]> git.kernelconcepts.de Git - karo-tx-linux.git/blob - drivers/net/wireless/rtlwifi/usb.c
rtlwifi: Detect misread of end-point count
[karo-tx-linux.git] / drivers / net / wireless / rtlwifi / usb.c
1 /******************************************************************************
2  *
3  * Copyright(c) 2009-2012  Realtek Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  * The full GNU General Public License is included in this distribution in the
19  * file called LICENSE.
20  *
21  * Contact Information:
22  * wlanfae <wlanfae@realtek.com>
23  * Realtek Corporation, No. 2, Innovation Road II, Hsinchu Science Park,
24  * Hsinchu 300, Taiwan.
25  *
26  *****************************************************************************/
27
28 #include "wifi.h"
29 #include "core.h"
30 #include "usb.h"
31 #include "base.h"
32 #include "ps.h"
33 #include "rtl8192c/fw_common.h"
34 #include <linux/export.h>
35
36 #define REALTEK_USB_VENQT_READ                  0xC0
37 #define REALTEK_USB_VENQT_WRITE                 0x40
38 #define REALTEK_USB_VENQT_CMD_REQ               0x05
39 #define REALTEK_USB_VENQT_CMD_IDX               0x00
40
41 #define MAX_USBCTRL_VENDORREQ_TIMES             10
42
43 static void usbctrl_async_callback(struct urb *urb)
44 {
45         if (urb)
46                 kfree(urb->context);
47 }
48
49 static int _usbctrl_vendorreq_async_write(struct usb_device *udev, u8 request,
50                                           u16 value, u16 index, void *pdata,
51                                           u16 len)
52 {
53         int rc;
54         unsigned int pipe;
55         u8 reqtype;
56         struct usb_ctrlrequest *dr;
57         struct urb *urb;
58         struct rtl819x_async_write_data {
59                 u8 data[REALTEK_USB_VENQT_MAX_BUF_SIZE];
60                 struct usb_ctrlrequest dr;
61         } *buf;
62
63         pipe = usb_sndctrlpipe(udev, 0); /* write_out */
64         reqtype =  REALTEK_USB_VENQT_WRITE;
65
66         buf = kmalloc(sizeof(*buf), GFP_ATOMIC);
67         if (!buf)
68                 return -ENOMEM;
69
70         urb = usb_alloc_urb(0, GFP_ATOMIC);
71         if (!urb) {
72                 kfree(buf);
73                 return -ENOMEM;
74         }
75
76         dr = &buf->dr;
77
78         dr->bRequestType = reqtype;
79         dr->bRequest = request;
80         dr->wValue = cpu_to_le16(value);
81         dr->wIndex = cpu_to_le16(index);
82         dr->wLength = cpu_to_le16(len);
83         /* data are already in little-endian order */
84         memcpy(buf, pdata, len);
85         usb_fill_control_urb(urb, udev, pipe,
86                              (unsigned char *)dr, buf, len,
87                              usbctrl_async_callback, buf);
88         rc = usb_submit_urb(urb, GFP_ATOMIC);
89         if (rc < 0)
90                 kfree(buf);
91         usb_free_urb(urb);
92         return rc;
93 }
94
95 static int _usbctrl_vendorreq_sync_read(struct usb_device *udev, u8 request,
96                                         u16 value, u16 index, void *pdata,
97                                         u16 len)
98 {
99         unsigned int pipe;
100         int status;
101         u8 reqtype;
102         int vendorreq_times = 0;
103         static int count;
104
105         pipe = usb_rcvctrlpipe(udev, 0); /* read_in */
106         reqtype =  REALTEK_USB_VENQT_READ;
107
108         do {
109                 status = usb_control_msg(udev, pipe, request, reqtype, value,
110                                          index, pdata, len, 0); /*max. timeout*/
111                 if (status < 0) {
112                         /* firmware download is checksumed, don't retry */
113                         if ((value >= FW_8192C_START_ADDRESS &&
114                             value <= FW_8192C_END_ADDRESS))
115                                 break;
116                 } else {
117                         break;
118                 }
119         } while (++vendorreq_times < MAX_USBCTRL_VENDORREQ_TIMES);
120
121         if (status < 0 && count++ < 4)
122                 pr_err("reg 0x%x, usbctrl_vendorreq TimeOut! status:0x%x value=0x%x\n",
123                        value, status, le32_to_cpu(*(u32 *)pdata));
124         return status;
125 }
126
127 static u32 _usb_read_sync(struct usb_device *udev, u32 addr, u16 len)
128 {
129         u8 request;
