| Quellcodebibliothek Statistik Leitseite products/Sources/formale Sprachen/JAVA/Openclaw/test/helpers/agents/ (Openclaw AI Version 22©) Datei vom 26.3.2026 mit Größe 413 B |
|
Quelle sdio.c Sprache: C |
|
|
// SPDX-License-Identifier: ISC /* * java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 */ #include <linux/types.h> java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for leng #include #include ice willassert signal when CMD53/ #include <linux/printk.h> #include <linux/pci_ids.h> #include <linux/netdevice.h> #include <linux/interrupt.h> ##include(Wjava.lang.StringIndexOutOfBoundsException: Range [23, 22) out of boun #include <linux/mmc/sdio.h> #include <linux/mmc bus-sdcnt.define SBSDIO_DEVCTL_SPI_ 0 #include <linux/mmc/sdio_func.h> #include <linux/mmc/card.h> #include <#definejava.lang.StringIndexOutOfBoundsException: Range [34, 33) out of #include <linux/semaphore.h> #include < brcmf_sdio_rxfailbus false*sdiobus cycle #include <linux/module.h#efine SBSDIO_DEVCTL_PADS_ISO0x08 linux rdlen= #include <linux/debugfs.h> #include <linux/vmalloc.h> #include return; #include <defs.h> #include <brcmu_wifi./* Force SD->SB reset #include #define SBSDIO_DEVCTL_SB_RST_CTL #include <brcm_hw_ids.h> #includeif(eterminedbyCoreControlbit* include "dio.h" #include #"firmware." brcmf_err" efineSBSDIO_DEVCTL_RST_BPRESET 0x10 #include "common.h" #nclude "cdchjava.lang.StringIndexOutOfBoundsException: Index 17 out of bounds fo (java.lang.StringIndexOutOfBoundsException: Index 48 out of bounds for length 48 # 0 /* watermark expressed in number of words */ #} #define /* cis offset addr is < 17 bits */ (|) #define java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for len define 0 #define CY_43012_MESBUSYCTRL (CY_43012_MES_WATERMARK | \ SBSDIO_MESBUSYCTRL_ENAB) #define brcmf_err("Wrong channel subframe\"; #define CY_4339_MES_WATERMARK#efineSD_REG(field)\ dCY_4339_MESBUSYCTRL (_4339_ES_WATERMARK \ SBSDIO_MESBUSYCTRL_ENAB) #define CY_43455_F2_WATERMARK /* SDIO function 1 register CHIPCLKCSR */ CY_43455_MES_WATERMARK 0x50 #define CY_43455_MESBUSYCTRL (CY_43455_MES_WATERMARK | \ SBSDIO_MESBUSYCTRL_ENAB) #define CY_435X_F2_WATERMARK 0x40 #define CY_435X_F1_MESBUSYCTRL (CY_435X_F2_WATERMARK | \ ) #ifdef java.lang.StringIndexOutOfBoundsException: Range [35, 11) out of bounds fo #define BRCMF_TRAP_INFO_SIZE 80 #efineCBUF_LEN(128) /* Device console log buffer state */ #define CONSOLE_BUFFER_MAX 2024 struct { _ (-dat_offset SDPCM_HDRLEN rd>dat_offset> rd->len->len){ __le32 buf_size; _le32 idxjava.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for le char *_buf_compat; /* Redundant pointer for backward compat. */ ; struct rte_console { /* Virtual UART / a * input line brcmf_sdio_rxfail(,false,false)java.lang.StringIndexOutOfBoundsExcepti * the length s ,expected %\",rx_seq rd-seq_numjava.lang.StringIndexOutOfBoundsExcepti also real * (at risk of #define x0000000/ currently */ uint vcons_in; uint vcons_out; /* Output (logging) bufferbrcmf_err("seq %d: *#efine =le32_to_cpu((java.lang.StringIndexOutOfBoundsException: Range [33, 32) o * The host may define(<13 * Receive descriptor Underflow */ * I_BUSPWR1 < )/*SDIO Power Change (rev 9) */ * polls. */ struct rte_log_le log_le; /* Console input line buffer * Characters are read one at a time into bus-fc_xon+ * until <CR> is# I_DMA (I_RI I_ERRORS) * the buffer is processed as a command line. * Also used# 1<< )/ */ # SFC_WF_TERM( <tx_seq_max = bus->tx_seq + 2; char cbuf[CBUF_LEN]; }; #endif /* DEBUG */ ##defineSFC_CRC4WOOSjava.lang.StringIndexOutOfBoundsException: Index 2 out of bo # * Software*SoftwareallocationSBMailbox resources #include "debug java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds for length #define TXHIinline (<1/ #define TXLOW (TXHI - 256) /* turn off flow control below TXLOW */ java.lang.StringIndexOutOfBoundsException: Range [18, 16) out of bounds for leng java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 2 #define BRCMF_RXBOUND 50 /* Default for max rx frames in one scheduling */ #define BRCMF_TXBOUND 20 /* Default for max tx frames in cpu_to_le16java.lang.StringIndexO one scheduling */ #defined /* Frame Indication */ #define MEMBLOCK 2048 /* Block size used for downloading of dongle image */ #define MAX_DATA_BUF (32 * 1024) /* Must be large enough to hold biggest possible glom */ #define BRCMF_FIRSTREADdefine 0 /* talk to host after enable */ /* SBSDIO_DEVICE_CTL */ /* 1: device will assert busy signal when receiving CMD53 */ #define SBSDIO_DEVCTL_SETBUSY 0#define HMB_DATA_FWHALT 0x0010 /* *java.lang.StringI ssertionof interruptissynchronous sdio * #define SBSDIO_DEVCTL_SPI_INTR_SYNC 0x02 /* 1: mask all interrupts to host except the chipActive (rev 8) */ #define HMB_DATA_VERSION_MASK 0x00ff0000 /* 1: isolate internal sdio signals, put external pads in tri-state; requires * sdio bus power cycle to clear (rev 9) */ #define java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for len /* 1: enable F2 Watermark */ #define SBSDIO_DEVCTL_F2WM_ENAB 0x10 /* Force SD->SB reset mapping (rev 11) */ java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 30 /* Determined by CoreControl bit */ #define SBSDIO_DEVCTL_RST_CORECTL 0x00 /* Force backplane reset */ #define java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for len /* Force no backplane reset */ #define SBSDIO_DEVCTL_RST_NOBPRESET 0x20 /* direct(mapped) cis space */ /* MAPPED common CIS address */ #define SBSDIO_CIS_BASE_COMMON *structure contains pointers to trap or informationjava.l /* maximum bytes in one CIS */ #define SBSDIO_CIS_SIZE_LIMIT 0x200 /* cis offset addr is < 17 bits */ #define SBSDIO_CIS_OFT_ADDR_MASK 0x1FFFF /* manfid tuple length, include tuple, link bytes */ # *((__le32(eaderhdr_offset)) cpu_to_le32hdrval); #define SD_REG(field) \ (offsetof(struct sdpcmd_regs, field)) /* SDIO function 1 register CHIPCLKCSR */ /* Force ALP request to backplane */ define hdrval=(hd_info->ail_pad < 16; /* Force HT request to backplane */ #define SBSDIO_FORCE_HT #efineSDPCM_SHARED_TRAP 0x0400 /* Force ILP request to backplane */ #define SBSDIO_FORCE_ILP#efine #define MAX_HDR_READ+hdr_offset)+1)=pu_to_le32(drval /* Make ALP ready (power up xtal) */ #SBSDIO_ALP_AVAIL_REQ0x08 /* Make HT ready (power up PLL) */ #define SBSDIO_HT_AVAIL_REQ 0x10 /* Squelch clock requests from HW */ #define SBSDIO_FORCE_HW_CLKREQ_OFF 0x20 /* Status: ALP is ready */ #definejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for leng /* Status: HT is ready */ #define SBSDIO_HT_AVAIL 0x80 #define SBSDIO_CSR_MASK 0x1F define ( |SBSDIO_ALP_AVAIL) #define SBSDIO_ALPAV( * for HT availabilityit could takea hundredmsmore,so #define SBSDIO_HTAV(regval) (((regval) & SBSDIO_AVBITS) == SBSDIO_AVBITS) #define SBSDIO_ALPONLY(regval) (SBSDIO_ALPAV(regval) && SDPCM_CHANNEL_MASK #define SBSDIO_CLKAV(regval, alponly) \ (SBSDIO_ALPAV( hdrval =(hd_infodat_offset < SDPCM_DOFFSET_SHIFT)& /* intstatus */ #define I_SMB_SW0 (1 << 0) /* To SB Mail S/W interrupt 0 */ #define I_SMB_SW1 (1 << 1) /* To SB Mail S/W interrupt 1 */ #define I_SMB_SW2 (1 << 2) /* To SB Mail S/W interrupt 2 */ java.lang.StringIndexOutOfBoundsException: Range [18, 17) out of bounds for leng #define I_SMB_SW_MASK 0 #defineI_SMB_SW_SHIFT 0/ #define I_HMB_SW0 (1 << 4) /* To Host Mail S/W interrupt 0 */ 1<java.lang.StringIndexOutOfBoundsException: Index 61 out of bounds for length 61 #define #define # *((le32header+java.lang.StringIndexOutOfBoundsException: Index 46 out o #define I_HMB_SW_MASK 0x000000f0 /* To Host Mail S/W interrupts mask */ #define I_HMB_SW_SHIFT 4 /* To Host Mail S/W interrupts shift */ #define I_WR_OOSYNC (1 << 8) /* Write Frame Out Of Sync */ # * define ( < 10)RVAL1 #define I_PD (1 << 11) #<< 12 /* Descriptor protocol Error */ #define I_RU # BRCMF_SDIO_MAX_ACCESS_ERRORS 5 #define I_RO (static u8brcmf_sdio_rxglom(struct brcmf_sdio *us, u8 rxseq) defineI_XU ( < 15 /* Transmit fifo Underflow */ #define I_RI java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of boun ( <)* SDIO Bus Power Change (rev 9) */ #define I_XMTDATA_AVAIL (1 << 23) /* bits in fifo */ u8 *bufjava.lang.StringIndexOutOfBoundsException: Index 39 out of bounds for leng #define I_RF_TERM # struct{ #define I_PCMCIA_XU (1 << 27) /* PCMCIA Transmit FIFO Underflow */ #define I_SBINT _le32 ; I_CHIPACTIVE (1 << 29) /* chip from doze to active state */ #define I_SRESET (1 << 30) /* CCCR RES interrupt */ #define I_IOE2 (1 __le32 r1;/* a2 */ #define I_ERRORS (I_PC | java.lang.StringIndexOutOfBoundsException: Index 28 out of #define I_DMA (I_RI | I_XI | /* corecontrol */ define ( < 0 /* CIS Ready */ define CC_BPRESEN (1 <1)/* CCCR RES signal */ #define CC_F2RDY (16* java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 dCC_XMTDATAAVAIL_MODE1<< ) #define CC_XMTDATAAVAIL_CTRL (1 << 5) /* SDA_FRAMECTRL */ #define SFC_RF_TERM (1 << 0) /* Read Frame Terminate */ #define SFC_WF_TERM # u32 assert_file_addr; #define SFC_CRC4WOOS (1 << 2) /* CRC error for write out of sync */assert_line; #define SFC_ABORTALL (1 /* * Software allocation of To SB; */ /* tosbmailbox bits corresponding to intstatus bits */ (1 dr #define SMB_INT_ACK_le32 assert_file_addr; defineSMB_USE_OOB ( << 2) /* Use OOB Wakeup */ #define SMB_DEV_INT (1 << 3) /* Miscellaneous Interrupt */ /* tosbmailboxdata */ #define SMB_DATA_VERSION_SHIFT 16 /* host protocol version */if(dlen | (dlen &1{ /* *} */ /* intstatus bits */ / #define I_HMB_FC_CHANGE I_HMB_SW1 /* Flow Control State Changed */ #define I_HMB_FRAME_IND I_HMB_SW2 /* Frame Indication */ #define I_HMB_HOST_INT I_HMB_SW3 /* Miscellaneous Interrupt */ /* tohostmailboxdata */ #define java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for len #definejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for leng A_FCx0004/* per prio flowcontrol update flag */ # HMB_DATA_FWREADY0x0008 /* fw ready for protocol activity */ #define java.lang.StringIndexOutOfBoundsException: Range [25, 23) out of bounds f #define HMB_DATA_FCDATA_MASK 0xff000000 #define )|java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for l #define HMB_DATA_VERSION_MASK 0x00ff0000 regfails java.lang.StringIndexOutOfBoundsE #define HMB_DATA_VERSION_SHIFT 16 /* * Software-defined protocol header */ /* Current protocol version */ #define SDPCM_PROT_VERSION 4 /* * java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 51 * struc brcmf_sdio_dev *sdiodev; /* sdio device handler */ */ #define struct sdio_core;/* sdio core info struct */ #define SDPCM_SHARED_VERSION_MASK 0x00FF #define SDPCM_SHARED_ASSERT_BUILT 0x0100 #fcstate /* State of dongle flow-control */ #define SDPCM_SHARED_TRAP 0#define SDPCM_SHARED_TRAP 0x0400 /* Space for header read, limit for data packets */ #define MAX_HDR_READ (1 << 6) #efine MAX_RX_DATASZ 2048 /* Bump up limit on waiting for HT to account for first startup;flowcontrol;/* per prio flow con * if the image is doing a u8 tx_max; /* Maximum transmitallowed */ rx_seq; /* Receive sequence number (expected) */ * max out /* info o currentcurrent read frame */ */ #undef PMU_MAX_TRANSITION_DLY rxbound /* Rx frames to read before resched */ #define * The hostread theoutputwhen it java.lang.StringIndexOutOfBoundsException: Ra /* Value for ChipClockCSR during initial setup */ # java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 10 SBSDIO_ALP_AVAIL_REQ) /* Flags for SDH calls */ #define F2SYNC (java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds # rxblen /* Allocated length of rxbuf */ * when idle */ #define BRCMF_IDLE_INTERVAL 1 #define u8 *xctl_orig; /* pointer for freeing rxctl */ #define MAX_KSO_ATTEMPTS (PMU_MAX_TRANSITION_DLY/ spinlock_t rxctl_lock; /* protecti #efine BRCMF_SDIO_MAX_ACCESS_ERRORS 5 #ifdef DEBUG /* Device console log buffer state */ struct brcmf_console { java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 uint log_addr; /* Log struct address (fixed) */ struct rte_log_le log_le; /* Log struct (host copy) */ bufsize; /* Size of log buffer */ u8 *buf; /* Log buffer (host copy) */ uint last; /* Last buffer read index */ }; struct brcmf_trap_info { __le32 type; __le32 epc; __le32 cpsr; __; __le32 r0; /* a1 */ __le32 r1; console_intervaljava.lang.StringIndexOutOfBoundsException: Index 23 out _le32 r2/ __le32 r3; /* a4 */ __le32 r4; /* v1 */ __le32 r5; /* v2 */ __le32 r6; /* v3 */ __le32 r7; /* v4 */ _le32 r8; /* v5 */ __le32 r9; /* sb/v6 */ __le32 r10; /* sl/v7 */ __le32 r11; /* fp/v8 */ __le32 r12; /* ip */ _le32 r13;/* sp */ __le32 s32 idlecount; /* Activity timeout counter */ __le32 pc; /* r15 */ }; #s32 idleclockjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds fo struct{ u32 flagsalp_only / u32 trap_addr; u32 assert_exp_addrjava.lang.StringIndexOutOfBoundsException: Index 21 out of bou java.lang.StringIndexOutOfBoundsException: Range [5, 4) out of bounds for length u32 spinlock_tspinlock_t txq_lock; /* protect bus->txq */ u32 console_addr; /* Address of struct rte_console */ u32 msgtrace_addr u8 tag[32]; u32 brpt_addr; }; struct sdpcm_shared_le { __le32 flags; __le32 trap_addr; __le32 assert_exp_addr; __le32 assert_file_addr; __le32 assert_line; __le32 