Back to home page

OSCL-LXR

 
 

    


0001 // SPDX-License-Identifier: ISC
0002 /*
0003  * Copyright (c) 2010 Broadcom Corporation
0004  */
0005 
0006 #include <linux/kernel.h>
0007 #include <linux/etherdevice.h>
0008 #include <linux/module.h>
0009 #include <linux/inetdevice.h>
0010 #include <linux/property.h>
0011 #include <net/cfg80211.h>
0012 #include <net/rtnetlink.h>
0013 #include <net/addrconf.h>
0014 #include <net/ieee80211_radiotap.h>
0015 #include <net/ipv6.h>
0016 #include <brcmu_utils.h>
0017 #include <brcmu_wifi.h>
0018 
0019 #include "core.h"
0020 #include "bus.h"
0021 #include "debug.h"
0022 #include "fwil_types.h"
0023 #include "p2p.h"
0024 #include "pno.h"
0025 #include "cfg80211.h"
0026 #include "fwil.h"
0027 #include "feature.h"
0028 #include "proto.h"
0029 #include "pcie.h"
0030 #include "common.h"
0031 
0032 #define MAX_WAIT_FOR_8021X_TX           msecs_to_jiffies(950)
0033 
0034 #define BRCMF_BSSIDX_INVALID            -1
0035 
0036 #define RXS_PBPRES              BIT(2)
0037 
0038 #define D11_PHY_HDR_LEN             6
0039 
0040 struct d11rxhdr_le {
0041     __le16 RxFrameSize;
0042     u16 PAD;
0043     __le16 PhyRxStatus_0;
0044     __le16 PhyRxStatus_1;
0045     __le16 PhyRxStatus_2;
0046     __le16 PhyRxStatus_3;
0047     __le16 PhyRxStatus_4;
0048     __le16 PhyRxStatus_5;
0049     __le16 RxStatus1;
0050     __le16 RxStatus2;
0051     __le16 RxTSFTime;
0052     __le16 RxChan;
0053     u8 unknown[12];
0054 } __packed;
0055 
0056 struct wlc_d11rxhdr {
0057     struct d11rxhdr_le rxhdr;
0058     __le32 tsf_l;
0059     s8 rssi;
0060     s8 rxpwr0;
0061     s8 rxpwr1;
0062     s8 do_rssi_ma;
0063     s8 rxpwr[4];
0064 } __packed;
0065 
0066 char *brcmf_ifname(struct brcmf_if *ifp)
0067 {
0068     if (!ifp)
0069         return "<if_null>";
0070 
0071     if (ifp->ndev)
0072         return ifp->ndev->name;
0073 
0074     return "<if_none>";
0075 }
0076 
0077 struct brcmf_if *brcmf_get_ifp(struct brcmf_pub *drvr, int ifidx)
0078 {
0079     struct brcmf_if *ifp;
0080     s32 bsscfgidx;
0081 
0082     if (ifidx < 0 || ifidx >= BRCMF_MAX_IFS) {
0083         bphy_err(drvr, "ifidx %d out of range\n", ifidx);
0084         return NULL;
0085     }
0086 
0087     ifp = NULL;
0088     bsscfgidx = drvr->if2bss[ifidx];
0089     if (bsscfgidx >= 0)
0090         ifp = drvr->iflist[bsscfgidx];
0091 
0092     return ifp;
0093 }
0094 
0095 void brcmf_configure_arp_nd_offload(struct brcmf_if *ifp, bool enable)
0096 {
0097     s32 err;
0098     u32 mode;
0099 
0100     if (enable)
0101         mode = BRCMF_ARP_OL_AGENT | BRCMF_ARP_OL_PEER_AUTO_REPLY;
0102     else
0103         mode = 0;
0104 
0105     /* Try to set and enable ARP offload feature, this may fail, then it  */
0106     /* is simply not supported and err 0 will be returned                 */
0107     err = brcmf_fil_iovar_int_set(ifp, "arp_ol", mode);
0108     if (err) {
0109         brcmf_dbg(TRACE, "failed to set ARP offload mode to 0x%x, err = %d\n",
0110               mode, err);
0111     } else {
0112         err = brcmf_fil_iovar_int_set(ifp, "arpoe", enable);
0113         if (err) {
0114             brcmf_dbg(TRACE, "failed to configure (%d) ARP offload err = %d\n",
0115                   enable, err);
0116         } else {
0117             brcmf_dbg(TRACE, "successfully configured (%d) ARP offload to 0x%x\n",
0118                   enable, mode);
0119         }
0120     }
0121 
0122     err = brcmf_fil_iovar_int_set(ifp, "ndoe", enable);
0123     if (err) {
0124         brcmf_dbg(TRACE, "failed to configure (%d) ND offload err = %d\n",
0125               enable, err);
0126     } else {
0127         brcmf_dbg(TRACE, "successfully configured (%d) ND offload to 0x%x\n",
0128               enable, mode);
0129     }
0130 }
0131 
0132 static void _brcmf_set_multicast_list(struct work_struct *work)
0133 {
0134     struct brcmf_if *ifp = container_of(work, struct brcmf_if,
0135                         multicast_work);
0136     struct brcmf_pub *drvr = ifp->drvr;
0137     struct net_device *ndev;
0138     struct netdev_hw_addr *ha;
0139     u32 cmd_value, cnt;
0140     __le32 cnt_le;
0141     char *buf, *bufp;
0142     u32 buflen;
0143     s32 err;
0144 
0145     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
0146 
0147     ndev = ifp->ndev;
0148 
0149     /* Determine initial value of allmulti flag */
0150     cmd_value = (ndev->flags & IFF_ALLMULTI) ? true : false;
0151 
0152     /* Send down the multicast list first. */
0153     cnt = netdev_mc_count(ndev);
0154     buflen = sizeof(cnt) + (cnt * ETH_ALEN);
0155     buf = kmalloc(buflen, GFP_KERNEL);
0156     if (!buf)
0157         return;
0158     bufp = buf;
0159 
0160     cnt_le = cpu_to_le32(cnt);
0161     memcpy(bufp, &cnt_le, sizeof(cnt_le));
0162     bufp += sizeof(cnt_le);
0163 
0164     netdev_for_each_mc_addr(ha, ndev) {
0165         if (!cnt)
0166             break;
0167         memcpy(bufp, ha->addr, ETH_ALEN);
0168         bufp += ETH_ALEN;
0169         cnt--;
0170     }
0171 
0172     err = brcmf_fil_iovar_data_set(ifp, "mcast_list", buf, buflen);
0173     if (err < 0) {
0174         bphy_err(drvr, "Setting mcast_list failed, %d\n", err);
0175         cmd_value = cnt ? true : cmd_value;
0176     }
0177 
0178     kfree(buf);
0179 
0180     /*
0181      * Now send the allmulti setting.  This is based on the setting in the
0182      * net_device flags, but might be modified above to be turned on if we
0183      * were trying to set some addresses and dongle rejected it...
