Merge branch 'x86-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel...
[firefly-linux-kernel-4.4.55.git] / drivers / net / wireless / mwifiex / init.c
1 /*
2  * Marvell Wireless LAN device driver: HW/FW Initialization
3  *
4  * Copyright (C) 2011-2014, Marvell International Ltd.
5  *
6  * This software file (the "File") is distributed by Marvell International
7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19
20 #include "decl.h"
21 #include "ioctl.h"
22 #include "util.h"
23 #include "fw.h"
24 #include "main.h"
25 #include "wmm.h"
26 #include "11n.h"
27
28 /*
29  * This function adds a BSS priority table to the table list.
30  *
31  * The function allocates a new BSS priority table node and adds it to
32  * the end of BSS priority table list, kept in driver memory.
33  */
34 static int mwifiex_add_bss_prio_tbl(struct mwifiex_private *priv)
35 {
36         struct mwifiex_adapter *adapter = priv->adapter;
37         struct mwifiex_bss_prio_node *bss_prio;
38         struct mwifiex_bss_prio_tbl *tbl = adapter->bss_prio_tbl;
39         unsigned long flags;
40
41         bss_prio = kzalloc(sizeof(struct mwifiex_bss_prio_node), GFP_KERNEL);
42         if (!bss_prio)
43                 return -ENOMEM;
44
45         bss_prio->priv = priv;
46         INIT_LIST_HEAD(&bss_prio->list);
47
48         spin_lock_irqsave(&tbl[priv->bss_priority].bss_prio_lock, flags);
49         list_add_tail(&bss_prio->list, &tbl[priv->bss_priority].bss_prio_head);
50         spin_unlock_irqrestore(&tbl[priv->bss_priority].bss_prio_lock, flags);
51
52         return 0;
53 }
54
55 static void wakeup_timer_fn(unsigned long data)
56 {
57         struct mwifiex_adapter *adapter = (struct mwifiex_adapter *)data;
58
59         mwifiex_dbg(adapter, ERROR, "Firmware wakeup failed\n");
60         adapter->hw_status = MWIFIEX_HW_STATUS_RESET;
61         mwifiex_cancel_all_pending_cmd(adapter);
62
63         if (adapter->if_ops.card_reset)
64                 adapter->if_ops.card_reset(adapter);
65 }
66
67 /*
68  * This function initializes the private structure and sets default
69  * values to the members.
70  *
71  * Additionally, it also initializes all the locks and sets up all the
72  * lists.
73  */
74 int mwifiex_init_priv(struct mwifiex_private *priv)
75 {
76         u32 i;
77
78         priv->media_connected = false;
79         eth_broadcast_addr(priv->curr_addr);
80
81         priv->pkt_tx_ctrl = 0;
82         priv->bss_mode = NL80211_IFTYPE_UNSPECIFIED;
83         priv->data_rate = 0;    /* Initially indicate the rate as auto */
84         priv->is_data_rate_auto = true;
85         priv->bcn_avg_factor = DEFAULT_BCN_AVG_FACTOR;
86         priv->data_avg_factor = DEFAULT_DATA_AVG_FACTOR;
87
88         priv->sec_info.wep_enabled = 0;
89         priv->sec_info.authentication_mode = NL80211_AUTHTYPE_OPEN_SYSTEM;
90         priv->sec_info.encryption_mode = 0;
91         for (i = 0; i < ARRAY_SIZE(priv->wep_key); i++)
92                 memset(&priv->wep_key[i], 0, sizeof(struct mwifiex_wep_key));
93         priv->wep_key_curr_index = 0;
94         priv->curr_pkt_filter = HostCmd_ACT_MAC_RX_ON | HostCmd_ACT_MAC_TX_ON |
95                                 HostCmd_ACT_MAC_ETHERNETII_ENABLE;
96
97         priv->beacon_period = 100; /* beacon interval */ ;
98         priv->attempted_bss_desc = NULL;
99         memset(&priv->curr_bss_params, 0, sizeof(priv->curr_bss_params));
100         priv->listen_interval = MWIFIEX_DEFAULT_LISTEN_INTERVAL;
101
102         memset(&priv->prev_ssid, 0, sizeof(priv->prev_ssid));
103         memset(&priv->prev_bssid, 0, sizeof(priv->prev_bssid));
