[net-next-2.6.git] / drivers / net / wireless / wl12xx / wl1271_tx.c

/*
 * This file is part of wl1271
 *
 * Copyright (C) 2009 Nokia Corporation
 *
 * Contact: Luciano Coelho <luciano.coelho@nokia.com>
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License
 * version 2 as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
 * 02110-1301 USA
 *
 */

#include <linux/kernel.h>
#include <linux/module.h>

#include "wl1271.h"
#include "wl1271_io.h"
#include "wl1271_reg.h"
#include "wl1271_ps.h"
#include "wl1271_tx.h"

static int wl1271_tx_id(struct wl1271 *wl, struct sk_buff *skb)
{
	int i;
	for (i = 0; i < ACX_TX_DESCRIPTORS; i++)
		if (wl->tx_frames[i] == NULL) {
			wl->tx_frames[i] = skb;
			wl->tx_frames_cnt++;
			return i;
		}

	return -EBUSY;
}

static int wl1271_tx_allocate(struct wl1271 *wl, struct sk_buff *skb, u32 extra,
				u32 buf_offset)
{
	struct wl1271_tx_hw_descr *desc;
	u32 total_len = skb->len + sizeof(struct wl1271_tx_hw_descr) + extra;
	u32 total_blocks;
	int id, ret = -EBUSY;

	if (buf_offset + total_len > WL1271_AGGR_BUFFER_SIZE)
		return -EAGAIN;

	/* allocate free identifier for the packet */
	id = wl1271_tx_id(wl, skb);
	if (id < 0)
		return id;

	/* approximate the number of blocks required for this packet
	   in the firmware */
	total_blocks = total_len + TX_HW_BLOCK_SIZE - 1;
	total_blocks = total_blocks / TX_HW_BLOCK_SIZE + TX_HW_BLOCK_SPARE;
	if (total_blocks <= wl->tx_blocks_available) {
		desc = (struct wl1271_tx_hw_descr *)skb_push(
			skb, total_len - skb->len);

		desc->extra_mem_blocks = TX_HW_BLOCK_SPARE;
		desc->total_mem_blocks = total_blocks;
		desc->id = id;

		wl->tx_blocks_available -= total_blocks;

		ret = 0;

		wl1271_debug(DEBUG_TX,
			     "tx_allocate: size: %d, blocks: %d, id: %d",
			     total_len, total_blocks, id);
	} else {
		wl->tx_frames[id] = NULL;
		wl->tx_frames_cnt--;
	}

	return ret;
}

static void wl1271_tx_fill_hdr(struct wl1271 *wl, struct sk_buff *skb,
			      u32 extra, struct ieee80211_tx_info *control)
{
	struct timespec ts;
	struct wl1271_tx_hw_descr *desc;
	int pad, ac;
	s64 hosttime;
	u16 tx_attr;

	desc = (struct wl1271_tx_hw_descr *) skb->data;

	/* relocate space for security header */
	if (extra) {
		void *framestart = skb->data + sizeof(*desc);
		u16 fc = *(u16 *)(framestart + extra);
		int hdrlen = ieee80211_hdrlen(cpu_to_le16(fc));
		memmove(framestart, framestart + extra, hdrlen);
	}

	/* configure packet life time */
	getnstimeofday(&ts);
	hosttime = (timespec_to_ns(&ts) >> 10);
	desc->start_time = cpu_to_le32(hosttime - wl->time_offset);
	desc->life_time = cpu_to_le16(TX_HW_MGMT_PKT_LIFETIME_TU);

	/* configure the tx attributes */
	tx_attr = wl->session_counter << TX_HW_ATTR_OFST_SESSION_COUNTER;

	/* queue (we use same identifiers for tid's and ac's */
	ac = wl1271_tx_get_queue(skb_get_queue_mapping(skb));
	desc->tid = ac;

	desc->aid = TX_HW_DEFAULT_AID;
	desc->reserved = 0;

	/* align the length (and store in terms of words) */
	pad = WL1271_TX_ALIGN(skb->len);
	desc->length = cpu_to_le16(pad >> 2);

	/* calculate number of padding bytes */
	pad = pad - skb->len;
	tx_attr |= pad << TX_HW_ATTR_OFST_LAST_WORD_PAD;

	/* if the packets are destined for AP (have a STA entry) send them
	   with AP rate policies, otherwise use default basic rates */
	if (control->control.sta)
		tx_attr |= ACX_TX_AP_FULL_RATE << TX_HW_ATTR_OFST_RATE_POLICY;

	desc->tx_attr = cpu_to_le16(tx_attr);

	wl1271_debug(DEBUG_TX, "tx_fill_hdr: pad: %d", pad);
}

/* caller must hold wl->mutex */
static int wl1271_prepare_tx_frame(struct wl1271 *wl, struct sk_buff *skb,
							u32 buf_offset)
{
	struct ieee80211_tx_info *info;
	u32 extra = 0;
	int ret = 0;
	u8 idx;
	u32 total_len;

	if (!skb)
		return -EINVAL;

	info = IEEE80211_SKB_CB(skb);

	if (info->control.hw_key &&
	    info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP)
		extra = WL1271_TKIP_IV_SPACE;

	if (info->control.hw_key) {
		idx = info->control.hw_key->hw_key_idx;