0184      */
0185     err = brcmf_fil_iovar_int_set(ifp, "allmulti", cmd_value);
0186     if (err < 0)
0187         bphy_err(drvr, "Setting allmulti failed, %d\n", err);
0188 
0189     /*Finally, pick up the PROMISC flag */
0190     cmd_value = (ndev->flags & IFF_PROMISC) ? true : false;
0191     err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_PROMISC, cmd_value);
0192     if (err < 0) {
0193         /* PROMISC unsupported by firmware of older chips */
0194         if (err == -EBADE)
0195             bphy_info_once(drvr, "BRCMF_C_SET_PROMISC unsupported\n");
0196         else
0197             bphy_err(drvr, "Setting BRCMF_C_SET_PROMISC failed, err=%d\n",
0198                  err);
0199     }
0200     brcmf_configure_arp_nd_offload(ifp, !cmd_value);
0201 }
0202 
0203 #if IS_ENABLED(CONFIG_IPV6)
0204 static void _brcmf_update_ndtable(struct work_struct *work)
0205 {
0206     struct brcmf_if *ifp = container_of(work, struct brcmf_if,
0207                         ndoffload_work);
0208     struct brcmf_pub *drvr = ifp->drvr;
0209     int i, ret;
0210 
0211     /* clear the table in firmware */
0212     ret = brcmf_fil_iovar_data_set(ifp, "nd_hostip_clear", NULL, 0);
0213     if (ret) {
0214         brcmf_dbg(TRACE, "fail to clear nd ip table err:%d\n", ret);
0215         return;
0216     }
0217 
0218     for (i = 0; i < ifp->ipv6addr_idx; i++) {
0219         ret = brcmf_fil_iovar_data_set(ifp, "nd_hostip",
0220                            &ifp->ipv6_addr_tbl[i],
0221                            sizeof(struct in6_addr));
0222         if (ret)
0223             bphy_err(drvr, "add nd ip err %d\n", ret);
0224     }
0225 }
0226 #else
0227 static void _brcmf_update_ndtable(struct work_struct *work)
0228 {
0229 }
0230 #endif
0231 
0232 static int brcmf_netdev_set_mac_address(struct net_device *ndev, void *addr)
0233 {
0234     struct brcmf_if *ifp = netdev_priv(ndev);
0235     struct sockaddr *sa = (struct sockaddr *)addr;
0236     int err;
0237 
0238     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
0239 
0240     err = brcmf_c_set_cur_etheraddr(ifp, sa->sa_data);
0241     if (err >= 0) {
0242         brcmf_dbg(TRACE, "updated to %pM\n", sa->sa_data);
0243         memcpy(ifp->mac_addr, sa->sa_data, ETH_ALEN);
0244         eth_hw_addr_set(ifp->ndev, ifp->mac_addr);
0245     }
0246     return err;
0247 }
0248 
0249 static void brcmf_netdev_set_multicast_list(struct net_device *ndev)
0250 {
0251     struct brcmf_if *ifp = netdev_priv(ndev);
0252 
0253     schedule_work(&ifp->multicast_work);
0254 }
0255 
0256 /**
0257  * brcmf_skb_is_iapp - checks if skb is an IAPP packet
0258  *
0259  * @skb: skb to check
0260  */
0261 static bool brcmf_skb_is_iapp(struct sk_buff *skb)
0262 {
0263     static const u8 iapp_l2_update_packet[6] __aligned(2) = {
0264         0x00, 0x01, 0xaf, 0x81, 0x01, 0x00,
0265     };
0266     unsigned char *eth_data;
0267 #if !defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS)
0268     const u16 *a, *b;
0269 #endif
0270 
0271     if (skb->len - skb->mac_len != 6 ||
0272         !is_multicast_ether_addr(eth_hdr(skb)->h_dest))
0273         return false;
0274 
0275     eth_data = skb_mac_header(skb) + ETH_HLEN;
0276 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS)
0277     return !(((*(const u32 *)eth_data) ^ (*(const u32 *)iapp_l2_update_packet)) |
0278          ((*(const u16 *)(eth_data + 4)) ^ (*(const u16 *)(iapp_l2_update_packet + 4))));
0279 #else
0280     a = (const u16 *)eth_data;
0281     b = (const u16 *)iapp_l2_update_packet;
0282 
0283     return !((a[0] ^ b[0]) | (a[1] ^ b[1]) | (a[2] ^ b[2]));
0284 #endif
0285 }
0286 
0287 static netdev_tx_t brcmf_netdev_start_xmit(struct sk_buff *skb,
0288                        struct net_device *ndev)
0289 {
0290     int ret;
0291     struct brcmf_if *ifp = netdev_priv(ndev);
0292     struct brcmf_pub *drvr = ifp->drvr;
0293     struct ethhdr *eh;
0294     int head_delta;
0295 
0296     brcmf_dbg(DATA, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
0297 
0298     /* Can the device send data? */
0299     if (drvr->bus_if->state != BRCMF_BUS_UP) {
0300         bphy_err(drvr, "xmit rejected state=%d\n", drvr->bus_if->state);
0301         netif_stop_queue(ndev);
0302         dev_kfree_skb(skb);
0303         ret = -ENODEV;
0304         goto done;
0305     }
0306 
0307     /* Some recent Broadcom's firmwares disassociate STA when they receive
0308      * an 802.11f ADD frame. This behavior can lead to a local DoS security
0309      * issue. Attacker may trigger disassociation of any STA by sending a
0310      * proper Ethernet frame to the wireless interface.
0311      *
0312      * Moreover this feature may break AP interfaces in some specific
0313      * setups. This applies e.g. to the bridge with hairpin mode enabled and
0314      * IFLA_BRPORT_MCAST_TO_UCAST set. IAPP packet generated by a firmware
0315      * will get passed back to the wireless interface and cause immediate
0316      * disassociation of a just-connected STA.
0317      */
0318     if (!drvr->settings->iapp && brcmf_skb_is_iapp(skb)) {
0319         dev_kfree_skb(skb);
0320         ret = -EINVAL;
0321         goto done;
0322     }
0323 
0324     /* Make sure there's enough writeable headroom */
0325     if (skb_headroom(skb) < drvr->hdrlen || skb_header_cloned(skb)) {
0326         head_delta = max_t(int, drvr->hdrlen - skb_headroom(skb), 0);
0327 
0328         brcmf_dbg(INFO, "%s: insufficient headroom (%d)\n",
0329               brcmf_ifname(ifp), head_delta);
0330         atomic_inc(&drvr->bus_if->stats.pktcowed);
0331         ret = pskb_expand_head(skb, ALIGN(head_delta, NET_SKB_PAD), 0,
0332                        GFP_ATOMIC);
0333         if (ret < 0) {
0334             bphy_err(drvr, "%s: failed to expand headroom\n",
0335                  brcmf_ifname(ifp));
0336             atomic_inc(&drvr->bus_if->stats.pktcow_failed);
0337             goto done;
0338         }
0339     }
0340 
0341     /* validate length for ether packet */
0342     if (skb->len < sizeof(*eh)) {
0343         ret = -EINVAL;
0344         dev_kfree_skb(skb);
0345         goto done;
0346     }
0347 
0348     eh = (struct ethhdr *)(skb->data);
0349 
0350     if (eh->h_proto == htons(ETH_P_PAE))
0351         atomic_inc(&ifp->pend_8021x_cnt);
0352 
0353     /* determine the priority */
0354     if ((skb->priority == 0) || (skb->priority > 7))
0355         skb->priority = cfg80211_classify8021d(skb, NULL);
0356 
0357     /* set pacing shift for packet aggregation */
0358     sk_pacing_shift_update(skb->sk, 8);
0359 
0360     ret = brcmf_proto_tx_queue_data(drvr, ifp->ifidx, skb);
0361     if (ret < 0)
0362         brcmf_txfinalize(ifp, skb, false);
0363 
0364 done:
0365     if (ret) {
0366         ndev->stats.tx_dropped++;
0367     } else {
0368         ndev->stats.tx_packets++;
0369         ndev->stats.tx_bytes += skb->len;
0370     }
0371 
0372     /* Return ok: we always eat the packet */
0373     return NETDEV_TX_OK;
0374 }
0375 
0376 void brcmf_txflowblock_if(struct brcmf_if *ifp,
0377               enum brcmf_netif_stop_reason reason, bool state)
0378 {
0379     unsigned long flags;
0380 
0381     if (!ifp || !ifp->ndev)
0382         return;
0383 
0384     brcmf_dbg(TRACE, "enter: bsscfgidx=%d stop=0x%X reason=%d state=%d\n",
0385           ifp->bsscfgidx, ifp->netif_stop, reason, state);
0386 
0387     spin_lock_irqsave(&ifp->netif_stop_lock, flags);
0388     if (state) {
0389         if (!ifp->netif_stop)
0390             netif_stop_queue(ifp->ndev);
0391         ifp->netif_stop |= reason;
0392     } else {
0393         ifp->netif_stop &= ~reason;
0394         if (!ifp->netif_stop)
0395             netif_wake_queue(ifp->ndev);
0396     }
0397     spin_unlock_irqrestore(&ifp->netif_stop_lock, flags);
0398 }
0399 
0400 void brcmf_netif_rx(struct brcmf_if *ifp, struct sk_buff *skb)
0401 {
0402     /* Most of Broadcom's firmwares send 802.11f ADD frame every time a new
0403      * STA connects to the AP interface. This is an obsoleted standard most
0404      * users don't use, so don't pass these frames up unless requested.
