GNU Linux-libre 4.14.266-gnu1
[releases.git] / drivers / net / wireless / marvell / mwifiex / init.c
1 /*
2  * Marvell Wireless LAN device driver: HW/FW Initialization
3  *
4  * Copyright (C) 2011-2014, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19
20 #include "decl.h"
21 #include "ioctl.h"
22 #include "util.h"
23 #include "fw.h"
24 #include "main.h"
25 #include "wmm.h"
26 #include "11n.h"
27
28 /*
29  * This function adds a BSS priority table to the table list.
30  *
31  * The function allocates a new BSS priority table node and adds it to
32  * the end of BSS priority table list, kept in driver memory.
33  */
34 static int mwifiex_add_bss_prio_tbl(struct mwifiex_private *priv)
35 {
36         struct mwifiex_adapter *adapter = priv->adapter;
37         struct mwifiex_bss_prio_node *bss_prio;
38         struct mwifiex_bss_prio_tbl *tbl = adapter->bss_prio_tbl;
39         unsigned long flags;
40
41         bss_prio = kzalloc(sizeof(struct mwifiex_bss_prio_node), GFP_KERNEL);
42         if (!bss_prio)
43                 return -ENOMEM;
44
45         bss_prio->priv = priv;
46         INIT_LIST_HEAD(&bss_prio->list);
47
48         spin_lock_irqsave(&tbl[priv->bss_priority].bss_prio_lock, flags);
49         list_add_tail(&bss_prio->list, &tbl[priv->bss_priority].bss_prio_head);
50         spin_unlock_irqrestore(&tbl[priv->bss_priority].bss_prio_lock, flags);
51
52         return 0;
53 }
54
55 static void wakeup_timer_fn(unsigned long data)
56 {
57         struct mwifiex_adapter *adapter = (struct mwifiex_adapter *)data;
58
59         mwifiex_dbg(adapter, ERROR, "Firmware wakeup failed\n");
60         adapter->hw_status = MWIFIEX_HW_STATUS_RESET;
61         mwifiex_cancel_all_pending_cmd(adapter);
62
63         if (adapter->if_ops.card_reset && !adapter->hs_activated)
64                 adapter->if_ops.card_reset(adapter);
65 }
66
67 /*
68  * This function initializes the private structure and sets default
69  * values to the members.
70  *
71  * Additionally, it also initializes all the locks and sets up all the
72  * lists.
73  */
74 int mwifiex_init_priv(struct mwifiex_private *priv)
75 {
76         u32 i;
77
78         priv->media_connected = false;
79         eth_broadcast_addr(priv->curr_addr);
80         priv->port_open = false;
81         priv->usb_port = MWIFIEX_USB_EP_DATA;
82         priv->pkt_tx_ctrl = 0;
83         priv->bss_mode = NL80211_IFTYPE_UNSPECIFIED;
84         priv->data_rate = 0;    /* Initially indicate the rate as auto */
85         priv->is_data_rate_auto = true;
86         priv->bcn_avg_factor = DEFAULT_BCN_AVG_FACTOR;
87         priv->data_avg_factor = DEFAULT_DATA_AVG_FACTOR;
88
89         priv->sec_info.wep_enabled = 0;
90         priv->sec_info.authentication_mode = NL80211_AUTHTYPE_OPEN_SYSTEM;
91         priv->sec_info.encryption_mode = 0;
92         for (i = 0; i < ARRAY_SIZE(priv->wep_key); i++)
93                 memset(&priv->wep_key[i], 0, sizeof(struct mwifiex_wep_key));
94         priv->wep_key_curr_index = 0;
95         priv->curr_pkt_filter = HostCmd_ACT_MAC_DYNAMIC_BW_ENABLE |
96                                 HostCmd_ACT_MAC_RX_ON | HostCmd_ACT_MAC_TX_ON |
97                                 HostCmd_ACT_MAC_ETHERNETII_ENABLE;
98
99         priv->beacon_period = 100; /* beacon interval */
100         priv->attempted_bss_desc = NULL;
101         memset(&priv->curr_bss_params, 0, sizeof(priv->curr_bss_params));
102         priv->listen_interval = MWIFIEX_DEFAULT_LISTEN_INTERVAL;
103
104         memset(&priv->prev_ssid, 0, sizeof(priv->prev_ssid));
105         memset(&priv->prev_bssid, 0, sizeof(priv->prev_bssid));
