drivers/net/wireless/mwifiex/init.c

   1 /*
   2  * Marvell Wireless LAN device driver: HW/FW Initialization
   3  *
   4  * Copyright (C) 2011-2014, Marvell International Ltd.
   5  *
   6  * This software file (the "File") is distributed by Marvell International
   7  * Ltd. under the terms of the GNU General Public License Version 2, June 1991
   8  * (the "License").  You may use, redistribute and/or modify this File in
   9  * accordance with the terms and conditions of the License, a copy of which
  10  * is available by writing to the Free Software Foundation, Inc.,
  11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
  12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
  13  *
  14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
  15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
  16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
  17  * this warranty disclaimer.
  18  */
  19
  20 #include "decl.h"
  21 #include "ioctl.h"
  22 #include "util.h"
  23 #include "fw.h"
  24 #include "main.h"
  25 #include "wmm.h"
  26 #include "11n.h"
  27
  28 /*
  29  * This function adds a BSS priority table to the table list.
  30  *
  31  * The function allocates a new BSS priority table node and adds it to
  32  * the end of BSS priority table list, kept in driver memory.
  33  */
  34 static int mwifiex_add_bss_prio_tbl(struct mwifiex_private *priv)
  35 {
  36         struct mwifiex_adapter *adapter = priv->adapter;
  37         struct mwifiex_bss_prio_node *bss_prio;
  38         struct mwifiex_bss_prio_tbl *tbl = adapter->bss_prio_tbl;
  39         unsigned long flags;
  40
  41         bss_prio = kzalloc(sizeof(struct mwifiex_bss_prio_node), GFP_KERNEL);
  42         if (!bss_prio)
  43                 return -ENOMEM;
  44
  45         bss_prio->priv = priv;
  46         INIT_LIST_HEAD(&bss_prio->list);
  47
  48         spin_lock_irqsave(&tbl[priv->bss_priority].bss_prio_lock, flags);
  49         list_add_tail(&bss_prio->list, &tbl[priv->bss_priority].bss_prio_head);
  50         spin_unlock_irqrestore(&tbl[priv->bss_priority].bss_prio_lock, flags);
  51
  52         return 0;
  53 }
  54
  55 /*
  56  * This function initializes the private structure and sets default
  57  * values to the members.
  58  *
  59  * Additionally, it also initializes all the locks and sets up all the
  60  * lists.
  61  */
  62 int mwifiex_init_priv(struct mwifiex_private *priv)
  63 {
  64         u32 i;
  65
  66         priv->media_connected = false;
  67         memset(priv->curr_addr, 0xff, ETH_ALEN);
  68
  69         priv->pkt_tx_ctrl = 0;
  70         priv->bss_mode = NL80211_IFTYPE_UNSPECIFIED;
  71         priv->data_rate = 0;    /* Initially indicate the rate as auto */
  72         priv->is_data_rate_auto = true;
  73         priv->bcn_avg_factor = DEFAULT_BCN_AVG_FACTOR;
  74         priv->data_avg_factor = DEFAULT_DATA_AVG_FACTOR;
  75
  76         priv->sec_info.wep_enabled = 0;
  77         priv->sec_info.authentication_mode = NL80211_AUTHTYPE_OPEN_SYSTEM;
  78         priv->sec_info.encryption_mode = 0;
  79         for (i = 0; i < ARRAY_SIZE(priv->wep_key); i++)
  80                 memset(&priv->wep_key[i], 0, sizeof(struct mwifiex_wep_key));
  81         priv->wep_key_curr_index = 0;
  82         priv->curr_pkt_filter = HostCmd_ACT_MAC_RX_ON | HostCmd_ACT_MAC_TX_ON |
  83                                 HostCmd_ACT_MAC_ETHERNETII_ENABLE;
  84
  85         priv->beacon_period = 100; /* beacon interval */ ;
  86         priv->attempted_bss_desc = NULL;
  87         memset(&priv->curr_bss_params, 0, sizeof(priv->curr_bss_params));