		/* FIXME: do we have to do this if we're not using WEP? */
		if (unlikely(wl->default_key != idx)) {
			ret = wl1271_cmd_set_default_wep_key(wl, idx);
			if (ret < 0)
				return ret;
			wl->default_key = idx;
		}
	}

	ret = wl1271_tx_allocate(wl, skb, extra, buf_offset);
	if (ret < 0)
		return ret;

	wl1271_tx_fill_hdr(wl, skb, extra, info);

	/*
	 * The length of each packet is stored in terms of words. Thus, we must
	 * pad the skb data to make sure its length is aligned.
	 * The number of padding bytes is computed and set in wl1271_tx_fill_hdr
	 */
	total_len = WL1271_TX_ALIGN(skb->len);
	memcpy(wl->aggr_buf + buf_offset, skb->data, skb->len);
	memset(wl->aggr_buf + buf_offset + skb->len, 0, total_len - skb->len);

	return total_len;
}

u32 wl1271_tx_enabled_rates_get(struct wl1271 *wl, u32 rate_set)
{
	struct ieee80211_supported_band *band;
	u32 enabled_rates = 0;
	int bit;

	band = wl->hw->wiphy->bands[wl->band];
	for (bit = 0; bit < band->n_bitrates; bit++) {
		if (rate_set & 0x1)
			enabled_rates |= band->bitrates[bit].hw_value;
		rate_set >>= 1;
	}

	return enabled_rates;
}

void wl1271_tx_work_locked(struct wl1271 *wl)
{
	struct sk_buff *skb;
	bool woken_up = false;
	u32 sta_rates = 0;
	u32 buf_offset = 0;
	bool sent_packets = false;
	int ret;

	/* check if the rates supported by the AP have changed */
	if (unlikely(test_and_clear_bit(WL1271_FLAG_STA_RATES_CHANGED,
					&wl->flags))) {
		unsigned long flags;
		spin_lock_irqsave(&wl->wl_lock, flags);
		sta_rates = wl->sta_rate_set;
		spin_unlock_irqrestore(&wl->wl_lock, flags);
	}

	if (unlikely(wl->state == WL1271_STATE_OFF))
		goto out;

	/* if rates have changed, re-configure the rate policy */
	if (unlikely(sta_rates)) {
		wl->rate_set = wl1271_tx_enabled_rates_get(wl, sta_rates);
		wl1271_acx_rate_policies(wl);
	}

	while ((skb = skb_dequeue(&wl->tx_queue))) {
		if (!woken_up) {
			ret = wl1271_ps_elp_wakeup(wl, false);
			if (ret < 0)
				goto out_ack;
			woken_up = true;
		}

		ret = wl1271_prepare_tx_frame(wl, skb, buf_offset);
		if (ret == -EAGAIN) {
			/*
			 * Aggregation buffer is full.
			 * Flush buffer and try again.
			 */
			skb_queue_head(&wl->tx_queue, skb);
			wl1271_write(wl, WL1271_SLV_MEM_DATA, wl->aggr_buf,
				buf_offset, true);
			sent_packets = true;
			buf_offset = 0;
			continue;
		} else if (ret == -EBUSY) {
			/*
			 * Firmware buffer is full.
			 * Queue back last skb, and stop aggregating.
			 */
			skb_queue_head(&wl->tx_queue, skb);
			/* No work left, avoid scheduling redundant tx work */
			set_bit(WL1271_FLAG_FW_TX_BUSY, &wl->flags);
			goto out_ack;
		} else if (ret < 0) {
			dev_kfree_skb(skb);
			goto out_ack;
		}
		buf_offset += ret;
		wl->tx_packets_count++;
	}

out_ack:
	if (buf_offset) {
		wl1271_write(wl, WL1271_SLV_MEM_DATA, wl->aggr_buf,
				buf_offset, true);
		sent_packets = true;
	}
	if (sent_packets) {
		/* interrupt the firmware with the new packets */
		wl1271_write32(wl, WL1271_HOST_WR_ACCESS, wl->tx_packets_count);
	}

out:
	if (woken_up)
		wl1271_ps_elp_sleep(wl);
}

void wl1271_tx_work(struct work_struct *work)
{
	struct wl1271 *wl = container_of(work, struct wl1271, tx_work);

	mutex_lock(&wl->mutex);
	wl1271_tx_work_locked(wl);
	mutex_unlock(&wl->mutex);
}

static void wl1271_tx_complete_packet(struct wl1271 *wl,
				      struct wl1271_tx_hw_res_descr *result)
{
	struct ieee80211_tx_info *info;
	struct sk_buff *skb;
	int id = result->id;
	int rate = -1;
	u8 retries = 0;

