Changes in 4.9.233 xfs: catch inode allocation state mismatch corruption xfs: validate cached inodes are free when allocated xfs: don't call xfs_da_shrink_inode with NULL bp net: phy: mdio-bcm-unimac: fix potential NULL dereference in unimac_mdio_probe() crypto: ccp - Release all allocated memory if sha type is invalid media: rc: prevent memory leak in cx23888_ir_probe ath9k_htc: release allocated buffer if timed out ath9k: release allocated buffer if timed out PCI/ASPM: Disable ASPM on ASMedia ASM1083/1085 PCIe-to-PCI bridge ARM: 8986/1: hw_breakpoint: Don't invoke overflow handler on uaccess watchpoints drm/amdgpu: Prevent kernel-infoleak in amdgpu_info_ioctl() drm: hold gem reference until object is no longer accessed f2fs: check memory boundary by insane namelen f2fs: check if file namelen exceeds max value 9p/trans_fd: abort p9_read_work if req status changed 9p/trans_fd: Fix concurrency del of req_list in p9_fd_cancelled/p9_read_work x86/build/lto: Fix truncated .bss with -fdata-sections x86, vmlinux.lds: Page-align end of ..page_aligned sections fbdev: Detect integer underflow at "struct fbcon_ops"->clear_margins. rds: Prevent kernel-infoleak in rds_notify_queue_get() xfs: fix missed wakeup on l_flush_wait uapi: includes linux/types.h before exporting files install several missing uapi headers net/x25: Fix x25_neigh refcnt leak when x25 disconnect net/x25: Fix null-ptr-deref in x25_disconnect sh: Fix validation of system call number net: lan78xx: add missing endpoint sanity check net: lan78xx: fix transfer-buffer memory leak mlx4: disable device on shutdown mlxsw: core: Increase scope of RCU read-side critical section mlxsw: core: Free EMAD transactions using kfree_rcu() ibmvnic: Fix IRQ mapping disposal in error path mac80211: mesh: Free ie data when leaving mesh mac80211: mesh: Free pending skb when destroying a mpath arm64: csum: Fix handling of bad packets usb: hso: Fix debug compile warning on sparc32 qed: Disable "MFW indication via attention" SPAM every 5 minutes nfc: s3fwrn5: add missing release on skb in s3fwrn5_recv_frame parisc: add support for cmpxchg on u8 pointers net: ethernet: ravb: exit if re-initialization fails in tx timeout Revert "i2c: cadence: Fix the hold bit setting" xen-netfront: fix potential deadlock in xennet_remove() KVM: LAPIC: Prevent setting the tscdeadline timer if the lapic is hw disabled x86/i8259: Use printk_deferred() to prevent deadlock random32: update the net random state on interrupt and activity ARM: percpu.h: fix build error random: fix circular include dependency on arm64 after addition of percpu.h random32: remove net_rand_state from the latent entropy gcc plugin random32: move the pseudo-random 32-bit definitions to prandom.h ext4: fix direct I/O read error USB: serial: qcserial: add EM7305 QDL product ID net/mlx5e: Don't support phys switch id if not in switchdev mode ALSA: seq: oss: Serialize ioctls Bluetooth: Fix slab-out-of-bounds read in hci_extended_inquiry_result_evt() Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_evt() Bluetooth: Prevent out-of-bounds read in hci_inquiry_result_with_rssi_evt() omapfb: dss: Fix max fclk divider for omap36xx vgacon: Fix for missing check in scrollback handling mtd: properly check all write ioctls for permissions leds: wm831x-status: fix use-after-free on unbind leds: da903x: fix use-after-free on unbind leds: lm3533: fix use-after-free on unbind leds: 88pm860x: fix use-after-free on unbind net/9p: validate fds in p9_fd_open drm/nouveau/fbcon: fix module unload when fbcon init has failed for some reason cfg80211: check vendor command doit pointer before use igb: reinit_locked() should be called with rtnl_lock atm: fix atm_dev refcnt leaks in atmtcp_remove_persistent tools lib traceevent: Fix memory leak in process_dynamic_array_len xattr: break delegations in {set,remove}xattr binder: Prevent context manager from incrementing ref 0 ipv4: Silence suspicious RCU usage warning ipv6: fix