drivers/net/wireless/broadcom/brcm80211/brcmfmac/fwsignal.c

   1 /*
   2  * Copyright (c) 2010 Broadcom Corporation
   3  *
   4  * Permission to use, copy, modify, and/or distribute this software for any
   5  * purpose with or without fee is hereby granted, provided that the above
   6  * copyright notice and this permission notice appear in all copies.
   7  *
   8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
  11  * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
  13  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
  14  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15  */
  16 #include <linux/types.h>
  17 #include <linux/module.h>
  18 #include <linux/if_ether.h>
  19 #include <linux/spinlock.h>
  20 #include <linux/skbuff.h>
  21 #include <linux/netdevice.h>
  22 #include <linux/etherdevice.h>
  23 #include <linux/err.h>
  24 #include <linux/jiffies.h>
  25 #include <net/cfg80211.h>
  26
  27 #include <brcmu_utils.h>
  28 #include <brcmu_wifi.h>
  29 #include "core.h"
  30 #include "debug.h"
  31 #include "bus.h"
  32 #include "fwil.h"
  33 #include "fwil_types.h"
  34 #include "fweh.h"
  35 #include "fwsignal.h"
  36 #include "p2p.h"
  37 #include "cfg80211.h"
  38 #include "proto.h"
  39 #include "bcdc.h"
  40 #include "common.h"
  41
  42 /**
  43  * DOC: Firmware Signalling
  44  *
  45  * Firmware can send signals to host and vice versa, which are passed in the
  46  * data packets using TLV based header. This signalling layer is on top of the
  47  * BDC bus protocol layer.
  48  */
  49
  50 /*
  51  * single definition for firmware-driver flow control tlv's.
  52  *
  53  * each tlv is specified by BRCMF_FWS_TLV_DEF(name, ID, length).
  54  * A length value 0 indicates variable length tlv.
  55  */
  56 #define BRCMF_FWS_TLV_DEFLIST \
  57         BRCMF_FWS_TLV_DEF(MAC_OPEN, 1, 1) \
  58         BRCMF_FWS_TLV_DEF(MAC_CLOSE, 2, 1) \
  59         BRCMF_FWS_TLV_DEF(MAC_REQUEST_CREDIT, 3, 2) \
  60         BRCMF_FWS_TLV_DEF(TXSTATUS, 4, 4) \
  61         BRCMF_FWS_TLV_DEF(PKTTAG, 5, 4) \
  62         BRCMF_FWS_TLV_DEF(MACDESC_ADD,  6, 8) \
  63         BRCMF_FWS_TLV_DEF(MACDESC_DEL, 7, 8) \
  64         BRCMF_FWS_TLV_DEF(RSSI, 8, 1) \
  65         BRCMF_FWS_TLV_DEF(INTERFACE_OPEN, 9, 1) \
  66         BRCMF_FWS_TLV_DEF(INTERFACE_CLOSE, 10, 1) \
  67         BRCMF_FWS_TLV_DEF(FIFO_CREDITBACK, 11, 6) \
  68         BRCMF_FWS_TLV_DEF(PENDING_TRAFFIC_BMP, 12, 2) \
  69         BRCMF_FWS_TLV_DEF(MAC_REQUEST_PACKET, 13, 3) \
  70         BRCMF_FWS_TLV_DEF(HOST_REORDER_RXPKTS, 14, 10) \
  71         BRCMF_FWS_TLV_DEF(TRANS_ID, 18, 6) \
  72         BRCMF_FWS_TLV_DEF(COMP_TXSTATUS, 19, 1) \
  73         BRCMF_FWS_TLV_DEF(FILLER, 255, 0)
  74
  75 /*
  76  * enum brcmf_fws_tlv_type - definition of tlv identifiers.
  77  */
  78 #define BRCMF_FWS_TLV_DEF(name, id, len) \
  79         BRCMF_FWS_TYPE_ ## name =  id,
  80 enum brcmf_fws_tlv_type {
  81         BRCMF_FWS_TLV_DEFLIST
  82         BRCMF_FWS_TYPE_INVALID
  83 };
  84 #undef BRCMF_FWS_TLV_DEF
  85
  86 /*
  87  * enum brcmf_fws_tlv_len - definition of tlv lengths.
  88  */
  89 #define BRCMF_FWS_TLV_DEF(name, id, len) \
  90         BRCMF_FWS_TYPE_ ## name ## _LEN = (len),
  91 enum brcmf_fws_tlv_len {
  92         BRCMF_FWS_TLV_DEFLIST
  93 };
  94 #undef BRCMF_FWS_TLV_DEF
  95
  96 /* AMPDU rx reordering definitions */
  97 #define BRCMF_RXREORDER_FLOWID_OFFSET           0
  98 #define BRCMF_RXREORDER_MAXIDX_OFFSET           2
  99 #define BRCMF_RXREORDER_FLAGS_OFFSET            4
 100 #define BRCMF_RXREORDER_CURIDX_OFFSET           6
 101 #define BRCMF_RXREORDER_EXPIDX_OFFSET           8
 102
 103 #define BRCMF_RXREORDER_DEL_FLOW                0x01
 104 #define BRCMF_RXREORDER_FLUSH_ALL               0x02
 105 #define BRCMF_RXREORDER_CURIDX_VALID            0x04
 106 #define BRCMF_RXREORDER_EXPIDX_VALID            0x08
 107 #define BRCMF_RXREORDER_NEW_HOLE                0x10
 108
 109 #ifdef DEBUG
 110 /*
 111  * brcmf_fws_tlv_names - array of tlv names.
 112  */
 113 #define BRCMF_FWS_TLV_DEF(name, id, len) \
 114         { id, #name },
 115 static struct {
 116         enum brcmf_fws_tlv_type id;
 117         const char *name;
 118 } brcmf_fws_tlv_names[] = {
 119         BRCMF_FWS_TLV_DEFLIST
 120 };
 121 #undef BRCMF_FWS_TLV_DEF
 122
 123
 124 static const char *brcmf_fws_get_tlv_name(enum brcmf_fws_tlv_type id)
 125 {
 126         int i;
 127
 128         for (i = 0; i < ARRAY_SIZE(brcmf_fws_tlv_names); i++)
 129                 if (brcmf_fws_tlv_names[i].id == id)
 130                         return brcmf_fws_tlv_names[i].name;
 131
 132         return "INVALID";
 133 }
 134 #else
 135 static const char *brcmf_fws_get_tlv_name(enum brcmf_fws_tlv_type id)
 136 {
 137         return "NODEBUG";
 138 }
 139 #endif /* DEBUG */
 140
 141 /*
 142  * The PKTTAG tlv has additional bytes when firmware-signalling
 143  * mode has REUSESEQ flag set.
 144  */
 145 #define BRCMF_FWS_TYPE_SEQ_LEN                          2
 146
 147 /*
 148  * flags used to enable tlv signalling from firmware.
 149  */
 150 #define BRCMF_FWS_FLAGS_RSSI_SIGNALS                    0x0001
 151 #define BRCMF_FWS_FLAGS_XONXOFF_SIGNALS                 0x0002
 152 #define BRCMF_FWS_FLAGS_CREDIT_STATUS_SIGNALS           0x0004
 153 #define BRCMF_FWS_FLAGS_HOST_PROPTXSTATUS_ACTIVE        0x0008
 154 #define BRCMF_FWS_FLAGS_PSQ_GENERATIONFSM_ENABLE        0x0010
 155 #define BRCMF_FWS_FLAGS_PSQ_ZERO_BUFFER_ENABLE          0x0020
 156 #define BRCMF_FWS_FLAGS_HOST_RXREORDER_ACTIVE           0x0040
 157
 158 #define BRCMF_FWS_MAC_DESC_TABLE_SIZE                   32
 159 #define BRCMF_FWS_MAC_DESC_ID_INVALID                   0xff
 160
 161 #define BRCMF_FWS_HOSTIF_FLOWSTATE_OFF                  0
 162 #define BRCMF_FWS_HOSTIF_FLOWSTATE_ON                   1
 163 #define BRCMF_FWS_FLOWCONTROL_HIWATER                   128
 164 #define BRCMF_FWS_FLOWCONTROL_LOWATER                   64
 165
 166 #define BRCMF_FWS_PSQ_PREC_COUNT                ((BRCMF_FWS_FIFO_COUNT + 1) * 2)
 167 #define BRCMF_FWS_PSQ_LEN                               256
 168
 169 #define BRCMF_FWS_HTOD_FLAG_PKTFROMHOST                 0x01
 170 #define BRCMF_FWS_HTOD_FLAG_PKT_REQUESTED               0x02
 171
 172 #define BRCMF_FWS_RET_OK_NOSCHEDULE                     0
 173 #define BRCMF_FWS_RET_OK_SCHEDULE                       1
 174
 175 #define BRCMF_FWS_MODE_REUSESEQ_SHIFT                   3       /* seq reuse */
 176 #define BRCMF_FWS_MODE_SET_REUSESEQ(x, val)     ((x) = \
 177                 ((x) & ~(1 << BRCMF_FWS_MODE_REUSESEQ_SHIFT)) | \
 178                 (((val) & 1) << BRCMF_FWS_MODE_REUSESEQ_SHIFT))
 179 #define BRCMF_FWS_MODE_GET_REUSESEQ(x)  \
 180                 (((x) >> BRCMF_FWS_MODE_REUSESEQ_SHIFT) & 1)
 181
 182 /**
 183  * enum brcmf_fws_skb_state - indicates processing state of skb.
 184  *
 185  * @BRCMF_FWS_SKBSTATE_NEW: sk_buff is newly arrived in the driver.
 186  * @BRCMF_FWS_SKBSTATE_DELAYED: sk_buff had to wait on queue.
 187  * @BRCMF_FWS_SKBSTATE_SUPPRESSED: sk_buff has been suppressed by firmware.
 188  * @BRCMF_FWS_SKBSTATE_TIM: allocated for TIM update info.
 189  */
 190 enum brcmf_fws_skb_state {
 191         BRCMF_FWS_SKBSTATE_NEW,
 192         BRCMF_FWS_SKBSTATE_DELAYED,
 193         BRCMF_FWS_SKBSTATE_SUPPRESSED,
 194         BRCMF_FWS_SKBSTATE_TIM
 195 };
 196
 197 /**
 198  * struct brcmf_skbuff_cb - control buffer associated with skbuff.
 199  *
 200  * @bus_flags: 2 bytes reserved for bus specific parameters
 201  * @if_flags: holds interface index and packet related flags.
 202  * @htod: host to device packet identifier (used in PKTTAG tlv).
 203  * @htod_seq: this 16-bit is original seq number for every suppress packet.
 204  * @state: transmit state of the packet.
 205  * @mac: descriptor related to destination for this packet.
 206  *
 207  * This information is stored in control buffer struct sk_buff::cb, which
 208  * provides 48 bytes of storage so this structure should not exceed that.
 209  */
 210 struct brcmf_skbuff_cb {
 211         u16 bus_flags;
 212         u16 if_flags;
 213         u32 htod;
 214         u16 htod_seq;
 215         enum brcmf_fws_skb_state state;
 216         struct brcmf_fws_mac_descriptor *mac;
 217 };
 218
 219 /*
 220  * macro casting skbuff control buffer to struct brcmf_skbuff_cb.
 221  */
 222 #define brcmf_skbcb(skb)        ((struct brcmf_skbuff_cb *)((skb)->cb))
 223
 224 /*
 225  * sk_buff control if flags
 226  *
 227  *      b[11]  - packet sent upon firmware request.
 228  *      b[10]  - packet only contains signalling data.
 229  *      b[9]   - packet is a tx packet.
 230  *      b[8]   - packet used requested credit
 231  *      b[7]   - interface in AP mode.
 232  *      b[3:0] - interface index.
 233  */
 234 #define BRCMF_SKB_IF_FLAGS_REQUESTED_MASK       0x0800
 235 #define BRCMF_SKB_IF_FLAGS_REQUESTED_SHIFT      11
 236 #define BRCMF_SKB_IF_FLAGS_SIGNAL_ONLY_MASK     0x0400
 237 #define BRCMF_SKB_IF_FLAGS_SIGNAL_ONLY_SHIFT    10
 238 #define BRCMF_SKB_IF_FLAGS_TRANSMIT_MASK        0x0200
 239 #define BRCMF_SKB_IF_FLAGS_TRANSMIT_SHIFT       9
 240 #define BRCMF_SKB_IF_FLAGS_REQ_CREDIT_MASK      0x0100
 241 #define BRCMF_SKB_IF_FLAGS_REQ_CREDIT_SHIFT     8
 242 #define BRCMF_SKB_IF_FLAGS_IF_AP_MASK           0x0080
 243 #define BRCMF_SKB_IF_FLAGS_IF_AP_SHIFT          7
 244 #define BRCMF_SKB_IF_FLAGS_INDEX_MASK           0x000f
 245 #define BRCMF_SKB_IF_FLAGS_INDEX_SHIFT          0
 246
 247 #define brcmf_skb_if_flags_set_field(skb, field, value) \
 248         brcmu_maskset16(&(brcmf_skbcb(skb)->if_flags), \
 249                         BRCMF_SKB_IF_FLAGS_ ## field ## _MASK, \
 250                         BRCMF_SKB_IF_FLAGS_ ## field ## _SHIFT, (value))
 251 #define brcmf_skb_if_flags_get_field(skb, field) \
 252         brcmu_maskget16(brcmf_skbcb(skb)->if_flags, \
 253                         BRCMF_SKB_IF_FLAGS_ ## field ## _MASK, \
 254                         BRCMF_SKB_IF_FLAGS_ ## field ## _SHIFT)
 255
 256 /*
 257  * sk_buff control packet identifier
 258  *
 259  * 32-bit packet identifier used in PKTTAG tlv from host to dongle.
 260  *
 261  * - Generated at the host (e.g. dhd)
 262  * - Seen as a generic sequence number by firmware except for the flags field.
