1 // SPDX-License-Identifier: GPL-2.0-only
3 * This file contains the handling of command.
4 * It prepares command and sends it to firmware when it is ready.
7 #include <linux/hardirq.h>
8 #include <linux/kfifo.h>
9 #include <linux/sched.h>
10 #include <linux/slab.h>
11 #include <linux/if_arp.h>
12 #include <linux/export.h>
18 #define CAL_NF(nf) ((s32)(-(s32)(nf)))
19 #define CAL_RSSI(snr, nf) ((s32)((s32)(snr) + CAL_NF(nf)))
22 * lbs_cmd_copyback - Simple callback that copies response back into command
24 * @priv: A pointer to &struct lbs_private structure
25 * @extra: A pointer to the original command structure for which
26 * 'resp' is a response
27 * @resp: A pointer to the command response
29 * returns: 0 on success, error on failure
31 int lbs_cmd_copyback(struct lbs_private *priv, unsigned long extra,
32 struct cmd_header *resp)
34 struct cmd_header *buf = (void *)extra;
37 copy_len = min(le16_to_cpu(buf->size), le16_to_cpu(resp->size));
38 memcpy(buf, resp, copy_len);
41 EXPORT_SYMBOL_GPL(lbs_cmd_copyback);
44 * lbs_cmd_async_callback - Simple callback that ignores the result.
45 * Use this if you just want to send a command to the hardware, but don't
46 * care for the result.
52 * returns: 0 for success
54 static int lbs_cmd_async_callback(struct lbs_private *priv, unsigned long extra,
55 struct cmd_header *resp)
62 * is_command_allowed_in_ps - tests if a command is allowed in Power Save mode
64 * @cmd: the command ID
66 * returns: 1 if allowed, 0 if not allowed
68 static u8 is_command_allowed_in_ps(u16 cmd)
73 case CMD_802_11_HOST_SLEEP_CFG:
82 * lbs_update_hw_spec - Updates the hardware details like MAC address
83 * and regulatory region
85 * @priv: A pointer to &struct lbs_private structure
87 * returns: 0 on success, error on failure
89 int lbs_update_hw_spec(struct lbs_private *priv)
91 struct cmd_ds_get_hw_spec cmd;
95 memset(&cmd, 0, sizeof(cmd));
96 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
97 memcpy(cmd.permanentaddr, priv->current_addr, ETH_ALEN);
98 ret = lbs_cmd_with_response(priv, CMD_GET_HW_SPEC, &cmd);
102 priv->fwcapinfo = le32_to_cpu(cmd.fwcapinfo);
104 /* The firmware release is in an interesting format: the patch
105 * level is in the most significant nibble ... so fix that: */
106 priv->fwrelease = le32_to_cpu(cmd.fwrelease);
107 priv->fwrelease = (priv->fwrelease << 8) |
108 (priv->fwrelease >> 24 & 0xff);
110 /* Some firmware capabilities:
111 * CF card firmware 5.0.16p0: cap 0x00000303
112 * USB dongle firmware 5.110.17p2: cap 0x00000303
114 netdev_info(priv->dev, "%pM, fw %u.%u.%up%u, cap 0x%08x\n",
116 priv->fwrelease >> 24 & 0xff,
117 priv->fwrelease >> 16 & 0xff,
118 priv->fwrelease >> 8 & 0xff,
119 priv->fwrelease & 0xff,
121 lbs_deb_cmd("GET_HW_SPEC: hardware interface 0x%x, hardware spec 0x%04x\n",
122 cmd.hwifversion, cmd.version);
124 /* Clamp region code to 8-bit since FW spec indicates that it should
125 * only ever be 8-bit, even though the field size is 16-bit. Some firmware
126 * returns non-zero high 8 bits here.
128 * Firmware version 4.0.102 used in CF8381 has region code shifted. We
129 * need to check for this problem and handle it properly.
131 if (MRVL_FW_MAJOR_REV(priv->fwrelease) == MRVL_FW_V4)
132 priv->regioncode = (le16_to_cpu(cmd.regioncode) >> 8) & 0xFF;
134 priv->regioncode = le16_to_cpu(cmd.regioncode) & 0xFF;
136 for (i = 0; i < MRVDRV_MAX_REGION_CODE; i++) {
137 /* use the region code to search for the index */
138 if (priv->regioncode == lbs_region_code_to_index[i])
142 /* if it's unidentified region code, use the default (USA) */
143 if (i >= MRVDRV_MAX_REGION_CODE) {
144 priv->regioncode = 0x10;
145 netdev_info(priv->dev,
146 "unidentified region code; using the default (USA)\n");
149 if (priv->current_addr[0] == 0xff)
150 memmove(priv->current_addr, cmd.permanentaddr, ETH_ALEN);
152 if (!priv->copied_hwaddr) {
153 memcpy(priv->dev->dev_addr, priv->current_addr, ETH_ALEN);
155 memcpy(priv->mesh_dev->dev_addr,
156 priv->current_addr, ETH_ALEN);
157 priv->copied_hwaddr = 1;
164 static int lbs_ret_host_sleep_cfg(struct lbs_private *priv, unsigned long dummy,
165 struct cmd_header *resp)
167 if (priv->is_host_sleep_activated) {
168 priv->is_host_sleep_configured = 0;
169 if (priv->psstate == PS_STATE_FULL_POWER) {
170 priv->is_host_sleep_activated = 0;
171 wake_up_interruptible(&priv->host_sleep_q);
174 priv->is_host_sleep_configured = 1;
180 int lbs_host_sleep_cfg(struct lbs_private *priv, uint32_t criteria,
181 struct wol_config *p_wol_config)
183 struct cmd_ds_host_sleep cmd_config;
187 * Certain firmware versions do not support EHS_REMOVE_WAKEUP command
188 * and the card will return a failure. Since we need to be
189 * able to reset the mask, in those cases we set a 0 mask instead.