  88         priv->listen_interval = MWIFIEX_DEFAULT_LISTEN_INTERVAL;
  89
  90         memset(&priv->prev_ssid, 0, sizeof(priv->prev_ssid));
  91         memset(&priv->prev_bssid, 0, sizeof(priv->prev_bssid));
  92         memset(&priv->assoc_rsp_buf, 0, sizeof(priv->assoc_rsp_buf));
  93         priv->assoc_rsp_size = 0;
  94         priv->adhoc_channel = DEFAULT_AD_HOC_CHANNEL;
  95         priv->atim_window = 0;
  96         priv->adhoc_state = ADHOC_IDLE;
  97         priv->tx_power_level = 0;
  98         priv->max_tx_power_level = 0;
  99         priv->min_tx_power_level = 0;
 100         priv->tx_rate = 0;
 101         priv->rxpd_htinfo = 0;
 102         priv->rxpd_rate = 0;
 103         priv->rate_bitmap = 0;
 104         priv->data_rssi_last = 0;
 105         priv->data_rssi_avg = 0;
 106         priv->data_nf_avg = 0;
 107         priv->data_nf_last = 0;
 108         priv->bcn_rssi_last = 0;
 109         priv->bcn_rssi_avg = 0;
 110         priv->bcn_nf_avg = 0;
 111         priv->bcn_nf_last = 0;
 112         memset(&priv->wpa_ie, 0, sizeof(priv->wpa_ie));
 113         memset(&priv->aes_key, 0, sizeof(priv->aes_key));
 114         priv->wpa_ie_len = 0;
 115         priv->wpa_is_gtk_set = false;
 116
 117         memset(&priv->assoc_tlv_buf, 0, sizeof(priv->assoc_tlv_buf));
 118         priv->assoc_tlv_buf_len = 0;
 119         memset(&priv->wps, 0, sizeof(priv->wps));
 120         memset(&priv->gen_ie_buf, 0, sizeof(priv->gen_ie_buf));
 121         priv->gen_ie_buf_len = 0;
 122         memset(priv->vs_ie, 0, sizeof(priv->vs_ie));
 123
 124         priv->wmm_required = true;
 125         priv->wmm_enabled = false;
 126         priv->wmm_qosinfo = 0;
 127         priv->curr_bcn_buf = NULL;
 128         priv->curr_bcn_size = 0;
 129         priv->wps_ie = NULL;
 130         priv->wps_ie_len = 0;
 131         priv->ap_11n_enabled = 0;
 132         memset(&priv->roc_cfg, 0, sizeof(priv->roc_cfg));
 133
 134         priv->scan_block = false;
 135
 136         priv->csa_chan = 0;
 137         priv->csa_expire_time = 0;
 138         priv->del_list_idx = 0;
 139         priv->hs2_enabled = false;
 140         memcpy(priv->tos_to_tid_inv, tos_to_tid_inv, MAX_NUM_TID);
 141
 142         return mwifiex_add_bss_prio_tbl(priv);
 143 }
 144
 145 /*
 146  * This function allocates buffers for members of the adapter
 147  * structure.
 148  *
 149  * The memory allocated includes scan table, command buffers, and
 150  * sleep confirm command buffer. In addition, the queues are
 151  * also initialized.
 152  */
 153 static int mwifiex_allocate_adapter(struct mwifiex_adapter *adapter)
 154 {
 155         int ret;
 156
 157         /* Allocate command buffer */
 158         ret = mwifiex_alloc_cmd_buffer(adapter);
 159         if (ret) {
 160                 dev_err(adapter->dev, "%s: failed to alloc cmd buffer\n",
 161                         __func__);
 162                 return -1;
 163         }
 164
 165         adapter->sleep_cfm =
 166                 dev_alloc_skb(sizeof(struct mwifiex_opt_sleep_confirm)
 167                               + INTF_HEADER_LEN);
 168
 169         if (!adapter->sleep_cfm) {
 170                 dev_err(adapter->dev, "%s: failed to alloc sleep cfm"
 171                         " cmd buffer\n", __func__);
 172                 return -1;
 173         }
 174         skb_reserve(adapter->sleep_cfm, INTF_HEADER_LEN);
 175
 176         return 0;
 177 }
 178
 179 /*
 180  * This function initializes the adapter structure and sets default
 181  * values to the members of adapter.
