kernel/drivers/net/wireless/mwifiex/init.c

   1 /*
   2  * Marvell Wireless LAN device driver: HW/FW Initialization
   3  *
   4  * Copyright (C) 2011-2014, Marvell International Ltd.
   5  *
   6  * This software file (the "File") is distributed by Marvell International
   7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   8  * (the "License").  You may use, redistribute and/or modify this File in
   9  * accordance with the terms and conditions of the License, a copy of which
  10  * is available by writing to the Free Software Foundation, Inc.,
  11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
  12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  13  *
  14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  17  * this warranty disclaimer.
  18  */
  19
  20 #include "decl.h"
  21 #include "ioctl.h"
  22 #include "util.h"
  23 #include "fw.h"
  24 #include "main.h"
  25 #include "wmm.h"
  26 #include "11n.h"
  27
  28 /*
  29  * This function adds a BSS priority table to the table list.
  30  *
  31  * The function allocates a new BSS priority table node and adds it to
  32  * the end of BSS priority table list, kept in driver memory.
  33  */
  34 static int mwifiex_add_bss_prio_tbl(struct mwifiex_private *priv)
  35 {
  36         struct mwifiex_adapter *adapter = priv->adapter;
  37         struct mwifiex_bss_prio_node *bss_prio;
  38         struct mwifiex_bss_prio_tbl *tbl = adapter->bss_prio_tbl;
  39         unsigned long flags;
  40
  41         bss_prio = kzalloc(sizeof(struct mwifiex_bss_prio_node), GFP_KERNEL);
  42         if (!bss_prio)
  43                 return -ENOMEM;
  44
  45         bss_prio->priv = priv;
  46         INIT_LIST_HEAD(&bss_prio->list);
  47
  48         spin_lock_irqsave(&tbl[priv->bss_priority].bss_prio_lock, flags);
  49         list_add_tail(&bss_prio->list, &tbl[priv->bss_priority].bss_prio_head);
  50         spin_unlock_irqrestore(&tbl[priv->bss_priority].bss_prio_lock, flags);
  51
  52         return 0;
  53 }
  54
  55 static void wakeup_timer_fn(unsigned long data)
  56 {
  57         struct mwifiex_adapter *adapter = (struct mwifiex_adapter *)data;
  58
  59         dev_err(adapter->dev, "Firmware wakeup failed\n");
  60         adapter->hw_status = MWIFIEX_HW_STATUS_RESET;
  61         mwifiex_cancel_all_pending_cmd(adapter);
  62
  63         if (adapter->if_ops.card_reset)
  64                 adapter->if_ops.card_reset(adapter);
  65 }
  66
  67 /*
  68  * This function initializes the private structure and sets default
  69  * values to the members.
  70  *
  71  * Additionally, it also initializes all the locks and sets up all the
  72  * lists.
  73  */
  74 int mwifiex_init_priv(struct mwifiex_private *priv)
  75 {
  76         u32 i;
  77
  78         priv->media_connected = false;
  79         eth_broadcast_addr(priv->curr_addr);
  80
  81         priv->pkt_tx_ctrl = 0;
  82         priv->bss_mode = NL80211_IFTYPE_UNSPECIFIED;
  83         priv->data_rate = 0;    /* Initially indicate the rate as auto */
  84         priv->is_data_rate_auto = true;
  85         priv->bcn_avg_factor = DEFAULT_BCN_AVG_FACTOR;
  86         priv->data_avg_factor = DEFAULT_DATA_AVG_FACTOR;
  87
  88         priv->sec_info.wep_enabled = 0;
