1 // SPDX-License-Identifier: ISC
3 * Copyright (c) 2014 Broadcom Corporation
6 /*******************************************************************************
7 * Communicates with the dongle by using dcmd codes.
8 * For certain dcmd codes, the dongle interprets string data from the host.
9 ******************************************************************************/
11 #include <linux/types.h>
12 #include <linux/netdevice.h>
13 #include <linux/etherdevice.h>
15 #include <brcmu_utils.h>
16 #include <brcmu_wifi.h>
22 #include "commonring.h"
25 #include "tracepoint.h"
28 #define MSGBUF_IOCTL_RESP_TIMEOUT msecs_to_jiffies(2000)
30 #define MSGBUF_TYPE_GEN_STATUS 0x1
31 #define MSGBUF_TYPE_RING_STATUS 0x2
32 #define MSGBUF_TYPE_FLOW_RING_CREATE 0x3
33 #define MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT 0x4
34 #define MSGBUF_TYPE_FLOW_RING_DELETE 0x5
35 #define MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT 0x6
36 #define MSGBUF_TYPE_FLOW_RING_FLUSH 0x7
37 #define MSGBUF_TYPE_FLOW_RING_FLUSH_CMPLT 0x8
38 #define MSGBUF_TYPE_IOCTLPTR_REQ 0x9
39 #define MSGBUF_TYPE_IOCTLPTR_REQ_ACK 0xA
40 #define MSGBUF_TYPE_IOCTLRESP_BUF_POST 0xB
41 #define MSGBUF_TYPE_IOCTL_CMPLT 0xC
42 #define MSGBUF_TYPE_EVENT_BUF_POST 0xD
43 #define MSGBUF_TYPE_WL_EVENT 0xE
44 #define MSGBUF_TYPE_TX_POST 0xF
45 #define MSGBUF_TYPE_TX_STATUS 0x10
46 #define MSGBUF_TYPE_RXBUF_POST 0x11
47 #define MSGBUF_TYPE_RX_CMPLT 0x12
48 #define MSGBUF_TYPE_LPBK_DMAXFER 0x13
49 #define MSGBUF_TYPE_LPBK_DMAXFER_CMPLT 0x14
51 #define NR_TX_PKTIDS 2048
52 #define NR_RX_PKTIDS 1024
54 #define BRCMF_IOCTL_REQ_PKTID 0xFFFE
56 #define BRCMF_MSGBUF_MAX_PKT_SIZE 2048
57 #define BRCMF_MSGBUF_MAX_CTL_PKT_SIZE 8192
58 #define BRCMF_MSGBUF_RXBUFPOST_THRESHOLD 32
59 #define BRCMF_MSGBUF_MAX_IOCTLRESPBUF_POST 8
60 #define BRCMF_MSGBUF_MAX_EVENTBUF_POST 8
62 #define BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_3 0x01
63 #define BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_11 0x02
64 #define BRCMF_MSGBUF_PKT_FLAGS_FRAME_MASK 0x07
65 #define BRCMF_MSGBUF_PKT_FLAGS_PRIO_SHIFT 5
67 #define BRCMF_MSGBUF_TX_FLUSH_CNT1 32
68 #define BRCMF_MSGBUF_TX_FLUSH_CNT2 96
70 #define BRCMF_MSGBUF_DELAY_TXWORKER_THRS 96
71 #define BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS 32
72 #define BRCMF_MSGBUF_UPDATE_RX_PTR_THRS 48
75 struct msgbuf_common_hdr {
83 struct msgbuf_ioctl_req_hdr {
84 struct msgbuf_common_hdr msg;
88 __le16 output_buf_len;
90 struct msgbuf_buf_addr req_buf_addr;
94 struct msgbuf_tx_msghdr {
95 struct msgbuf_common_hdr msg;
99 struct msgbuf_buf_addr metadata_buf_addr;
100 struct msgbuf_buf_addr data_buf_addr;
101 __le16 metadata_buf_len;
106 struct msgbuf_rx_bufpost {
107 struct msgbuf_common_hdr msg;
108 __le16 metadata_buf_len;
111 struct msgbuf_buf_addr metadata_buf_addr;
112 struct msgbuf_buf_addr data_buf_addr;
115 struct msgbuf_rx_ioctl_resp_or_event {
116 struct msgbuf_common_hdr msg;
119 struct msgbuf_buf_addr host_buf_addr;
123 struct msgbuf_completion_hdr {
128 /* Data struct for the MSGBUF_TYPE_GEN_STATUS */
129 struct msgbuf_gen_status {
130 struct msgbuf_common_hdr msg;
131 struct msgbuf_completion_hdr compl_hdr;
136 /* Data struct for the MSGBUF_TYPE_RING_STATUS */
137 struct msgbuf_ring_status {
138 struct msgbuf_common_hdr msg;
139 struct msgbuf_completion_hdr compl_hdr;
144 struct msgbuf_rx_event {
145 struct msgbuf_common_hdr msg;
146 struct msgbuf_completion_hdr compl_hdr;
147 __le16 event_data_len;
152 struct msgbuf_ioctl_resp_hdr {
153 struct msgbuf_common_hdr msg;
154 struct msgbuf_completion_hdr compl_hdr;
161 struct msgbuf_tx_status {
162 struct msgbuf_common_hdr msg;
163 struct msgbuf_completion_hdr compl_hdr;
168 struct msgbuf_rx_complete {
169 struct msgbuf_common_hdr msg;
170 struct msgbuf_completion_hdr compl_hdr;
180 struct msgbuf_tx_flowring_create_req {
181 struct msgbuf_common_hdr msg;
192 struct msgbuf_buf_addr flow_ring_addr;
195 struct msgbuf_tx_flowring_delete_req {
196 struct msgbuf_common_hdr msg;
202 struct msgbuf_flowring_create_resp {
203 struct msgbuf_common_hdr msg;
204 struct msgbuf_completion_hdr compl_hdr;
208 struct msgbuf_flowring_delete_resp {
209 struct msgbuf_common_hdr msg;
210 struct msgbuf_completion_hdr compl_hdr;
214 struct msgbuf_flowring_flush_resp {
215 struct msgbuf_common_hdr msg;
216 struct msgbuf_completion_hdr compl_hdr;
220 struct brcmf_msgbuf_work_item {
221 struct list_head queue;
228 struct brcmf_msgbuf {
229 struct brcmf_pub *drvr;
231 struct brcmf_commonring **commonrings;
232 struct brcmf_commonring **flowrings;
233 dma_addr_t *flowring_dma_handle;
236 u16 max_submissionrings;
237 u16 max_completionrings;
241 u16 rx_metadata_offset;
244 u32 max_ioctlrespbuf;
245 u32 cur_ioctlrespbuf;
250 dma_addr_t ioctbuf_handle;
253 int ioctl_resp_status;
254 u32 ioctl_resp_ret_len;
255 u32 ioctl_resp_pktid;
260 wait_queue_head_t ioctl_resp_wait;
263 struct brcmf_msgbuf_pktids *tx_pktids;
264 struct brcmf_msgbuf_pktids *rx_pktids;
265 struct brcmf_flowring *flow;
267 struct workqueue_struct *txflow_wq;
268 struct work_struct txflow_work;
269 unsigned long *flow_map;
