1/*
2
3  Broadcom B43legacy wireless driver
4
5  DMA ringbuffer and descriptor allocation/management
6
7  Copyright (c) 2005, 2006 Michael Buesch <m@bues.ch>
8
9  Some code in this file is derived from the b44.c driver
10  Copyright (C) 2002 David S. Miller
11  Copyright (C) Pekka Pietikainen
12
13  This program is free software; you can redistribute it and/or modify
14  it under the terms of the GNU General Public License as published by
15  the Free Software Foundation; either version 2 of the License, or
16  (at your option) any later version.
17
18  This program is distributed in the hope that it will be useful,
19  but WITHOUT ANY WARRANTY; without even the implied warranty of
20  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
21  GNU General Public License for more details.
22
23  You should have received a copy of the GNU General Public License
24  along with this program; see the file COPYING.  If not, write to
25  the Free Software Foundation, Inc., 51 Franklin Steet, Fifth Floor,
26  Boston, MA 02110-1301, USA.
27
28*/
29
30#include "b43legacy.h"
31#include "dma.h"
32#include "main.h"
33#include "debugfs.h"
34#include "xmit.h"
35
36#include <linux/dma-mapping.h>
37#include <linux/pci.h>
38#include <linux/delay.h>
39#include <linux/skbuff.h>
40#include <linux/slab.h>
41#include <net/dst.h>
42
43/* 32bit DMA ops. */
44static
45struct b43legacy_dmadesc32 *op32_idx2desc(struct b43legacy_dmaring *ring,
46					  int slot,
47					  struct b43legacy_dmadesc_meta **meta)
48{
49	struct b43legacy_dmadesc32 *desc;
50
51	*meta = &(ring->meta[slot]);
52	desc = ring->descbase;
53	desc = &(desc[slot]);
54
55	return desc;
56}
57
58static void op32_fill_descriptor(struct b43legacy_dmaring *ring,
59				 struct b43legacy_dmadesc32 *desc,
60				 dma_addr_t dmaaddr, u16 bufsize,
61				 int start, int end, int irq)
62{
63	struct b43legacy_dmadesc32 *descbase = ring->descbase;
64	int slot;
65	u32 ctl;
66	u32 addr;
67	u32 addrext;
68
69	slot = (int)(desc - descbase);
70	B43legacy_WARN_ON(!(slot >= 0 && slot < ring->nr_slots));
71
72	addr = (u32)(dmaaddr & ~SSB_DMA_TRANSLATION_MASK);
73	addrext = (u32)(dmaaddr & SSB_DMA_TRANSLATION_MASK)
74		   >> SSB_DMA_TRANSLATION_SHIFT;
75	addr |= ring->dev->dma.translation;
76	ctl = (bufsize - ring->frameoffset)
77	      & B43legacy_DMA32_DCTL_BYTECNT;
78	if (slot == ring->nr_slots - 1)
79		ctl |= B43legacy_DMA32_DCTL_DTABLEEND;
80	if (start)
81		ctl |= B43legacy_DMA32_DCTL_FRAMESTART;
82	if (end)
83		ctl |= B43legacy_DMA32_DCTL_FRAMEEND;
84	if (irq)
85		ctl |= B43legacy_DMA32_DCTL_IRQ;
86	ctl |= (addrext << B43legacy_DMA32_DCTL_ADDREXT_SHIFT)
87	       & B43legacy_DMA32_DCTL_ADDREXT_MASK;
88
89	desc->control = cpu_to_le32(ctl);
90	desc->address = cpu_to_le32(addr);
91}
92
93static void op32_poke_tx(struct b43legacy_dmaring *ring, int slot)
94{
95	b43legacy_dma_write(ring, B43legacy_DMA32_TXINDEX,
96			    (u32)(slot * sizeof(struct b43legacy_dmadesc32)));
97}
98
99static void op32_tx_suspend(struct b43legacy_dmaring *ring)
100{
101	b43legacy_dma_write(ring, B43legacy_DMA32_TXCTL,
102			    b43legacy_dma_read(ring, B43legacy_DMA32_TXCTL)
103			    | B43legacy_DMA32_TXSUSPEND);
104}
105
106static void op32_tx_resume(struct b43legacy_dmaring *ring)
107{
108	b43legacy_dma_write(ring, B43legacy_DMA32_TXCTL,
109			    b43legacy_dma_read(ring, B43legacy_DMA32_TXCTL)
110			    & ~B43legacy_DMA32_TXSUSPEND);
111}
112
113static int op32_get_current_rxslot(struct b43legacy_dmaring *ring)
114{
115	u32 val;
116
117	val = b43legacy_dma_read(ring, B43legacy_DMA32_RXSTATUS);
118	val &= B43legacy_DMA32_RXDPTR;
119
120	return (val / sizeof(struct b43legacy_dmadesc32));
121}
122
123static void op32_set_current_rxslot(struct b43legacy_dmaring *ring,
124				    int slot)
125{
126	b43legacy_dma_write(ring, B43legacy_DMA32_RXINDEX,
127			    (u32)(slot * sizeof(struct b43legacy_dmadesc32)));
128}
129
130static inline int free_slots(struct b43legacy_dmaring *ring)
131{
132	return (ring->nr_slots - ring->used_slots);
133}
134
135static inline int next_slot(struct b43legacy_dmaring *ring, int slot)
136{
137	B43legacy_WARN_ON(!(slot >= -1 && slot <= ring->nr_slots - 1));
138	if (slot == ring->nr_slots - 1)
139		return 0;
140	return slot + 1;
141}
142
143static inline int prev_slot(struct b43legacy_dmaring *ring, int slot)
144{
145	B43legacy_WARN_ON(!(slot >= 0 && slot <= ring->nr_slots - 1));
146	if (slot == 0)
147		return ring->nr_slots - 1;
148	return slot - 1;
149}
150
151#ifdef CONFIG_B43LEGACY_DEBUG
152static void update_max_used_slots(struct b43legacy_dmaring *ring,
153				  int current_used_slots)
154{
155	if (current_used_slots <= ring->max_used_slots)
156		return;
157	ring->max_used_slots = current_used_slots;
158	if (b43legacy_debug(ring->dev, B43legacy_DBG_DMAVERBOSE))
159		b43legacydbg(ring->dev->wl,
160		       "max_used_slots increased to %d on %s ring %d\n",