130         u16 wvalue;
131         u16 index;
132         u32 *data;
133         u32 ret;
134
135         data = kmalloc(sizeof(u32), GFP_KERNEL);
136         if (!data)
137                 return -ENOMEM;
138         request = REALTEK_USB_VENQT_CMD_REQ;
139         index = REALTEK_USB_VENQT_CMD_IDX; /* n/a */
140
141         wvalue = (u16)addr;
142         _usbctrl_vendorreq_sync_read(udev, request, wvalue, index, data, len);
143         ret = le32_to_cpu(*data);
144         kfree(data);
145         return ret;
146 }
147
148 static u8 _usb_read8_sync(struct rtl_priv *rtlpriv, u32 addr)
149 {
150         struct device *dev = rtlpriv->io.dev;
151
152         return (u8)_usb_read_sync(to_usb_device(dev), addr, 1);
153 }
154
155 static u16 _usb_read16_sync(struct rtl_priv *rtlpriv, u32 addr)
156 {
157         struct device *dev = rtlpriv->io.dev;
158
159         return (u16)_usb_read_sync(to_usb_device(dev), addr, 2);
160 }
161
162 static u32 _usb_read32_sync(struct rtl_priv *rtlpriv, u32 addr)
163 {
164         struct device *dev = rtlpriv->io.dev;
165
166         return _usb_read_sync(to_usb_device(dev), addr, 4);
167 }
168
169 static void _usb_write_async(struct usb_device *udev, u32 addr, u32 val,
170                              u16 len)
171 {
172         u8 request;
173         u16 wvalue;
174         u16 index;
175         __le32 data;
176
177         request = REALTEK_USB_VENQT_CMD_REQ;
178         index = REALTEK_USB_VENQT_CMD_IDX; /* n/a */
179         wvalue = (u16)(addr&0x0000ffff);
180         data = cpu_to_le32(val);
181         _usbctrl_vendorreq_async_write(udev, request, wvalue, index, &data,
182                                        len);
183 }
184
185 static void _usb_write8_async(struct rtl_priv *rtlpriv, u32 addr, u8 val)
186 {
187         struct device *dev = rtlpriv->io.dev;
188
189         _usb_write_async(to_usb_device(dev), addr, val, 1);
190 }
191
192 static void _usb_write16_async(struct rtl_priv *rtlpriv, u32 addr, u16 val)
193 {
194         struct device *dev = rtlpriv->io.dev;
195
196         _usb_write_async(to_usb_device(dev), addr, val, 2);
197 }
198
199 static void _usb_write32_async(struct rtl_priv *rtlpriv, u32 addr, u32 val)
200 {
201         struct device *dev = rtlpriv->io.dev;
202
203         _usb_write_async(to_usb_device(dev), addr, val, 4);
204 }
205
206 static void _usb_writeN_sync(struct rtl_priv *rtlpriv, u32 addr, void *data,
207                              u16 len)
208 {
209         struct device *dev = rtlpriv->io.dev;
210         struct usb_device *udev = to_usb_device(dev);
211         u8 request = REALTEK_USB_VENQT_CMD_REQ;
212         u8 reqtype =  REALTEK_USB_VENQT_WRITE;
213         u16 wvalue;
214         u16 index = REALTEK_USB_VENQT_CMD_IDX;
215         int pipe = usb_sndctrlpipe(udev, 0); /* write_out */
216         u8 *buffer;
217         dma_addr_t dma_addr;
218
219         wvalue = (u16)(addr&0x0000ffff);
220         buffer = usb_alloc_coherent(udev, (size_t)len, GFP_ATOMIC, &dma_addr);
221         if (!buffer)
222                 return;
223         memcpy(buffer, data, len);
224         usb_control_msg(udev, pipe, request, reqtype, wvalue,
225                         index, buffer, len, 50);
226
227         usb_free_coherent(udev, (size_t)len, buffer, dma_addr);
228 }
229
230 static void _rtl_usb_io_handler_init(struct device *dev,
231                                      struct ieee80211_hw *hw)
232 {
233         struct rtl_priv *rtlpriv = rtl_priv(hw);
234
235         rtlpriv->io.dev = dev;
236         mutex_init(&rtlpriv->io.bb_mutex);
237         rtlpriv->io.write8_async        = _usb_write8_async;
238         rtlpriv->io.write16_async       = _usb_write16_async;
239         rtlpriv->io.write32_async       = _usb_write32_async;
240         rtlpriv->io.read8_sync          = _usb_read8_sync;
241         rtlpriv->io.read16_sync         = _usb_read16_sync;
242         rtlpriv->io.read32_sync         = _usb_read32_sync;
243         rtlpriv->io.writeN_sync         = _usb_writeN_sync;
244 }
245
246 static void _rtl_usb_io_handler_release(struct ieee80211_hw *hw)
247 {
248         struct rtl_priv __maybe_unused *rtlpriv = rtl_priv(hw);
249
250         mutex_destroy(&rtlpriv->io.bb_mutex);
251 }
252
253 /**
254  *
255  *      Default aggregation handler. Do nothing and just return the oldest skb.
