drivers/net/wireless/intersil/prism54/islpci_dev.c

   1 // SPDX-License-Identifier: GPL-2.0-only
   2 /*
   3  *  Copyright (C) 2002 Intersil Americas Inc.
   4  *  Copyright (C) 2003 Herbert Valerio Riedel <[email protected]>
   5  *  Copyright (C) 2003 Luis R. Rodriguez <[email protected]>
   6  */
   7
   8 #include <linux/hardirq.h>
   9 #include <linux/module.h>
  10 #include <linux/slab.h>
  11
  12 #include <linux/netdevice.h>
  13 #include <linux/ethtool.h>
  14 #include <linux/pci.h>
  15 #include <linux/sched.h>
  16 #include <linux/etherdevice.h>
  17 #include <linux/delay.h>
  18 #include <linux/if_arp.h>
  19
  20 #include <asm/io.h>
  21
  22 #include "prismcompat.h"
  23 #include "isl_38xx.h"
  24 #include "isl_ioctl.h"
  25 #include "islpci_dev.h"
  26 #include "islpci_mgt.h"
  27 #include "islpci_eth.h"
  28 #include "oid_mgt.h"
  29
  30 #define ISL3877_IMAGE_FILE      "isl3877"
  31 #define ISL3886_IMAGE_FILE      "isl3886"
  32 #define ISL3890_IMAGE_FILE      "isl3890"
  33 MODULE_FIRMWARE(ISL3877_IMAGE_FILE);
  34 MODULE_FIRMWARE(ISL3886_IMAGE_FILE);
  35 MODULE_FIRMWARE(ISL3890_IMAGE_FILE);
  36
  37 static int prism54_bring_down(islpci_private *);
  38 static int islpci_alloc_memory(islpci_private *);
  39
  40 /* Temporary dummy MAC address to use until firmware is loaded.
  41  * The idea there is that some tools (such as nameif) may query
  42  * the MAC address before the netdev is 'open'. By using a valid
  43  * OUI prefix, they can process the netdev properly.
  44  * Of course, this is not the final/real MAC address. It doesn't
  45  * matter, as you are suppose to be able to change it anytime via
  46  * ndev->set_mac_address. Jean II */
  47 static const unsigned char      dummy_mac[6] = { 0x00, 0x30, 0xB4, 0x00, 0x00, 0x00 };
  48
  49 static int
  50 isl_upload_firmware(islpci_private *priv)
  51 {
  52         u32 reg, rc;
  53         void __iomem *device_base = priv->device_base;
  54
  55         /* clear the RAMBoot and the Reset bit */
  56         reg = readl(device_base + ISL38XX_CTRL_STAT_REG);
  57         reg &= ~ISL38XX_CTRL_STAT_RESET;
  58         reg &= ~ISL38XX_CTRL_STAT_RAMBOOT;
  59         writel(reg, device_base + ISL38XX_CTRL_STAT_REG);
  60         wmb();
  61         udelay(ISL38XX_WRITEIO_DELAY);
  62
  63         /* set the Reset bit without reading the register ! */
  64         reg |= ISL38XX_CTRL_STAT_RESET;
  65         writel(reg, device_base + ISL38XX_CTRL_STAT_REG);
  66         wmb();
  67         udelay(ISL38XX_WRITEIO_DELAY);
  68
  69         /* clear the Reset bit */
  70         reg &= ~ISL38XX_CTRL_STAT_RESET;
  71         writel(reg, device_base + ISL38XX_CTRL_STAT_REG);
  72         wmb();
  73
  74         /* wait a while for the device to reboot */
  75         mdelay(50);
  76
  77         {
  78                 const struct firmware *fw_entry = NULL;
  79                 long fw_len;
  80                 const u32 *fw_ptr;
  81
  82                 rc = request_firmware(&fw_entry, priv->firmware, PRISM_FW_PDEV);
  83                 if (rc) {
  84                         printk(KERN_ERR
  85                                "%s: request_firmware() failed for '%s'\n",
  86                                "prism54", priv->firmware);
  87                         return rc;
  88                 }
  89                 /* prepare the Direct Memory Base register */
  90                 reg = ISL38XX_DEV_FIRMWARE_ADDRES;
  91
  92                 fw_ptr = (u32 *) fw_entry->data;
  93                 fw_len = fw_entry->size;
  94
  95                 if (fw_len % 4) {
  96                         printk(KERN_ERR
  97                                "%s: firmware '%s' size is not multiple of 32bit, aborting!\n",
  98                                "prism54", priv->firmware);
  99                         release_firmware(fw_entry);
 100                         return -EILSEQ; /* Illegal byte sequence  */;
