1 /* Copyright (c) 2014 Broadcom Corporation
3 * Permission to use, copy, modify, and/or distribute this software for any
4 * purpose with or without fee is hereby granted, provided that the above
5 * copyright notice and this permission notice appear in all copies.
7 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
8 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
9 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
10 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
11 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
12 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
13 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16 /*******************************************************************************
17 * Communicates with the dongle by using dcmd codes.
18 * For certain dcmd codes, the dongle interprets string data from the host.
19 ******************************************************************************/
21 #include <linux/types.h>
22 #include <linux/netdevice.h>
23 #include <linux/etherdevice.h>
25 #include <brcmu_utils.h>
26 #include <brcmu_wifi.h>
32 #include "commonring.h"
35 #include "tracepoint.h"
38 #define MSGBUF_IOCTL_RESP_TIMEOUT 2000
40 #define MSGBUF_TYPE_GEN_STATUS 0x1
41 #define MSGBUF_TYPE_RING_STATUS 0x2
42 #define MSGBUF_TYPE_FLOW_RING_CREATE 0x3
43 #define MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT 0x4
44 #define MSGBUF_TYPE_FLOW_RING_DELETE 0x5
45 #define MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT 0x6
46 #define MSGBUF_TYPE_FLOW_RING_FLUSH 0x7
47 #define MSGBUF_TYPE_FLOW_RING_FLUSH_CMPLT 0x8
48 #define MSGBUF_TYPE_IOCTLPTR_REQ 0x9
49 #define MSGBUF_TYPE_IOCTLPTR_REQ_ACK 0xA
50 #define MSGBUF_TYPE_IOCTLRESP_BUF_POST 0xB
51 #define MSGBUF_TYPE_IOCTL_CMPLT 0xC
52 #define MSGBUF_TYPE_EVENT_BUF_POST 0xD
53 #define MSGBUF_TYPE_WL_EVENT 0xE
54 #define MSGBUF_TYPE_TX_POST 0xF
55 #define MSGBUF_TYPE_TX_STATUS 0x10
56 #define MSGBUF_TYPE_RXBUF_POST 0x11
57 #define MSGBUF_TYPE_RX_CMPLT 0x12
58 #define MSGBUF_TYPE_LPBK_DMAXFER 0x13
59 #define MSGBUF_TYPE_LPBK_DMAXFER_CMPLT 0x14
61 #define NR_TX_PKTIDS 2048
62 #define NR_RX_PKTIDS 1024
64 #define BRCMF_IOCTL_REQ_PKTID 0xFFFE
66 #define BRCMF_MSGBUF_MAX_PKT_SIZE 2048
67 #define BRCMF_MSGBUF_RXBUFPOST_THRESHOLD 32
68 #define BRCMF_MSGBUF_MAX_IOCTLRESPBUF_POST 8
69 #define BRCMF_MSGBUF_MAX_EVENTBUF_POST 8
71 #define BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_3 0x01
72 #define BRCMF_MSGBUF_PKT_FLAGS_PRIO_SHIFT 5
74 #define BRCMF_MSGBUF_TX_FLUSH_CNT1 32
75 #define BRCMF_MSGBUF_TX_FLUSH_CNT2 96
77 #define BRCMF_MSGBUF_DELAY_TXWORKER_THRS 96
78 #define BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS 32
79 #define BRCMF_MSGBUF_UPDATE_RX_PTR_THRS 48
82 struct msgbuf_common_hdr {
90 struct msgbuf_buf_addr {
95 struct msgbuf_ioctl_req_hdr {
96 struct msgbuf_common_hdr msg;
100 __le16 output_buf_len;
102 struct msgbuf_buf_addr req_buf_addr;
106 struct msgbuf_tx_msghdr {
107 struct msgbuf_common_hdr msg;
111 struct msgbuf_buf_addr metadata_buf_addr;
112 struct msgbuf_buf_addr data_buf_addr;
113 __le16 metadata_buf_len;
118 struct msgbuf_rx_bufpost {
119 struct msgbuf_common_hdr msg;
120 __le16 metadata_buf_len;
123 struct msgbuf_buf_addr metadata_buf_addr;
124 struct msgbuf_buf_addr data_buf_addr;
127 struct msgbuf_rx_ioctl_resp_or_event {
128 struct msgbuf_common_hdr msg;
131 struct msgbuf_buf_addr host_buf_addr;
135 struct msgbuf_completion_hdr {
140 struct msgbuf_rx_event {
141 struct msgbuf_common_hdr msg;
142 struct msgbuf_completion_hdr compl_hdr;
143 __le16 event_data_len;
148 struct msgbuf_ioctl_resp_hdr {
149 struct msgbuf_common_hdr msg;
150 struct msgbuf_completion_hdr compl_hdr;
157 struct msgbuf_tx_status {
158 struct msgbuf_common_hdr msg;
159 struct msgbuf_completion_hdr compl_hdr;
164 struct msgbuf_rx_complete {
165 struct msgbuf_common_hdr msg;
166 struct msgbuf_completion_hdr compl_hdr;
176 struct msgbuf_tx_flowring_create_req {
177 struct msgbuf_common_hdr msg;
188 struct msgbuf_buf_addr flow_ring_addr;
191 struct msgbuf_tx_flowring_delete_req {
192 struct msgbuf_common_hdr msg;
198 struct msgbuf_flowring_create_resp {
199 struct msgbuf_common_hdr msg;
200 struct msgbuf_completion_hdr compl_hdr;
204 struct msgbuf_flowring_delete_resp {
205 struct msgbuf_common_hdr msg;
206 struct msgbuf_completion_hdr compl_hdr;
210 struct msgbuf_flowring_flush_resp {
211 struct msgbuf_common_hdr msg;
212 struct msgbuf_completion_hdr compl_hdr;
216 struct brcmf_msgbuf_work_item {
217 struct list_head queue;
224 struct brcmf_msgbuf {
225 struct brcmf_pub *drvr;
227 struct brcmf_commonring **commonrings;
228 struct brcmf_commonring **flowrings;
229 dma_addr_t *flowring_dma_handle;
234 u16 rx_metadata_offset;
237 u32 max_ioctlrespbuf;
238 u32 cur_ioctlrespbuf;
243 dma_addr_t ioctbuf_handle;
246 int ioctl_resp_status;
247 u32 ioctl_resp_ret_len;
248 u32 ioctl_resp_pktid;
253 wait_queue_head_t ioctl_resp_wait;
256 struct brcmf_msgbuf_pktids *tx_pktids;
257 struct brcmf_msgbuf_pktids *rx_pktids;
258 struct brcmf_flowring *flow;
260 struct workqueue_struct *txflow_wq;
261 struct work_struct txflow_work;
262 unsigned long *flow_map;
