| // SPDX-License-Identifier: GPL-2.0-only | |
| /* | |
| * This file is part of wl1251 | |
| * | |
| * Copyright (c) 1998-2007 Texas Instruments Incorporated | |
| * Copyright (C) 2008 Nokia Corporation | |
| */ | |
| #include <linux/kernel.h> | |
| #include <linux/module.h> | |
| #include "wl1251.h" | |
| #include "reg.h" | |
| #include "tx.h" | |
| #include "ps.h" | |
| #include "io.h" | |
| #include "event.h" | |
| static bool wl1251_tx_double_buffer_busy(struct wl1251 *wl, u32 data_out_count) | |
| { | |
| int used, data_in_count; | |
| data_in_count = wl->data_in_count; | |
| if (data_in_count < data_out_count) | |
| /* data_in_count has wrapped */ | |
| data_in_count += TX_STATUS_DATA_OUT_COUNT_MASK + 1; | |
| used = data_in_count - data_out_count; | |
| WARN_ON(used < 0); | |
| WARN_ON(used > DP_TX_PACKET_RING_CHUNK_NUM); | |
| if (used >= DP_TX_PACKET_RING_CHUNK_NUM) | |
| return true; | |
| else | |
| return false; | |
| } | |
| static int wl1251_tx_path_status(struct wl1251 *wl) | |
| { | |
| u32 status, addr, data_out_count; | |
| bool busy; | |
| addr = wl->data_path->tx_control_addr; | |
| status = wl1251_mem_read32(wl, addr); | |
| data_out_count = status & TX_STATUS_DATA_OUT_COUNT_MASK; | |
| busy = wl1251_tx_double_buffer_busy(wl, data_out_count); | |
| if (busy) | |
| return -EBUSY; | |
| return 0; | |
| } | |
| static int wl1251_tx_id(struct wl1251 *wl, struct sk_buff *skb) | |
| { | |
| int i; | |
| for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++) | |
| if (wl->tx_frames[i] == NULL) { | |
| wl->tx_frames[i] = skb; | |
| return i; | |
| } | |
| return -EBUSY; | |
| } | |
| static void wl1251_tx_control(struct tx_double_buffer_desc *tx_hdr, | |
| struct ieee80211_tx_info *control, u16 fc) | |
| { | |
| *(u16 *)&tx_hdr->control = 0; | |
| tx_hdr->control.rate_policy = 0; | |
| /* 802.11 packets */ | |
| tx_hdr->control.packet_type = 0; | |
| /* Also disable retry and ACK policy for injected packets */ | |
| if ((control->flags & IEEE80211_TX_CTL_NO_ACK) || | |
| (control->flags & IEEE80211_TX_CTL_INJECTED)) { | |
| tx_hdr->control.rate_policy = 1; | |
| tx_hdr->control.ack_policy = 1; | |
| } | |
| tx_hdr->control.tx_complete = 1; | |
| if ((fc & IEEE80211_FTYPE_DATA) && | |
| ((fc & IEEE80211_STYPE_QOS_DATA) || | |
| (fc & IEEE80211_STYPE_QOS_NULLFUNC))) | |
| tx_hdr->control.qos = 1; | |
| } | |
| /* RSN + MIC = 8 + 8 = 16 bytes (worst case - AES). */ | |
| #define MAX_MSDU_SECURITY_LENGTH 16 | |
| #define MAX_MPDU_SECURITY_LENGTH 16 | |
| #define WLAN_QOS_HDR_LEN 26 | |
| #define MAX_MPDU_HEADER_AND_SECURITY (MAX_MPDU_SECURITY_LENGTH + \ | |
| WLAN_QOS_HDR_LEN) | |
| #define HW_BLOCK_SIZE 252 | |
| static void wl1251_tx_frag_block_num(struct tx_double_buffer_desc *tx_hdr) | |
| { | |
| u16 payload_len, frag_threshold, mem_blocks; | |
| u16 num_mpdus, mem_blocks_per_frag; | |
| frag_threshold = IEEE80211_MAX_FRAG_THRESHOLD; | |
| tx_hdr->frag_threshold = cpu_to_le16(frag_threshold); | |
| payload_len = le16_to_cpu(tx_hdr->length) + MAX_MSDU_SECURITY_LENGTH; | |
| if (payload_len > frag_threshold) { | |
| mem_blocks_per_frag = | |
| ((frag_threshold + MAX_MPDU_HEADER_AND_SECURITY) / | |
