projects / GitHub / LineageOS / android_kernel_motorola_exynos9610.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
[PATCH] irq-flags: drivers/net: Use the new IRQF_ constants
[GitHub/LineageOS/android_kernel_motorola_exynos9610.git] / drivers / net / wireless / bcm43xx / bcm43xx_main.c
CommitLineData
f222313a
JL		 1/*
2
3 Broadcom BCM43xx wireless driver
4
5 Copyright (c) 2005 Martin Langer <martin-langer@gmx.de>,
6 Stefano Brivio <st3@riseup.net>
7 Michael Buesch <mbuesch@freenet.de>
8 Danny van Dyk <kugelfang@gentoo.org>
9 Andreas Jaggi <andreas.jaggi@waterwave.ch>
10
11 Some parts of the code in this file are derived from the ipw2200
12 driver Copyright(c) 2003 - 2004 Intel Corporation.
13
14 This program is free software; you can redistribute it and/or modify
15 it under the terms of the GNU General Public License as published by
16 the Free Software Foundation; either version 2 of the License, or
17 (at your option) any later version.
18
19 This program is distributed in the hope that it will be useful,
20 but WITHOUT ANY WARRANTY; without even the implied warranty of
21 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
22 GNU General Public License for more details.
23
24 You should have received a copy of the GNU General Public License
25 along with this program; see the file COPYING. If not, write to
26 the Free Software Foundation, Inc., 51 Franklin Steet, Fifth Floor,
27 Boston, MA 02110-1301, USA.
28
29*/
30
31#include <linux/delay.h>
32#include <linux/init.h>
33#include <linux/moduleparam.h>
34#include <linux/if_arp.h>
35#include <linux/etherdevice.h>
36#include <linux/version.h>
37#include <linux/firmware.h>
38#include <linux/wireless.h>
39#include <linux/workqueue.h>
40#include <linux/skbuff.h>
d1ca6c4f 41#include <linux/dma-mapping.h>
f222313a
JL		 42#include <net/iw_handler.h>
43
44#include "bcm43xx.h"
45#include "bcm43xx_main.h"
46#include "bcm43xx_debugfs.h"
47#include "bcm43xx_radio.h"
48#include "bcm43xx_phy.h"
49#include "bcm43xx_dma.h"
50#include "bcm43xx_pio.h"
51#include "bcm43xx_power.h"
52#include "bcm43xx_wx.h"
6465ce1b 53#include "bcm43xx_ethtool.h"
f398f02d 54#include "bcm43xx_xmit.h"
b35d649c 55#include "bcm43xx_sysfs.h"
f222313a
JL		 56
57
58MODULE_DESCRIPTION("Broadcom BCM43xx wireless driver");
59MODULE_AUTHOR("Martin Langer");
60MODULE_AUTHOR("Stefano Brivio");
61MODULE_AUTHOR("Michael Buesch");
62MODULE_LICENSE("GPL");
63
64#ifdef CONFIG_BCM947XX
65extern char *nvram_get(char *name);
66#endif
67
77db31ea 68#if defined(CONFIG_BCM43XX_DMA) && defined(CONFIG_BCM43XX_PIO)
f222313a
JL		 69static int modparam_pio;
70module_param_named(pio, modparam_pio, int, 0444);
71MODULE_PARM_DESC(pio, "enable(1) / disable(0) PIO mode");
77db31ea
MB		 72#elif defined(CONFIG_BCM43XX_DMA)
73# define modparam_pio 0
74#elif defined(CONFIG_BCM43XX_PIO)
75# define modparam_pio 1
76#endif
f222313a
JL		 77
78static int modparam_bad_frames_preempt;
79module_param_named(bad_frames_preempt, modparam_bad_frames_preempt, int, 0444);
80MODULE_PARM_DESC(bad_frames_preempt, "enable(1) / disable(0) Bad Frames Preemption");
81
82static int modparam_short_retry = BCM43xx_DEFAULT_SHORT_RETRY_LIMIT;
83module_param_named(short_retry, modparam_short_retry, int, 0444);
84MODULE_PARM_DESC(short_retry, "Short-Retry-Limit (0 - 15)");
85
86static int modparam_long_retry = BCM43xx_DEFAULT_LONG_RETRY_LIMIT;
87module_param_named(long_retry, modparam_long_retry, int, 0444);
88MODULE_PARM_DESC(long_retry, "Long-Retry-Limit (0 - 15)");
89
90static int modparam_locale = -1;
91module_param_named(locale, modparam_locale, int, 0444);
92MODULE_PARM_DESC(country, "Select LocaleCode 0-11 (For travelers)");
93
f222313a
JL		 94static int modparam_noleds;
95module_param_named(noleds, modparam_noleds, int, 0444);
96MODULE_PARM_DESC(noleds, "Turn off all LED activity");
97
98#ifdef CONFIG_BCM43XX_DEBUG
99static char modparam_fwpostfix[64];
100module_param_string(fwpostfix, modparam_fwpostfix, 64, 0444);
101MODULE_PARM_DESC(fwpostfix, "Postfix for .fw files. Useful for debugging.");
102#else
103# define modparam_fwpostfix ""
104#endif /* CONFIG_BCM43XX_DEBUG*/
105
106
107/* If you want to debug with just a single device, enable this,
108 * where the string is the pci device ID (as given by the kernel's
109 * pci_name function) of the device to be used.
110 */
111//#define DEBUG_SINGLE_DEVICE_ONLY "0001:11:00.0"
112
113/* If you want to enable printing of each MMIO access, enable this. */
114//#define DEBUG_ENABLE_MMIO_PRINT
115
116/* If you want to enable printing of MMIO access within
117 * ucode/pcm upload, initvals write, enable this.
118 */
119//#define DEBUG_ENABLE_UCODE_MMIO_PRINT
120
121/* If you want to enable printing of PCI Config Space access, enable this */
122//#define DEBUG_ENABLE_PCILOG
123
124
489423c8
MB		 125/* Detailed list maintained at:
126 * http://openfacts.berlios.de/index-en.phtml?title=Bcm43xxDevices
127 */
128 static struct pci_device_id bcm43xx_pci_tbl[] = {
f222313a
JL		 129 /* Broadcom 4303 802.11b */
130 { PCI_VENDOR_ID_BROADCOM, 0x4301, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
ec000ca9 131 /* Broadcom 4307 802.11b */
f222313a 132 { PCI_VENDOR_ID_BROADCOM, 0x4307, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
ec000ca9 133 /* Broadcom 4318 802.11b/g */
f222313a 134 { PCI_VENDOR_ID_BROADCOM, 0x4318, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
f03cc4fd
SB		 135 /* Broadcom 4319 802.11a/b/g */
136 { PCI_VENDOR_ID_BROADCOM, 0x4319, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
f222313a
JL		 137 /* Broadcom 4306 802.11b/g */
138 { PCI_VENDOR_ID_BROADCOM, 0x4320, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
ec000ca9 139 /* Broadcom 4306 802.11a */
f222313a 140// { PCI_VENDOR_ID_BROADCOM, 0x4321, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
f222313a
JL		 141 /* Broadcom 4309 802.11a/b/g */
142 { PCI_VENDOR_ID_BROADCOM, 0x4324, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
f222313a
JL		 143 /* Broadcom 43XG 802.11b/g */
144 { PCI_VENDOR_ID_BROADCOM, 0x4325, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
489423c8
MB		 145#ifdef CONFIG_BCM947XX
146 /* SB bus on BCM947xx */
147 { PCI_VENDOR_ID_BROADCOM, 0x0800, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0 },
148#endif
149 { 0 },
f222313a
JL		 150};
151MODULE_DEVICE_TABLE(pci, bcm43xx_pci_tbl);
152
153static void bcm43xx_ram_write(struct bcm43xx_private *bcm, u16 offset, u32 val)
154{
155 u32 status;
156
157 status = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD);
158 if (!(status & BCM43xx_SBF_XFER_REG_BYTESWAP))
159 val = swab32(val);
160
161 bcm43xx_write32(bcm, BCM43xx_MMIO_RAM_CONTROL, offset);
73733847 162 mmiowb();
f222313a
JL		 163 bcm43xx_write32(bcm, BCM43xx_MMIO_RAM_DATA, val);
164}
165
166static inline
167void bcm43xx_shm_control_word(struct bcm43xx_private *bcm,
168 u16 routing, u16 offset)
169{
170 u32 control;
171
172 /* "offset" is the WORD offset. */
173
174 control = routing;
175 control <<= 16;
176 control |= offset;
177 bcm43xx_write32(bcm, BCM43xx_MMIO_SHM_CONTROL, control);
178}
179
180u32 bcm43xx_shm_read32(struct bcm43xx_private *bcm,
181 u16 routing, u16 offset)
182{
183 u32 ret;
184
185 if (routing == BCM43xx_SHM_SHARED) {
186 if (offset & 0x0003) {
187 /* Unaligned access */
188 bcm43xx_shm_control_word(bcm, routing, offset >> 2);
189 ret = bcm43xx_read16(bcm, BCM43xx_MMIO_SHM_DATA_UNALIGNED);
190 ret <<= 16;
191 bcm43xx_shm_control_word(bcm, routing, (offset >> 2) + 1);
192 ret |= bcm43xx_read16(bcm, BCM43xx_MMIO_SHM_DATA);
193
194 return ret;
195 }
196 offset >>= 2;
197 }
198 bcm43xx_shm_control_word(bcm, routing, offset);
199 ret = bcm43xx_read32(bcm, BCM43xx_MMIO_SHM_DATA);
200
201 return ret;
202}
203
204u16 bcm43xx_shm_read16(struct bcm43xx_private *bcm,
205 u16 routing, u16 offset)
206{
207 u16 ret;
208
209 if (routing == BCM43xx_SHM_SHARED) {
210 if (offset & 0x0003) {
211 /* Unaligned access */
212 bcm43xx_shm_control_word(bcm, routing, offset >> 2);
213 ret = bcm43xx_read16(bcm, BCM43xx_MMIO_SHM_DATA_UNALIGNED);
214
215 return ret;
216 }
217 offset >>= 2;
218 }
219 bcm43xx_shm_control_word(bcm, routing, offset);
220 ret = bcm43xx_read16(bcm, BCM43xx_MMIO_SHM_DATA);
221
222 return ret;
223}
224
225void bcm43xx_shm_write32(struct bcm43xx_private *bcm,
226 u16 routing, u16 offset,
227 u32 value)
228{
229 if (routing == BCM43xx_SHM_SHARED) {
230 if (offset & 0x0003) {
231 /* Unaligned access */
232 bcm43xx_shm_control_word(bcm, routing, offset >> 2);
73733847 233 mmiowb();
f222313a
JL		 234 bcm43xx_write16(bcm, BCM43xx_MMIO_SHM_DATA_UNALIGNED,
235 (value >> 16) & 0xffff);
73733847 236 mmiowb();
f222313a 237 bcm43xx_shm_control_word(bcm, routing, (offset >> 2) + 1);
73733847 238 mmiowb();
f222313a
JL		 239 bcm43xx_write16(bcm, BCM43xx_MMIO_SHM_DATA,
240 value & 0xffff);
241 return;
242 }
243 offset >>= 2;
244 }
245 bcm43xx_shm_control_word(bcm, routing, offset);
73733847 246 mmiowb();
f222313a
JL		 247 bcm43xx_write32(bcm, BCM43xx_MMIO_SHM_DATA, value);
248}
249
250void bcm43xx_shm_write16(struct bcm43xx_private *bcm,
251 u16 routing, u16 offset,
252 u16 value)
253{
254 if (routing == BCM43xx_SHM_SHARED) {
255 if (offset & 0x0003) {
256 /* Unaligned access */
257 bcm43xx_shm_control_word(bcm, routing, offset >> 2);
73733847 258 mmiowb();
f222313a
JL		 259 bcm43xx_write16(bcm, BCM43xx_MMIO_SHM_DATA_UNALIGNED,
260 value);
261 return;
262 }
263 offset >>= 2;
264 }
265 bcm43xx_shm_control_word(bcm, routing, offset);
73733847 266 mmiowb();
f222313a
JL		 267 bcm43xx_write16(bcm, BCM43xx_MMIO_SHM_DATA, value);
268}
269
270void bcm43xx_tsf_read(struct bcm43xx_private *bcm, u64 *tsf)
271{
272 /* We need to be careful. As we read the TSF from multiple
273 * registers, we should take care of register overflows.
274 * In theory, the whole tsf read process should be atomic.
275 * We try to be atomic here, by restaring the read process,
276 * if any of the high registers changed (overflew).
277 */
278 if (bcm->current_core->rev >= 3) {
279 u32 low, high, high2;
280
281 do {
282 high = bcm43xx_read32(bcm, BCM43xx_MMIO_REV3PLUS_TSF_HIGH);
283 low = bcm43xx_read32(bcm, BCM43xx_MMIO_REV3PLUS_TSF_LOW);
284 high2 = bcm43xx_read32(bcm, BCM43xx_MMIO_REV3PLUS_TSF_HIGH);
285 } while (unlikely(high != high2));
286
287 *tsf = high;
288 *tsf <<= 32;
289 *tsf |= low;
290 } else {
291 u64 tmp;
292 u16 v0, v1, v2, v3;
293 u16 test1, test2, test3;
294
295 do {
296 v3 = bcm43xx_read16(bcm, BCM43xx_MMIO_TSF_3);
297 v2 = bcm43xx_read16(bcm, BCM43xx_MMIO_TSF_2);
298 v1 = bcm43xx_read16(bcm, BCM43xx_MMIO_TSF_1);
299 v0 = bcm43xx_read16(bcm, BCM43xx_MMIO_TSF_0);
300
301 test3 = bcm43xx_read16(bcm, BCM43xx_MMIO_TSF_3);
302 test2 = bcm43xx_read16(bcm, BCM43xx_MMIO_TSF_2);
303 test1 = bcm43xx_read16(bcm, BCM43xx_MMIO_TSF_1);
304 } while (v3 != test3 || v2 != test2 || v1 != test1);
305
306 *tsf = v3;
307 *tsf <<= 48;
308 tmp = v2;
309 tmp <<= 32;
310 *tsf |= tmp;
311 tmp = v1;
312 tmp <<= 16;
313 *tsf |= tmp;
314 *tsf |= v0;
315 }
316}
317
318void bcm43xx_tsf_write(struct bcm43xx_private *bcm, u64 tsf)
319{
320 u32 status;
321
322 status = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD);
323 status |= BCM43xx_SBF_TIME_UPDATE;
324 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD, status);
73733847 325 mmiowb();
f222313a
JL		 326
327 /* Be careful with the in-progress timer.
328 * First zero out the low register, so we have a full
329 * register-overflow duration to complete the operation.
330 */
331 if (bcm->current_core->rev >= 3) {
332 u32 lo = (tsf & 0x00000000FFFFFFFFULL);
333 u32 hi = (tsf & 0xFFFFFFFF00000000ULL) >> 32;
334
f222313a 335 bcm43xx_write32(bcm, BCM43xx_MMIO_REV3PLUS_TSF_LOW, 0);
73733847 336 mmiowb();
f222313a 337 bcm43xx_write32(bcm, BCM43xx_MMIO_REV3PLUS_TSF_HIGH, hi);
73733847 338 mmiowb();
f222313a
JL		 339 bcm43xx_write32(bcm, BCM43xx_MMIO_REV3PLUS_TSF_LOW, lo);
340 } else {
341 u16 v0 = (tsf & 0x000000000000FFFFULL);
342 u16 v1 = (tsf & 0x00000000FFFF0000ULL) >> 16;
343 u16 v2 = (tsf & 0x0000FFFF00000000ULL) >> 32;
344 u16 v3 = (tsf & 0xFFFF000000000000ULL) >> 48;
345
f222313a 346 bcm43xx_write16(bcm, BCM43xx_MMIO_TSF_0, 0);
73733847 347 mmiowb();
f222313a 348 bcm43xx_write16(bcm, BCM43xx_MMIO_TSF_3, v3);
73733847 349 mmiowb();
f222313a 350 bcm43xx_write16(bcm, BCM43xx_MMIO_TSF_2, v2);
73733847 351 mmiowb();
f222313a 352 bcm43xx_write16(bcm, BCM43xx_MMIO_TSF_1, v1);
73733847 353 mmiowb();
f222313a
JL		 354 bcm43xx_write16(bcm, BCM43xx_MMIO_TSF_0, v0);
355 }
356
357 status = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD);
358 status &= ~BCM43xx_SBF_TIME_UPDATE;
359 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD, status);
360}
361
f222313a
JL		 362static
363void bcm43xx_macfilter_set(struct bcm43xx_private *bcm,
364 u16 offset,
365 const u8 *mac)
366{
367 u16 data;
368
369 offset |= 0x0020;
370 bcm43xx_write16(bcm, BCM43xx_MMIO_MACFILTER_CONTROL, offset);
371
372 data = mac[0];
373 data |= mac[1] << 8;
374 bcm43xx_write16(bcm, BCM43xx_MMIO_MACFILTER_DATA, data);
375 data = mac[2];
376 data |= mac[3] << 8;
377 bcm43xx_write16(bcm, BCM43xx_MMIO_MACFILTER_DATA, data);
378 data = mac[4];
379 data |= mac[5] << 8;
380 bcm43xx_write16(bcm, BCM43xx_MMIO_MACFILTER_DATA, data);
381}
382
489423c8
MB		 383static void bcm43xx_macfilter_clear(struct bcm43xx_private *bcm,
384 u16 offset)
f222313a
JL		 385{
386 const u8 zero_addr[ETH_ALEN] = { 0 };
387
388 bcm43xx_macfilter_set(bcm, offset, zero_addr);
389}
390
391static void bcm43xx_write_mac_bssid_templates(struct bcm43xx_private *bcm)
392{
393 const u8 *mac = (const u8 *)(bcm->net_dev->dev_addr);
394 const u8 *bssid = (const u8 *)(bcm->ieee->bssid);
395 u8 mac_bssid[ETH_ALEN * 2];
396 int i;
397
398 memcpy(mac_bssid, mac, ETH_ALEN);
399 memcpy(mac_bssid + ETH_ALEN, bssid, ETH_ALEN);
400
401 /* Write our MAC address and BSSID to template ram */
402 for (i = 0; i < ARRAY_SIZE(mac_bssid); i += sizeof(u32))
403 bcm43xx_ram_write(bcm, 0x20 + i, *((u32 *)(mac_bssid + i)));
404 for (i = 0; i < ARRAY_SIZE(mac_bssid); i += sizeof(u32))
405 bcm43xx_ram_write(bcm, 0x78 + i, *((u32 *)(mac_bssid + i)));
406 for (i = 0; i < ARRAY_SIZE(mac_bssid); i += sizeof(u32))
407 bcm43xx_ram_write(bcm, 0x478 + i, *((u32 *)(mac_bssid + i)));
408}
409
b5e868ed
MB		 410//FIXME: Well, we should probably call them from somewhere.
411#if 0
489423c8 412static void bcm43xx_set_slot_time(struct bcm43xx_private *bcm, u16 slot_time)
f222313a
JL		 413{
414 /* slot_time is in usec. */
e9357c05 415 if (bcm43xx_current_phy(bcm)->type != BCM43xx_PHYTYPE_G)
f222313a
JL		 416 return;
417 bcm43xx_write16(bcm, 0x684, 510 + slot_time);
418 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x0010, slot_time);
419}
420
489423c8 421static void bcm43xx_short_slot_timing_enable(struct bcm43xx_private *bcm)
f222313a
JL		 422{
423 bcm43xx_set_slot_time(bcm, 9);
424}
425
489423c8 426static void bcm43xx_short_slot_timing_disable(struct bcm43xx_private *bcm)
f222313a
JL		 427{
428 bcm43xx_set_slot_time(bcm, 20);
429}
b5e868ed 430#endif
f222313a 431
b5e868ed
MB		 432/* FIXME: To get the MAC-filter working, we need to implement the
433 * following functions (and rename them :)
434 */
435#if 0
f222313a
JL		 436static void bcm43xx_disassociate(struct bcm43xx_private *bcm)
437{
438 bcm43xx_mac_suspend(bcm);
439 bcm43xx_macfilter_clear(bcm, BCM43xx_MACFILTER_ASSOC);
440
441 bcm43xx_ram_write(bcm, 0x0026, 0x0000);
442 bcm43xx_ram_write(bcm, 0x0028, 0x0000);
443 bcm43xx_ram_write(bcm, 0x007E, 0x0000);
444 bcm43xx_ram_write(bcm, 0x0080, 0x0000);
445 bcm43xx_ram_write(bcm, 0x047E, 0x0000);
446 bcm43xx_ram_write(bcm, 0x0480, 0x0000);
447
448 if (bcm->current_core->rev < 3) {
449 bcm43xx_write16(bcm, 0x0610, 0x8000);
450 bcm43xx_write16(bcm, 0x060E, 0x0000);
451 } else
452 bcm43xx_write32(bcm, 0x0188, 0x80000000);
453
454 bcm43xx_shm_write32(bcm, BCM43xx_SHM_WIRELESS, 0x0004, 0x000003ff);
455
e9357c05 456 if (bcm43xx_current_phy(bcm)->type == BCM43xx_PHYTYPE_G &&
f222313a
JL		 457 ieee80211_is_ofdm_rate(bcm->softmac->txrates.default_rate))
458 bcm43xx_short_slot_timing_enable(bcm);
459
460 bcm43xx_mac_enable(bcm);
461}
462
f222313a
JL		 463static void bcm43xx_associate(struct bcm43xx_private *bcm,
464 const u8 *mac)
465{
466 memcpy(bcm->ieee->bssid, mac, ETH_ALEN);
467
468 bcm43xx_mac_suspend(bcm);
469 bcm43xx_macfilter_set(bcm, BCM43xx_MACFILTER_ASSOC, mac);
470 bcm43xx_write_mac_bssid_templates(bcm);
471 bcm43xx_mac_enable(bcm);
472}
b5e868ed 473#endif
f222313a
JL		 474
475/* Enable a Generic IRQ. "mask" is the mask of which IRQs to enable.
476 * Returns the _previously_ enabled IRQ mask.
477 */
478static inline u32 bcm43xx_interrupt_enable(struct bcm43xx_private *bcm, u32 mask)
479{
480 u32 old_mask;
481
482 old_mask = bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_MASK);
483 bcm43xx_write32(bcm, BCM43xx_MMIO_GEN_IRQ_MASK, old_mask | mask);
484
485 return old_mask;
486}
487
488/* Disable a Generic IRQ. "mask" is the mask of which IRQs to disable.
489 * Returns the _previously_ enabled IRQ mask.
490 */
491static inline u32 bcm43xx_interrupt_disable(struct bcm43xx_private *bcm, u32 mask)
492{
493 u32 old_mask;
494
495 old_mask = bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_MASK);
496 bcm43xx_write32(bcm, BCM43xx_MMIO_GEN_IRQ_MASK, old_mask & ~mask);
497
498 return old_mask;
499}
500
91769e7d
MB		 501/* Synchronize IRQ top- and bottom-half.
502 * IRQs must be masked before calling this.
503 * This must not be called with the irq_lock held.
