ag71xx: fix a memory corruption bug that happens if you flood the interface with...
[oweals/openwrt.git] / target / linux / ar71xx / files / drivers / net / ag71xx / ag71xx_main.c
1 /*
2  *  Atheros AR71xx built-in ethernet mac driver
3  *
4  *  Copyright (C) 2008-2010 Gabor Juhos <juhosg@openwrt.org>
5  *  Copyright (C) 2008 Imre Kaloz <kaloz@openwrt.org>
6  *
7  *  Based on Atheros' AG7100 driver
8  *
9  *  This program is free software; you can redistribute it and/or modify it
10  *  under the terms of the GNU General Public License version 2 as published
11  *  by the Free Software Foundation.
12  */
13
14 #include "ag71xx.h"
15
16 #define AG71XX_DEFAULT_MSG_ENABLE       \
17         ( NETIF_MSG_DRV                 \
18         | NETIF_MSG_PROBE               \
19         | NETIF_MSG_LINK                \
20         | NETIF_MSG_TIMER               \
21         | NETIF_MSG_IFDOWN              \
22         | NETIF_MSG_IFUP                \
23         | NETIF_MSG_RX_ERR              \
24         | NETIF_MSG_TX_ERR )
25
26 static int ag71xx_msg_level = -1;
27
28 module_param_named(msg_level, ag71xx_msg_level, int, 0);
29 MODULE_PARM_DESC(msg_level, "Message level (-1=defaults,0=none,...,16=all)");
30
31 static void ag71xx_dump_dma_regs(struct ag71xx *ag)
32 {
33         DBG("%s: dma_tx_ctrl=%08x, dma_tx_desc=%08x, dma_tx_status=%08x\n",
34                 ag->dev->name,
35                 ag71xx_rr(ag, AG71XX_REG_TX_CTRL),
36                 ag71xx_rr(ag, AG71XX_REG_TX_DESC),
37                 ag71xx_rr(ag, AG71XX_REG_TX_STATUS));
38
39         DBG("%s: dma_rx_ctrl=%08x, dma_rx_desc=%08x, dma_rx_status=%08x\n",
40                 ag->dev->name,
41                 ag71xx_rr(ag, AG71XX_REG_RX_CTRL),
42                 ag71xx_rr(ag, AG71XX_REG_RX_DESC),
43                 ag71xx_rr(ag, AG71XX_REG_RX_STATUS));
44 }
45
46 static void ag71xx_dump_regs(struct ag71xx *ag)
47 {
48         DBG("%s: mac_cfg1=%08x, mac_cfg2=%08x, ipg=%08x, hdx=%08x, mfl=%08x\n",
49                 ag->dev->name,
50                 ag71xx_rr(ag, AG71XX_REG_MAC_CFG1),
51                 ag71xx_rr(ag, AG71XX_REG_MAC_CFG2),
52                 ag71xx_rr(ag, AG71XX_REG_MAC_IPG),
53                 ag71xx_rr(ag, AG71XX_REG_MAC_HDX),
54                 ag71xx_rr(ag, AG71XX_REG_MAC_MFL));
55         DBG("%s: mac_ifctl=%08x, mac_addr1=%08x, mac_addr2=%08x\n",
56                 ag->dev->name,
57                 ag71xx_rr(ag, AG71XX_REG_MAC_IFCTL),
58                 ag71xx_rr(ag, AG71XX_REG_MAC_ADDR1),
59                 ag71xx_rr(ag, AG71XX_REG_MAC_ADDR2));
60         DBG("%s: fifo_cfg0=%08x, fifo_cfg1=%08x, fifo_cfg2=%08x\n",
61                 ag->dev->name,
62                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG0),
63                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG1),
64                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG2));
65         DBG("%s: fifo_cfg3=%08x, fifo_cfg4=%08x, fifo_cfg5=%08x\n",
66                 ag->dev->name,
67                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG3),
68                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG4),
69                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG5));
70 }
71
72 static inline void ag71xx_dump_intr(struct ag71xx *ag, char *label, u32 intr)
73 {
74         DBG("%s: %s intr=%08x %s%s%s%s%s%s\n",
75                 ag->dev->name, label, intr,
76                 (intr & AG71XX_INT_TX_PS) ? "TXPS " : "",
77                 (intr & AG71XX_INT_TX_UR) ? "TXUR " : "",
78                 (intr & AG71XX_INT_TX_BE) ? "TXBE " : "",
79                 (intr & AG71XX_INT_RX_PR) ? "RXPR " : "",
80                 (intr & AG71XX_INT_RX_OF) ? "RXOF " : "",
81                 (intr & AG71XX_INT_RX_BE) ? "RXBE " : "");
82 }
83
84 static void ag71xx_ring_free(struct ag71xx_ring *ring)
85 {
86         kfree(ring->buf);
87
88         if (ring->descs_cpu)
89                 dma_free_coherent(NULL, ring->size * ring->desc_size,
90                                   ring->descs_cpu, ring->descs_dma);
91 }
92
93 static int ag71xx_ring_alloc(struct ag71xx_ring *ring, unsigned int size)
94 {
95         int err;
96         int i;
97
98         ring->desc_size = sizeof(struct ag71xx_desc);
99         if (ring->desc_size % cache_line_size()) {
100                 DBG("ag71xx: ring %p, desc size %u rounded to %u\n",
101                         ring, ring->desc_size,
102                         roundup(ring->desc_size, cache_line_size()));
103                 ring->desc_size = roundup(ring->desc_size, cache_line_size());
104         }
105
106         ring->descs_cpu = dma_alloc_coherent(NULL, size * ring->desc_size,
107                                              &ring->descs_dma, GFP_ATOMIC);
108         if (!ring->descs_cpu) {
109                 err = -ENOMEM;
110                 goto err;
111         }
112
113         ring->size = size;
114
115         ring->buf = kzalloc(size * sizeof(*ring->buf), GFP_KERNEL);
116         if (!ring->buf) {
117                 err = -ENOMEM;
118                 goto err;
119         }
120