  89         priv->sec_info.authentication_mode = NL80211_AUTHTYPE_OPEN_SYSTEM;
  90         priv->sec_info.encryption_mode = 0;
  91         for (i = 0; i < ARRAY_SIZE(priv->wep_key); i++)
  92                 memset(&priv->wep_key[i], 0, sizeof(struct mwifiex_wep_key));
  93         priv->wep_key_curr_index = 0;
  94         priv->curr_pkt_filter = HostCmd_ACT_MAC_RX_ON | HostCmd_ACT_MAC_TX_ON |
  95                                 HostCmd_ACT_MAC_ETHERNETII_ENABLE;
  96
  97         priv->beacon_period = 100; /* beacon interval */ ;
  98         priv->attempted_bss_desc = NULL;
  99         memset(&priv->curr_bss_params, 0, sizeof(priv->curr_bss_params));
 100         priv->listen_interval = MWIFIEX_DEFAULT_LISTEN_INTERVAL;
 101
 102         memset(&priv->prev_ssid, 0, sizeof(priv->prev_ssid));
 103         memset(&priv->prev_bssid, 0, sizeof(priv->prev_bssid));
 104         memset(&priv->assoc_rsp_buf, 0, sizeof(priv->assoc_rsp_buf));
 105         priv->assoc_rsp_size = 0;
 106         priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
 107         priv->atim_window = 0;
 108         priv->adhoc_state = ADHOC_IDLE;
 109         priv->tx_power_level = 0;
 110         priv->max_tx_power_level = 0;
 111         priv->min_tx_power_level = 0;
 112         priv->tx_rate = 0;
 113         priv->rxpd_htinfo = 0;
 114         priv->rxpd_rate = 0;
 115         priv->rate_bitmap = 0;
 116         priv->data_rssi_last = 0;
 117         priv->data_rssi_avg = 0;
 118         priv->data_nf_avg = 0;
 119         priv->data_nf_last = 0;
 120         priv->bcn_rssi_last = 0;
 121         priv->bcn_rssi_avg = 0;
 122         priv->bcn_nf_avg = 0;
 123         priv->bcn_nf_last = 0;
 124         memset(&priv->wpa_ie, 0, sizeof(priv->wpa_ie));
 125         memset(&priv->aes_key, 0, sizeof(priv->aes_key));
 126         priv->wpa_ie_len = 0;
 127         priv->wpa_is_gtk_set = false;
 128
 129         memset(&priv->assoc_tlv_buf, 0, sizeof(priv->assoc_tlv_buf));
 130         priv->assoc_tlv_buf_len = 0;
 131         memset(&priv->wps, 0, sizeof(priv->wps));
 132         memset(&priv->gen_ie_buf, 0, sizeof(priv->gen_ie_buf));
 133         priv->gen_ie_buf_len = 0;
 134         memset(priv->vs_ie, 0, sizeof(priv->vs_ie));
 135
 136         priv->wmm_required = true;
 137         priv->wmm_enabled = false;
 138         priv->wmm_qosinfo = 0;
 139         priv->curr_bcn_buf = NULL;
 140         priv->curr_bcn_size = 0;
 141         priv->wps_ie = NULL;
 142         priv->wps_ie_len = 0;
 143         priv->ap_11n_enabled = 0;
 144         memset(&priv->roc_cfg, 0, sizeof(priv->roc_cfg));
 145
 146         priv->scan_block = false;
 147
 148         priv->csa_chan = 0;
 149         priv->csa_expire_time = 0;
 150         priv->del_list_idx = 0;
 151         priv->hs2_enabled = false;
 152         priv->check_tdls_tx = false;
 153         memcpy(priv->tos_to_tid_inv, tos_to_tid_inv, MAX_NUM_TID);
 154
 155         mwifiex_init_11h_params(priv);
 156
 157         return mwifiex_add_bss_prio_tbl(priv);
 158 }
 159
 160 /*
 161  * This function allocates buffers for members of the adapter
 162  * structure.
 163  *
 164  * The memory allocated includes scan table, command buffers, and
 165  * sleep confirm command buffer. In addition, the queues are
 166  * also initialized.