104         memset(&priv->assoc_rsp_buf, 0, sizeof(priv->assoc_rsp_buf));
105         priv->assoc_rsp_size = 0;
106         priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
107         priv->atim_window = 0;
108         priv->adhoc_state = ADHOC_IDLE;
109         priv->tx_power_level = 0;
110         priv->max_tx_power_level = 0;
111         priv->min_tx_power_level = 0;
112         priv->tx_rate = 0;
113         priv->rxpd_htinfo = 0;
114         priv->rxpd_rate = 0;
115         priv->rate_bitmap = 0;
116         priv->data_rssi_last = 0;
117         priv->data_rssi_avg = 0;
118         priv->data_nf_avg = 0;
119         priv->data_nf_last = 0;
120         priv->bcn_rssi_last = 0;
121         priv->bcn_rssi_avg = 0;
122         priv->bcn_nf_avg = 0;
123         priv->bcn_nf_last = 0;
124         memset(&priv->wpa_ie, 0, sizeof(priv->wpa_ie));
125         memset(&priv->aes_key, 0, sizeof(priv->aes_key));
126         priv->wpa_ie_len = 0;
127         priv->wpa_is_gtk_set = false;
128
129         memset(&priv->assoc_tlv_buf, 0, sizeof(priv->assoc_tlv_buf));
130         priv->assoc_tlv_buf_len = 0;
131         memset(&priv->wps, 0, sizeof(priv->wps));
132         memset(&priv->gen_ie_buf, 0, sizeof(priv->gen_ie_buf));
133         priv->gen_ie_buf_len = 0;
134         memset(priv->vs_ie, 0, sizeof(priv->vs_ie));
135
136         priv->wmm_required = true;
137         priv->wmm_enabled = false;
138         priv->wmm_qosinfo = 0;
139         priv->curr_bcn_buf = NULL;
140         priv->curr_bcn_size = 0;
141         priv->wps_ie = NULL;
142         priv->wps_ie_len = 0;
143         priv->ap_11n_enabled = 0;
144         memset(&priv->roc_cfg, 0, sizeof(priv->roc_cfg));
145
146         priv->scan_block = false;
147
148         priv->csa_chan = 0;
149         priv->csa_expire_time = 0;
150         priv->del_list_idx = 0;
151         priv->hs2_enabled = false;
152         priv->check_tdls_tx = false;
153         memcpy(priv->tos_to_tid_inv, tos_to_tid_inv, MAX_NUM_TID);
154
155         mwifiex_init_11h_params(priv);
156
157         return mwifiex_add_bss_prio_tbl(priv);
158 }
159
160 /*
161  * This function allocates buffers for members of the adapter
162  * structure.
163  *
164  * The memory allocated includes scan table, command buffers, and
165  * sleep confirm command buffer. In addition, the queues are
166  * also initialized.
167  */
168 static int mwifiex_allocate_adapter(struct mwifiex_adapter *adapter)
169 {
170         int ret;
171
172         /* Allocate command buffer */
173         ret = mwifiex_alloc_cmd_buffer(adapter);
174         if (ret) {
175                 mwifiex_dbg(adapter, ERROR,
176                             "%s: failed to alloc cmd buffer\n",
177                             __func__);
178                 return -1;
179         }
180
181         adapter->sleep_cfm =
182                 dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
183                               + INTF_HEADER_LEN);
184
185         if (!adapter->sleep_cfm) {
186                 mwifiex_dbg(adapter, ERROR,
187                             "%s: failed to alloc sleep cfm\t"
188                             " cmd buffer\n", __func__);
189                 return -1;
190         }
191         skb_reserve(adapter->sleep_cfm, INTF_HEADER_LEN);
192
193         return 0;
194 }
195
196 /*
197  * This function initializes the adapter structure and sets default
198  * values to the members of adapter.
199  *
200  * This also initializes the WMM related parameters in the driver private
201  * structures.
