1 // SPDX-License-Identifier: GPL-2.0-or-later
4 Broadcom B43legacy wireless driver
13 #include "b43legacy.h"
18 #include <linux/delay.h>
19 #include <linux/slab.h>
22 static void tx_start(struct b43legacy_pioqueue *queue)
24 b43legacy_pio_write(queue, B43legacy_PIO_TXCTL,
25 B43legacy_PIO_TXCTL_INIT);
28 static void tx_octet(struct b43legacy_pioqueue *queue,
31 if (queue->need_workarounds) {
32 b43legacy_pio_write(queue, B43legacy_PIO_TXDATA, octet);
33 b43legacy_pio_write(queue, B43legacy_PIO_TXCTL,
34 B43legacy_PIO_TXCTL_WRITELO);
36 b43legacy_pio_write(queue, B43legacy_PIO_TXCTL,
37 B43legacy_PIO_TXCTL_WRITELO);
38 b43legacy_pio_write(queue, B43legacy_PIO_TXDATA, octet);
42 static u16 tx_get_next_word(const u8 *txhdr,
48 unsigned int i = *pos;
57 ret = le16_to_cpu(*((__le16 *)(source + i)));
63 static void tx_data(struct b43legacy_pioqueue *queue,
71 if (queue->need_workarounds) {
72 data = tx_get_next_word(txhdr, packet,
73 sizeof(struct b43legacy_txhdr_fw3), &i);
74 b43legacy_pio_write(queue, B43legacy_PIO_TXDATA, data);
76 b43legacy_pio_write(queue, B43legacy_PIO_TXCTL,
77 B43legacy_PIO_TXCTL_WRITELO |
78 B43legacy_PIO_TXCTL_WRITEHI);
79 while (i < octets - 1) {
80 data = tx_get_next_word(txhdr, packet,
81 sizeof(struct b43legacy_txhdr_fw3), &i);
82 b43legacy_pio_write(queue, B43legacy_PIO_TXDATA, data);
85 tx_octet(queue, packet[octets -
86 sizeof(struct b43legacy_txhdr_fw3) - 1]);
89 static void tx_complete(struct b43legacy_pioqueue *queue,
92 if (queue->need_workarounds) {
93 b43legacy_pio_write(queue, B43legacy_PIO_TXDATA,
94 skb->data[skb->len - 1]);
95 b43legacy_pio_write(queue, B43legacy_PIO_TXCTL,
96 B43legacy_PIO_TXCTL_WRITELO |
97 B43legacy_PIO_TXCTL_COMPLETE);
99 b43legacy_pio_write(queue, B43legacy_PIO_TXCTL,
100 B43legacy_PIO_TXCTL_COMPLETE);
103 static u16 generate_cookie(struct b43legacy_pioqueue *queue,
104 struct b43legacy_pio_txpacket *packet)
109 /* We use the upper 4 bits for the PIO
110 * controller ID and the lower 12 bits
111 * for the packet index (in the cache).
