drivers/net/wireless/brcm80211/brcmfmac/fwsignal.c

   1 /*
   2  * Copyright (c) 2010 Broadcom Corporation
   3  *
   4  * Permission to use, copy, modify, and/or distribute this software for any
   5  * purpose with or without fee is hereby granted, provided that the above
   6  * copyright notice and this permission notice appear in all copies.
   7  *
   8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
   9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
  10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
  11  * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
  12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
  13  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
  14  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
  15  */
  16 #include <linux/types.h>
  17 #include <linux/module.h>
  18 #include <linux/if_ether.h>
  19 #include <linux/spinlock.h>
  20 #include <linux/skbuff.h>
  21 #include <linux/netdevice.h>
  22 #include <linux/etherdevice.h>
  23 #include <linux/err.h>
  24 #include <linux/jiffies.h>
  25 #include <net/cfg80211.h>
  26
  27 #include <brcmu_utils.h>
  28 #include <brcmu_wifi.h>
  29 #include "dhd.h"
  30 #include "dhd_proto.h"
  31 #include "dhd_dbg.h"
  32 #include "dhd_bus.h"
  33 #include "fwil.h"
  34 #include "fwil_types.h"
  35 #include "fweh.h"
  36 #include "fwsignal.h"
  37 #include "p2p.h"
  38 #include "wl_cfg80211.h"
  39
  40 /**
  41  * DOC: Firmware Signalling
  42  *
  43  * Firmware can send signals to host and vice versa, which are passed in the
  44  * data packets using TLV based header. This signalling layer is on top of the
  45  * BDC bus protocol layer.
  46  */
  47
  48 /*
  49  * single definition for firmware-driver flow control tlv's.
  50  *
  51  * each tlv is specified by BRCMF_FWS_TLV_DEF(name, ID, length).
  52  * A length value 0 indicates variable length tlv.
  53  */
  54 #define BRCMF_FWS_TLV_DEFLIST \
  55         BRCMF_FWS_TLV_DEF(MAC_OPEN, 1, 1) \
  56         BRCMF_FWS_TLV_DEF(MAC_CLOSE, 2, 1) \
  57         BRCMF_FWS_TLV_DEF(MAC_REQUEST_CREDIT, 3, 2) \
  58         BRCMF_FWS_TLV_DEF(TXSTATUS, 4, 4) \
  59         BRCMF_FWS_TLV_DEF(PKTTAG, 5, 4) \
  60         BRCMF_FWS_TLV_DEF(MACDESC_ADD,  6, 8) \
  61         BRCMF_FWS_TLV_DEF(MACDESC_DEL, 7, 8) \
  62         BRCMF_FWS_TLV_DEF(RSSI, 8, 1) \
  63         BRCMF_FWS_TLV_DEF(INTERFACE_OPEN, 9, 1) \
  64         BRCMF_FWS_TLV_DEF(INTERFACE_CLOSE, 10, 1) \
  65         BRCMF_FWS_TLV_DEF(FIFO_CREDITBACK, 11, 6) \
  66         BRCMF_FWS_TLV_DEF(PENDING_TRAFFIC_BMP, 12, 2) \
  67         BRCMF_FWS_TLV_DEF(MAC_REQUEST_PACKET, 13, 3) \
  68         BRCMF_FWS_TLV_DEF(HOST_REORDER_RXPKTS, 14, 10) \
  69         BRCMF_FWS_TLV_DEF(TRANS_ID, 18, 6) \
  70         BRCMF_FWS_TLV_DEF(COMP_TXSTATUS, 19, 1) \
  71         BRCMF_FWS_TLV_DEF(FILLER, 255, 0)
  72
  73 /*
  74  * enum brcmf_fws_tlv_type - definition of tlv identifiers.
  75  */
  76 #define BRCMF_FWS_TLV_DEF(name, id, len) \
  77         BRCMF_FWS_TYPE_ ## name =  id,
  78 enum brcmf_fws_tlv_type {
  79         BRCMF_FWS_TLV_DEFLIST
  80         BRCMF_FWS_TYPE_INVALID
  81 };
  82 #undef BRCMF_FWS_TLV_DEF
  83
  84 /*
  85  * enum brcmf_fws_tlv_len - definition of tlv lengths.
  86  */
  87 #define BRCMF_FWS_TLV_DEF(name, id, len) \
  88         BRCMF_FWS_TYPE_ ## name ## _LEN = (len),
  89 enum brcmf_fws_tlv_len {
  90         BRCMF_FWS_TLV_DEFLIST
  91 };
  92 #undef BRCMF_FWS_TLV_DEF
  93
  94 #ifdef DEBUG
  95 /*
  96  * brcmf_fws_tlv_names - array of tlv names.
  97  */
  98 #define BRCMF_FWS_TLV_DEF(name, id, len) \
  99         { id, #name },
 100 static struct {
 101         enum brcmf_fws_tlv_type id;
 102         const char *name;
 103 } brcmf_fws_tlv_names[] = {
 104         BRCMF_FWS_TLV_DEFLIST
 105 };
 106 #undef BRCMF_FWS_TLV_DEF
 107
 108 #define BRCMF_FWS_TYPE_SEQ_LEN                          2
 109
 110
 111 static const char *brcmf_fws_get_tlv_name(enum brcmf_fws_tlv_type id)
 112 {
 113         int i;
 114
 115         for (i = 0; i < ARRAY_SIZE(brcmf_fws_tlv_names); i++)
 116                 if (brcmf_fws_tlv_names[i].id == id)
 117                         return brcmf_fws_tlv_names[i].name;
 118
 119         return "INVALID";
 120 }
 121 #else
 122 static const char *brcmf_fws_get_tlv_name(enum brcmf_fws_tlv_type id)
 123 {
 124         return "NODEBUG";
 125 }
 126 #endif /* DEBUG */
 127
 128 /*
 129  * flags used to enable tlv signalling from firmware.
 130  */
 131 #define BRCMF_FWS_FLAGS_RSSI_SIGNALS                    0x0001
 132 #define BRCMF_FWS_FLAGS_XONXOFF_SIGNALS                 0x0002
 133 #define BRCMF_FWS_FLAGS_CREDIT_STATUS_SIGNALS           0x0004
 134 #define BRCMF_FWS_FLAGS_HOST_PROPTXSTATUS_ACTIVE        0x0008
 135 #define BRCMF_FWS_FLAGS_PSQ_GENERATIONFSM_ENABLE        0x0010
 136 #define BRCMF_FWS_FLAGS_PSQ_ZERO_BUFFER_ENABLE          0x0020
 137 #define BRCMF_FWS_FLAGS_HOST_RXREORDER_ACTIVE           0x0040
 138
 139 #define BRCMF_FWS_MAC_DESC_TABLE_SIZE                   32
 140 #define BRCMF_FWS_MAC_DESC_ID_INVALID                   0xff
 141
 142 #define BRCMF_FWS_HOSTIF_FLOWSTATE_OFF                  0
 143 #define BRCMF_FWS_HOSTIF_FLOWSTATE_ON                   1
 144 #define BRCMF_FWS_FLOWCONTROL_HIWATER                   128
 145 #define BRCMF_FWS_FLOWCONTROL_LOWATER                   64
 146
 147 #define BRCMF_FWS_PSQ_PREC_COUNT                ((BRCMF_FWS_FIFO_COUNT + 1) * 2)
 148 #define BRCMF_FWS_PSQ_LEN                               256
 149
 150 #define BRCMF_FWS_HTOD_FLAG_PKTFROMHOST                 0x01
 151 #define BRCMF_FWS_HTOD_FLAG_PKT_REQUESTED               0x02
 152
 153 #define BRCMF_FWS_RET_OK_NOSCHEDULE                     0
 154 #define BRCMF_FWS_RET_OK_SCHEDULE                       1
 155
 156 #define BRCMF_FWS_MODE_REUSESEQ_SHIFT                   3       /* seq reuse */
 157 #define BRCMF_FWS_MODE_SET_REUSESEQ(x, val)     ((x) = \
 158                 ((x) & ~(1 << BRCMF_FWS_MODE_REUSESEQ_SHIFT)) | \
 159                 (((val) & 1) << BRCMF_FWS_MODE_REUSESEQ_SHIFT))
 160 #define BRCMF_FWS_MODE_GET_REUSESEQ(x)  \
 161                 (((x) >> BRCMF_FWS_MODE_REUSESEQ_SHIFT) & 1)
 162
 163 /**
 164  * enum brcmf_fws_skb_state - indicates processing state of skb.
 165  *
 166  * @BRCMF_FWS_SKBSTATE_NEW: sk_buff is newly arrived in the driver.
 167  * @BRCMF_FWS_SKBSTATE_DELAYED: sk_buff had to wait on queue.
 168  * @BRCMF_FWS_SKBSTATE_SUPPRESSED: sk_buff has been suppressed by firmware.
 169  * @BRCMF_FWS_SKBSTATE_TIM: allocated for TIM update info.
 170  */
 171 enum brcmf_fws_skb_state {
 172         BRCMF_FWS_SKBSTATE_NEW,
 173         BRCMF_FWS_SKBSTATE_DELAYED,
 174         BRCMF_FWS_SKBSTATE_SUPPRESSED,
 175         BRCMF_FWS_SKBSTATE_TIM
 176 };
 177
 178 /**
 179  * struct brcmf_skbuff_cb - control buffer associated with skbuff.
 180  *
 181  * @bus_flags: 2 bytes reserved for bus specific parameters
 182  * @if_flags: holds interface index and packet related flags.
 183  * @htod: host to device packet identifier (used in PKTTAG tlv).
 184  * @htod_seq: this 16-bit is original seq number for every suppress packet.
 185  * @state: transmit state of the packet.
 186  * @mac: descriptor related to destination for this packet.
 187  *
 188  * This information is stored in control buffer struct sk_buff::cb, which
 189  * provides 48 bytes of storage so this structure should not exceed that.
 190  */
 191 struct brcmf_skbuff_cb {
 192         u16 bus_flags;
 193         u16 if_flags;
 194         u32 htod;
 195         u16 htod_seq;
 196         enum brcmf_fws_skb_state state;
 197         struct brcmf_fws_mac_descriptor *mac;
 198 };
 199
 200 /*
 201  * macro casting skbuff control buffer to struct brcmf_skbuff_cb.
 202  */
 203 #define brcmf_skbcb(skb)        ((struct brcmf_skbuff_cb *)((skb)->cb))
 204
 205 /*
 206  * sk_buff control if flags
 207  *
 208  *      b[11]  - packet sent upon firmware request.
 209  *      b[10]  - packet only contains signalling data.
 210  *      b[9]   - packet is a tx packet.
 211  *      b[8]   - packet used requested credit
 212  *      b[7]   - interface in AP mode.
 213  *      b[3:0] - interface index.
 214  */
 215 #define BRCMF_SKB_IF_FLAGS_REQUESTED_MASK       0x0800
 216 #define BRCMF_SKB_IF_FLAGS_REQUESTED_SHIFT      11
 217 #define BRCMF_SKB_IF_FLAGS_SIGNAL_ONLY_MASK     0x0400
 218 #define BRCMF_SKB_IF_FLAGS_SIGNAL_ONLY_SHIFT    10
 219 #define BRCMF_SKB_IF_FLAGS_TRANSMIT_MASK        0x0200
 220 #define BRCMF_SKB_IF_FLAGS_TRANSMIT_SHIFT       9
 221 #define BRCMF_SKB_IF_FLAGS_REQ_CREDIT_MASK      0x0100
 222 #define BRCMF_SKB_IF_FLAGS_REQ_CREDIT_SHIFT     8
 223 #define BRCMF_SKB_IF_FLAGS_IF_AP_MASK           0x0080
 224 #define BRCMF_SKB_IF_FLAGS_IF_AP_SHIFT          7
 225 #define BRCMF_SKB_IF_FLAGS_INDEX_MASK           0x000f
 226 #define BRCMF_SKB_IF_FLAGS_INDEX_SHIFT          0
 227
 228 #define brcmf_skb_if_flags_set_field(skb, field, value) \
 229         brcmu_maskset16(&(brcmf_skbcb(skb)->if_flags), \
 230                         BRCMF_SKB_IF_FLAGS_ ## field ## _MASK, \
 231                         BRCMF_SKB_IF_FLAGS_ ## field ## _SHIFT, (value))
 232 #define brcmf_skb_if_flags_get_field(skb, field) \
 233         brcmu_maskget16(brcmf_skbcb(skb)->if_flags, \
 234                         BRCMF_SKB_IF_FLAGS_ ## field ## _MASK, \
 235                         BRCMF_SKB_IF_FLAGS_ ## field ## _SHIFT)
 236
 237 /*
 238  * sk_buff control packet identifier
 239  *
 240  * 32-bit packet identifier used in PKTTAG tlv from host to dongle.