256  */
257 static struct sk_buff *_none_usb_tx_aggregate_hdl(struct ieee80211_hw *hw,
258                                                   struct sk_buff_head *list)
259 {
260         return skb_dequeue(list);
261 }
262
263 #define IS_HIGH_SPEED_USB(udev) \
264                 ((USB_SPEED_HIGH == (udev)->speed) ? true : false)
265
266 static int _rtl_usb_init_tx(struct ieee80211_hw *hw)
267 {
268         u32 i;
269         struct rtl_priv *rtlpriv = rtl_priv(hw);
270         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
271
272         rtlusb->max_bulk_out_size = IS_HIGH_SPEED_USB(rtlusb->udev)
273                                                     ? USB_HIGH_SPEED_BULK_SIZE
274                                                     : USB_FULL_SPEED_BULK_SIZE;
275
276         RT_TRACE(rtlpriv, COMP_INIT, DBG_DMESG, "USB Max Bulk-out Size=%d\n",
277                  rtlusb->max_bulk_out_size);
278
279         for (i = 0; i < __RTL_TXQ_NUM; i++) {
280                 u32 ep_num = rtlusb->ep_map.ep_mapping[i];
281                 if (!ep_num) {
282                         RT_TRACE(rtlpriv, COMP_INIT, DBG_DMESG,
283                                  "Invalid endpoint map setting!\n");
284                         return -EINVAL;
285                 }
286         }
287
288         rtlusb->usb_tx_post_hdl =
289                  rtlpriv->cfg->usb_interface_cfg->usb_tx_post_hdl;
290         rtlusb->usb_tx_cleanup  =
291                  rtlpriv->cfg->usb_interface_cfg->usb_tx_cleanup;
292         rtlusb->usb_tx_aggregate_hdl =
293                  (rtlpriv->cfg->usb_interface_cfg->usb_tx_aggregate_hdl)
294                  ? rtlpriv->cfg->usb_interface_cfg->usb_tx_aggregate_hdl
295                  : &_none_usb_tx_aggregate_hdl;
296
297         init_usb_anchor(&rtlusb->tx_submitted);
298         for (i = 0; i < RTL_USB_MAX_EP_NUM; i++) {
299                 skb_queue_head_init(&rtlusb->tx_skb_queue[i]);
300                 init_usb_anchor(&rtlusb->tx_pending[i]);
301         }
302         return 0;
303 }
304
305 static int _rtl_usb_init_rx(struct ieee80211_hw *hw)
306 {
307         struct rtl_priv *rtlpriv = rtl_priv(hw);
308         struct rtl_usb_priv *usb_priv = rtl_usbpriv(hw);
309         struct rtl_usb *rtlusb = rtl_usbdev(usb_priv);
310
311         rtlusb->rx_max_size = rtlpriv->cfg->usb_interface_cfg->rx_max_size;
312         rtlusb->rx_urb_num = rtlpriv->cfg->usb_interface_cfg->rx_urb_num;
313         rtlusb->in_ep = rtlpriv->cfg->usb_interface_cfg->in_ep_num;
314         rtlusb->usb_rx_hdl = rtlpriv->cfg->usb_interface_cfg->usb_rx_hdl;
315         rtlusb->usb_rx_segregate_hdl =
316                 rtlpriv->cfg->usb_interface_cfg->usb_rx_segregate_hdl;
317
318         pr_info("rx_max_size %d, rx_urb_num %d, in_ep %d\n",
319                 rtlusb->rx_max_size, rtlusb->rx_urb_num, rtlusb->in_ep);
320         init_usb_anchor(&rtlusb->rx_submitted);
321         return 0;
322 }
323
324 static int _rtl_usb_init(struct ieee80211_hw *hw)
325 {
326         struct rtl_priv *rtlpriv = rtl_priv(hw);
327         struct rtl_usb_priv *usb_priv = rtl_usbpriv(hw);
328         struct rtl_usb *rtlusb = rtl_usbdev(usb_priv);
329         int err;
330         u8 epidx;
331         struct usb_interface    *usb_intf = rtlusb->intf;
332         u8 epnums = usb_intf->cur_altsetting->desc.bNumEndpoints;
333
334         rtlusb->out_ep_nums = rtlusb->in_ep_nums = 0;
335         for (epidx = 0; epidx < epnums; epidx++) {
336                 struct usb_endpoint_descriptor *pep_desc;
337                 pep_desc = &usb_intf->cur_altsetting->endpoint[epidx].desc;
338
339                 if (usb_endpoint_dir_in(pep_desc))
340                         rtlusb->in_ep_nums++;
341                 else if (usb_endpoint_dir_out(pep_desc))
342                         rtlusb->out_ep_nums++;
343
344                 RT_TRACE(rtlpriv, COMP_INIT, DBG_DMESG,
345                          "USB EP(0x%02x), MaxPacketSize=%d, Interval=%d\n",
346                          pep_desc->bEndpointAddress, pep_desc->wMaxPacketSize,
347                          pep_desc->bInterval);
348         }
349         if (rtlusb->in_ep_nums <  rtlpriv->cfg->usb_interface_cfg->in_ep_num) {
350                 pr_err("Too few input end points found\n");
351                 return -EINVAL;
352         }
353         if (rtlusb->out_ep_nums == 0) {
354                 pr_err("No output end points found\n");
355                 return -EINVAL;
356         }
357         /* usb endpoint mapping */
358         err = rtlpriv->cfg->usb_interface_cfg->usb_endpoint_mapping(hw);
359         rtlusb->usb_mq_to_hwq =  rtlpriv->cfg->usb_interface_cfg->usb_mq_to_hwq;
360         _rtl_usb_init_tx(hw);
361         _rtl_usb_init_rx(hw);
362         return err;
363 }
364
365 static int _rtl_usb_init_sw(struct ieee80211_hw *hw)
366 {
367         struct rtl_mac *mac = rtl_mac(rtl_priv(hw));
368         struct rtl_hal *rtlhal = rtl_hal(rtl_priv(hw));
369         struct rtl_ps_ctl *ppsc = rtl_psc(rtl_priv(hw));
370         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
371
372         rtlhal->hw = hw;
373         ppsc->inactiveps = false;