0405      */
0406     if (!ifp->drvr->settings->iapp && brcmf_skb_is_iapp(skb)) {
0407         brcmu_pkt_buf_free_skb(skb);
0408         return;
0409     }
0410 
0411     if (skb->pkt_type == PACKET_MULTICAST)
0412         ifp->ndev->stats.multicast++;
0413 
0414     if (!(ifp->ndev->flags & IFF_UP)) {
0415         brcmu_pkt_buf_free_skb(skb);
0416         return;
0417     }
0418 
0419     ifp->ndev->stats.rx_bytes += skb->len;
0420     ifp->ndev->stats.rx_packets++;
0421 
0422     brcmf_dbg(DATA, "rx proto=0x%X\n", ntohs(skb->protocol));
0423     netif_rx(skb);
0424 }
0425 
0426 void brcmf_netif_mon_rx(struct brcmf_if *ifp, struct sk_buff *skb)
0427 {
0428     if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MONITOR_FMT_RADIOTAP)) {
0429         /* Do nothing */
0430     } else if (brcmf_feat_is_enabled(ifp, BRCMF_FEAT_MONITOR_FMT_HW_RX_HDR)) {
0431         struct wlc_d11rxhdr *wlc_rxhdr = (struct wlc_d11rxhdr *)skb->data;
0432         struct ieee80211_radiotap_header *radiotap;
0433         unsigned int offset;
0434         u16 RxStatus1;
0435 
0436         RxStatus1 = le16_to_cpu(wlc_rxhdr->rxhdr.RxStatus1);
0437 
0438         offset = sizeof(struct wlc_d11rxhdr);
0439         /* MAC inserts 2 pad bytes for a4 headers or QoS or A-MSDU
0440          * subframes
0441          */
0442         if (RxStatus1 & RXS_PBPRES)
0443             offset += 2;
0444         offset += D11_PHY_HDR_LEN;
0445 
0446         skb_pull(skb, offset);
0447 
0448         /* TODO: use RX header to fill some radiotap data */
0449         radiotap = skb_push(skb, sizeof(*radiotap));
0450         memset(radiotap, 0, sizeof(*radiotap));
0451         radiotap->it_len = cpu_to_le16(sizeof(*radiotap));
0452 
0453         /* TODO: 4 bytes with receive status? */
0454         skb->len -= 4;
0455     } else {
0456         struct ieee80211_radiotap_header *radiotap;
0457 
0458         /* TODO: use RX status to fill some radiotap data */
0459         radiotap = skb_push(skb, sizeof(*radiotap));
0460         memset(radiotap, 0, sizeof(*radiotap));
0461         radiotap->it_len = cpu_to_le16(sizeof(*radiotap));
0462 
0463         /* TODO: 4 bytes with receive status? */
0464         skb->len -= 4;
0465     }
0466 
0467     skb->dev = ifp->ndev;
0468     skb_reset_mac_header(skb);
0469     skb->pkt_type = PACKET_OTHERHOST;
0470     skb->protocol = htons(ETH_P_802_2);
0471 
0472     brcmf_netif_rx(ifp, skb);
0473 }
0474 
0475 static int brcmf_rx_hdrpull(struct brcmf_pub *drvr, struct sk_buff *skb,
0476                 struct brcmf_if **ifp)
0477 {
0478     int ret;
0479 
0480     /* process and remove protocol-specific header */
0481     ret = brcmf_proto_hdrpull(drvr, true, skb, ifp);
0482 
0483     if (ret || !(*ifp) || !(*ifp)->ndev) {
0484         if (ret != -ENODATA && *ifp && (*ifp)->ndev)
0485             (*ifp)->ndev->stats.rx_errors++;
0486         brcmu_pkt_buf_free_skb(skb);
0487         return -ENODATA;
0488     }
0489 
0490     skb->protocol = eth_type_trans(skb, (*ifp)->ndev);
0491     return 0;
0492 }
0493 
0494 void brcmf_rx_frame(struct device *dev, struct sk_buff *skb, bool handle_event,
0495             bool inirq)
0496 {
0497     struct brcmf_if *ifp;
0498     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
0499     struct brcmf_pub *drvr = bus_if->drvr;
0500 
0501     brcmf_dbg(DATA, "Enter: %s: rxp=%p\n", dev_name(dev), skb);
0502 
0503     if (brcmf_rx_hdrpull(drvr, skb, &ifp))
0504         return;
0505 
0506     if (brcmf_proto_is_reorder_skb(skb)) {
0507         brcmf_proto_rxreorder(ifp, skb);
0508     } else {
0509         /* Process special event packets */
0510         if (handle_event) {
0511             gfp_t gfp = inirq ? GFP_ATOMIC : GFP_KERNEL;
0512 
0513             brcmf_fweh_process_skb(ifp->drvr, skb,
0514                            BCMILCP_SUBTYPE_VENDOR_LONG, gfp);
0515         }
0516         brcmf_netif_rx(ifp, skb);
0517     }
0518 }
0519 
0520 void brcmf_rx_event(struct device *dev, struct sk_buff *skb)
0521 {
0522     struct brcmf_if *ifp;
0523     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
0524     struct brcmf_pub *drvr = bus_if->drvr;
0525 
0526     brcmf_dbg(EVENT, "Enter: %s: rxp=%p\n", dev_name(dev), skb);
0527 
0528     if (brcmf_rx_hdrpull(drvr, skb, &ifp))
0529         return;
0530 
0531     brcmf_fweh_process_skb(ifp->drvr, skb, 0, GFP_KERNEL);
0532     brcmu_pkt_buf_free_skb(skb);
0533 }
0534 
0535 void brcmf_txfinalize(struct brcmf_if *ifp, struct sk_buff *txp, bool success)
0536 {
0537     struct ethhdr *eh;
0538     u16 type;
0539 
0540     eh = (struct ethhdr *)(txp->data);
0541     type = ntohs(eh->h_proto);
0542 
0543     if (type == ETH_P_PAE) {
0544         atomic_dec(&ifp->pend_8021x_cnt);
0545         if (waitqueue_active(&ifp->pend_8021x_wait))
0546             wake_up(&ifp->pend_8021x_wait);
0547     }
0548 
0549     if (!success)
0550         ifp->ndev->stats.tx_errors++;
0551 
0552     brcmu_pkt_buf_free_skb(txp);
0553 }
0554 
0555 static void brcmf_ethtool_get_drvinfo(struct net_device *ndev,
0556                     struct ethtool_drvinfo *info)
0557 {
0558     struct brcmf_if *ifp = netdev_priv(ndev);
0559     struct brcmf_pub *drvr = ifp->drvr;
0560     char drev[BRCMU_DOTREV_LEN] = "n/a";
0561 
0562     if (drvr->revinfo.result == 0)
0563         brcmu_dotrev_str(drvr->revinfo.driverrev, drev);
0564     strlcpy(info->driver, KBUILD_MODNAME, sizeof(info->driver));
0565     strlcpy(info->version, drev, sizeof(info->version));
0566     strlcpy(info->fw_version, drvr->fwver, sizeof(info->fw_version));
0567     strlcpy(info->bus_info, dev_name(drvr->bus_if->dev),
0568         sizeof(info->bus_info));
0569 }
0570 
0571 static const struct ethtool_ops brcmf_ethtool_ops = {
0572     .get_drvinfo = brcmf_ethtool_get_drvinfo,
0573 };
0574 
0575 static int brcmf_netdev_stop(struct net_device *ndev)
0576 {
0577     struct brcmf_if *ifp = netdev_priv(ndev);
0578 