 101                 }
 102
 103                 while (fw_len > 0) {
 104                         long _fw_len =
 105                             (fw_len >
 106                              ISL38XX_MEMORY_WINDOW_SIZE) ?
 107                             ISL38XX_MEMORY_WINDOW_SIZE : fw_len;
 108                         u32 __iomem *dev_fw_ptr = device_base + ISL38XX_DIRECT_MEM_WIN;
 109
 110                         /* set the card's base address for writing the data */
 111                         isl38xx_w32_flush(device_base, reg,
 112                                           ISL38XX_DIR_MEM_BASE_REG);
 113                         wmb();  /* be paranoid */
 114
 115                         /* increment the write address for next iteration */
 116                         reg += _fw_len;
 117                         fw_len -= _fw_len;
 118
 119                         /* write the data to the Direct Memory Window 32bit-wise */
 120                         /* memcpy_toio() doesn't guarantee 32bit writes :-| */
 121                         while (_fw_len > 0) {
 122                                 /* use non-swapping writel() */
 123                                 __raw_writel(*fw_ptr, dev_fw_ptr);
 124                                 fw_ptr++, dev_fw_ptr++;
 125                                 _fw_len -= 4;
 126                         }
 127
 128                         /* flush PCI posting */
 129                         (void) readl(device_base + ISL38XX_PCI_POSTING_FLUSH);
 130                         wmb();  /* be paranoid again */
 131
 132                         BUG_ON(_fw_len != 0);
 133                 }
 134
 135                 BUG_ON(fw_len != 0);
 136
 137                 /* Firmware version is at offset 40 (also for "newmac") */
 138                 printk(KERN_DEBUG "%s: firmware version: %.8s\n",
 139                        priv->ndev->name, fw_entry->data + 40);
 140
 141                 release_firmware(fw_entry);
 142         }
 143
 144         /* now reset the device
 145          * clear the Reset & ClkRun bit, set the RAMBoot bit */
 146         reg = readl(device_base + ISL38XX_CTRL_STAT_REG);
 147         reg &= ~ISL38XX_CTRL_STAT_CLKRUN;
 148         reg &= ~ISL38XX_CTRL_STAT_RESET;
 149         reg |= ISL38XX_CTRL_STAT_RAMBOOT;
 150         isl38xx_w32_flush(device_base, reg, ISL38XX_CTRL_STAT_REG);
 151         wmb();
 152         udelay(ISL38XX_WRITEIO_DELAY);
 153
 154         /* set the reset bit latches the host override and RAMBoot bits
 155          * into the device for operation when the reset bit is reset */
 156         reg |= ISL38XX_CTRL_STAT_RESET;
 157         writel(reg, device_base + ISL38XX_CTRL_STAT_REG);
 158         /* don't do flush PCI posting here! */
 159         wmb();
 160         udelay(ISL38XX_WRITEIO_DELAY);
 161
 162         /* clear the reset bit should start the whole circus */
 163         reg &= ~ISL38XX_CTRL_STAT_RESET;
 164         writel(reg, device_base + ISL38XX_CTRL_STAT_REG);
 165         /* don't do flush PCI posting here! */
 166         wmb();
 167         udelay(ISL38XX_WRITEIO_DELAY);
 168
 169         return 0;
 170 }
 171
 172 /******************************************************************************
 173     Device Interrupt Handler
 174 ******************************************************************************/
 175
 176 irqreturn_t
 177 islpci_interrupt(int irq, void *config)
 178 {
 179         u32 reg;
 180         islpci_private *priv = config;
 181         struct net_device *ndev = priv->ndev;
 182         void __iomem *device = priv->device_base;
 183         int powerstate = ISL38XX_PSM_POWERSAVE_STATE;
 184
 185         /* lock the interrupt handler */
 186         spin_lock(&priv->slock);
 187
 188         /* received an interrupt request on a shared IRQ line
 189          * first check whether the device is in sleep mode */
 190         reg = readl(device + ISL38XX_CTRL_STAT_REG);
 191         if (reg & ISL38XX_CTRL_STAT_SLEEPMODE)
 192                 /* device is in sleep mode, IRQ was generated by someone else */
 193         {
 194 #if VERBOSE > SHOW_ERROR_MESSAGES
 195                 DEBUG(SHOW_TRACING, "Assuming someone else called the IRQ\n");
 196 #endif
 197                 spin_unlock(&priv->slock);
 198                 return IRQ_NONE;
 199         }
 200
 201
 202         /* check whether there is any source of interrupt on the device */
 203         reg = readl(device + ISL38XX_INT_IDENT_REG);
 204
 205         /* also check the contents of the Interrupt Enable Register, because this
 206          * will filter out interrupt sources from other devices on the same irq ! */
 207         reg &= readl(device + ISL38XX_INT_EN_REG);
 208         reg &= ISL38XX_INT_SOURCES;
 209
 210         if (reg != 0) {
 211                 if (islpci_get_state(priv) != PRV_STATE_SLEEP)
 212                         powerstate = ISL38XX_PSM_ACTIVE_STATE;
 213
 214                 /* reset the request bits in the Identification register */
 215                 isl38xx_w32_flush(device, reg, ISL38XX_INT_ACK_REG);
 216
 217 #if VERBOSE > SHOW_ERROR_MESSAGES
 218                 DEBUG(SHOW_FUNCTION_CALLS,
 219                       "IRQ: Identification register 0x%p 0x%x\n", device, reg);
 220 #endif
 221
 222                 /* check for each bit in the register separately */
 223                 if (reg & ISL38XX_INT_IDENT_UPDATE) {
 224 #if VERBOSE > SHOW_ERROR_MESSAGES
 225                         /* Queue has been updated */
 226                         DEBUG(SHOW_TRACING, "IRQ: Update flag\n");
 227
 228                         DEBUG(SHOW_QUEUE_INDEXES,
 229                               "CB drv Qs: [%i][%i][%i][%i][%i][%i]\n",
