Quelle  cmdevt.c   Sprache: C

// SPDX-License-Identifier: GPL-2.0-only
/*
 * NXP Wireless LAN device driver: commands and events
 *
 * Copyright 2011-2020 NXP
 */

#include <linux/unaligned.h>
#include "decl.h"
#include "ioctl.h"
#include "util.h"
#include "fw.h"
#include "main.h"
#include "wmm.h"
#include "11n.h"

static void mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter);

/*
 * This function initializes a command node.
 *
 * The actual allocation of the node is not done by this function. It only
 * initiates a node by filling it with default parameters. Similarly,
 * allocation of the different buffers used (IOCTL buffer, data buffer) are
 * not done by this function either.
 */
static void
mwifiex_init_cmd_node(struct mwifiex_private *priv,
        struct cmd_ctrl_node *cmd_node,
        u32 cmd_no, void *data_buf, bool sync)
{
 cmd_node->priv = priv;
 cmd_node->cmd_no = cmd_no;

 if (sync) {
  cmd_node->wait_q_enabled = true;
  cmd_node->cmd_wait_q_woken = false;
  cmd_node->condition = &cmd_node->cmd_wait_q_woken;
 }
 cmd_node->data_buf = data_buf;
 cmd_node->cmd_skb = cmd_node->skb;
}

/*
 * This function returns a command node from the free queue depending upon
 * availability.
 */
static struct cmd_ctrl_node *
mwifiex_get_cmd_node(struct mwifiex_adapter *adapter)
{
 struct cmd_ctrl_node *cmd_node;

 spin_lock_bh(&adapter->cmd_free_q_lock);
 if (list_empty(&adapter->cmd_free_q)) {
  mwifiex_dbg(adapter, ERROR,
       "GET_CMD_NODE: cmd node not available\n");
  spin_unlock_bh(&adapter->cmd_free_q_lock);
  return NULL;
 }
 cmd_node = list_first_entry(&adapter->cmd_free_q,
        struct cmd_ctrl_node, list);
 list_del(&cmd_node->list);
 spin_unlock_bh(&adapter->cmd_free_q_lock);

 return cmd_node;
}

/*
 * This function cleans up a command node.
 *
 * The function resets the fields including the buffer pointers.
 * This function does not try to free the buffers. They must be
 * freed before calling this function.
 *
 * This function will however call the receive completion callback
 * in case a response buffer is still available before resetting
 * the pointer.
 */
static void
mwifiex_clean_cmd_node(struct mwifiex_adapter *adapter,
         struct cmd_ctrl_node *cmd_node)
{
 cmd_node->cmd_no = 0;
 cmd_node->cmd_flag = 0;
 cmd_node->data_buf = NULL;
 cmd_node->wait_q_enabled = false;

 if (cmd_node->cmd_skb)
  skb_trim(cmd_node->cmd_skb, 0);

 if (cmd_node->resp_skb) {
  adapter->if_ops.cmdrsp_complete(adapter, cmd_node->resp_skb);
  cmd_node->resp_skb = NULL;
 }
}

/*
 * This function returns a command to the command free queue.
 *
 * The function also calls the completion callback if required, before
 * cleaning the command node and re-inserting it into the free queue.
 */
static void
mwifiex_insert_cmd_to_free_q(struct mwifiex_adapter *adapter,
        struct cmd_ctrl_node *cmd_node)
{
 if (!cmd_node)
  return;

 if (cmd_node->wait_q_enabled)
  mwifiex_complete_cmd(adapter, cmd_node);
 /* Clean the node */
 mwifiex_clean_cmd_node(adapter, cmd_node);

 /* Insert node into cmd_free_q */
 spin_lock_bh(&adapter->cmd_free_q_lock);
 list_add_tail(&cmd_node->list, &adapter->cmd_free_q);
 spin_unlock_bh(&adapter->cmd_free_q_lock);
}

/* This function reuses a command node. */
void mwifiex_recycle_cmd_node(struct mwifiex_adapter *adapter,
         struct cmd_ctrl_node *cmd_node)
{
 struct host_cmd_ds_command *host_cmd = (void *)cmd_node->cmd_skb->data;

 mwifiex_insert_cmd_to_free_q(adapter, cmd_node);

 atomic_dec(&adapter->cmd_pending);
 mwifiex_dbg(adapter, CMD,
      "cmd: FREE_CMD: cmd=%#x, cmd_pending=%d\n",
  le16_to_cpu(host_cmd->command),
  atomic_read(&adapter->cmd_pending));
}

/*
 * This function sends a host command to the firmware.
 *
 * The function copies the host command into the driver command
 * buffer, which will be transferred to the firmware later by the
 * main thread.
 */
static int mwifiex_cmd_host_cmd(struct mwifiex_private *priv,
    struct host_cmd_ds_command *cmd,
    struct mwifiex_ds_misc_cmd *pcmd_ptr)
{
 /* Copy the HOST command to command buffer */
 memcpy(cmd, pcmd_ptr->cmd, pcmd_ptr->len);
 mwifiex_dbg(priv->adapter, CMD,
      "cmd: host cmd size = %d\n", pcmd_ptr->len);
 return 0;
}

/*
 * This function downloads a command to the firmware.
 *
 * The function performs sanity tests, sets the command sequence
 * number and size, converts the header fields to CPU format before
 * sending. Afterwards, it logs the command ID and action for debugging
 * and sets up the command timeout timer.
 */
static int mwifiex_dnld_cmd_to_fw(struct mwifiex_adapter *adapter,
      struct cmd_ctrl_node *cmd_node)
{
 int ret;
 struct host_cmd_ds_command *host_cmd;
 uint16_t cmd_code;
 uint16_t cmd_size;

 if (!adapter || !cmd_node)
  return -1;

 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);

 /* Sanity test */
 if (host_cmd->size == 0) {
  mwifiex_dbg(adapter, ERROR,
       "DNLD_CMD: host_cmd is null\t"
       "or cmd size is 0, not sending\n");
  if (cmd_node->wait_q_enabled)
   adapter->cmd_wait_q.status = -1;
  mwifiex_recycle_cmd_node(adapter, cmd_node);
  return -1;
 }

 cmd_code = le16_to_cpu(host_cmd->command);
 cmd_node->cmd_no = cmd_code;
 cmd_size = le16_to_cpu(host_cmd->size);

 if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET &&
     cmd_code != HostCmd_CMD_FUNC_SHUTDOWN &&
     cmd_code != HostCmd_CMD_FUNC_INIT) {
  mwifiex_dbg(adapter, ERROR,
       "DNLD_CMD: FW in reset state, ignore cmd %#x\n",
   cmd_code);
  mwifiex_recycle_cmd_node(adapter, cmd_node);
  queue_work(adapter->workqueue, &adapter->main_work);
  return -1;
 }

 /* Set command sequence number */
 adapter->seq_num++;
 host_cmd->seq_num = cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
     (adapter->seq_num,
      cmd_node->priv->bss_num,
      cmd_node->priv->bss_type));

 spin_lock_bh(&adapter->mwifiex_cmd_lock);
 adapter->curr_cmd = cmd_node;
 spin_unlock_bh(&adapter->mwifiex_cmd_lock);

