Linux-libre 5.3.12-gnu
[librecmc/linux-libre.git] / drivers / staging / rtl8188eu / os_dep / usb_ops_linux.c
1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _USB_OPS_LINUX_C_
8
9 #include <drv_types.h>
10 #include <recv_osdep.h>
11 #include <rtw_sreset.h>
12
13 static void interrupt_handler_8188eu(struct adapter *adapt, u16 pkt_len, u8 *pbuf)
14 {
15         struct hal_data_8188e *haldata = adapt->HalData;
16
17         if (pkt_len != INTERRUPT_MSG_FORMAT_LEN) {
18                 DBG_88E("%s Invalid interrupt content length (%d)!\n", __func__, pkt_len);
19                 return;
20         }
21
22         /*  HISR */
23         memcpy(&haldata->IntArray[0], &pbuf[USB_INTR_CONTENT_HISR_OFFSET], 4);
24         memcpy(&haldata->IntArray[1], &pbuf[USB_INTR_CONTENT_HISRE_OFFSET], 4);
25
26         /*  C2H Event */
27         if (pbuf[0] != 0)
28                 memcpy(&haldata->C2hArray[0],
29                        &pbuf[USB_INTR_CONTENT_C2H_OFFSET], 16);
30 }
31
32 static int recvbuf2recvframe(struct adapter *adapt, struct sk_buff *pskb)
33 {
34         u8 *pbuf;
35         u8 shift_sz = 0;
36         u16 pkt_cnt;
37         u32 pkt_offset, skb_len, alloc_sz;
38         s32 transfer_len;
39         struct recv_stat *prxstat;
40         struct phy_stat *pphy_status = NULL;
41         struct sk_buff *pkt_copy = NULL;
42         struct recv_frame *precvframe = NULL;
43         struct rx_pkt_attrib *pattrib = NULL;
44         struct hal_data_8188e *haldata = adapt->HalData;
45         struct recv_priv *precvpriv = &adapt->recvpriv;
46         struct __queue *pfree_recv_queue = &precvpriv->free_recv_queue;
47
48         transfer_len = (s32)pskb->len;
49         pbuf = pskb->data;
50
51         prxstat = (struct recv_stat *)pbuf;
52         pkt_cnt = (le32_to_cpu(prxstat->rxdw2) >> 16) & 0xff;
53
54         do {
55                 RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
56                          ("%s: rxdesc=offsset 0:0x%08x, 4:0x%08x, 8:0x%08x, C:0x%08x\n",
57                           __func__, prxstat->rxdw0, prxstat->rxdw1,
58                           prxstat->rxdw2, prxstat->rxdw4));
59
60                 prxstat = (struct recv_stat *)pbuf;
61
62                 precvframe = rtw_alloc_recvframe(pfree_recv_queue);
63                 if (!precvframe) {
64                         RT_TRACE(_module_rtl871x_recv_c_, _drv_err_,
65                                  ("%s: precvframe==NULL\n", __func__));
66                         DBG_88E("%s()-%d: rtw_alloc_recvframe() failed! RX Drop!\n", __func__, __LINE__);
67                         goto _exit_recvbuf2recvframe;
68                 }
69
70                 INIT_LIST_HEAD(&precvframe->list);
71
72                 update_recvframe_attrib_88e(precvframe, prxstat);
73
74                 pattrib = &precvframe->attrib;
75
76                 if ((pattrib->crc_err) || (pattrib->icv_err)) {
77                         DBG_88E("%s: RX Warning! crc_err=%d icv_err=%d, skip!\n", __func__, pattrib->crc_err, pattrib->icv_err);
78
79                         rtw_free_recvframe(precvframe, pfree_recv_queue);
80                         goto _exit_recvbuf2recvframe;
81                 }
82
83                 if ((pattrib->physt) && (pattrib->pkt_rpt_type == NORMAL_RX))
84                         pphy_status = (struct phy_stat *)(pbuf + RXDESC_OFFSET);
85
86                 pkt_offset = RXDESC_SIZE + pattrib->drvinfo_sz + pattrib->shift_sz + pattrib->pkt_len;
87
88                 if ((pattrib->pkt_len <= 0) || (pkt_offset > transfer_len)) {
89                         RT_TRACE(_module_rtl871x_recv_c_, _drv_info_,
90                                  ("%s: pkt_len<=0\n", __func__));
91                         DBG_88E("%s()-%d: RX Warning!,pkt_len<=0 or pkt_offset> transfer_len\n", __func__, __LINE__);
92                         rtw_free_recvframe(precvframe, pfree_recv_queue);
93                         goto _exit_recvbuf2recvframe;
94                 }
95
96                 /*      Modified by Albert 20101213 */
97                 /*      For 8 bytes IP header alignment. */
98                 if (pattrib->qos)       /*      Qos data, wireless lan header length is 26 */
99                         shift_sz = 6;
100                 else