 182  *
 183  * This also initializes the WMM related parameters in the driver private
 184  * structures.
 185  */
 186 static void mwifiex_init_adapter(struct mwifiex_adapter *adapter)
 187 {
 188         struct mwifiex_opt_sleep_confirm *sleep_cfm_buf = NULL;
 189
 190         skb_put(adapter->sleep_cfm, sizeof(struct mwifiex_opt_sleep_confirm));
 191
 192         adapter->cmd_sent = false;
 193
 194         if (adapter->iface_type == MWIFIEX_SDIO)
 195                 adapter->data_sent = true;
 196         else
 197                 adapter->data_sent = false;
 198
 199         adapter->cmd_resp_received = false;
 200         adapter->event_received = false;
 201         adapter->data_received = false;
 202
 203         adapter->surprise_removed = false;
 204
 205         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
 206
 207         adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM;
 208         adapter->ps_state = PS_STATE_AWAKE;
 209         adapter->need_to_wakeup = false;
 210
 211         adapter->scan_mode = HostCmd_BSS_MODE_ANY;
 212         adapter->specific_scan_time = MWIFIEX_SPECIFIC_SCAN_CHAN_TIME;
 213         adapter->active_scan_time = MWIFIEX_ACTIVE_SCAN_CHAN_TIME;
 214         adapter->passive_scan_time = MWIFIEX_PASSIVE_SCAN_CHAN_TIME;
 215         adapter->scan_chan_gap_time = MWIFIEX_DEF_SCAN_CHAN_GAP_TIME;
 216
 217         adapter->scan_probes = 1;
 218
 219         adapter->multiple_dtim = 1;
 220
 221         adapter->local_listen_interval = 0;     /* default value in firmware
 222                                                    will be used */
 223
 224         adapter->is_deep_sleep = false;
 225
 226         adapter->delay_null_pkt = false;
 227         adapter->delay_to_ps = 1000;
 228         adapter->enhanced_ps_mode = PS_MODE_AUTO;
 229
 230         adapter->gen_null_pkt = false;  /* Disable NULL Pkg generation by
 231                                            default */
 232         adapter->pps_uapsd_mode = false; /* Disable pps/uapsd mode by
 233                                            default */
 234         adapter->pm_wakeup_card_req = false;
 235
 236         adapter->pm_wakeup_fw_try = false;
 237
 238         adapter->curr_tx_buf_size = MWIFIEX_TX_DATA_BUF_SIZE_2K;
 239
 240         adapter->is_hs_configured = false;
 241         adapter->hs_cfg.conditions = cpu_to_le32(HS_CFG_COND_DEF);
 242         adapter->hs_cfg.gpio = HS_CFG_GPIO_DEF;
 243         adapter->hs_cfg.gap = HS_CFG_GAP_DEF;
 244         adapter->hs_activated = false;
 245
 246         memset(adapter->event_body, 0, sizeof(adapter->event_body));
 247         adapter->hw_dot_11n_dev_cap = 0;
 248         adapter->hw_dev_mcs_support = 0;
 249         adapter->sec_chan_offset = 0;
 250         adapter->adhoc_11n_enabled = false;
 251
 252         mwifiex_wmm_init(adapter);
 253
 254         if (adapter->sleep_cfm) {
 255                 sleep_cfm_buf = (struct mwifiex_opt_sleep_confirm *)
 256                                                 adapter->sleep_cfm->data;
 257                 memset(sleep_cfm_buf, 0, adapter->sleep_cfm->len);
 258                 sleep_cfm_buf->command =
 259                                 cpu_to_le16(HostCmd_CMD_802_11_PS_MODE_ENH);
 260                 sleep_cfm_buf->size =