121         for (i = 0; i < size; i++) {
122                 ring->buf[i].desc = (struct ag71xx_desc *)&ring->descs_cpu[i * ring->desc_size];
123                 DBG("ag71xx: ring %p, desc %d at %p\n",
124                         ring, i, ring->buf[i].desc);
125         }
126
127         return 0;
128
129  err:
130         return err;
131 }
132
133 static void ag71xx_ring_tx_clean(struct ag71xx *ag)
134 {
135         struct ag71xx_ring *ring = &ag->tx_ring;
136         struct net_device *dev = ag->dev;
137
138         while (ring->curr != ring->dirty) {
139                 u32 i = ring->dirty % AG71XX_TX_RING_SIZE;
140
141                 if (!ag71xx_desc_empty(ring->buf[i].desc)) {
142                         ring->buf[i].desc->ctrl = 0;
143                         dev->stats.tx_errors++;
144                 }
145
146                 if (ring->buf[i].skb)
147                         dev_kfree_skb_any(ring->buf[i].skb);
148
149                 ring->buf[i].skb = NULL;
150
151                 ring->dirty++;
152         }
153
154         /* flush descriptors */
155         wmb();
156
157 }
158
159 static void ag71xx_ring_tx_init(struct ag71xx *ag)
160 {
161         struct ag71xx_ring *ring = &ag->tx_ring;
162         int i;
163
164         for (i = 0; i < AG71XX_TX_RING_SIZE; i++) {
165                 ring->buf[i].desc->next = (u32) (ring->descs_dma +
166                         ring->desc_size * ((i + 1) % AG71XX_TX_RING_SIZE));
167
168                 ring->buf[i].desc->ctrl = DESC_EMPTY;
169                 ring->buf[i].skb = NULL;
170         }
171
172         /* flush descriptors */
173         wmb();
174
175         ring->curr = 0;
176         ring->dirty = 0;
177 }
178
179 static void ag71xx_ring_rx_clean(struct ag71xx *ag)
180 {
181         struct ag71xx_ring *ring = &ag->rx_ring;
182         int i;
183
184         if (!ring->buf)
185                 return;
186
187         for (i = 0; i < AG71XX_RX_RING_SIZE; i++)
188                 if (ring->buf[i].skb) {
189                         dma_unmap_single(&ag->dev->dev, ring->buf[i].dma_addr,
190                                          AG71XX_RX_PKT_SIZE, DMA_FROM_DEVICE);
191                         kfree_skb(ring->buf[i].skb);
192                 }
193 }
194
195 static int ag71xx_rx_reserve(struct ag71xx *ag)
196 {
197         int reserve = 0;
198
199         if (ag71xx_get_pdata(ag)->is_ar724x) {
200                 if (!ag71xx_has_ar8216(ag))
201                         reserve = 2;
202
203                 if (ag->phy_dev)
204                         reserve += 4 - (ag->phy_dev->pkt_align % 4);
205
206                 reserve %= 4;
207         }
208
209         return reserve + AG71XX_RX_PKT_RESERVE;
210 }
211
212
213 static int ag71xx_ring_rx_init(struct ag71xx *ag)
214 {
215         struct ag71xx_ring *ring = &ag->rx_ring;
216         unsigned int reserve = ag71xx_rx_reserve(ag);
217         unsigned int i;
218         int ret;
219
220         ret = 0;
221         for (i = 0; i < AG71XX_RX_RING_SIZE; i++) {
222                 ring->buf[i].desc->next = (u32) (ring->descs_dma +
223                         ring->desc_size * ((i + 1) % AG71XX_RX_RING_SIZE));
224
225                 DBG("ag71xx: RX desc at %p, next is %08x\n",
226                         ring->buf[i].desc,
227                         ring->buf[i].desc->next);
228         }
229
230         for (i = 0; i < AG71XX_RX_RING_SIZE; i++) {
231                 struct sk_buff *skb;
232                 dma_addr_t dma_addr;
233
234                 skb = dev_alloc_skb(AG71XX_RX_PKT_SIZE + reserve);
235                 if (!skb) {
236                         ret = -ENOMEM;
237                         break;
238                 }
239
240                 skb->dev = ag->dev;
241                 skb_reserve(skb, reserve);
242
243                 dma_addr = dma_map_single(&ag->dev->dev, skb->data,
244                                           AG71XX_RX_PKT_SIZE,
245                                           DMA_FROM_DEVICE);
246                 ring->buf[i].skb = skb;
247                 ring->buf[i].dma_addr = dma_addr;
248                 ring->buf[i].desc->data = (u32) dma_addr;
249                 ring->buf[i].desc->ctrl = DESC_EMPTY;
250         }
251
252         /* flush descriptors */
253         wmb();
254
255         ring->curr = 0;
256         ring->dirty = 0;
257
258         return ret;
259 }
260
261 static int ag71xx_ring_rx_refill(struct ag71xx *ag)
262 {
263         struct ag71xx_ring *ring = &ag->rx_ring;
264         unsigned int reserve = ag71xx_rx_reserve(ag);
265         unsigned int count;
266
267         count = 0;
268         for (; ring->curr - ring->dirty > 0; ring->dirty++) {
269                 unsigned int i;
270
271                 i = ring->dirty % AG71XX_RX_RING_SIZE;
272
273                 if (ring->buf[i].skb == NULL) {
274                         dma_addr_t dma_addr;
275                         struct sk_buff *skb;
276
277                         skb = dev_alloc_skb(AG71XX_RX_PKT_SIZE + reserve);
278                         if (skb == NULL)
279                                 break;
280
281                         skb_reserve(skb, reserve);
