB_TYPE_CLASS | USB_RECIP_INTERFACE;
		devinfo->ctl_read.bRequest = 1;
		devinfo->ctl_read.wValue = cpu_to_le16(0);
597
		devinfo->ctl_read.wIndex = cpu_to_le16(devinfo->ifnum);
598 599 600 601 602 603 604 605 606
	}
	brcmf_usb_rx_fill_all(devinfo);
	return 0;
}

static void brcmf_usb_down(struct device *dev)
{
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(dev);

607
	brcmf_dbg(USB, "Enter\n");
608 609 610
	if (devinfo == NULL)
		return;

H
Hante Meuleman 已提交
611
	if (devinfo->bus_pub.state == BRCMFMAC_USB_STATE_DOWN)
612 613
		return;

H
Hante Meuleman 已提交
614
	brcmf_usb_state_change(devinfo, BRCMFMAC_USB_STATE_DOWN);
615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631

	if (devinfo->ctl_urb)
		usb_kill_urb(devinfo->ctl_urb);

	if (devinfo->bulk_urb)
		usb_kill_urb(devinfo->bulk_urb);
	brcmf_usb_free_q(&devinfo->tx_postq, true);

	brcmf_usb_free_q(&devinfo->rx_postq, true);
}

static void
brcmf_usb_sync_complete(struct urb *urb)
{
	struct brcmf_usbdev_info *devinfo =
			(struct brcmf_usbdev_info *)urb->context;

632 633
	devinfo->ctl_completed = true;
	brcmf_usb_ioctl_resp_wake(devinfo);
634 635
}

636 637
static int brcmf_usb_dl_cmd(struct brcmf_usbdev_info *devinfo, u8 cmd,
			    void *buffer, int buflen)
638
{
639
	int ret;
640 641 642 643
	char *tmpbuf;
	u16 size;

	if ((!devinfo) || (devinfo->ctl_urb == NULL))
644
		return -EINVAL;
645 646 647

	tmpbuf = kmalloc(buflen, GFP_ATOMIC);
	if (!tmpbuf)
648
		return -ENOMEM;
649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664

	size = buflen;
	devinfo->ctl_urb->transfer_buffer_length = size;

	devinfo->ctl_read.wLength = cpu_to_le16p(&size);
	devinfo->ctl_read.bRequestType = USB_DIR_IN | USB_TYPE_VENDOR |
		USB_RECIP_INTERFACE;
	devinfo->ctl_read.bRequest = cmd;

	usb_fill_control_urb(devinfo->ctl_urb,
		devinfo->usbdev,
		usb_rcvctrlpipe(devinfo->usbdev, 0),
		(unsigned char *) &devinfo->ctl_read,
		(void *) tmpbuf, size,
		(usb_complete_t)brcmf_usb_sync_complete, devinfo);

665
	devinfo->ctl_completed = false;
666 667
	ret = usb_submit_urb(devinfo->ctl_urb, GFP_ATOMIC);
	if (ret < 0) {
668
		brcmf_err("usb_submit_urb failed %d\n", ret);
669
		goto finalize;
670 671
	}

672 673 674 675
	if (!brcmf_usb_ioctl_resp_wait(devinfo))
		ret = -ETIMEDOUT;
	else
		memcpy(buffer, tmpbuf, buflen);
676

677 678
finalize:
	kfree(tmpbuf);
679
	return ret;
680 681 682 683 684 685 686 687
}

static bool
brcmf_usb_dlneeded(struct brcmf_usbdev_info *devinfo)
{
	struct bootrom_id_le id;
	u32 chipid, chiprev;

688
	brcmf_dbg(USB, "Enter\n");
689 690 691 692 693 694

	if (devinfo == NULL)
		return false;