161		       ring->max_used_slots,
162		       ring->tx ? "TX" : "RX",
163		       ring->index);
164}
165#else
166static inline
167void update_max_used_slots(struct b43legacy_dmaring *ring,
168			   int current_used_slots)
169{ }
170#endif /* DEBUG */
171
172/* Request a slot for usage. */
173static inline
174int request_slot(struct b43legacy_dmaring *ring)
175{
176	int slot;
177
178	B43legacy_WARN_ON(!ring->tx);
179	B43legacy_WARN_ON(ring->stopped);
180	B43legacy_WARN_ON(free_slots(ring) == 0);
181
182	slot = next_slot(ring, ring->current_slot);
183	ring->current_slot = slot;
184	ring->used_slots++;
185
186	update_max_used_slots(ring, ring->used_slots);
187
188	return slot;
189}
190
191/* Mac80211-queue to b43legacy-ring mapping */
192static struct b43legacy_dmaring *priority_to_txring(
193						struct b43legacy_wldev *dev,
194						int queue_priority)
195{
196	struct b43legacy_dmaring *ring;
197
198/*FIXME: For now we always run on TX-ring-1 */
199return dev->dma.tx_ring1;
200
201	/* 0 = highest priority */
202	switch (queue_priority) {
203	default:
204		B43legacy_WARN_ON(1);
205		/* fallthrough */
206	case 0:
207		ring = dev->dma.tx_ring3;
208		break;
209	case 1:
210		ring = dev->dma.tx_ring2;
211		break;
212	case 2:
213		ring = dev->dma.tx_ring1;
214		break;
215	case 3:
216		ring = dev->dma.tx_ring0;
217		break;
218	case 4:
219		ring = dev->dma.tx_ring4;
220		break;
221	case 5:
222		ring = dev->dma.tx_ring5;
223		break;
224	}
225
226	return ring;
227}
228
229/* Bcm4301-ring to mac80211-queue mapping */
230static inline int txring_to_priority(struct b43legacy_dmaring *ring)
231{
232	static const u8 idx_to_prio[] =
233		{ 3, 2, 1, 0, 4, 5, };
234
235/*FIXME: have only one queue, for now */
236return 0;
237
238	return idx_to_prio[ring->index];
239}
240
241
242static u16 b43legacy_dmacontroller_base(enum b43legacy_dmatype type,
243					int controller_idx)
244{
245	static const u16 map32[] = {
246		B43legacy_MMIO_DMA32_BASE0,
247		B43legacy_MMIO_DMA32_BASE1,
248		B43legacy_MMIO_DMA32_BASE2,
249		B43legacy_MMIO_DMA32_BASE3,
250		B43legacy_MMIO_DMA32_BASE4,
251		B43legacy_MMIO_DMA32_BASE5,
252	};
253
254	B43legacy_WARN_ON(!(controller_idx >= 0 &&
255			  controller_idx < ARRAY_SIZE(map32)));
256	return map32[controller_idx];
257}
258
259static inline
260dma_addr_t map_descbuffer(struct b43legacy_dmaring *ring,
261			  unsigned char *buf,
262			  size_t len,
263			  int tx)
264{
265	dma_addr_t dmaaddr;
266
267	if (tx)
268		dmaaddr = dma_map_single(ring->dev->dev->dma_dev,
269					     buf, len,
270					     DMA_TO_DEVICE);
271	else
272		dmaaddr = dma_map_single(ring->dev->dev->dma_dev,
273					     buf, len,
274					     DMA_FROM_DEVICE);
275
276	return dmaaddr;
277}
278
279static inline
280void unmap_descbuffer(struct b43legacy_dmaring *ring,
281		      dma_addr_t addr,
282		      size_t len,
283		      int tx)
284{
285	if (tx)
286		dma_unmap_single(ring->dev->dev->dma_dev,
287				     addr, len,
288				     DMA_TO_DEVICE);
289	else
290		dma_unmap_single(ring->dev->dev->dma_dev,
291				     addr, len,
292				     DMA_FROM_DEVICE);
293}
294
295static inline
296void sync_descbuffer_for_cpu(struct b43legacy_dmaring *ring,
297			     dma_addr_t addr,
298			     size_t len)
299{
300	B43legacy_WARN_ON(ring->tx);
301
302	dma_sync_single_for_cpu(ring->dev->dev->dma_dev,
303				addr, len, DMA_FROM_DEVICE);
304}
305
306static inline
307void sync_descbuffer_for_device(struct b43legacy_dmaring *ring,
308				dma_addr_t addr,
309				size_t len)
310{
311	B43legacy_WARN_ON(ring->tx);
312
313	dma_sync_single_for_device(ring->dev->dev->dma_dev,
314				   addr, len, DMA_FROM_DEVICE);
315}
316
317static inline
318void free_descriptor_buffer(struct b43legacy_dmaring *ring,
319			    struct b43legacy_dmadesc_meta *meta,
320			    int irq_context)
321{
322	if (meta->skb) {
323		if (irq_context)
324			dev_kfree_skb_irq(meta->skb);
325		else
326			dev_kfree_skb(meta->skb);
327		meta->skb = NULL;
328	}
329}
330
331static int alloc_ringmemory(struct b43legacy_dmaring *ring)
332{
333	/* GFP flags must match the flags in free_ringmemory()! */
334	ring->descbase = dma_zalloc_coherent(ring->dev->dev->dma_dev,
335					     B43legacy_DMA_RINGMEMSIZE,
336					     &(ring->dmabase), GFP_KERNEL);
337	if (!ring->descbase)
338		return -ENOMEM;
339
340	return 0;
341}
342
343static void free_ringmemory(struct b43legacy_dmaring *ring)
344{
345	dma_free_coherent(ring->dev->dev->dma_dev, B43legacy_DMA_RINGMEMSIZE,
346			  ring->descbase, ring->dmabase);
347}
348
349/* Reset the RX DMA channel */
350static int b43legacy_dmacontroller_rx_reset(struct b43legacy_wldev *dev,
351					    u16 mmio_base,
352					    enum b43legacy_dmatype type)
353{
354	int i;
355	u32 value;
356	u16 offset;
357
358	might_sleep();
359
360	offset = B43legacy_DMA32_RXCTL;