 167  */
 168 static int mwifiex_allocate_adapter(struct mwifiex_adapter *adapter)
 169 {
 170         int ret;
 171
 172         /* Allocate command buffer */
 173         ret = mwifiex_alloc_cmd_buffer(adapter);
 174         if (ret) {
 175                 dev_err(adapter->dev, "%s: failed to alloc cmd buffer\n",
 176                         __func__);
 177                 return -1;
 178         }
 179
 180         adapter->sleep_cfm =
 181                 dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
 182                               + INTF_HEADER_LEN);
 183
 184         if (!adapter->sleep_cfm) {
 185                 dev_err(adapter->dev, "%s: failed to alloc sleep cfm"
 186                         " cmd buffer\n", __func__);
 187                 return -1;
 188         }
 189         skb_reserve(adapter->sleep_cfm, INTF_HEADER_LEN);
 190
 191         return 0;
 192 }
 193
 194 /*
 195  * This function initializes the adapter structure and sets default
 196  * values to the members of adapter.
 197  *
 198  * This also initializes the WMM related parameters in the driver private
 199  * structures.
 200  */
 201 static void mwifiex_init_adapter(struct mwifiex_adapter *adapter)
 202 {
 203         struct mwifiex_opt_sleep_confirm *sleep_cfm_buf = NULL;
 204
 205         skb_put(adapter->sleep_cfm, sizeof(struct mwifiex_opt_sleep_confirm));
 206
 207         adapter->cmd_sent = false;
 208
 209         if (adapter->iface_type == MWIFIEX_SDIO)
 210                 adapter->data_sent = true;
 211         else
 212                 adapter->data_sent = false;
 213
 214         adapter->cmd_resp_received = false;
 215         adapter->event_received = false;
 216         adapter->data_received = false;
 217
 218         adapter->surprise_removed = false;
 219
 220         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
 221
 222         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
 223         adapter->ps_state = PS_STATE_AWAKE;
 224         adapter->need_to_wakeup = false;
 225
 226         adapter->scan_mode = HostCmd_BSS_MODE_ANY;
 227         adapter->specific_scan_time = MWIFIEX_SPECIFIC_SCAN_CHAN_TIME;
 228         adapter->active_scan_time = MWIFIEX_ACTIVE_SCAN_CHAN_TIME;
 229         adapter->passive_scan_time = MWIFIEX_PASSIVE_SCAN_CHAN_TIME;
 230         adapter->scan_chan_gap_time = MWIFIEX_DEF_SCAN_CHAN_GAP_TIME;
 231
 232         adapter->scan_probes = 1;
 233
 234         adapter->multiple_dtim = 1;
 235
 236         adapter->local_listen_interval = 0;     /* default value in firmware
 237                                                    will be used */
 238
 239         adapter->is_deep_sleep = false;
 240
 241         adapter->delay_null_pkt = false;
 242         adapter->delay_to_ps = 1000;
 243         adapter->enhanced_ps_mode = PS_MODE_AUTO;
 244
 245         adapter->gen_null_pkt = false;  /* Disable NULL Pkg generation by
 246                                            default */
 247         adapter->pps_uapsd_mode = false; /* Disable pps/uapsd mode by
 248                                            default */
 249         adapter->pm_wakeup_card_req = false;
 250
 251         adapter->pm_wakeup_fw_try = false;
 252
 253         adapter->curr_tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
 254
 255         adapter->is_hs_configured = false;
 256         adapter->hs_cfg.conditions = cpu_to_le32(HS_CFG_COND_DEF);
 257         adapter->hs_cfg.gpio = HS_CFG_GPIO_DEF;
 258         adapter->hs_cfg.gap = HS_CFG_GAP_DEF;
 259         adapter->hs_activated = false;
 260
 261         memset(adapter->event_body, 0, sizeof(adapter->event_body));
 262         adapter->hw_dot_11n_dev_cap = 0;
 263         adapter->hw_dev_mcs_support = 0;
 264         adapter->sec_chan_offset = 0;
 265         adapter->adhoc_11n_enabled = false;
 266
 267         mwifiex_wmm_init(adapter);