 /* Adjust skb length */
 if (cmd_node->cmd_skb->len > cmd_size)
  /*
 * cmd_size is less than sizeof(struct host_cmd_ds_command).
 * Trim off the unused portion.
 */
  skb_trim(cmd_node->cmd_skb, cmd_size);
 else if (cmd_node->cmd_skb->len < cmd_size)
  /*
 * cmd_size is larger than sizeof(struct host_cmd_ds_command)
 * because we have appended custom IE TLV. Increase skb length
 * accordingly.
 */
  skb_put(cmd_node->cmd_skb, cmd_size - cmd_node->cmd_skb->len);

 mwifiex_dbg(adapter, CMD,
      "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n",
      cmd_code,
      get_unaligned_le16((u8 *)host_cmd + S_DS_GEN),
      cmd_size, le16_to_cpu(host_cmd->seq_num));
 mwifiex_dbg_dump(adapter, CMD_D, "cmd buffer:", host_cmd, cmd_size);

 if (adapter->iface_type == MWIFIEX_USB) {
  skb_push(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
  put_unaligned_le32(MWIFIEX_USB_TYPE_CMD,
       cmd_node->cmd_skb->data);
  adapter->cmd_sent = true;
  ret = adapter->if_ops.host_to_card(adapter,
         MWIFIEX_USB_EP_CMD_EVENT,
         cmd_node->cmd_skb, NULL);
  skb_pull(cmd_node->cmd_skb, MWIFIEX_TYPE_LEN);
  if (ret == -EBUSY)
   cmd_node->cmd_skb = NULL;
 } else {
  skb_push(cmd_node->cmd_skb, adapter->intf_hdr_len);
  ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
         cmd_node->cmd_skb, NULL);
  skb_pull(cmd_node->cmd_skb, adapter->intf_hdr_len);
 }

 if (ret == -1) {
  mwifiex_dbg(adapter, ERROR,
       "DNLD_CMD: host to card failed\n");
  if (adapter->iface_type == MWIFIEX_USB)
   adapter->cmd_sent = false;
  if (cmd_node->wait_q_enabled)
   adapter->cmd_wait_q.status = -1;
  mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);

  spin_lock_bh(&adapter->mwifiex_cmd_lock);
  adapter->curr_cmd = NULL;
  spin_unlock_bh(&adapter->mwifiex_cmd_lock);

  adapter->dbg.num_cmd_host_to_card_failure++;
  return -1;
 }

 /* Save the last command id and action to debug log */
 adapter->dbg.last_cmd_index =
   (adapter->dbg.last_cmd_index + 1) % DBG_CMD_NUM;
 adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index] = cmd_code;
 adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index] =
   get_unaligned_le16((u8 *)host_cmd + S_DS_GEN);

 /* Setup the timer after transmit command, except that specific
 * command might not have command response.
 */
 if (cmd_code != HostCmd_CMD_FW_DUMP_EVENT)
  mod_timer(&adapter->cmd_timer,
     jiffies + msecs_to_jiffies(MWIFIEX_TIMER_10S));

 /* Clear BSS_NO_BITS from HostCmd */
 cmd_code &= HostCmd_CMD_ID_MASK;

 return 0;
}

/*
 * This function downloads a sleep confirm command to the firmware.
 *
 * The function performs sanity tests, sets the command sequence
 * number and size, converts the header fields to CPU format before
 * sending.
 *
 * No responses are needed for sleep confirm command.
 */
static int mwifiex_dnld_sleep_confirm_cmd(struct mwifiex_adapter *adapter)
{
 int ret;
 struct mwifiex_private *priv;
 struct mwifiex_opt_sleep_confirm *sleep_cfm_buf =
    (struct mwifiex_opt_sleep_confirm *)
      adapter->sleep_cfm->data;
 struct sk_buff *sleep_cfm_tmp;

 priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);

 adapter->seq_num++;
 sleep_cfm_buf->seq_num =
  cpu_to_le16(HostCmd_SET_SEQ_NO_BSS_INFO
     (adapter->seq_num, priv->bss_num,
      priv->bss_type));

 mwifiex_dbg(adapter, CMD,
      "cmd: DNLD_CMD: %#x, act %#x, len %d, seqno %#x\n",
  le16_to_cpu(sleep_cfm_buf->command),
  le16_to_cpu(sleep_cfm_buf->action),
  le16_to_cpu(sleep_cfm_buf->size),
  le16_to_cpu(sleep_cfm_buf->seq_num));
 mwifiex_dbg_dump(adapter, CMD_D, "SLEEP_CFM buffer: ", sleep_cfm_buf,
    le16_to_cpu(sleep_cfm_buf->size));

 if (adapter->iface_type == MWIFIEX_USB) {
  sleep_cfm_tmp =
   dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
          + MWIFIEX_TYPE_LEN);
  if (!sleep_cfm_tmp) {
   mwifiex_dbg(adapter, ERROR,
        "SLEEP_CFM: dev_alloc_skb failed\n");
   return -ENOMEM;
  }

  skb_put(sleep_cfm_tmp, sizeof(struct mwifiex_opt_sleep_confirm)
   + MWIFIEX_TYPE_LEN);
  put_unaligned_le32(MWIFIEX_USB_TYPE_CMD, sleep_cfm_tmp->data);
  memcpy(sleep_cfm_tmp->data + MWIFIEX_TYPE_LEN,
         adapter->sleep_cfm->data,
         sizeof(struct mwifiex_opt_sleep_confirm));
  ret = adapter->if_ops.host_to_card(adapter,
         MWIFIEX_USB_EP_CMD_EVENT,
         sleep_cfm_tmp, NULL);
  if (ret != -EBUSY)
   dev_kfree_skb_any(sleep_cfm_tmp);
 } else {
  skb_push(adapter->sleep_cfm, adapter->intf_hdr_len);
  ret = adapter->if_ops.host_to_card(adapter, MWIFIEX_TYPE_CMD,
         adapter->sleep_cfm, NULL);
  skb_pull(adapter->sleep_cfm, adapter->intf_hdr_len);
 }

 if (ret == -1) {
  mwifiex_dbg(adapter, ERROR, "SLEEP_CFM: failed\n");
  adapter->dbg.num_cmd_sleep_cfm_host_to_card_failure++;
  return -1;
 }

 if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl))
  /* Response is not needed for sleep confirm command */
  adapter->ps_state = PS_STATE_SLEEP;
 else
  adapter->ps_state = PS_STATE_SLEEP_CFM;

 if (!le16_to_cpu(sleep_cfm_buf->resp_ctrl) &&
     (test_bit(MWIFIEX_IS_HS_CONFIGURED, &adapter->work_flags) &&
      !adapter->sleep_period.period)) {
  adapter->pm_wakeup_card_req = true;
  mwifiex_hs_activated_event(adapter, true);
 }

 return ret;
}

/*
 * This function allocates the command buffers and links them to
 * the command free queue.
 *
 * The driver uses a pre allocated number of command buffers, which
 * are created at driver initializations and freed at driver cleanup.
 * Every command needs to obtain a command buffer from this pool before
 * it can be issued. The command free queue lists the command buffers
 * currently free to use, while the command pending queue lists the
 * command buffers already in use and awaiting handling. Command buffers
 * are returned to the free queue after use.
 */
int mwifiex_alloc_cmd_buffer(struct mwifiex_adapter *adapter)
{
 struct cmd_ctrl_node *cmd_array;
 u32 i;

 /* Allocate and initialize struct cmd_ctrl_node */
 cmd_array = kcalloc(MWIFIEX_NUM_OF_CMD_BUFFER,
       sizeof(struct cmd_ctrl_node), GFP_KERNEL);
 if (!cmd_array)
  return -ENOMEM;

 adapter->cmd_pool = cmd_array;

 /* Allocate and initialize command buffers */
 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
  cmd_array[i].skb = dev_alloc_skb(MWIFIEX_SIZE_OF_CMD_BUFFER);
  if (!cmd_array[i].skb) {
   mwifiex_dbg(adapter, ERROR,
        "unable to allocate command buffer\n");
   return -ENOMEM;
  }
 }

 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++)
  mwifiex_insert_cmd_to_free_q(adapter, &cmd_array[i]);

 return 0;
}

/*
 * This function frees the command buffers.
 *
 * The function calls the completion callback for all the command
 * buffers that still have response buffers associated with them.
 */
void mwifiex_free_cmd_buffer(struct mwifiex_adapter *adapter)
{
 struct cmd_ctrl_node *cmd_array;
 u32 i;

 /* Need to check if cmd pool is allocated or not */
 if (!adapter->cmd_pool) {
  mwifiex_dbg(adapter, FATAL,
       "info: FREE_CMD_BUF: cmd_pool is null\n");
  return;
 }

 cmd_array = adapter->cmd_pool;