270 unsigned long *txstatus_done_map;
272 struct work_struct flowring_work;
273 spinlock_t flowring_work_lock;
274 struct list_head work_queue;
277 struct brcmf_msgbuf_pktid {
284 struct brcmf_msgbuf_pktids {
286 u32 last_allocated_idx;
287 enum dma_data_direction direction;
288 struct brcmf_msgbuf_pktid *array;
291 static void brcmf_msgbuf_rxbuf_ioctlresp_post(struct brcmf_msgbuf *msgbuf);
294 static struct brcmf_msgbuf_pktids *
295 brcmf_msgbuf_init_pktids(u32 nr_array_entries,
296 enum dma_data_direction direction)
298 struct brcmf_msgbuf_pktid *array;
299 struct brcmf_msgbuf_pktids *pktids;
301 array = kcalloc(nr_array_entries, sizeof(*array), GFP_KERNEL);
305 pktids = kzalloc(sizeof(*pktids), GFP_KERNEL);
310 pktids->array = array;
311 pktids->array_size = nr_array_entries;
318 brcmf_msgbuf_alloc_pktid(struct device *dev,
319 struct brcmf_msgbuf_pktids *pktids,
320 struct sk_buff *skb, u16 data_offset,
321 dma_addr_t *physaddr, u32 *idx)
323 struct brcmf_msgbuf_pktid *array;
326 array = pktids->array;
328 *physaddr = dma_map_single(dev, skb->data + data_offset,
329 skb->len - data_offset, pktids->direction);
331 if (dma_mapping_error(dev, *physaddr)) {
332 brcmf_err("dma_map_single failed !!\n");
336 *idx = pktids->last_allocated_idx;
341 if (*idx == pktids->array_size)
343 if (array[*idx].allocated.counter == 0)
344 if (atomic_cmpxchg(&array[*idx].allocated, 0, 1) == 0)
347 } while (count < pktids->array_size);
349 if (count == pktids->array_size)
352 array[*idx].data_offset = data_offset;
353 array[*idx].physaddr = *physaddr;
354 array[*idx].skb = skb;
356 pktids->last_allocated_idx = *idx;
362 static struct sk_buff *
363 brcmf_msgbuf_get_pktid(struct device *dev, struct brcmf_msgbuf_pktids *pktids,
366 struct brcmf_msgbuf_pktid *pktid;
369 if (idx >= pktids->array_size) {
370 brcmf_err("Invalid packet id %d (max %d)\n", idx,
374 if (pktids->array[idx].allocated.counter) {
375 pktid = &pktids->array[idx];
376 dma_unmap_single(dev, pktid->physaddr,
377 pktid->skb->len - pktid->data_offset,
380 pktid->allocated.counter = 0;
383 brcmf_err("Invalid packet id %d (not in use)\n", idx);
391 brcmf_msgbuf_release_array(struct device *dev,
392 struct brcmf_msgbuf_pktids *pktids)
394 struct brcmf_msgbuf_pktid *array;
395 struct brcmf_msgbuf_pktid *pktid;
398 array = pktids->array;
401 if (array[count].allocated.counter) {
402 pktid = &array[count];
403 dma_unmap_single(dev, pktid->physaddr,
404 pktid->skb->len - pktid->data_offset,
406 brcmu_pkt_buf_free_skb(pktid->skb);
409 } while (count < pktids->array_size);
416 static void brcmf_msgbuf_release_pktids(struct brcmf_msgbuf *msgbuf)
418 if (msgbuf->rx_pktids)
419 brcmf_msgbuf_release_array(msgbuf->drvr->bus_if->dev,
421 if (msgbuf->tx_pktids)
422 brcmf_msgbuf_release_array(msgbuf->drvr->bus_if->dev,
427 static int brcmf_msgbuf_tx_ioctl(struct brcmf_pub *drvr, int ifidx,
428 uint cmd, void *buf, uint len)
430 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
431 struct brcmf_commonring *commonring;
432 struct msgbuf_ioctl_req_hdr *request;
437 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
438 brcmf_commonring_lock(commonring);
439 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
441 bphy_err(drvr, "Failed to reserve space in commonring\n");
442 brcmf_commonring_unlock(commonring);
448 request = (struct msgbuf_ioctl_req_hdr *)ret_ptr;
449 request->msg.msgtype = MSGBUF_TYPE_IOCTLPTR_REQ;
450 request->msg.ifidx = (u8)ifidx;
451 request->msg.flags = 0;
452 request->msg.request_id = cpu_to_le32(BRCMF_IOCTL_REQ_PKTID);
453 request->cmd = cpu_to_le32(cmd);
454 request->output_buf_len = cpu_to_le16(len);
455 request->trans_id = cpu_to_le16(msgbuf->reqid);
457 buf_len = min_t(u16, len, BRCMF_TX_IOCTL_MAX_MSG_SIZE);
458 request->input_buf_len = cpu_to_le16(buf_len);
459 request->req_buf_addr.high_addr = cpu_to_le32(msgbuf->ioctbuf_phys_hi);
460 request->req_buf_addr.low_addr = cpu_to_le32(msgbuf->ioctbuf_phys_lo);
462 memcpy(msgbuf->ioctbuf, buf, buf_len);
464 memset(msgbuf->ioctbuf, 0, buf_len);
466 err = brcmf_commonring_write_complete(commonring);
467 brcmf_commonring_unlock(commonring);
473 static int brcmf_msgbuf_ioctl_resp_wait(struct brcmf_msgbuf *msgbuf)
475 return wait_event_timeout(msgbuf->ioctl_resp_wait,
476 msgbuf->ctl_completed,
477 MSGBUF_IOCTL_RESP_TIMEOUT);
481 static void brcmf_msgbuf_ioctl_resp_wake(struct brcmf_msgbuf *msgbuf)
483 msgbuf->ctl_completed = true;
484 wake_up(&msgbuf->ioctl_resp_wait);
488 static int brcmf_msgbuf_query_dcmd(struct brcmf_pub *drvr, int ifidx,
489 uint cmd, void *buf, uint len, int *fwerr)
491 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
492 struct sk_buff *skb = NULL;
496 brcmf_dbg(MSGBUF, "ifidx=%d, cmd=%d, len=%d\n", ifidx, cmd, len);
498 msgbuf->ctl_completed = false;
499 err = brcmf_msgbuf_tx_ioctl(drvr, ifidx, cmd, buf, len);
503 timeout = brcmf_msgbuf_ioctl_resp_wait(msgbuf);
505 bphy_err(drvr, "Timeout on response for query command\n");
509 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
511 msgbuf->ioctl_resp_pktid);
512 if (msgbuf->ioctl_resp_ret_len != 0) {
516 memcpy(buf, skb->data, (len < msgbuf->ioctl_resp_ret_len) ?