263 unsigned long *txstatus_done_map;
265 struct work_struct flowring_work;
266 spinlock_t flowring_work_lock;
267 struct list_head work_queue;
270 struct brcmf_msgbuf_pktid {
277 struct brcmf_msgbuf_pktids {
279 u32 last_allocated_idx;
280 enum dma_data_direction direction;
281 struct brcmf_msgbuf_pktid *array;
284 static void brcmf_msgbuf_rxbuf_ioctlresp_post(struct brcmf_msgbuf *msgbuf);
287 static struct brcmf_msgbuf_pktids *
288 brcmf_msgbuf_init_pktids(u32 nr_array_entries,
289 enum dma_data_direction direction)
291 struct brcmf_msgbuf_pktid *array;
292 struct brcmf_msgbuf_pktids *pktids;
294 array = kcalloc(nr_array_entries, sizeof(*array), GFP_KERNEL);
298 pktids = kzalloc(sizeof(*pktids), GFP_KERNEL);
303 pktids->array = array;
304 pktids->array_size = nr_array_entries;
311 brcmf_msgbuf_alloc_pktid(struct device *dev,
312 struct brcmf_msgbuf_pktids *pktids,
313 struct sk_buff *skb, u16 data_offset,
314 dma_addr_t *physaddr, u32 *idx)
316 struct brcmf_msgbuf_pktid *array;
319 array = pktids->array;
321 *physaddr = dma_map_single(dev, skb->data + data_offset,
322 skb->len - data_offset, pktids->direction);
324 if (dma_mapping_error(dev, *physaddr)) {
325 brcmf_err("dma_map_single failed !!\n");
329 *idx = pktids->last_allocated_idx;
334 if (*idx == pktids->array_size)
336 if (array[*idx].allocated.counter == 0)
337 if (atomic_cmpxchg(&array[*idx].allocated, 0, 1) == 0)
340 } while (count < pktids->array_size);
342 if (count == pktids->array_size)
345 array[*idx].data_offset = data_offset;
346 array[*idx].physaddr = *physaddr;
347 array[*idx].skb = skb;
349 pktids->last_allocated_idx = *idx;
355 static struct sk_buff *
356 brcmf_msgbuf_get_pktid(struct device *dev, struct brcmf_msgbuf_pktids *pktids,
359 struct brcmf_msgbuf_pktid *pktid;
362 if (idx >= pktids->array_size) {
363 brcmf_err("Invalid packet id %d (max %d)\n", idx,
367 if (pktids->array[idx].allocated.counter) {
368 pktid = &pktids->array[idx];
369 dma_unmap_single(dev, pktid->physaddr,
370 pktid->skb->len - pktid->data_offset,
373 pktid->allocated.counter = 0;
376 brcmf_err("Invalid packet id %d (not in use)\n", idx);
384 brcmf_msgbuf_release_array(struct device *dev,
385 struct brcmf_msgbuf_pktids *pktids)
387 struct brcmf_msgbuf_pktid *array;
388 struct brcmf_msgbuf_pktid *pktid;
391 array = pktids->array;
394 if (array[count].allocated.counter) {
395 pktid = &array[count];
396 dma_unmap_single(dev, pktid->physaddr,
397 pktid->skb->len - pktid->data_offset,
399 brcmu_pkt_buf_free_skb(pktid->skb);
402 } while (count < pktids->array_size);
409 static void brcmf_msgbuf_release_pktids(struct brcmf_msgbuf *msgbuf)
411 if (msgbuf->rx_pktids)
412 brcmf_msgbuf_release_array(msgbuf->drvr->bus_if->dev,
414 if (msgbuf->tx_pktids)
415 brcmf_msgbuf_release_array(msgbuf->drvr->bus_if->dev,
420 static int brcmf_msgbuf_tx_ioctl(struct brcmf_pub *drvr, int ifidx,
421 uint cmd, void *buf, uint len)
423 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
424 struct brcmf_commonring *commonring;
425 struct msgbuf_ioctl_req_hdr *request;
430 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
431 brcmf_commonring_lock(commonring);
432 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
434 brcmf_err("Failed to reserve space in commonring\n");
435 brcmf_commonring_unlock(commonring);
441 request = (struct msgbuf_ioctl_req_hdr *)ret_ptr;
442 request->msg.msgtype = MSGBUF_TYPE_IOCTLPTR_REQ;
443 request->msg.ifidx = (u8)ifidx;
444 request->msg.flags = 0;
445 request->msg.request_id = cpu_to_le32(BRCMF_IOCTL_REQ_PKTID);
446 request->cmd = cpu_to_le32(cmd);
447 request->output_buf_len = cpu_to_le16(len);
448 request->trans_id = cpu_to_le16(msgbuf->reqid);
450 buf_len = min_t(u16, len, BRCMF_TX_IOCTL_MAX_MSG_SIZE);
451 request->input_buf_len = cpu_to_le16(buf_len);
452 request->req_buf_addr.high_addr = cpu_to_le32(msgbuf->ioctbuf_phys_hi);
453 request->req_buf_addr.low_addr = cpu_to_le32(msgbuf->ioctbuf_phys_lo);
455 memcpy(msgbuf->ioctbuf, buf, buf_len);
457 memset(msgbuf->ioctbuf, 0, buf_len);
459 err = brcmf_commonring_write_complete(commonring);
460 brcmf_commonring_unlock(commonring);
466 static int brcmf_msgbuf_ioctl_resp_wait(struct brcmf_msgbuf *msgbuf)
468 return wait_event_timeout(msgbuf->ioctl_resp_wait,
469 msgbuf->ctl_completed,
470 msecs_to_jiffies(MSGBUF_IOCTL_RESP_TIMEOUT));
474 static void brcmf_msgbuf_ioctl_resp_wake(struct brcmf_msgbuf *msgbuf)
476 msgbuf->ctl_completed = true;
477 if (waitqueue_active(&msgbuf->ioctl_resp_wait))
478 wake_up(&msgbuf->ioctl_resp_wait);
482 static int brcmf_msgbuf_query_dcmd(struct brcmf_pub *drvr, int ifidx,
483 uint cmd, void *buf, uint len)
485 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
486 struct sk_buff *skb = NULL;
490 brcmf_dbg(MSGBUF, "ifidx=%d, cmd=%d, len=%d\n", ifidx, cmd, len);
491 msgbuf->ctl_completed = false;
492 err = brcmf_msgbuf_tx_ioctl(drvr, ifidx, cmd, buf, len);
496 timeout = brcmf_msgbuf_ioctl_resp_wait(msgbuf);
498 brcmf_err("Timeout on response for query command\n");
502 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
504 msgbuf->ioctl_resp_pktid);
505 if (msgbuf->ioctl_resp_ret_len != 0) {
509 memcpy(buf, skb->data, (len < msgbuf->ioctl_resp_ret_len) ?