374         ppsc->leisure_ps = false;
375         ppsc->fwctrl_lps = false;
376         ppsc->reg_fwctrl_lps = 3;
377         ppsc->reg_max_lps_awakeintvl = 5;
378         ppsc->fwctrl_psmode = FW_PS_DTIM_MODE;
379
380          /* IBSS */
381         mac->beacon_interval = 100;
382
383          /* AMPDU */
384         mac->min_space_cfg = 0;
385         mac->max_mss_density = 0;
386
387         /* set sane AMPDU defaults */
388         mac->current_ampdu_density = 7;
389         mac->current_ampdu_factor = 3;
390
391         /* QOS */
392         rtlusb->acm_method = eAcmWay2_SW;
393
394         /* IRQ */
395         /* HIMR - turn all on */
396         rtlusb->irq_mask[0] = 0xFFFFFFFF;
397         /* HIMR_EX - turn all on */
398         rtlusb->irq_mask[1] = 0xFFFFFFFF;
399         rtlusb->disableHWSM =  true;
400         return 0;
401 }
402
403 #define __RADIO_TAP_SIZE_RSV    32
404
405 static void _rtl_rx_completed(struct urb *urb);
406
407 static struct sk_buff *_rtl_prep_rx_urb(struct ieee80211_hw *hw,
408                                         struct rtl_usb *rtlusb,
409                                         struct urb *urb,
410                                         gfp_t gfp_mask)
411 {
412         struct sk_buff *skb;
413         struct rtl_priv *rtlpriv = rtl_priv(hw);
414
415         skb = __dev_alloc_skb((rtlusb->rx_max_size + __RADIO_TAP_SIZE_RSV),
416                                gfp_mask);
417         if (!skb) {
418                 RT_TRACE(rtlpriv, COMP_USB, DBG_EMERG,
419                          "Failed to __dev_alloc_skb!!\n");
420                 return ERR_PTR(-ENOMEM);
421         }
422
423         /* reserve some space for mac80211's radiotap */
424         skb_reserve(skb, __RADIO_TAP_SIZE_RSV);
425         usb_fill_bulk_urb(urb, rtlusb->udev,
426                           usb_rcvbulkpipe(rtlusb->udev, rtlusb->in_ep),
427                           skb->data, min(skb_tailroom(skb),
428                           (int)rtlusb->rx_max_size),
429                           _rtl_rx_completed, skb);
430
431         _rtl_install_trx_info(rtlusb, skb, rtlusb->in_ep);
432         return skb;
433 }
434
435 #undef __RADIO_TAP_SIZE_RSV
436
437 static void _rtl_usb_rx_process_agg(struct ieee80211_hw *hw,
438                                     struct sk_buff *skb)
439 {
440         struct rtl_priv *rtlpriv = rtl_priv(hw);
441         u8 *rxdesc = skb->data;
442         struct ieee80211_hdr *hdr;
443         bool unicast = false;
444         __le16 fc;
445         struct ieee80211_rx_status rx_status = {0};
446         struct rtl_stats stats = {
447                 .signal = 0,
448                 .noise = -98,
449                 .rate = 0,
450         };
451
452         skb_pull(skb, RTL_RX_DESC_SIZE);
453         rtlpriv->cfg->ops->query_rx_desc(hw, &stats, &rx_status, rxdesc, skb);
454         skb_pull(skb, (stats.rx_drvinfo_size + stats.rx_bufshift));
455         hdr = (struct ieee80211_hdr *)(skb->data);
456         fc = hdr->frame_control;
457         if (!stats.crc) {
458                 memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
459
460                 if (is_broadcast_ether_addr(hdr->addr1)) {
461                         /*TODO*/;
462                 } else if (is_multicast_ether_addr(hdr->addr1)) {
463                         /*TODO*/
464                 } else {
465                         unicast = true;
466                         rtlpriv->stats.rxbytesunicast +=  skb->len;
467                 }
468
469                 rtl_is_special_data(hw, skb, false);
470
471                 if (ieee80211_is_data(fc)) {
472                         rtlpriv->cfg->ops->led_control(hw, LED_CTL_RX);
473
474                         if (unicast)
475                                 rtlpriv->link_info.num_rx_inperiod++;
476                 }
477         }
478 }
479
480 static void _rtl_usb_rx_process_noagg(struct ieee80211_hw *hw,
481                                       struct sk_buff *skb)
482 {
483         struct rtl_priv *rtlpriv = rtl_priv(hw);
484         u8 *rxdesc = skb->data;
485         struct ieee80211_hdr *hdr;
486         bool unicast = false;
487         __le16 fc;
488         struct ieee80211_rx_status rx_status = {0};
489         struct rtl_stats stats = {
490                 .signal = 0,
491                 .noise = -98,
492                 .rate = 0,
493         };
494
495         skb_pull(skb, RTL_RX_DESC_SIZE);
496         rtlpriv->cfg->ops->query_rx_desc(hw, &stats, &rx_status, rxdesc, skb);
497         skb_pull(skb, (stats.rx_drvinfo_size + stats.rx_bufshift));
498         hdr = (struct ieee80211_hdr *)(skb->data);
499         fc = hdr->frame_control;
500         if (!stats.crc) {
501                 memcpy(IEEE80211_SKB_RXCB(skb), &rx_status, sizeof(rx_status));
502
503                 if (is_broadcast_ether_addr(hdr->addr1)) {
504                         /*TODO*/;
505                 } else if (is_multicast_ether_addr(hdr->addr1)) {
506                         /*TODO*/
507                 } else {
508                         unicast = true;
509                         rtlpriv->stats.rxbytesunicast +=  skb->len;