 268
 269         sleep_cfm_buf = (struct mwifiex_opt_sleep_confirm *)
 270                                         adapter->sleep_cfm->data;
 271         memset(sleep_cfm_buf, 0, adapter->sleep_cfm->len);
 272         sleep_cfm_buf->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
 273         sleep_cfm_buf->size = cpu_to_le16(adapter->sleep_cfm->len);
 274         sleep_cfm_buf->result = 0;
 275         sleep_cfm_buf->action = cpu_to_le16(SLEEP_CONFIRM);
 276         sleep_cfm_buf->resp_ctrl = cpu_to_le16(RESP_NEEDED);
 277
 278         memset(&adapter->sleep_params, 0, sizeof(adapter->sleep_params));
 279         memset(&adapter->sleep_period, 0, sizeof(adapter->sleep_period));
 280         adapter->tx_lock_flag = false;
 281         adapter->null_pkt_interval = 0;
 282         adapter->fw_bands = 0;
 283         adapter->config_bands = 0;
 284         adapter->adhoc_start_band = 0;
 285         adapter->scan_channels = NULL;
 286         adapter->fw_release_number = 0;
 287         adapter->fw_cap_info = 0;
 288         memset(&adapter->upld_buf, 0, sizeof(adapter->upld_buf));
 289         adapter->event_cause = 0;
 290         adapter->region_code = 0;
 291         adapter->bcn_miss_time_out = DEFAULT_BCN_MISS_TIMEOUT;
 292         adapter->adhoc_awake_period = 0;
 293         memset(&adapter->arp_filter, 0, sizeof(adapter->arp_filter));
 294         adapter->arp_filter_size = 0;
 295         adapter->max_mgmt_ie_index = MAX_MGMT_IE_INDEX;
 296         adapter->key_api_major_ver = 0;
 297         adapter->key_api_minor_ver = 0;
 298         eth_broadcast_addr(adapter->perm_addr);
 299         adapter->iface_limit.sta_intf = MWIFIEX_MAX_STA_NUM;
 300         adapter->iface_limit.uap_intf = MWIFIEX_MAX_UAP_NUM;
 301         adapter->iface_limit.p2p_intf = MWIFIEX_MAX_P2P_NUM;
 302
 303         setup_timer(&adapter->wakeup_timer, wakeup_timer_fn,
 304                     (unsigned long)adapter);
 305 }
 306
 307 /*
 308  * This function sets trans_start per tx_queue
 309  */
 310 void mwifiex_set_trans_start(struct net_device *dev)
 311 {
 312         int i;
 313
 314         for (i = 0; i < dev->num_tx_queues; i++)
 315                 netdev_get_tx_queue(dev, i)->trans_start = jiffies;
 316
 317         dev->trans_start = jiffies;
 318 }
 319
 320 /*
 321  * This function wakes up all queues in net_device
 322  */
 323 void mwifiex_wake_up_net_dev_queue(struct net_device *netdev,
 324                                         struct mwifiex_adapter *adapter)
 325 {
 326         unsigned long dev_queue_flags;
 327         unsigned int i;
 328
 329         spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
 330
 331         for (i = 0; i < netdev->num_tx_queues; i++) {
 332                 struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
 333
 334                 if (netif_tx_queue_stopped(txq))
 335                         netif_tx_wake_queue(txq);
 336         }
 337
 338         spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
 339 }
 340
 341 /*
 342  * This function stops all queues in net_device
 343  */
 344 void mwifiex_stop_net_dev_queue(struct net_device *netdev,
 345                                         struct mwifiex_adapter *adapter)
 346 {
 347         unsigned long dev_queue_flags;
 348         unsigned int i;
 349
 350         spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
 351
 352         for (i = 0; i < netdev->num_tx_queues; i++) {
 353                 struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
 354
 355                 if (!netif_tx_queue_stopped(txq))
 356                         netif_tx_stop_queue(txq);
 357         }
 358
 359         spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
 360 }
 361
 362 /*
 363  *  This function releases the lock variables and frees the locks and
 364  *  associated locks.