504 */
505static void bcm43xx_synchronize_irq(struct bcm43xx_private *bcm)
506{
507 synchronize_irq(bcm->irq);
508 tasklet_disable(&bcm->isr_tasklet);
509}
510
f222313a
JL		 511/* Make sure we don't receive more data from the device. */
512static int bcm43xx_disable_interrupts_sync(struct bcm43xx_private *bcm, u32 *oldstate)
513{
f222313a 514 unsigned long flags;
91769e7d 515 u32 old;
f222313a 516
78ff56a0
MB		 517 bcm43xx_lock_irqonly(bcm, flags);
518 if (unlikely(bcm43xx_status(bcm) != BCM43xx_STAT_INITIALIZED)) {
519 bcm43xx_unlock_irqonly(bcm, flags);
f222313a
JL		 520 return -EBUSY;
521 }
522 old = bcm43xx_interrupt_disable(bcm, BCM43xx_IRQ_ALL);
78ff56a0 523 bcm43xx_unlock_irqonly(bcm, flags);
91769e7d
MB		 524 bcm43xx_synchronize_irq(bcm);
525
f222313a
JL		 526 if (oldstate)
527 *oldstate = old;
528
529 return 0;
530}
531
532static int bcm43xx_read_radioinfo(struct bcm43xx_private *bcm)
533{
e9357c05
MB		 534 struct bcm43xx_radioinfo *radio = bcm43xx_current_radio(bcm);
535 struct bcm43xx_phyinfo *phy = bcm43xx_current_phy(bcm);
f222313a
JL		 536 u32 radio_id;
537 u16 manufact;
538 u16 version;
539 u8 revision;
540 s8 i;
541
542 if (bcm->chip_id == 0x4317) {
543 if (bcm->chip_rev == 0x00)
544 radio_id = 0x3205017F;
545 else if (bcm->chip_rev == 0x01)
546 radio_id = 0x4205017F;
547 else
548 radio_id = 0x5205017F;
549 } else {
550 bcm43xx_write16(bcm, BCM43xx_MMIO_RADIO_CONTROL, BCM43xx_RADIOCTL_ID);
551 radio_id = bcm43xx_read16(bcm, BCM43xx_MMIO_RADIO_DATA_HIGH);
552 radio_id <<= 16;
553 bcm43xx_write16(bcm, BCM43xx_MMIO_RADIO_CONTROL, BCM43xx_RADIOCTL_ID);
554 radio_id |= bcm43xx_read16(bcm, BCM43xx_MMIO_RADIO_DATA_LOW);
555 }
556
557 manufact = (radio_id & 0x00000FFF);
558 version = (radio_id & 0x0FFFF000) >> 12;
559 revision = (radio_id & 0xF0000000) >> 28;
560
489423c8 561 dprintk(KERN_INFO PFX "Detected Radio: ID: %x (Manuf: %x Ver: %x Rev: %x)\n",
f222313a
JL		 562 radio_id, manufact, version, revision);
563
489423c8 564 switch (phy->type) {
f222313a
JL		 565 case BCM43xx_PHYTYPE_A:
566 if ((version != 0x2060) || (revision != 1) || (manufact != 0x17f))
567 goto err_unsupported_radio;
568 break;
569 case BCM43xx_PHYTYPE_B:
570 if ((version & 0xFFF0) != 0x2050)
571 goto err_unsupported_radio;
572 break;
573 case BCM43xx_PHYTYPE_G:
574 if (version != 0x2050)
575 goto err_unsupported_radio;
576 break;
577 }
578
489423c8
MB		 579 radio->manufact = manufact;
580 radio->version = version;
581 radio->revision = revision;
f222313a
JL		 582
583 /* Set default attenuation values. */
6ecb2690
MB		 584 radio->baseband_atten = bcm43xx_default_baseband_attenuation(bcm);
585 radio->radio_atten = bcm43xx_default_radio_attenuation(bcm);
586 radio->txctl1 = bcm43xx_default_txctl1(bcm);
adc40e97 587 radio->txctl2 = 0xFFFF;
e9357c05 588 if (phy->type == BCM43xx_PHYTYPE_A)
489423c8 589 radio->txpower_desired = bcm->sprom.maxpower_aphy;
393344f6 590 else
e9357c05 591 radio->txpower_desired = bcm->sprom.maxpower_bgphy;
f222313a
JL		 592
593 /* Initialize the in-memory nrssi Lookup Table. */
594 for (i = 0; i < 64; i++)
489423c8 595 radio->nrssi_lt[i] = i;
f222313a
JL		 596
597 return 0;
598
599err_unsupported_radio:
600 printk(KERN_ERR PFX "Unsupported Radio connected to the PHY!\n");
601 return -ENODEV;
602}
603
604static const char * bcm43xx_locale_iso(u8 locale)
605{
606 /* ISO 3166-1 country codes.
607 * Note that there aren't ISO 3166-1 codes for
608 * all or locales. (Not all locales are countries)
609 */
610 switch (locale) {
611 case BCM43xx_LOCALE_WORLD:
612 case BCM43xx_LOCALE_ALL:
613 return "XX";
614 case BCM43xx_LOCALE_THAILAND:
615 return "TH";
616 case BCM43xx_LOCALE_ISRAEL:
617 return "IL";
618 case BCM43xx_LOCALE_JORDAN:
619 return "JO";
620 case BCM43xx_LOCALE_CHINA:
621 return "CN";
622 case BCM43xx_LOCALE_JAPAN:
623 case BCM43xx_LOCALE_JAPAN_HIGH:
624 return "JP";
625 case BCM43xx_LOCALE_USA_CANADA_ANZ:
626 case BCM43xx_LOCALE_USA_LOW:
627 return "US";
628 case BCM43xx_LOCALE_EUROPE:
629 return "EU";
630 case BCM43xx_LOCALE_NONE:
631 return " ";
632 }
633 assert(0);
634 return " ";
635}
636
637static const char * bcm43xx_locale_string(u8 locale)
638{
639 switch (locale) {
640 case BCM43xx_LOCALE_WORLD:
641 return "World";
642 case BCM43xx_LOCALE_THAILAND:
643 return "Thailand";
644 case BCM43xx_LOCALE_ISRAEL:
645 return "Israel";
646 case BCM43xx_LOCALE_JORDAN:
647 return "Jordan";
648 case BCM43xx_LOCALE_CHINA:
649 return "China";
650 case BCM43xx_LOCALE_JAPAN:
651 return "Japan";
652 case BCM43xx_LOCALE_USA_CANADA_ANZ:
653 return "USA/Canada/ANZ";
654 case BCM43xx_LOCALE_EUROPE:
655 return "Europe";
656 case BCM43xx_LOCALE_USA_LOW:
657 return "USAlow";
658 case BCM43xx_LOCALE_JAPAN_HIGH:
659 return "JapanHigh";
660 case BCM43xx_LOCALE_ALL:
661 return "All";
662 case BCM43xx_LOCALE_NONE:
663 return "None";
664 }
665 assert(0);
666 return "";
667}
668
669static inline u8 bcm43xx_crc8(u8 crc, u8 data)
670{
671 static const u8 t[] = {
672 0x00, 0xF7, 0xB9, 0x4E, 0x25, 0xD2, 0x9C, 0x6B,
673 0x4A, 0xBD, 0xF3, 0x04, 0x6F, 0x98, 0xD6, 0x21,
674 0x94, 0x63, 0x2D, 0xDA, 0xB1, 0x46, 0x08, 0xFF,
675 0xDE, 0x29, 0x67, 0x90, 0xFB, 0x0C, 0x42, 0xB5,
676 0x7F, 0x88, 0xC6, 0x31, 0x5A, 0xAD, 0xE3, 0x14,
677 0x35, 0xC2, 0x8C, 0x7B, 0x10, 0xE7, 0xA9, 0x5E,
678 0xEB, 0x1C, 0x52, 0xA5, 0xCE, 0x39, 0x77, 0x80,
679 0xA1, 0x56, 0x18, 0xEF, 0x84, 0x73, 0x3D, 0xCA,
680 0xFE, 0x09, 0x47, 0xB0, 0xDB, 0x2C, 0x62, 0x95,
681 0xB4, 0x43, 0x0D, 0xFA, 0x91, 0x66, 0x28, 0xDF,
682 0x6A, 0x9D, 0xD3, 0x24, 0x4F, 0xB8, 0xF6, 0x01,
683 0x20, 0xD7, 0x99, 0x6E, 0x05, 0xF2, 0xBC, 0x4B,
684 0x81, 0x76, 0x38, 0xCF, 0xA4, 0x53, 0x1D, 0xEA,
685 0xCB, 0x3C, 0x72, 0x85, 0xEE, 0x19, 0x57, 0xA0,
686 0x15, 0xE2, 0xAC, 0x5B, 0x30, 0xC7, 0x89, 0x7E,
687 0x5F, 0xA8, 0xE6, 0x11, 0x7A, 0x8D, 0xC3, 0x34,
688 0xAB, 0x5C, 0x12, 0xE5, 0x8E, 0x79, 0x37, 0xC0,
689 0xE1, 0x16, 0x58, 0xAF, 0xC4, 0x33, 0x7D, 0x8A,
690 0x3F, 0xC8, 0x86, 0x71, 0x1A, 0xED, 0xA3, 0x54,
691 0x75, 0x82, 0xCC, 0x3B, 0x50, 0xA7, 0xE9, 0x1E,
692 0xD4, 0x23, 0x6D, 0x9A, 0xF1, 0x06, 0x48, 0xBF,
693 0x9E, 0x69, 0x27, 0xD0, 0xBB, 0x4C, 0x02, 0xF5,
694 0x40, 0xB7, 0xF9, 0x0E, 0x65, 0x92, 0xDC, 0x2B,
695 0x0A, 0xFD, 0xB3, 0x44, 0x2F, 0xD8, 0x96, 0x61,
696 0x55, 0xA2, 0xEC, 0x1B, 0x70, 0x87, 0xC9, 0x3E,
697 0x1F, 0xE8, 0xA6, 0x51, 0x3A, 0xCD, 0x83, 0x74,
698 0xC1, 0x36, 0x78, 0x8F, 0xE4, 0x13, 0x5D, 0xAA,
699 0x8B, 0x7C, 0x32, 0xC5, 0xAE, 0x59, 0x17, 0xE0,
700 0x2A, 0xDD, 0x93, 0x64, 0x0F, 0xF8, 0xB6, 0x41,
701 0x60, 0x97, 0xD9, 0x2E, 0x45, 0xB2, 0xFC, 0x0B,
702 0xBE, 0x49, 0x07, 0xF0, 0x9B, 0x6C, 0x22, 0xD5,
703 0xF4, 0x03, 0x4D, 0xBA, 0xD1, 0x26, 0x68, 0x9F,
704 };
705 return t[crc ^ data];
706}
707
ad3f086c 708static u8 bcm43xx_sprom_crc(const u16 *sprom)
f222313a
JL		 709{
710 int word;
711 u8 crc = 0xFF;
712
713 for (word = 0; word < BCM43xx_SPROM_SIZE - 1; word++) {
714 crc = bcm43xx_crc8(crc, sprom[word] & 0x00FF);
715 crc = bcm43xx_crc8(crc, (sprom[word] & 0xFF00) >> 8);
716 }
717 crc = bcm43xx_crc8(crc, sprom[BCM43xx_SPROM_VERSION] & 0x00FF);
718 crc ^= 0xFF;
719
720 return crc;
721}
722
ea0922b0 723int bcm43xx_sprom_read(struct bcm43xx_private *bcm, u16 *sprom)
f222313a
JL		 724{
725 int i;
ea0922b0
MB		 726 u8 crc, expected_crc;
727
728 for (i = 0; i < BCM43xx_SPROM_SIZE; i++)
729 sprom[i] = bcm43xx_read16(bcm, BCM43xx_SPROM_BASE + (i * 2));
730 /* CRC-8 check. */
731 crc = bcm43xx_sprom_crc(sprom);
732 expected_crc = (sprom[BCM43xx_SPROM_VERSION] & 0xFF00) >> 8;
733 if (crc != expected_crc) {
734 printk(KERN_WARNING PFX "WARNING: Invalid SPROM checksum "
735 "(0x%02X, expected: 0x%02X)\n",
736 crc, expected_crc);
737 return -EINVAL;
738 }
739
740 return 0;
741}
742
743int bcm43xx_sprom_write(struct bcm43xx_private *bcm, const u16 *sprom)
744{
745 int i, err;
746 u8 crc, expected_crc;
747 u32 spromctl;
748
749 /* CRC-8 validation of the input data. */
750 crc = bcm43xx_sprom_crc(sprom);
751 expected_crc = (sprom[BCM43xx_SPROM_VERSION] & 0xFF00) >> 8;
752 if (crc != expected_crc) {
753 printk(KERN_ERR PFX "SPROM input data: Invalid CRC\n");
754 return -EINVAL;
755 }
756
757 printk(KERN_INFO PFX "Writing SPROM. Do NOT turn off the power! Please stand by...\n");
758 err = bcm43xx_pci_read_config32(bcm, BCM43xx_PCICFG_SPROMCTL, &spromctl);
759 if (err)
760 goto err_ctlreg;
761 spromctl |= 0x10; /* SPROM WRITE enable. */
762 bcm43xx_pci_write_config32(bcm, BCM43xx_PCICFG_SPROMCTL, spromctl);
763 if (err)
764 goto err_ctlreg;
765 /* We must burn lots of CPU cycles here, but that does not
766 * really matter as one does not write the SPROM every other minute...
767 */
768 printk(KERN_INFO PFX "[ 0%%");
769 mdelay(500);
770 for (i = 0; i < BCM43xx_SPROM_SIZE; i++) {
771 if (i == 16)
772 printk("25%%");
773 else if (i == 32)
774 printk("50%%");
775 else if (i == 48)
776 printk("75%%");
777 else if (i % 2)
778 printk(".");
779 bcm43xx_write16(bcm, BCM43xx_SPROM_BASE + (i * 2), sprom[i]);
efccb647 780 mmiowb();
ea0922b0
MB		 781 mdelay(20);
782 }
783 spromctl &= ~0x10; /* SPROM WRITE enable. */
784 bcm43xx_pci_write_config32(bcm, BCM43xx_PCICFG_SPROMCTL, spromctl);
785 if (err)
786 goto err_ctlreg;
787 mdelay(500);
788 printk("100%% ]\n");
789 printk(KERN_INFO PFX "SPROM written.\n");
790 bcm43xx_controller_restart(bcm, "SPROM update");
791
792 return 0;
793err_ctlreg:
794 printk(KERN_ERR PFX "Could not access SPROM control register.\n");
795 return -ENODEV;
796}
797
798static int bcm43xx_sprom_extract(struct bcm43xx_private *bcm)
799{
f222313a
JL		 800 u16 value;
801 u16 *sprom;
f222313a
JL		 802#ifdef CONFIG_BCM947XX
803 char *c;
804#endif
805
806 sprom = kzalloc(BCM43xx_SPROM_SIZE * sizeof(u16),
807 GFP_KERNEL);
808 if (!sprom) {
ea0922b0 809 printk(KERN_ERR PFX "sprom_extract OOM\n");
f222313a
JL		 810 return -ENOMEM;
811 }
812#ifdef CONFIG_BCM947XX
813 sprom[BCM43xx_SPROM_BOARDFLAGS2] = atoi(nvram_get("boardflags2"));
814 sprom[BCM43xx_SPROM_BOARDFLAGS] = atoi(nvram_get("boardflags"));
815
816 if ((c = nvram_get("il0macaddr")) != NULL)
817 e_aton(c, (char *) &(sprom[BCM43xx_SPROM_IL0MACADDR]));
818
819 if ((c = nvram_get("et1macaddr")) != NULL)
820 e_aton(c, (char *) &(sprom[BCM43xx_SPROM_ET1MACADDR]));
821
822 sprom[BCM43xx_SPROM_PA0B0] = atoi(nvram_get("pa0b0"));
823 sprom[BCM43xx_SPROM_PA0B1] = atoi(nvram_get("pa0b1"));
824 sprom[BCM43xx_SPROM_PA0B2] = atoi(nvram_get("pa0b2"));
825
826 sprom[BCM43xx_SPROM_PA1B0] = atoi(nvram_get("pa1b0"));
827 sprom[BCM43xx_SPROM_PA1B1] = atoi(nvram_get("pa1b1"));
828 sprom[BCM43xx_SPROM_PA1B2] = atoi(nvram_get("pa1b2"));
829
830 sprom[BCM43xx_SPROM_BOARDREV] = atoi(nvram_get("boardrev"));
831#else
ea0922b0 832 bcm43xx_sprom_read(bcm, sprom);
f222313a
JL		 833#endif
834
835 /* boardflags2 */
836 value = sprom[BCM43xx_SPROM_BOARDFLAGS2];
837 bcm->sprom.boardflags2 = value;
838
839 /* il0macaddr */
840 value = sprom[BCM43xx_SPROM_IL0MACADDR + 0];
841 *(((u16 *)bcm->sprom.il0macaddr) + 0) = cpu_to_be16(value);
842 value = sprom[BCM43xx_SPROM_IL0MACADDR + 1];
843 *(((u16 *)bcm->sprom.il0macaddr) + 1) = cpu_to_be16(value);
844 value = sprom[BCM43xx_SPROM_IL0MACADDR + 2];
845 *(((u16 *)bcm->sprom.il0macaddr) + 2) = cpu_to_be16(value);
846
847 /* et0macaddr */
848 value = sprom[BCM43xx_SPROM_ET0MACADDR + 0];
849 *(((u16 *)bcm->sprom.et0macaddr) + 0) = cpu_to_be16(value);
850 value = sprom[BCM43xx_SPROM_ET0MACADDR + 1];
851 *(((u16 *)bcm->sprom.et0macaddr) + 1) = cpu_to_be16(value);
852 value = sprom[BCM43xx_SPROM_ET0MACADDR + 2];
853 *(((u16 *)bcm->sprom.et0macaddr) + 2) = cpu_to_be16(value);
854
855 /* et1macaddr */
856 value = sprom[BCM43xx_SPROM_ET1MACADDR + 0];
857 *(((u16 *)bcm->sprom.et1macaddr) + 0) = cpu_to_be16(value);
858 value = sprom[BCM43xx_SPROM_ET1MACADDR + 1];
859 *(((u16 *)bcm->sprom.et1macaddr) + 1) = cpu_to_be16(value);
860 value = sprom[BCM43xx_SPROM_ET1MACADDR + 2];
861 *(((u16 *)bcm->sprom.et1macaddr) + 2) = cpu_to_be16(value);
862
863 /* ethernet phy settings */
864 value = sprom[BCM43xx_SPROM_ETHPHY];
865 bcm->sprom.et0phyaddr = (value & 0x001F);
866 bcm->sprom.et1phyaddr = (value & 0x03E0) >> 5;
867 bcm->sprom.et0mdcport = (value & (1 << 14)) >> 14;
868 bcm->sprom.et1mdcport = (value & (1 << 15)) >> 15;
869
870 /* boardrev, antennas, locale */
871 value = sprom[BCM43xx_SPROM_BOARDREV];
872 bcm->sprom.boardrev = (value & 0x00FF);
873 bcm->sprom.locale = (value & 0x0F00) >> 8;
874 bcm->sprom.antennas_aphy = (value & 0x3000) >> 12;
875 bcm->sprom.antennas_bgphy = (value & 0xC000) >> 14;
876 if (modparam_locale != -1) {
877 if (modparam_locale >= 0 && modparam_locale <= 11) {
878 bcm->sprom.locale = modparam_locale;
879 printk(KERN_WARNING PFX "Operating with modified "
880 "LocaleCode %u (%s)\n",
881 bcm->sprom.locale,
882 bcm43xx_locale_string(bcm->sprom.locale));
883 } else {
884 printk(KERN_WARNING PFX "Module parameter \"locale\" "
885 "invalid value. (0 - 11)\n");
886 }
887 }
888
889 /* pa0b* */
890 value = sprom[BCM43xx_SPROM_PA0B0];
891 bcm->sprom.pa0b0 = value;
892 value = sprom[BCM43xx_SPROM_PA0B1];
893 bcm->sprom.pa0b1 = value;
894 value = sprom[BCM43xx_SPROM_PA0B2];
895 bcm->sprom.pa0b2 = value;
896
897 /* wl0gpio* */
898 value = sprom[BCM43xx_SPROM_WL0GPIO0];
899 if (value == 0x0000)
900 value = 0xFFFF;
901 bcm->sprom.wl0gpio0 = value & 0x00FF;
902 bcm->sprom.wl0gpio1 = (value & 0xFF00) >> 8;
903 value = sprom[BCM43xx_SPROM_WL0GPIO2];
904 if (value == 0x0000)
905 value = 0xFFFF;
906 bcm->sprom.wl0gpio2 = value & 0x00FF;
907 bcm->sprom.wl0gpio3 = (value & 0xFF00) >> 8;
908
909 /* maxpower */
910 value = sprom[BCM43xx_SPROM_MAXPWR];
911 bcm->sprom.maxpower_aphy = (value & 0xFF00) >> 8;
912 bcm->sprom.maxpower_bgphy = value & 0x00FF;
913
914 /* pa1b* */
915 value = sprom[BCM43xx_SPROM_PA1B0];
916 bcm->sprom.pa1b0 = value;
917 value = sprom[BCM43xx_SPROM_PA1B1];
918 bcm->sprom.pa1b1 = value;
919 value = sprom[BCM43xx_SPROM_PA1B2];
920 bcm->sprom.pa1b2 = value;
921
922 /* idle tssi target */
923 value = sprom[BCM43xx_SPROM_IDL_TSSI_TGT];
924 bcm->sprom.idle_tssi_tgt_aphy = value & 0x00FF;
925 bcm->sprom.idle_tssi_tgt_bgphy = (value & 0xFF00) >> 8;
926
927 /* boardflags */
928 value = sprom[BCM43xx_SPROM_BOARDFLAGS];
929 if (value == 0xFFFF)
930 value = 0x0000;
931 bcm->sprom.boardflags = value;
b3db5e55
MB		 932 /* boardflags workarounds */
933 if (bcm->board_vendor == PCI_VENDOR_ID_DELL &&
934 bcm->chip_id == 0x4301 &&
935 bcm->board_revision == 0x74)
936 bcm->sprom.boardflags |= BCM43xx_BFL_BTCOEXIST;
937 if (bcm->board_vendor == PCI_VENDOR_ID_APPLE &&
938 bcm->board_type == 0x4E &&
939 bcm->board_revision > 0x40)
940 bcm->sprom.boardflags |= BCM43xx_BFL_PACTRL;
f222313a
JL		 941
942 /* antenna gain */
943 value = sprom[BCM43xx_SPROM_ANTENNA_GAIN];
944 if (value == 0x0000 || value == 0xFFFF)
945 value = 0x0202;
946 /* convert values to Q5.2 */
947 bcm->sprom.antennagain_aphy = ((value & 0xFF00) >> 8) * 4;
948 bcm->sprom.antennagain_bgphy = (value & 0x00FF) * 4;
949
950 kfree(sprom);
951
952 return 0;
953}
954
869aaab1 955static int bcm43xx_geo_init(struct bcm43xx_private *bcm)
f222313a 956{
869aaab1 957 struct ieee80211_geo *geo;
f222313a
JL		 958 struct ieee80211_channel *chan;
959 int have_a = 0, have_bg = 0;
e9357c05 960 int i;
9e4a375b 961 u8 channel;
f222313a
JL		 962 struct bcm43xx_phyinfo *phy;
963 const char *iso_country;
964
869aaab1
MB		 965 geo = kzalloc(sizeof(*geo), GFP_KERNEL);
966 if (!geo)
967 return -ENOMEM;
968
e9357c05
MB		 969 for (i = 0; i < bcm->nr_80211_available; i++) {
970 phy = &(bcm->core_80211_ext[i].phy);
f222313a
JL		 971 switch (phy->type) {
972 case BCM43xx_PHYTYPE_B:
973 case BCM43xx_PHYTYPE_G:
974 have_bg = 1;
975 break;
976 case BCM43xx_PHYTYPE_A:
977 have_a = 1;
978 break;
979 default:
980 assert(0);
981 }
982 }
983 iso_country = bcm43xx_locale_iso(bcm->sprom.locale);
984
985 if (have_a) {
869aaab1
MB		 986 for (i = 0, channel = IEEE80211_52GHZ_MIN_CHANNEL;
987 channel <= IEEE80211_52GHZ_MAX_CHANNEL; channel++) {
988 chan = &geo->a[i++];
10d8dd88 989 chan->freq = bcm43xx_channel_to_freq_a(channel);
f222313a 990 chan->channel = channel;
f222313a 991 }
869aaab1 992 geo->a_channels = i;
f222313a
JL		 993 }
994 if (have_bg) {
869aaab1
MB		 995 for (i = 0, channel = IEEE80211_24GHZ_MIN_CHANNEL;
996 channel <= IEEE80211_24GHZ_MAX_CHANNEL; channel++) {
997 chan = &geo->bg[i++];
10d8dd88 998 chan->freq = bcm43xx_channel_to_freq_bg(channel);
f222313a 999 chan->channel = channel;
f222313a 1000 }
869aaab1 1001 geo->bg_channels = i;
f222313a 1002 }
869aaab1 1003 memcpy(geo->name, iso_country, 2);
f222313a 1004 if (0 /*TODO: Outdoor use only */)
869aaab1 1005 geo->name[2] = 'O';
f222313a 1006 else if (0 /*TODO: Indoor use only */)
869aaab1 1007 geo->name[2] = 'I';
f222313a 1008 else
869aaab1
MB		 1009 geo->name[2] = ' ';
1010 geo->name[3] = '\0';
1011
1012 ieee80211_set_geo(bcm->ieee, geo);
1013 kfree(geo);
f222313a 1014
869aaab1 1015 return 0;
f222313a
JL		 1016}
1017
1018/* DummyTransmission function, as documented on
1019 * http://bcm-specs.sipsolutions.net/DummyTransmission
1020 */
1021void bcm43xx_dummy_transmission(struct bcm43xx_private *bcm)
1022{
e9357c05
MB		 1023 struct bcm43xx_phyinfo *phy = bcm43xx_current_phy(bcm);
1024 struct bcm43xx_radioinfo *radio = bcm43xx_current_radio(bcm);
f222313a
JL		 1025 unsigned int i, max_loop;
1026 u16 value = 0;
1027 u32 buffer[5] = {
1028 0x00000000,
1029 0x0000D400,
1030 0x00000000,
1031 0x00000001,
1032 0x00000000,
1033 };
1034
489423c8 1035 switch (phy->type) {
f222313a
JL		 1036 case BCM43xx_PHYTYPE_A:
1037 max_loop = 0x1E;
1038 buffer[0] = 0xCC010200;
1039 break;
1040 case BCM43xx_PHYTYPE_B:
1041 case BCM43xx_PHYTYPE_G:
1042 max_loop = 0xFA;
1043 buffer[0] = 0x6E840B00;
1044 break;
1045 default:
1046 assert(0);
1047 return;
1048 }
1049
1050 for (i = 0; i < 5; i++)
1051 bcm43xx_ram_write(bcm, i * 4, buffer[i]);
1052
1053 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD); /* dummy read */
1054
1055 bcm43xx_write16(bcm, 0x0568, 0x0000);
1056 bcm43xx_write16(bcm, 0x07C0, 0x0000);
489423c8 1057 bcm43xx_write16(bcm, 0x050C, ((phy->type == BCM43xx_PHYTYPE_A) ? 1 : 0));
f222313a
JL		 1058 bcm43xx_write16(bcm, 0x0508, 0x0000);
1059 bcm43xx_write16(bcm, 0x050A, 0x0000);
1060 bcm43xx_write16(bcm, 0x054C, 0x0000);
1061 bcm43xx_write16(bcm, 0x056A, 0x0014);
1062 bcm43xx_write16(bcm, 0x0568, 0x0826);
1063 bcm43xx_write16(bcm, 0x0500, 0x0000);
1064 bcm43xx_write16(bcm, 0x0502, 0x0030);
1065
73733847
MB		 1066 if (radio->version == 0x2050 && radio->revision <= 0x5)
1067 bcm43xx_radio_write16(bcm, 0x0051, 0x0017);
f222313a
JL		 1068 for (i = 0x00; i < max_loop; i++) {
1069 value = bcm43xx_read16(bcm, 0x050E);
73733847 1070 if (value & 0x0080)
f222313a
JL		 1071 break;
1072 udelay(10);
1073 }
1074 for (i = 0x00; i < 0x0A; i++) {
1075 value = bcm43xx_read16(bcm, 0x050E);
73733847 1076 if (value & 0x0400)
f222313a
JL		 1077 break;
1078 udelay(10);
1079 }
1080 for (i = 0x00; i < 0x0A; i++) {
1081 value = bcm43xx_read16(bcm, 0x0690);
73733847 1082 if (!(value & 0x0100))
f222313a
JL		 1083 break;
1084 udelay(10);
1085 }
73733847
MB		 1086 if (radio->version == 0x2050 && radio->revision <= 0x5)
1087 bcm43xx_radio_write16(bcm, 0x0051, 0x0037);
f222313a
JL		 1088}
1089
1090static void key_write(struct bcm43xx_private *bcm,
1091 u8 index, u8 algorithm, const u16 *key)
1092{
1093 unsigned int i, basic_wep = 0;
1094 u32 offset;
1095 u16 value;
1096
1097 /* Write associated key information */
1098 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x100 + (index * 2),
1099 ((index << 4) | (algorithm & 0x0F)));
1100
1101 /* The first 4 WEP keys need extra love */
1102 if (((algorithm == BCM43xx_SEC_ALGO_WEP) ||
1103 (algorithm == BCM43xx_SEC_ALGO_WEP104)) && (index < 4))
1104 basic_wep = 1;
1105
1106 /* Write key payload, 8 little endian words */
1107 offset = bcm->security_offset + (index * BCM43xx_SEC_KEYSIZE);
1108 for (i = 0; i < (BCM43xx_SEC_KEYSIZE / sizeof(u16)); i++) {
1109 value = cpu_to_le16(key[i]);
1110 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED,
1111 offset + (i * 2), value);
1112
1113 if (!basic_wep)
1114 continue;
1115
1116 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED,
1117 offset + (i * 2) + 4 * BCM43xx_SEC_KEYSIZE,
1118 value);
1119 }
1120}
1121
1122static void keymac_write(struct bcm43xx_private *bcm,
1123 u8 index, const u32 *addr)
1124{
1125 /* for keys 0-3 there is no associated mac address */
1126 if (index < 4)
1127 return;
1128
1129 index -= 4;
1130 if (bcm->current_core->rev >= 5) {
1131 bcm43xx_shm_write32(bcm,
1132 BCM43xx_SHM_HWMAC,
1133 index * 2,
1134 cpu_to_be32(*addr));
1135 bcm43xx_shm_write16(bcm,
1136 BCM43xx_SHM_HWMAC,
1137 (index * 2) + 1,
1138 cpu_to_be16(*((u16 *)(addr + 1))));
1139 } else {
1140 if (index < 8) {
1141 TODO(); /* Put them in the macaddress filter */
1142 } else {
1143 TODO();
1144 /* Put them BCM43xx_SHM_SHARED, stating index 0x0120.
