1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
5 * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
6 * Linux device driver for RTL8192SU
8 * Modifications for inclusion into the Linux staging tree are
9 * Copyright(c) 2010 Larry Finger. All rights reserved.
11 * Contact information:
15 ******************************************************************************/
17 #define _RTL8712_CMD_C_
19 #include <linux/compiler.h>
20 #include <linux/kernel.h>
21 #include <linux/errno.h>
22 #include <linux/slab.h>
23 #include <linux/sched/signal.h>
24 #include <linux/module.h>
25 #include <linux/kref.h>
26 #include <linux/netdevice.h>
27 #include <linux/skbuff.h>
28 #include <linux/usb.h>
29 #include <linux/usb/ch9.h>
30 #include <linux/circ_buf.h>
31 #include <linux/uaccess.h>
32 #include <asm/byteorder.h>
33 #include <linux/atomic.h>
34 #include <linux/semaphore.h>
35 #include <linux/rtnetlink.h>
37 #include "osdep_service.h"
38 #include "drv_types.h"
39 #include "recv_osdep.h"
40 #include "mlme_osdep.h"
41 #include "rtl871x_ioctl_set.h"
43 static void check_hw_pbc(struct _adapter *padapter)
47 r8712_write8(padapter, MAC_PINMUX_CTRL, (GPIOMUX_EN | GPIOSEL_GPIO));
48 tmp1byte = r8712_read8(padapter, GPIO_IO_SEL);
49 tmp1byte &= ~(HAL_8192S_HW_GPIO_WPS_BIT);
50 r8712_write8(padapter, GPIO_IO_SEL, tmp1byte);
51 tmp1byte = r8712_read8(padapter, GPIO_CTRL);
54 if (tmp1byte & HAL_8192S_HW_GPIO_WPS_BIT) {
55 /* Here we only set bPbcPressed to true
56 * After trigger PBC, the variable will be set to false
58 netdev_dbg(padapter->pnetdev, "CheckPbcGPIO - PBC is pressed !!!!\n");
59 /* 0 is the default value and it means the application monitors
60 * the HW PBC doesn't provide its pid to driver.
62 if (padapter->pid == 0)
64 kill_pid(find_vpid(padapter->pid), SIGUSR1, 1);
68 /* query rx phy status from fw.
70 * Infrastructure mode: beacon , data.
72 static void query_fw_rx_phy_status(struct _adapter *padapter)
77 if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
78 r8712_write32(padapter, IOCMD_CTRL_REG, 0xf4000001);
80 /* Wait FW complete IO Cmd */
81 while ((r8712_read32(padapter, IOCMD_CTRL_REG)) &&
87 val32 = r8712_read32(padapter, IOCMD_DATA_REG);
91 padapter->recvpriv.fw_rssi =
92 (u8)r8712_signal_scale_mapping(val32);
96 /* check mlme, hw, phy, or dynamic algorithm status. */
97 static void StatusWatchdogCallback(struct _adapter *padapter)
99 check_hw_pbc(padapter);
100 query_fw_rx_phy_status(padapter);
103 static void r871x_internal_cmd_hdl(struct _adapter *padapter, u8 *pbuf)
105 struct drvint_cmd_parm *pdrvcmd;
109 pdrvcmd = (struct drvint_cmd_parm *)pbuf;
110 switch (pdrvcmd->i_cid) {
112 StatusWatchdogCallback(padapter);
117 kfree(pdrvcmd->pbuf);
120 static u8 read_bbreg_hdl(struct _adapter *padapter, u8 *pbuf)
122 struct cmd_obj *pcmd = (struct cmd_obj *)pbuf;
124 r8712_free_cmd_obj(pcmd);
128 static u8 write_bbreg_hdl(struct _adapter *padapter, u8 *pbuf)
130 void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
131 struct cmd_obj *pcmd = (struct cmd_obj *)pbuf;
133 pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
135 r8712_free_cmd_obj(pcmd);
137 pcmd_callback(padapter, pcmd);
141 static u8 read_rfreg_hdl(struct _adapter *padapter, u8 *pbuf)