 241  *
 242  * - Generated at the host (e.g. dhd)
 243  * - Seen as a generic sequence number by firmware except for the flags field.
 244  *
 245  * Generation   : b[31] => generation number for this packet [host->fw]
 246  *                         OR, current generation number [fw->host]
 247  * Flags        : b[30:27] => command, status flags
 248  * FIFO-AC      : b[26:24] => AC-FIFO id
 249  * h-slot       : b[23:8] => hanger-slot
 250  * freerun      : b[7:0] => A free running counter
 251  */
 252 #define BRCMF_SKB_HTOD_TAG_GENERATION_MASK              0x80000000
 253 #define BRCMF_SKB_HTOD_TAG_GENERATION_SHIFT             31
 254 #define BRCMF_SKB_HTOD_TAG_FLAGS_MASK                   0x78000000
 255 #define BRCMF_SKB_HTOD_TAG_FLAGS_SHIFT                  27
 256 #define BRCMF_SKB_HTOD_TAG_FIFO_MASK                    0x07000000
 257 #define BRCMF_SKB_HTOD_TAG_FIFO_SHIFT                   24
 258 #define BRCMF_SKB_HTOD_TAG_HSLOT_MASK                   0x00ffff00
 259 #define BRCMF_SKB_HTOD_TAG_HSLOT_SHIFT                  8
 260 #define BRCMF_SKB_HTOD_TAG_FREERUN_MASK                 0x000000ff
 261 #define BRCMF_SKB_HTOD_TAG_FREERUN_SHIFT                0
 262
 263 #define brcmf_skb_htod_tag_set_field(skb, field, value) \
 264         brcmu_maskset32(&(brcmf_skbcb(skb)->htod), \
 265                         BRCMF_SKB_HTOD_TAG_ ## field ## _MASK, \
 266                         BRCMF_SKB_HTOD_TAG_ ## field ## _SHIFT, (value))
 267 #define brcmf_skb_htod_tag_get_field(skb, field) \
 268         brcmu_maskget32(brcmf_skbcb(skb)->htod, \
 269                         BRCMF_SKB_HTOD_TAG_ ## field ## _MASK, \
 270                         BRCMF_SKB_HTOD_TAG_ ## field ## _SHIFT)
 271
 272 #define BRCMF_SKB_HTOD_SEQ_FROMFW_MASK                  0x2000
 273 #define BRCMF_SKB_HTOD_SEQ_FROMFW_SHIFT                 13
 274 #define BRCMF_SKB_HTOD_SEQ_FROMDRV_MASK                 0x1000
 275 #define BRCMF_SKB_HTOD_SEQ_FROMDRV_SHIFT                12
 276 #define BRCMF_SKB_HTOD_SEQ_NR_MASK                      0x0fff
 277 #define BRCMF_SKB_HTOD_SEQ_NR_SHIFT                     0
 278
 279 #define brcmf_skb_htod_seq_set_field(skb, field, value) \
 280         brcmu_maskset16(&(brcmf_skbcb(skb)->htod_seq), \
 281                         BRCMF_SKB_HTOD_SEQ_ ## field ## _MASK, \
 282                         BRCMF_SKB_HTOD_SEQ_ ## field ## _SHIFT, (value))
 283 #define brcmf_skb_htod_seq_get_field(skb, field) \
 284         brcmu_maskget16(brcmf_skbcb(skb)->htod_seq, \
 285                         BRCMF_SKB_HTOD_SEQ_ ## field ## _MASK, \
 286                         BRCMF_SKB_HTOD_SEQ_ ## field ## _SHIFT)
 287
 288 #define BRCMF_FWS_TXSTAT_GENERATION_MASK        0x80000000
 289 #define BRCMF_FWS_TXSTAT_GENERATION_SHIFT       31
 290 #define BRCMF_FWS_TXSTAT_FLAGS_MASK             0x78000000
 291 #define BRCMF_FWS_TXSTAT_FLAGS_SHIFT            27
 292 #define BRCMF_FWS_TXSTAT_FIFO_MASK              0x07000000
 293 #define BRCMF_FWS_TXSTAT_FIFO_SHIFT             24
 294 #define BRCMF_FWS_TXSTAT_HSLOT_MASK             0x00FFFF00
 295 #define BRCMF_FWS_TXSTAT_HSLOT_SHIFT            8
 296 #define BRCMF_FWS_TXSTAT_FREERUN_MASK           0x000000FF
 297 #define BRCMF_FWS_TXSTAT_FREERUN_SHIFT          0
 298
 299 #define brcmf_txstatus_get_field(txs, field) \
 300         brcmu_maskget32(txs, BRCMF_FWS_TXSTAT_ ## field ## _MASK, \
 301                         BRCMF_FWS_TXSTAT_ ## field ## _SHIFT)
 302
 303 /* How long to defer borrowing in jiffies */
 304 #define BRCMF_FWS_BORROW_DEFER_PERIOD           (HZ / 10)
 305
 306 /**
 307  * enum brcmf_fws_fifo - fifo indices used by dongle firmware.
 308  *
 309  * @BRCMF_FWS_FIFO_FIRST: first fifo, ie. background.
 310  * @BRCMF_FWS_FIFO_AC_BK: fifo for background traffic.
 311  * @BRCMF_FWS_FIFO_AC_BE: fifo for best-effort traffic.
 312  * @BRCMF_FWS_FIFO_AC_VI: fifo for video traffic.
 313  * @BRCMF_FWS_FIFO_AC_VO: fifo for voice traffic.
 314  * @BRCMF_FWS_FIFO_BCMC: fifo for broadcast/multicast (AP only).
 315  * @BRCMF_FWS_FIFO_ATIM: fifo for ATIM (AP only).
 316  * @BRCMF_FWS_FIFO_COUNT: number of fifos.
 317  */
 318 enum brcmf_fws_fifo {
 319         BRCMF_FWS_FIFO_FIRST,
 320         BRCMF_FWS_FIFO_AC_BK = BRCMF_FWS_FIFO_FIRST,
 321         BRCMF_FWS_FIFO_AC_BE,
 322         BRCMF_FWS_FIFO_AC_VI,
 323         BRCMF_FWS_FIFO_AC_VO,
 324         BRCMF_FWS_FIFO_BCMC,
 325         BRCMF_FWS_FIFO_ATIM,
 326         BRCMF_FWS_FIFO_COUNT
 327 };
 328
 329 /**
 330  * enum brcmf_fws_txstatus - txstatus flag values.
 331  *
 332  * @BRCMF_FWS_TXSTATUS_DISCARD:
 333  *      host is free to discard the packet.
 334  * @BRCMF_FWS_TXSTATUS_CORE_SUPPRESS:
 335  *      802.11 core suppressed the packet.
 336  * @BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS:
 337  *      firmware suppress the packet as device is already in PS mode.
 338  * @BRCMF_FWS_TXSTATUS_FW_TOSSED:
 339  *      firmware tossed the packet.
 340  * @BRCMF_FWS_TXSTATUS_HOST_TOSSED:
 341  *      host tossed the packet.
 342  */
 343 enum brcmf_fws_txstatus {
 344         BRCMF_FWS_TXSTATUS_DISCARD,
 345         BRCMF_FWS_TXSTATUS_CORE_SUPPRESS,
 346         BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS,
 347         BRCMF_FWS_TXSTATUS_FW_TOSSED,
 348         BRCMF_FWS_TXSTATUS_HOST_TOSSED
 349 };
 350
 351 enum brcmf_fws_fcmode {
 352         BRCMF_FWS_FCMODE_NONE,
 353         BRCMF_FWS_FCMODE_IMPLIED_CREDIT,
 354         BRCMF_FWS_FCMODE_EXPLICIT_CREDIT
 355 };
 356
 357 enum brcmf_fws_mac_desc_state {
 358         BRCMF_FWS_STATE_OPEN = 1,
 359         BRCMF_FWS_STATE_CLOSE
 360 };
 361
 362 /**
 363  * struct brcmf_fws_mac_descriptor - firmware signalling data per node/interface
 364  *
 365  * @occupied: slot is in use.
 366  * @mac_handle: handle for mac entry determined by firmware.
 367  * @interface_id: interface index.
 368  * @state: current state.
 369  * @suppressed: mac entry is suppressed.
 370  * @generation: generation bit.
 371  * @ac_bitmap: ac queue bitmap.
 372  * @requested_credit: credits requested by firmware.
 373  * @ea: ethernet address.
 374  * @seq: per-node free-running sequence.
 375  * @psq: power-save queue.
 376  * @transit_count: packet in transit to firmware.
 377  */
 378 struct brcmf_fws_mac_descriptor {
 379         char name[16];
 380         u8 occupied;
 381         u8 mac_handle;
 382         u8 interface_id;
 383         u8 state;
 384         bool suppressed;
 385         u8 generation;
 386         u8 ac_bitmap;
 387         u8 requested_credit;
 388         u8 requested_packet;
 389         u8 ea[ETH_ALEN];
 390         u8 seq[BRCMF_FWS_FIFO_COUNT];
 391         struct pktq psq;
 392         int transit_count;
 393         int suppr_transit_count;
 394         bool send_tim_signal;
 395         u8 traffic_pending_bmp;
 396         u8 traffic_lastreported_bmp;
 397 };
 398
 399 #define BRCMF_FWS_HANGER_MAXITEMS       1024
 400
 401 /**
 402  * enum brcmf_fws_hanger_item_state - state of hanger item.
 403  *
 404  * @BRCMF_FWS_HANGER_ITEM_STATE_FREE: item is free for use.
 405  * @BRCMF_FWS_HANGER_ITEM_STATE_INUSE: item is in use.
 406  * @BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED: item was suppressed.
 407  */
 408 enum brcmf_fws_hanger_item_state {
 409         BRCMF_FWS_HANGER_ITEM_STATE_FREE = 1,
 410         BRCMF_FWS_HANGER_ITEM_STATE_INUSE,
 411         BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED
 412 };
 413
 414
 415 /**
 416  * struct brcmf_fws_hanger_item - single entry for tx pending packet.
 417  *
 418  * @state: entry is either free or occupied.
 419  * @pkt: packet itself.
 420  */
 421 struct brcmf_fws_hanger_item {
 422         enum brcmf_fws_hanger_item_state state;
 423         struct sk_buff *pkt;
 424 };
 425
 426 /**
 427  * struct brcmf_fws_hanger - holds packets awaiting firmware txstatus.
 428  *
 429  * @pushed: packets pushed to await txstatus.
 430  * @popped: packets popped upon handling txstatus.
 431  * @failed_to_push: packets that could not be pushed.
 432  * @failed_to_pop: packets that could not be popped.
 433  * @failed_slotfind: packets for which failed to find an entry.
 434  * @slot_pos: last returned item index for a free entry.
 435  * @items: array of hanger items.
 436  */
 437 struct brcmf_fws_hanger {
 438         u32 pushed;
 439         u32 popped;
 440         u32 failed_to_push;
 441         u32 failed_to_pop;
 442         u32 failed_slotfind;
 443         u32 slot_pos;
 444         struct brcmf_fws_hanger_item items[BRCMF_FWS_HANGER_MAXITEMS];
 445 };
 446
 447 struct brcmf_fws_macdesc_table {
 448         struct brcmf_fws_mac_descriptor nodes[BRCMF_FWS_MAC_DESC_TABLE_SIZE];
 449         struct brcmf_fws_mac_descriptor iface[BRCMF_MAX_IFS];
 450         struct brcmf_fws_mac_descriptor other;
 451 };
 452
 453 struct brcmf_fws_info {
 454         struct brcmf_pub *drvr;
 455         spinlock_t spinlock;
 456         ulong flags;
 457         struct brcmf_fws_stats stats;
 458         struct brcmf_fws_hanger hanger;
 459         enum brcmf_fws_fcmode fcmode;
 460         bool fw_signals;
 461         bool bcmc_credit_check;
 462         struct brcmf_fws_macdesc_table desc;
 463         struct workqueue_struct *fws_wq;
 464         struct work_struct fws_dequeue_work;
 465         u32 fifo_enqpkt[BRCMF_FWS_FIFO_COUNT];
 466         int fifo_credit[BRCMF_FWS_FIFO_COUNT];
 467         int credits_borrowed[BRCMF_FWS_FIFO_AC_VO + 1];
 468         int deq_node_pos[BRCMF_FWS_FIFO_COUNT];
 469         u32 fifo_credit_map;
 470         u32 fifo_delay_map;
 471         unsigned long borrow_defer_timestamp;
 472         bool bus_flow_blocked;
 473         bool creditmap_received;
 474         u8 mode;
 475 };
 476
 477 /*
 478  * brcmf_fws_prio2fifo - mapping from 802.1d priority to firmware fifo index.