510 len : msgbuf->ioctl_resp_ret_len);
512 brcmu_pkt_buf_free_skb(skb);
514 return msgbuf->ioctl_resp_status;
518 static int brcmf_msgbuf_set_dcmd(struct brcmf_pub *drvr, int ifidx,
519 uint cmd, void *buf, uint len)
521 return brcmf_msgbuf_query_dcmd(drvr, ifidx, cmd, buf, len);
525 static int brcmf_msgbuf_hdrpull(struct brcmf_pub *drvr, bool do_fws,
526 struct sk_buff *skb, struct brcmf_if **ifp)
533 brcmf_msgbuf_remove_flowring(struct brcmf_msgbuf *msgbuf, u16 flowid)
538 brcmf_dbg(MSGBUF, "Removing flowring %d\n", flowid);
540 dma_sz = BRCMF_H2D_TXFLOWRING_MAX_ITEM * BRCMF_H2D_TXFLOWRING_ITEMSIZE;
541 dma_buf = msgbuf->flowrings[flowid]->buf_addr;
542 dma_free_coherent(msgbuf->drvr->bus_if->dev, dma_sz, dma_buf,
543 msgbuf->flowring_dma_handle[flowid]);
545 brcmf_flowring_delete(msgbuf->flow, flowid);
549 static struct brcmf_msgbuf_work_item *
550 brcmf_msgbuf_dequeue_work(struct brcmf_msgbuf *msgbuf)
552 struct brcmf_msgbuf_work_item *work = NULL;
555 spin_lock_irqsave(&msgbuf->flowring_work_lock, flags);
556 if (!list_empty(&msgbuf->work_queue)) {
557 work = list_first_entry(&msgbuf->work_queue,
558 struct brcmf_msgbuf_work_item, queue);
559 list_del(&work->queue);
561 spin_unlock_irqrestore(&msgbuf->flowring_work_lock, flags);
568 brcmf_msgbuf_flowring_create_worker(struct brcmf_msgbuf *msgbuf,
569 struct brcmf_msgbuf_work_item *work)
571 struct msgbuf_tx_flowring_create_req *create;
572 struct brcmf_commonring *commonring;
580 flowid = work->flowid;
581 dma_sz = BRCMF_H2D_TXFLOWRING_MAX_ITEM * BRCMF_H2D_TXFLOWRING_ITEMSIZE;
582 dma_buf = dma_alloc_coherent(msgbuf->drvr->bus_if->dev, dma_sz,
583 &msgbuf->flowring_dma_handle[flowid],
586 brcmf_err("dma_alloc_coherent failed\n");
587 brcmf_flowring_delete(msgbuf->flow, flowid);
588 return BRCMF_FLOWRING_INVALID_ID;
591 brcmf_commonring_config(msgbuf->flowrings[flowid],
592 BRCMF_H2D_TXFLOWRING_MAX_ITEM,
593 BRCMF_H2D_TXFLOWRING_ITEMSIZE, dma_buf);
595 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
596 brcmf_commonring_lock(commonring);
597 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
599 brcmf_err("Failed to reserve space in commonring\n");
600 brcmf_commonring_unlock(commonring);
601 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
602 return BRCMF_FLOWRING_INVALID_ID;
605 create = (struct msgbuf_tx_flowring_create_req *)ret_ptr;
606 create->msg.msgtype = MSGBUF_TYPE_FLOW_RING_CREATE;
607 create->msg.ifidx = work->ifidx;
608 create->msg.request_id = 0;
609 create->tid = brcmf_flowring_tid(msgbuf->flow, flowid);
610 create->flow_ring_id = cpu_to_le16(flowid +
611 BRCMF_NROF_H2D_COMMON_MSGRINGS);
612 memcpy(create->sa, work->sa, ETH_ALEN);
613 memcpy(create->da, work->da, ETH_ALEN);
614 address = (u64)msgbuf->flowring_dma_handle[flowid];
615 create->flow_ring_addr.high_addr = cpu_to_le32(address >> 32);
616 create->flow_ring_addr.low_addr = cpu_to_le32(address & 0xffffffff);
617 create->max_items = cpu_to_le16(BRCMF_H2D_TXFLOWRING_MAX_ITEM);
618 create->len_item = cpu_to_le16(BRCMF_H2D_TXFLOWRING_ITEMSIZE);
620 brcmf_dbg(MSGBUF, "Send Flow Create Req flow ID %d for peer %pM prio %d ifindex %d\n",
621 flowid, work->da, create->tid, work->ifidx);
623 err = brcmf_commonring_write_complete(commonring);
624 brcmf_commonring_unlock(commonring);
626 brcmf_err("Failed to write commonring\n");
627 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
628 return BRCMF_FLOWRING_INVALID_ID;
635 static void brcmf_msgbuf_flowring_worker(struct work_struct *work)
637 struct brcmf_msgbuf *msgbuf;
638 struct brcmf_msgbuf_work_item *create;
640 msgbuf = container_of(work, struct brcmf_msgbuf, flowring_work);
642 while ((create = brcmf_msgbuf_dequeue_work(msgbuf))) {
643 brcmf_msgbuf_flowring_create_worker(msgbuf, create);
649 static u32 brcmf_msgbuf_flowring_create(struct brcmf_msgbuf *msgbuf, int ifidx,
652 struct brcmf_msgbuf_work_item *create;
653 struct ethhdr *eh = (struct ethhdr *)(skb->data);
657 create = kzalloc(sizeof(*create), GFP_ATOMIC);
659 return BRCMF_FLOWRING_INVALID_ID;
661 flowid = brcmf_flowring_create(msgbuf->flow, eh->h_dest,
662 skb->priority, ifidx);
663 if (flowid == BRCMF_FLOWRING_INVALID_ID) {
668 create->flowid = flowid;
669 create->ifidx = ifidx;
670 memcpy(create->sa, eh->h_source, ETH_ALEN);
671 memcpy(create->da, eh->h_dest, ETH_ALEN);
673 spin_lock_irqsave(&msgbuf->flowring_work_lock, flags);
674 list_add_tail(&create->queue, &msgbuf->work_queue);
675 spin_unlock_irqrestore(&msgbuf->flowring_work_lock, flags);
676 schedule_work(&msgbuf->flowring_work);
682 static void brcmf_msgbuf_txflow(struct brcmf_msgbuf *msgbuf, u8 flowid)
684 struct brcmf_flowring *flow = msgbuf->flow;