144 void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
145 struct cmd_obj *pcmd = (struct cmd_obj *)pbuf;
147 if (pcmd->rsp && pcmd->rspsz > 0)
148 memcpy(pcmd->rsp, (u8 *)&val, pcmd->rspsz);
149 pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
151 r8712_free_cmd_obj(pcmd);
153 pcmd_callback(padapter, pcmd);
157 static u8 write_rfreg_hdl(struct _adapter *padapter, u8 *pbuf)
159 void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
160 struct cmd_obj *pcmd = (struct cmd_obj *)pbuf;
162 pcmd_callback = cmd_callback[pcmd->cmdcode].callback;
164 r8712_free_cmd_obj(pcmd);
166 pcmd_callback(padapter, pcmd);
170 static u8 sys_suspend_hdl(struct _adapter *padapter, u8 *pbuf)
172 struct cmd_obj *pcmd = (struct cmd_obj *)pbuf;
174 r8712_free_cmd_obj(pcmd);
178 static struct cmd_obj *cmd_hdl_filter(struct _adapter *padapter,
179 struct cmd_obj *pcmd)
181 struct cmd_obj *pcmd_r;
187 switch (pcmd->cmdcode) {
188 case GEN_CMD_CODE(_Read_BBREG):
189 read_bbreg_hdl(padapter, (u8 *)pcmd);
191 case GEN_CMD_CODE(_Write_BBREG):
192 write_bbreg_hdl(padapter, (u8 *)pcmd);
194 case GEN_CMD_CODE(_Read_RFREG):
195 read_rfreg_hdl(padapter, (u8 *)pcmd);
197 case GEN_CMD_CODE(_Write_RFREG):
198 write_rfreg_hdl(padapter, (u8 *)pcmd);
200 case GEN_CMD_CODE(_SetUsbSuspend):
201 sys_suspend_hdl(padapter, (u8 *)pcmd);
203 case GEN_CMD_CODE(_JoinBss):
204 r8712_joinbss_reset(padapter);
205 /* Before set JoinBss_CMD to FW, driver must ensure FW is in
206 * PS_MODE_ACTIVE. Directly write rpwm to radio on and assign
207 * new pwr_mode to Driver, instead of use workitem to change
210 if (padapter->pwrctrlpriv.pwr_mode > PS_MODE_ACTIVE) {
211 padapter->pwrctrlpriv.pwr_mode = PS_MODE_ACTIVE;
212 mutex_lock(&padapter->pwrctrlpriv.mutex_lock);
213 r8712_set_rpwm(padapter, PS_STATE_S4);
214 mutex_unlock(&padapter->pwrctrlpriv.mutex_lock);
219 r871x_internal_cmd_hdl(padapter, pcmd->parmbuf);
220 r8712_free_cmd_obj(pcmd);
227 return pcmd_r; /* if returning pcmd_r == NULL, pcmd must be free. */
230 u8 r8712_fw_cmd(struct _adapter *pAdapter, u32 cmd)
232 int pollingcnts = 50;
234 r8712_write32(pAdapter, IOCMD_CTRL_REG, cmd);
236 while ((r8712_read32(pAdapter, IOCMD_CTRL_REG != 0)) &&
241 if (pollingcnts == 0)
246 void r8712_fw_cmd_data(struct _adapter *pAdapter, u32 *value, u8 flag)
248 if (flag == 0) /* set */
249 r8712_write32(pAdapter, IOCMD_DATA_REG, *value);
251 *value = r8712_read32(pAdapter, IOCMD_DATA_REG);
254 int r8712_cmd_thread(void *context)
256 struct cmd_obj *pcmd;
257 unsigned int cmdsz, wr_sz;
259 struct tx_desc *pdesc;
260 void (*pcmd_callback)(struct _adapter *dev, struct cmd_obj *pcmd);
261 struct _adapter *padapter = context;
262 struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
263 struct completion *cmd_queue_comp =
264 &pcmdpriv->cmd_queue_comp;
265 struct mutex *pwctrl_lock = &padapter->pwrctrlpriv.mutex_lock;
267 allow_signal(SIGTERM);
269 if (wait_for_completion_interruptible(cmd_queue_comp))
271 if (padapter->driver_stopped || padapter->surprise_removed)
273 if (r8712_register_cmd_alive(padapter))
276 pcmd = r8712_dequeue_cmd(&pcmdpriv->cmd_queue);
278 r8712_unregister_cmd_alive(padapter);
281 pcmdbuf = (__le32 *)pcmdpriv->cmd_buf;
282 pdesc = (struct tx_desc *)pcmdbuf;
283 memset(pdesc, 0, TXDESC_SIZE);