282                         skb->dev = ag->dev;
283
284                         dma_addr = dma_map_single(&ag->dev->dev, skb->data,
285                                                   AG71XX_RX_PKT_SIZE,
286                                                   DMA_FROM_DEVICE);
287
288                         ring->buf[i].skb = skb;
289                         ring->buf[i].dma_addr = dma_addr;
290                         ring->buf[i].desc->data = (u32) dma_addr;
291                 }
292
293                 ring->buf[i].desc->ctrl = DESC_EMPTY;
294                 count++;
295         }
296
297         /* flush descriptors */
298         wmb();
299
300         DBG("%s: %u rx descriptors refilled\n", ag->dev->name, count);
301
302         return count;
303 }
304
305 static int ag71xx_rings_init(struct ag71xx *ag)
306 {
307         int ret;
308
309         ret = ag71xx_ring_alloc(&ag->tx_ring, AG71XX_TX_RING_SIZE);
310         if (ret)
311                 return ret;
312
313         ag71xx_ring_tx_init(ag);
314
315         ret = ag71xx_ring_alloc(&ag->rx_ring, AG71XX_RX_RING_SIZE);
316         if (ret)
317                 return ret;
318
319         ret = ag71xx_ring_rx_init(ag);
320         return ret;
321 }
322
323 static void ag71xx_rings_cleanup(struct ag71xx *ag)
324 {
325         ag71xx_ring_rx_clean(ag);
326         ag71xx_ring_free(&ag->rx_ring);
327
328         ag71xx_ring_tx_clean(ag);
329         ag71xx_ring_free(&ag->tx_ring);
330 }
331
332 static unsigned char *ag71xx_speed_str(struct ag71xx *ag)
333 {
334         switch (ag->speed) {
335         case SPEED_1000:
336                 return "1000";
337         case SPEED_100:
338                 return "100";
339         case SPEED_10:
340                 return "10";
341         }
342
343         return "?";
344 }
345
346 void ag71xx_link_adjust(struct ag71xx *ag)
347 {
348         struct ag71xx_platform_data *pdata = ag71xx_get_pdata(ag);
349         u32 cfg2;
350         u32 ifctl;
351         u32 fifo5;
352         u32 mii_speed;
353
354         if (!ag->link) {
355                 netif_carrier_off(ag->dev);
356                 if (netif_msg_link(ag))
357                         printk(KERN_INFO "%s: link down\n", ag->dev->name);
358                 return;
359         }
360
361         cfg2 = ag71xx_rr(ag, AG71XX_REG_MAC_CFG2);
362         cfg2 &= ~(MAC_CFG2_IF_1000 | MAC_CFG2_IF_10_100 | MAC_CFG2_FDX);
363         cfg2 |= (ag->duplex) ? MAC_CFG2_FDX : 0;
364
365         ifctl = ag71xx_rr(ag, AG71XX_REG_MAC_IFCTL);
366         ifctl &= ~(MAC_IFCTL_SPEED);
367
368         fifo5 = ag71xx_rr(ag, AG71XX_REG_FIFO_CFG5);
369         fifo5 &= ~FIFO_CFG5_BM;
370
371         switch (ag->speed) {
372         case SPEED_1000:
373                 mii_speed =  MII_CTRL_SPEED_1000;
374                 cfg2 |= MAC_CFG2_IF_1000;
375                 fifo5 |= FIFO_CFG5_BM;
376                 break;
377         case SPEED_100:
378                 mii_speed = MII_CTRL_SPEED_100;
379                 cfg2 |= MAC_CFG2_IF_10_100;
380                 ifctl |= MAC_IFCTL_SPEED;
381                 break;
382         case SPEED_10:
383                 mii_speed = MII_CTRL_SPEED_10;
384                 cfg2 |= MAC_CFG2_IF_10_100;
385                 break;
386         default:
387                 BUG();
388                 return;
389         }
390
391         if (pdata->is_ar91xx)
392                 ag71xx_wr(ag, AG71XX_REG_FIFO_CFG3, 0x00780fff);
393         else if (pdata->is_ar724x)
394                 ag71xx_wr(ag, AG71XX_REG_FIFO_CFG3, pdata->fifo_cfg3);
395         else
396                 ag71xx_wr(ag, AG71XX_REG_FIFO_CFG3, 0x008001ff);
397
398         if (pdata->set_pll)
399                 pdata->set_pll(ag->speed);
400
401         ag71xx_mii_ctrl_set_speed(ag, mii_speed);
402
403         ag71xx_wr(ag, AG71XX_REG_MAC_CFG2, cfg2);
404         ag71xx_wr(ag, AG71XX_REG_FIFO_CFG5, fifo5);
405         ag71xx_wr(ag, AG71XX_REG_MAC_IFCTL, ifctl);
406
407         netif_carrier_on(ag->dev);
408         if (netif_msg_link(ag))
409                 printk(KERN_INFO "%s: link up (%sMbps/%s duplex)\n",
410                         ag->dev->name,
411                         ag71xx_speed_str(ag),
412                         (DUPLEX_FULL == ag->duplex) ? "Full" : "Half");
413
414         DBG("%s: fifo_cfg0=%#x, fifo_cfg1=%#x, fifo_cfg2=%#x\n",
415                 ag->dev->name,
416                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG0),
417                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG1),
418                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG2));
419
420         DBG("%s: fifo_cfg3=%#x, fifo_cfg4=%#x, fifo_cfg5=%#x\n",
421                 ag->dev->name,
422                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG3),
423                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG4),
424                 ag71xx_rr(ag, AG71XX_REG_FIFO_CFG5));
425
426         DBG("%s: mac_cfg2=%#x, mac_ifctl=%#x, mii_ctrl=%#x\n",
427                 ag->dev->name,
428                 ag71xx_rr(ag, AG71XX_REG_MAC_CFG2),