517 len : msgbuf->ioctl_resp_ret_len);
519 brcmu_pkt_buf_free_skb(skb);
521 *fwerr = msgbuf->ioctl_resp_status;
526 static int brcmf_msgbuf_set_dcmd(struct brcmf_pub *drvr, int ifidx,
527 uint cmd, void *buf, uint len, int *fwerr)
529 return brcmf_msgbuf_query_dcmd(drvr, ifidx, cmd, buf, len, fwerr);
533 static int brcmf_msgbuf_hdrpull(struct brcmf_pub *drvr, bool do_fws,
534 struct sk_buff *skb, struct brcmf_if **ifp)
539 static void brcmf_msgbuf_rxreorder(struct brcmf_if *ifp, struct sk_buff *skb)
544 brcmf_msgbuf_remove_flowring(struct brcmf_msgbuf *msgbuf, u16 flowid)
549 brcmf_dbg(MSGBUF, "Removing flowring %d\n", flowid);
551 dma_sz = BRCMF_H2D_TXFLOWRING_MAX_ITEM * BRCMF_H2D_TXFLOWRING_ITEMSIZE;
552 dma_buf = msgbuf->flowrings[flowid]->buf_addr;
553 dma_free_coherent(msgbuf->drvr->bus_if->dev, dma_sz, dma_buf,
554 msgbuf->flowring_dma_handle[flowid]);
556 brcmf_flowring_delete(msgbuf->flow, flowid);
560 static struct brcmf_msgbuf_work_item *
561 brcmf_msgbuf_dequeue_work(struct brcmf_msgbuf *msgbuf)
563 struct brcmf_msgbuf_work_item *work = NULL;
566 spin_lock_irqsave(&msgbuf->flowring_work_lock, flags);
567 if (!list_empty(&msgbuf->work_queue)) {
568 work = list_first_entry(&msgbuf->work_queue,
569 struct brcmf_msgbuf_work_item, queue);
570 list_del(&work->queue);
572 spin_unlock_irqrestore(&msgbuf->flowring_work_lock, flags);
579 brcmf_msgbuf_flowring_create_worker(struct brcmf_msgbuf *msgbuf,
580 struct brcmf_msgbuf_work_item *work)
582 struct brcmf_pub *drvr = msgbuf->drvr;
583 struct msgbuf_tx_flowring_create_req *create;
584 struct brcmf_commonring *commonring;
592 flowid = work->flowid;
593 dma_sz = BRCMF_H2D_TXFLOWRING_MAX_ITEM * BRCMF_H2D_TXFLOWRING_ITEMSIZE;
594 dma_buf = dma_alloc_coherent(msgbuf->drvr->bus_if->dev, dma_sz,
595 &msgbuf->flowring_dma_handle[flowid],
598 bphy_err(drvr, "dma_alloc_coherent failed\n");
599 brcmf_flowring_delete(msgbuf->flow, flowid);
600 return BRCMF_FLOWRING_INVALID_ID;
603 brcmf_commonring_config(msgbuf->flowrings[flowid],
604 BRCMF_H2D_TXFLOWRING_MAX_ITEM,
605 BRCMF_H2D_TXFLOWRING_ITEMSIZE, dma_buf);
607 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
608 brcmf_commonring_lock(commonring);
609 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
611 bphy_err(drvr, "Failed to reserve space in commonring\n");
612 brcmf_commonring_unlock(commonring);
613 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
614 return BRCMF_FLOWRING_INVALID_ID;
617 create = (struct msgbuf_tx_flowring_create_req *)ret_ptr;
618 create->msg.msgtype = MSGBUF_TYPE_FLOW_RING_CREATE;
619 create->msg.ifidx = work->ifidx;
620 create->msg.request_id = 0;
621 create->tid = brcmf_flowring_tid(msgbuf->flow, flowid);
622 create->flow_ring_id = cpu_to_le16(flowid +
623 BRCMF_H2D_MSGRING_FLOWRING_IDSTART);
624 memcpy(create->sa, work->sa, ETH_ALEN);
625 memcpy(create->da, work->da, ETH_ALEN);
626 address = (u64)msgbuf->flowring_dma_handle[flowid];
627 create->flow_ring_addr.high_addr = cpu_to_le32(address >> 32);
628 create->flow_ring_addr.low_addr = cpu_to_le32(address & 0xffffffff);
629 create->max_items = cpu_to_le16(BRCMF_H2D_TXFLOWRING_MAX_ITEM);
630 create->len_item = cpu_to_le16(BRCMF_H2D_TXFLOWRING_ITEMSIZE);
632 brcmf_dbg(MSGBUF, "Send Flow Create Req flow ID %d for peer %pM prio %d ifindex %d\n",
633 flowid, work->da, create->tid, work->ifidx);
635 err = brcmf_commonring_write_complete(commonring);
636 brcmf_commonring_unlock(commonring);
638 bphy_err(drvr, "Failed to write commonring\n");
639 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
640 return BRCMF_FLOWRING_INVALID_ID;
647 static void brcmf_msgbuf_flowring_worker(struct work_struct *work)
649 struct brcmf_msgbuf *msgbuf;
650 struct brcmf_msgbuf_work_item *create;
652 msgbuf = container_of(work, struct brcmf_msgbuf, flowring_work);
654 while ((create = brcmf_msgbuf_dequeue_work(msgbuf))) {
655 brcmf_msgbuf_flowring_create_worker(msgbuf, create);
661 static u32 brcmf_msgbuf_flowring_create(struct brcmf_msgbuf *msgbuf, int ifidx,
664 struct brcmf_msgbuf_work_item *create;
665 struct ethhdr *eh = (struct ethhdr *)(skb->data);
669 create = kzalloc(sizeof(*create), GFP_ATOMIC);
671 return BRCMF_FLOWRING_INVALID_ID;
673 flowid = brcmf_flowring_create(msgbuf->flow, eh->h_dest,
674 skb->priority, ifidx);
675 if (flowid == BRCMF_FLOWRING_INVALID_ID) {
680 create->flowid = flowid;
681 create->ifidx = ifidx;
682 memcpy(create->sa, eh->h_source, ETH_ALEN);
683 memcpy(create->da, eh->h_dest, ETH_ALEN);
685 spin_lock_irqsave(&msgbuf->flowring_work_lock, flags);
686 list_add_tail(&create->queue, &msgbuf->work_queue);
687 spin_unlock_irqrestore(&msgbuf->flowring_work_lock, flags);
688 schedule_work(&msgbuf->flowring_work);
694 static void brcmf_msgbuf_txflow(struct brcmf_msgbuf *msgbuf, u16 flowid)
696 struct brcmf_flowring *flow = msgbuf->flow;
697 struct brcmf_pub *drvr = msgbuf->drvr;
698 struct brcmf_commonring *commonring;
704 struct msgbuf_tx_msghdr *tx_msghdr;
707 commonring = msgbuf->flowrings[flowid];
708 if (!brcmf_commonring_write_available(commonring))
711 brcmf_commonring_lock(commonring);