685 struct brcmf_commonring *commonring;
691 struct msgbuf_tx_msghdr *tx_msghdr;
694 commonring = msgbuf->flowrings[flowid];
695 if (!brcmf_commonring_write_available(commonring))
698 brcmf_commonring_lock(commonring);
700 count = BRCMF_MSGBUF_TX_FLUSH_CNT2 - BRCMF_MSGBUF_TX_FLUSH_CNT1;
701 while (brcmf_flowring_qlen(flow, flowid)) {
702 skb = brcmf_flowring_dequeue(flow, flowid);
704 brcmf_err("No SKB, but qlen %d\n",
705 brcmf_flowring_qlen(flow, flowid));
709 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
710 msgbuf->tx_pktids, skb, ETH_HLEN,
711 &physaddr, &pktid)) {
712 brcmf_flowring_reinsert(flow, flowid, skb);
713 brcmf_err("No PKTID available !!\n");
716 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
718 brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
719 msgbuf->tx_pktids, pktid);
720 brcmf_flowring_reinsert(flow, flowid, skb);
725 tx_msghdr = (struct msgbuf_tx_msghdr *)ret_ptr;
727 tx_msghdr->msg.msgtype = MSGBUF_TYPE_TX_POST;
728 tx_msghdr->msg.request_id = cpu_to_le32(pktid);
729 tx_msghdr->msg.ifidx = brcmf_flowring_ifidx_get(flow, flowid);
730 tx_msghdr->flags = BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_3;
731 tx_msghdr->flags |= (skb->priority & 0x07) <<
732 BRCMF_MSGBUF_PKT_FLAGS_PRIO_SHIFT;
733 tx_msghdr->seg_cnt = 1;
734 memcpy(tx_msghdr->txhdr, skb->data, ETH_HLEN);
735 tx_msghdr->data_len = cpu_to_le16(skb->len - ETH_HLEN);
736 address = (u64)physaddr;
737 tx_msghdr->data_buf_addr.high_addr = cpu_to_le32(address >> 32);
738 tx_msghdr->data_buf_addr.low_addr =
739 cpu_to_le32(address & 0xffffffff);
740 tx_msghdr->metadata_buf_len = 0;
741 tx_msghdr->metadata_buf_addr.high_addr = 0;
742 tx_msghdr->metadata_buf_addr.low_addr = 0;
743 atomic_inc(&commonring->outstanding_tx);
744 if (count >= BRCMF_MSGBUF_TX_FLUSH_CNT2) {
745 brcmf_commonring_write_complete(commonring);
750 brcmf_commonring_write_complete(commonring);
751 brcmf_commonring_unlock(commonring);
755 static void brcmf_msgbuf_txflow_worker(struct work_struct *worker)
757 struct brcmf_msgbuf *msgbuf;
760 msgbuf = container_of(worker, struct brcmf_msgbuf, txflow_work);
761 for_each_set_bit(flowid, msgbuf->flow_map, msgbuf->nrof_flowrings) {
762 clear_bit(flowid, msgbuf->flow_map);
763 brcmf_msgbuf_txflow(msgbuf, flowid);
768 static int brcmf_msgbuf_schedule_txdata(struct brcmf_msgbuf *msgbuf, u32 flowid,
771 struct brcmf_commonring *commonring;
773 set_bit(flowid, msgbuf->flow_map);
774 commonring = msgbuf->flowrings[flowid];
775 if ((force) || (atomic_read(&commonring->outstanding_tx) <
776 BRCMF_MSGBUF_DELAY_TXWORKER_THRS))
777 queue_work(msgbuf->txflow_wq, &msgbuf->txflow_work);
783 static int brcmf_msgbuf_txdata(struct brcmf_pub *drvr, int ifidx,
784 u8 offset, struct sk_buff *skb)
786 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
787 struct brcmf_flowring *flow = msgbuf->flow;
788 struct ethhdr *eh = (struct ethhdr *)(skb->data);
793 flowid = brcmf_flowring_lookup(flow, eh->h_dest, skb->priority, ifidx);
794 if (flowid == BRCMF_FLOWRING_INVALID_ID) {
795 flowid = brcmf_msgbuf_flowring_create(msgbuf, ifidx, skb);
796 if (flowid == BRCMF_FLOWRING_INVALID_ID)
799 queue_count = brcmf_flowring_enqueue(flow, flowid, skb);
800 force = ((queue_count % BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS) == 0);
801 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, force);
808 brcmf_msgbuf_configure_addr_mode(struct brcmf_pub *drvr, int ifidx,
809 enum proto_addr_mode addr_mode)
811 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
813 brcmf_flowring_configure_addr_mode(msgbuf->flow, ifidx, addr_mode);
818 brcmf_msgbuf_delete_peer(struct brcmf_pub *drvr, int ifidx, u8 peer[ETH_ALEN])
820 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
822 brcmf_flowring_delete_peer(msgbuf->flow, ifidx, peer);
827 brcmf_msgbuf_add_tdls_peer(struct brcmf_pub *drvr, int ifidx, u8 peer[ETH_ALEN])
829 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
831 brcmf_flowring_add_tdls_peer(msgbuf->flow, ifidx, peer);
836 brcmf_msgbuf_process_ioctl_complete(struct brcmf_msgbuf *msgbuf, void *buf)
838 struct msgbuf_ioctl_resp_hdr *ioctl_resp;
840 ioctl_resp = (struct msgbuf_ioctl_resp_hdr *)buf;
842 msgbuf->ioctl_resp_status =
843 (s16)le16_to_cpu(ioctl_resp->compl_hdr.status);
844 msgbuf->ioctl_resp_ret_len = le16_to_cpu(ioctl_resp->resp_len);
845 msgbuf->ioctl_resp_pktid = le32_to_cpu(ioctl_resp->msg.request_id);
847 brcmf_msgbuf_ioctl_resp_wake(msgbuf);
849 if (msgbuf->cur_ioctlrespbuf)
850 msgbuf->cur_ioctlrespbuf--;
851 brcmf_msgbuf_rxbuf_ioctlresp_post(msgbuf);
856 brcmf_msgbuf_process_txstatus(struct brcmf_msgbuf *msgbuf, void *buf)
858 struct brcmf_commonring *commonring;