	/* Check if firmware downloaded already by querying runtime ID */
	id.chip = cpu_to_le32(0xDEAD);
695
	brcmf_usb_dl_cmd(devinfo, DL_GETVER, &id, sizeof(id));
696 697 698 699 700

	chipid = le32_to_cpu(id.chip);
	chiprev = le32_to_cpu(id.chiprev);

	if ((chipid & 0x4300) == 0x4300)
701
		brcmf_dbg(USB, "chip %x rev 0x%x\n", chipid, chiprev);
702
	else
703
		brcmf_dbg(USB, "chip %d rev 0x%x\n", chipid, chiprev);
704
	if (chipid == BRCMF_POSTBOOT_ID) {
705
		brcmf_dbg(USB, "firmware already downloaded\n");
706
		brcmf_usb_dl_cmd(devinfo, DL_RESETCFG, &id, sizeof(id));
707 708
		return false;
	} else {
709 710
		devinfo->bus_pub.devid = chipid;
		devinfo->bus_pub.chiprev = chiprev;
711 712 713 714 715 716 717 718
	}
	return true;
}

static int
brcmf_usb_resetcfg(struct brcmf_usbdev_info *devinfo)
{
	struct bootrom_id_le id;
719
	u32 loop_cnt;
720
	int err;
721

722
	brcmf_dbg(USB, "Enter\n");
723

724 725 726 727
	loop_cnt = 0;
	do {
		mdelay(BRCMF_USB_RESET_GETVER_SPINWAIT);
		loop_cnt++;
728
		id.chip = cpu_to_le32(0xDEAD);       /* Get the ID */
729 730 731
		err = brcmf_usb_dl_cmd(devinfo, DL_GETVER, &id, sizeof(id));
		if ((err) && (err != -ETIMEDOUT))
			return err;
732 733
		if (id.chip == cpu_to_le32(BRCMF_POSTBOOT_ID))
			break;
734
	} while (loop_cnt < BRCMF_USB_RESET_GETVER_LOOP_CNT);
735 736

	if (id.chip == cpu_to_le32(BRCMF_POSTBOOT_ID)) {
737 738
		brcmf_dbg(USB, "postboot chip 0x%x/rev 0x%x\n",
			  le32_to_cpu(id.chip), le32_to_cpu(id.chiprev));
739

740
		brcmf_usb_dl_cmd(devinfo, DL_RESETCFG, &id, sizeof(id));
741 742
		return 0;
	} else {
743
		brcmf_err("Cannot talk to Dongle. Firmware is not UP, %d ms\n",
744
			  BRCMF_USB_RESET_GETVER_SPINWAIT * loop_cnt);
745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764
		return -EINVAL;
	}
}


static int
brcmf_usb_dl_send_bulk(struct brcmf_usbdev_info *devinfo, void *buffer, int len)
{
	int ret;

	if ((devinfo == NULL) || (devinfo->bulk_urb == NULL))
		return -EINVAL;

	/* Prepare the URB */
	usb_fill_bulk_urb(devinfo->bulk_urb, devinfo->usbdev,
			  devinfo->tx_pipe, buffer, len,
			  (usb_complete_t)brcmf_usb_sync_complete, devinfo);

	devinfo->bulk_urb->transfer_flags |= URB_ZERO_PACKET;

765
	devinfo->ctl_completed = false;
766 767
	ret = usb_submit_urb(devinfo->bulk_urb, GFP_ATOMIC);
	if (ret) {
768
		brcmf_err("usb_submit_urb failed %d\n", ret);
769 770
		return ret;
	}
771 772
	ret = brcmf_usb_ioctl_resp_wait(devinfo);
	return (ret == 0);
773 774 775 776 777 778 779 780 781 782
}

static int
brcmf_usb_dl_writeimage(struct brcmf_usbdev_info *devinfo, u8 *fw, int fwlen)
{
	unsigned int sendlen, sent, dllen;
	char *bulkchunk = NULL, *dlpos;
	struct rdl_state_le state;
	u32 rdlstate, rdlbytes;
	int err = 0;
783 784

	brcmf_dbg(USB, "Enter, fw %p, len %d\n", fw, fwlen);
785 786 787 788 789 790 791 792

	bulkchunk = kmalloc(RDL_CHUNK, GFP_ATOMIC);
	if (bulkchunk == NULL) {
		err = -ENOMEM;
		goto fail;
	}

	/* 1) Prepare USB boot loader for runtime image */
793
	brcmf_usb_dl_cmd(devinfo, DL_START, &state, sizeof(state));
794 795 796 797 798 799

	rdlstate = le32_to_cpu(state.state);
	rdlbytes = le32_to_cpu(state.bytes);

	/* 2) Check we are in the Waiting state */
	if (rdlstate != DL_WAITING) {
800
		brcmf_err("Failed to DL_START\n");
801 802 803 804 805 806 807 808 809 810 811 812 813 814 815 816 817 818 819 820 821 822 823 824 825 826 827 828
		err = -EINVAL;
		goto fail;
	}
	sent = 0;
	dlpos = fw;
	dllen = fwlen;