memory leaks on IPV6_ADDRFORM path vxlan: Ensure FDB dump is performed under RCU net: lan78xx: replace bogus endpoint lookup Revert "vxlan: fix tos value before xmit" usb: hso: check for return value in hso_serial_common_create() Smack: fix use-after-free in smk_write_relabel_self() tracepoint: Mark __tracepoint_string's __used gpio: fix oops resulting from calling of_get_named_gpio(NULL, ...) cgroup: add missing skcd->no_refcnt check in cgroup_sk_clone() EDAC: Fix reference count leaks arm64: dts: qcom: msm8916: Replace invalid bias-pull-none property arm64: dts: exynos: Fix silent hang after boot on Espresso m68k: mac: Don't send IOP message until channel is idle m68k: mac: Fix IOP status/control register writes platform/x86: intel-hid: Fix return value check in check_acpi_dev() platform/x86: intel-vbtn: Fix return value check in check_acpi_dev() ARM: at91: pm: add missing put_device() call in at91_pm_sram_init() ARM: socfpga: PM: add missing put_device() call in socfpga_setup_ocram_self_refresh() drm/tilcdc: fix leak & null ref in panel_connector_get_modes Bluetooth: add a mutex lock to avoid UAF in do_enale_set fs/btrfs: Add cond_resched() for try_release_extent_mapping() stalls drm/radeon: Fix reference count leaks caused by pm_runtime_get_sync video: fbdev: neofb: fix memory leak in neo_scan_monitor() md-cluster: fix wild pointer of unlock_all_bitmaps() drm/nouveau: fix multiple instances of reference count leaks drm/debugfs: fix plain echo to connector "force" attribute mm/mmap.c: Add cond_resched() for exit_mmap() CPU stalls brcmfmac: To fix Bss Info flag definition Bug iwlegacy: Check the return value of pcie_capability_read_*() usb: gadget: net2280: fix memory leak on probe error handling paths bdc: Fix bug causing crash after multiple disconnects dyndbg: fix a BUG_ON in ddebug_describe_flags bcache: fix super block seq numbers comparision in register_cache_set() ACPICA: Do not increment operation_region reference counts for field units agp/intel: Fix a memory leak on module initialisation failure video: fbdev: sm712fb: fix an issue about iounmap for a wrong address console: newport_con: fix an issue about leak related system resources video: pxafb: Fix the function used to balance a 'dma_alloc_coherent()' call iio: improve IIO_CONCENTRATION channel type description leds: lm355x: avoid enum conversion warning media: omap3isp: Add missed v4l2_ctrl_handler_free() for preview_init_entities() scsi: cumana_2: Fix different dev_id between request_irq() and free_irq() drm/mipi: use dcs write for mipi_dsi_dcs_set_tear_scanline cxl: Fix kobject memleak drm/radeon: fix array out-of-bounds read and write issues scsi: powertec: Fix different dev_id between request_irq() and free_irq() scsi: eesox: Fix different dev_id between request_irq() and free_irq() media: firewire: Using uninitialized values in node_probe() media: exynos4-is: Add missed check for pinctrl_lookup_state() xfs: fix reflink quota reservation accounting error PCI: Fix pci_cfg_wait queue locking problem leds: core: Flush scheduled work for system suspend drm: panel: simple: Fix bpc for LG LB070WV8 panel scsi: scsi_debug: Add check for sdebug_max_queue during module init mwifiex: Prevent memory corruption handling keys powerpc/vdso: Fix vdso cpu truncation staging: rtl8192u: fix a dubious looking mask before a shift PCI/ASPM: Add missing newline in sysfs 'policy' drm/imx: tve: fix regulator_disable error path USB: serial: iuu_phoenix: fix led-activity helpers usb: dwc2: Fix error path in gadget registration scsi: mesh: Fix panic after host or bus reset Smack: fix another vsscanf out of bounds Smack: prevent underflow in smk_set_cipso() power: supply: check if calc_soc succeeded in pm860x_init_battery selftests/powerpc: Fix CPU affinity for child process selftests/powerpc: Fix online CPU selection s390/qeth: don't process empty bridge port events wl1251: fix always return 0 error net: spider_net: Fix the size used in a 