fwsignal.c revision 456d0685c7522c661bf5af7930317ffcb710a858
1/*
2 * Copyright (c) 2010 Broadcom Corporation
3 *
4 * Permission to use, copy, modify, and/or distribute this software for any
5 * purpose with or without fee is hereby granted, provided that the above
6 * copyright notice and this permission notice appear in all copies.
7 *
8 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15 */
16#include <linux/types.h>
17#include <linux/module.h>
18#include <linux/if_ether.h>
19#include <linux/spinlock.h>
20#include <linux/skbuff.h>
21#include <linux/netdevice.h>
22#include <linux/etherdevice.h>
23#include <linux/err.h>
24#include <linux/jiffies.h>
25#include <net/cfg80211.h>
26
27#include <brcmu_utils.h>
28#include <brcmu_wifi.h>
29#include "dhd.h"
30#include "dhd_proto.h"
31#include "dhd_dbg.h"
32#include "dhd_bus.h"
33#include "fwil.h"
34#include "fwil_types.h"
35#include "fweh.h"
36#include "fwsignal.h"
37#include "p2p.h"
38#include "wl_cfg80211.h"
39
40/**
41 * DOC: Firmware Signalling
42 *
43 * Firmware can send signals to host and vice versa, which are passed in the
44 * data packets using TLV based header. This signalling layer is on top of the
45 * BDC bus protocol layer.
46 */
47
48/*
49 * single definition for firmware-driver flow control tlv's.
50 *
51 * each tlv is specified by BRCMF_FWS_TLV_DEF(name, ID, length).
52 * A length value 0 indicates variable length tlv.
53 */
54#define BRCMF_FWS_TLV_DEFLIST \
55	BRCMF_FWS_TLV_DEF(MAC_OPEN, 1, 1) \
56	BRCMF_FWS_TLV_DEF(MAC_CLOSE, 2, 1) \
57	BRCMF_FWS_TLV_DEF(MAC_REQUEST_CREDIT, 3, 2) \
58	BRCMF_FWS_TLV_DEF(TXSTATUS, 4, 4) \
59	BRCMF_FWS_TLV_DEF(PKTTAG, 5, 4) \
60	BRCMF_FWS_TLV_DEF(MACDESC_ADD,	6, 8) \
61	BRCMF_FWS_TLV_DEF(MACDESC_DEL, 7, 8) \
62	BRCMF_FWS_TLV_DEF(RSSI, 8, 1) \
63	BRCMF_FWS_TLV_DEF(INTERFACE_OPEN, 9, 1) \
64	BRCMF_FWS_TLV_DEF(INTERFACE_CLOSE, 10, 1) \
65	BRCMF_FWS_TLV_DEF(FIFO_CREDITBACK, 11, 6) \
66	BRCMF_FWS_TLV_DEF(PENDING_TRAFFIC_BMP, 12, 2) \
67	BRCMF_FWS_TLV_DEF(MAC_REQUEST_PACKET, 13, 3) \
68	BRCMF_FWS_TLV_DEF(HOST_REORDER_RXPKTS, 14, 10) \
69	BRCMF_FWS_TLV_DEF(TRANS_ID, 18, 6) \
70	BRCMF_FWS_TLV_DEF(COMP_TXSTATUS, 19, 1) \
71	BRCMF_FWS_TLV_DEF(FILLER, 255, 0)
72
73/*
74 * enum brcmf_fws_tlv_type - definition of tlv identifiers.
75 */
76#define BRCMF_FWS_TLV_DEF(name, id, len) \
77	BRCMF_FWS_TYPE_ ## name =  id,
78enum brcmf_fws_tlv_type {
79	BRCMF_FWS_TLV_DEFLIST
80	BRCMF_FWS_TYPE_INVALID
81};
82#undef BRCMF_FWS_TLV_DEF
83
84/*
85 * enum brcmf_fws_tlv_len - definition of tlv lengths.
86 */
87#define BRCMF_FWS_TLV_DEF(name, id, len) \
88	BRCMF_FWS_TYPE_ ## name ## _LEN = (len),
89enum brcmf_fws_tlv_len {
90	BRCMF_FWS_TLV_DEFLIST
91};
92#undef BRCMF_FWS_TLV_DEF
93
94#ifdef DEBUG
95/*
96 * brcmf_fws_tlv_names - array of tlv names.
97 */
98#define BRCMF_FWS_TLV_DEF(name, id, len) \
99	{ id, #name },
100static struct {
101	enum brcmf_fws_tlv_type id;
102	const char *name;
103} brcmf_fws_tlv_names[] = {
104	BRCMF_FWS_TLV_DEFLIST
105};
106#undef BRCMF_FWS_TLV_DEF
107
108static const char *brcmf_fws_get_tlv_name(enum brcmf_fws_tlv_type id)
109{
110	int i;
111
112	for (i = 0; i < ARRAY_SIZE(brcmf_fws_tlv_names); i++)
113		if (brcmf_fws_tlv_names[i].id == id)
114			return brcmf_fws_tlv_names[i].name;
115
116	return "INVALID";
117}
118#else
119static const char *brcmf_fws_get_tlv_name(enum brcmf_fws_tlv_type id)
120{
121	return "NODEBUG";
122}
123#endif /* DEBUG */
124
125/*
126 * flags used to enable tlv signalling from firmware.
127 */
128#define BRCMF_FWS_FLAGS_RSSI_SIGNALS			0x0001
129#define BRCMF_FWS_FLAGS_XONXOFF_SIGNALS			0x0002
130#define BRCMF_FWS_FLAGS_CREDIT_STATUS_SIGNALS		0x0004
131#define BRCMF_FWS_FLAGS_HOST_PROPTXSTATUS_ACTIVE	0x0008
132#define BRCMF_FWS_FLAGS_PSQ_GENERATIONFSM_ENABLE	0x0010
133#define BRCMF_FWS_FLAGS_PSQ_ZERO_BUFFER_ENABLE		0x0020
134#define BRCMF_FWS_FLAGS_HOST_RXREORDER_ACTIVE		0x0040
135
136#define BRCMF_FWS_MAC_DESC_TABLE_SIZE			32
137#define BRCMF_FWS_MAC_DESC_ID_INVALID			0xff
138
139#define BRCMF_FWS_HOSTIF_FLOWSTATE_OFF			0
140#define BRCMF_FWS_HOSTIF_FLOWSTATE_ON			1
141#define BRCMF_FWS_FLOWCONTROL_HIWATER			128
142#define BRCMF_FWS_FLOWCONTROL_LOWATER			64
143
144#define BRCMF_FWS_PSQ_PREC_COUNT		((BRCMF_FWS_FIFO_COUNT + 1) * 2)
145#define BRCMF_FWS_PSQ_LEN				256
146
147#define BRCMF_FWS_HTOD_FLAG_PKTFROMHOST			0x01
148#define BRCMF_FWS_HTOD_FLAG_PKT_REQUESTED		0x02
149
150#define BRCMF_FWS_RET_OK_NOSCHEDULE	0
151#define BRCMF_FWS_RET_OK_SCHEDULE	1
152
153/**
154 * enum brcmf_fws_skb_state - indicates processing state of skb.
155 *
156 * @BRCMF_FWS_SKBSTATE_NEW: sk_buff is newly arrived in the driver.
157 * @BRCMF_FWS_SKBSTATE_DELAYED: sk_buff had to wait on queue.
158 * @BRCMF_FWS_SKBSTATE_SUPPRESSED: sk_buff has been suppressed by firmware.
159 * @BRCMF_FWS_SKBSTATE_TIM: allocated for TIM update info.
160 */
161enum brcmf_fws_skb_state {
162	BRCMF_FWS_SKBSTATE_NEW,
163	BRCMF_FWS_SKBSTATE_DELAYED,
164	BRCMF_FWS_SKBSTATE_SUPPRESSED,
165	BRCMF_FWS_SKBSTATE_TIM
166};
167
168/**
169 * struct brcmf_skbuff_cb - control buffer associated with skbuff.
170 *
171 * @if_flags: holds interface index and packet related flags.
172 * @htod: host to device packet identifier (used in PKTTAG tlv).
173 * @state: transmit state of the packet.
174 * @mac: descriptor related to destination for this packet.
175 *
176 * This information is stored in control buffer struct sk_buff::cb, which
177 * provides 48 bytes of storage so this structure should not exceed that.
178 */
179struct brcmf_skbuff_cb {
180	u16 if_flags;
181	u32 htod;
182	enum brcmf_fws_skb_state state;
183	struct brcmf_fws_mac_descriptor *mac;
184};
185
186/*
187 * macro casting skbuff control buffer to struct brcmf_skbuff_cb.
188 */
189#define brcmf_skbcb(skb)	((struct brcmf_skbuff_cb *)((skb)->cb))
190
191/*
192 * sk_buff control if flags
193 *
194 *	b[11]  - packet sent upon firmware request.
195 *	b[10]  - packet only contains signalling data.
196 *	b[9]   - packet is a tx packet.
197 *	b[8]   - packet used requested credit
198 *	b[7]   - interface in AP mode.
199 *	b[3:0] - interface index.
200 */
201#define BRCMF_SKB_IF_FLAGS_REQUESTED_MASK	0x0800
202#define BRCMF_SKB_IF_FLAGS_REQUESTED_SHIFT	11
203#define BRCMF_SKB_IF_FLAGS_SIGNAL_ONLY_MASK	0x0400
204#define BRCMF_SKB_IF_FLAGS_SIGNAL_ONLY_SHIFT	10
205#define BRCMF_SKB_IF_FLAGS_TRANSMIT_MASK        0x0200
206#define BRCMF_SKB_IF_FLAGS_TRANSMIT_SHIFT	9
207#define BRCMF_SKB_IF_FLAGS_REQ_CREDIT_MASK	0x0100
208#define BRCMF_SKB_IF_FLAGS_REQ_CREDIT_SHIFT	8
209#define BRCMF_SKB_IF_FLAGS_IF_AP_MASK		0x0080
210#define BRCMF_SKB_IF_FLAGS_IF_AP_SHIFT		7
211#define BRCMF_SKB_IF_FLAGS_INDEX_MASK		0x000f
212#define BRCMF_SKB_IF_FLAGS_INDEX_SHIFT		0
213
214#define brcmf_skb_if_flags_set_field(skb, field, value) \
215	brcmu_maskset16(&(brcmf_skbcb(skb)->if_flags), \
216			BRCMF_SKB_IF_FLAGS_ ## field ## _MASK, \
217			BRCMF_SKB_IF_FLAGS_ ## field ## _SHIFT, (value))
218#define brcmf_skb_if_flags_get_field(skb, field) \
219	brcmu_maskget16(brcmf_skbcb(skb)->if_flags, \
220			BRCMF_SKB_IF_FLAGS_ ## field ## _MASK, \
221			BRCMF_SKB_IF_FLAGS_ ## field ## _SHIFT)
222
223/*
224 * sk_buff control packet identifier
225 *
226 * 32-bit packet identifier used in PKTTAG tlv from host to dongle.
