drivers/net/wireless/mwifiex/sdio.c

   1 /*
   2  * Marvell Wireless LAN device driver: SDIO specific handling
   3  *
   4  * Copyright (C) 2011-2014, Marvell International Ltd.
   5  *
   6  * This software file (the "File") is distributed by Marvell International
   7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   8  * (the "License").  You may use, redistribute and/or modify this File in
   9  * accordance with the terms and conditions of the License, a copy of which
  10  * is available by writing to the Free Software Foundation, Inc.,
  11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
  12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  13  *
  14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  17  * this warranty disclaimer.
  18  */
  19
  20 #include <linux/firmware.h>
  21
  22 #include "decl.h"
  23 #include "ioctl.h"
  24 #include "util.h"
  25 #include "fw.h"
  26 #include "main.h"
  27 #include "wmm.h"
  28 #include "11n.h"
  29 #include "sdio.h"
  30
  31
  32 #define SDIO_VERSION    "1.0"
  33
  34 /* The mwifiex_sdio_remove() callback function is called when
  35  * user removes this module from kernel space or ejects
  36  * the card from the slot. The driver handles these 2 cases
  37  * differently.
  38  * If the user is removing the module, the few commands (FUNC_SHUTDOWN,
  39  * HS_CANCEL etc.) are sent to the firmware.
  40  * If the card is removed, there is no need to send these command.
  41  *
  42  * The variable 'user_rmmod' is used to distinguish these two
  43  * scenarios. This flag is initialized as FALSE in case the card
  44  * is removed, and will be set to TRUE for module removal when
  45  * module_exit function is called.
  46  */
  47 static u8 user_rmmod;
  48
  49 static struct mwifiex_if_ops sdio_ops;
  50
  51 static struct semaphore add_remove_card_sem;
  52
  53 static struct memory_type_mapping mem_type_mapping_tbl[] = {
  54         {"ITCM", NULL, 0, 0xF0},
  55         {"DTCM", NULL, 0, 0xF1},
  56         {"SQRAM", NULL, 0, 0xF2},
  57         {"APU", NULL, 0, 0xF3},
  58         {"CIU", NULL, 0, 0xF4},
  59         {"ICU", NULL, 0, 0xF5},
  60         {"MAC", NULL, 0, 0xF6},
  61         {"EXT7", NULL, 0, 0xF7},
  62         {"EXT8", NULL, 0, 0xF8},
  63         {"EXT9", NULL, 0, 0xF9},
  64         {"EXT10", NULL, 0, 0xFA},
  65         {"EXT11", NULL, 0, 0xFB},
  66         {"EXT12", NULL, 0, 0xFC},
  67         {"EXT13", NULL, 0, 0xFD},
  68         {"EXTLAST", NULL, 0, 0xFE},
  69 };
  70
  71 /*
  72  * SDIO probe.
  73  *
  74  * This function probes an mwifiex device and registers it. It allocates
  75  * the card structure, enables SDIO function number and initiates the
  76  * device registration and initialization procedure by adding a logical
  77  * interface.
  78  */
  79 static int
  80 mwifiex_sdio_probe(struct sdio_func *func, const struct sdio_device_id *id)
  81 {
  82         int ret;
  83         struct sdio_mmc_card *card = NULL;
  84
  85         pr_debug("info: vendor=0x%4.04X device=0x%4.04X class=%d function=%d\n",
  86                  func->vendor, func->device, func->class, func->num);
  87
  88         card = kzalloc(sizeof(struct sdio_mmc_card), GFP_KERNEL);
  89         if (!card)
  90                 return -ENOMEM;
  91
  92         card->func = func;
  93
  94         func->card->quirks |= MMC_QUIRK_BLKSZ_FOR_BYTE_MODE;
  95
  96         if (id->driver_data) {
  97                 struct mwifiex_sdio_device *data = (void *)id->driver_data;
  98
  99                 card->firmware = data->firmware;
 100                 card->reg = data->reg;
 101                 card->max_ports = data->max_ports;
 102                 card->mp_agg_pkt_limit = data->mp_agg_pkt_limit;
 103                 card->supports_sdio_new_mode = data->supports_sdio_new_mode;
 104                 card->has_control_mask = data->has_control_mask;
 105                 card->tx_buf_size = data->tx_buf_size;
 106                 card->mp_tx_agg_buf_size = data->mp_tx_agg_buf_size;
 107                 card->mp_rx_agg_buf_size = data->mp_rx_agg_buf_size;
 108                 card->supports_fw_dump = data->supports_fw_dump;
 109         }
 110
 111         sdio_claim_host(func);
 112         ret = sdio_enable_func(func);
 113         sdio_release_host(func);
 114
 115         if (ret) {
 116                 pr_err("%s: failed to enable function\n", __func__);
 117                 kfree(card);
 118                 return -EIO;
 119         }
 120
 121         if (mwifiex_add_card(card, &add_remove_card_sem, &sdio_ops,
 122                              MWIFIEX_SDIO)) {
 123                 pr_err("%s: add card failed\n", __func__);
 124                 kfree(card);
 125                 sdio_claim_host(func);
 126                 ret = sdio_disable_func(func);
 127                 sdio_release_host(func);
 128                 ret = -1;
 129         }
 130
 131         return ret;
 132 }
 133
 134 /*
 135  * SDIO resume.
 136  *
 137  * Kernel needs to suspend all functions separately. Therefore all
 138  * registered functions must have drivers with suspend and resume
 139  * methods. Failing that the kernel simply removes the whole card.
 140  *
 141  * If already not resumed, this function turns on the traffic and
 142  * sends a host sleep cancel request to the firmware.
 143  */
 144 static int mwifiex_sdio_resume(struct device *dev)
 145 {
 146         struct sdio_func *func = dev_to_sdio_func(dev);
 147         struct sdio_mmc_card *card;
 148         struct mwifiex_adapter *adapter;
 149         mmc_pm_flag_t pm_flag = 0;
 150
 151         if (func) {
 152                 pm_flag = sdio_get_host_pm_caps(func);
 153                 card = sdio_get_drvdata(func);
 154                 if (!card || !card->adapter) {
 155                         pr_err("resume: invalid card or adapter\n");
 156                         return 0;
 157                 }
 158         } else {
 159                 pr_err("resume: sdio_func is not specified\n");
 160                 return 0;
 161         }
 162
 163         adapter = card->adapter;
 164
 165         if (!adapter->is_suspended) {
 166                 dev_warn(adapter->dev, "device already resumed\n");
 167                 return 0;
 168         }
 169
 170         adapter->is_suspended = false;
 171
 172         /* Disable Host Sleep */
 173         mwifiex_cancel_hs(mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_STA),
 174                           MWIFIEX_ASYNC_CMD);
 175
 176         return 0;
 177 }
 178
 179 /*
 180  * SDIO remove.
 181  *
 182  * This function removes the interface and frees up the card structure.
 183  */
 184 static void
 185 mwifiex_sdio_remove(struct sdio_func *func)
 186 {
 187         struct sdio_mmc_card *card;
 188         struct mwifiex_adapter *adapter;
 189         struct mwifiex_private *priv;
 190
 191         pr_debug("info: SDIO func num=%d\n", func->num);
 192
 193         card = sdio_get_drvdata(func);
 194         if (!card)
 195                 return;
 196
 197         adapter = card->adapter;
 198         if (!adapter || !adapter->priv_num)
 199                 return;
 200
 201         cancel_work_sync(&adapter->iface_work);
 202
 203         if (user_rmmod) {
 204                 if (adapter->is_suspended)
 205                         mwifiex_sdio_resume(adapter->dev);
 206
 207                 mwifiex_deauthenticate_all(adapter);
 208
 209                 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 210                 mwifiex_disable_auto_ds(priv);
 211                 mwifiex_init_shutdown_fw(priv, MWIFIEX_FUNC_SHUTDOWN);
 212         }
 213
 214         mwifiex_remove_card(card->adapter, &add_remove_card_sem);
 215 }
 216
 217 /*
 218  * SDIO suspend.
 219  *
 220  * Kernel needs to suspend all functions separately. Therefore all
 221  * registered functions must have drivers with suspend and resume
 222  * methods. Failing that the kernel simply removes the whole card.
 223  *
 224  * If already not suspended, this function allocates and sends a host
 225  * sleep activate request to the firmware and turns off the traffic.
 226  */
 227 static int mwifiex_sdio_suspend(struct device *dev)
 228 {
 229         struct sdio_func *func = dev_to_sdio_func(dev);
 230         struct sdio_mmc_card *card;
 231         struct mwifiex_adapter *adapter;
 232         mmc_pm_flag_t pm_flag = 0;
 233         int ret = 0;
 234
 235         if (func) {
 236                 pm_flag = sdio_get_host_pm_caps(func);
 237                 pr_debug("cmd: %s: suspend: PM flag = 0x%x\n",
 238                          sdio_func_id(func), pm_flag);
 239                 if (!(pm_flag & MMC_PM_KEEP_POWER)) {
 240                         pr_err("%s: cannot remain alive while host is"
 241                                 " suspended\n", sdio_func_id(func));
 242                         return -ENOSYS;
 243                 }
 244
 245                 card = sdio_get_drvdata(func);
 246                 if (!card || !card->adapter) {
 247                         pr_err("suspend: invalid card or adapter\n");
 248                         return 0;
 249                 }
 250         } else {
 251                 pr_err("suspend: sdio_func is not specified\n");
 252                 return 0;
 253         }
 254
 255         adapter = card->adapter;
 256
 257         /* Enable the Host Sleep */
 258         if (!mwifiex_enable_hs(adapter)) {
 259                 dev_err(adapter->dev, "cmd: failed to suspend\n");
 260                 adapter->hs_enabling = false;
 261                 return -EFAULT;
 262         }
 263
 264         dev_dbg(adapter->dev, "cmd: suspend with MMC_PM_KEEP_POWER\n");
 265         ret = sdio_set_host_pm_flags(func, MMC_PM_KEEP_POWER);
 266
 267         /* Indicate device suspended */
 268         adapter->is_suspended = true;
 269         adapter->hs_enabling = false;
 270
 271         return ret;
 272 }
 273
 274 /* Device ID for SD8786 */
 275 #define SDIO_DEVICE_ID_MARVELL_8786   (0x9116)
 276 /* Device ID for SD8787 */
 277 #define SDIO_DEVICE_ID_MARVELL_8787   (0x9119)
 278 /* Device ID for SD8797 */
 279 #define SDIO_DEVICE_ID_MARVELL_8797   (0x9129)
 280 /* Device ID for SD8897 */
 281 #define SDIO_DEVICE_ID_MARVELL_8897   (0x912d)
 282
 283 /* WLAN IDs */
 284 static const struct sdio_device_id mwifiex_ids[] = {
 285         {SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8786),
 286                 .driver_data = (unsigned long) &mwifiex_sdio_sd8786},
 287         {SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8787),
 288                 .driver_data = (unsigned long) &mwifiex_sdio_sd8787},
 289         {SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8797),
 290                 .driver_data = (unsigned long) &mwifiex_sdio_sd8797},
 291         {SDIO_DEVICE(SDIO_VENDOR_ID_MARVELL, SDIO_DEVICE_ID_MARVELL_8897),
 292                 .driver_data = (unsigned long) &mwifiex_sdio_sd8897},
 293         {},
 294 };
 295
 296 MODULE_DEVICE_TABLE(sdio, mwifiex_ids);
 297
 298 static const struct dev_pm_ops mwifiex_sdio_pm_ops = {
 299         .suspend = mwifiex_sdio_suspend,
 300         .resume = mwifiex_sdio_resume,
 301 };
 302
 303 static struct sdio_driver mwifiex_sdio = {
 304         .name = "mwifiex_sdio",
 305         .id_table = mwifiex_ids,
 306         .probe = mwifiex_sdio_probe,
 307         .remove = mwifiex_sdio_remove,
 308         .drv = {
 309                 .owner = THIS_MODULE,
 310                 .pm = &mwifiex_sdio_pm_ops,
 311         }
 312 };
 313
 314 /* Write data into SDIO card register. Caller claims SDIO device. */
 315 static int
 316 mwifiex_write_reg_locked(struct sdio_func *func, u32 reg, u8 data)
 317 {
 318         int ret = -1;
 319         sdio_writeb(func, data, reg, &ret);
 320         return ret;
 321 }
 322
 323 /*
 324  * This function writes data into SDIO card register.