	/* Get chip id and rev */
	while (rdlbytes != dllen) {
		/* Wait until the usb device reports it received all
		 * the bytes we sent */
		if ((rdlbytes == sent) && (rdlbytes != dllen)) {
			if ((dllen-sent) < RDL_CHUNK)
				sendlen = dllen-sent;
			else
				sendlen = RDL_CHUNK;

			/* simply avoid having to send a ZLP by ensuring we
			 * never have an even
			 * multiple of 64
			 */
			if (!(sendlen % 64))
				sendlen -= 4;

			/* send data */
			memcpy(bulkchunk, dlpos, sendlen);
			if (brcmf_usb_dl_send_bulk(devinfo, bulkchunk,
						   sendlen)) {
829
				brcmf_err("send_bulk failed\n");
830 831 832 833 834 835 836
				err = -EINVAL;
				goto fail;
			}

			dlpos += sendlen;
			sent += sendlen;
		}
837 838 839 840
		err = brcmf_usb_dl_cmd(devinfo, DL_GETSTATE, &state,
				       sizeof(state));
		if (err) {
			brcmf_err("DL_GETSTATE Failed\n");
841 842 843 844 845 846 847 848
			goto fail;
		}

		rdlstate = le32_to_cpu(state.state);
		rdlbytes = le32_to_cpu(state.bytes);

		/* restart if an error is reported */
		if (rdlstate == DL_BAD_HDR || rdlstate == DL_BAD_CRC) {
849
			brcmf_err("Bad Hdr or Bad CRC state %d\n",
850 851 852 853 854 855 856 857
				  rdlstate);
			err = -EINVAL;
			goto fail;
		}
	}

fail:
	kfree(bulkchunk);
858
	brcmf_dbg(USB, "Exit, err=%d\n", err);
859 860 861 862 863 864 865
	return err;
}

static int brcmf_usb_dlstart(struct brcmf_usbdev_info *devinfo, u8 *fw, int len)
{
	int err;

866
	brcmf_dbg(USB, "Enter\n");
867 868 869 870

	if (devinfo == NULL)
		return -EINVAL;

871
	if (devinfo->bus_pub.devid == 0xDEAD)
872 873 874 875
		return -EINVAL;

	err = brcmf_usb_dl_writeimage(devinfo, fw, len);
	if (err == 0)
H
Hante Meuleman 已提交
876
		devinfo->bus_pub.state = BRCMFMAC_USB_STATE_DL_DONE;
877
	else
H
Hante Meuleman 已提交
878
		devinfo->bus_pub.state = BRCMFMAC_USB_STATE_DL_FAIL;
879
	brcmf_dbg(USB, "Exit, err=%d\n", err);
880 881 882 883 884 885 886 887

	return err;
}

static int brcmf_usb_dlrun(struct brcmf_usbdev_info *devinfo)
{
	struct rdl_state_le state;

888
	brcmf_dbg(USB, "Enter\n");
889 890 891
	if (!devinfo)
		return -EINVAL;

892
	if (devinfo->bus_pub.devid == 0xDEAD)
893 894 895
		return -EINVAL;

	/* Check we are runnable */
896 897
	state.state = 0;
	brcmf_usb_dl_cmd(devinfo, DL_GETSTATE, &state, sizeof(state));
898 899 900

	/* Start the image */
	if (state.state == cpu_to_le32(DL_RUNNABLE)) {
901
		if (brcmf_usb_dl_cmd(devinfo, DL_GO, &state, sizeof(state)))
902 903 904 905 906
			return -ENODEV;
		if (brcmf_usb_resetcfg(devinfo))
			return -ENODEV;
		/* The Dongle may go for re-enumeration. */
	} else {
907
		brcmf_err("Dongle not runnable\n");
908 909
		return -EINVAL;
	}
910
	brcmf_dbg(USB, "Exit\n");
911 912 913 914 915 916
	return 0;
}

static bool brcmf_usb_chip_support(int chipid, int chiprev)
{
	switch(chipid) {
917
	case BRCM_CC_43143_CHIP_ID:
918
		return true;
919 920 921
	case BRCM_CC_43235_CHIP_ID:
	case BRCM_CC_43236_CHIP_ID:
	case BRCM_CC_43238_CHIP_ID:
922
		return (chiprev == 3);
923
	case BRCM_CC_43242_CHIP_ID:
924
		return true;
925 926
	case BRCM_CC_43566_CHIP_ID:
	case BRCM_CC_43569_CHIP_ID:
927
		return true;
928 929 930 931 932 933 934 935 936
	default:
		break;
	}
	return false;
}

static int
brcmf_usb_fw_download(struct brcmf_usbdev_info *devinfo)
{
937
	int devid, chiprev;
938 939
	int err;