191 if (criteria == EHS_REMOVE_WAKEUP && !priv->ehs_remove_supported)
194 cmd_config.hdr.size = cpu_to_le16(sizeof(cmd_config));
195 cmd_config.criteria = cpu_to_le32(criteria);
196 cmd_config.gpio = priv->wol_gpio;
197 cmd_config.gap = priv->wol_gap;
199 if (p_wol_config != NULL)
200 memcpy((uint8_t *)&cmd_config.wol_conf, (uint8_t *)p_wol_config,
201 sizeof(struct wol_config));
203 cmd_config.wol_conf.action = CMD_ACT_ACTION_NONE;
205 ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_CFG, &cmd_config.hdr,
206 le16_to_cpu(cmd_config.hdr.size),
207 lbs_ret_host_sleep_cfg, 0);
210 memcpy((uint8_t *) p_wol_config,
211 (uint8_t *)&cmd_config.wol_conf,
212 sizeof(struct wol_config));
214 netdev_info(priv->dev, "HOST_SLEEP_CFG failed %d\n", ret);
219 EXPORT_SYMBOL_GPL(lbs_host_sleep_cfg);
222 * lbs_set_ps_mode - Sets the Power Save mode
224 * @priv: A pointer to &struct lbs_private structure
225 * @cmd_action: The Power Save operation (PS_MODE_ACTION_ENTER_PS or
226 * PS_MODE_ACTION_EXIT_PS)
227 * @block: Whether to block on a response or not
229 * returns: 0 on success, error on failure
231 int lbs_set_ps_mode(struct lbs_private *priv, u16 cmd_action, bool block)
233 struct cmd_ds_802_11_ps_mode cmd;
236 memset(&cmd, 0, sizeof(cmd));
237 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
238 cmd.action = cpu_to_le16(cmd_action);
240 if (cmd_action == PS_MODE_ACTION_ENTER_PS) {
241 lbs_deb_cmd("PS_MODE: action ENTER_PS\n");
242 cmd.multipledtim = cpu_to_le16(1); /* Default DTIM multiple */
243 } else if (cmd_action == PS_MODE_ACTION_EXIT_PS) {
244 lbs_deb_cmd("PS_MODE: action EXIT_PS\n");
246 /* We don't handle CONFIRM_SLEEP here because it needs to
247 * be fastpathed to the firmware.
249 lbs_deb_cmd("PS_MODE: unknown action 0x%X\n", cmd_action);
255 ret = lbs_cmd_with_response(priv, CMD_802_11_PS_MODE, &cmd);
257 lbs_cmd_async(priv, CMD_802_11_PS_MODE, &cmd.hdr, sizeof (cmd));
263 int lbs_cmd_802_11_sleep_params(struct lbs_private *priv, uint16_t cmd_action,
264 struct sleep_params *sp)
266 struct cmd_ds_802_11_sleep_params cmd;
269 if (cmd_action == CMD_ACT_GET) {
270 memset(&cmd, 0, sizeof(cmd));
272 cmd.error = cpu_to_le16(sp->sp_error);
273 cmd.offset = cpu_to_le16(sp->sp_offset);
274 cmd.stabletime = cpu_to_le16(sp->sp_stabletime);
275 cmd.calcontrol = sp->sp_calcontrol;
276 cmd.externalsleepclk = sp->sp_extsleepclk;
277 cmd.reserved = cpu_to_le16(sp->sp_reserved);
279 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
280 cmd.action = cpu_to_le16(cmd_action);
282 ret = lbs_cmd_with_response(priv, CMD_802_11_SLEEP_PARAMS, &cmd);
285 lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, "
286 "calcontrol 0x%x extsleepclk 0x%x\n",
287 le16_to_cpu(cmd.error), le16_to_cpu(cmd.offset),
288 le16_to_cpu(cmd.stabletime), cmd.calcontrol,
289 cmd.externalsleepclk);
291 sp->sp_error = le16_to_cpu(cmd.error);
292 sp->sp_offset = le16_to_cpu(cmd.offset);
293 sp->sp_stabletime = le16_to_cpu(cmd.stabletime);
294 sp->sp_calcontrol = cmd.calcontrol;
295 sp->sp_extsleepclk = cmd.externalsleepclk;
296 sp->sp_reserved = le16_to_cpu(cmd.reserved);
302 static int lbs_wait_for_ds_awake(struct lbs_private *priv)
306 if (priv->is_deep_sleep) {
307 if (!wait_event_interruptible_timeout(priv->ds_awake_q,
308 !priv->is_deep_sleep, (10 * HZ))) {
309 netdev_err(priv->dev, "ds_awake_q: timer expired\n");
317 int lbs_set_deep_sleep(struct lbs_private *priv, int deep_sleep)
322 if (priv->is_deep_sleep != 1) {
323 lbs_deb_cmd("deep sleep: sleep\n");
324 BUG_ON(!priv->enter_deep_sleep);
325 ret = priv->enter_deep_sleep(priv);
327 netif_stop_queue(priv->dev);
328 netif_carrier_off(priv->dev);
331 netdev_err(priv->dev, "deep sleep: already enabled\n");
334 if (priv->is_deep_sleep) {
335 lbs_deb_cmd("deep sleep: wakeup\n");
336 BUG_ON(!priv->exit_deep_sleep);
337 ret = priv->exit_deep_sleep(priv);
339 ret = lbs_wait_for_ds_awake(priv);
341 netdev_err(priv->dev,
342 "deep sleep: wakeup failed\n");
350 static int lbs_ret_host_sleep_activate(struct lbs_private *priv,
352 struct cmd_header *cmd)
354 priv->is_host_sleep_activated = 1;
355 wake_up_interruptible(&priv->host_sleep_q);
360 int lbs_set_host_sleep(struct lbs_private *priv, int host_sleep)
362 struct cmd_header cmd;
364 uint32_t criteria = EHS_REMOVE_WAKEUP;
367 if (priv->is_host_sleep_activated != 1) {
368 memset(&cmd, 0, sizeof(cmd));
369 ret = lbs_host_sleep_cfg(priv, priv->wol_criteria,
370 (struct wol_config *)NULL);
372 netdev_info(priv->dev,
373 "Host sleep configuration failed: %d\n",
377 if (priv->psstate == PS_STATE_FULL_POWER) {
378 ret = __lbs_cmd(priv,