713 count = BRCMF_MSGBUF_TX_FLUSH_CNT2 - BRCMF_MSGBUF_TX_FLUSH_CNT1;
714 while (brcmf_flowring_qlen(flow, flowid)) {
715 skb = brcmf_flowring_dequeue(flow, flowid);
717 bphy_err(drvr, "No SKB, but qlen %d\n",
718 brcmf_flowring_qlen(flow, flowid));
722 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
723 msgbuf->tx_pktids, skb, ETH_HLEN,
724 &physaddr, &pktid)) {
725 brcmf_flowring_reinsert(flow, flowid, skb);
726 bphy_err(drvr, "No PKTID available !!\n");
729 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
731 brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
732 msgbuf->tx_pktids, pktid);
733 brcmf_flowring_reinsert(flow, flowid, skb);
738 tx_msghdr = (struct msgbuf_tx_msghdr *)ret_ptr;
740 tx_msghdr->msg.msgtype = MSGBUF_TYPE_TX_POST;
741 tx_msghdr->msg.request_id = cpu_to_le32(pktid + 1);
742 tx_msghdr->msg.ifidx = brcmf_flowring_ifidx_get(flow, flowid);
743 tx_msghdr->flags = BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_3;
744 tx_msghdr->flags |= (skb->priority & 0x07) <<
745 BRCMF_MSGBUF_PKT_FLAGS_PRIO_SHIFT;
746 tx_msghdr->seg_cnt = 1;
747 memcpy(tx_msghdr->txhdr, skb->data, ETH_HLEN);
748 tx_msghdr->data_len = cpu_to_le16(skb->len - ETH_HLEN);
749 address = (u64)physaddr;
750 tx_msghdr->data_buf_addr.high_addr = cpu_to_le32(address >> 32);
751 tx_msghdr->data_buf_addr.low_addr =
752 cpu_to_le32(address & 0xffffffff);
753 tx_msghdr->metadata_buf_len = 0;
754 tx_msghdr->metadata_buf_addr.high_addr = 0;
755 tx_msghdr->metadata_buf_addr.low_addr = 0;
756 atomic_inc(&commonring->outstanding_tx);
757 if (count >= BRCMF_MSGBUF_TX_FLUSH_CNT2) {
758 brcmf_commonring_write_complete(commonring);
763 brcmf_commonring_write_complete(commonring);
764 brcmf_commonring_unlock(commonring);
768 static void brcmf_msgbuf_txflow_worker(struct work_struct *worker)
770 struct brcmf_msgbuf *msgbuf;
773 msgbuf = container_of(worker, struct brcmf_msgbuf, txflow_work);
774 for_each_set_bit(flowid, msgbuf->flow_map, msgbuf->max_flowrings) {
775 clear_bit(flowid, msgbuf->flow_map);
776 brcmf_msgbuf_txflow(msgbuf, flowid);
781 static int brcmf_msgbuf_schedule_txdata(struct brcmf_msgbuf *msgbuf, u32 flowid,
784 struct brcmf_commonring *commonring;
786 set_bit(flowid, msgbuf->flow_map);
787 commonring = msgbuf->flowrings[flowid];
788 if ((force) || (atomic_read(&commonring->outstanding_tx) <
789 BRCMF_MSGBUF_DELAY_TXWORKER_THRS))
790 queue_work(msgbuf->txflow_wq, &msgbuf->txflow_work);
796 static int brcmf_msgbuf_tx_queue_data(struct brcmf_pub *drvr, int ifidx,
799 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
800 struct brcmf_flowring *flow = msgbuf->flow;
801 struct ethhdr *eh = (struct ethhdr *)(skb->data);
806 flowid = brcmf_flowring_lookup(flow, eh->h_dest, skb->priority, ifidx);
807 if (flowid == BRCMF_FLOWRING_INVALID_ID) {
808 flowid = brcmf_msgbuf_flowring_create(msgbuf, ifidx, skb);
809 if (flowid == BRCMF_FLOWRING_INVALID_ID)
812 queue_count = brcmf_flowring_enqueue(flow, flowid, skb);
813 force = ((queue_count % BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS) == 0);
814 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, force);
821 brcmf_msgbuf_configure_addr_mode(struct brcmf_pub *drvr, int ifidx,
822 enum proto_addr_mode addr_mode)
824 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
826 brcmf_flowring_configure_addr_mode(msgbuf->flow, ifidx, addr_mode);
831 brcmf_msgbuf_delete_peer(struct brcmf_pub *drvr, int ifidx, u8 peer[ETH_ALEN])
833 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
835 brcmf_flowring_delete_peer(msgbuf->flow, ifidx, peer);
840 brcmf_msgbuf_add_tdls_peer(struct brcmf_pub *drvr, int ifidx, u8 peer[ETH_ALEN])
842 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
844 brcmf_flowring_add_tdls_peer(msgbuf->flow, ifidx, peer);
849 brcmf_msgbuf_process_ioctl_complete(struct brcmf_msgbuf *msgbuf, void *buf)
851 struct msgbuf_ioctl_resp_hdr *ioctl_resp;
853 ioctl_resp = (struct msgbuf_ioctl_resp_hdr *)buf;
855 msgbuf->ioctl_resp_status =
856 (s16)le16_to_cpu(ioctl_resp->compl_hdr.status);
857 msgbuf->ioctl_resp_ret_len = le16_to_cpu(ioctl_resp->resp_len);
858 msgbuf->ioctl_resp_pktid = le32_to_cpu(ioctl_resp->msg.request_id);
860 brcmf_msgbuf_ioctl_resp_wake(msgbuf);
862 if (msgbuf->cur_ioctlrespbuf)
863 msgbuf->cur_ioctlrespbuf--;
864 brcmf_msgbuf_rxbuf_ioctlresp_post(msgbuf);
869 brcmf_msgbuf_process_txstatus(struct brcmf_msgbuf *msgbuf, void *buf)
871 struct brcmf_commonring *commonring;
872 struct msgbuf_tx_status *tx_status;
877 tx_status = (struct msgbuf_tx_status *)buf;
878 idx = le32_to_cpu(tx_status->msg.request_id) - 1;
879 flowid = le16_to_cpu(tx_status->compl_hdr.flow_ring_id);
880 flowid -= BRCMF_H2D_MSGRING_FLOWRING_IDSTART;
881 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
882 msgbuf->tx_pktids, idx);
886 set_bit(flowid, msgbuf->txstatus_done_map);
887 commonring = msgbuf->flowrings[flowid];
888 atomic_dec(&commonring->outstanding_tx);
890 brcmf_txfinalize(brcmf_get_ifp(msgbuf->drvr, tx_status->msg.ifidx),
895 static u32 brcmf_msgbuf_rxbuf_data_post(struct brcmf_msgbuf *msgbuf, u32 count)
897 struct brcmf_pub *drvr = msgbuf->drvr;