 230                               le32_to_cpu(priv->control_block->
 231                                           driver_curr_frag[0]),
 232                               le32_to_cpu(priv->control_block->
 233                                           driver_curr_frag[1]),
 234                               le32_to_cpu(priv->control_block->
 235                                           driver_curr_frag[2]),
 236                               le32_to_cpu(priv->control_block->
 237                                           driver_curr_frag[3]),
 238                               le32_to_cpu(priv->control_block->
 239                                           driver_curr_frag[4]),
 240                               le32_to_cpu(priv->control_block->
 241                                           driver_curr_frag[5])
 242                             );
 243
 244                         DEBUG(SHOW_QUEUE_INDEXES,
 245                               "CB dev Qs: [%i][%i][%i][%i][%i][%i]\n",
 246                               le32_to_cpu(priv->control_block->
 247                                           device_curr_frag[0]),
 248                               le32_to_cpu(priv->control_block->
 249                                           device_curr_frag[1]),
 250                               le32_to_cpu(priv->control_block->
 251                                           device_curr_frag[2]),
 252                               le32_to_cpu(priv->control_block->
 253                                           device_curr_frag[3]),
 254                               le32_to_cpu(priv->control_block->
 255                                           device_curr_frag[4]),
 256                               le32_to_cpu(priv->control_block->
 257                                           device_curr_frag[5])
 258                             );
 259 #endif
 260
 261                         /* cleanup the data low transmit queue */
 262                         islpci_eth_cleanup_transmit(priv, priv->control_block);
 263
 264                         /* device is in active state, update the
 265                          * powerstate flag if necessary */
 266                         powerstate = ISL38XX_PSM_ACTIVE_STATE;
 267
 268                         /* check all three queues in priority order
 269                          * call the PIMFOR receive function until the
 270                          * queue is empty */
 271                         if (isl38xx_in_queue(priv->control_block,
 272                                                 ISL38XX_CB_RX_MGMTQ) != 0) {
 273 #if VERBOSE > SHOW_ERROR_MESSAGES
 274                                 DEBUG(SHOW_TRACING,
 275                                       "Received frame in Management Queue\n");
 276 #endif
 277                                 islpci_mgt_receive(ndev);
 278
 279                                 islpci_mgt_cleanup_transmit(ndev);
 280
 281                                 /* Refill slots in receive queue */
 282                                 islpci_mgmt_rx_fill(ndev);
 283
 284                                 /* no need to trigger the device, next
 285                                    islpci_mgt_transaction does it */
 286                         }
 287
 288                         while (isl38xx_in_queue(priv->control_block,
 289                                                 ISL38XX_CB_RX_DATA_LQ) != 0) {
 290 #if VERBOSE > SHOW_ERROR_MESSAGES
 291                                 DEBUG(SHOW_TRACING,
 292                                       "Received frame in Data Low Queue\n");
 293 #endif
 294                                 islpci_eth_receive(priv);
 295                         }
 296
 297                         /* check whether the data transmit queues were full */
 298                         if (priv->data_low_tx_full) {
 299                                 /* check whether the transmit is not full anymore */
 300                                 if (ISL38XX_CB_TX_QSIZE -
 301                                     isl38xx_in_queue(priv->control_block,
 302                                                      ISL38XX_CB_TX_DATA_LQ) >=
 303                                     ISL38XX_MIN_QTHRESHOLD) {
 304                                         /* nope, the driver is ready for more network frames */
 305                                         netif_wake_queue(priv->ndev);
 306
 307                                         /* reset the full flag */
 308                                         priv->data_low_tx_full = 0;
 309                                 }
 310                         }
 311                 }
 312
 313                 if (reg & ISL38XX_INT_IDENT_INIT) {
 314                         /* Device has been initialized */
 315 #if VERBOSE > SHOW_ERROR_MESSAGES
 316                         DEBUG(SHOW_TRACING,
 317                               "IRQ: Init flag, device initialized\n");
 318 #endif
 319                         wake_up(&priv->reset_done);
 320                 }
 321
 322                 if (reg & ISL38XX_INT_IDENT_SLEEP) {
 323                         /* Device intends to move to powersave state */
 324 #if VERBOSE > SHOW_ERROR_MESSAGES
 325                         DEBUG(SHOW_TRACING, "IRQ: Sleep flag\n");
 326 #endif
 327                         isl38xx_handle_sleep_request(priv->control_block,
 328                                                      &powerstate,
 329                                                      priv->device_base);
 330                 }
 331
 332                 if (reg & ISL38XX_INT_IDENT_WAKEUP) {
 333                         /* Device has been woken up to active state */