1145 Keep in mind to update the count of keymacs in 0x003E as well! */
1146 }
1147 }
1148}
1149
1150static int bcm43xx_key_write(struct bcm43xx_private *bcm,
1151 u8 index, u8 algorithm,
1152 const u8 *_key, int key_len,
1153 const u8 *mac_addr)
1154{
1155 u8 key[BCM43xx_SEC_KEYSIZE] = { 0 };
1156
1157 if (index >= ARRAY_SIZE(bcm->key))
1158 return -EINVAL;
1159 if (key_len > ARRAY_SIZE(key))
1160 return -EINVAL;
1161 if (algorithm < 1 || algorithm > 5)
1162 return -EINVAL;
1163
1164 memcpy(key, _key, key_len);
1165 key_write(bcm, index, algorithm, (const u16 *)key);
1166 keymac_write(bcm, index, (const u32 *)mac_addr);
1167
1168 bcm->key[index].algorithm = algorithm;
1169
1170 return 0;
1171}
1172
1173static void bcm43xx_clear_keys(struct bcm43xx_private *bcm)
1174{
1175 static const u32 zero_mac[2] = { 0 };
1176 unsigned int i,j, nr_keys = 54;
1177 u16 offset;
1178
1179 if (bcm->current_core->rev < 5)
1180 nr_keys = 16;
1181 assert(nr_keys <= ARRAY_SIZE(bcm->key));
1182
1183 for (i = 0; i < nr_keys; i++) {
1184 bcm->key[i].enabled = 0;
1185 /* returns for i < 4 immediately */
1186 keymac_write(bcm, i, zero_mac);
1187 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED,
1188 0x100 + (i * 2), 0x0000);
1189 for (j = 0; j < 8; j++) {
1190 offset = bcm->security_offset + (j * 4) + (i * BCM43xx_SEC_KEYSIZE);
1191 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED,
1192 offset, 0x0000);
1193 }
1194 }
1195 dprintk(KERN_INFO PFX "Keys cleared\n");
1196}
1197
f222313a
JL		 1198/* Lowlevel core-switch function. This is only to be used in
1199 * bcm43xx_switch_core() and bcm43xx_probe_cores()
1200 */
1201static int _switch_core(struct bcm43xx_private *bcm, int core)
1202{
1203 int err;
1204 int attempts = 0;
489423c8 1205 u32 current_core;
f222313a
JL		 1206
1207 assert(core >= 0);
489423c8
MB		 1208 while (1) {
1209 err = bcm43xx_pci_write_config32(bcm, BCM43xx_PCICFG_ACTIVE_CORE,
f222313a 1210 (core * 0x1000) + 0x18000000);
489423c8
MB		 1211 if (unlikely(err))
1212 goto error;
1213 err = bcm43xx_pci_read_config32(bcm, BCM43xx_PCICFG_ACTIVE_CORE,
1214 &current_core);
1215 if (unlikely(err))
1216 goto error;
1217 current_core = (current_core - 0x18000000) / 0x1000;
1218 if (current_core == core)
1219 break;
1220
1221 if (unlikely(attempts++ > BCM43xx_SWITCH_CORE_MAX_RETRIES))
1222 goto error;
1223 udelay(10);
1224 }
f222313a 1225#ifdef CONFIG_BCM947XX
489423c8
MB		 1226 if (bcm->pci_dev->bus->number == 0)
1227 bcm->current_core_offset = 0x1000 * core;
1228 else
1229 bcm->current_core_offset = 0;
f222313a 1230#endif
f222313a 1231
489423c8
MB		 1232 return 0;
1233error:
1234 printk(KERN_ERR PFX "Failed to switch to core %d\n", core);
1235 return -ENODEV;
f222313a
JL		 1236}
1237
1238int bcm43xx_switch_core(struct bcm43xx_private *bcm, struct bcm43xx_coreinfo *new_core)
1239{
1240 int err;
1241
489423c8 1242 if (unlikely(!new_core))
f222313a 1243 return 0;
e9357c05 1244 if (!new_core->available)
f222313a
JL		 1245 return -ENODEV;
1246 if (bcm->current_core == new_core)
1247 return 0;
1248 err = _switch_core(bcm, new_core->index);
e9357c05
MB		 1249 if (unlikely(err))
1250 goto out;
f222313a 1251
e9357c05
MB		 1252 bcm->current_core = new_core;
1253 bcm->current_80211_core_idx = -1;
1254 if (new_core->id == BCM43xx_COREID_80211)
1255 bcm->current_80211_core_idx = (int)(new_core - &(bcm->core_80211[0]));
1256
1257out:
f222313a
JL		 1258 return err;
1259}
1260
489423c8 1261static int bcm43xx_core_enabled(struct bcm43xx_private *bcm)
f222313a
JL		 1262{
1263 u32 value;
1264
1265 value = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATELOW);
1266 value &= BCM43xx_SBTMSTATELOW_CLOCK | BCM43xx_SBTMSTATELOW_RESET
1267 | BCM43xx_SBTMSTATELOW_REJECT;
1268
1269 return (value == BCM43xx_SBTMSTATELOW_CLOCK);
1270}
1271
1272/* disable current core */
1273static int bcm43xx_core_disable(struct bcm43xx_private *bcm, u32 core_flags)
1274{
1275 u32 sbtmstatelow;
1276 u32 sbtmstatehigh;
1277 int i;
1278
1279 /* fetch sbtmstatelow from core information registers */
1280 sbtmstatelow = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATELOW);
1281
1282 /* core is already in reset */
1283 if (sbtmstatelow & BCM43xx_SBTMSTATELOW_RESET)
1284 goto out;
1285
1286 if (sbtmstatelow & BCM43xx_SBTMSTATELOW_CLOCK) {
1287 sbtmstatelow = BCM43xx_SBTMSTATELOW_CLOCK |
1288 BCM43xx_SBTMSTATELOW_REJECT;
1289 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1290
1291 for (i = 0; i < 1000; i++) {
1292 sbtmstatelow = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATELOW);
1293 if (sbtmstatelow & BCM43xx_SBTMSTATELOW_REJECT) {
1294 i = -1;
1295 break;
1296 }
1297 udelay(10);
1298 }
1299 if (i != -1) {
1300 printk(KERN_ERR PFX "Error: core_disable() REJECT timeout!\n");
1301 return -EBUSY;
1302 }
1303
1304 for (i = 0; i < 1000; i++) {
1305 sbtmstatehigh = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATEHIGH);
1306 if (!(sbtmstatehigh & BCM43xx_SBTMSTATEHIGH_BUSY)) {
1307 i = -1;
1308 break;
1309 }
1310 udelay(10);
1311 }
1312 if (i != -1) {
1313 printk(KERN_ERR PFX "Error: core_disable() BUSY timeout!\n");
1314 return -EBUSY;
1315 }
1316
1317 sbtmstatelow = BCM43xx_SBTMSTATELOW_FORCE_GATE_CLOCK |
1318 BCM43xx_SBTMSTATELOW_REJECT |
1319 BCM43xx_SBTMSTATELOW_RESET |
1320 BCM43xx_SBTMSTATELOW_CLOCK |
1321 core_flags;
1322 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1323 udelay(10);
1324 }
1325
1326 sbtmstatelow = BCM43xx_SBTMSTATELOW_RESET |
1327 BCM43xx_SBTMSTATELOW_REJECT |
1328 core_flags;
1329 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1330
1331out:
e9357c05
MB		 1332 bcm->current_core->enabled = 0;
1333
f222313a
JL		 1334 return 0;
1335}
1336
1337/* enable (reset) current core */
1338static int bcm43xx_core_enable(struct bcm43xx_private *bcm, u32 core_flags)
1339{
1340 u32 sbtmstatelow;
1341 u32 sbtmstatehigh;
1342 u32 sbimstate;
1343 int err;
1344
1345 err = bcm43xx_core_disable(bcm, core_flags);
1346 if (err)
1347 goto out;
1348
1349 sbtmstatelow = BCM43xx_SBTMSTATELOW_CLOCK |
1350 BCM43xx_SBTMSTATELOW_RESET |
1351 BCM43xx_SBTMSTATELOW_FORCE_GATE_CLOCK |
1352 core_flags;
1353 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1354 udelay(1);
1355
1356 sbtmstatehigh = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATEHIGH);
1357 if (sbtmstatehigh & BCM43xx_SBTMSTATEHIGH_SERROR) {
1358 sbtmstatehigh = 0x00000000;
1359 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATEHIGH, sbtmstatehigh);
1360 }
1361
1362 sbimstate = bcm43xx_read32(bcm, BCM43xx_CIR_SBIMSTATE);
1363 if (sbimstate & (BCM43xx_SBIMSTATE_IB_ERROR | BCM43xx_SBIMSTATE_TIMEOUT)) {
1364 sbimstate &= ~(BCM43xx_SBIMSTATE_IB_ERROR | BCM43xx_SBIMSTATE_TIMEOUT);
1365 bcm43xx_write32(bcm, BCM43xx_CIR_SBIMSTATE, sbimstate);
1366 }
1367
1368 sbtmstatelow = BCM43xx_SBTMSTATELOW_CLOCK |
1369 BCM43xx_SBTMSTATELOW_FORCE_GATE_CLOCK |
1370 core_flags;
1371 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1372 udelay(1);
1373
1374 sbtmstatelow = BCM43xx_SBTMSTATELOW_CLOCK | core_flags;
1375 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1376 udelay(1);
1377
e9357c05 1378 bcm->current_core->enabled = 1;
f222313a
JL		 1379 assert(err == 0);
1380out:
1381 return err;
1382}
1383
1384/* http://bcm-specs.sipsolutions.net/80211CoreReset */
1385void bcm43xx_wireless_core_reset(struct bcm43xx_private *bcm, int connect_phy)
1386{
1387 u32 flags = 0x00040000;
1388
77db31ea
MB		 1389 if ((bcm43xx_core_enabled(bcm)) &&
1390 !bcm43xx_using_pio(bcm)) {
f222313a
JL		 1391//FIXME: Do we _really_ want #ifndef CONFIG_BCM947XX here?
1392#ifndef CONFIG_BCM947XX
1393 /* reset all used DMA controllers. */
1394 bcm43xx_dmacontroller_tx_reset(bcm, BCM43xx_MMIO_DMA1_BASE);
1395 bcm43xx_dmacontroller_tx_reset(bcm, BCM43xx_MMIO_DMA2_BASE);
1396 bcm43xx_dmacontroller_tx_reset(bcm, BCM43xx_MMIO_DMA3_BASE);
1397 bcm43xx_dmacontroller_tx_reset(bcm, BCM43xx_MMIO_DMA4_BASE);
1398 bcm43xx_dmacontroller_rx_reset(bcm, BCM43xx_MMIO_DMA1_BASE);
1399 if (bcm->current_core->rev < 5)
1400 bcm43xx_dmacontroller_rx_reset(bcm, BCM43xx_MMIO_DMA4_BASE);
1401#endif
1402 }
78ff56a0 1403 if (bcm43xx_status(bcm) == BCM43xx_STAT_SHUTTINGDOWN) {
f222313a
JL		 1404 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD,
1405 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD)
1406 & ~(BCM43xx_SBF_MAC_ENABLED | 0x00000002));
1407 } else {
1408 if (connect_phy)
1409 flags |= 0x20000000;
1410 bcm43xx_phy_connect(bcm, connect_phy);
1411 bcm43xx_core_enable(bcm, flags);
1412 bcm43xx_write16(bcm, 0x03E6, 0x0000);
1413 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD,
1414 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD)
1415 | BCM43xx_SBF_400);
1416 }
1417}
1418
1419static void bcm43xx_wireless_core_disable(struct bcm43xx_private *bcm)
1420{
1421 bcm43xx_radio_turn_off(bcm);
1422 bcm43xx_write16(bcm, 0x03E6, 0x00F4);
1423 bcm43xx_core_disable(bcm, 0);
1424}
1425
1426/* Mark the current 80211 core inactive.
1427 * "active_80211_core" is the other 80211 core, which is used.
1428 */
1429static int bcm43xx_wireless_core_mark_inactive(struct bcm43xx_private *bcm,
1430 struct bcm43xx_coreinfo *active_80211_core)
1431{
1432 u32 sbtmstatelow;
1433 struct bcm43xx_coreinfo *old_core;
1434 int err = 0;
1435
1436 bcm43xx_interrupt_disable(bcm, BCM43xx_IRQ_ALL);
1437 bcm43xx_radio_turn_off(bcm);
1438 sbtmstatelow = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATELOW);
1439 sbtmstatelow &= ~0x200a0000;
1440 sbtmstatelow |= 0xa0000;
1441 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1442 udelay(1);
1443 sbtmstatelow = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATELOW);
1444 sbtmstatelow &= ~0xa0000;
1445 sbtmstatelow |= 0x80000;
1446 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1447 udelay(1);
1448
e9357c05 1449 if (bcm43xx_current_phy(bcm)->type == BCM43xx_PHYTYPE_G) {
f222313a
JL		 1450 old_core = bcm->current_core;
1451 err = bcm43xx_switch_core(bcm, active_80211_core);
1452 if (err)
1453 goto out;
1454 sbtmstatelow = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATELOW);
1455 sbtmstatelow &= ~0x20000000;
1456 sbtmstatelow |= 0x20000000;
1457 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, sbtmstatelow);
1458 err = bcm43xx_switch_core(bcm, old_core);
1459 }
1460
1461out:
1462 return err;
1463}
1464
489423c8 1465static void handle_irq_transmit_status(struct bcm43xx_private *bcm)
f222313a
JL		 1466{
1467 u32 v0, v1;
1468 u16 tmp;
1469 struct bcm43xx_xmitstatus stat;
1470
f222313a
JL		 1471 while (1) {
1472 v0 = bcm43xx_read32(bcm, BCM43xx_MMIO_XMITSTAT_0);
1473 if (!v0)
1474 break;
1475 v1 = bcm43xx_read32(bcm, BCM43xx_MMIO_XMITSTAT_1);
1476
1477 stat.cookie = (v0 >> 16) & 0x0000FFFF;
1478 tmp = (u16)((v0 & 0xFFF0) | ((v0 & 0xF) >> 1));
1479 stat.flags = tmp & 0xFF;
1480 stat.cnt1 = (tmp & 0x0F00) >> 8;
1481 stat.cnt2 = (tmp & 0xF000) >> 12;
1482 stat.seq = (u16)(v1 & 0xFFFF);
1483 stat.unknown = (u16)((v1 >> 16) & 0xFF);
1484
1485 bcm43xx_debugfs_log_txstat(bcm, &stat);
1486
1487 if (stat.flags & BCM43xx_TXSTAT_FLAG_IGNORE)
1488 continue;
1489 if (!(stat.flags & BCM43xx_TXSTAT_FLAG_ACK)) {
1490 //TODO: packet was not acked (was lost)
1491 }
1492 //TODO: There are more (unknown) flags to test. see bcm43xx_main.h
1493
77db31ea 1494 if (bcm43xx_using_pio(bcm))
f222313a
JL		 1495 bcm43xx_pio_handle_xmitstatus(bcm, &stat);
1496 else
1497 bcm43xx_dma_handle_xmitstatus(bcm, &stat);
1498 }
1499}
1500
489423c8 1501static void bcm43xx_generate_noise_sample(struct bcm43xx_private *bcm)
f222313a
JL		 1502{
1503 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x408, 0x7F7F);
1504 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x40A, 0x7F7F);
1505 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS2_BITFIELD,
1506 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS2_BITFIELD) | (1 << 4));
1507 assert(bcm->noisecalc.core_at_start == bcm->current_core);
e9357c05 1508 assert(bcm->noisecalc.channel_at_start == bcm43xx_current_radio(bcm)->channel);
f222313a
JL		 1509}
1510
1511static void bcm43xx_calculate_link_quality(struct bcm43xx_private *bcm)
1512{
1513 /* Top half of Link Quality calculation. */
1514
1515 if (bcm->noisecalc.calculation_running)
1516 return;
1517 bcm->noisecalc.core_at_start = bcm->current_core;
e9357c05 1518 bcm->noisecalc.channel_at_start = bcm43xx_current_radio(bcm)->channel;
f222313a
JL		 1519 bcm->noisecalc.calculation_running = 1;
1520 bcm->noisecalc.nr_samples = 0;
1521
1522 bcm43xx_generate_noise_sample(bcm);
1523}
1524
489423c8 1525static void handle_irq_noise(struct bcm43xx_private *bcm)
f222313a 1526{
e9357c05 1527 struct bcm43xx_radioinfo *radio = bcm43xx_current_radio(bcm);
f222313a
JL		 1528 u16 tmp;
1529 u8 noise[4];
1530 u8 i, j;
1531 s32 average;
1532
1533 /* Bottom half of Link Quality calculation. */
1534
1535 assert(bcm->noisecalc.calculation_running);
1536 if (bcm->noisecalc.core_at_start != bcm->current_core ||
1537 bcm->noisecalc.channel_at_start != radio->channel)
1538 goto drop_calculation;
1539 tmp = bcm43xx_shm_read16(bcm, BCM43xx_SHM_SHARED, 0x408);
1540 noise[0] = (tmp & 0x00FF);
1541 noise[1] = (tmp & 0xFF00) >> 8;
1542 tmp = bcm43xx_shm_read16(bcm, BCM43xx_SHM_SHARED, 0x40A);
1543 noise[2] = (tmp & 0x00FF);
1544 noise[3] = (tmp & 0xFF00) >> 8;
1545 if (noise[0] == 0x7F || noise[1] == 0x7F ||
1546 noise[2] == 0x7F || noise[3] == 0x7F)
1547 goto generate_new;
1548
1549 /* Get the noise samples. */
1550 assert(bcm->noisecalc.nr_samples <= 8);
1551 i = bcm->noisecalc.nr_samples;
1552 noise[0] = limit_value(noise[0], 0, ARRAY_SIZE(radio->nrssi_lt) - 1);
1553 noise[1] = limit_value(noise[1], 0, ARRAY_SIZE(radio->nrssi_lt) - 1);
1554 noise[2] = limit_value(noise[2], 0, ARRAY_SIZE(radio->nrssi_lt) - 1);
1555 noise[3] = limit_value(noise[3], 0, ARRAY_SIZE(radio->nrssi_lt) - 1);
1556 bcm->noisecalc.samples[i][0] = radio->nrssi_lt[noise[0]];
1557 bcm->noisecalc.samples[i][1] = radio->nrssi_lt[noise[1]];
1558 bcm->noisecalc.samples[i][2] = radio->nrssi_lt[noise[2]];
1559 bcm->noisecalc.samples[i][3] = radio->nrssi_lt[noise[3]];
1560 bcm->noisecalc.nr_samples++;
1561 if (bcm->noisecalc.nr_samples == 8) {
1562 /* Calculate the Link Quality by the noise samples. */
1563 average = 0;
1564 for (i = 0; i < 8; i++) {
1565 for (j = 0; j < 4; j++)
1566 average += bcm->noisecalc.samples[i][j];
1567 }
1568 average /= (8 * 4);
1569 average *= 125;
1570 average += 64;
1571 average /= 128;
72fb851e 1572
f222313a
JL		 1573 tmp = bcm43xx_shm_read16(bcm, BCM43xx_SHM_SHARED, 0x40C);
1574 tmp = (tmp / 128) & 0x1F;
1575 if (tmp >= 8)
1576 average += 2;
1577 else
1578 average -= 25;
1579 if (tmp == 8)
1580 average -= 72;
1581 else
1582 average -= 48;
1583
72fb851e
MB		 1584/* FIXME: This is wrong, but people want fancy stats. well... */
1585bcm->stats.noise = average;
f222313a
JL		 1586 if (average > -65)
1587 bcm->stats.link_quality = 0;
1588 else if (average > -75)
1589 bcm->stats.link_quality = 1;
1590 else if (average > -85)
1591 bcm->stats.link_quality = 2;
1592 else
1593 bcm->stats.link_quality = 3;
1594// dprintk(KERN_INFO PFX "Link Quality: %u (avg was %d)\n", bcm->stats.link_quality, average);
1595drop_calculation:
1596 bcm->noisecalc.calculation_running = 0;
1597 return;
1598 }
1599generate_new:
1600 bcm43xx_generate_noise_sample(bcm);
1601}
1602
489423c8 1603static void handle_irq_ps(struct bcm43xx_private *bcm)
f222313a
JL		 1604{
1605 if (bcm->ieee->iw_mode == IW_MODE_MASTER) {
1606 ///TODO: PS TBTT
1607 } else {
1608 if (1/*FIXME: the last PSpoll frame was sent successfully */)
1609 bcm43xx_power_saving_ctl_bits(bcm, -1, -1);
1610 }
1611 if (bcm->ieee->iw_mode == IW_MODE_ADHOC)
1612 bcm->reg124_set_0x4 = 1;
1613 //FIXME else set to false?
