Google Git
Sign in
android-kvm / linux / 452218d9fd22505ed790e95b460b0f40cebb95a0 / . / drivers / staging / bcm / Bcmchar.c
blob: 88ce2da531c68394bc802a06e0b01f4119212b51 [file] [log] [blame]
#include <linux/fs.h>
#include "headers.h"
static int bcm_handle_nvm_read_cmd(struct bcm_mini_adapter *ad,
PUCHAR read_data,
struct bcm_nvm_readwrite *nvm_rw)
{
INT status = STATUS_FAILURE;
down(&ad->NVMRdmWrmLock);
if ((ad->IdleMode == TRUE) || (ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad,
DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Device is in Idle/Shutdown Mode\n");
up(&ad->NVMRdmWrmLock);
kfree(read_data);
return -EACCES;
}
status = BeceemNVMRead(ad, (PUINT)read_data,
nvm_rw->uiOffset,
nvm_rw->uiNumBytes);
up(&ad->NVMRdmWrmLock);
if (status != STATUS_SUCCESS) {
kfree(read_data);
return status;
}
if (copy_to_user(nvm_rw->pBuffer, read_data, nvm_rw->uiNumBytes)) {
kfree(read_data);
return -EFAULT;
}
return STATUS_SUCCESS;
}
static int handle_flash2x_adapter(struct bcm_mini_adapter *ad,
PUCHAR read_data,
struct bcm_nvm_readwrite *nvm_rw)
{
/*
* New Requirement:-
* DSD section updation will be allowed in two case:-
* 1. if DSD sig is present in DSD header means dongle
* is ok and updation is fruitfull
* 2. if point 1 failes then user buff should have
* DSD sig. this point ensures that if dongle is
* corrupted then user space program first modify
* the DSD header with valid DSD sig so that this
* as well as further write may be worthwhile.
*
* This restriction has been put assuming that
* if DSD sig is corrupted, DSD data won't be
* considered valid.
*/
INT status;
ULONG dsd_magic_num_in_usr_buff = 0;
status = BcmFlash2xCorruptSig(ad, ad->eActiveDSD);
if (status == STATUS_SUCCESS)
return STATUS_SUCCESS;
if (((nvm_rw->uiOffset + nvm_rw->uiNumBytes) !=
ad->uiNVMDSDSize) ||
(nvm_rw->uiNumBytes < SIGNATURE_SIZE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"DSD Sig is present neither in Flash nor User provided Input..");
up(&ad->NVMRdmWrmLock);
kfree(read_data);
return status;
}
dsd_magic_num_in_usr_buff =
ntohl(*(PUINT)(read_data + nvm_rw->uiNumBytes -
SIGNATURE_SIZE));
if (dsd_magic_num_in_usr_buff != DSD_IMAGE_MAGIC_NUMBER) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"DSD Sig is present neither in Flash nor User provided Input..");
up(&ad->NVMRdmWrmLock);
kfree(read_data);
return status;
}
return STATUS_SUCCESS;
}
/***************************************************************
* Function - bcm_char_open()
*
* Description - This is the "open" entry point for the character
* driver.
*
* Parameters - inode: Pointer to the Inode structure of char device
* filp : File pointer of the char device
*
* Returns - Zero(Success)
****************************************************************/
static int bcm_char_open(struct inode *inode, struct file *filp)
{
struct bcm_mini_adapter *ad = NULL;
struct bcm_tarang_data *tarang = NULL;
ad = GET_BCM_ADAPTER(gblpnetdev);
tarang = kzalloc(sizeof(struct bcm_tarang_data), GFP_KERNEL);
if (!tarang)
return -ENOMEM;
tarang->Adapter = ad;
tarang->RxCntrlMsgBitMask = 0xFFFFFFFF & ~(1 << 0xB);
down(&ad->RxAppControlQueuelock);
tarang->next = ad->pTarangs;
ad->pTarangs = tarang;
up(&ad->RxAppControlQueuelock);
/* Store the Adapter structure */
filp->private_data = tarang;
/* Start Queuing the control response Packets */
atomic_inc(&ad->ApplicationRunning);
nonseekable_open(inode, filp);
return 0;
}
static int bcm_char_release(struct inode *inode, struct file *filp)
{
struct bcm_tarang_data *tarang, *tmp, *ptmp;
struct bcm_mini_adapter *ad = NULL;
struct sk_buff *pkt, *npkt;
tarang = (struct bcm_tarang_data *)filp->private_data;
if (tarang == NULL)
return 0;
ad = tarang->Adapter;
down(&ad->RxAppControlQueuelock);
tmp = ad->pTarangs;
for (ptmp = NULL; tmp; ptmp = tmp, tmp = tmp->next) {
if (tmp == tarang)
break;
}
if (tmp) {
if (!ptmp)
ad->pTarangs = tmp->next;
else
ptmp->next = tmp->next;
} else {
up(&ad->RxAppControlQueuelock);
return 0;
}
pkt = tarang->RxAppControlHead;
while (pkt) {
npkt = pkt->next;
kfree_skb(pkt);
pkt = npkt;
}
up(&ad->RxAppControlQueuelock);
/* Stop Queuing the control response Packets */
atomic_dec(&ad->ApplicationRunning);
kfree(tarang);
/* remove this filp from the asynchronously notified filp's */
filp->private_data = NULL;
return 0;
}
static ssize_t bcm_char_read(struct file *filp,
char __user *buf,
size_t size,
loff_t *f_pos)
{
struct bcm_tarang_data *tarang = filp->private_data;
struct bcm_mini_adapter *ad = tarang->Adapter;
struct sk_buff *packet = NULL;
ssize_t pkt_len = 0;
int wait_ret_val = 0;
unsigned long ret = 0;
wait_ret_val = wait_event_interruptible(
ad->process_read_wait_queue,
(tarang->RxAppControlHead ||
ad->device_removed));
if ((wait_ret_val == -ERESTARTSYS)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Exiting as i've been asked to exit!!!\n");
return wait_ret_val;
}
if (ad->device_removed) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Device Removed... Killing the Apps...\n");
return -ENODEV;
}
if (false == ad->fw_download_done)
return -EACCES;
down(&ad->RxAppControlQueuelock);
if (tarang->RxAppControlHead) {
packet = tarang->RxAppControlHead;
DEQUEUEPACKET(tarang->RxAppControlHead,
tarang->RxAppControlTail);
tarang->AppCtrlQueueLen--;
}
up(&ad->RxAppControlQueuelock);
if (packet) {
pkt_len = packet->len;
ret = copy_to_user(buf, packet->data,
min_t(size_t, pkt_len, size));
if (ret) {
dev_kfree_skb(packet);
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Returning from copy to user failure\n");
return -EFAULT;
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Read %zd Bytes From Adapter packet = %p by process %d!\n",
pkt_len, packet, current->pid);
dev_kfree_skb(packet);
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL, "<\n");
return pkt_len;
}
static int bcm_char_ioctl_reg_read_private(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_rdm_buffer rdm_buff = {0};
struct bcm_ioctl_buffer io_buff;
PCHAR temp_buff;
INT status = STATUS_FAILURE;
UINT buff_len;
u16 temp_value;
int bytes;
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(rdm_buff))
return -EINVAL;
if (copy_from_user(&rdm_buff, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
if (io_buff.OutputLength > USHRT_MAX ||
io_buff.OutputLength == 0) {
return -EINVAL;
}
buff_len = io_buff.OutputLength;
temp_value = 4 - (buff_len % 4);
buff_len += temp_value % 4;
temp_buff = kmalloc(buff_len, GFP_KERNEL);
if (!temp_buff)
return -ENOMEM;
bytes = rdmalt(ad, (UINT)rdm_buff.Register,
(PUINT)temp_buff, buff_len);
if (bytes > 0) {
status = STATUS_SUCCESS;
if (copy_to_user(io_buff.OutputBuffer, temp_buff, bytes)) {
kfree(temp_buff);
return -EFAULT;
}
} else {
status = bytes;
}
kfree(temp_buff);
return status;
}
static int bcm_char_ioctl_reg_write_private(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_wrm_buffer wrm_buff = {0};
struct bcm_ioctl_buffer io_buff;
UINT tmp = 0;
INT status;
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(wrm_buff))
return -EINVAL;
/* Get WrmBuffer structure */
if (copy_from_user(&wrm_buff, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
tmp = wrm_buff.Register & EEPROM_REJECT_MASK;
if (!((ad->pstargetparams->m_u32Customize) & VSG_MODE) &&
((tmp == EEPROM_REJECT_REG_1) ||
(tmp == EEPROM_REJECT_REG_2) ||
(tmp == EEPROM_REJECT_REG_3) ||
(tmp == EEPROM_REJECT_REG_4))) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"EEPROM Access Denied, not in VSG Mode\n");
return -EFAULT;
}
status = wrmalt(ad, (UINT)wrm_buff.Register,
(PUINT)wrm_buff.Data, sizeof(ULONG));
if (status == STATUS_SUCCESS) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL, "WRM Done\n");
} else {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL, "WRM Failed\n");
status = -EFAULT;
}
return status;
}
static int bcm_char_ioctl_eeprom_reg_read(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_rdm_buffer rdm_buff = {0};
struct bcm_ioctl_buffer io_buff;
PCHAR temp_buff = NULL;
UINT tmp = 0;
INT status;
int bytes;
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Device in Idle Mode, Blocking Rdms\n");
return -EACCES;
}
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(rdm_buff))
return -EINVAL;
if (copy_from_user(&rdm_buff, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
if (io_buff.OutputLength > USHRT_MAX ||
io_buff.OutputLength == 0) {
return -EINVAL;
}
temp_buff = kmalloc(io_buff.OutputLength, GFP_KERNEL);
if (!temp_buff)
return STATUS_FAILURE;
