drivers/net/wireless/marvell/mwifiex/cmdevt.c

   1 /*
   2  * Marvell Wireless LAN device driver: commands and events
   3  *
   4  * Copyright (C) 2011-2014, Marvell International Ltd.
   5  *
   6  * This software file (the "File") is distributed by Marvell International
   7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   8  * (the "License").  You may use, redistribute and/or modify this File in
   9  * accordance with the terms and conditions of the License, a copy of which
  10  * is available by writing to the Free Software Foundation, Inc.,
  11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
  12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  13  *
  14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  17  * this warranty disclaimer.
  18  */
  19
  20 #include <asm/unaligned.h>
  21 #include "decl.h"
  22 #include "ioctl.h"
  23 #include "util.h"
  24 #include "fw.h"
  25 #include "main.h"
  26 #include "wmm.h"
  27 #include "11n.h"
  28
  29 static void mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter);
  30
  31 /*
  32  * This function initializes a command node.
  33  *
  34  * The actual allocation of the node is not done by this function. It only
  35  * initiates a node by filling it with default parameters. Similarly,
  36  * allocation of the different buffers used (IOCTL buffer, data buffer) are
  37  * not done by this function either.
  38  */
  39 static void
  40 mwifiex_init_cmd_node(struct mwifiex_private *priv,
  41                       struct cmd_ctrl_node *cmd_node,
  42                       u32 cmd_oid, void *data_buf, bool sync)
  43 {
  44         cmd_node->priv = priv;
  45         cmd_node->cmd_oid = cmd_oid;
  46         if (sync) {
  47                 cmd_node->wait_q_enabled = true;
  48                 cmd_node->cmd_wait_q_woken = false;
  49                 cmd_node->condition = &cmd_node->cmd_wait_q_woken;
  50         }
  51         cmd_node->data_buf = data_buf;
  52         cmd_node->cmd_skb = cmd_node->skb;
  53 }
  54
  55 /*
  56  * This function returns a command node from the free queue depending upon
  57  * availability.
  58  */
  59 static struct cmd_ctrl_node *
  60 mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
  61 {
  62         struct cmd_ctrl_node *cmd_node;
  63         unsigned long flags;
  64
  65         spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
  66         if (list_empty(&adapter->cmd_free_q)) {
  67                 mwifiex_dbg(adapter, ERROR,
  68                             "GET_CMD_NODE: cmd node not available\n");
  69                 spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
  70                 return NULL;
  71         }
  72         cmd_node = list_first_entry(&adapter->cmd_free_q,
  73                                     struct cmd_ctrl_node, list);
  74         list_del(&cmd_node->list);
  75         spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
  76
  77         return cmd_node;
  78 }
  79
  80 /*
  81  * This function cleans up a command node.
  82  *
  83  * The function resets the fields including the buffer pointers.
  84  * This function does not try to free the buffers. They must be
  85  * freed before calling this function.
  86  *
  87  * This function will however call the receive completion callback
  88  * in case a response buffer is still available before resetting
  89  * the pointer.
  90  */
  91 static void
  92 mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
  93                        struct cmd_ctrl_node *cmd_node)
  94 {
  95         cmd_node->cmd_oid = 0;
  96         cmd_node->cmd_flag = 0;
  97         cmd_node->data_buf = NULL;
  98         cmd_node->wait_q_enabled = false;
  99
 100         if (cmd_node->cmd_skb)
 101                 skb_trim(cmd_node->cmd_skb, 0);
 102
 103         if (cmd_node->resp_skb) {
 104                 adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
 105                 cmd_node->resp_skb = NULL;
 106         }
 107 }
 108
 109 /*
 110  * This function returns a command to the command free queue.
 111  *
 112  * The function also calls the completion callback if required, before
 113  * cleaning the command node and re-inserting it into the free queue.
 114  */
 115 static void
 116 mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
 117                              struct cmd_ctrl_node *cmd_node)
 118 {
 119         unsigned long flags;
 120
 121         if (!cmd_node)
 122                 return;
 123
 124         if (cmd_node->wait_q_enabled)
 125                 mwifiex_complete_cmd(adapter, cmd_node);
 126         /* Clean the node */
 127         mwifiex_clean_cmd_node(adapter, cmd_node);
 128
 129         /* Insert node into cmd_free_q */
 130         spin_lock_irqsave(&adapter->cmd_free_q_lock, flags);
 131         list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
 132         spin_unlock_irqrestore(&adapter->cmd_free_q_lock, flags);
 133 }
 134
 135 /* This function reuses a command node. */
 136 void mwifiex_recycle_cmd_node(struct mwifiex_adapter *adapter,
 137                               struct cmd_ctrl_node *cmd_node)
 138 {
 139         struct host_cmd_ds_command *host_cmd = (void *)cmd_node->cmd_skb->data;
 140
 141         mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 142
 143         atomic_dec(&adapter->cmd_pending);
 144         mwifiex_dbg(adapter, CMD,
 145                     "cmd: FREE_CMD: cmd=%#x, cmd_pending=%d\n",
 146                 le16_to_cpu(host_cmd->command),
 147                 atomic_read(&adapter->cmd_pending));
 148 }
 149
 150 /*
 151  * This function sends a host command to the firmware.
 152  *
 153  * The function copies the host command into the driver command
 154  * buffer, which will be transferred to the firmware later by the
 155  * main thread.
 156  */
 157 static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
 158                                 struct host_cmd_ds_command *cmd,
 159                                 struct mwifiex_ds_misc_cmd *pcmd_ptr)
 160 {
 161         /* Copy the HOST command to command buffer */
 162         memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
 163         mwifiex_dbg(priv->adapter, CMD,
 164                     "cmd: host cmd size = %d\n", pcmd_ptr->len);
 165         return 0;
 166 }
 167
 168 /*
 169  * This function downloads a command to the firmware.
 170  *
 171  * The function performs sanity tests, sets the command sequence
 172  * number and size, converts the header fields to CPU format before
 173  * sending. Afterwards, it logs the command ID and action for debugging
 174  * and sets up the command timeout timer.
 175  */
 176 static int mwifiex_dnld_cmd_to_fw(struct mwifiex_private *priv,
 177                                   struct cmd_ctrl_node *cmd_node)
 178 {
 179
 180         struct mwifiex_adapter *adapter = priv->adapter;
 181         int ret;
 182         struct host_cmd_ds_command *host_cmd;
 183         uint16_t cmd_code;
 184         uint16_t cmd_size;
 185         unsigned long flags;
 186
 187         if (!adapter || !cmd_node)
 188                 return -1;
 189
 190         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 191
 192         /* Sanity test */
 193         if (host_cmd == NULL || host_cmd->size == 0) {
 194                 mwifiex_dbg(adapter, ERROR,
 195                             "DNLD_CMD: host_cmd is null\t"
 196                             "or cmd size is 0, not sending\n");
 197                 if (cmd_node->wait_q_enabled)
 198                         adapter->cmd_wait_q.status = -1;
 199                 mwifiex_recycle_cmd_node(adapter, cmd_node);
 200                 return -1;
 201         }
 202
 203         cmd_code = le16_to_cpu(host_cmd->command);
 204         cmd_size = le16_to_cpu(host_cmd->size);
 205
 206         if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET &&
 207             cmd_code != HostCmd_CMD_FUNC_SHUTDOWN &&
 208             cmd_code != HostCmd_CMD_FUNC_INIT) {
 209                 mwifiex_dbg(adapter, ERROR,
 210                             "DNLD_CMD: FW in reset state, ignore cmd %#x\n",
 211                         cmd_code);
 212                 mwifiex_recycle_cmd_node(adapter, cmd_node);
 213                 queue_work(adapter->workqueue, &adapter->main_work);
 214                 return -1;
 215         }
 216
 217         /* Set command sequence number */
 218         adapter->seq_num++;
 219         host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
 220                                         (adapter->seq_num,
 221                                          cmd_node->priv->bss_num,
 222                                          cmd_node->priv->bss_type));
 223
 224         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 225         adapter->curr_cmd = cmd_node;
 226         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 227
 228         /* Adjust skb length */
 229         if (cmd_node->cmd_skb->len > cmd_size)
 230                 /*
 231                  * cmd_size is less than sizeof(struct host_cmd_ds_command).