202  */
203 static void mwifiex_init_adapter(struct mwifiex_adapter *adapter)
204 {
205         struct mwifiex_opt_sleep_confirm *sleep_cfm_buf = NULL;
206
207         skb_put(adapter->sleep_cfm, sizeof(struct mwifiex_opt_sleep_confirm));
208
209         adapter->cmd_sent = false;
210
211         if (adapter->iface_type == MWIFIEX_SDIO)
212                 adapter->data_sent = true;
213         else
214                 adapter->data_sent = false;
215
216         adapter->cmd_resp_received = false;
217         adapter->event_received = false;
218         adapter->data_received = false;
219
220         adapter->surprise_removed = false;
221
222         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
223
224         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
225         adapter->ps_state = PS_STATE_AWAKE;
226         adapter->need_to_wakeup = false;
227
228         adapter->scan_mode = HostCmd_BSS_MODE_ANY;
229         adapter->specific_scan_time = MWIFIEX_SPECIFIC_SCAN_CHAN_TIME;
230         adapter->active_scan_time = MWIFIEX_ACTIVE_SCAN_CHAN_TIME;
231         adapter->passive_scan_time = MWIFIEX_PASSIVE_SCAN_CHAN_TIME;
232         adapter->scan_chan_gap_time = MWIFIEX_DEF_SCAN_CHAN_GAP_TIME;
233
234         adapter->scan_probes = 1;
235
236         adapter->multiple_dtim = 1;
237
238         adapter->local_listen_interval = 0;     /* default value in firmware
239                                                    will be used */
240
241         adapter->is_deep_sleep = false;
242
243         adapter->delay_null_pkt = false;
244         adapter->delay_to_ps = 1000;
245         adapter->enhanced_ps_mode = PS_MODE_AUTO;
246
247         adapter->gen_null_pkt = false;  /* Disable NULL Pkg generation by
248                                            default */
249         adapter->pps_uapsd_mode = false; /* Disable pps/uapsd mode by
250                                            default */
251         adapter->pm_wakeup_card_req = false;
252
253         adapter->pm_wakeup_fw_try = false;
254
255         adapter->curr_tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
256
257         adapter->is_hs_configured = false;
258         adapter->hs_cfg.conditions = cpu_to_le32(HS_CFG_COND_DEF);
259         adapter->hs_cfg.gpio = HS_CFG_GPIO_DEF;
260         adapter->hs_cfg.gap = HS_CFG_GAP_DEF;
261         adapter->hs_activated = false;
262
263         memset(adapter->event_body, 0, sizeof(adapter->event_body));
264         adapter->hw_dot_11n_dev_cap = 0;
265         adapter->hw_dev_mcs_support = 0;
266         adapter->sec_chan_offset = 0;
267         adapter->adhoc_11n_enabled = false;
268
269         mwifiex_wmm_init(adapter);
270
271         sleep_cfm_buf = (struct mwifiex_opt_sleep_confirm *)
272                                         adapter->sleep_cfm->data;
273         memset(sleep_cfm_buf, 0, adapter->sleep_cfm->len);
274         sleep_cfm_buf->command = cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
275         sleep_cfm_buf->size = cpu_to_le16(adapter->sleep_cfm->len);
276         sleep_cfm_buf->result = 0;
277         sleep_cfm_buf->action = cpu_to_le16(SLEEP_CONFIRM);
278         sleep_cfm_buf->resp_ctrl = cpu_to_le16(RESP_NEEDED);
279
280         memset(&adapter->sleep_params, 0, sizeof(adapter->sleep_params));
281         memset(&adapter->sleep_period, 0, sizeof(adapter->sleep_period));
282         adapter->tx_lock_flag = false;
283         adapter->null_pkt_interval = 0;
284         adapter->fw_bands = 0;
285         adapter->config_bands = 0;
286         adapter->adhoc_start_band = 0;
287         adapter->scan_channels = NULL;
288         adapter->fw_release_number = 0;
289         adapter->fw_cap_info = 0;
290         memset(&adapter->upld_buf, 0, sizeof(adapter->upld_buf));
291         adapter->event_cause = 0;
292         adapter->region_code = 0;
293         adapter->bcn_miss_time_out = DEFAULT_BCN_MISS_TIMEOUT;
294         adapter->adhoc_awake_period = 0;
295         memset(&adapter->arp_filter, 0, sizeof(adapter->arp_filter));
296         adapter->arp_filter_size = 0;
297         adapter->max_mgmt_ie_index = MAX_MGMT_IE_INDEX;
298         adapter->key_api_major_ver = 0;
299         adapter->key_api_minor_ver = 0;
300         eth_broadcast_addr(adapter->perm_addr);
301         adapter->iface_limit.sta_intf = MWIFIEX_MAX_STA_NUM;
302         adapter->iface_limit.uap_intf = MWIFIEX_MAX_UAP_NUM;
303         adapter->iface_limit.p2p_intf = MWIFIEX_MAX_P2P_NUM;
304
305         setup_timer(&adapter->wakeup_timer, wakeup_timer_fn,
306                     (unsigned long)adapter);
307 }
308
309 /*
310  * This function sets trans_start per tx_queue
311  */
312 void mwifiex_set_trans_start(struct net_device *dev)