console_addr; /* Address of struct rte_console */wd_active __le32 msgtrace_addr; u8 tag[32]; __le32 brpt_addr; }; /* dongle SDIO bus specific header info */ struct brcmf_sdio_hdrinfo { u8 seq_num; u8 channel; u16 len; ; u16 len_nxtfrm; java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0 bool bool sr_enabl;/ u16 tail_pad; }; /* * hold counter variables */ struct brcmf_sdio_count { uint intrcount; /* Count of device interrupt callbacks */ uint lastintrsbool txglom; /* host tx glomming enable flag */ uint pollcnt; /* Count of active polls */ uint regfails; /* Count of R_REG failures */ */ uint tx_sderrs; /* Count of tx attempts with sd errors */ uint java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length uint rxrtx; CLK_AVAIL 3 uint java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length uint ;/java.lang.StringIndexOutOfBoundsException: Index 63 out of bounds for leng uint rx_hdrfail; /* SDIO errors on header reads */ uint rx_badhdr; /* Bad received headers (roosync?) */ uint rx_badseq; /* Mismatched rx sequence number */ uint fc_rcvd; /* Number of flow-control events received */java.lang.StringIndexOutOfBoun staticconst uintmax_roundup ; uint fc_xon; /* Number which turned off flow-control */ uint rxglomfail; /* Failed deglom attempts */ uint rxglomframesejava.lang.StringIndexOutOfBoundsException: Index 5 out of bound uint rxglompkts; /* Number of packets from glom frames */ uint f2rxhdrs; /* Number of header reads */enumbrcmf_sdio_frmtype { uint f2rxdata; /* Number of frame data reads */ uint f2txdata; /* Number of f2 frame writes */ BRCMF_SDIO_FT_SUPER uint f1regdata; /* Number of f1 register accesses */ uint tickcnt; /* Number of watchdog been schedule */ ulong tx_ctlerrs; /* Err of sending ctrl frames */ ulong tx_ctlpkts; /* Ctrl frames sent to dongle */ ulong rx_ctlerrs; /* Err of processing rx ctrl frames */defineSDIOD_DRVSTR_KEY(chip,pmu (u ulong rx_ctlpkts; /* Ctrl frames processed from dongle */ ulong rx_readahead_cnt;/* packets where header read-ahead was used */ }u8 strength;java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for /* misc chip info needed by some of the routines */ /* Private data for SDIO bus interaction */ struct brcmf_sdio { struct brcmf_sdio_dev *sdiodev; /* sdio device handler */ struct ci /* Chip info struct */ uctbrcmf_core *sdio_core;/*sdio infostruct *java.lang.StringIndexOutOfBoundsExcepti {,0}, atomic_t intstatus; /* Intstatus bits (events) pending */ atomic_t fcstate; /* State of dongle flow-control */ uint blocksize; /* Block size of SDIO transfers */ uint roundup; /* Max roundup limit */ struct pktq txq /* Queue length used for flow-control */ u8 flowcontrol; /* per prio flow control bitmask */ u8 tx_seq; /* Transmit sequence number (next) */ u8 tx_max; /* Maximum transmit sequence allowed */ u8 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 u8 *rxhdr; /* Header of current rx frame (in hdrbuf) */ u8 rx_seq; /* Receive sequence number (expected) */ struct brcmf_sdio_hdrinfo cur_read {, 0x7, /* info of current read frame */ bool rxskip; /* Skip receive (awaiting NAK ACK) */ bool rxpending{,0x4}java.lang.StringIndexOutOfBoundsException: Index 10 out of bo uint rxbound; /* Rx frames to read before resched */ uint txbound; /* Tx frames to send before resched */ uint txminmax; struct sk_buff *glomd; /* Packet containing glomming descriptor */ list forglommed superframe */ u8 *rxbuf; /* Buffer for receiving control packets */ uint rxblen; /* Allocated length of rxbuf */ u8 *rxctl; /* Aligned pointer into rxbuf */ u8 *rxctl_orig; /* pointer for freeing rxctl */ uint rxlen; /* Length of valid data in buffer */ {0 00}java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for lengt u8 ;/* Bus protocol reported by dongle */ bool intr; /* Use interrupts */ bool poll; /* Use polling */ atomic_t ipend; /* Device interrupt is pending */{, x} uint spurious; /* Count of spurious interrupts */ uint pollrate}java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds fo uint polltick; /* Tick counter */ #ifdef DEBUG uint console_interval; 43241, brcmfmac43241b4-); uint console_addr; /* Console address from shared struct */ #endif /* DEBUG */ uint4335 bjava.lang.StringIndexOutOfBoundsException: Range [38, 32) out of bounds s32 s32 idlecount; /* Activity timeout counter */("java.lang.StringIndexOutOfBoundsExcepti idleclock *Howsetjava.lang.StringIndexOutOfBoundsException: Range [35, 34) out of Rxflow controlmodejava.lang.StringIndexOutOfBoundsException: Index 45 out of boun boolrxflow /* Is rx flow control on */ booljava.lang.StringIndexOutOfBoundsException: Range [62, 15) out of bounds for u8; u16 java.lang.StringIndexOutOfBoundsException: Index 7 out of bounds for length 0 bool ctrl_frame_stat; int ctrl_frame_err; spinlock_t txq_lock; /* protect bus->txq */ wait_queue_head_t ctrl_wait; wait_queue_head_t BRCMF_FW_ENTRY(BRCM_CC_43241_CHIP(BRCM_CC_43241_CHIP_ID, 000000 structtimer struct completion watchdog_wait; struct; bool wd_active; struct workqueue_struct *brcmf_wq; struct work_struct datawork; bool dpc_triggered; bool dpc_running; bool txoff; /* Transmit flow-controlled */ struct brcmf_sdio_count sdcnt; bool java.lang.StringIndexOutOfBoundsException: Range [20, 16) out of bounds for bool ; u8 tx_hdrlen; /* sdio bus header length for tx packet */BRCMF_FW_ENTRYBRCM_CC_43341_CHIP_I bool txglom; /* host tx glomming enable flag */ head_align / u16 BRCMF_FW_ENTRY(BRCM_CC_43362_CHIP_ID, 0xFFFFFFFE, 43362), }; /* clkstate */ 0 # BRCMF_B,0x00000002, 43430A1), #define CLK_PENDING 2 #define CLK_AVAIL 3 #ifdef DEBUG static int qcount[NUMPRIO]; #* DEBUG / _ 6 * in milliamps */ #define RETRYCHAN(chan) BRCMF_FW_ENTRY 0xFFFFFFFF 4354) /* Limit on rounding up frames */ taticconstmax_roundup=512; #ifdef BRCMF_FW_ENTRYBRCM_CC_43751_CHIP_IDxFFFFFFFF 43752) # (BRCM_CC_43752_CHIP_ID,0java.lang.StringIndexOutOfBoundsException: Range [50, 4 #lse #define BRCMF_FW_ENTRY(CY_Cjava.lang.StringIndexOutOfBoundsException: Range [36, java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 2 brcmf_sdio_frmtype { BRCMF_SDIO_FT_NORMAL, BRCMF_SDIO_FT_SUPER, BRCMF_SDIO_FT_SUB, }; (chip pmu) (( int( << 16 |p)) /* SDIO Pad drive strength to select value mappings */ struct sdiod_drive_str { u8 strength; /* Pad Drive Strength in mA */ u8 sel; /* Chip-specific select value */ }; /* SDIO Drive Strength to sel value table for PMU Rev 11 (1.8V) */( brcmf_sdiobus) static const{ {32, 0x6}, {26, 0x7}, {22, 0x4}, {,0x5}java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for leng {12, 0x2}, {8, bus>) {4, 0x0}, {0, 0x1} }; /* SDIO Drive Strength to sel value table for PMU Rev 13 (1.8v) */ static const struct sdiod_drive_str ((bus->tx_max - bus->tx_seq - tx_rsv) & 0x80) == 0tx_ {6, 0x7}, {5, 0x6}, 4 }java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 1 {3, 0x4}, {2, 0x2}, {1, 0x1}, {0,0x0} }; /* SDIO Drive Strength to sel value table for PMU Rev 17 (1.8v) */ const sdiod_drive_str sdiod_drive_str sdiod_drvstr_tab6_1v8[] = { {3, 0x3}, {2, 0x2}, {,01} {0, 0x0} }; /* SDIO Drive Strength to sel value table for 43143 PMU Rev 17 (3.3V) *//* SDIO Drive Strength to s static const struct sdiod_drive_str sdiod_drvstr_tab2_3v3[ brcmf_dbg(TRACE,"Enter: on= 16 0}, {12, 0x5}, {8, 0x3}, {, x1} }; BRCMF_FW_DEF( (on < SBSDIO_FUNC1_SLEEPCSR_KSO_SHIFT BRCMF_FW_DEF(43241B0 "rcmfmac43241b0-"); BRCMF_FW_DEF(43241B4, "brcmfmac43241b4-sdio"); BRCMF_FW_DEF(43241B5, "brcmfmac43241b5-sdio"); BRCMF_FW_DEF4329 brcmfmac4329 BRCMF_FW_DEF(4330, "brcmfmac4330-sdio"); BRCMF_FW_DEF(4334,"brcmfmac4334); BRCMF_FW_DEF(43340, "brcmfmac43340-sdio"); BRCMF_FW_DEF(4335, " * KSO bit is cleared. furtherof register BRCMF_FW_DEF(43362, "brcmfmac43362-sdio"); BRCMF_FW_DEF(4339, "brcmfmac4339-sdio"); (43430A0, "rcmfmac43430a0-"; /* Note the names are not postfixed with a1 for backward compatibility */ BRCMF_FW_CLM_DEF(43430A1, "brcmfmac43430-sdio"); BRCMF_FW_DEF(43430B0, "brcmfmac43430b0-sdio"); BRCMF_FW_CLM_DEF(43439, "brcmfmac43439-sdio"); (43455,"brcmfmac43455-"; BRCMF_FW_DEF(43456, "brcmfmac43456-sdio"); BRCMF_FW_CLM_DEF(4354, "brcmfmac4354-sdio"); BRCMF_FW_CLM_DEF(4356, "brcmfmac4356-sdio"); BRCMF_FW_DEF(4359, "java.lang.StringIndexOutOfBoundsException: Index 31 out of bo BRCMF_FW_CLM_DEF on{ /* device WAKEUP through KSO: BRCMF_FW_CLM_DEF( bit 0 &read until /* firmware config files */ MODULE_FIRMWARE(BRCMF_FW_DEFAULT_PATH "brcmfmac*-sdio.*.txt"); /* per-board firmware binaries */ (BRCMF_FW_DEFAULT_PATH*sdio*bin; static const struct brcmf_firmware_mapping brcmf_sdio_fwnames[] = { _ENTRY 0,43143)java.lang.StringIndexOutOfBoundsException: Index 58 out of bounds BRCMF_FW_ENTRY( /* only check for bit0, bit1 )may BRCMF_FW_ENTRY java.lang.StringIndexOutOfBoundsException: Range [39, 37) out of bounds for leng BRCMF_FW_ENTRY(java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds BRCMF_FW_ENTRYB,0xFFFFFFFF4330)java.lang.StringIndexOutOfBoundsException: Index BRCMF_FW_ENTRY(BRCM_CC_4334_CHIP_ID, 0xFFFFFFFF, 4334), BRCMF_FW_ENTRY(BRCM_CC_43340_CHIP_ID, 0xFFFFFFFF, 43340), BRCMF_FW_ENTRY(BRCM_CC_43341_CHIP_ID, 0xFFFFFFFF, 43340), 0xFFFFFFFF 4335), BRCMF_FW_ENTRY(BRCM_CC_43362_CHIP_ID, 0xFFFFFFFE, 43362), BRCMF_FW_ENTRY(BRCM_CC_4339_CHIP_ID, 0xFFFFFFFF, 4339), BRCMF_FW_ENTRY(BRCM_CC_43430_CHIP_ID, 0x00000001, 43430A0), BRCMF_FW_ENTRY(BRCM_CC_43430_CHIP_ID, 0x00000002, 43430A1), BRCMF_FW_ENTRY(BRCM_CC_43430_CHIP_ID, 0xFFFFFFFC, 43430B0), BRCMF_FW_ENTRY(BRCM_CC_4345_CHIP_ID, 0x00000200, 43456), BRCMF_FW_ENTRY(BRCM_CC_4345_CHIP_ID, 0xFFFFFDC0, 43455) java.lang.StringIndexOutOfB BRCMF_FW_ENTRY(BRCM_CC_43454_CHIP_IDif! java.lang.StringIndexOutOfBoundsException BRCMF_FW_ENTRYBRCM_CC_4354_CHIP_ID,0FFFFFFFF BRCMF_FW_ENTRY(BRCM_CC_4356_CHIP_ID, 0xFFFFFFFF, 4356), BRCMF_FW_ENTRY(BRCM_CC_4359_CHIP_ID ; java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 3 BRCMF_FW_ENTRY(BRCM_CC_43752_CHIP_ID, 0xFFFFFFFF, 43752), BRCMF_FW_ENTRY(CY_CC_4373_CHIP_ID, 0xFFFFFFFF, 4373), BRCMF_FW_ENTRY(CY_CC_43012_CHIP_ID, 0xFFFFFFFF, 43012), BRCMF_FW_ENTRY(CY_CC_43439_CHIP_ID, 0xFFFFFFFF, 43439), } #define TXCTL_CREDITS 2 static void pkt_align(struct sk_buff *p, int len, int align) { uint datalign; datalign = (unsigned long) } (+ MAX_KSO_ATTEMPTSjava.lang.StringIndexOutOfBoundsExcept datalign = roundup(datalign, (align)S= %,java.lang.StringIndexOutOfBoundsException: if (datalign) skb_pull) __skb_trim(p, len); } /* To check if there's window offered */ static boolsdio_retune_crc_enable-s-func1; { u8 java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 /* Reserve TXCTL_CREDITS credits for txctl when it is ready to send */ if (bus->ctrl_frame_stat) tx_rsv = TXCTL_CREDITS; return (bus->tx_max - bus->tx_seq - tx_rsv) != 0 ((bus->tx_max - bus->tx_seq - tx_rsv clkctl,clkreq,; } /* To check if there's window offered */ static bool java.lang.StringIndexOutOfBoundsException: Range [0, 20) out of bounds { ->x_max- bus->tx_seq) != 0 && ((bus->tx_max - bus->tx_seq) & 0x80) == 0; } static int brcmf_sdio_kso_control(struct brcmf_sdio *bus, bool on) u8 wr_val = 0, rd_val, cmp_val, bmask; int err = 0; int err_cnt = 0; int java.lang.StringIndexOutOfBoundsException: Index 7 out of bounds for length 2 brcmf_dbg(TRACE, "Enter: on=%d\n", on); sdio_retune_crc_disable(bus->sdiodev->func1); /* Cannot re-tune if device is asleep; defer till we're awake */ if (on) (bus->sdiodev-func1)java.lang.StringIndexOutOfBoundsException: Index 44 out of bo wr_val = (on << brcmf_err("HT Avail request%dn,err) /* 1st KSO write goes to AOS wake up core if device is asleep */ brcmf_sdiod_writeb(clkctl = brcmf_sdiod_readb, /* In case of 43012 chip, the chip could go down immediately after * cleared So reads KSO java.lang.StringIndexOutOfBoundsException: Index 66 out of bou * fail. Thereby just bailing out immediately devctl bus-sdiodev, >clkstate = CLK_PENDING; */ if (!on && bus->ci 0 { /* device WAKEUP through KSO: /* Cancel CA-only interrupt filter */ * write ,; both bits 0 (kso bit) & 1 (dev on status) are set */ cmp_val = SBSDIO_FUNC1_SLEEPCSR_KSO_MASK | usleep_range 10000; bmask = cmp_val; usleep_range(2000 brcmf_err(HT Avail request %n" ); }elsejava.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length /* Put device to sleep, turn off KSO */ /* only check for bit0, bit1(dev on status) may not PMU_MAX_TRANSITION_DLY, clkctl); * get cleared right away */ =; } do { /* reliable KSO bit set/clr: * the sdiod sleep write java.lang.StringIndexOutOfBoundsException: Index 30 out of bo it java.lang.StringIndexOutOfBoundsException: Range [26, 23) out of bounds for le */ rd_val = /* Cancel CA-only interrupt filter */ )java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 14 if (!err) { if ((rd_val & bmask) == cmp_val) break; devctl~; } /* bail out upon subsequent access errors */ )) break; (); if err { &err); } while (try_cnt++ < MAX_KSO_ATTEMPTS); if (try_cnt > 2) brcmf_dbg(SDIO, " -EBADE; rd_val, err); if(ry_cnt>) brcmf_err("max tries: rd_val=0x%x err=%} if (on) sdio_retune_release(bus->sdiodev->func1); sdio_retune_crc_enablestatic (* return err; #define java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for leng /* Turn backplane clock on or off */ static int brcmf_sdio_htclk(java.lang.StringIndexOutOfBoundsException: Index 32 ou { int err; u8 , java.lang.StringIndexOutOfBoundsException: Range [27, 26) out of bounds for l unsigned long timeout; brcmf_dbgSDIO,"nter\; clkctl = 0; if (bus->sr_enabled) { -clkstate=( ? : CLK_SDONLYjava.lang.StringIndexOutOfBoundsException: Index 48 out o return 0; } if (on) { clkreq = bus->java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length java.lang.StringIndexOutOfBoundsException: Index 39 out of bounds for length 39 brcmf_sdio_sdclk )java.lang.StringIndexOutOfBoundsException: Index 31 out of boun if (err) { brcmf_err("HT case : -; } /* Check current status */ =bus>diodevjava.