 325  */
 326 static int
 327 mwifiex_write_reg(struct mwifiex_adapter *adapter, u32 reg, u8 data)
 328 {
 329         struct sdio_mmc_card *card = adapter->card;
 330         int ret;
 331
 332         sdio_claim_host(card->func);
 333         ret = mwifiex_write_reg_locked(card->func, reg, data);
 334         sdio_release_host(card->func);
 335
 336         return ret;
 337 }
 338
 339 /*
 340  * This function reads data from SDIO card register.
 341  */
 342 static int
 343 mwifiex_read_reg(struct mwifiex_adapter *adapter, u32 reg, u8 *data)
 344 {
 345         struct sdio_mmc_card *card = adapter->card;
 346         int ret = -1;
 347         u8 val;
 348
 349         sdio_claim_host(card->func);
 350         val = sdio_readb(card->func, reg, &ret);
 351         sdio_release_host(card->func);
 352
 353         *data = val;
 354
 355         return ret;
 356 }
 357
 358 /*
 359  * This function writes multiple data into SDIO card memory.
 360  *
 361  * This does not work in suspended mode.
 362  */
 363 static int
 364 mwifiex_write_data_sync(struct mwifiex_adapter *adapter,
 365                         u8 *buffer, u32 pkt_len, u32 port)
 366 {
 367         struct sdio_mmc_card *card = adapter->card;
 368         int ret;
 369         u8 blk_mode =
 370                 (port & MWIFIEX_SDIO_BYTE_MODE_MASK) ? BYTE_MODE : BLOCK_MODE;
 371         u32 blk_size = (blk_mode == BLOCK_MODE) ? MWIFIEX_SDIO_BLOCK_SIZE : 1;
 372         u32 blk_cnt =
 373                 (blk_mode ==
 374                  BLOCK_MODE) ? (pkt_len /
 375                                 MWIFIEX_SDIO_BLOCK_SIZE) : pkt_len;
 376         u32 ioport = (port & MWIFIEX_SDIO_IO_PORT_MASK);
 377
 378         if (adapter->is_suspended) {
 379                 dev_err(adapter->dev,
 380                         "%s: not allowed while suspended\n", __func__);
 381                 return -1;
 382         }
 383
 384         sdio_claim_host(card->func);
 385
 386         ret = sdio_writesb(card->func, ioport, buffer, blk_cnt * blk_size);
 387
 388         sdio_release_host(card->func);
 389
 390         return ret;
 391 }
 392
 393 /*
 394  * This function reads multiple data from SDIO card memory.
 395  */
 396 static int mwifiex_read_data_sync(struct mwifiex_adapter *adapter, u8 *buffer,
 397                                   u32 len, u32 port, u8 claim)
 398 {
 399         struct sdio_mmc_card *card = adapter->card;
 400         int ret;
 401         u8 blk_mode = (port & MWIFIEX_SDIO_BYTE_MODE_MASK) ? BYTE_MODE
 402                        : BLOCK_MODE;
 403         u32 blk_size = (blk_mode == BLOCK_MODE) ? MWIFIEX_SDIO_BLOCK_SIZE : 1;
 404         u32 blk_cnt = (blk_mode == BLOCK_MODE) ? (len / MWIFIEX_SDIO_BLOCK_SIZE)
 405                         : len;
 406         u32 ioport = (port & MWIFIEX_SDIO_IO_PORT_MASK);
 407
 408         if (claim)
 409                 sdio_claim_host(card->func);
 410
 411         ret = sdio_readsb(card->func, buffer, ioport, blk_cnt * blk_size);
 412
 413         if (claim)
 414                 sdio_release_host(card->func);
 415
 416         return ret;
 417 }
 418
 419 /*
 420  * This function wakes up the card.
 421  *
 422  * A host power up command is written to the card configuration
 423  * register to wake up the card.
 424  */
 425 static int mwifiex_pm_wakeup_card(struct mwifiex_adapter *adapter)
 426 {
 427         dev_dbg(adapter->dev, "event: wakeup device...\n");
 428
 429         return mwifiex_write_reg(adapter, CONFIGURATION_REG, HOST_POWER_UP);
 430 }
 431
 432 /*
 433  * This function is called after the card has woken up.
 434  *
 435  * The card configuration register is reset.
 436  */
 437 static int mwifiex_pm_wakeup_card_complete(struct mwifiex_adapter *adapter)
 438 {
 439         dev_dbg(adapter->dev, "cmd: wakeup device completed\n");
 440
 441         return mwifiex_write_reg(adapter, CONFIGURATION_REG, 0);
 442 }
 443
 444 /*
 445  * This function is used to initialize IO ports for the
 446  * chipsets supporting SDIO new mode eg SD8897.
 447  */
 448 static int mwifiex_init_sdio_new_mode(struct mwifiex_adapter *adapter)
 449 {
 450         u8 reg;
 451         struct sdio_mmc_card *card = adapter->card;
 452
 453         adapter->ioport = MEM_PORT;
 454
 455         /* enable sdio new mode */
 456         if (mwifiex_read_reg(adapter, card->reg->card_cfg_2_1_reg, &reg))
 457                 return -1;
 458         if (mwifiex_write_reg(adapter, card->reg->card_cfg_2_1_reg,
 459                               reg | CMD53_NEW_MODE))
 460                 return -1;
 461
 462         /* Configure cmd port and enable reading rx length from the register */
 463         if (mwifiex_read_reg(adapter, card->reg->cmd_cfg_0, &reg))
 464                 return -1;
 465         if (mwifiex_write_reg(adapter, card->reg->cmd_cfg_0,
 466                               reg | CMD_PORT_RD_LEN_EN))
 467                 return -1;
 468
 469         /* Enable Dnld/Upld ready auto reset for cmd port after cmd53 is
 470          * completed
 471          */
 472         if (mwifiex_read_reg(adapter, card->reg->cmd_cfg_1, &reg))
 473                 return -1;
 474         if (mwifiex_write_reg(adapter, card->reg->cmd_cfg_1,
 475                               reg | CMD_PORT_AUTO_EN))
 476                 return -1;
 477
 478         return 0;
 479 }
 480
 481 /* This function initializes the IO ports.
 482  *
 483  * The following operations are performed -
 484  *      - Read the IO ports (0, 1 and 2)
 485  *      - Set host interrupt Reset-To-Read to clear
 486  *      - Set auto re-enable interrupt
 487  */
 488 static int mwifiex_init_sdio_ioport(struct mwifiex_adapter *adapter)
 489 {
 490         u8 reg;
 491         struct sdio_mmc_card *card = adapter->card;
 492
 493         adapter->ioport = 0;
 494
 495         if (card->supports_sdio_new_mode) {
 496                 if (mwifiex_init_sdio_new_mode(adapter))
 497                         return -1;
 498                 goto cont;
 499         }
 500
 501         /* Read the IO port */
 502         if (!mwifiex_read_reg(adapter, card->reg->io_port_0_reg, &reg))
 503                 adapter->ioport |= (reg & 0xff);
 504         else
 505                 return -1;
 506
 507         if (!mwifiex_read_reg(adapter, card->reg->io_port_1_reg, &reg))
 508                 adapter->ioport |= ((reg & 0xff) << 8);
 509         else
 510                 return -1;
 511
 512         if (!mwifiex_read_reg(adapter, card->reg->io_port_2_reg, &reg))
 513                 adapter->ioport |= ((reg & 0xff) << 16);
 514         else
 515                 return -1;
 516 cont:
 517         pr_debug("info: SDIO FUNC1 IO port: %#x\n", adapter->ioport);
 518
 519         /* Set Host interrupt reset to read to clear */
 520         if (!mwifiex_read_reg(adapter, card->reg->host_int_rsr_reg, &reg))
 521                 mwifiex_write_reg(adapter, card->reg->host_int_rsr_reg,
 522                                   reg | card->reg->sdio_int_mask);
 523         else
 524                 return -1;
 525
 526         /* Dnld/Upld ready set to auto reset */
 527         if (!mwifiex_read_reg(adapter, card->reg->card_misc_cfg_reg, &reg))
 528                 mwifiex_write_reg(adapter, card->reg->card_misc_cfg_reg,
 529                                   reg | AUTO_RE_ENABLE_INT);
 530         else
 531                 return -1;
 532
 533         return 0;
 534 }
 535
 536 /*
 537  * This function sends data to the card.
 538  */
 539 static int mwifiex_write_data_to_card(struct mwifiex_adapter *adapter,
 540                                       u8 *payload, u32 pkt_len, u32 port)
 541 {
 542         u32 i = 0;
 543         int ret;
 544
 545         do {
 546                 ret = mwifiex_write_data_sync(adapter, payload, pkt_len, port);
 547                 if (ret) {
 548                         i++;
 549                         dev_err(adapter->dev, "host_to_card, write iomem"
 550                                         " (%d) failed: %d\n", i, ret);
 551                         if (mwifiex_write_reg(adapter, CONFIGURATION_REG, 0x04))
 552                                 dev_err(adapter->dev, "write CFG reg failed\n");
 553
 554                         ret = -1;
 555                         if (i > MAX_WRITE_IOMEM_RETRY)
 556                                 return ret;
 557                 }
 558         } while (ret == -1);
 559
 560         return ret;
 561 }
 562
 563 /*
 564  * This function gets the read port.