106         memset(&priv->assoc_rsp_buf, 0, sizeof(priv->assoc_rsp_buf));
107         priv->assoc_rsp_size = 0;
108         priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
109         priv->atim_window = 0;
110         priv->adhoc_state = ADHOC_IDLE;
111         priv->tx_power_level = 0;
112         priv->max_tx_power_level = 0;
113         priv->min_tx_power_level = 0;
114         priv->tx_ant = 0;
115         priv->rx_ant = 0;
116         priv->tx_rate = 0;
117         priv->rxpd_htinfo = 0;
118         priv->rxpd_rate = 0;
119         priv->rate_bitmap = 0;
120         priv->data_rssi_last = 0;
121         priv->data_rssi_avg = 0;
122         priv->data_nf_avg = 0;
123         priv->data_nf_last = 0;
124         priv->bcn_rssi_last = 0;
125         priv->bcn_rssi_avg = 0;
126         priv->bcn_nf_avg = 0;
127         priv->bcn_nf_last = 0;
128         memset(&priv->wpa_ie, 0, sizeof(priv->wpa_ie));
129         memset(&priv->aes_key, 0, sizeof(priv->aes_key));
130         priv->wpa_ie_len = 0;
131         priv->wpa_is_gtk_set = false;
132
133         memset(&priv->assoc_tlv_buf, 0, sizeof(priv->assoc_tlv_buf));
134         priv->assoc_tlv_buf_len = 0;
135         memset(&priv->wps, 0, sizeof(priv->wps));
136         memset(&priv->gen_ie_buf, 0, sizeof(priv->gen_ie_buf));
137         priv->gen_ie_buf_len = 0;
138         memset(priv->vs_ie, 0, sizeof(priv->vs_ie));
139
140         priv->wmm_required = true;
141         priv->wmm_enabled = false;
142         priv->wmm_qosinfo = 0;
143         priv->curr_bcn_buf = NULL;
144         priv->curr_bcn_size = 0;
145         priv->wps_ie = NULL;
146         priv->wps_ie_len = 0;
147         priv->ap_11n_enabled = 0;
148         memset(&priv->roc_cfg, 0, sizeof(priv->roc_cfg));
149
150         priv->scan_block = false;
151
152         priv->csa_chan = 0;
153         priv->csa_expire_time = 0;
154         priv->del_list_idx = 0;
155         priv->hs2_enabled = false;
156         priv->check_tdls_tx = false;
157         memcpy(priv->tos_to_tid_inv, tos_to_tid_inv, MAX_NUM_TID);
158
159         mwifiex_init_11h_params(priv);
160
161         return mwifiex_add_bss_prio_tbl(priv);
162 }
163
164 /*
165  * This function allocates buffers for members of the adapter
166  * structure.
167  *
168  * The memory allocated includes scan table, command buffers, and
169  * sleep confirm command buffer. In addition, the queues are
170  * also initialized.
171  */
172 static int mwifiex_allocate_adapter(struct mwifiex_adapter *adapter)
173 {
174         int ret;
175
176         /* Allocate command buffer */
177         ret = mwifiex_alloc_cmd_buffer(adapter);
178         if (ret) {
179                 mwifiex_dbg(adapter, ERROR,
180                             "%s: failed to alloc cmd buffer\n",
181                             __func__);
182                 return -1;
183         }
184
185         adapter->sleep_cfm =
186                 dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
187                               + INTF_HEADER_LEN);
188
189         if (!adapter->sleep_cfm) {
190                 mwifiex_dbg(adapter, ERROR,
191                             "%s: failed to alloc sleep cfm\t"
192                             " cmd buffer\n", __func__);
193                 return -1;
194         }
195         skb_reserve(adapter->sleep_cfm, INTF_HEADER_LEN);
196
197         return 0;
198 }
199
200 /*
201  * This function initializes the adapter structure and sets default
202  * values to the members of adapter.
203  *
204  * This also initializes the WMM related parameters in the driver private
205  * structures.