 334 #if VERBOSE > SHOW_ERROR_MESSAGES
 335                         DEBUG(SHOW_TRACING, "IRQ: Wakeup flag\n");
 336 #endif
 337
 338                         isl38xx_handle_wakeup(priv->control_block,
 339                                               &powerstate, priv->device_base);
 340                 }
 341         } else {
 342 #if VERBOSE > SHOW_ERROR_MESSAGES
 343                 DEBUG(SHOW_TRACING, "Assuming someone else called the IRQ\n");
 344 #endif
 345                 spin_unlock(&priv->slock);
 346                 return IRQ_NONE;
 347         }
 348
 349         /* sleep -> ready */
 350         if (islpci_get_state(priv) == PRV_STATE_SLEEP
 351             && powerstate == ISL38XX_PSM_ACTIVE_STATE)
 352                 islpci_set_state(priv, PRV_STATE_READY);
 353
 354         /* !sleep -> sleep */
 355         if (islpci_get_state(priv) != PRV_STATE_SLEEP
 356             && powerstate == ISL38XX_PSM_POWERSAVE_STATE)
 357                 islpci_set_state(priv, PRV_STATE_SLEEP);
 358
 359         /* unlock the interrupt handler */
 360         spin_unlock(&priv->slock);
 361
 362         return IRQ_HANDLED;
 363 }
 364
 365 /******************************************************************************
 366     Network Interface Control & Statistical functions
 367 ******************************************************************************/
 368 static int
 369 islpci_open(struct net_device *ndev)
 370 {
 371         u32 rc;
 372         islpci_private *priv = netdev_priv(ndev);
 373
 374         /* reset data structures, upload firmware and reset device */
 375         rc = islpci_reset(priv,1);
 376         if (rc) {
 377                 prism54_bring_down(priv);
 378                 return rc; /* Returns informative message */
 379         }
 380
 381         netif_start_queue(ndev);
 382
 383         /* Turn off carrier if in STA or Ad-hoc mode. It will be turned on
 384          * once the firmware receives a trap of being associated
 385          * (GEN_OID_LINKSTATE). In other modes (AP or WDS or monitor) we
 386          * should just leave the carrier on as its expected the firmware
 387          * won't send us a trigger. */
 388         if (priv->iw_mode == IW_MODE_INFRA || priv->iw_mode == IW_MODE_ADHOC)
 389                 netif_carrier_off(ndev);
 390         else
 391                 netif_carrier_on(ndev);
 392
 393         return 0;
 394 }
 395
 396 static int
 397 islpci_close(struct net_device *ndev)
 398 {
 399         islpci_private *priv = netdev_priv(ndev);
 400
 401         printk(KERN_DEBUG "%s: islpci_close ()\n", ndev->name);
 402
 403         netif_stop_queue(ndev);
 404
 405         return prism54_bring_down(priv);
 406 }
 407
 408 static int
 409 prism54_bring_down(islpci_private *priv)
 410 {
 411         void __iomem *device_base = priv->device_base;
 412         u32 reg;
 413         /* we are going to shutdown the device */
 414         islpci_set_state(priv, PRV_STATE_PREBOOT);
 415
 416         /* disable all device interrupts in case they weren't */
 417         isl38xx_disable_interrupts(priv->device_base);
 418
 419         /* For safety reasons, we may want to ensure that no DMA transfer is
 420          * currently in progress by emptying the TX and RX queues. */
 421
 422         /* wait until interrupts have finished executing on other CPUs */
 423         synchronize_irq(priv->pdev->irq);
 424
 425         reg = readl(device_base + ISL38XX_CTRL_STAT_REG);
 426         reg &= ~(ISL38XX_CTRL_STAT_RESET | ISL38XX_CTRL_STAT_RAMBOOT);
 427         writel(reg, device_base + ISL38XX_CTRL_STAT_REG);
 428         wmb();
 429         udelay(ISL38XX_WRITEIO_DELAY);
 430
 431         reg |= ISL38XX_CTRL_STAT_RESET;
 432         writel(reg, device_base + ISL38XX_CTRL_STAT_REG);
 433         wmb();
 434         udelay(ISL38XX_WRITEIO_DELAY);
 435
 436         /* clear the Reset bit */
 437         reg &= ~ISL38XX_CTRL_STAT_RESET;
 438         writel(reg, device_base + ISL38XX_CTRL_STAT_REG);
 439         wmb();
 440
 441         /* wait a while for the device to reset */
 442         schedule_timeout_uninterruptible(msecs_to_jiffies(50));
 443
 444         return 0;
 445 }
 446
 447 static int
 448 islpci_upload_fw(islpci_private *priv)
 449 {
 450         islpci_state_t old_state;
 451         u32 rc;
 452
 453         old_state = islpci_set_state(priv, PRV_STATE_BOOT);
 454
 455         printk(KERN_DEBUG "%s: uploading firmware...\n", priv->ndev->name);
 456
 457         rc = isl_upload_firmware(priv);
 458         if (rc) {
 459                 /* error uploading the firmware */
 460                 printk(KERN_ERR "%s: could not upload firmware ('%s')\n",
 461                        priv->ndev->name, priv->firmware);
 462
 463                 islpci_set_state(priv, old_state);
 464                 return rc;
 465         }
 466
 467         printk(KERN_DEBUG "%s: firmware upload complete\n",
 468                priv->ndev->name);
 469
 470         islpci_set_state(priv, PRV_STATE_POSTBOOT);
 471
 472         return 0;
 473 }
 474
 475 static int
 476 islpci_reset_if(islpci_private *priv)
 477 {
 478         long remaining;
 479         int result = -ETIME;
 480         int count;
 481
 482         DEFINE_WAIT(wait);
 483         prepare_to_wait(&priv->reset_done, &wait, TASK_UNINTERRUPTIBLE);
 484
 485         /* now the last step is to reset the interface */
 486         isl38xx_interface_reset(priv->device_base, priv->device_host_address);
 487         islpci_set_state(priv, PRV_STATE_PREINIT);
 488
 489         for(count = 0; count < 2 && result; count++) {
 490                 /* The software reset acknowledge needs about 220 msec here.