 565  *
 566  * If control port bit is set in MP read bitmap, the control port
 567  * is returned, otherwise the current read port is returned and
 568  * the value is increased (provided it does not reach the maximum
 569  * limit, in which case it is reset to 1)
 570  */
 571 static int mwifiex_get_rd_port(struct mwifiex_adapter *adapter, u8 *port)
 572 {
 573         struct sdio_mmc_card *card = adapter->card;
 574         const struct mwifiex_sdio_card_reg *reg = card->reg;
 575         u32 rd_bitmap = card->mp_rd_bitmap;
 576
 577         dev_dbg(adapter->dev, "data: mp_rd_bitmap=0x%08x\n", rd_bitmap);
 578
 579         if (card->supports_sdio_new_mode) {
 580                 if (!(rd_bitmap & reg->data_port_mask))
 581                         return -1;
 582         } else {
 583                 if (!(rd_bitmap & (CTRL_PORT_MASK | reg->data_port_mask)))
 584                         return -1;
 585         }
 586
 587         if ((card->has_control_mask) &&
 588             (card->mp_rd_bitmap & CTRL_PORT_MASK)) {
 589                 card->mp_rd_bitmap &= (u32) (~CTRL_PORT_MASK);
 590                 *port = CTRL_PORT;
 591                 dev_dbg(adapter->dev, "data: port=%d mp_rd_bitmap=0x%08x\n",
 592                         *port, card->mp_rd_bitmap);
 593                 return 0;
 594         }
 595
 596         if (!(card->mp_rd_bitmap & (1 << card->curr_rd_port)))
 597                 return -1;
 598
 599         /* We are now handling the SDIO data ports */
 600         card->mp_rd_bitmap &= (u32)(~(1 << card->curr_rd_port));
 601         *port = card->curr_rd_port;
 602
 603         if (++card->curr_rd_port == card->max_ports)
 604                 card->curr_rd_port = reg->start_rd_port;
 605
 606         dev_dbg(adapter->dev,
 607                 "data: port=%d mp_rd_bitmap=0x%08x -> 0x%08x\n",
 608                 *port, rd_bitmap, card->mp_rd_bitmap);
 609
 610         return 0;
 611 }
 612
 613 /*
 614  * This function gets the write port for data.
 615  *
 616  * The current write port is returned if available and the value is
 617  * increased (provided it does not reach the maximum limit, in which
 618  * case it is reset to 1)
 619  */
 620 static int mwifiex_get_wr_port_data(struct mwifiex_adapter *adapter, u32 *port)
 621 {
 622         struct sdio_mmc_card *card = adapter->card;
 623         const struct mwifiex_sdio_card_reg *reg = card->reg;
 624         u32 wr_bitmap = card->mp_wr_bitmap;
 625
 626         dev_dbg(adapter->dev, "data: mp_wr_bitmap=0x%08x\n", wr_bitmap);
 627
 628         if (!(wr_bitmap & card->mp_data_port_mask)) {
 629                 adapter->data_sent = true;
 630                 return -EBUSY;
 631         }
 632
 633         if (card->mp_wr_bitmap & (1 << card->curr_wr_port)) {
 634                 card->mp_wr_bitmap &= (u32) (~(1 << card->curr_wr_port));
 635                 *port = card->curr_wr_port;
 636                 if (++card->curr_wr_port == card->mp_end_port)
 637                         card->curr_wr_port = reg->start_wr_port;
 638         } else {
 639                 adapter->data_sent = true;
 640                 return -EBUSY;
 641         }
 642
 643         if ((card->has_control_mask) && (*port == CTRL_PORT)) {
 644                 dev_err(adapter->dev,
 645                         "invalid data port=%d cur port=%d mp_wr_bitmap=0x%08x -> 0x%08x\n",
 646                         *port, card->curr_wr_port, wr_bitmap,
 647                         card->mp_wr_bitmap);
 648                 return -1;
 649         }
 650
 651         dev_dbg(adapter->dev, "data: port=%d mp_wr_bitmap=0x%08x -> 0x%08x\n",
 652                 *port, wr_bitmap, card->mp_wr_bitmap);
 653
 654         return 0;
 655 }
 656
 657 /*
 658  * This function polls the card status.
 659  */
 660 static int
 661 mwifiex_sdio_poll_card_status(struct mwifiex_adapter *adapter, u8 bits)
 662 {
 663         struct sdio_mmc_card *card = adapter->card;
 664         u32 tries;
 665         u8 cs;
 666
 667         for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
 668                 if (mwifiex_read_reg(adapter, card->reg->poll_reg, &cs))
 669                         break;
 670                 else if ((cs & bits) == bits)
 671                         return 0;
 672
 673                 usleep_range(10, 20);
 674         }
 675
 676         dev_err(adapter->dev, "poll card status failed, tries = %d\n", tries);
 677
 678         return -1;
 679 }
 680
 681 /*
 682  * This function reads the firmware status.
 683  */
 684 static int
 685 mwifiex_sdio_read_fw_status(struct mwifiex_adapter *adapter, u16 *dat)
 686 {
 687         struct sdio_mmc_card *card = adapter->card;
 688         const struct mwifiex_sdio_card_reg *reg = card->reg;
 689         u8 fws0, fws1;
 690
 691         if (mwifiex_read_reg(adapter, reg->status_reg_0, &fws0))
 692                 return -1;
 693
 694         if (mwifiex_read_reg(adapter, reg->status_reg_1, &fws1))
 695                 return -1;
 696
 697         *dat = (u16) ((fws1 << 8) | fws0);
 698
 699         return 0;
 700 }
 701
 702 /*
 703  * This function disables the host interrupt.
 704  *
 705  * The host interrupt mask is read, the disable bit is reset and
 706  * written back to the card host interrupt mask register.
 707  */
 708 static void mwifiex_sdio_disable_host_int(struct mwifiex_adapter *adapter)
 709 {
 710         struct sdio_mmc_card *card = adapter->card;
 711         struct sdio_func *func = card->func;
 712
 713         sdio_claim_host(func);
 714         mwifiex_write_reg_locked(func, card->reg->host_int_mask_reg, 0);
 715         sdio_release_irq(func);
 716         sdio_release_host(func);
 717 }
 718
 719 /*
 720  * This function reads the interrupt status from card.
 721  */
 722 static void mwifiex_interrupt_status(struct mwifiex_adapter *adapter)
 723 {
 724         struct sdio_mmc_card *card = adapter->card;
 725         u8 sdio_ireg;
 726         unsigned long flags;
 727
 728         if (mwifiex_read_data_sync(adapter, card->mp_regs,
 729                                    card->reg->max_mp_regs,
 730                                    REG_PORT | MWIFIEX_SDIO_BYTE_MODE_MASK, 0)) {
 731                 dev_err(adapter->dev, "read mp_regs failed\n");
 732                 return;
 733         }
 734
 735         sdio_ireg = card->mp_regs[card->reg->host_int_status_reg];
 736         if (sdio_ireg) {
 737                 /*
 738                  * DN_LD_HOST_INT_STATUS and/or UP_LD_HOST_INT_STATUS
 739                  * For SDIO new mode CMD port interrupts
 740                  *      DN_LD_CMD_PORT_HOST_INT_STATUS and/or
 741                  *      UP_LD_CMD_PORT_HOST_INT_STATUS
 742                  * Clear the interrupt status register
 743                  */
 744                 dev_dbg(adapter->dev, "int: sdio_ireg = %#x\n", sdio_ireg);
 745                 spin_lock_irqsave(&adapter->int_lock, flags);
 746                 adapter->int_status |= sdio_ireg;
 747                 spin_unlock_irqrestore(&adapter->int_lock, flags);
 748         }
 749 }
 750
 751 /*
 752  * SDIO interrupt handler.
 753  *
 754  * This function reads the interrupt status from firmware and handles
 755  * the interrupt in current thread (ksdioirqd) right away.
 756  */
 757 static void
 758 mwifiex_sdio_interrupt(struct sdio_func *func)
 759 {
 760         struct mwifiex_adapter *adapter;
 761         struct sdio_mmc_card *card;
 762
 763         card = sdio_get_drvdata(func);
 764         if (!card || !card->adapter) {
 765                 pr_debug("int: func=%p card=%p adapter=%p\n",
 766                          func, card, card ? card->adapter : NULL);
 767                 return;
 768         }
 769         adapter = card->adapter;
 770
 771         if (!adapter->pps_uapsd_mode && adapter->ps_state == PS_STATE_SLEEP)
 772                 adapter->ps_state = PS_STATE_AWAKE;
 773
 774         mwifiex_interrupt_status(adapter);
 775         mwifiex_main_process(adapter);
 776 }
 777
 778 /*
 779  * This function enables the host interrupt.
 780  *
 781  * The host interrupt enable mask is written to the card
 782  * host interrupt mask register.
 783  */
 784 static int mwifiex_sdio_enable_host_int(struct mwifiex_adapter *adapter)
 785 {
 786         struct sdio_mmc_card *card = adapter->card;
 787         struct sdio_func *func = card->func;
 788         int ret;
 789
 790         sdio_claim_host(func);
 791
 792         /* Request the SDIO IRQ */
 793         ret = sdio_claim_irq(func, mwifiex_sdio_interrupt);
 794         if (ret) {
 795                 dev_err(adapter->dev, "claim irq failed: ret=%d\n", ret);
 796                 goto out;
 797         }
 798
 799         /* Simply write the mask to the register */
 800         ret = mwifiex_write_reg_locked(func, card->reg->host_int_mask_reg,
 801                                        card->reg->host_int_enable);
 802         if (ret) {
 803                 dev_err(adapter->dev, "enable host interrupt failed\n");
 804                 sdio_release_irq(func);
 805         }
 806
 807 out:
 808         sdio_release_host(func);
 809         return ret;
 810 }
 811
 812 /*
 813  * This function sends a data buffer to the card.
 814  */
 815 static int mwifiex_sdio_card_to_host(struct mwifiex_adapter *adapter,
 816                                      u32 *type, u8 *buffer,
 817                                      u32 npayload, u32 ioport)
 818 {
 819         int ret;
 820         u32 nb;
 821
 822         if (!buffer) {
 823                 dev_err(adapter->dev, "%s: buffer is NULL\n", __func__);
 824                 return -1;
 825         }
 826
 827         ret = mwifiex_read_data_sync(adapter, buffer, npayload, ioport, 1);
 828
 829         if (ret) {
 830                 dev_err(adapter->dev, "%s: read iomem failed: %d\n", __func__,
 831                         ret);
 832                 return -1;
 833         }
 834
 835         nb = le16_to_cpu(*(__le16 *) (buffer));
 836         if (nb > npayload) {
 837                 dev_err(adapter->dev, "%s: invalid packet, nb=%d npayload=%d\n",
 838                         __func__, nb, npayload);
 839                 return -1;
 840         }
 841
 842         *type = le16_to_cpu(*(__le16 *) (buffer + 2));
 843
 844         return ret;
 845 }
 846
 847 /*
 848  * This function downloads the firmware to the card.
 849  *
 850  * Firmware is downloaded to the card in blocks. Every block download
 851  * is tested for CRC errors, and retried a number of times before
 852  * returning failure.