	/* check for id legality */
	if (unlikely(id >= ACX_TX_DESCRIPTORS || wl->tx_frames[id] == NULL)) {
		wl1271_warning("TX result illegal id: %d", id);
		return;
	}

	skb = wl->tx_frames[id];
	info = IEEE80211_SKB_CB(skb);

	/* update the TX status info */
	if (result->status == TX_SUCCESS) {
		if (!(info->flags & IEEE80211_TX_CTL_NO_ACK))
			info->flags |= IEEE80211_TX_STAT_ACK;
		rate = wl1271_rate_to_idx(wl, result->rate_class_index);
		retries = result->ack_failures;
	} else if (result->status == TX_RETRY_EXCEEDED) {
		wl->stats.excessive_retries++;
		retries = result->ack_failures;
	}

	info->status.rates[0].idx = rate;
	info->status.rates[0].count = retries;
	info->status.rates[0].flags = 0;
	info->status.ack_signal = -1;

	wl->stats.retry_count += result->ack_failures;

	/* update security sequence number */
	wl->tx_security_seq += (result->lsb_security_sequence_number -
				wl->tx_security_last_seq);
	wl->tx_security_last_seq = result->lsb_security_sequence_number;

	/* remove private header from packet */
	skb_pull(skb, sizeof(struct wl1271_tx_hw_descr));

	/* remove TKIP header space if present */
	if (info->control.hw_key &&
	    info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP) {
		int hdrlen = ieee80211_get_hdrlen_from_skb(skb);
		memmove(skb->data + WL1271_TKIP_IV_SPACE, skb->data, hdrlen);
		skb_pull(skb, WL1271_TKIP_IV_SPACE);
	}

	wl1271_debug(DEBUG_TX, "tx status id %u skb 0x%p failures %u rate 0x%x"
		     " status 0x%x",
		     result->id, skb, result->ack_failures,
		     result->rate_class_index, result->status);

	/* return the packet to the stack */
	ieee80211_tx_status(wl->hw, skb);
	wl->tx_frames[result->id] = NULL;
	wl->tx_frames_cnt--;
}

/* Called upon reception of a TX complete interrupt */
void wl1271_tx_complete(struct wl1271 *wl)
{
	struct wl1271_acx_mem_map *memmap =
		(struct wl1271_acx_mem_map *)wl->target_mem_map;
	u32 count, fw_counter;
	u32 i;

	/* read the tx results from the chipset */
	wl1271_read(wl, le32_to_cpu(memmap->tx_result),
		    wl->tx_res_if, sizeof(*wl->tx_res_if), false);
	fw_counter = le32_to_cpu(wl->tx_res_if->tx_result_fw_counter);

	/* write host counter to chipset (to ack) */
	wl1271_write32(wl, le32_to_cpu(memmap->tx_result) +
		       offsetof(struct wl1271_tx_hw_res_if,
				tx_result_host_counter), fw_counter);

	count = fw_counter - wl->tx_results_count;
	wl1271_debug(DEBUG_TX, "tx_complete received, packets: %d", count);

	/* verify that the result buffer is not getting overrun */
	if (unlikely(count > TX_HW_RESULT_QUEUE_LEN))
		wl1271_warning("TX result overflow from chipset: %d", count);

	/* process the results */
	for (i = 0; i < count; i++) {
		struct wl1271_tx_hw_res_descr *result;
		u8 offset = wl->tx_results_count & TX_HW_RESULT_QUEUE_LEN_MASK;

		/* process the packet */
		result =  &(wl->tx_res_if->tx_results_queue[offset]);
		wl1271_tx_complete_packet(wl, result);

		wl->tx_results_count++;
	}

	if (test_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags) &&
	    skb_queue_len(&wl->tx_queue) <= WL1271_TX_QUEUE_LOW_WATERMARK) {
		unsigned long flags;

		/* firmware buffer has space, restart queues */
		wl1271_debug(DEBUG_TX, "tx_complete: waking queues");
		spin_lock_irqsave(&wl->wl_lock, flags);
		ieee80211_wake_queues(wl->hw);
		clear_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags);
		spin_unlock_irqrestore(&wl->wl_lock, flags);
		ieee80211_queue_work(wl->hw, &wl->tx_work);
	}
}

/* caller must hold wl->mutex */
void wl1271_tx_reset(struct wl1271 *wl)
{
	int i;
	struct sk_buff *skb;