| HW_BLOCK_SIZE) + 1; | |
| num_mpdus = payload_len / frag_threshold; | |
| mem_blocks = num_mpdus * mem_blocks_per_frag; | |
| payload_len -= num_mpdus * frag_threshold; | |
| num_mpdus++; | |
| } else { | |
| mem_blocks_per_frag = 0; | |
| mem_blocks = 0; | |
| num_mpdus = 1; | |
| } | |
| mem_blocks += (payload_len / HW_BLOCK_SIZE) + 1; | |
| if (num_mpdus > 1) | |
| mem_blocks += min(num_mpdus, mem_blocks_per_frag); | |
| tx_hdr->num_mem_blocks = mem_blocks; | |
| } | |
| static int wl1251_tx_fill_hdr(struct wl1251 *wl, struct sk_buff *skb, | |
| struct ieee80211_tx_info *control) | |
| { | |
| struct tx_double_buffer_desc *tx_hdr; | |
| struct ieee80211_rate *rate; | |
| int id; | |
| u16 fc; | |
| if (!skb) | |
| return -EINVAL; | |
| id = wl1251_tx_id(wl, skb); | |
| if (id < 0) | |
| return id; | |
| fc = *(u16 *)skb->data; | |
| tx_hdr = skb_push(skb, sizeof(*tx_hdr)); | |
| tx_hdr->length = cpu_to_le16(skb->len - sizeof(*tx_hdr)); | |
| rate = ieee80211_get_tx_rate(wl->hw, control); | |
| tx_hdr->rate = cpu_to_le16(rate->hw_value); | |
| tx_hdr->expiry_time = cpu_to_le32(1 << 16); | |
| tx_hdr->id = id; | |
| tx_hdr->xmit_queue = wl1251_tx_get_queue(skb_get_queue_mapping(skb)); | |
| wl1251_tx_control(tx_hdr, control, fc); | |
| wl1251_tx_frag_block_num(tx_hdr); | |
| return 0; | |
| } | |
| /* We copy the packet to the target */ | |
| static int wl1251_tx_send_packet(struct wl1251 *wl, struct sk_buff *skb, | |
| struct ieee80211_tx_info *control) | |
| { | |
| struct tx_double_buffer_desc *tx_hdr; | |
| int len; | |
| u32 addr; | |
| if (!skb) | |
| return -EINVAL; | |
| tx_hdr = (struct tx_double_buffer_desc *) skb->data; | |
| if (control->control.hw_key && | |
| control->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP) { | |
| int hdrlen; | |
| __le16 fc; | |
| u16 length; | |
| u8 *pos; | |
| fc = *(__le16 *)(skb->data + sizeof(*tx_hdr)); | |
| length = le16_to_cpu(tx_hdr->length) + WL1251_TKIP_IV_SPACE; | |
| tx_hdr->length = cpu_to_le16(length); | |
| hdrlen = ieee80211_hdrlen(fc); | |
| pos = skb_push(skb, WL1251_TKIP_IV_SPACE); | |
| memmove(pos, pos + WL1251_TKIP_IV_SPACE, | |
| sizeof(*tx_hdr) + hdrlen); | |
| } | |
| /* Revisit. This is a workaround for getting non-aligned packets. | |
| This happens at least with EAPOL packets from the user space. | |
| Our DMA requires packets to be aligned on a 4-byte boundary. | |
| */ | |
| if (unlikely((long)skb->data & 0x03)) { | |
| int offset = (4 - (long)skb->data) & 0x03; | |
| wl1251_debug(DEBUG_TX, "skb offset %d", offset); | |
| /* check whether the current skb can be used */ | |
| if (skb_cloned(skb) || (skb_tailroom(skb) < offset)) { | |
| struct sk_buff *newskb = skb_copy_expand(skb, 0, 3, | |
| GFP_KERNEL); | |
| if (unlikely(newskb == NULL)) | |
| return -EINVAL; | |
| tx_hdr = (struct tx_double_buffer_desc *) newskb->data; | |
| dev_kfree_skb_any(skb); | |
| wl->tx_frames[tx_hdr->id] = skb = newskb; | |
| offset = (4 - (long)skb->data) & 0x03; | |
| wl1251_debug(DEBUG_TX, "new skb offset %d", offset); | |
| } | |
| /* align the buffer on a 4-byte boundary */ | |
| if (offset) { | |
| unsigned char *src = skb->data; | |