429                 ag71xx_rr(ag, AG71XX_REG_MAC_IFCTL),
430                 ag71xx_mii_ctrl_rr(ag));
431 }
432
433 static void ag71xx_hw_set_macaddr(struct ag71xx *ag, unsigned char *mac)
434 {
435         u32 t;
436
437         t = (((u32) mac[5]) << 24) | (((u32) mac[4]) << 16)
438           | (((u32) mac[3]) << 8) | ((u32) mac[2]);
439
440         ag71xx_wr(ag, AG71XX_REG_MAC_ADDR1, t);
441
442         t = (((u32) mac[1]) << 24) | (((u32) mac[0]) << 16);
443         ag71xx_wr(ag, AG71XX_REG_MAC_ADDR2, t);
444 }
445
446 static void ag71xx_dma_reset(struct ag71xx *ag)
447 {
448         u32 val;
449         int i;
450
451         ag71xx_dump_dma_regs(ag);
452
453         /* stop RX and TX */
454         ag71xx_wr(ag, AG71XX_REG_RX_CTRL, 0);
455         ag71xx_wr(ag, AG71XX_REG_TX_CTRL, 0);
456
457         /*
458          * give the hardware some time to really stop all rx/tx activity
459          * clearing the descriptors too early causes random memory corruption
460          */
461         mdelay(1);
462
463         /* clear descriptor addresses */
464         ag71xx_wr(ag, AG71XX_REG_TX_DESC, 0);
465         ag71xx_wr(ag, AG71XX_REG_RX_DESC, 0);
466
467         /* clear pending RX/TX interrupts */
468         for (i = 0; i < 256; i++) {
469                 ag71xx_wr(ag, AG71XX_REG_RX_STATUS, RX_STATUS_PR);
470                 ag71xx_wr(ag, AG71XX_REG_TX_STATUS, TX_STATUS_PS);
471         }
472
473         /* clear pending errors */
474         ag71xx_wr(ag, AG71XX_REG_RX_STATUS, RX_STATUS_BE | RX_STATUS_OF);
475         ag71xx_wr(ag, AG71XX_REG_TX_STATUS, TX_STATUS_BE | TX_STATUS_UR);
476
477         val = ag71xx_rr(ag, AG71XX_REG_RX_STATUS);
478         if (val)
479                 printk(KERN_ALERT "%s: unable to clear DMA Rx status: %08x\n",
480                         ag->dev->name, val);
481
482         val = ag71xx_rr(ag, AG71XX_REG_TX_STATUS);
483
484         /* mask out reserved bits */
485         val &= ~0xff000000;
486
487         if (val)
488                 printk(KERN_ALERT "%s: unable to clear DMA Tx status: %08x\n",
489                         ag->dev->name, val);
490
491         ag71xx_dump_dma_regs(ag);
492 }
493
494 #define MAC_CFG1_INIT   (MAC_CFG1_RXE | MAC_CFG1_TXE | \
495                          MAC_CFG1_SRX | MAC_CFG1_STX)
496
497 #define FIFO_CFG0_INIT  (FIFO_CFG0_ALL << FIFO_CFG0_ENABLE_SHIFT)
498
499 #define FIFO_CFG4_INIT  (FIFO_CFG4_DE | FIFO_CFG4_DV | FIFO_CFG4_FC | \
500                          FIFO_CFG4_CE | FIFO_CFG4_CR | FIFO_CFG4_LM | \
501                          FIFO_CFG4_LO | FIFO_CFG4_OK | FIFO_CFG4_MC | \
502                          FIFO_CFG4_BC | FIFO_CFG4_DR | FIFO_CFG4_LE | \
503                          FIFO_CFG4_CF | FIFO_CFG4_PF | FIFO_CFG4_UO | \
504                          FIFO_CFG4_VT)
505
506 #define FIFO_CFG5_INIT  (FIFO_CFG5_DE | FIFO_CFG5_DV | FIFO_CFG5_FC | \
507                          FIFO_CFG5_CE | FIFO_CFG5_LO | FIFO_CFG5_OK | \
508                          FIFO_CFG5_MC | FIFO_CFG5_BC | FIFO_CFG5_DR | \
509                          FIFO_CFG5_CF | FIFO_CFG5_PF | FIFO_CFG5_VT | \
510                          FIFO_CFG5_LE | FIFO_CFG5_FT | FIFO_CFG5_16 | \
511                          FIFO_CFG5_17 | FIFO_CFG5_SF)
512
513 static void ag71xx_hw_init(struct ag71xx *ag)
514 {
515         struct ag71xx_platform_data *pdata = ag71xx_get_pdata(ag);
516
517         ag71xx_sb(ag, AG71XX_REG_MAC_CFG1, MAC_CFG1_SR);
518         udelay(20);
519
520         ar71xx_device_stop(pdata->reset_bit);
521         mdelay(100);
522         ar71xx_device_start(pdata->reset_bit);
523         mdelay(100);
524
525         /* setup MAC configuration registers */
526         if (pdata->is_ar724x)
527                 ag71xx_wr(ag, AG71XX_REG_MAC_CFG1,
528                           MAC_CFG1_INIT | MAC_CFG1_TFC | MAC_CFG1_RFC);
529         else
530                 ag71xx_wr(ag, AG71XX_REG_MAC_CFG1, MAC_CFG1_INIT);
531
532         ag71xx_sb(ag, AG71XX_REG_MAC_CFG2,
533                   MAC_CFG2_PAD_CRC_EN | MAC_CFG2_LEN_CHECK);
534
535         /* setup max frame length */
536         ag71xx_wr(ag, AG71XX_REG_MAC_MFL, AG71XX_TX_MTU_LEN);
537
538         /* setup MII interface type */
539         ag71xx_mii_ctrl_set_if(ag, pdata->mii_if);
540
541         /* setup FIFO configuration registers */
542         ag71xx_wr(ag, AG71XX_REG_FIFO_CFG0, FIFO_CFG0_INIT);
543         if (pdata->is_ar724x) {
544                 ag71xx_wr(ag, AG71XX_REG_FIFO_CFG1, pdata->fifo_cfg1);
545                 ag71xx_wr(ag, AG71XX_REG_FIFO_CFG2, pdata->fifo_cfg2);
546         } else {
547                 ag71xx_wr(ag, AG71XX_REG_FIFO_CFG1, 0x0fff0000);
548                 ag71xx_wr(ag, AG71XX_REG_FIFO_CFG2, 0x00001fff);
549         }
550         ag71xx_wr(ag, AG71XX_REG_FIFO_CFG4, FIFO_CFG4_INIT);
551         ag71xx_wr(ag, AG71XX_REG_FIFO_CFG5, FIFO_CFG5_INIT);
552
553         ag71xx_dma_reset(ag);
554 }
555
556 static void ag71xx_hw_start(struct ag71xx *ag)
557 {
558         /* start RX engine */
559         ag71xx_wr(ag, AG71XX_REG_RX_CTRL, RX_CTRL_RXE);
560
561         /* enable interrupts */
562         ag71xx_wr(ag, AG71XX_REG_INT_ENABLE, AG71XX_INT_INIT);