101                         shift_sz = 0;
102
103                 skb_len = pattrib->pkt_len;
104
105                 /*  for first fragment packet, driver need allocate 1536+drvinfo_sz+RXDESC_SIZE to defrag packet. */
106                 /*  modify alloc_sz for recvive crc error packet by thomas 2011-06-02 */
107                 if ((pattrib->mfrag == 1) && (pattrib->frag_num == 0)) {
108                         if (skb_len <= 1650)
109                                 alloc_sz = 1664;
110                         else
111                                 alloc_sz = skb_len + 14;
112                 } else {
113                         alloc_sz = skb_len;
114                         /*      6 is for IP header 8 bytes alignment in QoS packet case. */
115                         /*      8 is for skb->data 4 bytes alignment. */
116                         alloc_sz += 14;
117                 }
118
119                 pkt_copy = netdev_alloc_skb(adapt->pnetdev, alloc_sz);
120                 if (pkt_copy) {
121                         pkt_copy->dev = adapt->pnetdev;
122                         precvframe->pkt = pkt_copy;
123                         skb_reserve(pkt_copy, 8 - ((size_t)(pkt_copy->data) & 7));/* force pkt_copy->data at 8-byte alignment address */
124                         skb_reserve(pkt_copy, shift_sz);/* force ip_hdr at 8-byte alignment address according to shift_sz. */
125                         memcpy(pkt_copy->data, (pbuf + pattrib->drvinfo_sz + RXDESC_SIZE), skb_len);
126                         skb_put(precvframe->pkt, skb_len);
127                 } else {
128                         DBG_88E("%s: alloc_skb fail , drop frag frame\n",
129                                 __func__);
130                         rtw_free_recvframe(precvframe, pfree_recv_queue);
131                         goto _exit_recvbuf2recvframe;
132                 }
133
134                 switch (haldata->UsbRxAggMode) {
135                 case USB_RX_AGG_DMA:
136                 case USB_RX_AGG_MIX:
137                         pkt_offset = (u16)round_up(pkt_offset, 128);
138                         break;
139                 case USB_RX_AGG_USB:
140                         pkt_offset = (u16)round_up(pkt_offset, 4);
141                         break;
142                 case USB_RX_AGG_DISABLE:
143                 default:
144                         break;
145                 }
146                 if (pattrib->pkt_rpt_type == NORMAL_RX) { /* Normal rx packet */
147                         if (pattrib->physt)
148                                 update_recvframe_phyinfo_88e(precvframe, pphy_status);
149                         if (rtw_recv_entry(precvframe) != _SUCCESS) {
150                                 RT_TRACE(_module_rtl871x_recv_c_, _drv_err_,
151                                          ("%s: rtw_recv_entry(precvframe) != _SUCCESS\n",
152                                          __func__));
153                         }
154                 } else if (pattrib->pkt_rpt_type == TX_REPORT1) {
155                         /* CCX-TXRPT ack for xmit mgmt frames. */
156                         handle_txrpt_ccx_88e(adapt, precvframe->pkt->data);
157                         rtw_free_recvframe(precvframe, pfree_recv_queue);
158                 } else if (pattrib->pkt_rpt_type == TX_REPORT2) {
159                         ODM_RA_TxRPT2Handle_8188E(&haldata->odmpriv,
160                                                   precvframe->pkt->data,
161                                                   pattrib->pkt_len,
162                                                   pattrib->MacIDValidEntry[0],
163                                                   pattrib->MacIDValidEntry[1]);
164                         rtw_free_recvframe(precvframe, pfree_recv_queue);
165                 } else if (pattrib->pkt_rpt_type == HIS_REPORT) {
166                         interrupt_handler_8188eu(adapt, pattrib->pkt_len, precvframe->pkt->data);
167                         rtw_free_recvframe(precvframe, pfree_recv_queue);
168                 }
169                 pkt_cnt--;
170                 transfer_len -= pkt_offset;
171                 pbuf += pkt_offset;
172                 precvframe = NULL;
173                 pkt_copy = NULL;
174