1614}
1615
489423c8 1616static void handle_irq_reg124(struct bcm43xx_private *bcm)
f222313a
JL		 1617{
1618 if (!bcm->reg124_set_0x4)
1619 return;
1620 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS2_BITFIELD,
1621 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS2_BITFIELD)
1622 | 0x4);
1623 //FIXME: reset reg124_set_0x4 to false?
1624}
1625
489423c8 1626static void handle_irq_pmq(struct bcm43xx_private *bcm)
f222313a
JL		 1627{
1628 u32 tmp;
1629
1630 //TODO: AP mode.
1631
1632 while (1) {
1633 tmp = bcm43xx_read32(bcm, BCM43xx_MMIO_PS_STATUS);
1634 if (!(tmp & 0x00000008))
1635 break;
1636 }
1637 /* 16bit write is odd, but correct. */
1638 bcm43xx_write16(bcm, BCM43xx_MMIO_PS_STATUS, 0x0002);
1639}
1640
1641static void bcm43xx_generate_beacon_template(struct bcm43xx_private *bcm,
1642 u16 ram_offset, u16 shm_size_offset)
1643{
1644 u32 value;
1645 u16 size = 0;
1646
1647 /* Timestamp. */
1648 //FIXME: assumption: The chip sets the timestamp
1649 value = 0;
1650 bcm43xx_ram_write(bcm, ram_offset++, value);
1651 bcm43xx_ram_write(bcm, ram_offset++, value);
1652 size += 8;
1653
1654 /* Beacon Interval / Capability Information */
1655 value = 0x0000;//FIXME: Which interval?
1656 value |= (1 << 0) << 16; /* ESS */
1657 value |= (1 << 2) << 16; /* CF Pollable */ //FIXME?
1658 value |= (1 << 3) << 16; /* CF Poll Request */ //FIXME?
1659 if (!bcm->ieee->open_wep)
1660 value |= (1 << 4) << 16; /* Privacy */
1661 bcm43xx_ram_write(bcm, ram_offset++, value);
1662 size += 4;
1663
1664 /* SSID */
1665 //TODO
1666
1667 /* FH Parameter Set */
1668 //TODO
1669
1670 /* DS Parameter Set */
1671 //TODO
1672
1673 /* CF Parameter Set */
1674 //TODO
1675
1676 /* TIM */
1677 //TODO
1678
1679 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, shm_size_offset, size);
1680}
1681
489423c8 1682static void handle_irq_beacon(struct bcm43xx_private *bcm)
f222313a
JL		 1683{
1684 u32 status;
1685
1686 bcm->irq_savedstate &= ~BCM43xx_IRQ_BEACON;
1687 status = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS2_BITFIELD);
1688
1689 if ((status & 0x1) && (status & 0x2)) {
1690 /* ACK beacon IRQ. */
1691 bcm43xx_write32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON,
1692 BCM43xx_IRQ_BEACON);
1693 bcm->irq_savedstate |= BCM43xx_IRQ_BEACON;
1694 return;
1695 }
1696 if (!(status & 0x1)) {
1697 bcm43xx_generate_beacon_template(bcm, 0x68, 0x18);
1698 status |= 0x1;
1699 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS2_BITFIELD, status);
1700 }
1701 if (!(status & 0x2)) {
1702 bcm43xx_generate_beacon_template(bcm, 0x468, 0x1A);
1703 status |= 0x2;
1704 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS2_BITFIELD, status);
1705 }
1706}
1707
f222313a
JL		 1708/* Interrupt handler bottom-half */
1709static void bcm43xx_interrupt_tasklet(struct bcm43xx_private *bcm)
1710{
1711 u32 reason;
1712 u32 dma_reason[4];
1713 int activity = 0;
1714 unsigned long flags;
1715
1716#ifdef CONFIG_BCM43XX_DEBUG
1717 u32 _handled = 0x00000000;
1718# define bcmirq_handled(irq) do { _handled |= (irq); } while (0)
1719#else
1720# define bcmirq_handled(irq) do { /* nothing */ } while (0)
1721#endif /* CONFIG_BCM43XX_DEBUG*/
1722
78ff56a0 1723 bcm43xx_lock_irqonly(bcm, flags);
f222313a
JL		 1724 reason = bcm->irq_reason;
1725 dma_reason[0] = bcm->dma_reason[0];
1726 dma_reason[1] = bcm->dma_reason[1];
1727 dma_reason[2] = bcm->dma_reason[2];
1728 dma_reason[3] = bcm->dma_reason[3];
1729
1730 if (unlikely(reason & BCM43xx_IRQ_XMIT_ERROR)) {
1731 /* TX error. We get this when Template Ram is written in wrong endianess
1732 * in dummy_tx(). We also get this if something is wrong with the TX header
1733 * on DMA or PIO queues.
1734 * Maybe we get this in other error conditions, too.
1735 */
73733847 1736 printkl(KERN_ERR PFX "FATAL ERROR: BCM43xx_IRQ_XMIT_ERROR\n");
f222313a
JL		 1737 bcmirq_handled(BCM43xx_IRQ_XMIT_ERROR);
1738 }
73733847
MB		 1739 if (unlikely((dma_reason[0] & BCM43xx_DMAIRQ_FATALMASK) |
1740 (dma_reason[1] & BCM43xx_DMAIRQ_FATALMASK) |
1741 (dma_reason[2] & BCM43xx_DMAIRQ_FATALMASK) |
1742 (dma_reason[3] & BCM43xx_DMAIRQ_FATALMASK))) {
1743 printkl(KERN_ERR PFX "FATAL ERROR: Fatal DMA error: "
1744 "0x%08X, 0x%08X, 0x%08X, 0x%08X\n",
1745 dma_reason[0], dma_reason[1],
1746 dma_reason[2], dma_reason[3]);
1747 bcm43xx_controller_restart(bcm, "DMA error");
78ff56a0
MB		 1748 mmiowb();
1749 bcm43xx_unlock_irqonly(bcm, flags);
73733847
MB		 1750 return;
1751 }
1752 if (unlikely((dma_reason[0] & BCM43xx_DMAIRQ_NONFATALMASK) |
1753 (dma_reason[1] & BCM43xx_DMAIRQ_NONFATALMASK) |
1754 (dma_reason[2] & BCM43xx_DMAIRQ_NONFATALMASK) |
1755 (dma_reason[3] & BCM43xx_DMAIRQ_NONFATALMASK))) {
1756 printkl(KERN_ERR PFX "DMA error: "
1757 "0x%08X, 0x%08X, 0x%08X, 0x%08X\n",
1758 dma_reason[0], dma_reason[1],
1759 dma_reason[2], dma_reason[3]);
1760 }
f222313a
JL		 1761
1762 if (reason & BCM43xx_IRQ_PS) {
1763 handle_irq_ps(bcm);
1764 bcmirq_handled(BCM43xx_IRQ_PS);
1765 }
1766
1767 if (reason & BCM43xx_IRQ_REG124) {
1768 handle_irq_reg124(bcm);
1769 bcmirq_handled(BCM43xx_IRQ_REG124);
1770 }
1771
1772 if (reason & BCM43xx_IRQ_BEACON) {
1773 if (bcm->ieee->iw_mode == IW_MODE_MASTER)
1774 handle_irq_beacon(bcm);
1775 bcmirq_handled(BCM43xx_IRQ_BEACON);
1776 }
1777
1778 if (reason & BCM43xx_IRQ_PMQ) {
1779 handle_irq_pmq(bcm);
1780 bcmirq_handled(BCM43xx_IRQ_PMQ);
1781 }
1782
1783 if (reason & BCM43xx_IRQ_SCAN) {
1784 /*TODO*/
1785 //bcmirq_handled(BCM43xx_IRQ_SCAN);
1786 }
1787
1788 if (reason & BCM43xx_IRQ_NOISE) {
1789 handle_irq_noise(bcm);
1790 bcmirq_handled(BCM43xx_IRQ_NOISE);
1791 }
1792
1793 /* Check the DMA reason registers for received data. */
1794 assert(!(dma_reason[1] & BCM43xx_DMAIRQ_RX_DONE));
1795 assert(!(dma_reason[2] & BCM43xx_DMAIRQ_RX_DONE));
1796 if (dma_reason[0] & BCM43xx_DMAIRQ_RX_DONE) {
77db31ea 1797 if (bcm43xx_using_pio(bcm))
e9357c05 1798 bcm43xx_pio_rx(bcm43xx_current_pio(bcm)->queue0);
f222313a 1799 else
e9357c05 1800 bcm43xx_dma_rx(bcm43xx_current_dma(bcm)->rx_ring0);
dcfd720b 1801 /* We intentionally don't set "activity" to 1, here. */
f222313a
JL		 1802 }
1803 if (dma_reason[3] & BCM43xx_DMAIRQ_RX_DONE) {
e1b1b581 1804 if (bcm43xx_using_pio(bcm))
e9357c05 1805 bcm43xx_pio_rx(bcm43xx_current_pio(bcm)->queue3);
e1b1b581 1806 else
e9357c05 1807 bcm43xx_dma_rx(bcm43xx_current_dma(bcm)->rx_ring1);
e1b1b581 1808 activity = 1;
f222313a
JL		 1809 }
1810 bcmirq_handled(BCM43xx_IRQ_RX);
1811
1812 if (reason & BCM43xx_IRQ_XMIT_STATUS) {
e1b1b581
MB		 1813 handle_irq_transmit_status(bcm);
1814 activity = 1;
f222313a
JL		 1815 //TODO: In AP mode, this also causes sending of powersave responses.
1816 bcmirq_handled(BCM43xx_IRQ_XMIT_STATUS);
1817 }
1818
f222313a
JL		 1819 /* IRQ_PIO_WORKAROUND is handled in the top-half. */
1820 bcmirq_handled(BCM43xx_IRQ_PIO_WORKAROUND);
1821#ifdef CONFIG_BCM43XX_DEBUG
1822 if (unlikely(reason & ~_handled)) {
1823 printkl(KERN_WARNING PFX
1824 "Unhandled IRQ! Reason: 0x%08x, Unhandled: 0x%08x, "
1825 "DMA: 0x%08x, 0x%08x, 0x%08x, 0x%08x\n",
1826 reason, (reason & ~_handled),
1827 dma_reason[0], dma_reason[1],
1828 dma_reason[2], dma_reason[3]);
1829 }
1830#endif
1831#undef bcmirq_handled
1832
1833 if (!modparam_noleds)
1834 bcm43xx_leds_update(bcm, activity);
1835 bcm43xx_interrupt_enable(bcm, bcm->irq_savedstate);
78ff56a0
MB		 1836 mmiowb();
1837 bcm43xx_unlock_irqonly(bcm, flags);
f222313a
JL		 1838}
1839
0ac59dae
MB		 1840static void pio_irq_workaround(struct bcm43xx_private *bcm,
1841 u16 base, int queueidx)
f222313a 1842{
0ac59dae
MB		 1843 u16 rxctl;
1844
1845 rxctl = bcm43xx_read16(bcm, base + BCM43xx_PIO_RXCTL);
1846 if (rxctl & BCM43xx_PIO_RXCTL_DATAAVAILABLE)
1847 bcm->dma_reason[queueidx] |= BCM43xx_DMAIRQ_RX_DONE;
1848 else
1849 bcm->dma_reason[queueidx] &= ~BCM43xx_DMAIRQ_RX_DONE;
1850}
f222313a 1851
0ac59dae
MB		 1852static void bcm43xx_interrupt_ack(struct bcm43xx_private *bcm, u32 reason)
1853{
77db31ea 1854 if (bcm43xx_using_pio(bcm) &&
f222313a
JL		 1855 (bcm->current_core->rev < 3) &&
1856 (!(reason & BCM43xx_IRQ_PIO_WORKAROUND))) {
1857 /* Apply a PIO specific workaround to the dma_reasons */
0ac59dae
MB		 1858 pio_irq_workaround(bcm, BCM43xx_MMIO_PIO1_BASE, 0);
1859 pio_irq_workaround(bcm, BCM43xx_MMIO_PIO2_BASE, 1);
1860 pio_irq_workaround(bcm, BCM43xx_MMIO_PIO3_BASE, 2);
1861 pio_irq_workaround(bcm, BCM43xx_MMIO_PIO4_BASE, 3);
f222313a
JL		 1862 }
1863
0ac59dae 1864 bcm43xx_write32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON, reason);
f222313a
JL		 1865
1866 bcm43xx_write32(bcm, BCM43xx_MMIO_DMA1_REASON,
1867 bcm->dma_reason[0]);
1868 bcm43xx_write32(bcm, BCM43xx_MMIO_DMA2_REASON,
1869 bcm->dma_reason[1]);
1870 bcm43xx_write32(bcm, BCM43xx_MMIO_DMA3_REASON,
1871 bcm->dma_reason[2]);
1872 bcm43xx_write32(bcm, BCM43xx_MMIO_DMA4_REASON,
1873 bcm->dma_reason[3]);
1874}
1875
1876/* Interrupt handler top-half */
1877static irqreturn_t bcm43xx_interrupt_handler(int irq, void *dev_id, struct pt_regs *regs)
1878{
efccb647 1879 irqreturn_t ret = IRQ_HANDLED;
f222313a 1880 struct bcm43xx_private *bcm = dev_id;
0ac59dae 1881 u32 reason;
f222313a
JL		 1882
1883 if (!bcm)
1884 return IRQ_NONE;
1885
78ff56a0 1886 spin_lock(&bcm->irq_lock);
f222313a
JL		 1887
1888 reason = bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON);
1889 if (reason == 0xffffffff) {
1890 /* irq not for us (shared irq) */
efccb647
MB		 1891 ret = IRQ_NONE;
1892 goto out;
f222313a 1893 }
0ac59dae
MB		 1894 reason &= bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_MASK);
1895 if (!reason)
efccb647 1896 goto out;
f222313a 1897
0ac59dae
MB		 1898 bcm->dma_reason[0] = bcm43xx_read32(bcm, BCM43xx_MMIO_DMA1_REASON)
1899 & 0x0001dc00;
1900 bcm->dma_reason[1] = bcm43xx_read32(bcm, BCM43xx_MMIO_DMA2_REASON)
1901 & 0x0000dc00;
1902 bcm->dma_reason[2] = bcm43xx_read32(bcm, BCM43xx_MMIO_DMA3_REASON)
1903 & 0x0000dc00;
1904 bcm->dma_reason[3] = bcm43xx_read32(bcm, BCM43xx_MMIO_DMA4_REASON)
1905 & 0x0001dc00;
1906
1907 bcm43xx_interrupt_ack(bcm, reason);
f222313a 1908
bf7b8760
MB		 1909 /* Only accept IRQs, if we are initialized properly.
1910 * This avoids an RX race while initializing.
1911 * We should probably not enable IRQs before we are initialized
1912 * completely, but some careful work is needed to fix this. I think it
1913 * is best to stay with this cheap workaround for now... .