510                 }
511
512                 rtl_is_special_data(hw, skb, false);
513
514                 if (ieee80211_is_data(fc)) {
515                         rtlpriv->cfg->ops->led_control(hw, LED_CTL_RX);
516
517                         if (unicast)
518                                 rtlpriv->link_info.num_rx_inperiod++;
519                 }
520                 if (likely(rtl_action_proc(hw, skb, false))) {
521                         struct sk_buff *uskb = NULL;
522                         u8 *pdata;
523
524                         uskb = dev_alloc_skb(skb->len + 128);
525                         if (uskb) {     /* drop packet on allocation failure */
526                                 memcpy(IEEE80211_SKB_RXCB(uskb), &rx_status,
527                                        sizeof(rx_status));
528                                 pdata = (u8 *)skb_put(uskb, skb->len);
529                                 memcpy(pdata, skb->data, skb->len);
530                                 ieee80211_rx_irqsafe(hw, uskb);
531                         }
532                         dev_kfree_skb_any(skb);
533                 } else {
534                         dev_kfree_skb_any(skb);
535                 }
536         }
537 }
538
539 static void _rtl_rx_pre_process(struct ieee80211_hw *hw, struct sk_buff *skb)
540 {
541         struct sk_buff *_skb;
542         struct sk_buff_head rx_queue;
543         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
544
545         skb_queue_head_init(&rx_queue);
546         if (rtlusb->usb_rx_segregate_hdl)
547                 rtlusb->usb_rx_segregate_hdl(hw, skb, &rx_queue);
548         WARN_ON(skb_queue_empty(&rx_queue));
549         while (!skb_queue_empty(&rx_queue)) {
550                 _skb = skb_dequeue(&rx_queue);
551                 _rtl_usb_rx_process_agg(hw, skb);
552                 ieee80211_rx_irqsafe(hw, skb);
553         }
554 }
555
556 static void _rtl_rx_completed(struct urb *_urb)
557 {
558         struct sk_buff *skb = (struct sk_buff *)_urb->context;
559         struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
560         struct rtl_usb *rtlusb = (struct rtl_usb *)info->rate_driver_data[0];
561         struct ieee80211_hw *hw = usb_get_intfdata(rtlusb->intf);
562         struct rtl_priv *rtlpriv = rtl_priv(hw);
563         int err = 0;
564
565         if (unlikely(IS_USB_STOP(rtlusb)))
566                 goto free;
567
568         if (likely(0 == _urb->status)) {
569                 /* If this code were moved to work queue, would CPU
570                  * utilization be improved?  NOTE: We shall allocate another skb
571                  * and reuse the original one.
572                  */
573                 skb_put(skb, _urb->actual_length);
574
575                 if (likely(!rtlusb->usb_rx_segregate_hdl)) {
576                         struct sk_buff *_skb;
577                         _rtl_usb_rx_process_noagg(hw, skb);
578                         _skb = _rtl_prep_rx_urb(hw, rtlusb, _urb, GFP_ATOMIC);
579                         if (IS_ERR(_skb)) {
580                                 err = PTR_ERR(_skb);
581                                 RT_TRACE(rtlpriv, COMP_USB, DBG_EMERG,
582                                          "Can't allocate skb for bulk IN!\n");
583                                 return;
584                         }
585                         skb = _skb;
586                 } else{
587                         /* TO DO */
588                         _rtl_rx_pre_process(hw, skb);
589                         pr_err("rx agg not supported\n");
590                 }
591                 goto resubmit;
592         }
593
594         switch (_urb->status) {
595         /* disconnect */
596         case -ENOENT:
597         case -ECONNRESET:
598         case -ENODEV:
599         case -ESHUTDOWN:
600                 goto free;
601         default:
602                 break;
603         }
604
605 resubmit:
606         skb_reset_tail_pointer(skb);
607         skb_trim(skb, 0);
608
609         usb_anchor_urb(_urb, &rtlusb->rx_submitted);
610         err = usb_submit_urb(_urb, GFP_ATOMIC);
611         if (unlikely(err)) {
612                 usb_unanchor_urb(_urb);
613                 goto free;
614         }
615         return;
616
617 free:
618         dev_kfree_skb_irq(skb);
619 }
620
621 static int _rtl_usb_receive(struct ieee80211_hw *hw)
622 {
623         struct urb *urb;
624         struct sk_buff *skb;
625         int err;
626         int i;
627         struct rtl_priv *rtlpriv = rtl_priv(hw);
628         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
629
630         WARN_ON(0 == rtlusb->rx_urb_num);
631         /* 1600 == 1514 + max WLAN header + rtk info */
632         WARN_ON(rtlusb->rx_max_size < 1600);
633
634         for (i = 0; i < rtlusb->rx_urb_num; i++) {
635                 err = -ENOMEM;
636                 urb = usb_alloc_urb(0, GFP_KERNEL);
637                 if (!urb) {
638                         RT_TRACE(rtlpriv, COMP_USB, DBG_EMERG,
639                                  "Failed to alloc URB!!\n");
640                         goto err_out;