113 switch (queue->mmio_base) {
114 case B43legacy_MMIO_PIO1_BASE:
116 case B43legacy_MMIO_PIO2_BASE:
119 case B43legacy_MMIO_PIO3_BASE:
122 case B43legacy_MMIO_PIO4_BASE:
126 B43legacy_WARN_ON(1);
128 packetindex = pio_txpacket_getindex(packet);
129 B43legacy_WARN_ON(!(((u16)packetindex & 0xF000) == 0x0000));
130 cookie |= (u16)packetindex;
136 struct b43legacy_pioqueue *parse_cookie(struct b43legacy_wldev *dev,
138 struct b43legacy_pio_txpacket **packet)
140 struct b43legacy_pio *pio = &dev->pio;
141 struct b43legacy_pioqueue *queue = NULL;
144 switch (cookie & 0xF000) {
158 B43legacy_WARN_ON(1);
160 packetindex = (cookie & 0x0FFF);
161 B43legacy_WARN_ON(!(packetindex >= 0 && packetindex
162 < B43legacy_PIO_MAXTXPACKETS));
163 *packet = &(queue->tx_packets_cache[packetindex]);
169 struct b43legacy_txhdr_fw3 txhdr_fw3;
172 static int pio_tx_write_fragment(struct b43legacy_pioqueue *queue,
174 struct b43legacy_pio_txpacket *packet,
177 union txhdr_union txhdr_data;
182 txhdr = (u8 *)(&txhdr_data.txhdr_fw3);
184 B43legacy_WARN_ON(skb_shinfo(skb)->nr_frags != 0);
185 err = b43legacy_generate_txhdr(queue->dev,
186 txhdr, skb->data, skb->len,
187 IEEE80211_SKB_CB(skb),
188 generate_cookie(queue, packet));
193 octets = skb->len + txhdr_size;
194 if (queue->need_workarounds)
196 tx_data(queue, txhdr, (u8 *)skb->data, octets);
197 tx_complete(queue, skb);
202 static void free_txpacket(struct b43legacy_pio_txpacket *packet,
205 struct b43legacy_pioqueue *queue = packet->queue;
209 dev_kfree_skb_irq(packet->skb);
211 dev_kfree_skb(packet->skb);
213 list_move(&packet->list, &queue->txfree);
217 static int pio_tx_packet(struct b43legacy_pio_txpacket *packet)
219 struct b43legacy_pioqueue *queue = packet->queue;
220 struct sk_buff *skb = packet->skb;
224 octets = (u16)skb->len + sizeof(struct b43legacy_txhdr_fw3);
225 if (queue->tx_devq_size < octets) {
226 b43legacywarn(queue->dev->wl, "PIO queue too small. "
227 "Dropping packet.\n");
228 /* Drop it silently (return success) */
229 free_txpacket(packet, 1);
232 B43legacy_WARN_ON(queue->tx_devq_packets >
233 B43legacy_PIO_MAXTXDEVQPACKETS);
234 B43legacy_WARN_ON(queue->tx_devq_used > queue->tx_devq_size);
235 /* Check if there is sufficient free space on the device
236 * TX queue. If not, return and let the TX tasklet
239 if (queue->tx_devq_packets == B43legacy_PIO_MAXTXDEVQPACKETS)
241 if (queue->tx_devq_used + octets > queue->tx_devq_size)
243 /* Now poke the device. */
244 err = pio_tx_write_fragment(queue, skb, packet,
245 sizeof(struct b43legacy_txhdr_fw3));
246 if (unlikely(err == -ENOKEY)) {
247 /* Drop this packet, as we don't have the encryption key
248 * anymore and must not transmit it unencrypted. */
249 free_txpacket(packet, 1);
253 /* Account for the packet size.
254 * (We must not overflow the device TX queue)
256 queue->tx_devq_packets++;
257 queue->tx_devq_used += octets;
259 /* Transmission started, everything ok, move the
260 * packet to the txrunning list.
262 list_move_tail(&packet->list, &queue->txrunning);
267 static void tx_tasklet(unsigned long d)
269 struct b43legacy_pioqueue *queue = (struct b43legacy_pioqueue *)d;
270 struct b43legacy_wldev *dev = queue->dev;
272 struct b43legacy_pio_txpacket *packet, *tmp_packet;
276 spin_lock_irqsave(&dev->wl->irq_lock, flags);
277 if (queue->tx_frozen)
279 txctl = b43legacy_pio_read(queue, B43legacy_PIO_TXCTL);
280 if (txctl & B43legacy_PIO_TXCTL_SUSPEND)
283 list_for_each_entry_safe(packet, tmp_packet, &queue->txqueue, list) {
284 /* Try to transmit the packet. This can fail, if
285 * the device queue is full. In case of failure, the
286 * packet is left in the txqueue.
287 * If transmission succeed, the packet is moved to txrunning.