0579     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
0580 
0581     brcmf_cfg80211_down(ndev);
0582 
0583     brcmf_net_setcarrier(ifp, false);
0584 
0585     return 0;
0586 }
0587 
0588 static int brcmf_netdev_open(struct net_device *ndev)
0589 {
0590     struct brcmf_if *ifp = netdev_priv(ndev);
0591     struct brcmf_pub *drvr = ifp->drvr;
0592     struct brcmf_bus *bus_if = drvr->bus_if;
0593     u32 toe_ol;
0594 
0595     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d\n", ifp->bsscfgidx);
0596 
0597     /* If bus is not ready, can't continue */
0598     if (bus_if->state != BRCMF_BUS_UP) {
0599         bphy_err(drvr, "failed bus is not ready\n");
0600         return -EAGAIN;
0601     }
0602 
0603     atomic_set(&ifp->pend_8021x_cnt, 0);
0604 
0605     /* Get current TOE mode from dongle */
0606     if (brcmf_fil_iovar_int_get(ifp, "toe_ol", &toe_ol) >= 0
0607         && (toe_ol & TOE_TX_CSUM_OL) != 0)
0608         ndev->features |= NETIF_F_IP_CSUM;
0609     else
0610         ndev->features &= ~NETIF_F_IP_CSUM;
0611 
0612     if (brcmf_cfg80211_up(ndev)) {
0613         bphy_err(drvr, "failed to bring up cfg80211\n");
0614         return -EIO;
0615     }
0616 
0617     /* Clear, carrier, set when connected or AP mode. */
0618     netif_carrier_off(ndev);
0619     return 0;
0620 }
0621 
0622 static const struct net_device_ops brcmf_netdev_ops_pri = {
0623     .ndo_open = brcmf_netdev_open,
0624     .ndo_stop = brcmf_netdev_stop,
0625     .ndo_start_xmit = brcmf_netdev_start_xmit,
0626     .ndo_set_mac_address = brcmf_netdev_set_mac_address,
0627     .ndo_set_rx_mode = brcmf_netdev_set_multicast_list
0628 };
0629 
0630 int brcmf_net_attach(struct brcmf_if *ifp, bool locked)
0631 {
0632     struct brcmf_pub *drvr = ifp->drvr;
0633     struct net_device *ndev;
0634     s32 err;
0635 
0636     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d mac=%pM\n", ifp->bsscfgidx,
0637           ifp->mac_addr);
0638     ndev = ifp->ndev;
0639 
0640     /* set appropriate operations */
0641     ndev->netdev_ops = &brcmf_netdev_ops_pri;
0642 
0643     ndev->needed_headroom += drvr->hdrlen;
0644     ndev->ethtool_ops = &brcmf_ethtool_ops;
0645 
0646     /* set the mac address & netns */
0647     eth_hw_addr_set(ndev, ifp->mac_addr);
0648     dev_net_set(ndev, wiphy_net(cfg_to_wiphy(drvr->config)));
0649 
0650     INIT_WORK(&ifp->multicast_work, _brcmf_set_multicast_list);
0651     INIT_WORK(&ifp->ndoffload_work, _brcmf_update_ndtable);
0652 
0653     if (locked)
0654         err = cfg80211_register_netdevice(ndev);
0655     else
0656         err = register_netdev(ndev);
0657     if (err != 0) {
0658         bphy_err(drvr, "couldn't register the net device\n");
0659         goto fail;
0660     }
0661 
0662     netif_carrier_off(ndev);
0663 
0664     ndev->priv_destructor = brcmf_cfg80211_free_netdev;
0665     brcmf_dbg(INFO, "%s: Broadcom Dongle Host Driver\n", ndev->name);
0666     return 0;
0667 
0668 fail:
0669     drvr->iflist[ifp->bsscfgidx] = NULL;
0670     ndev->netdev_ops = NULL;
0671     return -EBADE;
0672 }
0673 
0674 void brcmf_net_detach(struct net_device *ndev, bool locked)
0675 {
0676     if (ndev->reg_state == NETREG_REGISTERED) {
0677         if (locked)
0678             cfg80211_unregister_netdevice(ndev);
0679         else
0680             unregister_netdev(ndev);
0681     } else {
0682         brcmf_cfg80211_free_netdev(ndev);
0683         free_netdev(ndev);
0684     }
0685 }
0686 
0687 static int brcmf_net_mon_open(struct net_device *ndev)
0688 {
0689     struct brcmf_if *ifp = netdev_priv(ndev);
0690     struct brcmf_pub *drvr = ifp->drvr;
0691     u32 monitor;
0692     int err;
0693 
0694     brcmf_dbg(TRACE, "Enter\n");
0695 
0696     err = brcmf_fil_cmd_int_get(ifp, BRCMF_C_GET_MONITOR, &monitor);
0697     if (err) {
0698         bphy_err(drvr, "BRCMF_C_GET_MONITOR error (%d)\n", err);
0699         return err;
0700     } else if (monitor) {
0701         bphy_err(drvr, "Monitor mode is already enabled\n");
0702         return -EEXIST;
0703     }
0704 
0705     monitor = 3;
0706     err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_MONITOR, monitor);
0707     if (err)
0708         bphy_err(drvr, "BRCMF_C_SET_MONITOR error (%d)\n", err);
0709 
0710     return err;
0711 }
0712 
0713 static int brcmf_net_mon_stop(struct net_device *ndev)
0714 {
0715     struct brcmf_if *ifp = netdev_priv(ndev);
0716     struct brcmf_pub *drvr = ifp->drvr;
0717     u32 monitor;
0718     int err;
0719 
0720     brcmf_dbg(TRACE, "Enter\n");
0721 
0722     monitor = 0;
0723     err = brcmf_fil_cmd_int_set(ifp, BRCMF_C_SET_MONITOR, monitor);
0724     if (err)
0725         bphy_err(drvr, "BRCMF_C_SET_MONITOR error (%d)\n", err);
0726 
0727     return err;
0728 }
0729 
0730 static netdev_tx_t brcmf_net_mon_start_xmit(struct sk_buff *skb,
0731                         struct net_device *ndev)
0732 {
0733     dev_kfree_skb_any(skb);
0734 
0735     return NETDEV_TX_OK;
0736 }
0737 
0738 static const struct net_device_ops brcmf_netdev_ops_mon = {
0739     .ndo_open = brcmf_net_mon_open,
0740     .ndo_stop = brcmf_net_mon_stop,
0741     .ndo_start_xmit = brcmf_net_mon_start_xmit,
0742 };
0743 
0744 int brcmf_net_mon_attach(struct brcmf_if *ifp)
0745 {
0746     struct brcmf_pub *drvr = ifp->drvr;
0747     struct net_device *ndev;
0748     int err;
0749 
0750     brcmf_dbg(TRACE, "Enter\n");
0751 
0752     ndev = ifp->ndev;
0753     ndev->netdev_ops = &brcmf_netdev_ops_mon;
0754 
0755     err = cfg80211_register_netdevice(ndev);
0756     if (err)
0757         bphy_err(drvr, "Failed to register %s device\n", ndev->name);
0758 
0759     return err;
0760 }
0761 
0762 void brcmf_net_setcarrier(struct brcmf_if *ifp, bool on)
0763 {
0764     struct net_device *ndev;
0765 
0766     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d carrier=%d\n", ifp->bsscfgidx,
0767           on);
0768 
0769     ndev = ifp->ndev;