if ((((ULONG)rdm_buff.Register & 0x0F000000) != 0x0F000000) ||
((ULONG)rdm_buff.Register & 0x3)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"RDM Done On invalid Address : %x Access Denied.\n",
(int)rdm_buff.Register);
kfree(temp_buff);
return -EINVAL;
}
tmp = rdm_buff.Register & EEPROM_REJECT_MASK;
bytes = rdmaltWithLock(ad, (UINT)rdm_buff.Register,
(PUINT)temp_buff, io_buff.OutputLength);
if (bytes > 0) {
status = STATUS_SUCCESS;
if (copy_to_user(io_buff.OutputBuffer, temp_buff, bytes)) {
kfree(temp_buff);
return -EFAULT;
}
} else {
status = bytes;
}
kfree(temp_buff);
return status;
}
static int bcm_char_ioctl_eeprom_reg_write(void __user *argp,
struct bcm_mini_adapter *ad,
UINT cmd)
{
struct bcm_wrm_buffer wrm_buff = {0};
struct bcm_ioctl_buffer io_buff;
UINT tmp = 0;
INT status;
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Device in Idle Mode, Blocking Wrms\n");
return -EACCES;
}
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(wrm_buff))
return -EINVAL;
/* Get WrmBuffer structure */
if (copy_from_user(&wrm_buff, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
if ((((ULONG)wrm_buff.Register & 0x0F000000) != 0x0F000000) ||
((ULONG)wrm_buff.Register & 0x3)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"WRM Done On invalid Address : %x Access Denied.\n",
(int)wrm_buff.Register);
return -EINVAL;
}
tmp = wrm_buff.Register & EEPROM_REJECT_MASK;
if (!((ad->pstargetparams->m_u32Customize) & VSG_MODE) &&
((tmp == EEPROM_REJECT_REG_1) ||
(tmp == EEPROM_REJECT_REG_2) ||
(tmp == EEPROM_REJECT_REG_3) ||
(tmp == EEPROM_REJECT_REG_4)) &&
(cmd == IOCTL_BCM_REGISTER_WRITE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"EEPROM Access Denied, not in VSG Mode\n");
return -EFAULT;
}
status = wrmaltWithLock(ad, (UINT)wrm_buff.Register,
(PUINT)wrm_buff.Data,
wrm_buff.Length);
if (status == STATUS_SUCCESS) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, OSAL_DBG,
DBG_LVL_ALL, "WRM Done\n");
} else {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL, "WRM Failed\n");
status = -EFAULT;
}
return status;
}
static int bcm_char_ioctl_gpio_set_request(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_gpio_info gpio_info = {0};
struct bcm_ioctl_buffer io_buff;
UCHAR reset_val[4];
UINT value = 0;
UINT bit = 0;
UINT operation = 0;
INT status;
int bytes;
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL,
"GPIO Can't be set/clear in Low power Mode");
return -EACCES;
}
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(gpio_info))
return -EINVAL;
if (copy_from_user(&gpio_info, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
bit = gpio_info.uiGpioNumber;
operation = gpio_info.uiGpioValue;
value = (1<<bit);
if (IsReqGpioIsLedInNVM(ad, value) == false) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL,
"Sorry, Requested GPIO<0x%X> is not correspond to LED !!!",
value);
return -EINVAL;
}
/* Set - setting 1 */
if (operation) {
/* Set the gpio output register */
status = wrmaltWithLock(ad,
BCM_GPIO_OUTPUT_SET_REG,
(PUINT)(&value), sizeof(UINT));
if (status == STATUS_SUCCESS) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS,
OSAL_DBG, DBG_LVL_ALL,
"Set the GPIO bit\n");
} else {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS,
OSAL_DBG, DBG_LVL_ALL,
"Failed to set the %dth GPIO\n",
bit);
return status;
}
} else {
/* Set the gpio output register */
status = wrmaltWithLock(ad,
BCM_GPIO_OUTPUT_CLR_REG,
(PUINT)(&value), sizeof(UINT));
if (status == STATUS_SUCCESS) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS,
OSAL_DBG, DBG_LVL_ALL,
"Set the GPIO bit\n");
} else {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS,
OSAL_DBG, DBG_LVL_ALL,
"Failed to clear the %dth GPIO\n",
bit);
return status;
}
}
bytes = rdmaltWithLock(ad, (UINT)GPIO_MODE_REGISTER,
(PUINT)reset_val, sizeof(UINT));
if (bytes < 0) {
status = bytes;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"GPIO_MODE_REGISTER read failed");
return status;
}
status = STATUS_SUCCESS;
/* Set the gpio mode register to output */
*(UINT *)reset_val |= (1<<bit);
status = wrmaltWithLock(ad, GPIO_MODE_REGISTER,
(PUINT)reset_val, sizeof(UINT));
if (status == STATUS_SUCCESS) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL,
"Set the GPIO to output Mode\n");
} else {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL,
"Failed to put GPIO in Output Mode\n");
}
return status;
}
static int bcm_char_ioctl_led_thread_state_change_req(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_user_thread_req thread_req = {0};
struct bcm_ioctl_buffer io_buff;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"User made LED thread InActive");
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL,
"GPIO Can't be set/clear in Low power Mode");
return -EACCES;
}
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(thread_req))
return -EINVAL;
if (copy_from_user(&thread_req, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
/* if LED thread is running(Actively or Inactively)
* set it state to make inactive
*/
if (ad->LEDInfo.led_thread_running) {
if (thread_req.ThreadState == LED_THREAD_ACTIVATION_REQ) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS,
OSAL_DBG, DBG_LVL_ALL,
"Activating thread req");
ad->DriverState = LED_THREAD_ACTIVE;
} else {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS,
OSAL_DBG, DBG_LVL_ALL,
"DeActivating Thread req.....");
ad->DriverState = LED_THREAD_INACTIVE;
}
/* signal thread. */
wake_up(&ad->LEDInfo.notify_led_event);
}
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_gpio_status_request(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_gpio_info gpio_info = {0};
struct bcm_ioctl_buffer io_buff;
ULONG bit = 0;
UCHAR read[4];
INT status;
int bytes;
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE))
return -EACCES;
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(gpio_info))
return -EINVAL;
if (copy_from_user(&gpio_info, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
bit = gpio_info.uiGpioNumber;
/* Set the gpio output register */
bytes = rdmaltWithLock(ad, (UINT)GPIO_PIN_STATE_REGISTER,
(PUINT)read, sizeof(UINT));
if (bytes < 0) {
status = bytes;
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"RDM Failed\n");
return status;
}
status = STATUS_SUCCESS;
return status;
}
static int bcm_char_ioctl_gpio_multi_request(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_gpio_multi_info gpio_multi_info[MAX_IDX];
struct bcm_gpio_multi_info *pgpio_multi_info =
(struct bcm_gpio_multi_info *)gpio_multi_info;
struct bcm_ioctl_buffer io_buff;
UCHAR reset_val[4];
INT status = STATUS_FAILURE;
int bytes;
memset(pgpio_multi_info, 0,
MAX_IDX * sizeof(struct bcm_gpio_multi_info));
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE))
return -EINVAL;
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(gpio_multi_info))
return -EINVAL;
if (io_buff.OutputLength > sizeof(gpio_multi_info))
io_buff.OutputLength = sizeof(gpio_multi_info);
if (copy_from_user(&gpio_multi_info, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
if (IsReqGpioIsLedInNVM(ad, pgpio_multi_info[WIMAX_IDX].uiGPIOMask)
== false) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL,
"Sorry, Requested GPIO<0x%X> is not correspond to NVM LED bit map<0x%X>!!!",
pgpio_multi_info[WIMAX_IDX].uiGPIOMask,
ad->gpioBitMap);
return -EINVAL;
}
/* Set the gpio output register */
if ((pgpio_multi_info[WIMAX_IDX].uiGPIOMask) &
(pgpio_multi_info[WIMAX_IDX].uiGPIOCommand)) {
/* Set 1's in GPIO OUTPUT REGISTER */
*(UINT *)reset_val = pgpio_multi_info[WIMAX_IDX].uiGPIOMask &
pgpio_multi_info[WIMAX_IDX].uiGPIOCommand &
pgpio_multi_info[WIMAX_IDX].uiGPIOValue;
if (*(UINT *) reset_val)
status = wrmaltWithLock(ad,
BCM_GPIO_OUTPUT_SET_REG,
(PUINT)reset_val, sizeof(ULONG));
if (status != STATUS_SUCCESS) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"WRM to BCM_GPIO_OUTPUT_SET_REG Failed.");
return status;
}
/* Clear to 0's in GPIO OUTPUT REGISTER */
*(UINT *)reset_val =
(pgpio_multi_info[WIMAX_IDX].uiGPIOMask &
pgpio_multi_info[WIMAX_IDX].uiGPIOCommand &
(~(pgpio_multi_info[WIMAX_IDX].uiGPIOValue)));
if (*(UINT *) reset_val)
status = wrmaltWithLock(ad,
BCM_GPIO_OUTPUT_CLR_REG, (PUINT)reset_val,
sizeof(ULONG));
if (status != STATUS_SUCCESS) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"WRM to BCM_GPIO_OUTPUT_CLR_REG Failed.");
return status;
}
}
if (pgpio_multi_info[WIMAX_IDX].uiGPIOMask) {
bytes = rdmaltWithLock(ad, (UINT)GPIO_PIN_STATE_REGISTER,