| skb_reserve(skb, offset); | |
| memmove(skb->data, src, skb->len); | |
| tx_hdr = (struct tx_double_buffer_desc *) skb->data; | |
| } | |
| } | |
| /* Our skb->data at this point includes the HW header */ | |
| len = WL1251_TX_ALIGN(skb->len); | |
| if (wl->data_in_count & 0x1) | |
| addr = wl->data_path->tx_packet_ring_addr + | |
| wl->data_path->tx_packet_ring_chunk_size; | |
| else | |
| addr = wl->data_path->tx_packet_ring_addr; | |
| wl1251_mem_write(wl, addr, skb->data, len); | |
| wl1251_debug(DEBUG_TX, "tx id %u skb 0x%p payload %u rate 0x%x " | |
| "queue %d", tx_hdr->id, skb, tx_hdr->length, | |
| tx_hdr->rate, tx_hdr->xmit_queue); | |
| return 0; | |
| } | |
| static void wl1251_tx_trigger(struct wl1251 *wl) | |
| { | |
| u32 data, addr; | |
| if (wl->data_in_count & 0x1) { | |
| addr = ACX_REG_INTERRUPT_TRIG_H; | |
| data = INTR_TRIG_TX_PROC1; | |
| } else { | |
| addr = ACX_REG_INTERRUPT_TRIG; | |
| data = INTR_TRIG_TX_PROC0; | |
| } | |
| wl1251_reg_write32(wl, addr, data); | |
| /* Bumping data in */ | |
| wl->data_in_count = (wl->data_in_count + 1) & | |
| TX_STATUS_DATA_OUT_COUNT_MASK; | |
| } | |
| static void enable_tx_for_packet_injection(struct wl1251 *wl) | |
| { | |
| int ret; | |
| ret = wl1251_cmd_join(wl, BSS_TYPE_STA_BSS, wl->channel, | |
| wl->beacon_int, wl->dtim_period); | |
| if (ret < 0) { | |
| wl1251_warning("join failed"); | |
| return; | |
| } | |
| ret = wl1251_event_wait(wl, JOIN_EVENT_COMPLETE_ID, 100); | |
| if (ret < 0) { | |
| wl1251_warning("join timeout"); | |
| return; | |
| } | |
| wl->joined = true; | |
| } | |
| /* caller must hold wl->mutex */ | |
| static int wl1251_tx_frame(struct wl1251 *wl, struct sk_buff *skb) | |
| { | |
| struct ieee80211_tx_info *info; | |
| int ret = 0; | |
| u8 idx; | |
| info = IEEE80211_SKB_CB(skb); | |
| if (info->control.hw_key) { | |
| if (unlikely(wl->monitor_present)) | |
| return -EINVAL; | |
| idx = info->control.hw_key->hw_key_idx; | |
| if (unlikely(wl->default_key != idx)) { | |
| ret = wl1251_acx_default_key(wl, idx); | |
| if (ret < 0) | |
| return ret; | |
| } | |
| } | |
| /* Enable tx path in monitor mode for packet injection */ | |
| if ((wl->vif == NULL) && !wl->joined) | |
| enable_tx_for_packet_injection(wl); | |
| ret = wl1251_tx_path_status(wl); | |
| if (ret < 0) | |
| return ret; | |
| ret = wl1251_tx_fill_hdr(wl, skb, info); | |
| if (ret < 0) | |
| return ret; | |
| ret = wl1251_tx_send_packet(wl, skb, info); | |
| if (ret < 0) | |
| return ret; | |
| wl1251_tx_trigger(wl); | |
| return ret; | |
| } | |
| void wl1251_tx_work(struct work_struct *work) | |
| { | |
| struct wl1251 *wl = container_of(work, struct wl1251, tx_work); | |
| struct sk_buff *skb; | |
| bool woken_up = false; | |
| int ret; | |
| mutex_lock(&wl->mutex); | |
| if (unlikely(wl->state == WL1251_STATE_OFF)) | |
| goto out; | |
| while ((skb = skb_dequeue(&wl->tx_queue))) { | |
| if (!woken_up) { | |
| ret = wl1251_ps_elp_wakeup(wl); | |
| if (ret < 0) { | |
| skb_queue_head(&wl->tx_queue, skb); | |
| goto out; | |
| } | |
| woken_up = true; | |
| } | |
| ret = wl1251_tx_frame(wl, skb); | |
| if (ret == -EBUSY) { | |
| skb_queue_head(&wl->tx_queue, skb); | |
