projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
[PATCH] Add Linksys card to HostAP driver
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / drivers / net / wireless / ipw2200.c
CommitLineData
43f66a6c 1/******************************************************************************
bf79451e 2
171e7b2f 3 Copyright(c) 2003 - 2006 Intel Corporation. All rights reserved.
43f66a6c
JK		 4
5 802.11 status code portion of this file from ethereal-0.10.6:
6 Copyright 2000, Axis Communications AB
7 Ethereal - Network traffic analyzer
8 By Gerald Combs <gerald@ethereal.com>
9 Copyright 1998 Gerald Combs
10
bf79451e
JG		 11 This program is free software; you can redistribute it and/or modify it
12 under the terms of version 2 of the GNU General Public License as
43f66a6c 13 published by the Free Software Foundation.
bf79451e
JG		 14
15 This program is distributed in the hope that it will be useful, but WITHOUT
16 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
17 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
43f66a6c 18 more details.
bf79451e 19
43f66a6c 20 You should have received a copy of the GNU General Public License along with
bf79451e 21 this program; if not, write to the Free Software Foundation, Inc., 59
43f66a6c 22 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
bf79451e 23
43f66a6c
JK		 24 The full GNU General Public License is included in this distribution in the
25 file called LICENSE.
bf79451e 26
43f66a6c
JK		 27 Contact Information:
28 James P. Ketrenos <ipw2100-admin@linux.intel.com>
29 Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
30
31******************************************************************************/
32
33#include "ipw2200.h"
733482e4 34#include <linux/version.h>
43f66a6c 35
ae4af61f
ZY		 36
37#ifndef KBUILD_EXTMOD
38#define VK "k"
39#else
40#define VK
41#endif
42
43#ifdef CONFIG_IPW2200_DEBUG
44#define VD "d"
45#else
46#define VD
47#endif
48
49#ifdef CONFIG_IPW2200_MONITOR
50#define VM "m"
51#else
52#define VM
53#endif
54
55#ifdef CONFIG_IPW2200_PROMISCUOUS
56#define VP "p"
57#else
58#define VP
59#endif
60
459d4087 61#ifdef CONFIG_IPW2200_RADIOTAP
ae4af61f
ZY		 62#define VR "r"
63#else
64#define VR
65#endif
66
67#ifdef CONFIG_IPW2200_QOS
68#define VQ "q"
69#else
70#define VQ
71#endif
72
ee2c4add 73#define IPW2200_VERSION "1.2.2" VK VD VM VP VR VQ
43f66a6c 74#define DRV_DESCRIPTION "Intel(R) PRO/Wireless 2200/2915 Network Driver"
171e7b2f 75#define DRV_COPYRIGHT "Copyright(c) 2003-2006 Intel Corporation"
43f66a6c
JK		 76#define DRV_VERSION IPW2200_VERSION
77
b095c381
JK		 78#define ETH_P_80211_STATS (ETH_P_80211_RAW + 1)
79
43f66a6c
JK		 80MODULE_DESCRIPTION(DRV_DESCRIPTION);
81MODULE_VERSION(DRV_VERSION);
82MODULE_AUTHOR(DRV_COPYRIGHT);
83MODULE_LICENSE("GPL");
84
f6c5cb7c 85static int cmdlog = 0;
43f66a6c
JK		 86static int debug = 0;
87static int channel = 0;
43f66a6c
JK		 88static int mode = 0;
89
90static u32 ipw_debug_level;
91static int associate = 1;
92static int auto_create = 1;
a613bffd 93static int led = 0;
43f66a6c 94static int disable = 0;
810dabd4 95static int bt_coexist = 0;
bde37d03 96static int hwcrypto = 0;
4bfdb91d 97static int roaming = 1;
43f66a6c
JK		 98static const char ipw_modes[] = {
99 'a', 'b', 'g', '?'
100};
d2b83e12 101static int antenna = CFG_SYS_ANTENNA_BOTH;
43f66a6c 102
d685b8c2
ZY		 103#ifdef CONFIG_IPW2200_PROMISCUOUS
104static int rtap_iface = 0; /* def: 0 -- do not create rtap interface */
105#endif
106
107
e43e3c1e 108#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 109static int qos_enable = 0;
110static int qos_burst_enable = 0;
111static int qos_no_ack_mask = 0;
112static int burst_duration_CCK = 0;
113static int burst_duration_OFDM = 0;
114
115static struct ieee80211_qos_parameters def_qos_parameters_OFDM = {
116 {QOS_TX0_CW_MIN_OFDM, QOS_TX1_CW_MIN_OFDM, QOS_TX2_CW_MIN_OFDM,
117 QOS_TX3_CW_MIN_OFDM},
118 {QOS_TX0_CW_MAX_OFDM, QOS_TX1_CW_MAX_OFDM, QOS_TX2_CW_MAX_OFDM,
119 QOS_TX3_CW_MAX_OFDM},
120 {QOS_TX0_AIFS, QOS_TX1_AIFS, QOS_TX2_AIFS, QOS_TX3_AIFS},
121 {QOS_TX0_ACM, QOS_TX1_ACM, QOS_TX2_ACM, QOS_TX3_ACM},
122 {QOS_TX0_TXOP_LIMIT_OFDM, QOS_TX1_TXOP_LIMIT_OFDM,
123 QOS_TX2_TXOP_LIMIT_OFDM, QOS_TX3_TXOP_LIMIT_OFDM}
124};
125
126static struct ieee80211_qos_parameters def_qos_parameters_CCK = {
127 {QOS_TX0_CW_MIN_CCK, QOS_TX1_CW_MIN_CCK, QOS_TX2_CW_MIN_CCK,
128 QOS_TX3_CW_MIN_CCK},
129 {QOS_TX0_CW_MAX_CCK, QOS_TX1_CW_MAX_CCK, QOS_TX2_CW_MAX_CCK,
130 QOS_TX3_CW_MAX_CCK},
131 {QOS_TX0_AIFS, QOS_TX1_AIFS, QOS_TX2_AIFS, QOS_TX3_AIFS},
132 {QOS_TX0_ACM, QOS_TX1_ACM, QOS_TX2_ACM, QOS_TX3_ACM},
133 {QOS_TX0_TXOP_LIMIT_CCK, QOS_TX1_TXOP_LIMIT_CCK, QOS_TX2_TXOP_LIMIT_CCK,
134 QOS_TX3_TXOP_LIMIT_CCK}
135};
136
137static struct ieee80211_qos_parameters def_parameters_OFDM = {
138 {DEF_TX0_CW_MIN_OFDM, DEF_TX1_CW_MIN_OFDM, DEF_TX2_CW_MIN_OFDM,
139 DEF_TX3_CW_MIN_OFDM},
140 {DEF_TX0_CW_MAX_OFDM, DEF_TX1_CW_MAX_OFDM, DEF_TX2_CW_MAX_OFDM,
141 DEF_TX3_CW_MAX_OFDM},
142 {DEF_TX0_AIFS, DEF_TX1_AIFS, DEF_TX2_AIFS, DEF_TX3_AIFS},
143 {DEF_TX0_ACM, DEF_TX1_ACM, DEF_TX2_ACM, DEF_TX3_ACM},
144 {DEF_TX0_TXOP_LIMIT_OFDM, DEF_TX1_TXOP_LIMIT_OFDM,
145 DEF_TX2_TXOP_LIMIT_OFDM, DEF_TX3_TXOP_LIMIT_OFDM}
146};
147
148static struct ieee80211_qos_parameters def_parameters_CCK = {
149 {DEF_TX0_CW_MIN_CCK, DEF_TX1_CW_MIN_CCK, DEF_TX2_CW_MIN_CCK,
150 DEF_TX3_CW_MIN_CCK},
151 {DEF_TX0_CW_MAX_CCK, DEF_TX1_CW_MAX_CCK, DEF_TX2_CW_MAX_CCK,
152 DEF_TX3_CW_MAX_CCK},
153 {DEF_TX0_AIFS, DEF_TX1_AIFS, DEF_TX2_AIFS, DEF_TX3_AIFS},
154 {DEF_TX0_ACM, DEF_TX1_ACM, DEF_TX2_ACM, DEF_TX3_ACM},
155 {DEF_TX0_TXOP_LIMIT_CCK, DEF_TX1_TXOP_LIMIT_CCK, DEF_TX2_TXOP_LIMIT_CCK,
156 DEF_TX3_TXOP_LIMIT_CCK}
157};
158
159static u8 qos_oui[QOS_OUI_LEN] = { 0x00, 0x50, 0xF2 };
160
161static int from_priority_to_tx_queue[] = {
162 IPW_TX_QUEUE_1, IPW_TX_QUEUE_2, IPW_TX_QUEUE_2, IPW_TX_QUEUE_1,
163 IPW_TX_QUEUE_3, IPW_TX_QUEUE_3, IPW_TX_QUEUE_4, IPW_TX_QUEUE_4
164};
165
166static u32 ipw_qos_get_burst_duration(struct ipw_priv *priv);
167
168static int ipw_send_qos_params_command(struct ipw_priv *priv, struct ieee80211_qos_parameters
169 *qos_param);
170static int ipw_send_qos_info_command(struct ipw_priv *priv, struct ieee80211_qos_information_element
171 *qos_param);
e43e3c1e 172#endif /* CONFIG_IPW2200_QOS */
b095c381 173
97a78ca9 174static struct iw_statistics *ipw_get_wireless_stats(struct net_device *dev);
b095c381 175static void ipw_remove_current_network(struct ipw_priv *priv);
43f66a6c 176static void ipw_rx(struct ipw_priv *priv);
bf79451e 177static int ipw_queue_tx_reclaim(struct ipw_priv *priv,
43f66a6c
JK		 178 struct clx2_tx_queue *txq, int qindex);
179static int ipw_queue_reset(struct ipw_priv *priv);
180
181static int ipw_queue_tx_hcmd(struct ipw_priv *priv, int hcmd, void *buf,
182 int len, int sync);
183
184static void ipw_tx_queue_free(struct ipw_priv *);
185
186static struct ipw_rx_queue *ipw_rx_queue_alloc(struct ipw_priv *);
187static void ipw_rx_queue_free(struct ipw_priv *, struct ipw_rx_queue *);
188static void ipw_rx_queue_replenish(void *);
43f66a6c 189static int ipw_up(struct ipw_priv *);
c4028958 190static void ipw_bg_up(struct work_struct *work);
43f66a6c 191static void ipw_down(struct ipw_priv *);
c4028958 192static void ipw_bg_down(struct work_struct *work);
43f66a6c 193static int ipw_config(struct ipw_priv *);
0edd5b44
JG		 194static int init_supported_rates(struct ipw_priv *priv,
195 struct ipw_supported_rates *prates);
b095c381
JK		 196static void ipw_set_hwcrypto_keys(struct ipw_priv *);
197static void ipw_send_wep_keys(struct ipw_priv *, int);
43f66a6c 198
f6c5cb7c
JK		 199static int snprint_line(char *buf, size_t count,
200 const u8 * data, u32 len, u32 ofs)
43f66a6c
JK		 201{
202 int out, i, j, l;
203 char c;
bf79451e 204
43f66a6c
JK		 205 out = snprintf(buf, count, "%08X", ofs);
206
207 for (l = 0, i = 0; i < 2; i++) {
208 out += snprintf(buf + out, count - out, " ");
bf79451e
JG		 209 for (j = 0; j < 8 && l < len; j++, l++)
210 out += snprintf(buf + out, count - out, "%02X ",
43f66a6c
JK		 211 data[(i * 8 + j)]);
212 for (; j < 8; j++)
213 out += snprintf(buf + out, count - out, " ");
214 }
bf79451e 215
43f66a6c
JK		 216 out += snprintf(buf + out, count - out, " ");
217 for (l = 0, i = 0; i < 2; i++) {
218 out += snprintf(buf + out, count - out, " ");
219 for (j = 0; j < 8 && l < len; j++, l++) {
220 c = data[(i * 8 + j)];
221 if (!isascii(c) || !isprint(c))
222 c = '.';
bf79451e 223
43f66a6c
JK		 224 out += snprintf(buf + out, count - out, "%c", c);
225 }
226
227 for (; j < 8; j++)
228 out += snprintf(buf + out, count - out, " ");
229 }
bf79451e 230
f6c5cb7c 231 return out;
43f66a6c
JK		 232}
233
0edd5b44 234static void printk_buf(int level, const u8 * data, u32 len)
43f66a6c
JK		 235{
236 char line[81];
237 u32 ofs = 0;
238 if (!(ipw_debug_level & level))
239 return;
240
241 while (len) {
f6c5cb7c
JK		 242 snprint_line(line, sizeof(line), &data[ofs],
243 min(len, 16U), ofs);
244 printk(KERN_DEBUG "%s\n", line);
43f66a6c
JK		 245 ofs += 16;
246 len -= min(len, 16U);
247 }
248}
249
f6c5cb7c
JK		 250static int snprintk_buf(u8 * output, size_t size, const u8 * data, size_t len)
251{
252 size_t out = size;
253 u32 ofs = 0;
254 int total = 0;
255
256 while (size && len) {
257 out = snprint_line(output, size, &data[ofs],
258 min_t(size_t, len, 16U), ofs);
259
260 ofs += 16;
261 output += out;
262 size -= out;
263 len -= min_t(size_t, len, 16U);
264 total += out;
265 }
266 return total;
267}
268
c8fe6679 269/* alias for 32-bit indirect read (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 270static u32 _ipw_read_reg32(struct ipw_priv *priv, u32 reg);
271#define ipw_read_reg32(a, b) _ipw_read_reg32(a, b)
272
c8fe6679 273/* alias for 8-bit indirect read (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 274static u8 _ipw_read_reg8(struct ipw_priv *ipw, u32 reg);
275#define ipw_read_reg8(a, b) _ipw_read_reg8(a, b)
276
c8fe6679 277/* 8-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 278static void _ipw_write_reg8(struct ipw_priv *priv, u32 reg, u8 value);
279static inline void ipw_write_reg8(struct ipw_priv *a, u32 b, u8 c)
280{
0edd5b44
JG		 281 IPW_DEBUG_IO("%s %d: write_indirect8(0x%08X, 0x%08X)\n", __FILE__,
282 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 283 _ipw_write_reg8(a, b, c);
284}
285
c8fe6679 286/* 16-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 287static void _ipw_write_reg16(struct ipw_priv *priv, u32 reg, u16 value);
288static inline void ipw_write_reg16(struct ipw_priv *a, u32 b, u16 c)
289{
0edd5b44
JG		 290 IPW_DEBUG_IO("%s %d: write_indirect16(0x%08X, 0x%08X)\n", __FILE__,
291 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 292 _ipw_write_reg16(a, b, c);
293}
294
c8fe6679 295/* 32-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 296static void _ipw_write_reg32(struct ipw_priv *priv, u32 reg, u32 value);
297static inline void ipw_write_reg32(struct ipw_priv *a, u32 b, u32 c)
298{
0edd5b44
JG		 299 IPW_DEBUG_IO("%s %d: write_indirect32(0x%08X, 0x%08X)\n", __FILE__,
300 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 301 _ipw_write_reg32(a, b, c);
302}
303
c8fe6679 304/* 8-bit direct write (low 4K) */
43f66a6c 305#define _ipw_write8(ipw, ofs, val) writeb((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY		 306
307/* 8-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 308#define ipw_write8(ipw, ofs, val) \
309 IPW_DEBUG_IO("%s %d: write_direct8(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
310 _ipw_write8(ipw, ofs, val)
311
c8fe6679 312/* 16-bit direct write (low 4K) */
43f66a6c 313#define _ipw_write16(ipw, ofs, val) writew((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY		 314
315/* 16-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 316#define ipw_write16(ipw, ofs, val) \
317 IPW_DEBUG_IO("%s %d: write_direct16(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
318 _ipw_write16(ipw, ofs, val)
319
c8fe6679 320/* 32-bit direct write (low 4K) */
43f66a6c 321#define _ipw_write32(ipw, ofs, val) writel((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY		 322
323/* 32-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 324#define ipw_write32(ipw, ofs, val) \
325 IPW_DEBUG_IO("%s %d: write_direct32(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
326 _ipw_write32(ipw, ofs, val)
327
c8fe6679 328/* 8-bit direct read (low 4K) */
43f66a6c 329#define _ipw_read8(ipw, ofs) readb((ipw)->hw_base + (ofs))
c8fe6679
ZY		 330
331/* 8-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG		 332static inline u8 __ipw_read8(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
333{
334 IPW_DEBUG_IO("%s %d: read_direct8(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK		 335 return _ipw_read8(ipw, ofs);
336}
0edd5b44 337
c8fe6679 338/* alias to 8-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 339#define ipw_read8(ipw, ofs) __ipw_read8(__FILE__, __LINE__, ipw, ofs)
340
c8fe6679 341/* 16-bit direct read (low 4K) */
43f66a6c 342#define _ipw_read16(ipw, ofs) readw((ipw)->hw_base + (ofs))
c8fe6679
ZY		 343
344/* 16-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG		 345static inline u16 __ipw_read16(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
346{
347 IPW_DEBUG_IO("%s %d: read_direct16(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK		 348 return _ipw_read16(ipw, ofs);
349}
0edd5b44 350
c8fe6679 351/* alias to 16-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 352#define ipw_read16(ipw, ofs) __ipw_read16(__FILE__, __LINE__, ipw, ofs)
353
c8fe6679 354/* 32-bit direct read (low 4K) */
43f66a6c 355#define _ipw_read32(ipw, ofs) readl((ipw)->hw_base + (ofs))
c8fe6679
ZY		 356
357/* 32-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG		 358static inline u32 __ipw_read32(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
359{
360 IPW_DEBUG_IO("%s %d: read_direct32(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK		 361 return _ipw_read32(ipw, ofs);
362}
0edd5b44 363
c8fe6679 364/* alias to 32-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 365#define ipw_read32(ipw, ofs) __ipw_read32(__FILE__, __LINE__, ipw, ofs)
366
c8fe6679 367/* multi-byte read (above 4K), with debug wrapper */
43f66a6c 368static void _ipw_read_indirect(struct ipw_priv *, u32, u8 *, int);
f6c5cb7c
JK		 369static inline void __ipw_read_indirect(const char *f, int l,
370 struct ipw_priv *a, u32 b, u8 * c, int d)
371{
372 IPW_DEBUG_IO("%s %d: read_indirect(0x%08X) %d bytes\n", f, l, (u32) (b),
373 d);
374 _ipw_read_indirect(a, b, c, d);
375}
376
c8fe6679 377/* alias to multi-byte read (SRAM/regs above 4K), with debug wrapper */
f6c5cb7c 378#define ipw_read_indirect(a, b, c, d) __ipw_read_indirect(__FILE__, __LINE__, a, b, c, d)
43f66a6c 379
c8fe6679 380/* alias to multi-byte read (SRAM/regs above 4K), with debug wrapper */
0edd5b44
JG		 381static void _ipw_write_indirect(struct ipw_priv *priv, u32 addr, u8 * data,
382 int num);
43f66a6c
JK		 383#define ipw_write_indirect(a, b, c, d) \
384 IPW_DEBUG_IO("%s %d: write_indirect(0x%08X) %d bytes\n", __FILE__, __LINE__, (u32)(b), d); \
afbf30a2 385 _ipw_write_indirect(a, b, c, d)
43f66a6c 386
c8fe6679 387/* 32-bit indirect write (above 4K) */
0edd5b44 388static void _ipw_write_reg32(struct ipw_priv *priv, u32 reg, u32 value)
43f66a6c 389{
0edd5b44 390 IPW_DEBUG_IO(" %p : reg = 0x%8X : value = 0x%8X\n", priv, reg, value);
b095c381
JK		 391 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg);
392 _ipw_write32(priv, IPW_INDIRECT_DATA, value);
43f66a6c
JK		 393}
394
c8fe6679 395/* 8-bit indirect write (above 4K) */
43f66a6c
JK		 396static void _ipw_write_reg8(struct ipw_priv *priv, u32 reg, u8 value)
397{
2638bc39 398 u32 aligned_addr = reg & IPW_INDIRECT_ADDR_MASK; /* dword align */
c8fe6679
ZY		 399 u32 dif_len = reg - aligned_addr;
400
43f66a6c 401 IPW_DEBUG_IO(" reg = 0x%8X : value = 0x%8X\n", reg, value);
c8fe6679
ZY		 402 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
403 _ipw_write8(priv, IPW_INDIRECT_DATA + dif_len, value);
43f66a6c
JK		 404}
405
c8fe6679 406/* 16-bit indirect write (above 4K) */
0edd5b44 407static void _ipw_write_reg16(struct ipw_priv *priv, u32 reg, u16 value)
43f66a6c 408{
2638bc39 409 u32 aligned_addr = reg & IPW_INDIRECT_ADDR_MASK; /* dword align */
c8fe6679
ZY		 410 u32 dif_len = (reg - aligned_addr) & (~0x1ul);
411
43f66a6c 412 IPW_DEBUG_IO(" reg = 0x%8X : value = 0x%8X\n", reg, value);
c8fe6679
ZY		 413 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
414 _ipw_write16(priv, IPW_INDIRECT_DATA + dif_len, value);
43f66a6c
JK		 415}
416
c8fe6679 417/* 8-bit indirect read (above 4K) */
43f66a6c
JK		 418static u8 _ipw_read_reg8(struct ipw_priv *priv, u32 reg)
419{
420 u32 word;
b095c381 421 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg & IPW_INDIRECT_ADDR_MASK);
43f66a6c 422 IPW_DEBUG_IO(" reg = 0x%8X : \n", reg);
b095c381 423 word = _ipw_read32(priv, IPW_INDIRECT_DATA);
0edd5b44 424 return (word >> ((reg & 0x3) * 8)) & 0xff;
43f66a6c
JK		 425}
426
c8fe6679 427/* 32-bit indirect read (above 4K) */
43f66a6c
JK		 428static u32 _ipw_read_reg32(struct ipw_priv *priv, u32 reg)
429{
430 u32 value;
431
432 IPW_DEBUG_IO("%p : reg = 0x%08x\n", priv, reg);
433
b095c381
JK		 434 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg);
435 value = _ipw_read32(priv, IPW_INDIRECT_DATA);
43f66a6c
JK		 436 IPW_DEBUG_IO(" reg = 0x%4X : value = 0x%4x \n", reg, value);
437 return value;
438}
439
c8fe6679
ZY		 440/* General purpose, no alignment requirement, iterative (multi-byte) read, */
441/* for area above 1st 4K of SRAM/reg space */
43f66a6c
JK		 442static void _ipw_read_indirect(struct ipw_priv *priv, u32 addr, u8 * buf,
443 int num)
444{
2638bc39 445 u32 aligned_addr = addr & IPW_INDIRECT_ADDR_MASK; /* dword align */
43f66a6c 446 u32 dif_len = addr - aligned_addr;
43f66a6c 447 u32 i;
bf79451e 448
43f66a6c
JK		 449 IPW_DEBUG_IO("addr = %i, buf = %p, num = %i\n", addr, buf, num);
450
ea2b26e0
JK		 451 if (num <= 0) {
452 return;
453 }
454
c8fe6679 455 /* Read the first dword (or portion) byte by byte */
43f66a6c 456 if (unlikely(dif_len)) {
b095c381 457 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
43f66a6c 458 /* Start reading at aligned_addr + dif_len */
ea2b26e0 459 for (i = dif_len; ((i < 4) && (num > 0)); i++, num--)
b095c381 460 *buf++ = _ipw_read8(priv, IPW_INDIRECT_DATA + i);
43f66a6c
JK		 461 aligned_addr += 4;
462 }
463
c8fe6679 464 /* Read all of the middle dwords as dwords, with auto-increment */
b095c381 465 _ipw_write32(priv, IPW_AUTOINC_ADDR, aligned_addr);
ea2b26e0 466 for (; num >= 4; buf += 4, aligned_addr += 4, num -= 4)
b095c381 467 *(u32 *) buf = _ipw_read32(priv, IPW_AUTOINC_DATA);
bf79451e 468
c8fe6679 469 /* Read the last dword (or portion) byte by byte */
ea2b26e0 470 if (unlikely(num)) {
b095c381 471 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
ea2b26e0 472 for (i = 0; num > 0; i++, num--)
b095c381 473 *buf++ = ipw_read8(priv, IPW_INDIRECT_DATA + i);
ea2b26e0 474 }
43f66a6c
JK		 475}
476
c8fe6679
ZY		 477/* General purpose, no alignment requirement, iterative (multi-byte) write, */
478/* for area above 1st 4K of SRAM/reg space */
0edd5b44 479static void _ipw_write_indirect(struct ipw_priv *priv, u32 addr, u8 * buf,
43f66a6c
JK		 480 int num)
481{
2638bc39 482 u32 aligned_addr = addr & IPW_INDIRECT_ADDR_MASK; /* dword align */
43f66a6c 483 u32 dif_len = addr - aligned_addr;
43f66a6c 484 u32 i;
bf79451e 485
43f66a6c 486 IPW_DEBUG_IO("addr = %i, buf = %p, num = %i\n", addr, buf, num);
bf79451e 487
ea2b26e0
JK		 488 if (num <= 0) {
489 return;
490 }
491
c8fe6679 492 /* Write the first dword (or portion) byte by byte */
43f66a6c 493 if (unlikely(dif_len)) {
b095c381 494 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
c8fe6679 495 /* Start writing at aligned_addr + dif_len */
ea2b26e0 496 for (i = dif_len; ((i < 4) && (num > 0)); i++, num--, buf++)
b095c381 497 _ipw_write8(priv, IPW_INDIRECT_DATA + i, *buf);
43f66a6c
JK		 498 aligned_addr += 4;
499 }
bf79451e 500
c8fe6679 501 /* Write all of the middle dwords as dwords, with auto-increment */
b095c381 502 _ipw_write32(priv, IPW_AUTOINC_ADDR, aligned_addr);
ea2b26e0 503 for (; num >= 4; buf += 4, aligned_addr += 4, num -= 4)
b095c381 504 _ipw_write32(priv, IPW_AUTOINC_DATA, *(u32 *) buf);
bf79451e 505
c8fe6679 506 /* Write the last dword (or portion) byte by byte */
ea2b26e0 507 if (unlikely(num)) {
b095c381 508 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
ea2b26e0 509 for (i = 0; num > 0; i++, num--, buf++)
b095c381 510 _ipw_write8(priv, IPW_INDIRECT_DATA + i, *buf);
ea2b26e0 511 }
43f66a6c
JK		 512}
513
c8fe6679
ZY		 514/* General purpose, no alignment requirement, iterative (multi-byte) write, */
515/* for 1st 4K of SRAM/regs space */
bf79451e 516static void ipw_write_direct(struct ipw_priv *priv, u32 addr, void *buf,
43f66a6c
JK		 517 int num)
518{
519 memcpy_toio((priv->hw_base + addr), buf, num);
520}
521
c8fe6679 522/* Set bit(s) in low 4K of SRAM/regs */
43f66a6c
JK		 523static inline void ipw_set_bit(struct ipw_priv *priv, u32 reg, u32 mask)
524{
525 ipw_write32(priv, reg, ipw_read32(priv, reg) | mask);
526}
527
c8fe6679 528/* Clear bit(s) in low 4K of SRAM/regs */
43f66a6c
JK		 529static inline void ipw_clear_bit(struct ipw_priv *priv, u32 reg, u32 mask)
530{
531 ipw_write32(priv, reg, ipw_read32(priv, reg) & ~mask);
532}
533
89c318ed 534static inline void __ipw_enable_interrupts(struct ipw_priv *priv)
43f66a6c
JK		 535{
536 if (priv->status & STATUS_INT_ENABLED)
537 return;
538 priv->status |= STATUS_INT_ENABLED;
b095c381 539 ipw_write32(priv, IPW_INTA_MASK_R, IPW_INTA_MASK_ALL);
43f66a6c
JK		 540}
541
89c318ed 542static inline void __ipw_disable_interrupts(struct ipw_priv *priv)
43f66a6c
JK		 543{
544 if (!(priv->status & STATUS_INT_ENABLED))
545 return;
546 priv->status &= ~STATUS_INT_ENABLED;
b095c381 547 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
43f66a6c
JK		 548}
549
89c318ed
ZY		 550static inline void ipw_enable_interrupts(struct ipw_priv *priv)
551{
552 unsigned long flags;
553
554 spin_lock_irqsave(&priv->irq_lock, flags);
555 __ipw_enable_interrupts(priv);
556 spin_unlock_irqrestore(&priv->irq_lock, flags);
557}
558
559static inline void ipw_disable_interrupts(struct ipw_priv *priv)
560{
561 unsigned long flags;
562
563 spin_lock_irqsave(&priv->irq_lock, flags);
564 __ipw_disable_interrupts(priv);
565 spin_unlock_irqrestore(&priv->irq_lock, flags);
566}
567
43f66a6c
JK		 568static char *ipw_error_desc(u32 val)
569{
570 switch (val) {
bf79451e 571 case IPW_FW_ERROR_OK:
43f66a6c 572 return "ERROR_OK";
bf79451e 573 case IPW_FW_ERROR_FAIL:
43f66a6c 574 return "ERROR_FAIL";
bf79451e 575 case IPW_FW_ERROR_MEMORY_UNDERFLOW:
43f66a6c 576 return "MEMORY_UNDERFLOW";
bf79451e 577 case IPW_FW_ERROR_MEMORY_OVERFLOW:
43f66a6c 578 return "MEMORY_OVERFLOW";
bf79451e 579 case IPW_FW_ERROR_BAD_PARAM:
b095c381 580 return "BAD_PARAM";
bf79451e 581 case IPW_FW_ERROR_BAD_CHECKSUM:
b095c381 582 return "BAD_CHECKSUM";
bf79451e 583 case IPW_FW_ERROR_NMI_INTERRUPT:
b095c381 584 return "NMI_INTERRUPT";
bf79451e 585 case IPW_FW_ERROR_BAD_DATABASE:
b095c381 586 return "BAD_DATABASE";
bf79451e 587 case IPW_FW_ERROR_ALLOC_FAIL:
b095c381 588 return "ALLOC_FAIL";
bf79451e 589 case IPW_FW_ERROR_DMA_UNDERRUN:
b095c381 590 return "DMA_UNDERRUN";
bf79451e 591 case IPW_FW_ERROR_DMA_STATUS:
b095c381
JK		 592 return "DMA_STATUS";
593 case IPW_FW_ERROR_DINO_ERROR:
594 return "DINO_ERROR";
595 case IPW_FW_ERROR_EEPROM_ERROR:
596 return "EEPROM_ERROR";
bf79451e 597 case IPW_FW_ERROR_SYSASSERT:
b095c381 598 return "SYSASSERT";
bf79451e 599 case IPW_FW_ERROR_FATAL_ERROR:
b095c381 600 return "FATAL_ERROR";
bf79451e 601 default:
b095c381 602 return "UNKNOWN_ERROR";
43f66a6c
JK		 603 }
604}
605
b39860c6
JK		 606static void ipw_dump_error_log(struct ipw_priv *priv,
607 struct ipw_fw_error *error)
43f66a6c 608{
b39860c6 609 u32 i;
bf79451e 610
b39860c6
JK		 611 if (!error) {
612 IPW_ERROR("Error allocating and capturing error log. "
613 "Nothing to dump.\n");
614 return;
43f66a6c
JK		 615 }
616
b39860c6
JK		 617 IPW_ERROR("Start IPW Error Log Dump:\n");
618 IPW_ERROR("Status: 0x%08X, Config: %08X\n",
619 error->status, error->config);
43f66a6c 620
b39860c6 621 for (i = 0; i < error->elem_len; i++)
0edd5b44 622 IPW_ERROR("%s %i 0x%08x 0x%08x 0x%08x 0x%08x 0x%08x\n",
b39860c6
JK		 623 ipw_error_desc(error->elem[i].desc),
624 error->elem[i].time,
625 error->elem[i].blink1,
626 error->elem[i].blink2,
627 error->elem[i].link1,
628 error->elem[i].link2, error->elem[i].data);
629 for (i = 0; i < error->log_len; i++)
630 IPW_ERROR("%i\t0x%08x\t%i\n",
631 error->log[i].time,
286568ab 632 error->log[i].data, error->log[i].event);
43f66a6c
JK		 633}
634
c848d0af 635static inline int ipw_is_init(struct ipw_priv *priv)
43f66a6c 636{
c848d0af 637 return (priv->status & STATUS_INIT) ? 1 : 0;
43f66a6c
JK		 638}
639
0edd5b44 640static int ipw_get_ordinal(struct ipw_priv *priv, u32 ord, void *val, u32 * len)
43f66a6c
JK		 641{
642 u32 addr, field_info, field_len, field_count, total_len;
643
644 IPW_DEBUG_ORD("ordinal = %i\n", ord);
645
646 if (!priv || !val || !len) {
647 IPW_DEBUG_ORD("Invalid argument\n");
648 return -EINVAL;
649 }
bf79451e 650
43f66a6c
JK		 651 /* verify device ordinal tables have been initialized */
652 if (!priv->table0_addr || !priv->table1_addr || !priv->table2_addr) {
653 IPW_DEBUG_ORD("Access ordinals before initialization\n");
654 return -EINVAL;
655 }
656
657 switch (IPW_ORD_TABLE_ID_MASK & ord) {
658 case IPW_ORD_TABLE_0_MASK:
659 /*
660 * TABLE 0: Direct access to a table of 32 bit values
661 *
bf79451e 662 * This is a very simple table with the data directly
43f66a6c
JK		 663 * read from the table
664 */
665
666 /* remove the table id from the ordinal */
667 ord &= IPW_ORD_TABLE_VALUE_MASK;
668
669 /* boundary check */
670 if (ord > priv->table0_len) {
671 IPW_DEBUG_ORD("ordinal value (%i) longer then "
672 "max (%i)\n", ord, priv->table0_len);
673 return -EINVAL;
674 }
675
676 /* verify we have enough room to store the value */
677 if (*len < sizeof(u32)) {
678 IPW_DEBUG_ORD("ordinal buffer length too small, "
aaa4d308 679 "need %zd\n", sizeof(u32));
43f66a6c
JK		 680 return -EINVAL;
681 }
682
683 IPW_DEBUG_ORD("Reading TABLE0[%i] from offset 0x%08x\n",
0edd5b44 684 ord, priv->table0_addr + (ord << 2));
43f66a6c
JK		 685
686 *len = sizeof(u32);
687 ord <<= 2;
0edd5b44 688 *((u32 *) val) = ipw_read32(priv, priv->table0_addr + ord);
43f66a6c
JK		 689 break;
690
691 case IPW_ORD_TABLE_1_MASK:
692 /*
693 * TABLE 1: Indirect access to a table of 32 bit values
bf79451e
JG		 694 *
695 * This is a fairly large table of u32 values each
43f66a6c
JK		 696 * representing starting addr for the data (which is
697 * also a u32)
698 */
699
700 /* remove the table id from the ordinal */
701 ord &= IPW_ORD_TABLE_VALUE_MASK;
bf79451e 702
43f66a6c
JK		 703 /* boundary check */
704 if (ord > priv->table1_len) {
705 IPW_DEBUG_ORD("ordinal value too long\n");
706 return -EINVAL;
707 }
708
709 /* verify we have enough room to store the value */
710 if (*len < sizeof(u32)) {
711 IPW_DEBUG_ORD("ordinal buffer length too small, "
aaa4d308 712 "need %zd\n", sizeof(u32));
43f66a6c
JK		 713 return -EINVAL;
714 }
715
0edd5b44
JG		 716 *((u32 *) val) =
717 ipw_read_reg32(priv, (priv->table1_addr + (ord << 2)));
43f66a6c
JK		 718 *len = sizeof(u32);
719 break;
720
721 case IPW_ORD_TABLE_2_MASK:
722 /*
723 * TABLE 2: Indirect access to a table of variable sized values
724 *
725 * This table consist of six values, each containing
726 * - dword containing the starting offset of the data
727 * - dword containing the lengh in the first 16bits
728 * and the count in the second 16bits
729 */
730
731 /* remove the table id from the ordinal */
732 ord &= IPW_ORD_TABLE_VALUE_MASK;
733
734 /* boundary check */
735 if (ord > priv->table2_len) {
736 IPW_DEBUG_ORD("ordinal value too long\n");
737 return -EINVAL;
738 }
739
740 /* get the address of statistic */
741 addr = ipw_read_reg32(priv, priv->table2_addr + (ord << 3));
bf79451e
JG		 742
743 /* get the second DW of statistics ;
43f66a6c 744 * two 16-bit words - first is length, second is count */
0edd5b44
JG		 745 field_info =
746 ipw_read_reg32(priv,
747 priv->table2_addr + (ord << 3) +
748 sizeof(u32));
bf79451e 749
43f66a6c 750 /* get each entry length */
0edd5b44 751 field_len = *((u16 *) & field_info);
bf79451e 752
43f66a6c 753 /* get number of entries */
0edd5b44 754 field_count = *(((u16 *) & field_info) + 1);
bf79451e 755
43f66a6c
JK		 756 /* abort if not enought memory */
757 total_len = field_len * field_count;
758 if (total_len > *len) {
759 *len = total_len;
760 return -EINVAL;
761 }
bf79451e 762
43f66a6c
JK		 763 *len = total_len;
764 if (!total_len)
765 return 0;
766
767 IPW_DEBUG_ORD("addr = 0x%08x, total_len = %i, "
bf79451e 768 "field_info = 0x%08x\n",
43f66a6c
JK		 769 addr, total_len, field_info);
770 ipw_read_indirect(priv, addr, val, total_len);
771 break;
772
773 default:
774 IPW_DEBUG_ORD("Invalid ordinal!\n");
775 return -EINVAL;
776
777 }
778
43f66a6c
JK		 779 return 0;
780}
781
782static void ipw_init_ordinals(struct ipw_priv *priv)
783{
784 priv->table0_addr = IPW_ORDINALS_TABLE_LOWER;
bf79451e 785 priv->table0_len = ipw_read32(priv, priv->table0_addr);
43f66a6c
JK		 786
787 IPW_DEBUG_ORD("table 0 offset at 0x%08x, len = %i\n",
788 priv->table0_addr, priv->table0_len);
789
790 priv->table1_addr = ipw_read32(priv, IPW_ORDINALS_TABLE_1);
791 priv->table1_len = ipw_read_reg32(priv, priv->table1_addr);
792
793 IPW_DEBUG_ORD("table 1 offset at 0x%08x, len = %i\n",
794 priv->table1_addr, priv->table1_len);
795
796 priv->table2_addr = ipw_read32(priv, IPW_ORDINALS_TABLE_2);
797 priv->table2_len = ipw_read_reg32(priv, priv->table2_addr);
0edd5b44 798 priv->table2_len &= 0x0000ffff; /* use first two bytes */
43f66a6c
JK		 799
800 IPW_DEBUG_ORD("table 2 offset at 0x%08x, len = %i\n",
801 priv->table2_addr, priv->table2_len);
802
803}
804
a73e22b2 805static u32 ipw_register_toggle(u32 reg)
a613bffd 806{
b095c381
JK		 807 reg &= ~IPW_START_STANDBY;
808 if (reg & IPW_GATE_ODMA)
809 reg &= ~IPW_GATE_ODMA;
810 if (reg & IPW_GATE_IDMA)
811 reg &= ~IPW_GATE_IDMA;
812 if (reg & IPW_GATE_ADMA)
813 reg &= ~IPW_GATE_ADMA;
a613bffd
JK		 814 return reg;
815}
816
817/*
818 * LED behavior:
819 * - On radio ON, turn on any LEDs that require to be on during start
820 * - On initialization, start unassociated blink
821 * - On association, disable unassociated blink
822 * - On disassociation, start unassociated blink
823 * - On radio OFF, turn off any LEDs started during radio on
824 *
825 */
ede6111c
ZY		 826#define LD_TIME_LINK_ON msecs_to_jiffies(300)
827#define LD_TIME_LINK_OFF msecs_to_jiffies(2700)
828#define LD_TIME_ACT_ON msecs_to_jiffies(250)
a613bffd 829
a73e22b2 830static void ipw_led_link_on(struct ipw_priv *priv)
a613bffd
JK		 831{
832 unsigned long flags;
833 u32 led;
834
835 /* If configured to not use LEDs, or nic_type is 1,
836 * then we don't toggle a LINK led */
837 if (priv->config & CFG_NO_LED || priv->nic_type == EEPROM_NIC_TYPE_1)
838 return;
839
840 spin_lock_irqsave(&priv->lock, flags);
841
842 if (!(priv->status & STATUS_RF_KILL_MASK) &&
843 !(priv->status & STATUS_LED_LINK_ON)) {
844 IPW_DEBUG_LED("Link LED On\n");
b095c381 845 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 846 led |= priv->led_association_on;
847
848 led = ipw_register_toggle(led);
849
850 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 851 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 852
853 priv->status |= STATUS_LED_LINK_ON;
854
855 /* If we aren't associated, schedule turning the LED off */
856 if (!(priv->status & STATUS_ASSOCIATED))
857 queue_delayed_work(priv->workqueue,
858 &priv->led_link_off,
859 LD_TIME_LINK_ON);
860 }
861
862 spin_unlock_irqrestore(&priv->lock, flags);
863}
864
c4028958 865static void ipw_bg_led_link_on(struct work_struct *work)
c848d0af 866{
c4028958
DH		 867 struct ipw_priv *priv =
868 container_of(work, struct ipw_priv, led_link_on.work);
4644151b 869 mutex_lock(&priv->mutex);
c4028958 870 ipw_led_link_on(priv);
4644151b 871 mutex_unlock(&priv->mutex);
c848d0af
JK		 872}
873
a73e22b2 874static void ipw_led_link_off(struct ipw_priv *priv)
a613bffd
JK		 875{
876 unsigned long flags;
877 u32 led;
878
879 /* If configured not to use LEDs, or nic type is 1,
880 * then we don't goggle the LINK led. */
881 if (priv->config & CFG_NO_LED || priv->nic_type == EEPROM_NIC_TYPE_1)
882 return;
883
884 spin_lock_irqsave(&priv->lock, flags);
885
886 if (priv->status & STATUS_LED_LINK_ON) {
b095c381 887 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 888 led &= priv->led_association_off;
889 led = ipw_register_toggle(led);
890
891 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 892 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 893
894 IPW_DEBUG_LED("Link LED Off\n");
895
896 priv->status &= ~STATUS_LED_LINK_ON;
897
898 /* If we aren't associated and the radio is on, schedule
899 * turning the LED on (blink while unassociated) */
900 if (!(priv->status & STATUS_RF_KILL_MASK) &&
901 !(priv->status & STATUS_ASSOCIATED))
902 queue_delayed_work(priv->workqueue, &priv->led_link_on,
903 LD_TIME_LINK_OFF);
904
905 }
906
907 spin_unlock_irqrestore(&priv->lock, flags);
908}
909
c4028958 910static void ipw_bg_led_link_off(struct work_struct *work)
c848d0af 911{
c4028958
DH		 912 struct ipw_priv *priv =
913 container_of(work, struct ipw_priv, led_link_off.work);
4644151b 914 mutex_lock(&priv->mutex);
c4028958 915 ipw_led_link_off(priv);
4644151b 916 mutex_unlock(&priv->mutex);
c848d0af
JK		 917}
918
858119e1 919static void __ipw_led_activity_on(struct ipw_priv *priv)
a613bffd 920{
a613bffd
JK		 921 u32 led;
922
923 if (priv->config & CFG_NO_LED)
924 return;
925
b095c381 926 if (priv->status & STATUS_RF_KILL_MASK)
a613bffd 927 return;
a613bffd
JK		 928
929 if (!(priv->status & STATUS_LED_ACT_ON)) {
b095c381 930 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 931 led |= priv->led_activity_on;
932
933 led = ipw_register_toggle(led);
934
935 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 936 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 937
938 IPW_DEBUG_LED("Activity LED On\n");
939
940 priv->status |= STATUS_LED_ACT_ON;
941
c848d0af 942 cancel_delayed_work(&priv->led_act_off);
a613bffd
JK		 943 queue_delayed_work(priv->workqueue, &priv->led_act_off,
944 LD_TIME_ACT_ON);
945 } else {
946 /* Reschedule LED off for full time period */
947 cancel_delayed_work(&priv->led_act_off);
948 queue_delayed_work(priv->workqueue, &priv->led_act_off,
949 LD_TIME_ACT_ON);
950 }
b095c381 951}
a613bffd 952
a73e22b2 953#if 0
b095c381
JK		 954void ipw_led_activity_on(struct ipw_priv *priv)
955{
956 unsigned long flags;
957 spin_lock_irqsave(&priv->lock, flags);
958 __ipw_led_activity_on(priv);
a613bffd
JK		 959 spin_unlock_irqrestore(&priv->lock, flags);
960}
a73e22b2 961#endif /* 0 */
a613bffd 962
a73e22b2 963static void ipw_led_activity_off(struct ipw_priv *priv)
a613bffd
JK		 964{
965 unsigned long flags;
966 u32 led;
967
968 if (priv->config & CFG_NO_LED)
969 return;
970
971 spin_lock_irqsave(&priv->lock, flags);
972
973 if (priv->status & STATUS_LED_ACT_ON) {
b095c381 974 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 975 led &= priv->led_activity_off;
976
977 led = ipw_register_toggle(led);
978
979 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 980 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 981
982 IPW_DEBUG_LED("Activity LED Off\n");
983
984 priv->status &= ~STATUS_LED_ACT_ON;
985 }
986
987 spin_unlock_irqrestore(&priv->lock, flags);
988}
989
c4028958 990static void ipw_bg_led_activity_off(struct work_struct *work)
c848d0af 991{
c4028958
DH		 992 struct ipw_priv *priv =
993 container_of(work, struct ipw_priv, led_act_off.work);
4644151b 994 mutex_lock(&priv->mutex);
c4028958 995 ipw_led_activity_off(priv);
4644151b 996 mutex_unlock(&priv->mutex);
c848d0af
JK		 997}
998
a73e22b2 999static void ipw_led_band_on(struct ipw_priv *priv)
a613bffd
JK		 1000{
1001 unsigned long flags;
1002 u32 led;
1003
1004 /* Only nic type 1 supports mode LEDs */
c848d0af
JK		 1005 if (priv->config & CFG_NO_LED ||
1006 priv->nic_type != EEPROM_NIC_TYPE_1 || !priv->assoc_network)
a613bffd
JK		 1007 return;
1008
1009 spin_lock_irqsave(&priv->lock, flags);
1010
b095c381 1011 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 1012 if (priv->assoc_network->mode == IEEE_A) {
1013 led |= priv->led_ofdm_on;
1014 led &= priv->led_association_off;
1015 IPW_DEBUG_LED("Mode LED On: 802.11a\n");
1016 } else if (priv->assoc_network->mode == IEEE_G) {
1017 led |= priv->led_ofdm_on;
1018 led |= priv->led_association_on;
1019 IPW_DEBUG_LED("Mode LED On: 802.11g\n");
1020 } else {
1021 led &= priv->led_ofdm_off;
1022 led |= priv->led_association_on;
1023 IPW_DEBUG_LED("Mode LED On: 802.11b\n");
1024 }
1025
1026 led = ipw_register_toggle(led);
1027
1028 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 1029 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 1030
1031 spin_unlock_irqrestore(&priv->lock, flags);
1032}
1033
a73e22b2 1034static void ipw_led_band_off(struct ipw_priv *priv)
a613bffd
JK		 1035{
1036 unsigned long flags;
1037 u32 led;
1038
1039 /* Only nic type 1 supports mode LEDs */
1040 if (priv->config & CFG_NO_LED || priv->nic_type != EEPROM_NIC_TYPE_1)
1041 return;
1042
1043 spin_lock_irqsave(&priv->lock, flags);
1044
b095c381 1045 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 1046 led &= priv->led_ofdm_off;
1047 led &= priv->led_association_off;
1048
1049 led = ipw_register_toggle(led);
1050
1051 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 1052 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 1053
1054 spin_unlock_irqrestore(&priv->lock, flags);
1055}
1056
a73e22b2 1057static void ipw_led_radio_on(struct ipw_priv *priv)
a613bffd
JK		 1058{
1059 ipw_led_link_on(priv);
1060}
1061
a73e22b2 1062static void ipw_led_radio_off(struct ipw_priv *priv)
a613bffd
JK		 1063{
1064 ipw_led_activity_off(priv);
1065 ipw_led_link_off(priv);
1066}
1067
a73e22b2 1068static void ipw_led_link_up(struct ipw_priv *priv)
a613bffd
JK		 1069{
1070 /* Set the Link Led on for all nic types */
1071 ipw_led_link_on(priv);
1072}
1073
a73e22b2 1074static void ipw_led_link_down(struct ipw_priv *priv)
a613bffd
JK		 1075{
1076 ipw_led_activity_off(priv);
1077 ipw_led_link_off(priv);
1078
1079 if (priv->status & STATUS_RF_KILL_MASK)
1080 ipw_led_radio_off(priv);
1081}
1082
a73e22b2 1083static void ipw_led_init(struct ipw_priv *priv)
a613bffd
JK		 1084{
1085 priv->nic_type = priv->eeprom[EEPROM_NIC_TYPE];
1086
1087 /* Set the default PINs for the link and activity leds */
b095c381
JK		 1088 priv->led_activity_on = IPW_ACTIVITY_LED;
1089 priv->led_activity_off = ~(IPW_ACTIVITY_LED);
a613bffd 1090
b095c381
JK		 1091 priv->led_association_on = IPW_ASSOCIATED_LED;
1092 priv->led_association_off = ~(IPW_ASSOCIATED_LED);
a613bffd
JK		 1093
1094 /* Set the default PINs for the OFDM leds */
b095c381
JK		 1095 priv->led_ofdm_on = IPW_OFDM_LED;
1096 priv->led_ofdm_off = ~(IPW_OFDM_LED);
a613bffd
JK		 1097
1098 switch (priv->nic_type) {
1099 case EEPROM_NIC_TYPE_1:
1100 /* In this NIC type, the LEDs are reversed.... */
b095c381
JK		 1101 priv->led_activity_on = IPW_ASSOCIATED_LED;
1102 priv->led_activity_off = ~(IPW_ASSOCIATED_LED);
1103 priv->led_association_on = IPW_ACTIVITY_LED;
1104 priv->led_association_off = ~(IPW_ACTIVITY_LED);
a613bffd
JK		 1105
1106 if (!(priv->config & CFG_NO_LED))
1107 ipw_led_band_on(priv);
1108
1109 /* And we don't blink link LEDs for this nic, so
1110 * just return here */
1111 return;
1112
1113 case EEPROM_NIC_TYPE_3:
1114 case EEPROM_NIC_TYPE_2:
1115 case EEPROM_NIC_TYPE_4:
1116 case EEPROM_NIC_TYPE_0:
1117 break;
1118
1119 default:
1120 IPW_DEBUG_INFO("Unknown NIC type from EEPROM: %d\n",
1121 priv->nic_type);
1122 priv->nic_type = EEPROM_NIC_TYPE_0;
1123 break;
1124 }
1125
1126 if (!(priv->config & CFG_NO_LED)) {
1127 if (priv->status & STATUS_ASSOCIATED)
1128 ipw_led_link_on(priv);
1129 else
1130 ipw_led_link_off(priv);
1131 }
1132}
1133
a73e22b2 1134static void ipw_led_shutdown(struct ipw_priv *priv)
a613bffd 1135{
a613bffd
JK		 1136 ipw_led_activity_off(priv);
1137 ipw_led_link_off(priv);
1138 ipw_led_band_off(priv);
afbf30a2
JK		 1139 cancel_delayed_work(&priv->led_link_on);
1140 cancel_delayed_work(&priv->led_link_off);
1141 cancel_delayed_work(&priv->led_act_off);
a613bffd
JK		 1142}
1143
43f66a6c
JK		 1144/*
1145 * The following adds a new attribute to the sysfs representation
1146 * of this device driver (i.e. a new file in /sys/bus/pci/drivers/ipw/)
1147 * used for controling the debug level.
bf79451e 1148 *
43f66a6c
JK		 1149 * See the level definitions in ipw for details.