 479  */
 480 static const int brcmf_fws_prio2fifo[] = {
 481         BRCMF_FWS_FIFO_AC_BE,
 482         BRCMF_FWS_FIFO_AC_BK,
 483         BRCMF_FWS_FIFO_AC_BK,
 484         BRCMF_FWS_FIFO_AC_BE,
 485         BRCMF_FWS_FIFO_AC_VI,
 486         BRCMF_FWS_FIFO_AC_VI,
 487         BRCMF_FWS_FIFO_AC_VO,
 488         BRCMF_FWS_FIFO_AC_VO
 489 };
 490
 491 static int fcmode;
 492 module_param(fcmode, int, S_IRUSR);
 493 MODULE_PARM_DESC(fcmode, "mode of firmware signalled flow control");
 494
 495 #define BRCMF_FWS_TLV_DEF(name, id, len) \
 496         case BRCMF_FWS_TYPE_ ## name: \
 497                 return len;
 498
 499 /**
 500  * brcmf_fws_get_tlv_len() - returns defined length for given tlv id.
 501  *
 502  * @fws: firmware-signalling information.
 503  * @id: identifier of the TLV.
 504  *
 505  * Return: the specified length for the given TLV; Otherwise -EINVAL.
 506  */
 507 static int brcmf_fws_get_tlv_len(struct brcmf_fws_info *fws,
 508                                  enum brcmf_fws_tlv_type id)
 509 {
 510         switch (id) {
 511         BRCMF_FWS_TLV_DEFLIST
 512         default:
 513                 fws->stats.tlv_invalid_type++;
 514                 break;
 515         }
 516         return -EINVAL;
 517 }
 518 #undef BRCMF_FWS_TLV_DEF
 519
 520 static void brcmf_fws_lock(struct brcmf_fws_info *fws)
 521                 __acquires(&fws->spinlock)
 522 {
 523         spin_lock_irqsave(&fws->spinlock, fws->flags);
 524 }
 525
 526 static void brcmf_fws_unlock(struct brcmf_fws_info *fws)
 527                 __releases(&fws->spinlock)
 528 {
 529         spin_unlock_irqrestore(&fws->spinlock, fws->flags);
 530 }
 531
 532 static bool brcmf_fws_ifidx_match(struct sk_buff *skb, void *arg)
 533 {
 534         u32 ifidx = brcmf_skb_if_flags_get_field(skb, INDEX);
 535         return ifidx == *(int *)arg;
 536 }
 537
 538 static void brcmf_fws_psq_flush(struct brcmf_fws_info *fws, struct pktq *q,
 539                                 int ifidx)
 540 {
 541         bool (*matchfn)(struct sk_buff *, void *) = NULL;
 542         struct sk_buff *skb;
 543         int prec;
 544
 545         if (ifidx != -1)
 546                 matchfn = brcmf_fws_ifidx_match;
 547         for (prec = 0; prec < q->num_prec; prec++) {
 548                 skb = brcmu_pktq_pdeq_match(q, prec, matchfn, &ifidx);
 549                 while (skb) {
 550                         brcmu_pkt_buf_free_skb(skb);
 551                         skb = brcmu_pktq_pdeq_match(q, prec, matchfn, &ifidx);
 552                 }
 553         }
 554 }
 555
 556 static void brcmf_fws_hanger_init(struct brcmf_fws_hanger *hanger)
 557 {
 558         int i;
 559
 560         memset(hanger, 0, sizeof(*hanger));
 561         for (i = 0; i < ARRAY_SIZE(hanger->items); i++)
 562                 hanger->items[i].state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 563 }
 564
 565 static u32 brcmf_fws_hanger_get_free_slot(struct brcmf_fws_hanger *h)
 566 {
 567         u32 i;
 568
 569         i = (h->slot_pos + 1) % BRCMF_FWS_HANGER_MAXITEMS;
 570
 571         while (i != h->slot_pos) {
 572                 if (h->items[i].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
 573                         h->slot_pos = i;
 574                         goto done;
 575                 }
 576                 i++;
 577                 if (i == BRCMF_FWS_HANGER_MAXITEMS)
 578                         i = 0;
 579         }
 580         brcmf_err("all slots occupied\n");
 581         h->failed_slotfind++;
 582         i = BRCMF_FWS_HANGER_MAXITEMS;
 583 done:
 584         return i;
 585 }
 586
 587 static int brcmf_fws_hanger_pushpkt(struct brcmf_fws_hanger *h,
 588                                     struct sk_buff *pkt, u32 slot_id)
 589 {
 590         if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
 591                 return -ENOENT;
 592
 593         if (h->items[slot_id].state != BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
 594                 brcmf_err("slot is not free\n");
 595                 h->failed_to_push++;
 596                 return -EINVAL;
 597         }
 598
 599         h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_INUSE;
 600         h->items[slot_id].pkt = pkt;
 601         h->pushed++;
 602         return 0;
 603 }
 604
 605 static int brcmf_fws_hanger_poppkt(struct brcmf_fws_hanger *h,
 606                                           u32 slot_id, struct sk_buff **pktout,
 607                                           bool remove_item)
 608 {
 609         if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
 610                 return -ENOENT;
 611
 612         if (h->items[slot_id].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
 613                 brcmf_err("entry not in use\n");
 614                 h->failed_to_pop++;
 615                 return -EINVAL;
 616         }
 617
 618         *pktout = h->items[slot_id].pkt;
 619         if (remove_item) {
 620                 h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 621                 h->items[slot_id].pkt = NULL;
 622                 h->popped++;
 623         }
 624         return 0;
 625 }
 626
 627 static int brcmf_fws_hanger_mark_suppressed(struct brcmf_fws_hanger *h,
 628                                             u32 slot_id)
 629 {
 630         if (slot_id >= BRCMF_FWS_HANGER_MAXITEMS)
 631                 return -ENOENT;
 632
 633         if (h->items[slot_id].state == BRCMF_FWS_HANGER_ITEM_STATE_FREE) {
 634                 brcmf_err("entry not in use\n");
 635                 return -EINVAL;
 636         }
 637
 638         h->items[slot_id].state = BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED;
 639         return 0;
 640 }
 641
 642 static void brcmf_fws_hanger_cleanup(struct brcmf_fws_info *fws,
 643                                      bool (*fn)(struct sk_buff *, void *),
 644                                      int ifidx)
 645 {
 646         struct brcmf_fws_hanger *h = &fws->hanger;
 647         struct sk_buff *skb;
 648         int i;
 649         enum brcmf_fws_hanger_item_state s;
 650
 651         for (i = 0; i < ARRAY_SIZE(h->items); i++) {
 652                 s = h->items[i].state;
 653                 if (s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE ||
 654                     s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE_SUPPRESSED) {
 655                         skb = h->items[i].pkt;
 656                         if (fn == NULL || fn(skb, &ifidx)) {
 657                                 /* suppress packets freed from psq */
 658                                 if (s == BRCMF_FWS_HANGER_ITEM_STATE_INUSE)
 659                                         brcmu_pkt_buf_free_skb(skb);
 660                                 h->items[i].state =
 661                                         BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 662                         }
 663                 }
 664         }
 665 }
 666
 667 static void brcmf_fws_macdesc_set_name(struct brcmf_fws_info *fws,
 668                                        struct brcmf_fws_mac_descriptor *desc)
 669 {
 670         if (desc == &fws->desc.other)
 671                 strlcpy(desc->name, "MAC-OTHER", sizeof(desc->name));
 672         else if (desc->mac_handle)
 673                 scnprintf(desc->name, sizeof(desc->name), "MAC-%d:%d",
 674                           desc->mac_handle, desc->interface_id);
 675         else
 676                 scnprintf(desc->name, sizeof(desc->name), "MACIF:%d",
 677                           desc->interface_id);
 678 }
 679
 680 static void brcmf_fws_macdesc_init(struct brcmf_fws_mac_descriptor *desc,
 681                                    u8 *addr, u8 ifidx)
 682 {
 683         brcmf_dbg(TRACE,
 684                   "enter: desc %p ea=%pM, ifidx=%u\n", desc, addr, ifidx);
 685         desc->occupied = 1;
 686         desc->state = BRCMF_FWS_STATE_OPEN;
 687         desc->requested_credit = 0;
 688         desc->requested_packet = 0;
 689         /* depending on use may need ifp->bssidx instead */
 690         desc->interface_id = ifidx;
 691         desc->ac_bitmap = 0xff; /* update this when handling APSD */
 692         if (addr)
 693                 memcpy(&desc->ea[0], addr, ETH_ALEN);
 694 }
 695
 696 static
 697 void brcmf_fws_macdesc_deinit(struct brcmf_fws_mac_descriptor *desc)
 698 {
 699         brcmf_dbg(TRACE,
 700                   "enter: ea=%pM, ifidx=%u\n", desc->ea, desc->interface_id);
 701         desc->occupied = 0;
 702         desc->state = BRCMF_FWS_STATE_CLOSE;
 703         desc->requested_credit = 0;
 704         desc->requested_packet = 0;
 705 }
 706
 707 static struct brcmf_fws_mac_descriptor *
 708 brcmf_fws_macdesc_lookup(struct brcmf_fws_info *fws, u8 *ea)
 709 {
 710         struct brcmf_fws_mac_descriptor *entry;
 711         int i;
 712
 713         if (ea == NULL)
 714                 return ERR_PTR(-EINVAL);
 715
 716         entry = &fws->desc.nodes[0];
 717         for (i = 0; i < ARRAY_SIZE(fws->desc.nodes); i++) {
 718                 if (entry->occupied && !memcmp(entry->ea, ea, ETH_ALEN))
 719                         return entry;
 720                 entry++;
 721         }
 722
 723         return ERR_PTR(-ENOENT);
 724 }
 725
 726 static struct brcmf_fws_mac_descriptor*
 727 brcmf_fws_macdesc_find(struct brcmf_fws_info *fws, struct brcmf_if *ifp, u8 *da)
 728 {
 729         struct brcmf_fws_mac_descriptor *entry = &fws->desc.other;
 730         bool multicast;
 731
 732         multicast = is_multicast_ether_addr(da);
 733
 734         /* Multicast destination, STA and P2P clients get the interface entry.
 735          * STA/GC gets the Mac Entry for TDLS destinations, TDLS destinations
 736          * have their own entry.
 737          */
 738         if (multicast && ifp->fws_desc) {
 739                 entry = ifp->fws_desc;
 740                 goto done;
 741         }
 742
 743         entry = brcmf_fws_macdesc_lookup(fws, da);
 744         if (IS_ERR(entry))
 745                 entry = ifp->fws_desc;
 746
 747 done:
 748         return entry;
 749 }
 750
 751 static bool brcmf_fws_macdesc_closed(struct brcmf_fws_info *fws,
 752                                      struct brcmf_fws_mac_descriptor *entry,
 753                                      int fifo)
 754 {
 755         struct brcmf_fws_mac_descriptor *if_entry;
 756         bool closed;
 757
 758         /* for unique destination entries the related interface
 759          * may be closed.
 760          */
 761         if (entry->mac_handle) {
 762                 if_entry = &fws->desc.iface[entry->interface_id];
 763                 if (if_entry->state == BRCMF_FWS_STATE_CLOSE)
 764                         return true;
 765         }
 766         /* an entry is closed when the state is closed and
 767          * the firmware did not request anything.