898 struct brcmf_commonring *commonring;
904 struct msgbuf_rx_bufpost *rx_bufpost;
909 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_RXPOST_SUBMIT];
910 ret_ptr = brcmf_commonring_reserve_for_write_multiple(commonring,
914 brcmf_dbg(MSGBUF, "Failed to reserve space in commonring\n");
918 for (i = 0; i < alloced; i++) {
919 rx_bufpost = (struct msgbuf_rx_bufpost *)ret_ptr;
920 memset(rx_bufpost, 0, sizeof(*rx_bufpost));
922 skb = brcmu_pkt_buf_get_skb(BRCMF_MSGBUF_MAX_PKT_SIZE);
925 bphy_err(drvr, "Failed to alloc SKB\n");
926 brcmf_commonring_write_cancel(commonring, alloced - i);
931 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
932 msgbuf->rx_pktids, skb, 0,
933 &physaddr, &pktid)) {
934 dev_kfree_skb_any(skb);
935 bphy_err(drvr, "No PKTID available !!\n");
936 brcmf_commonring_write_cancel(commonring, alloced - i);
940 if (msgbuf->rx_metadata_offset) {
941 address = (u64)physaddr;
942 rx_bufpost->metadata_buf_len =
943 cpu_to_le16(msgbuf->rx_metadata_offset);
944 rx_bufpost->metadata_buf_addr.high_addr =
945 cpu_to_le32(address >> 32);
946 rx_bufpost->metadata_buf_addr.low_addr =
947 cpu_to_le32(address & 0xffffffff);
949 skb_pull(skb, msgbuf->rx_metadata_offset);
951 physaddr += msgbuf->rx_metadata_offset;
953 rx_bufpost->msg.msgtype = MSGBUF_TYPE_RXBUF_POST;
954 rx_bufpost->msg.request_id = cpu_to_le32(pktid);
956 address = (u64)physaddr;
957 rx_bufpost->data_buf_len = cpu_to_le16((u16)pktlen);
958 rx_bufpost->data_buf_addr.high_addr =
959 cpu_to_le32(address >> 32);
960 rx_bufpost->data_buf_addr.low_addr =
961 cpu_to_le32(address & 0xffffffff);
963 ret_ptr += brcmf_commonring_len_item(commonring);
967 brcmf_commonring_write_complete(commonring);
974 brcmf_msgbuf_rxbuf_data_fill(struct brcmf_msgbuf *msgbuf)
979 fillbufs = msgbuf->max_rxbufpost - msgbuf->rxbufpost;
982 retcount = brcmf_msgbuf_rxbuf_data_post(msgbuf, fillbufs);
985 msgbuf->rxbufpost += retcount;
986 fillbufs -= retcount;
992 brcmf_msgbuf_update_rxbufpost_count(struct brcmf_msgbuf *msgbuf, u16 rxcnt)
994 msgbuf->rxbufpost -= rxcnt;
995 if (msgbuf->rxbufpost <= (msgbuf->max_rxbufpost -
996 BRCMF_MSGBUF_RXBUFPOST_THRESHOLD))
997 brcmf_msgbuf_rxbuf_data_fill(msgbuf);
1002 brcmf_msgbuf_rxbuf_ctrl_post(struct brcmf_msgbuf *msgbuf, bool event_buf,
1005 struct brcmf_pub *drvr = msgbuf->drvr;
1006 struct brcmf_commonring *commonring;
1008 struct sk_buff *skb;
1011 dma_addr_t physaddr;
1012 struct msgbuf_rx_ioctl_resp_or_event *rx_bufpost;
1017 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1018 brcmf_commonring_lock(commonring);
1019 ret_ptr = brcmf_commonring_reserve_for_write_multiple(commonring,
1023 bphy_err(drvr, "Failed to reserve space in commonring\n");
1024 brcmf_commonring_unlock(commonring);
1028 for (i = 0; i < alloced; i++) {
1029 rx_bufpost = (struct msgbuf_rx_ioctl_resp_or_event *)ret_ptr;
1030 memset(rx_bufpost, 0, sizeof(*rx_bufpost));
1032 skb = brcmu_pkt_buf_get_skb(BRCMF_MSGBUF_MAX_CTL_PKT_SIZE);
1035 bphy_err(drvr, "Failed to alloc SKB\n");
1036 brcmf_commonring_write_cancel(commonring, alloced - i);
1041 if (brcmf_msgbuf_alloc_pktid(msgbuf->drvr->bus_if->dev,
1042 msgbuf->rx_pktids, skb, 0,
1043 &physaddr, &pktid)) {
1044 dev_kfree_skb_any(skb);
1045 bphy_err(drvr, "No PKTID available !!\n");
1046 brcmf_commonring_write_cancel(commonring, alloced - i);
1050 rx_bufpost->msg.msgtype = MSGBUF_TYPE_EVENT_BUF_POST;
1052 rx_bufpost->msg.msgtype =
1053 MSGBUF_TYPE_IOCTLRESP_BUF_POST;
1054 rx_bufpost->msg.request_id = cpu_to_le32(pktid);
1056 address = (u64)physaddr;
1057 rx_bufpost->host_buf_len = cpu_to_le16((u16)pktlen);
1058 rx_bufpost->host_buf_addr.high_addr =
1059 cpu_to_le32(address >> 32);
1060 rx_bufpost->host_buf_addr.low_addr =
1061 cpu_to_le32(address & 0xffffffff);
1063 ret_ptr += brcmf_commonring_len_item(commonring);
1067 brcmf_commonring_write_complete(commonring);
1069 brcmf_commonring_unlock(commonring);
1075 static void brcmf_msgbuf_rxbuf_ioctlresp_post(struct brcmf_msgbuf *msgbuf)
1079 count = msgbuf->max_ioctlrespbuf - msgbuf->cur_ioctlrespbuf;
1080 count = brcmf_msgbuf_rxbuf_ctrl_post(msgbuf, false, count);
1081 msgbuf->cur_ioctlrespbuf += count;
1085 static void brcmf_msgbuf_rxbuf_event_post(struct brcmf_msgbuf *msgbuf)
1089 count = msgbuf->max_eventbuf - msgbuf->cur_eventbuf;
1090 count = brcmf_msgbuf_rxbuf_ctrl_post(msgbuf, true, count);
1091 msgbuf->cur_eventbuf += count;
1095 static void brcmf_msgbuf_process_event(struct brcmf_msgbuf *msgbuf, void *buf)
1097 struct brcmf_pub *drvr = msgbuf->drvr;
1098 struct msgbuf_rx_event *event;
1101 struct sk_buff *skb;
1102 struct brcmf_if *ifp;
1104 event = (struct msgbuf_rx_event *)buf;
1105 idx = le32_to_cpu(event->msg.request_id);
1106 buflen = le16_to_cpu(event->event_data_len);
1108 if (msgbuf->cur_eventbuf)
1109 msgbuf->cur_eventbuf--;
1110 brcmf_msgbuf_rxbuf_event_post(msgbuf);
1112 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
1113 msgbuf->rx_pktids, idx);
1117 if (msgbuf->rx_dataoffset)
1118 skb_pull(skb, msgbuf->rx_dataoffset);
1120 skb_trim(skb, buflen);
1122 ifp = brcmf_get_ifp(msgbuf->drvr, event->msg.ifidx);
1123 if (!ifp || !ifp->ndev) {