 232                  * Trim off the unused portion.
 233                  */
 234                 skb_trim(cmd_node->cmd_skb, cmd_size);
 235         else if (cmd_node->cmd_skb->len < cmd_size)
 236                 /*
 237                  * cmd_size is larger than sizeof(struct host_cmd_ds_command)
 238                  * because we have appended custom IE TLV. Increase skb length
 239                  * accordingly.
 240                  */
 241                 skb_put(cmd_node->cmd_skb, cmd_size - cmd_node->cmd_skb->len);
 242
 243         mwifiex_dbg(adapter, CMD,
 244                     "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n",
 245                     cmd_code,
 246                     get_unaligned_le16((u8 *)host_cmd + S_DS_GEN),
 247                     cmd_size, le16_to_cpu(host_cmd->seq_num));
 248         mwifiex_dbg_dump(adapter, CMD_D, "cmd buffer:", host_cmd, cmd_size);
 249
 250         if (adapter->iface_type == MWIFIEX_USB) {
 251                 skb_push(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
 252                 put_unaligned_le32(MWIFIEX_USB_TYPE_CMD,
 253                                    cmd_node->cmd_skb->data);
 254                 adapter->cmd_sent = true;
 255                 ret = adapter->if_ops.host_to_card(adapter,
 256                                                    MWIFIEX_USB_EP_CMD_EVENT,
 257                                                    cmd_node->cmd_skb, NULL);
 258                 skb_pull(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
 259                 if (ret == -EBUSY)
 260                         cmd_node->cmd_skb = NULL;
 261         } else {
 262                 skb_push(cmd_node->cmd_skb, adapter->intf_hdr_len);
 263                 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
 264                                                    cmd_node->cmd_skb, NULL);
 265                 skb_pull(cmd_node->cmd_skb, adapter->intf_hdr_len);
 266         }
 267
 268         if (ret == -1) {
 269                 mwifiex_dbg(adapter, ERROR,
 270                             "DNLD_CMD: host to card failed\n");
 271                 if (adapter->iface_type == MWIFIEX_USB)
 272                         adapter->cmd_sent = false;
 273                 if (cmd_node->wait_q_enabled)
 274                         adapter->cmd_wait_q.status = -1;
 275                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 276
 277                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 278                 adapter->curr_cmd = NULL;
 279                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 280
 281                 adapter->dbg.num_cmd_host_to_card_failure++;
 282                 return -1;
 283         }
 284
 285         /* Save the last command id and action to debug log */
 286         adapter->dbg.last_cmd_index =
 287                         (adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
 288         adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
 289         adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
 290                         get_unaligned_le16((u8 *)host_cmd + S_DS_GEN);
 291
 292         /* Setup the timer after transmit command, except that specific
 293          * command might not have command response.
 294          */
 295         if (cmd_code != HostCmd_CMD_FW_DUMP_EVENT)
 296                 mod_timer(&adapter->cmd_timer,
 297                           jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));
 298
 299         /* Clear BSS_NO_BITS from HostCmd */
 300         cmd_code &= HostCmd_CMD_ID_MASK;
 301
 302         return 0;
 303 }
 304
 305 /*
 306  * This function downloads a sleep confirm command to the firmware.
 307  *
 308  * The function performs sanity tests, sets the command sequence
 309  * number and size, converts the header fields to CPU format before
 310  * sending.
 311  *
 312  * No responses are needed for sleep confirm command.
 313  */
 314 static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
 315 {
 316         int ret;
 317         struct mwifiex_private *priv;
 318         struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
 319                                 (struct mwifiex_opt_sleep_confirm *)
 320                                                 adapter->sleep_cfm->data;
 321         struct sk_buff *sleep_cfm_tmp;
 322
 323         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 324
 325         adapter->seq_num++;
 326         sleep_cfm_buf->seq_num =
 327                 cpu_to_le16((HostCmd_SET_SEQ_NO_BSS_INFO
 328                                         (adapter->seq_num, priv->bss_num,
 329                                          priv->bss_type)));
 330
 331         mwifiex_dbg(adapter, CMD,
 332                     "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n",
 333                 le16_to_cpu(sleep_cfm_buf->command),
 334                 le16_to_cpu(sleep_cfm_buf->action),
 335                 le16_to_cpu(sleep_cfm_buf->size),
 336                 le16_to_cpu(sleep_cfm_buf->seq_num));
 337         mwifiex_dbg_dump(adapter, CMD_D, "SLEEP_CFM buffer: ", sleep_cfm_buf,
 338                          le16_to_cpu(sleep_cfm_buf->size));
 339
 340         if (adapter->iface_type == MWIFIEX_USB) {
 341                 sleep_cfm_tmp =
 342                         dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
 343                                       + MWIFIEX_TYPE_LEN);
 344                 skb_put(sleep_cfm_tmp, sizeof(struct mwifiex_opt_sleep_confirm)
 345                         + MWIFIEX_TYPE_LEN);
 346                 put_unaligned_le32(MWIFIEX_USB_TYPE_CMD, sleep_cfm_tmp->data);
 347                 memcpy(sleep_cfm_tmp->data + MWIFIEX_TYPE_LEN,
 348                        adapter->sleep_cfm->data,
 349                        sizeof(struct mwifiex_opt_sleep_confirm));
 350                 ret = adapter->if_ops.host_to_card(adapter,
 351                                                    MWIFIEX_USB_EP_CMD_EVENT,
 352                                                    sleep_cfm_tmp, NULL);
 353                 if (ret != -EBUSY)
 354                         dev_kfree_skb_any(sleep_cfm_tmp);
 355         } else {
 356                 skb_push(adapter->sleep_cfm, adapter->intf_hdr_len);
 357                 ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
 358                                                    adapter->sleep_cfm, NULL);
 359                 skb_pull(adapter->sleep_cfm, adapter->intf_hdr_len);
 360         }
 361
 362         if (ret == -1) {
 363                 mwifiex_dbg(adapter, ERROR, "SLEEP_CFM: failed\n");
 364                 adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
 365                 return -1;
 366         }
 367
 368         if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl))
 369                 /* Response is not needed for sleep confirm command */
 370                 adapter->ps_state = PS_STATE_SLEEP;
 371         else
 372                 adapter->ps_state = PS_STATE_SLEEP_CFM;
 373
 374         if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl) &&
 375             (adapter->is_hs_configured &&
 376              !adapter->sleep_period.period)) {
 377                 adapter->pm_wakeup_card_req = true;
 378                 mwifiex_hs_activated_event(mwifiex_get_priv
 379                                 (adapter, MWIFIEX_BSS_ROLE_ANY), true);
 380         }
 381
 382         return ret;
 383 }
 384
 385 /*
 386  * This function allocates the command buffers and links them to
 387  * the command free queue.
 388  *
 389  * The driver uses a pre allocated number of command buffers, which
 390  * are created at driver initializations and freed at driver cleanup.
 391  * Every command needs to obtain a command buffer from this pool before
 392  * it can be issued. The command free queue lists the command buffers
 393  * currently free to use, while the command pending queue lists the
 394  * command buffers already in use and awaiting handling. Command buffers
 395  * are returned to the free queue after use.
 396  */
 397 int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
 398 {
 399         struct cmd_ctrl_node *cmd_array;
 400         u32 i;
 401
 402         /* Allocate and initialize struct cmd_ctrl_node */
 403         cmd_array = kcalloc(MWIFIEX_NUM_OF_CMD_BUFFER,
 404                             sizeof(struct cmd_ctrl_node), GFP_KERNEL);
 405         if (!cmd_array)
 406                 return -ENOMEM;
 407
 408         adapter->cmd_pool = cmd_array;
 409
 410         /* Allocate and initialize command buffers */
 411         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
 412                 cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
 413                 if (!cmd_array[i].skb) {
 414                         mwifiex_dbg(adapter, ERROR,
 415                                     "unable to allocate command buffer\n");
 416                         return -ENOMEM;
 417                 }
 418         }
 419
 420         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
 421                 mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);
 422
 423         return 0;
 424 }
 425
 426 /*
 427  * This function frees the command buffers.