'dma_free_coherent()' call fsl/fman: use 32-bit unsigned integer fsl/fman: fix dereference null return value fsl/fman: fix unreachable code fsl/fman: check dereferencing null pointer fsl/fman: fix eth hash table allocation dlm: Fix kobject memleak pinctrl-single: fix pcs_parse_pinconf() return value drivers/net/wan/lapbether: Added needed_headroom and a skb->len check net/nfc/rawsock.c: add CAP_NET_RAW check. net: Set fput_needed iff FDPUT_FPUT is set USB: serial: cp210x: re-enable auto-RTS on open USB: serial: cp210x: enable usb generic throttle/unthrottle ALSA: usb-audio: Creative USB X-Fi Pro SB1095 volume knob support ALSA: usb-audio: fix overeager device match for MacroSilicon MS2109 ALSA: usb-audio: add quirk for Pioneer DDJ-RB crypto: qat - fix double free in qat_uclo_create_batch_init_list crypto: ccp - Fix use of merged scatterlists fs/minix: check return value of sb_getblk() fs/minix: don't allow getting deleted inodes fs/minix: reject too-large maximum file size ALSA: usb-audio: work around streaming quirk for MacroSilicon MS2109 9p: Fix memory leak in v9fs_mount parisc: mask out enable and reserved bits from sba imask ARM: 8992/1: Fix unwind_frame for clang-built kernels xen/balloon: fix accounting in alloc_xenballooned_pages error path xen/balloon: make the balloon wait interruptible smb3: warn on confusing error scenario with sec=krb5 PCI: hotplug: ACPI: Fix context refcounting in acpiphp_grab_context() btrfs: don't allocate anonymous block device for user invisible roots btrfs: only search for left_info if there is no right_info in try_merge_free_space btrfs: fix memory leaks after failure to lookup checksums during inode logging iio: dac: ad5592r: fix unbalanced mutex unlocks in ad5592r_read_raw() xtensa: fix xtensa_pmu_setup prototype powerpc: Fix circular dependency between percpu.h and mmu.h net: ethernet: stmmac: Disable hardware multicast filter net: stmmac: dwmac1000: provide multicast filter fallback net/compat: Add missing sock updates for SCM_RIGHTS md/raid5: Fix Force reconstruct-write io stuck in degraded raid5 bcache: allocate meta data pages as compound pages mac80211: fix misplaced while instead of if MIPS: CPU#0 is not hotpluggable ext2: fix missing percpu_counter_inc ocfs2: change slot number type s16 to u16 ftrace: Setup correct FTRACE_FL_REGS flags for module kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler watchdog: f71808e_wdt: indicate WDIOF_CARDRESET support in watchdog_info.options watchdog: f71808e_wdt: remove use of wrong watchdog_info option watchdog: f71808e_wdt: clear watchdog timeout occurred flag pseries: Fix 64 bit logical memory block panic mfd: arizona: Ensure 32k clock is put on driver unbind and error USB: serial: ftdi_sio: make process-packet buffer unsigned USB: serial: ftdi_sio: clean up receive processing gpu: ipu-v3: image-convert: Combine rotate/no-rotate irq handlers iommu/omap: Check for failure of a call to omap_iommu_dump_ctx iommu/vt-d: Enforce PASID devTLB field mask i2c: rcar: slave: only send STOP event when we have been addressed clk: clk-atlas6: fix return value check in atlas6_clk_init() pwm: bcm-iproc: handle clk_get_rate() return Input: sentelic - fix error return when fsp_reg_write fails drm/vmwgfx: Fix two list_for_each loop exit tests net: qcom/emac: add missed clk_disable_unprepare in error path of emac_clks_phase1_init nfs: Fix getxattr kernel panic and memory overflow fs/ufs: avoid potential u32 multiplication overflow mfd: dln2: Run event handler loop under spinlock ALSA: echoaudio: Fix potential Oops in snd_echo_resume() sh: landisk: Add missing initialization of sh_io_port_base khugepaged: retract_page_tables() remember to test exit mm: Avoid calling build_all_zonelists_init under hotplug context Linux 4.9.233 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ied62cb0768f5bd8e989d75e7c2ccf6f1e6f2efd4
358 lines
8.9 KiB
C
358 lines
8.9 KiB
C
/*
|
|
* Copyright (c) 2010-2011 Atheros Communications Inc.