563 }
564
565 static void ag71xx_hw_stop(struct ag71xx *ag)
566 {
567         /* disable all interrupts */
568         ag71xx_wr(ag, AG71XX_REG_INT_ENABLE, 0);
569
570         ag71xx_dma_reset(ag);
571 }
572
573 static int ag71xx_open(struct net_device *dev)
574 {
575         struct ag71xx *ag = netdev_priv(dev);
576         int ret;
577
578         ret = ag71xx_rings_init(ag);
579         if (ret)
580                 goto err;
581
582         napi_enable(&ag->napi);
583
584         netif_carrier_off(dev);
585         ag71xx_phy_start(ag);
586
587         ag71xx_wr(ag, AG71XX_REG_TX_DESC, ag->tx_ring.descs_dma);
588         ag71xx_wr(ag, AG71XX_REG_RX_DESC, ag->rx_ring.descs_dma);
589
590         ag71xx_hw_set_macaddr(ag, dev->dev_addr);
591
592         ag71xx_hw_start(ag);
593
594         netif_start_queue(dev);
595
596         return 0;
597
598  err:
599         ag71xx_rings_cleanup(ag);
600         return ret;
601 }
602
603 static int ag71xx_stop(struct net_device *dev)
604 {
605         struct ag71xx *ag = netdev_priv(dev);
606         unsigned long flags;
607
608         netif_carrier_off(dev);
609         ag71xx_phy_stop(ag);
610
611         spin_lock_irqsave(&ag->lock, flags);
612
613         netif_stop_queue(dev);
614
615         ag71xx_hw_stop(ag);
616
617         napi_disable(&ag->napi);
618         del_timer_sync(&ag->oom_timer);
619
620         spin_unlock_irqrestore(&ag->lock, flags);
621
622         ag71xx_rings_cleanup(ag);
623
624         return 0;
625 }
626
627 static netdev_tx_t ag71xx_hard_start_xmit(struct sk_buff *skb,
628                                           struct net_device *dev)
629 {
630         struct ag71xx *ag = netdev_priv(dev);
631         struct ag71xx_ring *ring = &ag->tx_ring;
632         struct ag71xx_desc *desc;
633         dma_addr_t dma_addr;
634         int i;
635
636         i = ring->curr % AG71XX_TX_RING_SIZE;
637         desc = ring->buf[i].desc;
638
639         if (!ag71xx_desc_empty(desc))
640                 goto err_drop;
641
642         if (ag71xx_has_ar8216(ag))
643                 ag71xx_add_ar8216_header(ag, skb);
644
645         if (skb->len <= 0) {
646                 DBG("%s: packet len is too small\n", ag->dev->name);
647                 goto err_drop;
648         }
649
650         dma_addr = dma_map_single(&dev->dev, skb->data, skb->len,
651                                   DMA_TO_DEVICE);
652
653         ring->buf[i].skb = skb;
654
655         /* setup descriptor fields */
656         desc->data = (u32) dma_addr;
657         desc->ctrl = (skb->len & DESC_PKTLEN_M);
658
659         /* flush descriptor */
660         wmb();
661
662         ring->curr++;
663         if (ring->curr == (ring->dirty + AG71XX_TX_THRES_STOP)) {
664                 DBG("%s: tx queue full\n", ag->dev->name);
665                 netif_stop_queue(dev);
666         }
667
668         DBG("%s: packet injected into TX queue\n", ag->dev->name);
669
670         /* enable TX engine */
671         ag71xx_wr(ag, AG71XX_REG_TX_CTRL, TX_CTRL_TXE);
672
673         return NETDEV_TX_OK;
674
675  err_drop:
676         dev->stats.tx_dropped++;
677
678         dev_kfree_skb(skb);
679         return NETDEV_TX_OK;
680 }
681
682 static int ag71xx_do_ioctl(struct net_device *dev, struct ifreq *ifr, int cmd)
683 {
684         struct mii_ioctl_data *data = (struct mii_ioctl_data *) &ifr->ifr_data;
685         struct ag71xx *ag = netdev_priv(dev);
686         int ret;
687
688         switch (cmd) {
689         case SIOCETHTOOL:
690                 if (ag->phy_dev == NULL)
691                         break;
692
693                 spin_lock_irq(&ag->lock);
694                 ret = phy_ethtool_ioctl(ag->phy_dev, (void *) ifr->ifr_data);
695                 spin_unlock_irq(&ag->lock);
696                 return ret;
697
698         case SIOCSIFHWADDR:
699                 if (copy_from_user
700                         (dev->dev_addr, ifr->ifr_data, sizeof(dev->dev_addr)))
701                         return -EFAULT;
702                 return 0;
703
704         case SIOCGIFHWADDR:
705                 if (copy_to_user
706                         (ifr->ifr_data, dev->dev_addr, sizeof(dev->dev_addr)))
707                         return -EFAULT;
708                 return 0;
709
710         case SIOCGMIIPHY:
711         case SIOCGMIIREG:
712         case SIOCSMIIREG:
713                 if (ag->phy_dev == NULL)
714                         break;
715
716                 return phy_mii_ioctl(ag->phy_dev, data, cmd);
717
718         default:
719                 break;
720         }
721
722         return -EOPNOTSUPP;
723 }
724
725 static void ag71xx_oom_timer_handler(unsigned long data)
726 {
727         struct net_device *dev = (struct net_device *) data;
728         struct ag71xx *ag = netdev_priv(dev);
729
730         napi_schedule(&ag->napi);
731 }
732
733 static void ag71xx_tx_timeout(struct net_device *dev)
734 {
735         struct ag71xx *ag = netdev_priv(dev);
736
737         if (netif_msg_tx_err(ag))
738                 printk(KERN_DEBUG "%s: tx timeout\n", ag->dev->name);
739