 853  */
 854 static int mwifiex_prog_fw_w_helper(struct mwifiex_adapter *adapter,
 855                                     struct mwifiex_fw_image *fw)
 856 {
 857         struct sdio_mmc_card *card = adapter->card;
 858         const struct mwifiex_sdio_card_reg *reg = card->reg;
 859         int ret;
 860         u8 *firmware = fw->fw_buf;
 861         u32 firmware_len = fw->fw_len;
 862         u32 offset = 0;
 863         u8 base0, base1;
 864         u8 *fwbuf;
 865         u16 len = 0;
 866         u32 txlen, tx_blocks = 0, tries;
 867         u32 i = 0;
 868
 869         if (!firmware_len) {
 870                 dev_err(adapter->dev,
 871                         "firmware image not found! Terminating download\n");
 872                 return -1;
 873         }
 874
 875         dev_dbg(adapter->dev, "info: downloading FW image (%d bytes)\n",
 876                 firmware_len);
 877
 878         /* Assume that the allocated buffer is 8-byte aligned */
 879         fwbuf = kzalloc(MWIFIEX_UPLD_SIZE, GFP_KERNEL);
 880         if (!fwbuf)
 881                 return -ENOMEM;
 882
 883         /* Perform firmware data transfer */
 884         do {
 885                 /* The host polls for the DN_LD_CARD_RDY and CARD_IO_READY
 886                    bits */
 887                 ret = mwifiex_sdio_poll_card_status(adapter, CARD_IO_READY |
 888                                                     DN_LD_CARD_RDY);
 889                 if (ret) {
 890                         dev_err(adapter->dev, "FW download with helper:"
 891                                 " poll status timeout @ %d\n", offset);
 892                         goto done;
 893                 }
 894
 895                 /* More data? */
 896                 if (offset >= firmware_len)
 897                         break;
 898
 899                 for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
 900                         ret = mwifiex_read_reg(adapter, reg->base_0_reg,
 901                                                &base0);
 902                         if (ret) {
 903                                 dev_err(adapter->dev,
 904                                         "dev BASE0 register read failed: "
 905                                         "base0=%#04X(%d). Terminating dnld\n",
 906                                         base0, base0);
 907                                 goto done;
 908                         }
 909                         ret = mwifiex_read_reg(adapter, reg->base_1_reg,
 910                                                &base1);
 911                         if (ret) {
 912                                 dev_err(adapter->dev,
 913                                         "dev BASE1 register read failed: "
 914                                         "base1=%#04X(%d). Terminating dnld\n",
 915                                         base1, base1);
 916                                 goto done;
 917                         }
 918                         len = (u16) (((base1 & 0xff) << 8) | (base0 & 0xff));
 919
 920                         if (len)
 921                                 break;
 922
 923                         usleep_range(10, 20);
 924                 }
 925
 926                 if (!len) {
 927                         break;
 928                 } else if (len > MWIFIEX_UPLD_SIZE) {
 929                         dev_err(adapter->dev,
 930                                 "FW dnld failed @ %d, invalid length %d\n",
 931                                 offset, len);
 932                         ret = -1;
 933                         goto done;
 934                 }
 935
 936                 txlen = len;
 937
 938                 if (len & BIT(0)) {
 939                         i++;
 940                         if (i > MAX_WRITE_IOMEM_RETRY) {
 941                                 dev_err(adapter->dev,
 942                                         "FW dnld failed @ %d, over max retry\n",
 943                                         offset);
 944                                 ret = -1;
 945                                 goto done;
 946                         }
 947                         dev_err(adapter->dev, "CRC indicated by the helper:"
 948                                 " len = 0x%04X, txlen = %d\n", len, txlen);
 949                         len &= ~BIT(0);
 950                         /* Setting this to 0 to resend from same offset */
 951                         txlen = 0;
 952                 } else {
 953                         i = 0;
 954
 955                         /* Set blocksize to transfer - checking for last
 956                            block */
 957                         if (firmware_len - offset < txlen)
 958                                 txlen = firmware_len - offset;
 959
 960                         tx_blocks = (txlen + MWIFIEX_SDIO_BLOCK_SIZE - 1)
 961                                     / MWIFIEX_SDIO_BLOCK_SIZE;
 962
 963                         /* Copy payload to buffer */
 964                         memmove(fwbuf, &firmware[offset], txlen);
 965                 }
 966
 967                 ret = mwifiex_write_data_sync(adapter, fwbuf, tx_blocks *
 968                                               MWIFIEX_SDIO_BLOCK_SIZE,
 969                                               adapter->ioport);
 970                 if (ret) {
 971                         dev_err(adapter->dev,
 972                                 "FW download, write iomem (%d) failed @ %d\n",
 973                                 i, offset);
 974                         if (mwifiex_write_reg(adapter, CONFIGURATION_REG, 0x04))
 975                                 dev_err(adapter->dev, "write CFG reg failed\n");
 976
 977                         ret = -1;
 978                         goto done;
 979                 }
 980
 981                 offset += txlen;
 982         } while (true);
 983
 984         dev_dbg(adapter->dev, "info: FW download over, size %d bytes\n",
 985                 offset);
 986
 987         ret = 0;
 988 done:
 989         kfree(fwbuf);
 990         return ret;
 991 }
 992
 993 /*
 994  * This function checks the firmware status in card.
 995  *
 996  * The winner interface is also determined by this function.
 997  */
 998 static int mwifiex_check_fw_status(struct mwifiex_adapter *adapter,
 999                                    u32 poll_num)
1000 {
1001         struct sdio_mmc_card *card = adapter->card;
1002         int ret = 0;
1003         u16 firmware_stat;
1004         u32 tries;
1005         u8 winner_status;
1006
1007         /* Wait for firmware initialization event */
1008         for (tries = 0; tries < poll_num; tries++) {
1009                 ret = mwifiex_sdio_read_fw_status(adapter, &firmware_stat);
1010                 if (ret)
1011                         continue;
1012                 if (firmware_stat == FIRMWARE_READY_SDIO) {
1013                         ret = 0;
1014                         break;
1015                 } else {
1016                         msleep(100);
1017                         ret = -1;
1018                 }
1019         }
1020
1021         if (ret) {
1022                 if (mwifiex_read_reg
1023                     (adapter, card->reg->status_reg_0, &winner_status))
1024                         winner_status = 0;
1025
1026                 if (winner_status)
1027                         adapter->winner = 0;
1028                 else
1029                         adapter->winner = 1;
1030         }
1031         return ret;
1032 }
1033
1034 /*
1035  * This function decodes a received packet.
1036  *
1037  * Based on the type, the packet is treated as either a data, or
1038  * a command response, or an event, and the correct handler
1039  * function is invoked.
1040  */
1041 static int mwifiex_decode_rx_packet(struct mwifiex_adapter *adapter,
1042                                     struct sk_buff *skb, u32 upld_typ)
1043 {
1044         u8 *cmd_buf;
1045         __le16 *curr_ptr = (__le16 *)skb->data;
1046         u16 pkt_len = le16_to_cpu(*curr_ptr);
1047
1048         skb_trim(skb, pkt_len);
1049         skb_pull(skb, INTF_HEADER_LEN);
1050
1051         switch (upld_typ) {
1052         case MWIFIEX_TYPE_DATA:
1053                 dev_dbg(adapter->dev, "info: --- Rx: Data packet ---\n");
1054                 if (adapter->rx_work_enabled) {
1055                         skb_queue_tail(&adapter->rx_data_q, skb);
1056                         adapter->data_received = true;
1057                         atomic_inc(&adapter->rx_pending);
1058                 } else {
1059                         mwifiex_handle_rx_packet(adapter, skb);
1060                 }
1061                 break;
1062
1063         case MWIFIEX_TYPE_CMD:
1064                 dev_dbg(adapter->dev, "info: --- Rx: Cmd Response ---\n");
1065                 /* take care of curr_cmd = NULL case */
1066                 if (!adapter->curr_cmd) {
1067                         cmd_buf = adapter->upld_buf;
1068
1069                         if (adapter->ps_state == PS_STATE_SLEEP_CFM)
1070                                 mwifiex_process_sleep_confirm_resp(adapter,
1071                                                                    skb->data,
1072                                                                    skb->len);
1073
1074                         memcpy(cmd_buf, skb->data,
1075                                min_t(u32, MWIFIEX_SIZE_OF_CMD_BUFFER,
1076                                      skb->len));
1077
1078                         dev_kfree_skb_any(skb);
1079                 } else {
1080                         adapter->cmd_resp_received = true;
1081                         adapter->curr_cmd->resp_skb = skb;
1082                 }
1083                 break;
1084
1085         case MWIFIEX_TYPE_EVENT:
1086                 dev_dbg(adapter->dev, "info: --- Rx: Event ---\n");
1087                 adapter->event_cause = le32_to_cpu(*(__le32 *) skb->data);
1088
1089                 if ((skb->len > 0) && (skb->len  < MAX_EVENT_SIZE))
1090                         memcpy(adapter->event_body,
1091                                skb->data + MWIFIEX_EVENT_HEADER_LEN,
1092                                skb->len);
1093
1094                 /* event cause has been saved to adapter->event_cause */
1095                 adapter->event_received = true;
1096                 adapter->event_skb = skb;
1097
1098                 break;
1099
1100         default:
1101                 dev_err(adapter->dev, "unknown upload type %#x\n", upld_typ);
1102                 dev_kfree_skb_any(skb);
1103                 break;
1104         }
1105
1106         return 0;
1107 }
1108
1109 /*
1110  * This function transfers received packets from card to driver, performing
1111  * aggregation if required.
1112  *
1113  * For data received on control port, or if aggregation is disabled, the
1114  * received buffers are uploaded as separate packets. However, if aggregation
1115  * is enabled and required, the buffers are copied onto an aggregation buffer,
1116  * provided there is space left, processed and finally uploaded.