 768          */
 769         closed = entry->state == BRCMF_FWS_STATE_CLOSE &&
 770                  !entry->requested_credit && !entry->requested_packet;
 771
 772         /* Or firmware does not allow traffic for given fifo */
 773         return closed || !(entry->ac_bitmap & BIT(fifo));
 774 }
 775
 776 static void brcmf_fws_macdesc_cleanup(struct brcmf_fws_info *fws,
 777                                       struct brcmf_fws_mac_descriptor *entry,
 778                                       int ifidx)
 779 {
 780         if (entry->occupied && (ifidx == -1 || ifidx == entry->interface_id)) {
 781                 brcmf_fws_psq_flush(fws, &entry->psq, ifidx);
 782                 entry->occupied = !!(entry->psq.len);
 783         }
 784 }
 785
 786 static void brcmf_fws_bus_txq_cleanup(struct brcmf_fws_info *fws,
 787                                       bool (*fn)(struct sk_buff *, void *),
 788                                       int ifidx)
 789 {
 790         struct brcmf_fws_hanger_item *hi;
 791         struct pktq *txq;
 792         struct sk_buff *skb;
 793         int prec;
 794         u32 hslot;
 795
 796         txq = brcmf_bus_gettxq(fws->drvr->bus_if);
 797         if (IS_ERR(txq)) {
 798                 brcmf_dbg(TRACE, "no txq to clean up\n");
 799                 return;
 800         }
 801
 802         for (prec = 0; prec < txq->num_prec; prec++) {
 803                 skb = brcmu_pktq_pdeq_match(txq, prec, fn, &ifidx);
 804                 while (skb) {
 805                         hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
 806                         hi = &fws->hanger.items[hslot];
 807                         WARN_ON(skb != hi->pkt);
 808                         hi->state = BRCMF_FWS_HANGER_ITEM_STATE_FREE;
 809                         brcmu_pkt_buf_free_skb(skb);
 810                         skb = brcmu_pktq_pdeq_match(txq, prec, fn, &ifidx);
 811                 }
 812         }
 813 }
 814
 815 static void brcmf_fws_cleanup(struct brcmf_fws_info *fws, int ifidx)
 816 {
 817         int i;
 818         struct brcmf_fws_mac_descriptor *table;
 819         bool (*matchfn)(struct sk_buff *, void *) = NULL;
 820
 821         if (fws == NULL)
 822                 return;
 823
 824         if (ifidx != -1)
 825                 matchfn = brcmf_fws_ifidx_match;
 826
 827         /* cleanup individual nodes */
 828         table = &fws->desc.nodes[0];
 829         for (i = 0; i < ARRAY_SIZE(fws->desc.nodes); i++)
 830                 brcmf_fws_macdesc_cleanup(fws, &table[i], ifidx);
 831
 832         brcmf_fws_macdesc_cleanup(fws, &fws->desc.other, ifidx);
 833         brcmf_fws_bus_txq_cleanup(fws, matchfn, ifidx);
 834         brcmf_fws_hanger_cleanup(fws, matchfn, ifidx);
 835 }
 836
 837 static int brcmf_fws_hdrpush(struct brcmf_fws_info *fws, struct sk_buff *skb)
 838 {
 839         struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
 840         u8 *wlh;
 841         u16 data_offset = 0;
 842         u8 fillers;
 843         __le32 pkttag = cpu_to_le32(brcmf_skbcb(skb)->htod);
 844         __le16 pktseq = cpu_to_le16(brcmf_skbcb(skb)->htod_seq);
 845
 846         brcmf_dbg(TRACE, "enter: %s, idx=%d hslot=%d htod %X seq %X\n",
 847                   entry->name, brcmf_skb_if_flags_get_field(skb, INDEX),
 848                   (le32_to_cpu(pkttag) >> 8) & 0xffff,
 849                   brcmf_skbcb(skb)->htod, brcmf_skbcb(skb)->htod_seq);
 850         if (entry->send_tim_signal)
 851                 data_offset += 2 + BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN;
 852         if (BRCMF_FWS_MODE_GET_REUSESEQ(fws->mode))
 853                 data_offset += BRCMF_FWS_TYPE_SEQ_LEN;
 854         /* +2 is for Type[1] and Len[1] in TLV, plus TIM signal */
 855         data_offset += 2 + BRCMF_FWS_TYPE_PKTTAG_LEN;
 856         fillers = round_up(data_offset, 4) - data_offset;
 857         data_offset += fillers;
 858
 859         skb_push(skb, data_offset);
 860         wlh = skb->data;
 861
 862         wlh[0] = BRCMF_FWS_TYPE_PKTTAG;
 863         wlh[1] = BRCMF_FWS_TYPE_PKTTAG_LEN;
 864         memcpy(&wlh[2], &pkttag, sizeof(pkttag));
 865         if (BRCMF_FWS_MODE_GET_REUSESEQ(fws->mode)) {
 866                 wlh[1] += BRCMF_FWS_TYPE_SEQ_LEN;
 867                 memcpy(&wlh[2 + BRCMF_FWS_TYPE_PKTTAG_LEN], &pktseq,
 868                        sizeof(pktseq));
 869         }
 870         wlh += wlh[1] + 2;
 871
 872         if (entry->send_tim_signal) {
 873                 entry->send_tim_signal = 0;
 874                 wlh[0] = BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP;
 875                 wlh[1] = BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN;
 876                 wlh[2] = entry->mac_handle;
 877                 wlh[3] = entry->traffic_pending_bmp;
 878                 brcmf_dbg(TRACE, "adding TIM info: handle %d bmp 0x%X\n",
 879                           entry->mac_handle, entry->traffic_pending_bmp);
 880                 wlh += BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN + 2;
 881                 entry->traffic_lastreported_bmp = entry->traffic_pending_bmp;
 882         }
 883         if (fillers)
 884                 memset(wlh, BRCMF_FWS_TYPE_FILLER, fillers);
 885
 886         brcmf_proto_hdrpush(fws->drvr, brcmf_skb_if_flags_get_field(skb, INDEX),
 887                             data_offset >> 2, skb);
 888         return 0;
 889 }
 890
 891 static bool brcmf_fws_tim_update(struct brcmf_fws_info *fws,
 892                                  struct brcmf_fws_mac_descriptor *entry,
 893                                  int fifo, bool send_immediately)
 894 {
 895         struct sk_buff *skb;
 896         struct brcmf_bus *bus;
 897         struct brcmf_skbuff_cb *skcb;
 898         s32 err;
 899         u32 len;
 900
 901         /* check delayedQ and suppressQ in one call using bitmap */
 902         if (brcmu_pktq_mlen(&entry->psq, 3 << (fifo * 2)) == 0)
 903                 entry->traffic_pending_bmp &= ~NBITVAL(fifo);
 904         else
 905                 entry->traffic_pending_bmp |= NBITVAL(fifo);
 906
 907         entry->send_tim_signal = false;
 908         if (entry->traffic_lastreported_bmp != entry->traffic_pending_bmp)
 909                 entry->send_tim_signal = true;
 910         if (send_immediately && entry->send_tim_signal &&
 911             entry->state == BRCMF_FWS_STATE_CLOSE) {
 912                 /* create a dummy packet and sent that. The traffic          */
 913                 /* bitmap info will automatically be attached to that packet */
 914                 len = BRCMF_FWS_TYPE_PKTTAG_LEN + 2 +
 915                       BRCMF_FWS_TYPE_SEQ_LEN +
 916                       BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP_LEN + 2 +
 917                       4 + fws->drvr->hdrlen;
 918                 skb = brcmu_pkt_buf_get_skb(len);
 919                 if (skb == NULL)
 920                         return false;
 921                 skb_pull(skb, len);
 922                 skcb = brcmf_skbcb(skb);
 923                 skcb->mac = entry;
 924                 skcb->state = BRCMF_FWS_SKBSTATE_TIM;
 925                 skcb->htod = 0;
 926                 skcb->htod_seq = 0;
 927                 bus = fws->drvr->bus_if;
 928                 err = brcmf_fws_hdrpush(fws, skb);
 929                 if (err == 0) {
 930                         brcmf_fws_unlock(fws);
 931                         err = brcmf_bus_txdata(bus, skb);
 932                         brcmf_fws_lock(fws);
 933                 }
 934                 if (err)
 935                         brcmu_pkt_buf_free_skb(skb);
 936                 return true;
 937         }
 938         return false;
 939 }
 940
 941 static void
 942 brcmf_fws_flow_control_check(struct brcmf_fws_info *fws, struct pktq *pq,
 943                              u8 if_id)
 944 {
 945         struct brcmf_if *ifp = fws->drvr->iflist[!if_id ? 0 : if_id + 1];
 946
 947         if (WARN_ON(!ifp))
 948                 return;
 949
 950         if ((ifp->netif_stop & BRCMF_NETIF_STOP_REASON_FWS_FC) &&
 951             pq->len <= BRCMF_FWS_FLOWCONTROL_LOWATER)
 952                 brcmf_txflowblock_if(ifp,
 953                                      BRCMF_NETIF_STOP_REASON_FWS_FC, false);
 954         if (!(ifp->netif_stop & BRCMF_NETIF_STOP_REASON_FWS_FC) &&
 955             pq->len >= BRCMF_FWS_FLOWCONTROL_HIWATER) {
 956                 fws->stats.fws_flow_block++;
 957                 brcmf_txflowblock_if(ifp, BRCMF_NETIF_STOP_REASON_FWS_FC, true);
 958         }
 959         return;
 960 }
 961
 962 static int brcmf_fws_rssi_indicate(struct brcmf_fws_info *fws, s8 rssi)
 963 {
 964         brcmf_dbg(CTL, "rssi %d\n", rssi);
 965         return 0;
 966 }
 967
 968 static
 969 int brcmf_fws_macdesc_indicate(struct brcmf_fws_info *fws, u8 type, u8 *data)
 970 {
 971         struct brcmf_fws_mac_descriptor *entry, *existing;
 972         u8 mac_handle;
 973         u8 ifidx;
 974         u8 *addr;
 975
 976         mac_handle = *data++;
 977         ifidx = *data++;
 978         addr = data;
 979
 980         entry = &fws->desc.nodes[mac_handle & 0x1F];
 981         if (type == BRCMF_FWS_TYPE_MACDESC_DEL) {
 982                 if (entry->occupied) {
 983                         brcmf_dbg(TRACE, "deleting %s mac %pM\n",
 984                                   entry->name, addr);
 985                         brcmf_fws_lock(fws);
 986                         brcmf_fws_macdesc_cleanup(fws, entry, -1);
 987                         brcmf_fws_macdesc_deinit(entry);
 988                         brcmf_fws_unlock(fws);
 989                 } else
 990                         fws->stats.mac_update_failed++;
 991                 return 0;
 992         }
 993
 994         existing = brcmf_fws_macdesc_lookup(fws, addr);
 995         if (IS_ERR(existing)) {
 996                 if (!entry->occupied) {
 997                         brcmf_fws_lock(fws);
 998                         entry->mac_handle = mac_handle;
 999                         brcmf_fws_macdesc_init(entry, addr, ifidx);
1000                         brcmf_fws_macdesc_set_name(fws, entry);
1001                         brcmu_pktq_init(&entry->psq, BRCMF_FWS_PSQ_PREC_COUNT,
1002                                         BRCMF_FWS_PSQ_LEN);
1003                         brcmf_fws_unlock(fws);
1004                         brcmf_dbg(TRACE, "add %s mac %pM\n", entry->name, addr);
1005                 } else {
1006                         fws->stats.mac_update_failed++;
1007                 }
1008         } else {
1009                 if (entry != existing) {
1010                         brcmf_dbg(TRACE, "copy mac %s\n", existing->name);
1011                         brcmf_fws_lock(fws);
1012                         memcpy(entry, existing,
1013                                offsetof(struct brcmf_fws_mac_descriptor, psq));
1014                         entry->mac_handle = mac_handle;
1015                         brcmf_fws_macdesc_deinit(existing);
1016                         brcmf_fws_macdesc_set_name(fws, entry);
1017                         brcmf_fws_unlock(fws);
1018                         brcmf_dbg(TRACE, "relocate %s mac %pM\n", entry->name,
1019                                   addr);
1020                 } else {
1021                         brcmf_dbg(TRACE, "use existing\n");
1022                         WARN_ON(entry->mac_handle != mac_handle);
1023                         /* TODO: what should we do here: continue, reinit, .. */
1024                 }
1025         }
1026         return 0;
1027 }
1028
1029 static int brcmf_fws_macdesc_state_indicate(struct brcmf_fws_info *fws,
1030                                             u8 type, u8 *data)
1031 {
1032         struct brcmf_fws_mac_descriptor *entry;
1033         u8 mac_handle;
1034         int ret;
1035
1036         mac_handle = data[0];
1037         entry = &fws->desc.nodes[mac_handle & 0x1F];
1038         if (!entry->occupied) {
1039                 fws->stats.mac_ps_update_failed++;
1040                 return -ESRCH;
1041         }
1042         brcmf_fws_lock(fws);
1043         /* a state update should wipe old credits */
1044         entry->requested_credit = 0;
1045         entry->requested_packet = 0;
1046         if (type == BRCMF_FWS_TYPE_MAC_OPEN) {
1047                 entry->state = BRCMF_FWS_STATE_OPEN;
1048                 ret = BRCMF_FWS_RET_OK_SCHEDULE;
1049         } else {
1050                 entry->state = BRCMF_FWS_STATE_CLOSE;
1051                 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_BK, false);
1052                 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_BE, false);
1053                 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_VI, false);
1054                 brcmf_fws_tim_update(fws, entry, BRCMF_FWS_FIFO_AC_VO, true);
1055                 ret = BRCMF_FWS_RET_OK_NOSCHEDULE;