 428  *
 429  * The function calls the completion callback for all the command
 430  * buffers that still have response buffers associated with them.
 431  */
 432 void mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
 433 {
 434         struct cmd_ctrl_node *cmd_array;
 435         u32 i;
 436
 437         /* Need to check if cmd pool is allocated or not */
 438         if (!adapter->cmd_pool) {
 439                 mwifiex_dbg(adapter, FATAL,
 440                             "info: FREE_CMD_BUF: cmd_pool is null\n");
 441                 return;
 442         }
 443
 444         cmd_array = adapter->cmd_pool;
 445
 446         /* Release shared memory buffers */
 447         for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
 448                 if (cmd_array[i].skb) {
 449                         mwifiex_dbg(adapter, CMD,
 450                                     "cmd: free cmd buffer %d\n", i);
 451                         dev_kfree_skb_any(cmd_array[i].skb);
 452                 }
 453                 if (!cmd_array[i].resp_skb)
 454                         continue;
 455
 456                 if (adapter->iface_type == MWIFIEX_USB)
 457                         adapter->if_ops.cmdrsp_complete(adapter,
 458                                                         cmd_array[i].resp_skb);
 459                 else
 460                         dev_kfree_skb_any(cmd_array[i].resp_skb);
 461         }
 462         /* Release struct cmd_ctrl_node */
 463         if (adapter->cmd_pool) {
 464                 mwifiex_dbg(adapter, CMD,
 465                             "cmd: free cmd pool\n");
 466                 kfree(adapter->cmd_pool);
 467                 adapter->cmd_pool = NULL;
 468         }
 469 }
 470
 471 /*
 472  * This function handles events generated by firmware.
 473  *
 474  * Event body of events received from firmware are not used (though they are
 475  * saved), only the event ID is used. Some events are re-invoked by
 476  * the driver, with a new event body.
 477  *
 478  * After processing, the function calls the completion callback
 479  * for cleanup.
 480  */
 481 int mwifiex_process_event(struct mwifiex_adapter *adapter)
 482 {
 483         int ret, i;
 484         struct mwifiex_private *priv =
 485                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 486         struct sk_buff *skb = adapter->event_skb;
 487         u32 eventcause;
 488         struct mwifiex_rxinfo *rx_info;
 489
 490         if ((adapter->event_cause & EVENT_ID_MASK) == EVENT_RADAR_DETECTED) {
 491                 for (i = 0; i < adapter->priv_num; i++) {
 492                         priv = adapter->priv[i];
 493                         if (priv && mwifiex_is_11h_active(priv)) {
 494                                 adapter->event_cause |=
 495                                         ((priv->bss_num & 0xff) << 16) |
 496                                         ((priv->bss_type & 0xff) << 24);
 497                                 break;
 498                         }
 499                 }
 500         }
 501
 502         eventcause = adapter->event_cause;
 503
 504         /* Save the last event to debug log */
 505         adapter->dbg.last_event_index =
 506                         (adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
 507         adapter->dbg.last_event[adapter->dbg.last_event_index] =
 508                                                         (u16) eventcause;
 509
 510         /* Get BSS number and corresponding priv */
 511         priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
 512                                       EVENT_GET_BSS_TYPE(eventcause));
 513         if (!priv)
 514                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 515
 516         /* Clear BSS_NO_BITS from event */
 517         eventcause &= EVENT_ID_MASK;
 518         adapter->event_cause = eventcause;
 519
 520         if (skb) {
 521                 rx_info = MWIFIEX_SKB_RXCB(skb);
 522                 memset(rx_info, 0, sizeof(*rx_info));
 523                 rx_info->bss_num = priv->bss_num;
 524                 rx_info->bss_type = priv->bss_type;
 525                 mwifiex_dbg_dump(adapter, EVT_D, "Event Buf:",
 526                                  skb->data, skb->len);
 527         }
 528
 529         mwifiex_dbg(adapter, EVENT, "EVENT: cause: %#x\n", eventcause);
 530
 531         if (priv->bss_role == MWIFIEX_BSS_ROLE_UAP)
 532                 ret = mwifiex_process_uap_event(priv);
 533         else
 534                 ret = mwifiex_process_sta_event(priv);
 535
 536         adapter->event_cause = 0;
 537         adapter->event_skb = NULL;
 538         adapter->if_ops.event_complete(adapter, skb);
 539
 540         return ret;
 541 }
 542
 543 /*
 544  * This function prepares a command and send it to the firmware.
 545  *
 546  * Preparation includes -
 547  *      - Sanity tests to make sure the card is still present or the FW
 548  *        is not reset
 549  *      - Getting a new command node from the command free queue
 550  *      - Initializing the command node for default parameters
 551  *      - Fill up the non-default parameters and buffer pointers
 552  *      - Add the command to pending queue
 553  */
 554 int mwifiex_send_cmd(struct mwifiex_private *priv, u16 cmd_no,
 555                      u16 cmd_action, u32 cmd_oid, void *data_buf, bool sync)
 556 {
 557         int ret;
 558         struct mwifiex_adapter *adapter = priv->adapter;
 559         struct cmd_ctrl_node *cmd_node;
 560         struct host_cmd_ds_command *cmd_ptr;
 561
 562         if (!adapter) {
 563                 pr_err("PREP_CMD: adapter is NULL\n");
 564                 return -1;
 565         }
 566
 567         if (adapter->is_suspended) {
 568                 mwifiex_dbg(adapter, ERROR,
 569                             "PREP_CMD: device in suspended state\n");
 570                 return -1;
 571         }
 572
 573         if (adapter->hs_enabling && cmd_no != HostCmd_CMD_802_11_HS_CFG_ENH) {
 574                 mwifiex_dbg(adapter, ERROR,
 575                             "PREP_CMD: host entering sleep state\n");
 576                 return -1;
 577         }
 578
 579         if (adapter->surprise_removed) {
 580                 mwifiex_dbg(adapter, ERROR,
 581                             "PREP_CMD: card is removed\n");
 582                 return -1;
 583         }
 584
 585         if (adapter->is_cmd_timedout) {
 586                 mwifiex_dbg(adapter, ERROR,
 587                             "PREP_CMD: FW is in bad state\n");
 588                 return -1;
 589         }
 590
 591         if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
 592                 if (cmd_no != HostCmd_CMD_FUNC_INIT) {
 593                         mwifiex_dbg(adapter, ERROR,
 594                                     "PREP_CMD: FW in reset state\n");
 595                         return -1;
 596                 }
 597         }
 598         /* We don't expect commands in manufacturing mode. They are cooked
 599          * in application and ready to download buffer is passed to the driver
 600          */
 601         if (adapter->mfg_mode && cmd_no) {
 602                 dev_dbg(adapter->dev, "Ignoring commands in manufacturing mode\n");
 603                 return -1;
 604         }
 605
 606
 607         /* Get a new command node */
 608         cmd_node = mwifiex_get_cmd_node(adapter);
 609
 610         if (!cmd_node) {
 611                 mwifiex_dbg(adapter, ERROR,
 612                             "PREP_CMD: no free cmd node\n");
 613                 return -1;
 614         }
 615
 616         /* Initialize the command node */
 617         mwifiex_init_cmd_node(priv, cmd_node, cmd_oid, data_buf, sync);
 618
 619         if (!cmd_node->cmd_skb) {
 620                 mwifiex_dbg(adapter, ERROR,
 621                             "PREP_CMD: no free cmd buf\n");
 622                 return -1;
 623         }
 624
 625         skb_put_zero(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command));
 626
 627         cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 628         cmd_ptr->command = cpu_to_le16(cmd_no);
 629         cmd_ptr->result = 0;
 630
 631         /* Prepare command */
 632         if (cmd_no) {
 633                 switch (cmd_no) {
 634                 case HostCmd_CMD_UAP_SYS_CONFIG:
 635                 case HostCmd_CMD_UAP_BSS_START:
 636                 case HostCmd_CMD_UAP_BSS_STOP:
 637                 case HostCmd_CMD_UAP_STA_DEAUTH:
 638                 case HOST_CMD_APCMD_SYS_RESET:
 639                 case HOST_CMD_APCMD_STA_LIST:
 640                         ret = mwifiex_uap_prepare_cmd(priv, cmd_no, cmd_action,
 641                                                       cmd_oid, data_buf,
 642                                                       cmd_ptr);
 643                         break;
 644                 default:
 645                         ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
 646                                                       cmd_oid, data_buf,
 647                                                       cmd_ptr);
 648                         break;
 649                 }
 650         } else {
 651                 ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
 652                 cmd_node->cmd_flag |= CMD_F_HOSTCMD;
 653         }
 654
 655         /* Return error, since the command preparation failed */
 656         if (ret) {
 657                 mwifiex_dbg(adapter, ERROR,
 658                             "PREP_CMD: cmd %#x preparation failed\n",
 659                         cmd_no);
 660                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 661                 return -1;
 662         }
 663
 664         /* Send command */
 665         if (cmd_no == HostCmd_CMD_802_11_SCAN ||
 666             cmd_no == HostCmd_CMD_802_11_SCAN_EXT) {
 667                 mwifiex_queue_scan_cmd(priv, cmd_node);
 668         } else {
 669                 mwifiex_insert_cmd_to_pending_q(adapter, cmd_node);
 670                 queue_work(adapter->workqueue, &adapter->main_work);
 671                 if (cmd_node->wait_q_enabled)
 672                         ret = mwifiex_wait_queue_complete(adapter, cmd_node);
 673         }
 674
 675         return ret;
 676 }
 677
 678 /*
 679  * This function queues a command to the command pending queue.