 365  */
 366 static void mwifiex_free_lock_list(struct mwifiex_adapter *adapter)
 367 {
 368         struct mwifiex_private *priv;
 369         s32 i, j;
 370
 371         /* Free lists */
 372         list_del(&adapter->cmd_free_q);
 373         list_del(&adapter->cmd_pending_q);
 374         list_del(&adapter->scan_pending_q);
 375
 376         for (i = 0; i < adapter->priv_num; i++)
 377                 list_del(&adapter->bss_prio_tbl[i].bss_prio_head);
 378
 379         for (i = 0; i < adapter->priv_num; i++) {
 380                 if (adapter->priv[i]) {
 381                         priv = adapter->priv[i];
 382                         for (j = 0; j < MAX_NUM_TID; ++j)
 383                                 list_del(&priv->wmm.tid_tbl_ptr[j].ra_list);
 384                         list_del(&priv->tx_ba_stream_tbl_ptr);
 385                         list_del(&priv->rx_reorder_tbl_ptr);
 386                         list_del(&priv->sta_list);
 387                         list_del(&priv->auto_tdls_list);
 388                 }
 389         }
 390 }
 391
 392 /*
 393  * This function performs cleanup for adapter structure.
 394  *
 395  * The cleanup is done recursively, by canceling all pending
 396  * commands, freeing the member buffers previously allocated
 397  * (command buffers, scan table buffer, sleep confirm command
 398  * buffer), stopping the timers and calling the cleanup routines
 399  * for every interface.
 400  */
 401 static void
 402 mwifiex_adapter_cleanup(struct mwifiex_adapter *adapter)
 403 {
 404         int idx;
 405
 406         if (!adapter) {
 407                 pr_err("%s: adapter is NULL\n", __func__);
 408                 return;
 409         }
 410
 411         del_timer(&adapter->wakeup_timer);
 412         mwifiex_cancel_all_pending_cmd(adapter);
 413         wake_up_interruptible(&adapter->cmd_wait_q.wait);
 414         wake_up_interruptible(&adapter->hs_activate_wait_q);
 415
 416         /* Free lock variables */
 417         mwifiex_free_lock_list(adapter);
 418
 419         /* Free command buffer */
 420         dev_dbg(adapter->dev, "info: free cmd buffer\n");
 421         mwifiex_free_cmd_buffer(adapter);
 422
 423         for (idx = 0; idx < adapter->num_mem_types; idx++) {
 424                 struct memory_type_mapping *entry =
 425                                 &adapter->mem_type_mapping_tbl[idx];
 426
 427                 if (entry->mem_ptr) {
 428                         vfree(entry->mem_ptr);
 429                         entry->mem_ptr = NULL;
 430                 }
 431                 entry->mem_size = 0;
 432         }
 433
 434         if (adapter->drv_info_dump) {
 435                 vfree(adapter->drv_info_dump);
 436                 adapter->drv_info_size = 0;
 437         }
 438
 439         if (adapter->sleep_cfm)
 440                 dev_kfree_skb_any(adapter->sleep_cfm);
 441 }
 442
 443 /*
 444  *  This function intializes the lock variables and
 445  *  the list heads.