1056         }
1057         brcmf_fws_unlock(fws);
1058         return ret;
1059 }
1060
1061 static int brcmf_fws_interface_state_indicate(struct brcmf_fws_info *fws,
1062                                               u8 type, u8 *data)
1063 {
1064         struct brcmf_fws_mac_descriptor *entry;
1065         u8 ifidx;
1066         int ret;
1067
1068         ifidx = data[0];
1069
1070         if (ifidx >= BRCMF_MAX_IFS) {
1071                 ret = -ERANGE;
1072                 goto fail;
1073         }
1074
1075         entry = &fws->desc.iface[ifidx];
1076         if (!entry->occupied) {
1077                 ret = -ESRCH;
1078                 goto fail;
1079         }
1080
1081         brcmf_dbg(TRACE, "%s (%d): %s\n", brcmf_fws_get_tlv_name(type), type,
1082                   entry->name);
1083         brcmf_fws_lock(fws);
1084         switch (type) {
1085         case BRCMF_FWS_TYPE_INTERFACE_OPEN:
1086                 entry->state = BRCMF_FWS_STATE_OPEN;
1087                 ret = BRCMF_FWS_RET_OK_SCHEDULE;
1088                 break;
1089         case BRCMF_FWS_TYPE_INTERFACE_CLOSE:
1090                 entry->state = BRCMF_FWS_STATE_CLOSE;
1091                 ret = BRCMF_FWS_RET_OK_NOSCHEDULE;
1092                 break;
1093         default:
1094                 ret = -EINVAL;
1095                 brcmf_fws_unlock(fws);
1096                 goto fail;
1097         }
1098         brcmf_fws_unlock(fws);
1099         return ret;
1100
1101 fail:
1102         fws->stats.if_update_failed++;
1103         return ret;
1104 }
1105
1106 static int brcmf_fws_request_indicate(struct brcmf_fws_info *fws, u8 type,
1107                                       u8 *data)
1108 {
1109         struct brcmf_fws_mac_descriptor *entry;
1110
1111         entry = &fws->desc.nodes[data[1] & 0x1F];
1112         if (!entry->occupied) {
1113                 if (type == BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT)
1114                         fws->stats.credit_request_failed++;
1115                 else
1116                         fws->stats.packet_request_failed++;
1117                 return -ESRCH;
1118         }
1119
1120         brcmf_dbg(TRACE, "%s (%d): %s cnt %d bmp %d\n",
1121                   brcmf_fws_get_tlv_name(type), type, entry->name,
1122                   data[0], data[2]);
1123         brcmf_fws_lock(fws);
1124         if (type == BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT)
1125                 entry->requested_credit = data[0];
1126         else
1127                 entry->requested_packet = data[0];
1128
1129         entry->ac_bitmap = data[2];
1130         brcmf_fws_unlock(fws);
1131         return BRCMF_FWS_RET_OK_SCHEDULE;
1132 }
1133
1134 static void
1135 brcmf_fws_macdesc_use_req_credit(struct brcmf_fws_mac_descriptor *entry,
1136                                  struct sk_buff *skb)
1137 {
1138         if (entry->requested_credit > 0) {
1139                 entry->requested_credit--;
1140                 brcmf_skb_if_flags_set_field(skb, REQUESTED, 1);
1141                 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 1);
1142                 if (entry->state != BRCMF_FWS_STATE_CLOSE)
1143                         brcmf_err("requested credit set while mac not closed!\n");
1144         } else if (entry->requested_packet > 0) {
1145                 entry->requested_packet--;
1146                 brcmf_skb_if_flags_set_field(skb, REQUESTED, 1);
1147                 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 0);
1148                 if (entry->state != BRCMF_FWS_STATE_CLOSE)
1149                         brcmf_err("requested packet set while mac not closed!\n");
1150         } else {
1151                 brcmf_skb_if_flags_set_field(skb, REQUESTED, 0);
1152                 brcmf_skb_if_flags_set_field(skb, REQ_CREDIT, 0);
1153         }
1154 }
1155
1156 static void brcmf_fws_macdesc_return_req_credit(struct sk_buff *skb)
1157 {
1158         struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
1159
1160         if ((brcmf_skb_if_flags_get_field(skb, REQ_CREDIT)) &&
1161             (entry->state == BRCMF_FWS_STATE_CLOSE))
1162                 entry->requested_credit++;
1163 }
1164
1165 static void brcmf_fws_return_credits(struct brcmf_fws_info *fws,
1166                                      u8 fifo, u8 credits)
1167 {
1168         int lender_ac;
1169         int *borrowed;
1170         int *fifo_credit;
1171
1172         if (!credits)
1173                 return;
1174
1175         fws->fifo_credit_map |= 1 << fifo;
1176
1177         if ((fifo == BRCMF_FWS_FIFO_AC_BE) &&
1178             (fws->credits_borrowed[0])) {
1179                 for (lender_ac = BRCMF_FWS_FIFO_AC_VO; lender_ac >= 0;
1180                      lender_ac--) {
1181                         borrowed = &fws->credits_borrowed[lender_ac];
1182                         if (*borrowed) {
1183                                 fws->fifo_credit_map |= (1 << lender_ac);
1184                                 fifo_credit = &fws->fifo_credit[lender_ac];
1185                                 if (*borrowed >= credits) {
1186                                         *borrowed -= credits;
1187                                         *fifo_credit += credits;
1188                                         return;
1189                                 } else {
1190                                         credits -= *borrowed;
1191                                         *fifo_credit += *borrowed;
1192                                         *borrowed = 0;
1193                                 }
1194                         }
1195                 }
1196         }
1197
1198         fws->fifo_credit[fifo] += credits;
1199 }
1200
1201 static void brcmf_fws_schedule_deq(struct brcmf_fws_info *fws)
1202 {
1203         /* only schedule dequeue when there are credits for delayed traffic */
1204         if ((fws->fifo_credit_map & fws->fifo_delay_map) ||
1205             (!brcmf_fws_fc_active(fws) && fws->fifo_delay_map))
1206                 queue_work(fws->fws_wq, &fws->fws_dequeue_work);
1207 }
1208
1209 static int brcmf_fws_enq(struct brcmf_fws_info *fws,
1210                          enum brcmf_fws_skb_state state, int fifo,
1211                          struct sk_buff *p)
1212 {
1213         int prec = 2 * fifo;
1214         u32 *qfull_stat = &fws->stats.delayq_full_error;
1215         struct brcmf_fws_mac_descriptor *entry;
1216         struct pktq *pq;
1217         struct sk_buff_head *queue;
1218         struct sk_buff *p_head;
1219         struct sk_buff *p_tail;
1220         u32 fr_new;
1221         u32 fr_compare;
1222
1223         entry = brcmf_skbcb(p)->mac;
1224         if (entry == NULL) {
1225                 brcmf_err("no mac descriptor found for skb %p\n", p);
1226                 return -ENOENT;
1227         }
1228
1229         brcmf_dbg(DATA, "enter: fifo %d skb %p\n", fifo, p);
1230         if (state == BRCMF_FWS_SKBSTATE_SUPPRESSED) {
1231                 prec += 1;
1232                 qfull_stat = &fws->stats.supprq_full_error;
1233
1234                 /* Fix out of order delivery of frames. Dont assume frame    */
1235                 /* can be inserted at the end, but look for correct position */
1236                 pq = &entry->psq;
1237                 if (pktq_full(pq) || pktq_pfull(pq, prec)) {
1238                         *qfull_stat += 1;
1239                         return -ENFILE;
1240                 }
1241                 queue = &pq->q[prec].skblist;
1242
1243                 p_head = skb_peek(queue);
1244                 p_tail = skb_peek_tail(queue);
1245                 fr_new = brcmf_skb_htod_tag_get_field(p, FREERUN);
1246
1247                 while (p_head != p_tail) {
1248                         fr_compare = brcmf_skb_htod_tag_get_field(p_tail,
1249                                                                   FREERUN);
1250                         /* be sure to handle wrap of 256 */
1251                         if (((fr_new > fr_compare) &&
1252                              ((fr_new - fr_compare) < 128)) ||
1253                             ((fr_new < fr_compare) &&
1254                              ((fr_compare - fr_new) > 128)))
1255                                 break;
1256                         p_tail = skb_queue_prev(queue, p_tail);
1257                 }
1258                 /* Position found. Determine what to do */
1259                 if (p_tail == NULL) {
1260                         /* empty list */
1261                         __skb_queue_tail(queue, p);
1262                 } else {
1263                         fr_compare = brcmf_skb_htod_tag_get_field(p_tail,
1264                                                                   FREERUN);
1265                         if (((fr_new > fr_compare) &&
1266                              ((fr_new - fr_compare) < 128)) ||
1267                             ((fr_new < fr_compare) &&
1268                              ((fr_compare - fr_new) > 128))) {
1269                                 /* After tail */
1270                                 __skb_queue_after(queue, p_tail, p);
1271                         } else {
1272                                 /* Before tail */
1273                                 __skb_insert(p, p_tail->prev, p_tail, queue);
1274                         }
1275                 }
1276
1277                 /* Complete the counters and statistics */
1278                 pq->len++;
1279                 if (pq->hi_prec < prec)
1280                         pq->hi_prec = (u8) prec;
1281         } else if (brcmu_pktq_penq(&entry->psq, prec, p) == NULL) {
1282                 *qfull_stat += 1;
1283                 return -ENFILE;
1284         }
1285
1286         /* increment total enqueued packet count */
1287         fws->fifo_delay_map |= 1 << fifo;
1288         fws->fifo_enqpkt[fifo]++;
1289
1290         /* update the sk_buff state */
1291         brcmf_skbcb(p)->state = state;
1292
1293         /*
1294          * A packet has been pushed so update traffic
1295          * availability bitmap, if applicable
1296          */
1297         brcmf_fws_tim_update(fws, entry, fifo, true);
1298         brcmf_fws_flow_control_check(fws, &entry->psq,
1299                                      brcmf_skb_if_flags_get_field(p, INDEX));
1300         return 0;
1301 }
1302
1303 static struct sk_buff *brcmf_fws_deq(struct brcmf_fws_info *fws, int fifo)
1304 {
1305         struct brcmf_fws_mac_descriptor *table;
1306         struct brcmf_fws_mac_descriptor *entry;
1307         struct sk_buff *p;
1308         int num_nodes;
1309         int node_pos;
1310         int prec_out;
1311         int pmsk;
1312         int i;
1313
1314         table = (struct brcmf_fws_mac_descriptor *)&fws->desc;
1315         num_nodes = sizeof(fws->desc) / sizeof(struct brcmf_fws_mac_descriptor);
1316         node_pos = fws->deq_node_pos[fifo];
1317
1318         for (i = 0; i < num_nodes; i++) {
1319                 entry = &table[(node_pos + i) % num_nodes];
1320                 if (!entry->occupied ||
1321                     brcmf_fws_macdesc_closed(fws, entry, fifo))
1322                         continue;
1323
1324                 if (entry->suppressed)
1325                         pmsk = 2;
1326                 else
1327                         pmsk = 3;
1328                 p = brcmu_pktq_mdeq(&entry->psq, pmsk << (fifo * 2), &prec_out);
1329                 if (p == NULL) {
1330                         if (entry->suppressed) {
1331                                 if (entry->suppr_transit_count)
1332                                         continue;
1333                                 entry->suppressed = false;
1334                                 p = brcmu_pktq_mdeq(&entry->psq,
1335                                                     1 << (fifo * 2), &prec_out);
1336                         }
1337                 }
1338                 if  (p == NULL)
1339                         continue;
1340
1341                 brcmf_fws_macdesc_use_req_credit(entry, p);
1342
1343                 /* move dequeue position to ensure fair round-robin */
1344                 fws->deq_node_pos[fifo] = (node_pos + i + 1) % num_nodes;
1345                 brcmf_fws_flow_control_check(fws, &entry->psq,
1346                                              brcmf_skb_if_flags_get_field(p,
1347                                                                           INDEX)
1348                                              );
1349                 /*
1350                  * A packet has been picked up, update traffic
1351                  * availability bitmap, if applicable
1352                  */
1353                 brcmf_fws_tim_update(fws, entry, fifo, false);
1354
1355                 /*
1356                  * decrement total enqueued fifo packets and
1357                  * clear delay bitmap if done.