175                 if (transfer_len > 0 && pkt_cnt == 0)
176                         pkt_cnt = (le32_to_cpu(prxstat->rxdw2) >> 16) & 0xff;
177
178         } while ((transfer_len > 0) && (pkt_cnt > 0));
179
180 _exit_recvbuf2recvframe:
181
182         return _SUCCESS;
183 }
184
185 unsigned int ffaddr2pipehdl(struct dvobj_priv *pdvobj, u32 addr)
186 {
187         unsigned int pipe = 0, ep_num = 0;
188         struct usb_device *pusbd = pdvobj->pusbdev;
189
190         if (addr == RECV_BULK_IN_ADDR) {
191                 pipe = usb_rcvbulkpipe(pusbd, pdvobj->RtInPipe[0]);
192         } else if (addr == RECV_INT_IN_ADDR) {
193                 pipe = usb_rcvbulkpipe(pusbd, pdvobj->RtInPipe[1]);
194         } else if (addr < HW_QUEUE_ENTRY) {
195                 ep_num = pdvobj->Queue2Pipe[addr];
196                 pipe = usb_sndbulkpipe(pusbd, ep_num);
197         }
198
199         return pipe;
200 }
201
202 static int usbctrl_vendorreq(struct adapter *adapt, u8 request, u16 value, u16 index, void *pdata, u16 len, u8 requesttype)
203 {
204         struct dvobj_priv *dvobjpriv = adapter_to_dvobj(adapt);
205         struct usb_device *udev = dvobjpriv->pusbdev;
206         unsigned int pipe;
207         int status = 0;
208         u8 reqtype;
209         u8 *pIo_buf;
210         int vendorreq_times = 0;
211
212         if ((adapt->bSurpriseRemoved) || (adapt->pwrctrlpriv.pnp_bstop_trx)) {
213                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
214                          ("%s:(adapt->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n",
215                           __func__));
216                 status = -EPERM;
217                 goto exit;
218         }
219
220         if (len > MAX_VENDOR_REQ_CMD_SIZE) {
221                 DBG_88E("[%s] Buffer len error ,vendor request failed\n", __func__);
222                 status = -EINVAL;
223                 goto exit;
224         }
225
226         if (mutex_lock_interruptible(&dvobjpriv->usb_vendor_req_mutex)) {
227                 status = -ERESTARTSYS;
228                 goto exit;
229         }
230
231         /*  Acquire IO memory for vendorreq */
232         pIo_buf = kmalloc(MAX_USB_IO_CTL_SIZE, GFP_ATOMIC);
233
234         if (!pIo_buf) {
235                 status = -ENOMEM;
236                 goto release_mutex;
237         }
238
239         while (++vendorreq_times <= MAX_USBCTRL_VENDORREQ_TIMES) {
240                 memset(pIo_buf, 0, len);
241
242                 if (requesttype == 0x01) {
243                         pipe = usb_rcvctrlpipe(udev, 0);/* read_in */
244                         reqtype =  REALTEK_USB_VENQT_READ;
245                 } else {
246                         pipe = usb_sndctrlpipe(udev, 0);/* write_out */
247                         reqtype =  REALTEK_USB_VENQT_WRITE;
248                         memcpy(pIo_buf, pdata, len);
249                 }
250
251                 status = usb_control_msg(udev, pipe, request, reqtype, value, index, pIo_buf, len, RTW_USB_CONTROL_MSG_TIMEOUT);
252
253                 if (status == len) {   /*  Success this control transfer. */
254                         if (requesttype == 0x01)
255                                 memcpy(pdata, pIo_buf,  len);
256                 } else { /*  error cases */
257                         DBG_88E("reg 0x%x, usb %s %u fail, status:%d value=0x%x, vendorreq_times:%d\n",
258                                 value, (requesttype == 0x01) ? "read" : "write",
259                                 len, status, *(u32 *)pdata, vendorreq_times);
260
261                         if (status < 0) {
262                                 if (status == (-ESHUTDOWN) || status == -ENODEV)
263                                         adapt->bSurpriseRemoved = true;
264                                 else
265                                         adapt->HalData->srestpriv.wifi_error_status = USB_VEN_REQ_CMD_FAIL;
266                         } else { /*  status != len && status >= 0 */
267                                 if (status > 0) {
268                                         if (requesttype == 0x01) {
269                                                 /*  For Control read transfer, we have to copy the read data from pIo_buf to pdata. */