206  */
207 static void mwifiex_init_adapter(struct mwifiex_adapter *adapter)
208 {
209         struct mwifiex_opt_sleep_confirm *sleep_cfm_buf = NULL;
210
211         skb_put(adapter->sleep_cfm, sizeof(struct mwifiex_opt_sleep_confirm));
212
213         adapter->cmd_sent = false;
214
215         if (adapter->iface_type == MWIFIEX_SDIO)
216                 adapter->data_sent = true;
217         else
218                 adapter->data_sent = false;
219
220         if (adapter->iface_type == MWIFIEX_USB)
221                 adapter->intf_hdr_len = 0;
222         else
223                 adapter->intf_hdr_len = INTF_HEADER_LEN;
224
225         adapter->cmd_resp_received = false;
226         adapter->event_received = false;
227         adapter->data_received = false;
228
229         adapter->surprise_removed = false;
230
231         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
232
233         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
234         adapter->ps_state = PS_STATE_AWAKE;
235         adapter->need_to_wakeup = false;
236
237         adapter->scan_mode = HostCmd_BSS_MODE_ANY;
238         adapter->specific_scan_time = MWIFIEX_SPECIFIC_SCAN_CHAN_TIME;
239         adapter->active_scan_time = MWIFIEX_ACTIVE_SCAN_CHAN_TIME;
240         adapter->passive_scan_time = MWIFIEX_PASSIVE_SCAN_CHAN_TIME;
241         adapter->scan_chan_gap_time = MWIFIEX_DEF_SCAN_CHAN_GAP_TIME;
242
243         adapter->scan_probes = 1;
244
245         adapter->multiple_dtim = 1;
246
247         adapter->local_listen_interval = 0;     /* default value in firmware
248                                                    will be used */
249
250         adapter->is_deep_sleep = false;
251
252         adapter->delay_null_pkt = false;
253         adapter->delay_to_ps = 1000;
254         adapter->enhanced_ps_mode = PS_MODE_AUTO;
255
256         adapter->gen_null_pkt = false;  /* Disable NULL Pkg generation by
257                                            default */
258         adapter->pps_uapsd_mode = false; /* Disable pps/uapsd mode by
259                                            default */
260         adapter->pm_wakeup_card_req = false;
261
262         adapter->pm_wakeup_fw_try = false;
263
264         adapter->curr_tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
265
266         adapter->is_hs_configured = false;
267         adapter->hs_cfg.conditions = cpu_to_le32(HS_CFG_COND_DEF);
268         adapter->hs_cfg.gpio = HS_CFG_GPIO_DEF;
269         adapter->hs_cfg.gap = HS_CFG_GAP_DEF;
270         adapter->hs_activated = false;
271
272         memset(adapter->event_body, 0, sizeof(adapter->event_body));
273         adapter->hw_dot_11n_dev_cap = 0;
274         adapter->hw_dev_mcs_support = 0;
275         adapter->sec_chan_offset = 0;
276         adapter->adhoc_11n_enabled = false;
277
278         mwifiex_wmm_init(adapter);
279         atomic_set(&adapter->tx_hw_pending, 0);
280
281         sleep_cfm_buf = (struct mwifiex_opt_sleep_confirm *)
282                                         adapter->sleep_cfm->data;
283         memset(sleep_cfm_buf, 0, adapter->sleep_cfm->len);
284         sleep_cfm_buf->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
285         sleep_cfm_buf->size = cpu_to_le16(adapter->sleep_cfm->len);
286         sleep_cfm_buf->result = 0;
287         sleep_cfm_buf->action = cpu_to_le16(SLEEP_CONFIRM);
288         sleep_cfm_buf->resp_ctrl = cpu_to_le16(RESP_NEEDED);
289
290         memset(&adapter->sleep_params, 0, sizeof(adapter->sleep_params));
291         memset(&adapter->sleep_period, 0, sizeof(adapter->sleep_period));
292         adapter->tx_lock_flag = false;
293         adapter->null_pkt_interval = 0;
294         adapter->fw_bands = 0;
295         adapter->config_bands = 0;
296         adapter->adhoc_start_band = 0;
297         adapter->scan_channels = NULL;
298         adapter->fw_release_number = 0;
299         adapter->fw_cap_info = 0;
300         memset(&adapter->upld_buf, 0, sizeof(adapter->upld_buf));
301         adapter->event_cause = 0;
302         adapter->region_code = 0;
303         adapter->bcn_miss_time_out = DEFAULT_BCN_MISS_TIMEOUT;
304         adapter->adhoc_awake_period = 0;