 446  */
 447 int mwifiex_init_lock_list(struct mwifiex_adapter *adapter)
 448 {
 449         struct mwifiex_private *priv;
 450         s32 i, j;
 451
 452         spin_lock_init(&adapter->mwifiex_lock);
 453         spin_lock_init(&adapter->int_lock);
 454         spin_lock_init(&adapter->main_proc_lock);
 455         spin_lock_init(&adapter->mwifiex_cmd_lock);
 456         spin_lock_init(&adapter->queue_lock);
 457         for (i = 0; i < adapter->priv_num; i++) {
 458                 if (adapter->priv[i]) {
 459                         priv = adapter->priv[i];
 460                         spin_lock_init(&priv->rx_pkt_lock);
 461                         spin_lock_init(&priv->wmm.ra_list_spinlock);
 462                         spin_lock_init(&priv->curr_bcn_buf_lock);
 463                         spin_lock_init(&priv->sta_list_spinlock);
 464                         spin_lock_init(&priv->auto_tdls_lock);
 465                 }
 466         }
 467
 468         /* Initialize cmd_free_q */
 469         INIT_LIST_HEAD(&adapter->cmd_free_q);
 470         /* Initialize cmd_pending_q */
 471         INIT_LIST_HEAD(&adapter->cmd_pending_q);
 472         /* Initialize scan_pending_q */
 473         INIT_LIST_HEAD(&adapter->scan_pending_q);
 474
 475         spin_lock_init(&adapter->cmd_free_q_lock);
 476         spin_lock_init(&adapter->cmd_pending_q_lock);
 477         spin_lock_init(&adapter->scan_pending_q_lock);
 478         spin_lock_init(&adapter->rx_proc_lock);
 479
 480         skb_queue_head_init(&adapter->rx_data_q);
 481         skb_queue_head_init(&adapter->tx_data_q);
 482
 483         for (i = 0; i < adapter->priv_num; ++i) {
 484                 INIT_LIST_HEAD(&adapter->bss_prio_tbl[i].bss_prio_head);
 485                 spin_lock_init(&adapter->bss_prio_tbl[i].bss_prio_lock);
 486         }
 487
 488         for (i = 0; i < adapter->priv_num; i++) {
 489                 if (!adapter->priv[i])
 490                         continue;
 491                 priv = adapter->priv[i];
 492                 for (j = 0; j < MAX_NUM_TID; ++j)
 493                         INIT_LIST_HEAD(&priv->wmm.tid_tbl_ptr[j].ra_list);
 494                 INIT_LIST_HEAD(&priv->tx_ba_stream_tbl_ptr);
 495                 INIT_LIST_HEAD(&priv->rx_reorder_tbl_ptr);
 496                 INIT_LIST_HEAD(&priv->sta_list);
 497                 INIT_LIST_HEAD(&priv->auto_tdls_list);
 498                 skb_queue_head_init(&priv->tdls_txq);
 499
 500                 spin_lock_init(&priv->tx_ba_stream_tbl_lock);
 501                 spin_lock_init(&priv->rx_reorder_tbl_lock);
 502
 503                 spin_lock_init(&priv->ack_status_lock);
 504                 idr_init(&priv->ack_status_frames);
 505         }
 506
 507         return 0;
 508 }
 509
 510 /*
 511  * This function initializes the firmware.
 512  *
 513  * The following operations are performed sequentially -
 514  *      - Allocate adapter structure
 515  *      - Initialize the adapter structure
 516  *      - Initialize the private structure
 517  *      - Add BSS priority tables to the adapter structure
 518  *      - For each interface, send the init commands to firmware
 519  *      - Send the first command in command pending queue, if available
 520  */
 521 int mwifiex_init_fw(struct mwifiex_adapter *adapter)
 522 {
 523         int ret;
 524         struct mwifiex_private *priv;
 525         u8 i, first_sta = true;
 526         int is_cmd_pend_q_empty;
 527         unsigned long flags;
 528
 529         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
 530
 531         /* Allocate memory for member of adapter structure */
 532         ret = mwifiex_allocate_adapter(adapter);
 533         if (ret)
 534                 return -1;
 535
 536         /* Initialize adapter structure */
 537         mwifiex_init_adapter(adapter);
 538
 539         for (i = 0; i < adapter->priv_num; i++) {
 540                 if (adapter->priv[i]) {
 541                         priv = adapter->priv[i];
 542
 543                         /* Initialize private structure */
 544                         ret = mwifiex_init_priv(priv);
 545                         if (ret)
 546                                 return -1;
 547                 }
 548         }
 549
 550         if (adapter->if_ops.init_fw_port) {
 551                 if (adapter->if_ops.init_fw_port(adapter))
 552                         return -1;
 553         }
 554
 555         for (i = 0; i < adapter->priv_num; i++) {
 556                 if (adapter->priv[i]) {
 557                         ret = mwifiex_sta_init_cmd(adapter->priv[i], first_sta,
 558                                                    true);
 559                         if (ret == -1)
 560                                 return -1;
 561
 562                         first_sta = false;
 563                 }
 564         }
 565
 566         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 567         is_cmd_pend_q_empty = list_empty(&adapter->cmd_pending_q);
 568         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 569         if (!is_cmd_pend_q_empty) {
 570                 /* Send the first command in queue and return */
 571                 if (mwifiex_main_process(adapter) != -1)
 572                         ret = -EINPROGRESS;
 573         } else {
 574                 adapter->hw_status = MWIFIEX_HW_STATUS_READY;
 575         }
 576
 577         return ret;
 578 }
 579
 580 /*
 581  * This function deletes the BSS priority tables.
