1 //============================================================================
2 // Copyright (c) 1996-2002 Winbond Electronic Corporation
8 // Processing the Rx message from down layer
10 //============================================================================
11 #include <linux/usb.h>
17 static void packet_came(struct ieee80211_hw *hw, char *pRxBufferAddress, int PacketSize)
19 struct wbsoft_priv *priv = hw->priv;
21 struct ieee80211_rx_status rx_status = {0};
26 skb = dev_alloc_skb(PacketSize);
28 printk("Not enough memory for packet, FIXME\n");
32 memcpy(skb_put(skb, PacketSize),
38 rx_status.channel = 1;
39 rx_status.freq = 12345;
40 rx_status.phymode = MODE_IEEE80211B;
43 ieee80211_rx_irqsafe(hw, skb, &rx_status);
46 static void Wb35Rx_adjust(PDESCRIPTOR pRxDes)
48 u32 * pRxBufferAddress;
53 DecryptionMethod = pRxDes->R01.R01_decryption_method;
54 pRxBufferAddress = pRxDes->buffer_address[0];
55 BufferSize = pRxDes->buffer_size[0];
57 // Adjust the last part of data. Only data left
58 BufferSize -= 4; // For CRC-32
61 if (DecryptionMethod == 3) // For CCMP
64 // Adjust the IV field which after 802.11 header and ICV field.
65 if (DecryptionMethod == 1) // For WEP
68 pRxBufferAddress[i] = pRxBufferAddress[i-1];
69 pRxDes->buffer_address[0] = pRxBufferAddress + 1;
70 BufferSize -= 4; // 4 byte for IV
72 else if( DecryptionMethod ) // For TKIP and CCMP
75 pRxBufferAddress[i] = pRxBufferAddress[i-2];
76 pRxDes->buffer_address[0] = pRxBufferAddress + 2;//Update the descriptor, shift 8 byte
77 BufferSize -= 8; // 8 byte for IV + ICV
79 pRxDes->buffer_size[0] = BufferSize;
82 static u16 Wb35Rx_indicate(struct ieee80211_hw *hw)
84 struct wbsoft_priv *priv = hw->priv;
85 struct hw_data * pHwData = &priv->sHwData;
87 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
88 u8 * pRxBufferAddress;
90 u16 stmp, BufferSize, stmp2 = 0;
93 // Only one thread be allowed to run into the following
95 RxBufferId = pWb35Rx->RxProcessIndex;
96 if (pWb35Rx->RxOwner[ RxBufferId ]) //Owner by VM
99 pWb35Rx->RxProcessIndex++;
100 pWb35Rx->RxProcessIndex %= MAX_USB_RX_BUFFER_NUMBER;
102 pRxBufferAddress = pWb35Rx->pDRx;
103 BufferSize = pWb35Rx->RxBufferSize[ RxBufferId ];
105 // Parse the bulkin buffer
106 while (BufferSize >= 4) {
107 if ((cpu_to_le32(*(u32 *)pRxBufferAddress) & 0x0fffffff) == RX_END_TAG) //Is ending? 921002.9.a
110 // Get the R00 R01 first
111 RxDes.R00.value = le32_to_cpu(*(u32 *)pRxBufferAddress);
112 PacketSize = (u16)RxDes.R00.R00_receive_byte_count;
113 RxDes.R01.value = le32_to_cpu(*((u32 *)(pRxBufferAddress+4)));
115 if ((PacketSize & 0x03) > 0)
118 // Basic check for Rx length. Is length valid?
119 if (PacketSize > MAX_PACKET_SIZE) {
121 printk("Serious ERROR : Rx data size too long, size =%d\n", PacketSize);
124 pWb35Rx->EP3vm_state = VM_STOP;
125 pWb35Rx->Ep3ErrorCount2++;
129 // Start to process Rx buffer
130 // RxDes.Descriptor_ID = RxBufferId; // Due to synchronous indicate, the field doesn't necessary to use.