379 CMD_802_11_HOST_SLEEP_ACTIVATE,
382 lbs_ret_host_sleep_activate, 0);
384 netdev_info(priv->dev,
385 "HOST_SLEEP_ACTIVATE failed: %d\n",
389 if (!wait_event_interruptible_timeout(
391 priv->is_host_sleep_activated,
393 netdev_err(priv->dev,
394 "host_sleep_q: timer expired\n");
398 netdev_err(priv->dev, "host sleep: already enabled\n");
401 if (priv->is_host_sleep_activated)
402 ret = lbs_host_sleep_cfg(priv, criteria,
403 (struct wol_config *)NULL);
410 * lbs_set_snmp_mib - Set an SNMP MIB value
412 * @priv: A pointer to &struct lbs_private structure
413 * @oid: The OID to set in the firmware
414 * @val: Value to set the OID to
416 * returns: 0 on success, error on failure
418 int lbs_set_snmp_mib(struct lbs_private *priv, u32 oid, u16 val)
420 struct cmd_ds_802_11_snmp_mib cmd;
423 memset(&cmd, 0, sizeof (cmd));
424 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
425 cmd.action = cpu_to_le16(CMD_ACT_SET);
426 cmd.oid = cpu_to_le16((u16) oid);
429 case SNMP_MIB_OID_BSS_TYPE:
430 cmd.bufsize = cpu_to_le16(sizeof(u8));
433 case SNMP_MIB_OID_11D_ENABLE:
434 case SNMP_MIB_OID_FRAG_THRESHOLD:
435 case SNMP_MIB_OID_RTS_THRESHOLD:
436 case SNMP_MIB_OID_SHORT_RETRY_LIMIT:
437 case SNMP_MIB_OID_LONG_RETRY_LIMIT:
438 cmd.bufsize = cpu_to_le16(sizeof(u16));
439 *((__le16 *)(&cmd.value)) = cpu_to_le16(val);
442 lbs_deb_cmd("SNMP_CMD: (set) unhandled OID 0x%x\n", oid);
447 lbs_deb_cmd("SNMP_CMD: (set) oid 0x%x, oid size 0x%x, value 0x%x\n",
448 le16_to_cpu(cmd.oid), le16_to_cpu(cmd.bufsize), val);
450 ret = lbs_cmd_with_response(priv, CMD_802_11_SNMP_MIB, &cmd);
457 * lbs_get_snmp_mib - Get an SNMP MIB value
459 * @priv: A pointer to &struct lbs_private structure
460 * @oid: The OID to retrieve from the firmware
461 * @out_val: Location for the returned value
463 * returns: 0 on success, error on failure
465 int lbs_get_snmp_mib(struct lbs_private *priv, u32 oid, u16 *out_val)
467 struct cmd_ds_802_11_snmp_mib cmd;
470 memset(&cmd, 0, sizeof (cmd));
471 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
472 cmd.action = cpu_to_le16(CMD_ACT_GET);
473 cmd.oid = cpu_to_le16(oid);
475 ret = lbs_cmd_with_response(priv, CMD_802_11_SNMP_MIB, &cmd);
479 switch (le16_to_cpu(cmd.bufsize)) {
481 *out_val = cmd.value[0];
484 *out_val = le16_to_cpu(*((__le16 *)(&cmd.value)));
487 lbs_deb_cmd("SNMP_CMD: (get) unhandled OID 0x%x size %d\n",
488 oid, le16_to_cpu(cmd.bufsize));
497 * lbs_get_tx_power - Get the min, max, and current TX power
499 * @priv: A pointer to &struct lbs_private structure
500 * @curlevel: Current power level in dBm
501 * @minlevel: Minimum supported power level in dBm (optional)
502 * @maxlevel: Maximum supported power level in dBm (optional)
504 * returns: 0 on success, error on failure
506 int lbs_get_tx_power(struct lbs_private *priv, s16 *curlevel, s16 *minlevel,
509 struct cmd_ds_802_11_rf_tx_power cmd;
512 memset(&cmd, 0, sizeof(cmd));
513 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
514 cmd.action = cpu_to_le16(CMD_ACT_GET);
516 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
518 *curlevel = le16_to_cpu(cmd.curlevel);
520 *minlevel = cmd.minlevel;
522 *maxlevel = cmd.maxlevel;
529 * lbs_set_tx_power - Set the TX power
531 * @priv: A pointer to &struct lbs_private structure
532 * @dbm: The desired power level in dBm
534 * returns: 0 on success, error on failure
536 int lbs_set_tx_power(struct lbs_private *priv, s16 dbm)
538 struct cmd_ds_802_11_rf_tx_power cmd;
541 memset(&cmd, 0, sizeof(cmd));
542 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
543 cmd.action = cpu_to_le16(CMD_ACT_SET);
544 cmd.curlevel = cpu_to_le16(dbm);
546 lbs_deb_cmd("SET_RF_TX_POWER: %d dBm\n", dbm);
548 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
554 * lbs_set_monitor_mode - Enable or disable monitor mode
555 * (only implemented on OLPC usb8388 FW)
557 * @priv: A pointer to &struct lbs_private structure
558 * @enable: 1 to enable monitor mode, 0 to disable
560 * returns: 0 on success, error on failure
562 int lbs_set_monitor_mode(struct lbs_private *priv, int enable)
564 struct cmd_ds_802_11_monitor_mode cmd;
567 memset(&cmd, 0, sizeof(cmd));
568 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
569 cmd.action = cpu_to_le16(CMD_ACT_SET);
571 cmd.mode = cpu_to_le16(0x1);
573 lbs_deb_cmd("SET_MONITOR_MODE: %d\n", enable);
575 ret = lbs_cmd_with_response(priv, CMD_802_11_MONITOR_MODE, &cmd);
577 priv->dev->type = enable ? ARPHRD_IEEE80211_RADIOTAP :
585 * lbs_get_channel - Get the radio channel
587 * @priv: A pointer to &struct lbs_private structure
589 * returns: The channel on success, error on failure
