xref: /linux/drivers/net/wireless/ath/ath9k/hif_usb.c (revision ff5599816711d2e67da2d7561fd36ac48debd433)
1 /*
2  * Copyright (c) 2010-2011 Atheros Communications Inc.
3  *
4  * Permission to use, copy, modify, and/or distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
11  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
13  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
14  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #include <asm/unaligned.h>
18 #include "htc.h"
19 
20 /* identify firmware images */
21 #define FIRMWARE_AR7010_1_1     "htc_7010.fw"
22 #define FIRMWARE_AR9271         "htc_9271.fw"
23 
24 MODULE_FIRMWARE(FIRMWARE_AR7010_1_1);
25 MODULE_FIRMWARE(FIRMWARE_AR9271);
26 
27 static struct usb_device_id ath9k_hif_usb_ids[] = {
28 	{ USB_DEVICE(0x0cf3, 0x9271) }, /* Atheros */
29 	{ USB_DEVICE(0x0cf3, 0x1006) }, /* Atheros */
30 	{ USB_DEVICE(0x0846, 0x9030) }, /* Netgear N150 */
31 	{ USB_DEVICE(0x07D1, 0x3A10) }, /* Dlink Wireless 150 */
32 	{ USB_DEVICE(0x13D3, 0x3327) }, /* Azurewave */
33 	{ USB_DEVICE(0x13D3, 0x3328) }, /* Azurewave */
34 	{ USB_DEVICE(0x13D3, 0x3346) }, /* IMC Networks */
35 	{ USB_DEVICE(0x13D3, 0x3348) }, /* Azurewave */
36 	{ USB_DEVICE(0x13D3, 0x3349) }, /* Azurewave */
37 	{ USB_DEVICE(0x13D3, 0x3350) }, /* Azurewave */
38 	{ USB_DEVICE(0x04CA, 0x4605) }, /* Liteon */
39 	{ USB_DEVICE(0x040D, 0x3801) }, /* VIA */
40 	{ USB_DEVICE(0x0cf3, 0xb003) }, /* Ubiquiti WifiStation Ext */
41 	{ USB_DEVICE(0x0cf3, 0xb002) }, /* Ubiquiti WifiStation */
42 	{ USB_DEVICE(0x057c, 0x8403) }, /* AVM FRITZ!WLAN 11N v2 USB */
43 
44 	{ USB_DEVICE(0x0cf3, 0x7015),
45 	  .driver_info = AR9287_USB },  /* Atheros */
46 	{ USB_DEVICE(0x1668, 0x1200),
47 	  .driver_info = AR9287_USB },  /* Verizon */
48 
49 	{ USB_DEVICE(0x0cf3, 0x7010),
50 	  .driver_info = AR9280_USB },  /* Atheros */
51 	{ USB_DEVICE(0x0846, 0x9018),
52 	  .driver_info = AR9280_USB },  /* Netgear WNDA3200 */
53 	{ USB_DEVICE(0x083A, 0xA704),
54 	  .driver_info = AR9280_USB },  /* SMC Networks */
55 	{ USB_DEVICE(0x0411, 0x017f),
56 	  .driver_info = AR9280_USB },  /* Sony UWA-BR100 */
57 	{ USB_DEVICE(0x04da, 0x3904),
58 	  .driver_info = AR9280_USB },
59 
60 	{ USB_DEVICE(0x0cf3, 0x20ff),
61 	  .driver_info = STORAGE_DEVICE },
62 
63 	{ },
64 };
65 
66 MODULE_DEVICE_TABLE(usb, ath9k_hif_usb_ids);
67 
68 static int __hif_usb_tx(struct hif_device_usb *hif_dev);
69 
70 static void hif_usb_regout_cb(struct urb *urb)
71 {
72 	struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
73 
74 	switch (urb->status) {
75 	case 0:
76 		break;
77 	case -ENOENT:
78 	case -ECONNRESET:
79 	case -ENODEV:
80 	case -ESHUTDOWN:
81 		goto free;
82 	default:
83 		break;
84 	}
85 
86 	if (cmd) {
87 		ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
88 					  cmd->skb, true);
89 		kfree(cmd);
90 	}
91 
92 	return;
93 free:
94 	kfree_skb(cmd->skb);
95 	kfree(cmd);
96 }
97 
98 static int hif_usb_send_regout(struct hif_device_usb *hif_dev,
99 			       struct sk_buff *skb)
100 {
101 	struct urb *urb;
102 	struct cmd_buf *cmd;
103 	int ret = 0;
104 
105 	urb = usb_alloc_urb(0, GFP_KERNEL);
106 	if (urb == NULL)
107 		return -ENOMEM;
108 
109 	cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
110 	if (cmd == NULL) {
111 		usb_free_urb(urb);
112 		return -ENOMEM;
113 	}
114 
115 	cmd->skb = skb;
116 	cmd->hif_dev = hif_dev;
117 
118 	usb_fill_bulk_urb(urb, hif_dev->udev,
119 			 usb_sndbulkpipe(hif_dev->udev, USB_REG_OUT_PIPE),
120 			 skb->data, skb->len,
121 			 hif_usb_regout_cb, cmd);
122 
123 	usb_anchor_urb(urb, &hif_dev->regout_submitted);
124 	ret = usb_submit_urb(urb, GFP_KERNEL);
125 	if (ret) {
126 		usb_unanchor_urb(urb);
127 		kfree(cmd);
128 	}
129 	usb_free_urb(urb);
130 
131 	return ret;
132 }
133 
134 static void hif_usb_mgmt_cb(struct urb *urb)
135 {
136 	struct cmd_buf *cmd = (struct cmd_buf *)urb->context;
137 	struct hif_device_usb *hif_dev;
138 	bool txok = true;
139 
140 	if (!cmd || !cmd->skb || !cmd->hif_dev)
141 		return;
142 
143 	hif_dev = cmd->hif_dev;
144 
145 	switch (urb->status) {
146 	case 0:
147 		break;
148 	case -ENOENT:
149 	case -ECONNRESET:
150 	case -ENODEV:
151 	case -ESHUTDOWN:
152 		txok = false;
153 
154 		/*
155 		 * If the URBs are being flushed, no need to complete
156 		 * this packet.