859 struct msgbuf_tx_status *tx_status;
864 tx_status = (struct msgbuf_tx_status *)buf;
865 idx = le32_to_cpu(tx_status->msg.request_id);
866 flowid = le16_to_cpu(tx_status->compl_hdr.flow_ring_id);
867 flowid -= BRCMF_NROF_H2D_COMMON_MSGRINGS;
868 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
869 msgbuf->tx_pktids, idx);
873 set_bit(flowid, msgbuf->txstatus_done_map);
874 commonring = msgbuf->flowrings[flowid];
875 atomic_dec(&commonring->outstanding_tx);
877 brcmf_txfinalize(brcmf_get_ifp(msgbuf->drvr, tx_status->msg.ifidx),
882 static u32 brcmf_msgbuf_rxbuf_data_post(struct brcmf_msgbuf *msgbuf, u32 count)
884 struct brcmf_commonring *commonring;
890 struct msgbuf_rx_bufpost *rx_bufpost;
895 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_RXPOST_SUBMIT];
896 ret_ptr = brcmf_commonring_reserve_for_write_multiple(commonring,
900 brcmf_dbg(MSGBUF, "Failed to reserve space in commonring\n");
904 for (i = 0; i < alloced; i++) {
905 rx_bufpost = (struct msgbuf_rx_bufpost *)ret_ptr;
906 memset(rx_bufpost, 0, sizeof(*rx_bufpost));
908 skb = brcmu_pkt_buf_get_skb(BRCMF_MSGBUF_MAX_PKT_SIZE);
911 brcmf_err("Failed to alloc SKB\n");
912 brcmf_commonring_write_cancel(commonring, alloced - i);
917 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
918 msgbuf->rx_pktids, skb, 0,
919 &physaddr, &pktid)) {
920 dev_kfree_skb_any(skb);
921 brcmf_err("No PKTID available !!\n");
922 brcmf_commonring_write_cancel(commonring, alloced - i);
926 if (msgbuf->rx_metadata_offset) {
927 address = (u64)physaddr;
928 rx_bufpost->metadata_buf_len =
929 cpu_to_le16(msgbuf->rx_metadata_offset);
930 rx_bufpost->metadata_buf_addr.high_addr =
931 cpu_to_le32(address >> 32);
932 rx_bufpost->metadata_buf_addr.low_addr =
933 cpu_to_le32(address & 0xffffffff);
935 skb_pull(skb, msgbuf->rx_metadata_offset);
937 physaddr += msgbuf->rx_metadata_offset;
939 rx_bufpost->msg.msgtype = MSGBUF_TYPE_RXBUF_POST;
940 rx_bufpost->msg.request_id = cpu_to_le32(pktid);
942 address = (u64)physaddr;
943 rx_bufpost->data_buf_len = cpu_to_le16((u16)pktlen);
944 rx_bufpost->data_buf_addr.high_addr =
945 cpu_to_le32(address >> 32);
946 rx_bufpost->data_buf_addr.low_addr =
947 cpu_to_le32(address & 0xffffffff);
949 ret_ptr += brcmf_commonring_len_item(commonring);
953 brcmf_commonring_write_complete(commonring);
960 brcmf_msgbuf_rxbuf_data_fill(struct brcmf_msgbuf *msgbuf)
965 fillbufs = msgbuf->max_rxbufpost - msgbuf->rxbufpost;
968 retcount = brcmf_msgbuf_rxbuf_data_post(msgbuf, fillbufs);
971 msgbuf->rxbufpost += retcount;
972 fillbufs -= retcount;
978 brcmf_msgbuf_update_rxbufpost_count(struct brcmf_msgbuf *msgbuf, u16 rxcnt)
980 msgbuf->rxbufpost -= rxcnt;
981 if (msgbuf->rxbufpost <= (msgbuf->max_rxbufpost -
982 BRCMF_MSGBUF_RXBUFPOST_THRESHOLD))
983 brcmf_msgbuf_rxbuf_data_fill(msgbuf);
988 brcmf_msgbuf_rxbuf_ctrl_post(struct brcmf_msgbuf *msgbuf, bool event_buf,
991 struct brcmf_commonring *commonring;
997 struct msgbuf_rx_ioctl_resp_or_event *rx_bufpost;
1002 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1003 brcmf_commonring_lock(commonring);
1004 ret_ptr = brcmf_commonring_reserve_for_write_multiple(commonring,
1008 brcmf_err("Failed to reserve space in commonring\n");
1009 brcmf_commonring_unlock(commonring);
1013 for (i = 0; i < alloced; i++) {
1014 rx_bufpost = (struct msgbuf_rx_ioctl_resp_or_event *)ret_ptr;
1015 memset(rx_bufpost, 0, sizeof(*rx_bufpost));
1017 skb = brcmu_pkt_buf_get_skb(BRCMF_MSGBUF_MAX_PKT_SIZE);
1020 brcmf_err("Failed to alloc SKB\n");
1021 brcmf_commonring_write_cancel(commonring, alloced - i);
1026 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
1027 msgbuf->rx_pktids, skb, 0,
1028 &physaddr, &pktid)) {
1029 dev_kfree_skb_any(skb);
1030 brcmf_err("No PKTID available !!\n");
1031 brcmf_commonring_write_cancel(commonring, alloced - i);
1035 rx_bufpost->msg.msgtype = MSGBUF_TYPE_EVENT_BUF_POST;
1037 rx_bufpost->msg.msgtype =
1038 MSGBUF_TYPE_IOCTLRESP_BUF_POST;
1039 rx_bufpost->msg.request_id = cpu_to_le32(pktid);
1041 address = (u64)physaddr;
1042 rx_bufpost->host_buf_len = cpu_to_le16((u16)pktlen);
1043 rx_bufpost->host_buf_addr.high_addr =
1044 cpu_to_le32(address >> 32);
1045 rx_bufpost->host_buf_addr.low_addr =
1046 cpu_to_le32(address & 0xffffffff);
1048 ret_ptr += brcmf_commonring_len_item(commonring);
1052 brcmf_commonring_write_complete(commonring);
1054 brcmf_commonring_unlock(commonring);
1060 static void brcmf_msgbuf_rxbuf_ioctlresp_post(struct brcmf_msgbuf *msgbuf)
1064 count = msgbuf->max_ioctlrespbuf - msgbuf->cur_ioctlrespbuf;
1065 count = brcmf_msgbuf_rxbuf_ctrl_post(msgbuf, false, count);
1066 msgbuf->cur_ioctlrespbuf += count;