1914 */
78ff56a0 1915 if (likely(bcm43xx_status(bcm) == BCM43xx_STAT_INITIALIZED)) {
bf7b8760
MB		 1916 /* disable all IRQs. They are enabled again in the bottom half. */
1917 bcm->irq_savedstate = bcm43xx_interrupt_disable(bcm, BCM43xx_IRQ_ALL);
1918 /* save the reason code and call our bottom half. */
1919 bcm->irq_reason = reason;
1920 tasklet_schedule(&bcm->isr_tasklet);
1921 }
f222313a 1922
efccb647
MB		 1923out:
1924 mmiowb();
78ff56a0 1925 spin_unlock(&bcm->irq_lock);
f222313a 1926
efccb647 1927 return ret;
f222313a
JL		 1928}
1929
a4a600d3 1930static void bcm43xx_release_firmware(struct bcm43xx_private *bcm, int force)
f222313a 1931{
a4a600d3 1932 if (bcm->firmware_norelease && !force)
f222313a
JL		 1933 return; /* Suspending or controller reset. */
1934 release_firmware(bcm->ucode);
1935 bcm->ucode = NULL;
1936 release_firmware(bcm->pcm);
1937 bcm->pcm = NULL;
1938 release_firmware(bcm->initvals0);
1939 bcm->initvals0 = NULL;
1940 release_firmware(bcm->initvals1);
1941 bcm->initvals1 = NULL;
1942}
1943
1944static int bcm43xx_request_firmware(struct bcm43xx_private *bcm)
1945{
e9357c05 1946 struct bcm43xx_phyinfo *phy = bcm43xx_current_phy(bcm);
f222313a
JL		 1947 u8 rev = bcm->current_core->rev;
1948 int err = 0;
1949 int nr;
1950 char buf[22 + sizeof(modparam_fwpostfix) - 1] = { 0 };
1951
1952 if (!bcm->ucode) {
1953 snprintf(buf, ARRAY_SIZE(buf), "bcm43xx_microcode%d%s.fw",
1954 (rev >= 5 ? 5 : rev),
1955 modparam_fwpostfix);
1956 err = request_firmware(&bcm->ucode, buf, &bcm->pci_dev->dev);
1957 if (err) {
1958 printk(KERN_ERR PFX
1959 "Error: Microcode \"%s\" not available or load failed.\n",
1960 buf);
1961 goto error;
1962 }
1963 }
1964
1965 if (!bcm->pcm) {
1966 snprintf(buf, ARRAY_SIZE(buf),
1967 "bcm43xx_pcm%d%s.fw",
1968 (rev < 5 ? 4 : 5),
1969 modparam_fwpostfix);
1970 err = request_firmware(&bcm->pcm, buf, &bcm->pci_dev->dev);
1971 if (err) {
1972 printk(KERN_ERR PFX
1973 "Error: PCM \"%s\" not available or load failed.\n",
1974 buf);
1975 goto error;
1976 }
1977 }
1978
1979 if (!bcm->initvals0) {
1980 if (rev == 2 || rev == 4) {
1981 switch (phy->type) {
1982 case BCM43xx_PHYTYPE_A:
1983 nr = 3;
1984 break;
1985 case BCM43xx_PHYTYPE_B:
1986 case BCM43xx_PHYTYPE_G:
1987 nr = 1;
1988 break;
1989 default:
1990 goto err_noinitval;
1991 }
1992
1993 } else if (rev >= 5) {
1994 switch (phy->type) {
1995 case BCM43xx_PHYTYPE_A:
1996 nr = 7;
1997 break;
1998 case BCM43xx_PHYTYPE_B:
1999 case BCM43xx_PHYTYPE_G:
2000 nr = 5;
2001 break;
2002 default:
2003 goto err_noinitval;
2004 }
2005 } else
2006 goto err_noinitval;
2007 snprintf(buf, ARRAY_SIZE(buf), "bcm43xx_initval%02d%s.fw",
2008 nr, modparam_fwpostfix);
2009
2010 err = request_firmware(&bcm->initvals0, buf, &bcm->pci_dev->dev);
2011 if (err) {
2012 printk(KERN_ERR PFX
2013 "Error: InitVals \"%s\" not available or load failed.\n",
2014 buf);
2015 goto error;
2016 }
2017 if (bcm->initvals0->size % sizeof(struct bcm43xx_initval)) {
2018 printk(KERN_ERR PFX "InitVals fileformat error.\n");
2019 goto error;
2020 }
2021 }
2022
2023 if (!bcm->initvals1) {
2024 if (rev >= 5) {
2025 u32 sbtmstatehigh;
2026
2027 switch (phy->type) {
2028 case BCM43xx_PHYTYPE_A:
2029 sbtmstatehigh = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATEHIGH);
2030 if (sbtmstatehigh & 0x00010000)
2031 nr = 9;
2032 else
2033 nr = 10;
2034 break;
2035 case BCM43xx_PHYTYPE_B:
2036 case BCM43xx_PHYTYPE_G:
2037 nr = 6;
2038 break;
2039 default:
2040 goto err_noinitval;
2041 }
2042 snprintf(buf, ARRAY_SIZE(buf), "bcm43xx_initval%02d%s.fw",
2043 nr, modparam_fwpostfix);
2044
2045 err = request_firmware(&bcm->initvals1, buf, &bcm->pci_dev->dev);
2046 if (err) {
2047 printk(KERN_ERR PFX
2048 "Error: InitVals \"%s\" not available or load failed.\n",
2049 buf);
2050 goto error;
2051 }
2052 if (bcm->initvals1->size % sizeof(struct bcm43xx_initval)) {
2053 printk(KERN_ERR PFX "InitVals fileformat error.\n");
2054 goto error;
2055 }
2056 }
2057 }
2058
2059out:
2060 return err;
2061error:
a4a600d3 2062 bcm43xx_release_firmware(bcm, 1);
f222313a
JL		 2063 goto out;
2064err_noinitval:
2065 printk(KERN_ERR PFX "Error: No InitVals available!\n");
2066 err = -ENOENT;
2067 goto error;
2068}
2069
2070static void bcm43xx_upload_microcode(struct bcm43xx_private *bcm)
2071{
2072 const u32 *data;
2073 unsigned int i, len;
2074
f222313a
JL		 2075 /* Upload Microcode. */
2076 data = (u32 *)(bcm->ucode->data);
2077 len = bcm->ucode->size / sizeof(u32);
2078 bcm43xx_shm_control_word(bcm, BCM43xx_SHM_UCODE, 0x0000);
2079 for (i = 0; i < len; i++) {
2080 bcm43xx_write32(bcm, BCM43xx_MMIO_SHM_DATA,
2081 be32_to_cpu(data[i]));
2082 udelay(10);
2083 }
2084
2085 /* Upload PCM data. */
2086 data = (u32 *)(bcm->pcm->data);
2087 len = bcm->pcm->size / sizeof(u32);
2088 bcm43xx_shm_control_word(bcm, BCM43xx_SHM_PCM, 0x01ea);
2089 bcm43xx_write32(bcm, BCM43xx_MMIO_SHM_DATA, 0x00004000);
2090 bcm43xx_shm_control_word(bcm, BCM43xx_SHM_PCM, 0x01eb);
2091 for (i = 0; i < len; i++) {
2092 bcm43xx_write32(bcm, BCM43xx_MMIO_SHM_DATA,
2093 be32_to_cpu(data[i]));
2094 udelay(10);
2095 }
f222313a
JL		 2096}
2097
a4a600d3
MB		 2098static int bcm43xx_write_initvals(struct bcm43xx_private *bcm,
2099 const struct bcm43xx_initval *data,
2100 const unsigned int len)
f222313a
JL		 2101{
2102 u16 offset, size;
2103 u32 value;
2104 unsigned int i;
2105
2106 for (i = 0; i < len; i++) {
2107 offset = be16_to_cpu(data[i].offset);
2108 size = be16_to_cpu(data[i].size);
2109 value = be32_to_cpu(data[i].value);
2110
a4a600d3
MB		 2111 if (unlikely(offset >= 0x1000))
2112 goto err_format;
2113 if (size == 2) {
2114 if (unlikely(value & 0xFFFF0000))
2115 goto err_format;
2116 bcm43xx_write16(bcm, offset, (u16)value);
2117 } else if (size == 4) {
f222313a 2118 bcm43xx_write32(bcm, offset, value);
a4a600d3
MB		 2119 } else
2120 goto err_format;
f222313a 2121 }
a4a600d3
MB		 2122
2123 return 0;
2124
2125err_format:
2126 printk(KERN_ERR PFX "InitVals (bcm43xx_initvalXX.fw) file-format error. "
2127 "Please fix your bcm43xx firmware files.\n");
2128 return -EPROTO;
f222313a
JL		 2129}
2130
a4a600d3 2131static int bcm43xx_upload_initvals(struct bcm43xx_private *bcm)
f222313a 2132{
a4a600d3
MB		 2133 int err;
2134
a4a600d3
MB		 2135 err = bcm43xx_write_initvals(bcm, (struct bcm43xx_initval *)bcm->initvals0->data,
2136 bcm->initvals0->size / sizeof(struct bcm43xx_initval));
2137 if (err)
2138 goto out;
f222313a 2139 if (bcm->initvals1) {
a4a600d3
MB		 2140 err = bcm43xx_write_initvals(bcm, (struct bcm43xx_initval *)bcm->initvals1->data,
2141 bcm->initvals1->size / sizeof(struct bcm43xx_initval));
2142 if (err)
2143 goto out;
f222313a 2144 }
a4a600d3 2145out:
a4a600d3 2146 return err;
f222313a
JL		 2147}
2148
12a37687
JS		 2149#ifdef CONFIG_BCM947XX
2150static struct pci_device_id bcm43xx_47xx_ids[] = {
2151 { PCI_DEVICE(PCI_VENDOR_ID_BROADCOM, 0x4324) },
2152 { 0 }
2153};
2154#endif
2155
f222313a
JL		 2156static int bcm43xx_initialize_irq(struct bcm43xx_private *bcm)
2157{
2158 int res;
2159 unsigned int i;
2160 u32 data;
2161
2162 bcm->irq = bcm->pci_dev->irq;
2163#ifdef CONFIG_BCM947XX
2164 if (bcm->pci_dev->bus->number == 0) {
12a37687
JS		 2165 struct pci_dev *d;
2166 struct pci_device_id *id;
2167 for (id = bcm43xx_47xx_ids; id->vendor; id++) {
2168 d = pci_get_device(id->vendor, id->device, NULL);
2169 if (d != NULL) {
2170 bcm->irq = d->irq;
2171 pci_dev_put(d);
2172 break;
2173 }
f222313a
JL		 2174 }
2175 }
2176#endif
2177 res = request_irq(bcm->irq, bcm43xx_interrupt_handler,
1fb9df5d 2178 IRQF_SHARED, KBUILD_MODNAME, bcm);
f222313a
JL		 2179 if (res) {
2180 printk(KERN_ERR PFX "Cannot register IRQ%d\n", bcm->irq);
489423c8 2181 return -ENODEV;
f222313a
JL		 2182 }
2183 bcm43xx_write32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON, 0xffffffff);
2184 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD, 0x00020402);
2185 i = 0;
2186 while (1) {
2187 data = bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON);
2188 if (data == BCM43xx_IRQ_READY)
2189 break;
2190 i++;
2191 if (i >= BCM43xx_IRQWAIT_MAX_RETRIES) {
2192 printk(KERN_ERR PFX "Card IRQ register not responding. "
2193 "Giving up.\n");
2194 free_irq(bcm->irq, bcm);
2195 return -ENODEV;
2196 }
2197 udelay(10);
2198 }
2199 // dummy read
2200 bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON);
2201
2202 return 0;
2203}
2204
2205/* Switch to the core used to write the GPIO register.
2206 * This is either the ChipCommon, or the PCI core.
2207 */
489423c8 2208static int switch_to_gpio_core(struct bcm43xx_private *bcm)
f222313a
JL		 2209{
2210 int err;
2211
2212 /* Where to find the GPIO register depends on the chipset.
2213 * If it has a ChipCommon, its register at offset 0x6c is the GPIO
2214 * control register. Otherwise the register at offset 0x6c in the
2215 * PCI core is the GPIO control register.
2216 */
2217 err = bcm43xx_switch_core(bcm, &bcm->core_chipcommon);
2218 if (err == -ENODEV) {
2219 err = bcm43xx_switch_core(bcm, &bcm->core_pci);
489423c8 2220 if (unlikely(err == -ENODEV)) {
f222313a
JL		 2221 printk(KERN_ERR PFX "gpio error: "
2222 "Neither ChipCommon nor PCI core available!\n");
714eece7
MB		 2223 }
2224 }
f222313a 2225
714eece7 2226 return err;
f222313a
JL		 2227}
2228
2229/* Initialize the GPIOs
2230 * http://bcm-specs.sipsolutions.net/GPIO
2231 */
2232static int bcm43xx_gpio_init(struct bcm43xx_private *bcm)
2233{
2234 struct bcm43xx_coreinfo *old_core;
2235 int err;
714eece7 2236 u32 mask, set;
f222313a 2237
714eece7
MB		 2238 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD,
2239 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD)
2240 & 0xFFFF3FFF);
f222313a 2241
714eece7 2242 bcm43xx_leds_switch_all(bcm, 0);
f222313a
JL		 2243 bcm43xx_write16(bcm, BCM43xx_MMIO_GPIO_MASK,
2244 bcm43xx_read16(bcm, BCM43xx_MMIO_GPIO_MASK) | 0x000F);
2245
714eece7
MB		 2246 mask = 0x0000001F;
2247 set = 0x0000000F;
f222313a 2248 if (bcm->chip_id == 0x4301) {
714eece7
MB		 2249 mask |= 0x0060;
2250 set |= 0x0060;
2251 }
2252 if (0 /* FIXME: conditional unknown */) {
2253 bcm43xx_write16(bcm, BCM43xx_MMIO_GPIO_MASK,
2254 bcm43xx_read16(bcm, BCM43xx_MMIO_GPIO_MASK)
2255 | 0x0100);
2256 mask |= 0x0180;
2257 set |= 0x0180;
f222313a
JL		 2258 }
2259 if (bcm->sprom.boardflags & BCM43xx_BFL_PACTRL) {
714eece7
MB		 2260 bcm43xx_write16(bcm, BCM43xx_MMIO_GPIO_MASK,
2261 bcm43xx_read16(bcm, BCM43xx_MMIO_GPIO_MASK)
2262 | 0x0200);
2263 mask |= 0x0200;
2264 set |= 0x0200;
f222313a 2265 }
714eece7
MB		 2266 if (bcm->current_core->rev >= 2)
2267 mask |= 0x0010; /* FIXME: This is redundant. */
f222313a 2268
714eece7
MB		 2269 old_core = bcm->current_core;
2270 err = switch_to_gpio_core(bcm);
2271 if (err)
2272 goto out;
f222313a 2273 bcm43xx_write32(bcm, BCM43xx_GPIO_CONTROL,
714eece7 2274 (bcm43xx_read32(bcm, BCM43xx_GPIO_CONTROL) & mask) | set);
f222313a 2275 err = bcm43xx_switch_core(bcm, old_core);
714eece7
MB		 2276out:
2277 return err;
f222313a
JL		 2278}
2279
2280/* Turn off all GPIO stuff. Call this on module unload, for example. */
2281static int bcm43xx_gpio_cleanup(struct bcm43xx_private *bcm)
2282{
2283 struct bcm43xx_coreinfo *old_core;
2284 int err;
2285
2286 old_core = bcm->current_core;
2287 err = switch_to_gpio_core(bcm);
2288 if (err)
2289 return err;
2290 bcm43xx_write32(bcm, BCM43xx_GPIO_CONTROL, 0x00000000);
2291 err = bcm43xx_switch_core(bcm, old_core);
2292 assert(err == 0);
2293
2294 return 0;
2295}
2296
2297/* http://bcm-specs.sipsolutions.net/EnableMac */
2298void bcm43xx_mac_enable(struct bcm43xx_private *bcm)
2299{
2300 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD,
2301 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD)
2302 | BCM43xx_SBF_MAC_ENABLED);
2303 bcm43xx_write32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON, BCM43xx_IRQ_READY);
2304 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD); /* dummy read */
2305 bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON); /* dummy read */
2306 bcm43xx_power_saving_ctl_bits(bcm, -1, -1);
2307}
2308
2309/* http://bcm-specs.sipsolutions.net/SuspendMAC */
2310void bcm43xx_mac_suspend(struct bcm43xx_private *bcm)
2311{
2312 int i;
2313 u32 tmp;
2314
2315 bcm43xx_power_saving_ctl_bits(bcm, -1, 1);
2316 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD,
2317 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD)
2318 & ~BCM43xx_SBF_MAC_ENABLED);
2319 bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON); /* dummy read */
921e485f 2320 for (i = 100000; i; i--) {
f222313a 2321 tmp = bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON);
921e485f
MB		 2322 if (tmp & BCM43xx_IRQ_READY)
2323 return;
f222313a
JL		 2324 udelay(10);
2325 }
921e485f 2326 printkl(KERN_ERR PFX "MAC suspend failed\n");
f222313a
JL		 2327}
2328
2329void bcm43xx_set_iwmode(struct bcm43xx_private *bcm,
2330 int iw_mode)
2331{
2332 unsigned long flags;
6ab5b8e6 2333 struct net_device *net_dev = bcm->net_dev;
f222313a 2334 u32 status;
6ab5b8e6 2335 u16 value;
f222313a
JL		 2336
2337 spin_lock_irqsave(&bcm->ieee->lock, flags);
2338 bcm->ieee->iw_mode = iw_mode;
2339 spin_unlock_irqrestore(&bcm->ieee->lock, flags);
2340 if (iw_mode == IW_MODE_MONITOR)
6ab5b8e6 2341 net_dev->type = ARPHRD_IEEE80211;
f222313a 2342 else
6ab5b8e6 2343 net_dev->type = ARPHRD_ETHER;
f222313a 2344
f222313a
JL		 2345 status = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD);
2346 /* Reset status to infrastructured mode */
2347 status &= ~(BCM43xx_SBF_MODE_AP | BCM43xx_SBF_MODE_MONITOR);
6ab5b8e6
MB		 2348 status &= ~BCM43xx_SBF_MODE_PROMISC;
2349 status |= BCM43xx_SBF_MODE_NOTADHOC;
2350
2351/* FIXME: Always enable promisc mode, until we get the MAC filters working correctly. */
2352status |= BCM43xx_SBF_MODE_PROMISC;
f222313a
JL		 2353
2354 switch (iw_mode) {
2355 case IW_MODE_MONITOR:
6ab5b8e6
MB		 2356 status |= BCM43xx_SBF_MODE_MONITOR;
2357 status |= BCM43xx_SBF_MODE_PROMISC;
f222313a
JL		 2358 break;
2359 case IW_MODE_ADHOC:
2360 status &= ~BCM43xx_SBF_MODE_NOTADHOC;
2361 break;
2362 case IW_MODE_MASTER:
6ab5b8e6
MB		 2363 status |= BCM43xx_SBF_MODE_AP;
2364 break;
f222313a
JL		 2365 case IW_MODE_SECOND:
2366 case IW_MODE_REPEAT:
6ab5b8e6 2367 TODO(); /* TODO */
f222313a
JL		 2368 break;
2369 case IW_MODE_INFRA:
2370 /* nothing to be done here... */
2371 break;
2372 default:
6ab5b8e6 2373 dprintk(KERN_ERR PFX "Unknown mode in set_iwmode: %d\n", iw_mode);
f222313a 2374 }
6ab5b8e6
MB		 2375 if (net_dev->flags & IFF_PROMISC)
2376 status |= BCM43xx_SBF_MODE_PROMISC;
f222313a 2377 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD, status);
6ab5b8e6
MB		 2378
2379 value = 0x0002;
2380 if (iw_mode != IW_MODE_ADHOC && iw_mode != IW_MODE_MASTER) {
2381 if (bcm->chip_id == 0x4306 && bcm->chip_rev == 3)
2382 value = 0x0064;
2383 else
2384 value = 0x0032;
2385 }
2386 bcm43xx_write16(bcm, 0x0612, value);
f222313a
JL		 2387}
2388
2389/* This is the opposite of bcm43xx_chip_init() */
2390static void bcm43xx_chip_cleanup(struct bcm43xx_private *bcm)
2391{
2392 bcm43xx_radio_turn_off(bcm);
2393 if (!modparam_noleds)
2394 bcm43xx_leds_exit(bcm);
2395 bcm43xx_gpio_cleanup(bcm);
2396 free_irq(bcm->irq, bcm);
a4a600d3 2397 bcm43xx_release_firmware(bcm, 0);
f222313a
JL		 2398}
2399
2400/* Initialize the chip
2401 * http://bcm-specs.sipsolutions.net/ChipInit
2402 */
2403static int bcm43xx_chip_init(struct bcm43xx_private *bcm)
2404{
e9357c05
MB		 2405 struct bcm43xx_radioinfo *radio = bcm43xx_current_radio(bcm);
2406 struct bcm43xx_phyinfo *phy = bcm43xx_current_phy(bcm);
f222313a 2407 int err;
f222313a
JL		 2408 int tmp;
2409 u32 value32;
2410 u16 value16;
2411
2412 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD,
2413 BCM43xx_SBF_CORE_READY
2414 | BCM43xx_SBF_400);
2415
2416 err = bcm43xx_request_firmware(bcm);
2417 if (err)
2418 goto out;
2419 bcm43xx_upload_microcode(bcm);
2420
2421 err = bcm43xx_initialize_irq(bcm);
2422 if (err)
a4a600d3 2423 goto err_release_fw;
f222313a
JL		 2424
2425 err = bcm43xx_gpio_init(bcm);
2426 if (err)
2427 goto err_free_irq;
2428
a4a600d3
MB		 2429 err = bcm43xx_upload_initvals(bcm);
2430 if (err)
2431 goto err_gpio_cleanup;
f222313a
JL		 2432 bcm43xx_radio_turn_on(bcm);
2433
f222313a
JL		 2434 bcm43xx_write16(bcm, 0x03E6, 0x0000);
2435 err = bcm43xx_phy_init(bcm);
2436 if (err)
2437 goto err_radio_off;
2438
2439 /* Select initial Interference Mitigation. */
e9357c05
MB		 2440 tmp = radio->interfmode;
2441 radio->interfmode = BCM43xx_RADIO_INTERFMODE_NONE;
f222313a
JL		 2442 bcm43xx_radio_set_interference_mitigation(bcm, tmp);
2443
2444 bcm43xx_phy_set_antenna_diversity(bcm);
2445 bcm43xx_radio_set_txantenna(bcm, BCM43xx_RADIO_TXANTENNA_DEFAULT);
e9357c05 2446 if (phy->type == BCM43xx_PHYTYPE_B) {
f222313a
JL		 2447 value16 = bcm43xx_read16(bcm, 0x005E);
2448 value16 |= 0x0004;
2449 bcm43xx_write16(bcm, 0x005E, value16);
2450 }
2451 bcm43xx_write32(bcm, 0x0100, 0x01000000);
2452 if (bcm->current_core->rev < 5)
2453 bcm43xx_write32(bcm, 0x010C, 0x01000000);
2454
2455 value32 = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD);
2456 value32 &= ~ BCM43xx_SBF_MODE_NOTADHOC;
2457 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD, value32);
2458 value32 = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD);
2459 value32 |= BCM43xx_SBF_MODE_NOTADHOC;
2460 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD, value32);
f222313a 2461
f222313a 2462 value32 = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD);
6ab5b8e6 2463 value32 |= 0x100000;
f222313a
JL		 2464 bcm43xx_write32(bcm, BCM43xx_MMIO_STATUS_BITFIELD, value32);
2465
77db31ea 2466 if (bcm43xx_using_pio(bcm)) {
f222313a
JL		 2467 bcm43xx_write32(bcm, 0x0210, 0x00000100);
2468 bcm43xx_write32(bcm, 0x0230, 0x00000100);
2469 bcm43xx_write32(bcm, 0x0250, 0x00000100);
2470 bcm43xx_write32(bcm, 0x0270, 0x00000100);
2471 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x0034, 0x0000);
2472 }
2473
2474 /* Probe Response Timeout value */
2475 /* FIXME: Default to 0, has to be set by ioctl probably... :-/ */
2476 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x0074, 0x0000);
2477
6ab5b8e6
MB		 2478 /* Initially set the wireless operation mode. */
2479 bcm43xx_set_iwmode(bcm, bcm->ieee->iw_mode);
f222313a
JL		 2480
2481 if (bcm->current_core->rev < 3) {
2482 bcm43xx_write16(bcm, 0x060E, 0x0000);
2483 bcm43xx_write16(bcm, 0x0610, 0x8000);
2484 bcm43xx_write16(bcm, 0x0604, 0x0000);
2485 bcm43xx_write16(bcm, 0x0606, 0x0200);
2486 } else {
2487 bcm43xx_write32(bcm, 0x0188, 0x80000000);
2488 bcm43xx_write32(bcm, 0x018C, 0x02000000);
2489 }
2490 bcm43xx_write32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON, 0x00004000);
2491 bcm43xx_write32(bcm, BCM43xx_MMIO_DMA1_IRQ_MASK, 0x0001DC00);
2492 bcm43xx_write32(bcm, BCM43xx_MMIO_DMA2_IRQ_MASK, 0x0000DC00);
2493 bcm43xx_write32(bcm, BCM43xx_MMIO_DMA3_IRQ_MASK, 0x0000DC00);
2494 bcm43xx_write32(bcm, BCM43xx_MMIO_DMA4_IRQ_MASK, 0x0001DC00);
2495
2496 value32 = bcm43xx_read32(bcm, BCM43xx_CIR_SBTMSTATELOW);
2497 value32 |= 0x00100000;
2498 bcm43xx_write32(bcm, BCM43xx_CIR_SBTMSTATELOW, value32);
2499
2500 bcm43xx_write16(bcm, BCM43xx_MMIO_POWERUP_DELAY, bcm43xx_pctl_powerup_delay(bcm));
2501
2502 assert(err == 0);
2503 dprintk(KERN_INFO PFX "Chip initialized\n");
2504out:
2505 return err;
2506
2507err_radio_off:
2508 bcm43xx_radio_turn_off(bcm);
a4a600d3 2509err_gpio_cleanup:
f222313a
JL		 2510 bcm43xx_gpio_cleanup(bcm);
2511err_free_irq:
2512 free_irq(bcm->irq, bcm);
a4a600d3
MB		 2513err_release_fw:
2514 bcm43xx_release_firmware(bcm, 1);
f222313a
JL		 2515 goto out;
2516}
2517
2518/* Validate chip access
2519 * http://bcm-specs.sipsolutions.net/ValidateChipAccess */
2520static int bcm43xx_validate_chip(struct bcm43xx_private *bcm)
2521{
f222313a
JL		 2522 u32 value;
2523 u32 shm_backup;
2524
2525 shm_backup = bcm43xx_shm_read32(bcm, BCM43xx_SHM_SHARED, 0x0000);
2526 bcm43xx_shm_write32(bcm, BCM43xx_SHM_SHARED, 0x0000, 0xAA5555AA);
489423c8
MB		 2527 if (bcm43xx_shm_read32(bcm, BCM43xx_SHM_SHARED, 0x0000) != 0xAA5555AA)
2528 goto error;
f222313a 2529 bcm43xx_shm_write32(bcm, BCM43xx_SHM_SHARED, 0x0000, 0x55AAAA55);
489423c8
MB		 2530 if (bcm43xx_shm_read32(bcm, BCM43xx_SHM_SHARED, 0x0000) != 0x55AAAA55)
2531 goto error;
f222313a
JL		 2532 bcm43xx_shm_write32(bcm, BCM43xx_SHM_SHARED, 0x0000, shm_backup);
2533
2534 value = bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD);
489423c8
MB		 2535 if ((value | 0x80000000) != 0x80000400)
2536 goto error;
f222313a
JL		 2537
2538 value = bcm43xx_read32(bcm, BCM43xx_MMIO_GEN_IRQ_REASON);
489423c8
MB		 2539 if (value != 0x00000000)
2540 goto error;
f222313a 2541
489423c8
MB		 2542 return 0;
2543error:
2544 printk(KERN_ERR PFX "Failed to validate the chipaccess\n");
2545 return -ENODEV;
f222313a
JL		 2546}
2547
8afceb1e 2548static void bcm43xx_init_struct_phyinfo(struct bcm43xx_phyinfo *phy)
e9357c05
MB		 2549{
2550 /* Initialize a "phyinfo" structure. The structure is already
2551 * zeroed out.