157 		 */
158 		spin_lock(&hif_dev->tx.tx_lock);
159 		if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
160 			spin_unlock(&hif_dev->tx.tx_lock);
161 			dev_kfree_skb_any(cmd->skb);
162 			kfree(cmd);
163 			return;
164 		}
165 		spin_unlock(&hif_dev->tx.tx_lock);
166 
167 		break;
168 	default:
169 		txok = false;
170 		break;
171 	}
172 
173 	skb_pull(cmd->skb, 4);
174 	ath9k_htc_txcompletion_cb(cmd->hif_dev->htc_handle,
175 				  cmd->skb, txok);
176 	kfree(cmd);
177 }
178 
179 static int hif_usb_send_mgmt(struct hif_device_usb *hif_dev,
180 			     struct sk_buff *skb)
181 {
182 	struct urb *urb;
183 	struct cmd_buf *cmd;
184 	int ret = 0;
185 	__le16 *hdr;
186 
187 	urb = usb_alloc_urb(0, GFP_ATOMIC);
188 	if (urb == NULL)
189 		return -ENOMEM;
190 
191 	cmd = kzalloc(sizeof(*cmd), GFP_ATOMIC);
192 	if (cmd == NULL) {
193 		usb_free_urb(urb);
194 		return -ENOMEM;
195 	}
196 
197 	cmd->skb = skb;
198 	cmd->hif_dev = hif_dev;
199 
200 	hdr = (__le16 *) skb_push(skb, 4);
201 	*hdr++ = cpu_to_le16(skb->len - 4);
202 	*hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
203 
204 	usb_fill_bulk_urb(urb, hif_dev->udev,
205 			 usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
206 			 skb->data, skb->len,
207 			 hif_usb_mgmt_cb, cmd);
208 
209 	usb_anchor_urb(urb, &hif_dev->mgmt_submitted);
210 	ret = usb_submit_urb(urb, GFP_ATOMIC);
211 	if (ret) {
212 		usb_unanchor_urb(urb);
213 		kfree(cmd);
214 	}
215 	usb_free_urb(urb);
216 
217 	return ret;
218 }
219 
220 static inline void ath9k_skb_queue_purge(struct hif_device_usb *hif_dev,
221 					 struct sk_buff_head *list)
222 {
223 	struct sk_buff *skb;
224 
225 	while ((skb = __skb_dequeue(list)) != NULL) {
226 		dev_kfree_skb_any(skb);
227 	}
228 }
229 
230 static inline void ath9k_skb_queue_complete(struct hif_device_usb *hif_dev,
231 					    struct sk_buff_head *queue,
232 					    bool txok)
233 {
234 	struct sk_buff *skb;
235 
236 	while ((skb = __skb_dequeue(queue)) != NULL) {
237 #ifdef CONFIG_ATH9K_HTC_DEBUGFS
238 		int ln = skb->len;
239 #endif
240 		ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
241 					  skb, txok);
242 		if (txok) {
243 			TX_STAT_INC(skb_success);
244 			TX_STAT_ADD(skb_success_bytes, ln);
245 		}
246 		else
247 			TX_STAT_INC(skb_failed);
248 	}
249 }
250 
251 static void hif_usb_tx_cb(struct urb *urb)
252 {
253 	struct tx_buf *tx_buf = (struct tx_buf *) urb->context;
254 	struct hif_device_usb *hif_dev;
255 	bool txok = true;
256 
257 	if (!tx_buf || !tx_buf->hif_dev)
258 		return;
259 
260 	hif_dev = tx_buf->hif_dev;
261 
262 	switch (urb->status) {
263 	case 0:
264 		break;
265 	case -ENOENT:
266 	case -ECONNRESET:
267 	case -ENODEV:
268 	case -ESHUTDOWN:
269 		txok = false;
270 
271 		/*
272 		 * If the URBs are being flushed, no need to add this
273 		 * URB to the free list.
274 		 */
275 		spin_lock(&hif_dev->tx.tx_lock);
276 		if (hif_dev->tx.flags & HIF_USB_TX_FLUSH) {
277 			spin_unlock(&hif_dev->tx.tx_lock);
278 			ath9k_skb_queue_purge(hif_dev, &tx_buf->skb_queue);
279 			return;
280 		}
281 		spin_unlock(&hif_dev->tx.tx_lock);
282 
283 		break;
284 	default:
285 		txok = false;
286 		break;
287 	}
288 
289 	ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, txok);
290 
291 	/* Re-initialize the SKB queue */
292 	tx_buf->len = tx_buf->offset = 0;
293 	__skb_queue_head_init(&tx_buf->skb_queue);
294 
295 	/* Add this TX buffer to the free list */
296 	spin_lock(&hif_dev->tx.tx_lock);
297 	list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
298 	hif_dev->tx.tx_buf_cnt++;
299 	if (!(hif_dev->tx.flags & HIF_USB_TX_STOP))
300 		__hif_usb_tx(hif_dev); /* Check for pending SKBs */
301 	TX_STAT_INC(buf_completed);
302 	spin_unlock(&hif_dev->tx.tx_lock);
303 }
304 
305 /* TX lock has to be taken */
306 static int __hif_usb_tx(struct hif_device_usb *hif_dev)
307 {
308 	struct tx_buf *tx_buf = NULL;
309 	struct sk_buff *nskb = NULL;
310 	int ret = 0, i;
311 	u16 tx_skb_cnt = 0;
312 	u8 *buf;
313 	__le16 *hdr;
314 
315 	if (hif_dev->tx.tx_skb_cnt == 0)
316 		return 0;
317 
318 	/* Check if a free TX buffer is available */
319 	if (list_empty(&hif_dev->tx.tx_buf))
320 		return 0;
321 
322 	tx_buf = list_first_entry(&hif_dev->tx.tx_buf, struct tx_buf, list);
323 	list_move_tail(&tx_buf->list, &hif_dev->tx.tx_pending);
324 	hif_dev->tx.tx_buf_cnt--;
325 
326 	tx_skb_cnt = min_t(u16, hif_dev->tx.tx_skb_cnt, MAX_TX_AGGR_NUM);
327 
328 	for (i = 0; i < tx_skb_cnt; i++) {
329 		nskb = __skb_dequeue(&hif_dev->tx.tx_skb_queue);
330 
331 		/* Should never be NULL */
332 		BUG_ON(!nskb);
333 
334 		hif_dev->tx.tx_skb_cnt--;
335 
336 		buf = tx_buf->buf;
337 		buf += tx_buf->offset;
338 		hdr = (__le16 *)buf;
339 		*hdr++ = cpu_to_le16(nskb->len);