 263  *
 264  * Generation   : b[31] => generation number for this packet [host->fw]
 265  *                         OR, current generation number [fw->host]
 266  * Flags        : b[30:27] => command, status flags
 267  * FIFO-AC      : b[26:24] => AC-FIFO id
 268  * h-slot       : b[23:8] => hanger-slot
 269  * freerun      : b[7:0] => A free running counter
 270  */
 271 #define BRCMF_SKB_HTOD_TAG_GENERATION_MASK              0x80000000
 272 #define BRCMF_SKB_HTOD_TAG_GENERATION_SHIFT             31
 273 #define BRCMF_SKB_HTOD_TAG_FLAGS_MASK                   0x78000000
 274 #define BRCMF_SKB_HTOD_TAG_FLAGS_SHIFT                  27
 275 #define BRCMF_SKB_HTOD_TAG_FIFO_MASK                    0x07000000
 276 #define BRCMF_SKB_HTOD_TAG_FIFO_SHIFT                   24
 277 #define BRCMF_SKB_HTOD_TAG_HSLOT_MASK                   0x00ffff00
 278 #define BRCMF_SKB_HTOD_TAG_HSLOT_SHIFT                  8
 279 #define BRCMF_SKB_HTOD_TAG_FREERUN_MASK                 0x000000ff
 280 #define BRCMF_SKB_HTOD_TAG_FREERUN_SHIFT                0
 281
 282 #define brcmf_skb_htod_tag_set_field(skb, field, value) \
 283         brcmu_maskset32(&(brcmf_skbcb(skb)->htod), \
 284                         BRCMF_SKB_HTOD_TAG_ ## field ## _MASK, \
 285                         BRCMF_SKB_HTOD_TAG_ ## field ## _SHIFT, (value))
 286 #define brcmf_skb_htod_tag_get_field(skb, field) \
 287         brcmu_maskget32(brcmf_skbcb(skb)->htod, \
 288                         BRCMF_SKB_HTOD_TAG_ ## field ## _MASK, \
 289                         BRCMF_SKB_HTOD_TAG_ ## field ## _SHIFT)
 290
 291 #define BRCMF_SKB_HTOD_SEQ_FROMFW_MASK                  0x2000
 292 #define BRCMF_SKB_HTOD_SEQ_FROMFW_SHIFT                 13
 293 #define BRCMF_SKB_HTOD_SEQ_FROMDRV_MASK                 0x1000
 294 #define BRCMF_SKB_HTOD_SEQ_FROMDRV_SHIFT                12
 295 #define BRCMF_SKB_HTOD_SEQ_NR_MASK                      0x0fff
 296 #define BRCMF_SKB_HTOD_SEQ_NR_SHIFT                     0
 297
 298 #define brcmf_skb_htod_seq_set_field(skb, field, value) \
 299         brcmu_maskset16(&(brcmf_skbcb(skb)->htod_seq), \
 300                         BRCMF_SKB_HTOD_SEQ_ ## field ## _MASK, \
 301                         BRCMF_SKB_HTOD_SEQ_ ## field ## _SHIFT, (value))
 302 #define brcmf_skb_htod_seq_get_field(skb, field) \
 303         brcmu_maskget16(brcmf_skbcb(skb)->htod_seq, \
 304                         BRCMF_SKB_HTOD_SEQ_ ## field ## _MASK, \
 305                         BRCMF_SKB_HTOD_SEQ_ ## field ## _SHIFT)
 306
 307 #define BRCMF_FWS_TXSTAT_GENERATION_MASK        0x80000000
 308 #define BRCMF_FWS_TXSTAT_GENERATION_SHIFT       31
 309 #define BRCMF_FWS_TXSTAT_FLAGS_MASK             0x78000000
 310 #define BRCMF_FWS_TXSTAT_FLAGS_SHIFT            27
 311 #define BRCMF_FWS_TXSTAT_FIFO_MASK              0x07000000
 312 #define BRCMF_FWS_TXSTAT_FIFO_SHIFT             24
 313 #define BRCMF_FWS_TXSTAT_HSLOT_MASK             0x00FFFF00
 314 #define BRCMF_FWS_TXSTAT_HSLOT_SHIFT            8
 315 #define BRCMF_FWS_TXSTAT_FREERUN_MASK           0x000000FF
 316 #define BRCMF_FWS_TXSTAT_FREERUN_SHIFT          0
 317
 318 #define brcmf_txstatus_get_field(txs, field) \
 319         brcmu_maskget32(txs, BRCMF_FWS_TXSTAT_ ## field ## _MASK, \
 320                         BRCMF_FWS_TXSTAT_ ## field ## _SHIFT)
 321
 322 /* How long to defer borrowing in jiffies */
 323 #define BRCMF_FWS_BORROW_DEFER_PERIOD           (HZ / 10)
 324
 325 /**
 326  * enum brcmf_fws_fifo - fifo indices used by dongle firmware.
 327  *
 328  * @BRCMF_FWS_FIFO_FIRST: first fifo, ie. background.
 329  * @BRCMF_FWS_FIFO_AC_BK: fifo for background traffic.
 330  * @BRCMF_FWS_FIFO_AC_BE: fifo for best-effort traffic.
 331  * @BRCMF_FWS_FIFO_AC_VI: fifo for video traffic.
 332  * @BRCMF_FWS_FIFO_AC_VO: fifo for voice traffic.
 333  * @BRCMF_FWS_FIFO_BCMC: fifo for broadcast/multicast (AP only).
 334  * @BRCMF_FWS_FIFO_ATIM: fifo for ATIM (AP only).
 335  * @BRCMF_FWS_FIFO_COUNT: number of fifos.
 336  */
 337 enum brcmf_fws_fifo {
 338         BRCMF_FWS_FIFO_FIRST,
 339         BRCMF_FWS_FIFO_AC_BK = BRCMF_FWS_FIFO_FIRST,
 340         BRCMF_FWS_FIFO_AC_BE,
 341         BRCMF_FWS_FIFO_AC_VI,
 342         BRCMF_FWS_FIFO_AC_VO,
 343         BRCMF_FWS_FIFO_BCMC,
 344         BRCMF_FWS_FIFO_ATIM,
 345         BRCMF_FWS_FIFO_COUNT
 346 };
 347
 348 /**
 349  * enum brcmf_fws_txstatus - txstatus flag values.
 350  *
 351  * @BRCMF_FWS_TXSTATUS_DISCARD:
 352  *      host is free to discard the packet.
 353  * @BRCMF_FWS_TXSTATUS_CORE_SUPPRESS:
 354  *      802.11 core suppressed the packet.
 355  * @BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS:
 356  *      firmware suppress the packet as device is already in PS mode.
 357  * @BRCMF_FWS_TXSTATUS_FW_TOSSED:
 358  *      firmware tossed the packet.
 359  * @BRCMF_FWS_TXSTATUS_HOST_TOSSED:
 360  *      host tossed the packet.
 361  */
 362 enum brcmf_fws_txstatus {
 363         BRCMF_FWS_TXSTATUS_DISCARD,
 364         BRCMF_FWS_TXSTATUS_CORE_SUPPRESS,
 365         BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS,
 366         BRCMF_FWS_TXSTATUS_FW_TOSSED,
 367         BRCMF_FWS_TXSTATUS_HOST_TOSSED
 368 };
 369
 370 enum brcmf_fws_fcmode {
 371         BRCMF_FWS_FCMODE_NONE,
 372         BRCMF_FWS_FCMODE_IMPLIED_CREDIT,
 373         BRCMF_FWS_FCMODE_EXPLICIT_CREDIT
 374 };
 375
 376 enum brcmf_fws_mac_desc_state {
 377         BRCMF_FWS_STATE_OPEN = 1,
 378         BRCMF_FWS_STATE_CLOSE
 379 };
 380
 381 /**
 382  * struct brcmf_fws_mac_descriptor - firmware signalling data per node/interface
 383  *
 384  * @occupied: slot is in use.
 385  * @mac_handle: handle for mac entry determined by firmware.
 386  * @interface_id: interface index.
 387  * @state: current state.
 388  * @suppressed: mac entry is suppressed.
 389  * @generation: generation bit.
 390  * @ac_bitmap: ac queue bitmap.
 391  * @requested_credit: credits requested by firmware.
 392  * @ea: ethernet address.
 393  * @seq: per-node free-running sequence.
 394  * @psq: power-save queue.
 395  * @transit_count: packet in transit to firmware.
 396  */
 397 struct brcmf_fws_mac_descriptor {
 398         char name[16];
 399         u8 occupied;
 400         u8 mac_handle;
 401         u8 interface_id;
 402         u8 state;
 403         bool suppressed;
 404         u8 generation;
 405         u8 ac_bitmap;
 406         u8 requested_credit;
 407         u8 requested_packet;
 408         u8 ea[ETH_ALEN];
 409         u8 seq[BRCMF_FWS_FIFO_COUNT];
 410         struct pktq psq;
 411         int transit_count;
 412         int suppr_transit_count;
 413         bool send_tim_signal;
 414         u8 traffic_pending_bmp;
 415         u8 traffic_lastreported_bmp;
 416 };
 417
 418 #define BRCMF_FWS_HANGER_MAXITEMS       1024
 419
 420 /**
 421  * enum brcmf_fws_hanger_item_state - state of hanger item.
 422  *
 423  * @BRCMF_FWS_HANGER_ITEM_STATE_FREE: item is free for use.
 424  * @BRCMF_FWS_HANGER_ITEM_STATE_INUSE: item is in use.
 425  * @BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED: item was suppressed.
 426  */
 427 enum brcmf_fws_hanger_item_state {
 428         BRCMF_FWS_HANGER_ITEM_STATE_FREE = 1,
 429         BRCMF_FWS_HANGER_ITEM_STATE_INUSE,
 430         BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED
 431 };
 432
 433
 434 /**
 435  * struct brcmf_fws_hanger_item - single entry for tx pending packet.
 436  *
 437  * @state: entry is either free or occupied.
 438  * @pkt: packet itself.
 439  */
 440 struct brcmf_fws_hanger_item {
 441         enum brcmf_fws_hanger_item_state state;
 442         struct sk_buff *pkt;
 443 };
 444
 445 /**
 446  * struct brcmf_fws_hanger - holds packets awaiting firmware txstatus.
 447  *
 448  * @pushed: packets pushed to await txstatus.
 449  * @popped: packets popped upon handling txstatus.
 450  * @failed_to_push: packets that could not be pushed.
 451  * @failed_to_pop: packets that could not be popped.
 452  * @failed_slotfind: packets for which failed to find an entry.
 453  * @slot_pos: last returned item index for a free entry.
 454  * @items: array of hanger items.
 455  */
 456 struct brcmf_fws_hanger {
 457         u32 pushed;
 458         u32 popped;
 459         u32 failed_to_push;
 460         u32 failed_to_pop;
 461         u32 failed_slotfind;
 462         u32 slot_pos;
 463         struct brcmf_fws_hanger_item items[BRCMF_FWS_HANGER_MAXITEMS];
 464 };
 465
 466 struct brcmf_fws_macdesc_table {
 467         struct brcmf_fws_mac_descriptor nodes[BRCMF_FWS_MAC_DESC_TABLE_SIZE];
 468         struct brcmf_fws_mac_descriptor iface[BRCMF_MAX_IFS];
 469         struct brcmf_fws_mac_descriptor other;
 470 };
 471
 472 struct brcmf_fws_stats {
 473         u32 tlv_parse_failed;
 474         u32 tlv_invalid_type;
 475         u32 header_only_pkt;
 476         u32 header_pulls;
 477         u32 pkt2bus;
 478         u32 send_pkts[5];
 479         u32 requested_sent[5];
 480         u32 generic_error;
 481         u32 mac_update_failed;
 482         u32 mac_ps_update_failed;
 483         u32 if_update_failed;
 484         u32 packet_request_failed;
 485         u32 credit_request_failed;
 486         u32 rollback_success;
 487         u32 rollback_failed;
 488         u32 delayq_full_error;
 489         u32 supprq_full_error;
 490         u32 txs_indicate;
 491         u32 txs_discard;
 492         u32 txs_supp_core;
 493         u32 txs_supp_ps;
 494         u32 txs_tossed;
 495         u32 txs_host_tossed;
 496         u32 bus_flow_block;
 497         u32 fws_flow_block;
 498 };
 499
 500 struct brcmf_fws_info {
 501         struct brcmf_pub *drvr;
 502         spinlock_t spinlock;
 503         ulong flags;
 504         struct brcmf_fws_stats stats;
 505         struct brcmf_fws_hanger hanger;
 506         enum brcmf_fws_fcmode fcmode;
 507         bool fw_signals;
 508         bool bcmc_credit_check;
 509         struct brcmf_fws_macdesc_table desc;
 510         struct workqueue_struct *fws_wq;
 511         struct work_struct fws_dequeue_work;
 512         u32 fifo_enqpkt[BRCMF_FWS_FIFO_COUNT];
 513         int fifo_credit[BRCMF_FWS_FIFO_COUNT];
 514         int credits_borrowed[BRCMF_FWS_FIFO_AC_VO + 1];
 515         int deq_node_pos[BRCMF_FWS_FIFO_COUNT];
 516         u32 fifo_credit_map;
 517         u32 fifo_delay_map;
 518         unsigned long borrow_defer_timestamp;
 519         bool bus_flow_blocked;
 520         bool creditmap_received;
 521         u8 mode;
 522         bool avoid_queueing;
 523 };
 524
 525 /*
 526  * brcmf_fws_prio2fifo - mapping from 802.1d priority to firmware fifo index.
 527  */
 528 static const int brcmf_fws_prio2fifo[] = {
 529         BRCMF_FWS_FIFO_AC_BE,
 530         BRCMF_FWS_FIFO_AC_BK,
 531         BRCMF_FWS_FIFO_AC_BK,
 532         BRCMF_FWS_FIFO_AC_BE,
 533         BRCMF_FWS_FIFO_AC_VI,
 534         BRCMF_FWS_FIFO_AC_VI,
 535         BRCMF_FWS_FIFO_AC_VO,
 536         BRCMF_FWS_FIFO_AC_VO
 537 };
 538
 539 #define BRCMF_FWS_TLV_DEF(name, id, len) \
 540         case BRCMF_FWS_TYPE_ ## name: \
 541                 return len;
 542
 543 /**
 544  * brcmf_fws_get_tlv_len() - returns defined length for given tlv id.
 545  *
 546  * @fws: firmware-signalling information.
 547  * @id: identifier of the TLV.
 548  *
 549  * Return: the specified length for the given TLV; Otherwise -EINVAL.