305         memset(&adapter->arp_filter, 0, sizeof(adapter->arp_filter));
306         adapter->arp_filter_size = 0;
307         adapter->max_mgmt_ie_index = MAX_MGMT_IE_INDEX;
308         adapter->mfg_mode = mfg_mode;
309         adapter->key_api_major_ver = 0;
310         adapter->key_api_minor_ver = 0;
311         eth_broadcast_addr(adapter->perm_addr);
312         adapter->iface_limit.sta_intf = MWIFIEX_MAX_STA_NUM;
313         adapter->iface_limit.uap_intf = MWIFIEX_MAX_UAP_NUM;
314         adapter->iface_limit.p2p_intf = MWIFIEX_MAX_P2P_NUM;
315         adapter->active_scan_triggered = false;
316         setup_timer(&adapter->wakeup_timer, wakeup_timer_fn,
317                     (unsigned long)adapter);
318 }
319
320 /*
321  * This function sets trans_start per tx_queue
322  */
323 void mwifiex_set_trans_start(struct net_device *dev)
324 {
325         int i;
326
327         for (i = 0; i < dev->num_tx_queues; i++)
328                 netdev_get_tx_queue(dev, i)->trans_start = jiffies;
329
330         netif_trans_update(dev);
331 }
332
333 /*
334  * This function wakes up all queues in net_device
335  */
336 void mwifiex_wake_up_net_dev_queue(struct net_device *netdev,
337                                         struct mwifiex_adapter *adapter)
338 {
339         unsigned long dev_queue_flags;
340
341         spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
342         netif_tx_wake_all_queues(netdev);
343         spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
344 }
345
346 /*
347  * This function stops all queues in net_device
348  */
349 void mwifiex_stop_net_dev_queue(struct net_device *netdev,
350                                         struct mwifiex_adapter *adapter)
351 {
352         unsigned long dev_queue_flags;
353
354         spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
355         netif_tx_stop_all_queues(netdev);
356         spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
357 }
358
359 /*
360  * This function invalidates the list heads.
361  */
362 static void mwifiex_invalidate_lists(struct mwifiex_adapter *adapter)
363 {
364         struct mwifiex_private *priv;
365         s32 i, j;
366
367         list_del(&adapter->cmd_free_q);
368         list_del(&adapter->cmd_pending_q);
369         list_del(&adapter->scan_pending_q);
370
371         for (i = 0; i < adapter->priv_num; i++)
372                 list_del(&adapter->bss_prio_tbl[i].bss_prio_head);
373
374         for (i = 0; i < adapter->priv_num; i++) {
375                 if (adapter->priv[i]) {
376                         priv = adapter->priv[i];
377                         for (j = 0; j < MAX_NUM_TID; ++j)
378                                 list_del(&priv->wmm.tid_tbl_ptr[j].ra_list);
379                         list_del(&priv->tx_ba_stream_tbl_ptr);
380                         list_del(&priv->rx_reorder_tbl_ptr);
381                         list_del(&priv->sta_list);
382                         list_del(&priv->auto_tdls_list);
383                 }
384         }
385 }
386
387 /*
388  * This function performs cleanup for adapter structure.
389  *
390  * The cleanup is done recursively, by canceling all pending
391  * commands, freeing the member buffers previously allocated
392  * (command buffers, scan table buffer, sleep confirm command
393  * buffer), stopping the timers and calling the cleanup routines
394  * for every interface.
395  */
396 static void
397 mwifiex_adapter_cleanup(struct mwifiex_adapter *adapter)
398 {
399         del_timer(&adapter->wakeup_timer);
400         mwifiex_cancel_all_pending_cmd(adapter);
401         wake_up_interruptible(&adapter->cmd_wait_q.wait);
402         wake_up_interruptible(&adapter->hs_activate_wait_q);
403 }
404
405 void mwifiex_free_cmd_buffers(struct mwifiex_adapter *adapter)
406 {
407         mwifiex_invalidate_lists(adapter);
408
409         /* Free command buffer */
410         mwifiex_dbg(adapter, INFO, "info: free cmd buffer\n");
411         mwifiex_free_cmd_buffer(adapter);
412
413         if (adapter->sleep_cfm)
414                 dev_kfree_skb_any(adapter->sleep_cfm);
415 }
416
417 /*
418  *  This function intializes the lock variables and
419  *  the list heads.