361	b43legacy_write32(dev, mmio_base + offset, 0);
362	for (i = 0; i < 10; i++) {
363		offset = B43legacy_DMA32_RXSTATUS;
364		value = b43legacy_read32(dev, mmio_base + offset);
365		value &= B43legacy_DMA32_RXSTATE;
366		if (value == B43legacy_DMA32_RXSTAT_DISABLED) {
367			i = -1;
368			break;
369		}
370		msleep(1);
371	}
372	if (i != -1) {
373		b43legacyerr(dev->wl, "DMA RX reset timed out\n");
374		return -ENODEV;
375	}
376
377	return 0;
378}
379
380/* Reset the RX DMA channel */
381static int b43legacy_dmacontroller_tx_reset(struct b43legacy_wldev *dev,
382					    u16 mmio_base,
383					    enum b43legacy_dmatype type)
384{
385	int i;
386	u32 value;
387	u16 offset;
388
389	might_sleep();
390
391	for (i = 0; i < 10; i++) {
392		offset = B43legacy_DMA32_TXSTATUS;
393		value = b43legacy_read32(dev, mmio_base + offset);
394		value &= B43legacy_DMA32_TXSTATE;
395		if (value == B43legacy_DMA32_TXSTAT_DISABLED ||
396		    value == B43legacy_DMA32_TXSTAT_IDLEWAIT ||
397		    value == B43legacy_DMA32_TXSTAT_STOPPED)
398			break;
399		msleep(1);
400	}
401	offset = B43legacy_DMA32_TXCTL;
402	b43legacy_write32(dev, mmio_base + offset, 0);
403	for (i = 0; i < 10; i++) {
404		offset = B43legacy_DMA32_TXSTATUS;
405		value = b43legacy_read32(dev, mmio_base + offset);
406		value &= B43legacy_DMA32_TXSTATE;
407		if (value == B43legacy_DMA32_TXSTAT_DISABLED) {
408			i = -1;
409			break;
410		}
411		msleep(1);
412	}
413	if (i != -1) {
414		b43legacyerr(dev->wl, "DMA TX reset timed out\n");
415		return -ENODEV;
416	}
417	/* ensure the reset is completed. */
418	msleep(1);
419
420	return 0;
421}
422
423/* Check if a DMA mapping address is invalid. */
424static bool b43legacy_dma_mapping_error(struct b43legacy_dmaring *ring,
425					 dma_addr_t addr,
426					 size_t buffersize,
427					 bool dma_to_device)
428{
429	if (unlikely(dma_mapping_error(ring->dev->dev->dma_dev, addr)))
430		return true;
431
432	switch (ring->type) {
433	case B43legacy_DMA_30BIT:
434		if ((u64)addr + buffersize > (1ULL << 30))
435			goto address_error;
436		break;
437	case B43legacy_DMA_32BIT:
438		if ((u64)addr + buffersize > (1ULL << 32))
439			goto address_error;
440		break;
441	}
442
443	/* The address is OK. */
444	return false;
445
446address_error:
447	/* We can't support this address. Unmap it again. */
448	unmap_descbuffer(ring, addr, buffersize, dma_to_device);
449
450	return true;
451}
452
453static int setup_rx_descbuffer(struct b43legacy_dmaring *ring,
454			       struct b43legacy_dmadesc32 *desc,
455			       struct b43legacy_dmadesc_meta *meta,
456			       gfp_t gfp_flags)
457{
458	struct b43legacy_rxhdr_fw3 *rxhdr;
459	struct b43legacy_hwtxstatus *txstat;
460	dma_addr_t dmaaddr;
461	struct sk_buff *skb;
462
463	B43legacy_WARN_ON(ring->tx);
464
465	skb = __dev_alloc_skb(ring->rx_buffersize, gfp_flags);
466	if (unlikely(!skb))
467		return -ENOMEM;
468	dmaaddr = map_descbuffer(ring, skb->data,
469				 ring->rx_buffersize, 0);
470	if (b43legacy_dma_mapping_error(ring, dmaaddr, ring->rx_buffersize, 0)) {
471		/* ugh. try to realloc in zone_dma */
472		gfp_flags |= GFP_DMA;
473
474		dev_kfree_skb_any(skb);
475
476		skb = __dev_alloc_skb(ring->rx_buffersize, gfp_flags);
477		if (unlikely(!skb))
478			return -ENOMEM;
479		dmaaddr = map_descbuffer(ring, skb->data,
480					 ring->rx_buffersize, 0);
481	}
482
483	if (b43legacy_dma_mapping_error(ring, dmaaddr, ring->rx_buffersize, 0)) {
484		dev_kfree_skb_any(skb);
485		return -EIO;
486	}
487
488	meta->skb = skb;
489	meta->dmaaddr = dmaaddr;
490	op32_fill_descriptor(ring, desc, dmaaddr, ring->rx_buffersize, 0, 0, 0);
491
492	rxhdr = (struct b43legacy_rxhdr_fw3 *)(skb->data);
493	rxhdr->frame_len = 0;
494	txstat = (struct b43legacy_hwtxstatus *)(skb->data);
495	txstat->cookie = 0;
496
497	return 0;
498}
499
500/* Allocate the initial descbuffers.
501 * This is used for an RX ring only.
502 */
503static int alloc_initial_descbuffers(struct b43legacy_dmaring *ring)
504{
505	int i;
506	int err = -ENOMEM;
507	struct b43legacy_dmadesc32 *desc;
508	struct b43legacy_dmadesc_meta *meta;
509
510	for (i = 0; i < ring->nr_slots; i++) {
511		desc = op32_idx2desc(ring, i, &meta);
512
513		err = setup_rx_descbuffer(ring, desc, meta, GFP_KERNEL);
514		if (err) {
515			b43legacyerr(ring->dev->wl,
516			       "Failed to allocate initial descbuffers\n");
517			goto err_unwind;
518		}
519	}
520	mb(); /* all descbuffer setup before next line */
521	ring->used_slots = ring->nr_slots;
522	err = 0;
523out:
524	return err;
525
526err_unwind:
527	for (i--; i >= 0; i--) {
528		desc = op32_idx2desc(ring, i, &meta);
529
530		unmap_descbuffer(ring, meta->dmaaddr, ring->rx_buffersize, 0);
531		dev_kfree_skb(meta->skb);
532	}
533	goto out;
534}
535
536/* Do initial setup of the DMA controller.
537 * Reset the controller, write the ring busaddress
538 * and switch the "enable" bit on.