 550  */
 551 static int brcmf_fws_get_tlv_len(struct brcmf_fws_info *fws,
 552                                  enum brcmf_fws_tlv_type id)
 553 {
 554         switch (id) {
 555         BRCMF_FWS_TLV_DEFLIST
 556         default:
 557                 fws->stats.tlv_invalid_type++;
 558                 break;
 559         }
 560         return -EINVAL;
 561 }
 562 #undef BRCMF_FWS_TLV_DEF
 563
 564 static void brcmf_fws_lock(struct brcmf_fws_info *fws)
 565                 __acquires(&fws->spinlock)
 566 {
 567         spin_lock_irqsave(&fws->spinlock, fws->flags);
 568 }
 569
 570 static void brcmf_fws_unlock(struct brcmf_fws_info *fws)
 571                 __releases(&fws->spinlock)
 572 {
 573         spin_unlock_irqrestore(&fws->spinlock, fws->flags);
 574 }
 575
 576 static bool brcmf_fws_ifidx_match(struct sk_buff *skb, void *arg)
 577 {
 578         u32 ifidx = brcmf_skb_if_flags_get_field(skb, INDEX);
 579         return ifidx == *(int *)arg;
 580 }
 581
 582 static void brcmf_fws_hanger_init(struct brcmf_fws_hanger *hanger)
 583 {
 584         int i;
 585
 586         memset(hanger, 0, sizeof(*hanger));
 587         for (i = 0; i < ARRAY_SIZE(hanger->items); i++)
 588                 hanger->items[i].state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 589 }
 590
 591 static u32 brcmf_fws_hanger_get_free_slot(struct brcmf_fws_hanger *h)
 592 {
 593         u32 i;
 594
 595         i = (h->slot_pos + 1) % BRCMF_FWS_HANGER_MAXITEMS;
 596
 597         while (i != h->slot_pos) {
 598                 if (h->items[i].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
 599                         h->slot_pos = i;
 600                         goto done;
 601                 }
 602                 i++;
 603                 if (i == BRCMF_FWS_HANGER_MAXITEMS)
 604                         i = 0;
 605         }
 606         brcmf_err("all slots occupied\n");
 607         h->failed_slotfind++;
 608         i = BRCMF_FWS_HANGER_MAXITEMS;
 609 done:
 610         return i;
 611 }
 612
 613 static int brcmf_fws_hanger_pushpkt(struct brcmf_fws_hanger *h,
 614                                     struct sk_buff *pkt, u32 slot_id)
 615 {
 616         if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
 617                 return -ENOENT;
 618
 619         if (h->items[slot_id].state != BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
 620                 brcmf_err("slot is not free\n");
 621                 h->failed_to_push++;
 622                 return -EINVAL;
 623         }
 624
 625         h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_INUSE;
 626         h->items[slot_id].pkt = pkt;
 627         h->pushed++;
 628         return 0;
 629 }
 630
 631 static inline int brcmf_fws_hanger_poppkt(struct brcmf_fws_hanger *h,
 632                                           u32 slot_id, struct sk_buff **pktout,
 633                                           bool remove_item)
 634 {
 635         if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
 636                 return -ENOENT;
 637
 638         if (h->items[slot_id].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
 639                 brcmf_err("entry not in use\n");
 640                 h->failed_to_pop++;
 641                 return -EINVAL;
 642         }
 643
 644         *pktout = h->items[slot_id].pkt;
 645         if (remove_item) {
 646                 h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 647                 h->items[slot_id].pkt = NULL;
 648                 h->popped++;
 649         }
 650         return 0;
 651 }
 652
 653 static void brcmf_fws_psq_flush(struct brcmf_fws_info *fws, struct pktq *q,
 654                                 int ifidx)
 655 {
 656         struct brcmf_fws_hanger_item *hi;
 657         bool (*matchfn)(struct sk_buff *, void *) = NULL;
 658         struct sk_buff *skb;
 659         int prec;
 660         u32 hslot;
 661
 662         if (ifidx != -1)
 663                 matchfn = brcmf_fws_ifidx_match;
 664         for (prec = 0; prec < q->num_prec; prec++) {
 665                 skb = brcmu_pktq_pdeq_match(q, prec, matchfn, &ifidx);
 666                 while (skb) {
 667                         hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
 668                         hi = &fws->hanger.items[hslot];
 669                         WARN_ON(skb != hi->pkt);
 670                         hi->state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 671                         brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb,
 672                                                 true);
 673                         brcmu_pkt_buf_free_skb(skb);
 674                         skb = brcmu_pktq_pdeq_match(q, prec, matchfn, &ifidx);
 675                 }
 676         }
 677 }
 678
 679 static int brcmf_fws_hanger_mark_suppressed(struct brcmf_fws_hanger *h,
 680                                             u32 slot_id)
 681 {
 682         if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
 683                 return -ENOENT;
 684
 685         if (h->items[slot_id].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
 686                 brcmf_err("entry not in use\n");
 687                 return -EINVAL;
 688         }
 689
 690         h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED;
 691         return 0;
 692 }
 693
 694 static void brcmf_fws_hanger_cleanup(struct brcmf_fws_info *fws,
 695                                      bool (*fn)(struct sk_buff *, void *),
 696                                      int ifidx)
 697 {
 698         struct brcmf_fws_hanger *h = &fws->hanger;
 699         struct sk_buff *skb;
 700         int i;
 701         enum brcmf_fws_hanger_item_state s;
 702
 703         for (i = 0; i < ARRAY_SIZE(h->items); i++) {
 704                 s = h->items[i].state;
 705                 if (s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE ||
 706                     s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED) {
 707                         skb = h->items[i].pkt;
 708                         if (fn == NULL || fn(skb, &ifidx)) {
 709                                 /* suppress packets freed from psq */
 710                                 if (s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE)
 711                                         brcmu_pkt_buf_free_skb(skb);
 712                                 h->items[i].state =
 713                                         BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 714                         }
 715                 }
 716         }
 717 }
 718
 719 static void brcmf_fws_macdesc_set_name(struct brcmf_fws_info *fws,
 720                                        struct brcmf_fws_mac_descriptor *desc)
 721 {
 722         if (desc == &fws->desc.other)
 723                 strlcpy(desc->name, "MAC-OTHER", sizeof(desc->name));
 724         else if (desc->mac_handle)
 725                 scnprintf(desc->name, sizeof(desc->name), "MAC-%d:%d",
 726                           desc->mac_handle, desc->interface_id);
 727         else
 728                 scnprintf(desc->name, sizeof(desc->name), "MACIF:%d",
 729                           desc->interface_id);
 730 }
 731
 732 static void brcmf_fws_macdesc_init(struct brcmf_fws_mac_descriptor *desc,
 733                                    u8 *addr, u8 ifidx)
 734 {
 735         brcmf_dbg(TRACE,
 736                   "enter: desc %p ea=%pM, ifidx=%u\n", desc, addr, ifidx);
 737         desc->occupied = 1;
 738         desc->state = BRCMF_FWS_STATE_OPEN;
 739         desc->requested_credit = 0;
 740         desc->requested_packet = 0;
 741         /* depending on use may need ifp->bsscfgidx instead */
 742         desc->interface_id = ifidx;
 743         desc->ac_bitmap = 0xff; /* update this when handling APSD */
 744         if (addr)
 745                 memcpy(&desc->ea[0], addr, ETH_ALEN);
 746 }
 747
 748 static
 749 void brcmf_fws_macdesc_deinit(struct brcmf_fws_mac_descriptor *desc)
 750 {
 751         brcmf_dbg(TRACE,
 752                   "enter: ea=%pM, ifidx=%u\n", desc->ea, desc->interface_id);
 753         desc->occupied = 0;
 754         desc->state = BRCMF_FWS_STATE_CLOSE;
 755         desc->requested_credit = 0;
 756         desc->requested_packet = 0;
 757 }
 758
 759 static struct brcmf_fws_mac_descriptor *
 760 brcmf_fws_macdesc_lookup(struct brcmf_fws_info *fws, u8 *ea)
 761 {
 762         struct brcmf_fws_mac_descriptor *entry;
 763         int i;
 764
 765         if (ea == NULL)
 766                 return ERR_PTR(-EINVAL);
 767
 768         entry = &fws->desc.nodes[0];
 769         for (i = 0; i < ARRAY_SIZE(fws->desc.nodes); i++) {
 770                 if (entry->occupied && !memcmp(entry->ea, ea, ETH_ALEN))
 771                         return entry;
 772                 entry++;
 773         }
 774
 775         return ERR_PTR(-ENOENT);
 776 }
 777
 778 static struct brcmf_fws_mac_descriptor*
 779 brcmf_fws_macdesc_find(struct brcmf_fws_info *fws, struct brcmf_if *ifp, u8 *da)
 780 {
 781         struct brcmf_fws_mac_descriptor *entry = &fws->desc.other;
 782         bool multicast;
 783
 784         multicast = is_multicast_ether_addr(da);
 785
 786         /* Multicast destination, STA and P2P clients get the interface entry.
 787          * STA/GC gets the Mac Entry for TDLS destinations, TDLS destinations
 788          * have their own entry.
 789          */
 790         if (multicast && ifp->fws_desc) {
 791                 entry = ifp->fws_desc;
 792                 goto done;
 793         }
 794
 795         entry = brcmf_fws_macdesc_lookup(fws, da);
 796         if (IS_ERR(entry))
 797                 entry = ifp->fws_desc;
 798
 799 done:
 800         return entry;
 801 }
 802
 803 static bool brcmf_fws_macdesc_closed(struct brcmf_fws_info *fws,
 804                                      struct brcmf_fws_mac_descriptor *entry,
 805                                      int fifo)
 806 {
 807         struct brcmf_fws_mac_descriptor *if_entry;
 808         bool closed;
 809
 810         /* for unique destination entries the related interface
 811          * may be closed.
 812          */
 813         if (entry->mac_handle) {
 814                 if_entry = &fws->desc.iface[entry->interface_id];
 815                 if (if_entry->state == BRCMF_FWS_STATE_CLOSE)
 816                         return true;
 817         }
 818         /* an entry is closed when the state is closed and
 819          * the firmware did not request anything.