0770     brcmf_txflowblock_if(ifp, BRCMF_NETIF_STOP_REASON_DISCONNECTED, !on);
0771     if (on) {
0772         if (!netif_carrier_ok(ndev))
0773             netif_carrier_on(ndev);
0774 
0775     } else {
0776         if (netif_carrier_ok(ndev))
0777             netif_carrier_off(ndev);
0778     }
0779 }
0780 
0781 static int brcmf_net_p2p_open(struct net_device *ndev)
0782 {
0783     brcmf_dbg(TRACE, "Enter\n");
0784 
0785     return brcmf_cfg80211_up(ndev);
0786 }
0787 
0788 static int brcmf_net_p2p_stop(struct net_device *ndev)
0789 {
0790     brcmf_dbg(TRACE, "Enter\n");
0791 
0792     return brcmf_cfg80211_down(ndev);
0793 }
0794 
0795 static netdev_tx_t brcmf_net_p2p_start_xmit(struct sk_buff *skb,
0796                         struct net_device *ndev)
0797 {
0798     if (skb)
0799         dev_kfree_skb_any(skb);
0800 
0801     return NETDEV_TX_OK;
0802 }
0803 
0804 static const struct net_device_ops brcmf_netdev_ops_p2p = {
0805     .ndo_open = brcmf_net_p2p_open,
0806     .ndo_stop = brcmf_net_p2p_stop,
0807     .ndo_start_xmit = brcmf_net_p2p_start_xmit
0808 };
0809 
0810 static int brcmf_net_p2p_attach(struct brcmf_if *ifp)
0811 {
0812     struct brcmf_pub *drvr = ifp->drvr;
0813     struct net_device *ndev;
0814 
0815     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d mac=%pM\n", ifp->bsscfgidx,
0816           ifp->mac_addr);
0817     ndev = ifp->ndev;
0818 
0819     ndev->netdev_ops = &brcmf_netdev_ops_p2p;
0820 
0821     /* set the mac address */
0822     eth_hw_addr_set(ndev, ifp->mac_addr);
0823 
0824     if (register_netdev(ndev) != 0) {
0825         bphy_err(drvr, "couldn't register the p2p net device\n");
0826         goto fail;
0827     }
0828 
0829     brcmf_dbg(INFO, "%s: Broadcom Dongle Host Driver\n", ndev->name);
0830 
0831     return 0;
0832 
0833 fail:
0834     ifp->drvr->iflist[ifp->bsscfgidx] = NULL;
0835     ndev->netdev_ops = NULL;
0836     return -EBADE;
0837 }
0838 
0839 struct brcmf_if *brcmf_add_if(struct brcmf_pub *drvr, s32 bsscfgidx, s32 ifidx,
0840                   bool is_p2pdev, const char *name, u8 *mac_addr)
0841 {
0842     struct brcmf_if *ifp;
0843     struct net_device *ndev;
0844 
0845     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d, ifidx=%d\n", bsscfgidx, ifidx);
0846 
0847     ifp = drvr->iflist[bsscfgidx];
0848     /*
0849      * Delete the existing interface before overwriting it
0850      * in case we missed the BRCMF_E_IF_DEL event.
0851      */
0852     if (ifp) {
0853         if (ifidx) {
0854             bphy_err(drvr, "ERROR: netdev:%s already exists\n",
0855                  ifp->ndev->name);
0856             netif_stop_queue(ifp->ndev);
0857             brcmf_net_detach(ifp->ndev, false);
0858             drvr->iflist[bsscfgidx] = NULL;
0859         } else {
0860             brcmf_dbg(INFO, "netdev:%s ignore IF event\n",
0861                   ifp->ndev->name);
0862             return ERR_PTR(-EINVAL);
0863         }
0864     }
0865 
0866     if (!drvr->settings->p2p_enable && is_p2pdev) {
0867         /* this is P2P_DEVICE interface */
0868         brcmf_dbg(INFO, "allocate non-netdev interface\n");
0869         ifp = kzalloc(sizeof(*ifp), GFP_KERNEL);
0870         if (!ifp)
0871             return ERR_PTR(-ENOMEM);
0872     } else {
0873         brcmf_dbg(INFO, "allocate netdev interface\n");
0874         /* Allocate netdev, including space for private structure */
0875         ndev = alloc_netdev(sizeof(*ifp), is_p2pdev ? "p2p%d" : name,
0876                     NET_NAME_UNKNOWN, ether_setup);
0877         if (!ndev)
0878             return ERR_PTR(-ENOMEM);
0879 
0880         ndev->needs_free_netdev = true;
0881         ifp = netdev_priv(ndev);
0882         ifp->ndev = ndev;
0883         /* store mapping ifidx to bsscfgidx */
0884         if (drvr->if2bss[ifidx] == BRCMF_BSSIDX_INVALID)
0885             drvr->if2bss[ifidx] = bsscfgidx;
0886     }
0887 
0888     ifp->drvr = drvr;
0889     drvr->iflist[bsscfgidx] = ifp;
0890     ifp->ifidx = ifidx;
0891     ifp->bsscfgidx = bsscfgidx;
0892 
0893     init_waitqueue_head(&ifp->pend_8021x_wait);
0894     spin_lock_init(&ifp->netif_stop_lock);
0895 
0896     if (mac_addr != NULL)
0897         memcpy(ifp->mac_addr, mac_addr, ETH_ALEN);
0898 
0899     brcmf_dbg(TRACE, " ==== pid:%x, if:%s (%pM) created ===\n",
0900           current->pid, name, ifp->mac_addr);
0901 
0902     return ifp;
0903 }
0904 
0905 static void brcmf_del_if(struct brcmf_pub *drvr, s32 bsscfgidx,
0906              bool locked)
0907 {
0908     struct brcmf_if *ifp;
0909     int ifidx;
0910 
0911     ifp = drvr->iflist[bsscfgidx];
0912     if (!ifp) {
0913         bphy_err(drvr, "Null interface, bsscfgidx=%d\n", bsscfgidx);
0914         return;
0915     }
0916     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d, ifidx=%d\n", bsscfgidx,
0917           ifp->ifidx);
0918     ifidx = ifp->ifidx;
0919 
0920     if (ifp->ndev) {
0921         if (bsscfgidx == 0) {
0922             if (ifp->ndev->netdev_ops == &brcmf_netdev_ops_pri) {
0923                 rtnl_lock();
0924                 brcmf_netdev_stop(ifp->ndev);
0925                 rtnl_unlock();
0926             }
0927         } else {
0928             netif_stop_queue(ifp->ndev);
0929         }
0930 
0931         if (ifp->ndev->netdev_ops == &brcmf_netdev_ops_pri) {
0932             cancel_work_sync(&ifp->multicast_work);
0933             cancel_work_sync(&ifp->ndoffload_work);
0934         }
0935         brcmf_net_detach(ifp->ndev, locked);
0936     } else {
0937         /* Only p2p device interfaces which get dynamically created
0938          * end up here. In this case the p2p module should be informed
0939          * about the removal of the interface within the firmware. If
0940          * not then p2p commands towards the firmware will cause some
0941          * serious troublesome side effects. The p2p module will clean
0942          * up the ifp if needed.