539 */
540static int dmacontroller_setup(struct b43legacy_dmaring *ring)
541{
542	int err = 0;
543	u32 value;
544	u32 addrext;
545	u32 trans = ring->dev->dma.translation;
546	u32 ringbase = (u32)(ring->dmabase);
547
548	if (ring->tx) {
549		addrext = (ringbase & SSB_DMA_TRANSLATION_MASK)
550			  >> SSB_DMA_TRANSLATION_SHIFT;
551		value = B43legacy_DMA32_TXENABLE;
552		value |= (addrext << B43legacy_DMA32_TXADDREXT_SHIFT)
553			& B43legacy_DMA32_TXADDREXT_MASK;
554		b43legacy_dma_write(ring, B43legacy_DMA32_TXCTL, value);
555		b43legacy_dma_write(ring, B43legacy_DMA32_TXRING,
556				    (ringbase & ~SSB_DMA_TRANSLATION_MASK)
557				    | trans);
558	} else {
559		err = alloc_initial_descbuffers(ring);
560		if (err)
561			goto out;
562
563		addrext = (ringbase & SSB_DMA_TRANSLATION_MASK)
564			  >> SSB_DMA_TRANSLATION_SHIFT;
565		value = (ring->frameoffset <<
566			 B43legacy_DMA32_RXFROFF_SHIFT);
567		value |= B43legacy_DMA32_RXENABLE;
568		value |= (addrext << B43legacy_DMA32_RXADDREXT_SHIFT)
569			 & B43legacy_DMA32_RXADDREXT_MASK;
570		b43legacy_dma_write(ring, B43legacy_DMA32_RXCTL, value);
571		b43legacy_dma_write(ring, B43legacy_DMA32_RXRING,
572				    (ringbase & ~SSB_DMA_TRANSLATION_MASK)
573				    | trans);
574		b43legacy_dma_write(ring, B43legacy_DMA32_RXINDEX, 200);
575	}
576
577out:
578	return err;
579}
580
581/* Shutdown the DMA controller. */
582static void dmacontroller_cleanup(struct b43legacy_dmaring *ring)
583{
584	if (ring->tx) {
585		b43legacy_dmacontroller_tx_reset(ring->dev, ring->mmio_base,
586						 ring->type);
587		b43legacy_dma_write(ring, B43legacy_DMA32_TXRING, 0);
588	} else {
589		b43legacy_dmacontroller_rx_reset(ring->dev, ring->mmio_base,
590						 ring->type);
591		b43legacy_dma_write(ring, B43legacy_DMA32_RXRING, 0);
592	}
593}
594
595static void free_all_descbuffers(struct b43legacy_dmaring *ring)
596{
597	struct b43legacy_dmadesc_meta *meta;
598	int i;
599
600	if (!ring->used_slots)
601		return;
602	for (i = 0; i < ring->nr_slots; i++) {
603		op32_idx2desc(ring, i, &meta);
604
605		if (!meta->skb) {
606			B43legacy_WARN_ON(!ring->tx);
607			continue;
608		}
609		if (ring->tx)
610			unmap_descbuffer(ring, meta->dmaaddr,
611					 meta->skb->len, 1);
612		else
613			unmap_descbuffer(ring, meta->dmaaddr,
614					 ring->rx_buffersize, 0);
615		free_descriptor_buffer(ring, meta, 0);
616	}
617}
618
619static u64 supported_dma_mask(struct b43legacy_wldev *dev)
620{
621	u32 tmp;
622	u16 mmio_base;
623
624	mmio_base = b43legacy_dmacontroller_base(0, 0);
625	b43legacy_write32(dev,
626			mmio_base + B43legacy_DMA32_TXCTL,
627			B43legacy_DMA32_TXADDREXT_MASK);
628	tmp = b43legacy_read32(dev, mmio_base +
629			       B43legacy_DMA32_TXCTL);
630	if (tmp & B43legacy_DMA32_TXADDREXT_MASK)
631		return DMA_BIT_MASK(32);
632
633	return DMA_BIT_MASK(30);
634}
635
636static enum b43legacy_dmatype dma_mask_to_engine_type(u64 dmamask)
637{
638	if (dmamask == DMA_BIT_MASK(30))
639		return B43legacy_DMA_30BIT;
640	if (dmamask == DMA_BIT_MASK(32))
641		return B43legacy_DMA_32BIT;
642	B43legacy_WARN_ON(1);
643	return B43legacy_DMA_30BIT;
644}
645
646/* Main initialization function. */
647static
648struct b43legacy_dmaring *b43legacy_setup_dmaring(struct b43legacy_wldev *dev,
649						  int controller_index,
650						  int for_tx,
651						  enum b43legacy_dmatype type)
652{
653	struct b43legacy_dmaring *ring;
654	int err;
655	int nr_slots;
656	dma_addr_t dma_test;
657
658	ring = kzalloc(sizeof(*ring), GFP_KERNEL);
659	if (!ring)
660		goto out;
661	ring->type = type;
662	ring->dev = dev;
663
664	nr_slots = B43legacy_RXRING_SLOTS;
665	if (for_tx)
666		nr_slots = B43legacy_TXRING_SLOTS;
667
668	ring->meta = kcalloc(nr_slots, sizeof(struct b43legacy_dmadesc_meta),
669			     GFP_KERNEL);
670	if (!ring->meta)
671		goto err_kfree_ring;
672	if (for_tx) {
673		ring->txhdr_cache = kcalloc(nr_slots,
674					sizeof(struct b43legacy_txhdr_fw3),
675					GFP_KERNEL);
676		if (!ring->txhdr_cache)
677			goto err_kfree_meta;
678
679		/* test for ability to dma to txhdr_cache */
680		dma_test = dma_map_single(dev->dev->dma_dev, ring->txhdr_cache,
681					      sizeof(struct b43legacy_txhdr_fw3),
682					      DMA_TO_DEVICE);
683
684		if (b43legacy_dma_mapping_error(ring, dma_test,
685					sizeof(struct b43legacy_txhdr_fw3), 1)) {
686			/* ugh realloc */
687			kfree(ring->txhdr_cache);
688			ring->txhdr_cache = kcalloc(nr_slots,
689					sizeof(struct b43legacy_txhdr_fw3),
690					GFP_KERNEL | GFP_DMA);
691			if (!ring->txhdr_cache)
692				goto err_kfree_meta;
693
694			dma_test = dma_map_single(dev->dev->dma_dev,
695					ring->txhdr_cache,
696					sizeof(struct b43legacy_txhdr_fw3),
697					DMA_TO_DEVICE);
698
699			if (b43legacy_dma_mapping_error(ring, dma_test,
700					sizeof(struct b43legacy_txhdr_fw3), 1))
701				goto err_kfree_txhdr_cache;
702		}
703
704		dma_unmap_single(dev->dev->dma_dev, dma_test,
705				 sizeof(struct b43legacy_txhdr_fw3),
706				 DMA_TO_DEVICE);
707	}
708
709	ring->nr_slots = nr_slots;
710	ring->mmio_base = b43legacy_dmacontroller_base(type, controller_index);
711	ring->index = controller_index;
712	if (for_tx) {
713		ring->tx = true;
714		ring->current_slot = -1;
715	} else {
716		if (ring->index == 0) {
717			ring->rx_buffersize = B43legacy_DMA0_RX_BUFFERSIZE;
718			ring->frameoffset = B43legacy_DMA0_RX_FRAMEOFFSET;
719		} else if (ring->index == 3) {
720			ring->rx_buffersize = B43legacy_DMA3_RX_BUFFERSIZE;
721			ring->frameoffset = B43legacy_DMA3_RX_FRAMEOFFSET;
722		} else
723			B43legacy_WARN_ON(1);
724	}
725#ifdef CONFIG_B43LEGACY_DEBUG
726	ring->last_injected_overflow = jiffies;
727#endif
728
729	err = alloc_ringmemory(ring);
730	if (err)
731		goto err_kfree_txhdr_cache;
732	err = dmacontroller_setup(ring);
733	if (err)
734		goto err_free_ringmemory;
735
736out:
737	return ring;
738
739err_free_ringmemory:
740	free_ringmemory(ring);
741err_kfree_txhdr_cache:
742	kfree(ring->txhdr_cache);
743err_kfree_meta:
744	kfree(ring->meta);
745err_kfree_ring:
746	kfree(ring);
747	ring = NULL;
748	goto out;
749}
750
751/* Main cleanup function. */
752static void b43legacy_destroy_dmaring(struct b43legacy_dmaring *ring)
753{
754	if (!ring)
755		return;
756
757	b43legacydbg(ring->dev->wl, "DMA-%u 0x%04X (%s) max used slots:"
758		     " %d/%d\n", (unsigned int)(ring->type), ring->mmio_base,
759		     (ring->tx) ? "TX" : "RX", ring->max_used_slots,
760		     ring->nr_slots);
761	/* Device IRQs are disabled prior entering this function,
762	 * so no need to take care of concurrency with rx handler stuff.