 491                  * Be conservative and wait for up to one second. */
 492
 493                 remaining = schedule_timeout_uninterruptible(HZ);
 494
 495                 if(remaining > 0) {
 496                         result = 0;
 497                         break;
 498                 }
 499
 500                 /* If we're here it's because our IRQ hasn't yet gone through.
 501                  * Retry a bit more...
 502                  */
 503                 printk(KERN_ERR "%s: no 'reset complete' IRQ seen - retrying\n",
 504                         priv->ndev->name);
 505         }
 506
 507         finish_wait(&priv->reset_done, &wait);
 508
 509         if (result) {
 510                 printk(KERN_ERR "%s: interface reset failure\n", priv->ndev->name);
 511                 return result;
 512         }
 513
 514         islpci_set_state(priv, PRV_STATE_INIT);
 515
 516         /* Now that the device is 100% up, let's allow
 517          * for the other interrupts --
 518          * NOTE: this is not *yet* true since we've only allowed the
 519          * INIT interrupt on the IRQ line. We can perhaps poll
 520          * the IRQ line until we know for sure the reset went through */
 521         isl38xx_enable_common_interrupts(priv->device_base);
 522
 523         down_write(&priv->mib_sem);
 524         result = mgt_commit(priv);
 525         if (result) {
 526                 printk(KERN_ERR "%s: interface reset failure\n", priv->ndev->name);
 527                 up_write(&priv->mib_sem);
 528                 return result;
 529         }
 530         up_write(&priv->mib_sem);
 531
 532         islpci_set_state(priv, PRV_STATE_READY);
 533
 534         printk(KERN_DEBUG "%s: interface reset complete\n", priv->ndev->name);
 535         return 0;
 536 }
 537
 538 int
 539 islpci_reset(islpci_private *priv, int reload_firmware)
 540 {
 541         isl38xx_control_block *cb =    /* volatile not needed */
 542                 (isl38xx_control_block *) priv->control_block;
 543         unsigned counter;
 544         int rc;
 545
 546         if (reload_firmware)
 547                 islpci_set_state(priv, PRV_STATE_PREBOOT);
 548         else
 549                 islpci_set_state(priv, PRV_STATE_POSTBOOT);
 550
 551         printk(KERN_DEBUG "%s: resetting device...\n", priv->ndev->name);
 552
 553         /* disable all device interrupts in case they weren't */
 554         isl38xx_disable_interrupts(priv->device_base);
 555
 556         /* flush all management queues */
 557         priv->index_mgmt_tx = 0;
 558         priv->index_mgmt_rx = 0;
 559
 560         /* clear the indexes in the frame pointer */
 561         for (counter = 0; counter < ISL38XX_CB_QCOUNT; counter++) {
 562                 cb->driver_curr_frag[counter] = cpu_to_le32(0);
 563                 cb->device_curr_frag[counter] = cpu_to_le32(0);
 564         }
 565
 566         /* reset the mgmt receive queue */
 567         for (counter = 0; counter < ISL38XX_CB_MGMT_QSIZE; counter++) {
 568                 isl38xx_fragment *frag = &cb->rx_data_mgmt[counter];
 569                 frag->size = cpu_to_le16(MGMT_FRAME_SIZE);
 570                 frag->flags = 0;
 571                 frag->address = cpu_to_le32(priv->mgmt_rx[counter].pci_addr);
 572         }
 573
 574         for (counter = 0; counter < ISL38XX_CB_RX_QSIZE; counter++) {
 575                 cb->rx_data_low[counter].address =
 576                     cpu_to_le32((u32) priv->pci_map_rx_address[counter]);
 577         }
 578
 579         /* since the receive queues are filled with empty fragments, now we can
 580          * set the corresponding indexes in the Control Block */
 581         priv->control_block->driver_curr_frag[ISL38XX_CB_RX_DATA_LQ] =
 582             cpu_to_le32(ISL38XX_CB_RX_QSIZE);
 583         priv->control_block->driver_curr_frag[ISL38XX_CB_RX_MGMTQ] =
 584             cpu_to_le32(ISL38XX_CB_MGMT_QSIZE);
 585
 586         /* reset the remaining real index registers and full flags */
 587         priv->free_data_rx = 0;
 588         priv->free_data_tx = 0;
 589         priv->data_low_tx_full = 0;
 590
 591         if (reload_firmware) { /* Should we load the firmware ? */
 592         /* now that the data structures are cleaned up, upload
 593          * firmware and reset interface */
 594                 rc = islpci_upload_fw(priv);
 595                 if (rc) {
 596                         printk(KERN_ERR "%s: islpci_reset: failure\n",
 597                                 priv->ndev->name);
 598                         return rc;
 599                 }
 600         }
 601
 602         /* finally reset interface */
 603         rc = islpci_reset_if(priv);
 604         if (rc)
 605                 printk(KERN_ERR "prism54: Your card/socket may be faulty, or IRQ line too busy :(\n");
 606         return rc;
 607 }
 608