227 *
228 * - Generated at the host (e.g. dhd)
229 * - Seen as a generic sequence number by firmware except for the flags field.
230 *
231 * Generation	: b[31]	=> generation number for this packet [host->fw]
232 *			   OR, current generation number [fw->host]
233 * Flags	: b[30:27] => command, status flags
234 * FIFO-AC	: b[26:24] => AC-FIFO id
235 * h-slot	: b[23:8] => hanger-slot
236 * freerun	: b[7:0] => A free running counter
237 */
238#define BRCMF_SKB_HTOD_TAG_GENERATION_MASK		0x80000000
239#define BRCMF_SKB_HTOD_TAG_GENERATION_SHIFT		31
240#define BRCMF_SKB_HTOD_TAG_FLAGS_MASK			0x78000000
241#define BRCMF_SKB_HTOD_TAG_FLAGS_SHIFT			27
242#define BRCMF_SKB_HTOD_TAG_FIFO_MASK			0x07000000
243#define BRCMF_SKB_HTOD_TAG_FIFO_SHIFT			24
244#define BRCMF_SKB_HTOD_TAG_HSLOT_MASK			0x00ffff00
245#define BRCMF_SKB_HTOD_TAG_HSLOT_SHIFT			8
246#define BRCMF_SKB_HTOD_TAG_FREERUN_MASK			0x000000ff
247#define BRCMF_SKB_HTOD_TAG_FREERUN_SHIFT		0
248
249#define brcmf_skb_htod_tag_set_field(skb, field, value) \
250	brcmu_maskset32(&(brcmf_skbcb(skb)->htod), \
251			BRCMF_SKB_HTOD_TAG_ ## field ## _MASK, \
252			BRCMF_SKB_HTOD_TAG_ ## field ## _SHIFT, (value))
253#define brcmf_skb_htod_tag_get_field(skb, field) \
254	brcmu_maskget32(brcmf_skbcb(skb)->htod, \
255			BRCMF_SKB_HTOD_TAG_ ## field ## _MASK, \
256			BRCMF_SKB_HTOD_TAG_ ## field ## _SHIFT)
257
258#define BRCMF_FWS_TXSTAT_GENERATION_MASK	0x80000000
259#define BRCMF_FWS_TXSTAT_GENERATION_SHIFT	31
260#define BRCMF_FWS_TXSTAT_FLAGS_MASK		0x78000000
261#define BRCMF_FWS_TXSTAT_FLAGS_SHIFT		27
262#define BRCMF_FWS_TXSTAT_FIFO_MASK		0x07000000
263#define BRCMF_FWS_TXSTAT_FIFO_SHIFT		24
264#define BRCMF_FWS_TXSTAT_HSLOT_MASK		0x00FFFF00
265#define BRCMF_FWS_TXSTAT_HSLOT_SHIFT		8
266#define BRCMF_FWS_TXSTAT_PKTID_MASK		0x00FFFFFF
267#define BRCMF_FWS_TXSTAT_PKTID_SHIFT		0
268
269#define brcmf_txstatus_get_field(txs, field) \
270	brcmu_maskget32(txs, BRCMF_FWS_TXSTAT_ ## field ## _MASK, \
271			BRCMF_FWS_TXSTAT_ ## field ## _SHIFT)
272
273/* How long to defer borrowing in jiffies */
274#define BRCMF_FWS_BORROW_DEFER_PERIOD		(HZ / 10)
275
276/**
277 * enum brcmf_fws_fifo - fifo indices used by dongle firmware.
278 *
279 * @BRCMF_FWS_FIFO_FIRST: first fifo, ie. background.
280 * @BRCMF_FWS_FIFO_AC_BK: fifo for background traffic.
281 * @BRCMF_FWS_FIFO_AC_BE: fifo for best-effort traffic.
282 * @BRCMF_FWS_FIFO_AC_VI: fifo for video traffic.
283 * @BRCMF_FWS_FIFO_AC_VO: fifo for voice traffic.
284 * @BRCMF_FWS_FIFO_BCMC: fifo for broadcast/multicast (AP only).
285 * @BRCMF_FWS_FIFO_ATIM: fifo for ATIM (AP only).
286 * @BRCMF_FWS_FIFO_COUNT: number of fifos.
287 */
288enum brcmf_fws_fifo {
289	BRCMF_FWS_FIFO_FIRST,
290	BRCMF_FWS_FIFO_AC_BK = BRCMF_FWS_FIFO_FIRST,
291	BRCMF_FWS_FIFO_AC_BE,
292	BRCMF_FWS_FIFO_AC_VI,
293	BRCMF_FWS_FIFO_AC_VO,
294	BRCMF_FWS_FIFO_BCMC,
295	BRCMF_FWS_FIFO_ATIM,
296	BRCMF_FWS_FIFO_COUNT
297};
298
299/**
300 * enum brcmf_fws_txstatus - txstatus flag values.
301 *
302 * @BRCMF_FWS_TXSTATUS_DISCARD:
303 *	host is free to discard the packet.
304 * @BRCMF_FWS_TXSTATUS_CORE_SUPPRESS:
305 *	802.11 core suppressed the packet.
306 * @BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS:
307 *	firmware suppress the packet as device is already in PS mode.
308 * @BRCMF_FWS_TXSTATUS_FW_TOSSED:
309 *	firmware tossed the packet.
310 * @BRCMF_FWS_TXSTATUS_HOST_TOSSED:
311 *	host tossed the packet.
312 */
313enum brcmf_fws_txstatus {
314	BRCMF_FWS_TXSTATUS_DISCARD,
315	BRCMF_FWS_TXSTATUS_CORE_SUPPRESS,
316	BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS,
317	BRCMF_FWS_TXSTATUS_FW_TOSSED,
318	BRCMF_FWS_TXSTATUS_HOST_TOSSED
319};
320
321enum brcmf_fws_fcmode {
322	BRCMF_FWS_FCMODE_NONE,
323	BRCMF_FWS_FCMODE_IMPLIED_CREDIT,
324	BRCMF_FWS_FCMODE_EXPLICIT_CREDIT
325};
326
327enum brcmf_fws_mac_desc_state {
328	BRCMF_FWS_STATE_OPEN = 1,
329	BRCMF_FWS_STATE_CLOSE
330};
331
332/**
333 * struct brcmf_fws_mac_descriptor - firmware signalling data per node/interface
334 *
335 * @occupied: slot is in use.
336 * @mac_handle: handle for mac entry determined by firmware.
337 * @interface_id: interface index.
338 * @state: current state.
339 * @suppressed: mac entry is suppressed.
340 * @generation: generation bit.
341 * @ac_bitmap: ac queue bitmap.
342 * @requested_credit: credits requested by firmware.
343 * @ea: ethernet address.
344 * @seq: per-node free-running sequence.
345 * @psq: power-save queue.
346 * @transit_count: packet in transit to firmware.
347 */
348struct brcmf_fws_mac_descriptor {
349	char name[16];
350	u8 occupied;
351	u8 mac_handle;
352	u8 interface_id;
353	u8 state;
354	bool suppressed;
355	u8 generation;
356	u8 ac_bitmap;
357	u8 requested_credit;
358	u8 requested_packet;
359	u8 ea[ETH_ALEN];
360	u8 seq[BRCMF_FWS_FIFO_COUNT];
361	struct pktq psq;
362	int transit_count;
363	int suppr_transit_count;
364	bool send_tim_signal;
365	u8 traffic_pending_bmp;
366	u8 traffic_lastreported_bmp;
367};
368
369#define BRCMF_FWS_HANGER_MAXITEMS	1024
370
371/**
372 * enum brcmf_fws_hanger_item_state - state of hanger item.
373 *
374 * @BRCMF_FWS_HANGER_ITEM_STATE_FREE: item is free for use.
375 * @BRCMF_FWS_HANGER_ITEM_STATE_INUSE: item is in use.
376 * @BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED: item was suppressed.
377 */
378enum brcmf_fws_hanger_item_state {
379	BRCMF_FWS_HANGER_ITEM_STATE_FREE = 1,
380	BRCMF_FWS_HANGER_ITEM_STATE_INUSE,
381	BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED
382};
383
384
385/**
386 * struct brcmf_fws_hanger_item - single entry for tx pending packet.
387 *
388 * @state: entry is either free or occupied.
389 * @pkt: packet itself.
390 */
391struct brcmf_fws_hanger_item {
392	enum brcmf_fws_hanger_item_state state;
393	struct sk_buff *pkt;
394};
395
396/**
397 * struct brcmf_fws_hanger - holds packets awaiting firmware txstatus.
398 *
399 * @pushed: packets pushed to await txstatus.
400 * @popped: packets popped upon handling txstatus.
401 * @failed_to_push: packets that could not be pushed.
402 * @failed_to_pop: packets that could not be popped.
403 * @failed_slotfind: packets for which failed to find an entry.
404 * @slot_pos: last returned item index for a free entry.
405 * @items: array of hanger items.
406 */
407struct brcmf_fws_hanger {
408	u32 pushed;
409	u32 popped;
410	u32 failed_to_push;
411	u32 failed_to_pop;
412	u32 failed_slotfind;
413	u32 slot_pos;
414	struct brcmf_fws_hanger_item items[BRCMF_FWS_HANGER_MAXITEMS];
415};
416
417struct brcmf_fws_macdesc_table {
418	struct brcmf_fws_mac_descriptor nodes[BRCMF_FWS_MAC_DESC_TABLE_SIZE];
419	struct brcmf_fws_mac_descriptor iface[BRCMF_MAX_IFS];
420	struct brcmf_fws_mac_descriptor other;
421};
422
423struct brcmf_fws_info {
424	struct brcmf_pub *drvr;
425	struct brcmf_fws_stats stats;
426	struct brcmf_fws_hanger hanger;
427	enum brcmf_fws_fcmode fcmode;
428	bool bcmc_credit_check;
429	struct brcmf_fws_macdesc_table desc;
430	struct workqueue_struct *fws_wq;
431	struct work_struct fws_dequeue_work;
432	u32 fifo_enqpkt[BRCMF_FWS_FIFO_COUNT];
433	int fifo_credit[BRCMF_FWS_FIFO_COUNT];
434	int credits_borrowed[BRCMF_FWS_FIFO_AC_VO + 1];
435	int deq_node_pos[BRCMF_FWS_FIFO_COUNT];
436	u32 fifo_credit_map;
437	u32 fifo_delay_map;
438	unsigned long borrow_defer_timestamp;
439	bool bus_flow_blocked;
440	bool creditmap_received;
441};
442
443/*
444 * brcmf_fws_prio2fifo - mapping from 802.1d priority to firmware fifo index.