940
	brcmf_dbg(USB, "Enter\n");
941 942 943
	if (devinfo == NULL)
		return -ENODEV;

944 945
	devid = devinfo->bus_pub.devid;
	chiprev = devinfo->bus_pub.chiprev;
946

947
	if (!brcmf_usb_chip_support(devid, chiprev)) {
948
		brcmf_err("unsupported chip %d rev %d\n",
949
			  devid, chiprev);
950 951 952 953
		return -EINVAL;
	}

	if (!devinfo->image) {
954
		brcmf_err("No firmware!\n");
955 956 957 958
		return -ENOENT;
	}

	err = brcmf_usb_dlstart(devinfo,
959
		(u8 *)devinfo->image, devinfo->image_len);
960 961 962 963 964 965
	if (err == 0)
		err = brcmf_usb_dlrun(devinfo);
	return err;
}


966
static void brcmf_usb_detach(struct brcmf_usbdev_info *devinfo)
967
{
968
	brcmf_dbg(USB, "Enter, devinfo %p\n", devinfo);
969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993 994 995 996 997 998 999 1000 1001

	/* free the URBS */
	brcmf_usb_free_q(&devinfo->rx_freeq, false);
	brcmf_usb_free_q(&devinfo->tx_freeq, false);

	usb_free_urb(devinfo->ctl_urb);
	usb_free_urb(devinfo->bulk_urb);

	kfree(devinfo->tx_reqs);
	kfree(devinfo->rx_reqs);
}

#define TRX_MAGIC       0x30524448      /* "HDR0" */
#define TRX_VERSION     1               /* Version 1 */
#define TRX_MAX_LEN     0x3B0000        /* Max length */
#define TRX_NO_HEADER   1               /* Do not write TRX header */
#define TRX_MAX_OFFSET  3               /* Max number of individual files */
#define TRX_UNCOMP_IMAGE        0x20    /* Trx contains uncompressed image */

struct trx_header_le {
	__le32 magic;		/* "HDR0" */
	__le32 len;		/* Length of file including header */
	__le32 crc32;		/* CRC from flag_version to end of file */
	__le32 flag_version;	/* 0:15 flags, 16:31 version */
	__le32 offsets[TRX_MAX_OFFSET]; /* Offsets of partitions from start of
					 * header */
};

static int check_file(const u8 *headers)
{
	struct trx_header_le *trx;
	int actual_len = -1;

1002
	brcmf_dbg(USB, "Enter\n");
1003 1004 1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016
	/* Extract trx header */
	trx = (struct trx_header_le *) headers;
	if (trx->magic != cpu_to_le32(TRX_MAGIC))
		return -1;

	headers += sizeof(struct trx_header_le);

	if (le32_to_cpu(trx->flag_version) & TRX_UNCOMP_IMAGE) {
		actual_len = le32_to_cpu(trx->offsets[TRX_OFFSETS_DLFWLEN_IDX]);
		return actual_len + sizeof(struct trx_header_le);
	}
	return -1;
}

1017 1018 1019
static const char *brcmf_usb_get_fwname(struct brcmf_usbdev_info *devinfo)
{
	switch (devinfo->bus_pub.devid) {
1020
	case BRCM_CC_43143_CHIP_ID:
1021
		return BRCMF_USB_43143_FW_NAME;
1022 1023 1024
	case BRCM_CC_43235_CHIP_ID:
	case BRCM_CC_43236_CHIP_ID:
	case BRCM_CC_43238_CHIP_ID:
1025
		return BRCMF_USB_43236_FW_NAME;
1026
	case BRCM_CC_43242_CHIP_ID:
1027
		return BRCMF_USB_43242_FW_NAME;
1028 1029
	case BRCM_CC_43566_CHIP_ID:
	case BRCM_CC_43569_CHIP_ID:
1030
		return BRCMF_USB_43569_FW_NAME;
1031 1032 1033 1034
	default:
		return NULL;
	}
}
1035 1036 1037


static
1038 1039
struct brcmf_usbdev *brcmf_usb_attach(struct brcmf_usbdev_info *devinfo,
				      int nrxq, int ntxq)
1040
{
1041 1042
	brcmf_dbg(USB, "Enter\n");