591 static int lbs_get_channel(struct lbs_private *priv)
593 struct cmd_ds_802_11_rf_channel cmd;
596 memset(&cmd, 0, sizeof(cmd));
597 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
598 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_GET);
600 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
604 ret = le16_to_cpu(cmd.channel);
605 lbs_deb_cmd("current radio channel is %d\n", ret);
611 int lbs_update_channel(struct lbs_private *priv)
615 /* the channel in f/w could be out of sync; get the current channel */
616 ret = lbs_get_channel(priv);
626 * lbs_set_channel - Set the radio channel
628 * @priv: A pointer to &struct lbs_private structure
629 * @channel: The desired channel, or 0 to clear a locked channel
631 * returns: 0 on success, error on failure
633 int lbs_set_channel(struct lbs_private *priv, u8 channel)
635 struct cmd_ds_802_11_rf_channel cmd;
637 u8 old_channel = priv->channel;
641 memset(&cmd, 0, sizeof(cmd));
642 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
643 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_SET);
644 cmd.channel = cpu_to_le16(channel);
646 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
650 priv->channel = (uint8_t) le16_to_cpu(cmd.channel);
651 lbs_deb_cmd("channel switch from %d to %d\n", old_channel,
659 * lbs_get_rssi - Get current RSSI and noise floor
661 * @priv: A pointer to &struct lbs_private structure
662 * @rssi: On successful return, signal level in mBm
663 * @nf: On successful return, Noise floor
665 * returns: The channel on success, error on failure
667 int lbs_get_rssi(struct lbs_private *priv, s8 *rssi, s8 *nf)
669 struct cmd_ds_802_11_rssi cmd;
672 BUG_ON(rssi == NULL);
675 memset(&cmd, 0, sizeof(cmd));
676 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
677 /* Average SNR over last 8 beacons */
678 cmd.n_or_snr = cpu_to_le16(8);
680 ret = lbs_cmd_with_response(priv, CMD_802_11_RSSI, &cmd);
682 *nf = CAL_NF(le16_to_cpu(cmd.nf));
683 *rssi = CAL_RSSI(le16_to_cpu(cmd.n_or_snr), le16_to_cpu(cmd.nf));
690 * lbs_set_11d_domain_info - Send regulatory and 802.11d domain information
693 * @priv: pointer to &struct lbs_private
695 * returns: 0 on success, error code on failure
697 int lbs_set_11d_domain_info(struct lbs_private *priv)
699 struct wiphy *wiphy = priv->wdev->wiphy;
700 struct ieee80211_supported_band **bands = wiphy->bands;
701 struct cmd_ds_802_11d_domain_info cmd;
702 struct mrvl_ie_domain_param_set *domain = &cmd.domain;
703 struct ieee80211_country_ie_triplet *t;
704 enum nl80211_band band;
705 struct ieee80211_channel *ch;
707 u8 num_parsed_chan = 0;
708 u8 first_channel = 0, next_chan = 0, max_pwr = 0;
713 if (!priv->country_code[0])
716 memset(&cmd, 0, sizeof(cmd));
717 cmd.action = cpu_to_le16(CMD_ACT_SET);
719 lbs_deb_11d("Setting country code '%c%c'\n",
720 priv->country_code[0], priv->country_code[1]);
722 domain->header.type = cpu_to_le16(TLV_TYPE_DOMAIN);
724 /* Set country code */
725 domain->country_code[0] = priv->country_code[0];
726 domain->country_code[1] = priv->country_code[1];
727 domain->country_code[2] = ' ';
729 /* Now set up the channel triplets; firmware is somewhat picky here
730 * and doesn't validate channel numbers and spans; hence it would
731 * interpret a triplet of (36, 4, 20) as channels 36, 37, 38, 39. Since
732 * the last 3 aren't valid channels, the driver is responsible for
733 * splitting that up into 4 triplet pairs of (36, 1, 20) + (40, 1, 20)
737 (band < NUM_NL80211_BANDS) && (num_triplet < MAX_11D_TRIPLETS);
744 (i < bands[band]->n_channels) && (num_triplet < MAX_11D_TRIPLETS);
746 ch = &bands[band]->channels[i];
747 if (ch->flags & IEEE80211_CHAN_DISABLED)
752 next_chan = first_channel = (u32) ch->hw_value;
753 max_pwr = ch->max_power;
758 if ((ch->hw_value == next_chan + 1) &&
759 (ch->max_power == max_pwr)) {
760 /* Consolidate adjacent channels */
764 /* Add this triplet */
765 lbs_deb_11d("11D triplet (%d, %d, %d)\n",
766 first_channel, num_parsed_chan,
768 t = &domain->triplet[num_triplet];
769 t->chans.first_channel = first_channel;
770 t->chans.num_channels = num_parsed_chan;
771 t->chans.max_power = max_pwr;
778 /* Add last triplet */
779 lbs_deb_11d("11D triplet (%d, %d, %d)\n", first_channel,
780 num_parsed_chan, max_pwr);
781 t = &domain->triplet[num_triplet];
782 t->chans.first_channel = first_channel;
783 t->chans.num_channels = num_parsed_chan;
784 t->chans.max_power = max_pwr;
789 lbs_deb_11d("# triplets %d\n", num_triplet);
791 /* Set command header sizes */
792 triplet_size = num_triplet * sizeof(struct ieee80211_country_ie_triplet);