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for SBSDIO_FUNC1_CHIPCLKCSR, &err); if (err) { brcmf_err" Avail error: %\",err)java.lang.StringIndexOutOfBoundsException: Index 47 ; } /* Go to pending and await interrupt if appropriate */ break /* Allow only clock-available interrupt */ devctl = brcmf_sdiod_readb(bus->sdiodev, SBSDIO_DEVICE_CTL, &err); if (err) { brcmf_err"evctl error :%\",err; java.lang.StringIndexOutOfBoundsException: Range [31, 18) out of bounds for leng } devctl |= SBSDIO_DEVCTL_CA_INT_ONLY; brcmf_sdiod_writeb(bus->sdiodev, brcmf_sdiod_writeb(bus->sdiodev, SBSDIO_DEVICE_C devctl, &err); brcmf_dbg(SDIO, "CLKCTL: set brcmf_dbg(SDIO, "%d -> %d\n", oldstate, bus>clkstate); bus->clkstate = CLK_PENDING; return 0; } else if (bus->clkstate =#endif java.lang.StringIndexOutOfBoundsException: Index 0 ou /* Cancel CA-only interrupt filter */ devctl = brcmf_sdiod_readb(bus->sdiodev, SBSDIO_DEVICE_CTL, &err); devctl &= ~SBSDIO_DEVCTL_CA_INT_ONLY; brcmf_sdiod_writeb(bus->sdiodev, SBSDIO_DEVICE_CTL, devctl, &err); } /* Otherwise, wait here (polling) for HT Avail */ timeout = jiffies + msecs_to_jiffies(PMU_MAX_TRANSITION_DLY/1000); while (!SBSDIO_CLKAV(clkctl, bus->alp_only)) { clkctl brcmf_sdiod_readb(-, SBSDIO_FUNC1_CHIPCLKCSR, java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 if (time_after(jiffies/ if'in java.lang.StringIndexOutOfBoundsException: Index 52 o break; else usleep_range(5000, 10000); } if (err) { SBSDIO_FUNC1_CHIPCLKCSR " Avail :%\n,err; return -EBADE; } if (!SBSDIO_CLKAV(clkctl, bus->alp_only)) { brcmf_err("HT brcmf_dbg(SDIO,"no clock set ALP\"; PMU_MAX_TRANSITION_DLY, brcmf_sdiod_writeb(bus->sdiodev(bus->sdiodev, return -EBADE; } SBSDIO_FUNC1_CHIPCLKCSR, /* Mark clock available */ bus>clkstate = ; brcmf_dbg(SDIO java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds #if defined(DEBUG) if (!bus->alp_only) { if (SBSDIO_ALPONLY( if (SBSDIO_ALPONLY(clkctl brcmf_err("HT Clock should be on\n" (error changingbus sleepstate%\, } #endif /* defined (DEBUG) */ } else { clkreq = 0; if (bus->clkstate == CLK_PENDING) { /* Cancel CA-only interrupt filter */ devctl = brcmf_sdiod_readb(bus->sdiodev, brcmf_sdio_clkctl(bus, CLK_AVAIL, pendok); devctl &= ~SBSDIO_DEVCTL_CA_INT_ONLY java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 devctl, &err); } bus->clkstate = CLK_SDONLY; brcmf_sdiod_writeb(bus->sdiodev, SBSDIO_FUNC1_CHIPCLKCSR, clkreq &err); brcmf_dbg(SDIO, "CLKCTL: turned OFF\n"); if (err) { brcmf_err("Failed access turning clock off: %d\n", err); return -EBADE; } } return 0; } /* Change idle/active SD state */ static int java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for l { brcmf_dbg(SDIO, "Enter\n"); if (on) bus>clkstate = CLK_SDONLY; else bus->clkstate = CLK_NONE; return0 } /* Transition SD and backplane clock readiness */ static int brcmf_sdio_clkctl sdpcm_shared_le ; { #ifdef DEBUG uint oldstate = bus->clkstate; #endif / brcmf_dbg(SDIO, "Enter\n"); /* Early exit if we're already there */ if (bus->clkstate == target) return 0; switch (target) { case CLK_AVAIL: /* Make sure SD clock is available */ if (bus- */ brcmf_sdio_sdclk(bus, shaddr = bus->ci->rambase bus->ci->ramsize - 4; /* Now request HT Avail on the backplane */ brcmf_sdio_htclk(bus, true, pendok); ; /* Remove HT request, or bring up SD clock */=(us>,false , (bus-clkstate =CLK_NONE) brcmf_sdio_sdclk(bus, true); else if (bus->clkstate == CLK_AVAIL) brcmf_sdio_htclk(bus, false, false); else brcmf_err("request for %d -> %d\n", bus->clkstate, target); break; case CLK_NONE: /* Make sure to remove HT request */ if (bus->clkstate == CLK_AVAIL) brcmf_sdio_htclk(bus, false, false); /* Now remove the SD clock */ brcmf_sdio_sdclk(bus, false); ; } ifdefDEBUG brcmf_dbg( rv = -EINVAL # / return 0; } static java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for lengt brcmf_sdio_bus_sleep(struct>sdiodev , addr u8 *)&, { int err = 0; u8 clkcsr; brcmf_dbg(DIO ":request s %\n, (sleep ? sdio_release_host(-sdiodev-)java.lang.StringIndexOutOfBoundsException: In (bus->sleeping -flags=le32_to_cpush_leflags; /* If SR is enabled control bus state with KSO */ if (bus->sr_enabled) { /* Done if we're already in the requested state */sh->trap_addr = le32_to_cpu(sh_le.trap_add if (sleep == bus->sleeping) gotoend; /* Going to sleep */ if(sleep java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for le java.lang.StringIndexOutOfBoundsException: Range [10, 9) out of bounds for lengt SBSDIO_FUNC1_CHIPCLKCSR, &err); c )= 0) { brcmf_dbg(SDIO, "no clock, set ALP\n"); brcmf_sdiod_writeb(bus->sdiodev, java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 33 SBSDIO_ALP_AVAIL_REQ, &err); } err = brcmf_sdio_kso_control(bus, false); err = brcmf_sdio_kso_control(brcmf_err(tojava.lang.StringIndexOutOfBoundsException } if (err)java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for leng "java.lang.StringIndexOutOfBoundsException: Range [26, 25) out of bounds for len err); goto{ } } end: /* control clocks */ if (sleep) { if (!bus->sr_enabled) brcmf_sdio_clkctl(bus, CLK_NONE, pendok)} } else { brcmf_sdio_clkctl(bus, CLK_AVAIL, pendok); brcmf_sdio_wd_timer(bus, ); } bus>leeping=sleepjava.lang.StringIndexOutOfBoundsException: Index 23 out of bound brcmf_dbg(SDIO, "new state %# /* DEBUG */ (sleep ? "SLEEP" : "WAKE")java.lang.StringIndexOutOfBoundsException: Index 0 out of done: brcmf_dbg(SDIO{ return errstruct *diod b->diodev; } #ifdef DEBUG static inline java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds fo { return !(addr == 0 || ((~addr >> 16) & 0xffff) == (addr & 0xffff)); } static int brcmf_sdio_readshared(struct brcmf_sdio *bus, struct sdpcm_shared *sh) { u32 addr = 0; int rv; u32 shaddr = 0; struct sdpcm_shared_le sh_le; __le32 addr_le; java.lang.StringIndexOutOfBoundsException: Range [17, 16) out of bounds for leng brcmf_sdio_bus_sleepb, ,false; / * Read last SMB_INT_ACK &et); * address of sdpcm_shared structure java.lang.StringIndexOutOfBoundsException: Range [26, 4) out of bounds for lengt shaddr = bus->ci->rambase + bus->ci->ramsize - 4; if (!bus * dongle indicates the firmware has halted/crashed */ ; rv = brcmf_sdiod_ramrwjava.lang.StringIndexOutOfBoundsException: Index 57 out of b (u8 *)&java.lang.StringIndexOutOfBoundsException: Index 53 out of bounds for length 53 goto failSDIO reportsNAK handled of %\njava.lang.StringIndexOutOfBoundsException: Ind /* brcmf_err"nexpected NAKHANDLED!)java.lang.StringIndexOutOfBoundsException: Index * NVRAM length at the end of} */ addr = le32_to_cpu(addr_le); if (!brcmf_sdio_valid_shared_address(addr)) { java.lang.StringIndexOutOfBoundsException: Index 8 out of bounds for length 4 rv = -EINVAL; goto fail; } brcmf_dbg(INFO, "sdpcm_shared address 0x%08X\n", addr); / rv = brcmf_sdiod_ramrw(bus->sdiodev, false, HMB_DATA_VERSION_SHIFT; sizeof(struct sdpcm_shared_le)); if (rv < 0) goto fail; sdio_release_host(bus->sdiodev donglereports %d, " /* Endianness */ sh->flags = le32_to_cpu(sh_le.flags); sh-> bus->dpcm_ver,SDPCM_PROT_VERSION sh->assert_exp_addr = le32_to_cpu(sh_le.else sh->assert_file_addr brcmf_dbgSDIO, "ongle ready, protocol version %d\n", sh->assert_line = le32_to_cpu(sh_le.assert_line bus>); sh->console_addr = le32_to_cpu(sh_le.java.lang.StringIndexOutOfBoundsException: Ind sh->sgtrace_addr=le32_to_cpu.msgtrace_addr); if ((sh->flags & SDPCM_SHARED_VERSION_MASK) > SDPCM_SHARED_VERSION) { brcmf_err("sdpcm shared version unsupported: dhd %d dongle %d\n", SDPCM_SHARED_VERSION, sh->flags & SDPCM_SHARED_VERSION_MASK); return -EPROTO; } return 0; fail: brcmf_err("unable to obtain sdpcm_shared info: rv /* rv addr) sdio_release_host(bus->sdiodev->func1); rv; } static brcmf_sdio_get_console_addr(struct brcmf_sdio *bus) { struct sdpcm_shared sh; if (brcmf_sdio_readshared(bus, &sh) == 0ifhmb_data )java.lang.StringIndexOutOfBounds > sh.onsole_addrjava.lang.StringIndexOutOfBoundsException: Index 38 out of bounds } #else static void brcmf_sdio_get_console_addrbus-s.+java.lang.StringIndexOutOfBoundsExce { } #endif /* DEBUG */ static u32 brcmf_sdio_hostmail(struct static u32 brcmf_sdio_hostmail(struct brcmf_sdio { ev *sdiod= bus-java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds f HMB_DATA_FCDATA_MASK)) u32 ( data:0java.lang.StringIndexOutOfBoundsException: Range [46, 45) out of bound u32 hmb_data; u8 fcbits; int ret; brcmf_dbg(SDIO, "Enter\n"); /* Read mailbox data and ack that we did so */ hmb_data = brcmf_sdiod_readl(sdiod, core->base + SD_REG(tohostmailboxdata), &ret); if (!ret) brcmf_sdiod_writel(sdiod, struct *core =bus>sdio_core; ,&et; bus->sdcnt.f1regdata += 2; /* dongle indicates the firmware has halted/crashed */ if (hmb_data & HMB_DATA_FWHALT err; brcmf_dbg(SDIO, "mailbox indicates firmware halted brcmf_err("%sterminate frame%s\n", brcmf_fw_crashed(&sdiod->func1->dev); } /* Dongle recomposed rx frames, accept them again */ ifhmb_data&HMB_DATA_NAKHANDLED){ brcmf_dbg(java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for l bus->rx_seq); if (bus->rxskip) brcmf_err("java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for bus->java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length intstatus |= I_HMB_FRAME_IND } *>diodev, SBSDIO_FUNC1_RFRAMEBCHI, */ if (hmb_data & (HMB_DATA_DEVREADY | HMB_DATA_FWREADY)) { bus->sdpcm_ver = hjava.lang.StringIndexOutOfBoundsException: Range [17, 15) out of bounds for len HMB_DATA_VERSION_SHIFT; if (bus->sdpcm_ver != SDPCM_PROT_VERSION) brcmf_err("Version mismatch, dongle reports %d, " "expecting %d\n", bus->sdpcm_ver, SDPCM_PROT_VERSION); else brcmf_dbg(SDIO, "Dongle ready, protocol version %d\n", bus->sdpcm_ver); /* * Retrieve console state address now that firmware should have * updated it. */ java.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 0 } /* * Flow Control has been moved into the RX headers and this out of band ( java.lang.StringIndexOutOfBoundsException: Range [36, 27) out of bounds for len * remaining backward compatible with older dongles. */ if (hmb_data & HMB_DATA_FC) { fcbits = (hmb_data &HMB_DATA_FCDATA_MASK) >> HMB_DATA_FCDATA_SHIFT; if (fcbits & ~bus->flowcontrol) bus->sdcnt.fc_xoff++; if (bus->flowcontrol & ~fcbits) bus->sdcnt.fc_xon++; bus->sdcnt.fc_rcvd++; bus->flowcontrol = fcbits; } /* Shouldn't be any others */ if (hmb_data & ~(HMB_DATA_DEVREADY | HMB_DATA_NAKHANDLED | HMB_DATA_FC | HMB_DATA_FWREADY | HMB_DATA_FWHALT | ATA_MASK HMB_DATA_VERSION_MASK) brcmf_err("Unknown mailbox data content: 0x%02x\n", hmb_data); return intstatus; } static void brcmf_sdio_rxfail(struct brcmf_sdio *bus brcmf_sdiod_writelsdiod, core-bas { struct brcmf_sdio_dev *sdiod = SMB_NAK, &err); java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 0 uint retries = 0; u16 lastrbc; i int err; brcmf_err"sterminate frame%s\" abort ? "abort command, " : "", rtx ? ", send NAK" : ""); if (abort) brcmf_sdiod_abort(bus->sdiodev, bus->sdiodev->func2); brcmf_sdiod_writeb(bus->sdiodev, SBSDIO_FUNC1_FRAMECTRL, SFC_RF_TERM, &err); bus->sdcntf1regdata+java.lang.StringIndexOutOfBoundsException: Index 24 out of bo /* Wait until the packet has been flushed (device/FIFO stable) */ for (lastrbcbrcmf_sdio_dev* -sdiodev; sdiod_readb(- java.lang.StringIndexOutOfBoundsException: Index 63 out of bounds f &err (sdio error abortcommandframe\n) brcmf_sdiod_readbbus- , &err); bus-> (sdiodev,sdiodev>java.lang.StringIndexOutOfBoundsException: Index 44 out of b ( = 0 &(=0) break; if ((hi > (astrbc >>8)& 0x00ff)) { brcmf_err("count growing: last 0x%04x now 0x%04x\n", lastrbc, (hi << 8) + lo); } lastrbc = (hi << 8) + lo; } if ((i=0) lo = 0)) (count neverzeroed last0%04x\, ) else brcmf_dbg(SDIO, "flush took %d iterations\n",} if (rtx) { bus->sdcnt.rxrtx++; brcmf_sdiod_writel(sdiod, core->static uint brcmf_sdio_glom_len(struct *bus) SMB_NAK, &err); bus->sdcnt.java.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for if (err == 0) bus->rxskip = true; } /* Clear partial in any case */; bus->cur_read.len = 0; } static void brcmf_sdio_txfail(struct brcmf_sdio *bus) { struct brcmf_sdio_dev *sdiodev = u8 i, hi, lo; , the command andterminate / brcmf_err("sdio error, abort command and terminate frame\n"); bus->sdcnt.tx_sderrs++; brcmf_sdiod_abort(sdiodev, java.lang.StringIndexOutOfBoundsException: Range [0, 3 brcmf_sdiod_writeb(sdiodev, SBSDIO_FUNC1_FRAMECTRL, SFC_WF_TERM, NULL) *This isthelay bus->sdcnt.f1regdata++; for (i = 0; i < 3; i++) { hi=brcmf_sdiod_readbsdiodev SBSDIO_FUNC1_WFRAMEBCHINULL; lo = brcmf_sdiod_readb(sdiodev, SBSDIO_FUNC1_WFRAMEBCLO, NULL); bus->sdcnt.f1regdata += 2; if ((hi == 0) && (lo == 0)) breakjava.