1043 1044 1045 1046
	devinfo->bus_pub.nrxq = nrxq;
	devinfo->rx_low_watermark = nrxq / 2;
	devinfo->bus_pub.devinfo = devinfo;
	devinfo->bus_pub.ntxq = ntxq;
H
Hante Meuleman 已提交
1047
	devinfo->bus_pub.state = BRCMFMAC_USB_STATE_DOWN;
1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058

	/* flow control when too many tx urbs posted */
	devinfo->tx_low_watermark = ntxq / 4;
	devinfo->tx_high_watermark = devinfo->tx_low_watermark * 3;
	devinfo->bus_pub.bus_mtu = BRCMF_USB_MAX_PKT_SIZE;

	/* Initialize other structure content */
	init_waitqueue_head(&devinfo->ioctl_resp_wait);

	/* Initialize the spinlocks */
	spin_lock_init(&devinfo->qlock);
1059
	spin_lock_init(&devinfo->tx_flowblock_lock);
1060 1061 1062 1063 1064 1065 1066

	INIT_LIST_HEAD(&devinfo->rx_freeq);
	INIT_LIST_HEAD(&devinfo->rx_postq);

	INIT_LIST_HEAD(&devinfo->tx_freeq);
	INIT_LIST_HEAD(&devinfo->tx_postq);

1067 1068
	devinfo->tx_flowblock = false;

1069 1070 1071 1072 1073 1074 1075
	devinfo->rx_reqs = brcmf_usbdev_qinit(&devinfo->rx_freeq, nrxq);
	if (!devinfo->rx_reqs)
		goto error;

	devinfo->tx_reqs = brcmf_usbdev_qinit(&devinfo->tx_freeq, ntxq);
	if (!devinfo->tx_reqs)
		goto error;
1076
	devinfo->tx_freecount = ntxq;
1077 1078 1079

	devinfo->ctl_urb = usb_alloc_urb(0, GFP_ATOMIC);
	if (!devinfo->ctl_urb) {
1080
		brcmf_err("usb_alloc_urb (ctl) failed\n");
1081 1082 1083 1084
		goto error;
	}
	devinfo->bulk_urb = usb_alloc_urb(0, GFP_ATOMIC);
	if (!devinfo->bulk_urb) {
1085
		brcmf_err("usb_alloc_urb (bulk) failed\n");
1086 1087 1088 1089 1090 1091
		goto error;
	}

	return &devinfo->bus_pub;

error:
1092
	brcmf_err("failed!\n");
1093
	brcmf_usb_detach(devinfo);
1094 1095 1096
	return NULL;
}

A
Arend van Spriel 已提交
1097 1098 1099 1100 1101 1102 1103
static struct brcmf_bus_ops brcmf_usb_bus_ops = {
	.txdata = brcmf_usb_tx,
	.stop = brcmf_usb_down,
	.txctl = brcmf_usb_tx_ctlpkt,
	.rxctl = brcmf_usb_rx_ctlpkt,
};

1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128
static int brcmf_usb_bus_setup(struct brcmf_usbdev_info *devinfo)
{
	int ret;

	/* Attach to the common driver interface */
	ret = brcmf_attach(devinfo->dev);
	if (ret) {
		brcmf_err("brcmf_attach failed\n");
		return ret;
	}

	ret = brcmf_usb_up(devinfo->dev);
	if (ret)
		goto fail;

	ret = brcmf_bus_start(devinfo->dev);
	if (ret)
		goto fail;

	return 0;
fail:
	brcmf_detach(devinfo->dev);
	return ret;
}

1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146 1147 1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163
static void brcmf_usb_probe_phase2(struct device *dev,
				   const struct firmware *fw,
				   void *nvram, u32 nvlen)
{
	struct brcmf_bus *bus = dev_get_drvdata(dev);
	struct brcmf_usbdev_info *devinfo;
	int ret;