284 pcmd = cmd_hdl_filter(padapter, pcmd);
285 if (pcmd) { /* if pcmd != NULL, cmd will be handled by f/w */
286 struct dvobj_priv *pdvobj = &padapter->dvobjpriv;
288 u16 cmdcode = pcmd->cmdcode;
290 pcmdpriv->cmd_issued_cnt++;
291 cmdsz = round_up(pcmd->cmdsz, 8);
292 wr_sz = TXDESC_SIZE + 8 + cmdsz;
293 pdesc->txdw0 |= cpu_to_le32((wr_sz - TXDESC_SIZE) &
295 if (pdvobj->ishighspeed) {
296 if ((wr_sz % 512) == 0)
299 if ((wr_sz % 64) == 0)
302 if (blnPending) { /* 32 bytes for TX Desc - 8 offset */
303 pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE +
304 OFFSET_SZ + 8) << OFFSET_SHT) &
307 pdesc->txdw0 |= cpu_to_le32(((TXDESC_SIZE +
312 pdesc->txdw0 |= cpu_to_le32(OWN | FSG | LSG);
313 pdesc->txdw1 |= cpu_to_le32((0x13 << QSEL_SHT) &
315 pcmdbuf += (TXDESC_SIZE >> 2);
316 *pcmdbuf = cpu_to_le32((cmdsz & 0x0000ffff) |
317 (pcmd->cmdcode << 16) |
318 (pcmdpriv->cmd_seq << 24));
319 pcmdbuf += 2; /* 8 bytes alignment */
320 memcpy((u8 *)pcmdbuf, pcmd->parmbuf, pcmd->cmdsz);
322 wr_sz += 8; /* Append 8 bytes */
323 r8712_write_mem(padapter, RTL8712_DMA_H2CCMD, wr_sz,
326 if (cmdcode == GEN_CMD_CODE(_CreateBss)) {
327 pcmd->res = H2C_SUCCESS;
328 pcmd_callback = cmd_callback[cmdcode].callback;
330 pcmd_callback(padapter, pcmd);
333 if (cmdcode == GEN_CMD_CODE(_SetPwrMode)) {
334 if (padapter->pwrctrlpriv.bSleep) {
335 mutex_lock(pwctrl_lock);
336 r8712_set_rpwm(padapter, PS_STATE_S2);
337 mutex_unlock(pwctrl_lock);
340 r8712_free_cmd_obj(pcmd);
341 if (list_empty(&pcmdpriv->cmd_queue.queue)) {
342 r8712_unregister_cmd_alive(padapter);
350 flush_signals_thread();
352 /* free all cmd_obj resources */
354 pcmd = r8712_dequeue_cmd(&pcmdpriv->cmd_queue);
357 r8712_free_cmd_obj(pcmd);
359 complete(&pcmdpriv->terminate_cmdthread_comp);
363 void r8712_event_handle(struct _adapter *padapter, __le32 *peventbuf)
365 u8 evt_code, evt_seq;
367 void (*event_callback)(struct _adapter *dev, u8 *pbuf);
368 struct evt_priv *pevt_priv = &padapter->evtpriv;
372 evt_sz = (u16)(le32_to_cpu(*peventbuf) & 0xffff);
373 evt_seq = (u8)((le32_to_cpu(*peventbuf) >> 24) & 0x7f);
374 evt_code = (u8)((le32_to_cpu(*peventbuf) >> 16) & 0xff);
375 /* checking event sequence... */
376 if ((evt_seq & 0x7f) != pevt_priv->event_seq) {
377 pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
380 /* checking if event code is valid */
381 if (evt_code >= MAX_C2HEVT) {
382 pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
384 } else if ((evt_code == GEN_EVT_CODE(_Survey)) &&
385 (evt_sz > sizeof(struct wlan_bssid_ex))) {
386 pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
389 /* checking if event size match the event parm size */
390 if ((wlanevents[evt_code].parmsize) &&
391 (wlanevents[evt_code].parmsize != evt_sz)) {
392 pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
394 } else if ((evt_sz == 0) && (evt_code != GEN_EVT_CODE(_WPS_PBC))) {
395 pevt_priv->event_seq = ((evt_seq + 1) & 0x7f);
398 pevt_priv->event_seq++; /* update evt_seq */
399 if (pevt_priv->event_seq > 127)
400 pevt_priv->event_seq = 0;
401 /* move to event content, 8 bytes alignment */
402 peventbuf = peventbuf + 2;
403 event_callback = wlanevents[evt_code].event_callback;
405 event_callback(padapter, (u8 *)peventbuf);
406 pevt_priv->evt_done_cnt++;