270                                                 memcpy(pdata, pIo_buf,  len);
271                                         }
272                                 }
273                         }
274                 }
275
276                 /*  firmware download is checksummed, don't retry */
277                 if ((value >= FW_8188E_START_ADDRESS && value <= FW_8188E_END_ADDRESS) || status == len)
278                         break;
279         }
280         kfree(pIo_buf);
281
282 release_mutex:
283         mutex_unlock(&dvobjpriv->usb_vendor_req_mutex);
284 exit:
285         return status;
286 }
287
288 u8 usb_read8(struct adapter *adapter, u32 addr)
289 {
290         u8 request;
291         u8 requesttype;
292         u16 wvalue;
293         u16 index;
294         u16 len;
295         u8 data = 0;
296
297         request = 0x05;
298         requesttype = 0x01;/* read_in */
299         index = 0;/* n/a */
300
301         wvalue = (u16)(addr & 0x0000ffff);
302         len = 1;
303
304         usbctrl_vendorreq(adapter, request, wvalue, index, &data, len, requesttype);
305
306         return data;
307 }
308
309 u16 usb_read16(struct adapter *adapter, u32 addr)
310 {
311         u8 request;
312         u8 requesttype;
313         u16 wvalue;
314         u16 index;
315         u16 len;
316         __le32 data;
317
318         request = 0x05;
319         requesttype = 0x01;/* read_in */
320         index = 0;/* n/a */
321         wvalue = (u16)(addr & 0x0000ffff);
322         len = 2;
323         usbctrl_vendorreq(adapter, request, wvalue, index, &data, len, requesttype);
324
325         return (u16)(le32_to_cpu(data) & 0xffff);
326 }
327
328 u32 usb_read32(struct adapter *adapter, u32 addr)
329 {
330         u8 request;
331         u8 requesttype;
332         u16 wvalue;
333         u16 index;
334         u16 len;
335         __le32 data;
336
337         request = 0x05;
338         requesttype = 0x01;/* read_in */
339         index = 0;/* n/a */
340
341         wvalue = (u16)(addr & 0x0000ffff);
342         len = 4;
343
344         usbctrl_vendorreq(adapter, request, wvalue, index, &data, len, requesttype);
345
346         return le32_to_cpu(data);
347 }
348
349 static void usb_read_port_complete(struct urb *purb, struct pt_regs *regs)
350 {
351         struct recv_buf *precvbuf = (struct recv_buf *)purb->context;
352         struct adapter *adapt = (struct adapter *)precvbuf->adapter;
353         struct recv_priv *precvpriv = &adapt->recvpriv;
354
355         RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("%s!!!\n", __func__));
356
357         if (adapt->bSurpriseRemoved || adapt->bDriverStopped || adapt->bReadPortCancel) {
358                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
359                          ("%s:bDriverStopped(%d) OR bSurpriseRemoved(%d)\n",
360                          __func__, adapt->bDriverStopped,
361                          adapt->bSurpriseRemoved));
362
363                 precvbuf->reuse = true;
364                 DBG_88E("%s() RX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bReadPortCancel(%d)\n",
365                         __func__, adapt->bDriverStopped,
366                         adapt->bSurpriseRemoved, adapt->bReadPortCancel);
367                 return;
368         }
369
370         if (purb->status == 0) { /* SUCCESS */
371                 if ((purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)) {
372                         RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
373                                  ("%s: (purb->actual_length > MAX_RECVBUF_SZ) || (purb->actual_length < RXDESC_SIZE)\n",
374                                  __func__));
375                         precvbuf->reuse = true;
376                         usb_read_port(adapt, RECV_BULK_IN_ADDR, precvbuf);
377                         DBG_88E("%s()-%d: RX Warning!\n", __func__, __LINE__);
378                 } else {
379                         skb_put(precvbuf->pskb, purb->actual_length);
380                         skb_queue_tail(&precvpriv->rx_skb_queue, precvbuf->pskb);
381
382                         if (skb_queue_len(&precvpriv->rx_skb_queue) <= 1)
383                                 tasklet_schedule(&precvpriv->recv_tasklet);
384