	brcmf_dbg(USB, "Start fw downloading\n");
	ret = check_file(fw->data);
	if (ret < 0) {
		brcmf_err("invalid firmware\n");
		release_firmware(fw);
		goto error;
	}

	devinfo = bus->bus_priv.usb->devinfo;
	devinfo->image = fw->data;
	devinfo->image_len = fw->size;

	ret = brcmf_usb_fw_download(devinfo);
	release_firmware(fw);
	if (ret)
		goto error;

	ret = brcmf_usb_bus_setup(devinfo);
	if (ret)
		goto error;

	return;
error:
	brcmf_dbg(TRACE, "failed: dev=%s, err=%d\n", dev_name(dev), ret);
	device_release_driver(dev);
}

H
Hante Meuleman 已提交
1164
static int brcmf_usb_probe_cb(struct brcmf_usbdev_info *devinfo)
1165 1166 1167
{
	struct brcmf_bus *bus = NULL;
	struct brcmf_usbdev *bus_pub = NULL;
1168
	struct device *dev = devinfo->dev;
1169
	int ret;
1170

1171
	brcmf_dbg(USB, "Enter\n");
1172
	bus_pub = brcmf_usb_attach(devinfo, BRCMF_USB_NRXQ, BRCMF_USB_NTXQ);
1173 1174
	if (!bus_pub)
		return -ENODEV;
1175 1176 1177 1178 1179 1180 1181

	bus = kzalloc(sizeof(struct brcmf_bus), GFP_ATOMIC);
	if (!bus) {
		ret = -ENOMEM;
		goto fail;
	}

A
Arend van Spriel 已提交
1182
	bus->dev = dev;
1183 1184 1185
	bus_pub->bus = bus;
	bus->bus_priv.usb = bus_pub;
	dev_set_drvdata(dev, bus);
A
Arend van Spriel 已提交
1186
	bus->ops = &brcmf_usb_bus_ops;
1187
	bus->proto_type = BRCMF_PROTO_BCDC;
1188
	bus->always_use_fws_queue = true;
1189

1190 1191 1192 1193
	if (!brcmf_usb_dlneeded(devinfo)) {
		ret = brcmf_usb_bus_setup(devinfo);
		if (ret)
			goto fail;
1194
	}
1195 1196 1197
	bus->chip = bus_pub->devid;
	bus->chiprev = bus_pub->chiprev;

1198 1199 1200
	/* request firmware here */
	brcmf_fw_get_firmwares(dev, 0, brcmf_usb_get_fwname(devinfo), NULL,
			       brcmf_usb_probe_phase2);
1201
	return 0;
1202

1203 1204 1205
fail:
	/* Release resources in reverse order */
	kfree(bus);
1206
	brcmf_usb_detach(devinfo);
1207 1208 1209 1210
	return ret;
}

static void
1211
brcmf_usb_disconnect_cb(struct brcmf_usbdev_info *devinfo)
1212
{
1213
	if (!devinfo)
1214
		return;
1215
	brcmf_dbg(USB, "Enter, bus_pub %p\n", devinfo);
1216

1217 1218 1219
	brcmf_detach(devinfo->dev);
	kfree(devinfo->bus_pub.bus);
	brcmf_usb_detach(devinfo);
1220 1221 1222 1223 1224 1225
}

static int
brcmf_usb_probe(struct usb_interface *intf, const struct usb_device_id *id)
{
	struct usb_device *usb = interface_to_usbdev(intf);
1226
	struct brcmf_usbdev_info *devinfo;
1227 1228 1229 1230 1231
	struct usb_interface_descriptor	*desc;
	struct usb_endpoint_descriptor *endpoint;
	int ret = 0;
	u32 num_of_eps;
	u8 endpoint_num, ep;
1232

1233
	brcmf_dbg(USB, "Enter 0x%04x:0x%04x\n", id->idVendor, id->idProduct);
1234

1235 1236 1237
	devinfo = kzalloc(sizeof(*devinfo), GFP_ATOMIC);
	if (devinfo == NULL)
		return -ENOMEM;
1238

1239 1240 1241
	devinfo->usbdev = usb;
	devinfo->dev = &usb->dev;
	usb_set_intfdata(intf, devinfo);
1242 1243 1244