 680  *
 681  * This in effect adds the command to the command list to be executed.
 682  * Exit PS command is handled specially, by placing it always to the
 683  * front of the command queue.
 684  */
 685 void
 686 mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
 687                                 struct cmd_ctrl_node *cmd_node)
 688 {
 689         struct host_cmd_ds_command *host_cmd = NULL;
 690         u16 command;
 691         unsigned long flags;
 692         bool add_tail = true;
 693
 694         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 695         if (!host_cmd) {
 696                 mwifiex_dbg(adapter, ERROR, "QUEUE_CMD: host_cmd is NULL\n");
 697                 return;
 698         }
 699
 700         command = le16_to_cpu(host_cmd->command);
 701
 702         /* Exit_PS command needs to be queued in the header always. */
 703         if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
 704                 struct host_cmd_ds_802_11_ps_mode_enh *pm =
 705                                                 &host_cmd->params.psmode_enh;
 706                 if ((le16_to_cpu(pm->action) == DIS_PS) ||
 707                     (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
 708                         if (adapter->ps_state != PS_STATE_AWAKE)
 709                                 add_tail = false;
 710                 }
 711         }
 712
 713         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 714         if (add_tail)
 715                 list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
 716         else
 717                 list_add(&cmd_node->list, &adapter->cmd_pending_q);
 718         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 719
 720         atomic_inc(&adapter->cmd_pending);
 721         mwifiex_dbg(adapter, CMD,
 722                     "cmd: QUEUE_CMD: cmd=%#x, cmd_pending=%d\n",
 723                 command, atomic_read(&adapter->cmd_pending));
 724 }
 725
 726 /*
 727  * This function executes the next command in command pending queue.
 728  *
 729  * This function will fail if a command is already in processing stage,
 730  * otherwise it will dequeue the first command from the command pending
 731  * queue and send to the firmware.
 732  *
 733  * If the device is currently in host sleep mode, any commands, except the
 734  * host sleep configuration command will de-activate the host sleep. For PS
 735  * mode, the function will put the firmware back to sleep if applicable.
 736  */
 737 int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
 738 {
 739         struct mwifiex_private *priv;
 740         struct cmd_ctrl_node *cmd_node;
 741         int ret = 0;
 742         struct host_cmd_ds_command *host_cmd;
 743         unsigned long cmd_flags;
 744         unsigned long cmd_pending_q_flags;
 745
 746         /* Check if already in processing */
 747         if (adapter->curr_cmd) {
 748                 mwifiex_dbg(adapter, FATAL,
 749                             "EXEC_NEXT_CMD: cmd in processing\n");
 750                 return -1;
 751         }
 752
 753         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
 754         /* Check if any command is pending */
 755         spin_lock_irqsave(&adapter->cmd_pending_q_lock, cmd_pending_q_flags);
 756         if (list_empty(&adapter->cmd_pending_q)) {
 757                 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 758                                        cmd_pending_q_flags);
 759                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 760                 return 0;
 761         }
 762         cmd_node = list_first_entry(&adapter->cmd_pending_q,
 763                                     struct cmd_ctrl_node, list);
 764
 765         host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 766         priv = cmd_node->priv;
 767
 768         if (adapter->ps_state != PS_STATE_AWAKE) {
 769                 mwifiex_dbg(adapter, ERROR,
 770                             "%s: cannot send cmd in sleep state,\t"
 771                             "this should not happen\n", __func__);
 772                 spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 773                                        cmd_pending_q_flags);
 774                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 775                 return ret;
 776         }
 777
 778         list_del(&cmd_node->list);
 779         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock,
 780                                cmd_pending_q_flags);
 781
 782         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
 783         ret = mwifiex_dnld_cmd_to_fw(priv, cmd_node);
 784         priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 785         /* Any command sent to the firmware when host is in sleep
 786          * mode should de-configure host sleep. We should skip the
 787          * host sleep configuration command itself though
 788          */
 789         if (priv && (host_cmd->command !=
 790              cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH))) {
 791                 if (adapter->hs_activated) {
 792                         adapter->is_hs_configured = false;
 793                         mwifiex_hs_activated_event(priv, false);
 794                 }
 795         }
 796
 797         return ret;
 798 }
 799
 800 /*
 801  * This function handles the command response.
 802  *
 803  * After processing, the function cleans the command node and puts
 804  * it back to the command free queue.