 261                                 cpu_to_le16(adapter->sleep_cfm->len);
 262                 sleep_cfm_buf->result = 0;
 263                 sleep_cfm_buf->action = cpu_to_le16(SLEEP_CONFIRM);
 264                 sleep_cfm_buf->resp_ctrl = cpu_to_le16(RESP_NEEDED);
 265         }
 266         memset(&adapter->sleep_params, 0, sizeof(adapter->sleep_params));
 267         memset(&adapter->sleep_period, 0, sizeof(adapter->sleep_period));
 268         adapter->tx_lock_flag = false;
 269         adapter->null_pkt_interval = 0;
 270         adapter->fw_bands = 0;
 271         adapter->config_bands = 0;
 272         adapter->adhoc_start_band = 0;
 273         adapter->scan_channels = NULL;
 274         adapter->fw_release_number = 0;
 275         adapter->fw_cap_info = 0;
 276         memset(&adapter->upld_buf, 0, sizeof(adapter->upld_buf));
 277         adapter->event_cause = 0;
 278         adapter->region_code = 0;
 279         adapter->bcn_miss_time_out = DEFAULT_BCN_MISS_TIMEOUT;
 280         adapter->adhoc_awake_period = 0;
 281         memset(&adapter->arp_filter, 0, sizeof(adapter->arp_filter));
 282         adapter->arp_filter_size = 0;
 283         adapter->max_mgmt_ie_index = MAX_MGMT_IE_INDEX;
 284         adapter->ext_scan = true;
 285         adapter->key_api_major_ver = 0;
 286         adapter->key_api_minor_ver = 0;
 287 }
 288
 289 /*
 290  * This function sets trans_start per tx_queue
 291  */
 292 void mwifiex_set_trans_start(struct net_device *dev)
 293 {
 294         int i;
 295
 296         for (i = 0; i < dev->num_tx_queues; i++)
 297                 netdev_get_tx_queue(dev, i)->trans_start = jiffies;
 298
 299         dev->trans_start = jiffies;
 300 }
 301
 302 /*
 303  * This function wakes up all queues in net_device
 304  */
 305 void mwifiex_wake_up_net_dev_queue(struct net_device *netdev,
 306                                         struct mwifiex_adapter *adapter)
 307 {
 308         unsigned long dev_queue_flags;
 309         unsigned int i;
 310
 311         spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
 312
 313         for (i = 0; i < netdev->num_tx_queues; i++) {
 314                 struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
 315
 316                 if (netif_tx_queue_stopped(txq))
 317                         netif_tx_wake_queue(txq);
 318         }
 319
 320         spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
 321 }
 322
 323 /*
 324  * This function stops all queues in net_device
 325  */
 326 void mwifiex_stop_net_dev_queue(struct net_device *netdev,
 327                                         struct mwifiex_adapter *adapter)
 328 {
 329         unsigned long dev_queue_flags;
 330         unsigned int i;
 331
 332         spin_lock_irqsave(&adapter->queue_lock, dev_queue_flags);
 333
 334         for (i = 0; i < netdev->num_tx_queues; i++) {
 335                 struct netdev_queue *txq = netdev_get_tx_queue(netdev, i);
 336
 337                 if (!netif_tx_queue_stopped(txq))
 338                         netif_tx_stop_queue(txq);
 339         }
 340
 341         spin_unlock_irqrestore(&adapter->queue_lock, dev_queue_flags);
 342 }
 343
 344 /*
 345  *  This function releases the lock variables and frees the locks and
 346  *  associated locks.