385                         precvbuf->pskb = NULL;
386                         precvbuf->reuse = false;
387                         usb_read_port(adapt, RECV_BULK_IN_ADDR, precvbuf);
388                 }
389         } else {
390                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
391                          ("%s : purb->status(%d) != 0\n",
392                           __func__, purb->status));
393
394                 DBG_88E("###=> %s => urb status(%d)\n", __func__, purb->status);
395                 skb_put(precvbuf->pskb, purb->actual_length);
396                 precvbuf->pskb = NULL;
397
398                 switch (purb->status) {
399                 case -EINVAL:
400                 case -EPIPE:
401                 case -ENODEV:
402                 case -ESHUTDOWN:
403                         adapt->bSurpriseRemoved = true;
404                         /* fall through */
405                 case -ENOENT:
406                         adapt->bDriverStopped = true;
407                         RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
408                                  ("%s:bDriverStopped=true\n", __func__));
409                         break;
410                 case -EPROTO:
411                 case -EOVERFLOW:
412                         adapt->HalData->srestpriv.wifi_error_status = USB_READ_PORT_FAIL;
413                         precvbuf->reuse = true;
414                         usb_read_port(adapt, RECV_BULK_IN_ADDR, precvbuf);
415                         break;
416                 case -EINPROGRESS:
417                         DBG_88E("ERROR: URB IS IN PROGRESS!\n");
418                         break;
419                 default:
420                         break;
421                 }
422         }
423 }
424
425 u32 usb_read_port(struct adapter *adapter, u32 addr, struct recv_buf *precvbuf)
426 {
427         struct urb *purb = NULL;
428         struct dvobj_priv *pdvobj = adapter_to_dvobj(adapter);
429         struct recv_priv *precvpriv = &adapter->recvpriv;
430         struct usb_device *pusbd = pdvobj->pusbdev;
431         int err;
432         unsigned int pipe;
433         u32 ret = _SUCCESS;
434
435         if (adapter->bDriverStopped || adapter->bSurpriseRemoved ||
436             adapter->pwrctrlpriv.pnp_bstop_trx) {
437                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
438                          ("%s:(adapt->bDriverStopped ||adapt->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n",
439                           __func__));
440                 return _FAIL;
441         }
442
443         if (!precvbuf) {
444                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
445                          ("%s:precvbuf==NULL\n", __func__));
446                 return _FAIL;
447         }
448
449         if (!precvbuf->reuse || !precvbuf->pskb) {
450                 precvbuf->pskb = skb_dequeue(&precvpriv->free_recv_skb_queue);
451                 if (precvbuf->pskb)
452                         precvbuf->reuse = true;
453         }
454
455         /* re-assign for linux based on skb */
456         if (!precvbuf->reuse || !precvbuf->pskb) {
457                 precvbuf->pskb = netdev_alloc_skb(adapter->pnetdev, MAX_RECVBUF_SZ);
458                 if (!precvbuf->pskb) {
459                         RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("init_recvbuf(): alloc_skb fail!\n"));
460                         DBG_88E("#### %s() alloc_skb fail!#####\n", __func__);
461                         return _FAIL;
462                 }
463         } else { /* reuse skb */
464                 precvbuf->reuse = false;
465         }
466
467         purb = precvbuf->purb;
468
469         /* translate DMA FIFO addr to pipehandle */
470         pipe = ffaddr2pipehdl(pdvobj, addr);
471
472         usb_fill_bulk_urb(purb, pusbd, pipe,
473                           precvbuf->pskb->data,
474                           MAX_RECVBUF_SZ,
475                           usb_read_port_complete,
476                           precvbuf);/* context is precvbuf */
477
478         err = usb_submit_urb(purb, GFP_ATOMIC);
479         if ((err) && (err != (-EPERM))) {
480                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