740         schedule_work(&ag->restart_work);
741 }
742
743 static void ag71xx_restart_work_func(struct work_struct *work)
744 {
745         struct ag71xx *ag = container_of(work, struct ag71xx, restart_work);
746
747         ag71xx_stop(ag->dev);
748         ag71xx_open(ag->dev);
749 }
750
751 static int ag71xx_tx_packets(struct ag71xx *ag)
752 {
753         struct ag71xx_ring *ring = &ag->tx_ring;
754         int sent;
755
756         DBG("%s: processing TX ring\n", ag->dev->name);
757
758         sent = 0;
759         while (ring->dirty != ring->curr) {
760                 unsigned int i = ring->dirty % AG71XX_TX_RING_SIZE;
761                 struct ag71xx_desc *desc = ring->buf[i].desc;
762                 struct sk_buff *skb = ring->buf[i].skb;
763
764                 if (!ag71xx_desc_empty(desc))
765                         break;
766
767                 ag71xx_wr(ag, AG71XX_REG_TX_STATUS, TX_STATUS_PS);
768
769                 ag->dev->stats.tx_bytes += skb->len;
770                 ag->dev->stats.tx_packets++;
771
772                 dev_kfree_skb_any(skb);
773                 ring->buf[i].skb = NULL;
774
775                 ring->dirty++;
776                 sent++;
777         }
778
779         DBG("%s: %d packets sent out\n", ag->dev->name, sent);
780
781         if ((ring->curr - ring->dirty) < AG71XX_TX_THRES_WAKEUP)
782                 netif_wake_queue(ag->dev);
783
784         return sent;
785 }
786
787 static int ag71xx_rx_packets(struct ag71xx *ag, int limit)
788 {
789         struct net_device *dev = ag->dev;
790         struct ag71xx_ring *ring = &ag->rx_ring;
791         int done = 0;
792
793         DBG("%s: rx packets, limit=%d, curr=%u, dirty=%u\n",
794                         dev->name, limit, ring->curr, ring->dirty);
795
796         while (done < limit) {
797                 unsigned int i = ring->curr % AG71XX_RX_RING_SIZE;
798                 struct ag71xx_desc *desc = ring->buf[i].desc;
799                 struct sk_buff *skb;
800                 int pktlen;
801                 int err = 0;
802
803                 if (ag71xx_desc_empty(desc))
804                         break;
805
806                 if ((ring->dirty + AG71XX_RX_RING_SIZE) == ring->curr) {
807                         ag71xx_assert(0);
808                         break;
809                 }
810
811                 ag71xx_wr(ag, AG71XX_REG_RX_STATUS, RX_STATUS_PR);
812
813                 skb = ring->buf[i].skb;
814                 pktlen = ag71xx_desc_pktlen(desc);
815                 pktlen -= ETH_FCS_LEN;
816
817                 dma_unmap_single(&dev->dev, ring->buf[i].dma_addr,
818                                  AG71XX_RX_PKT_SIZE, DMA_FROM_DEVICE);
819
820                 dev->last_rx = jiffies;
821                 dev->stats.rx_packets++;
822                 dev->stats.rx_bytes += pktlen;
823
824                 skb_put(skb, pktlen);
825                 if (ag71xx_has_ar8216(ag))
826                         err = ag71xx_remove_ar8216_header(ag, skb, pktlen);
827
828                 if (err) {
829                         dev->stats.rx_dropped++;
830                         kfree_skb(skb);
831                 } else {
832                         skb->dev = dev;
833                         skb->ip_summed = CHECKSUM_NONE;
834                         if (ag->phy_dev) {
835                                 ag->phy_dev->netif_receive_skb(skb);
836                         } else {
837                                 skb->protocol = eth_type_trans(skb, dev);
838                                 netif_receive_skb(skb);
839                         }
840                 }
841
842                 ring->buf[i].skb = NULL;
843                 done++;
844
845                 ring->curr++;
846         }
847
848         ag71xx_ring_rx_refill(ag);
849
850         DBG("%s: rx finish, curr=%u, dirty=%u, done=%d\n",
851                 dev->name, ring->curr, ring->dirty, done);
852
853         return done;
854 }
855
856 static int ag71xx_poll(struct napi_struct *napi, int limit)
857 {
858         struct ag71xx *ag = container_of(napi, struct ag71xx, napi);
859         struct ag71xx_platform_data *pdata = ag71xx_get_pdata(ag);
860         struct net_device *dev = ag->dev;
861         struct ag71xx_ring *rx_ring;
862         unsigned long flags;
863         u32 status;
864         int tx_done;
865         int rx_done;
866
867         pdata->ddr_flush();
868         tx_done = ag71xx_tx_packets(ag);
869
870         DBG("%s: processing RX ring\n", dev->name);
871         rx_done = ag71xx_rx_packets(ag, limit);
872
873         ag71xx_debugfs_update_napi_stats(ag, rx_done, tx_done);
874
875         rx_ring = &ag->rx_ring;
876         if (rx_ring->buf[rx_ring->dirty % AG71XX_RX_RING_SIZE].skb == NULL)
877                 goto oom;
878
879         status = ag71xx_rr(ag, AG71XX_REG_RX_STATUS);
880         if (unlikely(status & RX_STATUS_OF)) {
881                 ag71xx_wr(ag, AG71XX_REG_RX_STATUS, RX_STATUS_OF);
882                 dev->stats.rx_fifo_errors++;
883
884                 /* restart RX */
885                 ag71xx_wr(ag, AG71XX_REG_RX_CTRL, RX_CTRL_RXE);
886         }
887