1150 */
1151static ssize_t show_debug_level(struct device_driver *d, char *buf)
1152{
1153 return sprintf(buf, "0x%08X\n", ipw_debug_level);
1154}
a613bffd
JK		 1155
1156static ssize_t store_debug_level(struct device_driver *d, const char *buf,
1157 size_t count)
43f66a6c
JK		 1158{
1159 char *p = (char *)buf;
1160 u32 val;
1161
1162 if (p[1] == 'x' || p[1] == 'X' || p[0] == 'x' || p[0] == 'X') {
1163 p++;
1164 if (p[0] == 'x' || p[0] == 'X')
1165 p++;
1166 val = simple_strtoul(p, &p, 16);
1167 } else
1168 val = simple_strtoul(p, &p, 10);
bf79451e
JG		 1169 if (p == buf)
1170 printk(KERN_INFO DRV_NAME
43f66a6c
JK		 1171 ": %s is not in hex or decimal form.\n", buf);
1172 else
1173 ipw_debug_level = val;
1174
1175 return strnlen(buf, count);
1176}
1177
bf79451e 1178static DRIVER_ATTR(debug_level, S_IWUSR | S_IRUGO,
43f66a6c
JK		 1179 show_debug_level, store_debug_level);
1180
b39860c6 1181static inline u32 ipw_get_event_log_len(struct ipw_priv *priv)
43f66a6c 1182{
c8fe6679 1183 /* length = 1st dword in log */
b39860c6 1184 return ipw_read_reg32(priv, ipw_read32(priv, IPW_EVENT_LOG));
43f66a6c 1185}
0edd5b44 1186
b39860c6
JK		 1187static void ipw_capture_event_log(struct ipw_priv *priv,
1188 u32 log_len, struct ipw_event *log)
43f66a6c 1189{
b39860c6 1190 u32 base;
0edd5b44 1191
b39860c6
JK		 1192 if (log_len) {
1193 base = ipw_read32(priv, IPW_EVENT_LOG);
1194 ipw_read_indirect(priv, base + sizeof(base) + sizeof(u32),
1195 (u8 *) log, sizeof(*log) * log_len);
1196 }
1197}
43f66a6c 1198
b39860c6 1199static struct ipw_fw_error *ipw_alloc_error_log(struct ipw_priv *priv)
43f66a6c 1200{
b39860c6
JK		 1201 struct ipw_fw_error *error;
1202 u32 log_len = ipw_get_event_log_len(priv);
1203 u32 base = ipw_read32(priv, IPW_ERROR_LOG);
1204 u32 elem_len = ipw_read_reg32(priv, base);
43f66a6c 1205
b39860c6
JK		 1206 error = kmalloc(sizeof(*error) +
1207 sizeof(*error->elem) * elem_len +
1208 sizeof(*error->log) * log_len, GFP_ATOMIC);
1209 if (!error) {
1210 IPW_ERROR("Memory allocation for firmware error log "
1211 "failed.\n");
1212 return NULL;
43f66a6c 1213 }
f6c5cb7c 1214 error->jiffies = jiffies;
b39860c6
JK		 1215 error->status = priv->status;
1216 error->config = priv->config;
1217 error->elem_len = elem_len;
1218 error->log_len = log_len;
1219 error->elem = (struct ipw_error_elem *)error->payload;
3b26b110 1220 error->log = (struct ipw_event *)(error->elem + elem_len);
b39860c6
JK		 1221
1222 ipw_capture_event_log(priv, log_len, error->log);
bf79451e 1223
b39860c6
JK		 1224 if (elem_len)
1225 ipw_read_indirect(priv, base + sizeof(base), (u8 *) error->elem,
1226 sizeof(*error->elem) * elem_len);
1227
1228 return error;
43f66a6c 1229}
0edd5b44 1230
b39860c6
JK		 1231static ssize_t show_event_log(struct device *d,
1232 struct device_attribute *attr, char *buf)
43f66a6c 1233{
b39860c6
JK		 1234 struct ipw_priv *priv = dev_get_drvdata(d);
1235 u32 log_len = ipw_get_event_log_len(priv);
1236 struct ipw_event log[log_len];
1237 u32 len = 0, i;
43f66a6c 1238
b39860c6 1239 ipw_capture_event_log(priv, log_len, log);
43f66a6c 1240
b39860c6
JK		 1241 len += snprintf(buf + len, PAGE_SIZE - len, "%08X", log_len);
1242 for (i = 0; i < log_len; i++)
1243 len += snprintf(buf + len, PAGE_SIZE - len,
1244 "\n%08X%08X%08X",
1245 log[i].time, log[i].event, log[i].data);
1246 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1247 return len;
43f66a6c 1248}
0edd5b44 1249
b39860c6 1250static DEVICE_ATTR(event_log, S_IRUGO, show_event_log, NULL);
43f66a6c 1251
b39860c6
JK		 1252static ssize_t show_error(struct device *d,
1253 struct device_attribute *attr, char *buf)
43f66a6c 1254{
b39860c6
JK		 1255 struct ipw_priv *priv = dev_get_drvdata(d);
1256 u32 len = 0, i;
1257 if (!priv->error)
1258 return 0;
1259 len += snprintf(buf + len, PAGE_SIZE - len,
f6c5cb7c
JK		 1260 "%08lX%08X%08X%08X",
1261 priv->error->jiffies,
b39860c6
JK		 1262 priv->error->status,
1263 priv->error->config, priv->error->elem_len);
1264 for (i = 0; i < priv->error->elem_len; i++)
1265 len += snprintf(buf + len, PAGE_SIZE - len,
1266 "\n%08X%08X%08X%08X%08X%08X%08X",
1267 priv->error->elem[i].time,
1268 priv->error->elem[i].desc,
1269 priv->error->elem[i].blink1,
1270 priv->error->elem[i].blink2,
1271 priv->error->elem[i].link1,
1272 priv->error->elem[i].link2,
1273 priv->error->elem[i].data);
1274
1275 len += snprintf(buf + len, PAGE_SIZE - len,
1276 "\n%08X", priv->error->log_len);
1277 for (i = 0; i < priv->error->log_len; i++)
1278 len += snprintf(buf + len, PAGE_SIZE - len,
1279 "\n%08X%08X%08X",
1280 priv->error->log[i].time,
1281 priv->error->log[i].event,
1282 priv->error->log[i].data);
1283 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1284 return len;
1285}
1286
1287static ssize_t clear_error(struct device *d,
1288 struct device_attribute *attr,
1289 const char *buf, size_t count)
1290{
1291 struct ipw_priv *priv = dev_get_drvdata(d);
8f760780
JJ		 1292
1293 kfree(priv->error);
1294 priv->error = NULL;
b39860c6
JK		 1295 return count;
1296}
43f66a6c 1297
b39860c6 1298static DEVICE_ATTR(error, S_IRUGO | S_IWUSR, show_error, clear_error);
43f66a6c 1299
f6c5cb7c
JK		 1300static ssize_t show_cmd_log(struct device *d,
1301 struct device_attribute *attr, char *buf)
1302{
1303 struct ipw_priv *priv = dev_get_drvdata(d);
1304 u32 len = 0, i;
1305 if (!priv->cmdlog)
1306 return 0;
1307 for (i = (priv->cmdlog_pos + 1) % priv->cmdlog_len;
1308 (i != priv->cmdlog_pos) && (PAGE_SIZE - len);
1309 i = (i + 1) % priv->cmdlog_len) {
1310 len +=
1311 snprintf(buf + len, PAGE_SIZE - len,
1312 "\n%08lX%08X%08X%08X\n", priv->cmdlog[i].jiffies,
1313 priv->cmdlog[i].retcode, priv->cmdlog[i].cmd.cmd,
1314 priv->cmdlog[i].cmd.len);
1315 len +=
1316 snprintk_buf(buf + len, PAGE_SIZE - len,
1317 (u8 *) priv->cmdlog[i].cmd.param,
1318 priv->cmdlog[i].cmd.len);
1319 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1320 }
1321 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1322 return len;
43f66a6c 1323}
0edd5b44 1324
f6c5cb7c 1325static DEVICE_ATTR(cmd_log, S_IRUGO, show_cmd_log, NULL);
43f66a6c 1326
d685b8c2
ZY		 1327#ifdef CONFIG_IPW2200_PROMISCUOUS
1328static void ipw_prom_free(struct ipw_priv *priv);
1329static int ipw_prom_alloc(struct ipw_priv *priv);
1330static ssize_t store_rtap_iface(struct device *d,
1331 struct device_attribute *attr,
1332 const char *buf, size_t count)
1333{
1334 struct ipw_priv *priv = dev_get_drvdata(d);
1335 int rc = 0;
1336
1337 if (count < 1)
1338 return -EINVAL;
1339
1340 switch (buf[0]) {
1341 case '0':
1342 if (!rtap_iface)
1343 return count;
1344
1345 if (netif_running(priv->prom_net_dev)) {
1346 IPW_WARNING("Interface is up. Cannot unregister.\n");
1347 return count;
1348 }
1349
1350 ipw_prom_free(priv);
1351 rtap_iface = 0;
1352 break;
1353
1354 case '1':
1355 if (rtap_iface)
1356 return count;
1357
1358 rc = ipw_prom_alloc(priv);
1359 if (!rc)
1360 rtap_iface = 1;
1361 break;
1362
1363 default:
1364 return -EINVAL;
1365 }
1366
1367 if (rc) {
1368 IPW_ERROR("Failed to register promiscuous network "
1369 "device (error %d).\n", rc);
1370 }
1371
1372 return count;
1373}
1374
1375static ssize_t show_rtap_iface(struct device *d,
1376 struct device_attribute *attr,
1377 char *buf)
1378{
1379 struct ipw_priv *priv = dev_get_drvdata(d);
1380 if (rtap_iface)
1381 return sprintf(buf, "%s", priv->prom_net_dev->name);
1382 else {
1383 buf[0] = '-';
1384 buf[1] = '1';
1385 buf[2] = '\0';
1386 return 3;
1387 }
1388}
1389
1390static DEVICE_ATTR(rtap_iface, S_IWUSR | S_IRUSR, show_rtap_iface,
1391 store_rtap_iface);
1392
1393static ssize_t store_rtap_filter(struct device *d,
1394 struct device_attribute *attr,
1395 const char *buf, size_t count)
1396{
1397 struct ipw_priv *priv = dev_get_drvdata(d);
1398
1399 if (!priv->prom_priv) {
1400 IPW_ERROR("Attempting to set filter without "
1401 "rtap_iface enabled.\n");
1402 return -EPERM;
1403 }
1404
1405 priv->prom_priv->filter = simple_strtol(buf, NULL, 0);
1406
1407 IPW_DEBUG_INFO("Setting rtap filter to " BIT_FMT16 "\n",
1408 BIT_ARG16(priv->prom_priv->filter));
1409
1410 return count;
1411}
1412
1413static ssize_t show_rtap_filter(struct device *d,
1414 struct device_attribute *attr,
1415 char *buf)
1416{
1417 struct ipw_priv *priv = dev_get_drvdata(d);
1418 return sprintf(buf, "0x%04X",
1419 priv->prom_priv ? priv->prom_priv->filter : 0);
1420}
1421
1422static DEVICE_ATTR(rtap_filter, S_IWUSR | S_IRUSR, show_rtap_filter,
1423 store_rtap_filter);
1424#endif
1425
a613bffd
JK		 1426static ssize_t show_scan_age(struct device *d, struct device_attribute *attr,
1427 char *buf)
43f66a6c 1428{
a613bffd
JK		 1429 struct ipw_priv *priv = dev_get_drvdata(d);
1430 return sprintf(buf, "%d\n", priv->ieee->scan_age);
1431}
1432
1433static ssize_t store_scan_age(struct device *d, struct device_attribute *attr,
1434 const char *buf, size_t count)
1435{
1436 struct ipw_priv *priv = dev_get_drvdata(d);
1437 struct net_device *dev = priv->net_dev;
1438 char buffer[] = "00000000";
1439 unsigned long len =
1440 (sizeof(buffer) - 1) > count ? count : sizeof(buffer) - 1;
1441 unsigned long val;
1442 char *p = buffer;
1443
1444 IPW_DEBUG_INFO("enter\n");
1445
1446 strncpy(buffer, buf, len);
1447 buffer[len] = 0;
1448
1449 if (p[1] == 'x' || p[1] == 'X' || p[0] == 'x' || p[0] == 'X') {
1450 p++;
1451 if (p[0] == 'x' || p[0] == 'X')
1452 p++;
1453 val = simple_strtoul(p, &p, 16);
1454 } else
1455 val = simple_strtoul(p, &p, 10);
1456 if (p == buffer) {
1457 IPW_DEBUG_INFO("%s: user supplied invalid value.\n", dev->name);
1458 } else {
1459 priv->ieee->scan_age = val;
1460 IPW_DEBUG_INFO("set scan_age = %u\n", priv->ieee->scan_age);
1461 }
1462
1463 IPW_DEBUG_INFO("exit\n");
1464 return len;
1465}
1466
1467static DEVICE_ATTR(scan_age, S_IWUSR | S_IRUGO, show_scan_age, store_scan_age);
1468
1469static ssize_t show_led(struct device *d, struct device_attribute *attr,
1470 char *buf)
1471{
1472 struct ipw_priv *priv = dev_get_drvdata(d);
1473 return sprintf(buf, "%d\n", (priv->config & CFG_NO_LED) ? 0 : 1);
1474}
1475
1476static ssize_t store_led(struct device *d, struct device_attribute *attr,
1477 const char *buf, size_t count)
1478{
1479 struct ipw_priv *priv = dev_get_drvdata(d);
1480
1481 IPW_DEBUG_INFO("enter\n");
1482
1483 if (count == 0)
1484 return 0;
1485
1486 if (*buf == 0) {
1487 IPW_DEBUG_LED("Disabling LED control.\n");
1488 priv->config |= CFG_NO_LED;
1489 ipw_led_shutdown(priv);
1490 } else {
1491 IPW_DEBUG_LED("Enabling LED control.\n");
1492 priv->config &= ~CFG_NO_LED;
1493 ipw_led_init(priv);
1494 }
1495
1496 IPW_DEBUG_INFO("exit\n");
1497 return count;
1498}
1499
1500static DEVICE_ATTR(led, S_IWUSR | S_IRUGO, show_led, store_led);
1501
ad3fee56 1502static ssize_t show_status(struct device *d,
0edd5b44 1503 struct device_attribute *attr, char *buf)
43f66a6c 1504{
ad3fee56 1505 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1506 return sprintf(buf, "0x%08x\n", (int)p->status);
1507}
0edd5b44 1508
43f66a6c
JK		 1509static DEVICE_ATTR(status, S_IRUGO, show_status, NULL);
1510
ad3fee56
AM		 1511static ssize_t show_cfg(struct device *d, struct device_attribute *attr,
1512 char *buf)
43f66a6c 1513{
ad3fee56 1514 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1515 return sprintf(buf, "0x%08x\n", (int)p->config);
1516}
0edd5b44 1517
43f66a6c
JK		 1518static DEVICE_ATTR(cfg, S_IRUGO, show_cfg, NULL);
1519
ad3fee56 1520static ssize_t show_nic_type(struct device *d,
0edd5b44 1521 struct device_attribute *attr, char *buf)
43f66a6c 1522{
a613bffd
JK		 1523 struct ipw_priv *priv = d->driver_data;
1524 return sprintf(buf, "TYPE: %d\n", priv->nic_type);
43f66a6c 1525}
0edd5b44 1526
43f66a6c
JK		 1527static DEVICE_ATTR(nic_type, S_IRUGO, show_nic_type, NULL);
1528
ad3fee56 1529static ssize_t show_ucode_version(struct device *d,
0edd5b44 1530 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1531{
1532 u32 len = sizeof(u32), tmp = 0;
ad3fee56 1533 struct ipw_priv *p = d->driver_data;
43f66a6c 1534
0edd5b44 1535 if (ipw_get_ordinal(p, IPW_ORD_STAT_UCODE_VERSION, &tmp, &len))
43f66a6c
JK		 1536 return 0;
1537
1538 return sprintf(buf, "0x%08x\n", tmp);
1539}
0edd5b44
JG		 1540
1541static DEVICE_ATTR(ucode_version, S_IWUSR | S_IRUGO, show_ucode_version, NULL);
43f66a6c 1542
ad3fee56
AM		 1543static ssize_t show_rtc(struct device *d, struct device_attribute *attr,
1544 char *buf)
43f66a6c
JK		 1545{
1546 u32 len = sizeof(u32), tmp = 0;
ad3fee56 1547 struct ipw_priv *p = d->driver_data;
43f66a6c 1548
0edd5b44 1549 if (ipw_get_ordinal(p, IPW_ORD_STAT_RTC, &tmp, &len))
43f66a6c
JK		 1550 return 0;
1551
1552 return sprintf(buf, "0x%08x\n", tmp);
1553}
0edd5b44
JG		 1554
1555static DEVICE_ATTR(rtc, S_IWUSR | S_IRUGO, show_rtc, NULL);
43f66a6c
JK		 1556
1557/*
1558 * Add a device attribute to view/control the delay between eeprom
1559 * operations.
1560 */
ad3fee56 1561static ssize_t show_eeprom_delay(struct device *d,
0edd5b44 1562 struct device_attribute *attr, char *buf)
43f66a6c 1563{
0edd5b44 1564 int n = ((struct ipw_priv *)d->driver_data)->eeprom_delay;
43f66a6c
JK		 1565 return sprintf(buf, "%i\n", n);
1566}
ad3fee56 1567static ssize_t store_eeprom_delay(struct device *d,
0edd5b44
JG		 1568 struct device_attribute *attr,
1569 const char *buf, size_t count)
43f66a6c 1570{
ad3fee56 1571 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1572 sscanf(buf, "%i", &p->eeprom_delay);
1573 return strnlen(buf, count);
1574}
0edd5b44
JG		 1575
1576static DEVICE_ATTR(eeprom_delay, S_IWUSR | S_IRUGO,
1577 show_eeprom_delay, store_eeprom_delay);
43f66a6c 1578
ad3fee56 1579static ssize_t show_command_event_reg(struct device *d,
0edd5b44 1580 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1581{
1582 u32 reg = 0;
ad3fee56 1583 struct ipw_priv *p = d->driver_data;
43f66a6c 1584
b095c381 1585 reg = ipw_read_reg32(p, IPW_INTERNAL_CMD_EVENT);
43f66a6c
JK		 1586 return sprintf(buf, "0x%08x\n", reg);
1587}
ad3fee56 1588static ssize_t store_command_event_reg(struct device *d,
0edd5b44
JG		 1589 struct device_attribute *attr,
1590 const char *buf, size_t count)
43f66a6c
JK		 1591{
1592 u32 reg;
ad3fee56 1593 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1594
1595 sscanf(buf, "%x", &reg);
b095c381 1596 ipw_write_reg32(p, IPW_INTERNAL_CMD_EVENT, reg);
43f66a6c
JK		 1597 return strnlen(buf, count);
1598}
0edd5b44
JG		 1599
1600static DEVICE_ATTR(command_event_reg, S_IWUSR | S_IRUGO,
1601 show_command_event_reg, store_command_event_reg);
43f66a6c 1602
ad3fee56 1603static ssize_t show_mem_gpio_reg(struct device *d,
0edd5b44 1604 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1605{
1606 u32 reg = 0;
ad3fee56 1607 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1608
1609 reg = ipw_read_reg32(p, 0x301100);
1610 return sprintf(buf, "0x%08x\n", reg);
1611}
ad3fee56 1612static ssize_t store_mem_gpio_reg(struct device *d,
0edd5b44
JG		 1613 struct device_attribute *attr,
1614 const char *buf, size_t count)
43f66a6c
JK		 1615{
1616 u32 reg;
ad3fee56 1617 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1618
1619 sscanf(buf, "%x", &reg);
1620 ipw_write_reg32(p, 0x301100, reg);
1621 return strnlen(buf, count);
1622}
0edd5b44
JG		 1623
1624static DEVICE_ATTR(mem_gpio_reg, S_IWUSR | S_IRUGO,
1625 show_mem_gpio_reg, store_mem_gpio_reg);
43f66a6c 1626
ad3fee56 1627static ssize_t show_indirect_dword(struct device *d,
0edd5b44 1628 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1629{
1630 u32 reg = 0;
ad3fee56 1631 struct ipw_priv *priv = d->driver_data;
afbf30a2 1632
bf79451e 1633 if (priv->status & STATUS_INDIRECT_DWORD)
43f66a6c 1634 reg = ipw_read_reg32(priv, priv->indirect_dword);
bf79451e 1635 else
43f66a6c 1636 reg = 0;
bf79451e 1637
43f66a6c
JK		 1638 return sprintf(buf, "0x%08x\n", reg);
1639}
ad3fee56 1640static ssize_t store_indirect_dword(struct device *d,
0edd5b44
JG		 1641 struct device_attribute *attr,
1642 const char *buf, size_t count)
43f66a6c 1643{
ad3fee56 1644 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK		 1645
1646 sscanf(buf, "%x", &priv->indirect_dword);
1647 priv->status |= STATUS_INDIRECT_DWORD;
1648 return strnlen(buf, count);
1649}
0edd5b44
JG		 1650
1651static DEVICE_ATTR(indirect_dword, S_IWUSR | S_IRUGO,
1652 show_indirect_dword, store_indirect_dword);
43f66a6c 1653
ad3fee56 1654static ssize_t show_indirect_byte(struct device *d,
0edd5b44 1655 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1656{
1657 u8 reg = 0;
ad3fee56 1658 struct ipw_priv *priv = d->driver_data;
afbf30a2 1659
bf79451e 1660 if (priv->status & STATUS_INDIRECT_BYTE)
43f66a6c 1661 reg = ipw_read_reg8(priv, priv->indirect_byte);
bf79451e 1662 else
43f66a6c
JK		 1663 reg = 0;
1664
1665 return sprintf(buf, "0x%02x\n", reg);
1666}
ad3fee56 1667static ssize_t store_indirect_byte(struct device *d,
0edd5b44
JG		 1668 struct device_attribute *attr,
1669 const char *buf, size_t count)
43f66a6c 1670{
ad3fee56 1671 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK		 1672
1673 sscanf(buf, "%x", &priv->indirect_byte);
1674 priv->status |= STATUS_INDIRECT_BYTE;
1675 return strnlen(buf, count);
1676}
0edd5b44
JG		 1677
1678static DEVICE_ATTR(indirect_byte, S_IWUSR | S_IRUGO,
43f66a6c
JK		 1679 show_indirect_byte, store_indirect_byte);
1680
ad3fee56 1681static ssize_t show_direct_dword(struct device *d,
0edd5b44 1682 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1683{
1684 u32 reg = 0;
ad3fee56 1685 struct ipw_priv *priv = d->driver_data;
43f66a6c 1686
bf79451e 1687 if (priv->status & STATUS_DIRECT_DWORD)
43f66a6c 1688 reg = ipw_read32(priv, priv->direct_dword);
bf79451e 1689 else
43f66a6c
JK		 1690 reg = 0;
1691
1692 return sprintf(buf, "0x%08x\n", reg);
1693}
ad3fee56 1694static ssize_t store_direct_dword(struct device *d,
0edd5b44
JG		 1695 struct device_attribute *attr,
1696 const char *buf, size_t count)
43f66a6c 1697{
ad3fee56 1698 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK		 1699
1700 sscanf(buf, "%x", &priv->direct_dword);
1701 priv->status |= STATUS_DIRECT_DWORD;
1702 return strnlen(buf, count);
1703}
43f66a6c 1704
0edd5b44
JG		 1705static DEVICE_ATTR(direct_dword, S_IWUSR | S_IRUGO,
1706 show_direct_dword, store_direct_dword);
43f66a6c 1707
858119e1 1708static int rf_kill_active(struct ipw_priv *priv)
43f66a6c
JK		 1709{
1710 if (0 == (ipw_read32(priv, 0x30) & 0x10000))
1711 priv->status |= STATUS_RF_KILL_HW;
1712 else
1713 priv->status &= ~STATUS_RF_KILL_HW;
1714
1715 return (priv->status & STATUS_RF_KILL_HW) ? 1 : 0;
1716}
1717
ad3fee56 1718static ssize_t show_rf_kill(struct device *d, struct device_attribute *attr,
0edd5b44 1719 char *buf)
43f66a6c
JK		 1720{
1721 /* 0 - RF kill not enabled
bf79451e 1722 1 - SW based RF kill active (sysfs)
43f66a6c
JK		 1723 2 - HW based RF kill active
1724 3 - Both HW and SW baed RF kill active */
ad3fee56 1725 struct ipw_priv *priv = d->driver_data;
43f66a6c 1726 int val = ((priv->status & STATUS_RF_KILL_SW) ? 0x1 : 0x0) |
0edd5b44 1727 (rf_kill_active(priv) ? 0x2 : 0x0);
43f66a6c
JK		 1728 return sprintf(buf, "%i\n", val);
1729}
1730
1731static int ipw_radio_kill_sw(struct ipw_priv *priv, int disable_radio)
1732{
bf79451e 1733 if ((disable_radio ? 1 : 0) ==
ea2b26e0 1734 ((priv->status & STATUS_RF_KILL_SW) ? 1 : 0))
0edd5b44 1735 return 0;
43f66a6c
JK		 1736
1737 IPW_DEBUG_RF_KILL("Manual SW RF Kill set to: RADIO %s\n",
1738 disable_radio ? "OFF" : "ON");
1739
1740 if (disable_radio) {
1741 priv->status |= STATUS_RF_KILL_SW;
1742
a613bffd 1743 if (priv->workqueue)
43f66a6c 1744 cancel_delayed_work(&priv->request_scan);
43f66a6c
JK		 1745 queue_work(priv->workqueue, &priv->down);
1746 } else {
1747 priv->status &= ~STATUS_RF_KILL_SW;
1748 if (rf_kill_active(priv)) {
1749 IPW_DEBUG_RF_KILL("Can not turn radio back on - "
1750 "disabled by HW switch\n");
1751 /* Make sure the RF_KILL check timer is running */
1752 cancel_delayed_work(&priv->rf_kill);
bf79451e 1753 queue_delayed_work(priv->workqueue, &priv->rf_kill,
1c9d5e41 1754 round_jiffies(2 * HZ));
bf79451e 1755 } else
43f66a6c
JK		 1756 queue_work(priv->workqueue, &priv->up);
1757 }
1758
1759 return 1;
1760}
1761
0edd5b44
JG		 1762static ssize_t store_rf_kill(struct device *d, struct device_attribute *attr,
1763 const char *buf, size_t count)
43f66a6c 1764{
ad3fee56 1765 struct ipw_priv *priv = d->driver_data;
bf79451e 1766
43f66a6c
JK		 1767 ipw_radio_kill_sw(priv, buf[0] == '1');
1768
1769 return count;
1770}
0edd5b44
JG		 1771
1772static DEVICE_ATTR(rf_kill, S_IWUSR | S_IRUGO, show_rf_kill, store_rf_kill);
43f66a6c 1773
b095c381
JK		 1774static ssize_t show_speed_scan(struct device *d, struct device_attribute *attr,
1775 char *buf)
1776{
1777 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1778 int pos = 0, len = 0;
1779 if (priv->config & CFG_SPEED_SCAN) {
1780 while (priv->speed_scan[pos] != 0)
1781 len += sprintf(&buf[len], "%d ",
1782 priv->speed_scan[pos++]);
1783 return len + sprintf(&buf[len], "\n");
1784 }
1785
1786 return sprintf(buf, "0\n");
1787}
1788
1789static ssize_t store_speed_scan(struct device *d, struct device_attribute *attr,
1790 const char *buf, size_t count)
1791{
1792 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1793 int channel, pos = 0;
1794 const char *p = buf;
1795
1796 /* list of space separated channels to scan, optionally ending with 0 */
1797 while ((channel = simple_strtol(p, NULL, 0))) {
1798 if (pos == MAX_SPEED_SCAN - 1) {
1799 priv->speed_scan[pos] = 0;
1800 break;
1801 }
1802
1867b117 1803 if (ieee80211_is_valid_channel(priv->ieee, channel))
b095c381
JK		 1804 priv->speed_scan[pos++] = channel;
1805 else
1806 IPW_WARNING("Skipping invalid channel request: %d\n",
1807 channel);
1808 p = strchr(p, ' ');
1809 if (!p)
1810 break;
1811 while (*p == ' ' || *p == '\t')
1812 p++;
1813 }
1814
1815 if (pos == 0)
1816 priv->config &= ~CFG_SPEED_SCAN;
1817 else {
1818 priv->speed_scan_pos = 0;
1819 priv->config |= CFG_SPEED_SCAN;
1820 }
1821
1822 return count;
1823}
1824
1825static DEVICE_ATTR(speed_scan, S_IWUSR | S_IRUGO, show_speed_scan,
1826 store_speed_scan);
1827
1828static ssize_t show_net_stats(struct device *d, struct device_attribute *attr,
1829 char *buf)
1830{
1831 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1832 return sprintf(buf, "%c\n", (priv->config & CFG_NET_STATS) ? '1' : '0');
1833}
1834
1835static ssize_t store_net_stats(struct device *d, struct device_attribute *attr,
1836 const char *buf, size_t count)
1837{
1838 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1839 if (buf[0] == '1')
1840 priv->config |= CFG_NET_STATS;
1841 else
1842 priv->config &= ~CFG_NET_STATS;
1843
1844 return count;
1845}
1846
afbf30a2
JK		 1847static DEVICE_ATTR(net_stats, S_IWUSR | S_IRUGO,
1848 show_net_stats, store_net_stats);
b095c381 1849
375dd244
ZY		 1850static ssize_t show_channels(struct device *d,
1851 struct device_attribute *attr,
1852 char *buf)
1853{
1854 struct ipw_priv *priv = dev_get_drvdata(d);
742e9910 1855 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
375dd244
ZY		 1856 int len = 0, i;
1857
1858 len = sprintf(&buf[len],
1859 "Displaying %d channels in 2.4Ghz band "
1860 "(802.11bg):\n", geo->bg_channels);
1861
1862 for (i = 0; i < geo->bg_channels; i++) {
1863 len += sprintf(&buf[len], "%d: BSS%s%s, %s, Band %s.\n",
1864 geo->bg[i].channel,
1865 geo->bg[i].flags & IEEE80211_CH_RADAR_DETECT ?
1866 " (radar spectrum)" : "",
1867 ((geo->bg[i].flags & IEEE80211_CH_NO_IBSS) ||
1868 (geo->bg[i].flags & IEEE80211_CH_RADAR_DETECT))
1869 ? "" : ", IBSS",
1870 geo->bg[i].flags & IEEE80211_CH_PASSIVE_ONLY ?
1871 "passive only" : "active/passive",
1872 geo->bg[i].flags & IEEE80211_CH_B_ONLY ?
1873 "B" : "B/G");
1874 }
1875
1876 len += sprintf(&buf[len],
1877 "Displaying %d channels in 5.2Ghz band "
1878 "(802.11a):\n", geo->a_channels);
1879 for (i = 0; i < geo->a_channels; i++) {
1880 len += sprintf(&buf[len], "%d: BSS%s%s, %s.\n",
1881 geo->a[i].channel,
1882 geo->a[i].flags & IEEE80211_CH_RADAR_DETECT ?
1883 " (radar spectrum)" : "",
1884 ((geo->a[i].flags & IEEE80211_CH_NO_IBSS) ||
1885 (geo->a[i].flags & IEEE80211_CH_RADAR_DETECT))
1886 ? "" : ", IBSS",
1887 geo->a[i].flags & IEEE80211_CH_PASSIVE_ONLY ?
1888 "passive only" : "active/passive");
1889 }
1890
1891 return len;
1892}
1893
1894static DEVICE_ATTR(channels, S_IRUSR, show_channels, NULL);
1895
ea2b26e0
JK		 1896static void notify_wx_assoc_event(struct ipw_priv *priv)
1897{
1898 union iwreq_data wrqu;
1899 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1900 if (priv->status & STATUS_ASSOCIATED)
1901 memcpy(wrqu.ap_addr.sa_data, priv->bssid, ETH_ALEN);
1902 else
1903 memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
1904 wireless_send_event(priv->net_dev, SIOCGIWAP, &wrqu, NULL);
1905}
1906
43f66a6c
JK		 1907static void ipw_irq_tasklet(struct ipw_priv *priv)
1908{
1909 u32 inta, inta_mask, handled = 0;
1910 unsigned long flags;
1911 int rc = 0;
1912
89c318ed 1913 spin_lock_irqsave(&priv->irq_lock, flags);
43f66a6c 1914
b095c381
JK		 1915 inta = ipw_read32(priv, IPW_INTA_RW);
1916 inta_mask = ipw_read32(priv, IPW_INTA_MASK_R);
1917 inta &= (IPW_INTA_MASK_ALL & inta_mask);
43f66a6c
JK		 1918
1919 /* Add any cached INTA values that need to be handled */
1920 inta |= priv->isr_inta;
1921
89c318ed
ZY		 1922 spin_unlock_irqrestore(&priv->irq_lock, flags);
1923
1924 spin_lock_irqsave(&priv->lock, flags);
1925
43f66a6c 1926 /* handle all the justifications for the interrupt */
b095c381 1927 if (inta & IPW_INTA_BIT_RX_TRANSFER) {
43f66a6c 1928 ipw_rx(priv);
b095c381 1929 handled |= IPW_INTA_BIT_RX_TRANSFER;
43f66a6c
JK		 1930 }
1931
b095c381 1932 if (inta & IPW_INTA_BIT_TX_CMD_QUEUE) {
43f66a6c 1933 IPW_DEBUG_HC("Command completed.\n");
0edd5b44 1934 rc = ipw_queue_tx_reclaim(priv, &priv->txq_cmd, -1);
43f66a6c
JK		 1935 priv->status &= ~STATUS_HCMD_ACTIVE;
1936 wake_up_interruptible(&priv->wait_command_queue);
b095c381 1937 handled |= IPW_INTA_BIT_TX_CMD_QUEUE;
43f66a6c
JK		 1938 }
1939
b095c381 1940 if (inta & IPW_INTA_BIT_TX_QUEUE_1) {
43f66a6c 1941 IPW_DEBUG_TX("TX_QUEUE_1\n");
0edd5b44 1942 rc = ipw_queue_tx_reclaim(priv, &priv->txq[0], 0);
b095c381 1943 handled |= IPW_INTA_BIT_TX_QUEUE_1;
43f66a6c
JK		 1944 }
1945
b095c381 1946 if (inta & IPW_INTA_BIT_TX_QUEUE_2) {
43f66a6c 1947 IPW_DEBUG_TX("TX_QUEUE_2\n");
0edd5b44 1948 rc = ipw_queue_tx_reclaim(priv, &priv->txq[1], 1);
b095c381 1949 handled |= IPW_INTA_BIT_TX_QUEUE_2;
43f66a6c
JK		 1950 }
1951
b095c381 1952 if (inta & IPW_INTA_BIT_TX_QUEUE_3) {
43f66a6c 1953 IPW_DEBUG_TX("TX_QUEUE_3\n");
0edd5b44 1954 rc = ipw_queue_tx_reclaim(priv, &priv->txq[2], 2);
b095c381 1955 handled |= IPW_INTA_BIT_TX_QUEUE_3;
43f66a6c
JK		 1956 }
1957
b095c381 1958 if (inta & IPW_INTA_BIT_TX_QUEUE_4) {
43f66a6c 1959 IPW_DEBUG_TX("TX_QUEUE_4\n");
0edd5b44 1960 rc = ipw_queue_tx_reclaim(priv, &priv->txq[3], 3);
b095c381 1961 handled |= IPW_INTA_BIT_TX_QUEUE_4;
43f66a6c
JK		 1962 }
1963
b095c381 1964 if (inta & IPW_INTA_BIT_STATUS_CHANGE) {
43f66a6c 1965 IPW_WARNING("STATUS_CHANGE\n");
b095c381 1966 handled |= IPW_INTA_BIT_STATUS_CHANGE;
43f66a6c
JK		 1967 }
1968
b095c381 1969 if (inta & IPW_INTA_BIT_BEACON_PERIOD_EXPIRED) {
43f66a6c 1970 IPW_WARNING("TX_PERIOD_EXPIRED\n");
b095c381 1971 handled |= IPW_INTA_BIT_BEACON_PERIOD_EXPIRED;
43f66a6c
JK		 1972 }
1973
b095c381 1974 if (inta & IPW_INTA_BIT_SLAVE_MODE_HOST_CMD_DONE) {
43f66a6c 1975 IPW_WARNING("HOST_CMD_DONE\n");
b095c381 1976 handled |= IPW_INTA_BIT_SLAVE_MODE_HOST_CMD_DONE;
43f66a6c
JK		 1977 }
1978
b095c381 1979 if (inta & IPW_INTA_BIT_FW_INITIALIZATION_DONE) {
43f66a6c 1980 IPW_WARNING("FW_INITIALIZATION_DONE\n");
b095c381 1981 handled |= IPW_INTA_BIT_FW_INITIALIZATION_DONE;
43f66a6c
JK		 1982 }
1983
b095c381 1984 if (inta & IPW_INTA_BIT_FW_CARD_DISABLE_PHY_OFF_DONE) {
43f66a6c 1985 IPW_WARNING("PHY_OFF_DONE\n");
b095c381 1986 handled |= IPW_INTA_BIT_FW_CARD_DISABLE_PHY_OFF_DONE;
43f66a6c
JK		 1987 }
1988
b095c381 1989 if (inta & IPW_INTA_BIT_RF_KILL_DONE) {
43f66a6c
JK		 1990 IPW_DEBUG_RF_KILL("RF_KILL_DONE\n");
1991 priv->status |= STATUS_RF_KILL_HW;
1992 wake_up_interruptible(&priv->wait_command_queue);
ea2b26e0 1993 priv->status &= ~(STATUS_ASSOCIATED | STATUS_ASSOCIATING);
43f66a6c 1994 cancel_delayed_work(&priv->request_scan);
a613bffd 1995 schedule_work(&priv->link_down);
43f66a6c 1996 queue_delayed_work(priv->workqueue, &priv->rf_kill, 2 * HZ);
b095c381 1997 handled |= IPW_INTA_BIT_RF_KILL_DONE;
43f66a6c 1998 }
bf79451e 1999
b095c381 2000 if (inta & IPW_INTA_BIT_FATAL_ERROR) {
1d1b09eb 2001 IPW_WARNING("Firmware error detected. Restarting.\n");
b39860c6 2002 if (priv->error) {
1d1b09eb 2003 IPW_DEBUG_FW("Sysfs 'error' log already exists.\n");
b39860c6
JK		 2004 if (ipw_debug_level & IPW_DL_FW_ERRORS) {
2005 struct ipw_fw_error *error =
2006 ipw_alloc_error_log(priv);
2007 ipw_dump_error_log(priv, error);
8f760780 2008 kfree(error);
b39860c6 2009 }
b39860c6
JK		 2010 } else {
2011 priv->error = ipw_alloc_error_log(priv);
2012 if (priv->error)
1d1b09eb 2013 IPW_DEBUG_FW("Sysfs 'error' log captured.\n");
b39860c6 2014 else
1d1b09eb
ZY		 2015 IPW_DEBUG_FW("Error allocating sysfs 'error' "
2016 "log.\n");
b39860c6
JK		 2017 if (ipw_debug_level & IPW_DL_FW_ERRORS)
2018 ipw_dump_error_log(priv, priv->error);
b39860c6
JK		 2019 }
2020
b095c381
JK		 2021 /* XXX: If hardware encryption is for WPA/WPA2,
2022 * we have to notify the supplicant. */
2023 if (priv->ieee->sec.encrypt) {
2024 priv->status &= ~STATUS_ASSOCIATED;
2025 notify_wx_assoc_event(priv);
2026 }
2027
2028 /* Keep the restart process from trying to send host
2029 * commands by clearing the INIT status bit */
2030 priv->status &= ~STATUS_INIT;
afbf30a2
JK		 2031
2032 /* Cancel currently queued command. */
2033 priv->status &= ~STATUS_HCMD_ACTIVE;
2034 wake_up_interruptible(&priv->wait_command_queue);
2035
43f66a6c 2036 queue_work(priv->workqueue, &priv->adapter_restart);
b095c381 2037 handled |= IPW_INTA_BIT_FATAL_ERROR;
43f66a6c
JK		 2038 }
2039
b095c381 2040 if (inta & IPW_INTA_BIT_PARITY_ERROR) {
43f66a6c 2041 IPW_ERROR("Parity error\n");
b095c381 2042 handled |= IPW_INTA_BIT_PARITY_ERROR;
43f66a6c
JK		 2043 }
2044
2045 if (handled != inta) {
0edd5b44 2046 IPW_ERROR("Unhandled INTA bits 0x%08x\n", inta & ~handled);
43f66a6c
JK		 2047 }
2048
89c318ed
ZY		 2049 spin_unlock_irqrestore(&priv->lock, flags);
2050
43f66a6c
JK		 2051 /* enable all interrupts */
2052 ipw_enable_interrupts(priv);
43f66a6c 2053}
bf79451e 2054
43f66a6c
JK		 2055#define IPW_CMD(x) case IPW_CMD_ ## x : return #x
2056static char *get_cmd_string(u8 cmd)
2057{
2058 switch (cmd) {
2059 IPW_CMD(HOST_COMPLETE);
bf79451e
JG		 2060 IPW_CMD(POWER_DOWN);
2061 IPW_CMD(SYSTEM_CONFIG);
2062 IPW_CMD(MULTICAST_ADDRESS);
2063 IPW_CMD(SSID);
2064 IPW_CMD(ADAPTER_ADDRESS);
2065 IPW_CMD(PORT_TYPE);
2066 IPW_CMD(RTS_THRESHOLD);
2067 IPW_CMD(FRAG_THRESHOLD);
2068 IPW_CMD(POWER_MODE);
2069 IPW_CMD(WEP_KEY);
2070 IPW_CMD(TGI_TX_KEY);
2071 IPW_CMD(SCAN_REQUEST);
2072 IPW_CMD(SCAN_REQUEST_EXT);
2073 IPW_CMD(ASSOCIATE);
2074 IPW_CMD(SUPPORTED_RATES);
2075 IPW_CMD(SCAN_ABORT);
2076 IPW_CMD(TX_FLUSH);
2077 IPW_CMD(QOS_PARAMETERS);
2078 IPW_CMD(DINO_CONFIG);
2079 IPW_CMD(RSN_CAPABILITIES);
2080 IPW_CMD(RX_KEY);
2081 IPW_CMD(CARD_DISABLE);
2082 IPW_CMD(SEED_NUMBER);
2083 IPW_CMD(TX_POWER);
2084 IPW_CMD(COUNTRY_INFO);
2085 IPW_CMD(AIRONET_INFO);
2086 IPW_CMD(AP_TX_POWER);
2087 IPW_CMD(CCKM_INFO);
2088 IPW_CMD(CCX_VER_INFO);
2089 IPW_CMD(SET_CALIBRATION);
2090 IPW_CMD(SENSITIVITY_CALIB);
2091 IPW_CMD(RETRY_LIMIT);
2092 IPW_CMD(IPW_PRE_POWER_DOWN);
2093 IPW_CMD(VAP_BEACON_TEMPLATE);
2094 IPW_CMD(VAP_DTIM_PERIOD);
2095 IPW_CMD(EXT_SUPPORTED_RATES);
2096 IPW_CMD(VAP_LOCAL_TX_PWR_CONSTRAINT);
2097 IPW_CMD(VAP_QUIET_INTERVALS);
2098 IPW_CMD(VAP_CHANNEL_SWITCH);
2099 IPW_CMD(VAP_MANDATORY_CHANNELS);
2100 IPW_CMD(VAP_CELL_PWR_LIMIT);
2101 IPW_CMD(VAP_CF_PARAM_SET);
2102 IPW_CMD(VAP_SET_BEACONING_STATE);
2103 IPW_CMD(MEASUREMENT);
2104 IPW_CMD(POWER_CAPABILITY);
2105 IPW_CMD(SUPPORTED_CHANNELS);
2106 IPW_CMD(TPC_REPORT);
2107 IPW_CMD(WME_INFO);
2108 IPW_CMD(PRODUCTION_COMMAND);
2109 default:
43f66a6c
JK		 2110 return "UNKNOWN";
2111 }
2112}
43f66a6c
JK		 2113
2114#define HOST_COMPLETE_TIMEOUT HZ
0a7bcf26
ZY		 2115
2116static int __ipw_send_cmd(struct ipw_priv *priv, struct host_cmd *cmd)
43f66a6c
JK		 2117{
2118 int rc = 0;
a613bffd 2119 unsigned long flags;
43f66a6c 2120
a613bffd 2121 spin_lock_irqsave(&priv->lock, flags);
43f66a6c 2122 if (priv->status & STATUS_HCMD_ACTIVE) {
9ddf84f6
JK		 2123 IPW_ERROR("Failed to send %s: Already sending a command.\n",
2124 get_cmd_string(cmd->cmd));
a613bffd 2125 spin_unlock_irqrestore(&priv->lock, flags);
9ddf84f6 2126 return -EAGAIN;
43f66a6c
JK		 2127 }
2128
2129 priv->status |= STATUS_HCMD_ACTIVE;
bf79451e 2130
f6c5cb7c
JK		 2131 if (priv->cmdlog) {
2132 priv->cmdlog[priv->cmdlog_pos].jiffies = jiffies;
2133 priv->cmdlog[priv->cmdlog_pos].cmd.cmd = cmd->cmd;
2134 priv->cmdlog[priv->cmdlog_pos].cmd.len = cmd->len;
2135 memcpy(priv->cmdlog[priv->cmdlog_pos].cmd.param, cmd->param,
2136 cmd->len);
2137 priv->cmdlog[priv->cmdlog_pos].retcode = -1;
2138 }
2139
b095c381
JK		 2140 IPW_DEBUG_HC("%s command (#%d) %d bytes: 0x%08X\n",
2141 get_cmd_string(cmd->cmd), cmd->cmd, cmd->len,
2142 priv->status);
f516dbcd
ZY		 2143
2144#ifndef DEBUG_CMD_WEP_KEY
2145 if (cmd->cmd == IPW_CMD_WEP_KEY)
2146 IPW_DEBUG_HC("WEP_KEY command masked out for secure.\n");
2147 else
2148#endif
2149 printk_buf(IPW_DL_HOST_COMMAND, (u8 *) cmd->param, cmd->len);
2150
0a7bcf26 2151 rc = ipw_queue_tx_hcmd(priv, cmd->cmd, cmd->param, cmd->len, 0);
a613bffd
JK		 2152 if (rc) {
2153 priv->status &= ~STATUS_HCMD_ACTIVE;
9ddf84f6
JK		 2154 IPW_ERROR("Failed to send %s: Reason %d\n",
2155 get_cmd_string(cmd->cmd), rc);
a613bffd 2156 spin_unlock_irqrestore(&priv->lock, flags);
f6c5cb7c 2157 goto exit;
a613bffd
JK		 2158 }
2159 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c 2160
0edd5b44
JG		 2161 rc = wait_event_interruptible_timeout(priv->wait_command_queue,
2162 !(priv->
2163 status & STATUS_HCMD_ACTIVE),
2164 HOST_COMPLETE_TIMEOUT);
43f66a6c 2165 if (rc == 0) {
a613bffd
JK		 2166 spin_lock_irqsave(&priv->lock, flags);
2167 if (priv->status & STATUS_HCMD_ACTIVE) {
9ddf84f6
JK		 2168 IPW_ERROR("Failed to send %s: Command timed out.\n",
2169 get_cmd_string(cmd->cmd));
a613bffd
JK		 2170 priv->status &= ~STATUS_HCMD_ACTIVE;
2171 spin_unlock_irqrestore(&priv->lock, flags);
f6c5cb7c
JK		 2172 rc = -EIO;
2173 goto exit;
a613bffd
JK		 2174 }
2175 spin_unlock_irqrestore(&priv->lock, flags);
3b9990cb
JK		 2176 } else
2177 rc = 0;
a613bffd 2178
b095c381 2179 if (priv->status & STATUS_RF_KILL_HW) {
9ddf84f6
JK		 2180 IPW_ERROR("Failed to send %s: Aborted due to RF kill switch.\n",
2181 get_cmd_string(cmd->cmd));
f6c5cb7c
JK		 2182 rc = -EIO;
2183 goto exit;
43f66a6c
JK		 2184 }
2185
2638bc39 2186 exit:
f6c5cb7c
JK		 2187 if (priv->cmdlog) {
2188 priv->cmdlog[priv->cmdlog_pos++].retcode = rc;
2189 priv->cmdlog_pos %= priv->cmdlog_len;
2190 }
2191 return rc;
43f66a6c
JK		 2192}
2193
0a7bcf26
ZY		 2194static int ipw_send_cmd_simple(struct ipw_priv *priv, u8 command)
2195{
2196 struct host_cmd cmd = {
2197 .cmd = command,
2198 };
2199
2200 return __ipw_send_cmd(priv, &cmd);
2201}
2202
2203static int ipw_send_cmd_pdu(struct ipw_priv *priv, u8 command, u8 len,
2204 void *data)
43f66a6c
JK		 2205{
2206 struct host_cmd cmd = {
0a7bcf26
ZY		 2207 .cmd = command,
2208 .len = len,
2209 .param = data,
43f66a6c
JK		 2210 };
2211
0a7bcf26
ZY		 2212 return __ipw_send_cmd(priv, &cmd);
2213}
2214
2215static int ipw_send_host_complete(struct ipw_priv *priv)
2216{
43f66a6c
JK		 2217 if (!priv) {
2218 IPW_ERROR("Invalid args\n");
2219 return -1;
2220 }
2221
0a7bcf26 2222 return ipw_send_cmd_simple(priv, IPW_CMD_HOST_COMPLETE);
43f66a6c
JK		 2223}
2224
d685b8c2 2225static int ipw_send_system_config(struct ipw_priv *priv)
43f66a6c 2226{
d685b8c2
ZY		 2227 return ipw_send_cmd_pdu(priv, IPW_CMD_SYSTEM_CONFIG,
2228 sizeof(priv->sys_config),
2229 &priv->sys_config);
43f66a6c
JK		 2230}
2231
0edd5b44 2232static int ipw_send_ssid(struct ipw_priv *priv, u8 * ssid, int len)
43f66a6c 2233{
43f66a6c
JK		 2234 if (!priv || !ssid) {
2235 IPW_ERROR("Invalid args\n");
2236 return -1;
2237 }
2238
0a7bcf26 2239 return ipw_send_cmd_pdu(priv, IPW_CMD_SSID, min(len, IW_ESSID_MAX_SIZE),
2638bc39 2240 ssid);
43f66a6c
JK		 2241}
2242
0edd5b44 2243static int ipw_send_adapter_address(struct ipw_priv *priv, u8 * mac)
43f66a6c 2244{
43f66a6c
JK		 2245 if (!priv || !mac) {
2246 IPW_ERROR("Invalid args\n");
2247 return -1;
2248 }
2249
0795af57
JP		 2250 IPW_DEBUG_INFO("%s: Setting MAC to %s\n",
2251 priv->net_dev->name, print_mac(mac, mac));
43f66a6c 2252
2638bc39 2253 return ipw_send_cmd_pdu(priv, IPW_CMD_ADAPTER_ADDRESS, ETH_ALEN, mac);
43f66a6c
JK		 2254}
2255
a613bffd
JK		 2256/*
2257 * NOTE: This must be executed from our workqueue as it results in udelay
2258 * being called which may corrupt the keyboard if executed on default
2259 * workqueue
2260 */
43f66a6c
JK		 2261static void ipw_adapter_restart(void *adapter)
2262{
2263 struct ipw_priv *priv = adapter;
2264
2265 if (priv->status & STATUS_RF_KILL_MASK)
2266 return;
2267
2268 ipw_down(priv);
b095c381
JK		 2269
2270 if (priv->assoc_network &&
2271 (priv->assoc_network->capability & WLAN_CAPABILITY_IBSS))
2272 ipw_remove_current_network(priv);
2273
43f66a6c
JK		 2274 if (ipw_up(priv)) {
2275 IPW_ERROR("Failed to up device\n");
2276 return;
2277 }
2278}
2279
c4028958 2280static void ipw_bg_adapter_restart(struct work_struct *work)
c848d0af 2281{
c4028958
DH		 2282 struct ipw_priv *priv =
2283 container_of(work, struct ipw_priv, adapter_restart);
4644151b 2284 mutex_lock(&priv->mutex);
c4028958 2285 ipw_adapter_restart(priv);
4644151b 2286 mutex_unlock(&priv->mutex);
c848d0af
JK		 2287}
2288
43f66a6c
JK		 2289#define IPW_SCAN_CHECK_WATCHDOG (5 * HZ)
2290
2291static void ipw_scan_check(void *data)
2292{
2293 struct ipw_priv *priv = data;
2294 if (priv->status & (STATUS_SCANNING | STATUS_SCAN_ABORTING)) {
2295 IPW_DEBUG_SCAN("Scan completion watchdog resetting "
c7b6a674
ZY		 2296 "adapter after (%dms).\n",
2297 jiffies_to_msecs(IPW_SCAN_CHECK_WATCHDOG));
a613bffd 2298 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c
JK		 2299 }
2300}
2301
c4028958 2302static void ipw_bg_scan_check(struct work_struct *work)
c848d0af 2303{
c4028958
DH		 2304 struct ipw_priv *priv =
2305 container_of(work, struct ipw_priv, scan_check.work);
4644151b 2306 mutex_lock(&priv->mutex);
c4028958 2307 ipw_scan_check(priv);
4644151b 2308 mutex_unlock(&priv->mutex);
c848d0af
JK		 2309}
2310
43f66a6c
JK		 2311static int ipw_send_scan_request_ext(struct ipw_priv *priv,
2312 struct ipw_scan_request_ext *request)
2313{
0a7bcf26 2314 return ipw_send_cmd_pdu(priv, IPW_CMD_SCAN_REQUEST_EXT,
2638bc39 2315 sizeof(*request), request);
43f66a6c
JK		 2316}
2317
2318static int ipw_send_scan_abort(struct ipw_priv *priv)
2319{
43f66a6c
JK		 2320 if (!priv) {
2321 IPW_ERROR("Invalid args\n");
2322 return -1;
2323 }
2324
0a7bcf26 2325 return ipw_send_cmd_simple(priv, IPW_CMD_SCAN_ABORT);
43f66a6c
JK		 2326}
2327
2328static int ipw_set_sensitivity(struct ipw_priv *priv, u16 sens)
2329{
0a7bcf26 2330 struct ipw_sensitivity_calib calib = {
851ca268 2331 .beacon_rssi_raw = cpu_to_le16(sens),
43f66a6c 2332 };
0a7bcf26
ZY		 2333
2334 return ipw_send_cmd_pdu(priv, IPW_CMD_SENSITIVITY_CALIB, sizeof(calib),
2638bc39 2335 &calib);
43f66a6c
JK		 2336}
2337
2338static int ipw_send_associate(struct ipw_priv *priv,
2339 struct ipw_associate *associate)
2340{
a613bffd 2341 struct ipw_associate tmp_associate;
0a7bcf26
ZY		 2342
2343 if (!priv || !associate) {
2344 IPW_ERROR("Invalid args\n");
2345 return -1;
2346 }
2347
a613bffd
JK		 2348 memcpy(&tmp_associate, associate, sizeof(*associate));
2349 tmp_associate.policy_support =
2350 cpu_to_le16(tmp_associate.policy_support);
2351 tmp_associate.assoc_tsf_msw = cpu_to_le32(tmp_associate.assoc_tsf_msw);
2352 tmp_associate.assoc_tsf_lsw = cpu_to_le32(tmp_associate.assoc_tsf_lsw);
2353 tmp_associate.capability = cpu_to_le16(tmp_associate.capability);
2354 tmp_associate.listen_interval =
2355 cpu_to_le16(tmp_associate.listen_interval);
2356 tmp_associate.beacon_interval =
2357 cpu_to_le16(tmp_associate.beacon_interval);
2358 tmp_associate.atim_window = cpu_to_le16(tmp_associate.atim_window);
2359
0a7bcf26 2360 return ipw_send_cmd_pdu(priv, IPW_CMD_ASSOCIATE, sizeof(tmp_associate),
2638bc39 2361 &tmp_associate);
43f66a6c
JK		 2362}
2363
2364static int ipw_send_supported_rates(struct ipw_priv *priv,
2365 struct ipw_supported_rates *rates)
2366{
43f66a6c
JK		 2367 if (!priv || !rates) {
2368 IPW_ERROR("Invalid args\n");
2369 return -1;
2370 }
2371
0a7bcf26 2372 return ipw_send_cmd_pdu(priv, IPW_CMD_SUPPORTED_RATES, sizeof(*rates),
2638bc39 2373 rates);
43f66a6c
JK		 2374}
2375
2376static int ipw_set_random_seed(struct ipw_priv *priv)
2377{
0a7bcf26 2378 u32 val;
43f66a6c
JK		 2379
2380 if (!priv) {
2381 IPW_ERROR("Invalid args\n");
2382 return -1;
2383 }
2384
0a7bcf26 2385 get_random_bytes(&val, sizeof(val));
43f66a6c 2386
0a7bcf26 2387 return ipw_send_cmd_pdu(priv, IPW_CMD_SEED_NUMBER, sizeof(val), &val);
43f66a6c
JK		 2388}
2389
43f66a6c
JK		 2390static int ipw_send_card_disable(struct ipw_priv *priv, u32 phy_off)
2391{
43f66a6c
JK		 2392 if (!priv) {
2393 IPW_ERROR("Invalid args\n");
2394 return -1;
2395 }
2396
851ca268 2397 phy_off = cpu_to_le32(phy_off);
0a7bcf26 2398 return ipw_send_cmd_pdu(priv, IPW_CMD_CARD_DISABLE, sizeof(phy_off),
2638bc39 2399 &phy_off);
43f66a6c 2400}
43f66a6c 2401
0edd5b44 2402static int ipw_send_tx_power(struct ipw_priv *priv, struct ipw_tx_power *power)
43f66a6c 2403{
43f66a6c
JK		 2404 if (!priv || !power) {
2405 IPW_ERROR("Invalid args\n");
2406 return -1;
2407 }
2408
2638bc39 2409 return ipw_send_cmd_pdu(priv, IPW_CMD_TX_POWER, sizeof(*power), power);
43f66a6c
JK		 2410}
2411
6de9f7f2
ZY		 2412static int ipw_set_tx_power(struct ipw_priv *priv)
2413{
1867b117 2414 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
6de9f7f2
ZY		 2415 struct ipw_tx_power tx_power;
2416 s8 max_power;
2417 int i;
2418
2419 memset(&tx_power, 0, sizeof(tx_power));
2420
2421 /* configure device for 'G' band */
2422 tx_power.ieee_mode = IPW_G_MODE;
2423 tx_power.num_channels = geo->bg_channels;
2424 for (i = 0; i < geo->bg_channels; i++) {
2425 max_power = geo->bg[i].max_power;
2426 tx_power.channels_tx_power[i].channel_number =
2427 geo->bg[i].channel;
2428 tx_power.channels_tx_power[i].tx_power = max_power ?
2429 min(max_power, priv->tx_power) : priv->tx_power;
43f66a6c 2430 }
6de9f7f2
ZY		 2431 if (ipw_send_tx_power(priv, &tx_power))
2432 return -EIO;
2433
2434 /* configure device to also handle 'B' band */
2435 tx_power.ieee_mode = IPW_B_MODE;
2436 if (ipw_send_tx_power(priv, &tx_power))
2437 return -EIO;
bf79451e 2438
6de9f7f2
ZY		 2439 /* configure device to also handle 'A' band */
2440 if (priv->ieee->abg_true) {
2441 tx_power.ieee_mode = IPW_A_MODE;
2442 tx_power.num_channels = geo->a_channels;
2443 for (i = 0; i < tx_power.num_channels; i++) {
2444 max_power = geo->a[i].max_power;
2445 tx_power.channels_tx_power[i].channel_number =
2446 geo->a[i].channel;
2447 tx_power.channels_tx_power[i].tx_power = max_power ?
2448 min(max_power, priv->tx_power) : priv->tx_power;
2449 }
2450 if (ipw_send_tx_power(priv, &tx_power))
2451 return -EIO;
2452 }
43f66a6c
JK		 2453 return 0;
2454}
2455
2456static int ipw_send_rts_threshold(struct ipw_priv *priv, u16 rts)
2457{
2458 struct ipw_rts_threshold rts_threshold = {
851ca268 2459 .rts_threshold = cpu_to_le16(rts),
43f66a6c 2460 };
43f66a6c
JK		 2461
2462 if (!priv) {
2463 IPW_ERROR("Invalid args\n");
2464 return -1;
2465 }
2466
0a7bcf26
ZY		 2467 return ipw_send_cmd_pdu(priv, IPW_CMD_RTS_THRESHOLD,
2468 sizeof(rts_threshold), &rts_threshold);
43f66a6c
JK		 2469}
2470
2471static int ipw_send_frag_threshold(struct ipw_priv *priv, u16 frag)
2472{
2473 struct ipw_frag_threshold frag_threshold = {
851ca268 2474 .frag_threshold = cpu_to_le16(frag),
43f66a6c 2475 };
43f66a6c
JK		 2476
2477 if (!priv) {
2478 IPW_ERROR("Invalid args\n");
2479 return -1;
2480 }
2481
0a7bcf26
ZY		 2482 return ipw_send_cmd_pdu(priv, IPW_CMD_FRAG_THRESHOLD,
2483 sizeof(frag_threshold), &frag_threshold);
43f66a6c
JK		 2484}
2485
2486static int ipw_send_power_mode(struct ipw_priv *priv, u32 mode)
2487{
0a7bcf26 2488 u32 param;
43f66a6c
JK		 2489
2490 if (!priv) {
2491 IPW_ERROR("Invalid args\n");
2492 return -1;
2493 }
bf79451e 2494
43f66a6c
JK		 2495 /* If on battery, set to 3, if AC set to CAM, else user
2496 * level */
2497 switch (mode) {
2498 case IPW_POWER_BATTERY:
0a7bcf26 2499 param = IPW_POWER_INDEX_3;
43f66a6c
JK		 2500 break;
2501 case IPW_POWER_AC:
0a7bcf26 2502 param = IPW_POWER_MODE_CAM;
43f66a6c
JK		 2503 break;
2504 default:
0a7bcf26 2505 param = mode;
43f66a6c
JK		 2506 break;
2507 }
2508
4e157f08 2509 param = cpu_to_le32(param);
0a7bcf26 2510 return ipw_send_cmd_pdu(priv, IPW_CMD_POWER_MODE, sizeof(param),
2638bc39 2511 &param);
43f66a6c
JK		 2512}
2513
afbf30a2
JK		 2514static int ipw_send_retry_limit(struct ipw_priv *priv, u8 slimit, u8 llimit)
2515{
2516 struct ipw_retry_limit retry_limit = {
2517 .short_retry_limit = slimit,
2518 .long_retry_limit = llimit
2519 };
afbf30a2
JK		 2520
2521 if (!priv) {
2522 IPW_ERROR("Invalid args\n");
2523 return -1;
2524 }
2525
0a7bcf26 2526 return ipw_send_cmd_pdu(priv, IPW_CMD_RETRY_LIMIT, sizeof(retry_limit),
2638bc39 2527 &retry_limit);
afbf30a2
JK		 2528}
2529
43f66a6c
JK		 2530/*
2531 * The IPW device contains a Microwire compatible EEPROM that stores
2532 * various data like the MAC address. Usually the firmware has exclusive
2533 * access to the eeprom, but during device initialization (before the
2534 * device driver has sent the HostComplete command to the firmware) the
2535 * device driver has read access to the EEPROM by way of indirect addressing
2536 * through a couple of memory mapped registers.