481                          ("cannot submit rx in-token(err=0x%.8x), URB_STATUS =0x%.8x",
482                          err, purb->status));
483                 DBG_88E("cannot submit rx in-token(err = 0x%08x),urb_status = %d\n",
484                         err, purb->status);
485                 ret = _FAIL;
486         }
487
488         return ret;
489 }
490
491 void rtw_hal_inirp_deinit(struct adapter *padapter)
492 {
493         int i;
494         struct recv_buf *precvbuf;
495
496         precvbuf = padapter->recvpriv.precv_buf;
497
498         DBG_88E("%s\n", __func__);
499
500         padapter->bReadPortCancel = true;
501
502         for (i = 0; i < NR_RECVBUFF; i++) {
503                 precvbuf->reuse = true;
504                 if (precvbuf->purb)
505                         usb_kill_urb(precvbuf->purb);
506                 precvbuf++;
507         }
508 }
509
510 int usb_write8(struct adapter *adapter, u32 addr, u8 val)
511 {
512         u8 request;
513         u8 requesttype;
514         u16 wvalue;
515         u16 index;
516         u16 len;
517         u8 data;
518
519         request = 0x05;
520         requesttype = 0x00;/* write_out */
521         index = 0;/* n/a */
522         wvalue = (u16)(addr & 0x0000ffff);
523         len = 1;
524         data = val;
525         return usbctrl_vendorreq(adapter, request, wvalue,
526                                  index, &data, len, requesttype);
527 }
528
529 int usb_write16(struct adapter *adapter, u32 addr, u16 val)
530 {
531         u8 request;
532         u8 requesttype;
533         u16 wvalue;
534         u16 index;
535         u16 len;
536         __le32 data;
537
538         request = 0x05;
539         requesttype = 0x00;/* write_out */
540         index = 0;/* n/a */
541
542         wvalue = (u16)(addr & 0x0000ffff);
543         len = 2;
544
545         data = cpu_to_le32(val & 0x0000ffff);
546
547         return usbctrl_vendorreq(adapter, request, wvalue,
548                                  index, &data, len, requesttype);
549 }
550
551 int usb_write32(struct adapter *adapter, u32 addr, u32 val)
552 {
553         u8 request;
554         u8 requesttype;
555         u16 wvalue;
556         u16 index;
557         u16 len;
558         __le32 data;
559
560         request = 0x05;
561         requesttype = 0x00;/* write_out */
562         index = 0;/* n/a */
563
564         wvalue = (u16)(addr & 0x0000ffff);
565         len = 4;
566         data = cpu_to_le32(val);
567
568         return usbctrl_vendorreq(adapter, request, wvalue,
569                                  index, &data, len, requesttype);
570 }
571
572 static void usb_write_port_complete(struct urb *purb, struct pt_regs *regs)
573 {
574         struct xmit_buf *pxmitbuf = (struct xmit_buf *)purb->context;
575         struct adapter *padapter = pxmitbuf->padapter;
576         struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
577
578         switch (pxmitbuf->flags) {
579         case VO_QUEUE_INX:
580                 pxmitpriv->voq_cnt--;
581                 break;
582         case VI_QUEUE_INX:
583                 pxmitpriv->viq_cnt--;
584                 break;
585         case BE_QUEUE_INX:
586                 pxmitpriv->beq_cnt--;
587                 break;
588         case BK_QUEUE_INX:
589                 pxmitpriv->bkq_cnt--;
590                 break;
591         case HIGH_QUEUE_INX:
592 #ifdef CONFIG_88EU_AP_MODE
593                 rtw_chk_hi_queue_cmd(padapter);
594 #endif
595                 break;
596         default:
597                 break;
598         }
599
600         if (padapter->bSurpriseRemoved || padapter->bDriverStopped ||
601             padapter->bWritePortCancel) {
602                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
603                          ("%s:bDriverStopped(%d) OR bSurpriseRemoved(%d)",
604                           __func__, padapter->bDriverStopped,
605                           padapter->bSurpriseRemoved));
606                 DBG_88E("%s(): TX Warning! bDriverStopped(%d) OR bSurpriseRemoved(%d) bWritePortCancel(%d) pxmitbuf->ext_tag(%x)\n",
607                         __func__, padapter->bDriverStopped,
608                         padapter->bSurpriseRemoved, padapter->bReadPortCancel,
609                         pxmitbuf->ext_tag);