888         if (rx_done < limit) {
889                 if (status & RX_STATUS_PR)
890                         goto more;
891
892                 status = ag71xx_rr(ag, AG71XX_REG_TX_STATUS);
893                 if (status & TX_STATUS_PS)
894                         goto more;
895
896                 DBG("%s: disable polling mode, rx=%d, tx=%d,limit=%d\n",
897                         dev->name, rx_done, tx_done, limit);
898
899                 napi_complete(napi);
900
901                 /* enable interrupts */
902                 spin_lock_irqsave(&ag->lock, flags);
903                 ag71xx_int_enable(ag, AG71XX_INT_POLL);
904                 spin_unlock_irqrestore(&ag->lock, flags);
905                 return rx_done;
906         }
907
908  more:
909         DBG("%s: stay in polling mode, rx=%d, tx=%d, limit=%d\n",
910                         dev->name, rx_done, tx_done, limit);
911         return rx_done;
912
913  oom:
914         if (netif_msg_rx_err(ag))
915                 printk(KERN_DEBUG "%s: out of memory\n", dev->name);
916
917         mod_timer(&ag->oom_timer, jiffies + AG71XX_OOM_REFILL);
918         napi_complete(napi);
919         return 0;
920 }
921
922 static irqreturn_t ag71xx_interrupt(int irq, void *dev_id)
923 {
924         struct net_device *dev = dev_id;
925         struct ag71xx *ag = netdev_priv(dev);
926         u32 status;
927
928         status = ag71xx_rr(ag, AG71XX_REG_INT_STATUS);
929         ag71xx_dump_intr(ag, "raw", status);
930
931         if (unlikely(!status))
932                 return IRQ_NONE;
933
934         if (unlikely(status & AG71XX_INT_ERR)) {
935                 if (status & AG71XX_INT_TX_BE) {
936                         ag71xx_wr(ag, AG71XX_REG_TX_STATUS, TX_STATUS_BE);
937                         dev_err(&dev->dev, "TX BUS error\n");
938                 }
939                 if (status & AG71XX_INT_RX_BE) {
940                         ag71xx_wr(ag, AG71XX_REG_RX_STATUS, RX_STATUS_BE);
941                         dev_err(&dev->dev, "RX BUS error\n");
942                 }
943         }
944
945         if (likely(status & AG71XX_INT_POLL)) {
946                 ag71xx_int_disable(ag, AG71XX_INT_POLL);
947                 DBG("%s: enable polling mode\n", dev->name);
948                 napi_schedule(&ag->napi);
949         }
950
951         ag71xx_debugfs_update_int_stats(ag, status);
952
953         return IRQ_HANDLED;
954 }
955
956 static void ag71xx_set_multicast_list(struct net_device *dev)
957 {
958         /* TODO */
959 }
960
961 #ifdef CONFIG_NET_POLL_CONTROLLER
962 /*
963  * Polling 'interrupt' - used by things like netconsole to send skbs
964  * without having to re-enable interrupts. It's not called while
965  * the interrupt routine is executing.
966  */
967 static void ag71xx_netpoll(struct net_device *dev)
968 {
969         disable_irq(dev->irq);
970         ag71xx_interrupt(dev->irq, dev);
971         enable_irq(dev->irq);
972 }
973 #endif
974
975 static const struct net_device_ops ag71xx_netdev_ops = {
976         .ndo_open               = ag71xx_open,
977         .ndo_stop               = ag71xx_stop,
978         .ndo_start_xmit         = ag71xx_hard_start_xmit,
979         .ndo_set_multicast_list = ag71xx_set_multicast_list,
980         .ndo_do_ioctl           = ag71xx_do_ioctl,
981         .ndo_tx_timeout         = ag71xx_tx_timeout,
982         .ndo_change_mtu         = eth_change_mtu,
983         .ndo_set_mac_address    = eth_mac_addr,
984         .ndo_validate_addr      = eth_validate_addr,
985 #ifdef CONFIG_NET_POLL_CONTROLLER
986         .ndo_poll_controller    = ag71xx_netpoll,
987 #endif
988 };
989
990 static int __init ag71xx_probe(struct platform_device *pdev)
991 {
992         struct net_device *dev;
993         struct resource *res;
994         struct ag71xx *ag;
995         struct ag71xx_platform_data *pdata;
996         int err;
997
998         pdata = pdev->dev.platform_data;
999         if (!pdata) {
1000                 dev_err(&pdev->dev, "no platform data specified\n");
1001                 err = -ENXIO;
1002                 goto err_out;
1003         }
1004
1005         if (pdata->mii_bus_dev == NULL) {
1006                 dev_err(&pdev->dev, "no MII bus device specified\n");
1007                 err = -EINVAL;
1008                 goto err_out;
1009         }
1010
1011         dev = alloc_etherdev(sizeof(*ag));
1012         if (!dev) {
1013                 dev_err(&pdev->dev, "alloc_etherdev failed\n");
1014                 err = -ENOMEM;
1015                 goto err_out;
1016         }
1017
1018         SET_NETDEV_DEV(dev, &pdev->dev);
1019
1020         ag = netdev_priv(dev);
1021         ag->pdev = pdev;
1022         ag->dev = dev;
1023         ag->msg_enable = netif_msg_init(ag71xx_msg_level,
1024                                         AG71XX_DEFAULT_MSG_ENABLE);
1025         spin_lock_init(&ag->lock);
1026
1027         res = platform_get_resource_byname(pdev, IORESOURCE_MEM, "mac_base");
1028         if (!res) {
1029                 dev_err(&pdev->dev, "no mac_base resource found\n");
1030                 err = -ENXIO;
1031                 goto err_out;