(PUINT)reset_val, sizeof(UINT));
if (bytes < 0) {
status = bytes;
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"RDM to GPIO_PIN_STATE_REGISTER Failed.");
return status;
}
status = STATUS_SUCCESS;
pgpio_multi_info[WIMAX_IDX].uiGPIOValue =
(*(UINT *)reset_val &
pgpio_multi_info[WIMAX_IDX].uiGPIOMask);
}
status = copy_to_user(io_buff.OutputBuffer, &gpio_multi_info,
io_buff.OutputLength);
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Failed while copying Content to IOBufer for user space err:%d",
status);
return -EFAULT;
}
return status;
}
static int bcm_char_ioctl_gpio_mode_request(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_gpio_multi_mode gpio_multi_mode[MAX_IDX];
struct bcm_gpio_multi_mode *pgpio_multi_mode =
(struct bcm_gpio_multi_mode *)gpio_multi_mode;
struct bcm_ioctl_buffer io_buff;
UCHAR reset_val[4];
INT status;
int bytes;
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE))
return -EINVAL;
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength > sizeof(gpio_multi_mode))
return -EINVAL;
if (io_buff.OutputLength > sizeof(gpio_multi_mode))
io_buff.OutputLength = sizeof(gpio_multi_mode);
if (copy_from_user(&gpio_multi_mode, io_buff.InputBuffer,
io_buff.InputLength))
return -EFAULT;
bytes = rdmaltWithLock(ad, (UINT)GPIO_MODE_REGISTER,
(PUINT)reset_val, sizeof(UINT));
if (bytes < 0) {
status = bytes;
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Read of GPIO_MODE_REGISTER failed");
return status;
}
status = STATUS_SUCCESS;
/* Validating the request */
if (IsReqGpioIsLedInNVM(ad, pgpio_multi_mode[WIMAX_IDX].uiGPIOMask)
== false) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Sorry, Requested GPIO<0x%X> is not correspond to NVM LED bit map<0x%X>!!!",
pgpio_multi_mode[WIMAX_IDX].uiGPIOMask,
ad->gpioBitMap);
return -EINVAL;
}
if (pgpio_multi_mode[WIMAX_IDX].uiGPIOMask) {
/* write all OUT's (1's) */
*(UINT *) reset_val |=
(pgpio_multi_mode[WIMAX_IDX].uiGPIOMode &
pgpio_multi_mode[WIMAX_IDX].uiGPIOMask);
/* write all IN's (0's) */
*(UINT *) reset_val &=
~((~pgpio_multi_mode[WIMAX_IDX].uiGPIOMode) &
pgpio_multi_mode[WIMAX_IDX].uiGPIOMask);
/* Currently implemented return the modes of all GPIO's
* else needs to bit AND with mask
*/
pgpio_multi_mode[WIMAX_IDX].uiGPIOMode = *(UINT *)reset_val;
status = wrmaltWithLock(ad, GPIO_MODE_REGISTER,
(PUINT)reset_val, sizeof(ULONG));
if (status == STATUS_SUCCESS) {
BCM_DEBUG_PRINT(ad,
DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"WRM to GPIO_MODE_REGISTER Done");
} else {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"WRM to GPIO_MODE_REGISTER Failed");
return -EFAULT;
}
} else {
/* if uiGPIOMask is 0 then return mode register configuration */
pgpio_multi_mode[WIMAX_IDX].uiGPIOMode = *(UINT *)reset_val;
}
status = copy_to_user(io_buff.OutputBuffer, &gpio_multi_mode,
io_buff.OutputLength);
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Failed while copying Content to IOBufer for user space err:%d",
status);
return -EFAULT;
}
return status;
}
static int bcm_char_ioctl_misc_request(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_ioctl_buffer io_buff;
PVOID buff = NULL;
INT status;
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength < sizeof(struct bcm_link_request))
return -EINVAL;
if (io_buff.InputLength > MAX_CNTL_PKT_SIZE)
return -EINVAL;
buff = memdup_user(io_buff.InputBuffer,
io_buff.InputLength);
if (IS_ERR(buff))
return PTR_ERR(buff);
down(&ad->LowPowerModeSync);
status = wait_event_interruptible_timeout(
ad->lowpower_mode_wait_queue,
!ad->bPreparingForLowPowerMode,
(1 * HZ));
if (status == -ERESTARTSYS)
goto cntrlEnd;
if (ad->bPreparingForLowPowerMode) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Preparing Idle Mode is still True - Hence Rejecting control message\n");
status = STATUS_FAILURE;
goto cntrlEnd;
}
status = CopyBufferToControlPacket(ad, (PVOID)buff);
cntrlEnd:
up(&ad->LowPowerModeSync);
kfree(buff);
return status;
}
static int bcm_char_ioctl_buffer_download_start(
struct bcm_mini_adapter *ad)
{
INT status;
if (down_trylock(&ad->NVMRdmWrmLock)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_CHIP_RESET not allowed as EEPROM Read/Write is in progress\n");
return -EACCES;
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Starting the firmware download PID =0x%x!!!!\n",
current->pid);
if (down_trylock(&ad->fw_download_sema))
return -EBUSY;
ad->bBinDownloaded = false;
ad->fw_download_process_pid = current->pid;
ad->bCfgDownloaded = false;
ad->fw_download_done = false;
netif_carrier_off(ad->dev);
netif_stop_queue(ad->dev);
status = reset_card_proc(ad);
if (status) {
pr_err(PFX "%s: reset_card_proc Failed!\n", ad->dev->name);
up(&ad->fw_download_sema);
up(&ad->NVMRdmWrmLock);
return status;
}
mdelay(10);
up(&ad->NVMRdmWrmLock);
return status;
}
static int bcm_char_ioctl_buffer_download(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_firmware_info *fw_info = NULL;
struct bcm_ioctl_buffer io_buff;
INT status;
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Starting the firmware download PID =0x%x!!!!\n", current->pid);
if (!down_trylock(&ad->fw_download_sema)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Invalid way to download buffer. Use Start and then call this!!!\n");
up(&ad->fw_download_sema);
return -EINVAL;
}
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer))) {
up(&ad->fw_download_sema);
return -EFAULT;
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Length for FW DLD is : %lx\n", io_buff.InputLength);
if (io_buff.InputLength > sizeof(struct bcm_firmware_info)) {
up(&ad->fw_download_sema);
return -EINVAL;
}
fw_info = kmalloc(sizeof(*fw_info), GFP_KERNEL);
if (!fw_info) {
up(&ad->fw_download_sema);
return -ENOMEM;
}
if (copy_from_user(fw_info, io_buff.InputBuffer,
io_buff.InputLength)) {
up(&ad->fw_download_sema);
kfree(fw_info);
return -EFAULT;
}
if (!fw_info->pvMappedFirmwareAddress ||
(fw_info->u32FirmwareLength == 0)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Something else is wrong %lu\n",
fw_info->u32FirmwareLength);
up(&ad->fw_download_sema);
kfree(fw_info);
status = -EINVAL;
return status;
}
status = bcm_ioctl_fw_download(ad, fw_info);
if (status != STATUS_SUCCESS) {
if (fw_info->u32StartingAddress == CONFIG_BEGIN_ADDR)
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"IOCTL: Configuration File Upload Failed\n");
else
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"IOCTL: Firmware File Upload Failed\n");
/* up(&ad->fw_download_sema); */
if (ad->LEDInfo.led_thread_running &
BCM_LED_THREAD_RUNNING_ACTIVELY) {
ad->DriverState = DRIVER_INIT;
ad->LEDInfo.bLedInitDone = false;
wake_up(&ad->LEDInfo.notify_led_event);
}
}
if (status != STATUS_SUCCESS)
up(&ad->fw_download_sema);
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, OSAL_DBG, DBG_LVL_ALL,
"IOCTL: Firmware File Uploaded\n");
kfree(fw_info);
return status;
}
static int bcm_char_ioctl_buffer_download_stop(void __user *argp,
struct bcm_mini_adapter *ad)
{
INT status;
int timeout = 0;
if (!down_trylock(&ad->fw_download_sema)) {
up(&ad->fw_download_sema);
return -EINVAL;
}
if (down_trylock(&ad->NVMRdmWrmLock)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"FW download blocked as EEPROM Read/Write is in progress\n");
up(&ad->fw_download_sema);
return -EACCES;
}
ad->bBinDownloaded = TRUE;
ad->bCfgDownloaded = TRUE;
atomic_set(&ad->CurrNumFreeTxDesc, 0);
ad->CurrNumRecvDescs = 0;
ad->downloadDDR = 0;
/* setting the Mips to Run */
status = run_card_proc(ad);
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Firm Download Failed\n");
up(&ad->fw_download_sema);
up(&ad->NVMRdmWrmLock);
return status;
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL, "Firm Download Over...\n");
mdelay(10);
/* Wait for MailBox Interrupt */
if (StartInterruptUrb((struct bcm_interface_adapter *)ad->pvInterfaceAdapter))
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Unable to send interrupt...\n");
timeout = 5*HZ;
ad->waiting_to_fw_download_done = false;
wait_event_timeout(ad->ioctl_fw_dnld_wait_queue,
ad->waiting_to_fw_download_done, timeout);
ad->fw_download_process_pid = INVALID_PID;
ad->fw_download_done = TRUE;
atomic_set(&ad->CurrNumFreeTxDesc, 0);
ad->CurrNumRecvDescs = 0;
ad->PrevNumRecvDescs = 0;
atomic_set(&ad->cntrlpktCnt, 0);
ad->LinkUpStatus = 0;
ad->LinkStatus = 0;
if (ad->LEDInfo.led_thread_running &
BCM_LED_THREAD_RUNNING_ACTIVELY) {
ad->DriverState = FW_DOWNLOAD_DONE;
wake_up(&ad->LEDInfo.notify_led_event);