793 domain->header.len = cpu_to_le16(sizeof(domain->country_code) +
796 lbs_deb_hex(LBS_DEB_11D, "802.11D domain param set",
797 (u8 *) &cmd.domain.country_code,
798 le16_to_cpu(domain->header.len));
800 cmd.hdr.size = cpu_to_le16(sizeof(cmd.hdr) +
802 sizeof(cmd.domain.header) +
803 sizeof(cmd.domain.country_code) +
806 ret = lbs_cmd_with_response(priv, CMD_802_11D_DOMAIN_INFO, &cmd);
813 * lbs_get_reg - Read a MAC, Baseband, or RF register
815 * @priv: pointer to &struct lbs_private
816 * @reg: register command, one of CMD_MAC_REG_ACCESS,
817 * CMD_BBP_REG_ACCESS, or CMD_RF_REG_ACCESS
818 * @offset: byte offset of the register to get
819 * @value: on success, the value of the register at 'offset'
821 * returns: 0 on success, error code on failure
823 int lbs_get_reg(struct lbs_private *priv, u16 reg, u16 offset, u32 *value)
825 struct cmd_ds_reg_access cmd;
828 BUG_ON(value == NULL);
830 memset(&cmd, 0, sizeof(cmd));
831 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
832 cmd.action = cpu_to_le16(CMD_ACT_GET);
833 cmd.offset = cpu_to_le16(offset);
835 if (reg != CMD_MAC_REG_ACCESS &&
836 reg != CMD_BBP_REG_ACCESS &&
837 reg != CMD_RF_REG_ACCESS) {
842 ret = lbs_cmd_with_response(priv, reg, &cmd);
844 if (reg == CMD_BBP_REG_ACCESS || reg == CMD_RF_REG_ACCESS)
845 *value = cmd.value.bbp_rf;
846 else if (reg == CMD_MAC_REG_ACCESS)
847 *value = le32_to_cpu(cmd.value.mac);
855 * lbs_set_reg - Write a MAC, Baseband, or RF register
857 * @priv: pointer to &struct lbs_private
858 * @reg: register command, one of CMD_MAC_REG_ACCESS,
859 * CMD_BBP_REG_ACCESS, or CMD_RF_REG_ACCESS
860 * @offset: byte offset of the register to set
861 * @value: the value to write to the register at 'offset'
863 * returns: 0 on success, error code on failure
865 int lbs_set_reg(struct lbs_private *priv, u16 reg, u16 offset, u32 value)
867 struct cmd_ds_reg_access cmd;
870 memset(&cmd, 0, sizeof(cmd));
871 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
872 cmd.action = cpu_to_le16(CMD_ACT_SET);
873 cmd.offset = cpu_to_le16(offset);
875 if (reg == CMD_BBP_REG_ACCESS || reg == CMD_RF_REG_ACCESS)
876 cmd.value.bbp_rf = (u8) (value & 0xFF);
877 else if (reg == CMD_MAC_REG_ACCESS)
878 cmd.value.mac = cpu_to_le32(value);
884 ret = lbs_cmd_with_response(priv, reg, &cmd);
890 static void lbs_queue_cmd(struct lbs_private *priv,
891 struct cmd_ctrl_node *cmdnode)
897 lbs_deb_host("QUEUE_CMD: cmdnode is NULL\n");
900 if (!cmdnode->cmdbuf->size) {
901 lbs_deb_host("DNLD_CMD: cmd size is zero\n");
906 /* Exit_PS command needs to be queued in the header always. */
907 if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_PS_MODE) {
908 struct cmd_ds_802_11_ps_mode *psm = (void *)cmdnode->cmdbuf;
910 if (psm->action == cpu_to_le16(PS_MODE_ACTION_EXIT_PS)) {
911 if (priv->psstate != PS_STATE_FULL_POWER)
916 if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_WAKEUP_CONFIRM)
919 spin_lock_irqsave(&priv->driver_lock, flags);
922 list_add_tail(&cmdnode->list, &priv->cmdpendingq);
924 list_add(&cmdnode->list, &priv->cmdpendingq);
926 spin_unlock_irqrestore(&priv->driver_lock, flags);
928 lbs_deb_host("QUEUE_CMD: inserted command 0x%04x into cmdpendingq\n",
929 le16_to_cpu(cmdnode->cmdbuf->command));
932 static void lbs_submit_command(struct lbs_private *priv,
933 struct cmd_ctrl_node *cmdnode)
936 struct cmd_header *cmd;
942 cmd = cmdnode->cmdbuf;
944 spin_lock_irqsave(&priv->driver_lock, flags);
946 cmd->seqnum = cpu_to_le16(priv->seqnum);
947 priv->cur_cmd = cmdnode;
948 spin_unlock_irqrestore(&priv->driver_lock, flags);
950 cmdsize = le16_to_cpu(cmd->size);
951 command = le16_to_cpu(cmd->command);
953 /* These commands take longer */
954 if (command == CMD_802_11_SCAN || command == CMD_802_11_ASSOCIATE)
957 lbs_deb_cmd("DNLD_CMD: command 0x%04x, seq %d, size %d\n",
958 command, le16_to_cpu(cmd->seqnum), cmdsize);
959 lbs_deb_hex(LBS_DEB_CMD, "DNLD_CMD", (void *) cmdnode->cmdbuf, cmdsize);
961 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) cmd, cmdsize);
964 netdev_info(priv->dev, "DNLD_CMD: hw_host_to_card failed: %d\n",
966 /* Reset dnld state machine, report failure */
967 priv->dnld_sent = DNLD_RES_RECEIVED;
968 lbs_complete_command(priv, cmdnode, ret);
971 if (command == CMD_802_11_DEEP_SLEEP) {
972 if (priv->is_auto_deep_sleep_enabled) {
973 priv->wakeup_dev_required = 1;
976 priv->is_deep_sleep = 1;
977 lbs_complete_command(priv, cmdnode, 0);
979 /* Setup the timer after transmit command */
980 mod_timer(&priv->command_timer, jiffies + timeo);
985 * This function inserts command node to cmdfreeq
986 * after cleans it. Requires priv->driver_lock held.