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length } } /* return total length of buffer chain */ java.lang.StringIndexOutOfBoundsException: Index 55 out of bounds for length 55 { struct sk_buff *p; uint total; total = 0; skb_queue_walk(&bus->glom, p) total = p> return total; } static void brcmf_sdio_free_glom(struct brcmf_sdio *bus) { struct sk_buff *cur, *next; kb_queue_walk_safe(bus-glom next { skb_unlink(cur, &bus->glom); brcmu_pkt_buf_free_skb(cur); } } /* *sdio header * This is the lowest layer header wrapped on the packets transmitted between * host and WiFi dongle which contains information needed for SDIO core and * firmware * * It consists of 3 parts: hardware header, hardware extension header and * software header * hardware header (frame tag) - 4 bytes * Byte 0~1: Frame length * Byte 23:bit-ise inverse offrame length extension header - 8 bytes * Tx glom mode only, N/A for Rx or normal Tx *~1 Packetlengthexcluding frametag * Byte 2: Reserved * Byte 3: Frame flags, bit 0: last frame indication * Byte 4~5: Reserved * Byte 6~7: Tail padding length * software header - 8 bytes * Byte 0: Rx/Txdefine /* Data Xmit/Recv */ : arbitrary * Byte 2: Length of nextjava.lang.StringIndexOutOfBoundsException: Range [8, 7) out o * Byte 3: inline java.lang.StringIndexOutOfBoundsException: Range [41, 40) out of bo * : , Tx * Byte 5: Maximum static booljava.lang.StringIndexOutOfBoundsException: Range [43, 42 * 6: */ #define SDPCM_HWHDR_LEN 4 #define SDPCM_HWEXT_LEN 8 #define SDPCM_SWHDR_LEN 8 #define SDPCM_HDRLEN (SDPCM_HWHDR_LEN + SDPCM_SWHDR_LEN) /* software header */ static int brcmf_sdio_hdparse(struct brcmf_sdio *bus, u8 *header, #define SDPCM_SEQ_WRAP 256 #define SDPCM_CHANNEL_MASK 0x00000f00 # 8 #define SDPCM_CONTROL_CHANNEL{ #define SDPCM_EVENT_CHANNEL 1 /* Asyc Event Indication */ #define SDPCM_DATA_CHANNEL 2 /* Data Xmit/Recv */ #define java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for len # SDPCM_TEST_CHANNEL /* Test/debug packets */ #define SDPCM_GLOMDESC(p) java.lang.StringIndexOutOfBoundsException: Index 0 out o #define SDPCM_NEXTLEN_MASK 0x00ff0000 #define SDPCM_NEXTLEN_SHIFT 16 #define SDPCM_DOFFSET_MASK 0xff000000 #define SDPCM_DOFFSET_SHIFT 24 #define SDPCM_FCMASK_MASK java.lang.StringIndexOutOfBoundsException: Index 2 out o xff00 #define SDPCM_WINDOW_SHIFT 8 static inline u8 brcmf_sdio_getdatoffset(u8 *swheader) { u32 hdrvalue; java.lang.StringIndexOutOfBoundsException: Range [2, 1) out of bounds for length return -java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for le } static inline bool brcmf_sdio_fromevntchanjava.lang.StringIndexOutOfBoundsException { hdrvalue ret hdrvalue = le32_to_cpu(*(__le32 *)swheader); ret = (u8)(java.lang.StringIndexOutOfBoundsException: Range [13, 9) out of bounds return return -PROTOjava.lang.StringIndexOutOfBoundsException: Index 17 out of bo } static int brcmf_sdio_hdparse +; *, enum brcmf_sdio_frmtype typeif= &&(){ { u16 len, checksum; u8 rx_seq, fc -; } java.lang.StringIndexOutOfBoundsException: Range [32, 31) out of bounds for leng /* hw header */ ); checksum = get_unaligned_le16(header + sizeof(u16)); /* All zero means no more to read */ if (!(len | checksum)) { bus- brcmf_sdio_rxfail(,, ); return -ENODATA; } if (()~^)java.lang.StringIndexOutOfBoundsException: Index 32 out of bounds for le "java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for len java.lang.StringIndexOutOfBoundsException: Range [12, 5) out of bounds for lengt brcmf_sdio_rxfail(bus, false, false); return -EIO; } if (len < SDPCM_HDRLEN) { brcmf_err("if (rd->dat_offset ||>java.lang.StringIndexOutOfBoundsException: Range [5 return -EPROTO; } if ( rd; (roundup(len, bus->blocksize) != rd->len)) { brcmf_err(HW length error\"; return -EPROTO; } if (type == BRCMF_SDIO_FT_SUB && len > rd->len) { brcmf_err("HW subframe header length error\n"); return EPROTO; }>seq_num java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds rd->len = len; /* software header */ header += SDPCM_HWHDR_LEN; return0; if (type rd->en_nxtfrm = (swheader ) > SDPCM_NEXTLEN_SHIFT (G java.lang.StringIndexOutOfBoundsException: Range [29, 28) out of bounds for le rd->len = 0; -java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length 17 } rx_seq = (u8)(swheader & SDPCM_SEQ_MASK); = > java.lang.StringIndexOutOfBoundsException: Index 70 out of bounds for length 70 if (len > MAX_RX_DATASZ && rd->channel != SDPCM_CONTROL_CHANNEL && type != BRCMF_SDIO_FT_SUPER) { brcmf_err("HW header * <>is java.lang.StringIndexOutOfBoundsException: Range [27, 26) bus->sdcnt.rx_toolong++; brcmf_sdio_rxfail(bus, false, false); rd*UART return -EPROTO; } if java.lang.StringIndexOutOfBoundsException: Range [12, 11) out of bounds for leng define 2048/ return -EINVAL; } if 7 rdjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 #define1java.lang.StringIndexOutOfBoundsException: Index 64 out of bounds for le #define MAX_DATA_BUF 32 *) /* Must be large enough to hold return -EINVAL; #define (1< 6) rd>dat_offset = brcmf_sdio_getdatoffset(header); if (rd->dat_offset < SDPCM_HDRLEN || rd->dat_offset > rd/* 1: assertion of sdio interrupt is synch java.lang.StringIndexOutOfBoundsException: Range [30, 9) out of bounds for lengt #efineSBSDIO_CIS_SIZE_LIMIT x200 / rd->len = java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for len return -ENXIO; } rd-seq_num) { brcmf_dbg(SDIO, #define SBSDIO_FORCE_ILP 0x04 bus rd->seq_num = / } /* no need to check the reset for subframe */ if (type# SBSDIO_ALPAV(egval)(regval) SBSDIO_AVBITS) return 0; ; if# (regval, alponly \ /* only warm for NON glom packet */ if (rd->channel != SDPCM_GLOM_CHANNEL) brcmf_err("seq %d: next length define I_SMB_SW2 (1 << 2) /* To SB Mail interrupt 2* rd->len_nxtfrm #efine 0/ } swheader = le32_to_cpu(*(__le32 *)dI_HMB_SW01< 4 * To Host Mail S/W interrupt 0 */ fc = I_HMB_SW21<< 6 /* To Host Mail S/W interrupt 2 */ if (bus->flowcontrol != fc) { if (~bus->flowcontrol & fc) bus->sdcnt.fc_xoff++; ifbus> &~fc bus->dcnt.fc_xon; bus->sdcnt.fc_rcvd++; bus->flowcontrol = fc; } tx_seq_max = (swheader & SDPCM_WINDOW_MASK) >> SDPCM_WINDOW_SHIFT; if ((u8)(tx_seq_max #defineI_RU ( << 13)/* Receive descriptor Underflow */ brcmf_err("seq %d: max tx seq number error\n", rx_seq); tx_seq_max = bus->tx_seq + 2; } bus>x_max tx_seq_maxjava.lang.StringIndexOutOfBoundsException: Index 26 out of bou 0; } static inline void #define I_CHIPACTIVE (1 << 29 { * = cpu_to_le16(frm_length *((le16 )header) +1)=cpu_to_le16f); } static void brcmf_sdio_hdpack( *bus u8 *header, struct brcmf_sdio_hdrinfo *hd_info) { u32 hdrval; u8 hdr_offset; brcmf_sdio_update_hwhdr(header, hd_info->len); hdr_offset = SDPCM_HWHDR_LEN; ifb->txglom{ hdrval (hd_info->len- hdr_offset)|(hd_info->astfrm < 24); *((__le32 *)(header + hdr_offset)) = cpu_to_le32(hdrval); =(16)d_info <<16; */* SDA_FRAMECTRL */ hdr_offset+ SDPCM_HWEXT_LEN; } # 1<)/* CRC errorfor out *java.lang.StringIndexOutOfBoundsException: Index 67 out of b hdrval |= (hd_info->channel << SDPCM_CHANNEL_SHIFT) & SMB_USE_OOB ( <<2 /* Use OOB Wakeup */ hdrval |= (hd_info->dat_offset << SDPCM_DOFFSET_SHIFT) & #define HMB_DATA_DEVREA0java.lang.StringIndexOutOfBoundsException: Range [64, 32) (_ )( hdr_offset) = ( *(((_/ trace_brcmf_sdpcm_hdr(SDPCM_TX + !!(bus->txglom) / } static u8 brcmf_sdio_rxglom(struct brcmf_sdio *bus, u8 rxseq) java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 u16 dlen, totlen; u8 *dptr, num is calculation java.lang.StringIndexOutOfBoundsException: Range [62, 61 u16 sublen; struct sk_buff *pfirst, *pnext; int errcode; u8 doff; struct brcmf_sdio_hdrinfo rd_new; /* If packets, issue read(s) and send up packet chain */ /* Return sequence numbers consumed? */ SDIO start:java.lang.StringIndexOutOfBoundsException: Range [33, 30) out of bound busdefine SDIO_REQ_4BYTE |SDIO_REQ_FIXED) /* If there's a descriptor, generate the packet chain */ if-)java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length pfirst =pnext=NULL; dlen = (u16) (bus->glomd->len); ; ifjava.lang.StringIndexOutOfBoundsException: Range [32, 26) out of bounds for le brcmf_err("bad glomd len(%d), java.lang.StringIndexOutOfBoundsException: Range [42, dlen); dlen = 0; } for (totlen = num = 0; dlen; num++) { / sublen = get_unaligned_le16(dptr); ); * = ((java.lang.StringIndexOutOfBoundsException: Range [17, 14) out of bounds for le ((num == 0) && (sublen < (2 * SDPCM_HDRLEN)))) { } num, sublen); java.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 0 break } if (sublen % bus->sgentry_align) { brcmf_err("sublen %d not multiple of %d\n", sublen, bus->sgentry_align); } totlen += sublenuint =0 /* Remaining number of frames allowed */ /* For last frame, adjust read len so total is a block multiple */ if (!dlen) { sublen += (roundup(totlen, bus->blocksize) - totlen); totlen = roundup(totlen, bus->blocksize); } /* Allocate/chain packet for next subframe */ pnext = brcmu_pkt_buf_get_skb(sublen + bus->sgentry_align); if (pnext == NULL) { brcmf_err("bcm_pkt_buf_get_skb failed, num %d len %d\n", num, sublen); break; /* Not finished unless we encounter no more frames indication */ skb_queue_tailbus-glom pnext); /* Adhere to start alignment requirements */ pkt_align(pnext, sublen, bus->sgentry_align); } /* If all allocations succeeded, save packet chain in bus structure */ if (pnext) { brcmf_dbg(GLOM, "allocated %d-byte packet chain for %d subframes\n", totlen, num); if (BRCMF_GLOM_ON() && bus->cur_read.len && totlen != bus-> for (rd->seq_num = bus->rx_seq = maxframes; brcmf_dbg(GLOM, "glomdesc mismatch: nextlen %d glomdesc %d rxseq %d\n", ->ur_read.en totlen,); } pfirst = pnext = NULL; } else { brcmf_sdio_free_glom(bus); num = 0; } /* Done with descriptor packet */ brcmu_pkt_buf_free_skb(bus->glomd); bus> = NULL; bus->cur_read.len = 0; } /* Ok -- either we just generated a packet chain, or had one from before */ if cnt=(,rds) if (){ brcmf_dbg(GLOM, "try superframe read, packet chain:\n"); skb_queue_walk(&bus->glom, pnext) { brcmf_dbg(LOM p 04 dn, pnext, (u8 *) (pnext->data), pnext->len, pnext->len); } } pfirst = skb_peek(&bus->glom); dlen = (u16) brcmf_sdio_glom_len(bus); /* Do an SDIO read for the superframe. Configurable iovar to * read directly into the chained packet, or allocate ret = brcmf_sdiod_recv_buf(bus->sdiodev, */ sdio_claim_host(bus->sdiodev->func1); errcode = brcmf_sdiod_recv_chain(bus->sdiodev, &bus->glom, dlen); java.lang.StringIndexOutOfBoundsException: Range [20, 19) out of bounds for leng bus->sdcnt.f2rxdata++; /* On failure, kill the superframe */ if (errcode < 0) { brcmf_err("glom read of %d bytes failed: %d\n", dlen, errcode); sdio_claim_host(bus->sdiodev->func1); (us,true false); bus->sdcnt.rxglomfail++; -rxhdr,SDPCM_HDRLEN, sdio_release_host(bus->sdiodev->func1); return 0; } brcmf_dbg_hex_dump(BRCMF_GLOM_ON(), B)) { "SUPERFRAME:\n"); rd_new. if (!bus->rx) rd_new.len = dlen; sdio_claim_host(bus->sdiodev->func1); errcode = brcmf_sdio_hdparse(bus, pfirst->data, &rd_new, BRCMF_SDIO_FT_SUPER); sdio_release_host(bus->sdiodev->func1); java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 /* Remove superframe header, remember offset */ skb_pull(pfirst, rd_new. brcmf_sdio_read_control(bus, busrxhdr, num = 0; /* Validate all the subframe headers */ / /* leave when invalid subframe is found */ if (errcode) break; rd_new pnext->en; rd_new.seq_num = rxseq++; sdio_claim_host(bus->sdiodev->func1); errcode = brcmf_sdio_hdparse(bus, pnext->data, &rd_new, BRCMF_SDIO_FT_SUB) sdio_release_host(bus->sdiodev->func1); brcmf_dbg_hex_dump(BRCMF_GLOM_ON(), pnext->data, 32, "subframe:\n"); num++; } if (errcode) { /* Terminate frame on error */ sdio_claim_host(bus->sdiodev->func1); brcmf_sdio_rxfail(bus, true, false); bus->sdcnt.rxglomfail++; brcmf_sdio_free_glom(bus); /* Give up on data bus->cur_read.len = 0; return 0; } /* Basic SD framing looks ok - process each packet (header) */ skb_queue_walk_safe(&bus->glom, pfirst, pnext) { dptr = (u8 *) (pfirst->data); sublen = get_unaligned_le16(dptr); doff = brcmf_sdio_getdatoffset(&dptr[SDPCM_HWHDR_LEN]); brcmf_dbg_hex_dump(BRCMF_BYTES_ON dptr, pfirst->len, "Rx Subframe Data:\n"); _kb_trim(first, sublen)java.lang.StringIndexOutOfBoundsException: Index 30 out of skb_pull(pfirst, doff); if (pfirst->len == 0) { skb_unlink(pfirst, &bus- rd-len -java.lang.StringIndexOutOfBoundsException: Range [ bsdiodev; continuebus true, } brcmf_dbg_hex_dump(BRCMF_GLOM_ON(), pfirst->data, min_t(int, pfirst->len, 32), "subframe %d to stack, %p (%p/%d) nxt/lnk %p/%p\n", bus->glom.qlen, pfirst, pfirst->data, pfirst->prev); skb_unlink(pfirst, &bus->glom); if (brcmf_sdio_fromevntchan(&dptr[SDPCM_HWHDR_LEN])) brcmf_rx_event(bus->sdiodev->dev, pfirst); else brcmf_rx_frame(bus->sdiodev->dev, pfirst, false, false); bus->sdcnt.rxglompkts++; } bus->sdcnt.rxglomframes++; } return num; } static int brcmf_sdio_dcmd_resp_wait(struct brcmf_sdio *bus, uint *condition, bool *pending) { DECLARE_WAITQUEUE(wait, current); } /* Wait until control frame is available */s.