2537 *
2538 * The following is a simplified implementation for pulling data out of the
2539 * the eeprom, along with some helper functions to find information in
2540 * the per device private data's copy of the eeprom.
2541 *
2542 * NOTE: To better understand how these functions work (i.e what is a chip
2543 * select and why do have to keep driving the eeprom clock?), read
2544 * just about any data sheet for a Microwire compatible EEPROM.
2545 */
2546
2547/* write a 32 bit value into the indirect accessor register */
2548static inline void eeprom_write_reg(struct ipw_priv *p, u32 data)
2549{
2550 ipw_write_reg32(p, FW_MEM_REG_EEPROM_ACCESS, data);
bf79451e 2551
43f66a6c
JK		 2552 /* the eeprom requires some time to complete the operation */
2553 udelay(p->eeprom_delay);
2554
2555 return;
2556}
2557
2558/* perform a chip select operation */
858119e1 2559static void eeprom_cs(struct ipw_priv *priv)
43f66a6c 2560{
0edd5b44
JG		 2561 eeprom_write_reg(priv, 0);
2562 eeprom_write_reg(priv, EEPROM_BIT_CS);
2563 eeprom_write_reg(priv, EEPROM_BIT_CS | EEPROM_BIT_SK);
2564 eeprom_write_reg(priv, EEPROM_BIT_CS);
43f66a6c
JK		 2565}
2566
2567/* perform a chip select operation */
858119e1 2568static void eeprom_disable_cs(struct ipw_priv *priv)
43f66a6c 2569{
0edd5b44
JG		 2570 eeprom_write_reg(priv, EEPROM_BIT_CS);
2571 eeprom_write_reg(priv, 0);
2572 eeprom_write_reg(priv, EEPROM_BIT_SK);
43f66a6c
JK		 2573}
2574
2575/* push a single bit down to the eeprom */
0edd5b44 2576static inline void eeprom_write_bit(struct ipw_priv *p, u8 bit)
43f66a6c 2577{
0edd5b44
JG		 2578 int d = (bit ? EEPROM_BIT_DI : 0);
2579 eeprom_write_reg(p, EEPROM_BIT_CS | d);
2580 eeprom_write_reg(p, EEPROM_BIT_CS | d | EEPROM_BIT_SK);
43f66a6c
JK		 2581}
2582
2583/* push an opcode followed by an address down to the eeprom */
0edd5b44 2584static void eeprom_op(struct ipw_priv *priv, u8 op, u8 addr)
43f66a6c
JK		 2585{
2586 int i;
2587
2588 eeprom_cs(priv);
0edd5b44
JG		 2589 eeprom_write_bit(priv, 1);
2590 eeprom_write_bit(priv, op & 2);
2591 eeprom_write_bit(priv, op & 1);
2592 for (i = 7; i >= 0; i--) {
2593 eeprom_write_bit(priv, addr & (1 << i));
43f66a6c
JK		 2594 }
2595}
2596
2597/* pull 16 bits off the eeprom, one bit at a time */
0edd5b44 2598static u16 eeprom_read_u16(struct ipw_priv *priv, u8 addr)
43f66a6c
JK		 2599{
2600 int i;
0edd5b44 2601 u16 r = 0;
bf79451e 2602
43f66a6c 2603 /* Send READ Opcode */
0edd5b44 2604 eeprom_op(priv, EEPROM_CMD_READ, addr);
43f66a6c
JK		 2605
2606 /* Send dummy bit */
0edd5b44 2607 eeprom_write_reg(priv, EEPROM_BIT_CS);
43f66a6c
JK		 2608
2609 /* Read the byte off the eeprom one bit at a time */
0edd5b44 2610 for (i = 0; i < 16; i++) {
43f66a6c 2611 u32 data = 0;
0edd5b44
JG		 2612 eeprom_write_reg(priv, EEPROM_BIT_CS | EEPROM_BIT_SK);
2613 eeprom_write_reg(priv, EEPROM_BIT_CS);
2614 data = ipw_read_reg32(priv, FW_MEM_REG_EEPROM_ACCESS);
2615 r = (r << 1) | ((data & EEPROM_BIT_DO) ? 1 : 0);
43f66a6c 2616 }
bf79451e 2617
43f66a6c 2618 /* Send another dummy bit */
0edd5b44 2619 eeprom_write_reg(priv, 0);
43f66a6c 2620 eeprom_disable_cs(priv);
bf79451e 2621
43f66a6c
JK		 2622 return r;
2623}
2624
2625/* helper function for pulling the mac address out of the private */
2626/* data's copy of the eeprom data */
0edd5b44 2627static void eeprom_parse_mac(struct ipw_priv *priv, u8 * mac)
43f66a6c 2628{
afbf30a2 2629 memcpy(mac, &priv->eeprom[EEPROM_MAC_ADDRESS], 6);
43f66a6c
JK		 2630}
2631
2632/*
2633 * Either the device driver (i.e. the host) or the firmware can
2634 * load eeprom data into the designated region in SRAM. If neither
2635 * happens then the FW will shutdown with a fatal error.
2636 *
2637 * In order to signal the FW to load the EEPROM, the EEPROM_LOAD_DISABLE
2638 * bit needs region of shared SRAM needs to be non-zero.
2639 */
2640static void ipw_eeprom_init_sram(struct ipw_priv *priv)
2641{
2642 int i;
0edd5b44 2643 u16 *eeprom = (u16 *) priv->eeprom;
bf79451e 2644
43f66a6c
JK		 2645 IPW_DEBUG_TRACE(">>\n");
2646
2647 /* read entire contents of eeprom into private buffer */
0edd5b44 2648 for (i = 0; i < 128; i++)
a613bffd 2649 eeprom[i] = le16_to_cpu(eeprom_read_u16(priv, (u8) i));
43f66a6c 2650
bf79451e
JG		 2651 /*
2652 If the data looks correct, then copy it to our private
43f66a6c 2653 copy. Otherwise let the firmware know to perform the operation
c7b6a674 2654 on its own.
0edd5b44 2655 */
386093ef 2656 if (priv->eeprom[EEPROM_VERSION] != 0) {
43f66a6c
JK		 2657 IPW_DEBUG_INFO("Writing EEPROM data into SRAM\n");
2658
2659 /* write the eeprom data to sram */
b095c381 2660 for (i = 0; i < IPW_EEPROM_IMAGE_SIZE; i++)
0edd5b44 2661 ipw_write8(priv, IPW_EEPROM_DATA + i, priv->eeprom[i]);
43f66a6c
JK		 2662
2663 /* Do not load eeprom data on fatal error or suspend */
2664 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 0);
2665 } else {
2666 IPW_DEBUG_INFO("Enabling FW initializationg of SRAM\n");
2667
2668 /* Load eeprom data on fatal error or suspend */
2669 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 1);
2670 }
2671
2672 IPW_DEBUG_TRACE("<<\n");
2673}
2674
858119e1 2675static void ipw_zero_memory(struct ipw_priv *priv, u32 start, u32 count)
43f66a6c
JK		 2676{
2677 count >>= 2;
0edd5b44
JG		 2678 if (!count)
2679 return;
b095c381 2680 _ipw_write32(priv, IPW_AUTOINC_ADDR, start);
bf79451e 2681 while (count--)
b095c381 2682 _ipw_write32(priv, IPW_AUTOINC_DATA, 0);
43f66a6c
JK		 2683}
2684
2685static inline void ipw_fw_dma_reset_command_blocks(struct ipw_priv *priv)
2686{
b095c381 2687 ipw_zero_memory(priv, IPW_SHARED_SRAM_DMA_CONTROL,
bf79451e 2688 CB_NUMBER_OF_ELEMENTS_SMALL *
43f66a6c
JK		 2689 sizeof(struct command_block));
2690}
2691
2692static int ipw_fw_dma_enable(struct ipw_priv *priv)
0edd5b44 2693{ /* start dma engine but no transfers yet */
43f66a6c
JK		 2694
2695 IPW_DEBUG_FW(">> : \n");
bf79451e 2696
43f66a6c
JK		 2697 /* Start the dma */
2698 ipw_fw_dma_reset_command_blocks(priv);
bf79451e 2699
43f66a6c 2700 /* Write CB base address */
b095c381 2701 ipw_write_reg32(priv, IPW_DMA_I_CB_BASE, IPW_SHARED_SRAM_DMA_CONTROL);
43f66a6c
JK		 2702
2703 IPW_DEBUG_FW("<< : \n");
2704 return 0;
2705}
2706
2707static void ipw_fw_dma_abort(struct ipw_priv *priv)
2708{
2709 u32 control = 0;
2710
2711 IPW_DEBUG_FW(">> :\n");
bf79451e 2712
67fd6b45 2713 /* set the Stop and Abort bit */
43f66a6c 2714 control = DMA_CONTROL_SMALL_CB_CONST_VALUE | DMA_CB_STOP_AND_ABORT;
b095c381 2715 ipw_write_reg32(priv, IPW_DMA_I_DMA_CONTROL, control);
43f66a6c 2716 priv->sram_desc.last_cb_index = 0;
bf79451e 2717
43f66a6c
JK		 2718 IPW_DEBUG_FW("<< \n");
2719}
2720
0edd5b44
JG		 2721static int ipw_fw_dma_write_command_block(struct ipw_priv *priv, int index,
2722 struct command_block *cb)
43f66a6c 2723{
0edd5b44 2724 u32 address =
b095c381 2725 IPW_SHARED_SRAM_DMA_CONTROL +
0edd5b44 2726 (sizeof(struct command_block) * index);
43f66a6c
JK		 2727 IPW_DEBUG_FW(">> :\n");
2728
0edd5b44
JG		 2729 ipw_write_indirect(priv, address, (u8 *) cb,
2730 (int)sizeof(struct command_block));
43f66a6c
JK		 2731
2732 IPW_DEBUG_FW("<< :\n");
2733 return 0;
2734
2735}
2736
2737static int ipw_fw_dma_kick(struct ipw_priv *priv)
2738{
2739 u32 control = 0;
0edd5b44 2740 u32 index = 0;
43f66a6c
JK		 2741
2742 IPW_DEBUG_FW(">> :\n");
bf79451e 2743
43f66a6c 2744 for (index = 0; index < priv->sram_desc.last_cb_index; index++)
0edd5b44
JG		 2745 ipw_fw_dma_write_command_block(priv, index,
2746 &priv->sram_desc.cb_list[index]);
43f66a6c
JK		 2747
2748 /* Enable the DMA in the CSR register */
b095c381
JK		 2749 ipw_clear_bit(priv, IPW_RESET_REG,
2750 IPW_RESET_REG_MASTER_DISABLED |
2751 IPW_RESET_REG_STOP_MASTER);
bf79451e 2752
0edd5b44 2753 /* Set the Start bit. */
43f66a6c 2754 control = DMA_CONTROL_SMALL_CB_CONST_VALUE | DMA_CB_START;
b095c381 2755 ipw_write_reg32(priv, IPW_DMA_I_DMA_CONTROL, control);
43f66a6c
JK		 2756
2757 IPW_DEBUG_FW("<< :\n");
2758 return 0;
2759}
2760
2761static void ipw_fw_dma_dump_command_block(struct ipw_priv *priv)
2762{
2763 u32 address;
0edd5b44
JG		 2764 u32 register_value = 0;
2765 u32 cb_fields_address = 0;
43f66a6c
JK		 2766
2767 IPW_DEBUG_FW(">> :\n");
b095c381 2768 address = ipw_read_reg32(priv, IPW_DMA_I_CURRENT_CB);
0edd5b44 2769 IPW_DEBUG_FW_INFO("Current CB is 0x%x \n", address);
43f66a6c
JK		 2770
2771 /* Read the DMA Controlor register */
b095c381
JK		 2772 register_value = ipw_read_reg32(priv, IPW_DMA_I_DMA_CONTROL);
2773 IPW_DEBUG_FW_INFO("IPW_DMA_I_DMA_CONTROL is 0x%x \n", register_value);
43f66a6c 2774
0edd5b44 2775 /* Print the CB values */
43f66a6c
JK		 2776 cb_fields_address = address;
2777 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2778 IPW_DEBUG_FW_INFO("Current CB ControlField is 0x%x \n", register_value);
43f66a6c
JK		 2779
2780 cb_fields_address += sizeof(u32);
2781 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2782 IPW_DEBUG_FW_INFO("Current CB Source Field is 0x%x \n", register_value);
43f66a6c
JK		 2783
2784 cb_fields_address += sizeof(u32);
2785 register_value = ipw_read_reg32(priv, cb_fields_address);
2786 IPW_DEBUG_FW_INFO("Current CB Destination Field is 0x%x \n",
2787 register_value);
2788
2789 cb_fields_address += sizeof(u32);
2790 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2791 IPW_DEBUG_FW_INFO("Current CB Status Field is 0x%x \n", register_value);
43f66a6c
JK		 2792
2793 IPW_DEBUG_FW(">> :\n");
2794}
2795
2796static int ipw_fw_dma_command_block_index(struct ipw_priv *priv)
2797{
2798 u32 current_cb_address = 0;
2799 u32 current_cb_index = 0;
2800
2801 IPW_DEBUG_FW("<< :\n");
b095c381 2802 current_cb_address = ipw_read_reg32(priv, IPW_DMA_I_CURRENT_CB);
bf79451e 2803
b095c381 2804 current_cb_index = (current_cb_address - IPW_SHARED_SRAM_DMA_CONTROL) /
0edd5b44 2805 sizeof(struct command_block);
bf79451e 2806
43f66a6c 2807 IPW_DEBUG_FW_INFO("Current CB index 0x%x address = 0x%X \n",
0edd5b44 2808 current_cb_index, current_cb_address);
43f66a6c
JK		 2809
2810 IPW_DEBUG_FW(">> :\n");
2811 return current_cb_index;
2812
2813}
2814
2815static int ipw_fw_dma_add_command_block(struct ipw_priv *priv,
2816 u32 src_address,
2817 u32 dest_address,
2818 u32 length,
0edd5b44 2819 int interrupt_enabled, int is_last)
43f66a6c
JK		 2820{
2821
bf79451e 2822 u32 control = CB_VALID | CB_SRC_LE | CB_DEST_LE | CB_SRC_AUTOINC |
0edd5b44
JG		 2823 CB_SRC_IO_GATED | CB_DEST_AUTOINC | CB_SRC_SIZE_LONG |
2824 CB_DEST_SIZE_LONG;
43f66a6c 2825 struct command_block *cb;
0edd5b44 2826 u32 last_cb_element = 0;
43f66a6c
JK		 2827
2828 IPW_DEBUG_FW_INFO("src_address=0x%x dest_address=0x%x length=0x%x\n",
2829 src_address, dest_address, length);
2830
2831 if (priv->sram_desc.last_cb_index >= CB_NUMBER_OF_ELEMENTS_SMALL)
2832 return -1;
2833
2834 last_cb_element = priv->sram_desc.last_cb_index;
2835 cb = &priv->sram_desc.cb_list[last_cb_element];
2836 priv->sram_desc.last_cb_index++;
2837
2838 /* Calculate the new CB control word */
0edd5b44 2839 if (interrupt_enabled)
43f66a6c
JK		 2840 control |= CB_INT_ENABLED;
2841
2842 if (is_last)
2843 control |= CB_LAST_VALID;
bf79451e 2844
43f66a6c
JK		 2845 control |= length;
2846
2847 /* Calculate the CB Element's checksum value */
0edd5b44 2848 cb->status = control ^ src_address ^ dest_address;
43f66a6c
JK		 2849
2850 /* Copy the Source and Destination addresses */
2851 cb->dest_addr = dest_address;
2852 cb->source_addr = src_address;
2853
2854 /* Copy the Control Word last */
2855 cb->control = control;
2856
2857 return 0;
2858}
2859
2860static int ipw_fw_dma_add_buffer(struct ipw_priv *priv,
0edd5b44 2861 u32 src_phys, u32 dest_address, u32 length)
43f66a6c
JK		 2862{
2863 u32 bytes_left = length;
0edd5b44
JG		 2864 u32 src_offset = 0;
2865 u32 dest_offset = 0;
43f66a6c
JK		 2866 int status = 0;
2867 IPW_DEBUG_FW(">> \n");
2868 IPW_DEBUG_FW_INFO("src_phys=0x%x dest_address=0x%x length=0x%x\n",
2869 src_phys, dest_address, length);
2870 while (bytes_left > CB_MAX_LENGTH) {
0edd5b44
JG		 2871 status = ipw_fw_dma_add_command_block(priv,
2872 src_phys + src_offset,
2873 dest_address +
2874 dest_offset,
2875 CB_MAX_LENGTH, 0, 0);
43f66a6c
JK		 2876 if (status) {
2877 IPW_DEBUG_FW_INFO(": Failed\n");
2878 return -1;
bf79451e 2879 } else
43f66a6c
JK		 2880 IPW_DEBUG_FW_INFO(": Added new cb\n");
2881
2882 src_offset += CB_MAX_LENGTH;
2883 dest_offset += CB_MAX_LENGTH;
2884 bytes_left -= CB_MAX_LENGTH;
2885 }
2886
2887 /* add the buffer tail */
2888 if (bytes_left > 0) {
0edd5b44
JG		 2889 status =
2890 ipw_fw_dma_add_command_block(priv, src_phys + src_offset,
2891 dest_address + dest_offset,
2892 bytes_left, 0, 0);
43f66a6c
JK		 2893 if (status) {
2894 IPW_DEBUG_FW_INFO(": Failed on the buffer tail\n");
2895 return -1;
bf79451e 2896 } else
0edd5b44
JG		 2897 IPW_DEBUG_FW_INFO
2898 (": Adding new cb - the buffer tail\n");
43f66a6c 2899 }
bf79451e 2900
43f66a6c
JK		 2901 IPW_DEBUG_FW("<< \n");
2902 return 0;
2903}
2904
2905static int ipw_fw_dma_wait(struct ipw_priv *priv)
2906{
397ae121 2907 u32 current_index = 0, previous_index;
43f66a6c
JK		 2908 u32 watchdog = 0;
2909
2910 IPW_DEBUG_FW(">> : \n");
2911
2912 current_index = ipw_fw_dma_command_block_index(priv);
397ae121 2913 IPW_DEBUG_FW_INFO("sram_desc.last_cb_index:0x%08X\n",
0edd5b44 2914 (int)priv->sram_desc.last_cb_index);
43f66a6c
JK		 2915
2916 while (current_index < priv->sram_desc.last_cb_index) {
2917 udelay(50);
397ae121 2918 previous_index = current_index;
43f66a6c
JK		 2919 current_index = ipw_fw_dma_command_block_index(priv);
2920
397ae121
ZY		 2921 if (previous_index < current_index) {
2922 watchdog = 0;
2923 continue;
2924 }
2925 if (++watchdog > 400) {
43f66a6c
JK		 2926 IPW_DEBUG_FW_INFO("Timeout\n");
2927 ipw_fw_dma_dump_command_block(priv);
2928 ipw_fw_dma_abort(priv);
2929 return -1;
2930 }
2931 }
2932
2933 ipw_fw_dma_abort(priv);
2934
0edd5b44 2935 /*Disable the DMA in the CSR register */
b095c381
JK		 2936 ipw_set_bit(priv, IPW_RESET_REG,
2937 IPW_RESET_REG_MASTER_DISABLED | IPW_RESET_REG_STOP_MASTER);
43f66a6c
JK		 2938
2939 IPW_DEBUG_FW("<< dmaWaitSync \n");
2940 return 0;
2941}
2942
bf79451e 2943static void ipw_remove_current_network(struct ipw_priv *priv)
43f66a6c
JK		 2944{
2945 struct list_head *element, *safe;
bf79451e 2946 struct ieee80211_network *network = NULL;
a613bffd
JK		 2947 unsigned long flags;
2948
2949 spin_lock_irqsave(&priv->ieee->lock, flags);
43f66a6c
JK		 2950 list_for_each_safe(element, safe, &priv->ieee->network_list) {
2951 network = list_entry(element, struct ieee80211_network, list);
2952 if (!memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
2953 list_del(element);
bf79451e 2954 list_add_tail(&network->list,
43f66a6c
JK		 2955 &priv->ieee->network_free_list);
2956 }
2957 }
a613bffd 2958 spin_unlock_irqrestore(&priv->ieee->lock, flags);
43f66a6c
JK		 2959}
2960
2961/**
bf79451e 2962 * Check that card is still alive.
43f66a6c
JK		 2963 * Reads debug register from domain0.
2964 * If card is present, pre-defined value should
2965 * be found there.
bf79451e 2966 *
43f66a6c
JK		 2967 * @param priv
2968 * @return 1 if card is present, 0 otherwise
2969 */
2970static inline int ipw_alive(struct ipw_priv *priv)
2971{
2972 return ipw_read32(priv, 0x90) == 0xd55555d5;
2973}
2974
c7b6a674 2975/* timeout in msec, attempted in 10-msec quanta */
858119e1 2976static int ipw_poll_bit(struct ipw_priv *priv, u32 addr, u32 mask,
43f66a6c
JK		 2977 int timeout)
2978{
2979 int i = 0;
2980
2981 do {
bf79451e 2982 if ((ipw_read32(priv, addr) & mask) == mask)
43f66a6c
JK		 2983 return i;
2984 mdelay(10);
2985 i += 10;
2986 } while (i < timeout);
bf79451e 2987
43f66a6c
JK		 2988 return -ETIME;
2989}
2990
bf79451e 2991/* These functions load the firmware and micro code for the operation of
43f66a6c
JK		 2992 * the ipw hardware. It assumes the buffer has all the bits for the
2993 * image and the caller is handling the memory allocation and clean up.
2994 */
2995
0edd5b44 2996static int ipw_stop_master(struct ipw_priv *priv)
43f66a6c
JK		 2997{
2998 int rc;
bf79451e 2999
43f66a6c
JK		 3000 IPW_DEBUG_TRACE(">> \n");
3001 /* stop master. typical delay - 0 */
b095c381 3002 ipw_set_bit(priv, IPW_RESET_REG, IPW_RESET_REG_STOP_MASTER);
43f66a6c 3003
c7b6a674 3004 /* timeout is in msec, polled in 10-msec quanta */
b095c381
JK		 3005 rc = ipw_poll_bit(priv, IPW_RESET_REG,
3006 IPW_RESET_REG_MASTER_DISABLED, 100);
43f66a6c 3007 if (rc < 0) {
c7b6a674 3008 IPW_ERROR("wait for stop master failed after 100ms\n");
43f66a6c
JK		 3009 return -1;
3010 }
3011
3012 IPW_DEBUG_INFO("stop master %dms\n", rc);
3013
3014 return rc;
3015}
3016
3017static void ipw_arc_release(struct ipw_priv *priv)
3018{
3019 IPW_DEBUG_TRACE(">> \n");
3020 mdelay(5);
3021
b095c381 3022 ipw_clear_bit(priv, IPW_RESET_REG, CBD_RESET_REG_PRINCETON_RESET);
43f66a6c
JK		 3023
3024 /* no one knows timing, for safety add some delay */
3025 mdelay(5);
3026}
3027
43f66a6c
JK		 3028struct fw_chunk {
3029 u32 address;
3030 u32 length;
3031};
3032
0edd5b44 3033static int ipw_load_ucode(struct ipw_priv *priv, u8 * data, size_t len)
43f66a6c
JK		 3034{
3035 int rc = 0, i, addr;
3036 u8 cr = 0;
3037 u16 *image;
3038
0edd5b44 3039 image = (u16 *) data;
bf79451e 3040
43f66a6c
JK		 3041 IPW_DEBUG_TRACE(">> \n");
3042
3043 rc = ipw_stop_master(priv);
3044
3045 if (rc < 0)
3046 return rc;
bf79451e 3047
b095c381
JK		 3048 for (addr = IPW_SHARED_LOWER_BOUND;
3049 addr < IPW_REGISTER_DOMAIN1_END; addr += 4) {
43f66a6c
JK		 3050 ipw_write32(priv, addr, 0);
3051 }
3052
3053 /* no ucode (yet) */
3054 memset(&priv->dino_alive, 0, sizeof(priv->dino_alive));
3055 /* destroy DMA queues */
3056 /* reset sequence */
3057
b095c381 3058 ipw_write_reg32(priv, IPW_MEM_HALT_AND_RESET, IPW_BIT_HALT_RESET_ON);
43f66a6c 3059 ipw_arc_release(priv);
b095c381 3060 ipw_write_reg32(priv, IPW_MEM_HALT_AND_RESET, IPW_BIT_HALT_RESET_OFF);
43f66a6c
JK		 3061 mdelay(1);
3062
3063 /* reset PHY */
b095c381 3064 ipw_write_reg32(priv, IPW_INTERNAL_CMD_EVENT, IPW_BASEBAND_POWER_DOWN);
43f66a6c 3065 mdelay(1);
bf79451e 3066
b095c381 3067 ipw_write_reg32(priv, IPW_INTERNAL_CMD_EVENT, 0);
43f66a6c 3068 mdelay(1);
bf79451e 3069
43f66a6c 3070 /* enable ucode store */
c8fe6679
ZY		 3071 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0x0);
3072 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, DINO_ENABLE_CS);
43f66a6c
JK		 3073 mdelay(1);
3074
3075 /* write ucode */
3076 /**
3077 * @bug
3078 * Do NOT set indirect address register once and then
3079 * store data to indirect data register in the loop.
3080 * It seems very reasonable, but in this case DINO do not
3081 * accept ucode. It is essential to set address each time.
3082 */
3083 /* load new ipw uCode */
3084 for (i = 0; i < len / 2; i++)
b095c381 3085 ipw_write_reg16(priv, IPW_BASEBAND_CONTROL_STORE,
a613bffd 3086 cpu_to_le16(image[i]));
43f66a6c 3087
43f66a6c 3088 /* enable DINO */
b095c381
JK		 3089 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0);
3090 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, DINO_ENABLE_SYSTEM);
43f66a6c 3091
0edd5b44 3092 /* this is where the igx / win driver deveates from the VAP driver. */
43f66a6c
JK		 3093
3094 /* wait for alive response */
3095 for (i = 0; i < 100; i++) {
3096 /* poll for incoming data */
b095c381 3097 cr = ipw_read_reg8(priv, IPW_BASEBAND_CONTROL_STATUS);
43f66a6c
JK		 3098 if (cr & DINO_RXFIFO_DATA)
3099 break;
3100 mdelay(1);
3101 }
3102
3103 if (cr & DINO_RXFIFO_DATA) {
3104 /* alive_command_responce size is NOT multiple of 4 */
3105 u32 response_buffer[(sizeof(priv->dino_alive) + 3) / 4];
bf79451e
JG		 3106
3107 for (i = 0; i < ARRAY_SIZE(response_buffer); i++)
43f66a6c 3108 response_buffer[i] =
a613bffd 3109 le32_to_cpu(ipw_read_reg32(priv,
b095c381 3110 IPW_BASEBAND_RX_FIFO_READ));
43f66a6c
JK		 3111 memcpy(&priv->dino_alive, response_buffer,
3112 sizeof(priv->dino_alive));
3113 if (priv->dino_alive.alive_command == 1
3114 && priv->dino_alive.ucode_valid == 1) {
3115 rc = 0;
0edd5b44
JG		 3116 IPW_DEBUG_INFO
3117 ("Microcode OK, rev. %d (0x%x) dev. %d (0x%x) "
3118 "of %02d/%02d/%02d %02d:%02d\n",
3119 priv->dino_alive.software_revision,
3120 priv->dino_alive.software_revision,
3121 priv->dino_alive.device_identifier,
3122 priv->dino_alive.device_identifier,
3123 priv->dino_alive.time_stamp[0],
3124 priv->dino_alive.time_stamp[1],
3125 priv->dino_alive.time_stamp[2],
3126 priv->dino_alive.time_stamp[3],
3127 priv->dino_alive.time_stamp[4]);
43f66a6c
JK		 3128 } else {
3129 IPW_DEBUG_INFO("Microcode is not alive\n");
3130 rc = -EINVAL;
3131 }
3132 } else {
3133 IPW_DEBUG_INFO("No alive response from DINO\n");
3134 rc = -ETIME;
3135 }
3136
3137 /* disable DINO, otherwise for some reason
3138 firmware have problem getting alive resp. */
b095c381 3139 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0);
43f66a6c 3140
43f66a6c
JK		 3141 return rc;
3142}
3143
0edd5b44 3144static int ipw_load_firmware(struct ipw_priv *priv, u8 * data, size_t len)
43f66a6c
JK		 3145{
3146 int rc = -1;
3147 int offset = 0;
3148 struct fw_chunk *chunk;
3149 dma_addr_t shared_phys;
3150 u8 *shared_virt;
3151
3152 IPW_DEBUG_TRACE("<< : \n");
3153 shared_virt = pci_alloc_consistent(priv->pci_dev, len, &shared_phys);
3154
3155 if (!shared_virt)
3156 return -ENOMEM;
3157
3158 memmove(shared_virt, data, len);
3159
3160 /* Start the Dma */
3161 rc = ipw_fw_dma_enable(priv);
3162
3163 if (priv->sram_desc.last_cb_index > 0) {
3164 /* the DMA is already ready this would be a bug. */
3165 BUG();
3166 goto out;
3167 }
3168
3169 do {
3170 chunk = (struct fw_chunk *)(data + offset);
3171 offset += sizeof(struct fw_chunk);
3172 /* build DMA packet and queue up for sending */
bf79451e 3173 /* dma to chunk->address, the chunk->length bytes from data +
43f66a6c
JK		 3174 * offeset*/
3175 /* Dma loading */
3176 rc = ipw_fw_dma_add_buffer(priv, shared_phys + offset,
a613bffd
JK		 3177 le32_to_cpu(chunk->address),
3178 le32_to_cpu(chunk->length));
43f66a6c
JK		 3179 if (rc) {
3180 IPW_DEBUG_INFO("dmaAddBuffer Failed\n");
3181 goto out;
3182 }
bf79451e 3183
a613bffd 3184 offset += le32_to_cpu(chunk->length);
43f66a6c
JK		 3185 } while (offset < len);
3186
0edd5b44 3187 /* Run the DMA and wait for the answer */
43f66a6c
JK		 3188 rc = ipw_fw_dma_kick(priv);
3189 if (rc) {
3190 IPW_ERROR("dmaKick Failed\n");
3191 goto out;
3192 }
3193
3194 rc = ipw_fw_dma_wait(priv);
3195 if (rc) {
3196 IPW_ERROR("dmaWaitSync Failed\n");
3197 goto out;
3198 }
0edd5b44
JG		 3199 out:
3200 pci_free_consistent(priv->pci_dev, len, shared_virt, shared_phys);
43f66a6c
JK		 3201 return rc;
3202}
3203
3204/* stop nic */
3205static int ipw_stop_nic(struct ipw_priv *priv)
3206{
3207 int rc = 0;
3208
0edd5b44 3209 /* stop */
b095c381 3210 ipw_write32(priv, IPW_RESET_REG, IPW_RESET_REG_STOP_MASTER);
bf79451e 3211
b095c381
JK		 3212 rc = ipw_poll_bit(priv, IPW_RESET_REG,
3213 IPW_RESET_REG_MASTER_DISABLED, 500);
43f66a6c 3214 if (rc < 0) {
c7b6a674 3215 IPW_ERROR("wait for reg master disabled failed after 500ms\n");
43f66a6c 3216 return rc;
bf79451e 3217 }
43f66a6c 3218
b095c381 3219 ipw_set_bit(priv, IPW_RESET_REG, CBD_RESET_REG_PRINCETON_RESET);
bf79451e 3220
43f66a6c
JK		 3221 return rc;
3222}
3223
3224static void ipw_start_nic(struct ipw_priv *priv)
3225{
3226 IPW_DEBUG_TRACE(">>\n");
3227
0edd5b44 3228 /* prvHwStartNic release ARC */
b095c381
JK		 3229 ipw_clear_bit(priv, IPW_RESET_REG,
3230 IPW_RESET_REG_MASTER_DISABLED |
3231 IPW_RESET_REG_STOP_MASTER |
43f66a6c 3232 CBD_RESET_REG_PRINCETON_RESET);
bf79451e 3233
43f66a6c 3234 /* enable power management */
b095c381
JK		 3235 ipw_set_bit(priv, IPW_GP_CNTRL_RW,
3236 IPW_GP_CNTRL_BIT_HOST_ALLOWS_STANDBY);
43f66a6c
JK		 3237
3238 IPW_DEBUG_TRACE("<<\n");
3239}
bf79451e 3240
43f66a6c
JK		 3241static int ipw_init_nic(struct ipw_priv *priv)
3242{
3243 int rc;
3244
3245 IPW_DEBUG_TRACE(">>\n");
bf79451e 3246 /* reset */
43f66a6c
JK		 3247 /*prvHwInitNic */
3248 /* set "initialization complete" bit to move adapter to D0 state */
b095c381 3249 ipw_set_bit(priv, IPW_GP_CNTRL_RW, IPW_GP_CNTRL_BIT_INIT_DONE);
43f66a6c
JK		 3250
3251 /* low-level PLL activation */
b095c381
JK		 3252 ipw_write32(priv, IPW_READ_INT_REGISTER,
3253 IPW_BIT_INT_HOST_SRAM_READ_INT_REGISTER);
43f66a6c
JK		 3254
3255 /* wait for clock stabilization */
b095c381
JK		 3256 rc = ipw_poll_bit(priv, IPW_GP_CNTRL_RW,
3257 IPW_GP_CNTRL_BIT_CLOCK_READY, 250);
0edd5b44 3258 if (rc < 0)
43f66a6c
JK		 3259 IPW_DEBUG_INFO("FAILED wait for clock stablization\n");
3260
3261 /* assert SW reset */
b095c381 3262 ipw_set_bit(priv, IPW_RESET_REG, IPW_RESET_REG_SW_RESET);
43f66a6c
JK		 3263
3264 udelay(10);
3265
3266 /* set "initialization complete" bit to move adapter to D0 state */
b095c381 3267 ipw_set_bit(priv, IPW_GP_CNTRL_RW, IPW_GP_CNTRL_BIT_INIT_DONE);
43f66a6c
JK		 3268
3269 IPW_DEBUG_TRACE(">>\n");
3270 return 0;
3271}
3272
bf79451e 3273/* Call this function from process context, it will sleep in request_firmware.
43f66a6c
JK		 3274 * Probe is an ok place to call this from.
3275 */
3276static int ipw_reset_nic(struct ipw_priv *priv)
3277{
3278 int rc = 0;
a613bffd 3279 unsigned long flags;
43f66a6c
JK		 3280
3281 IPW_DEBUG_TRACE(">>\n");
bf79451e 3282
43f66a6c 3283 rc = ipw_init_nic(priv);
bf79451e 3284
a613bffd 3285 spin_lock_irqsave(&priv->lock, flags);
43f66a6c
JK		 3286 /* Clear the 'host command active' bit... */
3287 priv->status &= ~STATUS_HCMD_ACTIVE;
3288 wake_up_interruptible(&priv->wait_command_queue);
afbf30a2
JK		 3289 priv->status &= ~(STATUS_SCANNING | STATUS_SCAN_ABORTING);
3290 wake_up_interruptible(&priv->wait_state);
a613bffd 3291 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c
JK		 3292
3293 IPW_DEBUG_TRACE("<<\n");
3294 return rc;
bf79451e 3295}
43f66a6c 3296
9006ea75
JK		 3297
3298struct ipw_fw {
0070f8c7
ZY		 3299 __le32 ver;
3300 __le32 boot_size;
3301 __le32 ucode_size;
3302 __le32 fw_size;
9006ea75
JK		 3303 u8 data[0];
3304};
3305
bf79451e 3306static int ipw_get_fw(struct ipw_priv *priv,
9006ea75 3307 const struct firmware **raw, const char *name)
43f66a6c 3308{
9006ea75 3309 struct ipw_fw *fw;
43f66a6c
JK		 3310 int rc;
3311
3312 /* ask firmware_class module to get the boot firmware off disk */
9006ea75 3313 rc = request_firmware(raw, name, &priv->pci_dev->dev);
43f66a6c 3314 if (rc < 0) {
9006ea75 3315 IPW_ERROR("%s request_firmware failed: Reason %d\n", name, rc);
43f66a6c 3316 return rc;
bf79451e 3317 }
43f66a6c 3318
9006ea75
JK		 3319 if ((*raw)->size < sizeof(*fw)) {
3320 IPW_ERROR("%s is too small (%zd)\n", name, (*raw)->size);
3321 return -EINVAL;
3322 }
3323
3324 fw = (void *)(*raw)->data;
3325
0070f8c7
ZY		 3326 if ((*raw)->size < sizeof(*fw) + le32_to_cpu(fw->boot_size) +
3327 le32_to_cpu(fw->ucode_size) + le32_to_cpu(fw->fw_size)) {
9006ea75
JK		 3328 IPW_ERROR("%s is too small or corrupt (%zd)\n",
3329 name, (*raw)->size);
43f66a6c
JK		 3330 return -EINVAL;
3331 }
3332
9006ea75 3333 IPW_DEBUG_INFO("Read firmware '%s' image v%d.%d (%zd bytes)\n",
43f66a6c 3334 name,
9006ea75
JK		 3335 le32_to_cpu(fw->ver) >> 16,
3336 le32_to_cpu(fw->ver) & 0xff,
3337 (*raw)->size - sizeof(*fw));
43f66a6c
JK		 3338 return 0;
3339}
3340
b095c381 3341#define IPW_RX_BUF_SIZE (3000)
43f66a6c 3342
858119e1 3343static void ipw_rx_queue_reset(struct ipw_priv *priv,
43f66a6c
JK		 3344 struct ipw_rx_queue *rxq)
3345{
3346 unsigned long flags;
3347 int i;
3348
3349 spin_lock_irqsave(&rxq->lock, flags);
3350
3351 INIT_LIST_HEAD(&rxq->rx_free);
3352 INIT_LIST_HEAD(&rxq->rx_used);
3353
3354 /* Fill the rx_used queue with _all_ of the Rx buffers */
3355 for (i = 0; i < RX_FREE_BUFFERS + RX_QUEUE_SIZE; i++) {
3356 /* In the reset function, these buffers may have been allocated
3357 * to an SKB, so we need to unmap and free potential storage */
3358 if (rxq->pool[i].skb != NULL) {
3359 pci_unmap_single(priv->pci_dev, rxq->pool[i].dma_addr,
b095c381 3360 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c 3361 dev_kfree_skb(rxq->pool[i].skb);
a613bffd 3362 rxq->pool[i].skb = NULL;
43f66a6c
JK		 3363 }
3364 list_add_tail(&rxq->pool[i].list, &rxq->rx_used);
3365 }
bf79451e 3366
43f66a6c
JK		 3367 /* Set us so that we have processed and used all buffers, but have
3368 * not restocked the Rx queue with fresh buffers */
3369 rxq->read = rxq->write = 0;
3370 rxq->processed = RX_QUEUE_SIZE - 1;
3371 rxq->free_count = 0;
3372 spin_unlock_irqrestore(&rxq->lock, flags);
3373}
3374
3375#ifdef CONFIG_PM
3376static int fw_loaded = 0;
9006ea75 3377static const struct firmware *raw = NULL;
afbf30a2
JK		 3378
3379static void free_firmware(void)
3380{
3381 if (fw_loaded) {
9006ea75
JK		 3382 release_firmware(raw);
3383 raw = NULL;
afbf30a2
JK		 3384 fw_loaded = 0;
3385 }
3386}
3387#else
3388#define free_firmware() do {} while (0)
43f66a6c
JK		 3389#endif
3390
3391static int ipw_load(struct ipw_priv *priv)
3392{
3393#ifndef CONFIG_PM
9006ea75 3394 const struct firmware *raw = NULL;
43f66a6c 3395#endif
9006ea75
JK		 3396 struct ipw_fw *fw;
3397 u8 *boot_img, *ucode_img, *fw_img;
3398 u8 *name = NULL;
43f66a6c
JK		 3399 int rc = 0, retries = 3;
3400
397ae121
ZY		 3401 switch (priv->ieee->iw_mode) {
3402 case IW_MODE_ADHOC:
9006ea75 3403 name = "ipw2200-ibss.fw";
397ae121 3404 break;
b095c381 3405#ifdef CONFIG_IPW2200_MONITOR
397ae121 3406 case IW_MODE_MONITOR:
9006ea75 3407 name = "ipw2200-sniffer.fw";
397ae121 3408 break;
43f66a6c 3409#endif
397ae121 3410 case IW_MODE_INFRA:
9006ea75 3411 name = "ipw2200-bss.fw";
397ae121 3412 break;
9006ea75
JK		 3413 }
3414
3415 if (!name) {
397ae121 3416 rc = -EINVAL;
9006ea75
JK		 3417 goto error;
3418 }
3419
3420#ifdef CONFIG_PM
3421 if (!fw_loaded) {
3422#endif
3423 rc = ipw_get_fw(priv, &raw, name);
3424 if (rc < 0)
3425 goto error;
3426#ifdef CONFIG_PM
43f66a6c 3427 }
9006ea75
JK		 3428#endif
3429
3430 fw = (void *)raw->data;
3431 boot_img = &fw->data[0];
0070f8c7
ZY		 3432 ucode_img = &fw->data[le32_to_cpu(fw->boot_size)];
3433 fw_img = &fw->data[le32_to_cpu(fw->boot_size) +
3434 le32_to_cpu(fw->ucode_size)];
397ae121
ZY		 3435
3436 if (rc < 0)
3437 goto error;
43f66a6c
JK		 3438
3439 if (!priv->rxq)
3440 priv->rxq = ipw_rx_queue_alloc(priv);
3441 else
3442 ipw_rx_queue_reset(priv, priv->rxq);
3443 if (!priv->rxq) {
3444 IPW_ERROR("Unable to initialize Rx queue\n");
3445 goto error;
3446 }
3447
0edd5b44 3448 retry:
43f66a6c 3449 /* Ensure interrupts are disabled */
b095c381 3450 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
43f66a6c
JK		 3451 priv->status &= ~STATUS_INT_ENABLED;
3452
3453 /* ack pending interrupts */
b095c381 3454 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
bf79451e 3455
43f66a6c
JK		 3456 ipw_stop_nic(priv);
3457
3458 rc = ipw_reset_nic(priv);
397ae121 3459 if (rc < 0) {
43f66a6c
JK		 3460 IPW_ERROR("Unable to reset NIC\n");
3461 goto error;
3462 }
3463
b095c381
JK		 3464 ipw_zero_memory(priv, IPW_NIC_SRAM_LOWER_BOUND,
3465 IPW_NIC_SRAM_UPPER_BOUND - IPW_NIC_SRAM_LOWER_BOUND);
43f66a6c
JK		 3466
3467 /* DMA the initial boot firmware into the device */
0070f8c7 3468 rc = ipw_load_firmware(priv, boot_img, le32_to_cpu(fw->boot_size));
43f66a6c 3469 if (rc < 0) {
a4f6bbb3 3470 IPW_ERROR("Unable to load boot firmware: %d\n", rc);
43f66a6c
JK		 3471 goto error;
3472 }
3473
3474 /* kick start the device */
3475 ipw_start_nic(priv);
3476
c7b6a674 3477 /* wait for the device to finish its initial startup sequence */
b095c381
JK		 3478 rc = ipw_poll_bit(priv, IPW_INTA_RW,
3479 IPW_INTA_BIT_FW_INITIALIZATION_DONE, 500);
43f66a6c
JK		 3480 if (rc < 0) {
3481 IPW_ERROR("device failed to boot initial fw image\n");
3482 goto error;
3483 }
3484 IPW_DEBUG_INFO("initial device response after %dms\n", rc);
3485
bf79451e 3486 /* ack fw init done interrupt */
b095c381 3487 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_BIT_FW_INITIALIZATION_DONE);
43f66a6c
JK		 3488
3489 /* DMA the ucode into the device */
0070f8c7 3490 rc = ipw_load_ucode(priv, ucode_img, le32_to_cpu(fw->ucode_size));
43f66a6c 3491 if (rc < 0) {
a4f6bbb3 3492 IPW_ERROR("Unable to load ucode: %d\n", rc);
43f66a6c
JK		 3493 goto error;
3494 }
bf79451e 3495
43f66a6c
JK		 3496 /* stop nic */
3497 ipw_stop_nic(priv);
3498
3499 /* DMA bss firmware into the device */
0070f8c7 3500 rc = ipw_load_firmware(priv, fw_img, le32_to_cpu(fw->fw_size));
0edd5b44 3501 if (rc < 0) {
a4f6bbb3 3502 IPW_ERROR("Unable to load firmware: %d\n", rc);
43f66a6c
JK		 3503 goto error;
3504 }
397ae121
ZY		 3505#ifdef CONFIG_PM
3506 fw_loaded = 1;
3507#endif
3508
43f66a6c
JK		 3509 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 0);
3510
3511 rc = ipw_queue_reset(priv);
397ae121 3512 if (rc < 0) {
43f66a6c
JK		 3513 IPW_ERROR("Unable to initialize queues\n");
3514 goto error;
3515 }
3516
3517 /* Ensure interrupts are disabled */
b095c381 3518 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
c848d0af 3519 /* ack pending interrupts */
b095c381 3520 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
bf79451e 3521
43f66a6c
JK		 3522 /* kick start the device */
3523 ipw_start_nic(priv);
3524
b095c381 3525 if (ipw_read32(priv, IPW_INTA_RW) & IPW_INTA_BIT_PARITY_ERROR) {
43f66a6c
JK		 3526 if (retries > 0) {
3527 IPW_WARNING("Parity error. Retrying init.\n");
3528 retries--;
3529 goto retry;
3530 }
3531
3532 IPW_ERROR("TODO: Handle parity error -- schedule restart?\n");
3533 rc = -EIO;
3534 goto error;
3535 }
3536
3537 /* wait for the device */
b095c381
JK		 3538 rc = ipw_poll_bit(priv, IPW_INTA_RW,
3539 IPW_INTA_BIT_FW_INITIALIZATION_DONE, 500);
43f66a6c 3540 if (rc < 0) {
c7b6a674 3541 IPW_ERROR("device failed to start within 500ms\n");
43f66a6c
JK		 3542 goto error;
3543 }
3544 IPW_DEBUG_INFO("device response after %dms\n", rc);
3545
3546 /* ack fw init done interrupt */
b095c381 3547 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_BIT_FW_INITIALIZATION_DONE);
43f66a6c
JK		 3548
3549 /* read eeprom data and initialize the eeprom region of sram */
3550 priv->eeprom_delay = 1;
bf79451e 3551 ipw_eeprom_init_sram(priv);
43f66a6c
JK		 3552
3553 /* enable interrupts */
3554 ipw_enable_interrupts(priv);
3555
3556 /* Ensure our queue has valid packets */
3557 ipw_rx_queue_replenish(priv);
3558
b095c381 3559 ipw_write32(priv, IPW_RX_READ_INDEX, priv->rxq->read);
43f66a6c
JK		 3560
3561 /* ack pending interrupts */
b095c381 3562 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
43f66a6c
JK		 3563
3564#ifndef CONFIG_PM
9006ea75 3565 release_firmware(raw);
43f66a6c
JK		 3566#endif
3567 return 0;
3568
0edd5b44 3569 error:
43f66a6c
JK		 3570 if (priv->rxq) {
3571 ipw_rx_queue_free(priv, priv->rxq);
3572 priv->rxq = NULL;
3573 }
3574 ipw_tx_queue_free(priv);
9006ea75
JK		 3575 if (raw)
3576 release_firmware(raw);
43f66a6c
JK		 3577#ifdef CONFIG_PM
3578 fw_loaded = 0;
9006ea75 3579 raw = NULL;
43f66a6c
JK		 3580#endif
3581
3582 return rc;
3583}
3584
bf79451e 3585/**
43f66a6c
JK		 3586 * DMA services
3587 *
3588 * Theory of operation
3589 *
3590 * A queue is a circular buffers with 'Read' and 'Write' pointers.
3591 * 2 empty entries always kept in the buffer to protect from overflow.
3592 *
3593 * For Tx queue, there are low mark and high mark limits. If, after queuing
bf79451e
JG		 3594 * the packet for Tx, free space become < low mark, Tx queue stopped. When
3595 * reclaiming packets (on 'tx done IRQ), if free space become > high mark,
43f66a6c
JK		 3596 * Tx queue resumed.
3597 *
3598 * The IPW operates with six queues, one receive queue in the device's
3599 * sram, one transmit queue for sending commands to the device firmware,
bf79451e 3600 * and four transmit queues for data.
43f66a6c 3601 *
bf79451e 3602 * The four transmit queues allow for performing quality of service (qos)
43f66a6c 3603 * transmissions as per the 802.11 protocol. Currently Linux does not
bf79451e 3604 * provide a mechanism to the user for utilizing prioritized queues, so
43f66a6c
JK		 3605 * we only utilize the first data transmit queue (queue1).
3606 */
3607
3608/**
3609 * Driver allocates buffers of this size for Rx
3610 */
3611
3612static inline int ipw_queue_space(const struct clx2_queue *q)
3613{
3614 int s = q->last_used - q->first_empty;
3615 if (s <= 0)
3616 s += q->n_bd;
3617 s -= 2; /* keep some reserve to not confuse empty and full situations */
3618 if (s < 0)
3619 s = 0;
3620 return s;
3621}
3622
3623static inline int ipw_queue_inc_wrap(int index, int n_bd)
3624{
3625 return (++index == n_bd) ? 0 : index;
3626}
3627
3628/**
3629 * Initialize common DMA queue structure
bf79451e 3630 *
43f66a6c
JK		 3631 * @param q queue to init
3632 * @param count Number of BD's to allocate. Should be power of 2
3633 * @param read_register Address for 'read' register
3634 * (not offset within BAR, full address)
3635 * @param write_register Address for 'write' register
3636 * (not offset within BAR, full address)
3637 * @param base_register Address for 'base' register
3638 * (not offset within BAR, full address)
3639 * @param size Address for 'size' register
3640 * (not offset within BAR, full address)
3641 */
bf79451e 3642static void ipw_queue_init(struct ipw_priv *priv, struct clx2_queue *q,
0edd5b44 3643 int count, u32 read, u32 write, u32 base, u32 size)
43f66a6c
JK		 3644{
3645 q->n_bd = count;
3646
3647 q->low_mark = q->n_bd / 4;
3648 if (q->low_mark < 4)
3649 q->low_mark = 4;
3650
3651 q->high_mark = q->n_bd / 8;
3652 if (q->high_mark < 2)
3653 q->high_mark = 2;
3654
3655 q->first_empty = q->last_used = 0;
3656 q->reg_r = read;
3657 q->reg_w = write;
3658
3659 ipw_write32(priv, base, q->dma_addr);
3660 ipw_write32(priv, size, count);
3661 ipw_write32(priv, read, 0);
3662 ipw_write32(priv, write, 0);
3663
3664 _ipw_read32(priv, 0x90);
3665}
3666
bf79451e 3667static int ipw_queue_tx_init(struct ipw_priv *priv,
43f66a6c 3668 struct clx2_tx_queue *q,
0edd5b44 3669 int count, u32 read, u32 write, u32 base, u32 size)
43f66a6c
JK		 3670{
3671 struct pci_dev *dev = priv->pci_dev;
3672
3673 q->txb = kmalloc(sizeof(q->txb[0]) * count, GFP_KERNEL);
3674 if (!q->txb) {
3675 IPW_ERROR("vmalloc for auxilary BD structures failed\n");
3676 return -ENOMEM;
3677 }
3678
0edd5b44
JG		 3679 q->bd =
3680 pci_alloc_consistent(dev, sizeof(q->bd[0]) * count, &q->q.dma_addr);
43f66a6c 3681 if (!q->bd) {
aaa4d308 3682 IPW_ERROR("pci_alloc_consistent(%zd) failed\n",
0edd5b44 3683 sizeof(q->bd[0]) * count);
43f66a6c
JK		 3684 kfree(q->txb);
3685 q->txb = NULL;
3686 return -ENOMEM;
3687 }
3688
3689 ipw_queue_init(priv, &q->q, count, read, write, base, size);
3690 return 0;
3691}
3692
3693/**
3694 * Free one TFD, those at index [txq->q.last_used].
3695 * Do NOT advance any indexes
bf79451e 3696 *
43f66a6c
JK		 3697 * @param dev
3698 * @param txq
3699 */
3700static void ipw_queue_tx_free_tfd(struct ipw_priv *priv,
3701 struct clx2_tx_queue *txq)
3702{
3703 struct tfd_frame *bd = &txq->bd[txq->q.last_used];
3704 struct pci_dev *dev = priv->pci_dev;
3705 int i;
bf79451e 3706
43f66a6c
JK		 3707 /* classify bd */
3708 if (bd->control_flags.message_type == TX_HOST_COMMAND_TYPE)
3709 /* nothing to cleanup after for host commands */
3710 return;
3711
3712 /* sanity check */
a613bffd
JK		 3713 if (le32_to_cpu(bd->u.data.num_chunks) > NUM_TFD_CHUNKS) {
3714 IPW_ERROR("Too many chunks: %i\n",
3715 le32_to_cpu(bd->u.data.num_chunks));
43f66a6c
JK		 3716 /** @todo issue fatal error, it is quite serious situation */
3717 return;
3718 }
3719
3720 /* unmap chunks if any */
a613bffd
JK		 3721 for (i = 0; i < le32_to_cpu(bd->u.data.num_chunks); i++) {
3722 pci_unmap_single(dev, le32_to_cpu(bd->u.data.chunk_ptr[i]),
3723 le16_to_cpu(bd->u.data.chunk_len[i]),
3724 PCI_DMA_TODEVICE);
43f66a6c
JK		 3725 if (txq->txb[txq->q.last_used]) {
3726 ieee80211_txb_free(txq->txb[txq->q.last_used]);
3727 txq->txb[txq->q.last_used] = NULL;
3728 }
3729 }
3730}
3731
3732/**
3733 * Deallocate DMA queue.
bf79451e 3734 *
43f66a6c
JK		 3735 * Empty queue by removing and destroying all BD's.