988 static void __lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
989 struct cmd_ctrl_node *cmdnode)
994 cmdnode->callback = NULL;
995 cmdnode->callback_arg = 0;
997 memset(cmdnode->cmdbuf, 0, LBS_CMD_BUFFER_SIZE);
999 list_add_tail(&cmdnode->list, &priv->cmdfreeq);
1002 static void lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1003 struct cmd_ctrl_node *ptempcmd)
1005 unsigned long flags;
1007 spin_lock_irqsave(&priv->driver_lock, flags);
1008 __lbs_cleanup_and_insert_cmd(priv, ptempcmd);
1009 spin_unlock_irqrestore(&priv->driver_lock, flags);
1012 void __lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
1016 * Normally, commands are removed from cmdpendingq before being
1017 * submitted. However, we can arrive here on alternative codepaths
1018 * where the command is still pending. Make sure the command really
1019 * isn't part of a list at this point.
1021 list_del_init(&cmd->list);
1023 cmd->result = result;
1024 cmd->cmdwaitqwoken = 1;
1025 wake_up(&cmd->cmdwait_q);
1027 if (!cmd->callback || cmd->callback == lbs_cmd_async_callback)
1028 __lbs_cleanup_and_insert_cmd(priv, cmd);
1029 priv->cur_cmd = NULL;
1030 wake_up(&priv->waitq);
1033 void lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
1036 unsigned long flags;
1037 spin_lock_irqsave(&priv->driver_lock, flags);
1038 __lbs_complete_command(priv, cmd, result);
1039 spin_unlock_irqrestore(&priv->driver_lock, flags);
1042 int lbs_set_radio(struct lbs_private *priv, u8 preamble, u8 radio_on)
1044 struct cmd_ds_802_11_radio_control cmd;
1047 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1048 cmd.action = cpu_to_le16(CMD_ACT_SET);
1051 /* Only v8 and below support setting the preamble */
1052 if (priv->fwrelease < 0x09000000) {
1054 case RADIO_PREAMBLE_SHORT:
1055 case RADIO_PREAMBLE_AUTO:
1056 case RADIO_PREAMBLE_LONG:
1057 cmd.control = cpu_to_le16(preamble);
1065 cmd.control |= cpu_to_le16(0x1);
1067 cmd.control &= cpu_to_le16(~0x1);
1068 priv->txpower_cur = 0;
1071 lbs_deb_cmd("RADIO_CONTROL: radio %s, preamble %d\n",
1072 radio_on ? "ON" : "OFF", preamble);
1074 priv->radio_on = radio_on;
1076 ret = lbs_cmd_with_response(priv, CMD_802_11_RADIO_CONTROL, &cmd);
1082 void lbs_set_mac_control(struct lbs_private *priv)
1084 struct cmd_ds_mac_control cmd;
1086 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1087 cmd.action = cpu_to_le16(priv->mac_control);
1090 lbs_cmd_async(priv, CMD_MAC_CONTROL, &cmd.hdr, sizeof(cmd));
1093 int lbs_set_mac_control_sync(struct lbs_private *priv)
1095 struct cmd_ds_mac_control cmd;
1098 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1099 cmd.action = cpu_to_le16(priv->mac_control);
1101 ret = lbs_cmd_with_response(priv, CMD_MAC_CONTROL, &cmd);
1107 * lbs_allocate_cmd_buffer - allocates the command buffer and links
1108 * it to command free queue
1110 * @priv: A pointer to &struct lbs_private structure
1112 * returns: 0 for success or -1 on error
1114 int lbs_allocate_cmd_buffer(struct lbs_private *priv)
1119 struct cmd_ctrl_node *cmdarray;
1121 /* Allocate and initialize the command array */
1122 bufsize = sizeof(struct cmd_ctrl_node) * LBS_NUM_CMD_BUFFERS;
1123 if (!(cmdarray = kzalloc(bufsize, GFP_KERNEL))) {
1124 lbs_deb_host("ALLOC_CMD_BUF: tempcmd_array is NULL\n");
1128 priv->cmd_array = cmdarray;
1130 /* Allocate and initialize each command buffer in the command array */
1131 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1132 cmdarray[i].cmdbuf = kzalloc(LBS_CMD_BUFFER_SIZE, GFP_KERNEL);
1133 if (!cmdarray[i].cmdbuf) {
1134 lbs_deb_host("ALLOC_CMD_BUF: ptempvirtualaddr is NULL\n");
1140 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1141 init_waitqueue_head(&cmdarray[i].cmdwait_q);
1142 lbs_cleanup_and_insert_cmd(priv, &cmdarray[i]);
1151 * lbs_free_cmd_buffer - free the command buffer
1153 * @priv: A pointer to &struct lbs_private structure
1155 * returns: 0 for success
1157 int lbs_free_cmd_buffer(struct lbs_private *priv)
1159 struct cmd_ctrl_node *cmdarray;
1162 /* need to check if cmd array is allocated or not */
1163 if (priv->cmd_array == NULL) {
1164 lbs_deb_host("FREE_CMD_BUF: cmd_array is NULL\n");
1168 cmdarray = priv->cmd_array;
1170 /* Release shared memory buffers */
1171 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1172 if (cmdarray[i].cmdbuf) {
1173 kfree(cmdarray[i].cmdbuf);
1174 cmdarray[i].cmdbuf = NULL;
1178 /* Release cmd_ctrl_node */
1179 if (priv->cmd_array) {
1180 kfree(priv->cmd_array);
1181 priv->cmd_array = NULL;
1189 * lbs_get_free_cmd_node - gets a free command node if available in
1190 * command free queue
1192 * @priv: A pointer to &struct lbs_private structure
1194 * returns: A pointer to &cmd_ctrl_node structure on success
1197 static struct cmd_ctrl_node *lbs_get_free_cmd_node(struct lbs_private *priv)
1199 struct cmd_ctrl_node *tempnode;
1200 unsigned long flags;
1205 spin_lock_irqsave(&priv->driver_lock, flags);
1207 if (!list_empty(&priv->cmdfreeq)) {
1208 tempnode = list_first_entry(&priv->cmdfreeq,
1209 struct cmd_ctrl_node, list);
1210 list_del_init(&tempnode->list);
1212 lbs_deb_host("GET_CMD_NODE: cmd_ctrl_node is not available\n");
1216 spin_unlock_irqrestore(&priv->driver_lock, flags);
1222 * lbs_execute_next_command - execute next command in command
1223 * pending queue. Will put firmware back to PS mode if applicable.