340 		*hdr++ = cpu_to_le16(ATH_USB_TX_STREAM_MODE_TAG);
341 		buf += 4;
342 		memcpy(buf, nskb->data, nskb->len);
343 		tx_buf->len = nskb->len + 4;
344 
345 		if (i < (tx_skb_cnt - 1))
346 			tx_buf->offset += (((tx_buf->len - 1) / 4) + 1) * 4;
347 
348 		if (i == (tx_skb_cnt - 1))
349 			tx_buf->len += tx_buf->offset;
350 
351 		__skb_queue_tail(&tx_buf->skb_queue, nskb);
352 		TX_STAT_INC(skb_queued);
353 	}
354 
355 	usb_fill_bulk_urb(tx_buf->urb, hif_dev->udev,
356 			  usb_sndbulkpipe(hif_dev->udev, USB_WLAN_TX_PIPE),
357 			  tx_buf->buf, tx_buf->len,
358 			  hif_usb_tx_cb, tx_buf);
359 
360 	ret = usb_submit_urb(tx_buf->urb, GFP_ATOMIC);
361 	if (ret) {
362 		tx_buf->len = tx_buf->offset = 0;
363 		ath9k_skb_queue_complete(hif_dev, &tx_buf->skb_queue, false);
364 		__skb_queue_head_init(&tx_buf->skb_queue);
365 		list_move_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
366 		hif_dev->tx.tx_buf_cnt++;
367 	}
368 
369 	if (!ret)
370 		TX_STAT_INC(buf_queued);
371 
372 	return ret;
373 }
374 
375 static int hif_usb_send_tx(struct hif_device_usb *hif_dev, struct sk_buff *skb)
376 {
377 	struct ath9k_htc_tx_ctl *tx_ctl;
378 	unsigned long flags;
379 	int ret = 0;
380 
381 	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
382 
383 	if (hif_dev->tx.flags & HIF_USB_TX_STOP) {
384 		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
385 		return -ENODEV;
386 	}
387 
388 	/* Check if the max queue count has been reached */
389 	if (hif_dev->tx.tx_skb_cnt > MAX_TX_BUF_NUM) {
390 		spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
391 		return -ENOMEM;
392 	}
393 
394 	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
395 
396 	tx_ctl = HTC_SKB_CB(skb);
397 
398 	/* Mgmt/Beacon frames don't use the TX buffer pool */
399 	if ((tx_ctl->type == ATH9K_HTC_MGMT) ||
400 	    (tx_ctl->type == ATH9K_HTC_BEACON)) {
401 		ret = hif_usb_send_mgmt(hif_dev, skb);
402 	}
403 
404 	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
405 
406 	if ((tx_ctl->type == ATH9K_HTC_NORMAL) ||
407 	    (tx_ctl->type == ATH9K_HTC_AMPDU)) {
408 		__skb_queue_tail(&hif_dev->tx.tx_skb_queue, skb);
409 		hif_dev->tx.tx_skb_cnt++;
410 	}
411 
412 	/* Check if AMPDUs have to be sent immediately */
413 	if ((hif_dev->tx.tx_buf_cnt == MAX_TX_URB_NUM) &&
414 	    (hif_dev->tx.tx_skb_cnt < 2)) {
415 		__hif_usb_tx(hif_dev);
416 	}
417 
418 	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
419 
420 	return ret;
421 }
422 
423 static void hif_usb_start(void *hif_handle)
424 {
425 	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
426 	unsigned long flags;
427 
428 	hif_dev->flags |= HIF_USB_START;
429 
430 	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
431 	hif_dev->tx.flags &= ~HIF_USB_TX_STOP;
432 	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
433 }
434 
435 static void hif_usb_stop(void *hif_handle)
436 {
437 	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
438 	struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
439 	unsigned long flags;
440 
441 	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
442 	ath9k_skb_queue_complete(hif_dev, &hif_dev->tx.tx_skb_queue, false);
443 	hif_dev->tx.tx_skb_cnt = 0;
444 	hif_dev->tx.flags |= HIF_USB_TX_STOP;
445 	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
446 
447 	/* The pending URBs have to be canceled. */
448 	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
449 				 &hif_dev->tx.tx_pending, list) {
450 		usb_kill_urb(tx_buf->urb);
451 	}
452 
453 	usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
454 }
455 
456 static int hif_usb_send(void *hif_handle, u8 pipe_id, struct sk_buff *skb)
457 {
458 	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
459 	int ret = 0;
460 
461 	switch (pipe_id) {
462 	case USB_WLAN_TX_PIPE:
463 		ret = hif_usb_send_tx(hif_dev, skb);
464 		break;
465 	case USB_REG_OUT_PIPE:
466 		ret = hif_usb_send_regout(hif_dev, skb);
467 		break;
468 	default:
469 		dev_err(&hif_dev->udev->dev,
470 			"ath9k_htc: Invalid TX pipe: %d\n", pipe_id);
471 		ret = -EINVAL;
472 		break;
473 	}
474 
475 	return ret;
476 }
477 
478 static inline bool check_index(struct sk_buff *skb, u8 idx)
479 {
480 	struct ath9k_htc_tx_ctl *tx_ctl;
481 
482 	tx_ctl = HTC_SKB_CB(skb);
483 
484 	if ((tx_ctl->type == ATH9K_HTC_AMPDU) &&
485 	    (tx_ctl->sta_idx == idx))
486 		return true;
487 
488 	return false;
489 }
490 
491 static void hif_usb_sta_drain(void *hif_handle, u8 idx)
492 {
493 	struct hif_device_usb *hif_dev = (struct hif_device_usb *)hif_handle;
494 	struct sk_buff *skb, *tmp;
495 	unsigned long flags;
496 
497 	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
498 
499 	skb_queue_walk_safe(&hif_dev->tx.tx_skb_queue, skb, tmp) {