288 * If it is impossible to transmit the packet, it
291 err = pio_tx_packet(packet);
296 spin_unlock_irqrestore(&dev->wl->irq_lock, flags);
299 static void setup_txqueues(struct b43legacy_pioqueue *queue)
301 struct b43legacy_pio_txpacket *packet;
304 queue->nr_txfree = B43legacy_PIO_MAXTXPACKETS;
305 for (i = 0; i < B43legacy_PIO_MAXTXPACKETS; i++) {
306 packet = &(queue->tx_packets_cache[i]);
308 packet->queue = queue;
309 INIT_LIST_HEAD(&packet->list);
311 list_add(&packet->list, &queue->txfree);
316 struct b43legacy_pioqueue *b43legacy_setup_pioqueue(struct b43legacy_wldev *dev,
319 struct b43legacy_pioqueue *queue;
323 queue = kzalloc(sizeof(*queue), GFP_KERNEL);
328 queue->mmio_base = pio_mmio_base;
329 queue->need_workarounds = (dev->dev->id.revision < 3);
331 INIT_LIST_HEAD(&queue->txfree);
332 INIT_LIST_HEAD(&queue->txqueue);
333 INIT_LIST_HEAD(&queue->txrunning);
334 tasklet_init(&queue->txtask, tx_tasklet,
335 (unsigned long)queue);
337 value = b43legacy_read32(dev, B43legacy_MMIO_MACCTL);
338 value &= ~B43legacy_MACCTL_BE;
339 b43legacy_write32(dev, B43legacy_MMIO_MACCTL, value);
341 qsize = b43legacy_read16(dev, queue->mmio_base
342 + B43legacy_PIO_TXQBUFSIZE);
344 b43legacyerr(dev->wl, "This card does not support PIO "
345 "operation mode. Please use DMA mode "
346 "(module parameter pio=0).\n");
349 if (qsize <= B43legacy_PIO_TXQADJUST) {
350 b43legacyerr(dev->wl, "PIO tx device-queue too small (%u)\n",
354 qsize -= B43legacy_PIO_TXQADJUST;
355 queue->tx_devq_size = qsize;
357 setup_txqueues(queue);
368 static void cancel_transfers(struct b43legacy_pioqueue *queue)
370 struct b43legacy_pio_txpacket *packet, *tmp_packet;
372 tasklet_kill(&queue->txtask);
374 list_for_each_entry_safe(packet, tmp_packet, &queue->txrunning, list)
375 free_txpacket(packet, 0);
376 list_for_each_entry_safe(packet, tmp_packet, &queue->txqueue, list)
377 free_txpacket(packet, 0);
380 static void b43legacy_destroy_pioqueue(struct b43legacy_pioqueue *queue)
385 cancel_transfers(queue);
389 void b43legacy_pio_free(struct b43legacy_wldev *dev)
391 struct b43legacy_pio *pio;
393 if (!b43legacy_using_pio(dev))
397 b43legacy_destroy_pioqueue(pio->queue3);
399 b43legacy_destroy_pioqueue(pio->queue2);
401 b43legacy_destroy_pioqueue(pio->queue1);
403 b43legacy_destroy_pioqueue(pio->queue0);
407 int b43legacy_pio_init(struct b43legacy_wldev *dev)
409 struct b43legacy_pio *pio = &dev->pio;
410 struct b43legacy_pioqueue *queue;
413 queue = b43legacy_setup_pioqueue(dev, B43legacy_MMIO_PIO1_BASE);
418 queue = b43legacy_setup_pioqueue(dev, B43legacy_MMIO_PIO2_BASE);
423 queue = b43legacy_setup_pioqueue(dev, B43legacy_MMIO_PIO3_BASE);
428 queue = b43legacy_setup_pioqueue(dev, B43legacy_MMIO_PIO4_BASE);
433 if (dev->dev->id.revision < 3)
434 dev->irq_mask |= B43legacy_IRQ_PIO_WORKAROUND;
436 b43legacydbg(dev->wl, "PIO initialized\n");
442 b43legacy_destroy_pioqueue(pio->queue2);
445 b43legacy_destroy_pioqueue(pio->queue1);
448 b43legacy_destroy_pioqueue(pio->queue0);