1070 static void brcmf_msgbuf_rxbuf_event_post(struct brcmf_msgbuf *msgbuf)
1074 count = msgbuf->max_eventbuf - msgbuf->cur_eventbuf;
1075 count = brcmf_msgbuf_rxbuf_ctrl_post(msgbuf, true, count);
1076 msgbuf->cur_eventbuf += count;
1080 static void brcmf_msgbuf_process_event(struct brcmf_msgbuf *msgbuf, void *buf)
1082 struct msgbuf_rx_event *event;
1085 struct sk_buff *skb;
1086 struct brcmf_if *ifp;
1088 event = (struct msgbuf_rx_event *)buf;
1089 idx = le32_to_cpu(event->msg.request_id);
1090 buflen = le16_to_cpu(event->event_data_len);
1092 if (msgbuf->cur_eventbuf)
1093 msgbuf->cur_eventbuf--;
1094 brcmf_msgbuf_rxbuf_event_post(msgbuf);
1096 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
1097 msgbuf->rx_pktids, idx);
1101 if (msgbuf->rx_dataoffset)
1102 skb_pull(skb, msgbuf->rx_dataoffset);
1104 skb_trim(skb, buflen);
1106 ifp = brcmf_get_ifp(msgbuf->drvr, event->msg.ifidx);
1107 if (!ifp || !ifp->ndev) {
1108 brcmf_err("Received pkt for invalid ifidx %d\n",
1113 skb->protocol = eth_type_trans(skb, ifp->ndev);
1115 brcmf_fweh_process_skb(ifp->drvr, skb, 0);
1118 brcmu_pkt_buf_free_skb(skb);
1123 brcmf_msgbuf_process_rx_complete(struct brcmf_msgbuf *msgbuf, void *buf)
1125 struct msgbuf_rx_complete *rx_complete;
1126 struct sk_buff *skb;
1130 struct brcmf_if *ifp;
1132 brcmf_msgbuf_update_rxbufpost_count(msgbuf, 1);
1134 rx_complete = (struct msgbuf_rx_complete *)buf;
1135 data_offset = le16_to_cpu(rx_complete->data_offset);
1136 buflen = le16_to_cpu(rx_complete->data_len);
1137 idx = le32_to_cpu(rx_complete->msg.request_id);
1139 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
1140 msgbuf->rx_pktids, idx);
1145 skb_pull(skb, data_offset);
1146 else if (msgbuf->rx_dataoffset)
1147 skb_pull(skb, msgbuf->rx_dataoffset);
1149 skb_trim(skb, buflen);
1151 ifp = brcmf_get_ifp(msgbuf->drvr, rx_complete->msg.ifidx);
1152 if (!ifp || !ifp->ndev) {
1153 brcmf_err("Received pkt for invalid ifidx %d\n",
1154 rx_complete->msg.ifidx);
1155 brcmu_pkt_buf_free_skb(skb);
1158 brcmf_netif_rx(ifp, skb);
1163 brcmf_msgbuf_process_flow_ring_create_response(struct brcmf_msgbuf *msgbuf,
1166 struct msgbuf_flowring_create_resp *flowring_create_resp;
1170 flowring_create_resp = (struct msgbuf_flowring_create_resp *)buf;
1172 flowid = le16_to_cpu(flowring_create_resp->compl_hdr.flow_ring_id);
1173 flowid -= BRCMF_NROF_H2D_COMMON_MSGRINGS;
1174 status = le16_to_cpu(flowring_create_resp->compl_hdr.status);
1177 brcmf_err("Flowring creation failed, code %d\n", status);
1178 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1181 brcmf_dbg(MSGBUF, "Flowring %d Create response status %d\n", flowid,
1184 brcmf_flowring_open(msgbuf->flow, flowid);
1186 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, true);
1191 brcmf_msgbuf_process_flow_ring_delete_response(struct brcmf_msgbuf *msgbuf,
1194 struct msgbuf_flowring_delete_resp *flowring_delete_resp;
1198 flowring_delete_resp = (struct msgbuf_flowring_delete_resp *)buf;
1200 flowid = le16_to_cpu(flowring_delete_resp->compl_hdr.flow_ring_id);
1201 flowid -= BRCMF_NROF_H2D_COMMON_MSGRINGS;
1202 status = le16_to_cpu(flowring_delete_resp->compl_hdr.status);
1205 brcmf_err("Flowring deletion failed, code %d\n", status);
1206 brcmf_flowring_delete(msgbuf->flow, flowid);
1209 brcmf_dbg(MSGBUF, "Flowring %d Delete response status %d\n", flowid,
1212 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1216 static void brcmf_msgbuf_process_msgtype(struct brcmf_msgbuf *msgbuf, void *buf)
1218 struct msgbuf_common_hdr *msg;
1220 msg = (struct msgbuf_common_hdr *)buf;
1221 switch (msg->msgtype) {
1222 case MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT:
1223 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT\n");
1224 brcmf_msgbuf_process_flow_ring_create_response(msgbuf, buf);
1226 case MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT:
1227 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT\n");
1228 brcmf_msgbuf_process_flow_ring_delete_response(msgbuf, buf);
1230 case MSGBUF_TYPE_IOCTLPTR_REQ_ACK:
1231 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_IOCTLPTR_REQ_ACK\n");
1233 case MSGBUF_TYPE_IOCTL_CMPLT:
1234 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_IOCTL_CMPLT\n");
1235 brcmf_msgbuf_process_ioctl_complete(msgbuf, buf);
1237 case MSGBUF_TYPE_WL_EVENT:
1238 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_WL_EVENT\n");
1239 brcmf_msgbuf_process_event(msgbuf, buf);
1241 case MSGBUF_TYPE_TX_STATUS:
1242 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_TX_STATUS\n");
1243 brcmf_msgbuf_process_txstatus(msgbuf, buf);
1245 case MSGBUF_TYPE_RX_CMPLT:
1246 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_RX_CMPLT\n");