1117  */
1118 static int mwifiex_sdio_card_to_host_mp_aggr(struct mwifiex_adapter *adapter,
1119                                              struct sk_buff *skb, u8 port)
1120 {
1121         struct sdio_mmc_card *card = adapter->card;
1122         s32 f_do_rx_aggr = 0;
1123         s32 f_do_rx_cur = 0;
1124         s32 f_aggr_cur = 0;
1125         struct sk_buff *skb_deaggr;
1126         u32 pind;
1127         u32 pkt_len, pkt_type, mport;
1128         u8 *curr_ptr;
1129         u32 rx_len = skb->len;
1130
1131         if ((card->has_control_mask) && (port == CTRL_PORT)) {
1132                 /* Read the command Resp without aggr */
1133                 dev_dbg(adapter->dev, "info: %s: no aggregation for cmd "
1134                         "response\n", __func__);
1135
1136                 f_do_rx_cur = 1;
1137                 goto rx_curr_single;
1138         }
1139
1140         if (!card->mpa_rx.enabled) {
1141                 dev_dbg(adapter->dev, "info: %s: rx aggregation disabled\n",
1142                         __func__);
1143
1144                 f_do_rx_cur = 1;
1145                 goto rx_curr_single;
1146         }
1147
1148         if ((!card->has_control_mask && (card->mp_rd_bitmap &
1149                                          card->reg->data_port_mask)) ||
1150             (card->has_control_mask && (card->mp_rd_bitmap &
1151                                         (~((u32) CTRL_PORT_MASK))))) {
1152                 /* Some more data RX pending */
1153                 dev_dbg(adapter->dev, "info: %s: not last packet\n", __func__);
1154
1155                 if (MP_RX_AGGR_IN_PROGRESS(card)) {
1156                         if (MP_RX_AGGR_BUF_HAS_ROOM(card, skb->len)) {
1157                                 f_aggr_cur = 1;
1158                         } else {
1159                                 /* No room in Aggr buf, do rx aggr now */
1160                                 f_do_rx_aggr = 1;
1161                                 f_do_rx_cur = 1;
1162                         }
1163                 } else {
1164                         /* Rx aggr not in progress */
1165                         f_aggr_cur = 1;
1166                 }
1167
1168         } else {
1169                 /* No more data RX pending */
1170                 dev_dbg(adapter->dev, "info: %s: last packet\n", __func__);
1171
1172                 if (MP_RX_AGGR_IN_PROGRESS(card)) {
1173                         f_do_rx_aggr = 1;
1174                         if (MP_RX_AGGR_BUF_HAS_ROOM(card, skb->len))
1175                                 f_aggr_cur = 1;
1176                         else
1177                                 /* No room in Aggr buf, do rx aggr now */
1178                                 f_do_rx_cur = 1;
1179                 } else {
1180                         f_do_rx_cur = 1;
1181                 }
1182         }
1183
1184         if (f_aggr_cur) {
1185                 dev_dbg(adapter->dev, "info: current packet aggregation\n");
1186                 /* Curr pkt can be aggregated */
1187                 mp_rx_aggr_setup(card, skb, port);
1188
1189                 if (MP_RX_AGGR_PKT_LIMIT_REACHED(card) ||
1190                     mp_rx_aggr_port_limit_reached(card)) {
1191                         dev_dbg(adapter->dev, "info: %s: aggregated packet "
1192                                 "limit reached\n", __func__);
1193                         /* No more pkts allowed in Aggr buf, rx it */
1194                         f_do_rx_aggr = 1;
1195                 }
1196         }
1197
1198         if (f_do_rx_aggr) {
1199                 /* do aggr RX now */
1200                 dev_dbg(adapter->dev, "info: do_rx_aggr: num of packets: %d\n",
1201                         card->mpa_rx.pkt_cnt);
1202
1203                 if (card->supports_sdio_new_mode) {
1204                         int i;
1205                         u32 port_count;
1206
1207                         for (i = 0, port_count = 0; i < card->max_ports; i++)
1208                                 if (card->mpa_rx.ports & BIT(i))
1209                                         port_count++;
1210
1211                         /* Reading data from "start_port + 0" to "start_port +
1212                          * port_count -1", so decrease the count by 1
1213                          */
1214                         port_count--;
1215                         mport = (adapter->ioport | SDIO_MPA_ADDR_BASE |
1216                                  (port_count << 8)) + card->mpa_rx.start_port;
1217                 } else {
1218                         mport = (adapter->ioport | SDIO_MPA_ADDR_BASE |
1219                                  (card->mpa_rx.ports << 4)) +
1220                                  card->mpa_rx.start_port;
1221                 }
1222
1223                 if (mwifiex_read_data_sync(adapter, card->mpa_rx.buf,
1224                                            card->mpa_rx.buf_len, mport, 1))
1225                         goto error;
1226
1227                 curr_ptr = card->mpa_rx.buf;
1228
1229                 for (pind = 0; pind < card->mpa_rx.pkt_cnt; pind++) {
1230
1231                         /* get curr PKT len & type */
1232                         pkt_len = le16_to_cpu(*(__le16 *) &curr_ptr[0]);
1233                         pkt_type = le16_to_cpu(*(__le16 *) &curr_ptr[2]);
1234
1235                         /* copy pkt to deaggr buf */
1236                         skb_deaggr = card->mpa_rx.skb_arr[pind];
1237
1238                         if ((pkt_type == MWIFIEX_TYPE_DATA) && (pkt_len <=
1239                                          card->mpa_rx.len_arr[pind])) {
1240
1241                                 memcpy(skb_deaggr->data, curr_ptr, pkt_len);
1242
1243                                 skb_trim(skb_deaggr, pkt_len);
1244
1245                                 /* Process de-aggr packet */
1246                                 mwifiex_decode_rx_packet(adapter, skb_deaggr,
1247                                                          pkt_type);
1248                         } else {
1249                                 dev_err(adapter->dev, "wrong aggr pkt:"
1250                                         " type=%d len=%d max_len=%d\n",
1251                                         pkt_type, pkt_len,
1252                                         card->mpa_rx.len_arr[pind]);
1253                                 dev_kfree_skb_any(skb_deaggr);
1254                         }
1255                         curr_ptr += card->mpa_rx.len_arr[pind];
1256                 }
1257                 MP_RX_AGGR_BUF_RESET(card);
1258         }
1259
1260 rx_curr_single:
1261         if (f_do_rx_cur) {
1262                 dev_dbg(adapter->dev, "info: RX: port: %d, rx_len: %d\n",
1263                         port, rx_len);
1264
1265                 if (mwifiex_sdio_card_to_host(adapter, &pkt_type,
1266                                               skb->data, skb->len,
1267                                               adapter->ioport + port))
1268                         goto error;
1269
1270                 mwifiex_decode_rx_packet(adapter, skb, pkt_type);
1271         }
1272
1273         return 0;
1274
1275 error:
1276         if (MP_RX_AGGR_IN_PROGRESS(card)) {
1277                 /* Multiport-aggregation transfer failed - cleanup */
1278                 for (pind = 0; pind < card->mpa_rx.pkt_cnt; pind++) {
1279                         /* copy pkt to deaggr buf */
1280                         skb_deaggr = card->mpa_rx.skb_arr[pind];
1281                         dev_kfree_skb_any(skb_deaggr);
1282                 }
1283                 MP_RX_AGGR_BUF_RESET(card);
1284         }
1285
1286         if (f_do_rx_cur)
1287                 /* Single transfer pending. Free curr buff also */
1288                 dev_kfree_skb_any(skb);
1289
1290         return -1;
1291 }
1292
1293 /*
1294  * This function checks the current interrupt status.
1295  *
1296  * The following interrupts are checked and handled by this function -
1297  *      - Data sent
1298  *      - Command sent
1299  *      - Packets received
1300  *
1301  * Since the firmware does not generate download ready interrupt if the
1302  * port updated is command port only, command sent interrupt checking
1303  * should be done manually, and for every SDIO interrupt.
1304  *
1305  * In case of Rx packets received, the packets are uploaded from card to
1306  * host and processed accordingly.
1307  */
1308 static int mwifiex_process_int_status(struct mwifiex_adapter *adapter)
1309 {
1310         struct sdio_mmc_card *card = adapter->card;
1311         const struct mwifiex_sdio_card_reg *reg = card->reg;
1312         int ret = 0;
1313         u8 sdio_ireg;
1314         struct sk_buff *skb;
1315         u8 port = CTRL_PORT;
1316         u32 len_reg_l, len_reg_u;
1317         u32 rx_blocks;
1318         u16 rx_len;
1319         unsigned long flags;
1320         u32 bitmap;
1321         u8 cr;
1322
1323         spin_lock_irqsave(&adapter->int_lock, flags);
1324         sdio_ireg = adapter->int_status;
1325         adapter->int_status = 0;
1326         spin_unlock_irqrestore(&adapter->int_lock, flags);
1327
1328         if (!sdio_ireg)
1329                 return ret;
1330
1331         /* Following interrupt is only for SDIO new mode */
1332         if (sdio_ireg & DN_LD_CMD_PORT_HOST_INT_STATUS && adapter->cmd_sent)
1333                 adapter->cmd_sent = false;
1334
1335         /* Following interrupt is only for SDIO new mode */
1336         if (sdio_ireg & UP_LD_CMD_PORT_HOST_INT_STATUS) {
1337                 u32 pkt_type;
1338
1339                 /* read the len of control packet */
1340                 rx_len = card->mp_regs[reg->cmd_rd_len_1] << 8;
1341                 rx_len |= (u16)card->mp_regs[reg->cmd_rd_len_0];
1342                 rx_blocks = DIV_ROUND_UP(rx_len, MWIFIEX_SDIO_BLOCK_SIZE);
1343                 if (rx_len <= INTF_HEADER_LEN ||
1344                     (rx_blocks * MWIFIEX_SDIO_BLOCK_SIZE) >
1345                      MWIFIEX_RX_DATA_BUF_SIZE)
1346                         return -1;
1347                 rx_len = (u16) (rx_blocks * MWIFIEX_SDIO_BLOCK_SIZE);
1348
1349                 skb = dev_alloc_skb(rx_len);
1350                 if (!skb)
1351                         return -1;
1352
1353                 skb_put(skb, rx_len);
1354
1355                 if (mwifiex_sdio_card_to_host(adapter, &pkt_type, skb->data,
1356                                               skb->len, adapter->ioport |
1357                                                         CMD_PORT_SLCT)) {
1358                         dev_err(adapter->dev,
1359                                 "%s: failed to card_to_host", __func__);
1360                         dev_kfree_skb_any(skb);
1361                         goto term_cmd;
1362                 }
1363
1364                 if ((pkt_type != MWIFIEX_TYPE_CMD) &&
1365                     (pkt_type != MWIFIEX_TYPE_EVENT))
1366                         dev_err(adapter->dev,
1367                                 "%s:Received wrong packet on cmd port",
1368                                 __func__);
1369
1370                 mwifiex_decode_rx_packet(adapter, skb, pkt_type);
1371         }
1372
1373         if (sdio_ireg & DN_LD_HOST_INT_STATUS) {
1374                 bitmap = (u32) card->mp_regs[reg->wr_bitmap_l];
1375                 bitmap |= ((u32) card->mp_regs[reg->wr_bitmap_u]) << 8;
1376                 if (card->supports_sdio_new_mode) {
1377                         bitmap |=
1378                                 ((u32) card->mp_regs[reg->wr_bitmap_1l]) << 16;
1379                         bitmap |=
1380                                 ((u32) card->mp_regs[reg->wr_bitmap_1u]) << 24;
1381                 }
1382                 card->mp_wr_bitmap = bitmap;
1383
1384                 dev_dbg(adapter->dev, "int: DNLD: wr_bitmap=0x%x\n",
1385                         card->mp_wr_bitmap);
1386                 if (adapter->data_sent &&
1387                     (card->mp_wr_bitmap & card->mp_data_port_mask)) {
1388                         dev_dbg(adapter->dev,
1389                                 "info:  <--- Tx DONE Interrupt --->\n");
1390                         adapter->data_sent = false;
1391                 }
1392         }
1393
1394         /* As firmware will not generate download ready interrupt if the port
1395            updated is command port only, cmd_sent should be done for any SDIO
1396            interrupt. */
1397         if (card->has_control_mask && adapter->cmd_sent) {
1398                 /* Check if firmware has attach buffer at command port and
1399                    update just that in wr_bit_map. */
1400                 card->mp_wr_bitmap |=
1401                         (u32) card->mp_regs[reg->wr_bitmap_l] & CTRL_PORT_MASK;
1402                 if (card->mp_wr_bitmap & CTRL_PORT_MASK)
1403                         adapter->cmd_sent = false;
1404         }
1405
1406         dev_dbg(adapter->dev, "info: cmd_sent=%d data_sent=%d\n",
1407                 adapter->cmd_sent, adapter->data_sent);
1408         if (sdio_ireg & UP_LD_HOST_INT_STATUS) {
1409                 bitmap = (u32) card->mp_regs[reg->rd_bitmap_l];
1410                 bitmap |= ((u32) card->mp_regs[reg->rd_bitmap_u]) << 8;
1411                 if (card->supports_sdio_new_mode) {
1412                         bitmap |=
1413                                 ((u32) card->mp_regs[reg->rd_bitmap_1l]) << 16;
1414                         bitmap |=
1415                                 ((u32) card->mp_regs[reg->rd_bitmap_1u]) << 24;
1416                 }
1417                 card->mp_rd_bitmap = bitmap;
1418                 dev_dbg(adapter->dev, "int: UPLD: rd_bitmap=0x%x\n",
1419                         card->mp_rd_bitmap);
1420
1421                 while (true) {
1422                         ret = mwifiex_get_rd_port(adapter, &port);
1423                         if (ret) {
1424                                 dev_dbg(adapter->dev,
1425                                         "info: no more rd_port available\n");
1426                                 break;
1427                         }
1428                         len_reg_l = reg->rd_len_p0_l + (port << 1);
1429                         len_reg_u = reg->rd_len_p0_u + (port << 1);
1430                         rx_len = ((u16) card->mp_regs[len_reg_u]) << 8;
1431                         rx_len |= (u16) card->mp_regs[len_reg_l];
1432                         dev_dbg(adapter->dev, "info: RX: port=%d rx_len=%u\n",
1433                                 port, rx_len);
1434                         rx_blocks =
1435                                 (rx_len + MWIFIEX_SDIO_BLOCK_SIZE -
1436                                  1) / MWIFIEX_SDIO_BLOCK_SIZE;
1437                         if (rx_len <= INTF_HEADER_LEN ||
1438                             (rx_blocks * MWIFIEX_SDIO_BLOCK_SIZE) >
1439                              MWIFIEX_RX_DATA_BUF_SIZE) {
1440                                 dev_err(adapter->dev, "invalid rx_len=%d\n",
1441                                         rx_len);
1442                                 return -1;
1443                         }
1444                         rx_len = (u16) (rx_blocks * MWIFIEX_SDIO_BLOCK_SIZE);
1445
1446                         skb = dev_alloc_skb(rx_len);
1447
1448                         if (!skb) {
1449                                 dev_err(adapter->dev, "%s: failed to alloc skb",
1450                                         __func__);
1451                                 return -1;
1452                         }
1453
1454                         skb_put(skb, rx_len);
1455
1456                         dev_dbg(adapter->dev, "info: rx_len = %d skb->len = %d\n",
1457                                 rx_len, skb->len);
1458
1459                         if (mwifiex_sdio_card_to_host_mp_aggr(adapter, skb,
1460                                                               port)) {
1461                                 dev_err(adapter->dev, "card_to_host_mpa failed:"
1462                                         " int status=%#x\n", sdio_ireg);
1463                                 goto term_cmd;
1464                         }
1465                 }
1466         }
1467
1468         return 0;
1469
1470 term_cmd:
1471         /* terminate cmd */
1472         if (mwifiex_read_reg(adapter, CONFIGURATION_REG, &cr))
1473                 dev_err(adapter->dev, "read CFG reg failed\n");
1474         else
1475                 dev_dbg(adapter->dev, "info: CFG reg val = %d\n", cr);
1476
1477         if (mwifiex_write_reg(adapter, CONFIGURATION_REG, (cr | 0x04)))
1478                 dev_err(adapter->dev, "write CFG reg failed\n");
1479         else
1480                 dev_dbg(adapter->dev, "info: write success\n");
1481
1482         if (mwifiex_read_reg(adapter, CONFIGURATION_REG, &cr))
1483                 dev_err(adapter->dev, "read CFG reg failed\n");
1484         else
1485                 dev_dbg(adapter->dev, "info: CFG reg val =%x\n", cr);
1486
1487         return -1;
1488 }
1489
1490 /*
1491  * This function aggregates transmission buffers in driver and downloads
1492  * the aggregated packet to card.