313 {
314         int i;
315
316         for (i = 0; i < dev->num_tx_queues; i++)
317                 netdev_get_tx_queue(dev, i)->trans_start = jiffies;
318
319         dev->trans_start = jiffies;
320 }
321
322 /*
323  * This function wakes up all queues in net_device
324  */
325 void mwifiex_wake_up_net_dev_queue(struct net_device *netdev,
326                                         struct mwifiex_adapter *adapter)
327 {
328         unsigned long dev_queue_flags;
329         unsigned int i;
330
331         spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
332
333         for (i = 0; i < netdev->num_tx_queues; i++) {
334                 struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
335
336                 if (netif_tx_queue_stopped(txq))
337                         netif_tx_wake_queue(txq);
338         }
339
340         spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
341 }
342
343 /*
344  * This function stops all queues in net_device
345  */
346 void mwifiex_stop_net_dev_queue(struct net_device *netdev,
347                                         struct mwifiex_adapter *adapter)
348 {
349         unsigned long dev_queue_flags;
350         unsigned int i;
351
352         spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
353
354         for (i = 0; i < netdev->num_tx_queues; i++) {
355                 struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
356
357                 if (!netif_tx_queue_stopped(txq))
358                         netif_tx_stop_queue(txq);
359         }
360
361         spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
362 }
363
364 /*
365  *  This function releases the lock variables and frees the locks and
366  *  associated locks.
367  */
368 static void mwifiex_free_lock_list(struct mwifiex_adapter *adapter)
369 {
370         struct mwifiex_private *priv;
371         s32 i, j;
372
373         /* Free lists */
374         list_del(&adapter->cmd_free_q);
375         list_del(&adapter->cmd_pending_q);
376         list_del(&adapter->scan_pending_q);
377
378         for (i = 0; i < adapter->priv_num; i++)
379                 list_del(&adapter->bss_prio_tbl[i].bss_prio_head);
380
381         for (i = 0; i < adapter->priv_num; i++) {
382                 if (adapter->priv[i]) {
383                         priv = adapter->priv[i];
384                         for (j = 0; j < MAX_NUM_TID; ++j)
385                                 list_del(&priv->wmm.tid_tbl_ptr[j].ra_list);
386                         list_del(&priv->tx_ba_stream_tbl_ptr);
387                         list_del(&priv->rx_reorder_tbl_ptr);
388                         list_del(&priv->sta_list);
389                         list_del(&priv->auto_tdls_list);
390                 }
391         }
392 }
393
394 /*
395  * This function performs cleanup for adapter structure.
396  *
397  * The cleanup is done recursively, by canceling all pending
398  * commands, freeing the member buffers previously allocated
399  * (command buffers, scan table buffer, sleep confirm command
400  * buffer), stopping the timers and calling the cleanup routines
401  * for every interface.
402  */
403 static void
404 mwifiex_adapter_cleanup(struct mwifiex_adapter *adapter)
405 {
406         int idx;
407
408         if (!adapter) {
409                 pr_err("%s: adapter is NULL\n", __func__);
410                 return;
411         }
412
413         del_timer(&adapter->wakeup_timer);
414         mwifiex_cancel_all_pending_cmd(adapter);
415         wake_up_interruptible(&adapter->cmd_wait_q.wait);
416         wake_up_interruptible(&adapter->hs_activate_wait_q);
417
418         /* Free lock variables */
419         mwifiex_free_lock_list(adapter);
420
421         /* Free command buffer */
422         mwifiex_dbg(adapter, INFO, "info: free cmd buffer\n");
423         mwifiex_free_cmd_buffer(adapter);
424
425         for (idx = 0; idx < adapter->num_mem_types; idx++) {
426                 struct memory_type_mapping *entry =
427                                 &adapter->mem_type_mapping_tbl[idx];
428
429                 if (entry->mem_ptr) {
430                         vfree(entry->mem_ptr);
431                         entry->mem_ptr = NULL;
432                 }
433                 entry->mem_size = 0;
434         }
435
436         if (adapter->drv_info_dump) {
437                 vfree(adapter->drv_info_dump);
438                 adapter->drv_info_dump = NULL;
439                 adapter->drv_info_size = 0;
440         }
441
442         if (adapter->sleep_cfm)
443                 dev_kfree_skb_any(adapter->sleep_cfm);
444 }
445
446 /*
447  *  This function intializes the lock variables and
448  *  the list heads.