1124 bphy_err(drvr, "Received pkt for invalid ifidx %d\n",
1129 skb->protocol = eth_type_trans(skb, ifp->ndev);
1131 brcmf_fweh_process_skb(ifp->drvr, skb, 0, GFP_KERNEL);
1134 brcmu_pkt_buf_free_skb(skb);
1139 brcmf_msgbuf_process_rx_complete(struct brcmf_msgbuf *msgbuf, void *buf)
1141 struct brcmf_pub *drvr = msgbuf->drvr;
1142 struct msgbuf_rx_complete *rx_complete;
1143 struct sk_buff *skb;
1148 struct brcmf_if *ifp;
1150 brcmf_msgbuf_update_rxbufpost_count(msgbuf, 1);
1152 rx_complete = (struct msgbuf_rx_complete *)buf;
1153 data_offset = le16_to_cpu(rx_complete->data_offset);
1154 buflen = le16_to_cpu(rx_complete->data_len);
1155 idx = le32_to_cpu(rx_complete->msg.request_id);
1156 flags = le16_to_cpu(rx_complete->flags);
1158 skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev,
1159 msgbuf->rx_pktids, idx);
1164 skb_pull(skb, data_offset);
1165 else if (msgbuf->rx_dataoffset)
1166 skb_pull(skb, msgbuf->rx_dataoffset);
1168 skb_trim(skb, buflen);
1170 if ((flags & BRCMF_MSGBUF_PKT_FLAGS_FRAME_MASK) ==
1171 BRCMF_MSGBUF_PKT_FLAGS_FRAME_802_11) {
1172 ifp = msgbuf->drvr->mon_if;
1175 bphy_err(drvr, "Received unexpected monitor pkt\n");
1176 brcmu_pkt_buf_free_skb(skb);
1180 brcmf_netif_mon_rx(ifp, skb);
1184 ifp = brcmf_get_ifp(msgbuf->drvr, rx_complete->msg.ifidx);
1185 if (!ifp || !ifp->ndev) {
1186 bphy_err(drvr, "Received pkt for invalid ifidx %d\n",
1187 rx_complete->msg.ifidx);
1188 brcmu_pkt_buf_free_skb(skb);
1192 skb->protocol = eth_type_trans(skb, ifp->ndev);
1193 brcmf_netif_rx(ifp, skb);
1196 static void brcmf_msgbuf_process_gen_status(struct brcmf_msgbuf *msgbuf,
1199 struct msgbuf_gen_status *gen_status = buf;
1200 struct brcmf_pub *drvr = msgbuf->drvr;
1203 err = le16_to_cpu(gen_status->compl_hdr.status);
1205 bphy_err(drvr, "Firmware reported general error: %d\n", err);
1208 static void brcmf_msgbuf_process_ring_status(struct brcmf_msgbuf *msgbuf,
1211 struct msgbuf_ring_status *ring_status = buf;
1212 struct brcmf_pub *drvr = msgbuf->drvr;
1215 err = le16_to_cpu(ring_status->compl_hdr.status);
1217 int ring = le16_to_cpu(ring_status->compl_hdr.flow_ring_id);
1219 bphy_err(drvr, "Firmware reported ring %d error: %d\n", ring,
1225 brcmf_msgbuf_process_flow_ring_create_response(struct brcmf_msgbuf *msgbuf,
1228 struct brcmf_pub *drvr = msgbuf->drvr;
1229 struct msgbuf_flowring_create_resp *flowring_create_resp;
1233 flowring_create_resp = (struct msgbuf_flowring_create_resp *)buf;
1235 flowid = le16_to_cpu(flowring_create_resp->compl_hdr.flow_ring_id);
1236 flowid -= BRCMF_H2D_MSGRING_FLOWRING_IDSTART;
1237 status = le16_to_cpu(flowring_create_resp->compl_hdr.status);
1240 bphy_err(drvr, "Flowring creation failed, code %d\n", status);
1241 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1244 brcmf_dbg(MSGBUF, "Flowring %d Create response status %d\n", flowid,
1247 brcmf_flowring_open(msgbuf->flow, flowid);
1249 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, true);
1254 brcmf_msgbuf_process_flow_ring_delete_response(struct brcmf_msgbuf *msgbuf,
1257 struct brcmf_pub *drvr = msgbuf->drvr;
1258 struct msgbuf_flowring_delete_resp *flowring_delete_resp;
1262 flowring_delete_resp = (struct msgbuf_flowring_delete_resp *)buf;
1264 flowid = le16_to_cpu(flowring_delete_resp->compl_hdr.flow_ring_id);
1265 flowid -= BRCMF_H2D_MSGRING_FLOWRING_IDSTART;
1266 status = le16_to_cpu(flowring_delete_resp->compl_hdr.status);
1269 bphy_err(drvr, "Flowring deletion failed, code %d\n", status);
1270 brcmf_flowring_delete(msgbuf->flow, flowid);
1273 brcmf_dbg(MSGBUF, "Flowring %d Delete response status %d\n", flowid,
1276 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1280 static void brcmf_msgbuf_process_msgtype(struct brcmf_msgbuf *msgbuf, void *buf)
1282 struct brcmf_pub *drvr = msgbuf->drvr;
1283 struct msgbuf_common_hdr *msg;
1285 msg = (struct msgbuf_common_hdr *)buf;
1286 switch (msg->msgtype) {
1287 case MSGBUF_TYPE_GEN_STATUS:
1288 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_GEN_STATUS\n");
1289 brcmf_msgbuf_process_gen_status(msgbuf, buf);
1291 case MSGBUF_TYPE_RING_STATUS:
1292 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_RING_STATUS\n");
1293 brcmf_msgbuf_process_ring_status(msgbuf, buf);
1295 case MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT:
1296 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_FLOW_RING_CREATE_CMPLT\n");
1297 brcmf_msgbuf_process_flow_ring_create_response(msgbuf, buf);
1299 case MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT:
1300 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_FLOW_RING_DELETE_CMPLT\n");
1301 brcmf_msgbuf_process_flow_ring_delete_response(msgbuf, buf);
1303 case MSGBUF_TYPE_IOCTLPTR_REQ_ACK:
1304 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_IOCTLPTR_REQ_ACK\n");
1306 case MSGBUF_TYPE_IOCTL_CMPLT:
1307 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_IOCTL_CMPLT\n");
1308 brcmf_msgbuf_process_ioctl_complete(msgbuf, buf);
1310 case MSGBUF_TYPE_WL_EVENT:
1311 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_WL_EVENT\n");
1312 brcmf_msgbuf_process_event(msgbuf, buf);