445 */
446static const int brcmf_fws_prio2fifo[] = {
447	BRCMF_FWS_FIFO_AC_BE,
448	BRCMF_FWS_FIFO_AC_BK,
449	BRCMF_FWS_FIFO_AC_BK,
450	BRCMF_FWS_FIFO_AC_BE,
451	BRCMF_FWS_FIFO_AC_VI,
452	BRCMF_FWS_FIFO_AC_VI,
453	BRCMF_FWS_FIFO_AC_VO,
454	BRCMF_FWS_FIFO_AC_VO
455};
456
457static int fcmode;
458module_param(fcmode, int, S_IRUSR);
459MODULE_PARM_DESC(fcmode, "mode of firmware signalled flow control");
460
461#define BRCMF_FWS_TLV_DEF(name, id, len) \
462	case BRCMF_FWS_TYPE_ ## name: \
463		return len;
464
465/**
466 * brcmf_fws_get_tlv_len() - returns defined length for given tlv id.
467 *
468 * @fws: firmware-signalling information.
469 * @id: identifier of the TLV.
470 *
471 * Return: the specified length for the given TLV; Otherwise -EINVAL.
472 */
473static int brcmf_fws_get_tlv_len(struct brcmf_fws_info *fws,
474				 enum brcmf_fws_tlv_type id)
475{
476	switch (id) {
477	BRCMF_FWS_TLV_DEFLIST
478	default:
479		fws->stats.tlv_invalid_type++;
480		break;
481	}
482	return -EINVAL;
483}
484#undef BRCMF_FWS_TLV_DEF
485
486static bool brcmf_fws_ifidx_match(struct sk_buff *skb, void *arg)
487{
488	u32 ifidx = brcmf_skb_if_flags_get_field(skb, INDEX);
489	return ifidx == *(int *)arg;
490}
491
492static void brcmf_fws_psq_flush(struct brcmf_fws_info *fws, struct pktq *q,
493				int ifidx)
494{
495	bool (*matchfn)(struct sk_buff *, void *) = NULL;
496	struct sk_buff *skb;
497	int prec;
498
499	if (ifidx != -1)
500		matchfn = brcmf_fws_ifidx_match;
501	for (prec = 0; prec < q->num_prec; prec++) {
502		skb = brcmu_pktq_pdeq_match(q, prec, matchfn, &ifidx);
503		while (skb) {
504			brcmu_pkt_buf_free_skb(skb);
505			skb = brcmu_pktq_pdeq_match(q, prec, matchfn, &ifidx);
506		}
507	}
508}
509
510static void brcmf_fws_hanger_init(struct brcmf_fws_hanger *hanger)
511{
512	int i;
513
514	memset(hanger, 0, sizeof(*hanger));
515	for (i = 0; i < ARRAY_SIZE(hanger->items); i++)
516		hanger->items[i].state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
517}
518
519static u32 brcmf_fws_hanger_get_free_slot(struct brcmf_fws_hanger *h)
520{
521	u32 i;
522
523	i = (h->slot_pos + 1) % BRCMF_FWS_HANGER_MAXITEMS;
524
525	while (i != h->slot_pos) {
526		if (h->items[i].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
527			h->slot_pos = i;
528			goto done;
529		}
530		i++;
531		if (i == BRCMF_FWS_HANGER_MAXITEMS)
532			i = 0;
533	}
534	brcmf_err("all slots occupied\n");
535	h->failed_slotfind++;
536	i = BRCMF_FWS_HANGER_MAXITEMS;
537done:
538	return i;
539}
540
541static int brcmf_fws_hanger_pushpkt(struct brcmf_fws_hanger *h,
542				    struct sk_buff *pkt, u32 slot_id)
543{
544	if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
545		return -ENOENT;
546
547	if (h->items[slot_id].state != BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
548		brcmf_err("slot is not free\n");
549		h->failed_to_push++;
550		return -EINVAL;
551	}
552
553	h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_INUSE;
554	h->items[slot_id].pkt = pkt;
555	h->pushed++;
556	return 0;
557}
558
559static int brcmf_fws_hanger_poppkt(struct brcmf_fws_hanger *h,
560					  u32 slot_id, struct sk_buff **pktout,
561					  bool remove_item)
562{
563	if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
564		return -ENOENT;
565
566	if (h->items[slot_id].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
567		brcmf_err("entry not in use\n");
568		h->failed_to_pop++;
569		return -EINVAL;
570	}
571
572	*pktout = h->items[slot_id].pkt;
573	if (remove_item) {
574		h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
575		h->items[slot_id].pkt = NULL;
576		h->popped++;
577	}
578	return 0;
579}
580
581static int brcmf_fws_hanger_mark_suppressed(struct brcmf_fws_hanger *h,
582					    u32 slot_id)
583{
584	if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
585		return -ENOENT;
586
587	if (h->items[slot_id].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
588		brcmf_err("entry not in use\n");
589		return -EINVAL;
590	}
591
592	h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED;
593	return 0;
594}
595
596static void brcmf_fws_hanger_cleanup(struct brcmf_fws_info *fws,
597				     bool (*fn)(struct sk_buff *, void *),
598				     int ifidx)
599{
600	struct brcmf_fws_hanger *h = &fws->hanger;
601	struct sk_buff *skb;
602	int i;
603	enum brcmf_fws_hanger_item_state s;
604
605	for (i = 0; i < ARRAY_SIZE(h->items); i++) {
606		s = h->items[i].state;
607		if (s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE ||
608		    s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED) {
609			skb = h->items[i].pkt;
610			if (fn == NULL || fn(skb, &ifidx)) {
611				/* suppress packets freed from psq */
612				if (s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE)
613					brcmu_pkt_buf_free_skb(skb);
614				h->items[i].state =
615					BRCMF_FWS_HANGER_ITEM_STATE_FREE;
616			}
617		}
618	}
619}
620
621static void brcmf_fws_macdesc_set_name(struct brcmf_fws_info *fws,
622				       struct brcmf_fws_mac_descriptor *desc)
623{
624	if (desc == &fws->desc.other)
625		strlcpy(desc->name, "MAC-OTHER", sizeof(desc->name));
626	else if (desc->mac_handle)
627		scnprintf(desc->name, sizeof(desc->name), "MAC-%d:%d",
628			  desc->mac_handle, desc->interface_id);
629	else
630		scnprintf(desc->name, sizeof(desc->name), "MACIF:%d",
631			  desc->interface_id);
632}
633
634static void brcmf_fws_macdesc_init(struct brcmf_fws_mac_descriptor *desc,
635				   u8 *addr, u8 ifidx)
636{
637	brcmf_dbg(TRACE,
638		  "enter: desc %p ea=%pM, ifidx=%u\n", desc, addr, ifidx);
639	desc->occupied = 1;
640	desc->state = BRCMF_FWS_STATE_OPEN;
641	desc->requested_credit = 0;
642	desc->requested_packet = 0;
643	/* depending on use may need ifp->bssidx instead */
644	desc->interface_id = ifidx;
645	desc->ac_bitmap = 0xff; /* update this when handling APSD */
646	if (addr)
647		memcpy(&desc->ea[0], addr, ETH_ALEN);
648}
649
650static
651void brcmf_fws_macdesc_deinit(struct brcmf_fws_mac_descriptor *desc)
652{
653	brcmf_dbg(TRACE,
654		  "enter: ea=%pM, ifidx=%u\n", desc->ea, desc->interface_id);
655	desc->occupied = 0;
656	desc->state = BRCMF_FWS_STATE_CLOSE;
657	desc->requested_credit = 0;
658	desc->requested_packet = 0;
659}
660
661static struct brcmf_fws_mac_descriptor *
662brcmf_fws_macdesc_lookup(struct brcmf_fws_info *fws, u8 *ea)
663{
664	struct brcmf_fws_mac_descriptor *entry;
665	int i;
666
667	if (ea == NULL)
668		return ERR_PTR(-EINVAL);
669
670	entry = &fws->desc.nodes[0];
671	for (i = 0; i < ARRAY_SIZE(fws->desc.nodes); i++) {
672		if (entry->occupied && !memcmp(entry->ea, ea, ETH_ALEN))
673			return entry;
674		entry++;
675	}
676
677	return ERR_PTR(-ENOENT);
678}
679
680static struct brcmf_fws_mac_descriptor*
681brcmf_fws_macdesc_find(struct brcmf_fws_info *fws, struct brcmf_if *ifp, u8 *da)
682{
683	struct brcmf_fws_mac_descriptor *entry = &fws->desc.other;
684	bool multicast;
685
686	multicast = is_multicast_ether_addr(da);
687
688	/* Multicast destination, STA and P2P clients get the interface entry.
689	 * STA/GC gets the Mac Entry for TDLS destinations, TDLS destinations
690	 * have their own entry.
691	 */
692	if (multicast && ifp->fws_desc) {
693		entry = ifp->fws_desc;
694		goto done;
695	}
696
697	entry = brcmf_fws_macdesc_lookup(fws, da);
698	if (IS_ERR(entry))
699		entry = ifp->fws_desc;
700
701done:
702	return entry;
703}
704
705static bool brcmf_fws_macdesc_closed(struct brcmf_fws_info *fws,
706				     struct brcmf_fws_mac_descriptor *entry,
707				     int fifo)
708{
709	struct brcmf_fws_mac_descriptor *if_entry;
710	bool closed;
711
712	/* for unique destination entries the related interface
713	 * may be closed.
714	 */
715	if (entry->mac_handle) {
716		if_entry = &fws->desc.iface[entry->interface_id];
717		if (if_entry->state == BRCMF_FWS_STATE_CLOSE)
718			return true;
719	}
720	/* an entry is closed when the state is closed and
721	 * the firmware did not request anything.