641                 }
642
643                 skb = _rtl_prep_rx_urb(hw, rtlusb, urb, GFP_KERNEL);
644                 if (IS_ERR(skb)) {
645                         RT_TRACE(rtlpriv, COMP_USB, DBG_EMERG,
646                                  "Failed to prep_rx_urb!!\n");
647                         err = PTR_ERR(skb);
648                         goto err_out;
649                 }
650
651                 usb_anchor_urb(urb, &rtlusb->rx_submitted);
652                 err = usb_submit_urb(urb, GFP_KERNEL);
653                 if (err)
654                         goto err_out;
655                 usb_free_urb(urb);
656         }
657         return 0;
658
659 err_out:
660         usb_kill_anchored_urbs(&rtlusb->rx_submitted);
661         return err;
662 }
663
664 static int rtl_usb_start(struct ieee80211_hw *hw)
665 {
666         int err;
667         struct rtl_priv *rtlpriv = rtl_priv(hw);
668         struct rtl_hal *rtlhal = rtl_hal(rtl_priv(hw));
669         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
670
671         err = rtlpriv->cfg->ops->hw_init(hw);
672         if (!err) {
673                 rtl_init_rx_config(hw);
674
675                 /* Enable software */
676                 SET_USB_START(rtlusb);
677                 /* should after adapter start and interrupt enable. */
678                 set_hal_start(rtlhal);
679
680                 /* Start bulk IN */
681                 _rtl_usb_receive(hw);
682         }
683
684         return err;
685 }
686 /**
687  *
688  *
689  */
690
691 /*=======================  tx =========================================*/
692 static void rtl_usb_cleanup(struct ieee80211_hw *hw)
693 {
694         u32 i;
695         struct sk_buff *_skb;
696         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
697         struct ieee80211_tx_info *txinfo;
698
699         SET_USB_STOP(rtlusb);
700
701         /* clean up rx stuff. */
702         usb_kill_anchored_urbs(&rtlusb->rx_submitted);
703
704         /* clean up tx stuff */
705         for (i = 0; i < RTL_USB_MAX_EP_NUM; i++) {
706                 while ((_skb = skb_dequeue(&rtlusb->tx_skb_queue[i]))) {
707                         rtlusb->usb_tx_cleanup(hw, _skb);
708                         txinfo = IEEE80211_SKB_CB(_skb);
709                         ieee80211_tx_info_clear_status(txinfo);
710                         txinfo->flags |= IEEE80211_TX_STAT_ACK;
711                         ieee80211_tx_status_irqsafe(hw, _skb);
712                 }
713                 usb_kill_anchored_urbs(&rtlusb->tx_pending[i]);
714         }
715         usb_kill_anchored_urbs(&rtlusb->tx_submitted);
716 }
717
718 /**
719  *
720  * We may add some struct into struct rtl_usb later. Do deinit here.
721  *
722  */
723 static void rtl_usb_deinit(struct ieee80211_hw *hw)
724 {
725         rtl_usb_cleanup(hw);
726 }
727
728 static void rtl_usb_stop(struct ieee80211_hw *hw)
729 {
730         struct rtl_priv *rtlpriv = rtl_priv(hw);
731         struct rtl_hal *rtlhal = rtl_hal(rtl_priv(hw));
732         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
733
734         /* should after adapter start and interrupt enable. */
735         set_hal_stop(rtlhal);
736         /* Enable software */
737         SET_USB_STOP(rtlusb);
738         rtl_usb_deinit(hw);
739         rtlpriv->cfg->ops->hw_disable(hw);
740 }
741
742 static void _rtl_submit_tx_urb(struct ieee80211_hw *hw, struct urb *_urb)
743 {
744         int err;
745         struct rtl_priv *rtlpriv = rtl_priv(hw);
746         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
747
748         usb_anchor_urb(_urb, &rtlusb->tx_submitted);
749         err = usb_submit_urb(_urb, GFP_ATOMIC);
750         if (err < 0) {
751                 struct sk_buff *skb;
752
753                 RT_TRACE(rtlpriv, COMP_USB, DBG_EMERG,
754                          "Failed to submit urb\n");
755                 usb_unanchor_urb(_urb);
756                 skb = (struct sk_buff *)_urb->context;
757                 kfree_skb(skb);
758         }
759         usb_free_urb(_urb);
760 }
761
762 static int _usb_tx_post(struct ieee80211_hw *hw, struct urb *urb,
763                         struct sk_buff *skb)
764 {
765         struct rtl_priv *rtlpriv = rtl_priv(hw);
766         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
767         struct ieee80211_tx_info *txinfo;
768
769         rtlusb->usb_tx_post_hdl(hw, urb, skb);
770         skb_pull(skb, RTL_TX_HEADER_SIZE);
771         txinfo = IEEE80211_SKB_CB(skb);
772         ieee80211_tx_info_clear_status(txinfo);
773         txinfo->flags |= IEEE80211_TX_STAT_ACK;
774
775         if (urb->status) {
776                 RT_TRACE(rtlpriv, COMP_USB, DBG_EMERG,
777                          "Urb has error status 0x%X\n", urb->status);
778                 goto out;
779         }
780         /*  TODO:       statistics */
781 out:
782         ieee80211_tx_status_irqsafe(hw, skb);
783         return urb->status;
784 }
785
786 static void _rtl_tx_complete(struct urb *urb)
787 {
788         struct sk_buff *skb = (struct sk_buff *)urb->context;
789         struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