3736 * Free all buffers.
bf79451e 3737 *
43f66a6c
JK		 3738 * @param dev
3739 * @param q
3740 */
0edd5b44 3741static void ipw_queue_tx_free(struct ipw_priv *priv, struct clx2_tx_queue *txq)
43f66a6c
JK		 3742{
3743 struct clx2_queue *q = &txq->q;
3744 struct pci_dev *dev = priv->pci_dev;
3745
bf79451e
JG		 3746 if (q->n_bd == 0)
3747 return;
43f66a6c
JK		 3748
3749 /* first, empty all BD's */
3750 for (; q->first_empty != q->last_used;
3751 q->last_used = ipw_queue_inc_wrap(q->last_used, q->n_bd)) {
3752 ipw_queue_tx_free_tfd(priv, txq);
3753 }
bf79451e 3754
43f66a6c 3755 /* free buffers belonging to queue itself */
0edd5b44 3756 pci_free_consistent(dev, sizeof(txq->bd[0]) * q->n_bd, txq->bd,
43f66a6c
JK		 3757 q->dma_addr);
3758 kfree(txq->txb);
3759
3760 /* 0 fill whole structure */
3761 memset(txq, 0, sizeof(*txq));
3762}
3763
43f66a6c
JK		 3764/**
3765 * Destroy all DMA queues and structures
bf79451e 3766 *
43f66a6c
JK		 3767 * @param priv
3768 */
3769static void ipw_tx_queue_free(struct ipw_priv *priv)
3770{
3771 /* Tx CMD queue */
3772 ipw_queue_tx_free(priv, &priv->txq_cmd);
3773
3774 /* Tx queues */
3775 ipw_queue_tx_free(priv, &priv->txq[0]);
3776 ipw_queue_tx_free(priv, &priv->txq[1]);
3777 ipw_queue_tx_free(priv, &priv->txq[2]);
3778 ipw_queue_tx_free(priv, &priv->txq[3]);
3779}
3780
858119e1 3781static void ipw_create_bssid(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3782{
3783 /* First 3 bytes are manufacturer */
3784 bssid[0] = priv->mac_addr[0];
3785 bssid[1] = priv->mac_addr[1];
3786 bssid[2] = priv->mac_addr[2];
3787
3788 /* Last bytes are random */
0edd5b44 3789 get_random_bytes(&bssid[3], ETH_ALEN - 3);
43f66a6c 3790
0edd5b44
JG		 3791 bssid[0] &= 0xfe; /* clear multicast bit */
3792 bssid[0] |= 0x02; /* set local assignment bit (IEEE802) */
43f66a6c
JK		 3793}
3794
858119e1 3795static u8 ipw_add_station(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3796{
3797 struct ipw_station_entry entry;
3798 int i;
0795af57 3799 DECLARE_MAC_BUF(mac);
43f66a6c
JK		 3800
3801 for (i = 0; i < priv->num_stations; i++) {
3802 if (!memcmp(priv->stations[i], bssid, ETH_ALEN)) {
3803 /* Another node is active in network */
3804 priv->missed_adhoc_beacons = 0;
3805 if (!(priv->config & CFG_STATIC_CHANNEL))
3806 /* when other nodes drop out, we drop out */
3807 priv->config &= ~CFG_ADHOC_PERSIST;
3808
3809 return i;
3810 }
3811 }
3812
3813 if (i == MAX_STATIONS)
3814 return IPW_INVALID_STATION;
3815
0795af57 3816 IPW_DEBUG_SCAN("Adding AdHoc station: %s\n", print_mac(mac, bssid));
43f66a6c
JK		 3817
3818 entry.reserved = 0;
3819 entry.support_mode = 0;
3820 memcpy(entry.mac_addr, bssid, ETH_ALEN);
3821 memcpy(priv->stations[i], bssid, ETH_ALEN);
3822 ipw_write_direct(priv, IPW_STATION_TABLE_LOWER + i * sizeof(entry),
0edd5b44 3823 &entry, sizeof(entry));
43f66a6c
JK		 3824 priv->num_stations++;
3825
3826 return i;
3827}
3828
858119e1 3829static u8 ipw_find_station(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3830{
3831 int i;
3832
bf79451e
JG		 3833 for (i = 0; i < priv->num_stations; i++)
3834 if (!memcmp(priv->stations[i], bssid, ETH_ALEN))
43f66a6c
JK		 3835 return i;
3836
3837 return IPW_INVALID_STATION;
3838}
3839
3840static void ipw_send_disassociate(struct ipw_priv *priv, int quiet)
3841{
3842 int err;
0795af57 3843 DECLARE_MAC_BUF(mac);
43f66a6c 3844
7b99659f
HL		 3845 if (priv->status & STATUS_ASSOCIATING) {
3846 IPW_DEBUG_ASSOC("Disassociating while associating.\n");
3847 queue_work(priv->workqueue, &priv->disassociate);
3848 return;
3849 }
3850
3851 if (!(priv->status & STATUS_ASSOCIATED)) {
43f66a6c
JK		 3852 IPW_DEBUG_ASSOC("Disassociating while not associated.\n");
3853 return;
3854 }
3855
0795af57 3856 IPW_DEBUG_ASSOC("Disassocation attempt from %s "
43f66a6c 3857 "on channel %d.\n",
0795af57 3858 print_mac(mac, priv->assoc_request.bssid),
43f66a6c
JK		 3859 priv->assoc_request.channel);
3860
3861 priv->status &= ~(STATUS_ASSOCIATING | STATUS_ASSOCIATED);
3862 priv->status |= STATUS_DISASSOCIATING;
3863
3864 if (quiet)
3865 priv->assoc_request.assoc_type = HC_DISASSOC_QUIET;
3866 else
3867 priv->assoc_request.assoc_type = HC_DISASSOCIATE;
e6324726 3868
43f66a6c
JK		 3869 err = ipw_send_associate(priv, &priv->assoc_request);
3870 if (err) {
3871 IPW_DEBUG_HC("Attempt to send [dis]associate command "
3872 "failed.\n");
3873 return;
3874 }
3875
3876}
3877
c848d0af 3878static int ipw_disassociate(void *data)
43f66a6c 3879{
c848d0af
JK		 3880 struct ipw_priv *priv = data;
3881 if (!(priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)))
3882 return 0;
43f66a6c 3883 ipw_send_disassociate(data, 0);
c848d0af 3884 return 1;
43f66a6c
JK		 3885}
3886
c4028958 3887static void ipw_bg_disassociate(struct work_struct *work)
43f66a6c 3888{
c4028958
DH		 3889 struct ipw_priv *priv =
3890 container_of(work, struct ipw_priv, disassociate);
4644151b 3891 mutex_lock(&priv->mutex);
c4028958 3892 ipw_disassociate(priv);
4644151b 3893 mutex_unlock(&priv->mutex);
43f66a6c
JK		 3894}
3895
c4028958 3896static void ipw_system_config(struct work_struct *work)
d8bad6df 3897{
c4028958
DH		 3898 struct ipw_priv *priv =
3899 container_of(work, struct ipw_priv, system_config);
d685b8c2
ZY		 3900
3901#ifdef CONFIG_IPW2200_PROMISCUOUS
3902 if (priv->prom_net_dev && netif_running(priv->prom_net_dev)) {
3903 priv->sys_config.accept_all_data_frames = 1;
3904 priv->sys_config.accept_non_directed_frames = 1;
3905 priv->sys_config.accept_all_mgmt_bcpr = 1;
3906 priv->sys_config.accept_all_mgmt_frames = 1;
3907 }
3908#endif
3909
3910 ipw_send_system_config(priv);
43f66a6c
JK		 3911}
3912
3913struct ipw_status_code {
3914 u16 status;
3915 const char *reason;
3916};
3917
3918static const struct ipw_status_code ipw_status_codes[] = {
3919 {0x00, "Successful"},
3920 {0x01, "Unspecified failure"},
3921 {0x0A, "Cannot support all requested capabilities in the "
3922 "Capability information field"},
3923 {0x0B, "Reassociation denied due to inability to confirm that "
3924 "association exists"},
3925 {0x0C, "Association denied due to reason outside the scope of this "
3926 "standard"},
0edd5b44
JG		 3927 {0x0D,
3928 "Responding station does not support the specified authentication "
43f66a6c 3929 "algorithm"},
0edd5b44
JG		 3930 {0x0E,
3931 "Received an Authentication frame with authentication sequence "
43f66a6c
JK		 3932 "transaction sequence number out of expected sequence"},
3933 {0x0F, "Authentication rejected because of challenge failure"},
3934 {0x10, "Authentication rejected due to timeout waiting for next "
3935 "frame in sequence"},
3936 {0x11, "Association denied because AP is unable to handle additional "
3937 "associated stations"},
0edd5b44
JG		 3938 {0x12,
3939 "Association denied due to requesting station not supporting all "
43f66a6c 3940 "of the datarates in the BSSBasicServiceSet Parameter"},
0edd5b44
JG		 3941 {0x13,
3942 "Association denied due to requesting station not supporting "
43f66a6c 3943 "short preamble operation"},
0edd5b44
JG		 3944 {0x14,
3945 "Association denied due to requesting station not supporting "
43f66a6c 3946 "PBCC encoding"},
0edd5b44
JG		 3947 {0x15,
3948 "Association denied due to requesting station not supporting "
43f66a6c 3949 "channel agility"},
0edd5b44
JG		 3950 {0x19,
3951 "Association denied due to requesting station not supporting "
43f66a6c 3952 "short slot operation"},
0edd5b44
JG		 3953 {0x1A,
3954 "Association denied due to requesting station not supporting "
43f66a6c
JK		 3955 "DSSS-OFDM operation"},
3956 {0x28, "Invalid Information Element"},
3957 {0x29, "Group Cipher is not valid"},
3958 {0x2A, "Pairwise Cipher is not valid"},
3959 {0x2B, "AKMP is not valid"},
3960 {0x2C, "Unsupported RSN IE version"},
3961 {0x2D, "Invalid RSN IE Capabilities"},
3962 {0x2E, "Cipher suite is rejected per security policy"},
3963};
3964
bf79451e 3965static const char *ipw_get_status_code(u16 status)
43f66a6c
JK		 3966{
3967 int i;
bf79451e 3968 for (i = 0; i < ARRAY_SIZE(ipw_status_codes); i++)
ea2b26e0 3969 if (ipw_status_codes[i].status == (status & 0xff))
43f66a6c
JK		 3970 return ipw_status_codes[i].reason;
3971 return "Unknown status value.";
3972}
43f66a6c
JK		 3973
3974static void inline average_init(struct average *avg)
3975{
3976 memset(avg, 0, sizeof(*avg));
3977}
3978
00d21de5
ZY		 3979#define DEPTH_RSSI 8
3980#define DEPTH_NOISE 16
3981static s16 exponential_average(s16 prev_avg, s16 val, u8 depth)
3982{
3983 return ((depth-1)*prev_avg + val)/depth;
3984}
3985
858119e1 3986static void average_add(struct average *avg, s16 val)
43f66a6c
JK		 3987{
3988 avg->sum -= avg->entries[avg->pos];
3989 avg->sum += val;
3990 avg->entries[avg->pos++] = val;
3991 if (unlikely(avg->pos == AVG_ENTRIES)) {
3992 avg->init = 1;
3993 avg->pos = 0;
3994 }
3995}
3996
858119e1 3997static s16 average_value(struct average *avg)
43f66a6c
JK		 3998{
3999 if (!unlikely(avg->init)) {
4000 if (avg->pos)
4001 return avg->sum / avg->pos;
4002 return 0;
4003 }
4004
4005 return avg->sum / AVG_ENTRIES;
4006}
4007
4008static void ipw_reset_stats(struct ipw_priv *priv)
4009{
4010 u32 len = sizeof(u32);
4011
4012 priv->quality = 0;
4013
4014 average_init(&priv->average_missed_beacons);
00d21de5
ZY		 4015 priv->exp_avg_rssi = -60;
4016 priv->exp_avg_noise = -85 + 0x100;
43f66a6c
JK		 4017
4018 priv->last_rate = 0;
4019 priv->last_missed_beacons = 0;
4020 priv->last_rx_packets = 0;
4021 priv->last_tx_packets = 0;
4022 priv->last_tx_failures = 0;
bf79451e 4023
43f66a6c
JK		 4024 /* Firmware managed, reset only when NIC is restarted, so we have to
4025 * normalize on the current value */
bf79451e 4026 ipw_get_ordinal(priv, IPW_ORD_STAT_RX_ERR_CRC,
43f66a6c 4027 &priv->last_rx_err, &len);
bf79451e 4028 ipw_get_ordinal(priv, IPW_ORD_STAT_TX_FAILURE,
43f66a6c
JK		 4029 &priv->last_tx_failures, &len);
4030
4031 /* Driver managed, reset with each association */
4032 priv->missed_adhoc_beacons = 0;
4033 priv->missed_beacons = 0;
4034 priv->tx_packets = 0;
4035 priv->rx_packets = 0;
4036
4037}
4038
858119e1 4039static u32 ipw_get_max_rate(struct ipw_priv *priv)
43f66a6c
JK		 4040{
4041 u32 i = 0x80000000;
4042 u32 mask = priv->rates_mask;
4043 /* If currently associated in B mode, restrict the maximum
4044 * rate match to B rates */
4045 if (priv->assoc_request.ieee_mode == IPW_B_MODE)
4046 mask &= IEEE80211_CCK_RATES_MASK;
4047
4048 /* TODO: Verify that the rate is supported by the current rates
4049 * list. */
4050
0edd5b44
JG		 4051 while (i && !(mask & i))
4052 i >>= 1;
43f66a6c 4053 switch (i) {
ea2b26e0
JK		 4054 case IEEE80211_CCK_RATE_1MB_MASK:
4055 return 1000000;
4056 case IEEE80211_CCK_RATE_2MB_MASK:
4057 return 2000000;
4058 case IEEE80211_CCK_RATE_5MB_MASK:
4059 return 5500000;
4060 case IEEE80211_OFDM_RATE_6MB_MASK:
4061 return 6000000;
4062 case IEEE80211_OFDM_RATE_9MB_MASK:
4063 return 9000000;
4064 case IEEE80211_CCK_RATE_11MB_MASK:
4065 return 11000000;
4066 case IEEE80211_OFDM_RATE_12MB_MASK:
4067 return 12000000;
4068 case IEEE80211_OFDM_RATE_18MB_MASK:
4069 return 18000000;
4070 case IEEE80211_OFDM_RATE_24MB_MASK:
4071 return 24000000;
4072 case IEEE80211_OFDM_RATE_36MB_MASK:
4073 return 36000000;
4074 case IEEE80211_OFDM_RATE_48MB_MASK:
4075 return 48000000;
4076 case IEEE80211_OFDM_RATE_54MB_MASK:
4077 return 54000000;
43f66a6c
JK		 4078 }
4079
bf79451e 4080 if (priv->ieee->mode == IEEE_B)
43f66a6c
JK		 4081 return 11000000;
4082 else
4083 return 54000000;
4084}
4085
4086static u32 ipw_get_current_rate(struct ipw_priv *priv)
4087{
4088 u32 rate, len = sizeof(rate);
4089 int err;
4090
bf79451e 4091 if (!(priv->status & STATUS_ASSOCIATED))
43f66a6c
JK		 4092 return 0;
4093
4094 if (priv->tx_packets > IPW_REAL_RATE_RX_PACKET_THRESHOLD) {
bf79451e 4095 err = ipw_get_ordinal(priv, IPW_ORD_STAT_TX_CURR_RATE, &rate,
43f66a6c
JK		 4096 &len);
4097 if (err) {
4098 IPW_DEBUG_INFO("failed querying ordinals.\n");
4099 return 0;
4100 }
bf79451e 4101 } else
43f66a6c
JK		 4102 return ipw_get_max_rate(priv);
4103
4104 switch (rate) {
ea2b26e0
JK		 4105 case IPW_TX_RATE_1MB:
4106 return 1000000;
4107 case IPW_TX_RATE_2MB:
4108 return 2000000;
4109 case IPW_TX_RATE_5MB:
4110 return 5500000;
4111 case IPW_TX_RATE_6MB:
4112 return 6000000;
4113 case IPW_TX_RATE_9MB:
4114 return 9000000;
4115 case IPW_TX_RATE_11MB:
4116 return 11000000;
4117 case IPW_TX_RATE_12MB:
4118 return 12000000;
4119 case IPW_TX_RATE_18MB:
4120 return 18000000;
4121 case IPW_TX_RATE_24MB:
4122 return 24000000;
4123 case IPW_TX_RATE_36MB:
4124 return 36000000;
4125 case IPW_TX_RATE_48MB:
4126 return 48000000;
4127 case IPW_TX_RATE_54MB:
4128 return 54000000;
43f66a6c
JK		 4129 }
4130
4131 return 0;
4132}
4133
43f66a6c
JK		 4134#define IPW_STATS_INTERVAL (2 * HZ)
4135static void ipw_gather_stats(struct ipw_priv *priv)
4136{
4137 u32 rx_err, rx_err_delta, rx_packets_delta;
4138 u32 tx_failures, tx_failures_delta, tx_packets_delta;
4139 u32 missed_beacons_percent, missed_beacons_delta;
4140 u32 quality = 0;
4141 u32 len = sizeof(u32);
4142 s16 rssi;
bf79451e 4143 u32 beacon_quality, signal_quality, tx_quality, rx_quality,
0edd5b44 4144 rate_quality;
ea2b26e0 4145 u32 max_rate;
43f66a6c
JK		 4146
4147 if (!(priv->status & STATUS_ASSOCIATED)) {
4148 priv->quality = 0;
4149 return;
4150 }
4151
4152 /* Update the statistics */
bf79451e 4153 ipw_get_ordinal(priv, IPW_ORD_STAT_MISSED_BEACONS,
43f66a6c 4154 &priv->missed_beacons, &len);
0edd5b44 4155 missed_beacons_delta = priv->missed_beacons - priv->last_missed_beacons;
43f66a6c
JK		 4156 priv->last_missed_beacons = priv->missed_beacons;
4157 if (priv->assoc_request.beacon_interval) {
4158 missed_beacons_percent = missed_beacons_delta *
0edd5b44
JG		 4159 (HZ * priv->assoc_request.beacon_interval) /
4160 (IPW_STATS_INTERVAL * 10);
43f66a6c
JK		 4161 } else {
4162 missed_beacons_percent = 0;
4163 }
4164 average_add(&priv->average_missed_beacons, missed_beacons_percent);
4165
4166 ipw_get_ordinal(priv, IPW_ORD_STAT_RX_ERR_CRC, &rx_err, &len);
4167 rx_err_delta = rx_err - priv->last_rx_err;
4168 priv->last_rx_err = rx_err;
4169
4170 ipw_get_ordinal(priv, IPW_ORD_STAT_TX_FAILURE, &tx_failures, &len);
4171 tx_failures_delta = tx_failures - priv->last_tx_failures;
4172 priv->last_tx_failures = tx_failures;
4173
4174 rx_packets_delta = priv->rx_packets - priv->last_rx_packets;
4175 priv->last_rx_packets = priv->rx_packets;
4176
4177 tx_packets_delta = priv->tx_packets - priv->last_tx_packets;
4178 priv->last_tx_packets = priv->tx_packets;
4179
4180 /* Calculate quality based on the following:
bf79451e 4181 *
43f66a6c
JK		 4182 * Missed beacon: 100% = 0, 0% = 70% missed
4183 * Rate: 60% = 1Mbs, 100% = Max
4184 * Rx and Tx errors represent a straight % of total Rx/Tx
4185 * RSSI: 100% = > -50, 0% = < -80
4186 * Rx errors: 100% = 0, 0% = 50% missed
bf79451e 4187 *
43f66a6c
JK		 4188 * The lowest computed quality is used.
4189 *
4190 */
4191#define BEACON_THRESHOLD 5
4192 beacon_quality = 100 - missed_beacons_percent;
4193 if (beacon_quality < BEACON_THRESHOLD)
4194 beacon_quality = 0;
4195 else
bf79451e 4196 beacon_quality = (beacon_quality - BEACON_THRESHOLD) * 100 /
0edd5b44 4197 (100 - BEACON_THRESHOLD);
bf79451e 4198 IPW_DEBUG_STATS("Missed beacon: %3d%% (%d%%)\n",
43f66a6c 4199 beacon_quality, missed_beacons_percent);
bf79451e 4200
43f66a6c 4201 priv->last_rate = ipw_get_current_rate(priv);
ea2b26e0
JK		 4202 max_rate = ipw_get_max_rate(priv);
4203 rate_quality = priv->last_rate * 40 / max_rate + 60;
43f66a6c
JK		 4204 IPW_DEBUG_STATS("Rate quality : %3d%% (%dMbs)\n",
4205 rate_quality, priv->last_rate / 1000000);
bf79451e 4206
0edd5b44 4207 if (rx_packets_delta > 100 && rx_packets_delta + rx_err_delta)
bf79451e 4208 rx_quality = 100 - (rx_err_delta * 100) /
0edd5b44 4209 (rx_packets_delta + rx_err_delta);
43f66a6c
JK		 4210 else
4211 rx_quality = 100;
4212 IPW_DEBUG_STATS("Rx quality : %3d%% (%u errors, %u packets)\n",
4213 rx_quality, rx_err_delta, rx_packets_delta);
bf79451e 4214
0edd5b44 4215 if (tx_packets_delta > 100 && tx_packets_delta + tx_failures_delta)
bf79451e 4216 tx_quality = 100 - (tx_failures_delta * 100) /
0edd5b44 4217 (tx_packets_delta + tx_failures_delta);
43f66a6c
JK		 4218 else
4219 tx_quality = 100;
4220 IPW_DEBUG_STATS("Tx quality : %3d%% (%u errors, %u packets)\n",
4221 tx_quality, tx_failures_delta, tx_packets_delta);
bf79451e 4222
00d21de5 4223 rssi = priv->exp_avg_rssi;
c848d0af
JK		 4224 signal_quality =
4225 (100 *
4226 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) *
4227 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) -
4228 (priv->ieee->perfect_rssi - rssi) *
4229 (15 * (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) +
4230 62 * (priv->ieee->perfect_rssi - rssi))) /
4231 ((priv->ieee->perfect_rssi - priv->ieee->worst_rssi) *
4232 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi));
4233 if (signal_quality > 100)
43f66a6c 4234 signal_quality = 100;
c848d0af 4235 else if (signal_quality < 1)
43f66a6c 4236 signal_quality = 0;
ea2b26e0 4237
61fb9ed9 4238 IPW_DEBUG_STATS("Signal level : %3d%% (%d dBm)\n",
43f66a6c 4239 signal_quality, rssi);
bf79451e
JG		 4240
4241 quality = min(beacon_quality,
43f66a6c
JK		 4242 min(rate_quality,
4243 min(tx_quality, min(rx_quality, signal_quality))));
4244 if (quality == beacon_quality)
0edd5b44
JG		 4245 IPW_DEBUG_STATS("Quality (%d%%): Clamped to missed beacons.\n",
4246 quality);
43f66a6c 4247 if (quality == rate_quality)
0edd5b44
JG		 4248 IPW_DEBUG_STATS("Quality (%d%%): Clamped to rate quality.\n",
4249 quality);
43f66a6c 4250 if (quality == tx_quality)
0edd5b44
JG		 4251 IPW_DEBUG_STATS("Quality (%d%%): Clamped to Tx quality.\n",
4252 quality);
43f66a6c 4253 if (quality == rx_quality)
0edd5b44
JG		 4254 IPW_DEBUG_STATS("Quality (%d%%): Clamped to Rx quality.\n",
4255 quality);
43f66a6c 4256 if (quality == signal_quality)
0edd5b44
JG		 4257 IPW_DEBUG_STATS("Quality (%d%%): Clamped to signal quality.\n",
4258 quality);
43f66a6c
JK		 4259
4260 priv->quality = quality;
bf79451e
JG		 4261
4262 queue_delayed_work(priv->workqueue, &priv->gather_stats,
43f66a6c
JK		 4263 IPW_STATS_INTERVAL);
4264}
4265
c4028958 4266static void ipw_bg_gather_stats(struct work_struct *work)
c848d0af 4267{
c4028958
DH		 4268 struct ipw_priv *priv =
4269 container_of(work, struct ipw_priv, gather_stats.work);
4644151b 4270 mutex_lock(&priv->mutex);
c4028958 4271 ipw_gather_stats(priv);
4644151b 4272 mutex_unlock(&priv->mutex);
c848d0af
JK		 4273}
4274
e7582561
BC		 4275/* Missed beacon behavior:
4276 * 1st missed -> roaming_threshold, just wait, don't do any scan/roam.
4277 * roaming_threshold -> disassociate_threshold, scan and roam for better signal.
4278 * Above disassociate threshold, give up and stop scanning.
4279 * Roaming is disabled if disassociate_threshold <= roaming_threshold */
858119e1 4280static void ipw_handle_missed_beacon(struct ipw_priv *priv,
ea2b26e0
JK		 4281 int missed_count)
4282{
4283 priv->notif_missed_beacons = missed_count;
4284
afbf30a2 4285 if (missed_count > priv->disassociate_threshold &&
ea2b26e0
JK		 4286 priv->status & STATUS_ASSOCIATED) {
4287 /* If associated and we've hit the missed
4288 * beacon threshold, disassociate, turn
4289 * off roaming, and abort any active scans */
4290 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
afbf30a2 4291 IPW_DL_STATE | IPW_DL_ASSOC,
ea2b26e0
JK		 4292 "Missed beacon: %d - disassociate\n", missed_count);
4293 priv->status &= ~STATUS_ROAMING;
a613bffd
JK		 4294 if (priv->status & STATUS_SCANNING) {
4295 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
4296 IPW_DL_STATE,
4297 "Aborting scan with missed beacon.\n");
ea2b26e0 4298 queue_work(priv->workqueue, &priv->abort_scan);
a613bffd
JK		 4299 }
4300
ea2b26e0
JK		 4301 queue_work(priv->workqueue, &priv->disassociate);
4302 return;
4303 }
4304
4305 if (priv->status & STATUS_ROAMING) {
4306 /* If we are currently roaming, then just
4307 * print a debug statement... */
4308 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4309 "Missed beacon: %d - roam in progress\n",
4310 missed_count);
4311 return;
4312 }
4313
4bfdb91d
ZY		 4314 if (roaming &&
4315 (missed_count > priv->roaming_threshold &&
4316 missed_count <= priv->disassociate_threshold)) {
ea2b26e0 4317 /* If we are not already roaming, set the ROAM
e7582561
BC		 4318 * bit in the status and kick off a scan.
4319 * This can happen several times before we reach
4320 * disassociate_threshold. */
ea2b26e0
JK		 4321 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4322 "Missed beacon: %d - initiate "
4323 "roaming\n", missed_count);
4324 if (!(priv->status & STATUS_ROAMING)) {
4325 priv->status |= STATUS_ROAMING;
4326 if (!(priv->status & STATUS_SCANNING))
c4028958
DH		 4327 queue_delayed_work(priv->workqueue,
4328 &priv->request_scan, 0);
ea2b26e0
JK		 4329 }
4330 return;
4331 }
4332
4333 if (priv->status & STATUS_SCANNING) {
4334 /* Stop scan to keep fw from getting
4335 * stuck (only if we aren't roaming --
4336 * otherwise we'll never scan more than 2 or 3
4337 * channels..) */
b095c381
JK		 4338 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF | IPW_DL_STATE,
4339 "Aborting scan with missed beacon.\n");
ea2b26e0
JK		 4340 queue_work(priv->workqueue, &priv->abort_scan);
4341 }
4342
4343 IPW_DEBUG_NOTIF("Missed beacon: %d\n", missed_count);
ea2b26e0
JK		 4344}
4345
43f66a6c
JK		 4346/**
4347 * Handle host notification packet.
4348 * Called from interrupt routine
4349 */
858119e1 4350static void ipw_rx_notification(struct ipw_priv *priv,
43f66a6c
JK		 4351 struct ipw_rx_notification *notif)
4352{
0795af57 4353 DECLARE_MAC_BUF(mac);
a613bffd
JK		 4354 notif->size = le16_to_cpu(notif->size);
4355
0edd5b44 4356 IPW_DEBUG_NOTIF("type = %i (%d bytes)\n", notif->subtype, notif->size);
bf79451e 4357
43f66a6c 4358 switch (notif->subtype) {
0edd5b44
JG		 4359 case HOST_NOTIFICATION_STATUS_ASSOCIATED:{
4360 struct notif_association *assoc = &notif->u.assoc;
4361
4362 switch (assoc->state) {
4363 case CMAS_ASSOCIATED:{
4364 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4365 IPW_DL_ASSOC,
0795af57 4366 "associated: '%s' %s"
0edd5b44
JG		 4367 " \n",
4368 escape_essid(priv->essid,
4369 priv->essid_len),
0795af57 4370 print_mac(mac, priv->bssid));
0edd5b44
JG		 4371
4372 switch (priv->ieee->iw_mode) {
4373 case IW_MODE_INFRA:
4374 memcpy(priv->ieee->bssid,
4375 priv->bssid, ETH_ALEN);
4376 break;
4377
4378 case IW_MODE_ADHOC:
4379 memcpy(priv->ieee->bssid,
4380 priv->bssid, ETH_ALEN);
4381
4382 /* clear out the station table */
4383 priv->num_stations = 0;
4384
4385 IPW_DEBUG_ASSOC
4386 ("queueing adhoc check\n");
4387 queue_delayed_work(priv->
4388 workqueue,
4389 &priv->
4390 adhoc_check,
4391 priv->
4392 assoc_request.
4393 beacon_interval);
4394 break;
4395 }
4396
4397 priv->status &= ~STATUS_ASSOCIATING;
4398 priv->status |= STATUS_ASSOCIATED;
d8bad6df
ZY		 4399 queue_work(priv->workqueue,
4400 &priv->system_config);
0edd5b44 4401
e43e3c1e 4402#ifdef CONFIG_IPW2200_QOS
afbf30a2
JK		 4403#define IPW_GET_PACKET_STYPE(x) WLAN_FC_GET_STYPE( \
4404 le16_to_cpu(((struct ieee80211_hdr *)(x))->frame_ctl))
4405 if ((priv->status & STATUS_AUTH) &&
4406 (IPW_GET_PACKET_STYPE(&notif->u.raw)
4407 == IEEE80211_STYPE_ASSOC_RESP)) {
b095c381
JK		 4408 if ((sizeof
4409 (struct
2b184d5b 4410 ieee80211_assoc_response)
b095c381
JK		 4411 <= notif->size)
4412 && (notif->size <= 2314)) {
4413 struct
4414 ieee80211_rx_stats
4415 stats = {
4416 .len =
4417 notif->
4418 size - 1,
4419 };
4420
4421 IPW_DEBUG_QOS
4422 ("QoS Associate "
4423 "size %d\n",
4424 notif->size);
4425 ieee80211_rx_mgt(priv->
4426 ieee,
4427 (struct
2b184d5b 4428 ieee80211_hdr_4addr
b095c381
JK		 4429 *)
4430 &notif->u.raw, &stats);
4431 }
0edd5b44 4432 }
b095c381 4433#endif
0edd5b44 4434
a613bffd 4435 schedule_work(&priv->link_up);
43f66a6c 4436
0edd5b44
JG		 4437 break;
4438 }
bf79451e 4439
0edd5b44
JG		 4440 case CMAS_AUTHENTICATED:{
4441 if (priv->
4442 status & (STATUS_ASSOCIATED |
4443 STATUS_AUTH)) {
0edd5b44
JG		 4444 struct notif_authenticate *auth
4445 = &notif->u.auth;
4446 IPW_DEBUG(IPW_DL_NOTIF |
4447 IPW_DL_STATE |
4448 IPW_DL_ASSOC,
4449 "deauthenticated: '%s' "
0795af57 4450 "%s"
0edd5b44
JG		 4451 ": (0x%04X) - %s \n",
4452 escape_essid(priv->
4453 essid,
4454 priv->
4455 essid_len),
0795af57 4456 print_mac(mac, priv->bssid),
0edd5b44
JG		 4457 ntohs(auth->status),
4458 ipw_get_status_code
4459 (ntohs
4460 (auth->status)));
43f66a6c 4461
0edd5b44
JG		 4462 priv->status &=
4463 ~(STATUS_ASSOCIATING |
4464 STATUS_AUTH |
4465 STATUS_ASSOCIATED);
4466
a613bffd 4467 schedule_work(&priv->link_down);
0edd5b44
JG		 4468 break;
4469 }
4470
4471 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4472 IPW_DL_ASSOC,
0795af57 4473 "authenticated: '%s' %s"
0edd5b44
JG		 4474 "\n",
4475 escape_essid(priv->essid,
4476 priv->essid_len),
0795af57 4477 print_mac(mac, priv->bssid));
0edd5b44
JG		 4478 break;
4479 }
4480
4481 case CMAS_INIT:{
ea2b26e0
JK		 4482 if (priv->status & STATUS_AUTH) {
4483 struct
4484 ieee80211_assoc_response
4485 *resp;
4486 resp =
4487 (struct
4488 ieee80211_assoc_response
4489 *)&notif->u.raw;
4490 IPW_DEBUG(IPW_DL_NOTIF |
4491 IPW_DL_STATE |
4492 IPW_DL_ASSOC,
4493 "association failed (0x%04X): %s\n",
4494 ntohs(resp->status),
4495 ipw_get_status_code
4496 (ntohs
4497 (resp->status)));
4498 }
4499
0edd5b44
JG		 4500 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4501 IPW_DL_ASSOC,
0795af57 4502 "disassociated: '%s' %s"
0edd5b44
JG		 4503 " \n",
4504 escape_essid(priv->essid,
4505 priv->essid_len),
0795af57 4506 print_mac(mac, priv->bssid));
0edd5b44
JG		 4507
4508 priv->status &=
4509 ~(STATUS_DISASSOCIATING |
4510 STATUS_ASSOCIATING |
4511 STATUS_ASSOCIATED | STATUS_AUTH);
b095c381
JK		 4512 if (priv->assoc_network
4513 && (priv->assoc_network->
4514 capability &
4515 WLAN_CAPABILITY_IBSS))
4516 ipw_remove_current_network
4517 (priv);
0edd5b44 4518
a613bffd 4519 schedule_work(&priv->link_down);
0edd5b44 4520
0edd5b44
JG		 4521 break;
4522 }
43f66a6c 4523
b095c381
JK		 4524 case CMAS_RX_ASSOC_RESP:
4525 break;
4526
0edd5b44
JG		 4527 default:
4528 IPW_ERROR("assoc: unknown (%d)\n",
4529 assoc->state);
43f66a6c 4530 break;
bf79451e 4531 }
43f66a6c 4532
43f66a6c
JK		 4533 break;
4534 }
bf79451e 4535
0edd5b44
JG		 4536 case HOST_NOTIFICATION_STATUS_AUTHENTICATE:{
4537 struct notif_authenticate *auth = &notif->u.auth;
4538 switch (auth->state) {
4539 case CMAS_AUTHENTICATED:
4540 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
0795af57 4541 "authenticated: '%s' %s \n",
0edd5b44
JG		 4542 escape_essid(priv->essid,
4543 priv->essid_len),
0795af57 4544 print_mac(mac, priv->bssid));
0edd5b44
JG		 4545 priv->status |= STATUS_AUTH;
4546 break;
43f66a6c 4547
0edd5b44
JG		 4548 case CMAS_INIT:
4549 if (priv->status & STATUS_AUTH) {
4550 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4551 IPW_DL_ASSOC,
4552 "authentication failed (0x%04X): %s\n",
4553 ntohs(auth->status),
4554 ipw_get_status_code(ntohs
4555 (auth->
4556 status)));
4557 }
4558 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4559 IPW_DL_ASSOC,
0795af57 4560 "deauthenticated: '%s' %s\n",
0edd5b44
JG		 4561 escape_essid(priv->essid,
4562 priv->essid_len),
0795af57 4563 print_mac(mac, priv->bssid));
bf79451e 4564
0edd5b44
JG		 4565 priv->status &= ~(STATUS_ASSOCIATING |
4566 STATUS_AUTH |
4567 STATUS_ASSOCIATED);
43f66a6c 4568
a613bffd 4569 schedule_work(&priv->link_down);
0edd5b44 4570 break;
43f66a6c 4571
0edd5b44
JG		 4572 case CMAS_TX_AUTH_SEQ_1:
4573 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4574 IPW_DL_ASSOC, "AUTH_SEQ_1\n");
4575 break;
4576 case CMAS_RX_AUTH_SEQ_2:
4577 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4578 IPW_DL_ASSOC, "AUTH_SEQ_2\n");
4579 break;
4580 case CMAS_AUTH_SEQ_1_PASS:
4581 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4582 IPW_DL_ASSOC, "AUTH_SEQ_1_PASS\n");
4583 break;
4584 case CMAS_AUTH_SEQ_1_FAIL:
4585 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4586 IPW_DL_ASSOC, "AUTH_SEQ_1_FAIL\n");
4587 break;
4588 case CMAS_TX_AUTH_SEQ_3:
4589 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4590 IPW_DL_ASSOC, "AUTH_SEQ_3\n");
4591 break;
4592 case CMAS_RX_AUTH_SEQ_4:
4593 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4594 IPW_DL_ASSOC, "RX_AUTH_SEQ_4\n");
4595 break;
4596 case CMAS_AUTH_SEQ_2_PASS:
4597 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4598 IPW_DL_ASSOC, "AUTH_SEQ_2_PASS\n");
4599 break;
4600 case CMAS_AUTH_SEQ_2_FAIL:
4601 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4602 IPW_DL_ASSOC, "AUT_SEQ_2_FAIL\n");
4603 break;
4604 case CMAS_TX_ASSOC:
4605 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4606 IPW_DL_ASSOC, "TX_ASSOC\n");
4607 break;
4608 case CMAS_RX_ASSOC_RESP:
4609 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4610 IPW_DL_ASSOC, "RX_ASSOC_RESP\n");
b095c381 4611
0edd5b44
JG		 4612 break;
4613 case CMAS_ASSOCIATED:
4614 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4615 IPW_DL_ASSOC, "ASSOCIATED\n");
4616 break;
4617 default:
4618 IPW_DEBUG_NOTIF("auth: failure - %d\n",
4619 auth->state);
4620 break;
43f66a6c 4621 }
43f66a6c
JK		 4622 break;
4623 }
4624
0edd5b44
JG		 4625 case HOST_NOTIFICATION_STATUS_SCAN_CHANNEL_RESULT:{
4626 struct notif_channel_result *x =
4627 &notif->u.channel_result;
43f66a6c 4628
0edd5b44
JG		 4629 if (notif->size == sizeof(*x)) {
4630 IPW_DEBUG_SCAN("Scan result for channel %d\n",
4631 x->channel_num);
4632 } else {
4633 IPW_DEBUG_SCAN("Scan result of wrong size %d "
4634 "(should be %zd)\n",
4635 notif->size, sizeof(*x));
bf79451e 4636 }
43f66a6c
JK		 4637 break;
4638 }
43f66a6c 4639
0edd5b44
JG		 4640 case HOST_NOTIFICATION_STATUS_SCAN_COMPLETED:{
4641 struct notif_scan_complete *x = &notif->u.scan_complete;
4642 if (notif->size == sizeof(*x)) {
4643 IPW_DEBUG_SCAN
4644 ("Scan completed: type %d, %d channels, "
4645 "%d status\n", x->scan_type,
4646 x->num_channels, x->status);
4647 } else {
4648 IPW_ERROR("Scan completed of wrong size %d "
4649 "(should be %zd)\n",
4650 notif->size, sizeof(*x));
4651 }
43f66a6c 4652
0edd5b44
JG		 4653 priv->status &=
4654 ~(STATUS_SCANNING | STATUS_SCAN_ABORTING);
4655
a0e04ab3 4656 wake_up_interruptible(&priv->wait_state);
0edd5b44
JG		 4657 cancel_delayed_work(&priv->scan_check);
4658
b095c381
JK		 4659 if (priv->status & STATUS_EXIT_PENDING)
4660 break;
4661
4662 priv->ieee->scans++;
4663
4664#ifdef CONFIG_IPW2200_MONITOR
4665 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 4666 priv->status |= STATUS_SCAN_FORCED;
c4028958
DH		 4667 queue_delayed_work(priv->workqueue,
4668 &priv->request_scan, 0);
b095c381
JK		 4669 break;
4670 }
afbf30a2 4671 priv->status &= ~STATUS_SCAN_FORCED;
b095c381
JK		 4672#endif /* CONFIG_IPW2200_MONITOR */
4673
0edd5b44
JG		 4674 if (!(priv->status & (STATUS_ASSOCIATED |
4675 STATUS_ASSOCIATING |
4676 STATUS_ROAMING |
4677 STATUS_DISASSOCIATING)))
4678 queue_work(priv->workqueue, &priv->associate);
4679 else if (priv->status & STATUS_ROAMING) {
e7582561
BC		 4680 if (x->status == SCAN_COMPLETED_STATUS_COMPLETE)
4681 /* If a scan completed and we are in roam mode, then
4682 * the scan that completed was the one requested as a
4683 * result of entering roam... so, schedule the
4684 * roam work */
4685 queue_work(priv->workqueue,
4686 &priv->roam);
4687 else
4688 /* Don't schedule if we aborted the scan */
4689 priv->status &= ~STATUS_ROAMING;
0edd5b44 4690 } else if (priv->status & STATUS_SCAN_PENDING)
c4028958
DH		 4691 queue_delayed_work(priv->workqueue,
4692 &priv->request_scan, 0);
a613bffd
JK		 4693 else if (priv->config & CFG_BACKGROUND_SCAN
4694 && priv->status & STATUS_ASSOCIATED)
4695 queue_delayed_work(priv->workqueue,
1c9d5e41
SH		 4696 &priv->request_scan,
4697 round_jiffies(HZ));
07f02e46
ZY		 4698
4699 /* Send an empty event to user space.
4700 * We don't send the received data on the event because
4701 * it would require us to do complex transcoding, and
4702 * we want to minimise the work done in the irq handler
4703 * Use a request to extract the data.
4704 * Also, we generate this even for any scan, regardless
4705 * on how the scan was initiated. User space can just
4706 * sync on periodic scan to get fresh data...
4707 * Jean II */
4708 if (x->status == SCAN_COMPLETED_STATUS_COMPLETE) {
4709 union iwreq_data wrqu;
4710
4711 wrqu.data.length = 0;
4712 wrqu.data.flags = 0;
4713 wireless_send_event(priv->net_dev, SIOCGIWSCAN,
4714 &wrqu, NULL);
4715 }
0edd5b44 4716 break;
43f66a6c 4717 }
43f66a6c 4718
0edd5b44
JG		 4719 case HOST_NOTIFICATION_STATUS_FRAG_LENGTH:{
4720 struct notif_frag_length *x = &notif->u.frag_len;
43f66a6c 4721
a613bffd
JK		 4722 if (notif->size == sizeof(*x))
4723 IPW_ERROR("Frag length: %d\n",
4724 le16_to_cpu(x->frag_length));
4725 else
0edd5b44
JG		 4726 IPW_ERROR("Frag length of wrong size %d "
4727 "(should be %zd)\n",
4728 notif->size, sizeof(*x));
0edd5b44 4729 break;
43f66a6c 4730 }
43f66a6c 4731
0edd5b44
JG		 4732 case HOST_NOTIFICATION_STATUS_LINK_DETERIORATION:{
4733 struct notif_link_deterioration *x =
4734 &notif->u.link_deterioration;
afbf30a2 4735
0edd5b44
JG		 4736 if (notif->size == sizeof(*x)) {
4737 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
12977154
BC		 4738 "link deterioration: type %d, cnt %d\n",
4739 x->silence_notification_type,
4740 x->silence_count);
0edd5b44
JG		 4741 memcpy(&priv->last_link_deterioration, x,
4742 sizeof(*x));
4743 } else {
4744 IPW_ERROR("Link Deterioration of wrong size %d "
4745 "(should be %zd)\n",
4746 notif->size, sizeof(*x));
4747 }
43f66a6c
JK		 4748 break;
4749 }
4750
0edd5b44
JG		 4751 case HOST_NOTIFICATION_DINO_CONFIG_RESPONSE:{
4752 IPW_ERROR("Dino config\n");
4753 if (priv->hcmd
a613bffd 4754 && priv->hcmd->cmd != HOST_CMD_DINO_CONFIG)
0edd5b44 4755 IPW_ERROR("Unexpected DINO_CONFIG_RESPONSE\n");
a613bffd 4756
0edd5b44
JG		 4757 break;
4758 }
43f66a6c 4759
0edd5b44
JG		 4760 case HOST_NOTIFICATION_STATUS_BEACON_STATE:{
4761 struct notif_beacon_state *x = &notif->u.beacon_state;
4762 if (notif->size != sizeof(*x)) {
4763 IPW_ERROR
4764 ("Beacon state of wrong size %d (should "
4765 "be %zd)\n", notif->size, sizeof(*x));
4766 break;
43f66a6c
JK		 4767 }
4768
a613bffd
JK		 4769 if (le32_to_cpu(x->state) ==
4770 HOST_NOTIFICATION_STATUS_BEACON_MISSING)
4771 ipw_handle_missed_beacon(priv,
4772 le32_to_cpu(x->
4773 number));
43f66a6c 4774
0edd5b44
JG		 4775 break;
4776 }
43f66a6c 4777
0edd5b44
JG		 4778 case HOST_NOTIFICATION_STATUS_TGI_TX_KEY:{
4779 struct notif_tgi_tx_key *x = &notif->u.tgi_tx_key;
4780 if (notif->size == sizeof(*x)) {
4781 IPW_ERROR("TGi Tx Key: state 0x%02x sec type "
4782 "0x%02x station %d\n",
4783 x->key_state, x->security_type,
4784 x->station_index);
4785 break;
4786 }
43f66a6c 4787
0edd5b44
JG		 4788 IPW_ERROR
4789 ("TGi Tx Key of wrong size %d (should be %zd)\n",
4790 notif->size, sizeof(*x));
43f66a6c 4791 break;
bf79451e 4792 }
43f66a6c 4793
0edd5b44
JG		 4794 case HOST_NOTIFICATION_CALIB_KEEP_RESULTS:{
4795 struct notif_calibration *x = &notif->u.calibration;
43f66a6c 4796
0edd5b44
JG		 4797 if (notif->size == sizeof(*x)) {
4798 memcpy(&priv->calib, x, sizeof(*x));
4799 IPW_DEBUG_INFO("TODO: Calibration\n");
4800 break;
4801 }
43f66a6c 4802
0edd5b44
JG		 4803 IPW_ERROR
4804 ("Calibration of wrong size %d (should be %zd)\n",
4805 notif->size, sizeof(*x));
43f66a6c 4806 break;
bf79451e
JG		 4807 }
4808
0edd5b44
JG		 4809 case HOST_NOTIFICATION_NOISE_STATS:{
4810 if (notif->size == sizeof(u32)) {
00d21de5
ZY		 4811 priv->exp_avg_noise =
4812 exponential_average(priv->exp_avg_noise,
4813 (u8) (le32_to_cpu(notif->u.noise.value) & 0xff),
4814 DEPTH_NOISE);
0edd5b44
JG		 4815 break;
4816 }
43f66a6c 4817
0edd5b44
JG		 4818 IPW_ERROR
4819 ("Noise stat is wrong size %d (should be %zd)\n",
4820 notif->size, sizeof(u32));
43f66a6c
JK		 4821 break;
4822 }
4823
43f66a6c 4824 default:
1dd31b6c
ZY		 4825 IPW_DEBUG_NOTIF("Unknown notification: "
4826 "subtype=%d,flags=0x%2x,size=%d\n",
4827 notif->subtype, notif->flags, notif->size);
43f66a6c
JK		 4828 }
4829}
4830
4831/**
4832 * Destroys all DMA structures and initialise them again
bf79451e 4833 *
43f66a6c
JK		 4834 * @param priv
4835 * @return error code
4836 */
4837static int ipw_queue_reset(struct ipw_priv *priv)
4838{
4839 int rc = 0;
4840 /** @todo customize queue sizes */
4841 int nTx = 64, nTxCmd = 8;
4842 ipw_tx_queue_free(priv);
4843 /* Tx CMD queue */
4844 rc = ipw_queue_tx_init(priv, &priv->txq_cmd, nTxCmd,
b095c381
JK		 4845 IPW_TX_CMD_QUEUE_READ_INDEX,
4846 IPW_TX_CMD_QUEUE_WRITE_INDEX,
4847 IPW_TX_CMD_QUEUE_BD_BASE,
4848 IPW_TX_CMD_QUEUE_BD_SIZE);
43f66a6c
JK		 4849 if (rc) {
4850 IPW_ERROR("Tx Cmd queue init failed\n");
4851 goto error;
4852 }
4853 /* Tx queue(s) */
4854 rc = ipw_queue_tx_init(priv, &priv->txq[0], nTx,
b095c381
JK		 4855 IPW_TX_QUEUE_0_READ_INDEX,
4856 IPW_TX_QUEUE_0_WRITE_INDEX,
4857 IPW_TX_QUEUE_0_BD_BASE, IPW_TX_QUEUE_0_BD_SIZE);
43f66a6c
JK		 4858 if (rc) {
4859 IPW_ERROR("Tx 0 queue init failed\n");
4860 goto error;
4861 }
4862 rc = ipw_queue_tx_init(priv, &priv->txq[1], nTx,
b095c381
JK		 4863 IPW_TX_QUEUE_1_READ_INDEX,
4864 IPW_TX_QUEUE_1_WRITE_INDEX,
4865 IPW_TX_QUEUE_1_BD_BASE, IPW_TX_QUEUE_1_BD_SIZE);
43f66a6c
JK		 4866 if (rc) {
4867 IPW_ERROR("Tx 1 queue init failed\n");
4868 goto error;
4869 }
4870 rc = ipw_queue_tx_init(priv, &priv->txq[2], nTx,
b095c381
JK		 4871 IPW_TX_QUEUE_2_READ_INDEX,
4872 IPW_TX_QUEUE_2_WRITE_INDEX,
4873 IPW_TX_QUEUE_2_BD_BASE, IPW_TX_QUEUE_2_BD_SIZE);
43f66a6c
JK		 4874 if (rc) {
4875 IPW_ERROR("Tx 2 queue init failed\n");
4876 goto error;
4877 }
4878 rc = ipw_queue_tx_init(priv, &priv->txq[3], nTx,
b095c381
JK		 4879 IPW_TX_QUEUE_3_READ_INDEX,
4880 IPW_TX_QUEUE_3_WRITE_INDEX,
4881 IPW_TX_QUEUE_3_BD_BASE, IPW_TX_QUEUE_3_BD_SIZE);
43f66a6c
JK		 4882 if (rc) {
4883 IPW_ERROR("Tx 3 queue init failed\n");
4884 goto error;
4885 }
4886 /* statistics */
4887 priv->rx_bufs_min = 0;
4888 priv->rx_pend_max = 0;
4889 return rc;
4890
0edd5b44 4891 error:
43f66a6c
JK		 4892 ipw_tx_queue_free(priv);
4893 return rc;
4894}
4895
4896/**
4897 * Reclaim Tx queue entries no more used by NIC.
bf79451e 4898 *
43f66a6c
JK		 4899 * When FW adwances 'R' index, all entries between old and
4900 * new 'R' index need to be reclaimed. As result, some free space
4901 * forms. If there is enough free space (> low mark), wake Tx queue.
bf79451e 4902 *
43f66a6c
JK		 4903 * @note Need to protect against garbage in 'R' index
4904 * @param priv
4905 * @param txq
4906 * @param qindex
4907 * @return Number of used entries remains in the queue
4908 */
bf79451e 4909static int ipw_queue_tx_reclaim(struct ipw_priv *priv,
43f66a6c
JK		 4910 struct clx2_tx_queue *txq, int qindex)
4911{
4912 u32 hw_tail;
4913 int used;
4914 struct clx2_queue *q = &txq->q;
4915
4916 hw_tail = ipw_read32(priv, q->reg_r);
4917 if (hw_tail >= q->n_bd) {
4918 IPW_ERROR
0edd5b44
JG		 4919 ("Read index for DMA queue (%d) is out of range [0-%d)\n",
4920 hw_tail, q->n_bd);
43f66a6c
JK		 4921 goto done;
4922 }
4923 for (; q->last_used != hw_tail;
4924 q->last_used = ipw_queue_inc_wrap(q->last_used, q->n_bd)) {
4925 ipw_queue_tx_free_tfd(priv, txq);
4926 priv->tx_packets++;
4927 }
0edd5b44 4928 done:
9ddf84f6
JK		 4929 if ((ipw_queue_space(q) > q->low_mark) &&
4930 (qindex >= 0) &&
4931 (priv->status & STATUS_ASSOCIATED) && netif_running(priv->net_dev))
4932 netif_wake_queue(priv->net_dev);
43f66a6c
JK		 4933 used = q->first_empty - q->last_used;
4934 if (used < 0)
4935 used += q->n_bd;
4936
4937 return used;
4938}
4939
4940static int ipw_queue_tx_hcmd(struct ipw_priv *priv, int hcmd, void *buf,
4941 int len, int sync)
4942{
4943 struct clx2_tx_queue *txq = &priv->txq_cmd;
4944 struct clx2_queue *q = &txq->q;
4945 struct tfd_frame *tfd;
4946
4947 if (ipw_queue_space(q) < (sync ? 1 : 2)) {
4948 IPW_ERROR("No space for Tx\n");
4949 return -EBUSY;
4950 }
4951
4952 tfd = &txq->bd[q->first_empty];
4953 txq->txb[q->first_empty] = NULL;
4954
4955 memset(tfd, 0, sizeof(*tfd));
4956 tfd->control_flags.message_type = TX_HOST_COMMAND_TYPE;
4957 tfd->control_flags.control_bits = TFD_NEED_IRQ_MASK;
4958 priv->hcmd_seq++;
4959 tfd->u.cmd.index = hcmd;
4960 tfd->u.cmd.length = len;
4961 memcpy(tfd->u.cmd.payload, buf, len);
4962 q->first_empty = ipw_queue_inc_wrap(q->first_empty, q->n_bd);
4963 ipw_write32(priv, q->reg_w, q->first_empty);
4964 _ipw_read32(priv, 0x90);
4965
4966 return 0;
4967}
4968
bf79451e 4969/*
43f66a6c
JK		 4970 * Rx theory of operation
4971 *
4972 * The host allocates 32 DMA target addresses and passes the host address
b095c381 4973 * to the firmware at register IPW_RFDS_TABLE_LOWER + N * RFD_SIZE where N is
43f66a6c
JK		 4974 * 0 to 31
4975 *
4976 * Rx Queue Indexes
4977 * The host/firmware share two index registers for managing the Rx buffers.
4978 *
bf79451e
JG		 4979 * The READ index maps to the first position that the firmware may be writing
4980 * to -- the driver can read up to (but not including) this position and get
4981 * good data.
43f66a6c
JK		 4982 * The READ index is managed by the firmware once the card is enabled.
4983 *
4984 * The WRITE index maps to the last position the driver has read from -- the
4985 * position preceding WRITE is the last slot the firmware can place a packet.
4986 *
4987 * The queue is empty (no good data) if WRITE = READ - 1, and is full if
bf79451e 4988 * WRITE = READ.
43f66a6c 4989 *
bf79451e 4990 * During initialization the host sets up the READ queue position to the first
43f66a6c
JK		 4991 * INDEX position, and WRITE to the last (READ - 1 wrapped)
4992 *
4993 * When the firmware places a packet in a buffer it will advance the READ index
4994 * and fire the RX interrupt. The driver can then query the READ index and
4995 * process as many packets as possible, moving the WRITE index forward as it
4996 * resets the Rx queue buffers with new memory.
bf79451e 4997 *
43f66a6c 4998 * The management in the driver is as follows:
bf79451e 4999 * + A list of pre-allocated SKBs is stored in ipw->rxq->rx_free. When
43f66a6c 5000 * ipw->rxq->free_count drops to or below RX_LOW_WATERMARK, work is scheduled
bf79451e 5001 * to replensish the ipw->rxq->rx_free.
43f66a6c
JK		 5002 * + In ipw_rx_queue_replenish (scheduled) if 'processed' != 'read' then the
5003 * ipw->rxq is replenished and the READ INDEX is updated (updating the
5004 * 'processed' and 'read' driver indexes as well)
5005 * + A received packet is processed and handed to the kernel network stack,
5006 * detached from the ipw->rxq. The driver 'processed' index is updated.
5007 * + The Host/Firmware ipw->rxq is replenished at tasklet time from the rx_free
bf79451e
JG		 5008 * list. If there are no allocated buffers in ipw->rxq->rx_free, the READ
5009 * INDEX is not incremented and ipw->status(RX_STALLED) is set. If there
43f66a6c
JK		 5010 * were enough free buffers and RX_STALLED is set it is cleared.
5011 *
5012 *
5013 * Driver sequence:
5014 *
bf79451e 5015 * ipw_rx_queue_alloc() Allocates rx_free
43f66a6c
JK		 5016 * ipw_rx_queue_replenish() Replenishes rx_free list from rx_used, and calls
5017 * ipw_rx_queue_restock
5018 * ipw_rx_queue_restock() Moves available buffers from rx_free into Rx
5019 * queue, updates firmware pointers, and updates
5020 * the WRITE index. If insufficient rx_free buffers
5021 * are available, schedules ipw_rx_queue_replenish
5022 *
5023 * -- enable interrupts --
5024 * ISR - ipw_rx() Detach ipw_rx_mem_buffers from pool up to the
bf79451e 5025 * READ INDEX, detaching the SKB from the pool.
43f66a6c
JK		 5026 * Moves the packet buffer from queue to rx_used.
5027 * Calls ipw_rx_queue_restock to refill any empty
5028 * slots.
5029 * ...
5030 *
5031 */
5032
bf79451e 5033/*
43f66a6c
JK		 5034 * If there are slots in the RX queue that need to be restocked,
5035 * and we have free pre-allocated buffers, fill the ranks as much
5036 * as we can pulling from rx_free.
5037 *
5038 * This moves the 'write' index forward to catch up with 'processed', and
5039 * also updates the memory address in the firmware to reference the new
5040 * target buffer.