}
if (!timeout)
status = -ENODEV;
up(&ad->fw_download_sema);
up(&ad->NVMRdmWrmLock);
return status;
}
static int bcm_char_ioctl_chip_reset(struct bcm_mini_adapter *ad)
{
INT status;
INT nvm_access;
nvm_access = down_trylock(&ad->NVMRdmWrmLock);
if (nvm_access) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
" IOCTL_BCM_CHIP_RESET not allowed as EEPROM Read/Write is in progress\n");
return -EACCES;
}
down(&ad->RxAppControlQueuelock);
status = reset_card_proc(ad);
flushAllAppQ();
up(&ad->RxAppControlQueuelock);
up(&ad->NVMRdmWrmLock);
ResetCounters(ad);
return status;
}
static int bcm_char_ioctl_qos_threshold(ULONG arg,
struct bcm_mini_adapter *ad)
{
USHORT i;
for (i = 0; i < NO_OF_QUEUES; i++) {
if (get_user(ad->PackInfo[i].uiThreshold,
(unsigned long __user *)arg)) {
return -EFAULT;
}
}
return 0;
}
static int bcm_char_ioctl_switch_transfer_mode(void __user *argp,
struct bcm_mini_adapter *ad)
{
UINT data = 0;
if (copy_from_user(&data, argp, sizeof(UINT)))
return -EFAULT;
if (data) {
/* Allow All Packets */
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_SWITCH_TRANSFER_MODE: ETH_PACKET_TUNNELING_MODE\n");
ad->TransferMode = ETH_PACKET_TUNNELING_MODE;
} else {
/* Allow IP only Packets */
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_SWITCH_TRANSFER_MODE: IP_PACKET_ONLY_MODE\n");
ad->TransferMode = IP_PACKET_ONLY_MODE;
}
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_get_driver_version(void __user *argp)
{
struct bcm_ioctl_buffer io_buff;
ulong len;
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
len = min_t(ulong, io_buff.OutputLength, strlen(DRV_VERSION) + 1);
if (copy_to_user(io_buff.OutputBuffer, DRV_VERSION, len))
return -EFAULT;
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_get_current_status(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_link_state link_state;
struct bcm_ioctl_buffer io_buff;
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer))) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"copy_from_user failed..\n");
return -EFAULT;
}
if (io_buff.OutputLength != sizeof(link_state))
return -EINVAL;
memset(&link_state, 0, sizeof(link_state));
link_state.bIdleMode = ad->IdleMode;
link_state.bShutdownMode = ad->bShutStatus;
link_state.ucLinkStatus = ad->LinkStatus;
if (copy_to_user(io_buff.OutputBuffer, &link_state, min_t(size_t,
sizeof(link_state), io_buff.OutputLength))) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy_to_user Failed..\n");
return -EFAULT;
}
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_set_mac_tracing(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_ioctl_buffer io_buff;
UINT tracing_flag;
/* copy ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (copy_from_user(&tracing_flag, io_buff.InputBuffer, sizeof(UINT)))
return -EFAULT;
if (tracing_flag)
ad->pTarangs->MacTracingEnabled = TRUE;
else
ad->pTarangs->MacTracingEnabled = false;
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_get_dsx_indication(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_ioctl_buffer io_buff;
ULONG sf_id = 0;
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.OutputLength < sizeof(struct bcm_add_indication_alt)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Mismatch req: %lx needed is =0x%zx!!!",
io_buff.OutputLength,
sizeof(struct bcm_add_indication_alt));
return -EINVAL;
}
if (copy_from_user(&sf_id, io_buff.InputBuffer, sizeof(sf_id)))
return -EFAULT;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Get DSX Data SF ID is =%lx\n", sf_id);
get_dsx_sf_data_to_application(ad, sf_id, io_buff.OutputBuffer);
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_get_host_mibs(void __user *argp,
struct bcm_mini_adapter *ad,
struct bcm_tarang_data *tarang)
{
struct bcm_ioctl_buffer io_buff;
INT status = STATUS_FAILURE;
PVOID temp_buff;
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.OutputLength != sizeof(struct bcm_host_stats_mibs)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Length Check failed %lu %zd\n", io_buff.OutputLength,
sizeof(struct bcm_host_stats_mibs));
return -EINVAL;
}
/* FIXME: HOST_STATS are too big for kmalloc (122048)! */
temp_buff = kzalloc(sizeof(struct bcm_host_stats_mibs), GFP_KERNEL);
if (!temp_buff)
return STATUS_FAILURE;
status = ProcessGetHostMibs(ad, temp_buff);
GetDroppedAppCntrlPktMibs(temp_buff, tarang);
if (status != STATUS_FAILURE) {
if (copy_to_user(io_buff.OutputBuffer, temp_buff,
sizeof(struct bcm_host_stats_mibs))) {
kfree(temp_buff);
return -EFAULT;
}
}
kfree(temp_buff);
return status;
}
static int bcm_char_ioctl_bulk_wrm(void __user *argp,
struct bcm_mini_adapter *ad, UINT cmd)
{
struct bcm_bulk_wrm_buffer *bulk_buff;
struct bcm_ioctl_buffer io_buff;
UINT tmp = 0;
INT status = STATUS_FAILURE;
PCHAR buff = NULL;
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT (ad, DBG_TYPE_PRINTK, 0, 0,
"Device in Idle/Shutdown Mode, Blocking Wrms\n");
return -EACCES;
}
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.InputLength < sizeof(ULONG) * 2)
return -EINVAL;
buff = memdup_user(io_buff.InputBuffer,
io_buff.InputLength);
if (IS_ERR(buff))
return PTR_ERR(buff);
bulk_buff = (struct bcm_bulk_wrm_buffer *)buff;
if (((ULONG)bulk_buff->Register & 0x0F000000) != 0x0F000000 ||
((ULONG)bulk_buff->Register & 0x3)) {
BCM_DEBUG_PRINT (ad, DBG_TYPE_PRINTK, 0, 0,
"WRM Done On invalid Address : %x Access Denied.\n",
(int)bulk_buff->Register);
kfree(buff);
return -EINVAL;
}
tmp = bulk_buff->Register & EEPROM_REJECT_MASK;
if (!((ad->pstargetparams->m_u32Customize)&VSG_MODE) &&
((tmp == EEPROM_REJECT_REG_1) ||
(tmp == EEPROM_REJECT_REG_2) ||
(tmp == EEPROM_REJECT_REG_3) ||
(tmp == EEPROM_REJECT_REG_4)) &&
(cmd == IOCTL_BCM_REGISTER_WRITE)) {
kfree(buff);
BCM_DEBUG_PRINT (ad, DBG_TYPE_PRINTK, 0, 0,
"EEPROM Access Denied, not in VSG Mode\n");
return -EFAULT;
}
if (bulk_buff->SwapEndian == false)
status = wrmWithLock(ad, (UINT)bulk_buff->Register,
(PCHAR)bulk_buff->Values,
io_buff.InputLength - 2*sizeof(ULONG));
else
status = wrmaltWithLock(ad, (UINT)bulk_buff->Register,
(PUINT)bulk_buff->Values,
io_buff.InputLength - 2*sizeof(ULONG));
if (status != STATUS_SUCCESS)
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0, "WRM Failed\n");
kfree(buff);
return status;
}
static int bcm_char_ioctl_get_nvm_size(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_ioctl_buffer io_buff;
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (ad->eNVMType == NVM_EEPROM || ad->eNVMType == NVM_FLASH) {
if (copy_to_user(io_buff.OutputBuffer, &ad->uiNVMDSDSize,
sizeof(UINT)))
return -EFAULT;
}
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_cal_init(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_ioctl_buffer io_buff;
UINT sector_size = 0;
INT status = STATUS_FAILURE;
if (ad->eNVMType == NVM_FLASH) {
if (copy_from_user(&io_buff, argp,
sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (copy_from_user(&sector_size, io_buff.InputBuffer,
sizeof(UINT)))
return -EFAULT;
if ((sector_size < MIN_SECTOR_SIZE) ||
(sector_size > MAX_SECTOR_SIZE)) {
if (copy_to_user(io_buff.OutputBuffer,
&ad->uiSectorSize, sizeof(UINT)))
return -EFAULT;
} else {
if (IsFlash2x(ad)) {
if (copy_to_user(io_buff.OutputBuffer,
&ad->uiSectorSize, sizeof(UINT)))
return -EFAULT;
} else {
if ((TRUE == ad->bShutStatus) ||
(TRUE == ad->IdleMode)) {
BCM_DEBUG_PRINT(ad,
DBG_TYPE_PRINTK, 0, 0,
"Device is in Idle/Shutdown Mode\n");
return -EACCES;
}
ad->uiSectorSize = sector_size;
BcmUpdateSectorSize(ad,
ad->uiSectorSize);
}
}
status = STATUS_SUCCESS;
} else {
status = STATUS_FAILURE;
}
return status;
}
static int bcm_char_ioctl_set_debug(void __user *argp,
struct bcm_mini_adapter *ad)
{
#ifdef DEBUG
struct bcm_ioctl_buffer io_buff;
struct bcm_user_debug_state user_debug_state;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"In SET_DEBUG ioctl\n");
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (copy_from_user(&user_debug_state, io_buff.InputBuffer,
sizeof(struct bcm_user_debug_state)))
return -EFAULT;
BCM_DEBUG_PRINT (ad, DBG_TYPE_PRINTK, 0, 0,
"IOCTL_BCM_SET_DEBUG: OnOff=%d Type = 0x%x ",
user_debug_state.OnOff, user_debug_state.Type);
/* user_debug_state.Subtype <<= 1; */
user_debug_state.Subtype = 1 << user_debug_state.Subtype;
BCM_DEBUG_PRINT (ad, DBG_TYPE_PRINTK, 0, 0,
"actual Subtype=0x%x\n", user_debug_state.Subtype);
/* Update new 'DebugState' in the ad */
ad->stDebugState.type |= user_debug_state.Type;
/* Subtype: A bitmap of 32 bits for Subtype per Type.