420  */
421 int mwifiex_init_lock_list(struct mwifiex_adapter *adapter)
422 {
423         struct mwifiex_private *priv;
424         s32 i, j;
425
426         spin_lock_init(&adapter->int_lock);
427         spin_lock_init(&adapter->main_proc_lock);
428         spin_lock_init(&adapter->mwifiex_cmd_lock);
429         spin_lock_init(&adapter->queue_lock);
430         for (i = 0; i < adapter->priv_num; i++) {
431                 if (adapter->priv[i]) {
432                         priv = adapter->priv[i];
433                         spin_lock_init(&priv->rx_pkt_lock);
434                         spin_lock_init(&priv->wmm.ra_list_spinlock);
435                         spin_lock_init(&priv->curr_bcn_buf_lock);
436                         spin_lock_init(&priv->sta_list_spinlock);
437                         spin_lock_init(&priv->auto_tdls_lock);
438                 }
439         }
440
441         /* Initialize cmd_free_q */
442         INIT_LIST_HEAD(&adapter->cmd_free_q);
443         /* Initialize cmd_pending_q */
444         INIT_LIST_HEAD(&adapter->cmd_pending_q);
445         /* Initialize scan_pending_q */
446         INIT_LIST_HEAD(&adapter->scan_pending_q);
447
448         spin_lock_init(&adapter->cmd_free_q_lock);
449         spin_lock_init(&adapter->cmd_pending_q_lock);
450         spin_lock_init(&adapter->scan_pending_q_lock);
451         spin_lock_init(&adapter->rx_proc_lock);
452
453         skb_queue_head_init(&adapter->rx_data_q);
454         skb_queue_head_init(&adapter->tx_data_q);
455
456         for (i = 0; i < adapter->priv_num; ++i) {
457                 INIT_LIST_HEAD(&adapter->bss_prio_tbl[i].bss_prio_head);
458                 spin_lock_init(&adapter->bss_prio_tbl[i].bss_prio_lock);
459         }
460
461         for (i = 0; i < adapter->priv_num; i++) {
462                 if (!adapter->priv[i])
463                         continue;
464                 priv = adapter->priv[i];
465                 for (j = 0; j < MAX_NUM_TID; ++j)
466                         INIT_LIST_HEAD(&priv->wmm.tid_tbl_ptr[j].ra_list);
467                 INIT_LIST_HEAD(&priv->tx_ba_stream_tbl_ptr);
468                 INIT_LIST_HEAD(&priv->rx_reorder_tbl_ptr);
469                 INIT_LIST_HEAD(&priv->sta_list);
470                 INIT_LIST_HEAD(&priv->auto_tdls_list);
471                 skb_queue_head_init(&priv->tdls_txq);
472                 skb_queue_head_init(&priv->bypass_txq);
473
474                 spin_lock_init(&priv->tx_ba_stream_tbl_lock);
475                 spin_lock_init(&priv->rx_reorder_tbl_lock);
476
477                 spin_lock_init(&priv->ack_status_lock);
478                 idr_init(&priv->ack_status_frames);
479         }
480
481         return 0;
482 }
483
484 /*
485  * This function initializes the firmware.