5041 */
5042static void ipw_rx_queue_restock(struct ipw_priv *priv)
5043{
5044 struct ipw_rx_queue *rxq = priv->rxq;
5045 struct list_head *element;
5046 struct ipw_rx_mem_buffer *rxb;
5047 unsigned long flags;
5048 int write;
5049
5050 spin_lock_irqsave(&rxq->lock, flags);
5051 write = rxq->write;
5052 while ((rxq->write != rxq->processed) && (rxq->free_count)) {
5053 element = rxq->rx_free.next;
5054 rxb = list_entry(element, struct ipw_rx_mem_buffer, list);
5055 list_del(element);
5056
b095c381 5057 ipw_write32(priv, IPW_RFDS_TABLE_LOWER + rxq->write * RFD_SIZE,
43f66a6c
JK		 5058 rxb->dma_addr);
5059 rxq->queue[rxq->write] = rxb;
5060 rxq->write = (rxq->write + 1) % RX_QUEUE_SIZE;
5061 rxq->free_count--;
5062 }
5063 spin_unlock_irqrestore(&rxq->lock, flags);
5064
bf79451e 5065 /* If the pre-allocated buffer pool is dropping low, schedule to
43f66a6c
JK		 5066 * refill it */
5067 if (rxq->free_count <= RX_LOW_WATERMARK)
5068 queue_work(priv->workqueue, &priv->rx_replenish);
5069
5070 /* If we've added more space for the firmware to place data, tell it */
bf79451e 5071 if (write != rxq->write)
b095c381 5072 ipw_write32(priv, IPW_RX_WRITE_INDEX, rxq->write);
43f66a6c
JK		 5073}
5074
5075/*
5076 * Move all used packet from rx_used to rx_free, allocating a new SKB for each.
bf79451e
JG		 5077 * Also restock the Rx queue via ipw_rx_queue_restock.
5078 *
43f66a6c
JK		 5079 * This is called as a scheduled work item (except for during intialization)
5080 */
5081static void ipw_rx_queue_replenish(void *data)
5082{
5083 struct ipw_priv *priv = data;
5084 struct ipw_rx_queue *rxq = priv->rxq;
5085 struct list_head *element;
5086 struct ipw_rx_mem_buffer *rxb;
5087 unsigned long flags;
5088
5089 spin_lock_irqsave(&rxq->lock, flags);
5090 while (!list_empty(&rxq->rx_used)) {
5091 element = rxq->rx_used.next;
5092 rxb = list_entry(element, struct ipw_rx_mem_buffer, list);
b095c381 5093 rxb->skb = alloc_skb(IPW_RX_BUF_SIZE, GFP_ATOMIC);
43f66a6c
JK		 5094 if (!rxb->skb) {
5095 printk(KERN_CRIT "%s: Can not allocate SKB buffers.\n",
5096 priv->net_dev->name);
5097 /* We don't reschedule replenish work here -- we will
5098 * call the restock method and if it still needs
5099 * more buffers it will schedule replenish */
5100 break;
5101 }
5102 list_del(element);
bf79451e 5103
0edd5b44
JG		 5104 rxb->dma_addr =
5105 pci_map_single(priv->pci_dev, rxb->skb->data,
b095c381 5106 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
bf79451e 5107
43f66a6c
JK		 5108 list_add_tail(&rxb->list, &rxq->rx_free);
5109 rxq->free_count++;
5110 }
5111 spin_unlock_irqrestore(&rxq->lock, flags);
5112
5113 ipw_rx_queue_restock(priv);
5114}
5115
c4028958 5116static void ipw_bg_rx_queue_replenish(struct work_struct *work)
c848d0af 5117{
c4028958
DH		 5118 struct ipw_priv *priv =
5119 container_of(work, struct ipw_priv, rx_replenish);
4644151b 5120 mutex_lock(&priv->mutex);
c4028958 5121 ipw_rx_queue_replenish(priv);
4644151b 5122 mutex_unlock(&priv->mutex);
c848d0af
JK		 5123}
5124
43f66a6c 5125/* Assumes that the skb field of the buffers in 'pool' is kept accurate.
c7b6a674 5126 * If an SKB has been detached, the POOL needs to have its SKB set to NULL
bf79451e 5127 * This free routine walks the list of POOL entries and if SKB is set to
43f66a6c
JK		 5128 * non NULL it is unmapped and freed
5129 */
0edd5b44 5130static void ipw_rx_queue_free(struct ipw_priv *priv, struct ipw_rx_queue *rxq)
43f66a6c
JK		 5131{
5132 int i;
5133
5134 if (!rxq)
5135 return;
bf79451e 5136
43f66a6c
JK		 5137 for (i = 0; i < RX_QUEUE_SIZE + RX_FREE_BUFFERS; i++) {
5138 if (rxq->pool[i].skb != NULL) {
5139 pci_unmap_single(priv->pci_dev, rxq->pool[i].dma_addr,
b095c381 5140 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c
JK		 5141 dev_kfree_skb(rxq->pool[i].skb);
5142 }
5143 }
5144
5145 kfree(rxq);
5146}
5147
5148static struct ipw_rx_queue *ipw_rx_queue_alloc(struct ipw_priv *priv)
5149{
5150 struct ipw_rx_queue *rxq;
5151 int i;
5152
c75f4742 5153 rxq = kzalloc(sizeof(*rxq), GFP_KERNEL);
ad18b0ea
PI		 5154 if (unlikely(!rxq)) {
5155 IPW_ERROR("memory allocation failed\n");
5156 return NULL;
5157 }
43f66a6c
JK		 5158 spin_lock_init(&rxq->lock);
5159 INIT_LIST_HEAD(&rxq->rx_free);
5160 INIT_LIST_HEAD(&rxq->rx_used);
5161
5162 /* Fill the rx_used queue with _all_ of the Rx buffers */
bf79451e 5163 for (i = 0; i < RX_FREE_BUFFERS + RX_QUEUE_SIZE; i++)
43f66a6c
JK		 5164 list_add_tail(&rxq->pool[i].list, &rxq->rx_used);
5165
5166 /* Set us so that we have processed and used all buffers, but have
5167 * not restocked the Rx queue with fresh buffers */
5168 rxq->read = rxq->write = 0;
5169 rxq->processed = RX_QUEUE_SIZE - 1;
5170 rxq->free_count = 0;
5171
5172 return rxq;
5173}
5174
5175static int ipw_is_rate_in_mask(struct ipw_priv *priv, int ieee_mode, u8 rate)
5176{
5177 rate &= ~IEEE80211_BASIC_RATE_MASK;
5178 if (ieee_mode == IEEE_A) {
5179 switch (rate) {
bf79451e
JG		 5180 case IEEE80211_OFDM_RATE_6MB:
5181 return priv->rates_mask & IEEE80211_OFDM_RATE_6MB_MASK ?
0edd5b44 5182 1 : 0;
bf79451e
JG		 5183 case IEEE80211_OFDM_RATE_9MB:
5184 return priv->rates_mask & IEEE80211_OFDM_RATE_9MB_MASK ?
0edd5b44 5185 1 : 0;
bf79451e 5186 case IEEE80211_OFDM_RATE_12MB:
0edd5b44
JG		 5187 return priv->
5188 rates_mask & IEEE80211_OFDM_RATE_12MB_MASK ? 1 : 0;
bf79451e 5189 case IEEE80211_OFDM_RATE_18MB:
0edd5b44
JG		 5190 return priv->
5191 rates_mask & IEEE80211_OFDM_RATE_18MB_MASK ? 1 : 0;
bf79451e 5192 case IEEE80211_OFDM_RATE_24MB:
0edd5b44
JG		 5193 return priv->
5194 rates_mask & IEEE80211_OFDM_RATE_24MB_MASK ? 1 : 0;
bf79451e 5195 case IEEE80211_OFDM_RATE_36MB:
0edd5b44
JG		 5196 return priv->
5197 rates_mask & IEEE80211_OFDM_RATE_36MB_MASK ? 1 : 0;
bf79451e 5198 case IEEE80211_OFDM_RATE_48MB:
0edd5b44
JG		 5199 return priv->
5200 rates_mask & IEEE80211_OFDM_RATE_48MB_MASK ? 1 : 0;
bf79451e 5201 case IEEE80211_OFDM_RATE_54MB:
0edd5b44
JG		 5202 return priv->
5203 rates_mask & IEEE80211_OFDM_RATE_54MB_MASK ? 1 : 0;
43f66a6c
JK		 5204 default:
5205 return 0;
5206 }
5207 }
bf79451e 5208
43f66a6c
JK		 5209 /* B and G mixed */
5210 switch (rate) {
bf79451e 5211 case IEEE80211_CCK_RATE_1MB:
43f66a6c 5212 return priv->rates_mask & IEEE80211_CCK_RATE_1MB_MASK ? 1 : 0;
bf79451e 5213 case IEEE80211_CCK_RATE_2MB:
43f66a6c 5214 return priv->rates_mask & IEEE80211_CCK_RATE_2MB_MASK ? 1 : 0;
bf79451e 5215 case IEEE80211_CCK_RATE_5MB:
43f66a6c 5216 return priv->rates_mask & IEEE80211_CCK_RATE_5MB_MASK ? 1 : 0;
bf79451e 5217 case IEEE80211_CCK_RATE_11MB:
43f66a6c
JK		 5218 return priv->rates_mask & IEEE80211_CCK_RATE_11MB_MASK ? 1 : 0;
5219 }
5220
5221 /* If we are limited to B modulations, bail at this point */
5222 if (ieee_mode == IEEE_B)
5223 return 0;
5224
5225 /* G */
5226 switch (rate) {
bf79451e 5227 case IEEE80211_OFDM_RATE_6MB:
43f66a6c 5228 return priv->rates_mask & IEEE80211_OFDM_RATE_6MB_MASK ? 1 : 0;
bf79451e 5229 case IEEE80211_OFDM_RATE_9MB:
43f66a6c 5230 return priv->rates_mask & IEEE80211_OFDM_RATE_9MB_MASK ? 1 : 0;
bf79451e 5231 case IEEE80211_OFDM_RATE_12MB:
43f66a6c 5232 return priv->rates_mask & IEEE80211_OFDM_RATE_12MB_MASK ? 1 : 0;
bf79451e 5233 case IEEE80211_OFDM_RATE_18MB:
43f66a6c 5234 return priv->rates_mask & IEEE80211_OFDM_RATE_18MB_MASK ? 1 : 0;
bf79451e 5235 case IEEE80211_OFDM_RATE_24MB:
43f66a6c 5236 return priv->rates_mask & IEEE80211_OFDM_RATE_24MB_MASK ? 1 : 0;
bf79451e 5237 case IEEE80211_OFDM_RATE_36MB:
43f66a6c 5238 return priv->rates_mask & IEEE80211_OFDM_RATE_36MB_MASK ? 1 : 0;
bf79451e 5239 case IEEE80211_OFDM_RATE_48MB:
43f66a6c 5240 return priv->rates_mask & IEEE80211_OFDM_RATE_48MB_MASK ? 1 : 0;
bf79451e 5241 case IEEE80211_OFDM_RATE_54MB:
43f66a6c
JK		 5242 return priv->rates_mask & IEEE80211_OFDM_RATE_54MB_MASK ? 1 : 0;
5243 }
5244
5245 return 0;
5246}
5247
bf79451e 5248static int ipw_compatible_rates(struct ipw_priv *priv,
43f66a6c
JK		 5249 const struct ieee80211_network *network,
5250 struct ipw_supported_rates *rates)
5251{
5252 int num_rates, i;
5253
5254 memset(rates, 0, sizeof(*rates));
0edd5b44 5255 num_rates = min(network->rates_len, (u8) IPW_MAX_RATES);
43f66a6c
JK		 5256 rates->num_rates = 0;
5257 for (i = 0; i < num_rates; i++) {
a613bffd
JK		 5258 if (!ipw_is_rate_in_mask(priv, network->mode,
5259 network->rates[i])) {
5260
ea2b26e0 5261 if (network->rates[i] & IEEE80211_BASIC_RATE_MASK) {
a613bffd
JK		 5262 IPW_DEBUG_SCAN("Adding masked mandatory "
5263 "rate %02X\n",
5264 network->rates[i]);
5265 rates->supported_rates[rates->num_rates++] =
5266 network->rates[i];
5267 continue;
ea2b26e0
JK		 5268 }
5269
43f66a6c
JK		 5270 IPW_DEBUG_SCAN("Rate %02X masked : 0x%08X\n",
5271 network->rates[i], priv->rates_mask);
5272 continue;
5273 }
bf79451e 5274
43f66a6c
JK		 5275 rates->supported_rates[rates->num_rates++] = network->rates[i];
5276 }
5277
a613bffd
JK		 5278 num_rates = min(network->rates_ex_len,
5279 (u8) (IPW_MAX_RATES - num_rates));
43f66a6c 5280 for (i = 0; i < num_rates; i++) {
a613bffd
JK		 5281 if (!ipw_is_rate_in_mask(priv, network->mode,
5282 network->rates_ex[i])) {
ea2b26e0 5283 if (network->rates_ex[i] & IEEE80211_BASIC_RATE_MASK) {
a613bffd
JK		 5284 IPW_DEBUG_SCAN("Adding masked mandatory "
5285 "rate %02X\n",
5286 network->rates_ex[i]);
5287 rates->supported_rates[rates->num_rates++] =
5288 network->rates[i];
5289 continue;
ea2b26e0
JK		 5290 }
5291
43f66a6c
JK		 5292 IPW_DEBUG_SCAN("Rate %02X masked : 0x%08X\n",
5293 network->rates_ex[i], priv->rates_mask);
5294 continue;
5295 }
bf79451e 5296
0edd5b44
JG		 5297 rates->supported_rates[rates->num_rates++] =
5298 network->rates_ex[i];
43f66a6c
JK		 5299 }
5300
ea2b26e0 5301 return 1;
43f66a6c
JK		 5302}
5303
858119e1 5304static void ipw_copy_rates(struct ipw_supported_rates *dest,
43f66a6c
JK		 5305 const struct ipw_supported_rates *src)
5306{
5307 u8 i;
5308 for (i = 0; i < src->num_rates; i++)
5309 dest->supported_rates[i] = src->supported_rates[i];
5310 dest->num_rates = src->num_rates;
5311}
5312
5313/* TODO: Look at sniffed packets in the air to determine if the basic rate
5314 * mask should ever be used -- right now all callers to add the scan rates are
5315 * set with the modulation = CCK, so BASIC_RATE_MASK is never set... */
5316static void ipw_add_cck_scan_rates(struct ipw_supported_rates *rates,
0edd5b44 5317 u8 modulation, u32 rate_mask)
43f66a6c 5318{
bf79451e 5319 u8 basic_mask = (IEEE80211_OFDM_MODULATION == modulation) ?
0edd5b44 5320 IEEE80211_BASIC_RATE_MASK : 0;
bf79451e 5321
43f66a6c 5322 if (rate_mask & IEEE80211_CCK_RATE_1MB_MASK)
bf79451e 5323 rates->supported_rates[rates->num_rates++] =
0edd5b44 5324 IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_1MB;
43f66a6c
JK		 5325
5326 if (rate_mask & IEEE80211_CCK_RATE_2MB_MASK)
bf79451e 5327 rates->supported_rates[rates->num_rates++] =
0edd5b44 5328 IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_2MB;
43f66a6c
JK		 5329
5330 if (rate_mask & IEEE80211_CCK_RATE_5MB_MASK)
bf79451e 5331 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5332 IEEE80211_CCK_RATE_5MB;
43f66a6c
JK		 5333
5334 if (rate_mask & IEEE80211_CCK_RATE_11MB_MASK)
bf79451e 5335 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5336 IEEE80211_CCK_RATE_11MB;
43f66a6c
JK		 5337}
5338
5339static void ipw_add_ofdm_scan_rates(struct ipw_supported_rates *rates,
0edd5b44 5340 u8 modulation, u32 rate_mask)
43f66a6c 5341{
bf79451e 5342 u8 basic_mask = (IEEE80211_OFDM_MODULATION == modulation) ?
0edd5b44 5343 IEEE80211_BASIC_RATE_MASK : 0;
43f66a6c
JK		 5344
5345 if (rate_mask & IEEE80211_OFDM_RATE_6MB_MASK)
bf79451e 5346 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5347 IEEE80211_OFDM_RATE_6MB;
43f66a6c
JK		 5348
5349 if (rate_mask & IEEE80211_OFDM_RATE_9MB_MASK)
bf79451e 5350 rates->supported_rates[rates->num_rates++] =
0edd5b44 5351 IEEE80211_OFDM_RATE_9MB;
43f66a6c
JK		 5352
5353 if (rate_mask & IEEE80211_OFDM_RATE_12MB_MASK)
bf79451e 5354 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5355 IEEE80211_OFDM_RATE_12MB;
43f66a6c
JK		 5356
5357 if (rate_mask & IEEE80211_OFDM_RATE_18MB_MASK)
bf79451e 5358 rates->supported_rates[rates->num_rates++] =
0edd5b44 5359 IEEE80211_OFDM_RATE_18MB;
43f66a6c
JK		 5360
5361 if (rate_mask & IEEE80211_OFDM_RATE_24MB_MASK)
bf79451e 5362 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5363 IEEE80211_OFDM_RATE_24MB;
43f66a6c
JK		 5364
5365 if (rate_mask & IEEE80211_OFDM_RATE_36MB_MASK)
bf79451e 5366 rates->supported_rates[rates->num_rates++] =
0edd5b44 5367 IEEE80211_OFDM_RATE_36MB;
43f66a6c
JK		 5368
5369 if (rate_mask & IEEE80211_OFDM_RATE_48MB_MASK)
bf79451e 5370 rates->supported_rates[rates->num_rates++] =
0edd5b44 5371 IEEE80211_OFDM_RATE_48MB;
43f66a6c
JK		 5372
5373 if (rate_mask & IEEE80211_OFDM_RATE_54MB_MASK)
bf79451e 5374 rates->supported_rates[rates->num_rates++] =
0edd5b44 5375 IEEE80211_OFDM_RATE_54MB;
43f66a6c
JK		 5376}
5377
5378struct ipw_network_match {
5379 struct ieee80211_network *network;
5380 struct ipw_supported_rates rates;
5381};
5382
c848d0af
JK		 5383static int ipw_find_adhoc_network(struct ipw_priv *priv,
5384 struct ipw_network_match *match,
5385 struct ieee80211_network *network,
5386 int roaming)
43f66a6c
JK		 5387{
5388 struct ipw_supported_rates rates;
0795af57
JP		 5389 DECLARE_MAC_BUF(mac);
5390 DECLARE_MAC_BUF(mac2);
43f66a6c
JK		 5391
5392 /* Verify that this network's capability is compatible with the
5393 * current mode (AdHoc or Infrastructure) */
c848d0af 5394 if ((priv->ieee->iw_mode == IW_MODE_ADHOC &&
43f66a6c 5395 !(network->capability & WLAN_CAPABILITY_IBSS))) {
0795af57 5396 IPW_DEBUG_MERGE("Network '%s (%s)' excluded due to "
bf79451e 5397 "capability mismatch.\n",
43f66a6c 5398 escape_essid(network->ssid, network->ssid_len),
0795af57 5399 print_mac(mac, network->bssid));
43f66a6c
JK		 5400 return 0;
5401 }
5402
5403 /* If we do not have an ESSID for this AP, we can not associate with
5404 * it */
5405 if (network->flags & NETWORK_EMPTY_ESSID) {
0795af57 5406 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
43f66a6c
JK		 5407 "because of hidden ESSID.\n",
5408 escape_essid(network->ssid, network->ssid_len),
0795af57 5409 print_mac(mac, network->bssid));
43f66a6c
JK		 5410 return 0;
5411 }
bf79451e 5412
43f66a6c
JK		 5413 if (unlikely(roaming)) {
5414 /* If we are roaming, then ensure check if this is a valid
5415 * network to try and roam to */
5416 if ((network->ssid_len != match->network->ssid_len) ||
bf79451e 5417 memcmp(network->ssid, match->network->ssid,
43f66a6c 5418 network->ssid_len)) {
0795af57 5419 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
43f66a6c 5420 "because of non-network ESSID.\n",
bf79451e 5421 escape_essid(network->ssid,
43f66a6c 5422 network->ssid_len),
0795af57 5423 print_mac(mac, network->bssid));
43f66a6c
JK		 5424 return 0;
5425 }
5426 } else {
bf79451e
JG		 5427 /* If an ESSID has been configured then compare the broadcast
5428 * ESSID to ours */
5429 if ((priv->config & CFG_STATIC_ESSID) &&
43f66a6c 5430 ((network->ssid_len != priv->essid_len) ||
bf79451e 5431 memcmp(network->ssid, priv->essid,
43f66a6c
JK		 5432 min(network->ssid_len, priv->essid_len)))) {
5433 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
afbf30a2 5434
0edd5b44
JG		 5435 strncpy(escaped,
5436 escape_essid(network->ssid, network->ssid_len),
43f66a6c 5437 sizeof(escaped));
0795af57 5438 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
bf79451e 5439 "because of ESSID mismatch: '%s'.\n",
0795af57 5440 escaped, print_mac(mac, network->bssid),
0edd5b44
JG		 5441 escape_essid(priv->essid,
5442 priv->essid_len));
43f66a6c
JK		 5443 return 0;
5444 }
5445 }
5446
5447 /* If the old network rate is better than this one, don't bother
5448 * testing everything else. */
c848d0af
JK		 5449
5450 if (network->time_stamp[0] < match->network->time_stamp[0]) {
afbf30a2
JK		 5451 IPW_DEBUG_MERGE("Network '%s excluded because newer than "
5452 "current network.\n",
43f66a6c 5453 escape_essid(match->network->ssid,
afbf30a2 5454 match->network->ssid_len));
43f66a6c 5455 return 0;
c848d0af 5456 } else if (network->time_stamp[1] < match->network->time_stamp[1]) {
afbf30a2
JK		 5457 IPW_DEBUG_MERGE("Network '%s excluded because newer than "
5458 "current network.\n",
5459 escape_essid(match->network->ssid,
5460 match->network->ssid_len));
43f66a6c
JK		 5461 return 0;
5462 }
5463
5464 /* Now go through and see if the requested network is valid... */
bf79451e 5465 if (priv->ieee->scan_age != 0 &&
c848d0af 5466 time_after(jiffies, network->last_scanned + priv->ieee->scan_age)) {
0795af57 5467 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
c7b6a674 5468 "because of age: %ums.\n",
43f66a6c 5469 escape_essid(network->ssid, network->ssid_len),
0795af57 5470 print_mac(mac, network->bssid),
2638bc39
ZY		 5471 jiffies_to_msecs(jiffies -
5472 network->last_scanned));
43f66a6c 5473 return 0;
bf79451e 5474 }
43f66a6c 5475
bf79451e 5476 if ((priv->config & CFG_STATIC_CHANNEL) &&
43f66a6c 5477 (network->channel != priv->channel)) {
0795af57 5478 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
43f66a6c
JK		 5479 "because of channel mismatch: %d != %d.\n",
5480 escape_essid(network->ssid, network->ssid_len),
0795af57 5481 print_mac(mac, network->bssid),
43f66a6c
JK		 5482 network->channel, priv->channel);
5483 return 0;
5484 }
bf79451e 5485
43f66a6c 5486 /* Verify privacy compatability */
bf79451e 5487 if (((priv->capability & CAP_PRIVACY_ON) ? 1 : 0) !=
43f66a6c 5488 ((network->capability & WLAN_CAPABILITY_PRIVACY) ? 1 : 0)) {
0795af57 5489 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
43f66a6c
JK		 5490 "because of privacy mismatch: %s != %s.\n",
5491 escape_essid(network->ssid, network->ssid_len),
0795af57 5492 print_mac(mac, network->bssid),
afbf30a2
JK		 5493 priv->
5494 capability & CAP_PRIVACY_ON ? "on" : "off",
5495 network->
5496 capability & WLAN_CAPABILITY_PRIVACY ? "on" :
5497 "off");
43f66a6c
JK		 5498 return 0;
5499 }
bf79451e 5500
c848d0af 5501 if (!memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
0795af57
JP		 5502 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
5503 "because of the same BSSID match: %s"
c848d0af
JK		 5504 ".\n", escape_essid(network->ssid,
5505 network->ssid_len),
0795af57
JP		 5506 print_mac(mac, network->bssid),
5507 print_mac(mac2, priv->bssid));
43f66a6c
JK		 5508 return 0;
5509 }
bf79451e 5510
43f66a6c
JK		 5511 /* Filter out any incompatible freq / mode combinations */
5512 if (!ieee80211_is_valid_mode(priv->ieee, network->mode)) {
0795af57 5513 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
43f66a6c
JK		 5514 "because of invalid frequency/mode "
5515 "combination.\n",
5516 escape_essid(network->ssid, network->ssid_len),
0795af57 5517 print_mac(mac, network->bssid));
43f66a6c
JK		 5518 return 0;
5519 }
bf79451e 5520
c848d0af
JK		 5521 /* Ensure that the rates supported by the driver are compatible with
5522 * this AP, including verification of basic rates (mandatory) */
5523 if (!ipw_compatible_rates(priv, network, &rates)) {
0795af57 5524 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
c848d0af
JK		 5525 "because configured rate mask excludes "
5526 "AP mandatory rate.\n",
5527 escape_essid(network->ssid, network->ssid_len),
0795af57 5528 print_mac(mac, network->bssid));
c848d0af
JK		 5529 return 0;
5530 }
5531
43f66a6c 5532 if (rates.num_rates == 0) {
0795af57 5533 IPW_DEBUG_MERGE("Network '%s (%s)' excluded "
43f66a6c
JK		 5534 "because of no compatible rates.\n",
5535 escape_essid(network->ssid, network->ssid_len),
0795af57 5536 print_mac(mac, network->bssid));
43f66a6c
JK		 5537 return 0;
5538 }
bf79451e 5539
43f66a6c
JK		 5540 /* TODO: Perform any further minimal comparititive tests. We do not
5541 * want to put too much policy logic here; intelligent scan selection
5542 * should occur within a generic IEEE 802.11 user space tool. */
5543
5544 /* Set up 'new' AP to this network */
5545 ipw_copy_rates(&match->rates, &rates);
5546 match->network = network;
0795af57 5547 IPW_DEBUG_MERGE("Network '%s (%s)' is a viable match.\n",
43f66a6c 5548 escape_essid(network->ssid, network->ssid_len),
0795af57 5549 print_mac(mac, network->bssid));
43f66a6c
JK		 5550
5551 return 1;
5552}
5553
c4028958 5554static void ipw_merge_adhoc_network(struct work_struct *work)
43f66a6c 5555{
c4028958
DH		 5556 struct ipw_priv *priv =
5557 container_of(work, struct ipw_priv, merge_networks);
c848d0af
JK		 5558 struct ieee80211_network *network = NULL;
5559 struct ipw_network_match match = {
5560 .network = priv->assoc_network
5561 };
5562
afbf30a2
JK		 5563 if ((priv->status & STATUS_ASSOCIATED) &&
5564 (priv->ieee->iw_mode == IW_MODE_ADHOC)) {
c848d0af
JK		 5565 /* First pass through ROAM process -- look for a better
5566 * network */
5567 unsigned long flags;
5568
5569 spin_lock_irqsave(&priv->ieee->lock, flags);
5570 list_for_each_entry(network, &priv->ieee->network_list, list) {
5571 if (network != priv->assoc_network)
5572 ipw_find_adhoc_network(priv, &match, network,
5573 1);
5574 }
5575 spin_unlock_irqrestore(&priv->ieee->lock, flags);
5576
5577 if (match.network == priv->assoc_network) {
5578 IPW_DEBUG_MERGE("No better ADHOC in this network to "
5579 "merge to.\n");
5580 return;
5581 }
5582
4644151b 5583 mutex_lock(&priv->mutex);
c848d0af
JK		 5584 if ((priv->ieee->iw_mode == IW_MODE_ADHOC)) {
5585 IPW_DEBUG_MERGE("remove network %s\n",
5586 escape_essid(priv->essid,
5587 priv->essid_len));
5588 ipw_remove_current_network(priv);
43f66a6c 5589 }
c848d0af
JK		 5590
5591 ipw_disassociate(priv);
5592 priv->assoc_network = match.network;
4644151b 5593 mutex_unlock(&priv->mutex);
c848d0af 5594 return;
43f66a6c 5595 }
c848d0af 5596}
43f66a6c 5597
0edd5b44
JG		 5598static int ipw_best_network(struct ipw_priv *priv,
5599 struct ipw_network_match *match,
5600 struct ieee80211_network *network, int roaming)
43f66a6c
JK		 5601{
5602 struct ipw_supported_rates rates;
0795af57 5603 DECLARE_MAC_BUF(mac);
43f66a6c
JK		 5604
5605 /* Verify that this network's capability is compatible with the
5606 * current mode (AdHoc or Infrastructure) */
5607 if ((priv->ieee->iw_mode == IW_MODE_INFRA &&
2474385e 5608 !(network->capability & WLAN_CAPABILITY_ESS)) ||
43f66a6c
JK		 5609 (priv->ieee->iw_mode == IW_MODE_ADHOC &&
5610 !(network->capability & WLAN_CAPABILITY_IBSS))) {
0795af57 5611 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded due to "
bf79451e 5612 "capability mismatch.\n",
43f66a6c 5613 escape_essid(network->ssid, network->ssid_len),
0795af57 5614 print_mac(mac, network->bssid));
43f66a6c
JK		 5615 return 0;
5616 }
5617
5618 /* If we do not have an ESSID for this AP, we can not associate with
5619 * it */
5620 if (network->flags & NETWORK_EMPTY_ESSID) {
0795af57 5621 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
43f66a6c
JK		 5622 "because of hidden ESSID.\n",
5623 escape_essid(network->ssid, network->ssid_len),
0795af57 5624 print_mac(mac, network->bssid));
43f66a6c
JK		 5625 return 0;
5626 }
bf79451e 5627
43f66a6c
JK		 5628 if (unlikely(roaming)) {
5629 /* If we are roaming, then ensure check if this is a valid
5630 * network to try and roam to */
5631 if ((network->ssid_len != match->network->ssid_len) ||
bf79451e 5632 memcmp(network->ssid, match->network->ssid,
43f66a6c 5633 network->ssid_len)) {
0795af57 5634 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
43f66a6c 5635 "because of non-network ESSID.\n",
bf79451e 5636 escape_essid(network->ssid,
43f66a6c 5637 network->ssid_len),
0795af57 5638 print_mac(mac, network->bssid));
43f66a6c
JK		 5639 return 0;
5640 }
5641 } else {
bf79451e
JG		 5642 /* If an ESSID has been configured then compare the broadcast
5643 * ESSID to ours */
5644 if ((priv->config & CFG_STATIC_ESSID) &&
43f66a6c 5645 ((network->ssid_len != priv->essid_len) ||
bf79451e 5646 memcmp(network->ssid, priv->essid,
43f66a6c
JK		 5647 min(network->ssid_len, priv->essid_len)))) {
5648 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
0edd5b44
JG		 5649 strncpy(escaped,
5650 escape_essid(network->ssid, network->ssid_len),
43f66a6c 5651 sizeof(escaped));
0795af57 5652 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
bf79451e 5653 "because of ESSID mismatch: '%s'.\n",
0795af57 5654 escaped, print_mac(mac, network->bssid),
0edd5b44
JG		 5655 escape_essid(priv->essid,
5656 priv->essid_len));
43f66a6c
JK		 5657 return 0;
5658 }
5659 }
5660
5661 /* If the old network rate is better than this one, don't bother
5662 * testing everything else. */
0edd5b44 5663 if (match->network && match->network->stats.rssi > network->stats.rssi) {
43f66a6c 5664 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
bf79451e
JG		 5665 strncpy(escaped,
5666 escape_essid(network->ssid, network->ssid_len),
43f66a6c 5667 sizeof(escaped));
0795af57
JP		 5668 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded because "
5669 "'%s (%s)' has a stronger signal.\n",
5670 escaped, print_mac(mac, network->bssid),
43f66a6c
JK		 5671 escape_essid(match->network->ssid,
5672 match->network->ssid_len),
0795af57 5673 print_mac(mac, match->network->bssid));
43f66a6c
JK		 5674 return 0;
5675 }
bf79451e 5676
43f66a6c
JK		 5677 /* If this network has already had an association attempt within the
5678 * last 3 seconds, do not try and associate again... */
5679 if (network->last_associate &&
ea2b26e0 5680 time_after(network->last_associate + (HZ * 3UL), jiffies)) {
0795af57 5681 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
c7b6a674 5682 "because of storming (%ums since last "
43f66a6c
JK		 5683 "assoc attempt).\n",
5684 escape_essid(network->ssid, network->ssid_len),
0795af57 5685 print_mac(mac, network->bssid),
2638bc39
ZY		 5686 jiffies_to_msecs(jiffies -
5687 network->last_associate));
43f66a6c
JK		 5688 return 0;
5689 }
5690
5691 /* Now go through and see if the requested network is valid... */
bf79451e 5692 if (priv->ieee->scan_age != 0 &&
ea2b26e0 5693 time_after(jiffies, network->last_scanned + priv->ieee->scan_age)) {
0795af57 5694 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
c7b6a674 5695 "because of age: %ums.\n",
43f66a6c 5696 escape_essid(network->ssid, network->ssid_len),
0795af57 5697 print_mac(mac, network->bssid),
2638bc39
ZY		 5698 jiffies_to_msecs(jiffies -
5699 network->last_scanned));
43f66a6c 5700 return 0;
bf79451e 5701 }
43f66a6c 5702
bf79451e 5703 if ((priv->config & CFG_STATIC_CHANNEL) &&
43f66a6c 5704 (network->channel != priv->channel)) {
0795af57 5705 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
43f66a6c
JK		 5706 "because of channel mismatch: %d != %d.\n",
5707 escape_essid(network->ssid, network->ssid_len),
0795af57 5708 print_mac(mac, network->bssid),
43f66a6c
JK		 5709 network->channel, priv->channel);
5710 return 0;
5711 }
bf79451e 5712
43f66a6c 5713 /* Verify privacy compatability */
bf79451e 5714 if (((priv->capability & CAP_PRIVACY_ON) ? 1 : 0) !=
43f66a6c 5715 ((network->capability & WLAN_CAPABILITY_PRIVACY) ? 1 : 0)) {
0795af57 5716 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
43f66a6c
JK		 5717 "because of privacy mismatch: %s != %s.\n",
5718 escape_essid(network->ssid, network->ssid_len),
0795af57 5719 print_mac(mac, network->bssid),
bf79451e 5720 priv->capability & CAP_PRIVACY_ON ? "on" :
43f66a6c 5721 "off",
bf79451e 5722 network->capability &
0edd5b44 5723 WLAN_CAPABILITY_PRIVACY ? "on" : "off");
43f66a6c
JK		 5724 return 0;
5725 }
bf79451e
JG		 5726
5727 if ((priv->config & CFG_STATIC_BSSID) &&
43f66a6c 5728 memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
0795af57
JP		 5729 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
5730 "because of BSSID mismatch: %s.\n",
43f66a6c 5731 escape_essid(network->ssid, network->ssid_len),
0795af57 5732 print_mac(mac, network->bssid), print_mac(mac, priv->bssid));
43f66a6c
JK		 5733 return 0;
5734 }
bf79451e 5735
43f66a6c
JK		 5736 /* Filter out any incompatible freq / mode combinations */
5737 if (!ieee80211_is_valid_mode(priv->ieee, network->mode)) {
0795af57 5738 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
43f66a6c
JK		 5739 "because of invalid frequency/mode "
5740 "combination.\n",
5741 escape_essid(network->ssid, network->ssid_len),
0795af57 5742 print_mac(mac, network->bssid));
43f66a6c
JK		 5743 return 0;
5744 }
bf79451e 5745
1fe0adb4 5746 /* Filter out invalid channel in current GEO */
1867b117 5747 if (!ieee80211_is_valid_channel(priv->ieee, network->channel)) {
0795af57 5748 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
1fe0adb4
LH		 5749 "because of invalid channel in current GEO\n",
5750 escape_essid(network->ssid, network->ssid_len),
0795af57 5751 print_mac(mac, network->bssid));
1fe0adb4
LH		 5752 return 0;
5753 }
5754
ea2b26e0
JK		 5755 /* Ensure that the rates supported by the driver are compatible with
5756 * this AP, including verification of basic rates (mandatory) */
5757 if (!ipw_compatible_rates(priv, network, &rates)) {
0795af57 5758 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
ea2b26e0
JK		 5759 "because configured rate mask excludes "
5760 "AP mandatory rate.\n",
5761 escape_essid(network->ssid, network->ssid_len),
0795af57 5762 print_mac(mac, network->bssid));
ea2b26e0
JK		 5763 return 0;
5764 }
5765
43f66a6c 5766 if (rates.num_rates == 0) {
0795af57 5767 IPW_DEBUG_ASSOC("Network '%s (%s)' excluded "
43f66a6c
JK		 5768 "because of no compatible rates.\n",
5769 escape_essid(network->ssid, network->ssid_len),
0795af57 5770 print_mac(mac, network->bssid));
43f66a6c
JK		 5771 return 0;
5772 }
bf79451e 5773
43f66a6c
JK		 5774 /* TODO: Perform any further minimal comparititive tests. We do not
5775 * want to put too much policy logic here; intelligent scan selection
5776 * should occur within a generic IEEE 802.11 user space tool. */
5777
5778 /* Set up 'new' AP to this network */
5779 ipw_copy_rates(&match->rates, &rates);
5780 match->network = network;
5781
0795af57 5782 IPW_DEBUG_ASSOC("Network '%s (%s)' is a viable match.\n",
43f66a6c 5783 escape_essid(network->ssid, network->ssid_len),
0795af57 5784 print_mac(mac, network->bssid));
43f66a6c
JK		 5785
5786 return 1;
5787}
5788
bf79451e 5789static void ipw_adhoc_create(struct ipw_priv *priv,
0edd5b44 5790 struct ieee80211_network *network)
43f66a6c 5791{
1867b117 5792 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
afbf30a2
JK		 5793 int i;
5794
43f66a6c
JK		 5795 /*
5796 * For the purposes of scanning, we can set our wireless mode
5797 * to trigger scans across combinations of bands, but when it
5798 * comes to creating a new ad-hoc network, we have tell the FW
5799 * exactly which band to use.
5800 *
bf79451e 5801 * We also have the possibility of an invalid channel for the
43f66a6c
JK		 5802 * chossen band. Attempting to create a new ad-hoc network
5803 * with an invalid channel for wireless mode will trigger a
5804 * FW fatal error.
afbf30a2 5805 *
43f66a6c 5806 */
1867b117 5807 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
afbf30a2
JK		 5808 case IEEE80211_52GHZ_BAND:
5809 network->mode = IEEE_A;
1867b117 5810 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
5d9428de 5811 BUG_ON(i == -1);
afbf30a2
JK		 5812 if (geo->a[i].flags & IEEE80211_CH_PASSIVE_ONLY) {
5813 IPW_WARNING("Overriding invalid channel\n");
5814 priv->channel = geo->a[0].channel;
5815 }
5816 break;
5817
5818 case IEEE80211_24GHZ_BAND:
5819 if (priv->ieee->mode & IEEE_G)
5820 network->mode = IEEE_G;
5821 else
5822 network->mode = IEEE_B;
1867b117 5823 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
5d9428de 5824 BUG_ON(i == -1);
1fe0adb4
LH		 5825 if (geo->bg[i].flags & IEEE80211_CH_PASSIVE_ONLY) {
5826 IPW_WARNING("Overriding invalid channel\n");
5827 priv->channel = geo->bg[0].channel;
5828 }
afbf30a2
JK		 5829 break;
5830
5831 default:
43f66a6c
JK		 5832 IPW_WARNING("Overriding invalid channel\n");
5833 if (priv->ieee->mode & IEEE_A) {
5834 network->mode = IEEE_A;
b095c381 5835 priv->channel = geo->a[0].channel;
43f66a6c
JK		 5836 } else if (priv->ieee->mode & IEEE_G) {
5837 network->mode = IEEE_G;
b095c381 5838 priv->channel = geo->bg[0].channel;
43f66a6c
JK		 5839 } else {
5840 network->mode = IEEE_B;
b095c381 5841 priv->channel = geo->bg[0].channel;
43f66a6c 5842 }
afbf30a2
JK		 5843 break;
5844 }
43f66a6c
JK		 5845
5846 network->channel = priv->channel;
5847 priv->config |= CFG_ADHOC_PERSIST;
5848 ipw_create_bssid(priv, network->bssid);
5849 network->ssid_len = priv->essid_len;
5850 memcpy(network->ssid, priv->essid, priv->essid_len);
5851 memset(&network->stats, 0, sizeof(network->stats));
5852 network->capability = WLAN_CAPABILITY_IBSS;
ea2b26e0
JK		 5853 if (!(priv->config & CFG_PREAMBLE_LONG))
5854 network->capability |= WLAN_CAPABILITY_SHORT_PREAMBLE;
43f66a6c
JK		 5855 if (priv->capability & CAP_PRIVACY_ON)
5856 network->capability |= WLAN_CAPABILITY_PRIVACY;
5857 network->rates_len = min(priv->rates.num_rates, MAX_RATES_LENGTH);
0edd5b44 5858 memcpy(network->rates, priv->rates.supported_rates, network->rates_len);
43f66a6c 5859 network->rates_ex_len = priv->rates.num_rates - network->rates_len;
bf79451e 5860 memcpy(network->rates_ex,
43f66a6c
JK		 5861 &priv->rates.supported_rates[network->rates_len],
5862 network->rates_ex_len);
5863 network->last_scanned = 0;
5864 network->flags = 0;
5865 network->last_associate = 0;
5866 network->time_stamp[0] = 0;
5867 network->time_stamp[1] = 0;
0edd5b44
JG		 5868 network->beacon_interval = 100; /* Default */
5869 network->listen_interval = 10; /* Default */
5870 network->atim_window = 0; /* Default */
43f66a6c
JK		 5871 network->wpa_ie_len = 0;
5872 network->rsn_ie_len = 0;
43f66a6c
JK		 5873}
5874
b095c381
JK		 5875static void ipw_send_tgi_tx_key(struct ipw_priv *priv, int type, int index)
5876{
0a7bcf26 5877 struct ipw_tgi_tx_key key;
b095c381
JK		 5878
5879 if (!(priv->ieee->sec.flags & (1 << index)))
5880 return;
5881
0a7bcf26
ZY		 5882 key.key_id = index;
5883 memcpy(key.key, priv->ieee->sec.keys[index], SCM_TEMPORAL_KEY_LENGTH);
5884 key.security_type = type;
5885 key.station_index = 0; /* always 0 for BSS */
5886 key.flags = 0;
b095c381 5887 /* 0 for new key; previous value of counter (after fatal error) */
851ca268
ZY		 5888 key.tx_counter[0] = cpu_to_le32(0);
5889 key.tx_counter[1] = cpu_to_le32(0);
b095c381 5890
0a7bcf26 5891 ipw_send_cmd_pdu(priv, IPW_CMD_TGI_TX_KEY, sizeof(key), &key);
b095c381
JK		 5892}
5893
5894static void ipw_send_wep_keys(struct ipw_priv *priv, int type)
43f66a6c 5895{
0a7bcf26 5896 struct ipw_wep_key key;
43f66a6c 5897 int i;
43f66a6c 5898
0a7bcf26
ZY		 5899 key.cmd_id = DINO_CMD_WEP_KEY;
5900 key.seq_num = 0;
43f66a6c 5901
b095c381
JK		 5902 /* Note: AES keys cannot be set for multiple times.
5903 * Only set it at the first time. */
bf79451e 5904 for (i = 0; i < 4; i++) {
0a7bcf26 5905 key.key_index = i | type;
b095c381 5906 if (!(priv->ieee->sec.flags & (1 << i))) {
0a7bcf26 5907 key.key_size = 0;
b095c381 5908 continue;
43f66a6c
JK		 5909 }
5910
0a7bcf26
ZY		 5911 key.key_size = priv->ieee->sec.key_sizes[i];
5912 memcpy(key.key, priv->ieee->sec.keys[i], key.key_size);
b095c381 5913
0a7bcf26 5914 ipw_send_cmd_pdu(priv, IPW_CMD_WEP_KEY, sizeof(key), &key);
bf79451e 5915 }
43f66a6c
JK		 5916}
5917
1fbfea54 5918static void ipw_set_hw_decrypt_unicast(struct ipw_priv *priv, int level)
43f66a6c 5919{
1fbfea54 5920 if (priv->ieee->host_encrypt)
43f66a6c 5921 return;
43f66a6c 5922
1fbfea54
ZY		 5923 switch (level) {
5924 case SEC_LEVEL_3:
5925 priv->sys_config.disable_unicast_decryption = 0;
5926 priv->ieee->host_decrypt = 0;
5927 break;
5928 case SEC_LEVEL_2:
5929 priv->sys_config.disable_unicast_decryption = 1;
5930 priv->ieee->host_decrypt = 1;
5931 break;
5932 case SEC_LEVEL_1:
5933 priv->sys_config.disable_unicast_decryption = 0;
5934 priv->ieee->host_decrypt = 0;
5935 break;
5936 case SEC_LEVEL_0:
5937 priv->sys_config.disable_unicast_decryption = 1;
5938 break;
5939 default:
5940 break;
5941 }
5942}
5943
5944static void ipw_set_hw_decrypt_multicast(struct ipw_priv *priv, int level)
5945{
5946 if (priv->ieee->host_encrypt)
5947 return;
5948
5949 switch (level) {
5950 case SEC_LEVEL_3:
5951 priv->sys_config.disable_multicast_decryption = 0;
5952 break;
5953 case SEC_LEVEL_2:
5954 priv->sys_config.disable_multicast_decryption = 1;
5955 break;
5956 case SEC_LEVEL_1:
5957 priv->sys_config.disable_multicast_decryption = 0;
5958 break;
5959 case SEC_LEVEL_0:
5960 priv->sys_config.disable_multicast_decryption = 1;
5961 break;
5962 default:
5963 break;
5964 }
5965}
5966
b095c381
JK		 5967static void ipw_set_hwcrypto_keys(struct ipw_priv *priv)
5968{
5969 switch (priv->ieee->sec.level) {
5970 case SEC_LEVEL_3:
d8bad6df
ZY		 5971 if (priv->ieee->sec.flags & SEC_ACTIVE_KEY)
5972 ipw_send_tgi_tx_key(priv,
5973 DCT_FLAG_EXT_SECURITY_CCM,
5974 priv->ieee->sec.active_key);
afbf30a2 5975
567deaf6
HL		 5976 if (!priv->ieee->host_mc_decrypt)
5977 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_CCM);
b095c381
JK		 5978 break;
5979 case SEC_LEVEL_2:
d8bad6df
ZY		 5980 if (priv->ieee->sec.flags & SEC_ACTIVE_KEY)
5981 ipw_send_tgi_tx_key(priv,
5982 DCT_FLAG_EXT_SECURITY_TKIP,
5983 priv->ieee->sec.active_key);
b095c381
JK		 5984 break;
5985 case SEC_LEVEL_1:
5986 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_WEP);
29cb843e
HL		 5987 ipw_set_hw_decrypt_unicast(priv, priv->ieee->sec.level);
5988 ipw_set_hw_decrypt_multicast(priv, priv->ieee->sec.level);
b095c381
JK		 5989 break;
5990 case SEC_LEVEL_0:
5991 default:
5992 break;
5993 }
5994}
5995
43f66a6c
JK		 5996static void ipw_adhoc_check(void *data)
5997{
5998 struct ipw_priv *priv = data;
bf79451e 5999
afbf30a2 6000 if (priv->missed_adhoc_beacons++ > priv->disassociate_threshold &&
43f66a6c 6001 !(priv->config & CFG_ADHOC_PERSIST)) {
afbf30a2
JK		 6002 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
6003 IPW_DL_STATE | IPW_DL_ASSOC,
6004 "Missed beacon: %d - disassociate\n",
6005 priv->missed_adhoc_beacons);
43f66a6c
JK		 6006 ipw_remove_current_network(priv);
6007 ipw_disassociate(priv);
6008 return;
6009 }
6010
bf79451e 6011 queue_delayed_work(priv->workqueue, &priv->adhoc_check,
43f66a6c
JK		 6012 priv->assoc_request.beacon_interval);
6013}
6014
c4028958 6015static void ipw_bg_adhoc_check(struct work_struct *work)
c848d0af 6016{
c4028958
DH		 6017 struct ipw_priv *priv =
6018 container_of(work, struct ipw_priv, adhoc_check.work);
4644151b 6019 mutex_lock(&priv->mutex);
c4028958 6020 ipw_adhoc_check(priv);
4644151b 6021 mutex_unlock(&priv->mutex);
c848d0af
JK		 6022}
6023
43f66a6c
JK		 6024static void ipw_debug_config(struct ipw_priv *priv)
6025{
0795af57 6026 DECLARE_MAC_BUF(mac);
43f66a6c
JK		 6027 IPW_DEBUG_INFO("Scan completed, no valid APs matched "
6028 "[CFG 0x%08X]\n", priv->config);
6029 if (priv->config & CFG_STATIC_CHANNEL)
0edd5b44 6030 IPW_DEBUG_INFO("Channel locked to %d\n", priv->channel);
43f66a6c
JK		 6031 else
6032 IPW_DEBUG_INFO("Channel unlocked.\n");
6033 if (priv->config & CFG_STATIC_ESSID)
bf79451e 6034 IPW_DEBUG_INFO("ESSID locked to '%s'\n",
0edd5b44 6035 escape_essid(priv->essid, priv->essid_len));
43f66a6c
JK		 6036 else
6037 IPW_DEBUG_INFO("ESSID unlocked.\n");
6038 if (priv->config & CFG_STATIC_BSSID)
0795af57
JP		 6039 IPW_DEBUG_INFO("BSSID locked to %s\n",
6040 print_mac(mac, priv->bssid));
43f66a6c
JK		 6041 else
6042 IPW_DEBUG_INFO("BSSID unlocked.\n");
6043 if (priv->capability & CAP_PRIVACY_ON)
6044 IPW_DEBUG_INFO("PRIVACY on\n");
6045 else
6046 IPW_DEBUG_INFO("PRIVACY off\n");
6047 IPW_DEBUG_INFO("RATE MASK: 0x%08X\n", priv->rates_mask);
6048}
43f66a6c 6049
858119e1 6050static void ipw_set_fixed_rate(struct ipw_priv *priv, int mode)
43f66a6c
JK		 6051{
6052 /* TODO: Verify that this works... */
6053 struct ipw_fixed_rate fr = {
6054 .tx_rates = priv->rates_mask
6055 };
6056 u32 reg;
6057 u16 mask = 0;
6058
bf79451e 6059 /* Identify 'current FW band' and match it with the fixed
43f66a6c 6060 * Tx rates */
bf79451e 6061
43f66a6c 6062 switch (priv->ieee->freq_band) {
0edd5b44 6063 case IEEE80211_52GHZ_BAND: /* A only */
43f66a6c
JK		 6064 /* IEEE_A */
6065 if (priv->rates_mask & ~IEEE80211_OFDM_RATES_MASK) {
6066 /* Invalid fixed rate mask */
ea2b26e0
JK		 6067 IPW_DEBUG_WX
6068 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 6069 fr.tx_rates = 0;
6070 break;
6071 }
bf79451e 6072
43f66a6c
JK		 6073 fr.tx_rates >>= IEEE80211_OFDM_SHIFT_MASK_A;
6074 break;
6075
0edd5b44 6076 default: /* 2.4Ghz or Mixed */
43f66a6c 6077 /* IEEE_B */
b095c381 6078 if (mode == IEEE_B) {
43f66a6c
JK		 6079 if (fr.tx_rates & ~IEEE80211_CCK_RATES_MASK) {
6080 /* Invalid fixed rate mask */
ea2b26e0
JK		 6081 IPW_DEBUG_WX
6082 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 6083 fr.tx_rates = 0;
6084 }
6085 break;
bf79451e 6086 }
43f66a6c
JK		 6087
6088 /* IEEE_G */
6089 if (fr.tx_rates & ~(IEEE80211_CCK_RATES_MASK |
6090 IEEE80211_OFDM_RATES_MASK)) {
6091 /* Invalid fixed rate mask */
ea2b26e0
JK		 6092 IPW_DEBUG_WX
6093 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 6094 fr.tx_rates = 0;
6095 break;
6096 }
bf79451e 6097
43f66a6c
JK		 6098 if (IEEE80211_OFDM_RATE_6MB_MASK & fr.tx_rates) {
6099 mask |= (IEEE80211_OFDM_RATE_6MB_MASK >> 1);
6100 fr.tx_rates &= ~IEEE80211_OFDM_RATE_6MB_MASK;
6101 }
bf79451e 6102
43f66a6c
JK		 6103 if (IEEE80211_OFDM_RATE_9MB_MASK & fr.tx_rates) {
6104 mask |= (IEEE80211_OFDM_RATE_9MB_MASK >> 1);
6105 fr.tx_rates &= ~IEEE80211_OFDM_RATE_9MB_MASK;
6106 }
bf79451e 6107
43f66a6c
JK		 6108 if (IEEE80211_OFDM_RATE_12MB_MASK & fr.tx_rates) {
6109 mask |= (IEEE80211_OFDM_RATE_12MB_MASK >> 1);
6110 fr.tx_rates &= ~IEEE80211_OFDM_RATE_12MB_MASK;
6111 }
bf79451e 6112
43f66a6c
JK		 6113 fr.tx_rates |= mask;
6114 break;
6115 }
6116
6117 reg = ipw_read32(priv, IPW_MEM_FIXED_OVERRIDE);
0edd5b44 6118 ipw_write_reg32(priv, reg, *(u32 *) & fr);
43f66a6c
JK		 6119}
6120
ea2b26e0 6121static void ipw_abort_scan(struct ipw_priv *priv)
43f66a6c
JK		 6122{
6123 int err;
6124
ea2b26e0
JK		 6125 if (priv->status & STATUS_SCAN_ABORTING) {
6126 IPW_DEBUG_HC("Ignoring concurrent scan abort request.\n");
6127 return;
6128 }
6129 priv->status |= STATUS_SCAN_ABORTING;
43f66a6c 6130
ea2b26e0
JK		 6131 err = ipw_send_scan_abort(priv);
6132 if (err)
6133 IPW_DEBUG_HC("Request to abort scan failed.\n");
6134}
6135
afbf30a2
JK		 6136static void ipw_add_scan_channels(struct ipw_priv *priv,
6137 struct ipw_scan_request_ext *scan,
6138 int scan_type)
ea2b26e0 6139{
ea2b26e0 6140 int channel_index = 0;
b095c381 6141 const struct ieee80211_geo *geo;
afbf30a2 6142 int i;
b095c381 6143
1867b117 6144 geo = ieee80211_get_geo(priv->ieee);
43f66a6c 6145
afbf30a2
JK		 6146 if (priv->ieee->freq_band & IEEE80211_52GHZ_BAND) {
6147 int start = channel_index;
6148 for (i = 0; i < geo->a_channels; i++) {
6149 if ((priv->status & STATUS_ASSOCIATED) &&
6150 geo->a[i].channel == priv->channel)
6151 continue;
6152 channel_index++;
6153 scan->channels_list[channel_index] = geo->a[i].channel;
1fe0adb4
LH		 6154 ipw_set_scan_type(scan, channel_index,
6155 geo->a[i].
6156 flags & IEEE80211_CH_PASSIVE_ONLY ?
6157 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN :
6158 scan_type);
afbf30a2
JK		 6159 }
6160
6161 if (start != channel_index) {
6162 scan->channels_list[start] = (u8) (IPW_A_MODE << 6) |
6163 (channel_index - start);
6164 channel_index++;
6165 }
6166 }
6167
6168 if (priv->ieee->freq_band & IEEE80211_24GHZ_BAND) {
6169 int start = channel_index;
6170 if (priv->config & CFG_SPEED_SCAN) {
1fe0adb4 6171 int index;
afbf30a2
JK		 6172 u8 channels[IEEE80211_24GHZ_CHANNELS] = {
6173 /* nop out the list */
6174 [0] = 0
6175 };
6176
6177 u8 channel;
6178 while (channel_index < IPW_SCAN_CHANNELS) {
6179 channel =
6180 priv->speed_scan[priv->speed_scan_pos];
6181 if (channel == 0) {
6182 priv->speed_scan_pos = 0;
6183 channel = priv->speed_scan[0];
6184 }
6185 if ((priv->status & STATUS_ASSOCIATED) &&
6186 channel == priv->channel) {
6187 priv->speed_scan_pos++;
6188 continue;
6189 }
6190
6191 /* If this channel has already been
6192 * added in scan, break from loop
6193 * and this will be the first channel
6194 * in the next scan.
6195 */
6196 if (channels[channel - 1] != 0)
6197 break;
6198
6199 channels[channel - 1] = 1;
6200 priv->speed_scan_pos++;
6201 channel_index++;
6202 scan->channels_list[channel_index] = channel;
1fe0adb4 6203 index =
1867b117 6204 ieee80211_channel_to_index(priv->ieee, channel);
afbf30a2 6205 ipw_set_scan_type(scan, channel_index,
1fe0adb4
LH		 6206 geo->bg[index].