1493  *
1494  * The individual packets are aggregated by copying into an aggregation
1495  * buffer and then downloaded to the card. Previous unsent packets in the
1496  * aggregation buffer are pre-copied first before new packets are added.
1497  * Aggregation is done till there is space left in the aggregation buffer,
1498  * or till new packets are available.
1499  *
1500  * The function will only download the packet to the card when aggregation
1501  * stops, otherwise it will just aggregate the packet in aggregation buffer
1502  * and return.
1503  */
1504 static int mwifiex_host_to_card_mp_aggr(struct mwifiex_adapter *adapter,
1505                                         u8 *payload, u32 pkt_len, u32 port,
1506                                         u32 next_pkt_len)
1507 {
1508         struct sdio_mmc_card *card = adapter->card;
1509         int ret = 0;
1510         s32 f_send_aggr_buf = 0;
1511         s32 f_send_cur_buf = 0;
1512         s32 f_precopy_cur_buf = 0;
1513         s32 f_postcopy_cur_buf = 0;
1514         u32 mport;
1515
1516         if (!card->mpa_tx.enabled ||
1517             (card->has_control_mask && (port == CTRL_PORT)) ||
1518             (card->supports_sdio_new_mode && (port == CMD_PORT_SLCT))) {
1519                 dev_dbg(adapter->dev, "info: %s: tx aggregation disabled\n",
1520                         __func__);
1521
1522                 f_send_cur_buf = 1;
1523                 goto tx_curr_single;
1524         }
1525
1526         if (next_pkt_len) {
1527                 /* More pkt in TX queue */
1528                 dev_dbg(adapter->dev, "info: %s: more packets in queue.\n",
1529                         __func__);
1530
1531                 if (MP_TX_AGGR_IN_PROGRESS(card)) {
1532                         if (MP_TX_AGGR_BUF_HAS_ROOM(card, pkt_len)) {
1533                                 f_precopy_cur_buf = 1;
1534
1535                                 if (!(card->mp_wr_bitmap &
1536                                       (1 << card->curr_wr_port)) ||
1537                                     !MP_TX_AGGR_BUF_HAS_ROOM(
1538                                             card, pkt_len + next_pkt_len))
1539                                         f_send_aggr_buf = 1;
1540                         } else {
1541                                 /* No room in Aggr buf, send it */
1542                                 f_send_aggr_buf = 1;
1543
1544                                 if (!(card->mp_wr_bitmap &
1545                                       (1 << card->curr_wr_port)))
1546                                         f_send_cur_buf = 1;
1547                                 else
1548                                         f_postcopy_cur_buf = 1;
1549                         }
1550                 } else {
1551                         if (MP_TX_AGGR_BUF_HAS_ROOM(card, pkt_len) &&
1552                             (card->mp_wr_bitmap & (1 << card->curr_wr_port)))
1553                                 f_precopy_cur_buf = 1;
1554                         else
1555                                 f_send_cur_buf = 1;
1556                 }
1557         } else {
1558                 /* Last pkt in TX queue */
1559                 dev_dbg(adapter->dev, "info: %s: Last packet in Tx Queue.\n",
1560                         __func__);
1561
1562                 if (MP_TX_AGGR_IN_PROGRESS(card)) {
1563                         /* some packs in Aggr buf already */
1564                         f_send_aggr_buf = 1;
1565
1566                         if (MP_TX_AGGR_BUF_HAS_ROOM(card, pkt_len))
1567                                 f_precopy_cur_buf = 1;
1568                         else
1569                                 /* No room in Aggr buf, send it */
1570                                 f_send_cur_buf = 1;
1571                 } else {
1572                         f_send_cur_buf = 1;
1573                 }
1574         }
1575
1576         if (f_precopy_cur_buf) {
1577                 dev_dbg(adapter->dev, "data: %s: precopy current buffer\n",
1578                         __func__);
1579                 MP_TX_AGGR_BUF_PUT(card, payload, pkt_len, port);
1580
1581                 if (MP_TX_AGGR_PKT_LIMIT_REACHED(card) ||
1582                     mp_tx_aggr_port_limit_reached(card))
1583                         /* No more pkts allowed in Aggr buf, send it */
1584                         f_send_aggr_buf = 1;
1585         }
1586
1587         if (f_send_aggr_buf) {
1588                 dev_dbg(adapter->dev, "data: %s: send aggr buffer: %d %d\n",
1589                         __func__,
1590                                 card->mpa_tx.start_port, card->mpa_tx.ports);
1591                 if (card->supports_sdio_new_mode) {
1592                         u32 port_count;
1593                         int i;
1594
1595                         for (i = 0, port_count = 0; i < card->max_ports; i++)
1596                                 if (card->mpa_tx.ports & BIT(i))
1597                                         port_count++;
1598
1599                         /* Writing data from "start_port + 0" to "start_port +
1600                          * port_count -1", so decrease the count by 1
1601                          */
1602                         port_count--;
1603                         mport = (adapter->ioport | SDIO_MPA_ADDR_BASE |
1604                                  (port_count << 8)) + card->mpa_tx.start_port;
1605                 } else {
1606                         mport = (adapter->ioport | SDIO_MPA_ADDR_BASE |
1607                                  (card->mpa_tx.ports << 4)) +
1608                                  card->mpa_tx.start_port;
1609                 }
1610
1611                 ret = mwifiex_write_data_to_card(adapter, card->mpa_tx.buf,
1612                                                  card->mpa_tx.buf_len, mport);
1613
1614                 MP_TX_AGGR_BUF_RESET(card);
1615         }
1616
1617 tx_curr_single:
1618         if (f_send_cur_buf) {
1619                 dev_dbg(adapter->dev, "data: %s: send current buffer %d\n",
1620                         __func__, port);
1621                 ret = mwifiex_write_data_to_card(adapter, payload, pkt_len,
1622                                                  adapter->ioport + port);
1623         }
1624
1625         if (f_postcopy_cur_buf) {
1626                 dev_dbg(adapter->dev, "data: %s: postcopy current buffer\n",
1627                         __func__);
1628                 MP_TX_AGGR_BUF_PUT(card, payload, pkt_len, port);
1629         }
1630
1631         return ret;
1632 }
1633
1634 /*
1635  * This function downloads data from driver to card.
1636  *
1637  * Both commands and data packets are transferred to the card by this
1638  * function.
1639  *
1640  * This function adds the SDIO specific header to the front of the buffer
1641  * before transferring. The header contains the length of the packet and
1642  * the type. The firmware handles the packets based upon this set type.
1643  */
1644 static int mwifiex_sdio_host_to_card(struct mwifiex_adapter *adapter,
1645                                      u8 type, struct sk_buff *skb,
1646                                      struct mwifiex_tx_param *tx_param)
1647 {
1648         struct sdio_mmc_card *card = adapter->card;
1649         int ret;
1650         u32 buf_block_len;
1651         u32 blk_size;
1652         u32 port = CTRL_PORT;
1653         u8 *payload = (u8 *)skb->data;
1654         u32 pkt_len = skb->len;
1655
1656         /* Allocate buffer and copy payload */
1657         blk_size = MWIFIEX_SDIO_BLOCK_SIZE;
1658         buf_block_len = (pkt_len + blk_size - 1) / blk_size;
1659         *(__le16 *)&payload[0] = cpu_to_le16((u16)pkt_len);
1660         *(__le16 *)&payload[2] = cpu_to_le16(type);
1661
1662         /*
1663          * This is SDIO specific header
1664          *  u16 length,
1665          *  u16 type (MWIFIEX_TYPE_DATA = 0, MWIFIEX_TYPE_CMD = 1,
1666          *  MWIFIEX_TYPE_EVENT = 3)
1667          */
1668         if (type == MWIFIEX_TYPE_DATA) {
1669                 ret = mwifiex_get_wr_port_data(adapter, &port);
1670                 if (ret) {
1671                         dev_err(adapter->dev, "%s: no wr_port available\n",
1672                                 __func__);
1673                         return ret;
1674                 }
1675         } else {
1676                 adapter->cmd_sent = true;
1677                 /* Type must be MWIFIEX_TYPE_CMD */
1678
1679                 if (pkt_len <= INTF_HEADER_LEN ||
1680                     pkt_len > MWIFIEX_UPLD_SIZE)
1681                         dev_err(adapter->dev, "%s: payload=%p, nb=%d\n",
1682                                 __func__, payload, pkt_len);
1683
1684                 if (card->supports_sdio_new_mode)
1685                         port = CMD_PORT_SLCT;
1686         }
1687
1688         /* Transfer data to card */
1689         pkt_len = buf_block_len * blk_size;
1690
1691         if (tx_param)
1692                 ret = mwifiex_host_to_card_mp_aggr(adapter, payload, pkt_len,
1693                                                    port, tx_param->next_pkt_len
1694                                                    );
1695         else
1696                 ret = mwifiex_host_to_card_mp_aggr(adapter, payload, pkt_len,
1697                                                    port, 0);
1698
1699         if (ret) {
1700                 if (type == MWIFIEX_TYPE_CMD)
1701                         adapter->cmd_sent = false;
1702                 if (type == MWIFIEX_TYPE_DATA) {
1703                         adapter->data_sent = false;
1704                         /* restore curr_wr_port in error cases */
1705                         card->curr_wr_port = port;
1706                         card->mp_wr_bitmap |= (u32)(1 << card->curr_wr_port);
1707                 }
1708         } else {
1709                 if (type == MWIFIEX_TYPE_DATA) {
1710                         if (!(card->mp_wr_bitmap & (1 << card->curr_wr_port)))
1711                                 adapter->data_sent = true;
1712                         else
1713                                 adapter->data_sent = false;
1714                 }
1715         }
1716
1717         return ret;
1718 }
1719
1720 /*
1721  * This function allocates the MPA Tx and Rx buffers.