610
611                 goto check_completion;
612         }
613
614         if (purb->status) {
615                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
616                          ("%s : purb->status(%d) != 0\n",
617                           __func__, purb->status));
618                 DBG_88E("###=> %s status(%d)\n", __func__, purb->status);
619                 if ((purb->status == -EPIPE) || (purb->status == -EPROTO)) {
620                         sreset_set_wifi_error_status(padapter, USB_WRITE_PORT_FAIL);
621                 } else if (purb->status == -EINPROGRESS) {
622                         RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
623                                  ("%s: EINPROGRESS\n", __func__));
624                         goto check_completion;
625                 } else if (purb->status == -ENOENT) {
626                         DBG_88E("%s: -ENOENT\n", __func__);
627                         goto check_completion;
628                 } else if (purb->status == -ECONNRESET) {
629                         DBG_88E("%s: -ECONNRESET\n", __func__);
630                         goto check_completion;
631                 } else if (purb->status == -ESHUTDOWN) {
632                         RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
633                                  ("%s: ESHUTDOWN\n", __func__));
634                         padapter->bDriverStopped = true;
635                         RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
636                                  ("%s:bDriverStopped = true\n", __func__));
637                         goto check_completion;
638                 } else {
639                         padapter->bSurpriseRemoved = true;
640                         DBG_88E("bSurpriseRemoved = true\n");
641                         RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
642                                  ("%s:bSurpriseRemoved = true\n", __func__));
643                         goto check_completion;
644                 }
645         }
646
647 check_completion:
648         rtw_sctx_done_err(&pxmitbuf->sctx,
649                           purb->status ? RTW_SCTX_DONE_WRITE_PORT_ERR :
650                           RTW_SCTX_DONE_SUCCESS);
651
652         rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
653
654         tasklet_hi_schedule(&pxmitpriv->xmit_tasklet);
655 }
656
657 u32 usb_write_port(struct adapter *padapter, u32 addr, u32 cnt, struct xmit_buf *xmitbuf)
658 {
659         unsigned long irqL;
660         unsigned int pipe;
661         int status;
662         u32 ret = _FAIL;
663         struct urb *purb = NULL;
664         struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
665         struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
666         struct xmit_frame *pxmitframe = (struct xmit_frame *)xmitbuf->priv_data;
667         struct usb_device *pusbd = pdvobj->pusbdev;
668
669         RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("+%s\n", __func__));
670
671         if ((padapter->bDriverStopped) || (padapter->bSurpriseRemoved) ||
672             (padapter->pwrctrlpriv.pnp_bstop_trx)) {
673                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
674                          ("%s:( padapter->bDriverStopped ||padapter->bSurpriseRemoved ||adapter->pwrctrlpriv.pnp_bstop_trx)!!!\n",
675                           __func__));
676                 rtw_sctx_done_err(&xmitbuf->sctx, RTW_SCTX_DONE_TX_DENY);
677                 goto exit;
678         }
679
680         spin_lock_irqsave(&pxmitpriv->lock, irqL);
681
682         switch (addr) {
683         case VO_QUEUE_INX:
684                 pxmitpriv->voq_cnt++;
685                 xmitbuf->flags = VO_QUEUE_INX;
686                 break;
687         case VI_QUEUE_INX:
688                 pxmitpriv->viq_cnt++;
689                 xmitbuf->flags = VI_QUEUE_INX;
690                 break;
691         case BE_QUEUE_INX:
692                 pxmitpriv->beq_cnt++;
693                 xmitbuf->flags = BE_QUEUE_INX;
694                 break;
695         case BK_QUEUE_INX:
696                 pxmitpriv->bkq_cnt++;
697                 xmitbuf->flags = BK_QUEUE_INX;
698                 break;
699         case HIGH_QUEUE_INX:
700                 xmitbuf->flags = HIGH_QUEUE_INX;
701                 break;
702         default:
703                 xmitbuf->flags = MGT_QUEUE_INX;
704                 break;
705         }
706
707         spin_unlock_irqrestore(&pxmitpriv->lock, irqL);
708
709         purb    = xmitbuf->pxmit_urb[0];
710
711         /* translate DMA FIFO addr to pipehandle */
712         pipe = ffaddr2pipehdl(pdvobj, addr);
713
714         usb_fill_bulk_urb(purb, pusbd, pipe,
715                           pxmitframe->buf_addr, /*  xmitbuf->pbuf */
716                           cnt,
717                           usb_write_port_complete,
718                           xmitbuf);/* context is xmitbuf */
719
720         status = usb_submit_urb(purb, GFP_ATOMIC);
721         if (status) {
722                 rtw_sctx_done_err(&xmitbuf->sctx, RTW_SCTX_DONE_WRITE_PORT_ERR);
723                 DBG_88E("%s, status =%d\n", __func__, status);
724                 RT_TRACE(_module_hci_ops_os_c_, _drv_err_,
725                          ("%s(): usb_submit_urb, status =%x\n",
726                           __func__, status));
727
728                 switch (status) {
729                 case -ENODEV:
730                         padapter->bDriverStopped = true;
731                         break;
732                 default:
733                         break;
734                 }
735                 goto exit;
736         }
737
738         ret = _SUCCESS;
739
740 /*    We add the URB_ZERO_PACKET flag to urb so that the host will send the zero packet automatically. */
741
742         RT_TRACE(_module_hci_ops_os_c_, _drv_err_, ("-%s\n", __func__));
743
744 exit:
745         if (ret != _SUCCESS)
746                 rtw_free_xmitbuf(pxmitpriv, xmitbuf);
747         return ret;
748 }
749
750 void usb_write_port_cancel(struct adapter *padapter)
751 {
752         int i, j;
753         struct xmit_buf *pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmitbuf;
754
755         DBG_88E("%s\n", __func__);
756
757         padapter->bWritePortCancel = true;
758
759         for (i = 0; i < NR_XMITBUFF; i++) {
760                 for (j = 0; j < 8; j++) {
761                         if (pxmitbuf->pxmit_urb[j])
762                                 usb_kill_urb(pxmitbuf->pxmit_urb[j]);
763                 }
764                 pxmitbuf++;
765         }
766
767         pxmitbuf = (struct xmit_buf *)padapter->xmitpriv.pxmit_extbuf;
768         for (i = 0; i < NR_XMIT_EXTBUFF; i++) {
769                 for (j = 0; j < 8; j++) {
770                         if (pxmitbuf->pxmit_urb[j])
771                                 usb_kill_urb(pxmitbuf->pxmit_urb[j]);
772                 }
773                 pxmitbuf++;
774         }
775 }
776
777 void rtl8188eu_recv_tasklet(void *priv)
778 {
779         struct sk_buff *pskb;
780         struct adapter *adapt = priv;
781         struct recv_priv *precvpriv = &adapt->recvpriv;
782
783         while (NULL != (pskb = skb_dequeue(&precvpriv->rx_skb_queue))) {
784                 if ((adapt->bDriverStopped) || (adapt->bSurpriseRemoved)) {
785                         DBG_88E("recv_tasklet => bDriverStopped or bSurpriseRemoved\n");
786                         dev_kfree_skb_any(pskb);
787                         break;
788                 }
789                 recvbuf2recvframe(adapt, pskb);
790                 skb_reset_tail_pointer(pskb);
791                 pskb->len = 0;
792                 skb_queue_tail(&precvpriv->free_recv_skb_queue, pskb);
793         }
794 }
795
796 void rtl8188eu_xmit_tasklet(void *priv)
797 {
798         struct adapter *adapt = priv;
799         struct xmit_priv *pxmitpriv = &adapt->xmitpriv;
800
801         if (check_fwstate(&adapt->mlmepriv, _FW_UNDER_SURVEY))
802                 return;
803
804         while (1) {
805                 if ((adapt->bDriverStopped) ||
806                     (adapt->bSurpriseRemoved) ||
807                     (adapt->bWritePortCancel)) {
808                         DBG_88E("xmit_tasklet => bDriverStopped or bSurpriseRemoved or bWritePortCancel\n");
809                         break;
810                 }
811
812                 if (!rtl8188eu_xmitframe_complete(adapt, pxmitpriv))
813                         break;
814         }
815 }