	/* TX failure */
	while ((skb = skb_dequeue(&wl->tx_queue))) {
		wl1271_debug(DEBUG_TX, "freeing skb 0x%p", skb);
		ieee80211_tx_status(wl->hw, skb);
	}

	for (i = 0; i < ACX_TX_DESCRIPTORS; i++)
		if (wl->tx_frames[i] != NULL) {
			skb = wl->tx_frames[i];
			wl->tx_frames[i] = NULL;
			wl1271_debug(DEBUG_TX, "freeing skb 0x%p", skb);
			ieee80211_tx_status(wl->hw, skb);
		}
	wl->tx_frames_cnt = 0;
}

#define WL1271_TX_FLUSH_TIMEOUT 500000

/* caller must *NOT* hold wl->mutex */
void wl1271_tx_flush(struct wl1271 *wl)
{
	unsigned long timeout;
	timeout = jiffies + usecs_to_jiffies(WL1271_TX_FLUSH_TIMEOUT);

	while (!time_after(jiffies, timeout)) {
		mutex_lock(&wl->mutex);
		wl1271_debug(DEBUG_TX, "flushing tx buffer: %d",
			     wl->tx_frames_cnt);
		if ((wl->tx_frames_cnt == 0) &&
		    skb_queue_empty(&wl->tx_queue)) {
			mutex_unlock(&wl->mutex);
			return;
		}
		mutex_unlock(&wl->mutex);
		msleep(1);
	}