 820          */
 821         closed = entry->state == BRCMF_FWS_STATE_CLOSE &&
 822                  !entry->requested_credit && !entry->requested_packet;
 823
 824         /* Or firmware does not allow traffic for given fifo */
 825         return closed || !(entry->ac_bitmap & BIT(fifo));
 826 }
 827
 828 static void brcmf_fws_macdesc_cleanup(struct brcmf_fws_info *fws,
 829                                       struct brcmf_fws_mac_descriptor *entry,
 830                                       int ifidx)
 831 {
 832         if (entry->occupied && (ifidx == -1 || ifidx == entry->interface_id)) {
 833                 brcmf_fws_psq_flush(fws, &entry->psq, ifidx);
 834                 entry->occupied = !!(entry->psq.len);
 835         }
 836 }
 837
 838 static void brcmf_fws_bus_txq_cleanup(struct brcmf_fws_info *fws,
 839                                       bool (*fn)(struct sk_buff *, void *),
 840                                       int ifidx)
 841 {
 842         struct brcmf_fws_hanger_item *hi;
 843         struct pktq *txq;
 844         struct sk_buff *skb;
 845         int prec;
 846         u32 hslot;
 847
 848         txq = brcmf_bus_gettxq(fws->drvr->bus_if);
 849         if (IS_ERR(txq)) {
 850                 brcmf_dbg(TRACE, "no txq to clean up\n");
 851                 return;
 852         }
 853
 854         for (prec = 0; prec < txq->num_prec; prec++) {
 855                 skb = brcmu_pktq_pdeq_match(txq, prec, fn, &ifidx);
 856                 while (skb) {
 857                         hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
 858                         hi = &fws->hanger.items[hslot];
 859                         WARN_ON(skb != hi->pkt);
 860                         hi->state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 861                         brcmu_pkt_buf_free_skb(skb);
 862                         skb = brcmu_pktq_pdeq_match(txq, prec, fn, &ifidx);
 863                 }
 864         }
 865 }
 866
 867 static void brcmf_fws_cleanup(struct brcmf_fws_info *fws, int ifidx)
 868 {
 869         int i;
 870         struct brcmf_fws_mac_descriptor *table;
 871         bool (*matchfn)(struct sk_buff *, void *) = NULL;
 872
 873         if (fws == NULL)
 874                 return;
 875
 876         if (ifidx != -1)
 877                 matchfn = brcmf_fws_ifidx_match;
 878
 879         /* cleanup individual nodes */
 880         table = &fws->desc.nodes[0];
 881         for (i = 0; i < ARRAY_SIZE(fws->desc.nodes); i++)
 882                 brcmf_fws_macdesc_cleanup(fws, &table[i], ifidx);
 883
 884         brcmf_fws_macdesc_cleanup(fws, &fws->desc.other, ifidx);
 885         brcmf_fws_bus_txq_cleanup(fws, matchfn, ifidx);
 886         brcmf_fws_hanger_cleanup(fws, matchfn, ifidx);
 887 }
 888
 889 static u8 brcmf_fws_hdrpush(struct brcmf_fws_info *fws, struct sk_buff *skb)
 890 {
 891         struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
 892         u8 *wlh;
 893         u16 data_offset = 0;
 894         u8 fillers;
 895         __le32 pkttag = cpu_to_le32(brcmf_skbcb(skb)->htod);
 896         __le16 pktseq = cpu_to_le16(brcmf_skbcb(skb)->htod_seq);
 897
 898         brcmf_dbg(TRACE, "enter: %s, idx=%d hslot=%d htod %X seq %X\n",
 899                   entry->name, brcmf_skb_if_flags_get_field(skb, INDEX),
 900                   (le32_to_cpu(pkttag) >> 8) & 0xffff,
 901                   brcmf_skbcb(skb)->htod, brcmf_skbcb(skb)->htod_seq);
 902         if (entry->send_tim_signal)
 903                 data_offset += 2 + BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN;
 904         if (BRCMF_FWS_MODE_GET_REUSESEQ(fws->mode))
 905                 data_offset += BRCMF_FWS_TYPE_SEQ_LEN;
 906         /* +2 is for Type[1] and Len[1] in TLV, plus TIM signal */
 907         data_offset += 2 + BRCMF_FWS_TYPE_PKTTAG_LEN;
 908         fillers = round_up(data_offset, 4) - data_offset;
 909         data_offset += fillers;
 910
 911         skb_push(skb, data_offset);
 912         wlh = skb->data;
 913
 914         wlh[0] = BRCMF_FWS_TYPE_PKTTAG;
 915         wlh[1] = BRCMF_FWS_TYPE_PKTTAG_LEN;
 916         memcpy(&wlh[2], &pkttag, sizeof(pkttag));
 917         if (BRCMF_FWS_MODE_GET_REUSESEQ(fws->mode)) {
 918                 wlh[1] += BRCMF_FWS_TYPE_SEQ_LEN;
 919                 memcpy(&wlh[2 + BRCMF_FWS_TYPE_PKTTAG_LEN], &pktseq,
 920                        sizeof(pktseq));
 921         }
 922         wlh += wlh[1] + 2;
 923
 924         if (entry->send_tim_signal) {
 925                 entry->send_tim_signal = 0;
 926                 wlh[0] = BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP;
 927                 wlh[1] = BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN;
 928                 wlh[2] = entry->mac_handle;
 929                 wlh[3] = entry->traffic_pending_bmp;
 930                 brcmf_dbg(TRACE, "adding TIM info: handle %d bmp 0x%X\n",
 931                           entry->mac_handle, entry->traffic_pending_bmp);
 932                 wlh += BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN + 2;
 933                 entry->traffic_lastreported_bmp = entry->traffic_pending_bmp;
 934         }
 935         if (fillers)
 936                 memset(wlh, BRCMF_FWS_TYPE_FILLER, fillers);
 937
 938         return (u8)(data_offset >> 2);
 939 }
 940
 941 static bool brcmf_fws_tim_update(struct brcmf_fws_info *fws,
 942                                  struct brcmf_fws_mac_descriptor *entry,
 943                                  int fifo, bool send_immediately)
 944 {
 945         struct sk_buff *skb;
 946         struct brcmf_skbuff_cb *skcb;
 947         s32 err;
 948         u32 len;
 949         u8 data_offset;
 950         int ifidx;
 951
 952         /* check delayedQ and suppressQ in one call using bitmap */
 953         if (brcmu_pktq_mlen(&entry->psq, 3 << (fifo * 2)) == 0)
 954                 entry->traffic_pending_bmp &= ~NBITVAL(fifo);
 955         else
 956                 entry->traffic_pending_bmp |= NBITVAL(fifo);
 957
 958         entry->send_tim_signal = false;
 959         if (entry->traffic_lastreported_bmp != entry->traffic_pending_bmp)
 960                 entry->send_tim_signal = true;
 961         if (send_immediately && entry->send_tim_signal &&
 962             entry->state == BRCMF_FWS_STATE_CLOSE) {
 963                 /* create a dummy packet and sent that. The traffic          */
 964                 /* bitmap info will automatically be attached to that packet */
 965                 len = BRCMF_FWS_TYPE_PKTTAG_LEN + 2 +
 966                       BRCMF_FWS_TYPE_SEQ_LEN +
 967                       BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN + 2 +
 968                       4 + fws->drvr->hdrlen;
 969                 skb = brcmu_pkt_buf_get_skb(len);
 970                 if (skb == NULL)
 971                         return false;
 972                 skb_pull(skb, len);
 973                 skcb = brcmf_skbcb(skb);
 974                 skcb->mac = entry;
 975                 skcb->state = BRCMF_FWS_SKBSTATE_TIM;
 976                 skcb->htod = 0;
 977                 skcb->htod_seq = 0;
 978                 data_offset = brcmf_fws_hdrpush(fws, skb);
 979                 ifidx = brcmf_skb_if_flags_get_field(skb, INDEX);
 980                 brcmf_fws_unlock(fws);
 981                 err = brcmf_proto_txdata(fws->drvr, ifidx, data_offset, skb);
 982                 brcmf_fws_lock(fws);
 983                 if (err)
 984                         brcmu_pkt_buf_free_skb(skb);
 985                 return true;
 986         }
 987         return false;
 988 }
 989
 990 static void
 991 brcmf_fws_flow_control_check(struct brcmf_fws_info *fws, struct pktq *pq,
 992                              u8 if_id)
 993 {
 994         struct brcmf_if *ifp = brcmf_get_ifp(fws->drvr, if_id);
 995
 996         if (WARN_ON(!ifp))
 997                 return;
 998
 999         if ((ifp->netif_stop & BRCMF_NETIF_STOP_REASON_FWS_FC) &&
1000             pq->len <= BRCMF_FWS_FLOWCONTROL_LOWATER)
1001                 brcmf_txflowblock_if(ifp,
1002                                      BRCMF_NETIF_STOP_REASON_FWS_FC, false);
1003         if (!(ifp->netif_stop & BRCMF_NETIF_STOP_REASON_FWS_FC) &&
1004             pq->len >= BRCMF_FWS_FLOWCONTROL_HIWATER) {
1005                 fws->stats.fws_flow_block++;
1006                 brcmf_txflowblock_if(ifp, BRCMF_NETIF_STOP_REASON_FWS_FC, true);
1007         }
1008         return;
1009 }
1010
1011 static int brcmf_fws_rssi_indicate(struct brcmf_fws_info *fws, s8 rssi)
1012 {
1013         brcmf_dbg(CTL, "rssi %d\n", rssi);
1014         return 0;
1015 }
1016
1017 static
1018 int brcmf_fws_macdesc_indicate(struct brcmf_fws_info *fws, u8 type, u8 *data)
1019 {
1020         struct brcmf_fws_mac_descriptor *entry, *existing;
1021         u8 mac_handle;
1022         u8 ifidx;
1023         u8 *addr;
1024
1025         mac_handle = *data++;
1026         ifidx = *data++;
1027         addr = data;
1028
1029         entry = &fws->desc.nodes[mac_handle & 0x1F];
1030         if (type == BRCMF_FWS_TYPE_MACDESC_DEL) {
1031                 if (entry->occupied) {
1032                         brcmf_dbg(TRACE, "deleting %s mac %pM\n",
1033                                   entry->name, addr);
1034                         brcmf_fws_lock(fws);
1035                         brcmf_fws_macdesc_cleanup(fws, entry, -1);
1036                         brcmf_fws_macdesc_deinit(entry);
1037                         brcmf_fws_unlock(fws);
1038                 } else
1039                         fws->stats.mac_update_failed++;
1040                 return 0;
1041         }
1042
1043         existing = brcmf_fws_macdesc_lookup(fws, addr);
1044         if (IS_ERR(existing)) {
1045                 if (!entry->occupied) {
1046                         brcmf_fws_lock(fws);
1047                         entry->mac_handle = mac_handle;
1048                         brcmf_fws_macdesc_init(entry, addr, ifidx);
1049                         brcmf_fws_macdesc_set_name(fws, entry);
1050                         brcmu_pktq_init(&entry->psq, BRCMF_FWS_PSQ_PREC_COUNT,
1051                                         BRCMF_FWS_PSQ_LEN);
1052                         brcmf_fws_unlock(fws);
1053                         brcmf_dbg(TRACE, "add %s mac %pM\n", entry->name, addr);
1054                 } else {
1055                         fws->stats.mac_update_failed++;
1056                 }
1057         } else {
1058                 if (entry != existing) {
1059                         brcmf_dbg(TRACE, "copy mac %s\n", existing->name);
1060                         brcmf_fws_lock(fws);
1061                         memcpy(entry, existing,
1062                                offsetof(struct brcmf_fws_mac_descriptor, psq));
1063                         entry->mac_handle = mac_handle;
1064                         brcmf_fws_macdesc_deinit(existing);
1065                         brcmf_fws_macdesc_set_name(fws, entry);
1066                         brcmf_fws_unlock(fws);
1067                         brcmf_dbg(TRACE, "relocate %s mac %pM\n", entry->name,
1068                                   addr);
1069                 } else {
1070                         brcmf_dbg(TRACE, "use existing\n");
1071                         WARN_ON(entry->mac_handle != mac_handle);
1072                         /* TODO: what should we do here: continue, reinit, .. */
1073                 }
1074         }
1075         return 0;
1076 }
1077
1078 static int brcmf_fws_macdesc_state_indicate(struct brcmf_fws_info *fws,
1079                                             u8 type, u8 *data)
1080 {
1081         struct brcmf_fws_mac_descriptor *entry;
1082         u8 mac_handle;
1083         int ret;
1084
1085         mac_handle = data[0];
1086         entry = &fws->desc.nodes[mac_handle & 0x1F];
1087         if (!entry->occupied) {
1088                 fws->stats.mac_ps_update_failed++;
1089                 return -ESRCH;
1090         }
1091         brcmf_fws_lock(fws);
1092         /* a state update should wipe old credits */
1093         entry->requested_credit = 0;
1094         entry->requested_packet = 0;
1095         if (type == BRCMF_FWS_TYPE_MAC_OPEN) {
1096                 entry->state = BRCMF_FWS_STATE_OPEN;
1097                 ret = BRCMF_FWS_RET_OK_SCHEDULE;
1098         } else {
1099                 entry->state = BRCMF_FWS_STATE_CLOSE;
1100                 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_BK, false);
1101                 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_BE, false);
1102                 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_VI, false);
1103                 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_VO, true);
1104                 ret = BRCMF_FWS_RET_OK_NOSCHEDULE;
1105         }
1106         brcmf_fws_unlock(fws);
1107         return ret;
1108 }
1109
1110 static int brcmf_fws_interface_state_indicate(struct brcmf_fws_info *fws,
1111                                               u8 type, u8 *data)
1112 {
1113         struct brcmf_fws_mac_descriptor *entry;
1114         u8 ifidx;
1115         int ret;
1116
1117         ifidx = data[0];
1118
1119         if (ifidx >= BRCMF_MAX_IFS) {
1120                 ret = -ERANGE;
1121                 goto fail;
1122         }
1123
1124         entry = &fws->desc.iface[ifidx];
1125         if (!entry->occupied) {
1126                 ret = -ESRCH;
1127                 goto fail;
1128         }
1129
1130         brcmf_dbg(TRACE, "%s (%d): %s\n", brcmf_fws_get_tlv_name(type), type,
1131                   entry->name);
1132         brcmf_fws_lock(fws);
1133         switch (type) {
1134         case BRCMF_FWS_TYPE_INTERFACE_OPEN:
1135                 entry->state = BRCMF_FWS_STATE_OPEN;
1136                 ret = BRCMF_FWS_RET_OK_SCHEDULE;
1137                 break;
1138         case BRCMF_FWS_TYPE_INTERFACE_CLOSE:
1139                 entry->state = BRCMF_FWS_STATE_CLOSE;
1140                 ret = BRCMF_FWS_RET_OK_NOSCHEDULE;
1141                 break;
1142         default:
1143                 ret = -EINVAL;
1144                 brcmf_fws_unlock(fws);
1145                 goto fail;
1146         }
1147         brcmf_fws_unlock(fws);
1148         return ret;
1149
1150 fail:
1151         fws->stats.if_update_failed++;
1152         return ret;
1153 }
1154
1155 static int brcmf_fws_request_indicate(struct brcmf_fws_info *fws, u8 type,
1156                                       u8 *data)
1157 {
1158         struct brcmf_fws_mac_descriptor *entry;
1159
1160         entry = &fws->desc.nodes[data[1] & 0x1F];
1161         if (!entry->occupied) {
1162                 if (type == BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT)
1163                         fws->stats.credit_request_failed++;
1164                 else
1165                         fws->stats.packet_request_failed++;
1166                 return -ESRCH;
1167         }
1168
1169         brcmf_dbg(TRACE, "%s (%d): %s cnt %d bmp %d\n",
1170                   brcmf_fws_get_tlv_name(type), type, entry->name,
1171                   data[0], data[2]);
1172         brcmf_fws_lock(fws);
1173         if (type == BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT)