763	 */
764	dmacontroller_cleanup(ring);
765	free_all_descbuffers(ring);
766	free_ringmemory(ring);
767
768	kfree(ring->txhdr_cache);
769	kfree(ring->meta);
770	kfree(ring);
771}
772
773void b43legacy_dma_free(struct b43legacy_wldev *dev)
774{
775	struct b43legacy_dma *dma;
776
777	if (b43legacy_using_pio(dev))
778		return;
779	dma = &dev->dma;
780
781	b43legacy_destroy_dmaring(dma->rx_ring3);
782	dma->rx_ring3 = NULL;
783	b43legacy_destroy_dmaring(dma->rx_ring0);
784	dma->rx_ring0 = NULL;
785
786	b43legacy_destroy_dmaring(dma->tx_ring5);
787	dma->tx_ring5 = NULL;
788	b43legacy_destroy_dmaring(dma->tx_ring4);
789	dma->tx_ring4 = NULL;
790	b43legacy_destroy_dmaring(dma->tx_ring3);
791	dma->tx_ring3 = NULL;
792	b43legacy_destroy_dmaring(dma->tx_ring2);
793	dma->tx_ring2 = NULL;
794	b43legacy_destroy_dmaring(dma->tx_ring1);
795	dma->tx_ring1 = NULL;
796	b43legacy_destroy_dmaring(dma->tx_ring0);
797	dma->tx_ring0 = NULL;
798}
799
800static int b43legacy_dma_set_mask(struct b43legacy_wldev *dev, u64 mask)
801{
802	u64 orig_mask = mask;
803	bool fallback = false;
804	int err;
805
806	/* Try to set the DMA mask. If it fails, try falling back to a
807	 * lower mask, as we can always also support a lower one. */
808	while (1) {
809		err = dma_set_mask_and_coherent(dev->dev->dma_dev, mask);
810		if (!err)
811			break;
812		if (mask == DMA_BIT_MASK(64)) {
813			mask = DMA_BIT_MASK(32);
814			fallback = true;
815			continue;
816		}
817		if (mask == DMA_BIT_MASK(32)) {
818			mask = DMA_BIT_MASK(30);
819			fallback = true;
820			continue;
821		}
822		b43legacyerr(dev->wl, "The machine/kernel does not support "
823		       "the required %u-bit DMA mask\n",
824		       (unsigned int)dma_mask_to_engine_type(orig_mask));
825		return -EOPNOTSUPP;
826	}
827	if (fallback) {
828		b43legacyinfo(dev->wl, "DMA mask fallback from %u-bit to %u-"
829			"bit\n",
830			(unsigned int)dma_mask_to_engine_type(orig_mask),
831			(unsigned int)dma_mask_to_engine_type(mask));
832	}
833
834	return 0;
835}
836
837int b43legacy_dma_init(struct b43legacy_wldev *dev)
838{
839	struct b43legacy_dma *dma = &dev->dma;
840	struct b43legacy_dmaring *ring;
841	int err;
842	u64 dmamask;
843	enum b43legacy_dmatype type;
844
845	dmamask = supported_dma_mask(dev);
846	type = dma_mask_to_engine_type(dmamask);
847	err = b43legacy_dma_set_mask(dev, dmamask);
848	if (err) {
849#ifdef CONFIG_B43LEGACY_PIO
850		b43legacywarn(dev->wl, "DMA for this device not supported. "
851			"Falling back to PIO\n");
852		dev->__using_pio = true;
853		return -EAGAIN;
854#else
855		b43legacyerr(dev->wl, "DMA for this device not supported and "
856		       "no PIO support compiled in\n");
857		return -EOPNOTSUPP;
858#endif
859	}
860	dma->translation = ssb_dma_translation(dev->dev);
861
862	err = -ENOMEM;
863	/* setup TX DMA channels. */
864	ring = b43legacy_setup_dmaring(dev, 0, 1, type);
865	if (!ring)
866		goto out;
867	dma->tx_ring0 = ring;
868
869	ring = b43legacy_setup_dmaring(dev, 1, 1, type);
870	if (!ring)
871		goto err_destroy_tx0;
872	dma->tx_ring1 = ring;
873
874	ring = b43legacy_setup_dmaring(dev, 2, 1, type);
875	if (!ring)
876		goto err_destroy_tx1;
877	dma->tx_ring2 = ring;
878
879	ring = b43legacy_setup_dmaring(dev, 3, 1, type);
880	if (!ring)
881		goto err_destroy_tx2;
882	dma->tx_ring3 = ring;
883
884	ring = b43legacy_setup_dmaring(dev, 4, 1, type);
885	if (!ring)
886		goto err_destroy_tx3;
887	dma->tx_ring4 = ring;
888
889	ring = b43legacy_setup_dmaring(dev, 5, 1, type);
890	if (!ring)
891		goto err_destroy_tx4;
892	dma->tx_ring5 = ring;
893
894	/* setup RX DMA channels. */
895	ring = b43legacy_setup_dmaring(dev, 0, 0, type);
896	if (!ring)
897		goto err_destroy_tx5;
898	dma->rx_ring0 = ring;
899
900	if (dev->dev->id.revision < 5) {
901		ring = b43legacy_setup_dmaring(dev, 3, 0, type);
902		if (!ring)
903			goto err_destroy_rx0;
904		dma->rx_ring3 = ring;
905	}
906
907	b43legacydbg(dev->wl, "%u-bit DMA initialized\n", (unsigned int)type);
908	err = 0;
909out:
910	return err;
911
912err_destroy_rx0:
913	b43legacy_destroy_dmaring(dma->rx_ring0);
914	dma->rx_ring0 = NULL;
915err_destroy_tx5:
916	b43legacy_destroy_dmaring(dma->tx_ring5);
917	dma->tx_ring5 = NULL;
918err_destroy_tx4:
919	b43legacy_destroy_dmaring(dma->tx_ring4);
920	dma->tx_ring4 = NULL;
921err_destroy_tx3:
922	b43legacy_destroy_dmaring(dma->tx_ring3);
923	dma->tx_ring3 = NULL;
924err_destroy_tx2:
925	b43legacy_destroy_dmaring(dma->tx_ring2);
926	dma->tx_ring2 = NULL;
927err_destroy_tx1:
928	b43legacy_destroy_dmaring(dma->tx_ring1);
929	dma->tx_ring1 = NULL;
930err_destroy_tx0:
931	b43legacy_destroy_dmaring(dma->tx_ring0);
932	dma->tx_ring0 = NULL;
933	goto out;
934}
935
936/* Generate a cookie for the TX header. */
937static u16 generate_cookie(struct b43legacy_dmaring *ring,
938			   int slot)
939{
940	u16 cookie = 0x1000;
941
942	/* Use the upper 4 bits of the cookie as
943	 * DMA controller ID and store the slot number
944	 * in the lower 12 bits.
945	 * Note that the cookie must never be 0, as this
946	 * is a special value used in RX path.