453 int b43legacy_pio_tx(struct b43legacy_wldev *dev,
456 struct b43legacy_pioqueue *queue = dev->pio.queue1;
457 struct b43legacy_pio_txpacket *packet;
459 B43legacy_WARN_ON(queue->tx_suspended);
460 B43legacy_WARN_ON(list_empty(&queue->txfree));
462 packet = list_entry(queue->txfree.next, struct b43legacy_pio_txpacket,
466 list_move_tail(&packet->list, &queue->txqueue);
468 B43legacy_WARN_ON(queue->nr_txfree >= B43legacy_PIO_MAXTXPACKETS);
470 tasklet_schedule(&queue->txtask);
475 void b43legacy_pio_handle_txstatus(struct b43legacy_wldev *dev,
476 const struct b43legacy_txstatus *status)
478 struct b43legacy_pioqueue *queue;
479 struct b43legacy_pio_txpacket *packet;
480 struct ieee80211_tx_info *info;
483 queue = parse_cookie(dev, status->cookie, &packet);
484 B43legacy_WARN_ON(!queue);
489 queue->tx_devq_packets--;
490 queue->tx_devq_used -= (packet->skb->len +
491 sizeof(struct b43legacy_txhdr_fw3));
493 info = IEEE80211_SKB_CB(packet->skb);
495 /* preserve the confiured retry limit before clearing the status
496 * The xmit function has overwritten the rc's value with the actual
497 * retry limit done by the hardware */
498 retry_limit = info->status.rates[0].count;
499 ieee80211_tx_info_clear_status(info);
502 info->flags |= IEEE80211_TX_STAT_ACK;
504 if (status->rts_count > dev->wl->hw->conf.short_frame_max_tx_count) {
506 * If the short retries (RTS, not data frame) have exceeded
507 * the limit, the hw will not have tried the selected rate,
508 * but will have used the fallback rate instead.
509 * Don't let the rate control count attempts for the selected
510 * rate in this case, otherwise the statistics will be off.
512 info->status.rates[0].count = 0;
513 info->status.rates[1].count = status->frame_count;
515 if (status->frame_count > retry_limit) {
516 info->status.rates[0].count = retry_limit;
517 info->status.rates[1].count = status->frame_count -
521 info->status.rates[0].count = status->frame_count;
522 info->status.rates[1].idx = -1;
525 ieee80211_tx_status_irqsafe(dev->wl->hw, packet->skb);
528 free_txpacket(packet, 1);
529 /* If there are packets on the txqueue, poke the tasklet
532 if (!list_empty(&queue->txqueue))
533 tasklet_schedule(&queue->txtask);
536 static void pio_rx_error(struct b43legacy_pioqueue *queue,
542 b43legacyerr(queue->dev->wl, "PIO RX error: %s\n", error);
543 b43legacy_pio_write(queue, B43legacy_PIO_RXCTL,
544 B43legacy_PIO_RXCTL_READY);
546 B43legacy_WARN_ON(queue->mmio_base != B43legacy_MMIO_PIO1_BASE);
547 for (i = 0; i < 15; i++) {
549 b43legacy_pio_read(queue, B43legacy_PIO_RXDATA);
554 void b43legacy_pio_rx(struct b43legacy_pioqueue *queue)
556 __le16 preamble[21] = { 0 };
557 struct b43legacy_rxhdr_fw3 *rxhdr;
562 int preamble_readwords;
565 tmp = b43legacy_pio_read(queue, B43legacy_PIO_RXCTL);
566 if (!(tmp & B43legacy_PIO_RXCTL_DATAAVAILABLE))
568 b43legacy_pio_write(queue, B43legacy_PIO_RXCTL,
569 B43legacy_PIO_RXCTL_DATAAVAILABLE);
571 for (i = 0; i < 10; i++) {