 /* Release shared memory buffers */
 for (i = 0; i < MWIFIEX_NUM_OF_CMD_BUFFER; i++) {
  if (cmd_array[i].skb) {
   mwifiex_dbg(adapter, CMD,
        "cmd: free cmd buffer %d\n", i);
   dev_kfree_skb_any(cmd_array[i].skb);
  }
  if (!cmd_array[i].resp_skb)
   continue;

  if (adapter->iface_type == MWIFIEX_USB)
   adapter->if_ops.cmdrsp_complete(adapter,
       cmd_array[i].resp_skb);
  else
   dev_kfree_skb_any(cmd_array[i].resp_skb);
 }
 /* Release struct cmd_ctrl_node */
 if (adapter->cmd_pool) {
  mwifiex_dbg(adapter, CMD,
       "cmd: free cmd pool\n");
  kfree(adapter->cmd_pool);
  adapter->cmd_pool = NULL;
 }
}

/*
 * This function handles events generated by firmware.
 *
 * Event body of events received from firmware are not used (though they are
 * saved), only the event ID is used. Some events are re-invoked by
 * the driver, with a new event body.
 *
 * After processing, the function calls the completion callback
 * for cleanup.
 */
int mwifiex_process_event(struct mwifiex_adapter *adapter)
{
 int ret, i;
 struct mwifiex_private *priv;
 struct sk_buff *skb = adapter->event_skb;
 u32 eventcause;
 struct mwifiex_rxinfo *rx_info;

 if ((adapter->event_cause & EVENT_ID_MASK) == EVENT_RADAR_DETECTED) {
  for (i = 0; i < adapter->priv_num; i++) {
   priv = adapter->priv[i];
   if (mwifiex_is_11h_active(priv)) {
    adapter->event_cause |=
     ((priv->bss_num & 0xff) << 16) |
     ((priv->bss_type & 0xff) << 24);
    break;
   }
  }
 }

 eventcause = adapter->event_cause;

 /* Save the last event to debug log */
 adapter->dbg.last_event_index =
   (adapter->dbg.last_event_index + 1) % DBG_CMD_NUM;
 adapter->dbg.last_event[adapter->dbg.last_event_index] =
       (u16) eventcause;

 /* Get BSS number and corresponding priv */
 priv = mwifiex_get_priv_by_id(adapter, EVENT_GET_BSS_NUM(eventcause),
          EVENT_GET_BSS_TYPE(eventcause));
 if (!priv)
  priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);

 /* Clear BSS_NO_BITS from event */
 eventcause &= EVENT_ID_MASK;
 adapter->event_cause = eventcause;

 if (skb) {
  rx_info = MWIFIEX_SKB_RXCB(skb);
  memset(rx_info, 0, sizeof(*rx_info));
  rx_info->bss_num = priv->bss_num;
  rx_info->bss_type = priv->bss_type;
  mwifiex_dbg_dump(adapter, EVT_D, "Event Buf:",
     skb->data, skb->len);
 }

 mwifiex_dbg(adapter, EVENT, "EVENT: cause: %#x\n", eventcause);

 if (priv->bss_role == MWIFIEX_BSS_ROLE_UAP)
  ret = mwifiex_process_uap_event(priv);
 else
  ret = mwifiex_process_sta_event(priv);

 adapter->event_cause = 0;
 adapter->event_skb = NULL;
 adapter->if_ops.event_complete(adapter, skb);

 return ret;
}

/*
 * This function prepares a command and send it to the firmware.
 *
 * Preparation includes -
 *      - Sanity tests to make sure the card is still present or the FW
 *        is not reset
 *      - Getting a new command node from the command free queue
 *      - Initializing the command node for default parameters
 *      - Fill up the non-default parameters and buffer pointers
 *      - Add the command to pending queue
 */
int mwifiex_send_cmd(struct mwifiex_private *priv, u16 cmd_no,
       u16 cmd_action, u32 cmd_oid, void *data_buf, bool sync)
{
 int ret;
 struct mwifiex_adapter *adapter = priv->adapter;
 struct cmd_ctrl_node *cmd_node;
 struct host_cmd_ds_command *cmd_ptr;

 if (!adapter) {
  pr_err("PREP_CMD: adapter is NULL\n");
  return -1;
 }

 if (test_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags)) {
  mwifiex_dbg(adapter, ERROR,
       "PREP_CMD: device in suspended state\n");
  return -1;
 }

 if (test_bit(MWIFIEX_IS_HS_ENABLING, &adapter->work_flags) &&
     cmd_no != HostCmd_CMD_802_11_HS_CFG_ENH) {
  mwifiex_dbg(adapter, ERROR,
       "PREP_CMD: host entering sleep state\n");
  return -1;
 }

 if (test_bit(MWIFIEX_SURPRISE_REMOVED, &adapter->work_flags)) {
  mwifiex_dbg(adapter, ERROR,
       "PREP_CMD: card is removed\n");
  return -1;
 }

 if (test_bit(MWIFIEX_IS_CMD_TIMEDOUT, &adapter->work_flags)) {
  mwifiex_dbg(adapter, ERROR,
       "PREP_CMD: FW is in bad state\n");
  return -1;
 }

 if (adapter->hw_status == MWIFIEX_HW_STATUS_RESET) {
  if (cmd_no != HostCmd_CMD_FUNC_INIT) {
   mwifiex_dbg(adapter, ERROR,
        "PREP_CMD: FW in reset state\n");
   return -1;
  }
 }
 /* We don't expect commands in manufacturing mode. They are cooked
 * in application and ready to download buffer is passed to the driver
 */
 if (adapter->mfg_mode && cmd_no) {
  dev_dbg(adapter->dev, "Ignoring commands in manufacturing mode\n");
  return -1;
 }

 if (priv->adapter->hs_activated_manually &&
     cmd_no != HostCmd_CMD_802_11_HS_CFG_ENH) {
  mwifiex_cancel_hs(priv, MWIFIEX_ASYNC_CMD);
  priv->adapter->hs_activated_manually = false;
 }

 /* Get a new command node */
 cmd_node = mwifiex_get_cmd_node(adapter);

 if (!cmd_node) {
  mwifiex_dbg(adapter, ERROR,
       "PREP_CMD: no free cmd node\n");
  return -1;
 }

 /* Initialize the command node */
 mwifiex_init_cmd_node(priv, cmd_node, cmd_no, data_buf, sync);

 if (!cmd_node->cmd_skb) {
  mwifiex_dbg(adapter, ERROR,
       "PREP_CMD: no free cmd buf\n");
  return -1;
 }

 skb_put_zero(cmd_node->cmd_skb, sizeof(struct host_cmd_ds_command));

 cmd_ptr = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 cmd_ptr->command = cpu_to_le16(cmd_no);
 cmd_ptr->result = 0;

 /* Prepare command */
 if (cmd_no) {
  switch (cmd_no) {
  case HostCmd_CMD_UAP_SYS_CONFIG:
  case HostCmd_CMD_UAP_BSS_START:
  case HostCmd_CMD_UAP_BSS_STOP:
  case HostCmd_CMD_UAP_STA_DEAUTH:
  case HOST_CMD_APCMD_SYS_RESET:
  case HOST_CMD_APCMD_STA_LIST:
  case HostCmd_CMD_CHAN_REPORT_REQUEST:
  case HostCmd_CMD_ADD_NEW_STATION:
   ret = mwifiex_uap_prepare_cmd(priv, cmd_no, cmd_action,
            cmd_oid, data_buf,
            cmd_ptr);
   break;
  default:
   ret = mwifiex_sta_prepare_cmd(priv, cmd_no, cmd_action,
            cmd_oid, data_buf,
            cmd_ptr);
   break;
  }
 } else {
  ret = mwifiex_cmd_host_cmd(priv, cmd_ptr, data_buf);
  cmd_node->cmd_flag |= CMD_F_HOSTCMD;
 }

 /* Return error, since the command preparation failed */
 if (ret) {
  mwifiex_dbg(adapter, ERROR,
       "PREP_CMD: cmd %#x preparation failed\n",
   cmd_no);
  mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
  return -1;
 }

 /* Send command */
 if (cmd_no == HostCmd_CMD_802_11_SCAN ||
     cmd_no == HostCmd_CMD_802_11_SCAN_EXT) {
  mwifiex_queue_scan_cmd(priv, cmd_node);
 } else {
  mwifiex_insert_cmd_to_pending_q(adapter, cmd_node);
  queue_work(adapter->workqueue, &adapter->main_work);
  if (cmd_node->wait_q_enabled)
   ret = mwifiex_wait_queue_complete(adapter, cmd_node);
 }

 return ret;
}

/*
 * This function queues a command to the command pending queue.
 *
 * This in effect adds the command to the command list to be executed.
 * Exit PS command is handled specially, by placing it always to the
 * front of the command queue.
 */
void
mwifiex_insert_cmd_to_pending_q(struct mwifiex_adapter *adapter,
    struct cmd_ctrl_node *cmd_node)
{
 struct host_cmd_ds_command *host_cmd = NULL;
 u16 command;
 bool add_tail = true;