947	 */
948	switch (ring->index) {
949	case 0:
950		cookie = 0xA000;
951		break;
952	case 1:
953		cookie = 0xB000;
954		break;
955	case 2:
956		cookie = 0xC000;
957		break;
958	case 3:
959		cookie = 0xD000;
960		break;
961	case 4:
962		cookie = 0xE000;
963		break;
964	case 5:
965		cookie = 0xF000;
966		break;
967	}
968	B43legacy_WARN_ON(!(((u16)slot & 0xF000) == 0x0000));
969	cookie |= (u16)slot;
970
971	return cookie;
972}
973
974/* Inspect a cookie and find out to which controller/slot it belongs. */
975static
976struct b43legacy_dmaring *parse_cookie(struct b43legacy_wldev *dev,
977				      u16 cookie, int *slot)
978{
979	struct b43legacy_dma *dma = &dev->dma;
980	struct b43legacy_dmaring *ring = NULL;
981
982	switch (cookie & 0xF000) {
983	case 0xA000:
984		ring = dma->tx_ring0;
985		break;
986	case 0xB000:
987		ring = dma->tx_ring1;
988		break;
989	case 0xC000:
990		ring = dma->tx_ring2;
991		break;
992	case 0xD000:
993		ring = dma->tx_ring3;
994		break;
995	case 0xE000:
996		ring = dma->tx_ring4;
997		break;
998	case 0xF000:
999		ring = dma->tx_ring5;
1000		break;
1001	default:
1002		B43legacy_WARN_ON(1);
1003	}
1004	*slot = (cookie & 0x0FFF);
1005	B43legacy_WARN_ON(!(ring && *slot >= 0 && *slot < ring->nr_slots));
1006
1007	return ring;
1008}
1009
1010static int dma_tx_fragment(struct b43legacy_dmaring *ring,
1011			    struct sk_buff **in_skb)
1012{
1013	struct sk_buff *skb = *in_skb;
1014	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
1015	u8 *header;
1016	int slot, old_top_slot, old_used_slots;
1017	int err;
1018	struct b43legacy_dmadesc32 *desc;
1019	struct b43legacy_dmadesc_meta *meta;
1020	struct b43legacy_dmadesc_meta *meta_hdr;
1021	struct sk_buff *bounce_skb;
1022
1023#define SLOTS_PER_PACKET  2
1024	B43legacy_WARN_ON(skb_shinfo(skb)->nr_frags != 0);
1025
1026	old_top_slot = ring->current_slot;
1027	old_used_slots = ring->used_slots;
1028
1029	/* Get a slot for the header. */
1030	slot = request_slot(ring);
1031	desc = op32_idx2desc(ring, slot, &meta_hdr);
1032	memset(meta_hdr, 0, sizeof(*meta_hdr));
1033
1034	header = &(ring->txhdr_cache[slot * sizeof(
1035			       struct b43legacy_txhdr_fw3)]);
1036	err = b43legacy_generate_txhdr(ring->dev, header,
1037				 skb->data, skb->len, info,
1038				 generate_cookie(ring, slot));
1039	if (unlikely(err)) {
1040		ring->current_slot = old_top_slot;
1041		ring->used_slots = old_used_slots;
1042		return err;
1043	}
1044
1045	meta_hdr->dmaaddr = map_descbuffer(ring, (unsigned char *)header,
1046					   sizeof(struct b43legacy_txhdr_fw3), 1);
1047	if (b43legacy_dma_mapping_error(ring, meta_hdr->dmaaddr,
1048					sizeof(struct b43legacy_txhdr_fw3), 1)) {
1049		ring->current_slot = old_top_slot;
1050		ring->used_slots = old_used_slots;
1051		return -EIO;
1052	}
1053	op32_fill_descriptor(ring, desc, meta_hdr->dmaaddr,
1054			     sizeof(struct b43legacy_txhdr_fw3), 1, 0, 0);
1055
1056	/* Get a slot for the payload. */
1057	slot = request_slot(ring);
1058	desc = op32_idx2desc(ring, slot, &meta);
1059	memset(meta, 0, sizeof(*meta));
1060
1061	meta->skb = skb;
1062	meta->is_last_fragment = true;
1063
1064	meta->dmaaddr = map_descbuffer(ring, skb->data, skb->len, 1);
1065	/* create a bounce buffer in zone_dma on mapping failure. */
1066	if (b43legacy_dma_mapping_error(ring, meta->dmaaddr, skb->len, 1)) {
1067		bounce_skb = alloc_skb(skb->len, GFP_ATOMIC | GFP_DMA);
1068		if (!bounce_skb) {
1069			ring->current_slot = old_top_slot;
1070			ring->used_slots = old_used_slots;
1071			err = -ENOMEM;
1072			goto out_unmap_hdr;
1073		}
1074
1075		memcpy(skb_put(bounce_skb, skb->len), skb->data, skb->len);
1076		memcpy(bounce_skb->cb, skb->cb, sizeof(skb->cb));
1077		bounce_skb->dev = skb->dev;
1078		skb_set_queue_mapping(bounce_skb, skb_get_queue_mapping(skb));
1079		info = IEEE80211_SKB_CB(bounce_skb);
1080
1081		dev_kfree_skb_any(skb);
1082		skb = bounce_skb;
1083		*in_skb = bounce_skb;
1084		meta->skb = skb;
1085		meta->dmaaddr = map_descbuffer(ring, skb->data, skb->len, 1);
1086		if (b43legacy_dma_mapping_error(ring, meta->dmaaddr, skb->len, 1)) {
1087			ring->current_slot = old_top_slot;
1088			ring->used_slots = old_used_slots;
1089			err = -EIO;
1090			goto out_free_bounce;
1091		}
1092	}
1093
1094	op32_fill_descriptor(ring, desc, meta->dmaaddr,
1095			     skb->len, 0, 1, 1);
1096
1097	wmb();	/* previous stuff MUST be done */
1098	/* Now transfer the whole frame. */
1099	op32_poke_tx(ring, next_slot(ring, slot));
1100	return 0;
1101
1102out_free_bounce:
1103	dev_kfree_skb_any(skb);
1104out_unmap_hdr:
1105	unmap_descbuffer(ring, meta_hdr->dmaaddr,
1106			 sizeof(struct b43legacy_txhdr_fw3), 1);
1107	return err;
1108}
1109
1110static inline
1111int should_inject_overflow(struct b43legacy_dmaring *ring)
1112{
1113#ifdef CONFIG_B43LEGACY_DEBUG
1114	if (unlikely(b43legacy_debug(ring->dev,
1115				     B43legacy_DBG_DMAOVERFLOW))) {
1116		/* Check if we should inject another ringbuffer overflow
1117		 * to test handling of this situation in the stack. */
1118		unsigned long next_overflow;
1119
1120		next_overflow = ring->last_injected_overflow + HZ;
1121		if (time_after(jiffies, next_overflow)) {
1122			ring->last_injected_overflow = jiffies;
1123			b43legacydbg(ring->dev->wl,
1124			       "Injecting TX ring overflow on "
1125			       "DMA controller %d\n", ring->index);
1126			return 1;
1127		}
1128	}
1129#endif /* CONFIG_B43LEGACY_DEBUG */
1130	return 0;
1131}
1132
1133int b43legacy_dma_tx(struct b43legacy_wldev *dev,
1134		     struct sk_buff *skb)
1135{
1136	struct b43legacy_dmaring *ring;
1137	int err = 0;
1138
1139	ring = priority_to_txring(dev, skb_get_queue_mapping(skb));
1140	B43legacy_WARN_ON(!ring->tx);
1141
1142	if (unlikely(ring->stopped)) {
1143		/* We get here only because of a bug in mac80211.