500 		if (check_index(skb, idx)) {
501 			__skb_unlink(skb, &hif_dev->tx.tx_skb_queue);
502 			ath9k_htc_txcompletion_cb(hif_dev->htc_handle,
503 						  skb, false);
504 			hif_dev->tx.tx_skb_cnt--;
505 			TX_STAT_INC(skb_failed);
506 		}
507 	}
508 
509 	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
510 }
511 
512 static struct ath9k_htc_hif hif_usb = {
513 	.transport = ATH9K_HIF_USB,
514 	.name = "ath9k_hif_usb",
515 
516 	.control_ul_pipe = USB_REG_OUT_PIPE,
517 	.control_dl_pipe = USB_REG_IN_PIPE,
518 
519 	.start = hif_usb_start,
520 	.stop = hif_usb_stop,
521 	.sta_drain = hif_usb_sta_drain,
522 	.send = hif_usb_send,
523 };
524 
525 static void ath9k_hif_usb_rx_stream(struct hif_device_usb *hif_dev,
526 				    struct sk_buff *skb)
527 {
528 	struct sk_buff *nskb, *skb_pool[MAX_PKT_NUM_IN_TRANSFER];
529 	int index = 0, i = 0, len = skb->len;
530 	int rx_remain_len, rx_pkt_len;
531 	u16 pool_index = 0;
532 	u8 *ptr;
533 
534 	spin_lock(&hif_dev->rx_lock);
535 
536 	rx_remain_len = hif_dev->rx_remain_len;
537 	rx_pkt_len = hif_dev->rx_transfer_len;
538 
539 	if (rx_remain_len != 0) {
540 		struct sk_buff *remain_skb = hif_dev->remain_skb;
541 
542 		if (remain_skb) {
543 			ptr = (u8 *) remain_skb->data;
544 
545 			index = rx_remain_len;
546 			rx_remain_len -= hif_dev->rx_pad_len;
547 			ptr += rx_pkt_len;
548 
549 			memcpy(ptr, skb->data, rx_remain_len);
550 
551 			rx_pkt_len += rx_remain_len;
552 			hif_dev->rx_remain_len = 0;
553 			skb_put(remain_skb, rx_pkt_len);
554 
555 			skb_pool[pool_index++] = remain_skb;
556 
557 		} else {
558 			index = rx_remain_len;
559 		}
560 	}
561 
562 	spin_unlock(&hif_dev->rx_lock);
563 
564 	while (index < len) {
565 		u16 pkt_len;
566 		u16 pkt_tag;
567 		u16 pad_len;
568 		int chk_idx;
569 
570 		ptr = (u8 *) skb->data;
571 
572 		pkt_len = get_unaligned_le16(ptr + index);
573 		pkt_tag = get_unaligned_le16(ptr + index + 2);
574 
575 		if (pkt_tag != ATH_USB_RX_STREAM_MODE_TAG) {
576 			RX_STAT_INC(skb_dropped);
577 			return;
578 		}
579 
580 		pad_len = 4 - (pkt_len & 0x3);
581 		if (pad_len == 4)
582 			pad_len = 0;
583 
584 		chk_idx = index;
585 		index = index + 4 + pkt_len + pad_len;
586 
587 		if (index > MAX_RX_BUF_SIZE) {
588 			spin_lock(&hif_dev->rx_lock);
589 			hif_dev->rx_remain_len = index - MAX_RX_BUF_SIZE;
590 			hif_dev->rx_transfer_len =
591 				MAX_RX_BUF_SIZE - chk_idx - 4;
592 			hif_dev->rx_pad_len = pad_len;
593 
594 			nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
595 			if (!nskb) {
596 				dev_err(&hif_dev->udev->dev,
597 					"ath9k_htc: RX memory allocation error\n");
598 				spin_unlock(&hif_dev->rx_lock);
599 				goto err;
600 			}
601 			skb_reserve(nskb, 32);
602 			RX_STAT_INC(skb_allocated);
603 
604 			memcpy(nskb->data, &(skb->data[chk_idx+4]),
605 			       hif_dev->rx_transfer_len);
606 
607 			/* Record the buffer pointer */
608 			hif_dev->remain_skb = nskb;
609 			spin_unlock(&hif_dev->rx_lock);
610 		} else {
611 			nskb = __dev_alloc_skb(pkt_len + 32, GFP_ATOMIC);
612 			if (!nskb) {
613 				dev_err(&hif_dev->udev->dev,
614 					"ath9k_htc: RX memory allocation error\n");
615 				goto err;
616 			}
617 			skb_reserve(nskb, 32);
618 			RX_STAT_INC(skb_allocated);
619 
620 			memcpy(nskb->data, &(skb->data[chk_idx+4]), pkt_len);
621 			skb_put(nskb, pkt_len);
622 			skb_pool[pool_index++] = nskb;
623 		}
624 	}
625 
626 err:
627 	for (i = 0; i < pool_index; i++) {
628 		RX_STAT_ADD(skb_completed_bytes, skb_pool[i]->len);
629 		ath9k_htc_rx_msg(hif_dev->htc_handle, skb_pool[i],
630 				 skb_pool[i]->len, USB_WLAN_RX_PIPE);
631 		RX_STAT_INC(skb_completed);
632 	}
633 }
634 
635 static void ath9k_hif_usb_rx_cb(struct urb *urb)
636 {
637 	struct sk_buff *skb = (struct sk_buff *) urb->context;
638 	struct hif_device_usb *hif_dev =
639 		usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
640 	int ret;
641 
642 	if (!skb)
643 		return;
644 
645 	if (!hif_dev)
646 		goto free;
647 
648 	switch (urb->status) {
649 	case 0:
650 		break;
651 	case -ENOENT:
652 	case -ECONNRESET:
653 	case -ENODEV:
654 	case -ESHUTDOWN:
655 		goto free;
656 	default:
657 		goto resubmit;
658 	}
659 
660 	if (likely(urb->actual_length != 0)) {
661 		skb_put(skb, urb->actual_length);
662 		ath9k_hif_usb_rx_stream(hif_dev, skb);
663 	}
664 
665 resubmit:
666 	skb_reset_tail_pointer(skb);
667 	skb_trim(skb, 0);
668 
669 	usb_anchor_urb(urb, &hif_dev->rx_submitted);
670 	ret = usb_submit_urb(urb, GFP_ATOMIC);
671 	if (ret) {
672 		usb_unanchor_urb(urb);
673 		goto free;
674 	}
675 
676 	return;
677 free:
678 	kfree_skb(skb);
679 }
680 
681 static void ath9k_hif_usb_reg_in_cb(struct urb *urb)
682 {
683 	struct sk_buff *skb = (struct sk_buff *) urb->context;