 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);
 if (!host_cmd) {
  mwifiex_dbg(adapter, ERROR, "QUEUE_CMD: host_cmd is NULL\n");
  return;
 }

 command = le16_to_cpu(host_cmd->command);

 /* Exit_PS command needs to be queued in the header always. */
 if (command == HostCmd_CMD_802_11_PS_MODE_ENH) {
  struct host_cmd_ds_802_11_ps_mode_enh *pm =
      &host_cmd->params.psmode_enh;
  if ((le16_to_cpu(pm->action) == DIS_PS) ||
      (le16_to_cpu(pm->action) == DIS_AUTO_PS)) {
   if (adapter->ps_state != PS_STATE_AWAKE)
    add_tail = false;
  }
 }

 /* Same with exit host sleep cmd, luckily that can't happen at the same time as EXIT_PS */
 if (command == HostCmd_CMD_802_11_HS_CFG_ENH) {
  struct host_cmd_ds_802_11_hs_cfg_enh *hs_cfg =
   &host_cmd->params.opt_hs_cfg;

  if (le16_to_cpu(hs_cfg->action) == HS_ACTIVATE)
    add_tail = false;
 }

 spin_lock_bh(&adapter->cmd_pending_q_lock);
 if (add_tail)
  list_add_tail(&cmd_node->list, &adapter->cmd_pending_q);
 else
  list_add(&cmd_node->list, &adapter->cmd_pending_q);
 spin_unlock_bh(&adapter->cmd_pending_q_lock);

 atomic_inc(&adapter->cmd_pending);
 mwifiex_dbg(adapter, CMD,
      "cmd: QUEUE_CMD: cmd=%#x, cmd_pending=%d\n",
  command, atomic_read(&adapter->cmd_pending));
}

/*
 * This function executes the next command in command pending queue.
 *
 * This function will fail if a command is already in processing stage,
 * otherwise it will dequeue the first command from the command pending
 * queue and send to the firmware.
 *
 * If the device is currently in host sleep mode, any commands, except the
 * host sleep configuration command will de-activate the host sleep. For PS
 * mode, the function will put the firmware back to sleep if applicable.
 */
int mwifiex_exec_next_cmd(struct mwifiex_adapter *adapter)
{
 struct cmd_ctrl_node *cmd_node;
 int ret = 0;
 struct host_cmd_ds_command *host_cmd;

 /* Check if already in processing */
 if (adapter->curr_cmd) {
  mwifiex_dbg(adapter, FATAL,
       "EXEC_NEXT_CMD: cmd in processing\n");
  return -1;
 }

 spin_lock_bh(&adapter->mwifiex_cmd_lock);
 /* Check if any command is pending */
 spin_lock_bh(&adapter->cmd_pending_q_lock);
 if (list_empty(&adapter->cmd_pending_q)) {
  spin_unlock_bh(&adapter->cmd_pending_q_lock);
  spin_unlock_bh(&adapter->mwifiex_cmd_lock);
  return 0;
 }
 cmd_node = list_first_entry(&adapter->cmd_pending_q,
        struct cmd_ctrl_node, list);

 host_cmd = (struct host_cmd_ds_command *) (cmd_node->cmd_skb->data);

 if (adapter->ps_state != PS_STATE_AWAKE) {
  mwifiex_dbg(adapter, ERROR,
       "%s: cannot send cmd in sleep state,\t"
       "this should not happen\n", __func__);
  spin_unlock_bh(&adapter->cmd_pending_q_lock);
  spin_unlock_bh(&adapter->mwifiex_cmd_lock);
  return ret;
 }

 list_del(&cmd_node->list);
 spin_unlock_bh(&adapter->cmd_pending_q_lock);

 spin_unlock_bh(&adapter->mwifiex_cmd_lock);
 ret = mwifiex_dnld_cmd_to_fw(adapter, cmd_node);

 /* Any command sent to the firmware when host is in sleep
 * mode should de-configure host sleep. We should skip the
 * host sleep configuration command itself though
 */
 if (host_cmd->command != cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH)) {
  if (adapter->hs_activated) {
   clear_bit(MWIFIEX_IS_HS_CONFIGURED,
      &adapter->work_flags);
   mwifiex_hs_activated_event(adapter, false);
  }
 }

 return ret;
}

/*
 * This function handles the command response.
 *
 * After processing, the function cleans the command node and puts
 * it back to the command free queue.
 */
int mwifiex_process_cmdresp(struct mwifiex_adapter *adapter)
{
 struct host_cmd_ds_command *resp;
 struct mwifiex_private *priv;
 int ret = 0;
 uint16_t orig_cmdresp_no;
 uint16_t cmdresp_no;
 uint16_t cmdresp_result;

 if (!adapter->curr_cmd || !adapter->curr_cmd->resp_skb) {
  resp = (struct host_cmd_ds_command *) adapter->upld_buf;
  mwifiex_dbg(adapter, ERROR,
       "CMD_RESP: NULL curr_cmd, %#x\n",
       le16_to_cpu(resp->command));
  return -1;
 }

 resp = (struct host_cmd_ds_command *)adapter->curr_cmd->resp_skb->data;
 orig_cmdresp_no = le16_to_cpu(resp->command);
 cmdresp_no = (orig_cmdresp_no & HostCmd_CMD_ID_MASK);

 if (adapter->curr_cmd->cmd_no != cmdresp_no) {
  mwifiex_dbg(adapter, ERROR,
       "cmdresp error: cmd=0x%x cmd_resp=0x%x\n",
       adapter->curr_cmd->cmd_no, cmdresp_no);
  return -1;
 }
 /* Now we got response from FW, cancel the command timer */
 timer_delete_sync(&adapter->cmd_timer);
 clear_bit(MWIFIEX_IS_CMD_TIMEDOUT, &adapter->work_flags);

 if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
  /* Copy original response back to response buffer */
  struct mwifiex_ds_misc_cmd *hostcmd;
  uint16_t size = le16_to_cpu(resp->size);
  mwifiex_dbg(adapter, INFO,
       "info: host cmd resp size = %d\n", size);
  size = min_t(u16, size, MWIFIEX_SIZE_OF_CMD_BUFFER);
  if (adapter->curr_cmd->data_buf) {
   hostcmd = adapter->curr_cmd->data_buf;
   hostcmd->len = size;
   memcpy(hostcmd->cmd, resp, size);
  }
 }

 /* Get BSS number and corresponding priv */
 priv = mwifiex_get_priv_by_id(adapter,
        HostCmd_GET_BSS_NO(le16_to_cpu(resp->seq_num)),
        HostCmd_GET_BSS_TYPE(le16_to_cpu(resp->seq_num)));
 if (!priv)
  priv = mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_ANY);
 /* Clear RET_BIT from HostCmd */
 resp->command = cpu_to_le16(orig_cmdresp_no & HostCmd_CMD_ID_MASK);

 cmdresp_no = le16_to_cpu(resp->command);
 cmdresp_result = le16_to_cpu(resp->result);