6207 flags &
6208 IEEE80211_CH_PASSIVE_ONLY ?
6209 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN
6210 : scan_type);
afbf30a2
JK		 6211 }
6212 } else {
6213 for (i = 0; i < geo->bg_channels; i++) {
6214 if ((priv->status & STATUS_ASSOCIATED) &&
6215 geo->bg[i].channel == priv->channel)
6216 continue;
6217 channel_index++;
6218 scan->channels_list[channel_index] =
6219 geo->bg[i].channel;
6220 ipw_set_scan_type(scan, channel_index,
1fe0adb4
LH		 6221 geo->bg[i].
6222 flags &
6223 IEEE80211_CH_PASSIVE_ONLY ?
6224 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN
6225 : scan_type);
afbf30a2
JK		 6226 }
6227 }
6228
6229 if (start != channel_index) {
6230 scan->channels_list[start] = (u8) (IPW_B_MODE << 6) |
6231 (channel_index - start);
6232 }
6233 }
6234}
6235
094c4d2d 6236static int ipw_request_scan_helper(struct ipw_priv *priv, int type)
afbf30a2
JK		 6237{
6238 struct ipw_scan_request_ext scan;
6239 int err = 0, scan_type;
6240
6241 if (!(priv->status & STATUS_INIT) ||
6242 (priv->status & STATUS_EXIT_PENDING))
6243 return 0;
6244
4644151b 6245 mutex_lock(&priv->mutex);
afbf30a2 6246
ea2b26e0 6247 if (priv->status & STATUS_SCANNING) {
a613bffd 6248 IPW_DEBUG_HC("Concurrent scan requested. Ignoring.\n");
ea2b26e0 6249 priv->status |= STATUS_SCAN_PENDING;
b095c381 6250 goto done;
ea2b26e0 6251 }
43f66a6c 6252
afbf30a2
JK		 6253 if (!(priv->status & STATUS_SCAN_FORCED) &&
6254 priv->status & STATUS_SCAN_ABORTING) {
ea2b26e0
JK		 6255 IPW_DEBUG_HC("Scan request while abort pending. Queuing.\n");
6256 priv->status |= STATUS_SCAN_PENDING;
b095c381 6257 goto done;
43f66a6c
JK		 6258 }
6259
ea2b26e0
JK		 6260 if (priv->status & STATUS_RF_KILL_MASK) {
6261 IPW_DEBUG_HC("Aborting scan due to RF Kill activation\n");
6262 priv->status |= STATUS_SCAN_PENDING;
b095c381 6263 goto done;
ea2b26e0 6264 }
43f66a6c 6265
ea2b26e0 6266 memset(&scan, 0, sizeof(scan));
094c4d2d 6267 scan.full_scan_index = cpu_to_le32(ieee80211_get_scans(priv->ieee));
43f66a6c 6268
094c4d2d
ZY		 6269 if (type == IW_SCAN_TYPE_PASSIVE) {
6270 IPW_DEBUG_WX("use passive scanning\n");
6271 scan_type = IPW_SCAN_PASSIVE_FULL_DWELL_SCAN;
6272 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] =
6273 cpu_to_le16(120);
6274 ipw_add_scan_channels(priv, &scan, scan_type);
6275 goto send_request;
6276 }
6277
6278 /* Use active scan by default. */
6279 if (priv->config & CFG_SPEED_SCAN)
b095c381 6280 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
094c4d2d 6281 cpu_to_le16(30);
b095c381
JK		 6282 else
6283 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
094c4d2d 6284 cpu_to_le16(20);
b095c381 6285
a613bffd 6286 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN] =
094c4d2d 6287 cpu_to_le16(20);
43f66a6c 6288
094c4d2d 6289 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] = cpu_to_le16(120);
43f66a6c 6290
b095c381 6291#ifdef CONFIG_IPW2200_MONITOR
ea2b26e0 6292 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 6293 u8 channel;
b095c381 6294 u8 band = 0;
43f66a6c 6295
1867b117 6296 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
b095c381 6297 case IEEE80211_52GHZ_BAND:
ea2b26e0 6298 band = (u8) (IPW_A_MODE << 6) | 1;
b095c381
JK		 6299 channel = priv->channel;
6300 break;
ea2b26e0 6301
b095c381 6302 case IEEE80211_24GHZ_BAND:
ea2b26e0 6303 band = (u8) (IPW_B_MODE << 6) | 1;
b095c381
JK		 6304 channel = priv->channel;
6305 break;
ea2b26e0 6306
b095c381 6307 default:
ea2b26e0
JK		 6308 band = (u8) (IPW_B_MODE << 6) | 1;
6309 channel = 9;
b095c381 6310 break;
ea2b26e0
JK		 6311 }
6312
b095c381
JK		 6313 scan.channels_list[0] = band;
6314 scan.channels_list[1] = channel;
6315 ipw_set_scan_type(&scan, 1, IPW_SCAN_PASSIVE_FULL_DWELL_SCAN);
ea2b26e0 6316
b095c381
JK		 6317 /* NOTE: The card will sit on this channel for this time
6318 * period. Scan aborts are timing sensitive and frequently
6319 * result in firmware restarts. As such, it is best to
6320 * set a small dwell_time here and just keep re-issuing
6321 * scans. Otherwise fast channel hopping will not actually
6322 * hop channels.
6323 *
6324 * TODO: Move SPEED SCAN support to all modes and bands */
a613bffd 6325 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] =
094c4d2d 6326 cpu_to_le16(2000);
43f66a6c 6327 } else {
b095c381
JK		 6328#endif /* CONFIG_IPW2200_MONITOR */
6329 /* If we are roaming, then make this a directed scan for the
6330 * current network. Otherwise, ensure that every other scan
6331 * is a fast channel hop scan */
6332 if ((priv->status & STATUS_ROAMING)
6333 || (!(priv->status & STATUS_ASSOCIATED)
6334 && (priv->config & CFG_STATIC_ESSID)
6335 && (le32_to_cpu(scan.full_scan_index) % 2))) {
ea2b26e0
JK		 6336 err = ipw_send_ssid(priv, priv->essid, priv->essid_len);
6337 if (err) {
b095c381
JK		 6338 IPW_DEBUG_HC("Attempt to send SSID command "
6339 "failed.\n");
6340 goto done;
ea2b26e0 6341 }
43f66a6c 6342
ea2b26e0 6343 scan_type = IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN;
afbf30a2 6344 } else
ea2b26e0 6345 scan_type = IPW_SCAN_ACTIVE_BROADCAST_SCAN;
ea2b26e0 6346
afbf30a2 6347 ipw_add_scan_channels(priv, &scan, scan_type);
b095c381 6348#ifdef CONFIG_IPW2200_MONITOR
43f66a6c 6349 }
ea2b26e0 6350#endif
bf79451e 6351
094c4d2d 6352send_request:
ea2b26e0 6353 err = ipw_send_scan_request_ext(priv, &scan);
43f66a6c 6354 if (err) {
ea2b26e0 6355 IPW_DEBUG_HC("Sending scan command failed: %08X\n", err);
b095c381 6356 goto done;
43f66a6c
JK		 6357 }
6358
ea2b26e0
JK		 6359 priv->status |= STATUS_SCANNING;
6360 priv->status &= ~STATUS_SCAN_PENDING;
afbf30a2
JK		 6361 queue_delayed_work(priv->workqueue, &priv->scan_check,
6362 IPW_SCAN_CHECK_WATCHDOG);
094c4d2d 6363done:
4644151b 6364 mutex_unlock(&priv->mutex);
b095c381 6365 return err;
c848d0af
JK		 6366}
6367
c4028958
DH		 6368static void ipw_request_passive_scan(struct work_struct *work)
6369{
6370 struct ipw_priv *priv =
6371 container_of(work, struct ipw_priv, request_passive_scan);
6372 ipw_request_scan_helper(priv, IW_SCAN_TYPE_PASSIVE);
094c4d2d
ZY		 6373}
6374
c4028958
DH		 6375static void ipw_request_scan(struct work_struct *work)
6376{
6377 struct ipw_priv *priv =
6378 container_of(work, struct ipw_priv, request_scan.work);
6379 ipw_request_scan_helper(priv, IW_SCAN_TYPE_ACTIVE);
094c4d2d
ZY		 6380}
6381
c4028958 6382static void ipw_bg_abort_scan(struct work_struct *work)
c848d0af 6383{
c4028958
DH		 6384 struct ipw_priv *priv =
6385 container_of(work, struct ipw_priv, abort_scan);
4644151b 6386 mutex_lock(&priv->mutex);
c4028958 6387 ipw_abort_scan(priv);
4644151b 6388 mutex_unlock(&priv->mutex);
c848d0af
JK		 6389}
6390
ea2b26e0
JK		 6391static int ipw_wpa_enable(struct ipw_priv *priv, int value)
6392{
b095c381
JK		 6393 /* This is called when wpa_supplicant loads and closes the driver
6394 * interface. */
cdd1fa1e 6395 priv->ieee->wpa_enabled = value;
b095c381 6396 return 0;
ea2b26e0
JK		 6397}
6398
ea2b26e0
JK		 6399static int ipw_wpa_set_auth_algs(struct ipw_priv *priv, int value)
6400{
6401 struct ieee80211_device *ieee = priv->ieee;
6402 struct ieee80211_security sec = {
6403 .flags = SEC_AUTH_MODE,
6404 };
6405 int ret = 0;
6406
afbf30a2 6407 if (value & IW_AUTH_ALG_SHARED_KEY) {
ea2b26e0
JK		 6408 sec.auth_mode = WLAN_AUTH_SHARED_KEY;
6409 ieee->open_wep = 0;
afbf30a2 6410 } else if (value & IW_AUTH_ALG_OPEN_SYSTEM) {
ea2b26e0
JK		 6411 sec.auth_mode = WLAN_AUTH_OPEN;
6412 ieee->open_wep = 1;
3e234b4e
ZY		 6413 } else if (value & IW_AUTH_ALG_LEAP) {
6414 sec.auth_mode = WLAN_AUTH_LEAP;
6415 ieee->open_wep = 1;
afbf30a2
JK		 6416 } else
6417 return -EINVAL;
ea2b26e0
JK		 6418
6419 if (ieee->set_security)
6420 ieee->set_security(ieee->dev, &sec);
6421 else
6422 ret = -EOPNOTSUPP;
6423
6424 return ret;
6425}
6426
a73e22b2
AB		 6427static void ipw_wpa_assoc_frame(struct ipw_priv *priv, char *wpa_ie,
6428 int wpa_ie_len)
afbf30a2
JK		 6429{
6430 /* make sure WPA is enabled */
6431 ipw_wpa_enable(priv, 1);
afbf30a2
JK		 6432}
6433
6434static int ipw_set_rsn_capa(struct ipw_priv *priv,
6435 char *capabilities, int length)
6436{
afbf30a2
JK		 6437 IPW_DEBUG_HC("HOST_CMD_RSN_CAPABILITIES\n");
6438
0a7bcf26 6439 return ipw_send_cmd_pdu(priv, IPW_CMD_RSN_CAPABILITIES, length,
2638bc39 6440 capabilities);
afbf30a2
JK		 6441}
6442
b095c381 6443/*
afbf30a2
JK		 6444 * WE-18 support
6445 */
6446
6447/* SIOCSIWGENIE */
6448static int ipw_wx_set_genie(struct net_device *dev,
6449 struct iw_request_info *info,
6450 union iwreq_data *wrqu, char *extra)
ea2b26e0 6451{
afbf30a2
JK		 6452 struct ipw_priv *priv = ieee80211_priv(dev);
6453 struct ieee80211_device *ieee = priv->ieee;
6454 u8 *buf;
6455 int err = 0;
ea2b26e0 6456
afbf30a2
JK		 6457 if (wrqu->data.length > MAX_WPA_IE_LEN ||
6458 (wrqu->data.length && extra == NULL))
6459 return -EINVAL;
ea2b26e0 6460
afbf30a2
JK		 6461 if (wrqu->data.length) {
6462 buf = kmalloc(wrqu->data.length, GFP_KERNEL);
6463 if (buf == NULL) {
6464 err = -ENOMEM;
6465 goto out;
6466 }
6467
6468 memcpy(buf, extra, wrqu->data.length);
6469 kfree(ieee->wpa_ie);
6470 ieee->wpa_ie = buf;
6471 ieee->wpa_ie_len = wrqu->data.length;
b095c381 6472 } else {
afbf30a2
JK		 6473 kfree(ieee->wpa_ie);
6474 ieee->wpa_ie = NULL;
6475 ieee->wpa_ie_len = 0;
ea2b26e0 6476 }
afbf30a2
JK		 6477
6478 ipw_wpa_assoc_frame(priv, ieee->wpa_ie, ieee->wpa_ie_len);
6479 out:
afbf30a2
JK		 6480 return err;
6481}
6482
6483/* SIOCGIWGENIE */
6484static int ipw_wx_get_genie(struct net_device *dev,
6485 struct iw_request_info *info,
6486 union iwreq_data *wrqu, char *extra)
6487{
6488 struct ipw_priv *priv = ieee80211_priv(dev);
6489 struct ieee80211_device *ieee = priv->ieee;
6490 int err = 0;
6491
afbf30a2
JK		 6492 if (ieee->wpa_ie_len == 0 || ieee->wpa_ie == NULL) {
6493 wrqu->data.length = 0;
6494 goto out;
6495 }
6496
6497 if (wrqu->data.length < ieee->wpa_ie_len) {
6498 err = -E2BIG;
6499 goto out;
6500 }
6501
6502 wrqu->data.length = ieee->wpa_ie_len;
6503 memcpy(extra, ieee->wpa_ie, ieee->wpa_ie_len);
6504
6505 out:
afbf30a2
JK		 6506 return err;
6507}
6508
1fbfea54
ZY		 6509static int wext_cipher2level(int cipher)
6510{
6511 switch (cipher) {
6512 case IW_AUTH_CIPHER_NONE:
6513 return SEC_LEVEL_0;
6514 case IW_AUTH_CIPHER_WEP40:
6515 case IW_AUTH_CIPHER_WEP104:
6516 return SEC_LEVEL_1;
6517 case IW_AUTH_CIPHER_TKIP:
6518 return SEC_LEVEL_2;
6519 case IW_AUTH_CIPHER_CCMP:
6520 return SEC_LEVEL_3;
6521 default:
6522 return -1;
6523 }
6524}
6525
afbf30a2
JK		 6526/* SIOCSIWAUTH */
6527static int ipw_wx_set_auth(struct net_device *dev,
6528 struct iw_request_info *info,
6529 union iwreq_data *wrqu, char *extra)
6530{
6531 struct ipw_priv *priv = ieee80211_priv(dev);
6532 struct ieee80211_device *ieee = priv->ieee;
6533 struct iw_param *param = &wrqu->param;
6534 struct ieee80211_crypt_data *crypt;
6535 unsigned long flags;
6536 int ret = 0;
6537
6538 switch (param->flags & IW_AUTH_INDEX) {
6539 case IW_AUTH_WPA_VERSION:
1fbfea54 6540 break;
afbf30a2 6541 case IW_AUTH_CIPHER_PAIRWISE:
1fbfea54
ZY		 6542 ipw_set_hw_decrypt_unicast(priv,
6543 wext_cipher2level(param->value));
6544 break;
afbf30a2 6545 case IW_AUTH_CIPHER_GROUP:
1fbfea54
ZY		 6546 ipw_set_hw_decrypt_multicast(priv,
6547 wext_cipher2level(param->value));
6548 break;
afbf30a2
JK		 6549 case IW_AUTH_KEY_MGMT:
6550 /*
6551 * ipw2200 does not use these parameters
6552 */
6553 break;
6554
6555 case IW_AUTH_TKIP_COUNTERMEASURES:
6556 crypt = priv->ieee->crypt[priv->ieee->tx_keyidx];
991d1cc5 6557 if (!crypt || !crypt->ops->set_flags || !crypt->ops->get_flags)
afbf30a2 6558 break;
afbf30a2
JK		 6559
6560 flags = crypt->ops->get_flags(crypt->priv);
6561
6562 if (param->value)
6563 flags |= IEEE80211_CRYPTO_TKIP_COUNTERMEASURES;
6564 else
6565 flags &= ~IEEE80211_CRYPTO_TKIP_COUNTERMEASURES;
6566
6567 crypt->ops->set_flags(flags, crypt->priv);
6568
6569 break;
6570
6571 case IW_AUTH_DROP_UNENCRYPTED:{
6572 /* HACK:
6573 *
6574 * wpa_supplicant calls set_wpa_enabled when the driver
6575 * is loaded and unloaded, regardless of if WPA is being
6576 * used. No other calls are made which can be used to
6577 * determine if encryption will be used or not prior to
6578 * association being expected. If encryption is not being
6579 * used, drop_unencrypted is set to false, else true -- we
6580 * can use this to determine if the CAP_PRIVACY_ON bit should
6581 * be set.
6582 */
6583 struct ieee80211_security sec = {
6584 .flags = SEC_ENABLED,
6585 .enabled = param->value,
6586 };
6587 priv->ieee->drop_unencrypted = param->value;
6588 /* We only change SEC_LEVEL for open mode. Others
6589 * are set by ipw_wpa_set_encryption.
6590 */
6591 if (!param->value) {
6592 sec.flags |= SEC_LEVEL;
6593 sec.level = SEC_LEVEL_0;
6594 } else {
6595 sec.flags |= SEC_LEVEL;
6596 sec.level = SEC_LEVEL_1;
6597 }
6598 if (priv->ieee->set_security)
6599 priv->ieee->set_security(priv->ieee->dev, &sec);
6600 break;
6601 }
6602
6603 case IW_AUTH_80211_AUTH_ALG:
6604 ret = ipw_wpa_set_auth_algs(priv, param->value);
6605 break;
6606
6607 case IW_AUTH_WPA_ENABLED:
6608 ret = ipw_wpa_enable(priv, param->value);
e3c5a64e 6609 ipw_disassociate(priv);
afbf30a2
JK		 6610 break;
6611
6612 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6613 ieee->ieee802_1x = param->value;
6614 break;
6615
afbf30a2
JK		 6616 case IW_AUTH_PRIVACY_INVOKED:
6617 ieee->privacy_invoked = param->value;
6618 break;
6619
6620 default:
6621 return -EOPNOTSUPP;
6622 }
6623 return ret;
6624}
6625
6626/* SIOCGIWAUTH */
6627static int ipw_wx_get_auth(struct net_device *dev,
6628 struct iw_request_info *info,
6629 union iwreq_data *wrqu, char *extra)
6630{
6631 struct ipw_priv *priv = ieee80211_priv(dev);
6632 struct ieee80211_device *ieee = priv->ieee;
6633 struct ieee80211_crypt_data *crypt;
6634 struct iw_param *param = &wrqu->param;
6635 int ret = 0;
6636
6637 switch (param->flags & IW_AUTH_INDEX) {
6638 case IW_AUTH_WPA_VERSION:
6639 case IW_AUTH_CIPHER_PAIRWISE:
6640 case IW_AUTH_CIPHER_GROUP:
6641 case IW_AUTH_KEY_MGMT:
6642 /*
6643 * wpa_supplicant will control these internally
6644 */
6645 ret = -EOPNOTSUPP;
6646 break;
6647
6648 case IW_AUTH_TKIP_COUNTERMEASURES:
6649 crypt = priv->ieee->crypt[priv->ieee->tx_keyidx];
991d1cc5 6650 if (!crypt || !crypt->ops->get_flags)
afbf30a2 6651 break;
afbf30a2
JK		 6652
6653 param->value = (crypt->ops->get_flags(crypt->priv) &
6654 IEEE80211_CRYPTO_TKIP_COUNTERMEASURES) ? 1 : 0;
6655
6656 break;
6657
6658 case IW_AUTH_DROP_UNENCRYPTED:
6659 param->value = ieee->drop_unencrypted;
6660 break;
6661
6662 case IW_AUTH_80211_AUTH_ALG:
6663 param->value = ieee->sec.auth_mode;
6664 break;
6665
6666 case IW_AUTH_WPA_ENABLED:
6667 param->value = ieee->wpa_enabled;
6668 break;
6669
6670 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6671 param->value = ieee->ieee802_1x;
6672 break;
6673
6674 case IW_AUTH_ROAMING_CONTROL:
6675 case IW_AUTH_PRIVACY_INVOKED:
6676 param->value = ieee->privacy_invoked;
6677 break;
6678
6679 default:
6680 return -EOPNOTSUPP;
6681 }
6682 return 0;
6683}
6684
6685/* SIOCSIWENCODEEXT */
6686static int ipw_wx_set_encodeext(struct net_device *dev,
6687 struct iw_request_info *info,
6688 union iwreq_data *wrqu, char *extra)
6689{
6690 struct ipw_priv *priv = ieee80211_priv(dev);
6691 struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
6692
6693 if (hwcrypto) {
afbf30a2 6694 if (ext->alg == IW_ENCODE_ALG_TKIP) {
567deaf6
HL		 6695 /* IPW HW can't build TKIP MIC,
6696 host decryption still needed */
6697 if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
6698 priv->ieee->host_mc_decrypt = 1;
6699 else {
6700 priv->ieee->host_encrypt = 0;
6701 priv->ieee->host_encrypt_msdu = 1;
6702 priv->ieee->host_decrypt = 1;
6703 }
afbf30a2
JK		 6704 } else {
6705 priv->ieee->host_encrypt = 0;
6706 priv->ieee->host_encrypt_msdu = 0;
6707 priv->ieee->host_decrypt = 0;
567deaf6 6708 priv->ieee->host_mc_decrypt = 0;
afbf30a2
JK		 6709 }
6710 }
6711
6712 return ieee80211_wx_set_encodeext(priv->ieee, info, wrqu, extra);
6713}
6714
6715/* SIOCGIWENCODEEXT */
6716static int ipw_wx_get_encodeext(struct net_device *dev,
6717 struct iw_request_info *info,
6718 union iwreq_data *wrqu, char *extra)
6719{
6720 struct ipw_priv *priv = ieee80211_priv(dev);
6721 return ieee80211_wx_get_encodeext(priv->ieee, info, wrqu, extra);
6722}
6723
6724/* SIOCSIWMLME */
6725static int ipw_wx_set_mlme(struct net_device *dev,
6726 struct iw_request_info *info,
6727 union iwreq_data *wrqu, char *extra)
6728{
6729 struct ipw_priv *priv = ieee80211_priv(dev);
6730 struct iw_mlme *mlme = (struct iw_mlme *)extra;
6731 u16 reason;
6732
6733 reason = cpu_to_le16(mlme->reason_code);
6734
6735 switch (mlme->cmd) {
6736 case IW_MLME_DEAUTH:
67fd6b45 6737 /* silently ignore */
afbf30a2
JK		 6738 break;
6739
6740 case IW_MLME_DISASSOC:
6741 ipw_disassociate(priv);
6742 break;
6743
6744 default:
6745 return -EOPNOTSUPP;
6746 }
6747 return 0;
6748}
afbf30a2 6749
e43e3c1e 6750#ifdef CONFIG_IPW2200_QOS
afbf30a2
JK		 6751
6752/* QoS */
6753/*
6754* get the modulation type of the current network or
6755* the card current mode
6756*/
53d0bcf8 6757static u8 ipw_qos_current_mode(struct ipw_priv * priv)
afbf30a2
JK		 6758{
6759 u8 mode = 0;
6760
6761 if (priv->status & STATUS_ASSOCIATED) {
6762 unsigned long flags;
6763
6764 spin_lock_irqsave(&priv->ieee->lock, flags);
6765 mode = priv->assoc_network->mode;
6766 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6767 } else {
6768 mode = priv->ieee->mode;
6769 }
6770 IPW_DEBUG_QOS("QoS network/card mode %d \n", mode);
6771 return mode;
b095c381 6772}
ea2b26e0 6773
b095c381
JK		 6774/*
6775* Handle management frame beacon and probe response
6776*/
3b9990cb
JK		 6777static int ipw_qos_handle_probe_response(struct ipw_priv *priv,
6778 int active_network,
6779 struct ieee80211_network *network)
b095c381
JK		 6780{
6781 u32 size = sizeof(struct ieee80211_qos_parameters);
6782
afbf30a2 6783 if (network->capability & WLAN_CAPABILITY_IBSS)
b095c381
JK		 6784 network->qos_data.active = network->qos_data.supported;
6785
6786 if (network->flags & NETWORK_HAS_QOS_MASK) {
afbf30a2
JK		 6787 if (active_network &&
6788 (network->flags & NETWORK_HAS_QOS_PARAMETERS))
b095c381
JK		 6789 network->qos_data.active = network->qos_data.supported;
6790
6791 if ((network->qos_data.active == 1) && (active_network == 1) &&
6792 (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
6793 (network->qos_data.old_param_count !=
6794 network->qos_data.param_count)) {
6795 network->qos_data.old_param_count =
6796 network->qos_data.param_count;
6797 schedule_work(&priv->qos_activate);
afbf30a2
JK		 6798 IPW_DEBUG_QOS("QoS parameters change call "
6799 "qos_activate\n");
b095c381 6800 }
ea2b26e0 6801 } else {
afbf30a2
JK		 6802 if ((priv->ieee->mode == IEEE_B) || (network->mode == IEEE_B))
6803 memcpy(&network->qos_data.parameters,
b095c381 6804 &def_parameters_CCK, size);
afbf30a2
JK		 6805 else
6806 memcpy(&network->qos_data.parameters,
b095c381 6807 &def_parameters_OFDM, size);
afbf30a2 6808
b095c381
JK		 6809 if ((network->qos_data.active == 1) && (active_network == 1)) {
6810 IPW_DEBUG_QOS("QoS was disabled call qos_activate \n");
6811 schedule_work(&priv->qos_activate);
6812 }
6813
6814 network->qos_data.active = 0;
6815 network->qos_data.supported = 0;
ea2b26e0 6816 }
afbf30a2
JK		 6817 if ((priv->status & STATUS_ASSOCIATED) &&
6818 (priv->ieee->iw_mode == IW_MODE_ADHOC) && (active_network == 0)) {
6819 if (memcmp(network->bssid, priv->bssid, ETH_ALEN))
6820 if ((network->capability & WLAN_CAPABILITY_IBSS) &&
6821 !(network->flags & NETWORK_EMPTY_ESSID))
b095c381 6822 if ((network->ssid_len ==
afbf30a2
JK		 6823 priv->assoc_network->ssid_len) &&
6824 !memcmp(network->ssid,
6825 priv->assoc_network->ssid,
6826 network->ssid_len)) {
b095c381
JK		 6827 queue_work(priv->workqueue,
6828 &priv->merge_networks);
6829 }
b095c381 6830 }
ea2b26e0 6831
b095c381
JK		 6832 return 0;
6833}
6834
6835/*
6836* This function set up the firmware to support QoS. It sends
6837* IPW_CMD_QOS_PARAMETERS and IPW_CMD_WME_INFO
6838*/
6839static int ipw_qos_activate(struct ipw_priv *priv,
6840 struct ieee80211_qos_data *qos_network_data)
6841{
6842 int err;
6843 struct ieee80211_qos_parameters qos_parameters[QOS_QOS_SETS];
6844 struct ieee80211_qos_parameters *active_one = NULL;
6845 u32 size = sizeof(struct ieee80211_qos_parameters);
6846 u32 burst_duration;
6847 int i;
6848 u8 type;
6849
6850 type = ipw_qos_current_mode(priv);
6851
6852 active_one = &(qos_parameters[QOS_PARAM_SET_DEF_CCK]);
6853 memcpy(active_one, priv->qos_data.def_qos_parm_CCK, size);
6854 active_one = &(qos_parameters[QOS_PARAM_SET_DEF_OFDM]);
6855 memcpy(active_one, priv->qos_data.def_qos_parm_OFDM, size);
6856
6857 if (qos_network_data == NULL) {
6858 if (type == IEEE_B) {
6859 IPW_DEBUG_QOS("QoS activate network mode %d\n", type);
6860 active_one = &def_parameters_CCK;
6861 } else
6862 active_one = &def_parameters_OFDM;
6863
afbf30a2 6864 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6865 burst_duration = ipw_qos_get_burst_duration(priv);
6866 for (i = 0; i < QOS_QUEUE_NUM; i++)
afbf30a2 6867 qos_parameters[QOS_PARAM_SET_ACTIVE].tx_op_limit[i] =
851ca268 6868 (u16)burst_duration;
afbf30a2 6869 } else if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
b095c381
JK		 6870 if (type == IEEE_B) {
6871 IPW_DEBUG_QOS("QoS activate IBSS nework mode %d\n",
6872 type);
6873 if (priv->qos_data.qos_enable == 0)
6874 active_one = &def_parameters_CCK;
6875 else
6876 active_one = priv->qos_data.def_qos_parm_CCK;
6877 } else {
6878 if (priv->qos_data.qos_enable == 0)
6879 active_one = &def_parameters_OFDM;
6880 else
6881 active_one = priv->qos_data.def_qos_parm_OFDM;
6882 }
afbf30a2 6883 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6884 } else {
6885 unsigned long flags;
6886 int active;
6887
6888 spin_lock_irqsave(&priv->ieee->lock, flags);
6889 active_one = &(qos_network_data->parameters);
6890 qos_network_data->old_param_count =
6891 qos_network_data->param_count;
afbf30a2 6892 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6893 active = qos_network_data->supported;
6894 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6895
6896 if (active == 0) {
6897 burst_duration = ipw_qos_get_burst_duration(priv);
6898 for (i = 0; i < QOS_QUEUE_NUM; i++)
6899 qos_parameters[QOS_PARAM_SET_ACTIVE].
851ca268 6900 tx_op_limit[i] = (u16)burst_duration;
b095c381
JK		 6901 }
6902 }
6903
6904 IPW_DEBUG_QOS("QoS sending IPW_CMD_QOS_PARAMETERS\n");
851ca268
ZY		 6905 for (i = 0; i < 3; i++) {
6906 int j;
6907 for (j = 0; j < QOS_QUEUE_NUM; j++) {
6908 qos_parameters[i].cw_min[j] = cpu_to_le16(qos_parameters[i].cw_min[j]);
6909 qos_parameters[i].cw_max[j] = cpu_to_le16(qos_parameters[i].cw_max[j]);
6910 qos_parameters[i].tx_op_limit[j] = cpu_to_le16(qos_parameters[i].tx_op_limit[j]);
6911 }
6912 }
6913
afbf30a2
JK		 6914 err = ipw_send_qos_params_command(priv,
6915 (struct ieee80211_qos_parameters *)
6916 &(qos_parameters[0]));
b095c381
JK		 6917 if (err)
6918 IPW_DEBUG_QOS("QoS IPW_CMD_QOS_PARAMETERS failed\n");
6919
6920 return err;
6921}
6922
6923/*
6924* send IPW_CMD_WME_INFO to the firmware
6925*/
6926static int ipw_qos_set_info_element(struct ipw_priv *priv)
6927{
6928 int ret = 0;
6929 struct ieee80211_qos_information_element qos_info;
6930
6931 if (priv == NULL)
6932 return -1;
6933
6934 qos_info.elementID = QOS_ELEMENT_ID;
6935 qos_info.length = sizeof(struct ieee80211_qos_information_element) - 2;
6936
6937 qos_info.version = QOS_VERSION_1;
6938 qos_info.ac_info = 0;
6939
6940 memcpy(qos_info.qui, qos_oui, QOS_OUI_LEN);
6941 qos_info.qui_type = QOS_OUI_TYPE;
6942 qos_info.qui_subtype = QOS_OUI_INFO_SUB_TYPE;
6943
6944 ret = ipw_send_qos_info_command(priv, &qos_info);
6945 if (ret != 0) {
6946 IPW_DEBUG_QOS("QoS error calling ipw_send_qos_info_command\n");
6947 }
6948 return ret;
6949}
6950
6951/*
6952* Set the QoS parameter with the association request structure
6953*/
6954static int ipw_qos_association(struct ipw_priv *priv,
6955 struct ieee80211_network *network)
6956{
6957 int err = 0;
6958 struct ieee80211_qos_data *qos_data = NULL;
6959 struct ieee80211_qos_data ibss_data = {
6960 .supported = 1,
6961 .active = 1,
6962 };
6963
6964 switch (priv->ieee->iw_mode) {
6965 case IW_MODE_ADHOC:
5d9428de 6966 BUG_ON(!(network->capability & WLAN_CAPABILITY_IBSS));
b095c381
JK		 6967
6968 qos_data = &ibss_data;
6969 break;
6970
6971 case IW_MODE_INFRA:
6972 qos_data = &network->qos_data;
6973 break;
6974
6975 default:
6976 BUG();
6977 break;
6978 }
6979
6980 err = ipw_qos_activate(priv, qos_data);
6981 if (err) {
6982 priv->assoc_request.policy_support &= ~HC_QOS_SUPPORT_ASSOC;
6983 return err;
6984 }
6985
6986 if (priv->qos_data.qos_enable && qos_data->supported) {
6987 IPW_DEBUG_QOS("QoS will be enabled for this association\n");
6988 priv->assoc_request.policy_support |= HC_QOS_SUPPORT_ASSOC;
6989 return ipw_qos_set_info_element(priv);
6990 }
6991
6992 return 0;
6993}
6994
6995/*
0779bf2d
ML		 6996* handling the beaconing responses. if we get different QoS setting
6997* off the network from the associated setting, adjust the QoS
b095c381
JK		 6998* setting
6999*/
7000static int ipw_qos_association_resp(struct ipw_priv *priv,
7001 struct ieee80211_network *network)
7002{
7003 int ret = 0;
7004 unsigned long flags;
7005 u32 size = sizeof(struct ieee80211_qos_parameters);
7006 int set_qos_param = 0;
7007
afbf30a2
JK		 7008 if ((priv == NULL) || (network == NULL) ||
7009 (priv->assoc_network == NULL))
b095c381
JK		 7010 return ret;
7011
7012 if (!(priv->status & STATUS_ASSOCIATED))
7013 return ret;
7014
afbf30a2 7015 if ((priv->ieee->iw_mode != IW_MODE_INFRA))
b095c381 7016 return ret;
b095c381
JK		 7017
7018 spin_lock_irqsave(&priv->ieee->lock, flags);
7019 if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
afbf30a2 7020 memcpy(&priv->assoc_network->qos_data, &network->qos_data,
b095c381
JK		 7021 sizeof(struct ieee80211_qos_data));
7022 priv->assoc_network->qos_data.active = 1;
7023 if ((network->qos_data.old_param_count !=
7024 network->qos_data.param_count)) {
7025 set_qos_param = 1;
7026 network->qos_data.old_param_count =
7027 network->qos_data.param_count;
7028 }
7029
7030 } else {
afbf30a2
JK		 7031 if ((network->mode == IEEE_B) || (priv->ieee->mode == IEEE_B))
7032 memcpy(&priv->assoc_network->qos_data.parameters,
b095c381 7033 &def_parameters_CCK, size);
afbf30a2
JK		 7034 else
7035 memcpy(&priv->assoc_network->qos_data.parameters,
b095c381 7036 &def_parameters_OFDM, size);
b095c381
JK		 7037 priv->assoc_network->qos_data.active = 0;
7038 priv->assoc_network->qos_data.supported = 0;
7039 set_qos_param = 1;
7040 }
7041
7042 spin_unlock_irqrestore(&priv->ieee->lock, flags);
7043
7044 if (set_qos_param == 1)
7045 schedule_work(&priv->qos_activate);
7046
7047 return ret;
7048}
7049
7050static u32 ipw_qos_get_burst_duration(struct ipw_priv *priv)
7051{
7052 u32 ret = 0;
7053
7054 if ((priv == NULL))
7055 return 0;
7056
afbf30a2 7057 if (!(priv->ieee->modulation & IEEE80211_OFDM_MODULATION))
b095c381 7058 ret = priv->qos_data.burst_duration_CCK;
afbf30a2 7059 else
b095c381 7060 ret = priv->qos_data.burst_duration_OFDM;
afbf30a2 7061
b095c381
JK		 7062 return ret;
7063}
7064
7065/*
7066* Initialize the setting of QoS global
7067*/
7068static void ipw_qos_init(struct ipw_priv *priv, int enable,
7069 int burst_enable, u32 burst_duration_CCK,
7070 u32 burst_duration_OFDM)
7071{
7072 priv->qos_data.qos_enable = enable;
7073
7074 if (priv->qos_data.qos_enable) {
7075 priv->qos_data.def_qos_parm_CCK = &def_qos_parameters_CCK;
7076 priv->qos_data.def_qos_parm_OFDM = &def_qos_parameters_OFDM;
7077 IPW_DEBUG_QOS("QoS is enabled\n");
7078 } else {
7079 priv->qos_data.def_qos_parm_CCK = &def_parameters_CCK;
7080 priv->qos_data.def_qos_parm_OFDM = &def_parameters_OFDM;
7081 IPW_DEBUG_QOS("QoS is not enabled\n");
7082 }
7083
7084 priv->qos_data.burst_enable = burst_enable;
7085
7086 if (burst_enable) {
7087 priv->qos_data.burst_duration_CCK = burst_duration_CCK;
7088 priv->qos_data.burst_duration_OFDM = burst_duration_OFDM;
7089 } else {
7090 priv->qos_data.burst_duration_CCK = 0;
7091 priv->qos_data.burst_duration_OFDM = 0;
7092 }
7093}
7094
7095/*
7096* map the packet priority to the right TX Queue
7097*/
7098static int ipw_get_tx_queue_number(struct ipw_priv *priv, u16 priority)
7099{
7100 if (priority > 7 || !priv->qos_data.qos_enable)
7101 priority = 0;
7102
7103 return from_priority_to_tx_queue[priority] - 1;
7104}
7105
a5cf4fe6
ZY		 7106static int ipw_is_qos_active(struct net_device *dev,
7107 struct sk_buff *skb)
b095c381 7108{
a5cf4fe6 7109 struct ipw_priv *priv = ieee80211_priv(dev);
b095c381
JK		 7110 struct ieee80211_qos_data *qos_data = NULL;
7111 int active, supported;
a5cf4fe6
ZY		 7112 u8 *daddr = skb->data + ETH_ALEN;
7113 int unicast = !is_multicast_ether_addr(daddr);
b095c381
JK		 7114
7115 if (!(priv->status & STATUS_ASSOCIATED))
7116 return 0;
7117
7118 qos_data = &priv->assoc_network->qos_data;
7119
b095c381
JK		 7120 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
7121 if (unicast == 0)
7122 qos_data->active = 0;
7123 else
7124 qos_data->active = qos_data->supported;
7125 }
b095c381
JK		 7126 active = qos_data->active;
7127 supported = qos_data->supported;
afbf30a2
JK		 7128 IPW_DEBUG_QOS("QoS %d network is QoS active %d supported %d "
7129 "unicast %d\n",
7130 priv->qos_data.qos_enable, active, supported, unicast);
a5cf4fe6
ZY		 7131 if (active && priv->qos_data.qos_enable)
7132 return 1;
b095c381 7133
a5cf4fe6
ZY		 7134 return 0;
7135
7136}
7137/*
7138* add QoS parameter to the TX command
7139*/
7140static int ipw_qos_set_tx_queue_command(struct ipw_priv *priv,
7141 u16 priority,
7142 struct tfd_data *tfd)
7143{
7144 int tx_queue_id = 0;
7145
7146
7147 tx_queue_id = from_priority_to_tx_queue[priority] - 1;
7148 tfd->tx_flags_ext |= DCT_FLAG_EXT_QOS_ENABLED;
7149
7150 if (priv->qos_data.qos_no_ack_mask & (1UL << tx_queue_id)) {
7151 tfd->tx_flags &= ~DCT_FLAG_ACK_REQD;
851ca268 7152 tfd->tfd.tfd_26.mchdr.qos_ctrl |= cpu_to_le16(CTRL_QOS_NO_ACK);
a5cf4fe6
ZY		 7153 }
7154 return 0;
b095c381
JK		 7155}
7156
7157/*
7158* background support to run QoS activate functionality
7159*/
c4028958 7160static void ipw_bg_qos_activate(struct work_struct *work)
b095c381 7161{
c4028958
DH		 7162 struct ipw_priv *priv =
7163 container_of(work, struct ipw_priv, qos_activate);
b095c381
JK		 7164
7165 if (priv == NULL)
7166 return;
7167
4644151b 7168 mutex_lock(&priv->mutex);
b095c381
JK		 7169
7170 if (priv->status & STATUS_ASSOCIATED)
7171 ipw_qos_activate(priv, &(priv->assoc_network->qos_data));
7172
4644151b 7173 mutex_unlock(&priv->mutex);
b095c381
JK		 7174}
7175
3b9990cb
JK		 7176static int ipw_handle_probe_response(struct net_device *dev,
7177 struct ieee80211_probe_response *resp,
7178 struct ieee80211_network *network)
b095c381
JK		 7179{
7180 struct ipw_priv *priv = ieee80211_priv(dev);
3b9990cb
JK		 7181 int active_network = ((priv->status & STATUS_ASSOCIATED) &&
7182 (network == priv->assoc_network));
43f66a6c 7183
3b9990cb 7184 ipw_qos_handle_probe_response(priv, active_network, network);
43f66a6c 7185
3b9990cb
JK		 7186 return 0;
7187}
43f66a6c 7188
3b9990cb
JK		 7189static int ipw_handle_beacon(struct net_device *dev,
7190 struct ieee80211_beacon *resp,
7191 struct ieee80211_network *network)
7192{
7193 struct ipw_priv *priv = ieee80211_priv(dev);
7194 int active_network = ((priv->status & STATUS_ASSOCIATED) &&
7195 (network == priv->assoc_network));
bf79451e 7196
3b9990cb 7197 ipw_qos_handle_probe_response(priv, active_network, network);
bf79451e 7198
b095c381
JK		 7199 return 0;
7200}
bf79451e 7201
3b9990cb
JK		 7202static int ipw_handle_assoc_response(struct net_device *dev,
7203 struct ieee80211_assoc_response *resp,
7204 struct ieee80211_network *network)
7205{
7206 struct ipw_priv *priv = ieee80211_priv(dev);
7207 ipw_qos_association_resp(priv, network);
7208 return 0;
7209}
43f66a6c 7210
b095c381
JK		 7211static int ipw_send_qos_params_command(struct ipw_priv *priv, struct ieee80211_qos_parameters
7212 *qos_param)
7213{
4e22699f
ZY		 7214 return ipw_send_cmd_pdu(priv, IPW_CMD_QOS_PARAMETERS,
7215 sizeof(*qos_param) * 3, qos_param);
b095c381
JK		 7216}
7217
7218static int ipw_send_qos_info_command(struct ipw_priv *priv, struct ieee80211_qos_information_element
7219 *qos_param)
7220{
4e22699f
ZY		 7221 return ipw_send_cmd_pdu(priv, IPW_CMD_WME_INFO, sizeof(*qos_param),
7222 qos_param);
43f66a6c
JK		 7223}
7224
e43e3c1e 7225#endif /* CONFIG_IPW2200_QOS */
b095c381 7226
43f66a6c
JK		 7227static int ipw_associate_network(struct ipw_priv *priv,
7228 struct ieee80211_network *network,
0edd5b44 7229 struct ipw_supported_rates *rates, int roaming)
43f66a6c
JK		 7230{
7231 int err;
0795af57 7232 DECLARE_MAC_BUF(mac);
43f66a6c
JK		 7233
7234 if (priv->config & CFG_FIXED_RATE)
b095c381 7235 ipw_set_fixed_rate(priv, network->mode);
43f66a6c
JK		 7236
7237 if (!(priv->config & CFG_STATIC_ESSID)) {
bf79451e 7238 priv->essid_len = min(network->ssid_len,
0edd5b44 7239 (u8) IW_ESSID_MAX_SIZE);
43f66a6c
JK		 7240 memcpy(priv->essid, network->ssid, priv->essid_len);
7241 }
7242
7243 network->last_associate = jiffies;
7244
7245 memset(&priv->assoc_request, 0, sizeof(priv->assoc_request));
7246 priv->assoc_request.channel = network->channel;
3e234b4e
ZY		 7247 priv->assoc_request.auth_key = 0;
7248
43f66a6c 7249 if ((priv->capability & CAP_PRIVACY_ON) &&
3e234b4e 7250 (priv->ieee->sec.auth_mode == WLAN_AUTH_SHARED_KEY)) {
43f66a6c 7251 priv->assoc_request.auth_type = AUTH_SHARED_KEY;
b095c381
JK		 7252 priv->assoc_request.auth_key = priv->ieee->sec.active_key;
7253
1ba61e05 7254 if (priv->ieee->sec.level == SEC_LEVEL_1)
b095c381 7255 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_WEP);
3e234b4e
ZY		 7256
7257 } else if ((priv->capability & CAP_PRIVACY_ON) &&
7258 (priv->ieee->sec.auth_mode == WLAN_AUTH_LEAP))
7259 priv->assoc_request.auth_type = AUTH_LEAP;
7260 else
43f66a6c 7261 priv->assoc_request.auth_type = AUTH_OPEN;
43f66a6c 7262
b095c381 7263 if (priv->ieee->wpa_ie_len) {
ea2b26e0
JK		 7264 priv->assoc_request.policy_support = 0x02; /* RSN active */
7265 ipw_set_rsn_capa(priv, priv->ieee->wpa_ie,
7266 priv->ieee->wpa_ie_len);
7267 }
43f66a6c 7268
bf79451e
JG		 7269 /*
7270 * It is valid for our ieee device to support multiple modes, but
7271 * when it comes to associating to a given network we have to choose
43f66a6c
JK		 7272 * just one mode.
7273 */
7274 if (network->mode & priv->ieee->mode & IEEE_A)
7275 priv->assoc_request.ieee_mode = IPW_A_MODE;
7276 else if (network->mode & priv->ieee->mode & IEEE_G)
7277 priv->assoc_request.ieee_mode = IPW_G_MODE;
7278 else if (network->mode & priv->ieee->mode & IEEE_B)
7279 priv->assoc_request.ieee_mode = IPW_B_MODE;
7280
ea2b26e0
JK		 7281 priv->assoc_request.capability = network->capability;
7282 if ((network->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
7283 && !(priv->config & CFG_PREAMBLE_LONG)) {
7284 priv->assoc_request.preamble_length = DCT_FLAG_SHORT_PREAMBLE;
7285 } else {
7286 priv->assoc_request.preamble_length = DCT_FLAG_LONG_PREAMBLE;
7287
7288 /* Clear the short preamble if we won't be supporting it */
7289 priv->assoc_request.capability &=
7290 ~WLAN_CAPABILITY_SHORT_PREAMBLE;
7291 }
7292
afbf30a2
JK		 7293 /* Clear capability bits that aren't used in Ad Hoc */
7294 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
7295 priv->assoc_request.capability &=
7296 ~WLAN_CAPABILITY_SHORT_SLOT_TIME;
7297
43f66a6c 7298 IPW_DEBUG_ASSOC("%sssocation attempt: '%s', channel %d, "
ea2b26e0 7299 "802.11%c [%d], %s[:%s], enc=%s%s%s%c%c\n",
43f66a6c 7300 roaming ? "Rea" : "A",
bf79451e
JG		 7301 escape_essid(priv->essid, priv->essid_len),
7302 network->channel,
7303 ipw_modes[priv->assoc_request.ieee_mode],
7304 rates->num_rates,
ea2b26e0
JK		 7305 (priv->assoc_request.preamble_length ==
7306 DCT_FLAG_LONG_PREAMBLE) ? "long" : "short",
7307 network->capability &
7308 WLAN_CAPABILITY_SHORT_PREAMBLE ? "short" : "long",
43f66a6c 7309 priv->capability & CAP_PRIVACY_ON ? "on " : "off",
bf79451e
JG		 7310 priv->capability & CAP_PRIVACY_ON ?
7311 (priv->capability & CAP_SHARED_KEY ? "(shared)" :
43f66a6c
JK		 7312 "(open)") : "",
7313 priv->capability & CAP_PRIVACY_ON ? " key=" : "",
bf79451e 7314 priv->capability & CAP_PRIVACY_ON ?
b095c381 7315 '1' + priv->ieee->sec.active_key : '.',
0edd5b44 7316 priv->capability & CAP_PRIVACY_ON ? '.' : ' ');
43f66a6c
JK		 7317
7318 priv->assoc_request.beacon_interval = network->beacon_interval;
7319 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
0edd5b44 7320 (network->time_stamp[0] == 0) && (network->time_stamp[1] == 0)) {
43f66a6c
JK		 7321 priv->assoc_request.assoc_type = HC_IBSS_START;
7322 priv->assoc_request.assoc_tsf_msw = 0;
7323 priv->assoc_request.assoc_tsf_lsw = 0;
7324 } else {
7325 if (unlikely(roaming))
7326 priv->assoc_request.assoc_type = HC_REASSOCIATE;
7327 else
7328 priv->assoc_request.assoc_type = HC_ASSOCIATE;
7329 priv->assoc_request.assoc_tsf_msw = network->time_stamp[1];
7330 priv->assoc_request.assoc_tsf_lsw = network->time_stamp[0];
7331 }
7332
afbf30a2 7333 memcpy(priv->assoc_request.bssid, network->bssid, ETH_ALEN);
43f66a6c
JK		 7334
7335 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
7336 memset(&priv->assoc_request.dest, 0xFF, ETH_ALEN);
7337 priv->assoc_request.atim_window = network->atim_window;
7338 } else {
afbf30a2 7339 memcpy(priv->assoc_request.dest, network->bssid, ETH_ALEN);
43f66a6c
JK		 7340 priv->assoc_request.atim_window = 0;
7341 }
7342
43f66a6c 7343 priv->assoc_request.listen_interval = network->listen_interval;
bf79451e 7344
43f66a6c
JK		 7345 err = ipw_send_ssid(priv, priv->essid, priv->essid_len);
7346 if (err) {
7347 IPW_DEBUG_HC("Attempt to send SSID command failed.\n");
7348 return err;
7349 }
7350
7351 rates->ieee_mode = priv->assoc_request.ieee_mode;
7352 rates->purpose = IPW_RATE_CONNECT;
7353 ipw_send_supported_rates(priv, rates);
bf79451e 7354
43f66a6c
JK		 7355 if (priv->assoc_request.ieee_mode == IPW_G_MODE)
7356 priv->sys_config.dot11g_auto_detection = 1;
7357 else
7358 priv->sys_config.dot11g_auto_detection = 0;
c848d0af
JK		 7359
7360 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
7361 priv->sys_config.answer_broadcast_ssid_probe = 1;
7362 else
7363 priv->sys_config.answer_broadcast_ssid_probe = 0;
7364
d685b8c2 7365 err = ipw_send_system_config(priv);
43f66a6c
JK		 7366 if (err) {
7367 IPW_DEBUG_HC("Attempt to send sys config command failed.\n");
7368 return err;
7369 }
bf79451e 7370
43f66a6c 7371 IPW_DEBUG_ASSOC("Association sensitivity: %d\n", network->stats.rssi);
ea2b26e0 7372 err = ipw_set_sensitivity(priv, network->stats.rssi + IPW_RSSI_TO_DBM);
43f66a6c
JK		 7373 if (err) {
7374 IPW_DEBUG_HC("Attempt to send associate command failed.\n");
7375 return err;
7376 }
7377
7378 /*
7379 * If preemption is enabled, it is possible for the association
7380 * to complete before we return from ipw_send_associate. Therefore
7381 * we have to be sure and update our priviate data first.
7382 */
7383 priv->channel = network->channel;
7384 memcpy(priv->bssid, network->bssid, ETH_ALEN);
bf79451e 7385 priv->status |= STATUS_ASSOCIATING;
43f66a6c
JK		 7386 priv->status &= ~STATUS_SECURITY_UPDATED;
7387
7388 priv->assoc_network = network;
7389
e43e3c1e 7390#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 7391 ipw_qos_association(priv, network);
7392#endif
7393
43f66a6c
JK		 7394 err = ipw_send_associate(priv, &priv->assoc_request);
7395 if (err) {
7396 IPW_DEBUG_HC("Attempt to send associate command failed.\n");
7397 return err;
7398 }
bf79451e 7399
0795af57 7400 IPW_DEBUG(IPW_DL_STATE, "associating: '%s' %s \n",
43f66a6c 7401 escape_essid(priv->essid, priv->essid_len),
0795af57 7402 print_mac(mac, priv->bssid));
43f66a6c
JK		 7403
7404 return 0;
7405}
7406
7407static void ipw_roam(void *data)
7408{
7409 struct ipw_priv *priv = data;
7410 struct ieee80211_network *network = NULL;
7411 struct ipw_network_match match = {
7412 .network = priv->assoc_network
7413 };
7414
7415 /* The roaming process is as follows:
bf79451e
JG		 7416 *
7417 * 1. Missed beacon threshold triggers the roaming process by
43f66a6c
JK		 7418 * setting the status ROAM bit and requesting a scan.
7419 * 2. When the scan completes, it schedules the ROAM work
7420 * 3. The ROAM work looks at all of the known networks for one that
7421 * is a better network than the currently associated. If none
7422 * found, the ROAM process is over (ROAM bit cleared)
7423 * 4. If a better network is found, a disassociation request is
7424 * sent.
7425 * 5. When the disassociation completes, the roam work is again
7426 * scheduled. The second time through, the driver is no longer
7427 * associated, and the newly selected network is sent an
bf79451e 7428 * association request.
43f66a6c
JK		 7429 * 6. At this point ,the roaming process is complete and the ROAM
7430 * status bit is cleared.