0943          */
0944         brcmf_p2p_ifp_removed(ifp, locked);
0945         kfree(ifp);
0946     }
0947 
0948     drvr->iflist[bsscfgidx] = NULL;
0949     if (drvr->if2bss[ifidx] == bsscfgidx)
0950         drvr->if2bss[ifidx] = BRCMF_BSSIDX_INVALID;
0951 }
0952 
0953 void brcmf_remove_interface(struct brcmf_if *ifp, bool locked)
0954 {
0955     if (!ifp || WARN_ON(ifp->drvr->iflist[ifp->bsscfgidx] != ifp))
0956         return;
0957     brcmf_dbg(TRACE, "Enter, bsscfgidx=%d, ifidx=%d\n", ifp->bsscfgidx,
0958           ifp->ifidx);
0959     brcmf_proto_del_if(ifp->drvr, ifp);
0960     brcmf_del_if(ifp->drvr, ifp->bsscfgidx, locked);
0961 }
0962 
0963 static int brcmf_psm_watchdog_notify(struct brcmf_if *ifp,
0964                      const struct brcmf_event_msg *evtmsg,
0965                      void *data)
0966 {
0967     struct brcmf_pub *drvr = ifp->drvr;
0968     int err;
0969 
0970     brcmf_dbg(TRACE, "enter: bsscfgidx=%d\n", ifp->bsscfgidx);
0971 
0972     bphy_err(drvr, "PSM's watchdog has fired!\n");
0973 
0974     err = brcmf_debug_create_memdump(ifp->drvr->bus_if, data,
0975                      evtmsg->datalen);
0976     if (err)
0977         bphy_err(drvr, "Failed to get memory dump, %d\n", err);
0978 
0979     return err;
0980 }
0981 
0982 #ifdef CONFIG_INET
0983 #define ARPOL_MAX_ENTRIES   8
0984 static int brcmf_inetaddr_changed(struct notifier_block *nb,
0985                   unsigned long action, void *data)
0986 {
0987     struct brcmf_pub *drvr = container_of(nb, struct brcmf_pub,
0988                           inetaddr_notifier);
0989     struct in_ifaddr *ifa = data;
0990     struct net_device *ndev = ifa->ifa_dev->dev;
0991     struct brcmf_if *ifp;
0992     int idx, i, ret;
0993     u32 val;
0994     __be32 addr_table[ARPOL_MAX_ENTRIES] = {0};
0995 
0996     /* Find out if the notification is meant for us */
0997     for (idx = 0; idx < BRCMF_MAX_IFS; idx++) {
0998         ifp = drvr->iflist[idx];
0999         if (ifp && ifp->ndev == ndev)
1000             break;
1001         if (idx == BRCMF_MAX_IFS - 1)
1002             return NOTIFY_DONE;
1003     }
1004 
1005     /* check if arp offload is supported */
1006     ret = brcmf_fil_iovar_int_get(ifp, "arpoe", &val);
1007     if (ret)
1008         return NOTIFY_OK;
1009 
1010     /* old version only support primary index */
1011     ret = brcmf_fil_iovar_int_get(ifp, "arp_version", &val);
1012     if (ret)
1013         val = 1;
1014     if (val == 1)
1015         ifp = drvr->iflist[0];
1016 
1017     /* retrieve the table from firmware */
1018     ret = brcmf_fil_iovar_data_get(ifp, "arp_hostip", addr_table,
1019                        sizeof(addr_table));
1020     if (ret) {
1021         bphy_err(drvr, "fail to get arp ip table err:%d\n", ret);
1022         return NOTIFY_OK;
1023     }
1024 
1025     for (i = 0; i < ARPOL_MAX_ENTRIES; i++)
1026         if (ifa->ifa_address == addr_table[i])
1027             break;
1028 
1029     switch (action) {
1030     case NETDEV_UP:
1031         if (i == ARPOL_MAX_ENTRIES) {
1032             brcmf_dbg(TRACE, "add %pI4 to arp table\n",
1033                   &ifa->ifa_address);
1034             /* set it directly */
1035             ret = brcmf_fil_iovar_data_set(ifp, "arp_hostip",
1036                 &ifa->ifa_address, sizeof(ifa->ifa_address));
1037             if (ret)
1038                 bphy_err(drvr, "add arp ip err %d\n", ret);
1039         }
1040         break;
1041     case NETDEV_DOWN:
1042         if (i < ARPOL_MAX_ENTRIES) {
1043             addr_table[i] = 0;
1044             brcmf_dbg(TRACE, "remove %pI4 from arp table\n",
1045                   &ifa->ifa_address);
1046             /* clear the table in firmware */
1047             ret = brcmf_fil_iovar_data_set(ifp, "arp_hostip_clear",
1048                                NULL, 0);
1049             if (ret) {
1050                 bphy_err(drvr, "fail to clear arp ip table err:%d\n",
1051                      ret);
1052                 return NOTIFY_OK;
1053             }
1054             for (i = 0; i < ARPOL_MAX_ENTRIES; i++) {
1055                 if (addr_table[i] == 0)
1056                     continue;
1057                 ret = brcmf_fil_iovar_data_set(ifp, "arp_hostip",
1058                                    &addr_table[i],
1059                                    sizeof(addr_table[i]));
1060                 if (ret)
1061                     bphy_err(drvr, "add arp ip err %d\n",
1062                          ret);
1063             }
1064         }
1065         break;
1066     default:
1067         break;
1068     }
1069 
1070     return NOTIFY_OK;
1071 }
1072 #endif
1073 
1074 #if IS_ENABLED(CONFIG_IPV6)
1075 static int brcmf_inet6addr_changed(struct notifier_block *nb,
1076                    unsigned long action, void *data)
1077 {
1078     struct brcmf_pub *drvr = container_of(nb, struct brcmf_pub,
1079                           inet6addr_notifier);
1080     struct inet6_ifaddr *ifa = data;
1081     struct brcmf_if *ifp;
1082     int i;
1083     struct in6_addr *table;
1084 
1085     /* Only handle primary interface */
1086     ifp = drvr->iflist[0];
1087     if (!ifp)
1088         return NOTIFY_DONE;
1089     if (ifp->ndev != ifa->idev->dev)
1090         return NOTIFY_DONE;
1091 
1092     table = ifp->ipv6_addr_tbl;
1093     for (i = 0; i < NDOL_MAX_ENTRIES; i++)
1094         if (ipv6_addr_equal(&ifa->addr, &table[i]))
1095             break;
1096 
1097     switch (action) {
1098     case NETDEV_UP:
1099         if (i == NDOL_MAX_ENTRIES) {
1100             if (ifp->ipv6addr_idx < NDOL_MAX_ENTRIES) {
1101                 table[ifp->ipv6addr_idx++] = ifa->addr;
1102             } else {
1103                 for (i = 0; i < NDOL_MAX_ENTRIES - 1; i++)
1104                     table[i] = table[i + 1];
1105                 table[NDOL_MAX_ENTRIES - 1] = ifa->addr;
1106             }
1107         }
1108         break;
1109     case NETDEV_DOWN:
1110         if (i < NDOL_MAX_ENTRIES) {
1111             for (; i < ifp->ipv6addr_idx - 1; i++)
1112                 table[i] = table[i + 1];
1113             memset(&table[i], 0, sizeof(table[i]));
1114             ifp->ipv6addr_idx--;
1115         }
1116         break;
1117     default:
1118         break;
1119     }
1120 