131 BufferSize -= 8; //subtract 8 byte for 35's USB header length
132 pRxBufferAddress += 8;
134 RxDes.buffer_address[0] = pRxBufferAddress;
135 RxDes.buffer_size[0] = PacketSize;
136 RxDes.buffer_number = 1;
137 RxDes.buffer_start_index = 0;
138 RxDes.buffer_total_size = RxDes.buffer_size[0];
139 Wb35Rx_adjust(&RxDes);
141 packet_came(hw, pRxBufferAddress, PacketSize);
143 // Move RxBuffer point to the next
144 stmp = PacketSize + 3;
145 stmp &= ~0x03; // 4n alignment
146 pRxBufferAddress += stmp;
152 pWb35Rx->RxOwner[ RxBufferId ] = 1;
158 static void Wb35Rx(struct ieee80211_hw *hw);
160 static void Wb35Rx_Complete(struct urb *urb)
162 struct ieee80211_hw *hw = urb->context;
163 struct wbsoft_priv *priv = hw->priv;
164 struct hw_data * pHwData = &priv->sHwData;
165 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
166 u8 * pRxBufferAddress;
173 pWb35Rx->EP3vm_state = VM_COMPLETED;
174 pWb35Rx->EP3VM_status = urb->status;//Store the last result of Irp
176 RxBufferId = pWb35Rx->CurrentRxBufferId;
178 pRxBufferAddress = pWb35Rx->pDRx;
179 BulkLength = (u16)urb->actual_length;
181 // The IRP is completed
182 pWb35Rx->EP3vm_state = VM_COMPLETED;
184 if (pHwData->SurpriseRemove || pHwData->HwStop) // Must be here, or RxBufferId is invalid
187 if (pWb35Rx->rx_halt)
190 // Start to process the data only in successful condition
191 pWb35Rx->RxOwner[ RxBufferId ] = 0; // Set the owner to driver
192 R00.value = le32_to_cpu(*(u32 *)pRxBufferAddress);
194 // The URB is completed, check the result
195 if (pWb35Rx->EP3VM_status != 0) {
196 #ifdef _PE_USB_STATE_DUMP_
197 printk("EP3 IoCompleteRoutine return error\n");
199 pWb35Rx->EP3vm_state = VM_STOP;
203 // 20060220 For recovering. check if operating in single USB mode
204 if (!HAL_USB_MODE_BURST(pHwData)) {
205 SizeCheck = R00.R00_receive_byte_count; //20060926 anson's endian
206 if ((SizeCheck & 0x03) > 0)
208 SizeCheck = (SizeCheck + 3) & ~0x03;
209 SizeCheck += 12; // 8 + 4 badbeef
210 if ((BulkLength > 1600) ||
211 (SizeCheck > 1600) ||
212 (BulkLength != SizeCheck) ||
213 (BulkLength == 0)) { // Add for fail Urb
214 pWb35Rx->EP3vm_state = VM_STOP;
215 pWb35Rx->Ep3ErrorCount2++;
219 // Indicating the receiving data
220 pWb35Rx->ByteReceived += BulkLength;
221 pWb35Rx->RxBufferSize[ RxBufferId ] = BulkLength;
223 if (!pWb35Rx->RxOwner[ RxBufferId ])
226 kfree(pWb35Rx->pDRx);
227 // Do the next receive
232 pWb35Rx->RxOwner[ RxBufferId ] = 1; // Set the owner to hardware
233 atomic_dec(&pWb35Rx->RxFireCounter);
234 pWb35Rx->EP3vm_state = VM_STOP;
237 // This function cannot reentrain
238 static void Wb35Rx(struct ieee80211_hw *hw)
240 struct wbsoft_priv *priv = hw->priv;
241 struct hw_data * pHwData = &priv->sHwData;
242 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
243 u8 * pRxBufferAddress;
244 struct urb *urb = pWb35Rx->RxUrb;
251 if (pHwData->SurpriseRemove || pHwData->HwStop)
254 if (pWb35Rx->rx_halt)
258 RxBufferId = pWb35Rx->RxBufferId;
259 if (!pWb35Rx->RxOwner[RxBufferId]) {
260 // It's impossible to run here.