 /* Save the last command response to debug log */
 adapter->dbg.last_cmd_resp_index =
   (adapter->dbg.last_cmd_resp_index + 1) % DBG_CMD_NUM;
 adapter->dbg.last_cmd_resp_id[adapter->dbg.last_cmd_resp_index] =
        orig_cmdresp_no;

 mwifiex_dbg(adapter, CMD,
      "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n",
      orig_cmdresp_no, cmdresp_result,
      le16_to_cpu(resp->size), le16_to_cpu(resp->seq_num));
 mwifiex_dbg_dump(adapter, CMD_D, "CMD_RESP buffer:", resp,
    le16_to_cpu(resp->size));

 if (!(orig_cmdresp_no & HostCmd_RET_BIT)) {
  mwifiex_dbg(adapter, ERROR, "CMD_RESP: invalid cmd resp\n");
  if (adapter->curr_cmd->wait_q_enabled)
   adapter->cmd_wait_q.status = -1;

  mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
  spin_lock_bh(&adapter->mwifiex_cmd_lock);
  adapter->curr_cmd = NULL;
  spin_unlock_bh(&adapter->mwifiex_cmd_lock);
  return -1;
 }

 if (adapter->curr_cmd->cmd_flag & CMD_F_HOSTCMD) {
  adapter->curr_cmd->cmd_flag &= ~CMD_F_HOSTCMD;
  if ((cmdresp_result == HostCmd_RESULT_OK) &&
      (cmdresp_no == HostCmd_CMD_802_11_HS_CFG_ENH))
   ret = mwifiex_ret_802_11_hs_cfg(priv, resp);
 } else {
  /* handle response */
  ret = mwifiex_process_sta_cmdresp(priv, cmdresp_no, resp);
 }

 if (adapter->curr_cmd) {
  if (adapter->curr_cmd->wait_q_enabled)
   adapter->cmd_wait_q.status = ret;

  mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);

  spin_lock_bh(&adapter->mwifiex_cmd_lock);
  adapter->curr_cmd = NULL;
  spin_unlock_bh(&adapter->mwifiex_cmd_lock);
 }

 return ret;
}

void mwifiex_process_assoc_resp(struct mwifiex_adapter *adapter)
{
 struct cfg80211_rx_assoc_resp_data assoc_resp = {
  .uapsd_queues = -1,
 };
 struct mwifiex_private *priv =
  mwifiex_get_priv(adapter, MWIFIEX_BSS_ROLE_STA);

 if (priv->assoc_rsp_size) {
  assoc_resp.links[0].bss = priv->req_bss;
  assoc_resp.buf = priv->assoc_rsp_buf;
  assoc_resp.len = priv->assoc_rsp_size;
  wiphy_lock(priv->wdev.wiphy);
  cfg80211_rx_assoc_resp(priv->netdev,
           &assoc_resp);
  wiphy_unlock(priv->wdev.wiphy);
  priv->assoc_rsp_size = 0;
 }
}

/*
 * This function handles the timeout of command sending.
 *
 * It will re-send the same command again.
 */
void
mwifiex_cmd_timeout_func(struct timer_list *t)
{
 struct mwifiex_adapter *adapter = timer_container_of(adapter, t,
                   cmd_timer);
 struct cmd_ctrl_node *cmd_node;

 set_bit(MWIFIEX_IS_CMD_TIMEDOUT, &adapter->work_flags);
 if (!adapter->curr_cmd) {
  mwifiex_dbg(adapter, ERROR,
       "cmd: empty curr_cmd\n");
  return;
 }
 cmd_node = adapter->curr_cmd;
 if (cmd_node) {
  adapter->dbg.timeout_cmd_id =
   adapter->dbg.last_cmd_id[adapter->dbg.last_cmd_index];
  adapter->dbg.timeout_cmd_act =
   adapter->dbg.last_cmd_act[adapter->dbg.last_cmd_index];
  mwifiex_dbg(adapter, MSG,
       "%s: Timeout cmd id = %#x, act = %#x\n", __func__,
       adapter->dbg.timeout_cmd_id,
       adapter->dbg.timeout_cmd_act);

  mwifiex_dbg(adapter, MSG,
       "num_data_h2c_failure = %d\n",
       adapter->dbg.num_tx_host_to_card_failure);
  mwifiex_dbg(adapter, MSG,
       "num_cmd_h2c_failure = %d\n",
       adapter->dbg.num_cmd_host_to_card_failure);

  mwifiex_dbg(adapter, MSG,
       "is_cmd_timedout = %d\n",
       test_bit(MWIFIEX_IS_CMD_TIMEDOUT,
         &adapter->work_flags));
  mwifiex_dbg(adapter, MSG,
       "num_tx_timeout = %d\n",
       adapter->dbg.num_tx_timeout);

  mwifiex_dbg(adapter, MSG,
       "last_cmd_index = %d\n",
       adapter->dbg.last_cmd_index);
  mwifiex_dbg(adapter, MSG,
       "last_cmd_id: %*ph\n",
       (int)sizeof(adapter->dbg.last_cmd_id),
       adapter->dbg.last_cmd_id);
  mwifiex_dbg(adapter, MSG,
       "last_cmd_act: %*ph\n",
       (int)sizeof(adapter->dbg.last_cmd_act),
       adapter->dbg.last_cmd_act);

  mwifiex_dbg(adapter, MSG,
       "last_cmd_resp_index = %d\n",
       adapter->dbg.last_cmd_resp_index);
  mwifiex_dbg(adapter, MSG,
       "last_cmd_resp_id: %*ph\n",
       (int)sizeof(adapter->dbg.last_cmd_resp_id),
       adapter->dbg.last_cmd_resp_id);

  mwifiex_dbg(adapter, MSG,
       "last_event_index = %d\n",
       adapter->dbg.last_event_index);
  mwifiex_dbg(adapter, MSG,
       "last_event: %*ph\n",
       (int)sizeof(adapter->dbg.last_event),
       adapter->dbg.last_event);

  mwifiex_dbg(adapter, MSG,
       "data_sent=%d cmd_sent=%d\n",
       adapter->data_sent, adapter->cmd_sent);

  mwifiex_dbg(adapter, MSG,
       "ps_mode=%d ps_state=%d\n",
       adapter->ps_mode, adapter->ps_state);

  if (cmd_node->wait_q_enabled) {
   adapter->cmd_wait_q.status = -ETIMEDOUT;
   mwifiex_cancel_pending_ioctl(adapter);
  }
 }

 if (adapter->if_ops.device_dump)
  adapter->if_ops.device_dump(adapter);

 if (adapter->if_ops.card_reset)
  adapter->if_ops.card_reset(adapter);
}

void
mwifiex_cancel_pending_scan_cmd(struct mwifiex_adapter *adapter)
{
 struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;

 /* Cancel all pending scan command */
 spin_lock_bh(&adapter->scan_pending_q_lock);
 list_for_each_entry_safe(cmd_node, tmp_node,
     &adapter->scan_pending_q, list) {
  list_del(&cmd_node->list);
  cmd_node->wait_q_enabled = false;
  mwifiex_insert_cmd_to_free_q(adapter, cmd_node);
 }
 spin_unlock_bh(&adapter->scan_pending_q_lock);
}

/*
 * This function cancels all the pending commands.
 *
 * The current command, all commands in command pending queue and all scan
 * commands in scan pending queue are cancelled. All the completion callbacks
 * are called with failure status to ensure cleanup.
 */
void
mwifiex_cancel_all_pending_cmd(struct mwifiex_adapter *adapter)
{
 struct cmd_ctrl_node *cmd_node = NULL, *tmp_node;

 spin_lock_bh(&adapter->mwifiex_cmd_lock);
 /* Cancel current cmd */
 if ((adapter->curr_cmd) && (adapter->curr_cmd->wait_q_enabled)) {
  adapter->cmd_wait_q.status = -1;
  mwifiex_complete_cmd(adapter, adapter->curr_cmd);
  adapter->curr_cmd->wait_q_enabled = false;
  /* no recycle probably wait for response */
 }
 /* Cancel all pending command */
 spin_lock_bh(&adapter->cmd_pending_q_lock);
 list_for_each_entry_safe(cmd_node, tmp_node,
     &adapter->cmd_pending_q, list) {
  list_del(&cmd_node->list);

  if (cmd_node->wait_q_enabled)
   adapter->cmd_wait_q.status = -1;
  mwifiex_recycle_cmd_node(adapter, cmd_node);
 }
 spin_unlock_bh(&adapter->cmd_pending_q_lock);
 spin_unlock_bh(&adapter->mwifiex_cmd_lock);

 mwifiex_cancel_scan(adapter);
}

/*
 * This function cancels all pending commands that matches with
 * the given IOCTL request.
 *
 * Both the current command buffer and the pending command queue are
 * searched for matching IOCTL request. The completion callback of
 * the matched command is called with failure status to ensure cleanup.
 * In case of scan commands, all pending commands in scan pending queue
 * are cancelled.
 */
static void
mwifiex_cancel_pending_ioctl(struct mwifiex_adapter *adapter)
{
 struct cmd_ctrl_node *cmd_node = NULL;