* Valid indexes in 'subtype' array: 1,2,4,8
* corresponding to valid Type values. Hence we can use the 'Type' field
* as the index value, ignoring the array entries 0,3,5,6,7 !
*/
if (user_debug_state.OnOff)
ad->stDebugState.subtype[user_debug_state.Type] |=
user_debug_state.Subtype;
else
ad->stDebugState.subtype[user_debug_state.Type] &=
~user_debug_state.Subtype;
BCM_SHOW_DEBUG_BITMAP(ad);
#endif
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_nvm_rw(void __user *argp,
struct bcm_mini_adapter *ad, UINT cmd)
{
struct bcm_nvm_readwrite nvm_rw;
struct timeval tv0, tv1;
struct bcm_ioctl_buffer io_buff;
PUCHAR read_data = NULL;
INT status = STATUS_FAILURE;
memset(&tv0, 0, sizeof(struct timeval));
memset(&tv1, 0, sizeof(struct timeval));
if ((ad->eNVMType == NVM_FLASH) &&
(ad->uiFlashLayoutMajorVersion == 0)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"The Flash Control Section is Corrupted. Hence Rejection on NVM Read/Write\n");
return -EFAULT;
}
if (IsFlash2x(ad)) {
if ((ad->eActiveDSD != DSD0) &&
(ad->eActiveDSD != DSD1) &&
(ad->eActiveDSD != DSD2)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"No DSD is active..hence NVM Command is blocked");
return STATUS_FAILURE;
}
}
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (copy_from_user(&nvm_rw,
(IOCTL_BCM_NVM_READ == cmd) ?
io_buff.OutputBuffer : io_buff.InputBuffer,
sizeof(struct bcm_nvm_readwrite)))
return -EFAULT;
/*
* Deny the access if the offset crosses the cal area limit.
*/
if (nvm_rw.uiNumBytes > ad->uiNVMDSDSize)
return STATUS_FAILURE;
if (nvm_rw.uiOffset >
ad->uiNVMDSDSize - nvm_rw.uiNumBytes)
return STATUS_FAILURE;
read_data = memdup_user(nvm_rw.pBuffer,
nvm_rw.uiNumBytes);
if (IS_ERR(read_data))
return PTR_ERR(read_data);
do_gettimeofday(&tv0);
if (IOCTL_BCM_NVM_READ == cmd) {
int ret = bcm_handle_nvm_read_cmd(ad, read_data,
&nvm_rw);
if (ret != STATUS_SUCCESS)
return ret;
} else {
down(&ad->NVMRdmWrmLock);
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad,
DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Device is in Idle/Shutdown Mode\n");
up(&ad->NVMRdmWrmLock);
kfree(read_data);
return -EACCES;
}
ad->bHeaderChangeAllowed = TRUE;
if (IsFlash2x(ad)) {
int ret = handle_flash2x_adapter(ad,
read_data,
&nvm_rw);
if (ret != STATUS_SUCCESS)
return ret;
}
status = BeceemNVMWrite(ad, (PUINT)read_data,
nvm_rw.uiOffset, nvm_rw.uiNumBytes,
nvm_rw.bVerify);
if (IsFlash2x(ad))
BcmFlash2xWriteSig(ad, ad->eActiveDSD);
ad->bHeaderChangeAllowed = false;
up(&ad->NVMRdmWrmLock);
if (status != STATUS_SUCCESS) {
kfree(read_data);
return status;
}
}
do_gettimeofday(&tv1);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
" timetaken by Write/read :%ld msec\n",
(tv1.tv_sec - tv0.tv_sec)*1000 +
(tv1.tv_usec - tv0.tv_usec)/1000);
kfree(read_data);
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_flash2x_section_read(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_flash2x_readwrite flash_2x_read = {0};
struct bcm_ioctl_buffer io_buff;
PUCHAR read_buff = NULL;
UINT nob = 0;
UINT buff_size = 0;
UINT read_bytes = 0;
UINT read_offset = 0;
INT status = STATUS_FAILURE;
void __user *OutPutBuff;
if (IsFlash2x(ad) != TRUE) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Flash Does not have 2.x map");
return -EINVAL;
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL, "IOCTL_BCM_FLASH2X_SECTION_READ Called");
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
/* Reading FLASH 2.x READ structure */
if (copy_from_user(&flash_2x_read, io_buff.InputBuffer,
sizeof(struct bcm_flash2x_readwrite)))
return -EFAULT;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\nflash_2x_read.Section :%x",
flash_2x_read.Section);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\nflash_2x_read.offset :%x",
flash_2x_read.offset);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\nflash_2x_read.numOfBytes :%x",
flash_2x_read.numOfBytes);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\nflash_2x_read.bVerify :%x\n",
flash_2x_read.bVerify);
/* This was internal to driver for raw read.
* now it has ben exposed to user space app.