1225 * @priv: A pointer to &struct lbs_private structure
1227 * returns: 0 on success or -1 on error
1229 int lbs_execute_next_command(struct lbs_private *priv)
1231 struct cmd_ctrl_node *cmdnode = NULL;
1232 struct cmd_header *cmd;
1233 unsigned long flags;
1236 /* Debug group is LBS_DEB_THREAD and not LBS_DEB_HOST, because the
1237 * only caller to us is lbs_thread() and we get even when a
1238 * data packet is received */
1239 spin_lock_irqsave(&priv->driver_lock, flags);
1241 if (priv->cur_cmd) {
1242 netdev_alert(priv->dev,
1243 "EXEC_NEXT_CMD: already processing command!\n");
1244 spin_unlock_irqrestore(&priv->driver_lock, flags);
1249 if (!list_empty(&priv->cmdpendingq)) {
1250 cmdnode = list_first_entry(&priv->cmdpendingq,
1251 struct cmd_ctrl_node, list);
1254 spin_unlock_irqrestore(&priv->driver_lock, flags);
1257 cmd = cmdnode->cmdbuf;
1259 if (is_command_allowed_in_ps(le16_to_cpu(cmd->command))) {
1260 if ((priv->psstate == PS_STATE_SLEEP) ||
1261 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1263 "EXEC_NEXT_CMD: cannot send cmd 0x%04x in psstate %d\n",
1264 le16_to_cpu(cmd->command),
1269 lbs_deb_host("EXEC_NEXT_CMD: OK to send command "
1270 "0x%04x in psstate %d\n",
1271 le16_to_cpu(cmd->command), priv->psstate);
1272 } else if (priv->psstate != PS_STATE_FULL_POWER) {
1274 * 1. Non-PS command:
1275 * Queue it. set needtowakeup to TRUE if current state
1276 * is SLEEP, otherwise call send EXIT_PS.
1277 * 2. PS command but not EXIT_PS:
1279 * 3. PS command EXIT_PS:
1280 * Set needtowakeup to TRUE if current state is SLEEP,
1281 * otherwise send this command down to firmware
1284 if (cmd->command != cpu_to_le16(CMD_802_11_PS_MODE)) {
1285 /* Prepare to send Exit PS,
1286 * this non PS command will be sent later */
1287 if ((priv->psstate == PS_STATE_SLEEP)
1288 || (priv->psstate == PS_STATE_PRE_SLEEP)
1290 /* w/ new scheme, it will not reach here.
1291 since it is blocked in main_thread. */
1292 priv->needtowakeup = 1;
1294 lbs_set_ps_mode(priv,
1295 PS_MODE_ACTION_EXIT_PS,
1303 * PS command. Ignore it if it is not Exit_PS.
1304 * otherwise send it down immediately.
1306 struct cmd_ds_802_11_ps_mode *psm = (void *)cmd;
1309 "EXEC_NEXT_CMD: PS cmd, action 0x%02x\n",
1312 cpu_to_le16(PS_MODE_ACTION_EXIT_PS)) {
1314 "EXEC_NEXT_CMD: ignore ENTER_PS cmd\n");
1315 lbs_complete_command(priv, cmdnode, 0);
1321 if ((priv->psstate == PS_STATE_SLEEP) ||
1322 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1324 "EXEC_NEXT_CMD: ignore EXIT_PS cmd in sleep\n");
1325 lbs_complete_command(priv, cmdnode, 0);
1326 priv->needtowakeup = 1;
1333 "EXEC_NEXT_CMD: sending EXIT_PS\n");
1336 spin_lock_irqsave(&priv->driver_lock, flags);
1337 list_del_init(&cmdnode->list);
1338 spin_unlock_irqrestore(&priv->driver_lock, flags);
1339 lbs_deb_host("EXEC_NEXT_CMD: sending command 0x%04x\n",
1340 le16_to_cpu(cmd->command));
1341 lbs_submit_command(priv, cmdnode);
1344 * check if in power save mode, if yes, put the device back
1347 if ((priv->psmode != LBS802_11POWERMODECAM) &&
1348 (priv->psstate == PS_STATE_FULL_POWER) &&
1349 (priv->connect_status == LBS_CONNECTED)) {
1351 "EXEC_NEXT_CMD: cmdpendingq empty, go back to PS_SLEEP");
1352 lbs_set_ps_mode(priv, PS_MODE_ACTION_ENTER_PS,
1362 static void lbs_send_confirmsleep(struct lbs_private *priv)
1364 unsigned long flags;
1367 lbs_deb_hex(LBS_DEB_HOST, "sleep confirm", (u8 *) &confirm_sleep,
1368 sizeof(confirm_sleep));
1370 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) &confirm_sleep,
1371 sizeof(confirm_sleep));
1373 netdev_alert(priv->dev, "confirm_sleep failed\n");
1377 spin_lock_irqsave(&priv->driver_lock, flags);
1379 /* We don't get a response on the sleep-confirmation */
1380 priv->dnld_sent = DNLD_RES_RECEIVED;
1382 if (priv->is_host_sleep_configured) {
1383 priv->is_host_sleep_activated = 1;
1384 wake_up_interruptible(&priv->host_sleep_q);
1387 /* If nothing to do, go back to sleep (?) */
1388 if (!kfifo_len(&priv->event_fifo) && !priv->resp_len[priv->resp_idx])
1389 priv->psstate = PS_STATE_SLEEP;
1391 spin_unlock_irqrestore(&priv->driver_lock, flags);
1395 * lbs_ps_confirm_sleep - checks condition and prepares to
1396 * send sleep confirm command to firmware if ok
1398 * @priv: A pointer to &struct lbs_private structure
1402 void lbs_ps_confirm_sleep(struct lbs_private *priv)
1404 unsigned long flags =0;
1407 spin_lock_irqsave(&priv->driver_lock, flags);
1408 if (priv->dnld_sent) {
1410 lbs_deb_host("dnld_sent was set\n");
1413 /* In-progress command? */
1414 if (priv->cur_cmd) {
1416 lbs_deb_host("cur_cmd was set\n");
1419 /* Pending events or command responses? */
1420 if (kfifo_len(&priv->event_fifo) || priv->resp_len[priv->resp_idx]) {
1422 lbs_deb_host("pending events or command responses\n");
1424 spin_unlock_irqrestore(&priv->driver_lock, flags);
1427 lbs_deb_host("sending lbs_ps_confirm_sleep\n");
1428 lbs_send_confirmsleep(priv);
1430 lbs_deb_host("sleep confirm has been delayed\n");
1436 * lbs_set_tpc_cfg - Configures the transmission power control functionality
1438 * @priv: A pointer to &struct lbs_private structure
1439 * @enable: Transmission power control enable
1440 * @p0: Power level when link quality is good (dBm).