684 	struct sk_buff *nskb;
685 	struct hif_device_usb *hif_dev =
686 		usb_get_intfdata(usb_ifnum_to_if(urb->dev, 0));
687 	int ret;
688 
689 	if (!skb)
690 		return;
691 
692 	if (!hif_dev)
693 		goto free;
694 
695 	switch (urb->status) {
696 	case 0:
697 		break;
698 	case -ENOENT:
699 	case -ECONNRESET:
700 	case -ENODEV:
701 	case -ESHUTDOWN:
702 		goto free;
703 	default:
704 		skb_reset_tail_pointer(skb);
705 		skb_trim(skb, 0);
706 
707 		goto resubmit;
708 	}
709 
710 	if (likely(urb->actual_length != 0)) {
711 		skb_put(skb, urb->actual_length);
712 
713 		/* Process the command first */
714 		ath9k_htc_rx_msg(hif_dev->htc_handle, skb,
715 				 skb->len, USB_REG_IN_PIPE);
716 
717 
718 		nskb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_ATOMIC);
719 		if (!nskb) {
720 			dev_err(&hif_dev->udev->dev,
721 				"ath9k_htc: REG_IN memory allocation failure\n");
722 			urb->context = NULL;
723 			return;
724 		}
725 
726 		usb_fill_bulk_urb(urb, hif_dev->udev,
727 				 usb_rcvbulkpipe(hif_dev->udev,
728 						 USB_REG_IN_PIPE),
729 				 nskb->data, MAX_REG_IN_BUF_SIZE,
730 				 ath9k_hif_usb_reg_in_cb, nskb);
731 	}
732 
733 resubmit:
734 	usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
735 	ret = usb_submit_urb(urb, GFP_ATOMIC);
736 	if (ret) {
737 		usb_unanchor_urb(urb);
738 		goto free;
739 	}
740 
741 	return;
742 free:
743 	kfree_skb(skb);
744 	urb->context = NULL;
745 }
746 
747 static void ath9k_hif_usb_dealloc_tx_urbs(struct hif_device_usb *hif_dev)
748 {
749 	struct tx_buf *tx_buf = NULL, *tx_buf_tmp = NULL;
750 	unsigned long flags;
751 
752 	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
753 				 &hif_dev->tx.tx_buf, list) {
754 		usb_kill_urb(tx_buf->urb);
755 		list_del(&tx_buf->list);
756 		usb_free_urb(tx_buf->urb);
757 		kfree(tx_buf->buf);
758 		kfree(tx_buf);
759 	}
760 
761 	spin_lock_irqsave(&hif_dev->tx.tx_lock, flags);
762 	hif_dev->tx.flags |= HIF_USB_TX_FLUSH;
763 	spin_unlock_irqrestore(&hif_dev->tx.tx_lock, flags);
764 
765 	list_for_each_entry_safe(tx_buf, tx_buf_tmp,
766 				 &hif_dev->tx.tx_pending, list) {
767 		usb_kill_urb(tx_buf->urb);
768 		list_del(&tx_buf->list);
769 		usb_free_urb(tx_buf->urb);
770 		kfree(tx_buf->buf);
771 		kfree(tx_buf);
772 	}
773 
774 	usb_kill_anchored_urbs(&hif_dev->mgmt_submitted);
775 }
776 
777 static int ath9k_hif_usb_alloc_tx_urbs(struct hif_device_usb *hif_dev)
778 {
779 	struct tx_buf *tx_buf;
780 	int i;
781 
782 	INIT_LIST_HEAD(&hif_dev->tx.tx_buf);
783 	INIT_LIST_HEAD(&hif_dev->tx.tx_pending);
784 	spin_lock_init(&hif_dev->tx.tx_lock);
785 	__skb_queue_head_init(&hif_dev->tx.tx_skb_queue);
786 	init_usb_anchor(&hif_dev->mgmt_submitted);
787 
788 	for (i = 0; i < MAX_TX_URB_NUM; i++) {
789 		tx_buf = kzalloc(sizeof(struct tx_buf), GFP_KERNEL);
790 		if (!tx_buf)
791 			goto err;
792 
793 		tx_buf->buf = kzalloc(MAX_TX_BUF_SIZE, GFP_KERNEL);
794 		if (!tx_buf->buf)
795 			goto err;
796 
797 		tx_buf->urb = usb_alloc_urb(0, GFP_KERNEL);
798 		if (!tx_buf->urb)
799 			goto err;
800 
801 		tx_buf->hif_dev = hif_dev;
802 		__skb_queue_head_init(&tx_buf->skb_queue);
803 
804 		list_add_tail(&tx_buf->list, &hif_dev->tx.tx_buf);
805 	}
806 
807 	hif_dev->tx.tx_buf_cnt = MAX_TX_URB_NUM;
808 
809 	return 0;
810 err:
811 	if (tx_buf) {
812 		kfree(tx_buf->buf);
813 		kfree(tx_buf);
814 	}
815 	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
816 	return -ENOMEM;
817 }
818 
819 static void ath9k_hif_usb_dealloc_rx_urbs(struct hif_device_usb *hif_dev)
820 {
821 	usb_kill_anchored_urbs(&hif_dev->rx_submitted);
822 }
823 
824 static int ath9k_hif_usb_alloc_rx_urbs(struct hif_device_usb *hif_dev)
825 {
826 	struct urb *urb = NULL;
827 	struct sk_buff *skb = NULL;
828 	int i, ret;
829 
830 	init_usb_anchor(&hif_dev->rx_submitted);
831 	spin_lock_init(&hif_dev->rx_lock);
832 
833 	for (i = 0; i < MAX_RX_URB_NUM; i++) {
834 
835 		/* Allocate URB */
836 		urb = usb_alloc_urb(0, GFP_KERNEL);
837 		if (urb == NULL) {
838 			ret = -ENOMEM;
839 			goto err_urb;
840 		}
841 
842 		/* Allocate buffer */
843 		skb = alloc_skb(MAX_RX_BUF_SIZE, GFP_KERNEL);
844 		if (!skb) {
845 			ret = -ENOMEM;
846 			goto err_skb;
847 		}
848 
849 		usb_fill_bulk_urb(urb, hif_dev->udev,
850 				  usb_rcvbulkpipe(hif_dev->udev,
851 						  USB_WLAN_RX_PIPE),
852 				  skb->data, MAX_RX_BUF_SIZE,
853 				  ath9k_hif_usb_rx_cb, skb);
854 
855 		/* Anchor URB */
856 		usb_anchor_urb(urb, &hif_dev->rx_submitted);
857 
858 		/* Submit URB */
859 		ret = usb_submit_urb(urb, GFP_KERNEL);
860 		if (ret) {
861 			usb_unanchor_urb(urb);
862 			goto err_submit;
863 		}
864 
865 		/*
866 		 * Drop reference count.
867 		 * This ensures that the URB is freed when killing them.