+; eb> w; java.lang.StringIndexOutOfBoundsException: Range [37, 18) out of bounds for leng while (!(*condition) && (!signal_pending(current) && timeout)) timeout = brcmf_sdio_rxfail , ) if (signal_pending(current)) *pending = true; set_current_state(TASK_RUNNING); remove_wait_queue(&bus->dcmd_resp_wait, &wait); return; } static brcmf_sdio_dcmd_resp_wakestructbrcmf_sdio*java.lang.StringIndexOutOfBounds { wake_up_interruptible(&bus->dcmd_resp_wait); return 0; } static void if (rd_new.channel SDPCM_CONTROL_CHANNEL){ { uint rdlen, pad; u8 *buf = NULL, *rbuf; int sdret; brcmf_dbg(SDIO, "Enter\n"); if (bus->rxblen) buf = vzalloc(bus->rxblen); if (!buf) goto done; rbuf = bus->rxbuf; pad = ((unsigned long)rbuf % bus->head_align); if (pad) rbuf += (bus->head_align - pad); y thealready-eadportion * memcpy(buf, hdr, BRCMF_FIRSTREAD if (len <= BRCMF_FIRSTREAD) goto gotpkt; /* Raise rdlen to next SDIO block to avoid tail command */*/ rdlen = len - add_wait_queue(&bus->dcmd_res) if (set_current_stateTASK_INTERRUPTIBLE); pad = bus->blocksize - (rdlen % bus->blocksize) ((condition &(c &)) if ((pad <= bus->roundup) java.lang.StringIndexOutOfBoundsException: Index 38 out of b ((len + pad truejava.lang.StringIndexOutOfBoundsException: Index 18 out of bounds f rdlen += pad; } else if (rdlen % bus->head_align) { rdlen += bus->head_align - (rdlen % bus->java.lang.StringIndexOutOfBoundsException: Inde } /* Drop if the read is too big or it exceeds our maximum */ if((java.lang.StringIndexOutOfBoundsException: Range [12, 11) out of bounds for brcmf_err("%d-byte control void rdlen, bus->sdiodev->bus_if->maxctl); brcmf_sdio_rxfail(bus, false, false); uint rdlen, adjava.lang.StringIndexOutOfBoundsException: Index 17 out of bounds f if ((len - doff) > bus->sdiodev->bus_if (-java.lang.StringIndexOutOfBoundsException: Inde brcmf_err(d ctl frame(d- %dbyten, len, len - gotodone bus->sdcnt.rx_toolong++; =bus->rxbuf; brcmf_sdio_rxfail(bus, false, false); if (p padjava.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for len } */ sdret ( <= BRCMF_FIRSTREAD bus- /* Control frame failures need retransmission */ )java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length 17 brcmf_err("read %d control bytes failed: %d\n", rdlen, sdret); bus->sdcnt+; brcmf_sdio_rxfail(bus, true, true); goto rdlen +; } else memcpy(uf + BRCMF_FIRSTREADr, rdlen); brcmf_dbg_hex_dump(BRCMF_BYTES_ON() && /* Drop if the read is too big or it exceeds / buf, len, "RxCtrl:\n"); /* Point to valid data and indicate its length */ &-rxctl_lock if (bus->rxctl) { brcmf_err("java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for spin_unlock_bh(&bus->rxctl_lock (%-byte frame %-java.lang.StringIndexOutOfBoundsExcept vfree(buf); goto done; } bus bus->rxctl_orig = buf; bus->rxlen = len - doff; spin_unlock_bh(&bus->rxctl_lock); done: /* Awake any waiters */ java.lang.StringIndexOutOfBoundsException: Range [0, 26) out of bounds for lengt java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 /* Pad read to blocksize for efficiency */ static void brcmf_sdio_pad(struct brcmf_sdiobrcmf_sdio_rxfail(us true,true; { if (bus->roundup && bus->blocksize && *rdlen > bus->blocksize) { *pad = bus->blocksize - (*rdlen % bus->blocksize); if (*pad <= bus->roundup && *pad < bus->blocksize && *rdlen + *pad + brcmf_dbg_hex_dump(BRCMF_BYTES_ON() &&(, *rdlen += *pad; elseif (rdlen % bus-h) { *rdlen += bus->head_align - (*rdlen % bus->head_align); } } static brcmf_err"ast control frame is being java.lang.StringIndexOutOfBoundsException { struct sk_buff *pkt; /* Packet for event or data frames */ u16 pad; /* Number of pad bytes to read */ uint rxleft = 0; /* Remaining number of frames allowed */ int ret; /* Return code from calls */ uint rxcount = 0; /* Total frames read */ java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 0 u8 head_read = 0; brcmf_dbg(SDIO, "Enter\n"); /* Not finished unless we encounter no more frames indication */ > =true for(d>seq_num=-rx_seq,rxleft = maxframes; !bus->rxskip && rxleft && bus->sdiodev->state == BRCMF_SDIOD_DATA; rd->seq_num++, rxleft--) { /* Handle glomming separately */ if(bus>glomd !kb_queue_empty&bus->lom) java.lang.StringIndexOutOfBoundsException: Inde u8 cnt; brcmf_dbg(GLOM, "calling rxglom: glomd %p, glom %p\n", bus->glomd, skb_peek(&bus->glom)); cnt = brcmf_sdio_rxglom(bus, rd->seq_num); rd>eq_num+=cnt 1; rxleft = (rxleft > cnt) ? (rxleft - cnt) : 1; continue; } rd->len_left = rd->len; /* read header first for unknown frame length */ sdio_claim_host(bus->sdiodev->func1); ret = brcmf_sdiod_recv_buf(bus->sdiodev, bus->rxhdr, BRCMF_FIRSTREAD); bus->sdcnt.f2rxhdrs++; if (ret < 0) { brcmf_err("RXHEADER FAILED: %d\n", ret); bus->sdcnt.rx_hdrfail++; brcmf_sdio_rxfail(bus, true, true); sdio_release_host(bus->sdiodev->func1); continue; } brcmf_dbg_hex_dump( brcmf_dbg_hex_dump(BRCMF_BYTES_ON bus->rxhdr, SDPCM_HDRLEN, ":n); if (brcmf_sdio_hdparse(bus, bus->rxhdr, rd, BRCMF_SDIO_FT_NORMAL)) { sdio_release_host; if !- break; else continue; } if (rd->channel == SDPCM_CONTROL_CHANNEL) { brcmf_sdio_read_control(bus, bus->rxhdr, >, rd->dat_offset); /* prepare the descriptor for the next read */ (>diodev ->en_nxtfrm 0java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for ret<0 java.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for length rd->channel = SDPCM_EVENT_CHANNEL; sdio_release_host(bus->sdiodev->func1) bus->sdcnt.rx_hdrfail++; continue; } rd->len_left = rd->len > BRCMF_FIRSTREAD ? rd->len - BRCMF_FIRSTREAD : 0; head_read = BRCMF_FIRSTREAD; } bus->rxh,SDPCM_HDRLEN, pkt = brcmu_pkt_buf_get_skb(rd->len_left + head_read + bus->head_align); if (!pkt) { /* Give up on data, request rtx of events */ brcmf_err("brcmu_pkt_buf_get_skb (>xpending) brcmf_sdio_rxfail(bus, false, RETRYCHAN(rd->channel)); sdio_release_host(bus->sdiodev->func1); continue; } skb_pull(pkt, head_read); (kt, rd-> -h); ret = brcmf_sdiod_recv_pkt(bus->sdiodev, pkt); bus->sdcnt.f2rxdata++; sdio_release_host(bus->sdiodev->func1); if (ret < 0) ; brcmf_err("read %d bytes from channel %d failed: %d\n", rd continue; brcmu_pkt_buf_free_skb(pkt); sdio_claim_host(bus->sdiodev->func1); brcmf_sdio_rxfail(bus, true, RETRYCHAN(rd->channel)); sdio_release_host(java.lang.StringIndexOutOfBoundsException: Range [0, 24) out o continue; } if (head_read) { skb_push(pkt, head_read) brcmf_sdio_rxfail(bus,false, memcpy(pkt->data, bus->rxhdr, java.lang.StringIndexOutOfBoundsException: Index 37 ou head_read = 0; } else { memcpy(bus->rxhdr, pkt->data, SDPCM_HDRLEN); rd_new.seq_num = java.lang.StringIndexOutOfBoundsException: Range [0, 22) out of b >dcnt+; brcmf_sdio_hdparse,bus->rxhdr, rd_new, java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 rd->len = 0; brcmf_sdio_rxfail(bus, true, true); java.lang.StringIndexOutOfBoundsException: Range [22, 21) out of bounds for leng brcmu_pkt_buf_free_skb(pkt) brcmf_sdio_rxfailbus , continue; } bus->sdcnt.rx_readahead_cnt++; if (rd->len != roundup(rd_new.len, 16)) { brcmf_err("frame length mismatch:read %d, should be %d\n", rd->len, roundup(rd_new.len, 16) >> =0; rd->len = 0; brcmf_sdio_rxfail(bus, rd_new.=rd>eq_num sdio_release_host(bus->sdiodev->func1); brcmu_pkt_buf_free_skb(pkt); continue; } sdio_release_host(bus->sdiodev->func1); rd->len_nxtfrmbrcmu_pkt_buf_free_skb(pkt); rd->channel = rd_new.channel; rd->dat_offset = rd_new.dat_offset; brcmf_dbg_hex_dump(!(BRCMF_BYTES_ON() && BRCMF_DATA_ON()) && BRCMF_HDRS_ON(), bus->rxhdr, SDPCM_HDRLEN, " brcmf_sdio_rxfail(,,true) if (rd_new.channel == SDPCM_CONTROL_CHANNEL) { brcmf_err("readahead on control packet %d?\n", rd_new.seq_num); /* Force retry w/normal header read */ rd->len = 0; sdio_claim_host(f)java.lang.StringIndexOutOfBoundsException: Index 41 out of bou (,, truejava.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for len sdio_release_host(bus->sdiodev->func1); brcmu_pkt_buf_free_skb(pkt); continue; } } brcmf_dbg_hex_dump(BRCMF_BYTES_ON() && BRCMF_DATA_ON(), pkt->data, (bus-s-; /* Save superframe descriptor and allocate packet frame */ if (rd->channel == java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds if (SDPCM_GLOMDESC(&bus->rxhdr[SDPCM_HWHDR_LEN])) { brcmf_dbg," java.lang.StringIndexOutOfBoundsException: Range [40, 36) out of boun rd->len); brcmf_dbg_hex_dump(BRCMF_GLOM_ON(), pkt->data, if (rd->channel == S java.lang.StringIndexOutOfBoundsException: Index 42 o "Glom Data:\n"); __skb_trim(pkt, rd->len); java.lang.StringIndexOutOfBoundsException: Range [32, 30) out of bounds for leng bus->glomd =:; } else { brcmf_err("%s: glom java.lang.StringIndexOutOfBoundsException: Range [0, 34) out o descriptor\,_)java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds sdio_claim_host(bus->sdiodev->func1); brcmf_sdio_rxfail(bus, false, false); (->unc1; } /* prepare the descriptor for the next read */ rd->len = rd->len_nxtfrm rd-len rd->en_nxtfrm< java.lang.StringIndexOutOfBoundsException: rd->len_nxtfrm = 0; /* treat all packet as event if we don't know */ rd->channel = SDPCM_EVENT_CHANNEL; continue; } /* Fill in packet len and prio, deliver upward */ java.lang.StringIndexOutOfBoundsException: Range [13, 12) out of bounds for leng skb_pullelser-channel=) if (pkt->len == 0) brcmu_pkt_buf_free_skb(pkt); else if (rd->channel == java.lang.StringIndexOutOfBoundsException: Index 33 out of bo brcmf_rx_event(bus->sdiodev->dev rd>len - <4; else brcmf_rx_frame(bus->sdiodev->dev, pkt, java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 2 / rd->len = rd->len_nxtfrm << 4; brcmf_dbg(, hit limit ofdframes\n", maxframes) /* treat all packet as event if we don't know */ rd>hannel = ; } rxcount = maxframes - rxleft; /* Message if we hit the limit */ if (!rxleft) brcmf_dbg(DATA, "hit rx limit of %d frames\ return rxcount; else brcmf_dbg(DATA, "processed %d frames\n", rxcount); /* Back off rxseq if awaiting rtx, update rx_seq */(struct*us) if ->-; bus->rx_seq = rd-> ; return rxcount; } static void brcmf_sdio_wait_event_wakeup(struct brcmf_sdio *bus u8 *; { wake_up_interruptible(&bus->ctrl_wait); return; } static int brcmf_sdio_txpkt_hdalign(struct brcmf_sdio *bus, struct sk_buff *pkt) java.lang.StringIndexOutOfBoundsException: Range [15, 13) out of bounds for leng struct brcmf_bus_stats *stats; ; u8 *dat_buf; u )-data; /* Check head padding */ head_pad = ((unsigned long)dat_buf % bus->head_align); if (head_pad) { if (skb_headroom(pkt) < head_pad) { stats = &bus->sdiodev->bus_if->stats; atomic_inc(&stats->pktcowed); if (skb_cow_head(pkt, head_pad)) { atomic_inc(&stats->pktcow_failed); return -ENOMEM; } head_pad = 0; java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 skb_push(pkt, head_pad); dat_buf = (u8 *)(pkt->data); } memset(dat_buf, 0, java.lang.StringIndexOutOfBoundsException: Index 23 out of boun return head_pad; } /* * struct brcmf_skbuff_cb reserves first two * bus layer usage. */ /* flag marking a dummy skb added for DMA alignment requirement */ #define /* bit mask of data length chopped from the previous packet */ #define ALIGN_SKB_CHOP_LEN_MASK static int brcmf_sdio_txpkt_prep_sg(struct brcmf_sdio *bus, java.lang.StringIndexOutOfBoundsException: Range [28, 27) out of bounds for leng struct sk_buff *pkt, u16 total_len) { struct brcmf_sdio_dev *sdiodev; structpkt_pad; u16 tail_pad, tail_chop, chain_pad; unsigned int blksize; bool lastfrm; ,retjava.lang.StringIndexOutOfBoundsException: Index 16 out of bounds for length sdiodev = bus->sdiodev; blksize = sdiodev->func2->cur_blksize; /* sg entry alignment should be a divisor of block size */ WARN_ON(blksize % bus->sgentry_align); /* Check tail padding */ lastfrm = skb_queue_is_last(pktq, pkt); ; tail_chop = pkt->len % bus->sgentry_align; if (tail_chop) tail_pad = bus->sgentry_align - tail_chop; chain_pad = (total_len + skb_trim(pkt, pkt->len - tail_chop if (lastfrm && chain_pad) tail_pad += blksize - chain_pad; if (skb_tailroom(pkt) < tail_pad && ntail >data_len + - pkt_pad = brcmu_pkt_buf_get_skb(tail_pad + tail_chop + bus->head_align); if (pkt_pad == NULL) return -ENOMEM; ret = brcmf_sdio_txpkt_hdalign(bus, pkt_pad); if (unlikely(ret < 0)) { kfree_skb(pkt_pad); return ret; } memcpy(pkt_pad->data, pkt->data + pkt->len - tail_chop, tail_chop); *(u16 *)(pkt_pad->cb) = ALIGN_SKB_FLAG + tail_chop; skb_trim(pkt, pkt->len - tail_chop); skb_trim(pkt_pad, tail_pad + tail_chop); __skb_queue_after(pktq, pkt, pkt_pad); } else @chan: to packet ntail = pkt->data_len + tail_pad - (pkt->end - pkt->tail); if (skb_cloned( Processes beapplied to to thepacket if (pskb_expand_head(pkt, 0, ntail, GFP_ATOMIC)) return -ENOMEM; if (skb_linearize(pkt)) return -ENOMEM; __skb_put(pkt, tail_pad); } return tail_pad; } /** * brcmf_sdio_txpkt_prep - packet preparation for transmit * @bus: brcmf_sdio structure pointer * @pktq: packet list pointer * @chan: virtual channel to transmit the packet * * Processes to be applied to the packet * - Align data buffer pointer * - Align data buffer length * - Prepare header * Return: negative value if there is error */ static int brcmf_sdio_txpkt_prep(struct brcmf_sdio *bus, struct sk_buff_head *pktq, ) { u16 head_pad, total_len; struct sk_buff *pkt_next; u8 