1174                 entry->requested_credit = data[0];
1175         else
1176                 entry->requested_packet = data[0];
1177
1178         entry->ac_bitmap = data[2];
1179         brcmf_fws_unlock(fws);
1180         return BRCMF_FWS_RET_OK_SCHEDULE;
1181 }
1182
1183 static void
1184 brcmf_fws_macdesc_use_req_credit(struct brcmf_fws_mac_descriptor *entry,
1185                                  struct sk_buff *skb)
1186 {
1187         if (entry->requested_credit > 0) {
1188                 entry->requested_credit--;
1189                 brcmf_skb_if_flags_set_field(skb, REQUESTED, 1);
1190                 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 1);
1191                 if (entry->state != BRCMF_FWS_STATE_CLOSE)
1192                         brcmf_err("requested credit set while mac not closed!\n");
1193         } else if (entry->requested_packet > 0) {
1194                 entry->requested_packet--;
1195                 brcmf_skb_if_flags_set_field(skb, REQUESTED, 1);
1196                 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 0);
1197                 if (entry->state != BRCMF_FWS_STATE_CLOSE)
1198                         brcmf_err("requested packet set while mac not closed!\n");
1199         } else {
1200                 brcmf_skb_if_flags_set_field(skb, REQUESTED, 0);
1201                 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 0);
1202         }
1203 }
1204
1205 static void brcmf_fws_macdesc_return_req_credit(struct sk_buff *skb)
1206 {
1207         struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
1208
1209         if ((brcmf_skb_if_flags_get_field(skb, REQ_CREDIT)) &&
1210             (entry->state == BRCMF_FWS_STATE_CLOSE))
1211                 entry->requested_credit++;
1212 }
1213
1214 static void brcmf_fws_return_credits(struct brcmf_fws_info *fws,
1215                                      u8 fifo, u8 credits)
1216 {
1217         int lender_ac;
1218         int *borrowed;
1219         int *fifo_credit;
1220
1221         if (!credits)
1222                 return;
1223
1224         fws->fifo_credit_map |= 1 << fifo;
1225
1226         if ((fifo == BRCMF_FWS_FIFO_AC_BE) &&
1227             (fws->credits_borrowed[0])) {
1228                 for (lender_ac = BRCMF_FWS_FIFO_AC_VO; lender_ac >= 0;
1229                      lender_ac--) {
1230                         borrowed = &fws->credits_borrowed[lender_ac];
1231                         if (*borrowed) {
1232                                 fws->fifo_credit_map |= (1 << lender_ac);
1233                                 fifo_credit = &fws->fifo_credit[lender_ac];
1234                                 if (*borrowed >= credits) {
1235                                         *borrowed -= credits;
1236                                         *fifo_credit += credits;
1237                                         return;
1238                                 } else {
1239                                         credits -= *borrowed;
1240                                         *fifo_credit += *borrowed;
1241                                         *borrowed = 0;
1242                                 }
1243                         }
1244                 }
1245         }
1246
1247         fws->fifo_credit[fifo] += credits;
1248 }
1249
1250 static void brcmf_fws_schedule_deq(struct brcmf_fws_info *fws)
1251 {
1252         /* only schedule dequeue when there are credits for delayed traffic */
1253         if ((fws->fifo_credit_map & fws->fifo_delay_map) ||
1254             (!brcmf_fws_fc_active(fws) && fws->fifo_delay_map))
1255                 queue_work(fws->fws_wq, &fws->fws_dequeue_work);
1256 }
1257
1258 static int brcmf_fws_enq(struct brcmf_fws_info *fws,
1259                          enum brcmf_fws_skb_state state, int fifo,
1260                          struct sk_buff *p)
1261 {
1262         int prec = 2 * fifo;
1263         u32 *qfull_stat = &fws->stats.delayq_full_error;
1264         struct brcmf_fws_mac_descriptor *entry;
1265         struct pktq *pq;
1266         struct sk_buff_head *queue;
1267         struct sk_buff *p_head;
1268         struct sk_buff *p_tail;
1269         u32 fr_new;
1270         u32 fr_compare;
1271
1272         entry = brcmf_skbcb(p)->mac;
1273         if (entry == NULL) {
1274                 brcmf_err("no mac descriptor found for skb %p\n", p);
1275                 return -ENOENT;
1276         }
1277
1278         brcmf_dbg(DATA, "enter: fifo %d skb %p\n", fifo, p);
1279         if (state == BRCMF_FWS_SKBSTATE_SUPPRESSED) {
1280                 prec += 1;
1281                 qfull_stat = &fws->stats.supprq_full_error;
1282
1283                 /* Fix out of order delivery of frames. Dont assume frame    */
1284                 /* can be inserted at the end, but look for correct position */
1285                 pq = &entry->psq;
1286                 if (pktq_full(pq) || pktq_pfull(pq, prec)) {
1287                         *qfull_stat += 1;
1288                         return -ENFILE;
1289                 }
1290                 queue = &pq->q[prec].skblist;
1291
1292                 p_head = skb_peek(queue);
1293                 p_tail = skb_peek_tail(queue);
1294                 fr_new = brcmf_skb_htod_tag_get_field(p, FREERUN);
1295
1296                 while (p_head != p_tail) {
1297                         fr_compare = brcmf_skb_htod_tag_get_field(p_tail,
1298                                                                   FREERUN);
1299                         /* be sure to handle wrap of 256 */
1300                         if (((fr_new > fr_compare) &&
1301                              ((fr_new - fr_compare) < 128)) ||
1302                             ((fr_new < fr_compare) &&
1303                              ((fr_compare - fr_new) > 128)))
1304                                 break;
1305                         p_tail = skb_queue_prev(queue, p_tail);
1306                 }
1307                 /* Position found. Determine what to do */
1308                 if (p_tail == NULL) {
1309                         /* empty list */
1310                         __skb_queue_tail(queue, p);
1311                 } else {
1312                         fr_compare = brcmf_skb_htod_tag_get_field(p_tail,
1313                                                                   FREERUN);
1314                         if (((fr_new > fr_compare) &&
1315                              ((fr_new - fr_compare) < 128)) ||
1316                             ((fr_new < fr_compare) &&
1317                              ((fr_compare - fr_new) > 128))) {
1318                                 /* After tail */
1319                                 __skb_queue_after(queue, p_tail, p);
1320                         } else {
1321                                 /* Before tail */
1322                                 __skb_insert(p, p_tail->prev, p_tail, queue);
1323                         }
1324                 }
1325
1326                 /* Complete the counters and statistics */
1327                 pq->len++;
1328                 if (pq->hi_prec < prec)
1329                         pq->hi_prec = (u8) prec;
1330         } else if (brcmu_pktq_penq(&entry->psq, prec, p) == NULL) {
1331                 *qfull_stat += 1;
1332                 return -ENFILE;
1333         }
1334
1335         /* increment total enqueued packet count */
1336         fws->fifo_delay_map |= 1 << fifo;
1337         fws->fifo_enqpkt[fifo]++;
1338
1339         /* update the sk_buff state */
1340         brcmf_skbcb(p)->state = state;
1341
1342         /*
1343          * A packet has been pushed so update traffic
1344          * availability bitmap, if applicable
1345          */
1346         brcmf_fws_tim_update(fws, entry, fifo, true);
1347         brcmf_fws_flow_control_check(fws, &entry->psq,
1348                                      brcmf_skb_if_flags_get_field(p, INDEX));
1349         return 0;
1350 }
1351
1352 static struct sk_buff *brcmf_fws_deq(struct brcmf_fws_info *fws, int fifo)
1353 {
1354         struct brcmf_fws_mac_descriptor *table;
1355         struct brcmf_fws_mac_descriptor *entry;
1356         struct sk_buff *p;
1357         int num_nodes;
1358         int node_pos;
1359         int prec_out;
1360         int pmsk;
1361         int i;
1362
1363         table = (struct brcmf_fws_mac_descriptor *)&fws->desc;
1364         num_nodes = sizeof(fws->desc) / sizeof(struct brcmf_fws_mac_descriptor);
1365         node_pos = fws->deq_node_pos[fifo];
1366
1367         for (i = 0; i < num_nodes; i++) {
1368                 entry = &table[(node_pos + i) % num_nodes];
1369                 if (!entry->occupied ||
1370                     brcmf_fws_macdesc_closed(fws, entry, fifo))
1371                         continue;
1372
1373                 if (entry->suppressed)
1374                         pmsk = 2;
1375                 else
1376                         pmsk = 3;
1377                 p = brcmu_pktq_mdeq(&entry->psq, pmsk << (fifo * 2), &prec_out);
1378                 if (p == NULL) {
1379                         if (entry->suppressed) {
1380                                 if (entry->suppr_transit_count)
1381                                         continue;
1382                                 entry->suppressed = false;
1383                                 p = brcmu_pktq_mdeq(&entry->psq,
1384                                                     1 << (fifo * 2), &prec_out);
1385                         }
1386                 }
1387                 if  (p == NULL)
1388                         continue;
1389
1390                 brcmf_fws_macdesc_use_req_credit(entry, p);
1391
1392                 /* move dequeue position to ensure fair round-robin */
1393                 fws->deq_node_pos[fifo] = (node_pos + i + 1) % num_nodes;
1394                 brcmf_fws_flow_control_check(fws, &entry->psq,
1395                                              brcmf_skb_if_flags_get_field(p,
1396                                                                           INDEX)
1397                                              );
1398                 /*
1399                  * A packet has been picked up, update traffic
1400                  * availability bitmap, if applicable
1401                  */
1402                 brcmf_fws_tim_update(fws, entry, fifo, false);
1403
1404                 /*
1405                  * decrement total enqueued fifo packets and
1406                  * clear delay bitmap if done.
1407                  */
1408                 fws->fifo_enqpkt[fifo]--;
1409                 if (fws->fifo_enqpkt[fifo] == 0)
1410                         fws->fifo_delay_map &= ~(1 << fifo);
1411                 goto done;
1412         }
1413         p = NULL;
1414 done:
1415         brcmf_dbg(DATA, "exit: fifo %d skb %p\n", fifo, p);
1416         return p;
1417 }
1418
1419 static int brcmf_fws_txstatus_suppressed(struct brcmf_fws_info *fws, int fifo,
1420                                          struct sk_buff *skb,
1421                                          u32 genbit, u16 seq)
1422 {
1423         struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
1424         u32 hslot;
1425         int ret;
1426
1427         hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1428
1429         /* this packet was suppressed */
1430         if (!entry->suppressed) {
1431                 entry->suppressed = true;
1432                 entry->suppr_transit_count = entry->transit_count;
1433                 brcmf_dbg(DATA, "suppress %s: transit %d\n",
1434                           entry->name, entry->transit_count);
1435         }
1436
1437         entry->generation = genbit;
1438
1439         brcmf_skb_htod_tag_set_field(skb, GENERATION, genbit);
1440         brcmf_skbcb(skb)->htod_seq = seq;
1441         if (brcmf_skb_htod_seq_get_field(skb, FROMFW)) {
1442                 brcmf_skb_htod_seq_set_field(skb, FROMDRV, 1);
1443                 brcmf_skb_htod_seq_set_field(skb, FROMFW, 0);
1444         } else {
1445                 brcmf_skb_htod_seq_set_field(skb, FROMDRV, 0);
1446         }
1447         ret = brcmf_fws_enq(fws, BRCMF_FWS_SKBSTATE_SUPPRESSED, fifo, skb);
1448
1449         if (ret != 0) {
1450                 /* suppress q is full drop this packet */
1451                 brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb, true);
1452         } else {
1453                 /* Mark suppressed to avoid a double free during wlfc cleanup */
1454                 brcmf_fws_hanger_mark_suppressed(&fws->hanger, hslot);
1455         }
1456
1457         return ret;
1458 }
1459
1460 static int
1461 brcmf_fws_txs_process(struct brcmf_fws_info *fws, u8 flags, u32 hslot,
1462                       u32 genbit, u16 seq)
1463 {
1464         u32 fifo;
1465         int ret;
1466         bool remove_from_hanger = true;
1467         struct sk_buff *skb;
1468         struct brcmf_skbuff_cb *skcb;
1469         struct brcmf_fws_mac_descriptor *entry = NULL;
1470         struct brcmf_if *ifp;
1471
1472         brcmf_dbg(DATA, "flags %d\n", flags);
1473
1474         if (flags == BRCMF_FWS_TXSTATUS_DISCARD)
1475                 fws->stats.txs_discard++;
1476         else if (flags == BRCMF_FWS_TXSTATUS_CORE_SUPPRESS) {
1477                 fws->stats.txs_supp_core++;
1478                 remove_from_hanger = false;
1479         } else if (flags == BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS) {
1480                 fws->stats.txs_supp_ps++;
1481                 remove_from_hanger = false;
1482         } else if (flags == BRCMF_FWS_TXSTATUS_FW_TOSSED)
1483                 fws->stats.txs_tossed++;
1484         else if (flags == BRCMF_FWS_TXSTATUS_HOST_TOSSED)
1485                 fws->stats.txs_host_tossed++;
1486         else
1487                 brcmf_err("unexpected txstatus\n");
1488
1489         ret = brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb,
1490                                       remove_from_hanger);
1491         if (ret != 0) {
1492                 brcmf_err("no packet in hanger slot: hslot=%d\n", hslot);
1493                 return ret;
1494         }
1495
1496         skcb = brcmf_skbcb(skb);
1497         entry = skcb->mac;
1498         if (WARN_ON(!entry)) {
1499                 brcmu_pkt_buf_free_skb(skb);
1500                 return -EINVAL;
1501         }
1502         entry->transit_count--;
1503         if (entry->suppressed && entry->suppr_transit_count)
1504                 entry->suppr_transit_count--;
1505
1506         brcmf_dbg(DATA, "%s flags %d htod %X seq %X\n", entry->name, flags,
1507                   skcb->htod, seq);
1508
1509         /* pick up the implicit credit from this packet */
1510         fifo = brcmf_skb_htod_tag_get_field(skb, FIFO);
1511         if ((fws->fcmode == BRCMF_FWS_FCMODE_IMPLIED_CREDIT) ||
1512             (brcmf_skb_if_flags_get_field(skb, REQ_CREDIT)) ||
1513             (flags == BRCMF_FWS_TXSTATUS_HOST_TOSSED)) {
1514                 brcmf_fws_return_credits(fws, fifo, 1);
1515                 brcmf_fws_schedule_deq(fws);
1516         }
1517         brcmf_fws_macdesc_return_req_credit(skb);
1518
1519         ret = brcmf_proto_hdrpull(fws->drvr, false, skb, &ifp);