|
|
*
|
|
* Permission to use, copy, modify, and/or distribute this software for any
|
|
* purpose with or without fee is hereby granted, provided that the above
|
|
* copyright notice and this permission notice appear in all copies.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
|
|
* WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
|
|
* MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
|
|
* ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
|
|
* WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
|
|
* ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
|
|
* OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
|
|
*/
|
|
|
|
#include "htc.h"
|
|
|
|
static const char *wmi_cmd_to_name(enum wmi_cmd_id wmi_cmd)
|
|
{
|
|
switch (wmi_cmd) {
|
|
case WMI_ECHO_CMDID:
|
|
return "WMI_ECHO_CMDID";
|
|
case WMI_ACCESS_MEMORY_CMDID:
|
|
return "WMI_ACCESS_MEMORY_CMDID";
|
|
case WMI_GET_FW_VERSION:
|
|
return "WMI_GET_FW_VERSION";
|
|
case WMI_DISABLE_INTR_CMDID:
|
|
return "WMI_DISABLE_INTR_CMDID";
|
|
case WMI_ENABLE_INTR_CMDID:
|
|
return "WMI_ENABLE_INTR_CMDID";
|
|
case WMI_ATH_INIT_CMDID:
|
|
return "WMI_ATH_INIT_CMDID";
|
|
case WMI_ABORT_TXQ_CMDID:
|
|
return "WMI_ABORT_TXQ_CMDID";
|
|
case WMI_STOP_TX_DMA_CMDID:
|
|
return "WMI_STOP_TX_DMA_CMDID";
|
|
case WMI_ABORT_TX_DMA_CMDID:
|
|
return "WMI_ABORT_TX_DMA_CMDID";
|
|
case WMI_DRAIN_TXQ_CMDID:
|
|
return "WMI_DRAIN_TXQ_CMDID";
|
|
case WMI_DRAIN_TXQ_ALL_CMDID:
|
|
return "WMI_DRAIN_TXQ_ALL_CMDID";
|
|
case WMI_START_RECV_CMDID:
|
|
return "WMI_START_RECV_CMDID";
|
|
case WMI_STOP_RECV_CMDID:
|
|
return "WMI_STOP_RECV_CMDID";
|
|
case WMI_FLUSH_RECV_CMDID:
|
|
return "WMI_FLUSH_RECV_CMDID";
|
|
case WMI_SET_MODE_CMDID:
|
|
return "WMI_SET_MODE_CMDID";
|
|
case WMI_NODE_CREATE_CMDID:
|
|
return "WMI_NODE_CREATE_CMDID";
|
|
case WMI_NODE_REMOVE_CMDID:
|
|
return "WMI_NODE_REMOVE_CMDID";
|
|
case WMI_VAP_REMOVE_CMDID:
|
|
return "WMI_VAP_REMOVE_CMDID";
|
|
case WMI_VAP_CREATE_CMDID:
|
|
return "WMI_VAP_CREATE_CMDID";
|
|
case WMI_REG_READ_CMDID:
|
|
return "WMI_REG_READ_CMDID";
|
|
case WMI_REG_WRITE_CMDID:
|
|
return "WMI_REG_WRITE_CMDID";
|
|
case WMI_REG_RMW_CMDID:
|
|
return "WMI_REG_RMW_CMDID";
|
|
case WMI_RC_STATE_CHANGE_CMDID:
|
|
return "WMI_RC_STATE_CHANGE_CMDID";
|
|
case WMI_RC_RATE_UPDATE_CMDID:
|
|
return "WMI_RC_RATE_UPDATE_CMDID";
|
|
case WMI_TARGET_IC_UPDATE_CMDID:
|
|
return "WMI_TARGET_IC_UPDATE_CMDID";
|
|
case WMI_TX_AGGR_ENABLE_CMDID:
|
|
return "WMI_TX_AGGR_ENABLE_CMDID";
|
|
case WMI_TGT_DETACH_CMDID:
|
|
return "WMI_TGT_DETACH_CMDID";
|
|
case WMI_NODE_UPDATE_CMDID:
|
|
return "WMI_NODE_UPDATE_CMDID";
|
|
case WMI_INT_STATS_CMDID:
|
|
return "WMI_INT_STATS_CMDID";
|
|
case WMI_TX_STATS_CMDID:
|
|
return "WMI_TX_STATS_CMDID";
|
|
case WMI_RX_STATS_CMDID:
|
|
return "WMI_RX_STATS_CMDID";
|
|
case WMI_BITRATE_MASK_CMDID:
|
|
return "WMI_BITRATE_MASK_CMDID";
|
|
}
|
|
|
|
return "Bogus";
|
|
}
|
|
|
|
struct wmi *ath9k_init_wmi(struct ath9k_htc_priv *priv)
|
|
{
|
|
struct wmi *wmi;
|
|
|
|
wmi = kzalloc(sizeof(struct wmi), GFP_KERNEL);
|
|
if (!wmi)
|
|
return NULL;
|
|
|
|
wmi->drv_priv = priv;
|
|
wmi->stopped = false;
|
|
skb_queue_head_init(&wmi->wmi_event_queue);
|
|
spin_lock_init(&wmi->wmi_lock);
|
|
spin_lock_init(&wmi->event_lock);
|
|
mutex_init(&wmi->op_mutex);
|
|
mutex_init(&wmi->multi_write_mutex);
|
|
mutex_init(&wmi->multi_rmw_mutex);
|
|
init_completion(&wmi->cmd_wait);
|
|
INIT_LIST_HEAD(&wmi->pending_tx_events);
|
|
tasklet_init(&wmi->wmi_event_tasklet, ath9k_wmi_event_tasklet,
|
|
(unsigned long)wmi);
|
|
|
|
return wmi;
|
|
}
|
|
|
|
void ath9k_stop_wmi(struct ath9k_htc_priv *priv)
|
|
{
|
|
struct wmi *wmi = priv->wmi;
|
|
|
|
mutex_lock(&wmi->op_mutex);
|
|
wmi->stopped = true;
|
|
mutex_unlock(&wmi->op_mutex);
|
|
}
|
|
|
|
void ath9k_destoy_wmi(struct ath9k_htc_priv *priv)
|
|
{
|
|
kfree(priv->wmi);
|
|
}
|
|
|
|
void ath9k_wmi_event_drain(struct ath9k_htc_priv *priv)
|
|
{
|
|
unsigned long flags;
|
|
|
|
tasklet_kill(&priv->wmi->wmi_event_tasklet);
|
|
spin_lock_irqsave(&priv->wmi->wmi_lock, flags);
|
|
__skb_queue_purge(&priv->wmi->wmi_event_queue);
|
|
spin_unlock_irqrestore(&priv->wmi->wmi_lock, flags);
|
|
}
|
|
|
|
void ath9k_wmi_event_tasklet(unsigned long data)
|
|
{
|
|
struct wmi *wmi = (struct wmi *)data;
|
|
struct ath9k_htc_priv *priv = wmi->drv_priv;
|
|
struct wmi_cmd_hdr *hdr;
|
|
void *wmi_event;
|
|
struct wmi_event_swba *swba;
|
|
struct sk_buff *skb = NULL;
|
|
unsigned long flags;
|
|
u16 cmd_id;
|
|
|
|
do {
|
|
spin_lock_irqsave(&wmi->wmi_lock, flags);
|
|
skb = __skb_dequeue(&wmi->wmi_event_queue);
|
|
if (!skb) {
|
|
spin_unlock_irqrestore(&wmi->wmi_lock, flags);
|
|
return;
|
|
}
|
|
spin_unlock_irqrestore(&wmi->wmi_lock, flags);
|
|
|
|
hdr = (struct wmi_cmd_hdr *) skb->data;
|
|
cmd_id = be16_to_cpu(hdr->command_id);
|
|
wmi_event = skb_pull(skb, sizeof(struct wmi_cmd_hdr));
|
|
|
|
switch (cmd_id) {
|
|