	wl1271_warning("Unable to flush all TX buffers, timed out.");
}
Commit	Line	Data
f5fc0f86 LC	1	/*
	2	* This file is part of wl1271
	3	*
	4	* Copyright (C) 2009 Nokia Corporation
	5	*
	6	* Contact: Luciano Coelho <luciano.coelho@nokia.com>
	7	*
	8	* This program is free software; you can redistribute it and/or
	9	* modify it under the terms of the GNU General Public License
	10	* version 2 as published by the Free Software Foundation.
	11	*
	12	* This program is distributed in the hope that it will be useful, but
	13	* WITHOUT ANY WARRANTY; without even the implied warranty of
	14	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	15	* General Public License for more details.
	16	*
	17	* You should have received a copy of the GNU General Public License
	18	* along with this program; if not, write to the Free Software
	19	* Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
	20	* 02110-1301 USA
	21	*
	22	*/
	23
	24	#include <linux/kernel.h>
	25	#include <linux/module.h>
	26
	27	#include "wl1271.h"
7b048c52	28	#include "wl1271_io.h"
f5fc0f86 LC	29	#include "wl1271_reg.h"
	30	#include "wl1271_ps.h"
	31	#include "wl1271_tx.h"
	32
	33	static int wl1271_tx_id(struct wl1271 wl, struct sk_buff skb)
	34	{
	35	int i;
be7078c2	36	for (i = 0; i < ACX_TX_DESCRIPTORS; i++)
f5fc0f86 LC	37	if (wl->tx_frames[i] == NULL) {
f5fc0f86 LC	38	wl->tx_frames[i] = skb;
781608c4	39	wl->tx_frames_cnt++;
f5fc0f86 LC	40	return i;
	41	}
	42
	43	return -EBUSY;
	44	}
	45
a19606b4 IY	46	static int wl1271_tx_allocate(struct wl1271 wl, struct sk_buff skb, u32 extra,
a19606b4 IY	47	u32 buf_offset)
f5fc0f86 LC	48	{
	49	struct wl1271_tx_hw_descr *desc;
	50	u32 total_len = skb->len + sizeof(struct wl1271_tx_hw_descr) + extra;
5c9417f1	51	u32 total_blocks;
f5fc0f86 LC	52	int id, ret = -EBUSY;
f5fc0f86 LC	53
a19606b4	54	if (buf_offset + total_len > WL1271_AGGR_BUFFER_SIZE)
6c6e669e	55	return -EAGAIN;
a19606b4	56
f5fc0f86 LC	57	/* allocate free identifier for the packet */
	58	id = wl1271_tx_id(wl, skb);
	59	if (id < 0)
	60	return id;
	61
	62	/* approximate the number of blocks required for this packet
	63	in the firmware */
5c9417f1 JO	64	total_blocks = total_len + TX_HW_BLOCK_SIZE - 1;
5c9417f1 JO	65	total_blocks = total_blocks / TX_HW_BLOCK_SIZE + TX_HW_BLOCK_SPARE;
f5fc0f86 LC	66	if (total_blocks <= wl->tx_blocks_available) {
	67	desc = (struct wl1271_tx_hw_descr *)skb_push(
	68	skb, total_len - skb->len);
	69
	70	desc->extra_mem_blocks = TX_HW_BLOCK_SPARE;
	71	desc->total_mem_blocks = total_blocks;
	72	desc->id = id;
	73
	74	wl->tx_blocks_available -= total_blocks;
	75
	76	ret = 0;
	77
	78	wl1271_debug(DEBUG_TX,
	79	"tx_allocate: size: %d, blocks: %d, id: %d",
	80	total_len, total_blocks, id);
781608c4	81	} else {
f5fc0f86	82	wl->tx_frames[id] = NULL;
781608c4 JO	83	wl->tx_frames_cnt--;
781608c4 JO	84	}
f5fc0f86 LC	85
	86	return ret;
	87	}
	88
a19606b4	89	static void wl1271_tx_fill_hdr(struct wl1271 wl, struct sk_buff skb,
f5fc0f86 LC	90	u32 extra, struct ieee80211_tx_info *control)
f5fc0f86 LC	91	{
ac5e1e39	92	struct timespec ts;
f5fc0f86	93	struct wl1271_tx_hw_descr *desc;
c6999d83	94	int pad, ac;
ac5e1e39	95	s64 hosttime;
d0f63b20	96	u16 tx_attr;
f5fc0f86 LC	97
	98	desc = (struct wl1271_tx_hw_descr *) skb->data;
	99
1e2b7976 JO	100	/* relocate space for security header */
	101	if (extra) {
	102	void framestart = skb->data + sizeof(desc);
	103	u16 fc = (u16 )(framestart + extra);
d0f63b20	104	int hdrlen = ieee80211_hdrlen(cpu_to_le16(fc));
1e2b7976 JO	105	memmove(framestart, framestart + extra, hdrlen);
	106	}
	107
f5fc0f86	108	/* configure packet life time */
ac5e1e39 JO	109	getnstimeofday(&ts);
	110	hosttime = (timespec_to_ns(&ts) >> 10);
	111	desc->start_time = cpu_to_le32(hosttime - wl->time_offset);
d0f63b20	112	desc->life_time = cpu_to_le16(TX_HW_MGMT_PKT_LIFETIME_TU);
f5fc0f86 LC	113
f5fc0f86 LC	114	/* configure the tx attributes */
d0f63b20	115	tx_attr = wl->session_counter << TX_HW_ATTR_OFST_SESSION_COUNTER;