| goto out; | |
| } else if (ret < 0) { | |
| dev_kfree_skb(skb); | |
| goto out; | |
| } | |
| } | |
| out: | |
| if (woken_up) | |
| wl1251_ps_elp_sleep(wl); | |
| mutex_unlock(&wl->mutex); | |
| } | |
| static const char *wl1251_tx_parse_status(u8 status) | |
| { | |
| /* 8 bit status field, one character per bit plus null */ | |
| static char buf[9]; | |
| int i = 0; | |
| memset(buf, 0, sizeof(buf)); | |
| if (status & TX_DMA_ERROR) | |
| buf[i++] = 'm'; | |
| if (status & TX_DISABLED) | |
| buf[i++] = 'd'; | |
| if (status & TX_RETRY_EXCEEDED) | |
| buf[i++] = 'r'; | |
| if (status & TX_TIMEOUT) | |
| buf[i++] = 't'; | |
| if (status & TX_KEY_NOT_FOUND) | |
| buf[i++] = 'k'; | |
| if (status & TX_ENCRYPT_FAIL) | |
| buf[i++] = 'e'; | |
| if (status & TX_UNAVAILABLE_PRIORITY) | |
| buf[i++] = 'p'; | |
| /* bit 0 is unused apparently */ | |
| return buf; | |
| } | |
| static void wl1251_tx_packet_cb(struct wl1251 *wl, | |
| struct tx_result *result) | |
| { | |
| struct ieee80211_tx_info *info; | |
| struct sk_buff *skb; | |
| int hdrlen; | |
| u8 *frame; | |
| if (unlikely(result->id >= ARRAY_SIZE(wl->tx_frames) || | |
| wl->tx_frames[result->id] == NULL)) { | |
| wl1251_error("invalid packet id %u", result->id); | |
| return; | |
| } | |
| skb = wl->tx_frames[result->id]; | |
| info = IEEE80211_SKB_CB(skb); | |
| if (!(info->flags & IEEE80211_TX_CTL_NO_ACK) && | |
| !(info->flags & IEEE80211_TX_CTL_INJECTED) && | |
| (result->status == TX_SUCCESS)) | |
| info->flags |= IEEE80211_TX_STAT_ACK; | |
| info->status.rates[0].count = result->ack_failures + 1; | |
| wl->stats.retry_count += result->ack_failures; | |
| /* | |
| * We have to remove our private TX header before pushing | |
| * the skb back to mac80211. | |
| */ | |
| frame = skb_pull(skb, sizeof(struct tx_double_buffer_desc)); | |
| if (info->control.hw_key && | |
| info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP) { | |
| hdrlen = ieee80211_get_hdrlen_from_skb(skb); | |
| memmove(frame + WL1251_TKIP_IV_SPACE, frame, hdrlen); | |
| skb_pull(skb, WL1251_TKIP_IV_SPACE); | |
| } | |
| wl1251_debug(DEBUG_TX, "tx status id %u skb 0x%p failures %u rate 0x%x" | |
| " status 0x%x (%s)", | |
| result->id, skb, result->ack_failures, result->rate, | |
| result->status, wl1251_tx_parse_status(result->status)); | |
| ieee80211_tx_status_skb(wl->hw, skb); | |
| wl->tx_frames[result->id] = NULL; | |
| } | |
| /* Called upon reception of a TX complete interrupt */ | |
| void wl1251_tx_complete(struct wl1251 *wl) | |
| { | |
| int i, result_index, num_complete = 0, queue_len; | |
| struct tx_result *result, *result_ptr; | |
| unsigned long flags; | |
| if (unlikely(wl->state != WL1251_STATE_ON)) | |
| return; | |
| result = kmalloc_objs(*result, FW_TX_CMPLT_BLOCK_SIZE); | |
| if (!result) { | |
| wl1251_error("can not allocate result buffer"); | |
| return; | |
| } | |
| /* First we read the result */ | |
| wl1251_mem_read(wl, wl->data_path->tx_complete_addr, result, | |
| FW_TX_CMPLT_BLOCK_SIZE * sizeof(*result)); | |
| result_index = wl->next_tx_complete; | |
| for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++) { | |