1121     schedule_work(&ifp->ndoffload_work);
1122 
1123     return NOTIFY_OK;
1124 }
1125 #endif
1126 
1127 static int brcmf_revinfo_read(struct seq_file *s, void *data)
1128 {
1129     struct brcmf_bus *bus_if = dev_get_drvdata(s->private);
1130     struct brcmf_rev_info *ri = &bus_if->drvr->revinfo;
1131     char drev[BRCMU_DOTREV_LEN];
1132     char brev[BRCMU_BOARDREV_LEN];
1133 
1134     seq_printf(s, "vendorid: 0x%04x\n", ri->vendorid);
1135     seq_printf(s, "deviceid: 0x%04x\n", ri->deviceid);
1136     seq_printf(s, "radiorev: %s\n", brcmu_dotrev_str(ri->radiorev, drev));
1137     seq_printf(s, "chip: %s\n", ri->chipname);
1138     seq_printf(s, "chippkg: %u\n", ri->chippkg);
1139     seq_printf(s, "corerev: %u\n", ri->corerev);
1140     seq_printf(s, "boardid: 0x%04x\n", ri->boardid);
1141     seq_printf(s, "boardvendor: 0x%04x\n", ri->boardvendor);
1142     seq_printf(s, "boardrev: %s\n", brcmu_boardrev_str(ri->boardrev, brev));
1143     seq_printf(s, "driverrev: %s\n", brcmu_dotrev_str(ri->driverrev, drev));
1144     seq_printf(s, "ucoderev: %u\n", ri->ucoderev);
1145     seq_printf(s, "bus: %u\n", ri->bus);
1146     seq_printf(s, "phytype: %u\n", ri->phytype);
1147     seq_printf(s, "phyrev: %u\n", ri->phyrev);
1148     seq_printf(s, "anarev: %u\n", ri->anarev);
1149     seq_printf(s, "nvramrev: %08x\n", ri->nvramrev);
1150 
1151     seq_printf(s, "clmver: %s\n", bus_if->drvr->clmver);
1152 
1153     return 0;
1154 }
1155 
1156 static void brcmf_core_bus_reset(struct work_struct *work)
1157 {
1158     struct brcmf_pub *drvr = container_of(work, struct brcmf_pub,
1159                           bus_reset);
1160 
1161     brcmf_bus_reset(drvr->bus_if);
1162 }
1163 
1164 static ssize_t bus_reset_write(struct file *file, const char __user *user_buf,
1165                    size_t count, loff_t *ppos)
1166 {
1167     struct brcmf_pub *drvr = file->private_data;
1168     u8 value;
1169 
1170     if (kstrtou8_from_user(user_buf, count, 0, &value))
1171         return -EINVAL;
1172 
1173     if (value != 1)
1174         return -EINVAL;
1175 
1176     schedule_work(&drvr->bus_reset);
1177 
1178     return count;
1179 }
1180 
1181 static const struct file_operations bus_reset_fops = {
1182     .open   = simple_open,
1183     .llseek = no_llseek,
1184     .write  = bus_reset_write,
1185 };
1186 
1187 static int brcmf_bus_started(struct brcmf_pub *drvr, struct cfg80211_ops *ops)
1188 {
1189     int ret = -1;
1190     struct brcmf_bus *bus_if = drvr->bus_if;
1191     struct brcmf_if *ifp;
1192     struct brcmf_if *p2p_ifp;
1193 
1194     brcmf_dbg(TRACE, "\n");
1195 
1196     /* add primary networking interface */
1197     ifp = brcmf_add_if(drvr, 0, 0, false, "wlan%d",
1198                is_valid_ether_addr(drvr->settings->mac) ? drvr->settings->mac : NULL);
1199     if (IS_ERR(ifp))
1200         return PTR_ERR(ifp);
1201 
1202     p2p_ifp = NULL;
1203 
1204     /* signal bus ready */
1205     brcmf_bus_change_state(bus_if, BRCMF_BUS_UP);
1206 
1207     /* do bus specific preinit here */
1208     ret = brcmf_bus_preinit(bus_if);
1209     if (ret < 0)
1210         goto fail;
1211 
1212     /* Bus is ready, do any initialization */
1213     ret = brcmf_c_preinit_dcmds(ifp);
1214     if (ret < 0)
1215         goto fail;
1216 
1217     brcmf_feat_attach(drvr);
1218 
1219     ret = brcmf_proto_init_done(drvr);
1220     if (ret < 0)
1221         goto fail;
1222 
1223     brcmf_proto_add_if(drvr, ifp);
1224 
1225     drvr->config = brcmf_cfg80211_attach(drvr, ops,
1226                          drvr->settings->p2p_enable);
1227     if (drvr->config == NULL) {
1228         ret = -ENOMEM;
1229         goto fail;
1230     }
1231 
1232     ret = brcmf_net_attach(ifp, false);
1233 
1234     if ((!ret) && (drvr->settings->p2p_enable)) {
1235         p2p_ifp = drvr->iflist[1];
1236         if (p2p_ifp)
1237             ret = brcmf_net_p2p_attach(p2p_ifp);
1238     }
1239 
1240     if (ret)
1241         goto fail;
1242 
1243 #ifdef CONFIG_INET
1244     drvr->inetaddr_notifier.notifier_call = brcmf_inetaddr_changed;
1245     ret = register_inetaddr_notifier(&drvr->inetaddr_notifier);
1246     if (ret)
1247         goto fail;
1248 
1249 #if IS_ENABLED(CONFIG_IPV6)
1250     drvr->inet6addr_notifier.notifier_call = brcmf_inet6addr_changed;
1251     ret = register_inet6addr_notifier(&drvr->inet6addr_notifier);
1252     if (ret) {
1253         unregister_inetaddr_notifier(&drvr->inetaddr_notifier);
1254         goto fail;
1255     }
1256 #endif
1257 #endif /* CONFIG_INET */
1258 
1259     INIT_WORK(&drvr->bus_reset, brcmf_core_bus_reset);
1260 
1261     /* populate debugfs */
1262     brcmf_debugfs_add_entry(drvr, "revinfo", brcmf_revinfo_read);
1263     debugfs_create_file("reset", 0600, brcmf_debugfs_get_devdir(drvr), drvr,
1264                 &bus_reset_fops);
1265     brcmf_feat_debugfs_create(drvr);
1266     brcmf_proto_debugfs_create(drvr);
1267     brcmf_bus_debugfs_create(bus_if);
1268 
1269     return 0;
1270 
1271 fail:
1272     bphy_err(drvr, "failed: %d\n", ret);
1273     if (drvr->config) {
1274         brcmf_cfg80211_detach(drvr->config);
1275         drvr->config = NULL;
1276     }
1277     brcmf_net_detach(ifp->ndev, false);
1278     if (p2p_ifp)
1279         brcmf_net_detach(p2p_ifp->ndev, false);
1280     drvr->iflist[0] = NULL;
1281     drvr->iflist[1] = NULL;
1282     if (drvr->settings->ignore_probe_fail)
1283         ret = 0;
1284 
1285     return ret;
1286 }
1287 
1288 int brcmf_alloc(struct device *dev, struct brcmf_mp_device *settings)
1289 {
1290     struct wiphy *wiphy;
1291     struct cfg80211_ops *ops;
1292     struct brcmf_pub *drvr = NULL;
1293 
1294     brcmf_dbg(TRACE, "Enter\n");
1295 
1296     ops = brcmf_cfg80211_get_ops(settings);
1297     if (!ops)
1298         return -ENOMEM;
1299 
1300     wiphy = wiphy_new(ops, sizeof(*drvr));
1301     if (!wiphy) {
1302         kfree(ops);
1303         return -ENOMEM;
1304     }
1305 
1306     set_wiphy_dev(wiphy, dev);
1307     drvr = wiphy_priv(wiphy);
1308     drvr->wiphy = wiphy;
1309     drvr->ops = ops;
1310     drvr->bus_if = dev_get_drvdata(dev);
1311     drvr->bus_if->drvr = drvr;
1312     drvr->settings = settings;
1313 
1314     return 0;
1315 }
1316 
1317 int brcmf_attach(struct device *dev)
1318 {