1722  */
1723 static int mwifiex_alloc_sdio_mpa_buffers(struct mwifiex_adapter *adapter,
1724                                    u32 mpa_tx_buf_size, u32 mpa_rx_buf_size)
1725 {
1726         struct sdio_mmc_card *card = adapter->card;
1727         int ret = 0;
1728
1729         card->mpa_tx.buf = kzalloc(mpa_tx_buf_size, GFP_KERNEL);
1730         if (!card->mpa_tx.buf) {
1731                 ret = -1;
1732                 goto error;
1733         }
1734
1735         card->mpa_tx.buf_size = mpa_tx_buf_size;
1736
1737         card->mpa_rx.buf = kzalloc(mpa_rx_buf_size, GFP_KERNEL);
1738         if (!card->mpa_rx.buf) {
1739                 ret = -1;
1740                 goto error;
1741         }
1742
1743         card->mpa_rx.buf_size = mpa_rx_buf_size;
1744
1745 error:
1746         if (ret) {
1747                 kfree(card->mpa_tx.buf);
1748                 kfree(card->mpa_rx.buf);
1749         }
1750
1751         return ret;
1752 }
1753
1754 /*
1755  * This function unregisters the SDIO device.
1756  *
1757  * The SDIO IRQ is released, the function is disabled and driver
1758  * data is set to null.
1759  */
1760 static void
1761 mwifiex_unregister_dev(struct mwifiex_adapter *adapter)
1762 {
1763         struct sdio_mmc_card *card = adapter->card;
1764
1765         if (adapter->card) {
1766                 sdio_claim_host(card->func);
1767                 sdio_disable_func(card->func);
1768                 sdio_release_host(card->func);
1769         }
1770 }
1771
1772 /*
1773  * This function registers the SDIO device.
1774  *
1775  * SDIO IRQ is claimed, block size is set and driver data is initialized.
1776  */
1777 static int mwifiex_register_dev(struct mwifiex_adapter *adapter)
1778 {
1779         int ret;
1780         struct sdio_mmc_card *card = adapter->card;
1781         struct sdio_func *func = card->func;
1782
1783         /* save adapter pointer in card */
1784         card->adapter = adapter;
1785         adapter->tx_buf_size = card->tx_buf_size;
1786
1787         sdio_claim_host(func);
1788
1789         /* Set block size */
1790         ret = sdio_set_block_size(card->func, MWIFIEX_SDIO_BLOCK_SIZE);
1791         sdio_release_host(func);
1792         if (ret) {
1793                 pr_err("cannot set SDIO block size\n");
1794                 return ret;
1795         }
1796
1797
1798         adapter->dev = &func->dev;
1799
1800         strcpy(adapter->fw_name, card->firmware);
1801         adapter->mem_type_mapping_tbl = mem_type_mapping_tbl;
1802         adapter->num_mem_types = ARRAY_SIZE(mem_type_mapping_tbl);
1803
1804         return 0;
1805 }
1806
1807 /*
1808  * This function initializes the SDIO driver.
1809  *
1810  * The following initializations steps are followed -
1811  *      - Read the Host interrupt status register to acknowledge
1812  *        the first interrupt got from bootloader
1813  *      - Disable host interrupt mask register
1814  *      - Get SDIO port
1815  *      - Initialize SDIO variables in card
1816  *      - Allocate MP registers
1817  *      - Allocate MPA Tx and Rx buffers
1818  */
1819 static int mwifiex_init_sdio(struct mwifiex_adapter *adapter)
1820 {
1821         struct sdio_mmc_card *card = adapter->card;
1822         const struct mwifiex_sdio_card_reg *reg = card->reg;
1823         int ret;
1824         u8 sdio_ireg;
1825
1826         sdio_set_drvdata(card->func, card);
1827
1828         /*
1829          * Read the host_int_status_reg for ACK the first interrupt got
1830          * from the bootloader. If we don't do this we get a interrupt
1831          * as soon as we register the irq.
1832          */
1833         mwifiex_read_reg(adapter, card->reg->host_int_status_reg, &sdio_ireg);
1834
1835         /* Get SDIO ioport */
1836         mwifiex_init_sdio_ioport(adapter);
1837
1838         /* Initialize SDIO variables in card */
1839         card->mp_rd_bitmap = 0;
1840         card->mp_wr_bitmap = 0;
1841         card->curr_rd_port = reg->start_rd_port;
1842         card->curr_wr_port = reg->start_wr_port;
1843
1844         card->mp_data_port_mask = reg->data_port_mask;
1845
1846         card->mpa_tx.buf_len = 0;
1847         card->mpa_tx.pkt_cnt = 0;
1848         card->mpa_tx.start_port = 0;
1849
1850         card->mpa_tx.enabled = 1;
1851         card->mpa_tx.pkt_aggr_limit = card->mp_agg_pkt_limit;
1852
1853         card->mpa_rx.buf_len = 0;
1854         card->mpa_rx.pkt_cnt = 0;
1855         card->mpa_rx.start_port = 0;
1856
1857         card->mpa_rx.enabled = 1;
1858         card->mpa_rx.pkt_aggr_limit = card->mp_agg_pkt_limit;
1859
1860         /* Allocate buffers for SDIO MP-A */
1861         card->mp_regs = kzalloc(reg->max_mp_regs, GFP_KERNEL);
1862         if (!card->mp_regs)
1863                 return -ENOMEM;
1864
1865         /* Allocate skb pointer buffers */
1866         card->mpa_rx.skb_arr = kzalloc((sizeof(void *)) *
1867                                        card->mp_agg_pkt_limit, GFP_KERNEL);
1868         card->mpa_rx.len_arr = kzalloc(sizeof(*card->mpa_rx.len_arr) *
1869                                        card->mp_agg_pkt_limit, GFP_KERNEL);
1870         ret = mwifiex_alloc_sdio_mpa_buffers(adapter,
1871                                              card->mp_tx_agg_buf_size,
1872                                              card->mp_rx_agg_buf_size);
1873         if (ret) {
1874                 dev_err(adapter->dev, "failed to alloc sdio mp-a buffers\n");
1875                 kfree(card->mp_regs);
1876                 return -1;
1877         }
1878
1879         return ret;
1880 }
1881
1882 /*
1883  * This function resets the MPA Tx and Rx buffers.
1884  */
1885 static void mwifiex_cleanup_mpa_buf(struct mwifiex_adapter *adapter)
1886 {
1887         struct sdio_mmc_card *card = adapter->card;
1888
1889         MP_TX_AGGR_BUF_RESET(card);
1890         MP_RX_AGGR_BUF_RESET(card);
1891 }
1892
1893 /*
1894  * This function cleans up the allocated card buffers.
1895  *
1896  * The following are freed by this function -
1897  *      - MP registers
1898  *      - MPA Tx buffer
1899  *      - MPA Rx buffer
1900  */
1901 static void mwifiex_cleanup_sdio(struct mwifiex_adapter *adapter)
1902 {
1903         struct sdio_mmc_card *card = adapter->card;
1904
1905         kfree(card->mp_regs);
1906         kfree(card->mpa_rx.skb_arr);
1907         kfree(card->mpa_rx.len_arr);
1908         kfree(card->mpa_tx.buf);
1909         kfree(card->mpa_rx.buf);
1910         sdio_set_drvdata(card->func, NULL);
1911         kfree(card);
1912 }
1913
1914 /*
1915  * This function updates the MP end port in card.
1916  */
1917 static void
1918 mwifiex_update_mp_end_port(struct mwifiex_adapter *adapter, u16 port)
1919 {
1920         struct sdio_mmc_card *card = adapter->card;
1921         const struct mwifiex_sdio_card_reg *reg = card->reg;
1922         int i;
1923
1924         card->mp_end_port = port;
1925
1926         card->mp_data_port_mask = reg->data_port_mask;
1927
1928         if (reg->start_wr_port) {
1929                 for (i = 1; i <= card->max_ports - card->mp_end_port; i++)
1930                         card->mp_data_port_mask &=
1931                                         ~(1 << (card->max_ports - i));
1932         }
1933
1934         card->curr_wr_port = reg->start_wr_port;
1935
1936         dev_dbg(adapter->dev, "cmd: mp_end_port %d, data port mask 0x%x\n",
1937                 port, card->mp_data_port_mask);
1938 }
1939
1940 static void mwifiex_sdio_card_reset_work(struct mwifiex_adapter *adapter)
1941 {
1942         struct sdio_mmc_card *card = adapter->card;
1943         struct mmc_host *target = card->func->card->host;
1944
1945         /* The actual reset operation must be run outside of driver thread.
1946          * This is because mmc_remove_host() will cause the device to be
1947          * instantly destroyed, and the driver then needs to end its thread,
1948          * leading to a deadlock.
1949          *
1950          * We run it in a totally independent workqueue.