 if ((adapter->curr_cmd) &&
     (adapter->curr_cmd->wait_q_enabled)) {
  spin_lock_bh(&adapter->mwifiex_cmd_lock);
  cmd_node = adapter->curr_cmd;
  /* setting curr_cmd to NULL is quite dangerous, because
 * mwifiex_process_cmdresp checks curr_cmd to be != NULL
 * at the beginning then relies on it and dereferences
 * it at will
 * this probably works since mwifiex_cmd_timeout_func
 * is the only caller of this function and responses
 * at that point
 */
  adapter->curr_cmd = NULL;
  spin_unlock_bh(&adapter->mwifiex_cmd_lock);

  mwifiex_recycle_cmd_node(adapter, cmd_node);
 }

 mwifiex_cancel_scan(adapter);
}

/*
 * This function sends the sleep confirm command to firmware, if
 * possible.
 *
 * The sleep confirm command cannot be issued if command response,
 * data response or event response is awaiting handling, or if we
 * are in the middle of sending a command, or expecting a command
 * response.
 */
void
mwifiex_check_ps_cond(struct mwifiex_adapter *adapter)
{
 if (!adapter->cmd_sent && !atomic_read(&adapter->tx_hw_pending) &&
     !adapter->curr_cmd && !IS_CARD_RX_RCVD(adapter))
  mwifiex_dnld_sleep_confirm_cmd(adapter);
 else
  mwifiex_dbg(adapter, CMD,
       "cmd: Delay Sleep Confirm (%s%s%s%s)\n",
       (adapter->cmd_sent) ? "D" : "",
       atomic_read(&adapter->tx_hw_pending) ? "T" : "",
       (adapter->curr_cmd) ? "C" : "",
       (IS_CARD_RX_RCVD(adapter)) ? "R" : "");
}

/*
 * This function sends a Host Sleep activated event to applications.
 *
 * This event is generated by the driver, with a blank event body.
 */
void
mwifiex_hs_activated_event(struct mwifiex_adapter *adapter, u8 activated)
{
 if (activated) {
  if (test_bit(MWIFIEX_IS_HS_CONFIGURED,
        &adapter->work_flags)) {
   adapter->hs_activated = true;
   mwifiex_update_rxreor_flags(adapter,
          RXREOR_FORCE_NO_DROP);
   mwifiex_dbg(adapter, EVENT,
        "event: hs_activated\n");
   adapter->hs_activate_wait_q_woken = true;
   wake_up_interruptible(
    &adapter->hs_activate_wait_q);
  } else {
   mwifiex_dbg(adapter, EVENT,
        "event: HS not configured\n");
  }
 } else {
  mwifiex_dbg(adapter, EVENT,
       "event: hs_deactivated\n");
  adapter->hs_activated = false;
 }
}

/*
 * This function handles the command response of a Host Sleep configuration
 * command.
 *
 * Handling includes changing the header fields into CPU format
 * and setting the current host sleep activation status in driver.
 *
 * In case host sleep status change, the function generates an event to
 * notify the applications.
 */
int mwifiex_ret_802_11_hs_cfg(struct mwifiex_private *priv,
         struct host_cmd_ds_command *resp)
{
 struct mwifiex_adapter *adapter = priv->adapter;
 struct host_cmd_ds_802_11_hs_cfg_enh *phs_cfg =
  &resp->params.opt_hs_cfg;
 uint32_t conditions = le32_to_cpu(phs_cfg->params.hs_config.conditions);

 if (phs_cfg->action == cpu_to_le16(HS_ACTIVATE) &&
     adapter->iface_type != MWIFIEX_USB) {
  mwifiex_hs_activated_event(adapter, true);
  return 0;
 } else {
  mwifiex_dbg(adapter, CMD,
       "cmd: CMD_RESP: HS_CFG cmd reply\t"
       " result=%#x, conditions=0x%x gpio=0x%x gap=0x%x\n",
       resp->result, conditions,
       phs_cfg->params.hs_config.gpio,
       phs_cfg->params.hs_config.gap);
 }
 if (conditions != HS_CFG_CANCEL) {
  set_bit(MWIFIEX_IS_HS_CONFIGURED, &adapter->work_flags);
  if (adapter->iface_type == MWIFIEX_USB)
   mwifiex_hs_activated_event(adapter, true);
 } else {
  clear_bit(MWIFIEX_IS_HS_CONFIGURED, &adapter->work_flags);
  if (adapter->hs_activated)
   mwifiex_hs_activated_event(adapter, false);
 }

 return 0;
}

/*
 * This function wakes up the adapter and generates a Host Sleep
 * cancel event on receiving the power up interrupt.
 */
void
mwifiex_process_hs_config(struct mwifiex_adapter *adapter)
{
 mwifiex_dbg(adapter, INFO,
      "info: %s: auto cancelling host sleep\t"
      "since there is interrupt from the firmware\n",
      __func__);

 adapter->if_ops.wakeup(adapter);

 if (adapter->hs_activated_manually) {
  mwifiex_cancel_hs(mwifiex_get_priv (adapter, MWIFIEX_BSS_ROLE_ANY),
      MWIFIEX_ASYNC_CMD);
  adapter->hs_activated_manually = false;
 }

 adapter->hs_activated = false;
 clear_bit(MWIFIEX_IS_HS_CONFIGURED, &adapter->work_flags);
 clear_bit(MWIFIEX_IS_SUSPENDED, &adapter->work_flags);
 mwifiex_hs_activated_event(adapter, false);
}
EXPORT_SYMBOL_GPL(mwifiex_process_hs_config);

/*
 * This function handles the command response of a sleep confirm command.
 *
 * The function sets the card state to SLEEP if the response indicates success.
 */
void
mwifiex_process_sleep_confirm_resp(struct mwifiex_adapter *adapter,
       u8 *pbuf, u32 upld_len)
{
 struct host_cmd_ds_command *cmd = (struct host_cmd_ds_command *) pbuf;
 uint16_t result = le16_to_cpu(cmd->result);
 uint16_t command = le16_to_cpu(cmd->command);
 uint16_t seq_num = le16_to_cpu(cmd->seq_num);

 if (!upld_len) {
  mwifiex_dbg(adapter, ERROR,
       "%s: cmd size is 0\n", __func__);
  return;
 }

 mwifiex_dbg(adapter, CMD,
      "cmd: CMD_RESP: 0x%x, result %d, len %d, seqno 0x%x\n",
      command, result, le16_to_cpu(cmd->size), seq_num);

 /* Update sequence number */
 seq_num = HostCmd_GET_SEQ_NO(seq_num);
 /* Clear RET_BIT from HostCmd */
 command &= HostCmd_CMD_ID_MASK;

 if (command != HostCmd_CMD_802_11_PS_MODE_ENH) {
  mwifiex_dbg(adapter, ERROR,
       "%s: rcvd unexpected resp for cmd %#x, result = %x\n",
       __func__, command, result);
  return;
 }

 if (result) {
  mwifiex_dbg(adapter, ERROR,
       "%s: sleep confirm cmd failed\n",
       __func__);
  adapter->pm_wakeup_card_req = false;
  adapter->ps_state = PS_STATE_AWAKE;
  return;
 }
 adapter->pm_wakeup_card_req = true;
 if (test_bit(MWIFIEX_IS_HS_CONFIGURED, &adapter->work_flags))
  mwifiex_hs_activated_event(adapter, true);
 adapter->ps_state = PS_STATE_SLEEP;
 cmd->command = cpu_to_le16(command);
 cmd->seq_num = cpu_to_le16(seq_num);
}
EXPORT_SYMBOL_GPL(mwifiex_process_sleep_confirm_resp);