 347  */
 348 static void mwifiex_free_lock_list(struct mwifiex_adapter *adapter)
 349 {
 350         struct mwifiex_private *priv;
 351         s32 i, j;
 352
 353         /* Free lists */
 354         list_del(&adapter->cmd_free_q);
 355         list_del(&adapter->cmd_pending_q);
 356         list_del(&adapter->scan_pending_q);
 357
 358         for (i = 0; i < adapter->priv_num; i++)
 359                 list_del(&adapter->bss_prio_tbl[i].bss_prio_head);
 360
 361         for (i = 0; i < adapter->priv_num; i++) {
 362                 if (adapter->priv[i]) {
 363                         priv = adapter->priv[i];
 364                         for (j = 0; j < MAX_NUM_TID; ++j)
 365                                 list_del(&priv->wmm.tid_tbl_ptr[j].ra_list);
 366                         list_del(&priv->tx_ba_stream_tbl_ptr);
 367                         list_del(&priv->rx_reorder_tbl_ptr);
 368                         list_del(&priv->sta_list);
 369                 }
 370         }
 371 }
 372
 373 /*
 374  * This function performs cleanup for adapter structure.
 375  *
 376  * The cleanup is done recursively, by canceling all pending
 377  * commands, freeing the member buffers previously allocated
 378  * (command buffers, scan table buffer, sleep confirm command
 379  * buffer), stopping the timers and calling the cleanup routines
 380  * for every interface.
 381  */
 382 static void
 383 mwifiex_adapter_cleanup(struct mwifiex_adapter *adapter)
 384 {
 385         int idx;
 386
 387         if (!adapter) {
 388                 pr_err("%s: adapter is NULL\n", __func__);
 389                 return;
 390         }
 391
 392         mwifiex_cancel_all_pending_cmd(adapter);
 393
 394         /* Free lock variables */
 395         mwifiex_free_lock_list(adapter);
 396
 397         /* Free command buffer */
 398         dev_dbg(adapter->dev, "info: free cmd buffer\n");
 399         mwifiex_free_cmd_buffer(adapter);
 400
 401         for (idx = 0; idx < adapter->num_mem_types; idx++) {
 402                 struct memory_type_mapping *entry =
 403                                 &adapter->mem_type_mapping_tbl[idx];
 404
 405                 if (entry->mem_ptr) {
 406                         vfree(entry->mem_ptr);
 407                         entry->mem_ptr = NULL;
 408                 }
 409                 entry->mem_size = 0;
 410         }
 411
 412         if (adapter->sleep_cfm)
 413                 dev_kfree_skb_any(adapter->sleep_cfm);
 414 }
 415
 416 /*
 417  *  This function intializes the lock variables and
 418  *  the list heads.
 419  */
 420 int mwifiex_init_lock_list(struct mwifiex_adapter *adapter)
 421 {
 422         struct mwifiex_private *priv;
 423         s32 i, j;
 424
 425         spin_lock_init(&adapter->mwifiex_lock);
 426         spin_lock_init(&adapter->int_lock);
 427         spin_lock_init(&adapter->main_proc_lock);
 428         spin_lock_init(&adapter->mwifiex_cmd_lock);
 429         spin_lock_init(&adapter->queue_lock);
 430         for (i = 0; i < adapter->priv_num; i++) {
 431                 if (adapter->priv[i]) {
 432                         priv = adapter->priv[i];
 433                         spin_lock_init(&priv->rx_pkt_lock);
 434                         spin_lock_init(&priv->wmm.ra_list_spinlock);
 435                         spin_lock_init(&priv->curr_bcn_buf_lock);
 436                         spin_lock_init(&priv->sta_list_spinlock);
 437                 }
 438         }
 439
 440         /* Initialize cmd_free_q */
 441         INIT_LIST_HEAD(&adapter->cmd_free_q);
 442         /* Initialize cmd_pending_q */
 443         INIT_LIST_HEAD(&adapter->cmd_pending_q);
 444         /* Initialize scan_pending_q */
 445         INIT_LIST_HEAD(&adapter->scan_pending_q);
 446
 447         spin_lock_init(&adapter->cmd_free_q_lock);
 448         spin_lock_init(&adapter->cmd_pending_q_lock);