1358                  */
1359                 fws->fifo_enqpkt[fifo]--;
1360                 if (fws->fifo_enqpkt[fifo] == 0)
1361                         fws->fifo_delay_map &= ~(1 << fifo);
1362                 goto done;
1363         }
1364         p = NULL;
1365 done:
1366         brcmf_dbg(DATA, "exit: fifo %d skb %p\n", fifo, p);
1367         return p;
1368 }
1369
1370 static int brcmf_fws_txstatus_suppressed(struct brcmf_fws_info *fws, int fifo,
1371                                          struct sk_buff *skb, u32 genbit,
1372                                          u16 seq)
1373 {
1374         struct brcmf_fws_mac_descriptor *entry = brcmf_skbcb(skb)->mac;
1375         u32 hslot;
1376         int ret;
1377         u8 ifidx;
1378
1379         hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1380
1381         /* this packet was suppressed */
1382         if (!entry->suppressed) {
1383                 entry->suppressed = true;
1384                 entry->suppr_transit_count = entry->transit_count;
1385                 brcmf_dbg(DATA, "suppress %s: transit %d\n",
1386                           entry->name, entry->transit_count);
1387         }
1388
1389         entry->generation = genbit;
1390
1391         ret = brcmf_proto_hdrpull(fws->drvr, false, &ifidx, skb);
1392         if (ret == 0)
1393                 brcmf_skb_htod_tag_set_field(skb, GENERATION, genbit);
1394                 brcmf_skbcb(skb)->htod_seq = seq;
1395                 if (brcmf_skb_htod_seq_get_field(skb, FROMFW)) {
1396                         brcmf_skb_htod_seq_set_field(skb, FROMDRV, 1);
1397                         brcmf_skb_htod_seq_set_field(skb, FROMFW, 0);
1398                 } else {
1399                         brcmf_skb_htod_seq_set_field(skb, FROMDRV, 0);
1400                 }
1401                 ret = brcmf_fws_enq(fws, BRCMF_FWS_SKBSTATE_SUPPRESSED, fifo,
1402                                     skb);
1403         if (ret != 0) {
1404                 /* suppress q is full or hdrpull failed, drop this packet */
1405                 brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb,
1406                                         true);
1407         } else {
1408                 /*
1409                  * Mark suppressed to avoid a double free during
1410                  * wlfc cleanup
1411                  */
1412                 brcmf_fws_hanger_mark_suppressed(&fws->hanger, hslot);
1413         }
1414
1415         return ret;
1416 }
1417
1418 static int
1419 brcmf_fws_txs_process(struct brcmf_fws_info *fws, u8 flags, u32 hslot,
1420                       u32 genbit, u16 seq)
1421 {
1422         u32 fifo;
1423         int ret;
1424         bool remove_from_hanger = true;
1425         struct sk_buff *skb;
1426         struct brcmf_skbuff_cb *skcb;
1427         struct brcmf_fws_mac_descriptor *entry = NULL;
1428
1429         brcmf_dbg(DATA, "flags %d\n", flags);
1430
1431         if (flags == BRCMF_FWS_TXSTATUS_DISCARD)
1432                 fws->stats.txs_discard++;
1433         else if (flags == BRCMF_FWS_TXSTATUS_CORE_SUPPRESS) {
1434                 fws->stats.txs_supp_core++;
1435                 remove_from_hanger = false;
1436         } else if (flags == BRCMF_FWS_TXSTATUS_FW_PS_SUPPRESS) {
1437                 fws->stats.txs_supp_ps++;
1438                 remove_from_hanger = false;
1439         } else if (flags == BRCMF_FWS_TXSTATUS_FW_TOSSED)
1440                 fws->stats.txs_tossed++;
1441         else if (flags == BRCMF_FWS_TXSTATUS_HOST_TOSSED)
1442                 fws->stats.txs_host_tossed++;
1443         else
1444                 brcmf_err("unexpected txstatus\n");
1445
1446         ret = brcmf_fws_hanger_poppkt(&fws->hanger, hslot, &skb,
1447                                       remove_from_hanger);
1448         if (ret != 0) {
1449                 brcmf_err("no packet in hanger slot: hslot=%d\n", hslot);
1450                 return ret;
1451         }
1452
1453         skcb = brcmf_skbcb(skb);
1454         entry = skcb->mac;
1455         if (WARN_ON(!entry)) {
1456                 brcmu_pkt_buf_free_skb(skb);
1457                 return -EINVAL;
1458         }
1459         entry->transit_count--;
1460         if (entry->suppressed && entry->suppr_transit_count)
1461                 entry->suppr_transit_count--;
1462
1463         brcmf_dbg(DATA, "%s flags %d htod %X seq %X\n", entry->name, flags,
1464                   skcb->htod, seq);
1465
1466         /* pick up the implicit credit from this packet */
1467         fifo = brcmf_skb_htod_tag_get_field(skb, FIFO);
1468         if ((fws->fcmode == BRCMF_FWS_FCMODE_IMPLIED_CREDIT) ||
1469             (brcmf_skb_if_flags_get_field(skb, REQ_CREDIT)) ||
1470             (flags == BRCMF_FWS_TXSTATUS_HOST_TOSSED)) {
1471                 brcmf_fws_return_credits(fws, fifo, 1);
1472                 brcmf_fws_schedule_deq(fws);
1473         }
1474         brcmf_fws_macdesc_return_req_credit(skb);
1475
1476         if (!remove_from_hanger)
1477                 ret = brcmf_fws_txstatus_suppressed(fws, fifo, skb, genbit,
1478                                                     seq);
1479
1480         if (remove_from_hanger || ret)
1481                 brcmf_txfinalize(fws->drvr, skb, true);
1482
1483         return 0;
1484 }
1485
1486 static int brcmf_fws_fifocreditback_indicate(struct brcmf_fws_info *fws,
1487                                              u8 *data)
1488 {
1489         int i;
1490
1491         if (fws->fcmode != BRCMF_FWS_FCMODE_EXPLICIT_CREDIT) {
1492                 brcmf_dbg(INFO, "ignored\n");
1493                 return BRCMF_FWS_RET_OK_NOSCHEDULE;
1494         }
1495
1496         brcmf_dbg(DATA, "enter: data %pM\n", data);
1497         brcmf_fws_lock(fws);
1498         for (i = 0; i < BRCMF_FWS_FIFO_COUNT; i++)
1499                 brcmf_fws_return_credits(fws, i, data[i]);
1500
1501         brcmf_dbg(DATA, "map: credit %x delay %x\n", fws->fifo_credit_map,
1502                   fws->fifo_delay_map);
1503         brcmf_fws_unlock(fws);
1504         return BRCMF_FWS_RET_OK_SCHEDULE;
1505 }
1506
1507 static int brcmf_fws_txstatus_indicate(struct brcmf_fws_info *fws, u8 *data)
1508 {
1509         __le32 status_le;
1510         __le16 seq_le;
1511         u32 status;
1512         u32 hslot;
1513         u32 genbit;
1514         u8 flags;
1515         u16 seq;
1516
1517         fws->stats.txs_indicate++;
1518         memcpy(&status_le, data, sizeof(status_le));
1519         status = le32_to_cpu(status_le);
1520         flags = brcmf_txstatus_get_field(status, FLAGS);
1521         hslot = brcmf_txstatus_get_field(status, HSLOT);
1522         genbit = brcmf_txstatus_get_field(status, GENERATION);
1523         if (BRCMF_FWS_MODE_GET_REUSESEQ(fws->mode)) {
1524                 memcpy(&seq_le, &data[BRCMF_FWS_TYPE_PKTTAG_LEN],
1525                        sizeof(seq_le));
1526                 seq = le16_to_cpu(seq_le);
1527         } else {
1528                 seq = 0;
1529         }
1530
1531         brcmf_fws_lock(fws);
1532         brcmf_fws_txs_process(fws, flags, hslot, genbit, seq);
1533         brcmf_fws_unlock(fws);
1534         return BRCMF_FWS_RET_OK_NOSCHEDULE;
1535 }
1536
1537 static int brcmf_fws_dbg_seqnum_check(struct brcmf_fws_info *fws, u8 *data)
1538 {
1539         __le32 timestamp;
1540
1541         memcpy(&timestamp, &data[2], sizeof(timestamp));
1542         brcmf_dbg(CTL, "received: seq %d, timestamp %d\n", data[1],
1543                   le32_to_cpu(timestamp));
1544         return 0;
1545 }
1546
1547 static int brcmf_fws_notify_credit_map(struct brcmf_if *ifp,
1548                                        const struct brcmf_event_msg *e,
1549                                        void *data)
1550 {
1551         struct brcmf_fws_info *fws = ifp->drvr->fws;
1552         int i;
1553         u8 *credits = data;
1554
1555         if (e->datalen < BRCMF_FWS_FIFO_COUNT) {
1556                 brcmf_err("event payload too small (%d)\n", e->datalen);
1557                 return -EINVAL;
1558         }
1559         if (fws->creditmap_received)
1560                 return 0;
1561
1562         fws->creditmap_received = true;
1563
1564         brcmf_dbg(TRACE, "enter: credits %pM\n", credits);
1565         brcmf_fws_lock(fws);
1566         for (i = 0; i < ARRAY_SIZE(fws->fifo_credit); i++) {
1567                 if (*credits)
1568                         fws->fifo_credit_map |= 1 << i;
1569                 else
1570                         fws->fifo_credit_map &= ~(1 << i);
1571                 fws->fifo_credit[i] = *credits++;
1572         }
1573         brcmf_fws_schedule_deq(fws);
1574         brcmf_fws_unlock(fws);
1575         return 0;
1576 }
1577
1578 static int brcmf_fws_notify_bcmc_credit_support(struct brcmf_if *ifp,
1579                                                 const struct brcmf_event_msg *e,
1580                                                 void *data)
1581 {
1582         struct brcmf_fws_info *fws = ifp->drvr->fws;
1583
1584         brcmf_fws_lock(fws);
1585         if (fws)
1586                 fws->bcmc_credit_check = true;
1587         brcmf_fws_unlock(fws);
1588         return 0;
1589 }
1590
1591 int brcmf_fws_hdrpull(struct brcmf_pub *drvr, int ifidx, s16 signal_len,
1592                       struct sk_buff *skb)
1593 {
1594         struct brcmf_skb_reorder_data *rd;
1595         struct brcmf_fws_info *fws = drvr->fws;
1596         u8 *signal_data;
1597         s16 data_len;
1598         u8 type;
1599         u8 len;
1600         u8 *data;
1601         s32 status;
1602         s32 err;
1603
1604         brcmf_dbg(HDRS, "enter: ifidx %d, skblen %u, sig %d\n",
1605                   ifidx, skb->len, signal_len);
1606
1607         WARN_ON(signal_len > skb->len);
1608
1609         if (!signal_len)
1610                 return 0;
1611         /* if flow control disabled, skip to packet data and leave */
1612         if (!fws->fw_signals) {
1613                 skb_pull(skb, signal_len);
1614                 return 0;
1615         }
1616
1617         fws->stats.header_pulls++;
1618         data_len = signal_len;
1619         signal_data = skb->data;
1620
1621         status = BRCMF_FWS_RET_OK_NOSCHEDULE;
1622         while (data_len > 0) {
1623                 /* extract tlv info */
1624                 type = signal_data[0];
1625
1626                 /* FILLER type is actually not a TLV, but
1627                  * a single byte that can be skipped.