1314 case MSGBUF_TYPE_TX_STATUS:
1315 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_TX_STATUS\n");
1316 brcmf_msgbuf_process_txstatus(msgbuf, buf);
1318 case MSGBUF_TYPE_RX_CMPLT:
1319 brcmf_dbg(MSGBUF, "MSGBUF_TYPE_RX_CMPLT\n");
1320 brcmf_msgbuf_process_rx_complete(msgbuf, buf);
1323 bphy_err(drvr, "Unsupported msgtype %d\n", msg->msgtype);
1329 static void brcmf_msgbuf_process_rx(struct brcmf_msgbuf *msgbuf,
1330 struct brcmf_commonring *commonring)
1337 buf = brcmf_commonring_get_read_ptr(commonring, &count);
1343 brcmf_msgbuf_process_msgtype(msgbuf,
1344 buf + msgbuf->rx_dataoffset);
1345 buf += brcmf_commonring_len_item(commonring);
1347 if (processed == BRCMF_MSGBUF_UPDATE_RX_PTR_THRS) {
1348 brcmf_commonring_read_complete(commonring, processed);
1354 brcmf_commonring_read_complete(commonring, processed);
1356 if (commonring->r_ptr == 0)
1361 int brcmf_proto_msgbuf_rx_trigger(struct device *dev)
1363 struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1364 struct brcmf_pub *drvr = bus_if->drvr;
1365 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1366 struct brcmf_commonring *commonring;
1371 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_RX_COMPLETE];
1372 brcmf_msgbuf_process_rx(msgbuf, buf);
1373 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_TX_COMPLETE];
1374 brcmf_msgbuf_process_rx(msgbuf, buf);
1375 buf = msgbuf->commonrings[BRCMF_D2H_MSGRING_CONTROL_COMPLETE];
1376 brcmf_msgbuf_process_rx(msgbuf, buf);
1378 for_each_set_bit(flowid, msgbuf->txstatus_done_map,
1379 msgbuf->max_flowrings) {
1380 clear_bit(flowid, msgbuf->txstatus_done_map);
1381 commonring = msgbuf->flowrings[flowid];
1382 qlen = brcmf_flowring_qlen(msgbuf->flow, flowid);
1383 if ((qlen > BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS) ||
1384 ((qlen) && (atomic_read(&commonring->outstanding_tx) <
1385 BRCMF_MSGBUF_TRICKLE_TXWORKER_THRS)))
1386 brcmf_msgbuf_schedule_txdata(msgbuf, flowid, true);
1393 void brcmf_msgbuf_delete_flowring(struct brcmf_pub *drvr, u16 flowid)
1395 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1396 struct msgbuf_tx_flowring_delete_req *delete;
1397 struct brcmf_commonring *commonring;
1402 /* no need to submit if firmware can not be reached */
1403 if (drvr->bus_if->state != BRCMF_BUS_UP) {
1404 brcmf_dbg(MSGBUF, "bus down, flowring will be removed\n");
1405 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1409 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1410 brcmf_commonring_lock(commonring);
1411 ret_ptr = brcmf_commonring_reserve_for_write(commonring);
1413 bphy_err(drvr, "FW unaware, flowring will be removed !!\n");
1414 brcmf_commonring_unlock(commonring);
1415 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1419 delete = (struct msgbuf_tx_flowring_delete_req *)ret_ptr;
1421 ifidx = brcmf_flowring_ifidx_get(msgbuf->flow, flowid);
1423 delete->msg.msgtype = MSGBUF_TYPE_FLOW_RING_DELETE;
1424 delete->msg.ifidx = ifidx;
1425 delete->msg.request_id = 0;
1427 delete->flow_ring_id = cpu_to_le16(flowid +
1428 BRCMF_H2D_MSGRING_FLOWRING_IDSTART);
1431 brcmf_dbg(MSGBUF, "Send Flow Delete Req flow ID %d, ifindex %d\n",
1434 err = brcmf_commonring_write_complete(commonring);
1435 brcmf_commonring_unlock(commonring);
1437 bphy_err(drvr, "Failed to submit RING_DELETE, flowring will be removed\n");
1438 brcmf_msgbuf_remove_flowring(msgbuf, flowid);
1443 static int brcmf_msgbuf_stats_read(struct seq_file *seq, void *data)
1445 struct brcmf_bus *bus_if = dev_get_drvdata(seq->private);
1446 struct brcmf_pub *drvr = bus_if->drvr;
1447 struct brcmf_msgbuf *msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1448 struct brcmf_commonring *commonring;
1450 struct brcmf_flowring_ring *ring;
1451 struct brcmf_flowring_hash *hash;
1453 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_CONTROL_SUBMIT];
1454 seq_printf(seq, "h2d_ctl_submit: rp %4u, wp %4u, depth %4u\n",
1455 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1456 commonring = msgbuf->commonrings[BRCMF_H2D_MSGRING_RXPOST_SUBMIT];
1457 seq_printf(seq, "h2d_rx_submit: rp %4u, wp %4u, depth %4u\n",
1458 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1459 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_CONTROL_COMPLETE];
1460 seq_printf(seq, "d2h_ctl_cmplt: rp %4u, wp %4u, depth %4u\n",
1461 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1462 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_TX_COMPLETE];
1463 seq_printf(seq, "d2h_tx_cmplt: rp %4u, wp %4u, depth %4u\n",
1464 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1465 commonring = msgbuf->commonrings[BRCMF_D2H_MSGRING_RX_COMPLETE];
1466 seq_printf(seq, "d2h_rx_cmplt: rp %4u, wp %4u, depth %4u\n",
1467 commonring->r_ptr, commonring->w_ptr, commonring->depth);
1469 seq_printf(seq, "\nh2d_flowrings: depth %u\n",
1470 BRCMF_H2D_TXFLOWRING_MAX_ITEM);
1471 seq_puts(seq, "Active flowrings:\n");
1472 for (i = 0; i < msgbuf->flow->nrofrings; i++) {
1473 if (!msgbuf->flow->rings[i])
1475 ring = msgbuf->flow->rings[i];
1476 if (ring->status != RING_OPEN)
1478 commonring = msgbuf->flowrings[i];
1479 hash = &msgbuf->flow->hash[ring->hash_id];