449  */
450 int mwifiex_init_lock_list(struct mwifiex_adapter *adapter)
451 {
452         struct mwifiex_private *priv;
453         s32 i, j;
454
455         spin_lock_init(&adapter->mwifiex_lock);
456         spin_lock_init(&adapter->int_lock);
457         spin_lock_init(&adapter->main_proc_lock);
458         spin_lock_init(&adapter->mwifiex_cmd_lock);
459         spin_lock_init(&adapter->queue_lock);
460         for (i = 0; i < adapter->priv_num; i++) {
461                 if (adapter->priv[i]) {
462                         priv = adapter->priv[i];
463                         spin_lock_init(&priv->rx_pkt_lock);
464                         spin_lock_init(&priv->wmm.ra_list_spinlock);
465                         spin_lock_init(&priv->curr_bcn_buf_lock);
466                         spin_lock_init(&priv->sta_list_spinlock);
467                         spin_lock_init(&priv->auto_tdls_lock);
468                 }
469         }
470
471         /* Initialize cmd_free_q */
472         INIT_LIST_HEAD(&adapter->cmd_free_q);
473         /* Initialize cmd_pending_q */
474         INIT_LIST_HEAD(&adapter->cmd_pending_q);
475         /* Initialize scan_pending_q */
476         INIT_LIST_HEAD(&adapter->scan_pending_q);
477
478         spin_lock_init(&adapter->cmd_free_q_lock);
479         spin_lock_init(&adapter->cmd_pending_q_lock);
480         spin_lock_init(&adapter->scan_pending_q_lock);
481         spin_lock_init(&adapter->rx_proc_lock);
482
483         skb_queue_head_init(&adapter->rx_data_q);
484         skb_queue_head_init(&adapter->tx_data_q);
485
486         for (i = 0; i < adapter->priv_num; ++i) {
487                 INIT_LIST_HEAD(&adapter->bss_prio_tbl[i].bss_prio_head);
488                 spin_lock_init(&adapter->bss_prio_tbl[i].bss_prio_lock);
489         }
490
491         for (i = 0; i < adapter->priv_num; i++) {
492                 if (!adapter->priv[i])
493                         continue;
494                 priv = adapter->priv[i];
495                 for (j = 0; j < MAX_NUM_TID; ++j)
496                         INIT_LIST_HEAD(&priv->wmm.tid_tbl_ptr[j].ra_list);
497                 INIT_LIST_HEAD(&priv->tx_ba_stream_tbl_ptr);
498                 INIT_LIST_HEAD(&priv->rx_reorder_tbl_ptr);
499                 INIT_LIST_HEAD(&priv->sta_list);
500                 INIT_LIST_HEAD(&priv->auto_tdls_list);
501                 skb_queue_head_init(&priv->tdls_txq);
502
503                 spin_lock_init(&priv->tx_ba_stream_tbl_lock);
504                 spin_lock_init(&priv->rx_reorder_tbl_lock);
505
506                 spin_lock_init(&priv->ack_status_lock);
507                 idr_init(&priv->ack_status_frames);
508         }
509
510         return 0;
511 }
512
513 /*
514  * This function initializes the firmware.