/*
 * This function prepares an enhanced power mode command.
 *
 * This function can be used to disable power save or to configure
 * power save with auto PS or STA PS or auto deep sleep.
 *
 * Preparation includes -
 *      - Setting command ID, action and proper size
 *      - Setting Power Save bitmap, PS parameters TLV, PS mode TLV,
 *        auto deep sleep TLV (as required)
 *      - Ensuring correct endian-ness
 */
int mwifiex_cmd_enh_power_mode(struct mwifiex_private *priv,
          struct host_cmd_ds_command *cmd,
          u16 cmd_action, uint16_t ps_bitmap,
          struct mwifiex_ds_auto_ds *auto_ds)
{
 struct host_cmd_ds_802_11_ps_mode_enh *psmode_enh =
  &cmd->params.psmode_enh;
 u8 *tlv;
 u16 cmd_size = 0;

 cmd->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
 if (cmd_action == DIS_AUTO_PS) {
  psmode_enh->action = cpu_to_le16(DIS_AUTO_PS);
  psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
  cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
     sizeof(psmode_enh->params.ps_bitmap));
 } else if (cmd_action == GET_PS) {
  psmode_enh->action = cpu_to_le16(GET_PS);
  psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
  cmd->size = cpu_to_le16(S_DS_GEN + sizeof(psmode_enh->action) +
     sizeof(psmode_enh->params.ps_bitmap));
 } else if (cmd_action == EN_AUTO_PS) {
  psmode_enh->action = cpu_to_le16(EN_AUTO_PS);
  psmode_enh->params.ps_bitmap = cpu_to_le16(ps_bitmap);
  cmd_size = S_DS_GEN + sizeof(psmode_enh->action) +
     sizeof(psmode_enh->params.ps_bitmap);
  tlv = (u8 *) cmd + cmd_size;
  if (ps_bitmap & BITMAP_STA_PS) {
   struct mwifiex_adapter *adapter = priv->adapter;
   struct mwifiex_ie_types_ps_param *ps_tlv =
    (struct mwifiex_ie_types_ps_param *) tlv;
   struct mwifiex_ps_param *ps_mode = &ps_tlv->param;
   ps_tlv->header.type = cpu_to_le16(TLV_TYPE_PS_PARAM);
   ps_tlv->header.len = cpu_to_le16(sizeof(*ps_tlv) -
     sizeof(struct mwifiex_ie_types_header));
   cmd_size += sizeof(*ps_tlv);
   tlv += sizeof(*ps_tlv);
   mwifiex_dbg(priv->adapter, CMD,
        "cmd: PS Command: Enter PS\n");
   ps_mode->null_pkt_interval =
     cpu_to_le16(adapter->null_pkt_interval);
   ps_mode->multiple_dtims =
     cpu_to_le16(adapter->multiple_dtim);
   ps_mode->bcn_miss_timeout =
     cpu_to_le16(adapter->bcn_miss_time_out);
   ps_mode->local_listen_interval =
    cpu_to_le16(adapter->local_listen_interval);
   ps_mode->adhoc_wake_period =
    cpu_to_le16(adapter->adhoc_awake_period);
   ps_mode->delay_to_ps =
     cpu_to_le16(adapter->delay_to_ps);
   ps_mode->mode = cpu_to_le16(adapter->enhanced_ps_mode);

  }
  if (ps_bitmap & BITMAP_AUTO_DS) {
   struct mwifiex_ie_types_auto_ds_param *auto_ds_tlv =
    (struct mwifiex_ie_types_auto_ds_param *) tlv;
   u16 idletime = 0;

   auto_ds_tlv->header.type =
    cpu_to_le16(TLV_TYPE_AUTO_DS_PARAM);
   auto_ds_tlv->header.len =
    cpu_to_le16(sizeof(*auto_ds_tlv) -
     sizeof(struct mwifiex_ie_types_header));
   cmd_size += sizeof(*auto_ds_tlv);
   tlv += sizeof(*auto_ds_tlv);
   if (auto_ds)
    idletime = auto_ds->idle_time;
   mwifiex_dbg(priv->adapter, CMD,
        "cmd: PS Command: Enter Auto Deep Sleep\n");
   auto_ds_tlv->deep_sleep_timeout = cpu_to_le16(idletime);
  }
  cmd->size = cpu_to_le16(cmd_size);
 }
 return 0;
}

/*
 * This function handles the command response of an enhanced power mode
 * command.
 *
 * Handling includes changing the header fields into CPU format
 * and setting the current enhanced power mode in driver.
 */
int mwifiex_ret_enh_power_mode(struct mwifiex_private *priv,
          struct host_cmd_ds_command *resp,
          struct mwifiex_ds_pm_cfg *pm_cfg)
{
 struct mwifiex_adapter *adapter = priv->adapter;
 struct host_cmd_ds_802_11_ps_mode_enh *ps_mode =
  &resp->params.psmode_enh;
 uint16_t action = le16_to_cpu(ps_mode->action);
 uint16_t ps_bitmap = le16_to_cpu(ps_mode->params.ps_bitmap);
 uint16_t auto_ps_bitmap =
  le16_to_cpu(ps_mode->params.ps_bitmap);

 mwifiex_dbg(adapter, INFO,
      "info: %s: PS_MODE cmd reply result=%#x action=%#X\n",
      __func__, resp->result, action);
 if (action == EN_AUTO_PS) {
  if (auto_ps_bitmap & BITMAP_AUTO_DS) {
   mwifiex_dbg(adapter, CMD,
        "cmd: Enabled auto deep sleep\n");
   priv->adapter->is_deep_sleep = true;
  }
  if (auto_ps_bitmap & BITMAP_STA_PS) {
   mwifiex_dbg(adapter, CMD,
        "cmd: Enabled STA power save\n");
   if (adapter->sleep_period.period)
    mwifiex_dbg(adapter, CMD,
         "cmd: set to uapsd/pps mode\n");
  }
 } else if (action == DIS_AUTO_PS) {
  if (ps_bitmap & BITMAP_AUTO_DS) {
   priv->adapter->is_deep_sleep = false;
   mwifiex_dbg(adapter, CMD,
        "cmd: Disabled auto deep sleep\n");
  }
  if (ps_bitmap & BITMAP_STA_PS) {
   mwifiex_dbg(adapter, CMD,
        "cmd: Disabled STA power save\n");
   if (adapter->sleep_period.period) {
    adapter->delay_null_pkt = false;
    adapter->tx_lock_flag = false;
    adapter->pps_uapsd_mode = false;
   }
  }
 } else if (action == GET_PS) {
  if (ps_bitmap & BITMAP_STA_PS)
   adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
  else
   adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;

  mwifiex_dbg(adapter, CMD,
       "cmd: ps_bitmap=%#x\n", ps_bitmap);

  if (pm_cfg) {
   /* This section is for get power save mode */
   if (ps_bitmap & BITMAP_STA_PS)
    pm_cfg->param.ps_mode = 1;
   else
    pm_cfg->param.ps_mode = 0;
  }
 }
 return 0;
}

/*
 * This function prepares command to get hardware specifications.
 *
 * Preparation includes -
 *      - Setting command ID, action and proper size
 *      - Setting permanent address parameter
 *      - Ensuring correct endian-ness
 */
int mwifiex_cmd_get_hw_spec(struct mwifiex_private *priv,
       struct host_cmd_ds_command *cmd)
{
 struct host_cmd_ds_get_hw_spec *hw_spec = &cmd->params.hw_spec;

 cmd->command = cpu_to_le16(HostCmd_CMD_GET_HW_SPEC);
 cmd->size =
  cpu_to_le16(sizeof(struct host_cmd_ds_get_hw_spec) + S_DS_GEN);
 memcpy(hw_spec->permanent_addr, priv->curr_addr, ETH_ALEN);

 return 0;
}

/*
 * This function handles the command response of get hardware
 * specifications.
 *
 * Handling includes changing the header fields into CPU format
 * and saving/updating the following parameters in driver -
 *      - Firmware capability information
 *      - Firmware band settings
 *      - Ad-hoc start band and channel
 *      - Ad-hoc 11n activation status
 *      - Firmware release number
 *      - Number of antennas
 *      - Hardware address
 *      - Hardware interface version
 *      - Firmware version
 *      - Region code
 *      - 11n capabilities
 *      - MCS support fields
 *      - MP end port
 */
int mwifiex_ret_get_hw_spec(struct mwifiex_private *priv,
       struct host_cmd_ds_command *resp)
{
 struct host_cmd_ds_get_hw_spec *hw_spec = &resp->params.hw_spec;
 struct mwifiex_adapter *adapter = priv->adapter;
 struct mwifiex_ie_types_header *tlv;
 struct hw_spec_api_rev *api_rev;
 struct hw_spec_max_conn *max_conn;
 u16 resp_size, api_id;
 int i, left_len, parsed_len = 0;