1520         if (ret) {
1521                 brcmu_pkt_buf_free_skb(skb);
1522                 return -EINVAL;
1523         }
1524         if (!remove_from_hanger)
1525                 ret = brcmf_fws_txstatus_suppressed(fws, fifo, skb,
1526                                                     genbit, seq);
1527         if (remove_from_hanger || ret)
1528                 brcmf_txfinalize(ifp, skb, true);
1529
1530         return 0;
1531 }
1532
1533 static int brcmf_fws_fifocreditback_indicate(struct brcmf_fws_info *fws,
1534                                              u8 *data)
1535 {
1536         int i;
1537
1538         if (fws->fcmode != BRCMF_FWS_FCMODE_EXPLICIT_CREDIT) {
1539                 brcmf_dbg(INFO, "ignored\n");
1540                 return BRCMF_FWS_RET_OK_NOSCHEDULE;
1541         }
1542
1543         brcmf_dbg(DATA, "enter: data %pM\n", data);
1544         brcmf_fws_lock(fws);
1545         for (i = 0; i < BRCMF_FWS_FIFO_COUNT; i++)
1546                 brcmf_fws_return_credits(fws, i, data[i]);
1547
1548         brcmf_dbg(DATA, "map: credit %x delay %x\n", fws->fifo_credit_map,
1549                   fws->fifo_delay_map);
1550         brcmf_fws_unlock(fws);
1551         return BRCMF_FWS_RET_OK_SCHEDULE;
1552 }
1553
1554 static int brcmf_fws_txstatus_indicate(struct brcmf_fws_info *fws, u8 *data)
1555 {
1556         __le32 status_le;
1557         __le16 seq_le;
1558         u32 status;
1559         u32 hslot;
1560         u32 genbit;
1561         u8 flags;
1562         u16 seq;
1563
1564         fws->stats.txs_indicate++;
1565         memcpy(&status_le, data, sizeof(status_le));
1566         status = le32_to_cpu(status_le);
1567         flags = brcmf_txstatus_get_field(status, FLAGS);
1568         hslot = brcmf_txstatus_get_field(status, HSLOT);
1569         genbit = brcmf_txstatus_get_field(status, GENERATION);
1570         if (BRCMF_FWS_MODE_GET_REUSESEQ(fws->mode)) {
1571                 memcpy(&seq_le, &data[BRCMF_FWS_TYPE_PKTTAG_LEN],
1572                        sizeof(seq_le));
1573                 seq = le16_to_cpu(seq_le);
1574         } else {
1575                 seq = 0;
1576         }
1577
1578         brcmf_fws_lock(fws);
1579         brcmf_fws_txs_process(fws, flags, hslot, genbit, seq);
1580         brcmf_fws_unlock(fws);
1581         return BRCMF_FWS_RET_OK_NOSCHEDULE;
1582 }
1583
1584 static int brcmf_fws_dbg_seqnum_check(struct brcmf_fws_info *fws, u8 *data)
1585 {
1586         __le32 timestamp;
1587
1588         memcpy(&timestamp, &data[2], sizeof(timestamp));
1589         brcmf_dbg(CTL, "received: seq %d, timestamp %d\n", data[1],
1590                   le32_to_cpu(timestamp));
1591         return 0;
1592 }
1593
1594 static int brcmf_fws_notify_credit_map(struct brcmf_if *ifp,
1595                                        const struct brcmf_event_msg *e,
1596                                        void *data)
1597 {
1598         struct brcmf_fws_info *fws = drvr_to_fws(ifp->drvr);
1599         int i;
1600         u8 *credits = data;
1601
1602         if (e->datalen < BRCMF_FWS_FIFO_COUNT) {
1603                 brcmf_err("event payload too small (%d)\n", e->datalen);
1604                 return -EINVAL;
1605         }
1606         if (fws->creditmap_received)
1607                 return 0;
1608
1609         fws->creditmap_received = true;
1610
1611         brcmf_dbg(TRACE, "enter: credits %pM\n", credits);
1612         brcmf_fws_lock(fws);
1613         for (i = 0; i < ARRAY_SIZE(fws->fifo_credit); i++) {
1614                 if (*credits)
1615                         fws->fifo_credit_map |= 1 << i;
1616                 else
1617                         fws->fifo_credit_map &= ~(1 << i);
1618                 fws->fifo_credit[i] = *credits++;
1619         }
1620         brcmf_fws_schedule_deq(fws);
1621         brcmf_fws_unlock(fws);
1622         return 0;
1623 }
1624
1625 static int brcmf_fws_notify_bcmc_credit_support(struct brcmf_if *ifp,
1626                                                 const struct brcmf_event_msg *e,
1627                                                 void *data)
1628 {
1629         struct brcmf_fws_info *fws = drvr_to_fws(ifp->drvr);
1630
1631         if (fws) {
1632                 brcmf_fws_lock(fws);
1633                 fws->bcmc_credit_check = true;
1634                 brcmf_fws_unlock(fws);
1635         }
1636         return 0;
1637 }
1638
1639 static void brcmf_rxreorder_get_skb_list(struct brcmf_ampdu_rx_reorder *rfi,
1640                                          u8 start, u8 end,
1641                                          struct sk_buff_head *skb_list)
1642 {
1643         /* initialize return list */
1644         __skb_queue_head_init(skb_list);
1645
1646         if (rfi->pend_pkts == 0) {
1647                 brcmf_dbg(INFO, "no packets in reorder queue\n");
1648                 return;
1649         }
1650
1651         do {
1652                 if (rfi->pktslots[start]) {
1653                         __skb_queue_tail(skb_list, rfi->pktslots[start]);
1654                         rfi->pktslots[start] = NULL;
1655                 }
1656                 start++;
1657                 if (start > rfi->max_idx)
1658                         start = 0;
1659         } while (start != end);
1660         rfi->pend_pkts -= skb_queue_len(skb_list);
1661 }
1662
1663 void brcmf_fws_rxreorder(struct brcmf_if *ifp, struct sk_buff *pkt)
1664 {
1665         u8 *reorder_data;
1666         u8 flow_id, max_idx, cur_idx, exp_idx, end_idx;
1667         struct brcmf_ampdu_rx_reorder *rfi;
1668         struct sk_buff_head reorder_list;
1669         struct sk_buff *pnext;
1670         u8 flags;
1671         u32 buf_size;
1672
1673         reorder_data = ((struct brcmf_skb_reorder_data *)pkt->cb)->reorder;
1674         flow_id = reorder_data[BRCMF_RXREORDER_FLOWID_OFFSET];
1675         flags = reorder_data[BRCMF_RXREORDER_FLAGS_OFFSET];
1676
1677         /* validate flags and flow id */
1678         if (flags == 0xFF) {
1679                 brcmf_err("invalid flags...so ignore this packet\n");
1680                 brcmf_netif_rx(ifp, pkt);
1681                 return;
1682         }
1683
1684         rfi = ifp->drvr->reorder_flows[flow_id];
1685         if (flags & BRCMF_RXREORDER_DEL_FLOW) {
1686                 brcmf_dbg(INFO, "flow-%d: delete\n",
1687                           flow_id);
1688
1689                 if (rfi == NULL) {
1690                         brcmf_dbg(INFO, "received flags to cleanup, but no flow (%d) yet\n",
1691                                   flow_id);
1692                         brcmf_netif_rx(ifp, pkt);
1693                         return;
1694                 }
1695
1696                 brcmf_rxreorder_get_skb_list(rfi, rfi->exp_idx, rfi->exp_idx,
1697                                              &reorder_list);
1698                 /* add the last packet */
1699                 __skb_queue_tail(&reorder_list, pkt);
1700                 kfree(rfi);
1701                 ifp->drvr->reorder_flows[flow_id] = NULL;
1702                 goto netif_rx;
1703         }
1704         /* from here on we need a flow reorder instance */
1705         if (rfi == NULL) {
1706                 buf_size = sizeof(*rfi);
1707                 max_idx = reorder_data[BRCMF_RXREORDER_MAXIDX_OFFSET];
1708
1709                 buf_size += (max_idx + 1) * sizeof(pkt);
1710
1711                 /* allocate space for flow reorder info */
1712                 brcmf_dbg(INFO, "flow-%d: start, maxidx %d\n",
1713                           flow_id, max_idx);
1714                 rfi = kzalloc(buf_size, GFP_ATOMIC);
1715                 if (rfi == NULL) {
1716                         brcmf_err("failed to alloc buffer\n");
1717                         brcmf_netif_rx(ifp, pkt);
1718                         return;
1719                 }
1720
1721                 ifp->drvr->reorder_flows[flow_id] = rfi;
1722                 rfi->pktslots = (struct sk_buff **)(rfi + 1);
1723                 rfi->max_idx = max_idx;
1724         }
1725         if (flags & BRCMF_RXREORDER_NEW_HOLE)  {
1726                 if (rfi->pend_pkts) {
1727                         brcmf_rxreorder_get_skb_list(rfi, rfi->exp_idx,
1728                                                      rfi->exp_idx,
1729                                                      &reorder_list);
1730                         WARN_ON(rfi->pend_pkts);
1731                 } else {
1732                         __skb_queue_head_init(&reorder_list);
1733                 }
1734                 rfi->cur_idx = reorder_data[BRCMF_RXREORDER_CURIDX_OFFSET];
1735                 rfi->exp_idx = reorder_data[BRCMF_RXREORDER_EXPIDX_OFFSET];
1736                 rfi->max_idx = reorder_data[BRCMF_RXREORDER_MAXIDX_OFFSET];
1737                 rfi->pktslots[rfi->cur_idx] = pkt;
1738                 rfi->pend_pkts++;
1739                 brcmf_dbg(DATA, "flow-%d: new hole %d (%d), pending %d\n",
1740                           flow_id, rfi->cur_idx, rfi->exp_idx, rfi->pend_pkts);
1741         } else if (flags & BRCMF_RXREORDER_CURIDX_VALID) {
1742                 cur_idx = reorder_data[BRCMF_RXREORDER_CURIDX_OFFSET];
1743                 exp_idx = reorder_data[BRCMF_RXREORDER_EXPIDX_OFFSET];
1744
1745                 if ((exp_idx == rfi->exp_idx) && (cur_idx != rfi->exp_idx)) {
1746                         /* still in the current hole */
1747                         /* enqueue the current on the buffer chain */
1748                         if (rfi->pktslots[cur_idx] != NULL) {
1749                                 brcmf_dbg(INFO, "HOLE: ERROR buffer pending..free it\n");
1750                                 brcmu_pkt_buf_free_skb(rfi->pktslots[cur_idx]);
1751                                 rfi->pktslots[cur_idx] = NULL;
1752                         }
1753                         rfi->pktslots[cur_idx] = pkt;
1754                         rfi->pend_pkts++;
1755                         rfi->cur_idx = cur_idx;
1756                         brcmf_dbg(DATA, "flow-%d: store pkt %d (%d), pending %d\n",
1757                                   flow_id, cur_idx, exp_idx, rfi->pend_pkts);
1758
1759                         /* can return now as there is no reorder
1760                          * list to process.
1761                          */
1762                         return;
1763                 }
1764                 if (rfi->exp_idx == cur_idx) {
1765                         if (rfi->pktslots[cur_idx] != NULL) {
1766                                 brcmf_dbg(INFO, "error buffer pending..free it\n");
1767                                 brcmu_pkt_buf_free_skb(rfi->pktslots[cur_idx]);
1768                                 rfi->pktslots[cur_idx] = NULL;
1769                         }
1770                         rfi->pktslots[cur_idx] = pkt;
1771                         rfi->pend_pkts++;
1772
1773                         /* got the expected one. flush from current to expected
1774                          * and update expected
1775                          */
1776                         brcmf_dbg(DATA, "flow-%d: expected %d (%d), pending %d\n",
1777                                   flow_id, cur_idx, exp_idx, rfi->pend_pkts);
1778
1779                         rfi->cur_idx = cur_idx;
1780                         rfi->exp_idx = exp_idx;
1781
1782                         brcmf_rxreorder_get_skb_list(rfi, cur_idx, exp_idx,
1783                                                      &reorder_list);
1784                         brcmf_dbg(DATA, "flow-%d: freeing buffers %d, pending %d\n",
1785                                   flow_id, skb_queue_len(&reorder_list),
1786                                   rfi->pend_pkts);
1787                 } else {
1788                         u8 end_idx;
1789
1790                         brcmf_dbg(DATA, "flow-%d (0x%x): both moved, old %d/%d, new %d/%d\n",
1791                                   flow_id, flags, rfi->cur_idx, rfi->exp_idx,
1792                                   cur_idx, exp_idx);
1793                         if (flags & BRCMF_RXREORDER_FLUSH_ALL)
1794                                 end_idx = rfi->exp_idx;
1795                         else
1796                                 end_idx = exp_idx;
1797
1798                         /* flush pkts first */
1799                         brcmf_rxreorder_get_skb_list(rfi, rfi->exp_idx, end_idx,
1800                                                      &reorder_list);
1801
1802                         if (exp_idx == ((cur_idx + 1) % (rfi->max_idx + 1))) {
1803                                 __skb_queue_tail(&reorder_list, pkt);
1804                         } else {
1805                                 rfi->pktslots[cur_idx] = pkt;
1806                                 rfi->pend_pkts++;
1807                         }
1808                         rfi->exp_idx = exp_idx;
1809                         rfi->cur_idx = cur_idx;
1810                 }
1811         } else {
1812                 /* explicity window move updating the expected index */
1813                 exp_idx = reorder_data[BRCMF_RXREORDER_EXPIDX_OFFSET];
1814
1815                 brcmf_dbg(DATA, "flow-%d (0x%x): change expected: %d -> %d\n",
1816                           flow_id, flags, rfi->exp_idx, exp_idx);
1817                 if (flags & BRCMF_RXREORDER_FLUSH_ALL)
1818                         end_idx =  rfi->exp_idx;
1819                 else
1820                         end_idx =  exp_idx;
1821
1822                 brcmf_rxreorder_get_skb_list(rfi, rfi->exp_idx, end_idx,
1823                                              &reorder_list);
1824                 __skb_queue_tail(&reorder_list, pkt);
1825                 /* set the new expected idx */
1826                 rfi->exp_idx = exp_idx;
1827         }
1828 netif_rx:
1829         skb_queue_walk_safe(&reorder_list, pkt, pnext) {
1830                 __skb_unlink(pkt, &reorder_list);
1831                 brcmf_netif_rx(ifp, pkt);
1832         }
1833 }
1834
1835 void brcmf_fws_hdrpull(struct brcmf_if *ifp, s16 siglen, struct sk_buff *skb)
1836 {
1837         struct brcmf_skb_reorder_data *rd;
1838         struct brcmf_fws_info *fws = drvr_to_fws(ifp->drvr);
1839         u8 *signal_data;
1840         s16 data_len;
1841         u8 type;
1842         u8 len;
1843         u8 *data;
1844         s32 status;
1845         s32 err;
1846
1847         brcmf_dbg(HDRS, "enter: ifidx %d, skblen %u, sig %d\n",
1848                   ifp->ifidx, skb->len, siglen);
1849
1850         WARN_ON(siglen > skb->len);
1851
1852         if (!siglen)
1853                 return;
1854         /* if flow control disabled, skip to packet data and leave */
1855         if ((!fws) || (!fws->fw_signals)) {
1856                 skb_pull(skb, siglen);
1857                 return;
1858         }
1859
1860         fws->stats.header_pulls++;
1861         data_len = siglen;
1862         signal_data = skb->data;
1863
1864         status = BRCMF_FWS_RET_OK_NOSCHEDULE;
1865         while (data_len > 0) {
1866                 /* extract tlv info */
1867                 type = signal_data[0];
1868
1869                 /* FILLER type is actually not a TLV, but
1870                  * a single byte that can be skipped.