722	 */
723	closed = entry->state == BRCMF_FWS_STATE_CLOSE &&
724		 !entry->requested_credit && !entry->requested_packet;
725
726	/* Or firmware does not allow traffic for given fifo */
727	return closed || !(entry->ac_bitmap & BIT(fifo));
728}
729
730static void brcmf_fws_macdesc_cleanup(struct brcmf_fws_info *fws,
731				      struct brcmf_fws_mac_descriptor *entry,
732				      int ifidx)
733{
734	if (entry->occupied && (ifidx == -1 || ifidx == entry->interface_id)) {
735		brcmf_fws_psq_flush(fws, &entry->psq, ifidx);
736		entry->occupied = !!(entry->psq.len);
737	}
738}
739
740static void brcmf_fws_bus_txq_cleanup(struct brcmf_fws_info *fws,
741				      bool (*fn)(struct sk_buff *, void *),
742				      int ifidx)
743{
744	struct brcmf_fws_hanger_item *hi;
745	struct pktq *txq;
746	struct sk_buff *skb;
747	int prec;
748	u32 hslot;
749
750	txq = brcmf_bus_gettxq(fws->drvr->bus_if);
751	if (IS_ERR(txq)) {
752		brcmf_dbg(TRACE, "no txq to clean up\n");
753		return;
754	}
755
756	for (prec = 0; prec < txq->num_prec; prec++) {
757		skb = brcmu_pktq_pdeq_match(txq, prec, fn, &ifidx);
758		while (skb) {
759			hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
760			hi = &fws->hanger.items[hslot];
761			WARN_ON(skb != hi->pkt);
762			hi->state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
763			brcmu_pkt_buf_free_skb(skb);
764			skb = brcmu_pktq_pdeq_match(txq, prec, fn, &ifidx);
765		}
766	}
767}
768
769static void brcmf_fws_cleanup(struct brcmf_fws_info *fws, int ifidx)
770{
771	int i;
772	struct brcmf_fws_mac_descriptor *table;
773	bool (*matchfn)(struct sk_buff *, void *) = NULL;
774
775	if (fws == NULL)
776		return;
777
778	if (ifidx != -1)
779		matchfn = brcmf_fws_ifidx_match;
780
781	/* cleanup individual nodes */
782	table = &fws->desc.nodes[0];
783	for (i = 0; i < ARRAY_SIZE(fws->desc.nodes); i++)
784		brcmf_fws_macdesc_cleanup(fws, &table[i], ifidx);
785
786	brcmf_fws_macdesc_cleanup(fws, &fws->desc.other, ifidx);
787	brcmf_fws_bus_txq_cleanup(fws, matchfn, ifidx);
788	brcmf_fws_hanger_cleanup(fws, matchfn, ifidx);
789}
790
791static int brcmf_fws_hdrpush(struct brcmf_fws_info *fws, struct sk_buff *skb)
792{
793	struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
794	u8 *wlh;
795	u16 data_offset = 0;
796	u8 fillers;
797	__le32 pkttag = cpu_to_le32(brcmf_skbcb(skb)->htod);
798
799	brcmf_dbg(TRACE, "enter: ea=%pM, ifidx=%u (%u), pkttag=0x%08X, hslot=%d\n",
800		  entry->ea, entry->interface_id,
801		  brcmf_skb_if_flags_get_field(skb, INDEX),
802		  le32_to_cpu(pkttag), (le32_to_cpu(pkttag) >> 8) & 0xffff);
803	if (entry->send_tim_signal)
804		data_offset += 2 + BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN;
805
806	/* +2 is for Type[1] and Len[1] in TLV, plus TIM signal */
807	data_offset += 2 + BRCMF_FWS_TYPE_PKTTAG_LEN;
808	fillers = round_up(data_offset, 4) - data_offset;
809	data_offset += fillers;
810
811	skb_push(skb, data_offset);
812	wlh = skb->data;
813
814	wlh[0] = BRCMF_FWS_TYPE_PKTTAG;
815	wlh[1] = BRCMF_FWS_TYPE_PKTTAG_LEN;
816	memcpy(&wlh[2], &pkttag, sizeof(pkttag));
817	wlh += BRCMF_FWS_TYPE_PKTTAG_LEN + 2;
818
819	if (entry->send_tim_signal) {
820		entry->send_tim_signal = 0;
821		wlh[0] = BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP;
822		wlh[1] = BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN;
823		wlh[2] = entry->mac_handle;
824		wlh[3] = entry->traffic_pending_bmp;
825		brcmf_dbg(TRACE, "adding TIM info: %02X:%02X:%02X:%02X\n",
826			  wlh[0], wlh[1], wlh[2], wlh[3]);
827		wlh += BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN + 2;
828		entry->traffic_lastreported_bmp = entry->traffic_pending_bmp;
829	}
830	if (fillers)
831		memset(wlh, BRCMF_FWS_TYPE_FILLER, fillers);
832
833	brcmf_proto_hdrpush(fws->drvr, brcmf_skb_if_flags_get_field(skb, INDEX),
834			    data_offset >> 2, skb);
835	return 0;
836}
837
838static bool brcmf_fws_tim_update(struct brcmf_fws_info *fws,
839				 struct brcmf_fws_mac_descriptor *entry,
840				 int fifo, bool send_immediately)
841{
842	struct sk_buff *skb;
843	struct brcmf_bus *bus;
844	struct brcmf_skbuff_cb *skcb;
845	s32 err;
846	u32 len;
847
848	/* check delayedQ and suppressQ in one call using bitmap */
849	if (brcmu_pktq_mlen(&entry->psq, 3 << (fifo * 2)) == 0)
850		entry->traffic_pending_bmp &= ~NBITVAL(fifo);
851	else
852		entry->traffic_pending_bmp |= NBITVAL(fifo);
853
854	entry->send_tim_signal = false;
855	if (entry->traffic_lastreported_bmp != entry->traffic_pending_bmp)
856		entry->send_tim_signal = true;
857	if (send_immediately && entry->send_tim_signal &&
858	    entry->state == BRCMF_FWS_STATE_CLOSE) {
859		/* create a dummy packet and sent that. The traffic          */
860		/* bitmap info will automatically be attached to that packet */
861		len = BRCMF_FWS_TYPE_PKTTAG_LEN + 2 +
862		      BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN + 2 +
863		      4 + fws->drvr->hdrlen;
864		skb = brcmu_pkt_buf_get_skb(len);
865		if (skb == NULL)
866			return false;
867		skb_pull(skb, len);
868		skcb = brcmf_skbcb(skb);
869		skcb->mac = entry;
870		skcb->state = BRCMF_FWS_SKBSTATE_TIM;
871		bus = fws->drvr->bus_if;
872		err = brcmf_fws_hdrpush(fws, skb);
873		if (err == 0)
874			err = brcmf_bus_txdata(bus, skb);
875		if (err)
876			brcmu_pkt_buf_free_skb(skb);
877		return true;
878	}
879	return false;
880}
881
882static void
883brcmf_fws_flow_control_check(struct brcmf_fws_info *fws, struct pktq *pq,
884			     u8 if_id)
885{
886	struct brcmf_if *ifp = fws->drvr->iflist[!if_id ? 0 : if_id + 1];
887
888	if (WARN_ON(!ifp))
889		return;
890
891	if ((ifp->netif_stop & BRCMF_NETIF_STOP_REASON_FWS_FC) &&
892	    pq->len <= BRCMF_FWS_FLOWCONTROL_LOWATER)
893		brcmf_txflowblock_if(ifp,
894				     BRCMF_NETIF_STOP_REASON_FWS_FC, false);
895	if (!(ifp->netif_stop & BRCMF_NETIF_STOP_REASON_FWS_FC) &&
896	    pq->len >= BRCMF_FWS_FLOWCONTROL_HIWATER) {
897		fws->stats.fws_flow_block++;
898		brcmf_txflowblock_if(ifp, BRCMF_NETIF_STOP_REASON_FWS_FC, true);
899	}
900	return;
901}
902
903static int brcmf_fws_rssi_indicate(struct brcmf_fws_info *fws, s8 rssi)
904{
905	brcmf_dbg(CTL, "rssi %d\n", rssi);
906	return 0;
907}
908
909static
910int brcmf_fws_macdesc_indicate(struct brcmf_fws_info *fws, u8 type, u8 *data)
911{
912	struct brcmf_fws_mac_descriptor *entry, *existing;
913	u8 mac_handle;
914	u8 ifidx;
915	u8 *addr;
916
917	mac_handle = *data++;
918	ifidx = *data++;
919	addr = data;
920
921	entry = &fws->desc.nodes[mac_handle & 0x1F];
922	if (type == BRCMF_FWS_TYPE_MACDESC_DEL) {
923		if (entry->occupied) {
924			brcmf_dbg(TRACE, "deleting %s mac %pM\n",
925				  entry->name, addr);
926			brcmf_fws_macdesc_cleanup(fws, entry, -1);
927			brcmf_fws_macdesc_deinit(entry);
928		} else
929			fws->stats.mac_update_failed++;
930		return 0;
931	}
932
933	existing = brcmf_fws_macdesc_lookup(fws, addr);
934	if (IS_ERR(existing)) {
935		if (!entry->occupied) {
936			entry->mac_handle = mac_handle;
937			brcmf_fws_macdesc_init(entry, addr, ifidx);
938			brcmf_fws_macdesc_set_name(fws, entry);
939			brcmu_pktq_init(&entry->psq, BRCMF_FWS_PSQ_PREC_COUNT,
940					BRCMF_FWS_PSQ_LEN);
941			brcmf_dbg(TRACE, "add %s mac %pM\n", entry->name, addr);
942		} else {
943			fws->stats.mac_update_failed++;
944		}
945	} else {
946		if (entry != existing) {
947			brcmf_dbg(TRACE, "copy mac %s\n", existing->name);
948			memcpy(entry, existing,
949			       offsetof(struct brcmf_fws_mac_descriptor, psq));
950			entry->mac_handle = mac_handle;
951			brcmf_fws_macdesc_deinit(existing);
952			brcmf_fws_macdesc_set_name(fws, entry);
953			brcmf_dbg(TRACE, "relocate %s mac %pM\n", entry->name,
954				  addr);
955		} else {
956			brcmf_dbg(TRACE, "use existing\n");
957			WARN_ON(entry->mac_handle != mac_handle);
958			/* TODO: what should we do here: continue, reinit, .. */
959		}
960	}
961	return 0;
962}
963
964static int brcmf_fws_macdesc_state_indicate(struct brcmf_fws_info *fws,
965					    u8 type, u8 *data)
966{