 adapter->fw_cap_info = le32_to_cpu(hw_spec->fw_cap_info);

 if (IS_SUPPORT_MULTI_BANDS(adapter))
  adapter->fw_bands = (u8) GET_FW_DEFAULT_BANDS(adapter);
 else
  adapter->fw_bands = BAND_B;

 adapter->config_bands = adapter->fw_bands;

 if (adapter->fw_bands & BAND_A) {
  if (adapter->fw_bands & BAND_GN) {
   adapter->config_bands |= BAND_AN;
   adapter->fw_bands |= BAND_AN;
  }
  if (adapter->fw_bands & BAND_AN) {
   adapter->adhoc_start_band = BAND_A | BAND_AN;
   adapter->adhoc_11n_enabled = true;
  } else {
   adapter->adhoc_start_band = BAND_A;
  }
  priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL_A;
 } else if (adapter->fw_bands & BAND_GN) {
  adapter->adhoc_start_band = BAND_G | BAND_B | BAND_GN;
  priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
  adapter->adhoc_11n_enabled = true;
 } else if (adapter->fw_bands & BAND_G) {
  adapter->adhoc_start_band = BAND_G | BAND_B;
  priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
 } else if (adapter->fw_bands & BAND_B) {
  adapter->adhoc_start_band = BAND_B;
  priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
 }

 adapter->fw_release_number = le32_to_cpu(hw_spec->fw_release_number);
 adapter->fw_api_ver = (adapter->fw_release_number >> 16) & 0xff;
 adapter->number_of_antenna =
   le16_to_cpu(hw_spec->number_of_antenna) & 0xf;

 if (le32_to_cpu(hw_spec->dot_11ac_dev_cap)) {
  adapter->is_hw_11ac_capable = true;

  /* Copy 11AC cap */
  adapter->hw_dot_11ac_dev_cap =
     le32_to_cpu(hw_spec->dot_11ac_dev_cap);
  adapter->usr_dot_11ac_dev_cap_bg = adapter->hw_dot_11ac_dev_cap
     & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK;
  adapter->usr_dot_11ac_dev_cap_a = adapter->hw_dot_11ac_dev_cap
     & ~MWIFIEX_DEF_11AC_CAP_BF_RESET_MASK;

  /* Copy 11AC mcs */
  adapter->hw_dot_11ac_mcs_support =
    le32_to_cpu(hw_spec->dot_11ac_mcs_support);
  adapter->usr_dot_11ac_mcs_support =
     adapter->hw_dot_11ac_mcs_support;
 } else {
  adapter->is_hw_11ac_capable = false;
 }

 resp_size = le16_to_cpu(resp->size) - S_DS_GEN;
 if (resp_size > sizeof(struct host_cmd_ds_get_hw_spec)) {
  /* we have variable HW SPEC information */
  left_len = resp_size - sizeof(struct host_cmd_ds_get_hw_spec);
  while (left_len > sizeof(struct mwifiex_ie_types_header)) {
   tlv = (void *)&hw_spec->tlvs + parsed_len;
   switch (le16_to_cpu(tlv->type)) {
   case TLV_TYPE_API_REV:
    api_rev = (struct hw_spec_api_rev *)tlv;
    api_id = le16_to_cpu(api_rev->api_id);
    switch (api_id) {
    case KEY_API_VER_ID:
     adapter->key_api_major_ver =
       api_rev->major_ver;
     adapter->key_api_minor_ver =
       api_rev->minor_ver;
     mwifiex_dbg(adapter, INFO,
          "key_api v%d.%d\n",
          adapter->key_api_major_ver,
          adapter->key_api_minor_ver);
     break;
    case FW_API_VER_ID:
     adapter->fw_api_ver =
       api_rev->major_ver;
     mwifiex_dbg(adapter, INFO,
          "Firmware api version %d.%d\n",
          adapter->fw_api_ver,
          api_rev->minor_ver);
     break;
    case UAP_FW_API_VER_ID:
     mwifiex_dbg(adapter, INFO,
          "uAP api version %d.%d\n",
          api_rev->major_ver,
          api_rev->minor_ver);
     break;
    case CHANRPT_API_VER_ID:
     mwifiex_dbg(adapter, INFO,
          "channel report api version %d.%d\n",
          api_rev->major_ver,
          api_rev->minor_ver);
     break;
    case FW_HOTFIX_VER_ID:
     mwifiex_dbg(adapter, INFO,
          "Firmware hotfix version %d\n",
          api_rev->major_ver);
     break;
    default:
     mwifiex_dbg(adapter, FATAL,
          "Unknown api_id: %d\n",
          api_id);
     break;
    }
    break;
   case TLV_TYPE_MAX_CONN:
    max_conn = (struct hw_spec_max_conn *)tlv;
    adapter->max_p2p_conn = max_conn->max_p2p_conn;
    adapter->max_sta_conn = max_conn->max_sta_conn;
    mwifiex_dbg(adapter, INFO,
         "max p2p connections: %u\n",
         adapter->max_p2p_conn);
    mwifiex_dbg(adapter, INFO,
         "max sta connections: %u\n",
         adapter->max_sta_conn);
    break;
   default:
    mwifiex_dbg(adapter, FATAL,
         "Unknown GET_HW_SPEC TLV type: %#x\n",
         le16_to_cpu(tlv->type));
    break;
   }
   parsed_len += le16_to_cpu(tlv->len) +
          sizeof(struct mwifiex_ie_types_header);
   left_len -= le16_to_cpu(tlv->len) +
          sizeof(struct mwifiex_ie_types_header);
  }
 }

 mwifiex_dbg(adapter, INFO,
      "info: GET_HW_SPEC: fw_release_number- %#x\n",
      adapter->fw_release_number);
 mwifiex_dbg(adapter, INFO,
      "info: GET_HW_SPEC: permanent addr: %pM\n",
      hw_spec->permanent_addr);
 mwifiex_dbg(adapter, INFO,
      "info: GET_HW_SPEC: hw_if_version=%#x version=%#x\n",
      le16_to_cpu(hw_spec->hw_if_version),
      le16_to_cpu(hw_spec->version));

 ether_addr_copy(priv->adapter->perm_addr, hw_spec->permanent_addr);
 adapter->region_code = le16_to_cpu(hw_spec->region_code);

 for (i = 0; i < MWIFIEX_MAX_REGION_CODE; i++)
  /* Use the region code to search for the index */
  if (adapter->region_code == region_code_index[i])
   break;

 /* If it's unidentified region code, use the default (world) */
 if (i >= MWIFIEX_MAX_REGION_CODE) {
  adapter->region_code = 0x00;
  mwifiex_dbg(adapter, WARN,
       "cmd: unknown region code, use default (USA)\n");
 }

 adapter->hw_dot_11n_dev_cap = le32_to_cpu(hw_spec->dot_11n_dev_cap);
 adapter->hw_dev_mcs_support = hw_spec->dev_mcs_support;
 adapter->user_dev_mcs_support = adapter->hw_dev_mcs_support;

 if (adapter->if_ops.update_mp_end_port)
  adapter->if_ops.update_mp_end_port(adapter,
     le16_to_cpu(hw_spec->mp_end_port));

 if (adapter->fw_api_ver == MWIFIEX_FW_V15)
  adapter->scan_chan_gap_enabled = true;

 if (adapter->key_api_major_ver != KEY_API_VER_MAJOR_V2)
  adapter->host_mlme_enabled = false;

 mwifiex_dbg(adapter, MSG, "host_mlme: %s, key_api: %d\n",
      adapter->host_mlme_enabled ? "enable" : "disable",
      adapter->key_api_major_ver);

 return 0;
}

/* This function handles the command response of hs wakeup reason
 * command.
 */
int mwifiex_ret_wakeup_reason(struct mwifiex_private *priv,
         struct host_cmd_ds_command *resp,
         struct host_cmd_ds_wakeup_reason *wakeup_reason)
{
 wakeup_reason->wakeup_reason =
  resp->params.hs_wakeup_reason.wakeup_reason;

 return 0;
}