case WMI_SWBA_EVENTID:
|
|
swba = (struct wmi_event_swba *) wmi_event;
|
|
ath9k_htc_swba(priv, swba);
|
|
break;
|
|
case WMI_FATAL_EVENTID:
|
|
ieee80211_queue_work(wmi->drv_priv->hw,
|
|
&wmi->drv_priv->fatal_work);
|
|
break;
|
|
case WMI_TXSTATUS_EVENTID:
|
|
spin_lock_bh(&priv->tx.tx_lock);
|
|
if (priv->tx.flags & ATH9K_HTC_OP_TX_DRAIN) {
|
|
spin_unlock_bh(&priv->tx.tx_lock);
|
|
break;
|
|
}
|
|
spin_unlock_bh(&priv->tx.tx_lock);
|
|
|
|
ath9k_htc_txstatus(priv, wmi_event);
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
|
|
kfree_skb(skb);
|
|
} while (1);
|
|
}
|
|
|
|
void ath9k_fatal_work(struct work_struct *work)
|
|
{
|
|
struct ath9k_htc_priv *priv = container_of(work, struct ath9k_htc_priv,
|
|
fatal_work);
|
|
struct ath_common *common = ath9k_hw_common(priv->ah);
|
|
|
|
ath_dbg(common, FATAL, "FATAL Event received, resetting device\n");
|
|
ath9k_htc_reset(priv);
|
|
}
|
|
|
|
static void ath9k_wmi_rsp_callback(struct wmi *wmi, struct sk_buff *skb)
|
|
{
|
|
skb_pull(skb, sizeof(struct wmi_cmd_hdr));
|
|
|
|
if (wmi->cmd_rsp_buf != NULL && wmi->cmd_rsp_len != 0)
|
|
memcpy(wmi->cmd_rsp_buf, skb->data, wmi->cmd_rsp_len);
|
|
|
|
complete(&wmi->cmd_wait);
|
|
}
|
|
|
|
static void ath9k_wmi_ctrl_rx(void *priv, struct sk_buff *skb,
|
|
enum htc_endpoint_id epid)
|
|
{
|
|
struct wmi *wmi = (struct wmi *) priv;
|
|
struct wmi_cmd_hdr *hdr;
|
|
u16 cmd_id;
|
|
|
|
if (unlikely(wmi->stopped))
|
|
goto free_skb;
|
|
|
|
hdr = (struct wmi_cmd_hdr *) skb->data;
|
|
cmd_id = be16_to_cpu(hdr->command_id);
|
|
|
|
if (cmd_id & 0x1000) {
|
|
spin_lock(&wmi->wmi_lock);
|
|
__skb_queue_tail(&wmi->wmi_event_queue, skb);
|
|
spin_unlock(&wmi->wmi_lock);
|
|
tasklet_schedule(&wmi->wmi_event_tasklet);
|
|
return;
|
|
}
|
|
|
|
/* Check if there has been a timeout. */
|
|
spin_lock(&wmi->wmi_lock);
|
|
if (be16_to_cpu(hdr->seq_no) != wmi->last_seq_id) {
|
|
spin_unlock(&wmi->wmi_lock);
|
|
goto free_skb;
|
|
}
|
|
spin_unlock(&wmi->wmi_lock);
|
|
|
|
/* WMI command response */
|
|
ath9k_wmi_rsp_callback(wmi, skb);
|
|
|
|
free_skb:
|
|
kfree_skb(skb);
|
|
}
|
|
|
|
static void ath9k_wmi_ctrl_tx(void *priv, struct sk_buff *skb,
|
|
enum htc_endpoint_id epid, bool txok)
|
|
{
|
|
kfree_skb(skb);
|
|
}
|
|
|
|
int ath9k_wmi_connect(struct htc_target *htc, struct wmi *wmi,
|
|
enum htc_endpoint_id *wmi_ctrl_epid)
|
|
{
|
|
struct htc_service_connreq connect;
|
|
int ret;
|
|
|
|
wmi->htc = htc;
|
|
|
|
memset(&connect, 0, sizeof(connect));
|
|
|