790         struct rtl_usb *rtlusb = (struct rtl_usb *)info->rate_driver_data[0];
791         struct ieee80211_hw *hw = usb_get_intfdata(rtlusb->intf);
792         int err;
793
794         if (unlikely(IS_USB_STOP(rtlusb)))
795                 return;
796         err = _usb_tx_post(hw, urb, skb);
797         if (err) {
798                 /* Ignore error and keep issuiing other urbs */
799                 return;
800         }
801 }
802
803 static struct urb *_rtl_usb_tx_urb_setup(struct ieee80211_hw *hw,
804                                 struct sk_buff *skb, u32 ep_num)
805 {
806         struct rtl_priv *rtlpriv = rtl_priv(hw);
807         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
808         struct urb *_urb;
809
810         WARN_ON(NULL == skb);
811         _urb = usb_alloc_urb(0, GFP_ATOMIC);
812         if (!_urb) {
813                 RT_TRACE(rtlpriv, COMP_USB, DBG_EMERG,
814                          "Can't allocate URB for bulk out!\n");
815                 kfree_skb(skb);
816                 return NULL;
817         }
818         _rtl_install_trx_info(rtlusb, skb, ep_num);
819         usb_fill_bulk_urb(_urb, rtlusb->udev, usb_sndbulkpipe(rtlusb->udev,
820                           ep_num), skb->data, skb->len, _rtl_tx_complete, skb);
821         _urb->transfer_flags |= URB_ZERO_PACKET;
822         return _urb;
823 }
824
825 static void _rtl_usb_transmit(struct ieee80211_hw *hw, struct sk_buff *skb,
826                        enum rtl_txq qnum)
827 {
828         struct rtl_priv *rtlpriv = rtl_priv(hw);
829         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
830         u32 ep_num;
831         struct urb *_urb = NULL;
832         struct sk_buff *_skb = NULL;
833         struct sk_buff_head *skb_list;
834         struct usb_anchor *urb_list;
835
836         WARN_ON(NULL == rtlusb->usb_tx_aggregate_hdl);
837         if (unlikely(IS_USB_STOP(rtlusb))) {
838                 RT_TRACE(rtlpriv, COMP_USB, DBG_EMERG,
839                          "USB device is stopping...\n");
840                 kfree_skb(skb);
841                 return;
842         }
843         ep_num = rtlusb->ep_map.ep_mapping[qnum];
844         skb_list = &rtlusb->tx_skb_queue[ep_num];
845         _skb = skb;
846         _urb = _rtl_usb_tx_urb_setup(hw, _skb, ep_num);
847         if (unlikely(!_urb)) {
848                 RT_TRACE(rtlpriv, COMP_ERR, DBG_EMERG,
849                          "Can't allocate urb. Drop skb!\n");
850                 return;
851         }
852         urb_list = &rtlusb->tx_pending[ep_num];
853         _rtl_submit_tx_urb(hw, _urb);
854 }
855
856 static void _rtl_usb_tx_preprocess(struct ieee80211_hw *hw, struct sk_buff *skb,
857                             u16 hw_queue)
858 {
859         struct rtl_priv *rtlpriv = rtl_priv(hw);
860         struct rtl_mac *mac = rtl_mac(rtl_priv(hw));
861         struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
862         struct rtl_tx_desc *pdesc = NULL;
863         struct rtl_tcb_desc tcb_desc;
864         struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)(skb->data);
865         __le16 fc = hdr->frame_control;
866         u8 *pda_addr = hdr->addr1;
867         /* ssn */
868         u8 *qc = NULL;
869         u8 tid = 0;
870         u16 seq_number = 0;
871
872         memset(&tcb_desc, 0, sizeof(struct rtl_tcb_desc));
873         if (ieee80211_is_auth(fc)) {
874                 RT_TRACE(rtlpriv, COMP_SEND, DBG_DMESG, "MAC80211_LINKING\n");
875                 rtl_ips_nic_on(hw);
876         }
877
878         if (rtlpriv->psc.sw_ps_enabled) {
879                 if (ieee80211_is_data(fc) && !ieee80211_is_nullfunc(fc) &&
880                     !ieee80211_has_pm(fc))
881                         hdr->frame_control |= cpu_to_le16(IEEE80211_FCTL_PM);
882         }
883
884         rtl_action_proc(hw, skb, true);
885         if (is_multicast_ether_addr(pda_addr))
886                 rtlpriv->stats.txbytesmulticast += skb->len;
887         else if (is_broadcast_ether_addr(pda_addr))
888                 rtlpriv->stats.txbytesbroadcast += skb->len;
889         else
890                 rtlpriv->stats.txbytesunicast += skb->len;
891         if (ieee80211_is_data_qos(fc)) {
892                 qc = ieee80211_get_qos_ctl(hdr);
893                 tid = qc[0] & IEEE80211_QOS_CTL_TID_MASK;
894                 seq_number = (le16_to_cpu(hdr->seq_ctrl) &
895                              IEEE80211_SCTL_SEQ) >> 4;
896                 seq_number += 1;
897                 seq_number <<= 4;
898         }
899         rtlpriv->cfg->ops->fill_tx_desc(hw, hdr, (u8 *)pdesc, info, skb,
900                                         hw_queue, &tcb_desc);
901         if (!ieee80211_has_morefrags(hdr->frame_control)) {
902                 if (qc)
903                         mac->tids[tid].seq_number = seq_number;
904         }
905         if (ieee80211_is_data(fc))
906                 rtlpriv->cfg->ops->led_control(hw, LED_CTL_TX);
907 }
908
909 static int rtl_usb_tx(struct ieee80211_hw *hw, struct sk_buff *skb,
910                       struct rtl_tcb_desc *dummy)
911 {