1319     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1320     struct brcmf_pub *drvr = bus_if->drvr;
1321     int ret = 0;
1322     int i;
1323 
1324     brcmf_dbg(TRACE, "Enter\n");
1325 
1326     for (i = 0; i < ARRAY_SIZE(drvr->if2bss); i++)
1327         drvr->if2bss[i] = BRCMF_BSSIDX_INVALID;
1328 
1329     mutex_init(&drvr->proto_block);
1330 
1331     /* Link to bus module */
1332     drvr->hdrlen = 0;
1333 
1334     /* Attach and link in the protocol */
1335     ret = brcmf_proto_attach(drvr);
1336     if (ret != 0) {
1337         bphy_err(drvr, "brcmf_prot_attach failed\n");
1338         goto fail;
1339     }
1340 
1341     /* Attach to events important for core code */
1342     brcmf_fweh_register(drvr, BRCMF_E_PSM_WATCHDOG,
1343                 brcmf_psm_watchdog_notify);
1344 
1345     /* attach firmware event handler */
1346     brcmf_fweh_attach(drvr);
1347 
1348     ret = brcmf_bus_started(drvr, drvr->ops);
1349     if (ret != 0) {
1350         bphy_err(drvr, "dongle is not responding: err=%d\n", ret);
1351         goto fail;
1352     }
1353 
1354     return 0;
1355 
1356 fail:
1357     brcmf_detach(dev);
1358 
1359     return ret;
1360 }
1361 
1362 void brcmf_bus_add_txhdrlen(struct device *dev, uint len)
1363 {
1364     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1365     struct brcmf_pub *drvr = bus_if->drvr;
1366 
1367     if (drvr) {
1368         drvr->hdrlen += len;
1369     }
1370 }
1371 
1372 void brcmf_dev_reset(struct device *dev)
1373 {
1374     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1375     struct brcmf_pub *drvr = bus_if->drvr;
1376 
1377     if (drvr == NULL)
1378         return;
1379 
1380     if (drvr->iflist[0])
1381         brcmf_fil_cmd_int_set(drvr->iflist[0], BRCMF_C_TERMINATED, 1);
1382 }
1383 
1384 void brcmf_dev_coredump(struct device *dev)
1385 {
1386     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1387 
1388     if (brcmf_debug_create_memdump(bus_if, NULL, 0) < 0)
1389         brcmf_dbg(TRACE, "failed to create coredump\n");
1390 }
1391 
1392 void brcmf_fw_crashed(struct device *dev)
1393 {
1394     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1395     struct brcmf_pub *drvr = bus_if->drvr;
1396 
1397     bphy_err(drvr, "Firmware has halted or crashed\n");
1398 
1399     brcmf_dev_coredump(dev);
1400 
1401     schedule_work(&drvr->bus_reset);
1402 }
1403 
1404 void brcmf_detach(struct device *dev)
1405 {
1406     s32 i;
1407     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1408     struct brcmf_pub *drvr = bus_if->drvr;
1409 
1410     brcmf_dbg(TRACE, "Enter\n");
1411 
1412     if (drvr == NULL)
1413         return;
1414 
1415 #ifdef CONFIG_INET
1416     unregister_inetaddr_notifier(&drvr->inetaddr_notifier);
1417 #endif
1418 
1419 #if IS_ENABLED(CONFIG_IPV6)
1420     unregister_inet6addr_notifier(&drvr->inet6addr_notifier);
1421 #endif
1422 
1423     brcmf_bus_change_state(bus_if, BRCMF_BUS_DOWN);
1424     /* make sure primary interface removed last */
1425     for (i = BRCMF_MAX_IFS - 1; i > -1; i--) {
1426         if (drvr->iflist[i])
1427             brcmf_remove_interface(drvr->iflist[i], false);
1428     }
1429     brcmf_bus_stop(drvr->bus_if);
1430 
1431     brcmf_fweh_detach(drvr);
1432     brcmf_proto_detach(drvr);
1433 
1434     if (drvr->mon_if) {
1435         brcmf_net_detach(drvr->mon_if->ndev, false);
1436         drvr->mon_if = NULL;
1437     }
1438 
1439     if (drvr->config) {
1440         brcmf_p2p_detach(&drvr->config->p2p);
1441         brcmf_cfg80211_detach(drvr->config);
1442         drvr->config = NULL;
1443     }
1444 }
1445 
1446 void brcmf_free(struct device *dev)
1447 {
1448     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1449     struct brcmf_pub *drvr = bus_if->drvr;
1450 
1451     if (!drvr)
1452         return;
1453 
1454     bus_if->drvr = NULL;
1455 
1456     kfree(drvr->ops);
1457 
1458     wiphy_free(drvr->wiphy);
1459 }
1460 
1461 s32 brcmf_iovar_data_set(struct device *dev, char *name, void *data, u32 len)
1462 {
1463     struct brcmf_bus *bus_if = dev_get_drvdata(dev);
1464     struct brcmf_if *ifp = bus_if->drvr->iflist[0];
1465 
1466     return brcmf_fil_iovar_data_set(ifp, name, data, len);
1467 }
1468 
1469 static int brcmf_get_pend_8021x_cnt(struct brcmf_if *ifp)
1470 {
1471     return atomic_read(&ifp->pend_8021x_cnt);
1472 }
1473 
1474 int brcmf_netdev_wait_pend8021x(struct brcmf_if *ifp)
1475 {
1476     struct brcmf_pub *drvr = ifp->drvr;
1477     int err;
1478 
1479     err = wait_event_timeout(ifp->pend_8021x_wait,
1480                  !brcmf_get_pend_8021x_cnt(ifp),
1481                  MAX_WAIT_FOR_8021X_TX);
1482 
1483     if (!err)
1484         bphy_err(drvr, "Timed out waiting for no pending 802.1x packets\n");
1485 
1486     return !err;
1487 }
1488 
1489 void brcmf_bus_change_state(struct brcmf_bus *bus, enum brcmf_bus_state state)
1490 {
1491     struct brcmf_pub *drvr = bus->drvr;
1492     struct net_device *ndev;
1493     int ifidx;
1494 
1495     brcmf_dbg(TRACE, "%d -> %d\n", bus->state, state);
1496 
1497     if (!drvr) {
1498         brcmf_dbg(INFO, "ignoring transition, bus not attached yet\n");
1499         return;
1500     }
1501 
1502     bus->state = state;
1503 
1504     if (state == BRCMF_BUS_UP) {
1505         for (ifidx = 0; ifidx < BRCMF_MAX_IFS; ifidx++) {
1506             if ((drvr->iflist[ifidx]) &&
1507                 (drvr->iflist[ifidx]->ndev)) {
1508                 ndev = drvr->iflist[ifidx]->ndev;
1509                 if (netif_queue_stopped(ndev))
1510                     netif_wake_queue(ndev);
1511             }
1512         }
1513     }
1514 }
1515 
1516 int __init brcmf_core_init(void)
1517 {
1518     int err;
1519 
1520     err = brcmf_sdio_register();
1521     if (err)
1522         return err;
1523 
1524     err = brcmf_usb_register();
1525     if (err)
1526         goto error_usb_register;
1527 
1528     err = brcmf_pcie_register();
1529     if (err)
1530         goto error_pcie_register;
1531     return 0;
1532 
1533 error_pcie_register:
1534     brcmf_usb_exit();
1535 error_usb_register:
1536     brcmf_sdio_exit();
1537     return err;
1538 }
1539 
1540 void __exit brcmf_core_exit(void)
1541 {
1542     brcmf_sdio_exit();
1543     brcmf_usb_exit();
1544     brcmf_pcie_exit();
1545 }
1546