| result_ptr = &result[result_index]; | |
| if (result_ptr->done_1 == 1 && | |
| result_ptr->done_2 == 1) { | |
| wl1251_tx_packet_cb(wl, result_ptr); | |
| result_ptr->done_1 = 0; | |
| result_ptr->done_2 = 0; | |
| result_index = (result_index + 1) & | |
| (FW_TX_CMPLT_BLOCK_SIZE - 1); | |
| num_complete++; | |
| } else { | |
| break; | |
| } | |
| } | |
| queue_len = skb_queue_len(&wl->tx_queue); | |
| if ((num_complete > 0) && (queue_len > 0)) { | |
| /* firmware buffer has space, reschedule tx_work */ | |
| wl1251_debug(DEBUG_TX, "tx_complete: reschedule tx_work"); | |
| ieee80211_queue_work(wl->hw, &wl->tx_work); | |
| } | |
| if (wl->tx_queue_stopped && | |
| queue_len <= WL1251_TX_QUEUE_LOW_WATERMARK) { | |
| /* tx_queue has space, restart queues */ | |
| wl1251_debug(DEBUG_TX, "tx_complete: waking queues"); | |
| spin_lock_irqsave(&wl->wl_lock, flags); | |
| ieee80211_wake_queues(wl->hw); | |
| wl->tx_queue_stopped = false; | |
| spin_unlock_irqrestore(&wl->wl_lock, flags); | |
| } | |
| /* Every completed frame needs to be acknowledged */ | |
| if (num_complete) { | |
| /* | |
| * If we've wrapped, we have to clear | |
| * the results in 2 steps. | |
| */ | |
| if (result_index > wl->next_tx_complete) { | |
| /* Only 1 write is needed */ | |
| wl1251_mem_write(wl, | |
| wl->data_path->tx_complete_addr + | |
| (wl->next_tx_complete * | |
| sizeof(struct tx_result)), | |
| &result[wl->next_tx_complete], | |
| num_complete * | |
| sizeof(struct tx_result)); | |
| } else if (result_index < wl->next_tx_complete) { | |
| /* 2 writes are needed */ | |
| wl1251_mem_write(wl, | |
| wl->data_path->tx_complete_addr + | |
| (wl->next_tx_complete * | |
| sizeof(struct tx_result)), | |
| &result[wl->next_tx_complete], | |
| (FW_TX_CMPLT_BLOCK_SIZE - | |
| wl->next_tx_complete) * | |
| sizeof(struct tx_result)); | |
| wl1251_mem_write(wl, | |
| wl->data_path->tx_complete_addr, | |
| result, | |
| (num_complete - | |
| FW_TX_CMPLT_BLOCK_SIZE + | |
| wl->next_tx_complete) * | |
| sizeof(struct tx_result)); | |
| } else { | |
| /* We have to write the whole array */ | |
| wl1251_mem_write(wl, | |
| wl->data_path->tx_complete_addr, | |
| result, | |
| FW_TX_CMPLT_BLOCK_SIZE * | |
| sizeof(struct tx_result)); | |
| } | |
| } | |
| kfree(result); | |
| wl->next_tx_complete = result_index; | |
| } | |
| /* caller must hold wl->mutex */ | |
| void wl1251_tx_flush(struct wl1251 *wl) | |
| { | |
| int i; | |
| struct sk_buff *skb; | |
| struct ieee80211_tx_info *info; | |
| /* TX failure */ | |
| /* control->flags = 0; FIXME */ | |
| while ((skb = skb_dequeue(&wl->tx_queue))) { | |
| info = IEEE80211_SKB_CB(skb); | |
| wl1251_debug(DEBUG_TX, "flushing skb 0x%p", skb); | |
| if (!(info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS)) | |
| continue; | |
| ieee80211_tx_status_skb(wl->hw, skb); | |
| } | |
| for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++) | |
| if (wl->tx_frames[i] != NULL) { | |
| skb = wl->tx_frames[i]; | |
| info = IEEE80211_SKB_CB(skb); | |
| if (!(info->flags & IEEE80211_TX_CTL_REQ_TX_STATUS)) | |
| continue; | |
| ieee80211_tx_status_skb(wl->hw, skb); | |
| wl->tx_frames[i] = NULL; | |
| } | |
| } |