c6999d83	116
ed484a16	117	/* queue (we use same identifiers for tid's and ac's */
c6999d83	118	ac = wl1271_tx_get_queue(skb_get_queue_mapping(skb));
ed484a16	119	desc->tid = ac;
c6999d83	120
f5fc0f86 LC	121	desc->aid = TX_HW_DEFAULT_AID;
	122	desc->reserved = 0;
	123
	124	/* align the length (and store in terms of words) */
	125	pad = WL1271_TX_ALIGN(skb->len);
d0f63b20	126	desc->length = cpu_to_le16(pad >> 2);
f5fc0f86 LC	127
	128	/* calculate number of padding bytes */
	129	pad = pad - skb->len;
d0f63b20 LC	130	tx_attr \|= pad << TX_HW_ATTR_OFST_LAST_WORD_PAD;
d0f63b20 LC	131
830fb67b JO	132	/* if the packets are destined for AP (have a STA entry) send them
	133	with AP rate policies, otherwise use default basic rates */
	134	if (control->control.sta)
	135	tx_attr \|= ACX_TX_AP_FULL_RATE << TX_HW_ATTR_OFST_RATE_POLICY;
	136
d0f63b20	137	desc->tx_attr = cpu_to_le16(tx_attr);
f5fc0f86 LC	138
f5fc0f86 LC	139	wl1271_debug(DEBUG_TX, "tx_fill_hdr: pad: %d", pad);
f5fc0f86 LC	140	}
	141
	142	/* caller must hold wl->mutex */
a19606b4 IY	143	static int wl1271_prepare_tx_frame(struct wl1271 wl, struct sk_buff skb,
a19606b4 IY	144	u32 buf_offset)
f5fc0f86 LC	145	{
	146	struct ieee80211_tx_info *info;
	147	u32 extra = 0;
	148	int ret = 0;
	149	u8 idx;
a19606b4	150	u32 total_len;
f5fc0f86 LC	151
	152	if (!skb)
	153	return -EINVAL;
	154
	155	info = IEEE80211_SKB_CB(skb);
	156
	157	if (info->control.hw_key &&
97359d12	158	info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP)
f5fc0f86 LC	159	extra = WL1271_TKIP_IV_SPACE;
	160
	161	if (info->control.hw_key) {
	162	idx = info->control.hw_key->hw_key_idx;
	163
	164	/* FIXME: do we have to do this if we're not using WEP? */
	165	if (unlikely(wl->default_key != idx)) {
	166	ret = wl1271_cmd_set_default_wep_key(wl, idx);
	167	if (ret < 0)
	168	return ret;
ee444cf0	169	wl->default_key = idx;
f5fc0f86 LC	170	}
	171	}
	172
a19606b4	173	ret = wl1271_tx_allocate(wl, skb, extra, buf_offset);
f5fc0f86 LC	174	if (ret < 0)
	175	return ret;
	176
a19606b4	177	wl1271_tx_fill_hdr(wl, skb, extra, info);
f5fc0f86	178
a19606b4 IY	179	/*
	180	* The length of each packet is stored in terms of words. Thus, we must
	181	* pad the skb data to make sure its length is aligned.
	182	* The number of padding bytes is computed and set in wl1271_tx_fill_hdr
	183	*/
	184	total_len = WL1271_TX_ALIGN(skb->len);
	185	memcpy(wl->aggr_buf + buf_offset, skb->data, skb->len);
	186	memset(wl->aggr_buf + buf_offset + skb->len, 0, total_len - skb->len);
f5fc0f86	187
a19606b4	188	return total_len;
f5fc0f86 LC	189	}
f5fc0f86 LC	190
ebba60c6	191	u32 wl1271_tx_enabled_rates_get(struct wl1271 *wl, u32 rate_set)
830fb67b JO	192	{
	193	struct ieee80211_supported_band *band;
	194	u32 enabled_rates = 0;
	195	int bit;
	196
	197	band = wl->hw->wiphy->bands[wl->band];
	198	for (bit = 0; bit < band->n_bitrates; bit++) {
	199	if (rate_set & 0x1)
	200	enabled_rates \|= band->bitrates[bit].hw_value;
	201	rate_set >>= 1;
	202	}
	203
	204	return enabled_rates;
	205	}
	206
a522550a	207	void wl1271_tx_work_locked(struct wl1271 *wl)
f5fc0f86	208	{
f5fc0f86 LC	209	struct sk_buff *skb;
f5fc0f86 LC	210	bool woken_up = false;
830fb67b	211	u32 sta_rates = 0;
6c6e669e IY	212	u32 buf_offset = 0;
6c6e669e IY	213	bool sent_packets = false;
f5fc0f86 LC	214	int ret;
f5fc0f86 LC	215
830fb67b JO	216	/* check if the rates supported by the AP have changed */
	217	if (unlikely(test_and_clear_bit(WL1271_FLAG_STA_RATES_CHANGED,
	218	&wl->flags))) {
	219	unsigned long flags;
	220	spin_lock_irqsave(&wl->wl_lock, flags);
	221	sta_rates = wl->sta_rate_set;
	222	spin_unlock_irqrestore(&wl->wl_lock, flags);
	223	}
	224
f5fc0f86 LC	225	if (unlikely(wl->state == WL1271_STATE_OFF))
	226	goto out;
	227
830fb67b JO	228	/* if rates have changed, re-configure the rate policy */
	229	if (unlikely(sta_rates)) {
	230	wl->rate_set = wl1271_tx_enabled_rates_get(wl, sta_rates);