 805  */
 806 int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
 807 {
 808         struct host_cmd_ds_command *resp;
 809         struct mwifiex_private *priv =
 810                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 811         int ret = 0;
 812         uint16_t orig_cmdresp_no;
 813         uint16_t cmdresp_no;
 814         uint16_t cmdresp_result;
 815         unsigned long flags;
 816
 817         /* Now we got response from FW, cancel the command timer */
 818         del_timer_sync(&adapter->cmd_timer);
 819
 820         if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
 821                 resp = (struct host_cmd_ds_command *) adapter->upld_buf;
 822                 mwifiex_dbg(adapter, ERROR,
 823                             "CMD_RESP: NULL curr_cmd, %#x\n",
 824                             le16_to_cpu(resp->command));
 825                 return -1;
 826         }
 827
 828         adapter->is_cmd_timedout = 0;
 829
 830         resp = (struct host_cmd_ds_command *) adapter->curr_cmd->resp_skb->data;
 831         if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
 832                 /* Copy original response back to response buffer */
 833                 struct mwifiex_ds_misc_cmd *hostcmd;
 834                 uint16_t size = le16_to_cpu(resp->size);
 835                 mwifiex_dbg(adapter, INFO,
 836                             "info: host cmd resp size = %d\n", size);
 837                 size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
 838                 if (adapter->curr_cmd->data_buf) {
 839                         hostcmd = adapter->curr_cmd->data_buf;
 840                         hostcmd->len = size;
 841                         memcpy(hostcmd->cmd, resp, size);
 842                 }
 843         }
 844         orig_cmdresp_no = le16_to_cpu(resp->command);
 845
 846         /* Get BSS number and corresponding priv */
 847         priv = mwifiex_get_priv_by_id(adapter,
 848                              HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
 849                              HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
 850         if (!priv)
 851                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 852         /* Clear RET_BIT from HostCmd */
 853         resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);
 854
 855         cmdresp_no = le16_to_cpu(resp->command);
 856         cmdresp_result = le16_to_cpu(resp->result);
 857
 858         /* Save the last command response to debug log */
 859         adapter->dbg.last_cmd_resp_index =
 860                         (adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
 861         adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
 862                                                                 orig_cmdresp_no;
 863
 864         mwifiex_dbg(adapter, CMD,
 865                     "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n",
 866                     orig_cmdresp_no, cmdresp_result,
 867                     le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
 868         mwifiex_dbg_dump(adapter, CMD_D, "CMD_RESP buffer:", resp,
 869                          le16_to_cpu(resp->size));
 870
 871         if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
 872                 mwifiex_dbg(adapter, ERROR, "CMD_RESP: invalid cmd resp\n");
 873                 if (adapter->curr_cmd->wait_q_enabled)
 874                         adapter->cmd_wait_q.status = -1;
 875
 876                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 877                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 878                 adapter->curr_cmd = NULL;
 879                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 880                 return -1;
 881         }
 882
 883         if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
 884                 adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
 885                 if ((cmdresp_result == HostCmd_RESULT_OK) &&
 886                     (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
 887                         ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
 888         } else {
 889                 /* handle response */
 890                 ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
 891         }
 892
 893         /* Check init command response */
 894         if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
 895                 if (ret) {
 896                         mwifiex_dbg(adapter, ERROR,
 897                                     "%s: cmd %#x failed during\t"
 898                                     "initialization\n", __func__, cmdresp_no);
 899                         mwifiex_init_fw_complete(adapter);
 900                         return -1;
 901                 } else if (adapter->last_init_cmd == cmdresp_no)
 902                         adapter->hw_status = MWIFIEX_HW_STATUS_INIT_DONE;
 903         }
 904
 905         if (adapter->curr_cmd) {
 906                 if (adapter->curr_cmd->wait_q_enabled)
 907                         adapter->cmd_wait_q.status = ret;
 908
 909                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 910
 911                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, flags);
 912                 adapter->curr_cmd = NULL;
 913                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, flags);
 914         }
 915
 916         return ret;
 917 }
 918
 919 /*
 920  * This function handles the timeout of command sending.
 921  *
 922  * It will re-send the same command again.
 923  */
 924 void
 925 mwifiex_cmd_timeout_func(struct timer_list *t)
 926 {
 927         struct mwifiex_adapter *adapter = from_timer(adapter, t, cmd_timer);
 928         struct cmd_ctrl_node *cmd_node;
 929
 930         adapter->is_cmd_timedout = 1;
 931         if (!adapter->curr_cmd) {
 932                 mwifiex_dbg(adapter, ERROR,
 933                             "cmd: empty curr_cmd\n");
 934                 return;
 935         }
 936         cmd_node = adapter->curr_cmd;
 937         if (cmd_node) {
 938                 adapter->dbg.timeout_cmd_id =
 939                         adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
 940                 adapter->dbg.timeout_cmd_act =
 941                         adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
 942                 mwifiex_dbg(adapter, MSG,
 943                             "%s: Timeout cmd id = %#x, act = %#x\n", __func__,
 944                             adapter->dbg.timeout_cmd_id,
 945                             adapter->dbg.timeout_cmd_act);
 946
 947                 mwifiex_dbg(adapter, MSG,
 948                             "num_data_h2c_failure = %d\n",
 949                             adapter->dbg.num_tx_host_to_card_failure);
 950                 mwifiex_dbg(adapter, MSG,
 951                             "num_cmd_h2c_failure = %d\n",
 952                             adapter->dbg.num_cmd_host_to_card_failure);
 953
 954                 mwifiex_dbg(adapter, MSG,
 955                             "is_cmd_timedout = %d\n",
 956                             adapter->is_cmd_timedout);
 957                 mwifiex_dbg(adapter, MSG,
 958                             "num_tx_timeout = %d\n",
 959                             adapter->dbg.num_tx_timeout);
 960
 961                 mwifiex_dbg(adapter, MSG,
 962                             "last_cmd_index = %d\n",
 963                             adapter->dbg.last_cmd_index);
 964                 mwifiex_dbg(adapter, MSG,
 965                             "last_cmd_id: %*ph\n",
 966                             (int)sizeof(adapter->dbg.last_cmd_id),
 967                             adapter->dbg.last_cmd_id);
 968                 mwifiex_dbg(adapter, MSG,
 969                             "last_cmd_act: %*ph\n",
 970                             (int)sizeof(adapter->dbg.last_cmd_act),
 971                             adapter->dbg.last_cmd_act);
 972
 973                 mwifiex_dbg(adapter, MSG,
 974                             "last_cmd_resp_index = %d\n",
 975                             adapter->dbg.last_cmd_resp_index);
 976                 mwifiex_dbg(adapter, MSG,
 977                             "last_cmd_resp_id: %*ph\n",
 978                             (int)sizeof(adapter->dbg.last_cmd_resp_id),
 979                             adapter->dbg.last_cmd_resp_id);
 980
 981                 mwifiex_dbg(adapter, MSG,
 982                             "last_event_index = %d\n",
 983                             adapter->dbg.last_event_index);
 984                 mwifiex_dbg(adapter, MSG,
 985                             "last_event: %*ph\n",
 986                             (int)sizeof(adapter->dbg.last_event),
 987                             adapter->dbg.last_event);
 988
 989                 mwifiex_dbg(adapter, MSG,
 990                             "data_sent=%d cmd_sent=%d\n",
 991                             adapter->data_sent, adapter->cmd_sent);
 992
 993                 mwifiex_dbg(adapter, MSG,
 994                             "ps_mode=%d ps_state=%d\n",
 995                             adapter->ps_mode, adapter->ps_state);
 996
 997                 if (cmd_node->wait_q_enabled) {
 998                         adapter->cmd_wait_q.status = -ETIMEDOUT;
 999                         mwifiex_cancel_pending_ioctl(adapter);
1000                 }
1001         }
1002         if (adapter->hw_status == MWIFIEX_HW_STATUS_INITIALIZING) {
1003                 mwifiex_init_fw_complete(adapter);
1004                 return;
1005         }
1006
1007         if (adapter->if_ops.device_dump)
1008                 adapter->if_ops.device_dump(adapter);
1009
1010         if (adapter->if_ops.card_reset)
1011                 adapter->if_ops.card_reset(adapter);
1012 }
1013
1014 void
1015 mwifiex_cancel_pending_scan_cmd(struct mwifiex_adapter *adapter)
1016 {
1017         struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
1018         unsigned long flags;
1019
1020         /* Cancel all pending scan command */
1021         spin_lock_irqsave(&adapter->scan_pending_q_lock, flags);
1022         list_for_each_entry_safe(cmd_node, tmp_node,
1023                                  &adapter->scan_pending_q, list) {
1024                 list_del(&cmd_node->list);
1025                 cmd_node->wait_q_enabled = false;
1026                 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
1027         }
1028         spin_unlock_irqrestore(&adapter->scan_pending_q_lock, flags);
1029 }
1030
1031 /*
1032  * This function cancels all the pending commands.
1033  *
1034  * The current command, all commands in command pending queue and all scan
1035  * commands in scan pending queue are cancelled. All the completion callbacks
1036  * are called with failure status to ensure cleanup.
1037  */
1038 void
1039 mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
1040 {
1041         struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;
1042         unsigned long flags, cmd_flags;
1043
1044         spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1045         /* Cancel current cmd */
1046         if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
1047                 adapter->cmd_wait_q.status = -1;
1048                 mwifiex_complete_cmd(adapter, adapter->curr_cmd);
1049                 adapter->curr_cmd->wait_q_enabled = false;
1050                 /* no recycle probably wait for response */
1051         }
1052         /* Cancel all pending command */
1053         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
1054         list_for_each_entry_safe(cmd_node, tmp_node,
1055                                  &adapter->cmd_pending_q, list) {
1056                 list_del(&cmd_node->list);
1057
1058                 if (cmd_node->wait_q_enabled)
1059                         adapter->cmd_wait_q.status = -1;
1060                 mwifiex_recycle_cmd_node(adapter, cmd_node);
1061         }
1062         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
1063         spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1064
1065         mwifiex_cancel_scan(adapter);
1066 }
1067
1068 /*
1069  * This function cancels all pending commands that matches with
1070  * the given IOCTL request.