1628                  */
1629                 if (type == BRCMF_FWS_TYPE_FILLER) {
1630                         signal_data += 1;
1631                         data_len -= 1;
1632                         continue;
1633                 }
1634                 len = signal_data[1];
1635                 data = signal_data + 2;
1636
1637                 brcmf_dbg(HDRS, "tlv type=%s (%d), len=%d (%d)\n",
1638                           brcmf_fws_get_tlv_name(type), type, len,
1639                           brcmf_fws_get_tlv_len(fws, type));
1640
1641                 /* abort parsing when length invalid */
1642                 if (data_len < len + 2)
1643                         break;
1644
1645                 if (len < brcmf_fws_get_tlv_len(fws, type))
1646                         break;
1647
1648                 err = BRCMF_FWS_RET_OK_NOSCHEDULE;
1649                 switch (type) {
1650                 case BRCMF_FWS_TYPE_COMP_TXSTATUS:
1651                         break;
1652                 case BRCMF_FWS_TYPE_HOST_REORDER_RXPKTS:
1653                         rd = (struct brcmf_skb_reorder_data *)skb->cb;
1654                         rd->reorder = data;
1655                         break;
1656                 case BRCMF_FWS_TYPE_MACDESC_ADD:
1657                 case BRCMF_FWS_TYPE_MACDESC_DEL:
1658                         brcmf_fws_macdesc_indicate(fws, type, data);
1659                         break;
1660                 case BRCMF_FWS_TYPE_MAC_OPEN:
1661                 case BRCMF_FWS_TYPE_MAC_CLOSE:
1662                         err = brcmf_fws_macdesc_state_indicate(fws, type, data);
1663                         break;
1664                 case BRCMF_FWS_TYPE_INTERFACE_OPEN:
1665                 case BRCMF_FWS_TYPE_INTERFACE_CLOSE:
1666                         err = brcmf_fws_interface_state_indicate(fws, type,
1667                                                                  data);
1668                         break;
1669                 case BRCMF_FWS_TYPE_MAC_REQUEST_CREDIT:
1670                 case BRCMF_FWS_TYPE_MAC_REQUEST_PACKET:
1671                         err = brcmf_fws_request_indicate(fws, type, data);
1672                         break;
1673                 case BRCMF_FWS_TYPE_TXSTATUS:
1674                         brcmf_fws_txstatus_indicate(fws, data);
1675                         break;
1676                 case BRCMF_FWS_TYPE_FIFO_CREDITBACK:
1677                         err = brcmf_fws_fifocreditback_indicate(fws, data);
1678                         break;
1679                 case BRCMF_FWS_TYPE_RSSI:
1680                         brcmf_fws_rssi_indicate(fws, *data);
1681                         break;
1682                 case BRCMF_FWS_TYPE_TRANS_ID:
1683                         brcmf_fws_dbg_seqnum_check(fws, data);
1684                         break;
1685                 case BRCMF_FWS_TYPE_PKTTAG:
1686                 case BRCMF_FWS_TYPE_PENDING_TRAFFIC_BMP:
1687                 default:
1688                         fws->stats.tlv_invalid_type++;
1689                         break;
1690                 }
1691                 if (err == BRCMF_FWS_RET_OK_SCHEDULE)
1692                         status = BRCMF_FWS_RET_OK_SCHEDULE;
1693                 signal_data += len + 2;
1694                 data_len -= len + 2;
1695         }
1696
1697         if (data_len != 0)
1698                 fws->stats.tlv_parse_failed++;
1699
1700         if (status == BRCMF_FWS_RET_OK_SCHEDULE)
1701                 brcmf_fws_schedule_deq(fws);
1702
1703         /* signalling processing result does
1704          * not affect the actual ethernet packet.
1705          */
1706         skb_pull(skb, signal_len);
1707
1708         /* this may be a signal-only packet
1709          */
1710         if (skb->len == 0)
1711                 fws->stats.header_only_pkt++;
1712
1713         return 0;
1714 }
1715
1716 static void brcmf_fws_precommit_skb(struct brcmf_fws_info *fws, int fifo,
1717                                    struct sk_buff *p)
1718 {
1719         struct brcmf_skbuff_cb *skcb = brcmf_skbcb(p);
1720         struct brcmf_fws_mac_descriptor *entry = skcb->mac;
1721         u8 flags;
1722
1723         if (skcb->state != BRCMF_FWS_SKBSTATE_SUPPRESSED)
1724                 brcmf_skb_htod_tag_set_field(p, GENERATION, entry->generation);
1725         flags = BRCMF_FWS_HTOD_FLAG_PKTFROMHOST;
1726         if (brcmf_skb_if_flags_get_field(p, REQUESTED)) {
1727                 /*
1728                  * Indicate that this packet is being sent in response to an
1729                  * explicit request from the firmware side.
1730                  */
1731                 flags |= BRCMF_FWS_HTOD_FLAG_PKT_REQUESTED;
1732         }
1733         brcmf_skb_htod_tag_set_field(p, FLAGS, flags);
1734         brcmf_fws_hdrpush(fws, p);
1735 }
1736
1737 static void brcmf_fws_rollback_toq(struct brcmf_fws_info *fws,
1738                                    struct sk_buff *skb, int fifo)
1739 {
1740         struct brcmf_fws_mac_descriptor *entry;
1741         struct sk_buff *pktout;
1742         int qidx, hslot;
1743         int rc = 0;
1744
1745         entry = brcmf_skbcb(skb)->mac;
1746         if (entry->occupied) {
1747                 qidx = 2 * fifo;
1748                 if (brcmf_skbcb(skb)->state == BRCMF_FWS_SKBSTATE_SUPPRESSED)
1749                         qidx++;
1750
1751                 pktout = brcmu_pktq_penq_head(&entry->psq, qidx, skb);
1752                 if (pktout == NULL) {
1753                         brcmf_err("%s queue %d full\n", entry->name, qidx);
1754                         rc = -ENOSPC;
1755                 }
1756         } else {
1757                 brcmf_err("%s entry removed\n", entry->name);
1758                 rc = -ENOENT;
1759         }
1760
1761         if (rc) {
1762                 fws->stats.rollback_failed++;
1763                 hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
1764                 brcmf_fws_txs_process(fws, BRCMF_FWS_TXSTATUS_HOST_TOSSED,
1765                                       hslot, 0, 0);
1766         } else {
1767                 fws->stats.rollback_success++;
1768                 brcmf_fws_return_credits(fws, fifo, 1);
1769                 brcmf_fws_macdesc_return_req_credit(skb);
1770         }
1771 }
1772
1773 static int brcmf_fws_borrow_credit(struct brcmf_fws_info *fws)
1774 {
1775         int lender_ac;
1776
1777         if (time_after(fws->borrow_defer_timestamp, jiffies)) {
1778                 fws->fifo_credit_map &= ~(1 << BRCMF_FWS_FIFO_AC_BE);
1779                 return -ENAVAIL;
1780         }
1781
1782         for (lender_ac = 0; lender_ac <= BRCMF_FWS_FIFO_AC_VO; lender_ac++) {
1783                 if (fws->fifo_credit[lender_ac]) {
1784                         fws->credits_borrowed[lender_ac]++;
1785                         fws->fifo_credit[lender_ac]--;
1786                         if (fws->fifo_credit[lender_ac] == 0)
1787                                 fws->fifo_credit_map &= ~(1 << lender_ac);
1788                         fws->fifo_credit_map |= (1 << BRCMF_FWS_FIFO_AC_BE);
1789                         brcmf_dbg(DATA, "borrow credit from: %d\n", lender_ac);
1790                         return 0;
1791                 }
1792         }
1793         fws->fifo_credit_map &= ~(1 << BRCMF_FWS_FIFO_AC_BE);
1794         return -ENAVAIL;
1795 }
1796
1797 static int brcmf_fws_commit_skb(struct brcmf_fws_info *fws, int fifo,
1798                                 struct sk_buff *skb)
1799 {
1800         struct brcmf_skbuff_cb *skcb = brcmf_skbcb(skb);
1801         struct brcmf_fws_mac_descriptor *entry;
1802         struct brcmf_bus *bus = fws->drvr->bus_if;
1803         int rc;
1804         u8 ifidx;
1805
1806         entry = skcb->mac;
1807         if (IS_ERR(entry))
1808                 return PTR_ERR(entry);
1809
1810         brcmf_fws_precommit_skb(fws, fifo, skb);
1811         entry->transit_count++;
1812         if (entry->suppressed)
1813                 entry->suppr_transit_count++;
1814         brcmf_fws_unlock(fws);
1815         rc = brcmf_bus_txdata(bus, skb);
1816         brcmf_fws_lock(fws);
1817         brcmf_dbg(DATA, "%s flags %X htod %X bus_tx %d\n", entry->name,
1818                   skcb->if_flags, skcb->htod, rc);
1819         if (rc < 0) {
1820                 entry->transit_count--;
1821                 if (entry->suppressed)
1822                         entry->suppr_transit_count--;
1823                 brcmf_proto_hdrpull(fws->drvr, false, &ifidx, skb);
1824                 goto rollback;
1825         }
1826
1827         fws->stats.pkt2bus++;
1828         fws->stats.send_pkts[fifo]++;
1829         if (brcmf_skb_if_flags_get_field(skb, REQUESTED))
1830                 fws->stats.requested_sent[fifo]++;
1831
1832         return rc;
1833
1834 rollback:
1835         brcmf_fws_rollback_toq(fws, skb, fifo);
1836         return rc;
1837 }
1838
1839 static int brcmf_fws_assign_htod(struct brcmf_fws_info *fws, struct sk_buff *p,
1840                                   int fifo)
1841 {
1842         struct brcmf_skbuff_cb *skcb = brcmf_skbcb(p);
1843         int rc, hslot;
1844
1845         skcb->htod = 0;
1846         skcb->htod_seq = 0;
1847         hslot = brcmf_fws_hanger_get_free_slot(&fws->hanger);
1848         brcmf_skb_htod_tag_set_field(p, HSLOT, hslot);
1849         brcmf_skb_htod_tag_set_field(p, FREERUN, skcb->mac->seq[fifo]);
1850         brcmf_skb_htod_tag_set_field(p, FIFO, fifo);
1851         rc = brcmf_fws_hanger_pushpkt(&fws->hanger, p, hslot);
1852         if (!rc)
1853                 skcb->mac->seq[fifo]++;
1854         else
1855                 fws->stats.generic_error++;
1856         return rc;
1857 }
1858
1859 int brcmf_fws_process_skb(struct brcmf_if *ifp, struct sk_buff *skb)
1860 {
1861         struct brcmf_pub *drvr = ifp->drvr;
1862         struct brcmf_fws_info *fws = drvr->fws;
1863         struct brcmf_skbuff_cb *skcb = brcmf_skbcb(skb);
1864         struct ethhdr *eh = (struct ethhdr *)(skb->data);
1865         int fifo = BRCMF_FWS_FIFO_BCMC;
1866         bool multicast = is_multicast_ether_addr(eh->h_dest);
1867         bool pae = eh->h_proto == htons(ETH_P_PAE);
1868
1869         brcmf_dbg(DATA, "tx proto=0x%X\n", ntohs(eh->h_proto));
1870         /* determine the priority */
1871         if (!skb->priority)
1872                 skb->priority = cfg80211_classify8021d(skb);
1873
1874         drvr->tx_multicast += !!multicast;
1875         if (pae)
1876                 atomic_inc(&ifp->pend_8021x_cnt);
1877
1878         /* set control buffer information */
1879         skcb->if_flags = 0;
1880         skcb->state = BRCMF_FWS_SKBSTATE_NEW;
1881         brcmf_skb_if_flags_set_field(skb, INDEX, ifp->ifidx);
1882         if (!multicast)
1883                 fifo = brcmf_fws_prio2fifo[skb->priority];
1884
1885         brcmf_fws_lock(fws);
1886         if (fifo != BRCMF_FWS_FIFO_AC_BE && fifo < BRCMF_FWS_FIFO_BCMC)
1887                 fws->borrow_defer_timestamp = jiffies +
1888                                               BRCMF_FWS_BORROW_DEFER_PERIOD;
1889
1890         skcb->mac = brcmf_fws_macdesc_find(fws, ifp, eh->h_dest);