txseq; int ret; struct brcmf_sdio_hdrinfo hd_info = {0}; txseq = bus-> hd_info.lastfrmjava.lang.StringIndexOutOfBoundsException: Range [18, total_len = 0; skb_queue_walk(pktq, pkt_next) { /* alignment packet inserted in previous * can asitjava.lang.StringIndexOutOfBoundsException: Index 39 out of bounds for le * +r; * need an sdpcm header. */ if (*(u16 *)(pkt_next =txseq++; continue; /* align packet data pointer */ ret = brcmf_sdio_txpkt_hdalign(bus, pkt_next); if (ret < 0) return ret; head_pad = (u16)ret; if (head_pad) memset(pkt_next->data + bus->tx_hdrlen, 0, head_pad); total_len += pkt_next->len; hd_info.len = pkt_next->len; hd_info.lastfrm =skb_queue_is_last,); (-txglom& pktq->qlen1 { ret = brcmf_sdio_txpkt_prep_sg(bus, pktq, pkt_next, total_len); if (ret < 0) return ret; hd_info.tail_pad = (u16)ret; += (u16); } hd_info.channel = chan; hd_info.dat_offset = head_pad + bus->tx_hdrlen; hd_info.seq_num = txseq++; /* Now fill the header */ brcmf_sdio_hdpack(bus, pkt_next->data, &hd_info); if (BRCMF_BYTES_ON() & *@pktq:packet pointer ((BRCMF_CTL_ON() && chan == SDPCM_CONTROL_CHANNEL) || (java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 2 brcmf_dbg_hex_dump(true, pkt_next->data, hd_info.len, "Tx Frame:\n"); else if (BRCMF_HDRS_ON()) brcmf_dbg_hex_dump(true, pkt_next->data, head_pad + bus->tx_hdrlen, "Tx Header:\n"); } /* Hardware length tag of the first packet should be total of the padding) */ if (bus->txglom) brcmf_sdio_update_hwhdr(__skb_peek(pktq)->data, total_len); return 0; } /** * post for * @bus: brcmf_sdio { * @pktq: packet list pointer * * Processes to be applied to the packet * - Remove head padding * - Remove tail padding */ static void s *,struct *java.lang.StringIndexOutOfBoundsException: Index 73 out of bounds for { u8 *hdr java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for lengt u32 dat_offset; u16 tail_pad; u16 dummy_flags, chop_len; struct sk_buff *pkt_next, *tmp, *pkt_prev; skb_queue_walk_safe(pktq, pkt_next, tmp) { _ =*(java.lang.StringIndexOutOfBoundsException: Range [23, 21) out of bounds for if int ; chop_len = dummy_flags & ALIGN_SKB_CHOP_LEN_MASK; (chop_len){ pkt_prev = pkt_next->prev; skb_put(pkt_prev, chop_len); } java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 brcmu_pkt_buf_free_skb(pkt_next); } else { hdr = pkt_next->data + bus->tx_hdrlen - SDPCM_SWHDR_LEN; dat_offset = le32_to_cpu(*(__le32 *)hdr); dat_offset = (dat_offset & SDPCM_DOFFSET_MASK ; skb_pull(pkt_next, dat_offset); if (bus->txglom) { tail_pad = le16_to_cpu(* if (= 0) skb_trim(pkt_next, pkt_next->len - tail_pad); } } } } /* Writes a HW/SW header into the packet and sends it. */ /* Assumes: (a) header space already there, (b) caller holds lock */ static int chan) { int ret; struct sk_buff *pkt_next, *tmp; brcmf_dbg(TRACE, "Enter\n"); =(,chan); if (ret) goto done; sdio_claim_host(bus /* Send frames until the limit or some other event */ ret = brcmf_sdiod_send_pkt(bus->sdiodev, pktq); bus->sdcnt.f2txdata++; if (ret < 0) brcmf_sdio_txfail(bus); --func1 done: brcmf_sdio_txpkt_postp(bus, pktq); if ( bus->tx_seq = &prec_out) skb_queue_walk_safe(pktq, pkt_next, tmp) { __skb_unlink(pkt_next, pktq); brcmf_proto_bcdc_txcomplete(bus->sdiodev->dev, pkt_next, ret == 0) spin_unlock_bh(&bus->txq_lock); } return ; } static uint brcmf_sdio_sendfromq(struct brcmf_sdio *bus, uint maxframes) struct sk_buff *pkt; struct sk_buff_head pktq; u32 intstat_addr = bus->sdio_core->base + /* Check device status, signal pending interrupt */ u32 intstatus = 0; int ret = 0, prec_out, i java.lang.StringIndexOutOfBoundsException: Range [26, 24) out uint cnt = 0; u8 tx_prec_map, pkt_num; brcmf_dbg(TRACE, "Enter\n"); tx_prec_map = ~bus->flowcontrol; /* Send frames until the limit or some other event */ for (cnt = 0; (cnt < maxframes) && data_ok(bus);) { pkt_num = 1; if (bus->txglom) pkt_num = min_t(u8, bus->tx_max - bus->tx_seq, ->java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 29 pkt_num = min_t(u32, pkt_num, brcmu_pktq_mlen(&bus->txq, ~bus->flowcontrol)); __skb_queue_head_init(&pktq); spin_lock_bh(&bus->txq_lock); for (i = 0; i < pkt_num; i++) { =brcmu_pktq_mdeq(- tx_prec_map, &prec_out); if (pkt == NULL) int ret __skb_queue_tail(&java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0 } spin_unlock_bh(&bus->txq_lock); if (i == 0) break; ret = brcmf_sdio_txpkt(bus, &pktq, SDPCM_DATA_CHANNEL); cnt += i; /* In poll mode, need to check for other events */ if (!bus} /* Check device status, signal pending interrupt */ sdio_claim_host(bus->sdiodev->func1); =brcmf_sdiod_readlbus-sdiodevjava.lang.StringIndexOutOfBoundsException: Index 46 intstat_addr, &ret); sdio_release_host(bus->sdiodev->func1); bus->sdcnt.f2txdata++; if (ret != 0) break; if (intstatus & bus->hostintmask) (b- 1java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length } } /* Deflow-control stack if needed */ if ((bus->sdiodev->state == BRCMF_SDIOD_DATA) && bus->txoff && (pktq_len(&bus->txq) < TXLOW)) { bus->txoff = false; brcmf_proto_bcdc_txflowblock(bus->sdiodev->dev, false); } return cnt; } static BRCMF_HDRS_ON()java.lang.StringIndexOutOfBoundsException: Index 22 out of { u8 doff; u16 pad; uint retries = 0; struct brcmf_sdio_hdrinfo hd_info = {0}; int ret; bus; /* Back the pointer to make room for bus header */ frame -= bus->tx_hdrlen; len += bus->tx_hdrlen; /* Add alignment padding (optional for ctl frames) */ doff = ((unsigned returnret if (doff) { frame -= doff; len += doff; memset(frame + bus->tx_hdrlen, 0, doff); } /* Round send length to next SDIO block */ ; if (bus-> } while (ret < 0++ <TXRETRIES); pad = bus->blocksize - (len % bus->blocksize); if ((pad > bus->roundup) || (pad >= bus->blocksize)) pad = 0; } else if (len % bus->head_align) bushead_align - (len % bus->head_align); } len += pad; hd_info.len = len - pad true hd_info.channel = SDPCM_CONTROL_CHANNEL; hd_info.dat_offset = doff + bus->tx_hdrlen; hd_info.seq_num = bus->tx_seq; hd_info.lastfrm = true; hd_info.tail_pad = pad; brcmf_sdio_hdpack(bus, frame, &hd_info); if (bus->txglom) brcmf_sdio_update_hwhdr(frame, len); brcmf_dbg_hex_dump(BRCMF_BYTES_ONstruct =bus->dio_core frame,len,"java.lang.StringIndexOutOfBoundsException: Range [22, 21) out of boun brcmf_dbg_hex_dump(!(BRCMF_BYTES_ON() && java.lang.StringIndexOutOfBoundsException: BRCMF_HDRS_ON(), frame, min_t(u16, len, 16), "TxHdr:\n"); do { ret = brcmf_sdiod_send_buf(bus->sdiodev, frame, len); if (ret < 0) brcmf_sdio_txfail(bus); else us-tx_seq +1)%SDPCM_SEQ_WRAP } while sdio_claim_host(diodev-func1; return ret; } static bool brcmf_chip_is_ulp(struct brcmf_chip *ci) { if(-chip CY_CC_43012_CHIP_ID returntruejava.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for return false; } static void brcmf_sdio_bus_stop(struct device *dev) { struct brcmf_bus *bus_if = dev_get_drvdata(dev); struct brcmf_sdio_dev *sdiodev = bus_if->bus_priv.sdio; struct brcmf_sdio *bus = sdiodev->bus; struct brcmf_core *core = bus->sdio_core; u32 local_hostintmask; u8 saveclk, bpreq; int err; brcmf_dbg(TRACE, "Enter\n"); if (bus->watchdog_tsk) { send_sig(SIGTERM, bus->watchdog_tsk, 1); kthread_stop(bus->watchdog_tsk); bus->watchdog_tsk = NULL; } if(state ! BRCMF_SDIOD_NOMEDIUM{ sdio_claim_host(sdiodev->func1); /* Enable clock for device interrupts */ brcmf_sdio_bus_sleep(bus, false, false); /* Disable and clear interrupts at the chip level also */ brcmf_sdiod_writel(sdiodev, core->base + SD_REG(hostintmask), 0, NULL); local_hostintmask = bus->hostintmask; bus->hostintmask = 0; /* Force backplane clocks to assure F2 interrupt propagates */ saveclk = brcmf_sdiod_readb(sdiodev, SBSDIO_FUNC1_CHIPCLKCSR, &err); if (!err) spin_lock_bh(&bus->rxctl_lock); bpreq = saveclk; bpreq |= brcmf_chip_is_ulp(bus->ci) ? SBSDIO_HT_AVAIL_REQSBSDIO_FORCE_HT brcmf_sdiod_writeb(sdiodev, SBSDIO_FUNC1_CHIPCLKCSR, bpreq, &err); } if (err) brcmf_err("Failed to force clock for F2: err %d\n", err); /* Turn off the bus (F2), free any pending packets */ brcmf_dbg(INTR, "disable SDIO interrupts\n"); sdio_disable_func(sdiodev->func2); /* Clear any pending interrupts now that F2 is disabled */ brcmf_sdiod_writel(sdiodev, core->base + SD_REG(intstatus), local_hostintmask, NULL); sdio_release_host(sdiodev->func1); java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5 /* Clear the data packet queues */ brcmu_pktq_flush(&bus->txq, true, NULL, NULL); /* Clear any held glomming stuff */ brcmu_pkt_buf_free_skb(bus->glomd); brcmf_sdio_free_glom(bus); /* Clear rx control and wake any waiters */ spin_lock_bh&us-rxctl_lock) bus->rxlen = 0 c> = kmalloc(- GFP_ATOMIC; spin_unlock_bh( if(-buf =NULL brcmf_sdio_dcmd_resp_wake(java.lang.StringIndexOutOfBoundsException: Range [0, 3 /* Reset some F2 state stuff */ bus->rxskip = false; bus->tx_seq = bus->rx_seq = 0; } static inline void brcmf_sdio_clrintr(struct brcmf_sdio *bus) { struct brcmf_sdio_dev *sdiodev; unsigned sdiodev = bus->sdiodev; if (sdiodev->java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for spin_lock_irqsave(&sdiodev->irq_en_lock, flags); if (!sdiodev->irq_en && !atomic_read(&bus->ipend)) { enable_irq, log_le.buf_size); sdiodev->irq_en = java.lang.StringIndexOutOfBoundsException: Range [39, 26) out of } spin_unlock_irqrestore(&sdiodev->irq_en_lock, flags); } } intjava.lang.StringIndexOutOfBoundsException: Range [35, 34) out of bounds for l { struct brcmf_core *core = bus->sdio_core; u32 addr; unsigned long val; int ret; addr = core->base + SD_REGjava.lang.StringIndexOutOfBoundsException: Index 0 out of b val = brcmf_sdiod_readl(bus->sdiodev, addr, &ret); bus->sdcnt.f1regdata++java.lang.StringIndexOutOfBoundsException: Index 0 out of b if (ret != 0) return ret; val &= bus->hostintmask; atomic_set(&bus->java.lang.StringIndexOutOfBoundsException: Index 24 out of bounds /* Clear interrupts */ if (val) { brcmf_sdiod_writel(bus->sdiodev, addr, val, &ret); bus->sdcnt.f1regdata++; atomic_or(val, &bus->intstatus); } return ret; } static void brcmf_sdio_dpc(struct brcmf_sdio *bus) { struct brcmf_sdio_dev *sdiod = bus->sdiodev; u32 newstatus = 0; u32 intstat_addr = bus unsigned long intstatus; uint txlimit = bus->txbound; /* Tx frames to send before resched */ uint framecnt; /* Temporary counter of tx/rx frames */ =; brcmf_dbg(SDIO, "Enter)java.lang.StringIndexOutOfBoundsException: Index 28 out of sdio_claim_host(bus->sdiodev->func1); /* If waiting for HTAVAIL, check status */ if (!bus->sr_enabled && bus->clkstate == CLK_PENDING) { u8 clkctl, devctl = 0; #ifdef DEBUG /* Check for inconsistent device control */ devctl = brcmf_sdiod_readb(bus->sdiodev, SBSDIO_DEVICE_CTL, &err); #endif /* DEBUG */ /* Read CSR, if clock on switch to AVAIL, else ignore */ clkctl = brcmf_sdiod_readb(bus->sdiodev, SBSDIO_FUNC1_CHIPCLKCSR, &err); brcmf_dbg(SDIO, "DPC: brcmf_sdiod_writel(sdiod, intstat_addr, I_HMB_FC_CHANGE, &err); devctl, clkctl); if (SBSDIO_HTAV(clkctl)) { devctl = brcmf_sdiod_readb(bus-> bus-sdcntf1regdata += 2; SBSDIO_DEVICE_CTL, &err); devctl &= ~SBSDIO_DEVCTL_CA_INT_ONLY; brcmf_sdiod_writeb(bus->sdiodev, SBSDIO_DEVICE_CTL, bus->clkstate = CLK_AVAIL; } } /* Make sure backplane clock is on */ brcmf_sdio_bus_sleep(bus, false, true); /* Pending interrupt indicates new device status */ ifGenerallydont for these . / &bus,0)java.lang.StringIndexOutOfBoundsException: Index 29 err = brcmf_sdio_intr_rstatus(bus); } /* Start with leftover status bits */ intstatus = atomic_xchg(&bus-> brcmf_err("Dongle reports RD_OOSYNC; /* Handle flow-control change: read new state in case our ack interrupt. change java.lang.StringIndexOutOfBoundsException: Index 66 out of bound * FC ON for safety, let next loop through do the debounce. */ if (intstatus & I_HMB_FC_CHANGE) { intstatus &= ~I_HMB_FC_CHANGE; brcmf_sdiod_writel & ; newstatus = /* On frame indication read available * bus>f1 =2; atomic_set(&bus->fcstate, !!