|
connect.ep_callbacks.priv = wmi;
|
|
connect.ep_callbacks.tx = ath9k_wmi_ctrl_tx;
|
|
connect.ep_callbacks.rx = ath9k_wmi_ctrl_rx;
|
|
connect.service_id = WMI_CONTROL_SVC;
|
|
|
|
ret = htc_connect_service(htc, &connect, &wmi->ctrl_epid);
|
|
if (ret)
|
|
return ret;
|
|
|
|
*wmi_ctrl_epid = wmi->ctrl_epid;
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int ath9k_wmi_cmd_issue(struct wmi *wmi,
|
|
struct sk_buff *skb,
|
|
enum wmi_cmd_id cmd, u16 len)
|
|
{
|
|
struct wmi_cmd_hdr *hdr;
|
|
unsigned long flags;
|
|
|
|
hdr = (struct wmi_cmd_hdr *) skb_push(skb, sizeof(struct wmi_cmd_hdr));
|
|
hdr->command_id = cpu_to_be16(cmd);
|
|
hdr->seq_no = cpu_to_be16(++wmi->tx_seq_id);
|
|
|
|
spin_lock_irqsave(&wmi->wmi_lock, flags);
|
|
wmi->last_seq_id = wmi->tx_seq_id;
|
|
spin_unlock_irqrestore(&wmi->wmi_lock, flags);
|
|
|
|
return htc_send_epid(wmi->htc, skb, wmi->ctrl_epid);
|
|
}
|
|
|
|
int ath9k_wmi_cmd(struct wmi *wmi, enum wmi_cmd_id cmd_id,
|
|
u8 *cmd_buf, u32 cmd_len,
|
|
u8 *rsp_buf, u32 rsp_len,
|
|
u32 timeout)
|
|
{
|
|
struct ath_hw *ah = wmi->drv_priv->ah;
|
|
struct ath_common *common = ath9k_hw_common(ah);
|
|
u16 headroom = sizeof(struct htc_frame_hdr) +
|
|
sizeof(struct wmi_cmd_hdr);
|
|
struct sk_buff *skb;
|
|
u8 *data;
|
|
unsigned long time_left;
|
|
int ret = 0;
|
|
|
|
if (ah->ah_flags & AH_UNPLUGGED)
|
|
return 0;
|
|
|
|
skb = alloc_skb(headroom + cmd_len, GFP_ATOMIC);
|
|
if (!skb)
|
|
return -ENOMEM;
|
|
|
|
skb_reserve(skb, headroom);
|
|
|
|
if (cmd_len != 0 && cmd_buf != NULL) {
|
|
data = (u8 *) skb_put(skb, cmd_len);
|
|
memcpy(data, cmd_buf, cmd_len);
|
|
}
|
|
|
|
mutex_lock(&wmi->op_mutex);
|
|
|
|
/* check if wmi stopped flag is set */
|
|
if (unlikely(wmi->stopped)) {
|
|
ret = -EPROTO;
|
|
goto out;
|
|
}
|
|
|
|
/* record the rsp buffer and length */
|
|
wmi->cmd_rsp_buf = rsp_buf;
|
|
wmi->cmd_rsp_len = rsp_len;
|
|
|
|
ret = ath9k_wmi_cmd_issue(wmi, skb, cmd_id, cmd_len);
|
|
if (ret)
|
|
goto out;
|
|
|
|
time_left = wait_for_completion_timeout(&wmi->cmd_wait, timeout);
|
|
if (!time_left) {
|
|
ath_dbg(common, WMI, "Timeout waiting for WMI command: %s\n",
|
|
wmi_cmd_to_name(cmd_id));
|
|
mutex_unlock(&wmi->op_mutex);
|
|
kfree_skb(skb);
|
|
return -ETIMEDOUT;
|
|
}
|
|
|
|
mutex_unlock(&wmi->op_mutex);
|
|
|
|
return 0;
|
|
|
|
out:
|
|
ath_dbg(common, WMI, "WMI failure for: %s\n", wmi_cmd_to_name(cmd_id));
|
|
mutex_unlock(&wmi->op_mutex);
|
|
kfree_skb(skb);
|
|
|
|
return ret;
|
|
}
|