1247 brcmf_msgbuf_process_rx_complete(msgbuf, buf);
1250 brcmf_err("Unsupported msgtype %d\n", msg->msgtype);
1256 static void brcmf_msgbuf_process_rx(struct brcmf_msgbuf *msgbuf,
1257 struct brcmf_commonring *commonring)
1264 buf = brcmf_commonring_get_read_ptr(commonring, &count);
1270 brcmf_msgbuf_process_msgtype(msgbuf,
1271 buf + msgbuf->rx_dataoffset);
1272 buf += brcmf_commonring_len_item(commonring);
1274 if (processed == BRCMF_MSGBUF_UPDATE_RX_PTR_THRS) {
1275 brcmf_commonring_read_complete(commonring, processed);
1281 brcmf_commonring_read_complete(commonring, processed);
1283 if (commonring->r_ptr == 0)
1288 int brcmf_proto_msgbuf_rx_trigger(struct device *dev)
1290 struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1291 struct brcmf_pub *drvr = bus_if->drvr;
1292 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1293 struct brcmf_commonring *commonring;
1298 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_RX_COMPLETE];
1299 brcmf_msgbuf_process_rx(msgbuf, buf);
1300 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_TX_COMPLETE];
1301 brcmf_msgbuf_process_rx(msgbuf, buf);
1302 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_CONTROL_COMPLETE];
1303 brcmf_msgbuf_process_rx(msgbuf, buf);
1305 for_each_set_bit(flowid, msgbuf->txstatus_done_map,
1306 msgbuf->nrof_flowrings) {
1307 clear_bit(flowid, msgbuf->txstatus_done_map);
1308 commonring = msgbuf->flowrings[flowid];
1309 qlen = brcmf_flowring_qlen(msgbuf->flow, flowid);
1310 if ((qlen > BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS) ||
1311 ((qlen) && (atomic_read(&commonring->outstanding_tx) <
1312 BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS)))
1313 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, true);
1320 void brcmf_msgbuf_delete_flowring(struct brcmf_pub *drvr, u8 flowid)
1322 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1323 struct msgbuf_tx_flowring_delete_req *delete;
1324 struct brcmf_commonring *commonring;
1329 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1330 brcmf_commonring_lock(commonring);
1331 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
1333 brcmf_err("FW unaware, flowring will be removed !!\n");
1334 brcmf_commonring_unlock(commonring);
1335 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1339 delete = (struct msgbuf_tx_flowring_delete_req *)ret_ptr;
1341 ifidx = brcmf_flowring_ifidx_get(msgbuf->flow, flowid);
1343 delete->msg.msgtype = MSGBUF_TYPE_FLOW_RING_DELETE;
1344 delete->msg.ifidx = ifidx;
1345 delete->msg.request_id = 0;
1347 delete->flow_ring_id = cpu_to_le16(flowid +
1348 BRCMF_NROF_H2D_COMMON_MSGRINGS);
1351 brcmf_dbg(MSGBUF, "Send Flow Delete Req flow ID %d, ifindex %d\n",
1354 err = brcmf_commonring_write_complete(commonring);
1355 brcmf_commonring_unlock(commonring);
1357 brcmf_err("Failed to submit RING_DELETE, flowring will be removed\n");
1358 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1363 static int brcmf_msgbuf_stats_read(struct seq_file *seq, void *data)
1365 struct brcmf_bus *bus_if = dev_get_drvdata(seq->private);
1366 struct brcmf_pub *drvr = bus_if->drvr;
1367 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1368 struct brcmf_commonring *commonring;
1370 struct brcmf_flowring_ring *ring;
1371 struct brcmf_flowring_hash *hash;
1373 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1374 seq_printf(seq, "h2d_ctl_submit: rp %4u, wp %4u, depth %4u\n",
1375 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1376 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_RXPOST_SUBMIT];
1377 seq_printf(seq, "h2d_rx_submit: rp %4u, wp %4u, depth %4u\n",
1378 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1379 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_CONTROL_COMPLETE];
1380 seq_printf(seq, "d2h_ctl_cmplt: rp %4u, wp %4u, depth %4u\n",
1381 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1382 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_TX_COMPLETE];
1383 seq_printf(seq, "d2h_tx_cmplt: rp %4u, wp %4u, depth %4u\n",
1384 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1385 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_RX_COMPLETE];
1386 seq_printf(seq, "d2h_rx_cmplt: rp %4u, wp %4u, depth %4u\n",
1387 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1389 seq_printf(seq, "\nh2d_flowrings: depth %u\n",
1390 BRCMF_H2D_TXFLOWRING_MAX_ITEM);
1391 seq_puts(seq, "Active flowrings:\n");
1392 hash = msgbuf->flow->hash;
1393 for (i = 0; i < msgbuf->flow->nrofrings; i++) {
1394 if (!msgbuf->flow->rings[i])
1396 ring = msgbuf->flow->rings[i];
1397 if (ring->status != RING_OPEN)
1399 commonring = msgbuf->flowrings[i];