 609 /******************************************************************************
 610     Network device configuration functions
 611 ******************************************************************************/
 612 static int
 613 islpci_alloc_memory(islpci_private *priv)
 614 {
 615         int counter;
 616
 617 #if VERBOSE > SHOW_ERROR_MESSAGES
 618         printk(KERN_DEBUG "islpci_alloc_memory\n");
 619 #endif
 620
 621         /* remap the PCI device base address to accessible */
 622         if (!(priv->device_base =
 623               ioremap(pci_resource_start(priv->pdev, 0),
 624                       ISL38XX_PCI_MEM_SIZE))) {
 625                 /* error in remapping the PCI device memory address range */
 626                 printk(KERN_ERR "PCI memory remapping failed\n");
 627                 return -1;
 628         }
 629
 630         /* memory layout for consistent DMA region:
 631          *
 632          * Area 1: Control Block for the device interface
 633          * Area 2: Power Save Mode Buffer for temporary frame storage. Be aware that
 634          *         the number of supported stations in the AP determines the minimal
 635          *         size of the buffer !
 636          */
 637
 638         /* perform the allocation */
 639         priv->driver_mem_address = dma_alloc_coherent(&priv->pdev->dev,
 640                                                       HOST_MEM_BLOCK,
 641                                                       &priv->device_host_address,
 642                                                       GFP_KERNEL);
 643
 644         if (!priv->driver_mem_address) {
 645                 /* error allocating the block of PCI memory */
 646                 printk(KERN_ERR "%s: could not allocate DMA memory, aborting!",
 647                        "prism54");
 648                 return -1;
 649         }
 650
 651         /* assign the Control Block to the first address of the allocated area */
 652         priv->control_block =
 653             (isl38xx_control_block *) priv->driver_mem_address;
 654
 655         /* set the Power Save Buffer pointer directly behind the CB */
 656         priv->device_psm_buffer =
 657                 priv->device_host_address + CONTROL_BLOCK_SIZE;
 658
 659         /* make sure all buffer pointers are initialized */
 660         for (counter = 0; counter < ISL38XX_CB_QCOUNT; counter++) {
 661                 priv->control_block->driver_curr_frag[counter] = cpu_to_le32(0);
 662                 priv->control_block->device_curr_frag[counter] = cpu_to_le32(0);
 663         }
 664
 665         priv->index_mgmt_rx = 0;
 666         memset(priv->mgmt_rx, 0, sizeof(priv->mgmt_rx));
 667         memset(priv->mgmt_tx, 0, sizeof(priv->mgmt_tx));
 668
 669         /* allocate rx queue for management frames */
 670         if (islpci_mgmt_rx_fill(priv->ndev) < 0)
 671                 goto out_free;
 672
 673         /* now get the data rx skb's */
 674         memset(priv->data_low_rx, 0, sizeof (priv->data_low_rx));
 675         memset(priv->pci_map_rx_address, 0, sizeof (priv->pci_map_rx_address));
 676
 677         for (counter = 0; counter < ISL38XX_CB_RX_QSIZE; counter++) {
 678                 struct sk_buff *skb;
 679
 680                 /* allocate an sk_buff for received data frames storage
 681                  * each frame on receive size consists of 1 fragment
 682                  * include any required allignment operations */
 683                 if (!(skb = dev_alloc_skb(MAX_FRAGMENT_SIZE_RX + 2))) {
 684                         /* error allocating an sk_buff structure elements */
 685                         printk(KERN_ERR "Error allocating skb.\n");
 686                         skb = NULL;
 687                         goto out_free;
 688                 }
 689                 skb_reserve(skb, (4 - (long) skb->data) & 0x03);
 690                 /* add the new allocated sk_buff to the buffer array */
 691                 priv->data_low_rx[counter] = skb;
 692
 693                 /* map the allocated skb data area to pci */
 694                 priv->pci_map_rx_address[counter] =
 695                     dma_map_single(&priv->pdev->dev, (void *)skb->data,
 696                                    MAX_FRAGMENT_SIZE_RX + 2, DMA_FROM_DEVICE);
 697                 if (dma_mapping_error(&priv->pdev->dev, priv->pci_map_rx_address[counter])) {
 698                         priv->pci_map_rx_address[counter] = 0;
 699                         /* error mapping the buffer to device
 700                            accessible memory address */
 701                         printk(KERN_ERR "failed to map skb DMA'able\n");
 702                         goto out_free;
 703                 }
 704         }
 705
 706         prism54_acl_init(&priv->acl);
 707         prism54_wpa_bss_ie_init(priv);
 708         if (mgt_init(priv))
 709                 goto out_free;