515  *
516  * The following operations are performed sequentially -
517  *      - Allocate adapter structure
518  *      - Initialize the adapter structure
519  *      - Initialize the private structure
520  *      - Add BSS priority tables to the adapter structure
521  *      - For each interface, send the init commands to firmware
522  *      - Send the first command in command pending queue, if available
523  */
524 int mwifiex_init_fw(struct mwifiex_adapter *adapter)
525 {
526         int ret;
527         struct mwifiex_private *priv;
528         u8 i, first_sta = true;
529         int is_cmd_pend_q_empty;
530         unsigned long flags;
531
532         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
533
534         /* Allocate memory for member of adapter structure */
535         ret = mwifiex_allocate_adapter(adapter);
536         if (ret)
537                 return -1;
538
539         /* Initialize adapter structure */
540         mwifiex_init_adapter(adapter);
541
542         for (i = 0; i < adapter->priv_num; i++) {
543                 if (adapter->priv[i]) {
544                         priv = adapter->priv[i];
545
546                         /* Initialize private structure */
547                         ret = mwifiex_init_priv(priv);
548                         if (ret)
549                                 return -1;
550                 }
551         }
552
553         if (adapter->if_ops.init_fw_port) {
554                 if (adapter->if_ops.init_fw_port(adapter))
555                         return -1;
556         }
557
558         for (i = 0; i < adapter->priv_num; i++) {
559                 if (adapter->priv[i]) {
560                         ret = mwifiex_sta_init_cmd(adapter->priv[i], first_sta,
561                                                    true);
562                         if (ret == -1)
563                                 return -1;
564
565                         first_sta = false;
566                 }
567         }
568
569         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
570         is_cmd_pend_q_empty = list_empty(&adapter->cmd_pending_q);
571         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
572         if (!is_cmd_pend_q_empty) {
573                 /* Send the first command in queue and return */
574                 if (mwifiex_main_process(adapter) != -1)
575                         ret = -EINPROGRESS;
576         } else {
577                 adapter->hw_status = MWIFIEX_HW_STATUS_READY;
578         }
579
580         return ret;
581 }
582
583 /*
584  * This function deletes the BSS priority tables.
585  *
586  * The function traverses through all the allocated BSS priority nodes
587  * in every BSS priority table and frees them.
588  */
589 static void mwifiex_delete_bss_prio_tbl(struct mwifiex_private *priv)
590 {
591         int i;
592         struct mwifiex_adapter *adapter = priv->adapter;
593         struct mwifiex_bss_prio_node *bssprio_node, *tmp_node;
594         struct list_head *head;
595         spinlock_t *lock; /* bss priority lock */
596         unsigned long flags;
597
598         for (i = 0; i < adapter->priv_num; ++i) {
599                 head = &adapter->bss_prio_tbl[i].bss_prio_head;
600                 lock = &adapter->bss_prio_tbl[i].bss_prio_lock;
601                 mwifiex_dbg(adapter, INFO,
602                             "info: delete BSS priority table,\t"
603                             "bss_type = %d, bss_num = %d, i = %d,\t"
604                             "head = %p\n",
605                             priv->bss_type, priv->bss_num, i, head);
606
607                 {
608                         spin_lock_irqsave(lock, flags);
609                         if (list_empty(head)) {
610                                 spin_unlock_irqrestore(lock, flags);
611                                 continue;
612                         }
613                         list_for_each_entry_safe(bssprio_node, tmp_node, head,
614                                                  list) {
615                                 if (bssprio_node->priv == priv) {
616                                         mwifiex_dbg(adapter, INFO,
617                                                     "info: Delete\t"
618                                                     "node %p, next = %p\n",
619                                                     bssprio_node, tmp_node);
620                                         list_del(&bssprio_node->list);
621                                         kfree(bssprio_node);
622                                 }
623                         }
624                         spin_unlock_irqrestore(lock, flags);
625                 }
626         }
627 }
628
629 /*
630  * This function frees the private structure, including cleans
631  * up the TX and RX queues and frees the BSS priority tables.
632  */
633 void mwifiex_free_priv(struct mwifiex_private *priv)
634 {
635         mwifiex_clean_txrx(priv);
636         mwifiex_delete_bss_prio_tbl(priv);
637         mwifiex_free_curr_bcn(priv);
638 }
639
640 /*
641  * This function is used to shutdown the driver.