	/* Check that the device supports only one configuration */
	if (usb->descriptor.bNumConfigurations != 1) {
1245 1246 1247
		brcmf_err("Number of configurations: %d not supported\n",
			  usb->descriptor.bNumConfigurations);
		ret = -ENODEV;
1248 1249 1250
		goto fail;
	}

1251 1252 1253 1254 1255 1256
	if ((usb->descriptor.bDeviceClass != USB_CLASS_VENDOR_SPEC) &&
	    (usb->descriptor.bDeviceClass != USB_CLASS_MISC) &&
	    (usb->descriptor.bDeviceClass != USB_CLASS_WIRELESS_CONTROLLER)) {
		brcmf_err("Device class: 0x%x not supported\n",
			  usb->descriptor.bDeviceClass);
		ret = -ENODEV;
1257 1258 1259
		goto fail;
	}

1260 1261 1262 1263 1264 1265 1266 1267
	desc = &intf->altsetting[0].desc;
	if ((desc->bInterfaceClass != USB_CLASS_VENDOR_SPEC) ||
	    (desc->bInterfaceSubClass != 2) ||
	    (desc->bInterfaceProtocol != 0xff)) {
		brcmf_err("non WLAN interface %d: 0x%x:0x%x:0x%x\n",
			  desc->bInterfaceNumber, desc->bInterfaceClass,
			  desc->bInterfaceSubClass, desc->bInterfaceProtocol);
		ret = -ENODEV;
1268 1269 1270
		goto fail;
	}

1271 1272 1273 1274 1275 1276 1277 1278
	num_of_eps = desc->bNumEndpoints;
	for (ep = 0; ep < num_of_eps; ep++) {
		endpoint = &intf->altsetting[0].endpoint[ep].desc;
		endpoint_num = usb_endpoint_num(endpoint);
		if (!usb_endpoint_xfer_bulk(endpoint))
			continue;
		if (usb_endpoint_dir_in(endpoint)) {
			if (!devinfo->rx_pipe)
1279
				devinfo->rx_pipe =
1280 1281
					usb_rcvbulkpipe(usb, endpoint_num);
		} else {
1282 1283 1284
			if (!devinfo->tx_pipe)
				devinfo->tx_pipe =
					usb_sndbulkpipe(usb, endpoint_num);
1285 1286
		}
	}
1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298
	if (devinfo->rx_pipe == 0) {
		brcmf_err("No RX (in) Bulk EP found\n");
		ret = -ENODEV;
		goto fail;
	}
	if (devinfo->tx_pipe == 0) {
		brcmf_err("No TX (out) Bulk EP found\n");
		ret = -ENODEV;
		goto fail;
	}

	devinfo->ifnum = desc->bInterfaceNumber;
1299

1300
	if (usb->speed == USB_SPEED_SUPER)
1301
		brcmf_dbg(USB, "Broadcom super speed USB WLAN interface detected\n");
1302
	else if (usb->speed == USB_SPEED_HIGH)
1303
		brcmf_dbg(USB, "Broadcom high speed USB WLAN interface detected\n");
1304
	else
1305
		brcmf_dbg(USB, "Broadcom full speed USB WLAN interface detected\n");
1306

H
Hante Meuleman 已提交
1307
	ret = brcmf_usb_probe_cb(devinfo);
1308 1309 1310 1311 1312 1313 1314
	if (ret)
		goto fail;

	/* Success */
	return 0;

fail:
1315
	kfree(devinfo);
1316 1317 1318 1319 1320 1321 1322
	usb_set_intfdata(intf, NULL);
	return ret;
}

static void
brcmf_usb_disconnect(struct usb_interface *intf)
{
1323
	struct brcmf_usbdev_info *devinfo;
1324

1325
	brcmf_dbg(USB, "Enter\n");
1326 1327 1328
	devinfo = (struct brcmf_usbdev_info *)usb_get_intfdata(intf);
	brcmf_usb_disconnect_cb(devinfo);
	kfree(devinfo);
1329
	brcmf_dbg(USB, "Exit\n");
1330 1331 1332
}

/*
H
Hante Meuleman 已提交
1333
 * only need to signal the bus being down and update the state.
1334 1335 1336 1337 1338 1339
 */
static int brcmf_usb_suspend(struct usb_interface *intf, pm_message_t state)
{
	struct usb_device *usb = interface_to_usbdev(intf);
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(&usb->dev);