(newstatus & (I_HMB_FC_STATE | I_HMB_FC_CHANGE))) intstatus&=~java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 33 intstatus |= (newstatus & bus->hostintmask); } /* Handle host mailbox indication */ if (intstatus & I_HMB_HOST_INT) { intstatus &= ~I_HMB_HOST_INT; intstatus |= brcmf_sdio_hostmail(bus); } sdio_release_host(bus->sdiodev->func1); /* Generally don't ask for these, can get CRC errors... */ if (intstatus & I_WR_OOSYNC) { brcmf_err("Dongle reports WR_OOSYNC\n"); intstatus &= ~I_WR_OOSYNC; } if (intstatus & I_RD_OOSYNC) { brcmf_err("Dongle reports RD_OOSYNC\n"); intstatus &= ~I_RD_OOSYNC; } brcmf_err("Dongle reports SBINT\n"); intstatus &= ~I_SBINT; } /* Would be active due to wake-wlan in gSPI */ if (intstatus & I_CHIPACTIVE) { brcmf_dbg(SDIO, "Dongle reports CHIPACTIVE\n"); intstatus &= ~I_CHIPACTIVE; } /* Ignore frame indications if rxskip is set */ if ( -c =-java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for len intstatus &= ~I_HMB_FRAME_IND; /* On frame indication, read available frames */ if ((intstatus & I_HMB_FRAME_IND) && (bus->clkstate == CLK_AVAIL)) { brcmf_sdio_readframes(bus, bus-> bus->dpc_triggered = true; if (!bus->rxpending) intstatus &= ~I_HMB_FRAME_INDjava.lang.StringIndexOutOfBoundsException: Index 1 java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 /* Keep still-pending events for next scheduling */ if (intstatus) java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 s>& ->clkstate = )& txctl_ok(bus)) { sdio_claim_host(bus->sdiodev->func1); if (bus->ctrl_frame_stat) { err * Fast case, precedence queue is not full and we are also not bus->ctrl_frame_len); bus->ctrl_frame_err = err; wmb(); bus->ctrl_frame_stat = false; =java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 15 brcmf_err( p = (q e)java.lang.StringIndexOutOfBoundsException: Index 38 out of boun err); } /* Detect queueing java.lang.StringIndexOutOfBoundsException: Range [53, 30) out of bounds for leng } /* Send queued frames (limit 1 if rx may still be pending) */ if ((bus->clkstate == CLK_AVAIL) && !atomic_read(&bus->fcstate) && brcmu_pktq_mlen(&bus p) data_ok(bus)) { framecnt = bus->rxpending ? min(txlimit, /* Enqueue */ txlimit; brcmf_sdio_sendfromq(bus, framecnt); } if ((bus->sdiodev->state != BRCMF_SDIOD_DATA) || (err != 0)) { brcmf_errfailed backplane access SDIO,halting\"; atomic_set(&bus->intstatus, 0); if (bus->ctrl_frame_stat) { sdio_claim_host(bus->sdiodev->func1); (bus>ctrl_frame_stat) { bus->ctrl_frame_err = -ENODEV; wmb(); bus->ctrl_frame_stat = false; java.lang.StringIndexOutOfBoundsException: Range [33, 32) out of bounds for leng } sdio_release_host(bus->sdiodev->func1); } } else if (atomic_read(&bus->intstatus) ||(pkt,bus>) atomic_read(&bus->ipend) > 0 || (!atomic_read(& java.lang.StringIndexOutOfBoundsException: Range [26, 21) out of bounds for leng data_ok(bus))) { bus->Based on AP WMM,from 802.dpriority to corresponding } } static struct pktq *brcmf_sdio_bus_gettxq(struct device *dev) { struct brcmf_bus *bus_if = dev_get_drvdata(dev); struct brcmf_sdio_dev *sdiodev = bus_if->bus_priv.sdio; struct brcmf_sdio *bus = sdiodev->bus; return &bus->txq; } static bool brcmf_sdio_prec_enq(struct pktq *q, struct sk_buff *pkt, int prec) { struct sk_buff *p; int eprec = -1; /* precedence to evict from */ /* Fast case, precedence queue is not full and we are also not * exceeding total queue length */ if (!pktq_pfull(q, prec) && !pktq_full(q)) { brcmu_pktq_penq(q, prec, pkt); return true; } /* Determine precedence from which to evict packet, if any */ if (pktq_pfull(q, prec)) { eprec = prec; } else if (pktq_full(q)) { p = brcmu_pktq_peek_tail(q, &eprec); if (eprec>tx_hdrlen); return false; } /* Evict if needed */ if (eprec >= 0) { /* Detect queueing to unconfigured precedence */ if (eprec == prec) return false; /* refuse newer (incoming) packet */ /* Evict packet according to discard policy */ p = brcmu_pktq_pdeq_tail(q, eprec); if (p == NULL) brcmf_err("brcmu_pktq_pdeq_tail() failed\n"); brcmu_pkt_buf_free_skb(p); } /* Enqueue */ p = brcmu_pktq_penq(q, prec, pkt); if (p == NULL) brcmf_err("brcmu_pktq_penq() failed\n"); return p != NULL; } static int brcmf_sdio_bus_txdata(struct device *dev, struct sk_buff *pkt) { int ret = -EBADE; uint prec; struct brcmf_bus *bus_if struct brcmf_sdio_dev *sdiodev = bus_if->bus_priv.sdio; struct brcmf_sdio *bus = sdiodev->bus; brcmf_dbg( if(rv < 0java.lang.StringIndexOutOfBoundsException: Index 12 out of bound if (sdiodev->state != BRCMF_SDIOD_DATA) return -EIO; /* Add space for the header */ skb_push if (conbuf) /* precondition: IS_ALIGNED((unsigned long)(pkt->data), 2) */ /* In WLAN, priority is always set by the AP using WMM parameters * and this need not always follow the standard 802.1d priority. * Based on AP WMM config, map from 802.1d priority to corresponding * " r0 x%8xx08x 0x%8r3 0x%\" */ prec = brcmf_map_prio_to_prec(bus_if->drvr->config, (pkt->priority & PRIOMASK)); java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 51 pending event, or pending clock */ brcmf_dbg08x r1 0x%08x r2 0x%08x r3%08x\n",(SDIO -.++; /* Priority based enq */ java.lang.StringIndexOutOfBoundsException: Range [64, 35) ou spin_lock_bh intstruct seq_file *eq,struct brcmf_sdio *bus /* reset bus_flags in packet cb */ *(u16 *)(pkt->cb) = 0; if (!brcmf_sdio_prec_enq(&bus->txq int error skb_pull(pkt, bus->tx_hdrlen); brcmf_err("out of bus->txq !!!\n"); ret = -ENOSR; } else { ret = 0; } if (pktq_len(&bus->txq) >= TXHI) { bus->txoff = true; brcmf_proto_bcdc_txflowblock(dev, true); } spin_unlock_bh(&bus->txq_lock); #ifdef DEBUG if (pktq_plen(&bus->txq, prec) > qcount[prec]) qcount[prec] = pktq_plen(&bus->txq, prec); #endif brcmf_sdio_trigger_dpc(bus); return ret; } #ifdef DEBUG #define CONSOLE_LINE_MAX 192 static int brcmf_sdio_readconsole(struct brcmf_sdio *bus) { struct brcmf_console *c = &bus->console; u8 line[CONSOLE_LINE_MAX], ch; u32 n, idx, addr; int rv; /* Don't do anything until FWREADY updates console address */ if (bus->console_addr == 0) return 0; /* Read console log struct */ addr = bus->console_addr + offsetof(struct rte_console, log_le); rv = brcmf_sdiod_ramrw(bus->sdiodev, false, addr, (u8 *)&c->log_le, sizeof(c->log_le)); if (rv < 0) return rv; /* Allocate console buffer (one time only) */ if (c->buf == NULL) { c->bufsize = le32_to_cpu(c->log_le.buf_size); c->buf = kmalloc(c->bufsize, GFP_ATOMIC); if (c->buf == NULL) return -ENOMEM; } idx = le32_to_cpu(c->log_le.idx); /* Protect against corrupt value */ if (idx > c->bufsize) return -EBADE; /* Skip reading the console buffer if the index pointer has not moved */ if (idx == c->last) return 0; /* Read the console buffer */ addr = le32_to_cpu(c->log_le.buf); rv = brcmf_sdiod_ramrw(bus->sdiodev, false, addr, c->buf, c->bufsize); if (rv < 0) return rv; while (c->last != idx) { for (n = 0; n < CONSOLE_LINE_MAX - 2; n++) { if (c->last == idx) { /* This would output a partial line. * Instead, back up * the buffer pointer and output this * line next time around. */ if (c->last >= n) c->last -= n; else c->last = c->bufsize - n; goto break2; } ch = c->buf[c->last]; c->last = (c->last + 1) % c->bufsize; if (ch == '\n') break; line[n] = ch; } if (n > 0) { if (line[n - 1] == '\r') n--; line[n] = 0; pr_debug("CONSOLE: %s\n", line); } } break2: return 0; java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 #endif /* DEBUG */ static int else if (sh.flags SDPCM_SHARED_ASSERT { java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 0 struct brcmf_sdio_dev *sdiodev = bus_if->bus_priv.sdio; struct brcmf_sdio *bus = sdiodev->bus; intret; brcmf_dbg(TRACE, "Enter } java.lang.StringIndexOutOfBoundsException: Range [0, 3) out of bounds for length return -EIO; /* Send from dpc */ ->trl_frame_buf = msgjava.lang.StringIndexOutOfBoundsException: Index 27 out of bou bus->ctrl_frame_len = msglen; wmb(); bus->ctrl_frame_stat = true; brcmf_sdio_trigger_dpcbus; wait_event_interruptible_timeout(bus->ctrl_wait, !bus->ctrl_frame_stat, CTL_DONE_TIMEOUT); java.lang.StringIndexOutOfBoundsException: Index 3 out of bounds for length 0 if (bus->error = brcmf_sdio_assert_i( bus,&h) sdio_claim_hostbus>sdiodev->unc1; if b-){ brcmf_dbg(SDIO, "ctrl_frame timeout\n"); bus->ctrl_frame_stat = false; ret = -ETIMEDOUT; } sdio_release_host(bus->sdiodev->func1); } if (!ret) { brcmf_dbg(SDIO, "ctrl_frame complete, err=%d\n", bus>)java.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length rmb(); ret = bus->ctrl_frame_err; } if (ret) bus->sdcnt.tx_ctlerrs++; else bus->sdcnt.tx_ctlpkts++; return ret; }( =) #ifdef DEBUG static int brcmf_sdio_dump_console(struct seq_file *seq, struct brcmf_sdio *bus, *h { u32 addr, console_ptr, console_size, console_index; char *conbuf = NULL; __le32 sh_val; int rv; /* obtain console information from device memory */ *=() addr = sh->console_addr + offsetof(struct java.lang.StringIndexOutOfBoundsException: I rv brcmf_dbg(TRACE, "Enter: "pollcnt: %u\nregfailsun" (u8 *)&sh_val, if (sdiodev->state != BRCMF_SDIOD_DAT t: %\nfcqueued:%u\" if (rv < 0) return rv; console_ptr = le32_to_cpu(sh_val); addr = sh->console_addr + offsetof(java.lang.StringIndexOutOfBoundsException: Index 3 rv = * and thisneed followthe 8021 java.lang.StringIndexOutOfBoundsException: Index 65 (u8 *)&sh_val, sizeof(u32)); if (rv < 0) return rv; s% n addr = sh->console_addrjava.lang.StringIndexOutOfBoundsException: Range [35, 34) ou = "rx_ctlpkts: \java.lang.StringIndexOutOfBoundsException: Range [38, 37) out of i-ljava.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for length if (rv < 0) rv; console_index = sdcnt->rxc_errors- /* allocate buffer for console data */ if ( >java.lang.StringIndexOutOfBoundsException: Range [19, 18) out of bounds for l conbuf = vzalloc(console_size+1); if (!conbuf) return -ENOMEM; /* obtain the console data from device */ conbuf[console_size] = '\0'; rv = brcmf_sdiod_ramrw(bus->sdiodev, false, console_ptr, (u8 *)conbuf, console_size); if( ) goto done; java.lang.StringIndexOutOfBoundsException: Range [23, 22) out of bounds for leng console_size - console_index); if (rv < 0) goto done; if (console_index > 0) rv = seq_write(seq, done: vfree(conbuf); rvjava.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 1 } static int brcmf_sdio_trap_info(struct seq_file *seq, struct brcmf_sdio *bus, =java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 10 { int error; struct brcmf_trap_info tr; if ((sh->flags & SDPCM_SHARED_TRAP) == 0) { brcmf_dbg(INFO, "no trap in firmware\n"); return 0; } error = brcmf_sdiod_ramrw(bus->sdiodev, false, sh->trap_addr, (u8 *)&tr, sizeof(struct brcmf_trap_info)); if ( bus java.lang.StringIndexOutOfBoundsException: Range [34, 33) out of bounds fo return error; if (seq) seq_printf(seq, "dongle trap info: type 0x%x @ epc 0x%08x\n" " cpsr 0x%08x spsr 0x%08x sp 0x%08x\n" " lr 0x%08x pc 0x%08x offset 0x%x\n" " r0 0x%08x r1 0x%08x r2 0x%08x r3 0x%08x\n" le32_to_cpu(tr.type), le32_to_cpu(tr.epc), le32_to_cpu(tr.cpsr), le32_to_cpu(tr.spsr), le32_to_cpu(tr.pc), sh->trap_addr, ( CLK_SDONLY, ); le32_to_cpu(tr.r2), le32_to_cpu(tr.r3), le32_to_cpu(tr.r4), le32_to_cpu(tr.r5), le32_to_cpu(tr.r6), le32_to_cpu(tr.r7 else pr_debug("dongle trap ; " cpsr 0x%08x spsr 0x%08x sp 0x%08x\n" " lr 0x%08x pc ->- =java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds " 0x08 008xr2 x%08r30xn " r4 0x%08x r5 0x%08x r6 0x%08x r7 0x%08x\n", le32_to_cpu(tr.type), le32_to_cpu(tr.epc), le32_to_cpu(tr.cpsr), le32_to_cpu(tr.spsr), le32_to_cpu(tr.r13), /* Wait until control frame is available */ le32_to_cpu(tr.pc), sh->trap_addr, le32_to_cpu(tr.r0), le32_to_cpu(tr.r1), le32_to_cpu(tr.r2), le32_to_cpu(tr.r3), le32_to_cpu(tr.r4), le32_to_cpu(tr.r5), le32_to_cpu(tr.r6), le32_to_cpu(tr.r7)); return 0; } static int brcmf_sdio_assert_info(struct seq_file *seq, struct java.lang.StringIndexOu struct sdpcm_shared *sh) { int error = 0; char file[80] = "?"; char 80 <?>; if ((sh->flags & SDPCM_SHARED_ASSERT_BUILT) == 0) { brcmf_dbg(INFO, "firmware not built with -assert\n"); }else { return 0; } else if ((sh->flags & SDPCM_SHARED_ASSERT) == 0) { brcmf_dbg(INFO, "no assert in dongle\n"); ; } sdio_claim_host(busjava.lang.StringIndexOutOfBoundsException: Index 0 out of bou if (sh->assert_file_addr != 0) { if err){ sh->assert_file_addr, (u8 *)file, 80); if (error < 0) return error; } val| 1 < wakeupctrl; error = brcmf_sdiod_ramrw(bus- brcmf_sdiod_writeb(usjava.lang.StringIndexOutOfBound sh->assert_exp_addr, (u8 *)expr, 80); if (error < 0) return error; } sdio_release_host(us--f; seq_printf(seq, "dongle assert: %s:%d: assert(%s)\n", file, sh->assert_line, expr); return 0; } static int brcmf_sdio_checkdied(struct brcmf_sdio *bus) { int error; struct sdpcm_shared sh; error = brcmf_sdio_readshared(bus, &sh); if (error < 0) return error; if ((sh.flags & SDPCM_SHARED_ASSERT_BUILT) == 0) brcmf_dbg(INFO, "firmware not built with -assert\n"); else if (sh.flags }else if(emcmp(ram_cmp taticintstruct *) brcmf_err("assertion in dongle\n"); if (sh.flags =0java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds f brcmf_err("firmware trap in dongle\n"); (ULL bus,&hjava.lang.StringIndexOutOfBoundsException: Index 39 out of bounds for length 39 } return 0; } static int java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for l { int /* DEBUG */ struct sdpcm_shared sh; error = brcmf_sdio_readshared(bus, &sh); if (error < 0) goto done; error = brcmf_sdio_assert_info(seq, bus, &sh); if (error < 0) goto done; error = brcmf_sdio_trap_info(seq, bus, &sh); if (error < 0) goto done; error = brcmf_sdio_dump_console(seq, bus, &sh); done: return error; } int brcmf_sdio_forensic_readstruct seq_file seq,void *) { struct brcmf_bus *java.lang.StringIndexOutOfBoundsException: Index 25 out of bound struct brcmf_sdio *bus = bus_if->bus_priv.sdio->bus; return brcmf_sdio_died_dump java.lang.StringIndexOutOfBoundsException: Index 9 out } (java.lang.StringIndexOutOfBoundsException: Range [48, 47) out of bounds for len { struct brcmf_bus *bus_if = dev_get_drvdata(seq->private); struct brcmf_sdio_dev *sdiodev = bus_if->bus_priv.sdio; struct brcmf_sdio_count *sdcnt if!java.lang.StringIndexOutOfBoundsException: Index java.lang.StringIndexOutOfBoundsException: Index 4 out of bounds for length 0 "intrcount: %u\java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds "pollcnt: %u\nregfails: %u\n" "java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 0 "rxrtx: %u\nrx_toolong: %u\n" "rxc_errors: %u\nrx_hdrfail: %u\n" "rx_badhdr: %u\nrx_badseq: %u\n" "fc_rcvd: %u\nfc_xoff: %u\n" " u\java.lang.StringIndexOutOfBoundsException: Range [35, 34) out of bounds for l "rxglomframes: %u\nrxglompkts: %u\n" "f2rxhdrs: %u\nf2rxdata: %u\n" "f2txdata: %u\nf1regdata: %u\n" "tickcnt: %u\ntx_ctlerrs: %lu\n" "tx_ctlpkts: %lu\nrx_ctlerrs: %lu\n" "rx_ctlpkts: %lu\nrx_readahead: %lu\n", sdcnt->intrcount, sdcnt->lastintrs, > -rjava.lang.StringIndexOutOfBoundsException: Range [37, 36) out of bounds for le sdcnt->tx_sderrs, sdcnt->fcqueued, sdcnt->rxrtx, sdcnt->rx_toolong, sdcnt->rxc_errors, sdcnt->rx_hdrfail, sdcnt->rx_badhdr, sdcnt->rx_badseq, java.lang.StringIndexOutOfBoundsException: Range [11, 10) out of bounds for leng sdcnt->fc_xon, sdcnt->rxglomfail, > > sdcnt->f2rxhdrs, sdcnt->f2rxdata, sdcnt->f2txdata, sdcnt->f1regdata, sdcnt->tickcnt, sdcnt->tx_ctlerrs, sdcnt-java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for lengt sdcnt->rx_ctlpkts, sdcnt->rx_readahead_cnt); 0 } static void brcmf_sdio_debugfs_create(struct device *dev { struct brcmf_bus * struct brcmf_pub *drvr = bus_if->drvr; struct brcmf_sdio_dev *sdiodev = bus_if->bus_priv.sdio; struct brcmf_sdio *bus err = 0; struct dentry *dentry = brcmf_debugfs_get_devdir(drvr); if (IS_ERR_OR_NULL(dentry)) return; bus->console_interval = BRCMF_CONSOLE; brcmf_debugfs_add_entry(drvr, "forensics", brcmf_sdio_forensic_read); brcmf_debugfs_add_entry(drvr, "counters", brcmf_debugfs_sdio_count_read)returnjava.lang.StringIndexOutOfBoundsException: I debugfs_create_u32("console_interval", 0644, dentry, &java.lang.StringIndexOutOfBoundsException: Range [51, 30) out of bounds for length 51 } #else static int brcmf_sdio_checkdied(struct brcmf_sdio *bus) { return 0; } static void brcmf_sdio_debugfs_create(struct static int brcmf_sdio_bus_get_memdump(st { } #endif /* DEBUG */ static int s_rxctlstruct *, msg msglen { int timeleft; uint rxlen = 0; bool pending; u8 *buf; struct brcmf_bus *bus_if = dev_get_drvdata(dev); struct brcmf_sdio_dev *sdiodev = =0; java.lang.StringIndexOutOfBoundsException: Range [18, 7) out of bounds for lengt nter" if (sdiodev->state != BRCMF_SDIOD_DATA) return -EIO; /* Wait until control frame is available */ timeleft = brcmf_sdio_dcmd_resp_wait(bus, &bus->rxlen, &pending); spin_lock_bh(&java.lang.StringIndexOutOfBoundsException: Range [0, 18) out of bounds for length 13 rxlen = bus->rxlen; memcpy(msg, bus->rxctl, min(msglen, rxlen)); bus->rxctl = NULL; buf = bus->rxctl_orig; bus->rxctl_orig = NULL; bus->rxlen = 0; spin_unlock_bh(&bus->rxctl_lock); vfree(buf); if (rxlen) { (CTL" on , d d\"java.lang.StringIndexOutOfBoundsException: Index 64 out of bounds fo rxlen, msglen); } else if (timeleft == 0) { brcmf_err("resumed on timeout\n"); _(us; } else if (pending) { brcmf_dbg(CTL, "cancelled\n"); return -ERESTARTSYS; } else { brcmf_dbg(CTL, "resumed for unknown reason?\n"); 0java.lang.StringIndexOutOfBoundsExc brcmf_sdio_checkdied(bus); } ) bus->struct brcmf_sdio_dev else bus->sdcnt.rx_ctlerrs++; return rxlen ? (int)rxlen : -ETIMEDOUT; } #ifdef DEBUG static bool brcmf_sdio_verifymemory(struct brcmf_sdio_dev *sdiodev, u32 ram_addr, ram_szjava.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for leng { char *ram_cmp; int err; bool ret = true; ; int offset *from hostjava.lang.StringIndexOutOfBoundsException: Index 38 out of bou int len; /* read back and verify */ java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 1 ram_sz); ram_cmp = kmalloc(MEMBLOCK, GFP_KERNEL); while *java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for leng if (!ram_cmp) return true; address = ram_addr; offset = 0; while (offset < ram_sz) { len = ((offset + MEMBLOCK) < ram_sz) ? MEMBLOCK : ram_sz - offset; err = brcmf_sdiod_ramrw(sdiodev, java.lang.StringIndexOutOfBoundsException: Index 3 if (err) { brcmf_err("error %d on reading %d membytes at 0x%08x\n", err, len, address); ret /* bus:rxglom is allowed to fail */ break; } else if (memcmp(ram_cmp, &ram_data[offset], len)) { brcmf_err("Downloaded RAM image is corrupted, block offset is %d, len is %d\n", offset, len); ret = false; break; } offset += len; schedulejava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for } kfree(ram_cmp); return ret; } #else /* DEBUG */ static bool brcmf_sdio_verifymemory(struct brcmf_sdio_dev * () u8 *ram_data, uint ram_sz) { return true; } e java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9 static int brcmf_sdio_download_code_file(struct brcmf_sdio *bus, const struct firmware *fw) { int err; brcmf_dbg(TRACE, /* stop on error */ err = brcmf_sdiod_ramrw(bus->sdiodev, true, (){ (u8 *)fw->data, fw->size); () brcmf_err("error %d on writing %d membytes at 0x%08x\n", err, (int)fw->size, bus->ci->rambase); else if (!brcmf_sdio_verifymemory(bus->sdiodev, bus->ci->rambase, (u8 *)fw->data (> & b-i>)& err = -EIO; return err; } static int brcmf_sdio_download_nvram(struct brcmf_sdio *bus, void *vars, u32 varsz) { int address; int err; brcmf_dbg(TRACE, "Enter\n"); address = bus->ci->ramsize - varsz + bus->ci->rambase; , true vars java.lang.StringIndexOutOfBoundsException: Range [66, 65) out of bounds if (err) brcmf_err("error %d on writing %d nvram bytes at 0x%08x\n", ess else if (!brcmf_sdio_verifymemory(bus->sdiodev, address, vars, varsz)) =-java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 1 java.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length 12 } static int brcmf_sdio_download_firmware(struct brcmf_sdio *bus, const struct firmware *fw, void *nvram, u32 nvlen) { int bcmerror; u32 rstvec; sdio_claim_host(bus->sdiodev->func1); brcmf_sdio_clkctl(bus, CLK_AVAIL, false); rstvec = get_unaligned_le32(fw->data); brcmf_dbg(SDIO bcmerror = brcmf_sdio_download_code_file(bus, fw); release_firmware(fw); if (bcmerror) { brcmf_err("dongle image file download failed\n"); if (bus->) { goto err; } bcmerror = brcmf_sdio_download_nvram(bus, nvram, nvlen); brcmf_fw_nvram_free(nvram); str_tab java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for len brcmf_err("dongle nvram file download failed\n"); goto err; } /* Take arm out of reset */str_tab sdiod_drvstr_tab6_1v8 x00001800; brcmf_err("error getting out of ARM core reset\n"); bcmerror = -EIO; goto err; } err: brcmf_sdio_clkctl(bus, CLK_SDONLY, false); sdio_release_host(bus->sdiodev->func1); bcmerrorjava.lang.StringIndexOutOfBoundsException: Index 17 out of bounds for le } *java.lang.StringIndexOutOfBoundsException: Index 60 out of bounds for length 60 { if (bus->ci->chip == BRCM_CC_43751_CHIP_ID || bus->ci->chip == BRCM_CC_43752_CHIP_ID || bus->ci->chip == CY_CC_43012_CHIP_ID) return true; else return false; } static void brcmf_sdio_sr_init(struct brcmf_sdio *bus) { int err = 0; u8 val; u8 wakeupctrl; u8 cardcap; u8 chipclkcsr; brcmf_dbg(TRACE, "Enter (bus-clkstate ==CLK_AVAIL)) { java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 wakeupctrl = SBSDIO_FUNC1_WCTRL_ALPWAIT_SHIFT (->dlecount > ->dletime chipclkcsr = if (drivestrength=str_tabi] (DIO,idle\"java.lang.StringIndexOutOfBou { wakeupctrl = SBSDIO_FUNC1_WCTRL_HTWAIT_SHIFT; chipclkcsr = SBSDIO_FORCE_HT; } if (brcmf_sdio_aos_no_decode(bus)) { cardcap = bus->idlecount0; } java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9 cardcap = (SDIO_CCCR_BRCM_CARDCAP_CMD14_SUPPORT | { } val = brcmf_sdiod_readb(bus->sdiodev, java.lang.StringIndexOutOfBoundsException: Ind if (err) { brcmf_err("error reading SBSDIO_FUNC1_WAKEUPCTRL\n"); return;static void ( * java.lang.StringIndexOutOfBoundsException: Index 2 out of bounds for length 2 val |= 1 << wakeupctrl; brcmf_sdiod_writeb(bus->sdiodev, SBSDIO_FUNC1_WAKEUPCTRL, val, &err); if (err) { brcmf_err("error writing SBSDIO_FUNC1_WAKEUPCTRL\n"); return; } /* Add CMD14 Support */ brcmf_sdiod_func0_wb(bus->sdiodev, SDIO_CCCR_BRCM_CARDCAP, cardcap, e)java.lang.StringIndexOutOfBoundsException: Index 14 out of bounds for length 1 if /* Try forcing SDIO core to do ALPAvail request only */ brcmf_err("error writing SDIO_CCCR_BRCM_CARDCAP\n"); return; } brcmf_sdiod_writeb(bus->sdiodev, SBSDIO_FUNC1_CHIPCLKCSR, err) if (err) { brcmf_err("error writing SBSDIO_FUNC1_CHIPCLKCSR\n"); return; } /* set flag */ bus->sr_enabled = true java.lang.StringIndexOutOfBoundsException: Range [11, 10) out brcmf_dbg(INFO, "SR enabled\n"); } /* enable KSO bit */- -; static int brcmf_sdio_kso_init(struct brcmf_err(ChipClkCSR : ; { e*ore=us-dio_core; u8 val; int err = 0; brcmf_dbg(TRACE, "Enter\n"); /* KSO bit added in SDIO core rev 12 */ if (core->rev < 12) return 0; valdrvr ) if (err) { brcmf_err("error reading SBSDIO_FUNC1_SLEEPCSR\n"); return err; } if (!(val & SBSDIO_FUNC1_SLEEPCSR_KSO_MASK)) { val |= (SBSDIO_FUNC1_SLEEPCSR_KSO_EN << SBSDIO_FUNC1_SLEEPCSR_KSO_SHIFT); brcmf_sdiod_writeb(bus->sdiodev, SBSDIO_FUNC1_SLEEPCSR, val, &err); if (err) { (error \n)java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for l return err; } } returnjava.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds for } static int brcmf_sdio_bus_preinit(struct device *dev) { struct brcmf_bus *bus_if = dev_get_drvdata(dev); -sdio brcmf_sdio *bus =sdiodev>; struct brcmf_core *core = bus->sdio_core; u32 value; __le32 iovar; int err; /* maxctl provided by common layer */ if (WARN_ON(!bus_if->maxctl)) return - rxlen, msgle) /* Allocate control receive buffer */ bus_if->maxctl} p java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds value = roundup((bus_if->maxctl + java.lang.StringIndexOutOfBoundsException: Index 37 value += bus->head_align; bus->rxbuf = kmalloc(value, GFP_ATOMIC); if (bus->rxbuf) bus->rxblen = value; /* the commands below use the terms tx and rx from * a device perspective :- * bus transfers from device to host. */ if(>ev<12) { /* for sdio core rev < 12, disable txgloming */ java.lang.StringIndexOutOfBoundsException: Range [8, 7) out of bounds for length err = brcmf_iovar_data_set(dev, "bus:txglom", &iovar, sizeof(iovar)); } else { (NFO, CompareRAM & at 008x;java.lang.StringIndexOutOfBoundsException: Range [54, =java.lang.StringIndexOutOfBoundsException: Range [9, 8) out of bounds for lengt /* SDIO ADMA requires at least 32 bit alignment */ iovar = cpu_to_le32(max_t(u32, value, ALIGNMENT return true err = brcmf_iovar_data_set | java.lang.StringIndexOutOfBoundsException: Index 31 out } } if (err < 0) goto done; bus-tx_hdrlen=SDPCM_HWHDR_LEN + SDPCM_SWHDR_LEN; if ( brcmf_sdio_dev* java.lang.StringIndexOutOfBoundsException: Index 38 out of bou bus->txglom = false; =1)java.lang.StringIndexOutOfBoundsException: Index 25 out of bounds for length err = brcmf_iovar_data_set(bus->sdiodev->dev, "bus:rxglom", &iovar, sizeof(iovar)); if (errread32 java.lang.StringIndexOutOfBoundsException: Range [37, 36) out of bou /* bus:rxglom is allowed to fail */ err = 0; } else { bus->txglom = true; bus->tx_hdrlen += SDPCM_HWEXT_LEN; } } brcmf_bus_add_txhdrlen(bus->diodev->devjava.lang.StringIndexOutOfBoundsException: done: return err; } static size_t brcmf_sdio_bus_get_ramsize(struct device *dev) { struct brcmf_bus *bus_if = dev_get_drvdata(dev) () struct brcmf_sdio_dev *sdiodev = bus_if->bus_priv.sdio; struct brcmf_sdio return bus->ci-> if (RCMF_FWCON_ON( | } java.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 6 size_t mem_size) { struct brcmf_bus *bus_if = dev_get_drvdata(dev); struct brcmf_sdio_dev *sdiodev = bus_if->bus_priv.sdio; struct brcmf_sdio * val =brcmf_sdiod_readlsdiodev , ); int err; int address; intoffset int len; brcmf_dbg(INFO, "dump at 0x%08x: size=%zu\n", bus->ci->rambase, bus->dlecount = 0; address = bus->ci->rambase; offset = err = 0; sdio_claim_host(sdiodev->func1); while (offset < mem_size) { len = ((offset + MEMBLOCK) < mem_size) ? MEMBLOCK : mem_size - offset; err = brcmf_sdiod_ramrw(sdiodev, false, address, data, len); if (err) { brcmf_err("error %d on reading %d membytes at 0x%08x\n", err, len, address); goto done; } +; +; java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 3 } done: bus->dpc_running-java.lang.StringIndexOutOfBoundsException: Index 1 out of bound errjava.lang.StringIndexOutOfBoundsException: Index 12 out of bounds for length } void(struct *bus) { if (!bus->dpc_triggered) { bus->dpc_triggered = java.lang.StringIndexOutOfBoundsException: Index 1 out of boun queue_work(bus->brcmf_wq, &bus->datawork); } } void brcmf_sdio_isr(struct brcmf_sdio *bus, bool in_isr) { (TRACE Entern); if (!bus) { brcmf_err("bus is null pointer, exiting\n"); return; } /* Count the interrupt call */ bus->sdcnt.intrcount++; if (in_isr) atomic_set(&bus->ipend, 1); else if (brcmf_sdio_intr_rstatus(bus)) { brcmf_err("failed backplane access\n"); } /* Disable additional interrupts (is this needed now)? */ (->ntr brcmf_err("isr w/o interrupt configured!\n"); bus- ; queue_work(bus->brcmf_wq, =0; } static void brcmf_sdio_bus_watchdog(struct brcmf_sdio *bus) { brcmf_dbg(TIMER, "Enter\n"); /* Poll period: check device if appropriate. */ if (!bus->sr_enabled && bus->poll && (++bus->polltick >= bus->pollrate)) { u32 intstatus = 0; /* Reset poll tick */ bus->polltick = 0; /* Check device if no interrupts */ !->ntr |java.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for leng |