1071  *
1072  * Both the current command buffer and the pending command queue are
1073  * searched for matching IOCTL request. The completion callback of
1074  * the matched command is called with failure status to ensure cleanup.
1075  * In case of scan commands, all pending commands in scan pending queue
1076  * are cancelled.
1077  */
1078 static void
1079 mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
1080 {
1081         struct cmd_ctrl_node *cmd_node = NULL;
1082         unsigned long cmd_flags;
1083
1084         if ((adapter->curr_cmd) &&
1085             (adapter->curr_cmd->wait_q_enabled)) {
1086                 spin_lock_irqsave(&adapter->mwifiex_cmd_lock, cmd_flags);
1087                 cmd_node = adapter->curr_cmd;
1088                 /* setting curr_cmd to NULL is quite dangerous, because
1089                  * mwifiex_process_cmdresp checks curr_cmd to be != NULL
1090                  * at the beginning then relies on it and dereferences
1091                  * it at will
1092                  * this probably works since mwifiex_cmd_timeout_func
1093                  * is the only caller of this function and responses
1094                  * at that point
1095                  */
1096                 adapter->curr_cmd = NULL;
1097                 spin_unlock_irqrestore(&adapter->mwifiex_cmd_lock, cmd_flags);
1098
1099                 mwifiex_recycle_cmd_node(adapter, cmd_node);
1100         }
1101
1102         mwifiex_cancel_scan(adapter);
1103 }
1104
1105 /*
1106  * This function sends the sleep confirm command to firmware, if
1107  * possible.
1108  *
1109  * The sleep confirm command cannot be issued if command response,
1110  * data response or event response is awaiting handling, or if we
1111  * are in the middle of sending a command, or expecting a command
1112  * response.
1113  */
1114 void
1115 mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
1116 {
1117         if (!adapter->cmd_sent && !atomic_read(&adapter->tx_hw_pending) &&
1118             !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
1119                 mwifiex_dnld_sleep_confirm_cmd(adapter);
1120         else
1121                 mwifiex_dbg(adapter, CMD,
1122                             "cmd: Delay Sleep Confirm (%s%s%s%s)\n",
1123                             (adapter->cmd_sent) ? "D" : "",
1124                             atomic_read(&adapter->tx_hw_pending) ? "T" : "",
1125                             (adapter->curr_cmd) ? "C" : "",
1126                             (IS_CARD_RX_RCVD(adapter)) ? "R" : "");
1127 }
1128
1129 /*
1130  * This function sends a Host Sleep activated event to applications.
1131  *
1132  * This event is generated by the driver, with a blank event body.
1133  */
1134 void
1135 mwifiex_hs_activated_event(struct mwifiex_private *priv, u8 activated)
1136 {
1137         if (activated) {
1138                 if (priv->adapter->is_hs_configured) {
1139                         priv->adapter->hs_activated = true;
1140                         mwifiex_update_rxreor_flags(priv->adapter,
1141                                                     RXREOR_FORCE_NO_DROP);
1142                         mwifiex_dbg(priv->adapter, EVENT,
1143                                     "event: hs_activated\n");
1144                         priv->adapter->hs_activate_wait_q_woken = true;
1145                         wake_up_interruptible(
1146                                 &priv->adapter->hs_activate_wait_q);
1147                 } else {
1148                         mwifiex_dbg(priv->adapter, EVENT,
1149                                     "event: HS not configured\n");
1150                 }
1151         } else {
1152                 mwifiex_dbg(priv->adapter, EVENT,
1153                             "event: hs_deactivated\n");
1154                 priv->adapter->hs_activated = false;
1155         }
1156 }
1157
1158 /*
1159  * This function handles the command response of a Host Sleep configuration
1160  * command.
1161  *
1162  * Handling includes changing the header fields into CPU format
1163  * and setting the current host sleep activation status in driver.
1164  *
1165  * In case host sleep status change, the function generates an event to
1166  * notify the applications.
1167  */
1168 int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
1169                               struct host_cmd_ds_command *resp)
1170 {
1171         struct mwifiex_adapter *adapter = priv->adapter;
1172         struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
1173                 &resp->params.opt_hs_cfg;
1174         uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);
1175
1176         if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE) &&
1177             adapter->iface_type != MWIFIEX_USB) {
1178                 mwifiex_hs_activated_event(priv, true);
1179                 return 0;
1180         } else {
1181                 mwifiex_dbg(adapter, CMD,
1182                             "cmd: CMD_RESP: HS_CFG cmd reply\t"
1183                             " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
1184                             resp->result, conditions,
1185                             phs_cfg->params.hs_config.gpio,
1186                             phs_cfg->params.hs_config.gap);
1187         }
1188         if (conditions != HS_CFG_CANCEL) {
1189                 adapter->is_hs_configured = true;
1190                 if (adapter->iface_type == MWIFIEX_USB)
1191                         mwifiex_hs_activated_event(priv, true);
1192         } else {
1193                 adapter->is_hs_configured = false;
1194                 if (adapter->hs_activated)
1195                         mwifiex_hs_activated_event(priv, false);
1196         }
1197
1198         return 0;
1199 }
1200
1201 /*
1202  * This function wakes up the adapter and generates a Host Sleep
1203  * cancel event on receiving the power up interrupt.
1204  */
1205 void
1206 mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
1207 {
1208         mwifiex_dbg(adapter, INFO,
1209                     "info: %s: auto cancelling host sleep\t"
1210                     "since there is interrupt from the firmware\n",
1211                     __func__);
1212
1213         adapter->if_ops.wakeup(adapter);
1214         adapter->hs_activated = false;
1215         adapter->is_hs_configured = false;
1216         adapter->is_suspended = false;
1217         mwifiex_hs_activated_event(mwifiex_get_priv(adapter,
1218                                                     MWIFIEX_BSS_ROLE_ANY),
1219                                    false);
1220 }
1221 EXPORT_SYMBOL_GPL(mwifiex_process_hs_config);
1222
1223 /*
1224  * This function handles the command response of a sleep confirm command.
1225  *
1226  * The function sets the card state to SLEEP if the response indicates success.
1227  */
1228 void
1229 mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
1230                                    u8 *pbuf, u32 upld_len)
1231 {
1232         struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
1233         struct mwifiex_private *priv =
1234                 mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1235         uint16_t result = le16_to_cpu(cmd->result);
1236         uint16_t command = le16_to_cpu(cmd->command);
1237         uint16_t seq_num = le16_to_cpu(cmd->seq_num);
1238
1239         if (!upld_len) {
1240                 mwifiex_dbg(adapter, ERROR,
1241                             "%s: cmd size is 0\n", __func__);
1242                 return;
1243         }
1244
1245         mwifiex_dbg(adapter, CMD,
1246                     "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n",
1247                     command, result, le16_to_cpu(cmd->size), seq_num);
1248
1249         /* Get BSS number and corresponding priv */
1250         priv = mwifiex_get_priv_by_id(adapter, HostCmd_GET_BSS_NO(seq_num),
1251                                       HostCmd_GET_BSS_TYPE(seq_num));
1252         if (!priv)
1253                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
1254
1255         /* Update sequence number */
1256         seq_num = HostCmd_GET_SEQ_NO(seq_num);
1257         /* Clear RET_BIT from HostCmd */
1258         command &= HostCmd_CMD_ID_MASK;
1259
1260         if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
1261                 mwifiex_dbg(adapter, ERROR,
1262                             "%s: rcvd unexpected resp for cmd %#x, result = %x\n",
1263                             __func__, command, result);
1264                 return;
1265         }
1266
1267         if (result) {
1268                 mwifiex_dbg(adapter, ERROR,
1269                             "%s: sleep confirm cmd failed\n",
1270                             __func__);
1271                 adapter->pm_wakeup_card_req = false;
1272                 adapter->ps_state = PS_STATE_AWAKE;
1273                 return;
1274         }
1275         adapter->pm_wakeup_card_req = true;
1276         if (adapter->is_hs_configured)
1277                 mwifiex_hs_activated_event(mwifiex_get_priv
1278                                                 (adapter, MWIFIEX_BSS_ROLE_ANY),
1279                                            true);
1280         adapter->ps_state = PS_STATE_SLEEP;
1281         cmd->command = cpu_to_le16(command);
1282         cmd->seq_num = cpu_to_le16(seq_num);
1283 }
1284 EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);
1285
1286 /*
1287  * This function prepares an enhanced power mode command.