 710
 711         return 0;
 712  out_free:
 713         islpci_free_memory(priv);
 714         return -1;
 715 }
 716
 717 int
 718 islpci_free_memory(islpci_private *priv)
 719 {
 720         int counter;
 721
 722         if (priv->device_base)
 723                 iounmap(priv->device_base);
 724         priv->device_base = NULL;
 725
 726         /* free consistent DMA area... */
 727         if (priv->driver_mem_address)
 728                 dma_free_coherent(&priv->pdev->dev, HOST_MEM_BLOCK,
 729                                   priv->driver_mem_address,
 730                                   priv->device_host_address);
 731
 732         /* clear some dangling pointers */
 733         priv->driver_mem_address = NULL;
 734         priv->device_host_address = 0;
 735         priv->device_psm_buffer = 0;
 736         priv->control_block = NULL;
 737
 738         /* clean up mgmt rx buffers */
 739         for (counter = 0; counter < ISL38XX_CB_MGMT_QSIZE; counter++) {
 740                 struct islpci_membuf *buf = &priv->mgmt_rx[counter];
 741                 if (buf->pci_addr)
 742                         dma_unmap_single(&priv->pdev->dev, buf->pci_addr,
 743                                          buf->size, DMA_FROM_DEVICE);
 744                 buf->pci_addr = 0;
 745                 kfree(buf->mem);
 746                 buf->size = 0;
 747                 buf->mem = NULL;
 748         }
 749
 750         /* clean up data rx buffers */
 751         for (counter = 0; counter < ISL38XX_CB_RX_QSIZE; counter++) {
 752                 if (priv->pci_map_rx_address[counter])
 753                         dma_unmap_single(&priv->pdev->dev,
 754                                          priv->pci_map_rx_address[counter],
 755                                          MAX_FRAGMENT_SIZE_RX + 2,
 756                                          DMA_FROM_DEVICE);
 757                 priv->pci_map_rx_address[counter] = 0;
 758
 759                 if (priv->data_low_rx[counter])
 760                         dev_kfree_skb(priv->data_low_rx[counter]);
 761                 priv->data_low_rx[counter] = NULL;
 762         }
 763
 764         /* Free the access control list and the WPA list */
 765         prism54_acl_clean(&priv->acl);
 766         prism54_wpa_bss_ie_clean(priv);
 767         mgt_clean(priv);
 768
 769         return 0;
 770 }
 771
 772 #if 0
 773 static void
 774 islpci_set_multicast_list(struct net_device *dev)
 775 {
 776         /* put device into promisc mode and let network layer handle it */
 777 }
 778 #endif
 779
 780 static void islpci_ethtool_get_drvinfo(struct net_device *dev,
 781                                        struct ethtool_drvinfo *info)
 782 {
 783         strlcpy(info->driver, DRV_NAME, sizeof(info->driver));
 784         strlcpy(info->version, DRV_VERSION, sizeof(info->version));
 785 }
 786
 787 static const struct ethtool_ops islpci_ethtool_ops = {
 788         .get_drvinfo = islpci_ethtool_get_drvinfo,
 789 };
 790
 791 static const struct net_device_ops islpci_netdev_ops = {
 792         .ndo_open               = islpci_open,
 793         .ndo_stop               = islpci_close,
 794         .ndo_start_xmit         = islpci_eth_transmit,
 795         .ndo_tx_timeout         = islpci_eth_tx_timeout,
 796         .ndo_set_mac_address    = prism54_set_mac_address,
 797         .ndo_validate_addr      = eth_validate_addr,
 798 };
 799
 800 static struct device_type wlan_type = {
 801         .name   = "wlan",
 802 };
 803
 804 struct net_device *
 805 islpci_setup(struct pci_dev *pdev)
 806 {
 807         islpci_private *priv;
 808         struct net_device *ndev = alloc_etherdev(sizeof (islpci_private));
 809
 810         if (!ndev)
 811                 return ndev;
 812
 813         pci_set_drvdata(pdev, ndev);
 814         SET_NETDEV_DEV(ndev, &pdev->dev);
 815         SET_NETDEV_DEVTYPE(ndev, &wlan_type);
 816
 817         /* setup the structure members */
 818         ndev->base_addr = pci_resource_start(pdev, 0);
 819         ndev->irq = pdev->irq;
 820
 821         /* initialize the function pointers */
 822         ndev->netdev_ops = &islpci_netdev_ops;
 823         ndev->wireless_handlers = &prism54_handler_def;
 824         ndev->ethtool_ops = &islpci_ethtool_ops;
 825
 826         /* ndev->set_multicast_list = &islpci_set_multicast_list; */
 827         ndev->addr_len = ETH_ALEN;
 828         /* Get a non-zero dummy MAC address for nameif. Jean II */
 829         memcpy(ndev->dev_addr, dummy_mac, ETH_ALEN);
 830
 831         ndev->watchdog_timeo = ISLPCI_TX_TIMEOUT;
 832
 833         /* allocate a private device structure to the network device  */
 834         priv = netdev_priv(ndev);
 835         priv->ndev = ndev;
 836         priv->pdev = pdev;
 837         priv->monitor_type = ARPHRD_IEEE80211;
 838         priv->ndev->type = (priv->iw_mode == IW_MODE_MONITOR) ?