*/
if (validateFlash2xReadWrite(ad, &flash_2x_read) == false)
return STATUS_FAILURE;
nob = flash_2x_read.numOfBytes;
if (nob > ad->uiSectorSize)
buff_size = ad->uiSectorSize;
else
buff_size = nob;
read_offset = flash_2x_read.offset;
OutPutBuff = io_buff.OutputBuffer;
read_buff = kzalloc(buff_size , GFP_KERNEL);
if (read_buff == NULL) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Memory allocation failed for Flash 2.x Read Structure");
return -ENOMEM;
}
down(&ad->NVMRdmWrmLock);
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL,
"Device is in Idle/Shutdown Mode\n");
up(&ad->NVMRdmWrmLock);
kfree(read_buff);
return -EACCES;
}
while (nob) {
if (nob > ad->uiSectorSize)
read_bytes = ad->uiSectorSize;
else
read_bytes = nob;
/* Reading the data from Flash 2.x */
status = BcmFlash2xBulkRead(ad, (PUINT)read_buff,
flash_2x_read.Section, read_offset, read_bytes);
if (status) {
BCM_DEBUG_PRINT(ad,
DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Flash 2x read err with status :%d",
status);
break;
}
BCM_DEBUG_PRINT_BUFFER(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL, read_buff, read_bytes);
status = copy_to_user(OutPutBuff, read_buff, read_bytes);
if (status) {
BCM_DEBUG_PRINT(ad,
DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Copy to use failed with status :%d", status);
up(&ad->NVMRdmWrmLock);
kfree(read_buff);
return -EFAULT;
}
nob = nob - read_bytes;
if (nob) {
read_offset = read_offset + read_bytes;
OutPutBuff = OutPutBuff + read_bytes;
}
}
up(&ad->NVMRdmWrmLock);
kfree(read_buff);
return status;
}
static int bcm_char_ioctl_flash2x_section_write(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_flash2x_readwrite sFlash2xWrite = {0};
struct bcm_ioctl_buffer io_buff;
PUCHAR write_buff;
void __user *input_addr;
UINT nob = 0;
UINT buff_size = 0;
UINT write_off = 0;
UINT write_bytes = 0;
INT status = STATUS_FAILURE;
if (IsFlash2x(ad) != TRUE) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Flash Does not have 2.x map");
return -EINVAL;
}
/* First make this False so that we can enable the Sector
* Permission Check in BeceemFlashBulkWrite
*/
ad->bAllDSDWriteAllow = false;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_FLASH2X_SECTION_WRITE Called");
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
/* Reading FLASH 2.x READ structure */
if (copy_from_user(&sFlash2xWrite, io_buff.InputBuffer,
sizeof(struct bcm_flash2x_readwrite)))
return -EFAULT;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\nsFlash2xWrite.Section :%x", sFlash2xWrite.Section);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\nsFlash2xWrite.offset :%d", sFlash2xWrite.offset);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\nsFlash2xWrite.numOfBytes :%x", sFlash2xWrite.numOfBytes);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\nsFlash2xWrite.bVerify :%x\n", sFlash2xWrite.bVerify);
if ((sFlash2xWrite.Section != VSA0) && (sFlash2xWrite.Section != VSA1)
&& (sFlash2xWrite.Section != VSA2)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Only VSA write is allowed");
return -EINVAL;
}
if (validateFlash2xReadWrite(ad, &sFlash2xWrite) == false)
return STATUS_FAILURE;
input_addr = sFlash2xWrite.pDataBuff;
write_off = sFlash2xWrite.offset;
nob = sFlash2xWrite.numOfBytes;
if (nob > ad->uiSectorSize)
buff_size = ad->uiSectorSize;
else
buff_size = nob;
write_buff = kmalloc(buff_size, GFP_KERNEL);
if (write_buff == NULL)
return -ENOMEM;
/* extracting the remainder of the given offset. */
write_bytes = ad->uiSectorSize;
if (write_off % ad->uiSectorSize) {
write_bytes = ad->uiSectorSize -
(write_off % ad->uiSectorSize);
}
if (nob < write_bytes)
write_bytes = nob;
down(&ad->NVMRdmWrmLock);
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Device is in Idle/Shutdown Mode\n");
up(&ad->NVMRdmWrmLock);
kfree(write_buff);
return -EACCES;
}
BcmFlash2xCorruptSig(ad, sFlash2xWrite.Section);
do {
status = copy_from_user(write_buff, input_addr, write_bytes);
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy to user failed with status :%d", status);
up(&ad->NVMRdmWrmLock);
kfree(write_buff);
return -EFAULT;
}
BCM_DEBUG_PRINT_BUFFER(ad, DBG_TYPE_OTHERS,
OSAL_DBG, DBG_LVL_ALL, write_buff, write_bytes);
/* Writing the data from Flash 2.x */
status = BcmFlash2xBulkWrite(ad, (PUINT)write_buff,
sFlash2xWrite.Section,
write_off,
write_bytes,
sFlash2xWrite.bVerify);
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Flash 2x read err with status :%d", status);
break;
}
nob = nob - write_bytes;
if (nob) {
write_off = write_off + write_bytes;
input_addr = input_addr + write_bytes;
if (nob > ad->uiSectorSize)
write_bytes = ad->uiSectorSize;
else
write_bytes = nob;
}
} while (nob > 0);
BcmFlash2xWriteSig(ad, sFlash2xWrite.Section);
up(&ad->NVMRdmWrmLock);
kfree(write_buff);
return status;
}
static int bcm_char_ioctl_flash2x_section_bitmap(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_flash2x_bitmap *flash_2x_bit_map;
struct bcm_ioctl_buffer io_buff;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_GET_FLASH2X_SECTION_BITMAP Called");
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.OutputLength != sizeof(struct bcm_flash2x_bitmap))
return -EINVAL;
flash_2x_bit_map = kzalloc(sizeof(struct bcm_flash2x_bitmap),
GFP_KERNEL);
if (flash_2x_bit_map == NULL) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Memory is not available");
return -ENOMEM;
}
/* Reading the Flash Sectio Bit map */
down(&ad->NVMRdmWrmLock);
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Device is in Idle/Shutdown Mode\n");
up(&ad->NVMRdmWrmLock);
kfree(flash_2x_bit_map);
return -EACCES;
}
BcmGetFlash2xSectionalBitMap(ad, flash_2x_bit_map);
up(&ad->NVMRdmWrmLock);
if (copy_to_user(io_buff.OutputBuffer, flash_2x_bit_map,
sizeof(struct bcm_flash2x_bitmap))) {
kfree(flash_2x_bit_map);
return -EFAULT;
}
kfree(flash_2x_bit_map);
return STATUS_FAILURE;
}
static int bcm_char_ioctl_set_active_section(void __user *argp,
struct bcm_mini_adapter *ad)
{
enum bcm_flash2x_section_val flash_2x_section_val = 0;
INT status = STATUS_FAILURE;
struct bcm_ioctl_buffer io_buff;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_SET_ACTIVE_SECTION Called");
if (IsFlash2x(ad) != TRUE) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Flash Does not have 2.x map");
return -EINVAL;
}
status = copy_from_user(&io_buff, argp,
sizeof(struct bcm_ioctl_buffer));
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy of IOCTL BUFFER failed");
return -EFAULT;
}
status = copy_from_user(&flash_2x_section_val,
io_buff.InputBuffer, sizeof(INT));
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy of flash section val failed");
return -EFAULT;
}
down(&ad->NVMRdmWrmLock);
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Device is in Idle/Shutdown Mode\n");
up(&ad->NVMRdmWrmLock);
return -EACCES;
}
status = BcmSetActiveSection(ad, flash_2x_section_val);
if (status)
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Failed to make it's priority Highest. status %d",
status);
up(&ad->NVMRdmWrmLock);
return status;
}
static int bcm_char_ioctl_copy_section(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_flash2x_copy_section copy_sect_strut = {0};
struct bcm_ioctl_buffer io_buff;
INT status = STATUS_SUCCESS;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_COPY_SECTION Called");
ad->bAllDSDWriteAllow = false;
if (IsFlash2x(ad) != TRUE) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Flash Does not have 2.x map");
return -EINVAL;
}
status = copy_from_user(&io_buff, argp,
sizeof(struct bcm_ioctl_buffer));
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy of IOCTL BUFFER failed status :%d",
status);
return -EFAULT;
}
status = copy_from_user(&copy_sect_strut, io_buff.InputBuffer,
sizeof(struct bcm_flash2x_copy_section));
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy of Copy_Section_Struct failed with status :%d",
status);
return -EFAULT;
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Source SEction :%x", copy_sect_strut.SrcSection);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Destination SEction :%x", copy_sect_strut.DstSection);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"offset :%x", copy_sect_strut.offset);