1340
	brcmf_dbg(USB, "Enter\n");
H
Hante Meuleman 已提交
1341 1342
	devinfo->bus_pub.state = BRCMFMAC_USB_STATE_SLEEP;
	brcmf_detach(&usb->dev);
1343 1344 1345 1346
	return 0;
}

/*
H
Hante Meuleman 已提交
1347
 * (re-) start the bus.
1348 1349 1350 1351 1352 1353
 */
static int brcmf_usb_resume(struct usb_interface *intf)
{
	struct usb_device *usb = interface_to_usbdev(intf);
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(&usb->dev);

1354
	brcmf_dbg(USB, "Enter\n");
1355
	return brcmf_usb_bus_setup(devinfo);
1356 1357
}

H
Hante Meuleman 已提交
1358 1359 1360 1361
static int brcmf_usb_reset_resume(struct usb_interface *intf)
{
	struct usb_device *usb = interface_to_usbdev(intf);
	struct brcmf_usbdev_info *devinfo = brcmf_usb_get_businfo(&usb->dev);
1362

H
Hante Meuleman 已提交
1363 1364
	brcmf_dbg(USB, "Enter\n");

1365 1366 1367
	return brcmf_fw_get_firmwares(&usb->dev, 0,
				      brcmf_usb_get_fwname(devinfo), NULL,
				      brcmf_usb_probe_phase2);
H
Hante Meuleman 已提交
1368 1369
}

1370 1371
#define BRCMF_USB_DEVICE(dev_id)	\
	{ USB_DEVICE(BRCM_USB_VENDOR_ID_BROADCOM, dev_id) }
1372 1373

static struct usb_device_id brcmf_usb_devid_table[] = {
1374 1375 1376 1377
	BRCMF_USB_DEVICE(BRCM_USB_43143_DEVICE_ID),
	BRCMF_USB_DEVICE(BRCM_USB_43236_DEVICE_ID),
	BRCMF_USB_DEVICE(BRCM_USB_43242_DEVICE_ID),
	BRCMF_USB_DEVICE(BRCM_USB_43569_DEVICE_ID),
1378
	/* special entry for device with firmware loaded and running */
1379 1380
	BRCMF_USB_DEVICE(BRCM_USB_BCMFW_DEVICE_ID),
	{ /* end: all zeroes */ }
1381
};
1382

1383
MODULE_DEVICE_TABLE(usb, brcmf_usb_devid_table);
1384
MODULE_FIRMWARE(BRCMF_USB_43143_FW_NAME);
1385
MODULE_FIRMWARE(BRCMF_USB_43236_FW_NAME);
1386
MODULE_FIRMWARE(BRCMF_USB_43242_FW_NAME);
1387
MODULE_FIRMWARE(BRCMF_USB_43569_FW_NAME);
1388 1389 1390 1391 1392 1393 1394 1395

static struct usb_driver brcmf_usbdrvr = {
	.name = KBUILD_MODNAME,
	.probe = brcmf_usb_probe,
	.disconnect = brcmf_usb_disconnect,
	.id_table = brcmf_usb_devid_table,
	.suspend = brcmf_usb_suspend,
	.resume = brcmf_usb_resume,
H
Hante Meuleman 已提交
1396
	.reset_resume = brcmf_usb_reset_resume,
1397
	.supports_autosuspend = 1,
1398
	.disable_hub_initiated_lpm = 1,
1399 1400
};

1401 1402 1403 1404 1405 1406 1407 1408
static int brcmf_usb_reset_device(struct device *dev, void *notused)
{
	/* device past is the usb interface so we
	 * need to use parent here.
	 */
	brcmf_dev_reset(dev->parent);
	return 0;
}
1409

1410 1411
void brcmf_usb_exit(void)
{
1412 1413 1414
	struct device_driver *drv = &brcmf_usbdrvr.drvwrap.driver;
	int ret;

1415
	brcmf_dbg(USB, "Enter\n");
1416 1417
	ret = driver_for_each_device(drv, NULL, NULL,
				     brcmf_usb_reset_device);
1418 1419 1420
	usb_deregister(&brcmf_usbdrvr);
}

1421
void brcmf_usb_register(void)
1422
{
1423
	brcmf_dbg(USB, "Enter\n");
1424
	usb_register(&brcmf_usbdrvr);
1425
}