7431 */
7432
7433 /* If we are no longer associated, and the roaming bit is no longer
7434 * set, then we are not actively roaming, so just return */
7435 if (!(priv->status & (STATUS_ASSOCIATED | STATUS_ROAMING)))
7436 return;
bf79451e 7437
43f66a6c 7438 if (priv->status & STATUS_ASSOCIATED) {
bf79451e 7439 /* First pass through ROAM process -- look for a better
43f66a6c 7440 * network */
a613bffd 7441 unsigned long flags;
43f66a6c
JK		 7442 u8 rssi = priv->assoc_network->stats.rssi;
7443 priv->assoc_network->stats.rssi = -128;
a613bffd 7444 spin_lock_irqsave(&priv->ieee->lock, flags);
43f66a6c
JK		 7445 list_for_each_entry(network, &priv->ieee->network_list, list) {
7446 if (network != priv->assoc_network)
7447 ipw_best_network(priv, &match, network, 1);
7448 }
a613bffd 7449 spin_unlock_irqrestore(&priv->ieee->lock, flags);
43f66a6c 7450 priv->assoc_network->stats.rssi = rssi;
bf79451e 7451
43f66a6c
JK		 7452 if (match.network == priv->assoc_network) {
7453 IPW_DEBUG_ASSOC("No better APs in this network to "
7454 "roam to.\n");
7455 priv->status &= ~STATUS_ROAMING;
7456 ipw_debug_config(priv);
7457 return;
7458 }
bf79451e 7459
43f66a6c
JK		 7460 ipw_send_disassociate(priv, 1);
7461 priv->assoc_network = match.network;
7462
7463 return;
bf79451e 7464 }
43f66a6c
JK		 7465
7466 /* Second pass through ROAM process -- request association */
7467 ipw_compatible_rates(priv, priv->assoc_network, &match.rates);
7468 ipw_associate_network(priv, priv->assoc_network, &match.rates, 1);
7469 priv->status &= ~STATUS_ROAMING;
7470}
7471
c4028958 7472static void ipw_bg_roam(struct work_struct *work)
c848d0af 7473{
c4028958
DH		 7474 struct ipw_priv *priv =
7475 container_of(work, struct ipw_priv, roam);
4644151b 7476 mutex_lock(&priv->mutex);
c4028958 7477 ipw_roam(priv);
4644151b 7478 mutex_unlock(&priv->mutex);
c848d0af
JK		 7479}
7480
7481static int ipw_associate(void *data)
43f66a6c
JK		 7482{
7483 struct ipw_priv *priv = data;
7484
7485 struct ieee80211_network *network = NULL;
7486 struct ipw_network_match match = {
7487 .network = NULL
7488 };
7489 struct ipw_supported_rates *rates;
7490 struct list_head *element;
a613bffd 7491 unsigned long flags;
43f66a6c 7492
b095c381
JK		 7493 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
7494 IPW_DEBUG_ASSOC("Not attempting association (monitor mode)\n");
7495 return 0;
7496 }
7497
c848d0af 7498 if (priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
afbf30a2
JK		 7499 IPW_DEBUG_ASSOC("Not attempting association (already in "
7500 "progress)\n");
c848d0af
JK		 7501 return 0;
7502 }
7503
e6324726
HL		 7504 if (priv->status & STATUS_DISASSOCIATING) {
7505 IPW_DEBUG_ASSOC("Not attempting association (in "
7506 "disassociating)\n ");
7507 queue_work(priv->workqueue, &priv->associate);
7508 return 0;
7509 }
7510
c848d0af 7511 if (!ipw_is_init(priv) || (priv->status & STATUS_SCANNING)) {
afbf30a2
JK		 7512 IPW_DEBUG_ASSOC("Not attempting association (scanning or not "
7513 "initialized)\n");
c848d0af
JK		 7514 return 0;
7515 }
43f66a6c
JK		 7516
7517 if (!(priv->config & CFG_ASSOCIATE) &&
7518 !(priv->config & (CFG_STATIC_ESSID |
0edd5b44 7519 CFG_STATIC_CHANNEL | CFG_STATIC_BSSID))) {
43f66a6c 7520 IPW_DEBUG_ASSOC("Not attempting association (associate=0)\n");
c848d0af 7521 return 0;
43f66a6c
JK		 7522 }
7523
a613bffd
JK		 7524 /* Protect our use of the network_list */
7525 spin_lock_irqsave(&priv->ieee->lock, flags);
bf79451e 7526 list_for_each_entry(network, &priv->ieee->network_list, list)
0edd5b44 7527 ipw_best_network(priv, &match, network, 0);
43f66a6c
JK		 7528
7529 network = match.network;
7530 rates = &match.rates;
7531
7532 if (network == NULL &&
7533 priv->ieee->iw_mode == IW_MODE_ADHOC &&
7534 priv->config & CFG_ADHOC_CREATE &&
7535 priv->config & CFG_STATIC_ESSID &&
a613bffd 7536 priv->config & CFG_STATIC_CHANNEL &&
43f66a6c
JK		 7537 !list_empty(&priv->ieee->network_free_list)) {
7538 element = priv->ieee->network_free_list.next;
0edd5b44 7539 network = list_entry(element, struct ieee80211_network, list);
43f66a6c
JK		 7540 ipw_adhoc_create(priv, network);
7541 rates = &priv->rates;
7542 list_del(element);
7543 list_add_tail(&network->list, &priv->ieee->network_list);
7544 }
a613bffd 7545 spin_unlock_irqrestore(&priv->ieee->lock, flags);
bf79451e 7546
43f66a6c
JK		 7547 /* If we reached the end of the list, then we don't have any valid
7548 * matching APs */
7549 if (!network) {
7550 ipw_debug_config(priv);
7551
b095c381
JK		 7552 if (!(priv->status & STATUS_SCANNING)) {
7553 if (!(priv->config & CFG_SPEED_SCAN))
7554 queue_delayed_work(priv->workqueue,
7555 &priv->request_scan,
7556 SCAN_INTERVAL);
7557 else
c4028958
DH		 7558 queue_delayed_work(priv->workqueue,
7559 &priv->request_scan, 0);
b095c381 7560 }
bf79451e 7561
c848d0af 7562 return 0;
43f66a6c
JK		 7563 }
7564
7565 ipw_associate_network(priv, network, rates, 0);
c848d0af
JK		 7566
7567 return 1;
7568}
7569
c4028958 7570static void ipw_bg_associate(struct work_struct *work)
c848d0af 7571{
c4028958
DH		 7572 struct ipw_priv *priv =
7573 container_of(work, struct ipw_priv, associate);
4644151b 7574 mutex_lock(&priv->mutex);
c4028958 7575 ipw_associate(priv);
4644151b 7576 mutex_unlock(&priv->mutex);
43f66a6c 7577}
bf79451e 7578
b095c381
JK		 7579static void ipw_rebuild_decrypted_skb(struct ipw_priv *priv,
7580 struct sk_buff *skb)
7581{
7582 struct ieee80211_hdr *hdr;
7583 u16 fc;
7584
7585 hdr = (struct ieee80211_hdr *)skb->data;
7586 fc = le16_to_cpu(hdr->frame_ctl);
7587 if (!(fc & IEEE80211_FCTL_PROTECTED))
7588 return;
7589
7590 fc &= ~IEEE80211_FCTL_PROTECTED;
7591 hdr->frame_ctl = cpu_to_le16(fc);
7592 switch (priv->ieee->sec.level) {
7593 case SEC_LEVEL_3:
7594 /* Remove CCMP HDR */
7595 memmove(skb->data + IEEE80211_3ADDR_LEN,
7596 skb->data + IEEE80211_3ADDR_LEN + 8,
7597 skb->len - IEEE80211_3ADDR_LEN - 8);
f4ff497d 7598 skb_trim(skb, skb->len - 16); /* CCMP_HDR_LEN + CCMP_MIC_LEN */
b095c381
JK		 7599 break;
7600 case SEC_LEVEL_2:
7601 break;
7602 case SEC_LEVEL_1:
7603 /* Remove IV */
7604 memmove(skb->data + IEEE80211_3ADDR_LEN,
7605 skb->data + IEEE80211_3ADDR_LEN + 4,
7606 skb->len - IEEE80211_3ADDR_LEN - 4);
f4ff497d 7607 skb_trim(skb, skb->len - 8); /* IV + ICV */
b095c381
JK		 7608 break;
7609 case SEC_LEVEL_0:
7610 break;
7611 default:
7612 printk(KERN_ERR "Unknow security level %d\n",
7613 priv->ieee->sec.level);
7614 break;
7615 }
43f66a6c 7616}
bf79451e 7617
b095c381
JK		 7618static void ipw_handle_data_packet(struct ipw_priv *priv,
7619 struct ipw_rx_mem_buffer *rxb,
7620 struct ieee80211_rx_stats *stats)
43f66a6c 7621{
567deaf6 7622 struct ieee80211_hdr_4addr *hdr;
43f66a6c
JK		 7623 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7624
7625 /* We received data from the HW, so stop the watchdog */
7626 priv->net_dev->trans_start = jiffies;
7627
bf79451e 7628 /* We only process data packets if the
43f66a6c 7629 * interface is open */
a613bffd 7630 if (unlikely((le16_to_cpu(pkt->u.frame.length) + IPW_RX_FRAME_SIZE) >
43f66a6c
JK		 7631 skb_tailroom(rxb->skb))) {
7632 priv->ieee->stats.rx_errors++;
7633 priv->wstats.discard.misc++;
7634 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7635 return;
7636 } else if (unlikely(!netif_running(priv->net_dev))) {
7637 priv->ieee->stats.rx_dropped++;
7638 priv->wstats.discard.misc++;
7639 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7640 return;
7641 }
7642
7643 /* Advance skb->data to the start of the actual payload */
aaa4d308 7644 skb_reserve(rxb->skb, offsetof(struct ipw_rx_packet, u.frame.data));
43f66a6c
JK		 7645
7646 /* Set the size of the skb to the size of the frame */
a613bffd 7647 skb_put(rxb->skb, le16_to_cpu(pkt->u.frame.length));
43f66a6c
JK		 7648
7649 IPW_DEBUG_RX("Rx packet of %d bytes.\n", rxb->skb->len);
7650
b095c381 7651 /* HW decrypt will not clear the WEP bit, MIC, PN, etc. */
567deaf6
HL		 7652 hdr = (struct ieee80211_hdr_4addr *)rxb->skb->data;
7653 if (priv->ieee->iw_mode != IW_MODE_MONITOR &&
3c19065a 7654 (is_multicast_ether_addr(hdr->addr1) ?
567deaf6 7655 !priv->ieee->host_mc_decrypt : !priv->ieee->host_decrypt))
b095c381
JK		 7656 ipw_rebuild_decrypted_skb(priv, rxb->skb);
7657
bf79451e 7658 if (!ieee80211_rx(priv->ieee, rxb->skb, stats))
43f66a6c 7659 priv->ieee->stats.rx_errors++;
a613bffd 7660 else { /* ieee80211_rx succeeded, so it now owns the SKB */
43f66a6c 7661 rxb->skb = NULL;
b095c381 7662 __ipw_led_activity_on(priv);
a613bffd 7663 }
43f66a6c
JK		 7664}
7665
459d4087 7666#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK		 7667static void ipw_handle_data_packet_monitor(struct ipw_priv *priv,
7668 struct ipw_rx_mem_buffer *rxb,
7669 struct ieee80211_rx_stats *stats)
7670{
7671 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7672 struct ipw_rx_frame *frame = &pkt->u.frame;
7673
7674 /* initial pull of some data */
7675 u16 received_channel = frame->received_channel;
7676 u8 antennaAndPhy = frame->antennaAndPhy;
7677 s8 antsignal = frame->rssi_dbm - IPW_RSSI_TO_DBM; /* call it signed anyhow */
7678 u16 pktrate = frame->rate;
7679
7680 /* Magic struct that slots into the radiotap header -- no reason
7681 * to build this manually element by element, we can write it much
7682 * more efficiently than we can parse it. ORDER MATTERS HERE */
d685b8c2 7683 struct ipw_rt_hdr *ipw_rt;
24a47dbd
MK		 7684
7685 short len = le16_to_cpu(pkt->u.frame.length);
7686
7687 /* We received data from the HW, so stop the watchdog */
7688 priv->net_dev->trans_start = jiffies;
7689
7690 /* We only process data packets if the
7691 * interface is open */
7692 if (unlikely((le16_to_cpu(pkt->u.frame.length) + IPW_RX_FRAME_SIZE) >
7693 skb_tailroom(rxb->skb))) {
7694 priv->ieee->stats.rx_errors++;
7695 priv->wstats.discard.misc++;
7696 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7697 return;
7698 } else if (unlikely(!netif_running(priv->net_dev))) {
7699 priv->ieee->stats.rx_dropped++;
7700 priv->wstats.discard.misc++;
7701 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7702 return;
7703 }
7704
7705 /* Libpcap 0.9.3+ can handle variable length radiotap, so we'll use
7706 * that now */
7707 if (len > IPW_RX_BUF_SIZE - sizeof(struct ipw_rt_hdr)) {
7708 /* FIXME: Should alloc bigger skb instead */
7709 priv->ieee->stats.rx_dropped++;
7710 priv->wstats.discard.misc++;
7711 IPW_DEBUG_DROP("Dropping too large packet in monitor\n");
7712 return;
7713 }
7714
7715 /* copy the frame itself */
7716 memmove(rxb->skb->data + sizeof(struct ipw_rt_hdr),
7717 rxb->skb->data + IPW_RX_FRAME_SIZE, len);
7718
7719 /* Zero the radiotap static buffer ... We only need to zero the bytes NOT
7720 * part of our real header, saves a little time.
7721 *
7722 * No longer necessary since we fill in all our data. Purge before merging
7723 * patch officially.
7724 * memset(rxb->skb->data + sizeof(struct ipw_rt_hdr), 0,
7725 * IEEE80211_RADIOTAP_HDRLEN - sizeof(struct ipw_rt_hdr));
7726 */
7727
7728 ipw_rt = (struct ipw_rt_hdr *)rxb->skb->data;
7729
7730 ipw_rt->rt_hdr.it_version = PKTHDR_RADIOTAP_VERSION;
7731 ipw_rt->rt_hdr.it_pad = 0; /* always good to zero */
7732 ipw_rt->rt_hdr.it_len = sizeof(struct ipw_rt_hdr); /* total header+data */
7733
7734 /* Big bitfield of all the fields we provide in radiotap */
7735 ipw_rt->rt_hdr.it_present =
4b1f8a99
ZY		 7736 ((1 << IEEE80211_RADIOTAP_TSFT) |
7737 (1 << IEEE80211_RADIOTAP_FLAGS) |
24a47dbd
MK		 7738 (1 << IEEE80211_RADIOTAP_RATE) |
7739 (1 << IEEE80211_RADIOTAP_CHANNEL) |
7740 (1 << IEEE80211_RADIOTAP_DBM_ANTSIGNAL) |
d685b8c2 7741 (1 << IEEE80211_RADIOTAP_DBM_ANTNOISE) |
24a47dbd
MK		 7742 (1 << IEEE80211_RADIOTAP_ANTENNA));
7743
7744 /* Zero the flags, we'll add to them as we go */
7745 ipw_rt->rt_flags = 0;
4b1f8a99
ZY		 7746 ipw_rt->rt_tsf = (u64)(frame->parent_tsf[3] << 24 |
7747 frame->parent_tsf[2] << 16 |
7748 frame->parent_tsf[1] << 8 |
7749 frame->parent_tsf[0]);
24a47dbd
MK		 7750
7751 /* Convert signal to DBM */
7752 ipw_rt->rt_dbmsignal = antsignal;
4b1f8a99 7753 ipw_rt->rt_dbmnoise = frame->noise;
24a47dbd
MK		 7754
7755 /* Convert the channel data and set the flags */
7756 ipw_rt->rt_channel = cpu_to_le16(ieee80211chan2mhz(received_channel));
7757 if (received_channel > 14) { /* 802.11a */
7758 ipw_rt->rt_chbitmask =
7759 cpu_to_le16((IEEE80211_CHAN_OFDM | IEEE80211_CHAN_5GHZ));
7760 } else if (antennaAndPhy & 32) { /* 802.11b */
7761 ipw_rt->rt_chbitmask =
7762 cpu_to_le16((IEEE80211_CHAN_CCK | IEEE80211_CHAN_2GHZ));
7763 } else { /* 802.11g */
7764 ipw_rt->rt_chbitmask =
7765 (IEEE80211_CHAN_OFDM | IEEE80211_CHAN_2GHZ);
7766 }
7767
7768 /* set the rate in multiples of 500k/s */
7769 switch (pktrate) {
7770 case IPW_TX_RATE_1MB:
7771 ipw_rt->rt_rate = 2;
7772 break;
7773 case IPW_TX_RATE_2MB:
7774 ipw_rt->rt_rate = 4;
7775 break;
7776 case IPW_TX_RATE_5MB:
7777 ipw_rt->rt_rate = 10;
7778 break;
7779 case IPW_TX_RATE_6MB:
7780 ipw_rt->rt_rate = 12;
7781 break;
7782 case IPW_TX_RATE_9MB:
7783 ipw_rt->rt_rate = 18;
7784 break;
7785 case IPW_TX_RATE_11MB:
7786 ipw_rt->rt_rate = 22;
7787 break;
7788 case IPW_TX_RATE_12MB:
7789 ipw_rt->rt_rate = 24;
7790 break;
7791 case IPW_TX_RATE_18MB:
7792 ipw_rt->rt_rate = 36;
7793 break;
7794 case IPW_TX_RATE_24MB:
7795 ipw_rt->rt_rate = 48;
7796 break;
7797 case IPW_TX_RATE_36MB:
7798 ipw_rt->rt_rate = 72;
7799 break;
7800 case IPW_TX_RATE_48MB:
7801 ipw_rt->rt_rate = 96;
7802 break;
7803 case IPW_TX_RATE_54MB:
7804 ipw_rt->rt_rate = 108;
7805 break;
7806 default:
7807 ipw_rt->rt_rate = 0;
7808 break;
7809 }
7810
7811 /* antenna number */
7812 ipw_rt->rt_antenna = (antennaAndPhy & 3); /* Is this right? */
7813
7814 /* set the preamble flag if we have it */
7815 if ((antennaAndPhy & 64))
7816 ipw_rt->rt_flags |= IEEE80211_RADIOTAP_F_SHORTPRE;
7817
7818 /* Set the size of the skb to the size of the frame */
7819 skb_put(rxb->skb, len + sizeof(struct ipw_rt_hdr));
43f66a6c
JK		 7820
7821 IPW_DEBUG_RX("Rx packet of %d bytes.\n", rxb->skb->len);
7822
bf79451e 7823 if (!ieee80211_rx(priv->ieee, rxb->skb, stats))
43f66a6c 7824 priv->ieee->stats.rx_errors++;
24a47dbd
MK		 7825 else { /* ieee80211_rx succeeded, so it now owns the SKB */
7826 rxb->skb = NULL;
7827 /* no LED during capture */
7828 }
7829}
7830#endif
7831
d685b8c2
ZY		 7832#ifdef CONFIG_IPW2200_PROMISCUOUS
7833#define ieee80211_is_probe_response(fc) \
7834 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT && \
7835 (fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_PROBE_RESP )
7836
7837#define ieee80211_is_management(fc) \
7838 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT)
7839
7840#define ieee80211_is_control(fc) \
7841 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_CTL)
7842
7843#define ieee80211_is_data(fc) \
7844 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_DATA)
7845
7846#define ieee80211_is_assoc_request(fc) \
7847 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_ASSOC_REQ)
7848
7849#define ieee80211_is_reassoc_request(fc) \
7850 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_REASSOC_REQ)
7851
7852static void ipw_handle_promiscuous_rx(struct ipw_priv *priv,
7853 struct ipw_rx_mem_buffer *rxb,
7854 struct ieee80211_rx_stats *stats)
7855{
7856 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7857 struct ipw_rx_frame *frame = &pkt->u.frame;
7858 struct ipw_rt_hdr *ipw_rt;
7859
7860 /* First cache any information we need before we overwrite
7861 * the information provided in the skb from the hardware */
7862 struct ieee80211_hdr *hdr;
7863 u16 channel = frame->received_channel;
7864 u8 phy_flags = frame->antennaAndPhy;
7865 s8 signal = frame->rssi_dbm - IPW_RSSI_TO_DBM;
7866 s8 noise = frame->noise;
7867 u8 rate = frame->rate;
7868 short len = le16_to_cpu(pkt->u.frame.length);
d685b8c2
ZY		 7869 struct sk_buff *skb;
7870 int hdr_only = 0;
7871 u16 filter = priv->prom_priv->filter;
7872
7873 /* If the filter is set to not include Rx frames then return */
7874 if (filter & IPW_PROM_NO_RX)
7875 return;
7876
d685b8c2
ZY		 7877 /* We received data from the HW, so stop the watchdog */
7878 priv->prom_net_dev->trans_start = jiffies;
7879
7880 if (unlikely((len + IPW_RX_FRAME_SIZE) > skb_tailroom(rxb->skb))) {
7881 priv->prom_priv->ieee->stats.rx_errors++;
7882 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7883 return;
7884 }
7885
7886 /* We only process data packets if the interface is open */
7887 if (unlikely(!netif_running(priv->prom_net_dev))) {
7888 priv->prom_priv->ieee->stats.rx_dropped++;
7889 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7890 return;
7891 }
7892
7893 /* Libpcap 0.9.3+ can handle variable length radiotap, so we'll use
7894 * that now */
7895 if (len > IPW_RX_BUF_SIZE - sizeof(struct ipw_rt_hdr)) {
7896 /* FIXME: Should alloc bigger skb instead */
7897 priv->prom_priv->ieee->stats.rx_dropped++;
7898 IPW_DEBUG_DROP("Dropping too large packet in monitor\n");
7899 return;
7900 }
7901
7902 hdr = (void *)rxb->skb->data + IPW_RX_FRAME_SIZE;
851ca268 7903 if (ieee80211_is_management(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY		 7904 if (filter & IPW_PROM_NO_MGMT)
7905 return;
7906 if (filter & IPW_PROM_MGMT_HEADER_ONLY)
7907 hdr_only = 1;
851ca268 7908 } else if (ieee80211_is_control(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY		 7909 if (filter & IPW_PROM_NO_CTL)
7910 return;
7911 if (filter & IPW_PROM_CTL_HEADER_ONLY)
7912 hdr_only = 1;
851ca268 7913 } else if (ieee80211_is_data(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY		 7914 if (filter & IPW_PROM_NO_DATA)
7915 return;
7916 if (filter & IPW_PROM_DATA_HEADER_ONLY)
7917 hdr_only = 1;
7918 }
7919
7920 /* Copy the SKB since this is for the promiscuous side */
7921 skb = skb_copy(rxb->skb, GFP_ATOMIC);
7922 if (skb == NULL) {
7923 IPW_ERROR("skb_clone failed for promiscuous copy.\n");
7924 return;
7925 }
7926
7927 /* copy the frame data to write after where the radiotap header goes */
7928 ipw_rt = (void *)skb->data;
7929
7930 if (hdr_only)
851ca268 7931 len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_ctl));
d685b8c2
ZY		 7932
7933 memcpy(ipw_rt->payload, hdr, len);
7934
7935 /* Zero the radiotap static buffer ... We only need to zero the bytes
7936 * NOT part of our real header, saves a little time.
7937 *
7938 * No longer necessary since we fill in all our data. Purge before
7939 * merging patch officially.
7940 * memset(rxb->skb->data + sizeof(struct ipw_rt_hdr), 0,
7941 * IEEE80211_RADIOTAP_HDRLEN - sizeof(struct ipw_rt_hdr));
7942 */
7943
7944 ipw_rt->rt_hdr.it_version = PKTHDR_RADIOTAP_VERSION;
7945 ipw_rt->rt_hdr.it_pad = 0; /* always good to zero */
7946 ipw_rt->rt_hdr.it_len = sizeof(*ipw_rt); /* total header+data */
7947
7948 /* Set the size of the skb to the size of the frame */
7949 skb_put(skb, ipw_rt->rt_hdr.it_len + len);
7950
7951 /* Big bitfield of all the fields we provide in radiotap */
7952 ipw_rt->rt_hdr.it_present =
4b1f8a99
ZY		 7953 ((1 << IEEE80211_RADIOTAP_TSFT) |
7954 (1 << IEEE80211_RADIOTAP_FLAGS) |
d685b8c2
ZY		 7955 (1 << IEEE80211_RADIOTAP_RATE) |
7956 (1 << IEEE80211_RADIOTAP_CHANNEL) |
7957 (1 << IEEE80211_RADIOTAP_DBM_ANTSIGNAL) |
7958 (1 << IEEE80211_RADIOTAP_DBM_ANTNOISE) |
7959 (1 << IEEE80211_RADIOTAP_ANTENNA));
7960
7961 /* Zero the flags, we'll add to them as we go */
7962 ipw_rt->rt_flags = 0;
4b1f8a99
ZY		 7963 ipw_rt->rt_tsf = (u64)(frame->parent_tsf[3] << 24 |
7964 frame->parent_tsf[2] << 16 |
7965 frame->parent_tsf[1] << 8 |
7966 frame->parent_tsf[0]);
d685b8c2
ZY		 7967
7968 /* Convert to DBM */
7969 ipw_rt->rt_dbmsignal = signal;
7970 ipw_rt->rt_dbmnoise = noise;
7971
7972 /* Convert the channel data and set the flags */
7973 ipw_rt->rt_channel = cpu_to_le16(ieee80211chan2mhz(channel));
7974 if (channel > 14) { /* 802.11a */
7975 ipw_rt->rt_chbitmask =
7976 cpu_to_le16((IEEE80211_CHAN_OFDM | IEEE80211_CHAN_5GHZ));
7977 } else if (phy_flags & (1 << 5)) { /* 802.11b */
7978 ipw_rt->rt_chbitmask =
7979 cpu_to_le16((IEEE80211_CHAN_CCK | IEEE80211_CHAN_2GHZ));
7980 } else { /* 802.11g */
7981 ipw_rt->rt_chbitmask =
7982 (IEEE80211_CHAN_OFDM | IEEE80211_CHAN_2GHZ);
7983 }
7984
7985 /* set the rate in multiples of 500k/s */
7986 switch (rate) {
7987 case IPW_TX_RATE_1MB:
7988 ipw_rt->rt_rate = 2;
7989 break;
7990 case IPW_TX_RATE_2MB:
7991 ipw_rt->rt_rate = 4;
7992 break;
7993 case IPW_TX_RATE_5MB:
7994 ipw_rt->rt_rate = 10;
7995 break;
7996 case IPW_TX_RATE_6MB:
7997 ipw_rt->rt_rate = 12;
7998 break;
7999 case IPW_TX_RATE_9MB:
8000 ipw_rt->rt_rate = 18;
8001 break;
8002 case IPW_TX_RATE_11MB:
8003 ipw_rt->rt_rate = 22;
8004 break;
8005 case IPW_TX_RATE_12MB:
8006 ipw_rt->rt_rate = 24;
8007 break;
8008 case IPW_TX_RATE_18MB:
8009 ipw_rt->rt_rate = 36;
8010 break;
8011 case IPW_TX_RATE_24MB:
8012 ipw_rt->rt_rate = 48;
8013 break;
8014 case IPW_TX_RATE_36MB:
8015 ipw_rt->rt_rate = 72;
8016 break;
8017 case IPW_TX_RATE_48MB:
8018 ipw_rt->rt_rate = 96;
8019 break;
8020 case IPW_TX_RATE_54MB:
8021 ipw_rt->rt_rate = 108;
8022 break;
8023 default:
8024 ipw_rt->rt_rate = 0;
8025 break;
8026 }
8027
8028 /* antenna number */
8029 ipw_rt->rt_antenna = (phy_flags & 3);
8030
8031 /* set the preamble flag if we have it */
8032 if (phy_flags & (1 << 6))
8033 ipw_rt->rt_flags |= IEEE80211_RADIOTAP_F_SHORTPRE;
8034
8035 IPW_DEBUG_RX("Rx packet of %d bytes.\n", skb->len);
8036
8037 if (!ieee80211_rx(priv->prom_priv->ieee, skb, stats)) {
8038 priv->prom_priv->ieee->stats.rx_errors++;
8039 dev_kfree_skb_any(skb);
8040 }
8041}
8042#endif
8043
858119e1 8044static int is_network_packet(struct ipw_priv *priv,
ea2b26e0
JK		 8045 struct ieee80211_hdr_4addr *header)
8046{
8047 /* Filter incoming packets to determine if they are targetted toward
8048 * this network, discarding packets coming from ourselves */
8049 switch (priv->ieee->iw_mode) {
a613bffd 8050 case IW_MODE_ADHOC: /* Header: Dest. | Source | BSSID */
c848d0af
JK		 8051 /* packets from our adapter are dropped (echo) */
8052 if (!memcmp(header->addr2, priv->net_dev->dev_addr, ETH_ALEN))
8053 return 0;
8054
90700fd9 8055 /* {broad,multi}cast packets to our BSSID go through */
3c19065a 8056 if (is_multicast_ether_addr(header->addr1))
ea2b26e0 8057 return !memcmp(header->addr3, priv->bssid, ETH_ALEN);
a613bffd
JK		 8058
8059 /* packets to our adapter go through */
8060 return !memcmp(header->addr1, priv->net_dev->dev_addr,
8061 ETH_ALEN);
a613bffd 8062
90700fd9 8063 case IW_MODE_INFRA: /* Header: Dest. | BSSID | Source */
c848d0af
JK		 8064 /* packets from our adapter are dropped (echo) */
8065 if (!memcmp(header->addr3, priv->net_dev->dev_addr, ETH_ALEN))
8066 return 0;
8067
90700fd9 8068 /* {broad,multi}cast packets to our BSS go through */
3c19065a 8069 if (is_multicast_ether_addr(header->addr1))
a613bffd
JK		 8070 return !memcmp(header->addr2, priv->bssid, ETH_ALEN);
8071
8072 /* packets to our adapter go through */
8073 return !memcmp(header->addr1, priv->net_dev->dev_addr,
8074 ETH_ALEN);
ea2b26e0 8075 }
a613bffd 8076
ea2b26e0
JK		 8077 return 1;
8078}
8079
afbf30a2
JK		 8080#define IPW_PACKET_RETRY_TIME HZ
8081
858119e1 8082static int is_duplicate_packet(struct ipw_priv *priv,
afbf30a2
JK		 8083 struct ieee80211_hdr_4addr *header)
8084{
afbf30a2
JK		 8085 u16 sc = le16_to_cpu(header->seq_ctl);
8086 u16 seq = WLAN_GET_SEQ_SEQ(sc);
8087 u16 frag = WLAN_GET_SEQ_FRAG(sc);
8088 u16 *last_seq, *last_frag;
8089 unsigned long *last_time;
8090
8091 switch (priv->ieee->iw_mode) {
8092 case IW_MODE_ADHOC:
8093 {
8094 struct list_head *p;
8095 struct ipw_ibss_seq *entry = NULL;
8096 u8 *mac = header->addr2;
8097 int index = mac[5] % IPW_IBSS_MAC_HASH_SIZE;
8098
8099 __list_for_each(p, &priv->ibss_mac_hash[index]) {
8100 entry =
8101 list_entry(p, struct ipw_ibss_seq, list);
8102 if (!memcmp(entry->mac, mac, ETH_ALEN))
8103 break;
8104 }
8105 if (p == &priv->ibss_mac_hash[index]) {
8106 entry = kmalloc(sizeof(*entry), GFP_ATOMIC);
8107 if (!entry) {
8108 IPW_ERROR
8109 ("Cannot malloc new mac entry\n");
8110 return 0;
8111 }
8112 memcpy(entry->mac, mac, ETH_ALEN);
8113 entry->seq_num = seq;
8114 entry->frag_num = frag;
8115 entry->packet_time = jiffies;
8116 list_add(&entry->list,
8117 &priv->ibss_mac_hash[index]);
8118 return 0;
8119 }
8120 last_seq = &entry->seq_num;
8121 last_frag = &entry->frag_num;
8122 last_time = &entry->packet_time;
8123 break;
8124 }
8125 case IW_MODE_INFRA:
8126 last_seq = &priv->last_seq_num;
8127 last_frag = &priv->last_frag_num;
8128 last_time = &priv->last_packet_time;
8129 break;
8130 default:
8131 return 0;
8132 }
8133 if ((*last_seq == seq) &&
8134 time_after(*last_time + IPW_PACKET_RETRY_TIME, jiffies)) {
8135 if (*last_frag == frag)
8136 goto drop;
8137 if (*last_frag + 1 != frag)
8138 /* out-of-order fragment */
8139 goto drop;
afbf30a2
JK		 8140 } else
8141 *last_seq = seq;
8142
f57ce7ce 8143 *last_frag = frag;
afbf30a2
JK		 8144 *last_time = jiffies;
8145 return 0;
8146
8147 drop:
87b016cb
ZY		 8148 /* Comment this line now since we observed the card receives
8149 * duplicate packets but the FCTL_RETRY bit is not set in the
8150 * IBSS mode with fragmentation enabled.
8151 BUG_ON(!(le16_to_cpu(header->frame_ctl) & IEEE80211_FCTL_RETRY)); */
afbf30a2
JK		 8152 return 1;
8153}
8154
b095c381
JK		 8155static void ipw_handle_mgmt_packet(struct ipw_priv *priv,
8156 struct ipw_rx_mem_buffer *rxb,
8157 struct ieee80211_rx_stats *stats)
8158{
8159 struct sk_buff *skb = rxb->skb;
8160 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)skb->data;
8161 struct ieee80211_hdr_4addr *header = (struct ieee80211_hdr_4addr *)
8162 (skb->data + IPW_RX_FRAME_SIZE);
8163
8164 ieee80211_rx_mgt(priv->ieee, header, stats);
8165
8166 if (priv->ieee->iw_mode == IW_MODE_ADHOC &&
8167 ((WLAN_FC_GET_STYPE(le16_to_cpu(header->frame_ctl)) ==
8168 IEEE80211_STYPE_PROBE_RESP) ||
8169 (WLAN_FC_GET_STYPE(le16_to_cpu(header->frame_ctl)) ==
8170 IEEE80211_STYPE_BEACON))) {
8171 if (!memcmp(header->addr3, priv->bssid, ETH_ALEN))
8172 ipw_add_station(priv, header->addr2);
8173 }
8174
8175 if (priv->config & CFG_NET_STATS) {
8176 IPW_DEBUG_HC("sending stat packet\n");
8177
8178 /* Set the size of the skb to the size of the full
8179 * ipw header and 802.11 frame */
8180 skb_put(skb, le16_to_cpu(pkt->u.frame.length) +
8181 IPW_RX_FRAME_SIZE);
8182
8183 /* Advance past the ipw packet header to the 802.11 frame */
8184 skb_pull(skb, IPW_RX_FRAME_SIZE);
8185
8186 /* Push the ieee80211_rx_stats before the 802.11 frame */
8187 memcpy(skb_push(skb, sizeof(*stats)), stats, sizeof(*stats));
8188
8189 skb->dev = priv->ieee->dev;
8190
8191 /* Point raw at the ieee80211_stats */
459a98ed 8192 skb_reset_mac_header(skb);
b095c381
JK		 8193
8194 skb->pkt_type = PACKET_OTHERHOST;
8195 skb->protocol = __constant_htons(ETH_P_80211_STATS);
8196 memset(skb->cb, 0, sizeof(rxb->skb->cb));
8197 netif_rx(skb);
43f66a6c 8198 rxb->skb = NULL;
b095c381 8199 }
43f66a6c
JK		 8200}
8201
43f66a6c
JK		 8202/*
8203 * Main entry function for recieving a packet with 80211 headers. This
8204 * should be called when ever the FW has notified us that there is a new
8205 * skb in the recieve queue.
8206 */
8207static void ipw_rx(struct ipw_priv *priv)
8208{
8209 struct ipw_rx_mem_buffer *rxb;
8210 struct ipw_rx_packet *pkt;
0dacca1f 8211 struct ieee80211_hdr_4addr *header;
43f66a6c
JK		 8212 u32 r, w, i;
8213 u8 network_packet;
0795af57
JP		 8214 DECLARE_MAC_BUF(mac);
8215 DECLARE_MAC_BUF(mac2);
8216 DECLARE_MAC_BUF(mac3);
43f66a6c 8217
b095c381
JK		 8218 r = ipw_read32(priv, IPW_RX_READ_INDEX);
8219 w = ipw_read32(priv, IPW_RX_WRITE_INDEX);
43f66a6c
JK		 8220 i = (priv->rxq->processed + 1) % RX_QUEUE_SIZE;
8221
8222 while (i != r) {
8223 rxb = priv->rxq->queue[i];
43f66a6c
JK		 8224 if (unlikely(rxb == NULL)) {
8225 printk(KERN_CRIT "Queue not allocated!\n");
8226 break;
8227 }
43f66a6c
JK		 8228 priv->rxq->queue[i] = NULL;
8229
8230 pci_dma_sync_single_for_cpu(priv->pci_dev, rxb->dma_addr,
b095c381 8231 IPW_RX_BUF_SIZE,
43f66a6c
JK		 8232 PCI_DMA_FROMDEVICE);
8233
8234 pkt = (struct ipw_rx_packet *)rxb->skb->data;
8235 IPW_DEBUG_RX("Packet: type=%02X seq=%02X bits=%02X\n",
8236 pkt->header.message_type,
0edd5b44 8237 pkt->header.rx_seq_num, pkt->header.control_bits);
43f66a6c
JK		 8238
8239 switch (pkt->header.message_type) {
0edd5b44
JG		 8240 case RX_FRAME_TYPE: /* 802.11 frame */ {
8241 struct ieee80211_rx_stats stats = {
851ca268 8242 .rssi = pkt->u.frame.rssi_dbm -
0edd5b44 8243 IPW_RSSI_TO_DBM,
c848d0af 8244 .signal =
b191608a
BM		 8245 le16_to_cpu(pkt->u.frame.rssi_dbm) -
8246 IPW_RSSI_TO_DBM + 0x100,
c848d0af
JK		 8247 .noise =
8248 le16_to_cpu(pkt->u.frame.noise),
0edd5b44
JG		 8249 .rate = pkt->u.frame.rate,
8250 .mac_time = jiffies,
8251 .received_channel =
8252 pkt->u.frame.received_channel,
8253 .freq =
8254 (pkt->u.frame.
8255 control & (1 << 0)) ?
8256 IEEE80211_24GHZ_BAND :
8257 IEEE80211_52GHZ_BAND,
a613bffd 8258 .len = le16_to_cpu(pkt->u.frame.length),
0edd5b44
JG		 8259 };
8260
8261 if (stats.rssi != 0)
8262 stats.mask |= IEEE80211_STATMASK_RSSI;
8263 if (stats.signal != 0)
8264 stats.mask |= IEEE80211_STATMASK_SIGNAL;
c848d0af
JK		 8265 if (stats.noise != 0)
8266 stats.mask |= IEEE80211_STATMASK_NOISE;
0edd5b44
JG		 8267 if (stats.rate != 0)
8268 stats.mask |= IEEE80211_STATMASK_RATE;
8269
8270 priv->rx_packets++;
43f66a6c 8271
d685b8c2
ZY		 8272#ifdef CONFIG_IPW2200_PROMISCUOUS
8273 if (priv->prom_net_dev && netif_running(priv->prom_net_dev))
8274 ipw_handle_promiscuous_rx(priv, rxb, &stats);
8275#endif
8276
b095c381 8277#ifdef CONFIG_IPW2200_MONITOR
0edd5b44 8278 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
459d4087 8279#ifdef CONFIG_IPW2200_RADIOTAP
d685b8c2
ZY		 8280
8281 ipw_handle_data_packet_monitor(priv,
8282 rxb,
8283 &stats);
24a47dbd 8284#else
d685b8c2
ZY		 8285 ipw_handle_data_packet(priv, rxb,
8286 &stats);
24a47dbd 8287#endif
0edd5b44
JG		 8288 break;
8289 }
43f66a6c 8290#endif
bf79451e 8291
0edd5b44 8292 header =
0dacca1f
JK		 8293 (struct ieee80211_hdr_4addr *)(rxb->skb->
8294 data +
8295 IPW_RX_FRAME_SIZE);
43f66a6c
JK		 8296 /* TODO: Check Ad-Hoc dest/source and make sure
8297 * that we are actually parsing these packets
bf79451e 8298 * correctly -- we should probably use the
43f66a6c
JK		 8299 * frame control of the packet and disregard
8300 * the current iw_mode */
0edd5b44 8301
ea2b26e0
JK		 8302 network_packet =
8303 is_network_packet(priv, header);
0edd5b44
JG		 8304 if (network_packet && priv->assoc_network) {
8305 priv->assoc_network->stats.rssi =
8306 stats.rssi;
00d21de5
ZY		 8307 priv->exp_avg_rssi =
8308 exponential_average(priv->exp_avg_rssi,
8309 stats.rssi, DEPTH_RSSI);
0edd5b44
JG		 8310 }
8311
8312 IPW_DEBUG_RX("Frame: len=%u\n",
a613bffd 8313 le16_to_cpu(pkt->u.frame.length));
0edd5b44 8314
a613bffd 8315 if (le16_to_cpu(pkt->u.frame.length) <
9d0be03a
ZY		 8316 ieee80211_get_hdrlen(le16_to_cpu(
8317 header->frame_ctl))) {
0edd5b44
JG		 8318 IPW_DEBUG_DROP
8319 ("Received packet is too small. "
8320 "Dropping.\n");
8321 priv->ieee->stats.rx_errors++;
8322 priv->wstats.discard.misc++;
8323 break;
8324 }
8325
a613bffd
JK		 8326 switch (WLAN_FC_GET_TYPE
8327 (le16_to_cpu(header->frame_ctl))) {
b095c381 8328
0edd5b44 8329 case IEEE80211_FTYPE_MGMT:
b095c381
JK		 8330 ipw_handle_mgmt_packet(priv, rxb,
8331 &stats);
0edd5b44
JG		 8332 break;
8333
8334 case IEEE80211_FTYPE_CTL:
8335 break;
8336
8337 case IEEE80211_FTYPE_DATA:
afbf30a2
JK		 8338 if (unlikely(!network_packet ||
8339 is_duplicate_packet(priv,
8340 header)))
8341 {
0edd5b44 8342 IPW_DEBUG_DROP("Dropping: "
0795af57
JP		 8343 "%s, "
8344 "%s, "
8345 "%s\n",
8346 print_mac(mac,
8347 header->
0edd5b44 8348 addr1),
0795af57
JP		 8349 print_mac(mac2,
8350 header->
0edd5b44 8351 addr2),
0795af57
JP		 8352 print_mac(mac3,
8353 header->
0edd5b44 8354 addr3));
b095c381
JK		 8355 break;
8356 }
8357
8358 ipw_handle_data_packet(priv, rxb,
8359 &stats);
8360
0edd5b44
JG		 8361 break;
8362 }
43f66a6c
JK		 8363 break;
8364 }
bf79451e 8365
0edd5b44
JG		 8366 case RX_HOST_NOTIFICATION_TYPE:{
8367 IPW_DEBUG_RX
8368 ("Notification: subtype=%02X flags=%02X size=%d\n",
43f66a6c
JK		 8369 pkt->u.notification.subtype,
8370 pkt->u.notification.flags,
720eeb43 8371 le16_to_cpu(pkt->u.notification.size));
0edd5b44
JG		 8372 ipw_rx_notification(priv, &pkt->u.notification);
8373 break;
8374 }
43f66a6c
JK		 8375
8376 default:
8377 IPW_DEBUG_RX("Bad Rx packet of type %d\n",
8378 pkt->header.message_type);
8379 break;
8380 }
bf79451e
JG		 8381
8382 /* For now we just don't re-use anything. We can tweak this
8383 * later to try and re-use notification packets and SKBs that
43f66a6c
JK		 8384 * fail to Rx correctly */
8385 if (rxb->skb != NULL) {
8386 dev_kfree_skb_any(rxb->skb);
8387 rxb->skb = NULL;
8388 }
bf79451e 8389
43f66a6c 8390 pci_unmap_single(priv->pci_dev, rxb->dma_addr,
b095c381 8391 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c 8392 list_add_tail(&rxb->list, &priv->rxq->rx_used);
bf79451e 8393
43f66a6c
JK		 8394 i = (i + 1) % RX_QUEUE_SIZE;
8395 }
8396
8397 /* Backtrack one entry */
8398 priv->rxq->processed = (i ? i : RX_QUEUE_SIZE) - 1;
8399
8400 ipw_rx_queue_restock(priv);
8401}
8402
afbf30a2
JK		 8403#define DEFAULT_RTS_THRESHOLD 2304U
8404#define MIN_RTS_THRESHOLD 1U
8405#define MAX_RTS_THRESHOLD 2304U
8406#define DEFAULT_BEACON_INTERVAL 100U
8407#define DEFAULT_SHORT_RETRY_LIMIT 7U
8408#define DEFAULT_LONG_RETRY_LIMIT 4U
8409
d6d5b5c1
ZY		 8410/**
8411 * ipw_sw_reset
8412 * @option: options to control different reset behaviour
8413 * 0 = reset everything except the 'disable' module_param
8414 * 1 = reset everything and print out driver info (for probe only)
8415 * 2 = reset everything
8416 */
8417static int ipw_sw_reset(struct ipw_priv *priv, int option)
43f66a6c 8418{
afbf30a2
JK		 8419 int band, modulation;
8420 int old_mode = priv->ieee->iw_mode;
43f66a6c 8421
afbf30a2
JK		 8422 /* Initialize module parameter values here */
8423 priv->config = 0;
43f66a6c 8424
afbf30a2
JK		 8425 /* We default to disabling the LED code as right now it causes
8426 * too many systems to lock up... */
8427 if (!led)
8428 priv->config |= CFG_NO_LED;
43f66a6c 8429
afbf30a2
JK		 8430 if (associate)
8431 priv->config |= CFG_ASSOCIATE;
8432 else
8433 IPW_DEBUG_INFO("Auto associate disabled.\n");
bf79451e 8434
afbf30a2
JK		 8435 if (auto_create)
8436 priv->config |= CFG_ADHOC_CREATE;
8437 else
8438 IPW_DEBUG_INFO("Auto adhoc creation disabled.\n");
43f66a6c 8439
17ed081d
ZY		 8440 priv->config &= ~CFG_STATIC_ESSID;
8441 priv->essid_len = 0;
8442 memset(priv->essid, 0, IW_ESSID_MAX_SIZE);
8443
d6d5b5c1 8444 if (disable && option) {
afbf30a2
JK		 8445 priv->status |= STATUS_RF_KILL_SW;
8446 IPW_DEBUG_INFO("Radio disabled.\n");
43f66a6c 8447 }
bf79451e 8448
afbf30a2
JK		 8449 if (channel != 0) {
8450 priv->config |= CFG_STATIC_CHANNEL;
8451 priv->channel = channel;
8452 IPW_DEBUG_INFO("Bind to static channel %d\n", channel);
8453 /* TODO: Validate that provided channel is in range */
43f66a6c 8454 }
e43e3c1e 8455#ifdef CONFIG_IPW2200_QOS
afbf30a2
JK		 8456 ipw_qos_init(priv, qos_enable, qos_burst_enable,
8457 burst_duration_CCK, burst_duration_OFDM);
e43e3c1e 8458#endif /* CONFIG_IPW2200_QOS */
43f66a6c 8459
afbf30a2
JK		 8460 switch (mode) {
8461 case 1:
8462 priv->ieee->iw_mode = IW_MODE_ADHOC;
8463 priv->net_dev->type = ARPHRD_ETHER;
8464
8465 break;
8466#ifdef CONFIG_IPW2200_MONITOR
8467 case 2:
8468 priv->ieee->iw_mode = IW_MODE_MONITOR;
459d4087 8469#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK		 8470 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
8471#else
afbf30a2 8472 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 8473#endif
afbf30a2
JK		 8474 break;
8475#endif
8476 default:
8477 case 0:
8478 priv->net_dev->type = ARPHRD_ETHER;
8479 priv->ieee->iw_mode = IW_MODE_INFRA;
8480 break;
43f66a6c
JK		 8481 }
8482
afbf30a2
JK		 8483 if (hwcrypto) {
8484 priv->ieee->host_encrypt = 0;
8485 priv->ieee->host_encrypt_msdu = 0;
8486 priv->ieee->host_decrypt = 0;
567deaf6 8487 priv->ieee->host_mc_decrypt = 0;
afbf30a2
JK		 8488 }
8489 IPW_DEBUG_INFO("Hardware crypto [%s]\n", hwcrypto ? "on" : "off");
43f66a6c 8490
e402c937
ZY		 8491 /* IPW2200/2915 is abled to do hardware fragmentation. */
8492 priv->ieee->host_open_frag = 0;
bf79451e 8493
afbf30a2
JK		 8494 if ((priv->pci_dev->device == 0x4223) ||
8495 (priv->pci_dev->device == 0x4224)) {
e8c69e27 8496 if (option == 1)
afbf30a2
JK		 8497 printk(KERN_INFO DRV_NAME
8498 ": Detected Intel PRO/Wireless 2915ABG Network "
8499 "Connection\n");
8500 priv->ieee->abg_true = 1;
8501 band = IEEE80211_52GHZ_BAND | IEEE80211_24GHZ_BAND;
8502 modulation = IEEE80211_OFDM_MODULATION |
8503 IEEE80211_CCK_MODULATION;
8504 priv->adapter = IPW_2915ABG;
8505 priv->ieee->mode = IEEE_A | IEEE_G | IEEE_B;
43f66a6c 8506 } else {
e8c69e27 8507 if (option == 1)
afbf30a2
JK		 8508 printk(KERN_INFO DRV_NAME
8509 ": Detected Intel PRO/Wireless 2200BG Network "
8510 "Connection\n");
bf79451e 8511
afbf30a2
JK		 8512 priv->ieee->abg_true = 0;
8513 band = IEEE80211_24GHZ_BAND;
8514 modulation = IEEE80211_OFDM_MODULATION |
8515 IEEE80211_CCK_MODULATION;
8516 priv->adapter = IPW_2200BG;
8517 priv->ieee->mode = IEEE_G | IEEE_B;
43f66a6c
JK		 8518 }
8519
afbf30a2
JK		 8520 priv->ieee->freq_band = band;
8521 priv->ieee->modulation = modulation;
43f66a6c 8522
afbf30a2 8523 priv->rates_mask = IEEE80211_DEFAULT_RATES_MASK;
bf79451e 8524
afbf30a2
JK		 8525 priv->disassociate_threshold = IPW_MB_DISASSOCIATE_THRESHOLD_DEFAULT;
8526 priv->roaming_threshold = IPW_MB_ROAMING_THRESHOLD_DEFAULT;
43f66a6c 8527
afbf30a2
JK		 8528 priv->rts_threshold = DEFAULT_RTS_THRESHOLD;
8529 priv->short_retry_limit = DEFAULT_SHORT_RETRY_LIMIT;
8530 priv->long_retry_limit = DEFAULT_LONG_RETRY_LIMIT;
43f66a6c 8531
afbf30a2
JK		 8532 /* If power management is turned on, default to AC mode */
8533 priv->power_mode = IPW_POWER_AC;
8534 priv->tx_power = IPW_TX_POWER_DEFAULT;
8535
0ece35b5 8536 return old_mode == priv->ieee->iw_mode;
43f66a6c
JK		 8537}
8538
8539/*
8540 * This file defines the Wireless Extension handlers. It does not
8541 * define any methods of hardware manipulation and relies on the
8542 * functions defined in ipw_main to provide the HW interaction.
bf79451e
JG		 8543 *
8544 * The exception to this is the use of the ipw_get_ordinal()
43f66a6c
JK		 8545 * function used to poll the hardware vs. making unecessary calls.
8546 *
8547 */
8548
bf79451e
JG		 8549static int ipw_wx_get_name(struct net_device *dev,
8550 struct iw_request_info *info,
43f66a6c
JK		 8551 union iwreq_data *wrqu, char *extra)
8552{
8553 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8554 mutex_lock(&priv->mutex);
c848d0af 8555 if (priv->status & STATUS_RF_KILL_MASK)
a613bffd 8556 strcpy(wrqu->name, "radio off");
c848d0af 8557 else if (!(priv->status & STATUS_ASSOCIATED))
43f66a6c 8558 strcpy(wrqu->name, "unassociated");
bf79451e 8559 else
43f66a6c
JK		 8560 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11%c",
8561 ipw_modes[priv->assoc_request.ieee_mode]);
8562 IPW_DEBUG_WX("Name: %s\n", wrqu->name);
4644151b 8563 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8564 return 0;
8565}
8566
8567static int ipw_set_channel(struct ipw_priv *priv, u8 channel)
8568{
8569 if (channel == 0) {
8570 IPW_DEBUG_INFO("Setting channel to ANY (0)\n");
8571 priv->config &= ~CFG_STATIC_CHANNEL;
c848d0af
JK		 8572 IPW_DEBUG_ASSOC("Attempting to associate with new "
8573 "parameters.\n");
8574 ipw_associate(priv);
43f66a6c
JK		 8575 return 0;
8576 }
8577
8578 priv->config |= CFG_STATIC_CHANNEL;
8579
8580 if (priv->channel == channel) {
0edd5b44
JG		 8581 IPW_DEBUG_INFO("Request to set channel to current value (%d)\n",
8582 channel);
43f66a6c
JK		 8583 return 0;
8584 }
8585
8586 IPW_DEBUG_INFO("Setting channel to %i\n", (int)channel);
8587 priv->channel = channel;
8588
b095c381
JK		 8589#ifdef CONFIG_IPW2200_MONITOR
8590 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 8591 int i;
b095c381 8592 if (priv->status & STATUS_SCANNING) {
afbf30a2 8593 IPW_DEBUG_SCAN("Scan abort triggered due to "
b095c381 8594 "channel change.\n");
afbf30a2 8595 ipw_abort_scan(priv);
b095c381
JK		 8596 }
8597
8598 for (i = 1000; i && (priv->status & STATUS_SCANNING); i--)
8599 udelay(10);
8600
8601 if (priv->status & STATUS_SCANNING)
8602 IPW_DEBUG_SCAN("Still scanning...\n");
8603 else
8604 IPW_DEBUG_SCAN("Took %dms to abort current scan\n",
8605 1000 - i);
8606
8607 return 0;
43f66a6c 8608 }
b095c381
JK		 8609#endif /* CONFIG_IPW2200_MONITOR */
8610
c848d0af
JK		 8611 /* Network configuration changed -- force [re]association */
8612 IPW_DEBUG_ASSOC("[re]association triggered due to channel change.\n");
8613 if (!ipw_disassociate(priv))
43f66a6c 8614 ipw_associate(priv);
43f66a6c
JK		 8615
8616 return 0;
8617}
8618
bf79451e
JG		 8619static int ipw_wx_set_freq(struct net_device *dev,
8620 struct iw_request_info *info,
8621 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 8622{
8623 struct ipw_priv *priv = ieee80211_priv(dev);
1867b117 8624 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
43f66a6c 8625 struct iw_freq *fwrq = &wrqu->freq;
afbf30a2 8626 int ret = 0, i;
1fe0adb4
LH		 8627 u8 channel, flags;
8628 int band;
b095c381
JK		 8629
8630 if (fwrq->m == 0) {
8631 IPW_DEBUG_WX("SET Freq/Channel -> any\n");
4644151b 8632 mutex_lock(&priv->mutex);
b095c381 8633 ret = ipw_set_channel(priv, 0);
4644151b 8634 mutex_unlock(&priv->mutex);
b095c381
JK		 8635 return ret;
8636 }
43f66a6c
JK		 8637 /* if setting by freq convert to channel */
8638 if (fwrq->e == 1) {
1867b117 8639 channel = ieee80211_freq_to_channel(priv->ieee, fwrq->m);
b095c381
JK		 8640 if (channel == 0)
8641 return -EINVAL;
8642 } else
8643 channel = fwrq->m;
bf79451e 8644
1867b117 8645 if (!(band = ieee80211_is_valid_channel(priv->ieee, channel)))
b095c381 8646 return -EINVAL;
43f66a6c 8647
1fe0adb4 8648 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
1867b117 8649 i = ieee80211_channel_to_index(priv->ieee, channel);
afbf30a2
JK		 8650 if (i == -1)
8651 return -EINVAL;
bf79451e 8652
1fe0adb4
LH		 8653 flags = (band == IEEE80211_24GHZ_BAND) ?