868 		 */
869 		usb_free_urb(urb);
870 	}
871 
872 	return 0;
873 
874 err_submit:
875 	kfree_skb(skb);
876 err_skb:
877 	usb_free_urb(urb);
878 err_urb:
879 	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
880 	return ret;
881 }
882 
883 static void ath9k_hif_usb_dealloc_reg_in_urbs(struct hif_device_usb *hif_dev)
884 {
885 	usb_kill_anchored_urbs(&hif_dev->reg_in_submitted);
886 }
887 
888 static int ath9k_hif_usb_alloc_reg_in_urbs(struct hif_device_usb *hif_dev)
889 {
890 	struct urb *urb = NULL;
891 	struct sk_buff *skb = NULL;
892 	int i, ret;
893 
894 	init_usb_anchor(&hif_dev->reg_in_submitted);
895 
896 	for (i = 0; i < MAX_REG_IN_URB_NUM; i++) {
897 
898 		/* Allocate URB */
899 		urb = usb_alloc_urb(0, GFP_KERNEL);
900 		if (urb == NULL) {
901 			ret = -ENOMEM;
902 			goto err_urb;
903 		}
904 
905 		/* Allocate buffer */
906 		skb = alloc_skb(MAX_REG_IN_BUF_SIZE, GFP_KERNEL);
907 		if (!skb) {
908 			ret = -ENOMEM;
909 			goto err_skb;
910 		}
911 
912 		usb_fill_bulk_urb(urb, hif_dev->udev,
913 				  usb_rcvbulkpipe(hif_dev->udev,
914 						  USB_REG_IN_PIPE),
915 				  skb->data, MAX_REG_IN_BUF_SIZE,
916 				  ath9k_hif_usb_reg_in_cb, skb);
917 
918 		/* Anchor URB */
919 		usb_anchor_urb(urb, &hif_dev->reg_in_submitted);
920 
921 		/* Submit URB */
922 		ret = usb_submit_urb(urb, GFP_KERNEL);
923 		if (ret) {
924 			usb_unanchor_urb(urb);
925 			goto err_submit;
926 		}
927 
928 		/*
929 		 * Drop reference count.
930 		 * This ensures that the URB is freed when killing them.
931 		 */
932 		usb_free_urb(urb);
933 	}
934 
935 	return 0;
936 
937 err_submit:
938 	kfree_skb(skb);
939 err_skb:
940 	usb_free_urb(urb);
941 err_urb:
942 	ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
943 	return ret;
944 }
945 
946 static int ath9k_hif_usb_alloc_urbs(struct hif_device_usb *hif_dev)
947 {
948 	/* Register Write */
949 	init_usb_anchor(&hif_dev->regout_submitted);
950 
951 	/* TX */
952 	if (ath9k_hif_usb_alloc_tx_urbs(hif_dev) < 0)
953 		goto err;
954 
955 	/* RX */
956 	if (ath9k_hif_usb_alloc_rx_urbs(hif_dev) < 0)
957 		goto err_rx;
958 
959 	/* Register Read */
960 	if (ath9k_hif_usb_alloc_reg_in_urbs(hif_dev) < 0)
961 		goto err_reg;
962 
963 	return 0;
964 err_reg:
965 	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
966 err_rx:
967 	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
968 err:
969 	return -ENOMEM;
970 }
971 
972 static void ath9k_hif_usb_dealloc_urbs(struct hif_device_usb *hif_dev)
973 {
974 	usb_kill_anchored_urbs(&hif_dev->regout_submitted);
975 	ath9k_hif_usb_dealloc_reg_in_urbs(hif_dev);
976 	ath9k_hif_usb_dealloc_tx_urbs(hif_dev);
977 	ath9k_hif_usb_dealloc_rx_urbs(hif_dev);
978 }
979 
980 static int ath9k_hif_usb_download_fw(struct hif_device_usb *hif_dev)
981 {
982 	int transfer, err;
983 	const void *data = hif_dev->fw_data;
984 	size_t len = hif_dev->fw_size;
985 	u32 addr = AR9271_FIRMWARE;
986 	u8 *buf = kzalloc(4096, GFP_KERNEL);
987 	u32 firm_offset;
988 
989 	if (!buf)
990 		return -ENOMEM;
991 
992 	while (len) {
993 		transfer = min_t(size_t, len, 4096);
994 		memcpy(buf, data, transfer);
995 
996 		err = usb_control_msg(hif_dev->udev,
997 				      usb_sndctrlpipe(hif_dev->udev, 0),
998 				      FIRMWARE_DOWNLOAD, 0x40 | USB_DIR_OUT,
999 				      addr >> 8, 0, buf, transfer, HZ);
1000 		if (err < 0) {
1001 			kfree(buf);
1002 			return err;
1003 		}
1004 
1005 		len -= transfer;
1006 		data += transfer;
1007 		addr += transfer;
1008 	}
1009 	kfree(buf);
1010 
1011 	if (IS_AR7010_DEVICE(hif_dev->usb_device_id->driver_info))
1012 		firm_offset = AR7010_FIRMWARE_TEXT;
1013 	else
1014 		firm_offset = AR9271_FIRMWARE_TEXT;
1015 
1016 	/*
1017 	 * Issue FW download complete command to firmware.
1018 	 */
1019 	err = usb_control_msg(hif_dev->udev, usb_sndctrlpipe(hif_dev->udev, 0),
1020 			      FIRMWARE_DOWNLOAD_COMP,
1021 			      0x40 | USB_DIR_OUT,
1022 			      firm_offset >> 8, 0, NULL, 0, HZ);
1023 	if (err)
1024 		return -EIO;
1025 
1026 	dev_info(&hif_dev->udev->dev, "ath9k_htc: Transferred FW: %s, size: %ld\n",
1027 		 hif_dev->fw_name, (unsigned long) hif_dev->fw_size);
1028 
1029 	return 0;
1030 }
1031 
1032 static int ath9k_hif_usb_dev_init(struct hif_device_usb *hif_dev)
1033 {
1034 	struct usb_host_interface *alt = &hif_dev->interface->altsetting[0];
1035 	struct usb_endpoint_descriptor *endp;
1036 	int ret, idx;
1037 
1038 	ret = ath9k_hif_usb_download_fw(hif_dev);
1039 	if (ret) {
1040 		dev_err(&hif_dev->udev->dev,
1041 			"ath9k_htc: Firmware - %s download failed\n",
1042 			hif_dev->fw_name);
1043 		return ret;
1044 	}
1045 
1046 	/* On downloading the firmware to the target, the USB descriptor of EP4
1047 	 * is 'patched' to change the type of the endpoint to Bulk. This will
1048 	 * bring down CPU usage during the scan period.