486  *
487  * The following operations are performed sequentially -
488  *      - Allocate adapter structure
489  *      - Initialize the adapter structure
490  *      - Initialize the private structure
491  *      - Add BSS priority tables to the adapter structure
492  *      - For each interface, send the init commands to firmware
493  *      - Send the first command in command pending queue, if available
494  */
495 int mwifiex_init_fw(struct mwifiex_adapter *adapter)
496 {
497         int ret;
498         struct mwifiex_private *priv;
499         u8 i, first_sta = true;
500         int is_cmd_pend_q_empty;
501         unsigned long flags;
502
503         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
504
505         /* Allocate memory for member of adapter structure */
506         ret = mwifiex_allocate_adapter(adapter);
507         if (ret)
508                 return -1;
509
510         /* Initialize adapter structure */
511         mwifiex_init_adapter(adapter);
512
513         for (i = 0; i < adapter->priv_num; i++) {
514                 if (adapter->priv[i]) {
515                         priv = adapter->priv[i];
516
517                         /* Initialize private structure */
518                         ret = mwifiex_init_priv(priv);
519                         if (ret)
520                                 return -1;
521                 }
522         }
523         if (adapter->mfg_mode) {
524                 adapter->hw_status = MWIFIEX_HW_STATUS_READY;
525                 ret = -EINPROGRESS;
526         } else {
527                 for (i = 0; i < adapter->priv_num; i++) {
528                         if (adapter->priv[i]) {
529                                 ret = mwifiex_sta_init_cmd(adapter->priv[i],
530                                                            first_sta, true);
531                                 if (ret == -1)
532                                         return -1;
533
534                                 first_sta = false;
535                         }
536
537
538
539                 }
540         }
541
542         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
543         is_cmd_pend_q_empty = list_empty(&adapter->cmd_pending_q);
544         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
545         if (!is_cmd_pend_q_empty) {
546                 /* Send the first command in queue and return */
547                 if (mwifiex_main_process(adapter) != -1)
548                         ret = -EINPROGRESS;
549         } else {
550                 adapter->hw_status = MWIFIEX_HW_STATUS_READY;
551         }
552
553         return ret;
554 }
555
556 /*
557  * This function deletes the BSS priority tables.
558  *
559  * The function traverses through all the allocated BSS priority nodes
560  * in every BSS priority table and frees them.
561  */
562 static void mwifiex_delete_bss_prio_tbl(struct mwifiex_private *priv)
563 {
564         int i;
565         struct mwifiex_adapter *adapter = priv->adapter;
566         struct mwifiex_bss_prio_node *bssprio_node, *tmp_node;
567         struct list_head *head;
568         spinlock_t *lock; /* bss priority lock */
569         unsigned long flags;
570
571         for (i = 0; i < adapter->priv_num; ++i) {
572                 head = &adapter->bss_prio_tbl[i].bss_prio_head;
573                 lock = &adapter->bss_prio_tbl[i].bss_prio_lock;
574                 mwifiex_dbg(adapter, INFO,
575                             "info: delete BSS priority table,\t"
576                             "bss_type = %d, bss_num = %d, i = %d,\t"
577                             "head = %p\n",
578                             priv->bss_type, priv->bss_num, i, head);
579
580                 {
581                         spin_lock_irqsave(lock, flags);
582                         if (list_empty(head)) {
583                                 spin_unlock_irqrestore(lock, flags);
584                                 continue;
585                         }
586                         list_for_each_entry_safe(bssprio_node, tmp_node, head,
587                                                  list) {
588                                 if (bssprio_node->priv == priv) {
589                                         mwifiex_dbg(adapter, INFO,
590                                                     "info: Delete\t"
591                                                     "node %p, next = %p\n",
592                                                     bssprio_node, tmp_node);
593                                         list_del(&bssprio_node->list);
594                                         kfree(bssprio_node);
595                                 }
596                         }
597                         spin_unlock_irqrestore(lock, flags);
598                 }
599         }
600 }
601
602 /*
603  * This function frees the private structure, including cleans
604  * up the TX and RX queues and frees the BSS priority tables.
605  */
606 void mwifiex_free_priv(struct mwifiex_private *priv)
607 {
608         mwifiex_clean_txrx(priv);
609         mwifiex_delete_bss_prio_tbl(priv);
610         mwifiex_free_curr_bcn(priv);
611 }
612
613 /*
614  * This function is used to shutdown the driver.