967	struct brcmf_fws_mac_descriptor *entry;
968	u8 mac_handle;
969
970	mac_handle = data[0];
971	entry = &fws->desc.nodes[mac_handle & 0x1F];
972	if (!entry->occupied) {
973		fws->stats.mac_ps_update_failed++;
974		return -ESRCH;
975	}
976	/* a state update should wipe old credits */
977	entry->requested_credit = 0;
978	entry->requested_packet = 0;
979	if (type == BRCMF_FWS_TYPE_MAC_OPEN) {
980		entry->state = BRCMF_FWS_STATE_OPEN;
981		return BRCMF_FWS_RET_OK_SCHEDULE;
982	} else {
983		entry->state = BRCMF_FWS_STATE_CLOSE;
984		brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_BK, false);
985		brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_BE, false);
986		brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_VI, false);
987		brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_VO, true);
988	}
989	return BRCMF_FWS_RET_OK_NOSCHEDULE;
990}
991
992static int brcmf_fws_interface_state_indicate(struct brcmf_fws_info *fws,
993					      u8 type, u8 *data)
994{
995	struct brcmf_fws_mac_descriptor *entry;
996	u8 ifidx;
997	int ret;
998
999	ifidx = data[0];
1000
1001	if (ifidx >= BRCMF_MAX_IFS) {
1002		ret = -ERANGE;
1003		goto fail;
1004	}
1005
1006	entry = &fws->desc.iface[ifidx];
1007	if (!entry->occupied) {
1008		ret = -ESRCH;
1009		goto fail;
1010	}
1011
1012	brcmf_dbg(TRACE, "%s (%d): %s\n", brcmf_fws_get_tlv_name(type), type,
1013		  entry->name);
1014	switch (type) {
1015	case BRCMF_FWS_TYPE_INTERFACE_OPEN:
1016		entry->state = BRCMF_FWS_STATE_OPEN;
1017		return BRCMF_FWS_RET_OK_SCHEDULE;
1018	case BRCMF_FWS_TYPE_INTERFACE_CLOSE:
1019		entry->state = BRCMF_FWS_STATE_CLOSE;
1020		return BRCMF_FWS_RET_OK_NOSCHEDULE;
1021	default:
1022		ret = -EINVAL;
1023		break;
1024	}
1025fail:
1026	fws->stats.if_update_failed++;
1027	return ret;
1028}
1029
1030static int brcmf_fws_request_indicate(struct brcmf_fws_info *fws, u8 type,
1031				      u8 *data)
1032{
1033	struct brcmf_fws_mac_descriptor *entry;
1034
1035	entry = &fws->desc.nodes[data[1] & 0x1F];
1036	if (!entry->occupied) {
1037		if (type == BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT)
1038			fws->stats.credit_request_failed++;
1039		else
1040			fws->stats.packet_request_failed++;
1041		return -ESRCH;
1042	}
1043
1044	brcmf_dbg(TRACE, "%s (%d): %s cnt %d bmp %d\n",
1045		  brcmf_fws_get_tlv_name(type), type, entry->name,
1046		  data[0], data[2]);
1047	if (type == BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT)
1048		entry->requested_credit = data[0];
1049	else
1050		entry->requested_packet = data[0];
1051
1052	entry->ac_bitmap = data[2];
1053	return BRCMF_FWS_RET_OK_SCHEDULE;
1054}
1055
1056static void
1057brcmf_fws_macdesc_use_req_credit(struct brcmf_fws_mac_descriptor *entry,
1058				 struct sk_buff *skb)
1059{
1060	if (entry->requested_credit > 0) {
1061		entry->requested_credit--;
1062		brcmf_skb_if_flags_set_field(skb, REQUESTED, 1);
1063		brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 1);
1064		if (entry->state != BRCMF_FWS_STATE_CLOSE)
1065			brcmf_err("requested credit set while mac not closed!\n");
1066	} else if (entry->requested_packet > 0) {
1067		entry->requested_packet--;
1068		brcmf_skb_if_flags_set_field(skb, REQUESTED, 1);
1069		brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 0);
1070		if (entry->state != BRCMF_FWS_STATE_CLOSE)
1071			brcmf_err("requested packet set while mac not closed!\n");
1072	} else {
1073		brcmf_skb_if_flags_set_field(skb, REQUESTED, 0);
1074		brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 0);
1075	}
1076}
1077
1078static void brcmf_fws_macdesc_return_req_credit(struct sk_buff *skb)
1079{
1080	struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
1081
1082	if ((brcmf_skb_if_flags_get_field(skb, REQ_CREDIT)) &&
1083	    (entry->state == BRCMF_FWS_STATE_CLOSE))
1084		entry->requested_credit++;
1085}
1086
1087static void brcmf_fws_return_credits(struct brcmf_fws_info *fws,
1088				     u8 fifo, u8 credits)
1089{
1090	int lender_ac;
1091	int *borrowed;
1092	int *fifo_credit;
1093
1094	if (!credits)
1095		return;
1096
1097	fws->fifo_credit_map |= 1 << fifo;
1098
1099	if ((fifo == BRCMF_FWS_FIFO_AC_BE) &&
1100	    (fws->credits_borrowed[0])) {
1101		for (lender_ac = BRCMF_FWS_FIFO_AC_VO; lender_ac >= 0;
1102		     lender_ac--) {
1103			borrowed = &fws->credits_borrowed[lender_ac];
1104			if (*borrowed) {
1105				fws->fifo_credit_map |= (1 << lender_ac);
1106				fifo_credit = &fws->fifo_credit[lender_ac];
1107				if (*borrowed >= credits) {
1108					*borrowed -= credits;
1109					*fifo_credit += credits;
1110					return;
1111				} else {
1112					credits -= *borrowed;
1113					*fifo_credit += *borrowed;
1114					*borrowed = 0;
1115				}
1116			}
1117		}
1118	}
1119
1120	fws->fifo_credit[fifo] += credits;
1121}
1122
1123static void brcmf_fws_schedule_deq(struct brcmf_fws_info *fws)
1124{
1125	/* only schedule dequeue when there are credits for delayed traffic */
1126	if (fws->fifo_credit_map & fws->fifo_delay_map)
1127		queue_work(fws->fws_wq, &fws->fws_dequeue_work);
1128}
1129
1130static int brcmf_fws_enq(struct brcmf_fws_info *fws,
1131			 enum brcmf_fws_skb_state state, int fifo,
1132			 struct sk_buff *p)
1133{
1134	int prec = 2 * fifo;
1135	u32 *qfull_stat = &fws->stats.delayq_full_error;
1136
1137	struct brcmf_fws_mac_descriptor *entry;
1138
1139	entry = brcmf_skbcb(p)->mac;
1140	if (entry == NULL) {
1141		brcmf_err("no mac descriptor found for skb %p\n", p);
1142		return -ENOENT;
1143	}
1144
1145	brcmf_dbg(DATA, "enter: fifo %d skb %p\n", fifo, p);
1146	if (state == BRCMF_FWS_SKBSTATE_SUPPRESSED) {
1147		prec += 1;
1148		qfull_stat = &fws->stats.supprq_full_error;
1149	}
1150
1151	if (brcmu_pktq_penq(&entry->psq, prec, p) == NULL) {
1152		*qfull_stat += 1;
1153		return -ENFILE;
1154	}
1155
1156	/* increment total enqueued packet count */
1157	fws->fifo_delay_map |= 1 << fifo;
1158	fws->fifo_enqpkt[fifo]++;
1159
1160	/* update the sk_buff state */
1161	brcmf_skbcb(p)->state = state;
1162
1163	/*
1164	 * A packet has been pushed so update traffic
1165	 * availability bitmap, if applicable
1166	 */
1167	brcmf_fws_tim_update(fws, entry, fifo, true);
1168	brcmf_fws_flow_control_check(fws, &entry->psq,
1169				     brcmf_skb_if_flags_get_field(p, INDEX));
1170	return 0;
1171}
1172
1173static struct sk_buff *brcmf_fws_deq(struct brcmf_fws_info *fws, int fifo)
1174{
1175	struct brcmf_fws_mac_descriptor *table;
1176	struct brcmf_fws_mac_descriptor *entry;
1177	struct sk_buff *p;
1178	int num_nodes;
1179	int node_pos;
1180	int prec_out;
1181	int pmsk;
1182	int i;
1183
1184	table = (struct brcmf_fws_mac_descriptor *)&fws->desc;
1185	num_nodes = sizeof(fws->desc) / sizeof(struct brcmf_fws_mac_descriptor);
1186	node_pos = fws->deq_node_pos[fifo];
1187
1188	for (i = 0; i < num_nodes; i++) {
1189		entry = &table[(node_pos + i) % num_nodes];
1190		if (!entry->occupied ||
1191		    brcmf_fws_macdesc_closed(fws, entry, fifo))
1192			continue;
1193
1194		if (entry->suppressed)
1195			pmsk = 2;
1196		else
1197			pmsk = 3;
1198		p = brcmu_pktq_mdeq(&entry->psq, pmsk << (fifo * 2), &prec_out);
1199		if (p == NULL) {
1200			if (entry->suppressed) {
1201				if (entry->suppr_transit_count)
1202					continue;
1203				entry->suppressed = false;
1204				p = brcmu_pktq_mdeq(&entry->psq,
1205						    1 << (fifo * 2), &prec_out);
1206			}
1207		}
1208		if  (p == NULL)
1209			continue;
1210
1211		brcmf_fws_macdesc_use_req_credit(entry, p);
1212
1213		/* move dequeue position to ensure fair round-robin */
1214		fws->deq_node_pos[fifo] = (node_pos + i + 1) % num_nodes;
1215		brcmf_fws_flow_control_check(fws, &entry->psq,
1216					     brcmf_skb_if_flags_get_field(p,
1217									  INDEX)
1218					     );
1219		/*
1220		 * A packet has been picked up, update traffic
1221		 * availability bitmap, if applicable
1222		 */
1223		brcmf_fws_tim_update(fws, entry, fifo, false);
1224
1225		/*
1226		 * decrement total enqueued fifo packets and
1227		 * clear delay bitmap if done.