 449         spin_lock_init(&adapter->scan_pending_q_lock);
 450         spin_lock_init(&adapter->rx_proc_lock);
 451
 452         skb_queue_head_init(&adapter->usb_rx_data_q);
 453         skb_queue_head_init(&adapter->rx_data_q);
 454
 455         for (i = 0; i < adapter->priv_num; ++i) {
 456                 INIT_LIST_HEAD(&adapter->bss_prio_tbl[i].bss_prio_head);
 457                 spin_lock_init(&adapter->bss_prio_tbl[i].bss_prio_lock);
 458         }
 459
 460         for (i = 0; i < adapter->priv_num; i++) {
 461                 if (!adapter->priv[i])
 462                         continue;
 463                 priv = adapter->priv[i];
 464                 for (j = 0; j < MAX_NUM_TID; ++j)
 465                         INIT_LIST_HEAD(&priv->wmm.tid_tbl_ptr[j].ra_list);
 466                 INIT_LIST_HEAD(&priv->tx_ba_stream_tbl_ptr);
 467                 INIT_LIST_HEAD(&priv->rx_reorder_tbl_ptr);
 468                 INIT_LIST_HEAD(&priv->sta_list);
 469                 skb_queue_head_init(&priv->tdls_txq);
 470
 471                 spin_lock_init(&priv->tx_ba_stream_tbl_lock);
 472                 spin_lock_init(&priv->rx_reorder_tbl_lock);
 473         }
 474
 475         return 0;
 476 }
 477
 478 /*
 479  * This function initializes the firmware.
 480  *
 481  * The following operations are performed sequentially -
 482  *      - Allocate adapter structure
 483  *      - Initialize the adapter structure
 484  *      - Initialize the private structure
 485  *      - Add BSS priority tables to the adapter structure
 486  *      - For each interface, send the init commands to firmware
 487  *      - Send the first command in command pending queue, if available
 488  */
 489 int mwifiex_init_fw(struct mwifiex_adapter *adapter)
 490 {
 491         int ret;
 492         struct mwifiex_private *priv;
 493         u8 i, first_sta = true;
 494         int is_cmd_pend_q_empty;
 495         unsigned long flags;
 496
 497         adapter->hw_status = MWIFIEX_HW_STATUS_INITIALIZING;
 498
 499         /* Allocate memory for member of adapter structure */
 500         ret = mwifiex_allocate_adapter(adapter);
 501         if (ret)
 502                 return -1;
 503
 504         /* Initialize adapter structure */
 505         mwifiex_init_adapter(adapter);
 506
 507         for (i = 0; i < adapter->priv_num; i++) {
 508                 if (adapter->priv[i]) {
 509                         priv = adapter->priv[i];
 510
 511                         /* Initialize private structure */
 512                         ret = mwifiex_init_priv(priv);
 513                         if (ret)
 514                                 return -1;
 515                 }
 516         }
 517
 518         if (adapter->if_ops.init_fw_port) {
 519                 if (adapter->if_ops.init_fw_port(adapter))
 520                         return -1;
 521         }
 522
 523         for (i = 0; i < adapter->priv_num; i++) {
 524                 if (adapter->priv[i]) {
 525                         ret = mwifiex_sta_init_cmd(adapter->priv[i], first_sta);
 526                         if (ret == -1)
 527                                 return -1;
 528
 529                         first_sta = false;
 530                 }
 531         }
 532
 533         spin_lock_irqsave(&adapter->cmd_pending_q_lock, flags);
 534         is_cmd_pend_q_empty = list_empty(&adapter->cmd_pending_q);
 535         spin_unlock_irqrestore(&adapter->cmd_pending_q_lock, flags);
 536         if (!is_cmd_pend_q_empty) {
 537                 /* Send the first command in queue and return */
 538                 if (mwifiex_main_process(adapter) != -1)
 539                         ret = -EINPROGRESS;
 540         } else {
 541                 adapter->hw_status = MWIFIEX_HW_STATUS_READY;
 542         }
 543
 544         return ret;
 545 }
 546
 547 /*
 548  * This function deletes the BSS priority tables.