1400 hash = &msgbuf->flow->hash[ring->hash_id];
1401 seq_printf(seq, "id %3u: rp %4u, wp %4u, qlen %4u, blocked %u\n"
1402 " ifidx %u, fifo %u, da %pM\n",
1403 i, commonring->r_ptr, commonring->w_ptr,
1404 skb_queue_len(&ring->skblist), ring->blocked,
1405 hash->ifidx, hash->fifo, hash->mac);
1411 static int brcmf_msgbuf_stats_read(struct seq_file *seq, void *data)
1417 int brcmf_proto_msgbuf_attach(struct brcmf_pub *drvr)
1419 struct brcmf_bus_msgbuf *if_msgbuf;
1420 struct brcmf_msgbuf *msgbuf;
1424 if_msgbuf = drvr->bus_if->msgbuf;
1425 msgbuf = kzalloc(sizeof(*msgbuf), GFP_KERNEL);
1429 msgbuf->txflow_wq = create_singlethread_workqueue("msgbuf_txflow");
1430 if (msgbuf->txflow_wq == NULL) {
1431 brcmf_err("workqueue creation failed\n");
1434 INIT_WORK(&msgbuf->txflow_work, brcmf_msgbuf_txflow_worker);
1435 count = BITS_TO_LONGS(if_msgbuf->nrof_flowrings);
1436 count = count * sizeof(unsigned long);
1437 msgbuf->flow_map = kzalloc(count, GFP_KERNEL);
1438 if (!msgbuf->flow_map)
1441 msgbuf->txstatus_done_map = kzalloc(count, GFP_KERNEL);
1442 if (!msgbuf->txstatus_done_map)
1445 msgbuf->drvr = drvr;
1446 msgbuf->ioctbuf = dma_alloc_coherent(drvr->bus_if->dev,
1447 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1448 &msgbuf->ioctbuf_handle,
1450 if (!msgbuf->ioctbuf)
1452 address = (u64)msgbuf->ioctbuf_handle;
1453 msgbuf->ioctbuf_phys_hi = address >> 32;
1454 msgbuf->ioctbuf_phys_lo = address & 0xffffffff;
1456 drvr->proto->hdrpull = brcmf_msgbuf_hdrpull;
1457 drvr->proto->query_dcmd = brcmf_msgbuf_query_dcmd;
1458 drvr->proto->set_dcmd = brcmf_msgbuf_set_dcmd;
1459 drvr->proto->txdata = brcmf_msgbuf_txdata;
1460 drvr->proto->configure_addr_mode = brcmf_msgbuf_configure_addr_mode;
1461 drvr->proto->delete_peer = brcmf_msgbuf_delete_peer;
1462 drvr->proto->add_tdls_peer = brcmf_msgbuf_add_tdls_peer;
1463 drvr->proto->pd = msgbuf;
1465 init_waitqueue_head(&msgbuf->ioctl_resp_wait);
1467 msgbuf->commonrings =
1468 (struct brcmf_commonring **)if_msgbuf->commonrings;
1469 msgbuf->flowrings = (struct brcmf_commonring **)if_msgbuf->flowrings;
1470 msgbuf->nrof_flowrings = if_msgbuf->nrof_flowrings;
1471 msgbuf->flowring_dma_handle = kzalloc(msgbuf->nrof_flowrings *
1472 sizeof(*msgbuf->flowring_dma_handle), GFP_KERNEL);
1473 if (!msgbuf->flowring_dma_handle)
1476 msgbuf->rx_dataoffset = if_msgbuf->rx_dataoffset;
1477 msgbuf->max_rxbufpost = if_msgbuf->max_rxbufpost;
1479 msgbuf->max_ioctlrespbuf = BRCMF_MSGBUF_MAX_IOCTLRESPBUF_POST;
1480 msgbuf->max_eventbuf = BRCMF_MSGBUF_MAX_EVENTBUF_POST;
1482 msgbuf->tx_pktids = brcmf_msgbuf_init_pktids(NR_TX_PKTIDS,
1484 if (!msgbuf->tx_pktids)
1486 msgbuf->rx_pktids = brcmf_msgbuf_init_pktids(NR_RX_PKTIDS,
1488 if (!msgbuf->rx_pktids)
1491 msgbuf->flow = brcmf_flowring_attach(drvr->bus_if->dev,
1492 if_msgbuf->nrof_flowrings);
1497 brcmf_dbg(MSGBUF, "Feeding buffers, rx data %d, rx event %d, rx ioctl resp %d\n",
1498 msgbuf->max_rxbufpost, msgbuf->max_eventbuf,
1499 msgbuf->max_ioctlrespbuf);
1502 brcmf_msgbuf_rxbuf_data_fill(msgbuf);
1503 if (msgbuf->max_rxbufpost != msgbuf->rxbufpost)
1508 } while (count < 10);
1509 brcmf_msgbuf_rxbuf_event_post(msgbuf);
1510 brcmf_msgbuf_rxbuf_ioctlresp_post(msgbuf);
1512 INIT_WORK(&msgbuf->flowring_work, brcmf_msgbuf_flowring_worker);
1513 spin_lock_init(&msgbuf->flowring_work_lock);
1514 INIT_LIST_HEAD(&msgbuf->work_queue);
1516 brcmf_debugfs_add_entry(drvr, "msgbuf_stats", brcmf_msgbuf_stats_read);
1522 kfree(msgbuf->flow_map);
1523 kfree(msgbuf->txstatus_done_map);
1524 brcmf_msgbuf_release_pktids(msgbuf);
1525 kfree(msgbuf->flowring_dma_handle);
1526 if (msgbuf->ioctbuf)
1527 dma_free_coherent(drvr->bus_if->dev,
1528 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1530 msgbuf->ioctbuf_handle);
1537 void brcmf_proto_msgbuf_detach(struct brcmf_pub *drvr)
1539 struct brcmf_msgbuf *msgbuf;
1540 struct brcmf_msgbuf_work_item *work;
1542 brcmf_dbg(TRACE, "Enter\n");
1543 if (drvr->proto->pd) {
1544 msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1545 cancel_work_sync(&msgbuf->flowring_work);
1546 while (!list_empty(&msgbuf->work_queue)) {
1547 work = list_first_entry(&msgbuf->work_queue,
1548 struct brcmf_msgbuf_work_item,
1550 list_del(&work->queue);
1553 kfree(msgbuf->flow_map);
1554 kfree(msgbuf->txstatus_done_map);
1555 if (msgbuf->txflow_wq)
1556 destroy_workqueue(msgbuf->txflow_wq);
1558 brcmf_flowring_detach(msgbuf->flow);
1559 dma_free_coherent(drvr->bus_if->dev,
1560 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1561 msgbuf->ioctbuf, msgbuf->ioctbuf_handle);
1562 brcmf_msgbuf_release_pktids(msgbuf);
1563 kfree(msgbuf->flowring_dma_handle);
1565 drvr->proto->pd = NULL;