2552 */
2553 phy->antenna_diversity = 0xFFFF;
2554 phy->savedpctlreg = 0xFFFF;
2555 phy->minlowsig[0] = 0xFFFF;
2556 phy->minlowsig[1] = 0xFFFF;
2557 spin_lock_init(&phy->lock);
2558}
2559
8afceb1e 2560static void bcm43xx_init_struct_radioinfo(struct bcm43xx_radioinfo *radio)
e9357c05
MB		 2561{
2562 /* Initialize a "radioinfo" structure. The structure is already
2563 * zeroed out.
2564 */
2565 radio->interfmode = BCM43xx_RADIO_INTERFMODE_NONE;
2566 radio->channel = 0xFF;
2567 radio->initial_channel = 0xFF;
2568 radio->lofcal = 0xFFFF;
2569 radio->initval = 0xFFFF;
2570 radio->nrssi[0] = -1000;
2571 radio->nrssi[1] = -1000;
2572}
2573
f222313a
JL		 2574static int bcm43xx_probe_cores(struct bcm43xx_private *bcm)
2575{
2576 int err, i;
2577 int current_core;
2578 u32 core_vendor, core_id, core_rev;
2579 u32 sb_id_hi, chip_id_32 = 0;
2580 u16 pci_device, chip_id_16;
2581 u8 core_count;
2582
2583 memset(&bcm->core_chipcommon, 0, sizeof(struct bcm43xx_coreinfo));
2584 memset(&bcm->core_pci, 0, sizeof(struct bcm43xx_coreinfo));
f222313a
JL		 2585 memset(&bcm->core_80211, 0, sizeof(struct bcm43xx_coreinfo)
2586 * BCM43xx_MAX_80211_CORES);
e9357c05
MB		 2587 memset(&bcm->core_80211_ext, 0, sizeof(struct bcm43xx_coreinfo_80211)
2588 * BCM43xx_MAX_80211_CORES);
2589 bcm->current_80211_core_idx = -1;
2590 bcm->nr_80211_available = 0;
2591 bcm->current_core = NULL;
2592 bcm->active_80211_core = NULL;
f222313a
JL		 2593
2594 /* map core 0 */
2595 err = _switch_core(bcm, 0);
2596 if (err)
2597 goto out;
2598
2599 /* fetch sb_id_hi from core information registers */
2600 sb_id_hi = bcm43xx_read32(bcm, BCM43xx_CIR_SB_ID_HI);
2601
2602 core_id = (sb_id_hi & 0xFFF0) >> 4;
2603 core_rev = (sb_id_hi & 0xF);
2604 core_vendor = (sb_id_hi & 0xFFFF0000) >> 16;
2605
2606 /* if present, chipcommon is always core 0; read the chipid from it */
2607 if (core_id == BCM43xx_COREID_CHIPCOMMON) {
2608 chip_id_32 = bcm43xx_read32(bcm, 0);
2609 chip_id_16 = chip_id_32 & 0xFFFF;
e9357c05 2610 bcm->core_chipcommon.available = 1;
f222313a
JL		 2611 bcm->core_chipcommon.id = core_id;
2612 bcm->core_chipcommon.rev = core_rev;
2613 bcm->core_chipcommon.index = 0;
2614 /* While we are at it, also read the capabilities. */
2615 bcm->chipcommon_capabilities = bcm43xx_read32(bcm, BCM43xx_CHIPCOMMON_CAPABILITIES);
2616 } else {
2617 /* without a chipCommon, use a hard coded table. */
2618 pci_device = bcm->pci_dev->device;
2619 if (pci_device == 0x4301)
2620 chip_id_16 = 0x4301;
2621 else if ((pci_device >= 0x4305) && (pci_device <= 0x4307))
2622 chip_id_16 = 0x4307;
2623 else if ((pci_device >= 0x4402) && (pci_device <= 0x4403))
2624 chip_id_16 = 0x4402;
2625 else if ((pci_device >= 0x4610) && (pci_device <= 0x4615))
2626 chip_id_16 = 0x4610;
2627 else if ((pci_device >= 0x4710) && (pci_device <= 0x4715))
2628 chip_id_16 = 0x4710;
2629#ifdef CONFIG_BCM947XX
2630 else if ((pci_device >= 0x4320) && (pci_device <= 0x4325))
2631 chip_id_16 = 0x4309;
2632#endif
2633 else {
2634 printk(KERN_ERR PFX "Could not determine Chip ID\n");
2635 return -ENODEV;
2636 }
2637 }
2638
2639 /* ChipCommon with Core Rev >=4 encodes number of cores,
2640 * otherwise consult hardcoded table */
2641 if ((core_id == BCM43xx_COREID_CHIPCOMMON) && (core_rev >= 4)) {
2642 core_count = (chip_id_32 & 0x0F000000) >> 24;
2643 } else {
2644 switch (chip_id_16) {
2645 case 0x4610:
2646 case 0x4704:
2647 case 0x4710:
2648 core_count = 9;
2649 break;
2650 case 0x4310:
2651 core_count = 8;
2652 break;
2653 case 0x5365:
2654 core_count = 7;
2655 break;
2656 case 0x4306:
2657 core_count = 6;
2658 break;
2659 case 0x4301:
2660 case 0x4307:
2661 core_count = 5;
2662 break;
2663 case 0x4402:
2664 core_count = 3;
2665 break;
2666 default:
2667 /* SOL if we get here */
2668 assert(0);
2669 core_count = 1;
2670 }
2671 }
2672
2673 bcm->chip_id = chip_id_16;
adc40e97
MB		 2674 bcm->chip_rev = (chip_id_32 & 0x000F0000) >> 16;
2675 bcm->chip_package = (chip_id_32 & 0x00F00000) >> 20;
f222313a
JL		 2676
2677 dprintk(KERN_INFO PFX "Chip ID 0x%x, rev 0x%x\n",
2678 bcm->chip_id, bcm->chip_rev);
2679 dprintk(KERN_INFO PFX "Number of cores: %d\n", core_count);
e9357c05 2680 if (bcm->core_chipcommon.available) {
f222313a
JL		 2681 dprintk(KERN_INFO PFX "Core 0: ID 0x%x, rev 0x%x, vendor 0x%x, %s\n",
2682 core_id, core_rev, core_vendor,
2683 bcm43xx_core_enabled(bcm) ? "enabled" : "disabled");
2684 }
2685
e9357c05 2686 if (bcm->core_chipcommon.available)
f222313a
JL		 2687 current_core = 1;
2688 else
2689 current_core = 0;
2690 for ( ; current_core < core_count; current_core++) {
2691 struct bcm43xx_coreinfo *core;
e9357c05 2692 struct bcm43xx_coreinfo_80211 *ext_80211;
f222313a
JL		 2693
2694 err = _switch_core(bcm, current_core);
2695 if (err)
2696 goto out;
2697 /* Gather information */
2698 /* fetch sb_id_hi from core information registers */
2699 sb_id_hi = bcm43xx_read32(bcm, BCM43xx_CIR_SB_ID_HI);
2700
2701 /* extract core_id, core_rev, core_vendor */
2702 core_id = (sb_id_hi & 0xFFF0) >> 4;
2703 core_rev = (sb_id_hi & 0xF);
2704 core_vendor = (sb_id_hi & 0xFFFF0000) >> 16;
2705
2706 dprintk(KERN_INFO PFX "Core %d: ID 0x%x, rev 0x%x, vendor 0x%x, %s\n",
2707 current_core, core_id, core_rev, core_vendor,
2708 bcm43xx_core_enabled(bcm) ? "enabled" : "disabled" );
2709
2710 core = NULL;
2711 switch (core_id) {
2712 case BCM43xx_COREID_PCI:
2713 core = &bcm->core_pci;
e9357c05 2714 if (core->available) {
f222313a
JL		 2715 printk(KERN_WARNING PFX "Multiple PCI cores found.\n");
2716 continue;
2717 }
2718 break;
f222313a
JL		 2719 case BCM43xx_COREID_80211:
2720 for (i = 0; i < BCM43xx_MAX_80211_CORES; i++) {
2721 core = &(bcm->core_80211[i]);
e9357c05
MB		 2722 ext_80211 = &(bcm->core_80211_ext[i]);
2723 if (!core->available)
f222313a
JL		 2724 break;
2725 core = NULL;
2726 }
2727 if (!core) {
2728 printk(KERN_WARNING PFX "More than %d cores of type 802.11 found.\n",
2729 BCM43xx_MAX_80211_CORES);
2730 continue;
2731 }
2732 if (i != 0) {
2733 /* More than one 80211 core is only supported
2734 * by special chips.
2735 * There are chips with two 80211 cores, but with
2736 * dangling pins on the second core. Be careful
2737 * and ignore these cores here.
2738 */
2739 if (bcm->pci_dev->device != 0x4324) {
2740 dprintk(KERN_INFO PFX "Ignoring additional 802.11 core.\n");
2741 continue;
2742 }
2743 }
2744 switch (core_rev) {
2745 case 2:
2746 case 4:
2747 case 5:
2748 case 6:
2749 case 7:
2750 case 9:
2751 break;
2752 default:
2753 printk(KERN_ERR PFX "Error: Unsupported 80211 core revision %u\n",
2754 core_rev);
2755 err = -ENODEV;
2756 goto out;
2757 }
e9357c05
MB		 2758 bcm->nr_80211_available++;
2759 bcm43xx_init_struct_phyinfo(&ext_80211->phy);
2760 bcm43xx_init_struct_radioinfo(&ext_80211->radio);
f222313a
JL		 2761 break;
2762 case BCM43xx_COREID_CHIPCOMMON:
2763 printk(KERN_WARNING PFX "Multiple CHIPCOMMON cores found.\n");
2764 break;
f222313a
JL		 2765 }
2766 if (core) {
e9357c05 2767 core->available = 1;
f222313a
JL		 2768 core->id = core_id;
2769 core->rev = core_rev;
2770 core->index = current_core;
2771 }
2772 }
2773
e9357c05 2774 if (!bcm->core_80211[0].available) {
f222313a
JL		 2775 printk(KERN_ERR PFX "Error: No 80211 core found!\n");
2776 err = -ENODEV;
2777 goto out;
2778 }
2779
2780 err = bcm43xx_switch_core(bcm, &bcm->core_80211[0]);
2781
2782 assert(err == 0);
2783out:
2784 return err;
2785}
2786
2787static void bcm43xx_gen_bssid(struct bcm43xx_private *bcm)
2788{
2789 const u8 *mac = (const u8*)(bcm->net_dev->dev_addr);
2790 u8 *bssid = bcm->ieee->bssid;
2791
2792 switch (bcm->ieee->iw_mode) {
2793 case IW_MODE_ADHOC:
2794 random_ether_addr(bssid);
2795 break;
2796 case IW_MODE_MASTER:
2797 case IW_MODE_INFRA:
2798 case IW_MODE_REPEAT:
2799 case IW_MODE_SECOND:
2800 case IW_MODE_MONITOR:
2801 memcpy(bssid, mac, ETH_ALEN);
2802 break;
2803 default:
2804 assert(0);
2805 }
2806}
2807
2808static void bcm43xx_rate_memory_write(struct bcm43xx_private *bcm,
2809 u16 rate,
2810 int is_ofdm)
2811{
2812 u16 offset;
2813
2814 if (is_ofdm) {
2815 offset = 0x480;
2816 offset += (bcm43xx_plcp_get_ratecode_ofdm(rate) & 0x000F) * 2;
2817 }
2818 else {
2819 offset = 0x4C0;
2820 offset += (bcm43xx_plcp_get_ratecode_cck(rate) & 0x000F) * 2;
2821 }
2822 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, offset + 0x20,
2823 bcm43xx_shm_read16(bcm, BCM43xx_SHM_SHARED, offset));
2824}
2825
2826static void bcm43xx_rate_memory_init(struct bcm43xx_private *bcm)
2827{
e9357c05 2828 switch (bcm43xx_current_phy(bcm)->type) {
f222313a
JL		 2829 case BCM43xx_PHYTYPE_A:
2830 case BCM43xx_PHYTYPE_G:
2831 bcm43xx_rate_memory_write(bcm, IEEE80211_OFDM_RATE_6MB, 1);
2832 bcm43xx_rate_memory_write(bcm, IEEE80211_OFDM_RATE_12MB, 1);
2833 bcm43xx_rate_memory_write(bcm, IEEE80211_OFDM_RATE_18MB, 1);
2834 bcm43xx_rate_memory_write(bcm, IEEE80211_OFDM_RATE_24MB, 1);
2835 bcm43xx_rate_memory_write(bcm, IEEE80211_OFDM_RATE_36MB, 1);
2836 bcm43xx_rate_memory_write(bcm, IEEE80211_OFDM_RATE_48MB, 1);
2837 bcm43xx_rate_memory_write(bcm, IEEE80211_OFDM_RATE_54MB, 1);
2838 case BCM43xx_PHYTYPE_B:
2839 bcm43xx_rate_memory_write(bcm, IEEE80211_CCK_RATE_1MB, 0);
2840 bcm43xx_rate_memory_write(bcm, IEEE80211_CCK_RATE_2MB, 0);
2841 bcm43xx_rate_memory_write(bcm, IEEE80211_CCK_RATE_5MB, 0);
2842 bcm43xx_rate_memory_write(bcm, IEEE80211_CCK_RATE_11MB, 0);
2843 break;
2844 default:
2845 assert(0);
2846 }
2847}
2848
2849static void bcm43xx_wireless_core_cleanup(struct bcm43xx_private *bcm)
2850{
2851 bcm43xx_chip_cleanup(bcm);
2852 bcm43xx_pio_free(bcm);
2853 bcm43xx_dma_free(bcm);
2854
e9357c05 2855 bcm->current_core->initialized = 0;
f222313a
JL		 2856}
2857
2858/* http://bcm-specs.sipsolutions.net/80211Init */
2859static int bcm43xx_wireless_core_init(struct bcm43xx_private *bcm)
2860{
e9357c05
MB		 2861 struct bcm43xx_phyinfo *phy = bcm43xx_current_phy(bcm);
2862 struct bcm43xx_radioinfo *radio = bcm43xx_current_radio(bcm);
f222313a
JL		 2863 u32 ucodeflags;
2864 int err;
2865 u32 sbimconfiglow;
2866 u8 limit;
2867
2868 if (bcm->chip_rev < 5) {
2869 sbimconfiglow = bcm43xx_read32(bcm, BCM43xx_CIR_SBIMCONFIGLOW);
2870 sbimconfiglow &= ~ BCM43xx_SBIMCONFIGLOW_REQUEST_TOUT_MASK;
2871 sbimconfiglow &= ~ BCM43xx_SBIMCONFIGLOW_SERVICE_TOUT_MASK;
2872 if (bcm->bustype == BCM43xx_BUSTYPE_PCI)
2873 sbimconfiglow |= 0x32;
2874 else if (bcm->bustype == BCM43xx_BUSTYPE_SB)
2875 sbimconfiglow |= 0x53;
2876 else
2877 assert(0);
2878 bcm43xx_write32(bcm, BCM43xx_CIR_SBIMCONFIGLOW, sbimconfiglow);
2879 }
2880
2881 bcm43xx_phy_calibrate(bcm);
2882 err = bcm43xx_chip_init(bcm);
2883 if (err)
2884 goto out;
2885
2886 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x0016, bcm->current_core->rev);
2887 ucodeflags = bcm43xx_shm_read32(bcm, BCM43xx_SHM_SHARED, BCM43xx_UCODEFLAGS_OFFSET);
2888
2889 if (0 /*FIXME: which condition has to be used here? */)
2890 ucodeflags |= 0x00000010;
2891
2892 /* HW decryption needs to be set now */
2893 ucodeflags |= 0x40000000;
2894
e9357c05 2895 if (phy->type == BCM43xx_PHYTYPE_G) {
f222313a 2896 ucodeflags |= BCM43xx_UCODEFLAG_UNKBGPHY;
e9357c05 2897 if (phy->rev == 1)
f222313a
JL		 2898 ucodeflags |= BCM43xx_UCODEFLAG_UNKGPHY;
2899 if (bcm->sprom.boardflags & BCM43xx_BFL_PACTRL)
2900 ucodeflags |= BCM43xx_UCODEFLAG_UNKPACTRL;
e9357c05 2901 } else if (phy->type == BCM43xx_PHYTYPE_B) {
f222313a 2902 ucodeflags |= BCM43xx_UCODEFLAG_UNKBGPHY;
e9357c05 2903 if (phy->rev >= 2 && radio->version == 0x2050)
f222313a
JL		 2904 ucodeflags &= ~BCM43xx_UCODEFLAG_UNKGPHY;
2905 }
2906
2907 if (ucodeflags != bcm43xx_shm_read32(bcm, BCM43xx_SHM_SHARED,
2908 BCM43xx_UCODEFLAGS_OFFSET)) {
2909 bcm43xx_shm_write32(bcm, BCM43xx_SHM_SHARED,
2910 BCM43xx_UCODEFLAGS_OFFSET, ucodeflags);
2911 }
2912
2913 /* Short/Long Retry Limit.
2914 * The retry-limit is a 4-bit counter. Enforce this to avoid overflowing
2915 * the chip-internal counter.
2916 */
2917 limit = limit_value(modparam_short_retry, 0, 0xF);
2918 bcm43xx_shm_write32(bcm, BCM43xx_SHM_WIRELESS, 0x0006, limit);
2919 limit = limit_value(modparam_long_retry, 0, 0xF);
2920 bcm43xx_shm_write32(bcm, BCM43xx_SHM_WIRELESS, 0x0007, limit);
2921
2922 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x0044, 3);
2923 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x0046, 2);
2924
2925 bcm43xx_rate_memory_init(bcm);
2926
2927 /* Minimum Contention Window */
e9357c05 2928 if (phy->type == BCM43xx_PHYTYPE_B)
f222313a
JL		 2929 bcm43xx_shm_write32(bcm, BCM43xx_SHM_WIRELESS, 0x0003, 0x0000001f);
2930 else
2931 bcm43xx_shm_write32(bcm, BCM43xx_SHM_WIRELESS, 0x0003, 0x0000000f);
2932 /* Maximum Contention Window */
2933 bcm43xx_shm_write32(bcm, BCM43xx_SHM_WIRELESS, 0x0004, 0x000003ff);
2934
2935 bcm43xx_gen_bssid(bcm);
2936 bcm43xx_write_mac_bssid_templates(bcm);
2937
2938 if (bcm->current_core->rev >= 5)
2939 bcm43xx_write16(bcm, 0x043C, 0x000C);
2940
77db31ea 2941 if (bcm43xx_using_pio(bcm))
f222313a 2942 err = bcm43xx_pio_init(bcm);
77db31ea
MB		 2943 else
2944 err = bcm43xx_dma_init(bcm);
2945 if (err)
2946 goto err_chip_cleanup;
f222313a
JL		 2947 bcm43xx_write16(bcm, 0x0612, 0x0050);
2948 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x0416, 0x0050);
2949 bcm43xx_shm_write16(bcm, BCM43xx_SHM_SHARED, 0x0414, 0x01F4);
2950
2951 bcm43xx_mac_enable(bcm);
2952 bcm43xx_interrupt_enable(bcm, bcm->irq_savedstate);
2953
e9357c05 2954 bcm->current_core->initialized = 1;
f222313a
JL		 2955out:
2956 return err;
2957
2958err_chip_cleanup:
2959 bcm43xx_chip_cleanup(bcm);
2960 goto out;
2961}
2962
2963static int bcm43xx_chipset_attach(struct bcm43xx_private *bcm)
2964{
2965 int err;
2966 u16 pci_status;
2967
2968 err = bcm43xx_pctl_set_crystal(bcm, 1);
2969 if (err)
2970 goto out;
2971 bcm43xx_pci_read_config16(bcm, PCI_STATUS, &pci_status);
2972 bcm43xx_pci_write_config16(bcm, PCI_STATUS, pci_status & ~PCI_STATUS_SIG_TARGET_ABORT);
2973
2974out:
2975 return err;
2976}
2977
2978static void bcm43xx_chipset_detach(struct bcm43xx_private *bcm)
2979{
2980 bcm43xx_pctl_set_clock(bcm, BCM43xx_PCTL_CLK_SLOW);
2981 bcm43xx_pctl_set_crystal(bcm, 0);
2982}
2983
489423c8
MB		 2984static void bcm43xx_pcicore_broadcast_value(struct bcm43xx_private *bcm,
2985 u32 address,
2986 u32 data)
f222313a
JL		 2987{
2988 bcm43xx_write32(bcm, BCM43xx_PCICORE_BCAST_ADDR, address);
2989 bcm43xx_write32(bcm, BCM43xx_PCICORE_BCAST_DATA, data);
2990}
2991
2992static int bcm43xx_pcicore_commit_settings(struct bcm43xx_private *bcm)
2993{
2994 int err;
2995 struct bcm43xx_coreinfo *old_core;
2996
2997 old_core = bcm->current_core;
2998 err = bcm43xx_switch_core(bcm, &bcm->core_pci);
2999 if (err)
3000 goto out;
3001
3002 bcm43xx_pcicore_broadcast_value(bcm, 0xfd8, 0x00000000);
3003
3004 bcm43xx_switch_core(bcm, old_core);
3005 assert(err == 0);
3006out:
3007 return err;
3008}
3009
3010/* Make an I/O Core usable. "core_mask" is the bitmask of the cores to enable.