 549  *
 550  * The function traverses through all the allocated BSS priority nodes
 551  * in every BSS priority table and frees them.
 552  */
 553 static void mwifiex_delete_bss_prio_tbl(struct mwifiex_private *priv)
 554 {
 555         int i;
 556         struct mwifiex_adapter *adapter = priv->adapter;
 557         struct mwifiex_bss_prio_node *bssprio_node, *tmp_node;
 558         struct list_head *head;
 559         spinlock_t *lock; /* bss priority lock */
 560         unsigned long flags;
 561
 562         for (i = 0; i < adapter->priv_num; ++i) {
 563                 head = &adapter->bss_prio_tbl[i].bss_prio_head;
 564                 lock = &adapter->bss_prio_tbl[i].bss_prio_lock;
 565                 dev_dbg(adapter->dev, "info: delete BSS priority table,"
 566                                 " bss_type = %d, bss_num = %d, i = %d,"
 567                                 " head = %p\n",
 568                               priv->bss_type, priv->bss_num, i, head);
 569
 570                 {
 571                         spin_lock_irqsave(lock, flags);
 572                         if (list_empty(head)) {
 573                                 spin_unlock_irqrestore(lock, flags);
 574                                 continue;
 575                         }
 576                         list_for_each_entry_safe(bssprio_node, tmp_node, head,
 577                                                  list) {
 578                                 if (bssprio_node->priv == priv) {
 579                                         dev_dbg(adapter->dev, "info: Delete "
 580                                                 "node %p, next = %p\n",
 581                                                 bssprio_node, tmp_node);
 582                                         list_del(&bssprio_node->list);
 583                                         kfree(bssprio_node);
 584                                 }
 585                         }
 586                         spin_unlock_irqrestore(lock, flags);
 587                 }
 588         }
 589 }
 590
 591 /*
 592  * This function frees the private structure, including cleans
 593  * up the TX and RX queues and frees the BSS priority tables.
 594  */
 595 void mwifiex_free_priv(struct mwifiex_private *priv)
 596 {
 597         mwifiex_clean_txrx(priv);
 598         mwifiex_delete_bss_prio_tbl(priv);
 599         mwifiex_free_curr_bcn(priv);
 600 }
 601
 602 /*
 603  * This function is used to shutdown the driver.
 604  *
 605  * The following operations are performed sequentially -
 606  *      - Check if already shut down
 607  *      - Make sure the main process has stopped
 608  *      - Clean up the Tx and Rx queues
 609  *      - Delete BSS priority tables
 610  *      - Free the adapter
 611  *      - Notify completion
 612  */
 613 int
 614 mwifiex_shutdown_drv(struct mwifiex_adapter *adapter)
 615 {
 616         int ret = -EINPROGRESS;
 617         struct mwifiex_private *priv;
 618         s32 i;
 619         unsigned long flags;
 620         struct sk_buff *skb;
 621
 622         /* mwifiex already shutdown */
 623         if (adapter->hw_status == MWIFIEX_HW_STATUS_NOT_READY)
 624                 return 0;
 625
 626         adapter->hw_status = MWIFIEX_HW_STATUS_CLOSING;
 627         /* wait for mwifiex_process to complete */
 628         if (adapter->mwifiex_processing) {
 629                 dev_warn(adapter->dev, "main process is still running\n");
 630                 return ret;
 631         }
 632
 633         /* cancel current command */
 634         if (adapter->curr_cmd) {
 635                 dev_warn(adapter->dev, "curr_cmd is still in processing\n");
 636                 del_timer_sync(&adapter->cmd_timer);
 637                 mwifiex_recycle_cmd_node(adapter, adapter->curr_cmd);
 638                 adapter->curr_cmd = NULL;
 639         }
 640
 641         /* shut down mwifiex */
 642         dev_dbg(adapter->dev, "info: shutdown mwifiex...\n");
 643