912         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
913         struct rtl_hal *rtlhal = rtl_hal(rtl_priv(hw));
914         struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)(skb->data);
915         __le16 fc = hdr->frame_control;
916         u16 hw_queue;
917
918         if (unlikely(is_hal_stop(rtlhal)))
919                 goto err_free;
920         hw_queue = rtlusb->usb_mq_to_hwq(fc, skb_get_queue_mapping(skb));
921         _rtl_usb_tx_preprocess(hw, skb, hw_queue);
922         _rtl_usb_transmit(hw, skb, hw_queue);
923         return NETDEV_TX_OK;
924
925 err_free:
926         dev_kfree_skb_any(skb);
927         return NETDEV_TX_OK;
928 }
929
930 static bool rtl_usb_tx_chk_waitq_insert(struct ieee80211_hw *hw,
931                                         struct sk_buff *skb)
932 {
933         return false;
934 }
935
936 static struct rtl_intf_ops rtl_usb_ops = {
937         .adapter_start = rtl_usb_start,
938         .adapter_stop = rtl_usb_stop,
939         .adapter_tx = rtl_usb_tx,
940         .waitq_insert = rtl_usb_tx_chk_waitq_insert,
941 };
942
943 int __devinit rtl_usb_probe(struct usb_interface *intf,
944                         const struct usb_device_id *id)
945 {
946         int err;
947         struct ieee80211_hw *hw = NULL;
948         struct rtl_priv *rtlpriv = NULL;
949         struct usb_device       *udev;
950         struct rtl_usb_priv *usb_priv;
951
952         hw = ieee80211_alloc_hw(sizeof(struct rtl_priv) +
953                                 sizeof(struct rtl_usb_priv), &rtl_ops);
954         if (!hw) {
955                 RT_ASSERT(false, "ieee80211 alloc failed\n");
956                 return -ENOMEM;
957         }
958         rtlpriv = hw->priv;
959         init_completion(&rtlpriv->firmware_loading_complete);
960         SET_IEEE80211_DEV(hw, &intf->dev);
961         udev = interface_to_usbdev(intf);
962         usb_get_dev(udev);
963         usb_priv = rtl_usbpriv(hw);
964         memset(usb_priv, 0, sizeof(*usb_priv));
965         usb_priv->dev.intf = intf;
966         usb_priv->dev.udev = udev;
967         usb_set_intfdata(intf, hw);
968         /* init cfg & intf_ops */
969         rtlpriv->rtlhal.interface = INTF_USB;
970         rtlpriv->cfg = (struct rtl_hal_cfg *)(id->driver_info);
971         rtlpriv->intf_ops = &rtl_usb_ops;
972         rtl_dbgp_flag_init(hw);
973         /* Init IO handler */
974         _rtl_usb_io_handler_init(&udev->dev, hw);
975         rtlpriv->cfg->ops->read_chip_version(hw);
976         /*like read eeprom and so on */
977         rtlpriv->cfg->ops->read_eeprom_info(hw);
978         if (rtlpriv->cfg->ops->init_sw_vars(hw)) {
979                 RT_TRACE(rtlpriv, COMP_ERR, DBG_EMERG, "Can't init_sw_vars\n");
980                 goto error_out;
981         }
982         rtlpriv->cfg->ops->init_sw_leds(hw);
983         err = _rtl_usb_init(hw);
984         if (err)
985                 goto error_out;
986         err = _rtl_usb_init_sw(hw);
987         /* Init mac80211 sw */
988         err = rtl_init_core(hw);
989         if (err) {
990                 RT_TRACE(rtlpriv, COMP_ERR, DBG_EMERG,
991                          "Can't allocate sw for mac80211\n");
992                 goto error_out;
993         }
994
995         return 0;
996 error_out:
997         rtl_deinit_core(hw);
998         _rtl_usb_io_handler_release(hw);
999         usb_put_dev(udev);
1000         complete(&rtlpriv->firmware_loading_complete);
1001         return -ENODEV;
1002 }
1003 EXPORT_SYMBOL(rtl_usb_probe);
1004
1005 void rtl_usb_disconnect(struct usb_interface *intf)
1006 {
1007         struct ieee80211_hw *hw = usb_get_intfdata(intf);
1008         struct rtl_priv *rtlpriv = rtl_priv(hw);
1009         struct rtl_mac *rtlmac = rtl_mac(rtl_priv(hw));
1010         struct rtl_usb *rtlusb = rtl_usbdev(rtl_usbpriv(hw));
1011
1012         if (unlikely(!rtlpriv))
1013                 return;
1014
1015         /* just in case driver is removed before firmware callback */
1016         wait_for_completion(&rtlpriv->firmware_loading_complete);
1017         /*ieee80211_unregister_hw will call ops_stop */
1018         if (rtlmac->mac80211_registered == 1) {
1019                 ieee80211_unregister_hw(hw);
1020                 rtlmac->mac80211_registered = 0;
1021         } else {
1022                 rtl_deinit_deferred_work(hw);
1023                 rtlpriv->intf_ops->adapter_stop(hw);
1024         }
1025         /*deinit rfkill */
1026         /* rtl_deinit_rfkill(hw); */
1027         rtl_usb_deinit(hw);
1028         rtl_deinit_core(hw);
1029         rtlpriv->cfg->ops->deinit_sw_leds(hw);
1030         rtlpriv->cfg->ops->deinit_sw_vars(hw);
1031         _rtl_usb_io_handler_release(hw);
1032         usb_put_dev(rtlusb->udev);
1033         usb_set_intfdata(intf, NULL);
1034         ieee80211_free_hw(hw);
1035 }
1036 EXPORT_SYMBOL(rtl_usb_disconnect);
1037
1038 int rtl_usb_suspend(struct usb_interface *pusb_intf, pm_message_t message)
1039 {
1040         return 0;
1041 }
1042 EXPORT_SYMBOL(rtl_usb_suspend);
1043
1044 int rtl_usb_resume(struct usb_interface *pusb_intf)
1045 {
1046         return 0;
1047 }
1048 EXPORT_SYMBOL(rtl_usb_resume);