1891         brcmf_dbg(DATA, "%s mac %pM multi %d fifo %d\n", skcb->mac->name,
1892                   eh->h_dest, multicast, fifo);
1893         if (!brcmf_fws_assign_htod(fws, skb, fifo)) {
1894                 brcmf_fws_enq(fws, BRCMF_FWS_SKBSTATE_DELAYED, fifo, skb);
1895                 brcmf_fws_schedule_deq(fws);
1896         } else {
1897                 brcmf_err("drop skb: no hanger slot\n");
1898                 if (pae) {
1899                         atomic_dec(&ifp->pend_8021x_cnt);
1900                         if (waitqueue_active(&ifp->pend_8021x_wait))
1901                                 wake_up(&ifp->pend_8021x_wait);
1902                 }
1903                 brcmu_pkt_buf_free_skb(skb);
1904         }
1905         brcmf_fws_unlock(fws);
1906         return 0;
1907 }
1908
1909 void brcmf_fws_reset_interface(struct brcmf_if *ifp)
1910 {
1911         struct brcmf_fws_mac_descriptor *entry = ifp->fws_desc;
1912
1913         brcmf_dbg(TRACE, "enter: idx=%d\n", ifp->bssidx);
1914         if (!entry)
1915                 return;
1916
1917         brcmf_fws_macdesc_init(entry, ifp->mac_addr, ifp->ifidx);
1918 }
1919
1920 void brcmf_fws_add_interface(struct brcmf_if *ifp)
1921 {
1922         struct brcmf_fws_info *fws = ifp->drvr->fws;
1923         struct brcmf_fws_mac_descriptor *entry;
1924
1925         if (!ifp->ndev)
1926                 return;
1927
1928         entry = &fws->desc.iface[ifp->ifidx];
1929         ifp->fws_desc = entry;
1930         brcmf_fws_macdesc_init(entry, ifp->mac_addr, ifp->ifidx);
1931         brcmf_fws_macdesc_set_name(fws, entry);
1932         brcmu_pktq_init(&entry->psq, BRCMF_FWS_PSQ_PREC_COUNT,
1933                         BRCMF_FWS_PSQ_LEN);
1934         brcmf_dbg(TRACE, "added %s\n", entry->name);
1935 }
1936
1937 void brcmf_fws_del_interface(struct brcmf_if *ifp)
1938 {
1939         struct brcmf_fws_mac_descriptor *entry = ifp->fws_desc;
1940
1941         if (!entry)
1942                 return;
1943
1944         brcmf_fws_lock(ifp->drvr->fws);
1945         ifp->fws_desc = NULL;
1946         brcmf_dbg(TRACE, "deleting %s\n", entry->name);
1947         brcmf_fws_macdesc_deinit(entry);
1948         brcmf_fws_cleanup(ifp->drvr->fws, ifp->ifidx);
1949         brcmf_fws_unlock(ifp->drvr->fws);
1950 }
1951
1952 static void brcmf_fws_dequeue_worker(struct work_struct *worker)
1953 {
1954         struct brcmf_fws_info *fws;
1955         struct brcmf_pub *drvr;
1956         struct sk_buff *skb;
1957         int fifo;
1958         u32 hslot;
1959         u32 ifidx;
1960         int ret;
1961
1962         fws = container_of(worker, struct brcmf_fws_info, fws_dequeue_work);
1963         drvr = fws->drvr;
1964
1965         brcmf_fws_lock(fws);
1966         for (fifo = BRCMF_FWS_FIFO_BCMC; fifo >= 0 && !fws->bus_flow_blocked;
1967              fifo--) {
1968                 if (!brcmf_fws_fc_active(fws)) {
1969                         while ((skb = brcmf_fws_deq(fws, fifo)) != NULL) {
1970                                 hslot = brcmf_skb_htod_tag_get_field(skb,
1971                                                                      HSLOT);
1972                                 brcmf_fws_hanger_poppkt(&fws->hanger, hslot,
1973                                                         &skb, true);
1974                                 ifidx = brcmf_skb_if_flags_get_field(skb,
1975                                                                      INDEX);
1976                                 brcmf_proto_hdrpush(drvr, ifidx, 0, skb);
1977                                 /* Use bus module to send data frame */
1978                                 brcmf_fws_unlock(fws);
1979                                 ret = brcmf_bus_txdata(drvr->bus_if, skb);
1980                                 brcmf_fws_lock(fws);
1981                                 if (ret < 0)
1982                                         brcmf_txfinalize(drvr, skb, false);
1983                                 if (fws->bus_flow_blocked)
1984                                         break;
1985                         }
1986                         continue;
1987                 }
1988                 while ((fws->fifo_credit[fifo]) || ((!fws->bcmc_credit_check) &&
1989                        (fifo == BRCMF_FWS_FIFO_BCMC))) {
1990                         skb = brcmf_fws_deq(fws, fifo);
1991                         if (!skb)
1992                                 break;
1993                         fws->fifo_credit[fifo]--;
1994                         if (brcmf_fws_commit_skb(fws, fifo, skb))
1995                                 break;
1996                         if (fws->bus_flow_blocked)
1997                                 break;
1998                 }
1999                 if ((fifo == BRCMF_FWS_FIFO_AC_BE) &&
2000                     (fws->fifo_credit[fifo] == 0) &&
2001                     (!fws->bus_flow_blocked)) {
2002                         while (brcmf_fws_borrow_credit(fws) == 0) {
2003                                 skb = brcmf_fws_deq(fws, fifo);
2004                                 if (!skb) {
2005                                         brcmf_fws_return_credits(fws, fifo, 1);
2006                                         break;
2007                                 }
2008                                 if (brcmf_fws_commit_skb(fws, fifo, skb))
2009                                         break;
2010                                 if (fws->bus_flow_blocked)
2011                                         break;
2012                         }
2013                 }
2014         }
2015         brcmf_fws_unlock(fws);
2016 }
2017
2018 int brcmf_fws_init(struct brcmf_pub *drvr)
2019 {
2020         struct brcmf_fws_info *fws;
2021         u32 tlv = BRCMF_FWS_FLAGS_RSSI_SIGNALS;
2022         int rc;
2023         u32 mode;
2024
2025         drvr->fws = kzalloc(sizeof(*(drvr->fws)), GFP_KERNEL);
2026         if (!drvr->fws) {
2027                 rc = -ENOMEM;
2028                 goto fail;
2029         }
2030
2031         fws = drvr->fws;
2032
2033         spin_lock_init(&fws->spinlock);
2034
2035         /* set linkage back */
2036         fws->drvr = drvr;
2037         fws->fcmode = fcmode;
2038
2039         fws->fws_wq = create_singlethread_workqueue("brcmf_fws_wq");
2040         if (fws->fws_wq == NULL) {
2041                 brcmf_err("workqueue creation failed\n");
2042                 rc = -EBADF;
2043                 goto fail;
2044         }
2045         INIT_WORK(&fws->fws_dequeue_work, brcmf_fws_dequeue_worker);
2046
2047         /* enable firmware signalling if fcmode active */
2048         if (fws->fcmode != BRCMF_FWS_FCMODE_NONE)
2049                 tlv |= BRCMF_FWS_FLAGS_XONXOFF_SIGNALS |
2050                        BRCMF_FWS_FLAGS_CREDIT_STATUS_SIGNALS |
2051                        BRCMF_FWS_FLAGS_HOST_PROPTXSTATUS_ACTIVE |
2052                        BRCMF_FWS_FLAGS_HOST_RXREORDER_ACTIVE;
2053
2054         rc = brcmf_fweh_register(drvr, BRCMF_E_FIFO_CREDIT_MAP,
2055                                  brcmf_fws_notify_credit_map);
2056         if (rc < 0) {
2057                 brcmf_err("register credit map handler failed\n");
2058                 goto fail;
2059         }
2060         rc = brcmf_fweh_register(drvr, BRCMF_E_BCMC_CREDIT_SUPPORT,
2061                                  brcmf_fws_notify_bcmc_credit_support);
2062         if (rc < 0) {
2063                 brcmf_err("register bcmc credit handler failed\n");
2064                 brcmf_fweh_unregister(drvr, BRCMF_E_FIFO_CREDIT_MAP);
2065                 goto fail;
2066         }
2067
2068         /* Setting the iovar may fail if feature is unsupported
2069          * so leave the rc as is so driver initialization can
2070          * continue. Set mode back to none indicating not enabled.
2071          */
2072         fws->fw_signals = true;
2073         if (brcmf_fil_iovar_int_set(drvr->iflist[0], "tlv", tlv)) {
2074                 brcmf_err("failed to set bdcv2 tlv signaling\n");
2075                 fws->fcmode = BRCMF_FWS_FCMODE_NONE;
2076                 fws->fw_signals = false;
2077         }
2078
2079         if (brcmf_fil_iovar_int_set(drvr->iflist[0], "ampdu_hostreorder", 1))
2080                 brcmf_dbg(INFO, "enabling AMPDU host-reorder failed\n");
2081
2082         /* Enable seq number reuse, if supported */
2083         if (brcmf_fil_iovar_int_get(drvr->iflist[0], "wlfc_mode", &mode) == 0) {
2084                 if (BRCMF_FWS_MODE_GET_REUSESEQ(mode)) {
2085                         mode = 0;
2086                         BRCMF_FWS_MODE_SET_REUSESEQ(mode, 1);
2087                         if (brcmf_fil_iovar_int_set(drvr->iflist[0],
2088                                                     "wlfc_mode", mode) == 0) {
2089                                 BRCMF_FWS_MODE_SET_REUSESEQ(fws->mode, 1);
2090                         }
2091                 }
2092         }
2093
2094         brcmf_fws_hanger_init(&fws->hanger);
2095         brcmf_fws_macdesc_init(&fws->desc.other, NULL, 0);
2096         brcmf_fws_macdesc_set_name(fws, &fws->desc.other);
2097         brcmu_pktq_init(&fws->desc.other.psq, BRCMF_FWS_PSQ_PREC_COUNT,
2098                         BRCMF_FWS_PSQ_LEN);
2099
2100         /* create debugfs file for statistics */
2101         brcmf_debugfs_create_fws_stats(drvr, &fws->stats);
2102
2103         brcmf_dbg(INFO, "%s bdcv2 tlv signaling [%x]\n",
2104                   fws->fw_signals ? "enabled" : "disabled", tlv);
2105         return 0;
2106
2107 fail:
2108         brcmf_fws_deinit(drvr);
2109         return rc;
2110 }
2111
2112 void brcmf_fws_deinit(struct brcmf_pub *drvr)
2113 {
2114         struct brcmf_fws_info *fws = drvr->fws;
2115
2116         if (!fws)
2117                 return;
2118
2119         if (drvr->fws->fws_wq)
2120                 destroy_workqueue(drvr->fws->fws_wq);
2121
2122         /* cleanup */
2123         brcmf_fws_lock(fws);
2124         brcmf_fws_cleanup(fws, -1);
2125         drvr->fws = NULL;
2126         brcmf_fws_unlock(fws);
2127
2128         /* free top structure */
2129         kfree(fws);
2130 }
2131
2132 bool brcmf_fws_fc_active(struct brcmf_fws_info *fws)
2133 {
2134         if (!fws->creditmap_received)
2135                 return false;
2136
2137         return fws->fcmode != BRCMF_FWS_FCMODE_NONE;
2138 }
2139
2140 void brcmf_fws_bustxfail(struct brcmf_fws_info *fws, struct sk_buff *skb)
2141 {
2142         u32 hslot;
2143
2144         if (brcmf_skbcb(skb)->state == BRCMF_FWS_SKBSTATE_TIM) {
2145                 brcmu_pkt_buf_free_skb(skb);
2146                 return;
2147         }
2148         brcmf_fws_lock(fws);
2149         hslot = brcmf_skb_htod_tag_get_field(skb, HSLOT);
2150         brcmf_fws_txs_process(fws, BRCMF_FWS_TXSTATUS_HOST_TOSSED, hslot, 0, 0);
2151         brcmf_fws_unlock(fws);
2152 }
2153
2154 void brcmf_fws_bus_blocked(struct brcmf_pub *drvr, bool flow_blocked)
2155 {
2156         struct brcmf_fws_info *fws = drvr->fws;
2157
2158         fws->bus_flow_blocked = flow_blocked;
2159         if (!flow_blocked)
2160                 brcmf_fws_schedule_deq(fws);
2161         else
2162                 fws->stats.bus_flow_block++;
2163 }