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"nob :%x", copy_sect_strut.numOfBytes);
if (IsSectionExistInFlash(ad, copy_sect_strut.SrcSection) == false) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Source Section<%x> does not exist in Flash ",
copy_sect_strut.SrcSection);
return -EINVAL;
}
if (IsSectionExistInFlash(ad, copy_sect_strut.DstSection) == false) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Destinatio Section<%x> does not exist in Flash ",
copy_sect_strut.DstSection);
return -EINVAL;
}
if (copy_sect_strut.SrcSection == copy_sect_strut.DstSection) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Source and Destination section should be different");
return -EINVAL;
}
down(&ad->NVMRdmWrmLock);
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Device is in Idle/Shutdown Mode\n");
up(&ad->NVMRdmWrmLock);
return -EACCES;
}
if (copy_sect_strut.SrcSection == ISO_IMAGE1 ||
copy_sect_strut.SrcSection == ISO_IMAGE2) {
if (IsNonCDLessDevice(ad)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Device is Non-CDLess hence won't have ISO !!");
status = -EINVAL;
} else if (copy_sect_strut.numOfBytes == 0) {
status = BcmCopyISO(ad, copy_sect_strut);
} else {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Partial Copy of ISO section is not Allowed..");
status = STATUS_FAILURE;
}
up(&ad->NVMRdmWrmLock);
return status;
}
status = BcmCopySection(ad, copy_sect_strut.SrcSection,
copy_sect_strut.DstSection,
copy_sect_strut.offset,
copy_sect_strut.numOfBytes);
up(&ad->NVMRdmWrmLock);
return status;
}
static int bcm_char_ioctl_get_flash_cs_info(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_ioctl_buffer io_buff;
INT status = STATUS_SUCCESS;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
" IOCTL_BCM_GET_FLASH_CS_INFO Called");
status = copy_from_user(&io_buff, argp,
sizeof(struct bcm_ioctl_buffer));
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy of IOCTL BUFFER failed");
return -EFAULT;
}
if (ad->eNVMType != NVM_FLASH) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Connected device does not have flash");
return -EINVAL;
}
if (IsFlash2x(ad) == TRUE) {
if (io_buff.OutputLength < sizeof(struct bcm_flash2x_cs_info))
return -EINVAL;
if (copy_to_user(io_buff.OutputBuffer,
ad->psFlash2xCSInfo,
sizeof(struct bcm_flash2x_cs_info)))
return -EFAULT;
} else {
if (io_buff.OutputLength < sizeof(struct bcm_flash_cs_info))
return -EINVAL;
if (copy_to_user(io_buff.OutputBuffer, ad->psFlashCSInfo,
sizeof(struct bcm_flash_cs_info)))
return -EFAULT;
}
return status;
}
static int bcm_char_ioctl_select_dsd(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_ioctl_buffer io_buff;
INT status = STATUS_FAILURE;
UINT sect_offset = 0;
enum bcm_flash2x_section_val flash_2x_section_val;
flash_2x_section_val = NO_SECTION_VAL;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_SELECT_DSD Called");
if (IsFlash2x(ad) != TRUE) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Flash Does not have 2.x map");
return -EINVAL;
}
status = copy_from_user(&io_buff, argp,
sizeof(struct bcm_ioctl_buffer));
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy of IOCTL BUFFER failed");
return -EFAULT;
}
status = copy_from_user(&flash_2x_section_val, io_buff.InputBuffer,
sizeof(INT));
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy of flash section val failed");
return -EFAULT;
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Read Section :%d", flash_2x_section_val);
if ((flash_2x_section_val != DSD0) &&
(flash_2x_section_val != DSD1) &&
(flash_2x_section_val != DSD2)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Passed section<%x> is not DSD section",
flash_2x_section_val);
return STATUS_FAILURE;
}
sect_offset = BcmGetSectionValStartOffset(ad, flash_2x_section_val);
if (sect_offset == INVALID_OFFSET) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Provided Section val <%d> does not exist in Flash 2.x",
flash_2x_section_val);
return -EINVAL;
}
ad->bAllDSDWriteAllow = TRUE;
ad->ulFlashCalStart = sect_offset;
ad->eActiveDSD = flash_2x_section_val;
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_nvm_raw_read(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_nvm_readwrite nvm_read;
struct bcm_ioctl_buffer io_buff;
unsigned int nob;
INT buff_size;
INT read_offset = 0;
UINT read_bytes = 0;
PUCHAR read_buff;
void __user *OutPutBuff;
INT status = STATUS_FAILURE;
if (ad->eNVMType != NVM_FLASH) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"NVM TYPE is not Flash");
return -EINVAL;
}
/* Copy Ioctl Buffer structure */
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer))) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"copy_from_user 1 failed\n");
return -EFAULT;
}
if (copy_from_user(&nvm_read, io_buff.OutputBuffer,
sizeof(struct bcm_nvm_readwrite)))
return -EFAULT;
nob = nvm_read.uiNumBytes;
/* In Raw-Read max Buff size : 64MB */
if (nob > DEFAULT_BUFF_SIZE)
buff_size = DEFAULT_BUFF_SIZE;
else
buff_size = nob;
read_offset = nvm_read.uiOffset;
OutPutBuff = nvm_read.pBuffer;
read_buff = kzalloc(buff_size , GFP_KERNEL);
if (read_buff == NULL) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Memory allocation failed for Flash 2.x Read Structure");
return -ENOMEM;
}
down(&ad->NVMRdmWrmLock);
if ((ad->IdleMode == TRUE) ||
(ad->bShutStatus == TRUE) ||
(ad->bPreparingForLowPowerMode == TRUE)) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Device is in Idle/Shutdown Mode\n");
kfree(read_buff);
up(&ad->NVMRdmWrmLock);
return -EACCES;
}
ad->bFlashRawRead = TRUE;
while (nob) {
if (nob > DEFAULT_BUFF_SIZE)
read_bytes = DEFAULT_BUFF_SIZE;
else
read_bytes = nob;
/* Reading the data from Flash 2.x */
status = BeceemNVMRead(ad, (PUINT)read_buff,
read_offset, read_bytes);
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Flash 2x read err with status :%d",
status);
break;
}
BCM_DEBUG_PRINT_BUFFER(ad, DBG_TYPE_OTHERS, OSAL_DBG,
DBG_LVL_ALL, read_buff, read_bytes);
status = copy_to_user(OutPutBuff, read_buff, read_bytes);
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_PRINTK, 0, 0,
"Copy to use failed with status :%d",
status);
up(&ad->NVMRdmWrmLock);
kfree(read_buff);
return -EFAULT;
}
nob = nob - read_bytes;
if (nob) {
read_offset = read_offset + read_bytes;
OutPutBuff = OutPutBuff + read_bytes;
}
}
ad->bFlashRawRead = false;
up(&ad->NVMRdmWrmLock);
kfree(read_buff);
return status;
}
static int bcm_char_ioctl_cntrlmsg_mask(void __user *argp,
struct bcm_mini_adapter *ad,
struct bcm_tarang_data *tarang)
{
struct bcm_ioctl_buffer io_buff;
INT status = STATUS_FAILURE;
ULONG rx_cntrl_msg_bit_mask = 0;
/* Copy Ioctl Buffer structure */
status = copy_from_user(&io_buff, argp,
sizeof(struct bcm_ioctl_buffer));
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"copy of Ioctl buffer is failed from user space");
return -EFAULT;
}
if (io_buff.InputLength != sizeof(unsigned long))
return -EINVAL;
status = copy_from_user(&rx_cntrl_msg_bit_mask, io_buff.InputBuffer,
io_buff.InputLength);
if (status) {
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"copy of control bit mask failed from user space");
return -EFAULT;
}
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"\n Got user defined cntrl msg bit mask :%lx",
rx_cntrl_msg_bit_mask);
tarang->RxCntrlMsgBitMask = rx_cntrl_msg_bit_mask;
return status;
}
static int bcm_char_ioctl_get_device_driver_info(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_driver_info dev_info;
struct bcm_ioctl_buffer io_buff;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Called IOCTL_BCM_GET_DEVICE_DRIVER_INFO\n");
memset(&dev_info, 0, sizeof(dev_info));
dev_info.MaxRDMBufferSize = BUFFER_4K;
dev_info.u32DSDStartOffset = EEPROM_CALPARAM_START;
dev_info.u32RxAlignmentCorrection = 0;
dev_info.u32NVMType = ad->eNVMType;
dev_info.u32InterfaceType = BCM_USB;
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.OutputLength < sizeof(dev_info))
return -EINVAL;
if (copy_to_user(io_buff.OutputBuffer, &dev_info, sizeof(dev_info)))