1228		 */
1229		fws->fifo_enqpkt[fifo]--;
1230		if (fws->fifo_enqpkt[fifo] == 0)
1231			fws->fifo_delay_map &= ~(1 << fifo);
1232		goto done;
1233	}
1234	p = NULL;
1235done:
1236	brcmf_dbg(DATA, "exit: fifo %d skb %p\n", fifo, p);
1237	return p;
1238}
1239
1240static int brcmf_fws_txstatus_suppressed(struct brcmf_fws_info *fws, int fifo,
1241					 struct sk_buff *skb, u32 genbit)
1242{
1243	struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
1244	u32 hslot;
1245	int ret;
1246	u8 ifidx;
1247
1248	hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1249
1250	/* this packet was suppressed */
1251	if (!entry->suppressed) {
1252		entry->suppressed = true;
1253		entry->suppr_transit_count = entry->transit_count;
1254		brcmf_dbg(DATA, "suppress %s: transit %d\n",
1255			  entry->name, entry->transit_count);
1256	}
1257
1258	entry->generation = genbit;
1259
1260	ret = brcmf_proto_hdrpull(fws->drvr, false, &ifidx, skb);
1261	if (ret == 0)
1262		ret = brcmf_fws_enq(fws, BRCMF_FWS_SKBSTATE_SUPPRESSED, fifo,
1263				    skb);
1264	if (ret != 0) {
1265		/* suppress q is full or hdrpull failed, drop this packet */
1266		brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb,
1267					true);
1268	} else {
1269		/*
1270		 * Mark suppressed to avoid a double free during
1271		 * wlfc cleanup
1272		 */
1273		brcmf_fws_hanger_mark_suppressed(&fws->hanger, hslot);
1274	}
1275
1276	return ret;
1277}
1278
1279static int
1280brcmf_fws_txs_process(struct brcmf_fws_info *fws, u8 flags, u32 hslot,
1281			   u32 genbit)
1282{
1283	u32 fifo;
1284	int ret;
1285	bool remove_from_hanger = true;
1286	struct sk_buff *skb;
1287	struct brcmf_skbuff_cb *skcb;
1288	struct brcmf_fws_mac_descriptor *entry = NULL;
1289
1290	brcmf_dbg(DATA, "flags %d\n", flags);
1291
1292	if (flags == BRCMF_FWS_TXSTATUS_DISCARD)
1293		fws->stats.txs_discard++;
1294	else if (flags == BRCMF_FWS_TXSTATUS_CORE_SUPPRESS) {
1295		fws->stats.txs_supp_core++;
1296		remove_from_hanger = false;
1297	} else if (flags == BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS) {
1298		fws->stats.txs_supp_ps++;
1299		remove_from_hanger = false;
1300	} else if (flags == BRCMF_FWS_TXSTATUS_FW_TOSSED)
1301		fws->stats.txs_tossed++;
1302	else if (flags == BRCMF_FWS_TXSTATUS_HOST_TOSSED)
1303		fws->stats.txs_host_tossed++;
1304	else
1305		brcmf_err("unexpected txstatus\n");
1306
1307	ret = brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb,
1308				      remove_from_hanger);
1309	if (ret != 0) {
1310		brcmf_err("no packet in hanger slot: hslot=%d\n", hslot);
1311		return ret;
1312	}
1313
1314	skcb = brcmf_skbcb(skb);
1315	entry = skcb->mac;
1316	if (WARN_ON(!entry)) {
1317		brcmu_pkt_buf_free_skb(skb);
1318		return -EINVAL;
1319	}
1320	entry->transit_count--;
1321	if (entry->suppressed && entry->suppr_transit_count)
1322		entry->suppr_transit_count--;
1323
1324	brcmf_dbg(DATA, "%s flags %X htod %X\n", entry->name, skcb->if_flags,
1325		  skcb->htod);
1326
1327	/* pick up the implicit credit from this packet */
1328	fifo = brcmf_skb_htod_tag_get_field(skb, FIFO);
1329	if ((fws->fcmode == BRCMF_FWS_FCMODE_IMPLIED_CREDIT) ||
1330	    (brcmf_skb_if_flags_get_field(skb, REQ_CREDIT)) ||
1331	    (flags == BRCMF_FWS_TXSTATUS_HOST_TOSSED)) {
1332		brcmf_fws_return_credits(fws, fifo, 1);
1333		brcmf_fws_schedule_deq(fws);
1334	}
1335	brcmf_fws_macdesc_return_req_credit(skb);
1336
1337	if (!remove_from_hanger)
1338		ret = brcmf_fws_txstatus_suppressed(fws, fifo, skb, genbit);
1339
1340	if (remove_from_hanger || ret)
1341		brcmf_txfinalize(fws->drvr, skb, true);
1342
1343	return 0;
1344}
1345
1346static int brcmf_fws_fifocreditback_indicate(struct brcmf_fws_info *fws,
1347					     u8 *data)
1348{
1349	int i;
1350
1351	if (fws->fcmode != BRCMF_FWS_FCMODE_EXPLICIT_CREDIT) {
1352		brcmf_dbg(INFO, "ignored\n");
1353		return BRCMF_FWS_RET_OK_NOSCHEDULE;
1354	}
1355
1356	brcmf_dbg(DATA, "enter: data %pM\n", data);
1357	for (i = 0; i < BRCMF_FWS_FIFO_COUNT; i++)
1358		brcmf_fws_return_credits(fws, i, data[i]);
1359
1360	brcmf_dbg(DATA, "map: credit %x delay %x\n", fws->fifo_credit_map,
1361		  fws->fifo_delay_map);
1362	return BRCMF_FWS_RET_OK_SCHEDULE;
1363}
1364
1365static int brcmf_fws_txstatus_indicate(struct brcmf_fws_info *fws, u8 *data)
1366{
1367	__le32 status_le;
1368	u32 status;
1369	u32 hslot;
1370	u32 genbit;
1371	u8 flags;
1372
1373	fws->stats.txs_indicate++;
1374	memcpy(&status_le, data, sizeof(status_le));
1375	status = le32_to_cpu(status_le);
1376	flags = brcmf_txstatus_get_field(status, FLAGS);
1377	hslot = brcmf_txstatus_get_field(status, HSLOT);
1378	genbit = brcmf_txstatus_get_field(status, GENERATION);
1379
1380	return brcmf_fws_txs_process(fws, flags, hslot, genbit);
1381}
1382
1383static int brcmf_fws_dbg_seqnum_check(struct brcmf_fws_info *fws, u8 *data)
1384{
1385	__le32 timestamp;
1386
1387	memcpy(&timestamp, &data[2], sizeof(timestamp));
1388	brcmf_dbg(CTL, "received: seq %d, timestamp %d\n", data[1],
1389		  le32_to_cpu(timestamp));
1390	return 0;
1391}
1392
1393/* using macro so sparse checking does not complain
1394 * about locking imbalance.
1395 */
1396#define brcmf_fws_lock(drvr, flags)				\
1397do {								\
1398	flags = 0;						\
1399	spin_lock_irqsave(&((drvr)->fws_spinlock), (flags));	\
1400} while (0)
1401
1402/* using macro so sparse checking does not complain
1403 * about locking imbalance.
1404 */
1405#define brcmf_fws_unlock(drvr, flags) \
1406	spin_unlock_irqrestore(&((drvr)->fws_spinlock), (flags))
1407
1408static int brcmf_fws_notify_credit_map(struct brcmf_if *ifp,
1409				       const struct brcmf_event_msg *e,
1410				       void *data)
1411{
1412	struct brcmf_fws_info *fws = ifp->drvr->fws;
1413	int i;
1414	ulong flags;
1415	u8 *credits = data;
1416
1417	if (e->datalen < BRCMF_FWS_FIFO_COUNT) {
1418		brcmf_err("event payload too small (%d)\n", e->datalen);
1419		return -EINVAL;
1420	}
1421	if (fws->creditmap_received)
1422		return 0;
1423
1424	fws->creditmap_received = true;
1425
1426	brcmf_dbg(TRACE, "enter: credits %pM\n", credits);
1427	brcmf_fws_lock(ifp->drvr, flags);
1428	for (i = 0; i < ARRAY_SIZE(fws->fifo_credit); i++) {
1429		if (*credits)
1430			fws->fifo_credit_map |= 1 << i;
1431		else
1432			fws->fifo_credit_map &= ~(1 << i);
1433		fws->fifo_credit[i] = *credits++;
1434	}
1435	brcmf_fws_schedule_deq(fws);
1436	brcmf_fws_unlock(ifp->drvr, flags);
1437	return 0;
1438}
1439
1440static int brcmf_fws_notify_bcmc_credit_support(struct brcmf_if *ifp,
1441						const struct brcmf_event_msg *e,
1442						void *data)
1443{
1444	struct brcmf_fws_info *fws = ifp->drvr->fws;
1445	ulong flags;
1446
1447	brcmf_fws_lock(ifp->drvr, flags);
1448	if (fws)
1449		fws->bcmc_credit_check = true;
1450	brcmf_fws_unlock(ifp->drvr, flags);
1451	return 0;
1452}
1453
1454int brcmf_fws_hdrpull(struct brcmf_pub *drvr, int ifidx, s16 signal_len,
1455		      struct sk_buff *skb)
1456{
1457	struct brcmf_fws_info *fws = drvr->fws;
1458	ulong flags;
1459	u8 *signal_data;
1460	s16 data_len;
1461	u8 type;
1462	u8 len;
1463	u8 *data;
1464	s32 status;
1465	s32 err;
1466
1467	brcmf_dbg(HDRS, "enter: ifidx %d, skblen %u, sig %d\n",
1468		  ifidx, skb->len, signal_len);
1469
1470	WARN_ON(signal_len > skb->len);
1471
1472	/* if flow control disabled, skip to packet data and leave */
1473	if (!signal_len || !drvr->fw_signals) {
1474		skb_pull(skb, signal_len);
1475		return 0;
1476	}
1477
1478	/* lock during tlv parsing */
1479	brcmf_fws_lock(drvr, flags);
1480
1481	fws->stats.header_pulls++;
1482	data_len = signal_len;
1483	signal_data = skb->data;
1484
1485	status = BRCMF_FWS_RET_OK_NOSCHEDULE;
1486	while (data_len > 0) {
1487		/* extract tlv info */
1488		type = signal_data[0];
1489
1490		/* FILLER type is actually not a TLV, but
1491		 * a single byte that can be skipped.