642  *
643  * The following operations are performed sequentially -
644  *      - Check if already shut down
645  *      - Make sure the main process has stopped
646  *      - Clean up the Tx and Rx queues
647  *      - Delete BSS priority tables
648  *      - Free the adapter
649  *      - Notify completion
650  */
651 int
652 mwifiex_shutdown_drv(struct mwifiex_adapter *adapter)
653 {
654         int ret = -EINPROGRESS;
655         struct mwifiex_private *priv;
656         s32 i;
657         unsigned long flags;
658         struct sk_buff *skb;
659
660         /* mwifiex already shutdown */
661         if (adapter->hw_status == MWIFIEX_HW_STATUS_NOT_READY)
662                 return 0;
663
664         adapter->hw_status = MWIFIEX_HW_STATUS_CLOSING;
665         /* wait for mwifiex_process to complete */
666         if (adapter->mwifiex_processing) {
667                 mwifiex_dbg(adapter, WARN,
668                             "main process is still running\n");
669                 return ret;
670         }
671
672         /* cancel current command */
673         if (adapter->curr_cmd) {
674                 mwifiex_dbg(adapter, WARN,
675                             "curr_cmd is still in processing\n");
676                 del_timer_sync(&adapter->cmd_timer);
677                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
678                 adapter->curr_cmd = NULL;
679         }
680
681         /* shut down mwifiex */
682         mwifiex_dbg(adapter, MSG,
683                     "info: shutdown mwifiex...\n");
684
685         /* Clean up Tx/Rx queues and delete BSS priority table */
686         for (i = 0; i < adapter->priv_num; i++) {
687                 if (adapter->priv[i]) {
688                         priv = adapter->priv[i];
689
690                         mwifiex_clean_auto_tdls(priv);
691                         mwifiex_abort_cac(priv);
692                         mwifiex_clean_txrx(priv);
693                         mwifiex_delete_bss_prio_tbl(priv);
694                 }
695         }
696
697         atomic_set(&adapter->tx_queued, 0);
698         while ((skb = skb_dequeue(&adapter->tx_data_q)))
699                 mwifiex_write_data_complete(adapter, skb, 0, 0);
700
701         spin_lock_irqsave(&adapter->rx_proc_lock, flags);
702
703         while ((skb = skb_dequeue(&adapter->rx_data_q))) {
704                 struct mwifiex_rxinfo *rx_info = MWIFIEX_SKB_RXCB(skb);
705
706                 atomic_dec(&adapter->rx_pending);
707                 priv = adapter->priv[rx_info->bss_num];
708                 if (priv)
709                         priv->stats.rx_dropped++;
710
711                 dev_kfree_skb_any(skb);
712         }
713
714         spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
715
716         spin_lock(&adapter->mwifiex_lock);
717
718         mwifiex_adapter_cleanup(adapter);
719
720         spin_unlock(&adapter->mwifiex_lock);
721
722         /* Notify completion */
723         ret = mwifiex_shutdown_fw_complete(adapter);
724
725         return ret;
726 }
727
728 /*
729  * This function downloads the firmware to the card.
730  *
731  * The actual download is preceded by two sanity checks -
732  *      - Check if firmware is already running
733  *      - Check if the interface is the winner to download the firmware
734  *
735  * ...and followed by another -
736  *      - Check if the firmware is downloaded successfully
737  *
738  * After download is successfully completed, the host interrupts are enabled.
739  */
740 int mwifiex_dnld_fw(struct mwifiex_adapter *adapter,
741                     struct mwifiex_fw_image *pmfw)
742 {
743         int ret;
744         u32 poll_num = 1;
745
746         if (adapter->if_ops.check_fw_status) {
747                 adapter->winner = 0;
748
749                 /* check if firmware is already running */
750                 ret = adapter->if_ops.check_fw_status(adapter, poll_num);
751                 if (!ret) {
752                         mwifiex_dbg(adapter, MSG,
753                                     "WLAN FW already running! Skip FW dnld\n");
754                         return 0;
755                 }
756
757                 poll_num = MAX_FIRMWARE_POLL_TRIES;
758
759                 /* check if we are the winner for downloading FW */
760                 if (!adapter->winner) {
761                         mwifiex_dbg(adapter, MSG,
762                                     "FW already running! Skip FW dnld\n");
763                         goto poll_fw;
764                 }
765         }
766
767         if (pmfw) {
768                 /* Download firmware with helper */
769                 ret = adapter->if_ops.prog_fw(adapter, pmfw);
770                 if (ret) {
771                         mwifiex_dbg(adapter, ERROR,
772                                     "prog_fw failed ret=%#x\n", ret);
773                         return ret;
774                 }
775         }
776
777 poll_fw:
778         /* Check if the firmware is downloaded successfully or not */
779         ret = adapter->if_ops.check_fw_status(adapter, poll_num);
780         if (ret)
781                 mwifiex_dbg(adapter, ERROR,
782                             "FW failed to be active in time\n");
783
784         return ret;
785 }