 839                 priv->monitor_type : ARPHRD_ETHER;
 840
 841         /* Add pointers to enable iwspy support. */
 842         priv->wireless_data.spy_data = &priv->spy_data;
 843         ndev->wireless_data = &priv->wireless_data;
 844
 845         /* save the start and end address of the PCI memory area */
 846         ndev->mem_start = (unsigned long) priv->device_base;
 847         ndev->mem_end = ndev->mem_start + ISL38XX_PCI_MEM_SIZE;
 848
 849 #if VERBOSE > SHOW_ERROR_MESSAGES
 850         DEBUG(SHOW_TRACING, "PCI Memory remapped to 0x%p\n", priv->device_base);
 851 #endif
 852
 853         init_waitqueue_head(&priv->reset_done);
 854
 855         /* init the queue read locks, process wait counter */
 856         mutex_init(&priv->mgmt_lock);
 857         priv->mgmt_received = NULL;
 858         init_waitqueue_head(&priv->mgmt_wqueue);
 859         mutex_init(&priv->stats_lock);
 860         spin_lock_init(&priv->slock);
 861
 862         /* init state machine with off#1 state */
 863         priv->state = PRV_STATE_OFF;
 864         priv->state_off = 1;
 865
 866         /* initialize workqueue's */
 867         INIT_WORK(&priv->stats_work, prism54_update_stats);
 868         priv->stats_timestamp = 0;
 869
 870         INIT_WORK(&priv->reset_task, islpci_do_reset_and_wake);
 871         priv->reset_task_pending = 0;
 872
 873         /* allocate various memory areas */
 874         if (islpci_alloc_memory(priv))
 875                 goto do_free_netdev;
 876
 877         /* select the firmware file depending on the device id */
 878         switch (pdev->device) {
 879         case 0x3877:
 880                 strcpy(priv->firmware, ISL3877_IMAGE_FILE);
 881                 break;
 882
 883         case 0x3886:
 884                 strcpy(priv->firmware, ISL3886_IMAGE_FILE);
 885                 break;
 886
 887         default:
 888                 strcpy(priv->firmware, ISL3890_IMAGE_FILE);
 889                 break;
 890         }
 891
 892         if (register_netdev(ndev)) {
 893                 DEBUG(SHOW_ERROR_MESSAGES,
 894                       "ERROR: register_netdev() failed\n");
 895                 goto do_islpci_free_memory;
 896         }
 897
 898         return ndev;
 899
 900       do_islpci_free_memory:
 901         islpci_free_memory(priv);
 902       do_free_netdev:
 903         free_netdev(ndev);
 904         priv = NULL;
 905         return NULL;
 906 }
 907
 908 islpci_state_t
 909 islpci_set_state(islpci_private *priv, islpci_state_t new_state)
 910 {
 911         islpci_state_t old_state;
 912
 913         /* lock */
 914         old_state = priv->state;
 915
 916         /* this means either a race condition or some serious error in
 917          * the driver code */
 918         switch (new_state) {
 919         case PRV_STATE_OFF:
 920                 priv->state_off++;
 921                 fallthrough;
 922         default:
 923                 priv->state = new_state;
 924                 break;
 925
 926         case PRV_STATE_PREBOOT:
 927                 /* there are actually many off-states, enumerated by
 928                  * state_off */
 929                 if (old_state == PRV_STATE_OFF)
 930                         priv->state_off--;
 931
 932                 /* only if hw_unavailable is zero now it means we either
 933                  * were in off#1 state, or came here from
 934                  * somewhere else */
 935                 if (!priv->state_off)
 936                         priv->state = new_state;
 937                 break;
 938         }
 939 #if 0
 940         printk(KERN_DEBUG "%s: state transition %d -> %d (off#%d)\n",
 941                priv->ndev->name, old_state, new_state, priv->state_off);
 942 #endif
 943
 944         /* invariants */
 945         BUG_ON(priv->state_off < 0);
 946         BUG_ON(priv->state_off && (priv->state != PRV_STATE_OFF));
 947         BUG_ON(!priv->state_off && (priv->state == PRV_STATE_OFF));
 948
 949         /* unlock */
 950         return old_state;
 951 }