1492		 */
1493		if (type == BRCMF_FWS_TYPE_FILLER) {
1494			signal_data += 1;
1495			data_len -= 1;
1496			continue;
1497		}
1498		len = signal_data[1];
1499		data = signal_data + 2;
1500
1501		brcmf_dbg(HDRS, "tlv type=%s (%d), len=%d (%d)\n",
1502			  brcmf_fws_get_tlv_name(type), type, len,
1503			  brcmf_fws_get_tlv_len(fws, type));
1504
1505		/* abort parsing when length invalid */
1506		if (data_len < len + 2)
1507			break;
1508
1509		if (len < brcmf_fws_get_tlv_len(fws, type))
1510			break;
1511
1512		err = BRCMF_FWS_RET_OK_NOSCHEDULE;
1513		switch (type) {
1514		case BRCMF_FWS_TYPE_HOST_REORDER_RXPKTS:
1515		case BRCMF_FWS_TYPE_COMP_TXSTATUS:
1516			break;
1517		case BRCMF_FWS_TYPE_MACDESC_ADD:
1518		case BRCMF_FWS_TYPE_MACDESC_DEL:
1519			brcmf_fws_macdesc_indicate(fws, type, data);
1520			break;
1521		case BRCMF_FWS_TYPE_MAC_OPEN:
1522		case BRCMF_FWS_TYPE_MAC_CLOSE:
1523			err = brcmf_fws_macdesc_state_indicate(fws, type, data);
1524			break;
1525		case BRCMF_FWS_TYPE_INTERFACE_OPEN:
1526		case BRCMF_FWS_TYPE_INTERFACE_CLOSE:
1527			err = brcmf_fws_interface_state_indicate(fws, type,
1528								 data);
1529			break;
1530		case BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT:
1531		case BRCMF_FWS_TYPE_MAC_REQUEST_PACKET:
1532			err = brcmf_fws_request_indicate(fws, type, data);
1533			break;
1534		case BRCMF_FWS_TYPE_TXSTATUS:
1535			brcmf_fws_txstatus_indicate(fws, data);
1536			break;
1537		case BRCMF_FWS_TYPE_FIFO_CREDITBACK:
1538			err = brcmf_fws_fifocreditback_indicate(fws, data);
1539			break;
1540		case BRCMF_FWS_TYPE_RSSI:
1541			brcmf_fws_rssi_indicate(fws, *data);
1542			break;
1543		case BRCMF_FWS_TYPE_TRANS_ID:
1544			brcmf_fws_dbg_seqnum_check(fws, data);
1545			break;
1546		case BRCMF_FWS_TYPE_PKTTAG:
1547		case BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP:
1548		default:
1549			fws->stats.tlv_invalid_type++;
1550			break;
1551		}
1552		if (err == BRCMF_FWS_RET_OK_SCHEDULE)
1553			status = BRCMF_FWS_RET_OK_SCHEDULE;
1554		signal_data += len + 2;
1555		data_len -= len + 2;
1556	}
1557
1558	if (data_len != 0)
1559		fws->stats.tlv_parse_failed++;
1560
1561	if (status == BRCMF_FWS_RET_OK_SCHEDULE)
1562		brcmf_fws_schedule_deq(fws);
1563
1564	/* signalling processing result does
1565	 * not affect the actual ethernet packet.
1566	 */
1567	skb_pull(skb, signal_len);
1568
1569	/* this may be a signal-only packet
1570	 */
1571	if (skb->len == 0)
1572		fws->stats.header_only_pkt++;
1573
1574	brcmf_fws_unlock(drvr, flags);
1575	return 0;
1576}
1577
1578static void brcmf_fws_precommit_skb(struct brcmf_fws_info *fws, int fifo,
1579				   struct sk_buff *p)
1580{
1581	struct brcmf_skbuff_cb *skcb = brcmf_skbcb(p);
1582	struct brcmf_fws_mac_descriptor *entry = skcb->mac;
1583	u8 flags;
1584
1585	brcmf_skb_if_flags_set_field(p, TRANSMIT, 1);
1586	brcmf_skb_htod_tag_set_field(p, GENERATION, entry->generation);
1587	flags = BRCMF_FWS_HTOD_FLAG_PKTFROMHOST;
1588	if (brcmf_skb_if_flags_get_field(p, REQUESTED)) {
1589		/*
1590		 * Indicate that this packet is being sent in response to an
1591		 * explicit request from the firmware side.
1592		 */
1593		flags |= BRCMF_FWS_HTOD_FLAG_PKT_REQUESTED;
1594	}
1595	brcmf_skb_htod_tag_set_field(p, FLAGS, flags);
1596	brcmf_fws_hdrpush(fws, p);
1597}
1598
1599static void brcmf_fws_rollback_toq(struct brcmf_fws_info *fws,
1600				   struct sk_buff *skb, int fifo)
1601{
1602	struct brcmf_fws_mac_descriptor *entry;
1603	struct sk_buff *pktout;
1604	int qidx, hslot;
1605	int rc = 0;
1606
1607	entry = brcmf_skbcb(skb)->mac;
1608	if (entry->occupied) {
1609		qidx = 2 * fifo;
1610		if (brcmf_skbcb(skb)->state == BRCMF_FWS_SKBSTATE_SUPPRESSED)
1611			qidx++;
1612
1613		pktout = brcmu_pktq_penq_head(&entry->psq, qidx, skb);
1614		if (pktout == NULL) {
1615			brcmf_err("%s queue %d full\n", entry->name, qidx);
1616			rc = -ENOSPC;
1617		}
1618	} else {
1619		brcmf_err("%s entry removed\n", entry->name);
1620		rc = -ENOENT;
1621	}
1622
1623	if (rc) {
1624		fws->stats.rollback_failed++;
1625		hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1626		brcmf_fws_txs_process(fws, BRCMF_FWS_TXSTATUS_HOST_TOSSED,
1627				      hslot, 0);
1628	} else {
1629		fws->stats.rollback_success++;
1630		brcmf_fws_return_credits(fws, fifo, 1);
1631		brcmf_fws_macdesc_return_req_credit(skb);
1632	}
1633}
1634
1635static int brcmf_fws_borrow_credit(struct brcmf_fws_info *fws)
1636{
1637	int lender_ac;
1638
1639	if (time_after(fws->borrow_defer_timestamp, jiffies)) {
1640		fws->fifo_credit_map &= ~(1 << BRCMF_FWS_FIFO_AC_BE);
1641		return -ENAVAIL;
1642	}
1643
1644	for (lender_ac = 0; lender_ac <= BRCMF_FWS_FIFO_AC_VO; lender_ac++) {
1645		if (fws->fifo_credit[lender_ac]) {
1646			fws->credits_borrowed[lender_ac]++;
1647			fws->fifo_credit[lender_ac]--;
1648			if (fws->fifo_credit[lender_ac] == 0)
1649				fws->fifo_credit_map &= ~(1 << lender_ac);
1650			fws->fifo_credit_map |= (1 << BRCMF_FWS_FIFO_AC_BE);
1651			brcmf_dbg(DATA, "borrow credit from: %d\n", lender_ac);
1652			return 0;
1653		}
1654	}
1655	fws->fifo_credit_map &= ~(1 << BRCMF_FWS_FIFO_AC_BE);
1656	return -ENAVAIL;
1657}
1658
1659static int brcmf_fws_commit_skb(struct brcmf_fws_info *fws, int fifo,
1660				struct sk_buff *skb)
1661{
1662	struct brcmf_skbuff_cb *skcb = brcmf_skbcb(skb);
1663	struct brcmf_fws_mac_descriptor *entry;
1664	struct brcmf_bus *bus = fws->drvr->bus_if;
1665	int rc;
1666	u8 ifidx;
1667
1668	entry = skcb->mac;
1669	if (IS_ERR(entry))
1670		return PTR_ERR(entry);
1671
1672	brcmf_fws_precommit_skb(fws, fifo, skb);
1673	rc = brcmf_bus_txdata(bus, skb);
1674	brcmf_dbg(DATA, "%s flags %X htod %X bus_tx %d\n", entry->name,
1675		  skcb->if_flags, skcb->htod, rc);
1676	if (rc < 0) {
1677		brcmf_proto_hdrpull(fws->drvr, false, &ifidx, skb);
1678		goto rollback;
1679	}
1680
1681	entry->transit_count++;
1682	if (entry->suppressed)
1683		entry->suppr_transit_count++;
1684	fws->stats.pkt2bus++;
1685	fws->stats.send_pkts[fifo]++;
1686	if (brcmf_skb_if_flags_get_field(skb, REQUESTED))
1687		fws->stats.requested_sent[fifo]++;
1688
1689	return rc;
1690
1691rollback:
1692	brcmf_fws_rollback_toq(fws, skb, fifo);
1693	return rc;
1694}
1695
1696static int brcmf_fws_assign_htod(struct brcmf_fws_info *fws, struct sk_buff *p,
1697				  int fifo)
1698{
1699	struct brcmf_skbuff_cb *skcb = brcmf_skbcb(p);
1700	int rc, hslot;
1701
1702	hslot = brcmf_fws_hanger_get_free_slot(&fws->hanger);
1703	brcmf_skb_htod_tag_set_field(p, HSLOT, hslot);
1704	brcmf_skb_htod_tag_set_field(p, FREERUN, skcb->mac->seq[fifo]);
1705	brcmf_skb_htod_tag_set_field(p, FIFO, fifo);
1706	rc = brcmf_fws_hanger_pushpkt(&fws->hanger, p, hslot);
1707	if (!rc)
1708		skcb->mac->seq[fifo]++;
1709	else
1710		fws->stats.generic_error++;
1711	return rc;
1712}
1713
1714int brcmf_fws_process_skb(struct brcmf_if *ifp, struct sk_buff *skb)
1715{
1716	struct brcmf_pub *drvr = ifp->drvr;
1717	struct brcmf_fws_info *fws = drvr->fws;
1718	struct brcmf_skbuff_cb *skcb = brcmf_skbcb(skb);
1719	struct ethhdr *eh = (struct ethhdr *)(skb->data);
1720	ulong flags;
1721	int fifo = BRCMF_FWS_FIFO_BCMC;
1722	bool multicast = is_multicast_ether_addr(eh->h_dest);
1723
1724	/* determine the priority */
1725	if (!skb->priority)
1726		skb->priority = cfg80211_classify8021d(skb);
1727
1728	drvr->tx_multicast += !!multicast;
1729	if (ntohs(eh->h_proto) == ETH_P_PAE)
1730		atomic_inc(&ifp->pend_8021x_cnt);
1731
1732	if (!brcmf_fws_fc_active(fws)) {
1733		/* If the protocol uses a data header, apply it */
1734		brcmf_proto_hdrpush(drvr, ifp->ifidx, 0, skb);
1735