1871                  */
1872                 if (type == BRCMF_FWS_TYPE_FILLER) {
1873                         signal_data += 1;
1874                         data_len -= 1;
1875                         continue;
1876                 }
1877                 len = signal_data[1];
1878                 data = signal_data + 2;
1879
1880                 brcmf_dbg(HDRS, "tlv type=%s (%d), len=%d (%d)\n",
1881                           brcmf_fws_get_tlv_name(type), type, len,
1882                           brcmf_fws_get_tlv_len(fws, type));
1883
1884                 /* abort parsing when length invalid */
1885                 if (data_len < len + 2)
1886                         break;
1887
1888                 if (len < brcmf_fws_get_tlv_len(fws, type))
1889                         break;
1890
1891                 err = BRCMF_FWS_RET_OK_NOSCHEDULE;
1892                 switch (type) {
1893                 case BRCMF_FWS_TYPE_COMP_TXSTATUS:
1894                         break;
1895                 case BRCMF_FWS_TYPE_HOST_REORDER_RXPKTS:
1896                         rd = (struct brcmf_skb_reorder_data *)skb->cb;
1897                         rd->reorder = data;
1898                         break;
1899                 case BRCMF_FWS_TYPE_MACDESC_ADD:
1900                 case BRCMF_FWS_TYPE_MACDESC_DEL:
1901                         brcmf_fws_macdesc_indicate(fws, type, data);
1902                         break;
1903                 case BRCMF_FWS_TYPE_MAC_OPEN:
1904                 case BRCMF_FWS_TYPE_MAC_CLOSE:
1905                         err = brcmf_fws_macdesc_state_indicate(fws, type, data);
1906                         break;
1907                 case BRCMF_FWS_TYPE_INTERFACE_OPEN:
1908                 case BRCMF_FWS_TYPE_INTERFACE_CLOSE:
1909                         err = brcmf_fws_interface_state_indicate(fws, type,
1910                                                                  data);
1911                         break;
1912                 case BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT:
1913                 case BRCMF_FWS_TYPE_MAC_REQUEST_PACKET:
1914                         err = brcmf_fws_request_indicate(fws, type, data);
1915                         break;
1916                 case BRCMF_FWS_TYPE_TXSTATUS:
1917                         brcmf_fws_txstatus_indicate(fws, data);
1918                         break;
1919                 case BRCMF_FWS_TYPE_FIFO_CREDITBACK:
1920                         err = brcmf_fws_fifocreditback_indicate(fws, data);
1921                         break;
1922                 case BRCMF_FWS_TYPE_RSSI:
1923                         brcmf_fws_rssi_indicate(fws, *data);
1924                         break;
1925                 case BRCMF_FWS_TYPE_TRANS_ID:
1926                         brcmf_fws_dbg_seqnum_check(fws, data);
1927                         break;
1928                 case BRCMF_FWS_TYPE_PKTTAG:
1929                 case BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP:
1930                 default:
1931                         fws->stats.tlv_invalid_type++;
1932                         break;
1933                 }
1934                 if (err == BRCMF_FWS_RET_OK_SCHEDULE)
1935                         status = BRCMF_FWS_RET_OK_SCHEDULE;
1936                 signal_data += len + 2;
1937                 data_len -= len + 2;
1938         }
1939
1940         if (data_len != 0)
1941                 fws->stats.tlv_parse_failed++;
1942
1943         if (status == BRCMF_FWS_RET_OK_SCHEDULE)
1944                 brcmf_fws_schedule_deq(fws);
1945
1946         /* signalling processing result does
1947          * not affect the actual ethernet packet.
1948          */
1949         skb_pull(skb, siglen);
1950
1951         /* this may be a signal-only packet
1952          */
1953         if (skb->len == 0)
1954                 fws->stats.header_only_pkt++;
1955 }
1956
1957 static u8 brcmf_fws_precommit_skb(struct brcmf_fws_info *fws, int fifo,
1958                                    struct sk_buff *p)
1959 {
1960         struct brcmf_skbuff_cb *skcb = brcmf_skbcb(p);
1961         struct brcmf_fws_mac_descriptor *entry = skcb->mac;
1962         u8 flags;
1963
1964         if (skcb->state != BRCMF_FWS_SKBSTATE_SUPPRESSED)
1965                 brcmf_skb_htod_tag_set_field(p, GENERATION, entry->generation);
1966         flags = BRCMF_FWS_HTOD_FLAG_PKTFROMHOST;
1967         if (brcmf_skb_if_flags_get_field(p, REQUESTED)) {
1968                 /*
1969                  * Indicate that this packet is being sent in response to an
1970                  * explicit request from the firmware side.
1971                  */
1972                 flags |= BRCMF_FWS_HTOD_FLAG_PKT_REQUESTED;
1973         }
1974         brcmf_skb_htod_tag_set_field(p, FLAGS, flags);
1975         return brcmf_fws_hdrpush(fws, p);
1976 }
1977
1978 static void brcmf_fws_rollback_toq(struct brcmf_fws_info *fws,
1979                                    struct sk_buff *skb, int fifo)
1980 {
1981         struct brcmf_fws_mac_descriptor *entry;
1982         struct sk_buff *pktout;
1983         int qidx, hslot;
1984         int rc = 0;
1985
1986         entry = brcmf_skbcb(skb)->mac;
1987         if (entry->occupied) {
1988                 qidx = 2 * fifo;
1989                 if (brcmf_skbcb(skb)->state == BRCMF_FWS_SKBSTATE_SUPPRESSED)
1990                         qidx++;
1991
1992                 pktout = brcmu_pktq_penq_head(&entry->psq, qidx, skb);
1993                 if (pktout == NULL) {
1994                         brcmf_err("%s queue %d full\n", entry->name, qidx);
1995                         rc = -ENOSPC;
1996                 }
1997         } else {
1998                 brcmf_err("%s entry removed\n", entry->name);
1999                 rc = -ENOENT;
2000         }
2001
2002         if (rc) {
2003                 fws->stats.rollback_failed++;
2004                 hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
2005                 brcmf_fws_txs_process(fws, BRCMF_FWS_TXSTATUS_HOST_TOSSED,
2006                                       hslot, 0, 0);
2007         } else {
2008                 fws->stats.rollback_success++;
2009                 brcmf_fws_return_credits(fws, fifo, 1);
2010                 brcmf_fws_macdesc_return_req_credit(skb);
2011         }
2012 }
2013
2014 static int brcmf_fws_borrow_credit(struct brcmf_fws_info *fws)
2015 {
2016         int lender_ac;
2017
2018         if (time_after(fws->borrow_defer_timestamp, jiffies)) {
2019                 fws->fifo_credit_map &= ~(1 << BRCMF_FWS_FIFO_AC_BE);
2020                 return -ENAVAIL;
2021         }
2022
2023         for (lender_ac = 0; lender_ac <= BRCMF_FWS_FIFO_AC_VO; lender_ac++) {
2024                 if (fws->fifo_credit[lender_ac]) {
2025                         fws->credits_borrowed[lender_ac]++;
2026                         fws->fifo_credit[lender_ac]--;
2027                         if (fws->fifo_credit[lender_ac] == 0)
2028                                 fws->fifo_credit_map &= ~(1 << lender_ac);
2029                         fws->fifo_credit_map |= (1 << BRCMF_FWS_FIFO_AC_BE);
2030                         brcmf_dbg(DATA, "borrow credit from: %d\n", lender_ac);
2031                         return 0;
2032                 }
2033         }
2034         fws->fifo_credit_map &= ~(1 << BRCMF_FWS_FIFO_AC_BE);
2035         return -ENAVAIL;
2036 }
2037
2038 static int brcmf_fws_commit_skb(struct brcmf_fws_info *fws, int fifo,
2039                                 struct sk_buff *skb)
2040 {
2041         struct brcmf_skbuff_cb *skcb = brcmf_skbcb(skb);
2042         struct brcmf_fws_mac_descriptor *entry;
2043         int rc;
2044         u8 ifidx;
2045         u8 data_offset;
2046
2047         entry = skcb->mac;
2048         if (IS_ERR(entry))
2049                 return PTR_ERR(entry);
2050
2051         data_offset = brcmf_fws_precommit_skb(fws, fifo, skb);
2052         entry->transit_count++;
2053         if (entry->suppressed)
2054                 entry->suppr_transit_count++;
2055         ifidx = brcmf_skb_if_flags_get_field(skb, INDEX);
2056         brcmf_fws_unlock(fws);
2057         rc = brcmf_proto_txdata(fws->drvr, ifidx, data_offset, skb);
2058         brcmf_fws_lock(fws);
2059         brcmf_dbg(DATA, "%s flags %X htod %X bus_tx %d\n", entry->name,
2060                   skcb->if_flags, skcb->htod, rc);
2061         if (rc < 0) {
2062                 entry->transit_count--;
2063                 if (entry->suppressed)
2064                         entry->suppr_transit_count--;
2065                 (void)brcmf_proto_hdrpull(fws->drvr, false, skb, NULL);
2066                 goto rollback;
2067         }
2068
2069         fws->stats.pkt2bus++;
2070         fws->stats.send_pkts[fifo]++;
2071         if (brcmf_skb_if_flags_get_field(skb, REQUESTED))
2072                 fws->stats.requested_sent[fifo]++;
2073
2074         return rc;
2075
2076 rollback:
2077         brcmf_fws_rollback_toq(fws, skb, fifo);
2078         return rc;
2079 }
2080
2081 static int brcmf_fws_assign_htod(struct brcmf_fws_info *fws, struct sk_buff *p,
2082                                   int fifo)
2083 {
2084         struct brcmf_skbuff_cb *skcb = brcmf_skbcb(p);
2085         int rc, hslot;
2086
2087         skcb->htod = 0;
2088         skcb->htod_seq = 0;
2089         hslot = brcmf_fws_hanger_get_free_slot(&fws->hanger);
2090         brcmf_skb_htod_tag_set_field(p, HSLOT, hslot);
2091         brcmf_skb_htod_tag_set_field(p, FREERUN, skcb->mac->seq[fifo]);
2092         brcmf_skb_htod_tag_set_field(p, FIFO, fifo);
2093         rc = brcmf_fws_hanger_pushpkt(&fws->hanger, p, hslot);
2094         if (!rc)
2095                 skcb->mac->seq[fifo]++;
2096         else
2097                 fws->stats.generic_error++;
2098         return rc;
2099 }
2100
2101 int brcmf_fws_process_skb(struct brcmf_if *ifp, struct sk_buff *skb)
2102 {
2103         struct brcmf_fws_info *fws = drvr_to_fws(ifp->drvr);
2104         struct brcmf_skbuff_cb *skcb = brcmf_skbcb(skb);
2105         struct ethhdr *eh = (struct ethhdr *)(skb->data);
2106         int fifo = BRCMF_FWS_FIFO_BCMC;
2107         bool multicast = is_multicast_ether_addr(eh->h_dest);
2108         int rc = 0;
2109
2110         brcmf_dbg(DATA, "tx proto=0x%X\n", ntohs(eh->h_proto));
2111
2112         /* set control buffer information */
2113         skcb->if_flags = 0;
2114         skcb->state = BRCMF_FWS_SKBSTATE_NEW;
2115         brcmf_skb_if_flags_set_field(skb, INDEX, ifp->ifidx);
2116         if (!multicast)
2117                 fifo = brcmf_fws_prio2fifo[skb->priority];
2118
2119         brcmf_fws_lock(fws);
2120         if (fifo != BRCMF_FWS_FIFO_AC_BE && fifo < BRCMF_FWS_FIFO_BCMC)
2121                 fws->borrow_defer_timestamp = jiffies +
2122                                               BRCMF_FWS_BORROW_DEFER_PERIOD;
2123
2124         skcb->mac = brcmf_fws_macdesc_find(fws, ifp, eh->h_dest);
2125         brcmf_dbg(DATA, "%s mac %pM multi %d fifo %d\n", skcb->mac->name,
2126                   eh->h_dest, multicast, fifo);
2127         if (!brcmf_fws_assign_htod(fws, skb, fifo)) {
2128                 brcmf_fws_enq(fws, BRCMF_FWS_SKBSTATE_DELAYED, fifo, skb);
2129                 brcmf_fws_schedule_deq(fws);
2130         } else {
2131                 brcmf_err("drop skb: no hanger slot\n");
2132                 brcmf_txfinalize(ifp, skb, false);
2133                 rc = -ENOMEM;
2134         }
2135         brcmf_fws_unlock(fws);
2136
2137         return rc;
2138 }
2139
2140 void brcmf_fws_reset_interface(struct brcmf_if *ifp)
2141 {
2142         struct brcmf_fws_mac_descriptor *entry = ifp->fws_desc;
2143
2144         brcmf_dbg(TRACE, "enter: bsscfgidx=%d\n", ifp->bsscfgidx);
2145         if (!entry)
2146                 return;
2147
2148         brcmf_fws_macdesc_init(entry, ifp->mac_addr, ifp->ifidx);
2149 }
2150
2151 void brcmf_fws_add_interface(struct brcmf_if *ifp)
2152 {
2153         struct brcmf_fws_info *fws = drvr_to_fws(ifp->drvr);
2154         struct brcmf_fws_mac_descriptor *entry;
2155
2156         if (!ifp->ndev || !brcmf_fws_queue_skbs(fws))
2157                 return;
2158
2159         entry = &fws->desc.iface[ifp->ifidx];
2160         ifp->fws_desc = entry;
2161         brcmf_fws_macdesc_init(entry, ifp->mac_addr, ifp->ifidx);
2162         brcmf_fws_macdesc_set_name(fws, entry);
2163         brcmu_pktq_init(&entry->psq, BRCMF_FWS_PSQ_PREC_COUNT,
2164                         BRCMF_FWS_PSQ_LEN);
2165         brcmf_dbg(TRACE, "added %s\n", entry->name);
2166 }
2167
2168 void brcmf_fws_del_interface(struct brcmf_if *ifp)
2169 {
2170         struct brcmf_fws_mac_descriptor *entry = ifp->fws_desc;
2171         struct brcmf_fws_info *fws = drvr_to_fws(ifp->drvr);
2172
2173         if (!entry)
2174                 return;
2175
2176         brcmf_fws_lock(fws);
2177         ifp->fws_desc = NULL;
2178         brcmf_dbg(TRACE, "deleting %s\n", entry->name);
2179         brcmf_fws_macdesc_cleanup(fws, &fws->desc.iface[ifp->ifidx],
2180                                   ifp->ifidx);
2181         brcmf_fws_macdesc_deinit(entry);
2182         brcmf_fws_cleanup(fws, ifp->ifidx);
2183         brcmf_fws_unlock(fws);
2184 }
2185
2186 static void brcmf_fws_dequeue_worker(struct work_struct *worker)
2187 {
2188         struct brcmf_fws_info *fws;
2189         struct brcmf_pub *drvr;