1288  *
1289  * This function can be used to disable power save or to configure
1290  * power save with auto PS or STA PS or auto deep sleep.
1291  *
1292  * Preparation includes -
1293  *      - Setting command ID, action and proper size
1294  *      - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
1295  *        auto deep sleep TLV (as required)
1296  *      - Ensuring correct endian-ness
1297  */
1298 int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
1299                                struct host_cmd_ds_command *cmd,
1300                                u16 cmd_action, uint16_t ps_bitmap,
1301                                struct mwifiex_ds_auto_ds *auto_ds)
1302 {
1303         struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
1304                 &cmd->params.psmode_enh;
1305         u8 *tlv;
1306         u16 cmd_size = 0;
1307
1308         cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
1309         if (cmd_action == DIS_AUTO_PS) {
1310                 psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
1311                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1312                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1313                                         sizeof(psmode_enh->params.ps_bitmap));
1314         } else if (cmd_action == GET_PS) {
1315                 psmode_enh->action = cpu_to_le16(GET_PS);
1316                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1317                 cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
1318                                         sizeof(psmode_enh->params.ps_bitmap));
1319         } else if (cmd_action == EN_AUTO_PS) {
1320                 psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
1321                 psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
1322                 cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
1323                                         sizeof(psmode_enh->params.ps_bitmap);
1324                 tlv = (u8 *) cmd + cmd_size;
1325                 if (ps_bitmap & BITMAP_STA_PS) {
1326                         struct mwifiex_adapter *adapter = priv->adapter;
1327                         struct mwifiex_ie_types_ps_param *ps_tlv =
1328                                 (struct mwifiex_ie_types_ps_param *) tlv;
1329                         struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
1330                         ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
1331                         ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
1332                                         sizeof(struct mwifiex_ie_types_header));
1333                         cmd_size += sizeof(*ps_tlv);
1334                         tlv += sizeof(*ps_tlv);
1335                         mwifiex_dbg(priv->adapter, CMD,
1336                                     "cmd: PS Command: Enter PS\n");
1337                         ps_mode->null_pkt_interval =
1338                                         cpu_to_le16(adapter->null_pkt_interval);
1339                         ps_mode->multiple_dtims =
1340                                         cpu_to_le16(adapter->multiple_dtim);
1341                         ps_mode->bcn_miss_timeout =
1342                                         cpu_to_le16(adapter->bcn_miss_time_out);
1343                         ps_mode->local_listen_interval =
1344                                 cpu_to_le16(adapter->local_listen_interval);
1345                         ps_mode->adhoc_wake_period =
1346                                 cpu_to_le16(adapter->adhoc_awake_period);
1347                         ps_mode->delay_to_ps =
1348                                         cpu_to_le16(adapter->delay_to_ps);
1349                         ps_mode->mode = cpu_to_le16(adapter->enhanced_ps_mode);
1350
1351                 }
1352                 if (ps_bitmap & BITMAP_AUTO_DS) {
1353                         struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
1354                                 (struct mwifiex_ie_types_auto_ds_param *) tlv;
1355                         u16 idletime = 0;
1356
1357                         auto_ds_tlv->header.type =
1358                                 cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
1359                         auto_ds_tlv->header.len =
1360                                 cpu_to_le16(sizeof(*auto_ds_tlv) -
1361                                         sizeof(struct mwifiex_ie_types_header));
1362                         cmd_size += sizeof(*auto_ds_tlv);
1363                         tlv += sizeof(*auto_ds_tlv);
1364                         if (auto_ds)
1365                                 idletime = auto_ds->idle_time;
1366                         mwifiex_dbg(priv->adapter, CMD,
1367                                     "cmd: PS Command: Enter Auto Deep Sleep\n");
1368                         auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
1369                 }
1370                 cmd->size = cpu_to_le16(cmd_size);
1371         }
1372         return 0;
1373 }
1374
1375 /*
1376  * This function handles the command response of an enhanced power mode
1377  * command.
1378  *
1379  * Handling includes changing the header fields into CPU format
1380  * and setting the current enhanced power mode in driver.
1381  */
1382 int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
1383                                struct host_cmd_ds_command *resp,
1384                                struct mwifiex_ds_pm_cfg *pm_cfg)
1385 {
1386         struct mwifiex_adapter *adapter = priv->adapter;
1387         struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
1388                 &resp->params.psmode_enh;
1389         uint16_t action = le16_to_cpu(ps_mode->action);
1390         uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
1391         uint16_t auto_ps_bitmap =
1392                 le16_to_cpu(ps_mode->params.ps_bitmap);
1393
1394         mwifiex_dbg(adapter, INFO,
1395                     "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
1396                     __func__, resp->result, action);
1397         if (action == EN_AUTO_PS) {
1398                 if (auto_ps_bitmap & BITMAP_AUTO_DS) {
1399                         mwifiex_dbg(adapter, CMD,
1400                                     "cmd: Enabled auto deep sleep\n");
1401                         priv->adapter->is_deep_sleep = true;
1402                 }
1403                 if (auto_ps_bitmap & BITMAP_STA_PS) {
1404                         mwifiex_dbg(adapter, CMD,
1405                                     "cmd: Enabled STA power save\n");
1406                         if (adapter->sleep_period.period)
1407                                 mwifiex_dbg(adapter, CMD,
1408                                             "cmd: set to uapsd/pps mode\n");
1409                 }
1410         } else if (action == DIS_AUTO_PS) {
1411                 if (ps_bitmap & BITMAP_AUTO_DS) {
1412                         priv->adapter->is_deep_sleep = false;
1413                         mwifiex_dbg(adapter, CMD,
1414                                     "cmd: Disabled auto deep sleep\n");
1415                 }
1416                 if (ps_bitmap & BITMAP_STA_PS) {
1417                         mwifiex_dbg(adapter, CMD,
1418                                     "cmd: Disabled STA power save\n");
1419                         if (adapter->sleep_period.period) {
1420                                 adapter->delay_null_pkt = false;
1421                                 adapter->tx_lock_flag = false;
1422                                 adapter->pps_uapsd_mode = false;
1423                         }
1424                 }
1425         } else if (action == GET_PS) {
1426                 if (ps_bitmap & BITMAP_STA_PS)
1427                         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
1428                 else
1429                         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
1430
1431                 mwifiex_dbg(adapter, CMD,
1432                             "cmd: ps_bitmap=%#x\n", ps_bitmap);
1433
1434                 if (pm_cfg) {
1435                         /* This section is for get power save mode */
1436                         if (ps_bitmap & BITMAP_STA_PS)
1437                                 pm_cfg->param.ps_mode = 1;
1438                         else
1439                                 pm_cfg->param.ps_mode = 0;
1440                 }
1441         }
1442         return 0;
1443 }
1444
1445 /*
1446  * This function prepares command to get hardware specifications.
1447  *
1448  * Preparation includes -
1449  *      - Setting command ID, action and proper size
1450  *      - Setting permanent address parameter
1451  *      - Ensuring correct endian-ness
1452  */
1453 int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
1454                             struct host_cmd_ds_command *cmd)
1455 {
1456         struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;
1457
1458         cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
1459         cmd->size =
1460                 cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
1461         memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);
1462
1463         return 0;
1464 }
1465
1466 /*
1467  * This function handles the command response of get hardware
1468  * specifications.