1144		 * Because of a race, one packet may be queued after
1145		 * the queue is stopped, thus we got called when we shouldn't.
1146		 * For now, just refuse the transmit. */
1147		if (b43legacy_debug(dev, B43legacy_DBG_DMAVERBOSE))
1148			b43legacyerr(dev->wl, "Packet after queue stopped\n");
1149		return -ENOSPC;
1150	}
1151
1152	if (unlikely(WARN_ON(free_slots(ring) < SLOTS_PER_PACKET))) {
1153		/* If we get here, we have a real error with the queue
1154		 * full, but queues not stopped. */
1155		b43legacyerr(dev->wl, "DMA queue overflow\n");
1156		return -ENOSPC;
1157	}
1158
1159	/* dma_tx_fragment might reallocate the skb, so invalidate pointers pointing
1160	 * into the skb data or cb now. */
1161	err = dma_tx_fragment(ring, &skb);
1162	if (unlikely(err == -ENOKEY)) {
1163		/* Drop this packet, as we don't have the encryption key
1164		 * anymore and must not transmit it unencrypted. */
1165		dev_kfree_skb_any(skb);
1166		return 0;
1167	}
1168	if (unlikely(err)) {
1169		b43legacyerr(dev->wl, "DMA tx mapping failure\n");
1170		return err;
1171	}
1172	if ((free_slots(ring) < SLOTS_PER_PACKET) ||
1173	    should_inject_overflow(ring)) {
1174		/* This TX ring is full. */
1175		unsigned int skb_mapping = skb_get_queue_mapping(skb);
1176		ieee80211_stop_queue(dev->wl->hw, skb_mapping);
1177		dev->wl->tx_queue_stopped[skb_mapping] = 1;
1178		ring->stopped = true;
1179		if (b43legacy_debug(dev, B43legacy_DBG_DMAVERBOSE))
1180			b43legacydbg(dev->wl, "Stopped TX ring %d\n",
1181			       ring->index);
1182	}
1183	return err;
1184}
1185
1186void b43legacy_dma_handle_txstatus(struct b43legacy_wldev *dev,
1187				 const struct b43legacy_txstatus *status)
1188{
1189	struct b43legacy_dmaring *ring;
1190	struct b43legacy_dmadesc_meta *meta;
1191	int retry_limit;
1192	int slot;
1193	int firstused;
1194
1195	ring = parse_cookie(dev, status->cookie, &slot);
1196	if (unlikely(!ring))
1197		return;
1198	B43legacy_WARN_ON(!ring->tx);
1199
1200	/* Sanity check: TX packets are processed in-order on one ring.
1201	 * Check if the slot deduced from the cookie really is the first
1202	 * used slot. */
1203	firstused = ring->current_slot - ring->used_slots + 1;
1204	if (firstused < 0)
1205		firstused = ring->nr_slots + firstused;
1206	if (unlikely(slot != firstused)) {
1207		/* This possibly is a firmware bug and will result in
1208		 * malfunction, memory leaks and/or stall of DMA functionality.
1209		 */
1210		b43legacydbg(dev->wl, "Out of order TX status report on DMA "
1211			     "ring %d. Expected %d, but got %d\n",
1212			     ring->index, firstused, slot);
1213		return;
1214	}
1215
1216	while (1) {
1217		B43legacy_WARN_ON(!(slot >= 0 && slot < ring->nr_slots));
1218		op32_idx2desc(ring, slot, &meta);
1219
1220		if (meta->skb)
1221			unmap_descbuffer(ring, meta->dmaaddr,
1222					 meta->skb->len, 1);
1223		else
1224			unmap_descbuffer(ring, meta->dmaaddr,
1225					 sizeof(struct b43legacy_txhdr_fw3),
1226					 1);
1227
1228		if (meta->is_last_fragment) {
1229			struct ieee80211_tx_info *info;
1230			BUG_ON(!meta->skb);
1231			info = IEEE80211_SKB_CB(meta->skb);
1232
1233			/* preserve the confiured retry limit before clearing the status
1234			 * The xmit function has overwritten the rc's value with the actual
1235			 * retry limit done by the hardware */
1236			retry_limit = info->status.rates[0].count;
1237			ieee80211_tx_info_clear_status(info);
1238
1239			if (status->acked)
1240				info->flags |= IEEE80211_TX_STAT_ACK;
1241
1242			if (status->rts_count > dev->wl->hw->conf.short_frame_max_tx_count) {
1243				/*
1244				 * If the short retries (RTS, not data frame) have exceeded
1245				 * the limit, the hw will not have tried the selected rate,
1246				 * but will have used the fallback rate instead.
1247				 * Don't let the rate control count attempts for the selected
1248				 * rate in this case, otherwise the statistics will be off.
1249				 */
1250				info->status.rates[0].count = 0;
1251				info->status.rates[1].count = status->frame_count;
1252			} else {
1253				if (status->frame_count > retry_limit) {
1254					info->status.rates[0].count = retry_limit;
1255					info->status.rates[1].count = status->frame_count -
1256							retry_limit;
1257
1258				} else {
1259					info->status.rates[0].count = status->frame_count;
1260					info->status.rates[1].idx = -1;
1261				}
1262			}
1263
1264			/* Call back to inform the ieee80211 subsystem about the
1265			 * status of the transmission.
1266			 * Some fields of txstat are already filled in dma_tx().
1267			 */
1268			ieee80211_tx_status_irqsafe(dev->wl->hw, meta->skb);
1269			/* skb is freed by ieee80211_tx_status_irqsafe() */
1270			meta->skb = NULL;
1271		} else {
1272			/* No need to call free_descriptor_buffer here, as
1273			 * this is only the txhdr, which is not allocated.