	231	wl1271_acx_rate_policies(wl);
	232	}
	233
f5fc0f86 LC	234	while ((skb = skb_dequeue(&wl->tx_queue))) {
	235	if (!woken_up) {
	236	ret = wl1271_ps_elp_wakeup(wl, false);
	237	if (ret < 0)
ffb591cd	238	goto out_ack;
f5fc0f86 LC	239	woken_up = true;
	240	}
	241
a19606b4	242	ret = wl1271_prepare_tx_frame(wl, skb, buf_offset);
6c6e669e	243	if (ret == -EAGAIN) {
a19606b4	244	/*
6c6e669e IY	245	* Aggregation buffer is full.
	246	* Flush buffer and try again.
	247	*/
	248	skb_queue_head(&wl->tx_queue, skb);
	249	wl1271_write(wl, WL1271_SLV_MEM_DATA, wl->aggr_buf,
	250	buf_offset, true);
	251	sent_packets = true;
	252	buf_offset = 0;
	253	continue;
	254	} else if (ret == -EBUSY) {
	255	/*
	256	* Firmware buffer is full.
a19606b4 IY	257	* Queue back last skb, and stop aggregating.
a19606b4 IY	258	*/
f5fc0f86	259	skb_queue_head(&wl->tx_queue, skb);
a522550a IY	260	/* No work left, avoid scheduling redundant tx work */
a522550a IY	261	set_bit(WL1271_FLAG_FW_TX_BUSY, &wl->flags);
ffb591cd	262	goto out_ack;
f5fc0f86 LC	263	} else if (ret < 0) {
f5fc0f86 LC	264	dev_kfree_skb(skb);
ffb591cd	265	goto out_ack;
f5fc0f86	266	}
a19606b4 IY	267	buf_offset += ret;
a19606b4 IY	268	wl->tx_packets_count++;
f5fc0f86 LC	269	}
f5fc0f86 LC	270
ffb591cd	271	out_ack:
a19606b4 IY	272	if (buf_offset) {
	273	wl1271_write(wl, WL1271_SLV_MEM_DATA, wl->aggr_buf,
	274	buf_offset, true);
6c6e669e IY	275	sent_packets = true;
	276	}
	277	if (sent_packets) {
a19606b4	278	/* interrupt the firmware with the new packets */
ffb591cd	279	wl1271_write32(wl, WL1271_HOST_WR_ACCESS, wl->tx_packets_count);
a19606b4	280	}
ffb591cd	281
f5fc0f86 LC	282	out:
	283	if (woken_up)
	284	wl1271_ps_elp_sleep(wl);
a522550a	285	}
f5fc0f86	286
a522550a IY	287	void wl1271_tx_work(struct work_struct *work)
	288	{
	289	struct wl1271 *wl = container_of(work, struct wl1271, tx_work);
	290
	291	mutex_lock(&wl->mutex);
	292	wl1271_tx_work_locked(wl);
f5fc0f86 LC	293	mutex_unlock(&wl->mutex);
	294	}
	295
	296	static void wl1271_tx_complete_packet(struct wl1271 *wl,
	297	struct wl1271_tx_hw_res_descr *result)
	298	{
f5fc0f86 LC	299	struct ieee80211_tx_info *info;
f5fc0f86 LC	300	struct sk_buff *skb;
f5fc0f86	301	int id = result->id;
31627dc5 JO	302	int rate = -1;
31627dc5 JO	303	u8 retries = 0;
f5fc0f86 LC	304
f5fc0f86 LC	305	/* check for id legality */
ffb591cd	306	if (unlikely(id >= ACX_TX_DESCRIPTORS \|\| wl->tx_frames[id] == NULL)) {
f5fc0f86 LC	307	wl1271_warning("TX result illegal id: %d", id);
	308	return;
	309	}
	310
	311	skb = wl->tx_frames[id];
	312	info = IEEE80211_SKB_CB(skb);
	313
31627dc5 JO	314	/* update the TX status info */
	315	if (result->status == TX_SUCCESS) {
	316	if (!(info->flags & IEEE80211_TX_CTL_NO_ACK))
f5fc0f86	317	info->flags \|= IEEE80211_TX_STAT_ACK;
31627dc5 JO	318	rate = wl1271_rate_to_idx(wl, result->rate_class_index);
	319	retries = result->ack_failures;
	320	} else if (result->status == TX_RETRY_EXCEEDED) {
	321	wl->stats.excessive_retries++;
	322	retries = result->ack_failures;
f5fc0f86 LC	323	}
f5fc0f86 LC	324
31627dc5 JO	325	info->status.rates[0].idx = rate;
	326	info->status.rates[0].count = retries;
	327	info->status.rates[0].flags = 0;
	328	info->status.ack_signal = -1;
	329
f5fc0f86 LC	330	wl->stats.retry_count += result->ack_failures;
f5fc0f86 LC	331
ac4e4ce5	332	/* update security sequence number */
04e36fc5 JO	333	wl->tx_security_seq += (result->lsb_security_sequence_number -
04e36fc5 JO	334	wl->tx_security_last_seq);
ac4e4ce5 JO	335	wl->tx_security_last_seq = result->lsb_security_sequence_number;
ac4e4ce5 JO	336
1e2b7976 JO	337	/* remove private header from packet */
	338	skb_pull(skb, sizeof(struct wl1271_tx_hw_descr));
	339
	340	/* remove TKIP header space if present */
f5fc0f86	341	if (info->control.hw_key &&
97359d12	342	info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP) {
1e2b7976 JO	343	int hdrlen = ieee80211_get_hdrlen_from_skb(skb);
	344	memmove(skb->data + WL1271_TKIP_IV_SPACE, skb->data, hdrlen);