3011 * To enable core 0, pass a core_mask of 1<<0
3012 */
3013static int bcm43xx_setup_backplane_pci_connection(struct bcm43xx_private *bcm,
3014 u32 core_mask)
3015{
3016 u32 backplane_flag_nr;
3017 u32 value;
3018 struct bcm43xx_coreinfo *old_core;
3019 int err = 0;
3020
3021 value = bcm43xx_read32(bcm, BCM43xx_CIR_SBTPSFLAG);
3022 backplane_flag_nr = value & BCM43xx_BACKPLANE_FLAG_NR_MASK;
3023
3024 old_core = bcm->current_core;
3025 err = bcm43xx_switch_core(bcm, &bcm->core_pci);
3026 if (err)
3027 goto out;
3028
3029 if (bcm->core_pci.rev < 6) {
3030 value = bcm43xx_read32(bcm, BCM43xx_CIR_SBINTVEC);
3031 value |= (1 << backplane_flag_nr);
3032 bcm43xx_write32(bcm, BCM43xx_CIR_SBINTVEC, value);
3033 } else {
3034 err = bcm43xx_pci_read_config32(bcm, BCM43xx_PCICFG_ICR, &value);
3035 if (err) {
3036 printk(KERN_ERR PFX "Error: ICR setup failure!\n");
3037 goto out_switch_back;
3038 }
3039 value |= core_mask << 8;
3040 err = bcm43xx_pci_write_config32(bcm, BCM43xx_PCICFG_ICR, value);
3041 if (err) {
3042 printk(KERN_ERR PFX "Error: ICR setup failure!\n");
3043 goto out_switch_back;
3044 }
3045 }
3046
3047 value = bcm43xx_read32(bcm, BCM43xx_PCICORE_SBTOPCI2);
3048 value |= BCM43xx_SBTOPCI2_PREFETCH | BCM43xx_SBTOPCI2_BURST;
3049 bcm43xx_write32(bcm, BCM43xx_PCICORE_SBTOPCI2, value);
3050
3051 if (bcm->core_pci.rev < 5) {
3052 value = bcm43xx_read32(bcm, BCM43xx_CIR_SBIMCONFIGLOW);
3053 value |= (2 << BCM43xx_SBIMCONFIGLOW_SERVICE_TOUT_SHIFT)
3054 & BCM43xx_SBIMCONFIGLOW_SERVICE_TOUT_MASK;
3055 value |= (3 << BCM43xx_SBIMCONFIGLOW_REQUEST_TOUT_SHIFT)
3056 & BCM43xx_SBIMCONFIGLOW_REQUEST_TOUT_MASK;
3057 bcm43xx_write32(bcm, BCM43xx_CIR_SBIMCONFIGLOW, value);
3058 err = bcm43xx_pcicore_commit_settings(bcm);
3059 assert(err == 0);
3060 }
3061
3062out_switch_back:
3063 err = bcm43xx_switch_core(bcm, old_core);
3064out:
3065 return err;
3066}
3067
3068static void bcm43xx_softmac_init(struct bcm43xx_private *bcm)
3069{
3070 ieee80211softmac_start(bcm->net_dev);
3071}
3072
ab4977f8 3073static void bcm43xx_periodic_every120sec(struct bcm43xx_private *bcm)
f222313a 3074{
e9357c05 3075 struct bcm43xx_phyinfo *phy = bcm43xx_current_phy(bcm);
f222313a 3076
ab4977f8
MB		 3077 if (phy->type != BCM43xx_PHYTYPE_G || phy->rev < 2)
3078 return;
f222313a 3079
ab4977f8
MB		 3080 bcm43xx_mac_suspend(bcm);
3081 bcm43xx_phy_lo_g_measure(bcm);
3082 bcm43xx_mac_enable(bcm);
f222313a
JL		 3083}
3084
ab4977f8 3085static void bcm43xx_periodic_every60sec(struct bcm43xx_private *bcm)
f222313a 3086{
f222313a
JL		 3087 bcm43xx_phy_lo_mark_all_unused(bcm);
3088 if (bcm->sprom.boardflags & BCM43xx_BFL_RSSI) {
3089 bcm43xx_mac_suspend(bcm);
3090 bcm43xx_calc_nrssi_slope(bcm);
3091 bcm43xx_mac_enable(bcm);
3092 }
f222313a
JL		 3093}
3094
ab4977f8 3095static void bcm43xx_periodic_every30sec(struct bcm43xx_private *bcm)
f222313a 3096{
ab4977f8
MB		 3097 /* Update device statistics. */
3098 bcm43xx_calculate_link_quality(bcm);
3099}
f222313a 3100
ab4977f8
MB		 3101static void bcm43xx_periodic_every15sec(struct bcm43xx_private *bcm)
3102{
e9357c05
MB		 3103 struct bcm43xx_phyinfo *phy = bcm43xx_current_phy(bcm);
3104 struct bcm43xx_radioinfo *radio = bcm43xx_current_radio(bcm);
f222313a 3105
ab4977f8
MB		 3106 if (phy->type == BCM43xx_PHYTYPE_G) {
3107 //TODO: update_aci_moving_average
3108 if (radio->aci_enable && radio->aci_wlan_automatic) {
3109 bcm43xx_mac_suspend(bcm);
3110 if (!radio->aci_enable && 1 /*TODO: not scanning? */) {
3111 if (0 /*TODO: bunch of conditions*/) {
3112 bcm43xx_radio_set_interference_mitigation(bcm,
3113 BCM43xx_RADIO_INTERFMODE_MANUALWLAN);
3114 }
3115 } else if (1/*TODO*/) {
3116 /*
3117 if ((aci_average > 1000) && !(bcm43xx_radio_aci_scan(bcm))) {
3118 bcm43xx_radio_set_interference_mitigation(bcm,
3119 BCM43xx_RADIO_INTERFMODE_NONE);
3120 }
3121 */
3122 }
3123 bcm43xx_mac_enable(bcm);
3124 } else if (radio->interfmode == BCM43xx_RADIO_INTERFMODE_NONWLAN &&
3125 phy->rev == 1) {
3126 //TODO: implement rev1 workaround
3127 }
f222313a 3128 }
ab4977f8
MB		 3129 bcm43xx_phy_xmitpower(bcm); //FIXME: unless scanning?
3130 //TODO for APHY (temperature?)
f222313a
JL		 3131}
3132
91769e7d 3133static void do_periodic_work(struct bcm43xx_private *bcm)
f222313a 3134{
ab4977f8 3135 unsigned int state;
f222313a 3136
ab4977f8
MB		 3137 state = bcm->periodic_state;
3138 if (state % 8 == 0)
3139 bcm43xx_periodic_every120sec(bcm);
3140 if (state % 4 == 0)
3141 bcm43xx_periodic_every60sec(bcm);
3142 if (state % 2 == 0)
3143 bcm43xx_periodic_every30sec(bcm);
91769e7d
MB		 3144 if (state % 1 == 0)
3145 bcm43xx_periodic_every15sec(bcm);
ab4977f8
MB		 3146 bcm->periodic_state = state + 1;
3147
78ff56a0 3148 schedule_delayed_work(&bcm->periodic_work, HZ * 15);
91769e7d 3149}
f222313a 3150
91769e7d
MB		 3151/* Estimate a "Badness" value based on the periodic work
3152 * state-machine state. "Badness" is worse (bigger), if the
3153 * periodic work will take longer.
3154 */
3155static int estimate_periodic_work_badness(unsigned int state)
3156{
3157 int badness = 0;
3158
3159 if (state % 8 == 0) /* every 120 sec */
3160 badness += 10;
3161 if (state % 4 == 0) /* every 60 sec */
3162 badness += 5;
3163 if (state % 2 == 0) /* every 30 sec */
3164 badness += 1;
3165 if (state % 1 == 0) /* every 15 sec */
3166 badness += 1;
3167
3168#define BADNESS_LIMIT 4
3169 return badness;
3170}
3171
3172static void bcm43xx_periodic_work_handler(void *d)
3173{
3174 struct bcm43xx_private *bcm = d;
3175 unsigned long flags;
3176 u32 savedirqs = 0;
3177 int badness;
3178
3179 badness = estimate_periodic_work_badness(bcm->periodic_state);
3180 if (badness > BADNESS_LIMIT) {
3181 /* Periodic work will take a long time, so we want it to
3182 * be preemtible.
3183 */
3184 bcm43xx_lock_irqonly(bcm, flags);
3185 netif_stop_queue(bcm->net_dev);
3186 if (bcm43xx_using_pio(bcm))
3187 bcm43xx_pio_freeze_txqueues(bcm);
3188 savedirqs = bcm43xx_interrupt_disable(bcm, BCM43xx_IRQ_ALL);
3189 bcm43xx_unlock_irqonly(bcm, flags);
3190 bcm43xx_lock_noirq(bcm);
3191 bcm43xx_synchronize_irq(bcm);
3192 } else {
3193 /* Periodic work should take short time, so we want low
3194 * locking overhead.
3195 */
3196 bcm43xx_lock_irqsafe(bcm, flags);
3197 }
3198
3199 do_periodic_work(bcm);
3200
3201 if (badness > BADNESS_LIMIT) {
3202 bcm43xx_lock_irqonly(bcm, flags);
3203 if (likely(bcm43xx_status(bcm) == BCM43xx_STAT_INITIALIZED)) {
3204 tasklet_enable(&bcm->isr_tasklet);
3205 bcm43xx_interrupt_enable(bcm, savedirqs);
3206 if (bcm43xx_using_pio(bcm))
3207 bcm43xx_pio_thaw_txqueues(bcm);
3208 }
3209 netif_wake_queue(bcm->net_dev);
3210 mmiowb();
3211 bcm43xx_unlock_irqonly(bcm, flags);
3212 bcm43xx_unlock_noirq(bcm);
3213 } else {
3214 mmiowb();
3215 bcm43xx_unlock_irqsafe(bcm, flags);
3216 }
f222313a
JL		 3217}
3218
f222313a
JL		 3219static void bcm43xx_periodic_tasks_delete(struct bcm43xx_private *bcm)
3220{
78ff56a0 3221 cancel_rearming_delayed_work(&bcm->periodic_work);
f222313a
JL		 3222}
3223
f222313a
JL		 3224static void bcm43xx_periodic_tasks_setup(struct bcm43xx_private *bcm)
3225{
78ff56a0 3226 struct work_struct *work = &(bcm->periodic_work);
f222313a 3227
78ff56a0
MB		 3228 assert(bcm43xx_status(bcm) == BCM43xx_STAT_INITIALIZED);
3229 INIT_WORK(work, bcm43xx_periodic_work_handler, bcm);
3230 schedule_work(work);
f222313a
JL		 3231}
3232
3233static void bcm43xx_security_init(struct bcm43xx_private *bcm)
3234{
3235 bcm->security_offset = bcm43xx_shm_read16(bcm, BCM43xx_SHM_SHARED,
3236 0x0056) * 2;
3237 bcm43xx_clear_keys(bcm);
3238}
3239
71c0cd70
MB		 3240static int bcm43xx_rng_read(struct hwrng *rng, u32 *data)
3241{
3242 struct bcm43xx_private *bcm = (struct bcm43xx_private *)rng->priv;
3243 unsigned long flags;
3244
3245 bcm43xx_lock_irqonly(bcm, flags);
3246 *data = bcm43xx_read16(bcm, BCM43xx_MMIO_RNG);
3247 bcm43xx_unlock_irqonly(bcm, flags);
3248
3249 return (sizeof(u16));
3250}
3251
3252static void bcm43xx_rng_exit(struct bcm43xx_private *bcm)
3253{
3254 hwrng_unregister(&bcm->rng);
3255}
3256
3257static int bcm43xx_rng_init(struct bcm43xx_private *bcm)
3258{
3259 int err;
3260
3261 snprintf(bcm->rng_name, ARRAY_SIZE(bcm->rng_name),
3262 "%s_%s", KBUILD_MODNAME, bcm->net_dev->name);
3263 bcm->rng.name = bcm->rng_name;
3264 bcm->rng.data_read = bcm43xx_rng_read;
3265 bcm->rng.priv = (unsigned long)bcm;
3266 err = hwrng_register(&bcm->rng);
3267 if (err)
3268 printk(KERN_ERR PFX "RNG init failed (%d)\n", err);
3269
3270 return err;
3271}
3272
f222313a
JL		 3273/* This is the opposite of bcm43xx_init_board() */
3274static void bcm43xx_free_board(struct bcm43xx_private *bcm)
3275{
3276 int i, err;
f222313a 3277
78ff56a0 3278 bcm43xx_lock_noirq(bcm);
367f899a 3279 bcm43xx_sysfs_unregister(bcm);
ab4977f8
MB		 3280 bcm43xx_periodic_tasks_delete(bcm);
3281
78ff56a0 3282 bcm43xx_set_status(bcm, BCM43xx_STAT_SHUTTINGDOWN);
f222313a 3283
71c0cd70 3284 bcm43xx_rng_exit(bcm);
f222313a 3285 for (i = 0; i < BCM43xx_MAX_80211_CORES; i++) {
e9357c05 3286 if (!bcm->core_80211[i].available)
f222313a 3287 continue;
e9357c05 3288 if (!bcm->core_80211[i].initialized)
f222313a
JL		 3289 continue;
3290
3291 err = bcm43xx_switch_core(bcm, &bcm->core_80211[i]);
3292 assert(err == 0);
3293 bcm43xx_wireless_core_cleanup(bcm);
3294 }
3295
3296 bcm43xx_pctl_set_crystal(bcm, 0);
3297
78ff56a0
MB		 3298 bcm43xx_set_status(bcm, BCM43xx_STAT_UNINIT);
3299 bcm43xx_unlock_noirq(bcm);
f222313a
JL		 3300}
3301
3302static int bcm43xx_init_board(struct bcm43xx_private *bcm)
3303{
3304 int i, err;
f222313a 3305 int connect_phy;
f222313a
JL		 3306
3307 might_sleep();
3308
78ff56a0
MB		 3309 bcm43xx_lock_noirq(bcm);
3310 bcm43xx_set_status(bcm, BCM43xx_STAT_INITIALIZING);
f222313a
JL		 3311
3312 err = bcm43xx_pctl_set_crystal(bcm, 1);
3313 if (err)
3314 goto out;
3315 err = bcm43xx_pctl_init(bcm);
3316 if (err)
3317 goto err_crystal_off;
3318 err = bcm43xx_pctl_set_clock(bcm, BCM43xx_PCTL_CLK_FAST);
3319 if (err)
3320 goto err_crystal_off;
3321
3322 tasklet_enable(&bcm->isr_tasklet);
e9357c05 3323 for (i = 0; i < bcm->nr_80211_available; i++) {
f222313a
JL		 3324 err = bcm43xx_switch_core(bcm, &bcm->core_80211[i]);
3325 assert(err != -ENODEV);
3326 if (err)
3327 goto err_80211_unwind;
3328
3329 /* Enable the selected wireless core.
3330 * Connect PHY only on the first core.
3331 */
3332 if (!bcm43xx_core_enabled(bcm)) {
e9357c05
MB		 3333 if (bcm->nr_80211_available == 1) {
3334 connect_phy = bcm43xx_current_phy(bcm)->connected;
f222313a
JL		 3335 } else {
3336 if (i == 0)
3337 connect_phy = 1;
3338 else
3339 connect_phy = 0;
3340 }
3341 bcm43xx_wireless_core_reset(bcm, connect_phy);
3342 }
3343
3344 if (i != 0)
3345 bcm43xx_wireless_core_mark_inactive(bcm, &bcm->core_80211[0]);
3346
3347 err = bcm43xx_wireless_core_init(bcm);
3348 if (err)
3349 goto err_80211_unwind;
3350
3351 if (i != 0) {
3352 bcm43xx_mac_suspend(bcm);
3353 bcm43xx_interrupt_disable(bcm, BCM43xx_IRQ_ALL);
3354 bcm43xx_radio_turn_off(bcm);
3355 }
3356 }
3357 bcm->active_80211_core = &bcm->core_80211[0];
e9357c05 3358 if (bcm->nr_80211_available >= 2) {
f222313a
JL		 3359 bcm43xx_switch_core(bcm, &bcm->core_80211[0]);
3360 bcm43xx_mac_enable(bcm);
3361 }
71c0cd70
MB		 3362 err = bcm43xx_rng_init(bcm);
3363 if (err)
3364 goto err_80211_unwind;
f222313a
JL		 3365 bcm43xx_macfilter_clear(bcm, BCM43xx_MACFILTER_ASSOC);
3366 bcm43xx_macfilter_set(bcm, BCM43xx_MACFILTER_SELF, (u8 *)(bcm->net_dev->dev_addr));
3367 dprintk(KERN_INFO PFX "80211 cores initialized\n");
3368 bcm43xx_security_init(bcm);
3369 bcm43xx_softmac_init(bcm);
3370
3371 bcm43xx_pctl_set_clock(bcm, BCM43xx_PCTL_CLK_DYNAMIC);
3372
e9357c05 3373 if (bcm43xx_current_radio(bcm)->initial_channel != 0xFF) {
f222313a 3374 bcm43xx_mac_suspend(bcm);
e9357c05 3375 bcm43xx_radio_selectchannel(bcm, bcm43xx_current_radio(bcm)->initial_channel, 0);
f222313a
JL		 3376 bcm43xx_mac_enable(bcm);
3377 }
cad2b31a
MB		 3378
3379 /* Initialization of the board is done. Flag it as such. */
78ff56a0 3380 bcm43xx_set_status(bcm, BCM43xx_STAT_INITIALIZED);
cad2b31a 3381
f222313a 3382 bcm43xx_periodic_tasks_setup(bcm);
367f899a
MB		 3383 bcm43xx_sysfs_register(bcm);
3384 //FIXME: check for bcm43xx_sysfs_register failure. This function is a bit messy regarding unwinding, though...
f222313a 3385
bc519f30
DW		 3386 /*FIXME: This should be handled by softmac instead. */
3387 schedule_work(&bcm->softmac->associnfo.work);
3388
f222313a
JL		 3389 assert(err == 0);
3390out:
78ff56a0
MB		 3391 bcm43xx_unlock_noirq(bcm);
3392
f222313a
JL		 3393 return err;
3394
3395err_80211_unwind:
3396 tasklet_disable(&bcm->isr_tasklet);
3397 /* unwind all 80211 initialization */
e9357c05
MB		 3398 for (i = 0; i < bcm->nr_80211_available; i++) {
3399 if (!bcm->core_80211[i].initialized)
f222313a
JL		 3400 continue;
3401 bcm43xx_interrupt_disable(bcm, BCM43xx_IRQ_ALL);
3402 bcm43xx_wireless_core_cleanup(bcm);
3403 }
3404err_crystal_off:
3405 bcm43xx_pctl_set_crystal(bcm, 0);
3406 goto out;
3407}
3408
3409static void bcm43xx_detach_board(struct bcm43xx_private *bcm)
3410{
3411 struct pci_dev *pci_dev = bcm->pci_dev;
3412 int i;
3413
3414 bcm43xx_chipset_detach(bcm);
3415 /* Do _not_ access the chip, after it is detached. */
cc935710 3416 pci_iounmap(pci_dev, bcm->mmio_addr);
f222313a
JL		 3417 pci_release_regions(pci_dev);
3418 pci_disable_device(pci_dev);
3419
3420 /* Free allocated structures/fields */
3421 for (i = 0; i < BCM43xx_MAX_80211_CORES; i++) {
e9357c05
MB		 3422 kfree(bcm->core_80211_ext[i].phy._lo_pairs);
3423 if (bcm->core_80211_ext[i].phy.dyn_tssi_tbl)
3424 kfree(bcm->core_80211_ext[i].phy.tssi2dbm);
f222313a
JL		 3425 }
3426}
3427
3428static int bcm43xx_read_phyinfo(struct bcm43xx_private *bcm)
3429{
e9357c05 3430 struct bcm43xx_phyinfo *phy = bcm43xx_current_phy(bcm);
f222313a
JL		 3431 u16 value;
3432 u8 phy_version;
3433 u8 phy_type;
3434 u8 phy_rev;
3435 int phy_rev_ok = 1;
3436 void *p;
3437
3438 value = bcm43xx_read16(bcm, BCM43xx_MMIO_PHY_VER);
3439
3440 phy_version = (value & 0xF000) >> 12;
3441 phy_type = (value & 0x0F00) >> 8;
3442 phy_rev = (value & 0x000F);
3443
3444 dprintk(KERN_INFO PFX "Detected PHY: Version: %x, Type %x, Revision %x\n",
3445 phy_version, phy_type, phy_rev);
3446
3447 switch (phy_type) {
3448 case BCM43xx_PHYTYPE_A:
3449 if (phy_rev >= 4)
3450 phy_rev_ok = 0;
3451 /*FIXME: We need to switch the ieee->modulation, etc.. flags,
3452 * if we switch 80211 cores after init is done.
3453 * As we do not implement on the fly switching between
3454 * wireless cores, I will leave this as a future task.
3455 */
3456 bcm->ieee->modulation = IEEE80211_OFDM_MODULATION;
3457 bcm->ieee->mode = IEEE_A;
3458 bcm->ieee->freq_band = IEEE80211_52GHZ_BAND |
3459 IEEE80211_24GHZ_BAND;
3460 break;
3461 case BCM43xx_PHYTYPE_B:
3462 if (phy_rev != 2 && phy_rev != 4 && phy_rev != 6 && phy_rev != 7)
3463 phy_rev_ok = 0;
3464 bcm->ieee->modulation = IEEE80211_CCK_MODULATION;
3465 bcm->ieee->mode = IEEE_B;
3466 bcm->ieee->freq_band = IEEE80211_24GHZ_BAND;
3467 break;
3468 case BCM43xx_PHYTYPE_G:
3469 if (phy_rev > 7)
3470 phy_rev_ok = 0;
3471 bcm->ieee->modulation = IEEE80211_OFDM_MODULATION |
3472 IEEE80211_CCK_MODULATION;
3473 bcm->ieee->mode = IEEE_G;
3474 bcm->ieee->freq_band = IEEE80211_24GHZ_BAND;
3475 break;
3476 default:
3477 printk(KERN_ERR PFX "Error: Unknown PHY Type %x\n",
3478 phy_type);
3479 return -ENODEV;
3480 };
3481 if (!phy_rev_ok) {
3482 printk(KERN_WARNING PFX "Invalid PHY Revision %x\n",
3483 phy_rev);
3484 }
3485
489423c8
MB		 3486 phy->version = phy_version;
3487 phy->type = phy_type;
3488 phy->rev = phy_rev;
f222313a
JL		 3489 if ((phy_type == BCM43xx_PHYTYPE_B) || (phy_type == BCM43xx_PHYTYPE_G)) {
3490 p = kzalloc(sizeof(struct bcm43xx_lopair) * BCM43xx_LO_COUNT,
3491 GFP_KERNEL);
3492 if (!p)
3493 return -ENOMEM;
489423c8 3494 phy->_lo_pairs = p;
f222313a
JL		 3495 }
3496
3497 return 0;
3498}
3499
3500static int bcm43xx_attach_board(struct bcm43xx_private *bcm)
3501{
3502 struct pci_dev *pci_dev = bcm->pci_dev;
3503 struct net_device *net_dev = bcm->net_dev;
3504 int err;
3505 int i;
f222313a
JL		 3506 u32 coremask;
3507
3508 err = pci_enable_device(pci_dev);
3509 if (err) {
cc935710 3510 printk(KERN_ERR PFX "pci_enable_device() failed\n");
f222313a
JL		 3511 goto out;
3512 }
65f3f191 3513 err = pci_request_regions(pci_dev, KBUILD_MODNAME);
f222313a 3514 if (err) {
cc935710 3515 printk(KERN_ERR PFX "pci_request_regions() failed\n");
f222313a
JL		 3516 goto err_pci_disable;
3517 }
f222313a
JL		 3518 /* enable PCI bus-mastering */
3519 pci_set_master(pci_dev);
cc935710 3520 bcm->mmio_addr = pci_iomap(pci_dev, 0, ~0UL);
4a1821e4 3521 if (!bcm->mmio_addr) {
cc935710 3522 printk(KERN_ERR PFX "pci_iomap() failed\n");
f222313a
JL		 3523 err = -EIO;
3524 goto err_pci_release;
3525 }
4a1821e4 3526 net_dev->base_addr = (unsigned long)bcm->mmio_addr;
f222313a
JL		 3527
3528 bcm43xx_pci_read_config16(bcm, PCI_SUBSYSTEM_VENDOR_ID,
3529 &bcm->board_vendor);
3530 bcm43xx_pci_read_config16(bcm, PCI_SUBSYSTEM_ID,
3531 &bcm->board_type);
3532 bcm43xx_pci_read_config16(bcm, PCI_REVISION_ID,
3533 &bcm->board_revision);
3534
3535 err = bcm43xx_chipset_attach(bcm);
3536 if (err)
3537 goto err_iounmap;
3538 err = bcm43xx_pctl_init(bcm);
3539 if (err)
3540 goto err_chipset_detach;
3541 err = bcm43xx_probe_cores(bcm);
3542 if (err)
3543 goto err_chipset_detach;
3544
f222313a
JL		 3545 /* Attach all IO cores to the backplane. */
3546 coremask = 0;
e9357c05 3547 for (i = 0; i < bcm->nr_80211_available; i++)
f222313a
JL		 3548 coremask |= (1 << bcm->core_80211[i].index);
3549 //FIXME: Also attach some non80211 cores?