 644         /* Clean up Tx/Rx queues and delete BSS priority table */
 645         for (i = 0; i < adapter->priv_num; i++) {
 646                 if (adapter->priv[i]) {
 647                         priv = adapter->priv[i];
 648
 649                         mwifiex_clean_txrx(priv);
 650                         mwifiex_delete_bss_prio_tbl(priv);
 651                 }
 652         }
 653
 654         spin_lock_irqsave(&adapter->rx_proc_lock, flags);
 655
 656         while ((skb = skb_dequeue(&adapter->rx_data_q))) {
 657                 struct mwifiex_rxinfo *rx_info = MWIFIEX_SKB_RXCB(skb);
 658
 659                 atomic_dec(&adapter->rx_pending);
 660                 priv = adapter->priv[rx_info->bss_num];
 661                 if (priv)
 662                         priv->stats.rx_dropped++;
 663
 664                 dev_kfree_skb_any(skb);
 665         }
 666
 667         spin_unlock_irqrestore(&adapter->rx_proc_lock, flags);
 668
 669         spin_lock(&adapter->mwifiex_lock);
 670
 671         if (adapter->if_ops.data_complete) {
 672                 while ((skb = skb_dequeue(&adapter->usb_rx_data_q))) {
 673                         struct mwifiex_rxinfo *rx_info = MWIFIEX_SKB_RXCB(skb);
 674
 675                         priv = adapter->priv[rx_info->bss_num];
 676                         if (priv)
 677                                 priv->stats.rx_dropped++;
 678
 679                         dev_kfree_skb_any(skb);
 680                         adapter->if_ops.data_complete(adapter);
 681                 }
 682         }
 683
 684         mwifiex_adapter_cleanup(adapter);
 685
 686         spin_unlock(&adapter->mwifiex_lock);
 687
 688         /* Notify completion */
 689         ret = mwifiex_shutdown_fw_complete(adapter);
 690
 691         return ret;
 692 }
 693
 694 /*
 695  * This function downloads the firmware to the card.
 696  *
 697  * The actual download is preceded by two sanity checks -
 698  *      - Check if firmware is already running
 699  *      - Check if the interface is the winner to download the firmware
 700  *
 701  * ...and followed by another -
 702  *      - Check if the firmware is downloaded successfully
 703  *
 704  * After download is successfully completed, the host interrupts are enabled.
 705  */
 706 int mwifiex_dnld_fw(struct mwifiex_adapter *adapter,
 707                     struct mwifiex_fw_image *pmfw)
 708 {
 709         int ret;
 710         u32 poll_num = 1;
 711
 712         if (adapter->if_ops.check_fw_status) {
 713                 adapter->winner = 0;
 714
 715                 /* check if firmware is already running */
 716                 ret = adapter->if_ops.check_fw_status(adapter, poll_num);
 717                 if (!ret) {
 718                         dev_notice(adapter->dev,
 719                                    "WLAN FW already running! Skip FW dnld\n");
 720                         return 0;
 721                 }
 722
 723                 poll_num = MAX_FIRMWARE_POLL_TRIES;
 724
 725                 /* check if we are the winner for downloading FW */
 726                 if (!adapter->winner) {
 727                         dev_notice(adapter->dev,
 728                                    "FW already running! Skip FW dnld\n");
 729                         goto poll_fw;
 730                 }
 731         }
 732
 733         if (pmfw) {
 734                 /* Download firmware with helper */
 735                 ret = adapter->if_ops.prog_fw(adapter, pmfw);
 736                 if (ret) {
 737                         dev_err(adapter->dev, "prog_fw failed ret=%#x\n", ret);
 738                         return ret;
 739                 }
 740         }
 741
 742 poll_fw:
 743         /* Check if the firmware is downloaded successfully or not */
 744         ret = adapter->if_ops.check_fw_status(adapter, poll_num);
 745         if (ret)
 746                 dev_err(adapter->dev, "FW failed to be active in time\n");
 747
 748         return ret;
 749 }