1951          */
1952
1953         pr_err("Resetting card...\n");
1954         mmc_remove_host(target);
1955         /* 20ms delay is based on experiment with sdhci controller */
1956         mdelay(20);
1957         target->rescan_entered = 0; /* rescan non-removable cards */
1958         mmc_add_host(target);
1959 }
1960
1961 /* This function read/write firmware */
1962 static enum
1963 rdwr_status mwifiex_sdio_rdwr_firmware(struct mwifiex_adapter *adapter,
1964                                        u8 doneflag)
1965 {
1966         struct sdio_mmc_card *card = adapter->card;
1967         int ret, tries;
1968         u8 ctrl_data = 0;
1969
1970         sdio_writeb(card->func, FW_DUMP_HOST_READY, card->reg->fw_dump_ctrl,
1971                     &ret);
1972         if (ret) {
1973                 dev_err(adapter->dev, "SDIO Write ERR\n");
1974                 return RDWR_STATUS_FAILURE;
1975         }
1976         for (tries = 0; tries < MAX_POLL_TRIES; tries++) {
1977                 ctrl_data = sdio_readb(card->func, card->reg->fw_dump_ctrl,
1978                                        &ret);
1979                 if (ret) {
1980                         dev_err(adapter->dev, "SDIO read err\n");
1981                         return RDWR_STATUS_FAILURE;
1982                 }
1983                 if (ctrl_data == FW_DUMP_DONE)
1984                         break;
1985                 if (doneflag && ctrl_data == doneflag)
1986                         return RDWR_STATUS_DONE;
1987                 if (ctrl_data != FW_DUMP_HOST_READY) {
1988                         dev_info(adapter->dev,
1989                                  "The ctrl reg was changed, re-try again!\n");
1990                         sdio_writeb(card->func, FW_DUMP_HOST_READY,
1991                                     card->reg->fw_dump_ctrl, &ret);
1992                         if (ret) {
1993                                 dev_err(adapter->dev, "SDIO write err\n");
1994                                 return RDWR_STATUS_FAILURE;
1995                         }
1996                 }
1997                 usleep_range(100, 200);
1998         }
1999         if (ctrl_data == FW_DUMP_HOST_READY) {
2000                 dev_err(adapter->dev, "Fail to pull ctrl_data\n");
2001                 return RDWR_STATUS_FAILURE;
2002         }
2003
2004         return RDWR_STATUS_SUCCESS;
2005 }
2006
2007 /* This function dump firmware memory to file */
2008 static void mwifiex_sdio_fw_dump_work(struct work_struct *work)
2009 {
2010         struct mwifiex_adapter *adapter =
2011                         container_of(work, struct mwifiex_adapter, iface_work);
2012         struct sdio_mmc_card *card = adapter->card;
2013         int ret = 0;
2014         unsigned int reg, reg_start, reg_end;
2015         u8 *dbg_ptr, *end_ptr, dump_num, idx, i, read_reg, doneflag = 0;
2016         enum rdwr_status stat;
2017         u32 memory_size;
2018         static char *env[] = { "DRIVER=mwifiex_sdio", "EVENT=fw_dump", NULL };
2019
2020         if (!card->supports_fw_dump)
2021                 return;
2022
2023         for (idx = 0; idx < ARRAY_SIZE(mem_type_mapping_tbl); idx++) {
2024                 struct memory_type_mapping *entry = &mem_type_mapping_tbl[idx];
2025
2026                 if (entry->mem_ptr) {
2027                         vfree(entry->mem_ptr);
2028                         entry->mem_ptr = NULL;
2029                 }
2030                 entry->mem_size = 0;
2031         }
2032
2033         mwifiex_pm_wakeup_card(adapter);
2034         sdio_claim_host(card->func);
2035
2036         dev_info(adapter->dev, "== mwifiex firmware dump start ==\n");
2037
2038         stat = mwifiex_sdio_rdwr_firmware(adapter, doneflag);
2039         if (stat == RDWR_STATUS_FAILURE)
2040                 goto done;
2041
2042         reg = card->reg->fw_dump_start;
2043         /* Read the number of the memories which will dump */
2044         dump_num = sdio_readb(card->func, reg, &ret);
2045         if (ret) {
2046                 dev_err(adapter->dev, "SDIO read memory length err\n");
2047                 goto done;
2048         }
2049
2050         /* Read the length of every memory which will dump */
2051         for (idx = 0; idx < dump_num; idx++) {
2052                 struct memory_type_mapping *entry = &mem_type_mapping_tbl[idx];
2053
2054                 stat = mwifiex_sdio_rdwr_firmware(adapter, doneflag);
2055                 if (stat == RDWR_STATUS_FAILURE)
2056                         goto done;
2057
2058                 memory_size = 0;
2059                 reg = card->reg->fw_dump_start;
2060                 for (i = 0; i < 4; i++) {
2061                         read_reg = sdio_readb(card->func, reg, &ret);
2062                         if (ret) {
2063                                 dev_err(adapter->dev, "SDIO read err\n");
2064                                 goto done;
2065                         }
2066                         memory_size |= (read_reg << i*8);
2067                         reg++;
2068                 }
2069
2070                 if (memory_size == 0) {
2071                         dev_info(adapter->dev, "Firmware dump Finished!\n");
2072                         break;
2073                 }
2074
2075                 dev_info(adapter->dev,
2076                          "%s_SIZE=0x%x\n", entry->mem_name, memory_size);
2077                 entry->mem_ptr = vmalloc(memory_size + 1);
2078                 entry->mem_size = memory_size;
2079                 if (!entry->mem_ptr) {
2080                         dev_err(adapter->dev, "Vmalloc %s failed\n",
2081                                 entry->mem_name);
2082                         goto done;
2083                 }
2084                 dbg_ptr = entry->mem_ptr;
2085                 end_ptr = dbg_ptr + memory_size;
2086
2087                 doneflag = entry->done_flag;
2088                 dev_info(adapter->dev, "Start %s output, please wait...\n",
2089                          entry->mem_name);
2090
2091                 do {
2092                         stat = mwifiex_sdio_rdwr_firmware(adapter, doneflag);
2093                         if (stat == RDWR_STATUS_FAILURE)
2094                                 goto done;
2095
2096                         reg_start = card->reg->fw_dump_start;
2097                         reg_end = card->reg->fw_dump_end;
2098                         for (reg = reg_start; reg <= reg_end; reg++) {
2099                                 *dbg_ptr = sdio_readb(card->func, reg, &ret);
2100                                 if (ret) {
2101                                         dev_err(adapter->dev,
2102                                                 "SDIO read err\n");
2103                                         goto done;
2104                                 }
2105                                 if (dbg_ptr < end_ptr)
2106                                         dbg_ptr++;
2107                                 else
2108                                         dev_err(adapter->dev,
2109                                                 "Allocated buf not enough\n");
2110                         }
2111
2112                         if (stat != RDWR_STATUS_DONE)
2113                                 continue;
2114
2115                         dev_info(adapter->dev, "%s done: size=0x%tx\n",
2116                                  entry->mem_name, dbg_ptr - entry->mem_ptr);
2117                         break;
2118                 } while (1);
2119         }
2120         dev_info(adapter->dev, "== mwifiex firmware dump end ==\n");
2121
2122         kobject_uevent_env(&adapter->wiphy->dev.kobj, KOBJ_CHANGE, env);
2123
2124 done:
2125         sdio_release_host(card->func);
2126         adapter->curr_mem_idx = 0;
2127 }
2128
2129 static void mwifiex_sdio_work(struct work_struct *work)
2130 {
2131         struct mwifiex_adapter *adapter =
2132                         container_of(work, struct mwifiex_adapter, iface_work);
2133
2134         if (test_and_clear_bit(MWIFIEX_IFACE_WORK_CARD_RESET,
2135                                &adapter->iface_work_flags))
2136                 mwifiex_sdio_card_reset_work(adapter);
2137         if (test_and_clear_bit(MWIFIEX_IFACE_WORK_FW_DUMP,
2138                                &adapter->iface_work_flags))
2139                 mwifiex_sdio_fw_dump_work(work);
2140 }
2141
2142 /* This function resets the card */
2143 static void mwifiex_sdio_card_reset(struct mwifiex_adapter *adapter)
2144 {
2145         if (test_bit(MWIFIEX_IFACE_WORK_CARD_RESET, &adapter->iface_work_flags))
2146                 return;
2147
2148         set_bit(MWIFIEX_IFACE_WORK_CARD_RESET, &adapter->iface_work_flags);
2149
2150         schedule_work(&adapter->iface_work);
2151 }
2152
2153 /* This function dumps FW information */
2154 static void mwifiex_sdio_fw_dump(struct mwifiex_adapter *adapter)
2155 {
2156         if (test_bit(MWIFIEX_IFACE_WORK_FW_DUMP, &adapter->iface_work_flags))
2157                 return;
2158
2159         set_bit(MWIFIEX_IFACE_WORK_FW_DUMP, &adapter->iface_work_flags);
2160         schedule_work(&adapter->iface_work);
2161 }
2162
2163 static struct mwifiex_if_ops sdio_ops = {
2164         .init_if = mwifiex_init_sdio,
2165         .cleanup_if = mwifiex_cleanup_sdio,
2166         .check_fw_status = mwifiex_check_fw_status,
2167         .prog_fw = mwifiex_prog_fw_w_helper,
2168         .register_dev = mwifiex_register_dev,
2169         .unregister_dev = mwifiex_unregister_dev,
2170         .enable_int = mwifiex_sdio_enable_host_int,
2171         .disable_int = mwifiex_sdio_disable_host_int,
2172         .process_int_status = mwifiex_process_int_status,
2173         .host_to_card = mwifiex_sdio_host_to_card,
2174         .wakeup = mwifiex_pm_wakeup_card,
2175         .wakeup_complete = mwifiex_pm_wakeup_card_complete,
2176
2177         /* SDIO specific */
2178         .update_mp_end_port = mwifiex_update_mp_end_port,
2179         .cleanup_mpa_buf = mwifiex_cleanup_mpa_buf,
2180         .cmdrsp_complete = mwifiex_sdio_cmdrsp_complete,
2181         .event_complete = mwifiex_sdio_event_complete,
2182         .card_reset = mwifiex_sdio_card_reset,
2183         .iface_work = mwifiex_sdio_work,
2184         .fw_dump = mwifiex_sdio_fw_dump,
2185 };
2186
2187 /*
2188  * This function initializes the SDIO driver.
2189  *
2190  * This initiates the semaphore and registers the device with
2191  * SDIO bus.
2192  */
2193 static int
2194 mwifiex_sdio_init_module(void)
2195 {
2196         sema_init(&add_remove_card_sem, 1);
2197
2198         /* Clear the flag in case user removes the card. */
2199         user_rmmod = 0;
2200
2201         return sdio_register_driver(&mwifiex_sdio);
2202 }
2203
2204 /*
2205  * This function cleans up the SDIO driver.
2206  *
2207  * The following major steps are followed for cleanup -
2208  *      - Resume the device if its suspended
2209  *      - Disconnect the device if connected
2210  *      - Shutdown the firmware
2211  *      - Unregister the device from SDIO bus.
2212  */
2213 static void
2214 mwifiex_sdio_cleanup_module(void)
2215 {
2216         if (!down_interruptible(&add_remove_card_sem))
2217                 up(&add_remove_card_sem);
2218
2219         /* Set the flag as user is removing this module. */
2220         user_rmmod = 1;
2221
2222         sdio_unregister_driver(&mwifiex_sdio);
2223 }
2224
2225 module_init(mwifiex_sdio_init_module);
2226 module_exit(mwifiex_sdio_cleanup_module);
2227
2228 MODULE_AUTHOR("Marvell International Ltd.");
2229 MODULE_DESCRIPTION("Marvell WiFi-Ex SDIO Driver version " SDIO_VERSION);
2230 MODULE_VERSION(SDIO_VERSION);
2231 MODULE_LICENSE("GPL v2");
2232 MODULE_FIRMWARE(SD8786_DEFAULT_FW_NAME);
2233 MODULE_FIRMWARE(SD8787_DEFAULT_FW_NAME);
2234 MODULE_FIRMWARE(SD8797_DEFAULT_FW_NAME);
2235 MODULE_FIRMWARE(SD8897_DEFAULT_FW_NAME);