 582  *
 583  * The function traverses through all the allocated BSS priority nodes
 584  * in every BSS priority table and frees them.
 585  */
 586 static void mwifiex_delete_bss_prio_tbl(struct mwifiex_private *priv)
 587 {
 588         int i;
 589         struct mwifiex_adapter *adapter = priv->adapter;
 590         struct mwifiex_bss_prio_node *bssprio_node, *tmp_node;
 591         struct list_head *head;
 592         spinlock_t *lock; /* bss priority lock */
 593         unsigned long flags;
 594
 595         for (i = 0; i < adapter->priv_num; ++i) {
 596                 head = &adapter->bss_prio_tbl[i].bss_prio_head;
 597                 lock = &adapter->bss_prio_tbl[i].bss_prio_lock;
 598                 dev_dbg(adapter->dev, "info: delete BSS priority table,"
 599                                 " bss_type = %d, bss_num = %d, i = %d,"
 600                                 " head = %p\n",
 601                               priv->bss_type, priv->bss_num, i, head);
 602
 603                 {
 604                         spin_lock_irqsave(lock, flags);
 605                         if (list_empty(head)) {
 606                                 spin_unlock_irqrestore(lock, flags);
 607                                 continue;
 608                         }
 609                         list_for_each_entry_safe(bssprio_node, tmp_node, head,
 610                                                  list) {
 611                                 if (bssprio_node->priv == priv) {
 612                                         dev_dbg(adapter->dev, "info: Delete "
 613                                                 "node %p, next = %p\n",
 614                                                 bssprio_node, tmp_node);
 615                                         list_del(&bssprio_node->list);
 616                                         kfree(bssprio_node);
 617                                 }
 618                         }
 619                         spin_unlock_irqrestore(lock, flags);
 620                 }
 621         }
 622 }
 623
 624 /*
 625  * This function frees the private structure, including cleans
 626  * up the TX and RX queues and frees the BSS priority tables.
 627  */
 628 void mwifiex_free_priv(struct mwifiex_private *priv)
 629 {
 630         mwifiex_clean_txrx(priv);
 631         mwifiex_delete_bss_prio_tbl(priv);
 632         mwifiex_free_curr_bcn(priv);
 633 }
 634
 635 /*
 636  * This function is used to shutdown the driver.