572 tmp = b43legacy_pio_read(queue, B43legacy_PIO_RXCTL);
573 if (tmp & B43legacy_PIO_RXCTL_READY)
577 b43legacydbg(queue->dev->wl, "PIO RX timed out\n");
581 len = b43legacy_pio_read(queue, B43legacy_PIO_RXDATA);
582 if (unlikely(len > 0x700)) {
583 pio_rx_error(queue, 0, "len > 0x700");
586 if (unlikely(len == 0 && queue->mmio_base !=
587 B43legacy_MMIO_PIO4_BASE)) {
588 pio_rx_error(queue, 0, "len == 0");
591 preamble[0] = cpu_to_le16(len);
592 if (queue->mmio_base == B43legacy_MMIO_PIO4_BASE)
593 preamble_readwords = 14 / sizeof(u16);
595 preamble_readwords = 18 / sizeof(u16);
596 for (i = 0; i < preamble_readwords; i++) {
597 tmp = b43legacy_pio_read(queue, B43legacy_PIO_RXDATA);
598 preamble[i + 1] = cpu_to_le16(tmp);
600 rxhdr = (struct b43legacy_rxhdr_fw3 *)preamble;
601 macstat = le16_to_cpu(rxhdr->mac_status);
602 if (macstat & B43legacy_RX_MAC_FCSERR) {
604 (queue->mmio_base == B43legacy_MMIO_PIO1_BASE),
608 if (queue->mmio_base == B43legacy_MMIO_PIO4_BASE) {
609 /* We received an xmit status. */
610 struct b43legacy_hwtxstatus *hw;
612 hw = (struct b43legacy_hwtxstatus *)(preamble + 1);
613 b43legacy_handle_hwtxstatus(queue->dev, hw);
618 skb = dev_alloc_skb(len);
619 if (unlikely(!skb)) {
620 pio_rx_error(queue, 1, "OOM");
624 for (i = 0; i < len - 1; i += 2) {
625 tmp = b43legacy_pio_read(queue, B43legacy_PIO_RXDATA);
626 *((__le16 *)(skb->data + i)) = cpu_to_le16(tmp);
629 tmp = b43legacy_pio_read(queue, B43legacy_PIO_RXDATA);
630 skb->data[len - 1] = (tmp & 0x00FF);
632 b43legacy_rx(queue->dev, skb, rxhdr);
635 void b43legacy_pio_tx_suspend(struct b43legacy_pioqueue *queue)
637 b43legacy_power_saving_ctl_bits(queue->dev, -1, 1);
638 b43legacy_pio_write(queue, B43legacy_PIO_TXCTL,
639 b43legacy_pio_read(queue, B43legacy_PIO_TXCTL)
640 | B43legacy_PIO_TXCTL_SUSPEND);
643 void b43legacy_pio_tx_resume(struct b43legacy_pioqueue *queue)
645 b43legacy_pio_write(queue, B43legacy_PIO_TXCTL,
646 b43legacy_pio_read(queue, B43legacy_PIO_TXCTL)
647 & ~B43legacy_PIO_TXCTL_SUSPEND);
648 b43legacy_power_saving_ctl_bits(queue->dev, -1, -1);
649 tasklet_schedule(&queue->txtask);
652 void b43legacy_pio_freeze_txqueues(struct b43legacy_wldev *dev)
654 struct b43legacy_pio *pio;
656 B43legacy_WARN_ON(!b43legacy_using_pio(dev));
658 pio->queue0->tx_frozen = 1;
659 pio->queue1->tx_frozen = 1;
660 pio->queue2->tx_frozen = 1;
661 pio->queue3->tx_frozen = 1;
664 void b43legacy_pio_thaw_txqueues(struct b43legacy_wldev *dev)
666 struct b43legacy_pio *pio;
668 B43legacy_WARN_ON(!b43legacy_using_pio(dev));
670 pio->queue0->tx_frozen = 0;
671 pio->queue1->tx_frozen = 0;
672 pio->queue2->tx_frozen = 0;
673 pio->queue3->tx_frozen = 0;
674 if (!list_empty(&pio->queue0->txqueue))
675 tasklet_schedule(&pio->queue0->txtask);
676 if (!list_empty(&pio->queue1->txqueue))
677 tasklet_schedule(&pio->queue1->txtask);
678 if (!list_empty(&pio->queue2->txqueue))
679 tasklet_schedule(&pio->queue2->txtask);
680 if (!list_empty(&pio->queue3->txqueue))
681 tasklet_schedule(&pio->queue3->txtask);