1441 * @p1: Power level when link quality is fair (dBm).
1442 * @p2: Power level when link quality is poor (dBm).
1443 * @usesnr: Use Signal to Noise Ratio in TPC
1445 * returns: 0 on success
1447 int lbs_set_tpc_cfg(struct lbs_private *priv, int enable, int8_t p0, int8_t p1,
1448 int8_t p2, int usesnr)
1450 struct cmd_ds_802_11_tpc_cfg cmd;
1453 memset(&cmd, 0, sizeof(cmd));
1454 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1455 cmd.action = cpu_to_le16(CMD_ACT_SET);
1456 cmd.enable = !!enable;
1457 cmd.usesnr = !!usesnr;
1462 ret = lbs_cmd_with_response(priv, CMD_802_11_TPC_CFG, &cmd);
1468 * lbs_set_power_adapt_cfg - Configures the power adaptation settings
1470 * @priv: A pointer to &struct lbs_private structure
1471 * @enable: Power adaptation enable
1472 * @p0: Power level for 1, 2, 5.5 and 11 Mbps (dBm).
1473 * @p1: Power level for 6, 9, 12, 18, 22, 24 and 36 Mbps (dBm).
1474 * @p2: Power level for 48 and 54 Mbps (dBm).
1476 * returns: 0 on Success
1479 int lbs_set_power_adapt_cfg(struct lbs_private *priv, int enable, int8_t p0,
1480 int8_t p1, int8_t p2)
1482 struct cmd_ds_802_11_pa_cfg cmd;
1485 memset(&cmd, 0, sizeof(cmd));
1486 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1487 cmd.action = cpu_to_le16(CMD_ACT_SET);
1488 cmd.enable = !!enable;
1493 ret = lbs_cmd_with_response(priv, CMD_802_11_PA_CFG , &cmd);
1499 struct cmd_ctrl_node *__lbs_cmd_async(struct lbs_private *priv,
1500 uint16_t command, struct cmd_header *in_cmd, int in_cmd_size,
1501 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
1502 unsigned long callback_arg)
1504 struct cmd_ctrl_node *cmdnode;
1506 if (priv->surpriseremoved) {
1507 lbs_deb_host("PREP_CMD: card removed\n");
1508 cmdnode = ERR_PTR(-ENOENT);
1512 /* No commands are allowed in Deep Sleep until we toggle the GPIO
1513 * to wake up the card and it has signaled that it's ready.
1515 if (!priv->is_auto_deep_sleep_enabled) {
1516 if (priv->is_deep_sleep) {
1517 lbs_deb_cmd("command not allowed in deep sleep\n");
1518 cmdnode = ERR_PTR(-EBUSY);
1523 cmdnode = lbs_get_free_cmd_node(priv);
1524 if (cmdnode == NULL) {
1525 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1527 /* Wake up main thread to execute next command */
1528 wake_up(&priv->waitq);
1529 cmdnode = ERR_PTR(-ENOBUFS);
1533 cmdnode->callback = callback;
1534 cmdnode->callback_arg = callback_arg;
1536 /* Copy the incoming command to the buffer */
1537 memcpy(cmdnode->cmdbuf, in_cmd, in_cmd_size);
1539 /* Set command, clean result, move to buffer */
1540 cmdnode->cmdbuf->command = cpu_to_le16(command);
1541 cmdnode->cmdbuf->size = cpu_to_le16(in_cmd_size);
1542 cmdnode->cmdbuf->result = 0;
1544 lbs_deb_host("PREP_CMD: command 0x%04x\n", command);
1546 cmdnode->cmdwaitqwoken = 0;
1547 lbs_queue_cmd(priv, cmdnode);
1548 wake_up(&priv->waitq);
1554 void lbs_cmd_async(struct lbs_private *priv, uint16_t command,
1555 struct cmd_header *in_cmd, int in_cmd_size)
1557 __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
1558 lbs_cmd_async_callback, 0);
1561 int __lbs_cmd(struct lbs_private *priv, uint16_t command,
1562 struct cmd_header *in_cmd, int in_cmd_size,
1563 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
1564 unsigned long callback_arg)
1566 struct cmd_ctrl_node *cmdnode;
1567 unsigned long flags;
1570 cmdnode = __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
1571 callback, callback_arg);
1572 if (IS_ERR(cmdnode)) {
1573 ret = PTR_ERR(cmdnode);
1580 * Be careful with signals here. A signal may be received as the system
1581 * goes into suspend or resume. We do not want this to interrupt the
1582 * command, so we perform an uninterruptible sleep.
1584 wait_event(cmdnode->cmdwait_q, cmdnode->cmdwaitqwoken);
1586 spin_lock_irqsave(&priv->driver_lock, flags);
1587 ret = cmdnode->result;
1589 netdev_info(priv->dev, "PREP_CMD: command 0x%04x failed: %d\n",
1592 __lbs_cleanup_and_insert_cmd(priv, cmdnode);
1593 spin_unlock_irqrestore(&priv->driver_lock, flags);
1598 EXPORT_SYMBOL_GPL(__lbs_cmd);