3550 err = bcm43xx_setup_backplane_pci_connection(bcm, coremask);
3551 if (err) {
3552 printk(KERN_ERR PFX "Backplane->PCI connection failed!\n");
3553 goto err_chipset_detach;
3554 }
3555
ea0922b0 3556 err = bcm43xx_sprom_extract(bcm);
f222313a
JL		 3557 if (err)
3558 goto err_chipset_detach;
3559 err = bcm43xx_leds_init(bcm);
3560 if (err)
3561 goto err_chipset_detach;
3562
e9357c05 3563 for (i = 0; i < bcm->nr_80211_available; i++) {
f222313a
JL		 3564 err = bcm43xx_switch_core(bcm, &bcm->core_80211[i]);
3565 assert(err != -ENODEV);
3566 if (err)
3567 goto err_80211_unwind;
3568
3569 /* Enable the selected wireless core.
3570 * Connect PHY only on the first core.
3571 */
3572 bcm43xx_wireless_core_reset(bcm, (i == 0));
3573
3574 err = bcm43xx_read_phyinfo(bcm);
3575 if (err && (i == 0))
3576 goto err_80211_unwind;
3577
3578 err = bcm43xx_read_radioinfo(bcm);
3579 if (err && (i == 0))
3580 goto err_80211_unwind;
3581
3582 err = bcm43xx_validate_chip(bcm);
3583 if (err && (i == 0))
3584 goto err_80211_unwind;
3585
3586 bcm43xx_radio_turn_off(bcm);
3587 err = bcm43xx_phy_init_tssi2dbm_table(bcm);
3588 if (err)
3589 goto err_80211_unwind;
3590 bcm43xx_wireless_core_disable(bcm);
3591 }
869aaab1
MB		 3592 err = bcm43xx_geo_init(bcm);
3593 if (err)
3594 goto err_80211_unwind;
f222313a
JL		 3595 bcm43xx_pctl_set_crystal(bcm, 0);
3596
3597 /* Set the MAC address in the networking subsystem */
f9f7b960 3598 if (is_valid_ether_addr(bcm->sprom.et1macaddr))
f222313a
JL		 3599 memcpy(bcm->net_dev->dev_addr, bcm->sprom.et1macaddr, 6);
3600 else
3601 memcpy(bcm->net_dev->dev_addr, bcm->sprom.il0macaddr, 6);
3602
f222313a
JL		 3603 snprintf(bcm->nick, IW_ESSID_MAX_SIZE,
3604 "Broadcom %04X", bcm->chip_id);
3605
3606 assert(err == 0);
3607out:
3608 return err;
3609
3610err_80211_unwind:
3611 for (i = 0; i < BCM43xx_MAX_80211_CORES; i++) {
e9357c05
MB		 3612 kfree(bcm->core_80211_ext[i].phy._lo_pairs);
3613 if (bcm->core_80211_ext[i].phy.dyn_tssi_tbl)
3614 kfree(bcm->core_80211_ext[i].phy.tssi2dbm);
f222313a
JL		 3615 }
3616err_chipset_detach:
3617 bcm43xx_chipset_detach(bcm);
3618err_iounmap:
cc935710 3619 pci_iounmap(pci_dev, bcm->mmio_addr);
f222313a
JL		 3620err_pci_release:
3621 pci_release_regions(pci_dev);
3622err_pci_disable:
3623 pci_disable_device(pci_dev);
3624 goto out;
3625}
3626
f222313a
JL		 3627/* Do the Hardware IO operations to send the txb */
3628static inline int bcm43xx_tx(struct bcm43xx_private *bcm,
3629 struct ieee80211_txb *txb)
3630{
3631 int err = -ENODEV;
3632
77db31ea
MB		 3633 if (bcm43xx_using_pio(bcm))
3634 err = bcm43xx_pio_tx(bcm, txb);
f222313a 3635 else
ea72ab22 3636 err = bcm43xx_dma_tx(bcm, txb);
b79367a5 3637 bcm->net_dev->trans_start = jiffies;
f222313a
JL		 3638
3639 return err;
3640}
3641
3642static void bcm43xx_ieee80211_set_chan(struct net_device *net_dev,
3643 u8 channel)
3644{
3645 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
ec483781 3646 struct bcm43xx_radioinfo *radio;
f222313a
JL		 3647 unsigned long flags;
3648
78ff56a0
MB		 3649 bcm43xx_lock_irqsafe(bcm, flags);
3650 if (bcm43xx_status(bcm) == BCM43xx_STAT_INITIALIZED) {
ec483781
MB		 3651 bcm43xx_mac_suspend(bcm);
3652 bcm43xx_radio_selectchannel(bcm, channel, 0);
3653 bcm43xx_mac_enable(bcm);
3654 } else {
3655 radio = bcm43xx_current_radio(bcm);
3656 radio->initial_channel = channel;
3657 }
78ff56a0 3658 bcm43xx_unlock_irqsafe(bcm, flags);
f222313a
JL		 3659}
3660
3661/* set_security() callback in struct ieee80211_device */
3662static void bcm43xx_ieee80211_set_security(struct net_device *net_dev,
3663 struct ieee80211_security *sec)
3664{
3665 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
3666 struct ieee80211_security *secinfo = &bcm->ieee->sec;
3667 unsigned long flags;
3668 int keyidx;
3669
ff7562aa 3670 dprintk(KERN_INFO PFX "set security called");
efccb647 3671
78ff56a0 3672 bcm43xx_lock_irqsafe(bcm, flags);
efccb647 3673
f222313a
JL		 3674 for (keyidx = 0; keyidx<WEP_KEYS; keyidx++)
3675 if (sec->flags & (1<<keyidx)) {
3676 secinfo->encode_alg[keyidx] = sec->encode_alg[keyidx];
3677 secinfo->key_sizes[keyidx] = sec->key_sizes[keyidx];
3678 memcpy(secinfo->keys[keyidx], sec->keys[keyidx], SCM_KEY_LEN);
3679 }
3680
3681 if (sec->flags & SEC_ACTIVE_KEY) {
3682 secinfo->active_key = sec->active_key;
ff7562aa 3683 dprintk(", .active_key = %d", sec->active_key);
f222313a
JL		 3684 }
3685 if (sec->flags & SEC_UNICAST_GROUP) {
3686 secinfo->unicast_uses_group = sec->unicast_uses_group;
ff7562aa 3687 dprintk(", .unicast_uses_group = %d", sec->unicast_uses_group);
f222313a
JL		 3688 }
3689 if (sec->flags & SEC_LEVEL) {
3690 secinfo->level = sec->level;
ff7562aa 3691 dprintk(", .level = %d", sec->level);
f222313a
JL		 3692 }
3693 if (sec->flags & SEC_ENABLED) {
3694 secinfo->enabled = sec->enabled;
ff7562aa 3695 dprintk(", .enabled = %d", sec->enabled);
f222313a
JL		 3696 }
3697 if (sec->flags & SEC_ENCRYPT) {
3698 secinfo->encrypt = sec->encrypt;
ff7562aa 3699 dprintk(", .encrypt = %d", sec->encrypt);
f222313a 3700 }
ff7562aa 3701 dprintk("\n");
78ff56a0
MB		 3702 if (bcm43xx_status(bcm) == BCM43xx_STAT_INITIALIZED &&
3703 !bcm->ieee->host_encrypt) {
f222313a
JL		 3704 if (secinfo->enabled) {
3705 /* upload WEP keys to hardware */
3706 char null_address[6] = { 0 };
3707 u8 algorithm = 0;
3708 for (keyidx = 0; keyidx<WEP_KEYS; keyidx++) {
3709 if (!(sec->flags & (1<<keyidx)))
3710 continue;
3711 switch (sec->encode_alg[keyidx]) {
3712 case SEC_ALG_NONE: algorithm = BCM43xx_SEC_ALGO_NONE; break;
3713 case SEC_ALG_WEP:
3714 algorithm = BCM43xx_SEC_ALGO_WEP;
3715 if (secinfo->key_sizes[keyidx] == 13)
3716 algorithm = BCM43xx_SEC_ALGO_WEP104;
3717 break;
3718 case SEC_ALG_TKIP:
3719 FIXME();
3720 algorithm = BCM43xx_SEC_ALGO_TKIP;
3721 break;
3722 case SEC_ALG_CCMP:
3723 FIXME();
3724 algorithm = BCM43xx_SEC_ALGO_AES;
3725 break;
3726 default:
3727 assert(0);
3728 break;
3729 }
3730 bcm43xx_key_write(bcm, keyidx, algorithm, sec->keys[keyidx], secinfo->key_sizes[keyidx], &null_address[0]);
3731 bcm->key[keyidx].enabled = 1;
3732 bcm->key[keyidx].algorithm = algorithm;
3733 }
3734 } else
3735 bcm43xx_clear_keys(bcm);
3736 }
78ff56a0 3737 bcm43xx_unlock_irqsafe(bcm, flags);
f222313a
JL		 3738}
3739
3740/* hard_start_xmit() callback in struct ieee80211_device */
3741static int bcm43xx_ieee80211_hard_start_xmit(struct ieee80211_txb *txb,
3742 struct net_device *net_dev,
3743 int pri)
3744{
3745 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
3746 int err = -ENODEV;
3747 unsigned long flags;
3748
78ff56a0
MB		 3749 bcm43xx_lock_irqonly(bcm, flags);
3750 if (likely(bcm43xx_status(bcm) == BCM43xx_STAT_INITIALIZED))
f222313a 3751 err = bcm43xx_tx(bcm, txb);
78ff56a0 3752 bcm43xx_unlock_irqonly(bcm, flags);
f222313a
JL		 3753
3754 return err;
3755}
3756
3757static struct net_device_stats * bcm43xx_net_get_stats(struct net_device *net_dev)
3758{
3759 return &(bcm43xx_priv(net_dev)->ieee->stats);
3760}
3761
3762static void bcm43xx_net_tx_timeout(struct net_device *net_dev)
3763{
3764 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
efccb647 3765 unsigned long flags;
f222313a 3766
78ff56a0 3767 bcm43xx_lock_irqonly(bcm, flags);
f222313a 3768 bcm43xx_controller_restart(bcm, "TX timeout");
78ff56a0 3769 bcm43xx_unlock_irqonly(bcm, flags);
f222313a
JL		 3770}
3771
3772#ifdef CONFIG_NET_POLL_CONTROLLER
3773static void bcm43xx_net_poll_controller(struct net_device *net_dev)
3774{
3775 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
3776 unsigned long flags;
3777
3778 local_irq_save(flags);
3779 bcm43xx_interrupt_handler(bcm->irq, bcm, NULL);
3780 local_irq_restore(flags);
3781}
3782#endif /* CONFIG_NET_POLL_CONTROLLER */
3783
3784static int bcm43xx_net_open(struct net_device *net_dev)
3785{
3786 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
3787
3788 return bcm43xx_init_board(bcm);
3789}
3790
3791static int bcm43xx_net_stop(struct net_device *net_dev)
3792{
3793 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
91769e7d 3794 int err;
f222313a
JL		 3795
3796 ieee80211softmac_stop(net_dev);
91769e7d
MB		 3797 err = bcm43xx_disable_interrupts_sync(bcm, NULL);
3798 assert(!err);
f222313a
JL		 3799 bcm43xx_free_board(bcm);
3800
3801 return 0;
3802}
3803
77db31ea
MB		 3804static int bcm43xx_init_private(struct bcm43xx_private *bcm,
3805 struct net_device *net_dev,
ab4977f8 3806 struct pci_dev *pci_dev)
f222313a 3807{
4d5a9e0e
MB		 3808 int err;
3809
78ff56a0 3810 bcm43xx_set_status(bcm, BCM43xx_STAT_UNINIT);
f222313a
JL		 3811 bcm->ieee = netdev_priv(net_dev);
3812 bcm->softmac = ieee80211_priv(net_dev);
3813 bcm->softmac->set_channel = bcm43xx_ieee80211_set_chan;
f222313a 3814
f222313a
JL		 3815 bcm->irq_savedstate = BCM43xx_IRQ_INITIAL;
3816 bcm->pci_dev = pci_dev;
3817 bcm->net_dev = net_dev;
4d5a9e0e 3818 bcm->bad_frames_preempt = modparam_bad_frames_preempt;
78ff56a0
MB		 3819 spin_lock_init(&bcm->irq_lock);
3820 mutex_init(&bcm->mutex);
f222313a
JL		 3821 tasklet_init(&bcm->isr_tasklet,
3822 (void (*)(unsigned long))bcm43xx_interrupt_tasklet,
3823 (unsigned long)bcm);
3824 tasklet_disable_nosync(&bcm->isr_tasklet);
3825 if (modparam_pio) {
77db31ea 3826 bcm->__using_pio = 1;
f222313a 3827 } else {
4d5a9e0e
MB		 3828 err = pci_set_dma_mask(pci_dev, DMA_30BIT_MASK);
3829 err |= pci_set_consistent_dma_mask(pci_dev, DMA_30BIT_MASK);
3830 if (err) {
77db31ea 3831#ifdef CONFIG_BCM43XX_PIO
f222313a 3832 printk(KERN_WARNING PFX "DMA not supported. Falling back to PIO.\n");
77db31ea
MB		 3833 bcm->__using_pio = 1;
3834#else
3835 printk(KERN_ERR PFX "FATAL: DMA not supported and PIO not configured. "
3836 "Recompile the driver with PIO support, please.\n");
3837 return -ENODEV;
3838#endif /* CONFIG_BCM43XX_PIO */
f222313a
JL		 3839 }
3840 }
3841 bcm->rts_threshold = BCM43xx_DEFAULT_RTS_THRESHOLD;
3842
3843 /* default to sw encryption for now */
3844 bcm->ieee->host_build_iv = 0;
3845 bcm->ieee->host_encrypt = 1;
3846 bcm->ieee->host_decrypt = 1;
3847
3848 bcm->ieee->iw_mode = BCM43xx_INITIAL_IWMODE;
3849 bcm->ieee->tx_headroom = sizeof(struct bcm43xx_txhdr);
3850 bcm->ieee->set_security = bcm43xx_ieee80211_set_security;
3851 bcm->ieee->hard_start_xmit = bcm43xx_ieee80211_hard_start_xmit;
77db31ea
MB		 3852
3853 return 0;
f222313a
JL		 3854}
3855
3856static int __devinit bcm43xx_init_one(struct pci_dev *pdev,
3857 const struct pci_device_id *ent)
3858{
3859 struct net_device *net_dev;
3860 struct bcm43xx_private *bcm;
f222313a
JL		 3861 int err;
3862
3863#ifdef CONFIG_BCM947XX
3864 if ((pdev->bus->number == 0) && (pdev->device != 0x0800))
3865 return -ENODEV;
3866#endif
3867
3868#ifdef DEBUG_SINGLE_DEVICE_ONLY
3869 if (strcmp(pci_name(pdev), DEBUG_SINGLE_DEVICE_ONLY))
3870 return -ENODEV;
3871#endif
3872
3873 net_dev = alloc_ieee80211softmac(sizeof(*bcm));
3874 if (!net_dev) {
3875 printk(KERN_ERR PFX
3876 "could not allocate ieee80211 device %s\n",
3877 pci_name(pdev));
3878 err = -ENOMEM;
3879 goto out;
3880 }
3881 /* initialize the net_device struct */
3882 SET_MODULE_OWNER(net_dev);
3883 SET_NETDEV_DEV(net_dev, &pdev->dev);
3884
3885 net_dev->open = bcm43xx_net_open;
3886 net_dev->stop = bcm43xx_net_stop;
3887 net_dev->get_stats = bcm43xx_net_get_stats;
3888 net_dev->tx_timeout = bcm43xx_net_tx_timeout;
3889#ifdef CONFIG_NET_POLL_CONTROLLER
3890 net_dev->poll_controller = bcm43xx_net_poll_controller;
3891#endif
3892 net_dev->wireless_handlers = &bcm43xx_wx_handlers_def;
3893 net_dev->irq = pdev->irq;
6465ce1b 3894 SET_ETHTOOL_OPS(net_dev, &bcm43xx_ethtool_ops);
f222313a
JL		 3895
3896 /* initialize the bcm43xx_private struct */
3897 bcm = bcm43xx_priv(net_dev);
3898 memset(bcm, 0, sizeof(*bcm));
ab4977f8 3899 err = bcm43xx_init_private(bcm, net_dev, pdev);
77db31ea 3900 if (err)
ab4977f8 3901 goto err_free_netdev;
f222313a
JL		 3902
3903 pci_set_drvdata(pdev, net_dev);
3904
3905 err = bcm43xx_attach_board(bcm);
3906 if (err)
ab4977f8 3907 goto err_free_netdev;
f222313a
JL		 3908
3909 err = register_netdev(net_dev);
3910 if (err) {
3911 printk(KERN_ERR PFX "Cannot register net device, "
3912 "aborting.\n");
3913 err = -ENOMEM;
3914 goto err_detach_board;
3915 }
3916
3917 bcm43xx_debugfs_add_device(bcm);
3918
3919 assert(err == 0);
3920out:
3921 return err;
3922
3923err_detach_board:
3924 bcm43xx_detach_board(bcm);
f222313a
JL		 3925err_free_netdev:
3926 free_ieee80211softmac(net_dev);
3927 goto out;
3928}
3929
3930static void __devexit bcm43xx_remove_one(struct pci_dev *pdev)
3931{
3932 struct net_device *net_dev = pci_get_drvdata(pdev);
3933 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
3934
3935 bcm43xx_debugfs_remove_device(bcm);
3936 unregister_netdev(net_dev);
3937 bcm43xx_detach_board(bcm);
3938 assert(bcm->ucode == NULL);
f222313a
JL		 3939 free_ieee80211softmac(net_dev);
3940}
3941
3942/* Hard-reset the chip. Do not call this directly.
3943 * Use bcm43xx_controller_restart()
3944 */
3945static void bcm43xx_chip_reset(void *_bcm)
3946{
3947 struct bcm43xx_private *bcm = _bcm;
3948 struct net_device *net_dev = bcm->net_dev;
3949 struct pci_dev *pci_dev = bcm->pci_dev;
f222313a 3950 int err;
78ff56a0 3951 int was_initialized = (bcm43xx_status(bcm) == BCM43xx_STAT_INITIALIZED);
f222313a
JL		 3952
3953 netif_stop_queue(bcm->net_dev);
3954 tasklet_disable(&bcm->isr_tasklet);
3955
3956 bcm->firmware_norelease = 1;
3957 if (was_initialized)
3958 bcm43xx_free_board(bcm);
3959 bcm->firmware_norelease = 0;
3960 bcm43xx_detach_board(bcm);
ab4977f8 3961 err = bcm43xx_init_private(bcm, net_dev, pci_dev);
77db31ea
MB		 3962 if (err)
3963 goto failure;
f222313a
JL		 3964 err = bcm43xx_attach_board(bcm);
3965 if (err)
3966 goto failure;
3967 if (was_initialized) {
3968 err = bcm43xx_init_board(bcm);
3969 if (err)
3970 goto failure;
3971 }
3972 netif_wake_queue(bcm->net_dev);
3973 printk(KERN_INFO PFX "Controller restarted\n");
3974
3975 return;
3976failure:
3977 printk(KERN_ERR PFX "Controller restart failed\n");
3978}
3979
3980/* Hard-reset the chip.
3981 * This can be called from interrupt or process context.
3982 * Make sure to _not_ re-enable device interrupts after this has been called.
3983*/
3984void bcm43xx_controller_restart(struct bcm43xx_private *bcm, const char *reason)
3985{
78ff56a0 3986 bcm43xx_set_status(bcm, BCM43xx_STAT_RESTARTING);
f222313a 3987 bcm43xx_interrupt_disable(bcm, BCM43xx_IRQ_ALL);
73733847 3988 bcm43xx_read32(bcm, BCM43xx_MMIO_STATUS_BITFIELD); /* dummy read */
f222313a
JL		 3989 printk(KERN_ERR PFX "Controller RESET (%s) ...\n", reason);
3990 INIT_WORK(&bcm->restart_work, bcm43xx_chip_reset, bcm);
ab4977f8 3991 schedule_work(&bcm->restart_work);
f222313a
JL		 3992}
3993
3994#ifdef CONFIG_PM
3995
3996static int bcm43xx_suspend(struct pci_dev *pdev, pm_message_t state)
3997{
3998 struct net_device *net_dev = pci_get_drvdata(pdev);
3999 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
4000 unsigned long flags;
4001 int try_to_shutdown = 0, err;
4002
4003 dprintk(KERN_INFO PFX "Suspending...\n");
4004
78ff56a0
MB		 4005 bcm43xx_lock_irqsafe(bcm, flags);
4006 bcm->was_initialized = (bcm43xx_status(bcm) == BCM43xx_STAT_INITIALIZED);
4007 if (bcm->was_initialized)
f222313a 4008 try_to_shutdown = 1;
78ff56a0 4009 bcm43xx_unlock_irqsafe(bcm, flags);
f222313a
JL		 4010
4011 netif_device_detach(net_dev);
4012 if (try_to_shutdown) {
4013 ieee80211softmac_stop(net_dev);
4014 err = bcm43xx_disable_interrupts_sync(bcm, &bcm->irq_savedstate);
4015 if (unlikely(err)) {
4016 dprintk(KERN_ERR PFX "Suspend failed.\n");
4017 return -EAGAIN;
4018 }
4019 bcm->firmware_norelease = 1;
4020 bcm43xx_free_board(bcm);
4021 bcm->firmware_norelease = 0;
4022 }
4023 bcm43xx_chipset_detach(bcm);
4024
4025 pci_save_state(pdev);
4026 pci_disable_device(pdev);
4027 pci_set_power_state(pdev, pci_choose_state(pdev, state));
4028
4029 dprintk(KERN_INFO PFX "Device suspended.\n");
4030
4031 return 0;
4032}
4033
4034static int bcm43xx_resume(struct pci_dev *pdev)
4035{
4036 struct net_device *net_dev = pci_get_drvdata(pdev);
4037 struct bcm43xx_private *bcm = bcm43xx_priv(net_dev);
4038 int err = 0;
4039
4040 dprintk(KERN_INFO PFX "Resuming...\n");
4041
4042 pci_set_power_state(pdev, 0);
4043 pci_enable_device(pdev);
4044 pci_restore_state(pdev);
4045
4046 bcm43xx_chipset_attach(bcm);
4047 if (bcm->was_initialized) {
4048 bcm->irq_savedstate = BCM43xx_IRQ_INITIAL;
4049 err = bcm43xx_init_board(bcm);
4050 }
4051 if (err) {
4052 printk(KERN_ERR PFX "Resume failed!\n");
4053 return err;
4054 }
4055
4056 netif_device_attach(net_dev);
4057
f222313a
JL		 4058 dprintk(KERN_INFO PFX "Device resumed.\n");
4059
4060 return 0;
4061}
4062
4063#endif /* CONFIG_PM */
4064
4065static struct pci_driver bcm43xx_pci_driver = {
65f3f191 4066 .name = KBUILD_MODNAME,
f222313a
JL		 4067 .id_table = bcm43xx_pci_tbl,
4068 .probe = bcm43xx_init_one,
4069 .remove = __devexit_p(bcm43xx_remove_one),
4070#ifdef CONFIG_PM
4071 .suspend = bcm43xx_suspend,
4072 .resume = bcm43xx_resume,
4073#endif /* CONFIG_PM */
4074};
4075
4076static int __init bcm43xx_init(void)
4077{
65f3f191 4078 printk(KERN_INFO KBUILD_MODNAME " driver\n");
f222313a
JL		 4079 bcm43xx_debugfs_init();
4080 return pci_register_driver(&bcm43xx_pci_driver);
4081}
4082
4083static void __exit bcm43xx_exit(void)
4084{
4085 pci_unregister_driver(&bcm43xx_pci_driver);
4086 bcm43xx_debugfs_exit();
4087}
4088
4089module_init(bcm43xx_init)
4090module_exit(bcm43xx_exit)