1469  *
1470  * Handling includes changing the header fields into CPU format
1471  * and saving/updating the following parameters in driver -
1472  *      - Firmware capability information
1473  *      - Firmware band settings
1474  *      - Ad-hoc start band and channel
1475  *      - Ad-hoc 11n activation status
1476  *      - Firmware release number
1477  *      - Number of antennas
1478  *      - Hardware address
1479  *      - Hardware interface version
1480  *      - Firmware version
1481  *      - Region code
1482  *      - 11n capabilities
1483  *      - MCS support fields
1484  *      - MP end port
1485  */
1486 int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
1487                             struct host_cmd_ds_command *resp)
1488 {
1489         struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
1490         struct mwifiex_adapter *adapter = priv->adapter;
1491         struct mwifiex_ie_types_header *tlv;
1492         struct hw_spec_api_rev *api_rev;
1493         u16 resp_size, api_id;
1494         int i, left_len, parsed_len = 0;
1495
1496         adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);
1497
1498         if (IS_SUPPORT_MULTI_BANDS(adapter))
1499                 adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
1500         else
1501                 adapter->fw_bands = BAND_B;
1502
1503         adapter->config_bands = adapter->fw_bands;
1504
1505         if (adapter->fw_bands & BAND_A) {
1506                 if (adapter->fw_bands & BAND_GN) {
1507                         adapter->config_bands |= BAND_AN;
1508                         adapter->fw_bands |= BAND_AN;
1509                 }
1510                 if (adapter->fw_bands & BAND_AN) {
1511                         adapter->adhoc_start_band = BAND_A | BAND_AN;
1512                         adapter->adhoc_11n_enabled = true;
1513                 } else {
1514                         adapter->adhoc_start_band = BAND_A;
1515                 }
1516                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
1517         } else if (adapter->fw_bands & BAND_GN) {
1518                 adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
1519                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1520                 adapter->adhoc_11n_enabled = true;
1521         } else if (adapter->fw_bands & BAND_G) {
1522                 adapter->adhoc_start_band = BAND_G | BAND_B;
1523                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1524         } else if (adapter->fw_bands & BAND_B) {
1525                 adapter->adhoc_start_band = BAND_B;
1526                 priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
1527         }
1528
1529         adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
1530         adapter->fw_api_ver = (adapter->fw_release_number >> 16) & 0xff;
1531         adapter->number_of_antenna =
1532                         le16_to_cpu(hw_spec->number_of_antenna) & 0xf;
1533
1534         if (le32_to_cpu(hw_spec->dot_11ac_dev_cap)) {
1535                 adapter->is_hw_11ac_capable = true;
1536
1537                 /* Copy 11AC cap */
1538                 adapter->hw_dot_11ac_dev_cap =
1539                                         le32_to_cpu(hw_spec->dot_11ac_dev_cap);
1540                 adapter->usr_dot_11ac_dev_cap_bg = adapter->hw_dot_11ac_dev_cap
1541                                         & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK;
1542                 adapter->usr_dot_11ac_dev_cap_a = adapter->hw_dot_11ac_dev_cap
1543                                         & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK;
1544
1545                 /* Copy 11AC mcs */
1546                 adapter->hw_dot_11ac_mcs_support =
1547                                 le32_to_cpu(hw_spec->dot_11ac_mcs_support);
1548                 adapter->usr_dot_11ac_mcs_support =
1549                                         adapter->hw_dot_11ac_mcs_support;
1550         } else {
1551                 adapter->is_hw_11ac_capable = false;
1552         }
1553
1554         resp_size = le16_to_cpu(resp->size) - S_DS_GEN;
1555         if (resp_size > sizeof(struct host_cmd_ds_get_hw_spec)) {
1556                 /* we have variable HW SPEC information */
1557                 left_len = resp_size - sizeof(struct host_cmd_ds_get_hw_spec);
1558                 while (left_len > sizeof(struct mwifiex_ie_types_header)) {
1559                         tlv = (void *)&hw_spec->tlvs + parsed_len;
1560                         switch (le16_to_cpu(tlv->type)) {
1561                         case TLV_TYPE_API_REV:
1562                                 api_rev = (struct hw_spec_api_rev *)tlv;
1563                                 api_id = le16_to_cpu(api_rev->api_id);
1564                                 switch (api_id) {
1565                                 case KEY_API_VER_ID:
1566                                         adapter->key_api_major_ver =
1567                                                         api_rev->major_ver;
1568                                         adapter->key_api_minor_ver =
1569                                                         api_rev->minor_ver;
1570                                         mwifiex_dbg(adapter, INFO,
1571                                                     "key_api v%d.%d\n",
1572                                                     adapter->key_api_major_ver,
1573                                                     adapter->key_api_minor_ver);
1574                                         break;
1575                                 case FW_API_VER_ID:
1576                                         adapter->fw_api_ver =
1577                                                         api_rev->major_ver;
1578                                         mwifiex_dbg(adapter, INFO,
1579                                                     "Firmware api version %d\n",
1580                                                     adapter->fw_api_ver);
1581                                         break;
1582                                 default:
1583                                         mwifiex_dbg(adapter, FATAL,
1584                                                     "Unknown api_id: %d\n",
1585                                                     api_id);
1586                                         break;
1587                                 }
1588                                 break;
1589                         default:
1590                                 mwifiex_dbg(adapter, FATAL,
1591                                             "Unknown GET_HW_SPEC TLV type: %#x\n",
1592                                             le16_to_cpu(tlv->type));
1593                                 break;
1594                         }
1595                         parsed_len += le16_to_cpu(tlv->len) +
1596                                       sizeof(struct mwifiex_ie_types_header);
1597                         left_len -= le16_to_cpu(tlv->len) +
1598                                       sizeof(struct mwifiex_ie_types_header);
1599                 }
1600         }
1601
1602         mwifiex_dbg(adapter, INFO,
1603                     "info: GET_HW_SPEC: fw_release_number- %#x\n",
1604                     adapter->fw_release_number);
1605         mwifiex_dbg(adapter, INFO,
1606                     "info: GET_HW_SPEC: permanent addr: %pM\n",
1607                     hw_spec->permanent_addr);
1608         mwifiex_dbg(adapter, INFO,
1609                     "info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n",
1610                     le16_to_cpu(hw_spec->hw_if_version),
1611                     le16_to_cpu(hw_spec->version));
1612
1613         ether_addr_copy(priv->adapter->perm_addr, hw_spec->permanent_addr);
1614         adapter->region_code = le16_to_cpu(hw_spec->region_code);
1615
1616         for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
1617                 /* Use the region code to search for the index */
1618                 if (adapter->region_code == region_code_index[i])
1619                         break;
1620
1621         /* If it's unidentified region code, use the default (world) */
1622         if (i >= MWIFIEX_MAX_REGION_CODE) {
1623                 adapter->region_code = 0x00;
1624                 mwifiex_dbg(adapter, WARN,
1625                             "cmd: unknown region code, use default (USA)\n");
1626         }
1627
1628         adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
1629         adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
1630         adapter->user_dev_mcs_support = adapter->hw_dev_mcs_support;
1631
1632         if (adapter->if_ops.update_mp_end_port)
1633                 adapter->if_ops.update_mp_end_port(adapter,
1634                                         le16_to_cpu(hw_spec->mp_end_port));
1635
1636         if (adapter->fw_api_ver == MWIFIEX_FW_V15)
1637                 adapter->scan_chan_gap_enabled = true;
1638
1639         return 0;
1640 }
1641
1642 /* This function handles the command response of hs wakeup reason
1643  * command.
1644  */
1645 int mwifiex_ret_wakeup_reason(struct mwifiex_private *priv,
1646                               struct host_cmd_ds_command *resp,
1647                               struct host_cmd_ds_wakeup_reason *wakeup_reason)
1648 {
1649         wakeup_reason->wakeup_reason =
1650                 resp->params.hs_wakeup_reason.wakeup_reason;
1651
1652         return 0;
1653 }