1032         }
1033
1034         ag->mac_base = ioremap_nocache(res->start, res->end - res->start + 1);
1035         if (!ag->mac_base) {
1036                 dev_err(&pdev->dev, "unable to ioremap mac_base\n");
1037                 err = -ENOMEM;
1038                 goto err_free_dev;
1039         }
1040
1041         res = platform_get_resource_byname(pdev, IORESOURCE_MEM, "mii_ctrl");
1042         if (!res) {
1043                 dev_err(&pdev->dev, "no mii_ctrl resource found\n");
1044                 err = -ENXIO;
1045                 goto err_unmap_base;
1046         }
1047
1048         ag->mii_ctrl = ioremap_nocache(res->start, res->end - res->start + 1);
1049         if (!ag->mii_ctrl) {
1050                 dev_err(&pdev->dev, "unable to ioremap mii_ctrl\n");
1051                 err = -ENOMEM;
1052                 goto err_unmap_base;
1053         }
1054
1055         dev->irq = platform_get_irq(pdev, 0);
1056         err = request_irq(dev->irq, ag71xx_interrupt,
1057                           IRQF_DISABLED | IRQF_SAMPLE_RANDOM,
1058                           dev->name, dev);
1059         if (err) {
1060                 dev_err(&pdev->dev, "unable to request IRQ %d\n", dev->irq);
1061                 goto err_unmap_mii_ctrl;
1062         }
1063
1064         dev->base_addr = (unsigned long)ag->mac_base;
1065         dev->netdev_ops = &ag71xx_netdev_ops;
1066         dev->ethtool_ops = &ag71xx_ethtool_ops;
1067
1068         INIT_WORK(&ag->restart_work, ag71xx_restart_work_func);
1069
1070         init_timer(&ag->oom_timer);
1071         ag->oom_timer.data = (unsigned long) dev;
1072         ag->oom_timer.function = ag71xx_oom_timer_handler;
1073
1074         memcpy(dev->dev_addr, pdata->mac_addr, ETH_ALEN);
1075
1076         netif_napi_add(dev, &ag->napi, ag71xx_poll, AG71XX_NAPI_WEIGHT);
1077
1078         err = register_netdev(dev);
1079         if (err) {
1080                 dev_err(&pdev->dev, "unable to register net device\n");
1081                 goto err_free_irq;
1082         }
1083
1084         printk(KERN_INFO "%s: Atheros AG71xx at 0x%08lx, irq %d\n",
1085                dev->name, dev->base_addr, dev->irq);
1086
1087         ag71xx_dump_regs(ag);
1088
1089         ag71xx_hw_init(ag);
1090
1091         ag71xx_dump_regs(ag);
1092
1093         err = ag71xx_phy_connect(ag);
1094         if (err)
1095                 goto err_unregister_netdev;
1096
1097         err = ag71xx_debugfs_init(ag);
1098         if (err)
1099                 goto err_phy_disconnect;
1100
1101         platform_set_drvdata(pdev, dev);
1102
1103         return 0;
1104
1105  err_phy_disconnect:
1106         ag71xx_phy_disconnect(ag);
1107  err_unregister_netdev:
1108         unregister_netdev(dev);
1109  err_free_irq:
1110         free_irq(dev->irq, dev);
1111  err_unmap_mii_ctrl:
1112         iounmap(ag->mii_ctrl);
1113  err_unmap_base:
1114         iounmap(ag->mac_base);
1115  err_free_dev:
1116         kfree(dev);
1117  err_out:
1118         platform_set_drvdata(pdev, NULL);
1119         return err;
1120 }
1121
1122 static int __exit ag71xx_remove(struct platform_device *pdev)
1123 {
1124         struct net_device *dev = platform_get_drvdata(pdev);
1125
1126         if (dev) {
1127                 struct ag71xx *ag = netdev_priv(dev);
1128
1129                 ag71xx_debugfs_exit(ag);
1130                 ag71xx_phy_disconnect(ag);
1131                 unregister_netdev(dev);
1132                 free_irq(dev->irq, dev);
1133                 iounmap(ag->mii_ctrl);
1134                 iounmap(ag->mac_base);
1135                 kfree(dev);
1136                 platform_set_drvdata(pdev, NULL);
1137         }
1138
1139         return 0;
1140 }
1141
1142 static struct platform_driver ag71xx_driver = {
1143         .probe          = ag71xx_probe,
1144         .remove         = __exit_p(ag71xx_remove),
1145         .driver = {
1146                 .name   = AG71XX_DRV_NAME,
1147         }
1148 };
1149
1150 static int __init ag71xx_module_init(void)
1151 {
1152         int ret;
1153
1154         ret = ag71xx_debugfs_root_init();
1155         if (ret)
1156                 goto err_out;
1157
1158         ret = ag71xx_mdio_driver_init();
1159         if (ret)
1160                 goto err_debugfs_exit;
1161
1162         ret = platform_driver_register(&ag71xx_driver);
1163         if (ret)
1164                 goto err_mdio_exit;
1165
1166         return 0;
1167
1168  err_mdio_exit:
1169         ag71xx_mdio_driver_exit();
1170  err_debugfs_exit:
1171         ag71xx_debugfs_root_exit();
1172  err_out:
1173         return ret;
1174 }
1175
1176 static void __exit ag71xx_module_exit(void)
1177 {
1178         platform_driver_unregister(&ag71xx_driver);
1179         ag71xx_mdio_driver_exit();
1180         ag71xx_debugfs_root_exit();
1181 }
1182
1183 module_init(ag71xx_module_init);
1184 module_exit(ag71xx_module_exit);
1185
1186 MODULE_VERSION(AG71XX_DRV_VERSION);
1187 MODULE_AUTHOR("Gabor Juhos <juhosg@openwrt.org>");
1188 MODULE_AUTHOR("Imre Kaloz <kaloz@openwrt.org>");
1189 MODULE_LICENSE("GPL v2");
1190 MODULE_ALIAS("platform:" AG71XX_DRV_NAME);