2190         struct sk_buff *skb;
2191         int fifo;
2192         u32 hslot;
2193         u32 ifidx;
2194         int ret;
2195
2196         fws = container_of(worker, struct brcmf_fws_info, fws_dequeue_work);
2197         drvr = fws->drvr;
2198
2199         brcmf_fws_lock(fws);
2200         for (fifo = BRCMF_FWS_FIFO_BCMC; fifo >= 0 && !fws->bus_flow_blocked;
2201              fifo--) {
2202                 if (!brcmf_fws_fc_active(fws)) {
2203                         while ((skb = brcmf_fws_deq(fws, fifo)) != NULL) {
2204                                 hslot = brcmf_skb_htod_tag_get_field(skb,
2205                                                                      HSLOT);
2206                                 brcmf_fws_hanger_poppkt(&fws->hanger, hslot,
2207                                                         &skb, true);
2208                                 ifidx = brcmf_skb_if_flags_get_field(skb,
2209                                                                      INDEX);
2210                                 /* Use proto layer to send data frame */
2211                                 brcmf_fws_unlock(fws);
2212                                 ret = brcmf_proto_txdata(drvr, ifidx, 0, skb);
2213                                 brcmf_fws_lock(fws);
2214                                 if (ret < 0)
2215                                         brcmf_txfinalize(brcmf_get_ifp(drvr,
2216                                                                        ifidx),
2217                                                          skb, false);
2218                                 if (fws->bus_flow_blocked)
2219                                         break;
2220                         }
2221                         continue;
2222                 }
2223                 while ((fws->fifo_credit[fifo]) || ((!fws->bcmc_credit_check) &&
2224                        (fifo == BRCMF_FWS_FIFO_BCMC))) {
2225                         skb = brcmf_fws_deq(fws, fifo);
2226                         if (!skb)
2227                                 break;
2228                         fws->fifo_credit[fifo]--;
2229                         if (brcmf_fws_commit_skb(fws, fifo, skb))
2230                                 break;
2231                         if (fws->bus_flow_blocked)
2232                                 break;
2233                 }
2234                 if ((fifo == BRCMF_FWS_FIFO_AC_BE) &&
2235                     (fws->fifo_credit[fifo] == 0) &&
2236                     (!fws->bus_flow_blocked)) {
2237                         while (brcmf_fws_borrow_credit(fws) == 0) {
2238                                 skb = brcmf_fws_deq(fws, fifo);
2239                                 if (!skb) {
2240                                         brcmf_fws_return_credits(fws, fifo, 1);
2241                                         break;
2242                                 }
2243                                 if (brcmf_fws_commit_skb(fws, fifo, skb))
2244                                         break;
2245                                 if (fws->bus_flow_blocked)
2246                                         break;
2247                         }
2248                 }
2249         }
2250         brcmf_fws_unlock(fws);
2251 }
2252
2253 #ifdef DEBUG
2254 static int brcmf_debugfs_fws_stats_read(struct seq_file *seq, void *data)
2255 {
2256         struct brcmf_bus *bus_if = dev_get_drvdata(seq->private);
2257         struct brcmf_fws_stats *fwstats = &(drvr_to_fws(bus_if->drvr)->stats);
2258
2259         seq_printf(seq,
2260                    "header_pulls:      %u\n"
2261                    "header_only_pkt:   %u\n"
2262                    "tlv_parse_failed:  %u\n"
2263                    "tlv_invalid_type:  %u\n"
2264                    "mac_update_fails:  %u\n"
2265                    "ps_update_fails:   %u\n"
2266                    "if_update_fails:   %u\n"
2267                    "pkt2bus:           %u\n"
2268                    "generic_error:     %u\n"
2269                    "rollback_success:  %u\n"
2270                    "rollback_failed:   %u\n"
2271                    "delayq_full:       %u\n"
2272                    "supprq_full:       %u\n"
2273                    "txs_indicate:      %u\n"
2274                    "txs_discard:       %u\n"
2275                    "txs_suppr_core:    %u\n"
2276                    "txs_suppr_ps:      %u\n"
2277                    "txs_tossed:        %u\n"
2278                    "txs_host_tossed:   %u\n"
2279                    "bus_flow_block:    %u\n"
2280                    "fws_flow_block:    %u\n"
2281                    "send_pkts:         BK:%u BE:%u VO:%u VI:%u BCMC:%u\n"
2282                    "requested_sent:    BK:%u BE:%u VO:%u VI:%u BCMC:%u\n",
2283                    fwstats->header_pulls,
2284                    fwstats->header_only_pkt,
2285                    fwstats->tlv_parse_failed,
2286                    fwstats->tlv_invalid_type,
2287                    fwstats->mac_update_failed,
2288                    fwstats->mac_ps_update_failed,
2289                    fwstats->if_update_failed,
2290                    fwstats->pkt2bus,
2291                    fwstats->generic_error,
2292                    fwstats->rollback_success,
2293                    fwstats->rollback_failed,
2294                    fwstats->delayq_full_error,
2295                    fwstats->supprq_full_error,
2296                    fwstats->txs_indicate,
2297                    fwstats->txs_discard,
2298                    fwstats->txs_supp_core,
2299                    fwstats->txs_supp_ps,
2300                    fwstats->txs_tossed,
2301                    fwstats->txs_host_tossed,
2302                    fwstats->bus_flow_block,
2303                    fwstats->fws_flow_block,
2304                    fwstats->send_pkts[0], fwstats->send_pkts[1],
2305                    fwstats->send_pkts[2], fwstats->send_pkts[3],
2306                    fwstats->send_pkts[4],
2307                    fwstats->requested_sent[0],
2308                    fwstats->requested_sent[1],
2309                    fwstats->requested_sent[2],
2310                    fwstats->requested_sent[3],
2311                    fwstats->requested_sent[4]);
2312
2313         return 0;
2314 }
2315 #else
2316 static int brcmf_debugfs_fws_stats_read(struct seq_file *seq, void *data)
2317 {
2318         return 0;
2319 }
2320 #endif
2321
2322 struct brcmf_fws_info *brcmf_fws_attach(struct brcmf_pub *drvr)
2323 {
2324         struct brcmf_fws_info *fws;
2325         struct brcmf_if *ifp;
2326         u32 tlv = BRCMF_FWS_FLAGS_RSSI_SIGNALS;
2327         int rc;
2328         u32 mode;
2329
2330         fws = kzalloc(sizeof(*fws), GFP_KERNEL);
2331         if (!fws) {
2332                 rc = -ENOMEM;
2333                 goto fail;
2334         }
2335
2336         spin_lock_init(&fws->spinlock);
2337
2338         /* store drvr reference */
2339         fws->drvr = drvr;
2340         fws->fcmode = drvr->settings->fcmode;
2341
2342         if ((drvr->bus_if->always_use_fws_queue == false) &&
2343             (fws->fcmode == BRCMF_FWS_FCMODE_NONE)) {
2344                 fws->avoid_queueing = true;
2345                 brcmf_dbg(INFO, "FWS queueing will be avoided\n");
2346                 return fws;
2347         }
2348
2349         fws->fws_wq = create_singlethread_workqueue("brcmf_fws_wq");
2350         if (fws->fws_wq == NULL) {
2351                 brcmf_err("workqueue creation failed\n");
2352                 rc = -EBADF;
2353                 goto fail;
2354         }
2355         INIT_WORK(&fws->fws_dequeue_work, brcmf_fws_dequeue_worker);
2356
2357         /* enable firmware signalling if fcmode active */
2358         if (fws->fcmode != BRCMF_FWS_FCMODE_NONE)
2359                 tlv |= BRCMF_FWS_FLAGS_XONXOFF_SIGNALS |
2360                        BRCMF_FWS_FLAGS_CREDIT_STATUS_SIGNALS |
2361                        BRCMF_FWS_FLAGS_HOST_PROPTXSTATUS_ACTIVE |
2362                        BRCMF_FWS_FLAGS_HOST_RXREORDER_ACTIVE;
2363
2364         rc = brcmf_fweh_register(drvr, BRCMF_E_FIFO_CREDIT_MAP,
2365                                  brcmf_fws_notify_credit_map);
2366         if (rc < 0) {
2367                 brcmf_err("register credit map handler failed\n");
2368                 goto fail;
2369         }
2370         rc = brcmf_fweh_register(drvr, BRCMF_E_BCMC_CREDIT_SUPPORT,
2371                                  brcmf_fws_notify_bcmc_credit_support);
2372         if (rc < 0) {
2373                 brcmf_err("register bcmc credit handler failed\n");
2374                 brcmf_fweh_unregister(drvr, BRCMF_E_FIFO_CREDIT_MAP);
2375                 goto fail;
2376         }
2377
2378         /* Setting the iovar may fail if feature is unsupported
2379          * so leave the rc as is so driver initialization can
2380          * continue. Set mode back to none indicating not enabled.
2381          */
2382         fws->fw_signals = true;
2383         ifp = brcmf_get_ifp(drvr, 0);
2384         if (brcmf_fil_iovar_int_set(ifp, "tlv", tlv)) {
2385                 brcmf_err("failed to set bdcv2 tlv signaling\n");
2386                 fws->fcmode = BRCMF_FWS_FCMODE_NONE;
2387                 fws->fw_signals = false;
2388         }
2389
2390         if (brcmf_fil_iovar_int_set(ifp, "ampdu_hostreorder", 1))
2391                 brcmf_dbg(INFO, "enabling AMPDU host-reorder failed\n");
2392
2393         /* Enable seq number reuse, if supported */
2394         if (brcmf_fil_iovar_int_get(ifp, "wlfc_mode", &mode) == 0) {
2395                 if (BRCMF_FWS_MODE_GET_REUSESEQ(mode)) {
2396                         mode = 0;
2397                         BRCMF_FWS_MODE_SET_REUSESEQ(mode, 1);
2398                         if (brcmf_fil_iovar_int_set(ifp,
2399                                                     "wlfc_mode", mode) == 0) {
2400                                 BRCMF_FWS_MODE_SET_REUSESEQ(fws->mode, 1);
2401                         }
2402                 }
2403         }
2404
2405         brcmf_fws_hanger_init(&fws->hanger);
2406         brcmf_fws_macdesc_init(&fws->desc.other, NULL, 0);
2407         brcmf_fws_macdesc_set_name(fws, &fws->desc.other);
2408         brcmf_dbg(INFO, "added %s\n", fws->desc.other.name);
2409         brcmu_pktq_init(&fws->desc.other.psq, BRCMF_FWS_PSQ_PREC_COUNT,
2410                         BRCMF_FWS_PSQ_LEN);
2411
2412         brcmf_dbg(INFO, "%s bdcv2 tlv signaling [%x]\n",
2413                   fws->fw_signals ? "enabled" : "disabled", tlv);
2414         return fws;
2415
2416 fail:
2417         brcmf_fws_detach_pre_delif(fws);
2418         brcmf_fws_detach_post_delif(fws);
2419         return ERR_PTR(rc);
2420 }
2421
2422 void brcmf_fws_detach_pre_delif(struct brcmf_fws_info *fws)
2423 {
2424         if (!fws)
2425                 return;
2426         if (fws->fws_wq) {
2427                 destroy_workqueue(fws->fws_wq);
2428                 fws->fws_wq = NULL;
2429         }
2430 }
2431
2432 void brcmf_fws_detach_post_delif(struct brcmf_fws_info *fws)
2433 {
2434         if (!fws)
2435                 return;
2436
2437         /* cleanup */
2438         brcmf_fws_lock(fws);
2439         brcmf_fws_cleanup(fws, -1);
2440         brcmf_fws_unlock(fws);
2441
2442         /* free top structure */
2443         kfree(fws);
2444 }
2445
2446 void brcmf_fws_debugfs_create(struct brcmf_pub *drvr)
2447 {
2448         /* create debugfs file for statistics */
2449         brcmf_debugfs_add_entry(drvr, "fws_stats",
2450                                 brcmf_debugfs_fws_stats_read);
2451 }
2452
2453 bool brcmf_fws_queue_skbs(struct brcmf_fws_info *fws)
2454 {
2455         return !fws->avoid_queueing;
2456 }
2457
2458 bool brcmf_fws_fc_active(struct brcmf_fws_info *fws)
2459 {
2460         if (!fws->creditmap_received)
2461                 return false;
2462
2463         return fws->fcmode != BRCMF_FWS_FCMODE_NONE;
2464 }
2465
2466 void brcmf_fws_bustxfail(struct brcmf_fws_info *fws, struct sk_buff *skb)
2467 {
2468         u32 hslot;
2469
2470         if (brcmf_skbcb(skb)->state == BRCMF_FWS_SKBSTATE_TIM) {
2471                 brcmu_pkt_buf_free_skb(skb);
2472                 return;
2473         }
2474         brcmf_fws_lock(fws);
2475         hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
2476         brcmf_fws_txs_process(fws, BRCMF_FWS_TXSTATUS_HOST_TOSSED, hslot, 0, 0);
2477         brcmf_fws_unlock(fws);
2478 }
2479
2480 void brcmf_fws_bus_blocked(struct brcmf_pub *drvr, bool flow_blocked)
2481 {
2482         struct brcmf_fws_info *fws = drvr_to_fws(drvr);
2483         struct brcmf_if *ifp;
2484         int i;
2485
2486         if (fws->avoid_queueing) {
2487                 for (i = 0; i < BRCMF_MAX_IFS; i++) {
2488                         ifp = drvr->iflist[i];
2489                         if (!ifp || !ifp->ndev)
2490                                 continue;
2491                         brcmf_txflowblock_if(ifp, BRCMF_NETIF_STOP_REASON_FLOW,
2492                                              flow_blocked);
2493                 }
2494         } else {
2495                 fws->bus_flow_blocked = flow_blocked;
2496                 if (!flow_blocked)
2497                         brcmf_fws_schedule_deq(fws);
2498                 else
2499                         fws->stats.bus_flow_block++;
2500         }
2501 }