1049 	 */
1050 	for (idx = 0; idx < alt->desc.bNumEndpoints; idx++) {
1051 		endp = &alt->endpoint[idx].desc;
1052 		if ((endp->bmAttributes & USB_ENDPOINT_XFERTYPE_MASK)
1053 				== USB_ENDPOINT_XFER_INT) {
1054 			endp->bmAttributes &= ~USB_ENDPOINT_XFERTYPE_MASK;
1055 			endp->bmAttributes |= USB_ENDPOINT_XFER_BULK;
1056 			endp->bInterval = 0;
1057 		}
1058 	}
1059 
1060 	/* Alloc URBs */
1061 	ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1062 	if (ret) {
1063 		dev_err(&hif_dev->udev->dev,
1064 			"ath9k_htc: Unable to allocate URBs\n");
1065 		return ret;
1066 	}
1067 
1068 	return 0;
1069 }
1070 
1071 static void ath9k_hif_usb_dev_deinit(struct hif_device_usb *hif_dev)
1072 {
1073 	ath9k_hif_usb_dealloc_urbs(hif_dev);
1074 }
1075 
1076 /*
1077  * If initialization fails or the FW cannot be retrieved,
1078  * detach the device.
1079  */
1080 static void ath9k_hif_usb_firmware_fail(struct hif_device_usb *hif_dev)
1081 {
1082 	struct device *dev = &hif_dev->udev->dev;
1083 	struct device *parent = dev->parent;
1084 
1085 	complete(&hif_dev->fw_done);
1086 
1087 	if (parent)
1088 		device_lock(parent);
1089 
1090 	device_release_driver(dev);
1091 
1092 	if (parent)
1093 		device_unlock(parent);
1094 }
1095 
1096 static void ath9k_hif_usb_firmware_cb(const struct firmware *fw, void *context)
1097 {
1098 	struct hif_device_usb *hif_dev = context;
1099 	int ret;
1100 
1101 	if (!fw) {
1102 		dev_err(&hif_dev->udev->dev,
1103 			"ath9k_htc: Failed to get firmware %s\n",
1104 			hif_dev->fw_name);
1105 		goto err_fw;
1106 	}
1107 
1108 	hif_dev->htc_handle = ath9k_htc_hw_alloc(hif_dev, &hif_usb,
1109 						 &hif_dev->udev->dev);
1110 	if (hif_dev->htc_handle == NULL)
1111 		goto err_dev_alloc;
1112 
1113 	hif_dev->fw_data = fw->data;
1114 	hif_dev->fw_size = fw->size;
1115 
1116 	/* Proceed with initialization */
1117 
1118 	ret = ath9k_hif_usb_dev_init(hif_dev);
1119 	if (ret)
1120 		goto err_dev_init;
1121 
1122 	ret = ath9k_htc_hw_init(hif_dev->htc_handle,
1123 				&hif_dev->interface->dev,
1124 				hif_dev->usb_device_id->idProduct,
1125 				hif_dev->udev->product,
1126 				hif_dev->usb_device_id->driver_info);
1127 	if (ret) {
1128 		ret = -EINVAL;
1129 		goto err_htc_hw_init;
1130 	}
1131 
1132 	release_firmware(fw);
1133 	hif_dev->flags |= HIF_USB_READY;
1134 	complete(&hif_dev->fw_done);
1135 
1136 	return;
1137 
1138 err_htc_hw_init:
1139 	ath9k_hif_usb_dev_deinit(hif_dev);
1140 err_dev_init:
1141 	ath9k_htc_hw_free(hif_dev->htc_handle);
1142 err_dev_alloc:
1143 	release_firmware(fw);
1144 err_fw:
1145 	ath9k_hif_usb_firmware_fail(hif_dev);
1146 }
1147 
1148 /*
1149  * An exact copy of the function from zd1211rw.
1150  */
1151 static int send_eject_command(struct usb_interface *interface)
1152 {
1153 	struct usb_device *udev = interface_to_usbdev(interface);
1154 	struct usb_host_interface *iface_desc = &interface->altsetting[0];
1155 	struct usb_endpoint_descriptor *endpoint;
1156 	unsigned char *cmd;
1157 	u8 bulk_out_ep;
1158 	int r;
1159 
1160 	/* Find bulk out endpoint */
1161 	for (r = 1; r >= 0; r--) {
1162 		endpoint = &iface_desc->endpoint[r].desc;
1163 		if (usb_endpoint_dir_out(endpoint) &&
1164 		    usb_endpoint_xfer_bulk(endpoint)) {
1165 			bulk_out_ep = endpoint->bEndpointAddress;
1166 			break;
1167 		}
1168 	}
1169 	if (r == -1) {
1170 		dev_err(&udev->dev,
1171 			"ath9k_htc: Could not find bulk out endpoint\n");
1172 		return -ENODEV;
1173 	}
1174 
1175 	cmd = kzalloc(31, GFP_KERNEL);
1176 	if (cmd == NULL)
1177 		return -ENODEV;
1178 
1179 	/* USB bulk command block */
1180 	cmd[0] = 0x55;	/* bulk command signature */
1181 	cmd[1] = 0x53;	/* bulk command signature */
1182 	cmd[2] = 0x42;	/* bulk command signature */
1183 	cmd[3] = 0x43;	/* bulk command signature */
1184 	cmd[14] = 6;	/* command length */
1185 
1186 	cmd[15] = 0x1b;	/* SCSI command: START STOP UNIT */
1187 	cmd[19] = 0x2;	/* eject disc */
1188 
1189 	dev_info(&udev->dev, "Ejecting storage device...\n");
1190 	r = usb_bulk_msg(udev, usb_sndbulkpipe(udev, bulk_out_ep),
1191 		cmd, 31, NULL, 2000);
1192 	kfree(cmd);
1193 	if (r)
1194 		return r;
1195 
1196 	/* At this point, the device disconnects and reconnects with the real
1197 	 * ID numbers. */
1198 
1199 	usb_set_intfdata(interface, NULL);
1200 	return 0;
1201 }
1202 
1203 static int ath9k_hif_usb_probe(struct usb_interface *interface,
1204 			       const struct usb_device_id *id)
1205 {
1206 	struct usb_device *udev = interface_to_usbdev(interface);
1207 	struct hif_device_usb *hif_dev;
1208 	int ret = 0;
1209 
1210 	if (id->driver_info == STORAGE_DEVICE)
1211 		return send_eject_command(interface);
1212 
1213 	hif_dev = kzalloc(sizeof(struct hif_device_usb), GFP_KERNEL);
1214 	if (!hif_dev) {