615  *
616  * The following operations are performed sequentially -
617  *      - Check if already shut down
618  *      - Make sure the main process has stopped
619  *      - Clean up the Tx and Rx queues
620  *      - Delete BSS priority tables
621  *      - Free the adapter
622  *      - Notify completion
623  */
624 void
625 mwifiex_shutdown_drv(struct mwifiex_adapter *adapter)
626 {
627         struct mwifiex_private *priv;
628         s32 i;
629         unsigned long flags;
630         struct sk_buff *skb;
631
632         /* mwifiex already shutdown */
633         if (adapter->hw_status == MWIFIEX_HW_STATUS_NOT_READY)
634                 return;
635
636         /* cancel current command */
637         if (adapter->curr_cmd) {
638                 mwifiex_dbg(adapter, WARN,
639                             "curr_cmd is still in processing\n");
640                 del_timer_sync(&adapter->cmd_timer);
641                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
642                 adapter->curr_cmd = NULL;
643         }
644
645         /* shut down mwifiex */
646         mwifiex_dbg(adapter, MSG,
647                     "info: shutdown mwifiex...\n");
648
649         /* Clean up Tx/Rx queues and delete BSS priority table */
650         for (i = 0; i < adapter->priv_num; i++) {
651                 if (adapter->priv[i]) {
652                         priv = adapter->priv[i];
653
654                         mwifiex_clean_auto_tdls(priv);
655                         mwifiex_abort_cac(priv);
656                         mwifiex_free_priv(priv);
657                 }
658         }
659
660         atomic_set(&adapter->tx_queued, 0);
661         while ((skb = skb_dequeue(&adapter->tx_data_q)))
662                 mwifiex_write_data_complete(adapter, skb, 0, 0);
663
664         spin_lock_irqsave(&adapter->rx_proc_lock, flags);
665
666         while ((skb = skb_dequeue(&adapter->rx_data_q))) {
667                 struct mwifiex_rxinfo *rx_info = MWIFIEX_SKB_RXCB(skb);
668
669                 atomic_dec(&adapter->rx_pending);
670                 priv = adapter->priv[rx_info->bss_num];
671                 if (priv)
672                         priv->stats.rx_dropped++;
673
674                 dev_kfree_skb_any(skb);
675         }
676
677         spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
678
679         mwifiex_adapter_cleanup(adapter);
680
681         adapter->hw_status = MWIFIEX_HW_STATUS_NOT_READY;
682 }
683
684 /*
685  * This function downloads the firmware to the card.
686  *
687  * The actual download is preceded by two sanity checks -
688  *      - Check if firmware is already running
689  *      - Check if the interface is the winner to download the firmware
690  *
691  * ...and followed by another -
692  *      - Check if the firmware is downloaded successfully
693  *
694  * After download is successfully completed, the host interrupts are enabled.
695  */
696 int mwifiex_dnld_fw(struct mwifiex_adapter *adapter,
697                     struct mwifiex_fw_image *pmfw)
698 {
699         int ret;
700         u32 poll_num = 1;
701
702         if (adapter->if_ops.check_fw_status) {
703                 /* check if firmware is already running */
704                 ret = adapter->if_ops.check_fw_status(adapter, poll_num);
705                 if (!ret) {
706                         mwifiex_dbg(adapter, MSG,
707                                     "WLAN FW already running! Skip FW dnld\n");
708                         return 0;
709                 }
710         }
711
712         /* check if we are the winner for downloading FW */
713         if (adapter->if_ops.check_winner_status) {
714                 adapter->winner = 0;
715                 ret = adapter->if_ops.check_winner_status(adapter);
716
717                 poll_num = MAX_FIRMWARE_POLL_TRIES;
718                 if (ret) {
719                         mwifiex_dbg(adapter, MSG,
720                                     "WLAN read winner status failed!\n");
721                         return ret;
722                 }
723
724                 if (!adapter->winner) {
725                         mwifiex_dbg(adapter, MSG,
726                                     "WLAN is not the winner! Skip FW dnld\n");
727                         goto poll_fw;
728                 }
729         }
730
731         if (pmfw) {
732                 /* Download firmware with helper */
733                 ret = adapter->if_ops.prog_fw(adapter, pmfw);
734                 if (ret) {
735                         mwifiex_dbg(adapter, ERROR,
736                                     "prog_fw failed ret=%#x\n", ret);
737                         return ret;
738                 }
739         }
740
741 poll_fw:
742         /* Check if the firmware is downloaded successfully or not */
743         ret = adapter->if_ops.check_fw_status(adapter, poll_num);
744         if (ret)
745                 mwifiex_dbg(adapter, ERROR,
746                             "FW failed to be active in time\n");
747
748         return ret;
749 }
750 EXPORT_SYMBOL_GPL(mwifiex_dnld_fw);