 637  *
 638  * The following operations are performed sequentially -
 639  *      - Check if already shut down
 640  *      - Make sure the main process has stopped
 641  *      - Clean up the Tx and Rx queues
 642  *      - Delete BSS priority tables
 643  *      - Free the adapter
 644  *      - Notify completion
 645  */
 646 int
 647 mwifiex_shutdown_drv(struct mwifiex_adapter *adapter)
 648 {
 649         int ret = -EINPROGRESS;
 650         struct mwifiex_private *priv;
 651         s32 i;
 652         unsigned long flags;
 653         struct sk_buff *skb;
 654
 655         /* mwifiex already shutdown */
 656         if (adapter->hw_status == MWIFIEX_HW_STATUS_NOT_READY)
 657                 return 0;
 658
 659         adapter->hw_status = MWIFIEX_HW_STATUS_CLOSING;
 660         /* wait for mwifiex_process to complete */
 661         if (adapter->mwifiex_processing) {
 662                 dev_warn(adapter->dev, "main process is still running\n");
 663                 return ret;
 664         }
 665
 666         /* cancel current command */
 667         if (adapter->curr_cmd) {
 668                 dev_warn(adapter->dev, "curr_cmd is still in processing\n");
 669                 del_timer_sync(&adapter->cmd_timer);
 670                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 671                 adapter->curr_cmd = NULL;
 672         }
 673
 674         /* shut down mwifiex */
 675         dev_dbg(adapter->dev, "info: shutdown mwifiex...\n");
 676
 677         /* Clean up Tx/Rx queues and delete BSS priority table */
 678         for (i = 0; i < adapter->priv_num; i++) {
 679                 if (adapter->priv[i]) {
 680                         priv = adapter->priv[i];
 681
 682                         mwifiex_clean_auto_tdls(priv);
 683                         mwifiex_abort_cac(priv);
 684                         mwifiex_clean_txrx(priv);
 685                         mwifiex_delete_bss_prio_tbl(priv);
 686                 }
 687         }
 688
 689         atomic_set(&adapter->tx_queued, 0);
 690         while ((skb = skb_dequeue(&adapter->tx_data_q)))
 691                 mwifiex_write_data_complete(adapter, skb, 0, 0);
 692
 693         spin_lock_irqsave(&adapter->rx_proc_lock, flags);
 694
 695         while ((skb = skb_dequeue(&adapter->rx_data_q))) {
 696                 struct mwifiex_rxinfo *rx_info = MWIFIEX_SKB_RXCB(skb);
 697
 698                 atomic_dec(&adapter->rx_pending);
 699                 priv = adapter->priv[rx_info->bss_num];
 700                 if (priv)
 701                         priv->stats.rx_dropped++;
 702
 703                 dev_kfree_skb_any(skb);
 704         }
 705
 706         spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
 707
 708         spin_lock(&adapter->mwifiex_lock);
 709
 710         mwifiex_adapter_cleanup(adapter);
 711
 712         spin_unlock(&adapter->mwifiex_lock);
 713
 714         /* Notify completion */
 715         ret = mwifiex_shutdown_fw_complete(adapter);
 716
 717         return ret;
 718 }
 719
 720 /*
 721  * This function downloads the firmware to the card.
 722  *
 723  * The actual download is preceded by two sanity checks -
 724  *      - Check if firmware is already running
 725  *      - Check if the interface is the winner to download the firmware
 726  *
 727  * ...and followed by another -
 728  *      - Check if the firmware is downloaded successfully
 729  *
 730  * After download is successfully completed, the host interrupts are enabled.
 731  */
 732 int mwifiex_dnld_fw(struct mwifiex_adapter *adapter,
 733                     struct mwifiex_fw_image *pmfw)
 734 {
 735         int ret;
 736         u32 poll_num = 1;
 737
 738         if (adapter->if_ops.check_fw_status) {
 739                 adapter->winner = 0;
 740
 741                 /* check if firmware is already running */
 742                 ret = adapter->if_ops.check_fw_status(adapter, poll_num);
 743                 if (!ret) {
 744                         dev_notice(adapter->dev,
 745                                    "WLAN FW already running! Skip FW dnld\n");
 746                         return 0;
 747                 }
 748
 749                 poll_num = MAX_FIRMWARE_POLL_TRIES;
 750
 751                 /* check if we are the winner for downloading FW */
 752                 if (!adapter->winner) {
 753                         dev_notice(adapter->dev,
 754                                    "FW already running! Skip FW dnld\n");
 755                         goto poll_fw;
 756                 }
 757         }
 758
 759         if (pmfw) {
 760                 /* Download firmware with helper */
 761                 ret = adapter->if_ops.prog_fw(adapter, pmfw);
 762                 if (ret) {
 763                         dev_err(adapter->dev, "prog_fw failed ret=%#x\n", ret);
 764                         return ret;
 765                 }
 766         }
 767
 768 poll_fw:
 769         /* Check if the firmware is downloaded successfully or not */
 770         ret = adapter->if_ops.check_fw_status(adapter, poll_num);
 771         if (ret)
 772                 dev_err(adapter->dev, "FW failed to be active in time\n");
 773
 774         return ret;
 775 }