1215 		ret = -ENOMEM;
1216 		goto err_alloc;
1217 	}
1218 
1219 	usb_get_dev(udev);
1220 
1221 	hif_dev->udev = udev;
1222 	hif_dev->interface = interface;
1223 	hif_dev->usb_device_id = id;
1224 #ifdef CONFIG_PM
1225 	udev->reset_resume = 1;
1226 #endif
1227 	usb_set_intfdata(interface, hif_dev);
1228 
1229 	init_completion(&hif_dev->fw_done);
1230 
1231 	/* Find out which firmware to load */
1232 
1233 	if (IS_AR7010_DEVICE(id->driver_info))
1234 		hif_dev->fw_name = FIRMWARE_AR7010_1_1;
1235 	else
1236 		hif_dev->fw_name = FIRMWARE_AR9271;
1237 
1238 	ret = request_firmware_nowait(THIS_MODULE, true, hif_dev->fw_name,
1239 				      &hif_dev->udev->dev, GFP_KERNEL,
1240 				      hif_dev, ath9k_hif_usb_firmware_cb);
1241 	if (ret) {
1242 		dev_err(&hif_dev->udev->dev,
1243 			"ath9k_htc: Async request for firmware %s failed\n",
1244 			hif_dev->fw_name);
1245 		goto err_fw_req;
1246 	}
1247 
1248 	dev_info(&hif_dev->udev->dev, "ath9k_htc: Firmware %s requested\n",
1249 		 hif_dev->fw_name);
1250 
1251 	return 0;
1252 
1253 err_fw_req:
1254 	usb_set_intfdata(interface, NULL);
1255 	kfree(hif_dev);
1256 	usb_put_dev(udev);
1257 err_alloc:
1258 	return ret;
1259 }
1260 
1261 static void ath9k_hif_usb_reboot(struct usb_device *udev)
1262 {
1263 	u32 reboot_cmd = 0xffffffff;
1264 	void *buf;
1265 	int ret;
1266 
1267 	buf = kmemdup(&reboot_cmd, 4, GFP_KERNEL);
1268 	if (!buf)
1269 		return;
1270 
1271 	ret = usb_bulk_msg(udev, usb_sndbulkpipe(udev, USB_REG_OUT_PIPE),
1272 			   buf, 4, NULL, HZ);
1273 	if (ret)
1274 		dev_err(&udev->dev, "ath9k_htc: USB reboot failed\n");
1275 
1276 	kfree(buf);
1277 }
1278 
1279 static void ath9k_hif_usb_disconnect(struct usb_interface *interface)
1280 {
1281 	struct usb_device *udev = interface_to_usbdev(interface);
1282 	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1283 	bool unplugged = (udev->state == USB_STATE_NOTATTACHED) ? true : false;
1284 
1285 	if (!hif_dev)
1286 		return;
1287 
1288 	wait_for_completion(&hif_dev->fw_done);
1289 
1290 	if (hif_dev->flags & HIF_USB_READY) {
1291 		ath9k_htc_hw_deinit(hif_dev->htc_handle, unplugged);
1292 		ath9k_htc_hw_free(hif_dev->htc_handle);
1293 		ath9k_hif_usb_dev_deinit(hif_dev);
1294 	}
1295 
1296 	usb_set_intfdata(interface, NULL);
1297 
1298 	if (!unplugged && (hif_dev->flags & HIF_USB_START))
1299 		ath9k_hif_usb_reboot(udev);
1300 
1301 	kfree(hif_dev);
1302 	dev_info(&udev->dev, "ath9k_htc: USB layer deinitialized\n");
1303 	usb_put_dev(udev);
1304 }
1305 
1306 #ifdef CONFIG_PM
1307 static int ath9k_hif_usb_suspend(struct usb_interface *interface,
1308 				 pm_message_t message)
1309 {
1310 	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1311 
1312 	/*
1313 	 * The device has to be set to FULLSLEEP mode in case no
1314 	 * interface is up.
1315 	 */
1316 	if (!(hif_dev->flags & HIF_USB_START))
1317 		ath9k_htc_suspend(hif_dev->htc_handle);
1318 
1319 	ath9k_hif_usb_dealloc_urbs(hif_dev);
1320 
1321 	return 0;
1322 }
1323 
1324 static int ath9k_hif_usb_resume(struct usb_interface *interface)
1325 {
1326 	struct hif_device_usb *hif_dev = usb_get_intfdata(interface);
1327 	struct htc_target *htc_handle = hif_dev->htc_handle;
1328 	int ret;
1329 	const struct firmware *fw;
1330 
1331 	ret = ath9k_hif_usb_alloc_urbs(hif_dev);
1332 	if (ret)
1333 		return ret;
1334 
1335 	if (hif_dev->flags & HIF_USB_READY) {
1336 		/* request cached firmware during suspend/resume cycle */
1337 		ret = request_firmware(&fw, hif_dev->fw_name,
1338 				       &hif_dev->udev->dev);
1339 		if (ret)
1340 			goto fail_resume;
1341 
1342 		hif_dev->fw_data = fw->data;
1343 		hif_dev->fw_size = fw->size;
1344 		ret = ath9k_hif_usb_download_fw(hif_dev);
1345 		release_firmware(fw);
1346 		if (ret)
1347 			goto fail_resume;
1348 	} else {
1349 		ath9k_hif_usb_dealloc_urbs(hif_dev);
1350 		return -EIO;
1351 	}
1352 
1353 	mdelay(100);
1354 
1355 	ret = ath9k_htc_resume(htc_handle);
1356 
1357 	if (ret)
1358 		goto fail_resume;
1359 
1360 	return 0;
1361 
1362 fail_resume:
1363 	ath9k_hif_usb_dealloc_urbs(hif_dev);
1364 
1365 	return ret;
1366 }
1367 #endif
1368 
1369 static struct usb_driver ath9k_hif_usb_driver = {
1370 	.name = KBUILD_MODNAME,
1371 	.probe = ath9k_hif_usb_probe,
1372 	.disconnect = ath9k_hif_usb_disconnect,
1373 #ifdef CONFIG_PM
1374 	.suspend = ath9k_hif_usb_suspend,
1375 	.resume = ath9k_hif_usb_resume,
1376 	.reset_resume = ath9k_hif_usb_resume,
1377 #endif
1378 	.id_table = ath9k_hif_usb_ids,
1379 	.soft_unbind = 1,
1380 	.disable_hub_initiated_lpm = 1,
1381 };
1382 
1383 int ath9k_hif_usb_init(void)
1384 {
1385 	return usb_register(&ath9k_hif_usb_driver);
1386 }
1387 
1388 void ath9k_hif_usb_exit(void)
1389 {
1390 	usb_deregister(&ath9k_hif_usb_driver);
1391 }
1392