	345	skb_pull(skb, WL1271_TKIP_IV_SPACE);
	346	}
f5fc0f86 LC	347
	348	wl1271_debug(DEBUG_TX, "tx status id %u skb 0x%p failures %u rate 0x%x"
	349	" status 0x%x",
	350	result->id, skb, result->ack_failures,
	351	result->rate_class_index, result->status);
	352
f5fc0f86 LC	353	/* return the packet to the stack */
	354	ieee80211_tx_status(wl->hw, skb);
	355	wl->tx_frames[result->id] = NULL;
781608c4	356	wl->tx_frames_cnt--;
f5fc0f86 LC	357	}
	358
	359	/* Called upon reception of a TX complete interrupt */
ffb591cd	360	void wl1271_tx_complete(struct wl1271 *wl)
f5fc0f86 LC	361	{
	362	struct wl1271_acx_mem_map *memmap =
	363	(struct wl1271_acx_mem_map *)wl->target_mem_map;
ffb591cd	364	u32 count, fw_counter;
f5fc0f86 LC	365	u32 i;
f5fc0f86 LC	366
f5fc0f86	367	/* read the tx results from the chipset */
7b048c52 TP	368	wl1271_read(wl, le32_to_cpu(memmap->tx_result),
7b048c52 TP	369	wl->tx_res_if, sizeof(*wl->tx_res_if), false);
ffb591cd JO	370	fw_counter = le32_to_cpu(wl->tx_res_if->tx_result_fw_counter);
	371
	372	/* write host counter to chipset (to ack) */
	373	wl1271_write32(wl, le32_to_cpu(memmap->tx_result) +
	374	offsetof(struct wl1271_tx_hw_res_if,
	375	tx_result_host_counter), fw_counter);
	376
	377	count = fw_counter - wl->tx_results_count;
06f7bc7d	378	wl1271_debug(DEBUG_TX, "tx_complete received, packets: %d", count);
f5fc0f86 LC	379
f5fc0f86 LC	380	/* verify that the result buffer is not getting overrun */
ffb591cd	381	if (unlikely(count > TX_HW_RESULT_QUEUE_LEN))
f5fc0f86	382	wl1271_warning("TX result overflow from chipset: %d", count);
f5fc0f86 LC	383
	384	/* process the results */
	385	for (i = 0; i < count; i++) {
	386	struct wl1271_tx_hw_res_descr *result;
	387	u8 offset = wl->tx_results_count & TX_HW_RESULT_QUEUE_LEN_MASK;
	388
	389	/* process the packet */
	390	result = &(wl->tx_res_if->tx_results_queue[offset]);
	391	wl1271_tx_complete_packet(wl, result);
	392
	393	wl->tx_results_count++;
	394	}
06f7bc7d JO	395
	396	if (test_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags) &&
	397	skb_queue_len(&wl->tx_queue) <= WL1271_TX_QUEUE_LOW_WATERMARK) {
	398	unsigned long flags;
	399
	400	/* firmware buffer has space, restart queues */
	401	wl1271_debug(DEBUG_TX, "tx_complete: waking queues");
	402	spin_lock_irqsave(&wl->wl_lock, flags);
	403	ieee80211_wake_queues(wl->hw);
	404	clear_bit(WL1271_FLAG_TX_QUEUE_STOPPED, &wl->flags);
	405	spin_unlock_irqrestore(&wl->wl_lock, flags);
	406	ieee80211_queue_work(wl->hw, &wl->tx_work);
	407	}
f5fc0f86 LC	408	}
	409
	410	/* caller must hold wl->mutex */
781608c4	411	void wl1271_tx_reset(struct wl1271 *wl)
f5fc0f86 LC	412	{
	413	int i;
	414	struct sk_buff *skb;
f5fc0f86 LC	415
f5fc0f86 LC	416	/* TX failure */
f5fc0f86	417	while ((skb = skb_dequeue(&wl->tx_queue))) {
781608c4	418	wl1271_debug(DEBUG_TX, "freeing skb 0x%p", skb);
f5fc0f86 LC	419	ieee80211_tx_status(wl->hw, skb);
	420	}
	421
be7078c2	422	for (i = 0; i < ACX_TX_DESCRIPTORS; i++)
f5fc0f86 LC	423	if (wl->tx_frames[i] != NULL) {
f5fc0f86 LC	424	skb = wl->tx_frames[i];
f5fc0f86	425	wl->tx_frames[i] = NULL;
781608c4	426	wl1271_debug(DEBUG_TX, "freeing skb 0x%p", skb);
6bbe89de	427	ieee80211_tx_status(wl->hw, skb);
f5fc0f86	428	}
781608c4 JO	429	wl->tx_frames_cnt = 0;
	430	}
	431
	432	#define WL1271_TX_FLUSH_TIMEOUT 500000
	433
	434	/* caller must NOT hold wl->mutex */
	435	void wl1271_tx_flush(struct wl1271 *wl)
	436	{
	437	unsigned long timeout;
	438	timeout = jiffies + usecs_to_jiffies(WL1271_TX_FLUSH_TIMEOUT);
	439
	440	while (!time_after(jiffies, timeout)) {
	441	mutex_lock(&wl->mutex);
	442	wl1271_debug(DEBUG_TX, "flushing tx buffer: %d",
	443	wl->tx_frames_cnt);
	444	if ((wl->tx_frames_cnt == 0) &&
	445	skb_queue_empty(&wl->tx_queue)) {
	446	mutex_unlock(&wl->mutex);
	447	return;
	448	}
	449	mutex_unlock(&wl->mutex);
	450	msleep(1);
	451	}
	452
	453	wl1271_warning("Unable to flush all TX buffers, timed out.");
f5fc0f86	454	}