1274			 */
1275			B43legacy_WARN_ON(meta->skb != NULL);
1276		}
1277
1278		/* Everything unmapped and free'd. So it's not used anymore. */
1279		ring->used_slots--;
1280
1281		if (meta->is_last_fragment)
1282			break;
1283		slot = next_slot(ring, slot);
1284	}
1285	dev->stats.last_tx = jiffies;
1286	if (ring->stopped) {
1287		B43legacy_WARN_ON(free_slots(ring) < SLOTS_PER_PACKET);
1288		ring->stopped = false;
1289	}
1290
1291	if (dev->wl->tx_queue_stopped[ring->queue_prio]) {
1292		dev->wl->tx_queue_stopped[ring->queue_prio] = 0;
1293	} else {
1294		/* If the driver queue is running wake the corresponding
1295		 * mac80211 queue. */
1296		ieee80211_wake_queue(dev->wl->hw, ring->queue_prio);
1297		if (b43legacy_debug(dev, B43legacy_DBG_DMAVERBOSE))
1298			b43legacydbg(dev->wl, "Woke up TX ring %d\n",
1299				     ring->index);
1300	}
1301	/* Add work to the queue. */
1302	ieee80211_queue_work(dev->wl->hw, &dev->wl->tx_work);
1303}
1304
1305static void dma_rx(struct b43legacy_dmaring *ring,
1306		   int *slot)
1307{
1308	struct b43legacy_dmadesc32 *desc;
1309	struct b43legacy_dmadesc_meta *meta;
1310	struct b43legacy_rxhdr_fw3 *rxhdr;
1311	struct sk_buff *skb;
1312	u16 len;
1313	int err;
1314	dma_addr_t dmaaddr;
1315
1316	desc = op32_idx2desc(ring, *slot, &meta);
1317
1318	sync_descbuffer_for_cpu(ring, meta->dmaaddr, ring->rx_buffersize);
1319	skb = meta->skb;
1320
1321	if (ring->index == 3) {
1322		/* We received an xmit status. */
1323		struct b43legacy_hwtxstatus *hw =
1324				(struct b43legacy_hwtxstatus *)skb->data;
1325		int i = 0;
1326
1327		while (hw->cookie == 0) {
1328			if (i > 100)
1329				break;
1330			i++;
1331			udelay(2);
1332			barrier();
1333		}
1334		b43legacy_handle_hwtxstatus(ring->dev, hw);
1335		/* recycle the descriptor buffer. */
1336		sync_descbuffer_for_device(ring, meta->dmaaddr,
1337					   ring->rx_buffersize);
1338
1339		return;
1340	}
1341	rxhdr = (struct b43legacy_rxhdr_fw3 *)skb->data;
1342	len = le16_to_cpu(rxhdr->frame_len);
1343	if (len == 0) {
1344		int i = 0;
1345
1346		do {
1347			udelay(2);
1348			barrier();
1349			len = le16_to_cpu(rxhdr->frame_len);
1350		} while (len == 0 && i++ < 5);
1351		if (unlikely(len == 0)) {
1352			/* recycle the descriptor buffer. */
1353			sync_descbuffer_for_device(ring, meta->dmaaddr,
1354						   ring->rx_buffersize);
1355			goto drop;
1356		}
1357	}
1358	if (unlikely(len > ring->rx_buffersize)) {
1359		/* The data did not fit into one descriptor buffer
1360		 * and is split over multiple buffers.
1361		 * This should never happen, as we try to allocate buffers
1362		 * big enough. So simply ignore this packet.
1363		 */
1364		int cnt = 0;
1365		s32 tmp = len;
1366
1367		while (1) {
1368			desc = op32_idx2desc(ring, *slot, &meta);
1369			/* recycle the descriptor buffer. */
1370			sync_descbuffer_for_device(ring, meta->dmaaddr,
1371						   ring->rx_buffersize);
1372			*slot = next_slot(ring, *slot);
1373			cnt++;
1374			tmp -= ring->rx_buffersize;
1375			if (tmp <= 0)
1376				break;
1377		}
1378		b43legacyerr(ring->dev->wl, "DMA RX buffer too small "
1379		       "(len: %u, buffer: %u, nr-dropped: %d)\n",
1380		       len, ring->rx_buffersize, cnt);
1381		goto drop;
1382	}
1383
1384	dmaaddr = meta->dmaaddr;
1385	err = setup_rx_descbuffer(ring, desc, meta, GFP_ATOMIC);
1386	if (unlikely(err)) {
1387		b43legacydbg(ring->dev->wl, "DMA RX: setup_rx_descbuffer()"
1388			     " failed\n");
1389		sync_descbuffer_for_device(ring, dmaaddr,
1390					   ring->rx_buffersize);
1391		goto drop;
1392	}
1393
1394	unmap_descbuffer(ring, dmaaddr, ring->rx_buffersize, 0);
1395	skb_put(skb, len + ring->frameoffset);
1396	skb_pull(skb, ring->frameoffset);
1397
1398	b43legacy_rx(ring->dev, skb, rxhdr);
1399drop:
1400	return;
1401}
1402
1403void b43legacy_dma_rx(struct b43legacy_dmaring *ring)
1404{
1405	int slot;
1406	int current_slot;
1407	int used_slots = 0;
1408
1409	B43legacy_WARN_ON(ring->tx);
1410	current_slot = op32_get_current_rxslot(ring);
1411	B43legacy_WARN_ON(!(current_slot >= 0 && current_slot <
1412			   ring->nr_slots));
1413
1414	slot = ring->current_slot;
1415	for (; slot != current_slot; slot = next_slot(ring, slot)) {
1416		dma_rx(ring, &slot);
1417		update_max_used_slots(ring, ++used_slots);
1418	}
1419	op32_set_current_rxslot(ring, slot);
1420	ring->current_slot = slot;
1421}
1422
1423static void b43legacy_dma_tx_suspend_ring(struct b43legacy_dmaring *ring)
1424{
1425	B43legacy_WARN_ON(!ring->tx);
1426	op32_tx_suspend(ring);
1427}
1428
1429static void b43legacy_dma_tx_resume_ring(struct b43legacy_dmaring *ring)
1430{
1431	B43legacy_WARN_ON(!ring->tx);
1432	op32_tx_resume(ring);
1433}
1434
1435void b43legacy_dma_tx_suspend(struct b43legacy_wldev *dev)
1436{
1437	b43legacy_power_saving_ctl_bits(dev, -1, 1);
1438	b43legacy_dma_tx_suspend_ring(dev->dma.tx_ring0);
1439	b43legacy_dma_tx_suspend_ring(dev->dma.tx_ring1);
1440	b43legacy_dma_tx_suspend_ring(dev->dma.tx_ring2);
1441	b43legacy_dma_tx_suspend_ring(dev->dma.tx_ring3);
1442	b43legacy_dma_tx_suspend_ring(dev->dma.tx_ring4);
1443	b43legacy_dma_tx_suspend_ring(dev->dma.tx_ring5);
1444}
1445
1446void b43legacy_dma_tx_resume(struct b43legacy_wldev *dev)
1447{
1448	b43legacy_dma_tx_resume_ring(dev->dma.tx_ring5);
1449	b43legacy_dma_tx_resume_ring(dev->dma.tx_ring4);
1450	b43legacy_dma_tx_resume_ring(dev->dma.tx_ring3);
1451	b43legacy_dma_tx_resume_ring(dev->dma.tx_ring2);
1452	b43legacy_dma_tx_resume_ring(dev->dma.tx_ring1);
1453	b43legacy_dma_tx_resume_ring(dev->dma.tx_ring0);
1454	b43legacy_power_saving_ctl_bits(dev, -1, -1);
1455}
1456