262 printk("Rx driver fifo unavailable\n");
267 // Update buffer point, then start to bulkin the data from USB
268 pWb35Rx->RxBufferId++;
269 pWb35Rx->RxBufferId %= MAX_USB_RX_BUFFER_NUMBER;
271 pWb35Rx->CurrentRxBufferId = RxBufferId;
273 pWb35Rx->pDRx = kzalloc(MAX_USB_RX_BUFFER, GFP_ATOMIC);
274 if (!pWb35Rx->pDRx) {
275 printk("w35und: Rx memory alloc failed\n");
278 pRxBufferAddress = pWb35Rx->pDRx;
280 usb_fill_bulk_urb(urb, pHwData->WbUsb.udev,
281 usb_rcvbulkpipe(pHwData->WbUsb.udev, 3),
282 pRxBufferAddress, MAX_USB_RX_BUFFER,
283 Wb35Rx_Complete, hw);
285 pWb35Rx->EP3vm_state = VM_RUNNING;
287 retv = usb_submit_urb(urb, GFP_ATOMIC);
290 printk("Rx URB sending error\n");
297 pWb35Rx->EP3vm_state = VM_STOP;
298 atomic_dec(&pWb35Rx->RxFireCounter);
301 void Wb35Rx_start(struct ieee80211_hw *hw)
303 struct wbsoft_priv *priv = hw->priv;
304 struct hw_data * pHwData = &priv->sHwData;
305 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
307 // Allow only one thread to run into the Wb35Rx() function
308 if (atomic_inc_return(&pWb35Rx->RxFireCounter) == 1) {
309 pWb35Rx->EP3vm_state = VM_RUNNING;
312 atomic_dec(&pWb35Rx->RxFireCounter);
315 //=====================================================================================
316 static void Wb35Rx_reset_descriptor( struct hw_data * pHwData )
318 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
321 pWb35Rx->ByteReceived = 0;
322 pWb35Rx->RxProcessIndex = 0;
323 pWb35Rx->RxBufferId = 0;
324 pWb35Rx->EP3vm_state = VM_STOP;
325 pWb35Rx->rx_halt = 0;
327 // Initial the Queue. The last buffer is reserved for used if the Rx resource is unavailable.
328 for( i=0; i<MAX_USB_RX_BUFFER_NUMBER; i++ )
329 pWb35Rx->RxOwner[i] = 1;
332 unsigned char Wb35Rx_initial(struct hw_data * pHwData)
334 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
336 // Initial the Buffer Queue
337 Wb35Rx_reset_descriptor( pHwData );
339 pWb35Rx->RxUrb = usb_alloc_urb(0, GFP_ATOMIC);
340 return (!!pWb35Rx->RxUrb);
343 void Wb35Rx_stop(struct hw_data * pHwData)
345 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
347 // Canceling the Irp if already sends it out.
348 if (pWb35Rx->EP3vm_state == VM_RUNNING) {
349 usb_unlink_urb( pWb35Rx->RxUrb ); // Only use unlink, let Wb35Rx_destroy to free them
351 printk("EP3 Rx stop\n");
356 // Needs process context
357 void Wb35Rx_destroy(struct hw_data * pHwData)
359 struct wb35_rx *pWb35Rx = &pHwData->Wb35Rx;
362 msleep(10); // Delay for waiting function enter 940623.1.a
363 } while (pWb35Rx->EP3vm_state != VM_STOP);
364 msleep(10); // Delay for waiting function exit 940623.1.b
367 usb_free_urb( pWb35Rx->RxUrb );
369 printk("Wb35Rx_destroy OK\n");