return -EFAULT;
return STATUS_SUCCESS;
}
static int bcm_char_ioctl_time_since_net_entry(void __user *argp,
struct bcm_mini_adapter *ad)
{
struct bcm_time_elapsed time_elapsed_since_net_entry = {0};
struct bcm_ioctl_buffer io_buff;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_TIME_SINCE_NET_ENTRY called");
if (copy_from_user(&io_buff, argp, sizeof(struct bcm_ioctl_buffer)))
return -EFAULT;
if (io_buff.OutputLength < sizeof(struct bcm_time_elapsed))
return -EINVAL;
time_elapsed_since_net_entry.ul64TimeElapsedSinceNetEntry =
get_seconds() - ad->liTimeSinceLastNetEntry;
if (copy_to_user(io_buff.OutputBuffer, &time_elapsed_since_net_entry,
sizeof(struct bcm_time_elapsed)))
return -EFAULT;
return STATUS_SUCCESS;
}
static long bcm_char_ioctl(struct file *filp, UINT cmd, ULONG arg)
{
struct bcm_tarang_data *tarang = filp->private_data;
void __user *argp = (void __user *)arg;
struct bcm_mini_adapter *ad = tarang->Adapter;
INT status = STATUS_FAILURE;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"Parameters Passed to control IOCTL cmd=0x%X arg=0x%lX",
cmd, arg);
if (_IOC_TYPE(cmd) != BCM_IOCTL)
return -EFAULT;
if (_IOC_DIR(cmd) & _IOC_READ)
status = !access_ok(VERIFY_WRITE, argp, _IOC_SIZE(cmd));
else if (_IOC_DIR(cmd) & _IOC_WRITE)
status = !access_ok(VERIFY_READ, argp, _IOC_SIZE(cmd));
else if (_IOC_NONE == (_IOC_DIR(cmd) & _IOC_NONE))
status = STATUS_SUCCESS;
if (status)
return -EFAULT;
if (ad->device_removed)
return -EFAULT;
if (false == ad->fw_download_done) {
switch (cmd) {
case IOCTL_MAC_ADDR_REQ:
case IOCTL_LINK_REQ:
case IOCTL_CM_REQUEST:
case IOCTL_SS_INFO_REQ:
case IOCTL_SEND_CONTROL_MESSAGE:
case IOCTL_IDLE_REQ:
case IOCTL_BCM_GPIO_SET_REQUEST:
case IOCTL_BCM_GPIO_STATUS_REQUEST:
return -EACCES;
default:
break;
}
}
status = vendorextnIoctl(ad, cmd, arg);
if (status != CONTINUE_COMMON_PATH)
return status;
switch (cmd) {
/* Rdms for Swin Idle... */
case IOCTL_BCM_REGISTER_READ_PRIVATE:
status = bcm_char_ioctl_reg_read_private(argp, ad);
return status;
case IOCTL_BCM_REGISTER_WRITE_PRIVATE:
status = bcm_char_ioctl_reg_write_private(argp, ad);
return status;
case IOCTL_BCM_REGISTER_READ:
case IOCTL_BCM_EEPROM_REGISTER_READ:
status = bcm_char_ioctl_eeprom_reg_read(argp, ad);
return status;
case IOCTL_BCM_REGISTER_WRITE:
case IOCTL_BCM_EEPROM_REGISTER_WRITE:
status = bcm_char_ioctl_eeprom_reg_write(argp, ad, cmd);
return status;
case IOCTL_BCM_GPIO_SET_REQUEST:
status = bcm_char_ioctl_gpio_set_request(argp, ad);
return status;
case BCM_LED_THREAD_STATE_CHANGE_REQ:
status = bcm_char_ioctl_led_thread_state_change_req(argp,
ad);
return status;
case IOCTL_BCM_GPIO_STATUS_REQUEST:
status = bcm_char_ioctl_gpio_status_request(argp, ad);
return status;
case IOCTL_BCM_GPIO_MULTI_REQUEST:
status = bcm_char_ioctl_gpio_multi_request(argp, ad);
return status;
case IOCTL_BCM_GPIO_MODE_REQUEST:
status = bcm_char_ioctl_gpio_mode_request(argp, ad);
return status;
case IOCTL_MAC_ADDR_REQ:
case IOCTL_LINK_REQ:
case IOCTL_CM_REQUEST:
case IOCTL_SS_INFO_REQ:
case IOCTL_SEND_CONTROL_MESSAGE:
case IOCTL_IDLE_REQ:
status = bcm_char_ioctl_misc_request(argp, ad);
return status;
case IOCTL_BCM_BUFFER_DOWNLOAD_START:
status = bcm_char_ioctl_buffer_download_start(ad);
return status;
case IOCTL_BCM_BUFFER_DOWNLOAD:
status = bcm_char_ioctl_buffer_download(argp, ad);
return status;
case IOCTL_BCM_BUFFER_DOWNLOAD_STOP:
status = bcm_char_ioctl_buffer_download_stop(argp, ad);
return status;
case IOCTL_BE_BUCKET_SIZE:
status = 0;
if (get_user(ad->BEBucketSize,
(unsigned long __user *)arg))
status = -EFAULT;
break;
case IOCTL_RTPS_BUCKET_SIZE:
status = 0;
if (get_user(ad->rtPSBucketSize,
(unsigned long __user *)arg))
status = -EFAULT;
break;
case IOCTL_CHIP_RESET:
status = bcm_char_ioctl_chip_reset(ad);
return status;
case IOCTL_QOS_THRESHOLD:
status = bcm_char_ioctl_qos_threshold(arg, ad);
return status;
case IOCTL_DUMP_PACKET_INFO:
DumpPackInfo(ad);
DumpPhsRules(&ad->stBCMPhsContext);
status = STATUS_SUCCESS;
break;
case IOCTL_GET_PACK_INFO:
if (copy_to_user(argp, &ad->PackInfo,
sizeof(struct bcm_packet_info)*NO_OF_QUEUES))
return -EFAULT;
status = STATUS_SUCCESS;
break;
case IOCTL_BCM_SWITCH_TRANSFER_MODE:
status = bcm_char_ioctl_switch_transfer_mode(argp, ad);
return status;
case IOCTL_BCM_GET_DRIVER_VERSION:
status = bcm_char_ioctl_get_driver_version(argp);
return status;
case IOCTL_BCM_GET_CURRENT_STATUS:
status = bcm_char_ioctl_get_current_status(argp, ad);
return status;
case IOCTL_BCM_SET_MAC_TRACING:
status = bcm_char_ioctl_set_mac_tracing(argp, ad);
return status;
case IOCTL_BCM_GET_DSX_INDICATION:
status = bcm_char_ioctl_get_dsx_indication(argp, ad);
return status;
case IOCTL_BCM_GET_HOST_MIBS:
status = bcm_char_ioctl_get_host_mibs(argp, ad, tarang);
return status;
case IOCTL_BCM_WAKE_UP_DEVICE_FROM_IDLE:
if ((false == ad->bTriedToWakeUpFromlowPowerMode) &&
(TRUE == ad->IdleMode)) {
ad->usIdleModePattern = ABORT_IDLE_MODE;
ad->bWakeUpDevice = TRUE;
wake_up(&ad->process_rx_cntrlpkt);
}
status = STATUS_SUCCESS;
break;
case IOCTL_BCM_BULK_WRM:
status = bcm_char_ioctl_bulk_wrm(argp, ad, cmd);
return status;
case IOCTL_BCM_GET_NVM_SIZE:
status = bcm_char_ioctl_get_nvm_size(argp, ad);
return status;
case IOCTL_BCM_CAL_INIT:
status = bcm_char_ioctl_cal_init(argp, ad);
return status;
case IOCTL_BCM_SET_DEBUG:
status = bcm_char_ioctl_set_debug(argp, ad);
return status;
case IOCTL_BCM_NVM_READ:
case IOCTL_BCM_NVM_WRITE:
status = bcm_char_ioctl_nvm_rw(argp, ad, cmd);
return status;
case IOCTL_BCM_FLASH2X_SECTION_READ:
status = bcm_char_ioctl_flash2x_section_read(argp, ad);
return status;
case IOCTL_BCM_FLASH2X_SECTION_WRITE:
status = bcm_char_ioctl_flash2x_section_write(argp, ad);
return status;
case IOCTL_BCM_GET_FLASH2X_SECTION_BITMAP:
status = bcm_char_ioctl_flash2x_section_bitmap(argp, ad);
return status;
case IOCTL_BCM_SET_ACTIVE_SECTION:
status = bcm_char_ioctl_set_active_section(argp, ad);
return status;
case IOCTL_BCM_IDENTIFY_ACTIVE_SECTION:
/* Right Now we are taking care of only DSD */
ad->bAllDSDWriteAllow = false;
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_BCM_IDENTIFY_ACTIVE_SECTION called");
status = STATUS_SUCCESS;
break;
case IOCTL_BCM_COPY_SECTION:
status = bcm_char_ioctl_copy_section(argp, ad);
return status;
case IOCTL_BCM_GET_FLASH_CS_INFO:
status = bcm_char_ioctl_get_flash_cs_info(argp, ad);
return status;
case IOCTL_BCM_SELECT_DSD:
status = bcm_char_ioctl_select_dsd(argp, ad);
return status;
case IOCTL_BCM_NVM_RAW_READ:
status = bcm_char_ioctl_nvm_raw_read(argp, ad);
return status;
case IOCTL_BCM_CNTRLMSG_MASK:
status = bcm_char_ioctl_cntrlmsg_mask(argp, ad, tarang);
return status;
case IOCTL_BCM_GET_DEVICE_DRIVER_INFO:
status = bcm_char_ioctl_get_device_driver_info(argp, ad);
return status;
case IOCTL_BCM_TIME_SINCE_NET_ENTRY:
status = bcm_char_ioctl_time_since_net_entry(argp, ad);
return status;
case IOCTL_CLOSE_NOTIFICATION:
BCM_DEBUG_PRINT(ad, DBG_TYPE_OTHERS, OSAL_DBG, DBG_LVL_ALL,
"IOCTL_CLOSE_NOTIFICATION");
break;
default:
pr_info(DRV_NAME ": unknown ioctl cmd=%#x\n", cmd);
status = STATUS_FAILURE;
break;
}
return status;
}
static const struct file_operations bcm_fops = {
.owner = THIS_MODULE,
.open = bcm_char_open,
.release = bcm_char_release,
.read = bcm_char_read,
.unlocked_ioctl = bcm_char_ioctl,
.llseek = no_llseek,
};
int register_control_device_interface(struct bcm_mini_adapter *ad)
{
if (ad->major > 0)
return ad->major;
ad->major = register_chrdev(0, DEV_NAME, &bcm_fops);
if (ad->major < 0) {
pr_err(DRV_NAME ": could not created character device\n");
return ad->major;
}
ad->pstCreatedClassDevice = device_create(bcm_class, NULL,
MKDEV(ad->major, 0),
ad, DEV_NAME);
if (IS_ERR(ad->pstCreatedClassDevice)) {
pr_err(DRV_NAME ": class device create failed\n");
unregister_chrdev(ad->major, DEV_NAME);
return PTR_ERR(ad->pstCreatedClassDevice);
}
return 0;
}
void unregister_control_device_interface(struct bcm_mini_adapter *ad)
{
if (ad->major > 0) {
device_destroy(bcm_class, MKDEV(ad->major, 0));
unregister_chrdev(ad->major, DEV_NAME);
}
}