1736		/* Use bus module to send data frame */
1737		return brcmf_bus_txdata(drvr->bus_if, skb);
1738	}
1739
1740	/* set control buffer information */
1741	skcb->if_flags = 0;
1742	skcb->state = BRCMF_FWS_SKBSTATE_NEW;
1743	brcmf_skb_if_flags_set_field(skb, INDEX, ifp->ifidx);
1744	if (!multicast)
1745		fifo = brcmf_fws_prio2fifo[skb->priority];
1746
1747	brcmf_fws_lock(drvr, flags);
1748	if (fifo != BRCMF_FWS_FIFO_AC_BE && fifo < BRCMF_FWS_FIFO_BCMC)
1749		fws->borrow_defer_timestamp = jiffies +
1750					      BRCMF_FWS_BORROW_DEFER_PERIOD;
1751
1752	skcb->mac = brcmf_fws_macdesc_find(fws, ifp, eh->h_dest);
1753	brcmf_dbg(DATA, "%s mac %pM multi %d fifo %d\n", skcb->mac->name,
1754		  eh->h_dest, multicast, fifo);
1755	if (!brcmf_fws_assign_htod(fws, skb, fifo)) {
1756		brcmf_fws_enq(fws, BRCMF_FWS_SKBSTATE_DELAYED, fifo, skb);
1757		brcmf_fws_schedule_deq(fws);
1758	} else {
1759		brcmf_err("drop skb: no hanger slot\n");
1760		brcmu_pkt_buf_free_skb(skb);
1761	}
1762	brcmf_fws_unlock(drvr, flags);
1763	return 0;
1764}
1765
1766void brcmf_fws_reset_interface(struct brcmf_if *ifp)
1767{
1768	struct brcmf_fws_mac_descriptor *entry = ifp->fws_desc;
1769
1770	brcmf_dbg(TRACE, "enter: idx=%d\n", ifp->bssidx);
1771	if (!entry)
1772		return;
1773
1774	brcmf_fws_macdesc_init(entry, ifp->mac_addr, ifp->ifidx);
1775}
1776
1777void brcmf_fws_add_interface(struct brcmf_if *ifp)
1778{
1779	struct brcmf_fws_info *fws = ifp->drvr->fws;
1780	struct brcmf_fws_mac_descriptor *entry;
1781
1782	if (!ifp->ndev || !ifp->drvr->fw_signals)
1783		return;
1784
1785	entry = &fws->desc.iface[ifp->ifidx];
1786	ifp->fws_desc = entry;
1787	brcmf_fws_macdesc_init(entry, ifp->mac_addr, ifp->ifidx);
1788	brcmf_fws_macdesc_set_name(fws, entry);
1789	brcmu_pktq_init(&entry->psq, BRCMF_FWS_PSQ_PREC_COUNT,
1790			BRCMF_FWS_PSQ_LEN);
1791	brcmf_dbg(TRACE, "added %s\n", entry->name);
1792}
1793
1794void brcmf_fws_del_interface(struct brcmf_if *ifp)
1795{
1796	struct brcmf_fws_mac_descriptor *entry = ifp->fws_desc;
1797	ulong flags;
1798
1799	if (!entry)
1800		return;
1801
1802	brcmf_fws_lock(ifp->drvr, flags);
1803	ifp->fws_desc = NULL;
1804	brcmf_dbg(TRACE, "deleting %s\n", entry->name);
1805	brcmf_fws_macdesc_deinit(entry);
1806	brcmf_fws_cleanup(ifp->drvr->fws, ifp->ifidx);
1807	brcmf_fws_unlock(ifp->drvr, flags);
1808}
1809
1810static void brcmf_fws_dequeue_worker(struct work_struct *worker)
1811{
1812	struct brcmf_fws_info *fws;
1813	struct sk_buff *skb;
1814	ulong flags;
1815	int fifo;
1816
1817	fws = container_of(worker, struct brcmf_fws_info, fws_dequeue_work);
1818
1819	brcmf_fws_lock(fws->drvr, flags);
1820	for (fifo = BRCMF_FWS_FIFO_BCMC; fifo >= 0 && !fws->bus_flow_blocked;
1821	     fifo--) {
1822		while ((fws->fifo_credit[fifo]) || ((!fws->bcmc_credit_check) &&
1823		       (fifo == BRCMF_FWS_FIFO_BCMC))) {
1824			skb = brcmf_fws_deq(fws, fifo);
1825			if (!skb)
1826				break;
1827			fws->fifo_credit[fifo]--;
1828			if (brcmf_fws_commit_skb(fws, fifo, skb))
1829				break;
1830			if (fws->bus_flow_blocked)
1831				break;
1832		}
1833		if ((fifo == BRCMF_FWS_FIFO_AC_BE) &&
1834		    (fws->fifo_credit[fifo] == 0) &&
1835		    (!fws->bus_flow_blocked)) {
1836			while (brcmf_fws_borrow_credit(fws) == 0) {
1837				skb = brcmf_fws_deq(fws, fifo);
1838				if (!skb) {
1839					brcmf_fws_return_credits(fws, fifo, 1);
1840					break;
1841				}
1842				if (brcmf_fws_commit_skb(fws, fifo, skb))
1843					break;
1844				if (fws->bus_flow_blocked)
1845					break;
1846			}
1847		}
1848	}
1849	brcmf_fws_unlock(fws->drvr, flags);
1850}
1851
1852int brcmf_fws_init(struct brcmf_pub *drvr)
1853{
1854	u32 tlv = BRCMF_FWS_FLAGS_RSSI_SIGNALS;
1855	int rc;
1856
1857	if (!drvr->fw_signals)
1858		return 0;
1859
1860	spin_lock_init(&drvr->fws_spinlock);
1861
1862	drvr->fws = kzalloc(sizeof(*(drvr->fws)), GFP_KERNEL);
1863	if (!drvr->fws) {
1864		rc = -ENOMEM;
1865		goto fail;
1866	}
1867
1868	/* set linkage back */
1869	drvr->fws->drvr = drvr;
1870	drvr->fws->fcmode = fcmode;
1871
1872	drvr->fws->fws_wq = create_singlethread_workqueue("brcmf_fws_wq");
1873	if (drvr->fws->fws_wq == NULL) {
1874		brcmf_err("workqueue creation failed\n");
1875		rc = -EBADF;
1876		goto fail;
1877	}
1878	INIT_WORK(&drvr->fws->fws_dequeue_work, brcmf_fws_dequeue_worker);
1879
1880	/* enable firmware signalling if fcmode active */
1881	if (drvr->fws->fcmode != BRCMF_FWS_FCMODE_NONE)
1882		tlv |= BRCMF_FWS_FLAGS_XONXOFF_SIGNALS |
1883		       BRCMF_FWS_FLAGS_CREDIT_STATUS_SIGNALS |
1884		       BRCMF_FWS_FLAGS_HOST_PROPTXSTATUS_ACTIVE;
1885
1886	rc = brcmf_fweh_register(drvr, BRCMF_E_FIFO_CREDIT_MAP,
1887				 brcmf_fws_notify_credit_map);
1888	if (rc < 0) {
1889		brcmf_err("register credit map handler failed\n");
1890		goto fail;
1891	}
1892	rc = brcmf_fweh_register(drvr, BRCMF_E_BCMC_CREDIT_SUPPORT,
1893				 brcmf_fws_notify_bcmc_credit_support);
1894	if (rc < 0) {
1895		brcmf_err("register bcmc credit handler failed\n");
1896		brcmf_fweh_unregister(drvr, BRCMF_E_FIFO_CREDIT_MAP);
1897		goto fail;
1898	}
1899
1900	/* setting the iovar may fail if feature is unsupported
1901	 * so leave the rc as is so driver initialization can
1902	 * continue.
1903	 */
1904	if (brcmf_fil_iovar_int_set(drvr->iflist[0], "tlv", tlv)) {
1905		brcmf_err("failed to set bdcv2 tlv signaling\n");
1906		goto fail_event;
1907	}
1908
1909	brcmf_fws_hanger_init(&drvr->fws->hanger);
1910	brcmf_fws_macdesc_init(&drvr->fws->desc.other, NULL, 0);
1911	brcmf_fws_macdesc_set_name(drvr->fws, &drvr->fws->desc.other);
1912	brcmu_pktq_init(&drvr->fws->desc.other.psq, BRCMF_FWS_PSQ_PREC_COUNT,
1913			BRCMF_FWS_PSQ_LEN);
1914
1915	/* create debugfs file for statistics */
1916	brcmf_debugfs_create_fws_stats(drvr, &drvr->fws->stats);
1917
1918	brcmf_dbg(INFO, "%s bdcv2 tlv signaling [%x]\n",
1919		  drvr->fw_signals ? "enabled" : "disabled", tlv);
1920	return 0;
1921
1922fail_event:
1923	brcmf_fweh_unregister(drvr, BRCMF_E_BCMC_CREDIT_SUPPORT);
1924	brcmf_fweh_unregister(drvr, BRCMF_E_FIFO_CREDIT_MAP);
1925fail:
1926	brcmf_fws_deinit(drvr);
1927	return rc;
1928}
1929
1930void brcmf_fws_deinit(struct brcmf_pub *drvr)
1931{
1932	struct brcmf_fws_info *fws = drvr->fws;
1933	ulong flags;
1934
1935	if (!fws)
1936		return;
1937
1938	/* disable firmware signalling entirely
1939	 * to avoid using the workqueue.
1940	 */
1941	drvr->fw_signals = false;
1942
1943	if (drvr->fws->fws_wq)
1944		destroy_workqueue(drvr->fws->fws_wq);
1945
1946	/* cleanup */
1947	brcmf_fws_lock(drvr, flags);
1948	brcmf_fws_cleanup(fws, -1);
1949	drvr->fws = NULL;
1950	brcmf_fws_unlock(drvr, flags);
1951
1952	/* free top structure */
1953	kfree(fws);
1954}
1955
1956bool brcmf_fws_fc_active(struct brcmf_fws_info *fws)
1957{
1958	if (!fws)
1959		return false;
1960
1961	return fws->fcmode != BRCMF_FWS_FCMODE_NONE;
1962}
1963
1964void brcmf_fws_bustxfail(struct brcmf_fws_info *fws, struct sk_buff *skb)
1965{
1966	ulong flags;
1967	u32 hslot;
1968
1969	if (brcmf_skbcb(skb)->state == BRCMF_FWS_SKBSTATE_TIM) {
1970		brcmu_pkt_buf_free_skb(skb);
1971		return;
1972	}
1973	brcmf_fws_lock(fws->drvr, flags);
1974	hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1975	brcmf_fws_txs_process(fws, BRCMF_FWS_TXSTATUS_HOST_TOSSED, hslot, 0);
1976	brcmf_fws_unlock(fws->drvr, flags);
1977}
1978
1979void brcmf_fws_bus_blocked(struct brcmf_pub *drvr, bool flow_blocked)
1980{
1981	struct brcmf_fws_info *fws = drvr->fws;
1982
1983	fws->bus_flow_blocked = flow_blocked;
1984	if (!flow_blocked)
1985		brcmf_fws_schedule_deq(fws);
1986	else
1987		fws->stats.bus_flow_block++;
1988}
1989