1480 seq_printf(seq, "id %3u: rp %4u, wp %4u, qlen %4u, blocked %u\n"
1481 " ifidx %u, fifo %u, da %pM\n",
1482 i, commonring->r_ptr, commonring->w_ptr,
1483 skb_queue_len(&ring->skblist), ring->blocked,
1484 hash->ifidx, hash->fifo, hash->mac);
1490 static int brcmf_msgbuf_stats_read(struct seq_file *seq, void *data)
1496 static void brcmf_msgbuf_debugfs_create(struct brcmf_pub *drvr)
1498 brcmf_debugfs_add_entry(drvr, "msgbuf_stats", brcmf_msgbuf_stats_read);
1501 int brcmf_proto_msgbuf_attach(struct brcmf_pub *drvr)
1503 struct brcmf_bus_msgbuf *if_msgbuf;
1504 struct brcmf_msgbuf *msgbuf;
1508 if_msgbuf = drvr->bus_if->msgbuf;
1510 if (if_msgbuf->max_flowrings >= BRCMF_FLOWRING_HASHSIZE) {
1511 bphy_err(drvr, "driver not configured for this many flowrings %d\n",
1512 if_msgbuf->max_flowrings);
1513 if_msgbuf->max_flowrings = BRCMF_FLOWRING_HASHSIZE - 1;
1516 msgbuf = kzalloc(sizeof(*msgbuf), GFP_KERNEL);
1520 msgbuf->txflow_wq = create_singlethread_workqueue("msgbuf_txflow");
1521 if (msgbuf->txflow_wq == NULL) {
1522 bphy_err(drvr, "workqueue creation failed\n");
1525 INIT_WORK(&msgbuf->txflow_work, brcmf_msgbuf_txflow_worker);
1526 count = BITS_TO_LONGS(if_msgbuf->max_flowrings);
1527 count = count * sizeof(unsigned long);
1528 msgbuf->flow_map = kzalloc(count, GFP_KERNEL);
1529 if (!msgbuf->flow_map)
1532 msgbuf->txstatus_done_map = kzalloc(count, GFP_KERNEL);
1533 if (!msgbuf->txstatus_done_map)
1536 msgbuf->drvr = drvr;
1537 msgbuf->ioctbuf = dma_alloc_coherent(drvr->bus_if->dev,
1538 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1539 &msgbuf->ioctbuf_handle,
1541 if (!msgbuf->ioctbuf)
1543 address = (u64)msgbuf->ioctbuf_handle;
1544 msgbuf->ioctbuf_phys_hi = address >> 32;
1545 msgbuf->ioctbuf_phys_lo = address & 0xffffffff;
1547 drvr->proto->hdrpull = brcmf_msgbuf_hdrpull;
1548 drvr->proto->query_dcmd = brcmf_msgbuf_query_dcmd;
1549 drvr->proto->set_dcmd = brcmf_msgbuf_set_dcmd;
1550 drvr->proto->tx_queue_data = brcmf_msgbuf_tx_queue_data;
1551 drvr->proto->configure_addr_mode = brcmf_msgbuf_configure_addr_mode;
1552 drvr->proto->delete_peer = brcmf_msgbuf_delete_peer;
1553 drvr->proto->add_tdls_peer = brcmf_msgbuf_add_tdls_peer;
1554 drvr->proto->rxreorder = brcmf_msgbuf_rxreorder;
1555 drvr->proto->debugfs_create = brcmf_msgbuf_debugfs_create;
1556 drvr->proto->pd = msgbuf;
1558 init_waitqueue_head(&msgbuf->ioctl_resp_wait);
1560 msgbuf->commonrings =
1561 (struct brcmf_commonring **)if_msgbuf->commonrings;
1562 msgbuf->flowrings = (struct brcmf_commonring **)if_msgbuf->flowrings;
1563 msgbuf->max_flowrings = if_msgbuf->max_flowrings;
1564 msgbuf->flowring_dma_handle =
1565 kcalloc(msgbuf->max_flowrings,
1566 sizeof(*msgbuf->flowring_dma_handle), GFP_KERNEL);
1567 if (!msgbuf->flowring_dma_handle)
1570 msgbuf->rx_dataoffset = if_msgbuf->rx_dataoffset;
1571 msgbuf->max_rxbufpost = if_msgbuf->max_rxbufpost;
1573 msgbuf->max_ioctlrespbuf = BRCMF_MSGBUF_MAX_IOCTLRESPBUF_POST;
1574 msgbuf->max_eventbuf = BRCMF_MSGBUF_MAX_EVENTBUF_POST;
1576 msgbuf->tx_pktids = brcmf_msgbuf_init_pktids(NR_TX_PKTIDS,
1578 if (!msgbuf->tx_pktids)
1580 msgbuf->rx_pktids = brcmf_msgbuf_init_pktids(NR_RX_PKTIDS,
1582 if (!msgbuf->rx_pktids)
1585 msgbuf->flow = brcmf_flowring_attach(drvr->bus_if->dev,
1586 if_msgbuf->max_flowrings);
1591 brcmf_dbg(MSGBUF, "Feeding buffers, rx data %d, rx event %d, rx ioctl resp %d\n",
1592 msgbuf->max_rxbufpost, msgbuf->max_eventbuf,
1593 msgbuf->max_ioctlrespbuf);
1596 brcmf_msgbuf_rxbuf_data_fill(msgbuf);
1597 if (msgbuf->max_rxbufpost != msgbuf->rxbufpost)
1602 } while (count < 10);
1603 brcmf_msgbuf_rxbuf_event_post(msgbuf);
1604 brcmf_msgbuf_rxbuf_ioctlresp_post(msgbuf);
1606 INIT_WORK(&msgbuf->flowring_work, brcmf_msgbuf_flowring_worker);
1607 spin_lock_init(&msgbuf->flowring_work_lock);
1608 INIT_LIST_HEAD(&msgbuf->work_queue);
1614 kfree(msgbuf->flow_map);
1615 kfree(msgbuf->txstatus_done_map);
1616 brcmf_msgbuf_release_pktids(msgbuf);
1617 kfree(msgbuf->flowring_dma_handle);
1618 if (msgbuf->ioctbuf)
1619 dma_free_coherent(drvr->bus_if->dev,
1620 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1622 msgbuf->ioctbuf_handle);
1623 if (msgbuf->txflow_wq)
1624 destroy_workqueue(msgbuf->txflow_wq);
1631 void brcmf_proto_msgbuf_detach(struct brcmf_pub *drvr)
1633 struct brcmf_msgbuf *msgbuf;
1634 struct brcmf_msgbuf_work_item *work;
1636 brcmf_dbg(TRACE, "Enter\n");
1637 if (drvr->proto->pd) {
1638 msgbuf = (struct brcmf_msgbuf *)drvr->proto->pd;
1639 cancel_work_sync(&msgbuf->flowring_work);
1640 while (!list_empty(&msgbuf->work_queue)) {
1641 work = list_first_entry(&msgbuf->work_queue,
1642 struct brcmf_msgbuf_work_item,
1644 list_del(&work->queue);
1647 kfree(msgbuf->flow_map);
1648 kfree(msgbuf->txstatus_done_map);
1649 if (msgbuf->txflow_wq)
1650 destroy_workqueue(msgbuf->txflow_wq);
1652 brcmf_flowring_detach(msgbuf->flow);
1653 dma_free_coherent(drvr->bus_if->dev,
1654 BRCMF_TX_IOCTL_MAX_MSG_SIZE,
1655 msgbuf->ioctbuf, msgbuf->ioctbuf_handle);
1656 brcmf_msgbuf_release_pktids(msgbuf);
1657 kfree(msgbuf->flowring_dma_handle);
1659 drvr->proto->pd = NULL;