8654 geo->bg[i].flags : geo->a[i].flags;
8655 if (flags & IEEE80211_CH_PASSIVE_ONLY) {
afbf30a2
JK		 8656 IPW_DEBUG_WX("Invalid Ad-Hoc channel for 802.11a\n");
8657 return -EINVAL;
43f66a6c
JK		 8658 }
8659 }
bf79451e 8660
43f66a6c 8661 IPW_DEBUG_WX("SET Freq/Channel -> %d \n", fwrq->m);
4644151b 8662 mutex_lock(&priv->mutex);
b095c381 8663 ret = ipw_set_channel(priv, channel);
4644151b 8664 mutex_unlock(&priv->mutex);
c848d0af 8665 return ret;
43f66a6c
JK		 8666}
8667
bf79451e
JG		 8668static int ipw_wx_get_freq(struct net_device *dev,
8669 struct iw_request_info *info,
43f66a6c
JK		 8670 union iwreq_data *wrqu, char *extra)
8671{
8672 struct ipw_priv *priv = ieee80211_priv(dev);
8673
8674 wrqu->freq.e = 0;
8675
8676 /* If we are associated, trying to associate, or have a statically
8677 * configured CHANNEL then return that; otherwise return ANY */
4644151b 8678 mutex_lock(&priv->mutex);
43f66a6c 8679 if (priv->config & CFG_STATIC_CHANNEL ||
c580f67f
ZY		 8680 priv->status & (STATUS_ASSOCIATING | STATUS_ASSOCIATED)) {
8681 int i;
8682
8683 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
8684 BUG_ON(i == -1);
8685 wrqu->freq.e = 1;
8686
8687 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
8688 case IEEE80211_52GHZ_BAND:
8689 wrqu->freq.m = priv->ieee->geo.a[i].freq * 100000;
8690 break;
8691
8692 case IEEE80211_24GHZ_BAND:
8693 wrqu->freq.m = priv->ieee->geo.bg[i].freq * 100000;
8694 break;
8695
8696 default:
8697 BUG();
8698 }
8699 } else
43f66a6c
JK		 8700 wrqu->freq.m = 0;
8701
4644151b 8702 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8703 IPW_DEBUG_WX("GET Freq/Channel -> %d \n", priv->channel);
8704 return 0;
8705}
8706
bf79451e
JG		 8707static int ipw_wx_set_mode(struct net_device *dev,
8708 struct iw_request_info *info,
43f66a6c
JK		 8709 union iwreq_data *wrqu, char *extra)
8710{
8711 struct ipw_priv *priv = ieee80211_priv(dev);
8712 int err = 0;
8713
8714 IPW_DEBUG_WX("Set MODE: %d\n", wrqu->mode);
8715
43f66a6c 8716 switch (wrqu->mode) {
b095c381 8717#ifdef CONFIG_IPW2200_MONITOR
43f66a6c
JK		 8718 case IW_MODE_MONITOR:
8719#endif
8720 case IW_MODE_ADHOC:
8721 case IW_MODE_INFRA:
8722 break;
8723 case IW_MODE_AUTO:
8724 wrqu->mode = IW_MODE_INFRA;
8725 break;
8726 default:
8727 return -EINVAL;
8728 }
b095c381
JK		 8729 if (wrqu->mode == priv->ieee->iw_mode)
8730 return 0;
43f66a6c 8731
4644151b 8732 mutex_lock(&priv->mutex);
43f66a6c 8733
afbf30a2
JK		 8734 ipw_sw_reset(priv, 0);
8735
b095c381 8736#ifdef CONFIG_IPW2200_MONITOR
bf79451e 8737 if (priv->ieee->iw_mode == IW_MODE_MONITOR)
43f66a6c 8738 priv->net_dev->type = ARPHRD_ETHER;
bf79451e
JG		 8739
8740 if (wrqu->mode == IW_MODE_MONITOR)
459d4087 8741#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK		 8742 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
8743#else
43f66a6c 8744 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 8745#endif
b095c381 8746#endif /* CONFIG_IPW2200_MONITOR */
bf79451e 8747
bf79451e 8748 /* Free the existing firmware and reset the fw_loaded
43f66a6c 8749 * flag so ipw_load() will bring in the new firmawre */
afbf30a2 8750 free_firmware();
43f66a6c
JK		 8751
8752 priv->ieee->iw_mode = wrqu->mode;
bf79451e 8753
c848d0af 8754 queue_work(priv->workqueue, &priv->adapter_restart);
4644151b 8755 mutex_unlock(&priv->mutex);
0edd5b44 8756 return err;
43f66a6c
JK		 8757}
8758
bf79451e 8759static int ipw_wx_get_mode(struct net_device *dev,
0edd5b44
JG		 8760 struct iw_request_info *info,
8761 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 8762{
8763 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8764 mutex_lock(&priv->mutex);
43f66a6c
JK		 8765 wrqu->mode = priv->ieee->iw_mode;
8766 IPW_DEBUG_WX("Get MODE -> %d\n", wrqu->mode);
4644151b 8767 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8768 return 0;
8769}
8770
43f66a6c
JK		 8771/* Values are in microsecond */
8772static const s32 timeout_duration[] = {
8773 350000,
8774 250000,
8775 75000,
8776 37000,
8777 25000,
8778};
8779
8780static const s32 period_duration[] = {
8781 400000,
8782 700000,
8783 1000000,
8784 1000000,
8785 1000000
8786};
8787
bf79451e
JG		 8788static int ipw_wx_get_range(struct net_device *dev,
8789 struct iw_request_info *info,
43f66a6c
JK		 8790 union iwreq_data *wrqu, char *extra)
8791{
8792 struct ipw_priv *priv = ieee80211_priv(dev);
8793 struct iw_range *range = (struct iw_range *)extra;
1867b117 8794 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
b095c381 8795 int i = 0, j;
43f66a6c
JK		 8796
8797 wrqu->data.length = sizeof(*range);
8798 memset(range, 0, sizeof(*range));
8799
8800 /* 54Mbs == ~27 Mb/s real (802.11g) */
bf79451e 8801 range->throughput = 27 * 1000 * 1000;
43f66a6c
JK		 8802
8803 range->max_qual.qual = 100;
8804 /* TODO: Find real max RSSI and stick here */
8805 range->max_qual.level = 0;
b191608a 8806 range->max_qual.noise = 0;
0edd5b44 8807 range->max_qual.updated = 7; /* Updated all three */
43f66a6c
JK		 8808
8809 range->avg_qual.qual = 70;
8810 /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
0edd5b44 8811 range->avg_qual.level = 0; /* FIXME to real average level */
43f66a6c 8812 range->avg_qual.noise = 0;
0edd5b44 8813 range->avg_qual.updated = 7; /* Updated all three */
4644151b 8814 mutex_lock(&priv->mutex);
0edd5b44 8815 range->num_bitrates = min(priv->rates.num_rates, (u8) IW_MAX_BITRATES);
43f66a6c 8816
bf79451e
JG		 8817 for (i = 0; i < range->num_bitrates; i++)
8818 range->bitrate[i] = (priv->rates.supported_rates[i] & 0x7F) *
0edd5b44 8819 500000;
bf79451e 8820
43f66a6c
JK		 8821 range->max_rts = DEFAULT_RTS_THRESHOLD;
8822 range->min_frag = MIN_FRAG_THRESHOLD;
8823 range->max_frag = MAX_FRAG_THRESHOLD;
8824
8825 range->encoding_size[0] = 5;
bf79451e 8826 range->encoding_size[1] = 13;
43f66a6c
JK		 8827 range->num_encoding_sizes = 2;
8828 range->max_encoding_tokens = WEP_KEYS;
8829
8830 /* Set the Wireless Extension versions */
8831 range->we_version_compiled = WIRELESS_EXT;
f1b50863 8832 range->we_version_source = 18;
43f66a6c 8833
b095c381
JK		 8834 i = 0;
8835 if (priv->ieee->mode & (IEEE_B | IEEE_G)) {
e815de42
ZY		 8836 for (j = 0; j < geo->bg_channels && i < IW_MAX_FREQUENCIES; j++) {
8837 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
8838 (geo->bg[j].flags & IEEE80211_CH_PASSIVE_ONLY))
8839 continue;
8840
b095c381
JK		 8841 range->freq[i].i = geo->bg[j].channel;
8842 range->freq[i].m = geo->bg[j].freq * 100000;
8843 range->freq[i].e = 1;
e815de42 8844 i++;
b095c381
JK		 8845 }
8846 }
43f66a6c 8847
b095c381 8848 if (priv->ieee->mode & IEEE_A) {
e815de42
ZY		 8849 for (j = 0; j < geo->a_channels && i < IW_MAX_FREQUENCIES; j++) {
8850 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
8851 (geo->a[j].flags & IEEE80211_CH_PASSIVE_ONLY))
8852 continue;
8853
b095c381
JK		 8854 range->freq[i].i = geo->a[j].channel;
8855 range->freq[i].m = geo->a[j].freq * 100000;
8856 range->freq[i].e = 1;
e815de42 8857 i++;
b095c381 8858 }
43f66a6c 8859 }
b095c381
JK		 8860
8861 range->num_channels = i;
8862 range->num_frequency = i;
8863
4644151b 8864 mutex_unlock(&priv->mutex);
97a78ca9
BB		 8865
8866 /* Event capability (kernel + driver) */
8867 range->event_capa[0] = (IW_EVENT_CAPA_K_0 |
8868 IW_EVENT_CAPA_MASK(SIOCGIWTHRSPY) |
07f02e46
ZY		 8869 IW_EVENT_CAPA_MASK(SIOCGIWAP) |
8870 IW_EVENT_CAPA_MASK(SIOCGIWSCAN));
97a78ca9 8871 range->event_capa[1] = IW_EVENT_CAPA_K_1;
43f66a6c 8872
f1b50863
DW		 8873 range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
8874 IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
8875
43f66a6c
JK		 8876 IPW_DEBUG_WX("GET Range\n");
8877 return 0;
8878}
8879
bf79451e
JG		 8880static int ipw_wx_set_wap(struct net_device *dev,
8881 struct iw_request_info *info,
43f66a6c
JK		 8882 union iwreq_data *wrqu, char *extra)
8883{
8884 struct ipw_priv *priv = ieee80211_priv(dev);
0795af57 8885 DECLARE_MAC_BUF(mac);
43f66a6c
JK		 8886
8887 static const unsigned char any[] = {
8888 0xff, 0xff, 0xff, 0xff, 0xff, 0xff
8889 };
8890 static const unsigned char off[] = {
8891 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
8892 };
8893
bf79451e 8894 if (wrqu->ap_addr.sa_family != ARPHRD_ETHER)
43f66a6c 8895 return -EINVAL;
4644151b 8896 mutex_lock(&priv->mutex);
43f66a6c
JK		 8897 if (!memcmp(any, wrqu->ap_addr.sa_data, ETH_ALEN) ||
8898 !memcmp(off, wrqu->ap_addr.sa_data, ETH_ALEN)) {
8899 /* we disable mandatory BSSID association */
8900 IPW_DEBUG_WX("Setting AP BSSID to ANY\n");
8901 priv->config &= ~CFG_STATIC_BSSID;
c848d0af
JK		 8902 IPW_DEBUG_ASSOC("Attempting to associate with new "
8903 "parameters.\n");
8904 ipw_associate(priv);
4644151b 8905 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8906 return 0;
8907 }
8908
8909 priv->config |= CFG_STATIC_BSSID;
8910 if (!memcmp(priv->bssid, wrqu->ap_addr.sa_data, ETH_ALEN)) {
8911 IPW_DEBUG_WX("BSSID set to current BSSID.\n");
4644151b 8912 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8913 return 0;
8914 }
8915
0795af57
JP		 8916 IPW_DEBUG_WX("Setting mandatory BSSID to %s\n",
8917 print_mac(mac, wrqu->ap_addr.sa_data));
43f66a6c
JK		 8918
8919 memcpy(priv->bssid, wrqu->ap_addr.sa_data, ETH_ALEN);
8920
c848d0af
JK		 8921 /* Network configuration changed -- force [re]association */
8922 IPW_DEBUG_ASSOC("[re]association triggered due to BSSID change.\n");
8923 if (!ipw_disassociate(priv))
43f66a6c 8924 ipw_associate(priv);
43f66a6c 8925
4644151b 8926 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8927 return 0;
8928}
8929
bf79451e
JG		 8930static int ipw_wx_get_wap(struct net_device *dev,
8931 struct iw_request_info *info,
43f66a6c
JK		 8932 union iwreq_data *wrqu, char *extra)
8933{
8934 struct ipw_priv *priv = ieee80211_priv(dev);
0795af57
JP		 8935 DECLARE_MAC_BUF(mac);
8936
43f66a6c
JK		 8937 /* If we are associated, trying to associate, or have a statically
8938 * configured BSSID then return that; otherwise return ANY */
4644151b 8939 mutex_lock(&priv->mutex);
bf79451e 8940 if (priv->config & CFG_STATIC_BSSID ||
43f66a6c
JK		 8941 priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
8942 wrqu->ap_addr.sa_family = ARPHRD_ETHER;
afbf30a2 8943 memcpy(wrqu->ap_addr.sa_data, priv->bssid, ETH_ALEN);
43f66a6c
JK		 8944 } else
8945 memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
8946
0795af57
JP		 8947 IPW_DEBUG_WX("Getting WAP BSSID: %s\n",
8948 print_mac(mac, wrqu->ap_addr.sa_data));
4644151b 8949 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8950 return 0;
8951}
8952
bf79451e
JG		 8953static int ipw_wx_set_essid(struct net_device *dev,
8954 struct iw_request_info *info,
43f66a6c
JK		 8955 union iwreq_data *wrqu, char *extra)
8956{
8957 struct ipw_priv *priv = ieee80211_priv(dev);
ab644b0b
ZY		 8958 int length;
8959
8960 mutex_lock(&priv->mutex);
43f66a6c 8961
ab644b0b
ZY		 8962 if (!wrqu->essid.flags)
8963 {
8964 IPW_DEBUG_WX("Setting ESSID to ANY\n");
8965 ipw_disassociate(priv);
8966 priv->config &= ~CFG_STATIC_ESSID;
8967 ipw_associate(priv);
8968 mutex_unlock(&priv->mutex);
8969 return 0;
8970 }
43f66a6c 8971
a9f0d423 8972 length = min((int)wrqu->essid.length, IW_ESSID_MAX_SIZE);
43f66a6c
JK		 8973
8974 priv->config |= CFG_STATIC_ESSID;
8975
a9f0d423
ZY		 8976 if (priv->essid_len == length && !memcmp(priv->essid, extra, length)
8977 && (priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING))) {
43f66a6c 8978 IPW_DEBUG_WX("ESSID set to current ESSID.\n");
4644151b 8979 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8980 return 0;
8981 }
8982
ab644b0b 8983 IPW_DEBUG_WX("Setting ESSID: '%s' (%d)\n", escape_essid(extra, length),
43f66a6c
JK		 8984 length);
8985
8986 priv->essid_len = length;
a9f0d423 8987 memcpy(priv->essid, extra, priv->essid_len);
bf79451e 8988
c848d0af
JK		 8989 /* Network configuration changed -- force [re]association */
8990 IPW_DEBUG_ASSOC("[re]association triggered due to ESSID change.\n");
8991 if (!ipw_disassociate(priv))
43f66a6c 8992 ipw_associate(priv);
43f66a6c 8993
4644151b 8994 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8995 return 0;
8996}
8997
bf79451e
JG		 8998static int ipw_wx_get_essid(struct net_device *dev,
8999 struct iw_request_info *info,
43f66a6c
JK		 9000 union iwreq_data *wrqu, char *extra)
9001{
9002 struct ipw_priv *priv = ieee80211_priv(dev);
9003
9004 /* If we are associated, trying to associate, or have a statically
9005 * configured ESSID then return that; otherwise return ANY */
4644151b 9006 mutex_lock(&priv->mutex);
43f66a6c 9007 if (priv->config & CFG_STATIC_ESSID ||
bf79451e
JG		 9008 priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
9009 IPW_DEBUG_WX("Getting essid: '%s'\n",
43f66a6c 9010 escape_essid(priv->essid, priv->essid_len));
bf79451e 9011 memcpy(extra, priv->essid, priv->essid_len);
43f66a6c 9012 wrqu->essid.length = priv->essid_len;
0edd5b44 9013 wrqu->essid.flags = 1; /* active */
43f66a6c
JK		 9014 } else {
9015 IPW_DEBUG_WX("Getting essid: ANY\n");
9016 wrqu->essid.length = 0;
0edd5b44 9017 wrqu->essid.flags = 0; /* active */
43f66a6c 9018 }
4644151b 9019 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9020 return 0;
9021}
9022
bf79451e
JG		 9023static int ipw_wx_set_nick(struct net_device *dev,
9024 struct iw_request_info *info,
43f66a6c 9025 union iwreq_data *wrqu, char *extra)
bf79451e 9026{
43f66a6c
JK		 9027 struct ipw_priv *priv = ieee80211_priv(dev);
9028
9029 IPW_DEBUG_WX("Setting nick to '%s'\n", extra);
9030 if (wrqu->data.length > IW_ESSID_MAX_SIZE)
9031 return -E2BIG;
4644151b 9032 mutex_lock(&priv->mutex);
0edd5b44 9033 wrqu->data.length = min((size_t) wrqu->data.length, sizeof(priv->nick));
43f66a6c 9034 memset(priv->nick, 0, sizeof(priv->nick));
0edd5b44 9035 memcpy(priv->nick, extra, wrqu->data.length);
43f66a6c 9036 IPW_DEBUG_TRACE("<<\n");
4644151b 9037 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9038 return 0;
9039
9040}
9041
bf79451e
JG		 9042static int ipw_wx_get_nick(struct net_device *dev,
9043 struct iw_request_info *info,
43f66a6c 9044 union iwreq_data *wrqu, char *extra)
bf79451e 9045{
43f66a6c
JK		 9046 struct ipw_priv *priv = ieee80211_priv(dev);
9047 IPW_DEBUG_WX("Getting nick\n");
4644151b 9048 mutex_lock(&priv->mutex);
919ee6dd 9049 wrqu->data.length = strlen(priv->nick);
43f66a6c 9050 memcpy(extra, priv->nick, wrqu->data.length);
0edd5b44 9051 wrqu->data.flags = 1; /* active */
4644151b 9052 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9053 return 0;
9054}
9055
651be26f
OH		 9056static int ipw_wx_set_sens(struct net_device *dev,
9057 struct iw_request_info *info,
9058 union iwreq_data *wrqu, char *extra)
9059{
9060 struct ipw_priv *priv = ieee80211_priv(dev);
9061 int err = 0;
9062
9063 IPW_DEBUG_WX("Setting roaming threshold to %d\n", wrqu->sens.value);
9064 IPW_DEBUG_WX("Setting disassociate threshold to %d\n", 3*wrqu->sens.value);
9065 mutex_lock(&priv->mutex);
9066
9067 if (wrqu->sens.fixed == 0)
9068 {
9069 priv->roaming_threshold = IPW_MB_ROAMING_THRESHOLD_DEFAULT;
9070 priv->disassociate_threshold = IPW_MB_DISASSOCIATE_THRESHOLD_DEFAULT;
9071 goto out;
9072 }
9073 if ((wrqu->sens.value > IPW_MB_ROAMING_THRESHOLD_MAX) ||
9074 (wrqu->sens.value < IPW_MB_ROAMING_THRESHOLD_MIN)) {
9075 err = -EINVAL;
9076 goto out;
9077 }
9078
9079 priv->roaming_threshold = wrqu->sens.value;
9080 priv->disassociate_threshold = 3*wrqu->sens.value;
9081 out:
9082 mutex_unlock(&priv->mutex);
9083 return err;
9084}
9085
9086static int ipw_wx_get_sens(struct net_device *dev,
9087 struct iw_request_info *info,
9088 union iwreq_data *wrqu, char *extra)
9089{
9090 struct ipw_priv *priv = ieee80211_priv(dev);
9091 mutex_lock(&priv->mutex);
9092 wrqu->sens.fixed = 1;
9093 wrqu->sens.value = priv->roaming_threshold;
9094 mutex_unlock(&priv->mutex);
9095
9096 IPW_DEBUG_WX("GET roaming threshold -> %s %d \n",
9097 wrqu->power.disabled ? "OFF" : "ON", wrqu->power.value);
9098
9099 return 0;
9100}
9101
43f66a6c
JK		 9102static int ipw_wx_set_rate(struct net_device *dev,
9103 struct iw_request_info *info,
9104 union iwreq_data *wrqu, char *extra)
bf79451e 9105{
ea2b26e0
JK		 9106 /* TODO: We should use semaphores or locks for access to priv */
9107 struct ipw_priv *priv = ieee80211_priv(dev);
9108 u32 target_rate = wrqu->bitrate.value;
9109 u32 fixed, mask;
9110
9111 /* value = -1, fixed = 0 means auto only, so we should use all rates offered by AP */
9112 /* value = X, fixed = 1 means only rate X */
9113 /* value = X, fixed = 0 means all rates lower equal X */
9114
9115 if (target_rate == -1) {
9116 fixed = 0;
9117 mask = IEEE80211_DEFAULT_RATES_MASK;
9118 /* Now we should reassociate */
9119 goto apply;
9120 }
9121
9122 mask = 0;
9123 fixed = wrqu->bitrate.fixed;
9124
9125 if (target_rate == 1000000 || !fixed)
9126 mask |= IEEE80211_CCK_RATE_1MB_MASK;
9127 if (target_rate == 1000000)
9128 goto apply;
9129
9130 if (target_rate == 2000000 || !fixed)
9131 mask |= IEEE80211_CCK_RATE_2MB_MASK;
9132 if (target_rate == 2000000)
9133 goto apply;
9134
9135 if (target_rate == 5500000 || !fixed)
9136 mask |= IEEE80211_CCK_RATE_5MB_MASK;
9137 if (target_rate == 5500000)
9138 goto apply;
9139
9140 if (target_rate == 6000000 || !fixed)
9141 mask |= IEEE80211_OFDM_RATE_6MB_MASK;
9142 if (target_rate == 6000000)
9143 goto apply;
9144
9145 if (target_rate == 9000000 || !fixed)
9146 mask |= IEEE80211_OFDM_RATE_9MB_MASK;
9147 if (target_rate == 9000000)
9148 goto apply;
9149
9150 if (target_rate == 11000000 || !fixed)
9151 mask |= IEEE80211_CCK_RATE_11MB_MASK;
9152 if (target_rate == 11000000)
9153 goto apply;
9154
9155 if (target_rate == 12000000 || !fixed)
9156 mask |= IEEE80211_OFDM_RATE_12MB_MASK;
9157 if (target_rate == 12000000)
9158 goto apply;
9159
9160 if (target_rate == 18000000 || !fixed)
9161 mask |= IEEE80211_OFDM_RATE_18MB_MASK;
9162 if (target_rate == 18000000)
9163 goto apply;
9164
9165 if (target_rate == 24000000 || !fixed)
9166 mask |= IEEE80211_OFDM_RATE_24MB_MASK;
9167 if (target_rate == 24000000)
9168 goto apply;
9169
9170 if (target_rate == 36000000 || !fixed)
9171 mask |= IEEE80211_OFDM_RATE_36MB_MASK;
9172 if (target_rate == 36000000)
9173 goto apply;
9174
9175 if (target_rate == 48000000 || !fixed)
9176 mask |= IEEE80211_OFDM_RATE_48MB_MASK;
9177 if (target_rate == 48000000)
9178 goto apply;
9179
9180 if (target_rate == 54000000 || !fixed)
9181 mask |= IEEE80211_OFDM_RATE_54MB_MASK;
9182 if (target_rate == 54000000)
9183 goto apply;
9184
9185 IPW_DEBUG_WX("invalid rate specified, returning error\n");
9186 return -EINVAL;
9187
9188 apply:
9189 IPW_DEBUG_WX("Setting rate mask to 0x%08X [%s]\n",
9190 mask, fixed ? "fixed" : "sub-rates");
4644151b 9191 mutex_lock(&priv->mutex);
b095c381 9192 if (mask == IEEE80211_DEFAULT_RATES_MASK) {
ea2b26e0 9193 priv->config &= ~CFG_FIXED_RATE;
b095c381
JK		 9194 ipw_set_fixed_rate(priv, priv->ieee->mode);
9195 } else
ea2b26e0
JK		 9196 priv->config |= CFG_FIXED_RATE;
9197
c848d0af
JK		 9198 if (priv->rates_mask == mask) {
9199 IPW_DEBUG_WX("Mask set to current mask.\n");
4644151b 9200 mutex_unlock(&priv->mutex);
c848d0af 9201 return 0;
ea2b26e0
JK		 9202 }
9203
c848d0af
JK		 9204 priv->rates_mask = mask;
9205
9206 /* Network configuration changed -- force [re]association */
9207 IPW_DEBUG_ASSOC("[re]association triggered due to rates change.\n");
9208 if (!ipw_disassociate(priv))
9209 ipw_associate(priv);
9210
4644151b 9211 mutex_unlock(&priv->mutex);
ea2b26e0 9212 return 0;
43f66a6c
JK		 9213}
9214
bf79451e
JG		 9215static int ipw_wx_get_rate(struct net_device *dev,
9216 struct iw_request_info *info,
43f66a6c 9217 union iwreq_data *wrqu, char *extra)
bf79451e 9218{
0edd5b44 9219 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9220 mutex_lock(&priv->mutex);
43f66a6c 9221 wrqu->bitrate.value = priv->last_rate;
455936c7 9222 wrqu->bitrate.fixed = (priv->config & CFG_FIXED_RATE) ? 1 : 0;
4644151b 9223 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9224 IPW_DEBUG_WX("GET Rate -> %d \n", wrqu->bitrate.value);
9225 return 0;
9226}
9227
bf79451e
JG		 9228static int ipw_wx_set_rts(struct net_device *dev,
9229 struct iw_request_info *info,
43f66a6c 9230 union iwreq_data *wrqu, char *extra)
bf79451e 9231{
43f66a6c 9232 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9233 mutex_lock(&priv->mutex);
ea8862dc 9234 if (wrqu->rts.disabled || !wrqu->rts.fixed)
43f66a6c
JK		 9235 priv->rts_threshold = DEFAULT_RTS_THRESHOLD;
9236 else {
9237 if (wrqu->rts.value < MIN_RTS_THRESHOLD ||
c848d0af 9238 wrqu->rts.value > MAX_RTS_THRESHOLD) {
4644151b 9239 mutex_unlock(&priv->mutex);
43f66a6c 9240 return -EINVAL;
c848d0af 9241 }
43f66a6c
JK		 9242 priv->rts_threshold = wrqu->rts.value;
9243 }
9244
9245 ipw_send_rts_threshold(priv, priv->rts_threshold);
4644151b 9246 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9247 IPW_DEBUG_WX("SET RTS Threshold -> %d \n", priv->rts_threshold);
9248 return 0;
9249}
9250
bf79451e
JG		 9251static int ipw_wx_get_rts(struct net_device *dev,
9252 struct iw_request_info *info,
43f66a6c 9253 union iwreq_data *wrqu, char *extra)
bf79451e 9254{
43f66a6c 9255 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9256 mutex_lock(&priv->mutex);
43f66a6c
JK		 9257 wrqu->rts.value = priv->rts_threshold;
9258 wrqu->rts.fixed = 0; /* no auto select */
0edd5b44 9259 wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD);
4644151b 9260 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9261 IPW_DEBUG_WX("GET RTS Threshold -> %d \n", wrqu->rts.value);
9262 return 0;
9263}
9264
bf79451e
JG		 9265static int ipw_wx_set_txpow(struct net_device *dev,
9266 struct iw_request_info *info,
43f66a6c 9267 union iwreq_data *wrqu, char *extra)
bf79451e 9268{
43f66a6c 9269 struct ipw_priv *priv = ieee80211_priv(dev);
6de9f7f2 9270 int err = 0;
43f66a6c 9271
4644151b 9272 mutex_lock(&priv->mutex);
c848d0af 9273 if (ipw_radio_kill_sw(priv, wrqu->power.disabled)) {
6de9f7f2
ZY		 9274 err = -EINPROGRESS;
9275 goto out;
43f66a6c 9276 }
43f66a6c 9277
b095c381
JK		 9278 if (!wrqu->power.fixed)
9279 wrqu->power.value = IPW_TX_POWER_DEFAULT;
9280
c848d0af 9281 if (wrqu->power.flags != IW_TXPOW_DBM) {
6de9f7f2
ZY		 9282 err = -EINVAL;
9283 goto out;
c848d0af 9284 }
43f66a6c 9285
b095c381 9286 if ((wrqu->power.value > IPW_TX_POWER_MAX) ||
afbf30a2 9287 (wrqu->power.value < IPW_TX_POWER_MIN)) {
6de9f7f2
ZY		 9288 err = -EINVAL;
9289 goto out;
c848d0af 9290 }
43f66a6c 9291
43f66a6c 9292 priv->tx_power = wrqu->power.value;
6de9f7f2
ZY		 9293 err = ipw_set_tx_power(priv);
9294 out:
4644151b 9295 mutex_unlock(&priv->mutex);
6de9f7f2 9296 return err;
43f66a6c
JK		 9297}
9298
bf79451e
JG		 9299static int ipw_wx_get_txpow(struct net_device *dev,
9300 struct iw_request_info *info,
43f66a6c 9301 union iwreq_data *wrqu, char *extra)
bf79451e 9302{
43f66a6c 9303 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9304 mutex_lock(&priv->mutex);
43f66a6c
JK		 9305 wrqu->power.value = priv->tx_power;
9306 wrqu->power.fixed = 1;
9307 wrqu->power.flags = IW_TXPOW_DBM;
9308 wrqu->power.disabled = (priv->status & STATUS_RF_KILL_MASK) ? 1 : 0;
4644151b 9309 mutex_unlock(&priv->mutex);
43f66a6c 9310
bf79451e 9311 IPW_DEBUG_WX("GET TX Power -> %s %d \n",
22501c8e 9312 wrqu->power.disabled ? "OFF" : "ON", wrqu->power.value);
43f66a6c
JK		 9313
9314 return 0;
9315}
9316
bf79451e 9317static int ipw_wx_set_frag(struct net_device *dev,
0edd5b44
JG		 9318 struct iw_request_info *info,
9319 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9320{
9321 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9322 mutex_lock(&priv->mutex);
ea8862dc 9323 if (wrqu->frag.disabled || !wrqu->frag.fixed)
43f66a6c
JK		 9324 priv->ieee->fts = DEFAULT_FTS;
9325 else {
9326 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
b095c381 9327 wrqu->frag.value > MAX_FRAG_THRESHOLD) {
4644151b 9328 mutex_unlock(&priv->mutex);
43f66a6c 9329 return -EINVAL;
b095c381 9330 }
bf79451e 9331
43f66a6c
JK		 9332 priv->ieee->fts = wrqu->frag.value & ~0x1;
9333 }
9334
9335 ipw_send_frag_threshold(priv, wrqu->frag.value);
4644151b 9336 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9337 IPW_DEBUG_WX("SET Frag Threshold -> %d \n", wrqu->frag.value);
9338 return 0;
9339}
9340
bf79451e 9341static int ipw_wx_get_frag(struct net_device *dev,
0edd5b44
JG		 9342 struct iw_request_info *info,
9343 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9344{
9345 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9346 mutex_lock(&priv->mutex);
43f66a6c
JK		 9347 wrqu->frag.value = priv->ieee->fts;
9348 wrqu->frag.fixed = 0; /* no auto select */
0edd5b44 9349 wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FTS);
4644151b 9350 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9351 IPW_DEBUG_WX("GET Frag Threshold -> %d \n", wrqu->frag.value);
9352
9353 return 0;
9354}
9355
bf79451e
JG		 9356static int ipw_wx_set_retry(struct net_device *dev,
9357 struct iw_request_info *info,
43f66a6c 9358 union iwreq_data *wrqu, char *extra)
bf79451e 9359{
afbf30a2
JK		 9360 struct ipw_priv *priv = ieee80211_priv(dev);
9361
9362 if (wrqu->retry.flags & IW_RETRY_LIFETIME || wrqu->retry.disabled)
9363 return -EINVAL;
9364
9365 if (!(wrqu->retry.flags & IW_RETRY_LIMIT))
9366 return 0;
9367
d5f7ac20 9368 if (wrqu->retry.value < 0 || wrqu->retry.value >= 255)
afbf30a2
JK		 9369 return -EINVAL;
9370
4644151b 9371 mutex_lock(&priv->mutex);
919ee6dd 9372 if (wrqu->retry.flags & IW_RETRY_SHORT)
afbf30a2 9373 priv->short_retry_limit = (u8) wrqu->retry.value;
919ee6dd 9374 else if (wrqu->retry.flags & IW_RETRY_LONG)
afbf30a2
JK		 9375 priv->long_retry_limit = (u8) wrqu->retry.value;
9376 else {
9377 priv->short_retry_limit = (u8) wrqu->retry.value;
9378 priv->long_retry_limit = (u8) wrqu->retry.value;
9379 }
9380
9381 ipw_send_retry_limit(priv, priv->short_retry_limit,
9382 priv->long_retry_limit);
4644151b 9383 mutex_unlock(&priv->mutex);
afbf30a2
JK		 9384 IPW_DEBUG_WX("SET retry limit -> short:%d long:%d\n",
9385 priv->short_retry_limit, priv->long_retry_limit);
9386 return 0;
43f66a6c
JK		 9387}
9388
bf79451e
JG		 9389static int ipw_wx_get_retry(struct net_device *dev,
9390 struct iw_request_info *info,
43f66a6c 9391 union iwreq_data *wrqu, char *extra)
bf79451e 9392{
afbf30a2
JK		 9393 struct ipw_priv *priv = ieee80211_priv(dev);
9394
4644151b 9395 mutex_lock(&priv->mutex);
afbf30a2
JK		 9396 wrqu->retry.disabled = 0;
9397
9398 if ((wrqu->retry.flags & IW_RETRY_TYPE) == IW_RETRY_LIFETIME) {
4644151b 9399 mutex_unlock(&priv->mutex);
afbf30a2
JK		 9400 return -EINVAL;
9401 }
9402
919ee6dd
JT		 9403 if (wrqu->retry.flags & IW_RETRY_LONG) {
9404 wrqu->retry.flags = IW_RETRY_LIMIT | IW_RETRY_LONG;
afbf30a2 9405 wrqu->retry.value = priv->long_retry_limit;
919ee6dd
JT		 9406 } else if (wrqu->retry.flags & IW_RETRY_SHORT) {
9407 wrqu->retry.flags = IW_RETRY_LIMIT | IW_RETRY_SHORT;
afbf30a2
JK		 9408 wrqu->retry.value = priv->short_retry_limit;
9409 } else {
9410 wrqu->retry.flags = IW_RETRY_LIMIT;
9411 wrqu->retry.value = priv->short_retry_limit;
9412 }
4644151b 9413 mutex_unlock(&priv->mutex);
afbf30a2
JK		 9414
9415 IPW_DEBUG_WX("GET retry -> %d \n", wrqu->retry.value);
9416
9417 return 0;
9418}
9419
afbf30a2
JK		 9420static int ipw_request_direct_scan(struct ipw_priv *priv, char *essid,
9421 int essid_len)
9422{
9423 struct ipw_scan_request_ext scan;
9424 int err = 0, scan_type;
9425
efb3442c
PE		 9426 if (!(priv->status & STATUS_INIT) ||
9427 (priv->status & STATUS_EXIT_PENDING))
9428 return 0;
9429
4644151b 9430 mutex_lock(&priv->mutex);
afbf30a2
JK		 9431
9432 if (priv->status & STATUS_RF_KILL_MASK) {
9433 IPW_DEBUG_HC("Aborting scan due to RF kill activation\n");
9434 priv->status |= STATUS_SCAN_PENDING;
9435 goto done;
9436 }
9437
9438 IPW_DEBUG_HC("starting request direct scan!\n");
9439
9440 if (priv->status & (STATUS_SCANNING | STATUS_SCAN_ABORTING)) {
d834a41c
OK		 9441 /* We should not sleep here; otherwise we will block most
9442 * of the system (for instance, we hold rtnl_lock when we
9443 * get here).
9444 */
9445 err = -EAGAIN;
9446 goto done;
afbf30a2
JK		 9447 }
9448 memset(&scan, 0, sizeof(scan));
9449
9450 if (priv->config & CFG_SPEED_SCAN)
9451 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
9452 cpu_to_le16(30);
9453 else
9454 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
9455 cpu_to_le16(20);
9456
9457 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN] =
9458 cpu_to_le16(20);
1fe0adb4 9459 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] = cpu_to_le16(120);
afbf30a2
JK		 9460 scan.dwell_time[IPW_SCAN_ACTIVE_DIRECT_SCAN] = cpu_to_le16(20);
9461
9462 scan.full_scan_index = cpu_to_le32(ieee80211_get_scans(priv->ieee));
9463
9464 err = ipw_send_ssid(priv, essid, essid_len);
9465 if (err) {
9466 IPW_DEBUG_HC("Attempt to send SSID command failed\n");
9467 goto done;
9468 }
9469 scan_type = IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN;
9470
9471 ipw_add_scan_channels(priv, &scan, scan_type);
9472
9473 err = ipw_send_scan_request_ext(priv, &scan);
9474 if (err) {
9475 IPW_DEBUG_HC("Sending scan command failed: %08X\n", err);
9476 goto done;
9477 }
9478
9479 priv->status |= STATUS_SCANNING;
9480
9481 done:
4644151b 9482 mutex_unlock(&priv->mutex);
afbf30a2 9483 return err;
43f66a6c
JK		 9484}
9485
bf79451e
JG		 9486static int ipw_wx_set_scan(struct net_device *dev,
9487 struct iw_request_info *info,
43f66a6c
JK		 9488 union iwreq_data *wrqu, char *extra)
9489{
9490 struct ipw_priv *priv = ieee80211_priv(dev);
094c4d2d
ZY		 9491 struct iw_scan_req *req = (struct iw_scan_req *)extra;
9492
9493 if (wrqu->data.length == sizeof(struct iw_scan_req)) {
afbf30a2
JK		 9494 if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
9495 ipw_request_direct_scan(priv, req->essid,
9496 req->essid_len);
9497 return 0;
9498 }
094c4d2d
ZY		 9499 if (req->scan_type == IW_SCAN_TYPE_PASSIVE) {
9500 queue_work(priv->workqueue,
9501 &priv->request_passive_scan);
9502 return 0;
9503 }
afbf30a2 9504 }
8935f39e 9505
43f66a6c 9506 IPW_DEBUG_WX("Start scan\n");
b095c381 9507
c4028958 9508 queue_delayed_work(priv->workqueue, &priv->request_scan, 0);
b095c381 9509
43f66a6c
JK		 9510 return 0;
9511}
9512
bf79451e
JG		 9513static int ipw_wx_get_scan(struct net_device *dev,
9514 struct iw_request_info *info,
43f66a6c 9515 union iwreq_data *wrqu, char *extra)
bf79451e 9516{
43f66a6c
JK		 9517 struct ipw_priv *priv = ieee80211_priv(dev);
9518 return ieee80211_wx_get_scan(priv->ieee, info, wrqu, extra);
9519}
9520
bf79451e 9521static int ipw_wx_set_encode(struct net_device *dev,
0edd5b44
JG		 9522 struct iw_request_info *info,
9523 union iwreq_data *wrqu, char *key)
43f66a6c
JK		 9524{
9525 struct ipw_priv *priv = ieee80211_priv(dev);
afbf30a2 9526 int ret;
caeff81b 9527 u32 cap = priv->capability;
afbf30a2 9528
4644151b 9529 mutex_lock(&priv->mutex);
afbf30a2 9530 ret = ieee80211_wx_set_encode(priv->ieee, info, wrqu, key);
afbf30a2 9531
caeff81b
HL		 9532 /* In IBSS mode, we need to notify the firmware to update
9533 * the beacon info after we changed the capability. */
9534 if (cap != priv->capability &&
9535 priv->ieee->iw_mode == IW_MODE_ADHOC &&
9536 priv->status & STATUS_ASSOCIATED)
9537 ipw_disassociate(priv);
9538
4644151b 9539 mutex_unlock(&priv->mutex);
afbf30a2 9540 return ret;
43f66a6c
JK		 9541}
9542
bf79451e 9543static int ipw_wx_get_encode(struct net_device *dev,
0edd5b44
JG		 9544 struct iw_request_info *info,
9545 union iwreq_data *wrqu, char *key)
43f66a6c
JK		 9546{
9547 struct ipw_priv *priv = ieee80211_priv(dev);
9548 return ieee80211_wx_get_encode(priv->ieee, info, wrqu, key);
9549}
9550
bf79451e 9551static int ipw_wx_set_power(struct net_device *dev,
0edd5b44
JG		 9552 struct iw_request_info *info,
9553 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9554{
9555 struct ipw_priv *priv = ieee80211_priv(dev);
9556 int err;
4644151b 9557 mutex_lock(&priv->mutex);
43f66a6c
JK		 9558 if (wrqu->power.disabled) {
9559 priv->power_mode = IPW_POWER_LEVEL(priv->power_mode);
9560 err = ipw_send_power_mode(priv, IPW_POWER_MODE_CAM);
9561 if (err) {
9562 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9563 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9564 return err;
9565 }
43f66a6c 9566 IPW_DEBUG_WX("SET Power Management Mode -> off\n");
4644151b 9567 mutex_unlock(&priv->mutex);
43f66a6c 9568 return 0;
bf79451e 9569 }
43f66a6c
JK		 9570
9571 switch (wrqu->power.flags & IW_POWER_MODE) {
0edd5b44
JG		 9572 case IW_POWER_ON: /* If not specified */
9573 case IW_POWER_MODE: /* If set all mask */
9574 case IW_POWER_ALL_R: /* If explicitely state all */
43f66a6c 9575 break;
0edd5b44 9576 default: /* Otherwise we don't support it */
43f66a6c
JK		 9577 IPW_DEBUG_WX("SET PM Mode: %X not supported.\n",
9578 wrqu->power.flags);
4644151b 9579 mutex_unlock(&priv->mutex);
bf79451e 9580 return -EOPNOTSUPP;
43f66a6c 9581 }
bf79451e 9582
43f66a6c
JK		 9583 /* If the user hasn't specified a power management mode yet, default
9584 * to BATTERY */
0edd5b44 9585 if (IPW_POWER_LEVEL(priv->power_mode) == IPW_POWER_AC)
43f66a6c 9586 priv->power_mode = IPW_POWER_ENABLED | IPW_POWER_BATTERY;
bf79451e 9587 else
43f66a6c 9588 priv->power_mode = IPW_POWER_ENABLED | priv->power_mode;
4e157f08 9589
43f66a6c
JK		 9590 err = ipw_send_power_mode(priv, IPW_POWER_LEVEL(priv->power_mode));
9591 if (err) {
9592 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9593 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9594 return err;
9595 }
9596
0edd5b44 9597 IPW_DEBUG_WX("SET Power Management Mode -> 0x%02X\n", priv->power_mode);
4644151b 9598 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9599 return 0;
9600}
9601
bf79451e 9602static int ipw_wx_get_power(struct net_device *dev,
0edd5b44
JG		 9603 struct iw_request_info *info,
9604 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9605{
9606 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9607 mutex_lock(&priv->mutex);
a613bffd 9608 if (!(priv->power_mode & IPW_POWER_ENABLED))
43f66a6c 9609 wrqu->power.disabled = 1;
a613bffd 9610 else
43f66a6c 9611 wrqu->power.disabled = 0;
43f66a6c 9612
4644151b 9613 mutex_unlock(&priv->mutex);
43f66a6c 9614 IPW_DEBUG_WX("GET Power Management Mode -> %02X\n", priv->power_mode);
bf79451e 9615
43f66a6c
JK		 9616 return 0;
9617}
9618
bf79451e 9619static int ipw_wx_set_powermode(struct net_device *dev,
0edd5b44
JG		 9620 struct iw_request_info *info,
9621 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9622{
9623 struct ipw_priv *priv = ieee80211_priv(dev);
9624 int mode = *(int *)extra;
9625 int err;
4e157f08 9626
4644151b 9627 mutex_lock(&priv->mutex);
4e157f08 9628 if ((mode < 1) || (mode > IPW_POWER_LIMIT))
43f66a6c 9629 mode = IPW_POWER_AC;
bf79451e 9630
4e157f08 9631 if (IPW_POWER_LEVEL(priv->power_mode) != mode) {
43f66a6c 9632 err = ipw_send_power_mode(priv, mode);
43f66a6c
JK		 9633 if (err) {
9634 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9635 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9636 return err;
9637 }
4e157f08 9638 priv->power_mode = IPW_POWER_ENABLED | mode;
43f66a6c 9639 }
4644151b 9640 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9641 return 0;
9642}
9643
9644#define MAX_WX_STRING 80
bf79451e 9645static int ipw_wx_get_powermode(struct net_device *dev,
0edd5b44
JG		 9646 struct iw_request_info *info,
9647 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9648{
9649 struct ipw_priv *priv = ieee80211_priv(dev);
9650 int level = IPW_POWER_LEVEL(priv->power_mode);
9651 char *p = extra;
9652
9653 p += snprintf(p, MAX_WX_STRING, "Power save level: %d ", level);
9654
9655 switch (level) {
9656 case IPW_POWER_AC:
9657 p += snprintf(p, MAX_WX_STRING - (p - extra), "(AC)");
9658 break;
9659 case IPW_POWER_BATTERY:
9660 p += snprintf(p, MAX_WX_STRING - (p - extra), "(BATTERY)");
9661 break;
9662 default:
9663 p += snprintf(p, MAX_WX_STRING - (p - extra),
bf79451e 9664 "(Timeout %dms, Period %dms)",
43f66a6c
JK		 9665 timeout_duration[level - 1] / 1000,
9666 period_duration[level - 1] / 1000);
9667 }
9668
9669 if (!(priv->power_mode & IPW_POWER_ENABLED))
0edd5b44 9670 p += snprintf(p, MAX_WX_STRING - (p - extra), " OFF");
43f66a6c
JK		 9671
9672 wrqu->data.length = p - extra + 1;
9673
9674 return 0;
9675}
9676
9677static int ipw_wx_set_wireless_mode(struct net_device *dev,
0edd5b44
JG		 9678 struct iw_request_info *info,
9679 union iwreq_data *wrqu, char *extra)
43f66a6c 9680{
0edd5b44 9681 struct ipw_priv *priv = ieee80211_priv(dev);
43f66a6c
JK		 9682 int mode = *(int *)extra;
9683 u8 band = 0, modulation = 0;
9684
9685 if (mode == 0 || mode & ~IEEE_MODE_MASK) {
0edd5b44 9686 IPW_WARNING("Attempt to set invalid wireless mode: %d\n", mode);
43f66a6c
JK		 9687 return -EINVAL;
9688 }
4644151b 9689 mutex_lock(&priv->mutex);
43f66a6c 9690 if (priv->adapter == IPW_2915ABG) {
a33a1982 9691 priv->ieee->abg_true = 1;
43f66a6c
JK		 9692 if (mode & IEEE_A) {
9693 band |= IEEE80211_52GHZ_BAND;
9694 modulation |= IEEE80211_OFDM_MODULATION;
9695 } else
a33a1982 9696 priv->ieee->abg_true = 0;
43f66a6c
JK		 9697 } else {
9698 if (mode & IEEE_A) {
9699 IPW_WARNING("Attempt to set 2200BG into "
9700 "802.11a mode\n");
4644151b 9701 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9702 return -EINVAL;
9703 }
9704
a33a1982 9705 priv->ieee->abg_true = 0;
43f66a6c
JK		 9706 }
9707
9708 if (mode & IEEE_B) {
9709 band |= IEEE80211_24GHZ_BAND;
9710 modulation |= IEEE80211_CCK_MODULATION;
9711 } else
a33a1982 9712 priv->ieee->abg_true = 0;
bf79451e 9713
43f66a6c
JK		 9714 if (mode & IEEE_G) {
9715 band |= IEEE80211_24GHZ_BAND;
9716 modulation |= IEEE80211_OFDM_MODULATION;
9717 } else
a33a1982 9718 priv->ieee->abg_true = 0;
43f66a6c
JK		 9719
9720 priv->ieee->mode = mode;
9721 priv->ieee->freq_band = band;
9722 priv->ieee->modulation = modulation;
0edd5b44 9723 init_supported_rates(priv, &priv->rates);
43f66a6c 9724
c848d0af
JK		 9725 /* Network configuration changed -- force [re]association */
9726 IPW_DEBUG_ASSOC("[re]association triggered due to mode change.\n");
9727 if (!ipw_disassociate(priv)) {
43f66a6c 9728 ipw_send_supported_rates(priv, &priv->rates);
c848d0af
JK		 9729 ipw_associate(priv);
9730 }
43f66a6c 9731
a613bffd
JK		 9732 /* Update the band LEDs */
9733 ipw_led_band_on(priv);
43f66a6c 9734
bf79451e 9735 IPW_DEBUG_WX("PRIV SET MODE: %c%c%c\n",
43f66a6c 9736 mode & IEEE_A ? 'a' : '.',
0edd5b44 9737 mode & IEEE_B ? 'b' : '.', mode & IEEE_G ? 'g' : '.');
4644151b 9738 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9739 return 0;
9740}
9741
9742static int ipw_wx_get_wireless_mode(struct net_device *dev,
0edd5b44
JG		 9743 struct iw_request_info *info,
9744 union iwreq_data *wrqu, char *extra)
43f66a6c 9745{
0edd5b44 9746 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9747 mutex_lock(&priv->mutex);
ea2b26e0
JK		 9748 switch (priv->ieee->mode) {
9749 case IEEE_A:
43f66a6c
JK		 9750 strncpy(extra, "802.11a (1)", MAX_WX_STRING);
9751 break;
ea2b26e0
JK		 9752 case IEEE_B:
9753 strncpy(extra, "802.11b (2)", MAX_WX_STRING);
9754 break;
9755 case IEEE_A | IEEE_B:
9756 strncpy(extra, "802.11ab (3)", MAX_WX_STRING);
9757 break;
9758 case IEEE_G:
9759 strncpy(extra, "802.11g (4)", MAX_WX_STRING);
9760 break;
9761 case IEEE_A | IEEE_G:
9762 strncpy(extra, "802.11ag (5)", MAX_WX_STRING);
9763 break;
9764 case IEEE_B | IEEE_G:
9765 strncpy(extra, "802.11bg (6)", MAX_WX_STRING);
9766 break;
9767 case IEEE_A | IEEE_B | IEEE_G:
9768 strncpy(extra, "802.11abg (7)", MAX_WX_STRING);
9769 break;
9770 default:
9771 strncpy(extra, "unknown", MAX_WX_STRING);
43f66a6c 9772 break;
bf79451e
JG		 9773 }
9774
43f66a6c
JK		 9775 IPW_DEBUG_WX("PRIV GET MODE: %s\n", extra);
9776
0edd5b44 9777 wrqu->data.length = strlen(extra) + 1;
4644151b 9778 mutex_unlock(&priv->mutex);
b095c381
JK		 9779
9780 return 0;
9781}
9782
9783static int ipw_wx_set_preamble(struct net_device *dev,
9784 struct iw_request_info *info,
9785 union iwreq_data *wrqu, char *extra)
9786{
9787 struct ipw_priv *priv = ieee80211_priv(dev);
9788 int mode = *(int *)extra;
4644151b 9789 mutex_lock(&priv->mutex);
b095c381
JK		 9790 /* Switching from SHORT -> LONG requires a disassociation */
9791 if (mode == 1) {
9792 if (!(priv->config & CFG_PREAMBLE_LONG)) {
9793 priv->config |= CFG_PREAMBLE_LONG;
9794
9795 /* Network configuration changed -- force [re]association */
9796 IPW_DEBUG_ASSOC
9797 ("[re]association triggered due to preamble change.\n");
9798 if (!ipw_disassociate(priv))
9799 ipw_associate(priv);
9800 }
9801 goto done;
9802 }
43f66a6c 9803
b095c381
JK		 9804 if (mode == 0) {
9805 priv->config &= ~CFG_PREAMBLE_LONG;
9806 goto done;
9807 }
4644151b 9808 mutex_unlock(&priv->mutex);
b095c381
JK		 9809 return -EINVAL;
9810
9811 done:
4644151b 9812 mutex_unlock(&priv->mutex);
b095c381
JK		 9813 return 0;
9814}
9815
9816static int ipw_wx_get_preamble(struct net_device *dev,
9817 struct iw_request_info *info,
9818 union iwreq_data *wrqu, char *extra)
9819{
9820 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9821 mutex_lock(&priv->mutex);
b095c381
JK		 9822 if (priv->config & CFG_PREAMBLE_LONG)
9823 snprintf(wrqu->name, IFNAMSIZ, "long (1)");
9824 else
9825 snprintf(wrqu->name, IFNAMSIZ, "auto (0)");
4644151b 9826 mutex_unlock(&priv->mutex);
0edd5b44 9827 return 0;
43f66a6c
JK		 9828}
9829
b095c381
JK		 9830#ifdef CONFIG_IPW2200_MONITOR
9831static int ipw_wx_set_monitor(struct net_device *dev,
bf79451e 9832 struct iw_request_info *info,
43f66a6c 9833 union iwreq_data *wrqu, char *extra)
bf79451e 9834{
43f66a6c
JK		 9835 struct ipw_priv *priv = ieee80211_priv(dev);
9836 int *parms = (int *)extra;
9837 int enable = (parms[0] > 0);
4644151b 9838 mutex_lock(&priv->mutex);
b095c381 9839 IPW_DEBUG_WX("SET MONITOR: %d %d\n", enable, parms[1]);
43f66a6c
JK		 9840 if (enable) {
9841 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
459d4087 9842#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK		 9843 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
9844#else
43f66a6c 9845 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 9846#endif
b095c381 9847 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c 9848 }
bf79451e 9849
43f66a6c
JK		 9850 ipw_set_channel(priv, parms[1]);
9851 } else {
b095c381 9852 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
4644151b 9853 mutex_unlock(&priv->mutex);
43f66a6c 9854 return 0;
b095c381 9855 }
43f66a6c 9856 priv->net_dev->type = ARPHRD_ETHER;
b095c381 9857 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c 9858 }
4644151b 9859 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9860 return 0;
9861}
9862
67fd6b45 9863#endif /* CONFIG_IPW2200_MONITOR */
b095c381 9864
bf79451e
JG		 9865static int ipw_wx_reset(struct net_device *dev,
9866 struct iw_request_info *info,
43f66a6c 9867 union iwreq_data *wrqu, char *extra)
bf79451e 9868{
43f66a6c
JK		 9869 struct ipw_priv *priv = ieee80211_priv(dev);
9870 IPW_DEBUG_WX("RESET\n");
b095c381
JK		 9871 queue_work(priv->workqueue, &priv->adapter_restart);
9872 return 0;
9873}
9874
b095c381
JK		 9875static int ipw_wx_sw_reset(struct net_device *dev,
9876 struct iw_request_info *info,
9877 union iwreq_data *wrqu, char *extra)
ea2b26e0
JK		 9878{
9879 struct ipw_priv *priv = ieee80211_priv(dev);
b095c381
JK		 9880 union iwreq_data wrqu_sec = {
9881 .encoding = {
9882 .flags = IW_ENCODE_DISABLED,
9883 },
9884 };
afbf30a2 9885 int ret;
c848d0af 9886
b095c381 9887 IPW_DEBUG_WX("SW_RESET\n");
ea2b26e0 9888
4644151b 9889 mutex_lock(&priv->mutex);
ea2b26e0 9890
d6d5b5c1 9891 ret = ipw_sw_reset(priv, 2);
afbf30a2
JK		 9892 if (!ret) {
9893 free_firmware();
9894 ipw_adapter_restart(priv);
9895 }
ea2b26e0 9896
b095c381
JK		 9897 /* The SW reset bit might have been toggled on by the 'disable'
9898 * module parameter, so take appropriate action */
9899 ipw_radio_kill_sw(priv, priv->status & STATUS_RF_KILL_SW);
ea2b26e0 9900
4644151b 9901 mutex_unlock(&priv->mutex);
b095c381 9902 ieee80211_wx_set_encode(priv->ieee, info, &wrqu_sec, NULL);
4644151b 9903 mutex_lock(&priv->mutex);
bf79451e 9904
b095c381
JK		 9905 if (!(priv->status & STATUS_RF_KILL_MASK)) {
9906 /* Configuration likely changed -- force [re]association */
9907 IPW_DEBUG_ASSOC("[re]association triggered due to sw "
9908 "reset.\n");
9909 if (!ipw_disassociate(priv))
9910 ipw_associate(priv);
43f66a6c 9911 }
b095c381 9912
4644151b 9913 mutex_unlock(&priv->mutex);
43f66a6c 9914
43f66a6c
JK		 9915 return 0;
9916}
43f66a6c
JK		 9917
9918/* Rebase the WE IOCTLs to zero for the handler array */
9919#define IW_IOCTL(x) [(x)-SIOCSIWCOMMIT]
0edd5b44 9920static iw_handler ipw_wx_handlers[] = {
ea2b26e0
JK		 9921 IW_IOCTL(SIOCGIWNAME) = ipw_wx_get_name,
9922 IW_IOCTL(SIOCSIWFREQ) = ipw_wx_set_freq,
9923 IW_IOCTL(SIOCGIWFREQ) = ipw_wx_get_freq,
9924 IW_IOCTL(SIOCSIWMODE) = ipw_wx_set_mode,
9925 IW_IOCTL(SIOCGIWMODE) = ipw_wx_get_mode,
651be26f
OH		 9926 IW_IOCTL(SIOCSIWSENS) = ipw_wx_set_sens,
9927 IW_IOCTL(SIOCGIWSENS) = ipw_wx_get_sens,
ea2b26e0
JK		 9928 IW_IOCTL(SIOCGIWRANGE) = ipw_wx_get_range,
9929 IW_IOCTL(SIOCSIWAP) = ipw_wx_set_wap,
9930 IW_IOCTL(SIOCGIWAP) = ipw_wx_get_wap,
9931 IW_IOCTL(SIOCSIWSCAN) = ipw_wx_set_scan,
9932 IW_IOCTL(SIOCGIWSCAN) = ipw_wx_get_scan,
9933 IW_IOCTL(SIOCSIWESSID) = ipw_wx_set_essid,
9934 IW_IOCTL(SIOCGIWESSID) = ipw_wx_get_essid,
9935 IW_IOCTL(SIOCSIWNICKN) = ipw_wx_set_nick,
9936 IW_IOCTL(SIOCGIWNICKN) = ipw_wx_get_nick,
9937 IW_IOCTL(SIOCSIWRATE) = ipw_wx_set_rate,
9938 IW_IOCTL(SIOCGIWRATE) = ipw_wx_get_rate,
9939 IW_IOCTL(SIOCSIWRTS) = ipw_wx_set_rts,
9940 IW_IOCTL(SIOCGIWRTS) = ipw_wx_get_rts,
9941 IW_IOCTL(SIOCSIWFRAG) = ipw_wx_set_frag,
9942 IW_IOCTL(SIOCGIWFRAG) = ipw_wx_get_frag,
9943 IW_IOCTL(SIOCSIWTXPOW) = ipw_wx_set_txpow,
9944 IW_IOCTL(SIOCGIWTXPOW) = ipw_wx_get_txpow,
9945 IW_IOCTL(SIOCSIWRETRY) = ipw_wx_set_retry,
9946 IW_IOCTL(SIOCGIWRETRY) = ipw_wx_get_retry,
9947 IW_IOCTL(SIOCSIWENCODE) = ipw_wx_set_encode,
9948 IW_IOCTL(SIOCGIWENCODE) = ipw_wx_get_encode,
9949 IW_IOCTL(SIOCSIWPOWER) = ipw_wx_set_power,
9950 IW_IOCTL(SIOCGIWPOWER) = ipw_wx_get_power,
a613bffd
JK		 9951 IW_IOCTL(SIOCSIWSPY) = iw_handler_set_spy,
9952 IW_IOCTL(SIOCGIWSPY) = iw_handler_get_spy,
9953 IW_IOCTL(SIOCSIWTHRSPY) = iw_handler_set_thrspy,
9954 IW_IOCTL(SIOCGIWTHRSPY) = iw_handler_get_thrspy,
afbf30a2
JK		 9955 IW_IOCTL(SIOCSIWGENIE) = ipw_wx_set_genie,
9956 IW_IOCTL(SIOCGIWGENIE) = ipw_wx_get_genie,
9957 IW_IOCTL(SIOCSIWMLME) = ipw_wx_set_mlme,
9958 IW_IOCTL(SIOCSIWAUTH) = ipw_wx_set_auth,
9959 IW_IOCTL(SIOCGIWAUTH) = ipw_wx_get_auth,
9960 IW_IOCTL(SIOCSIWENCODEEXT) = ipw_wx_set_encodeext,
9961 IW_IOCTL(SIOCGIWENCODEEXT) = ipw_wx_get_encodeext,
43f66a6c
JK		 9962};
9963
b095c381
JK		 9964enum {
9965 IPW_PRIV_SET_POWER = SIOCIWFIRSTPRIV,
9966 IPW_PRIV_GET_POWER,
9967 IPW_PRIV_SET_MODE,
9968 IPW_PRIV_GET_MODE,
9969 IPW_PRIV_SET_PREAMBLE,
9970 IPW_PRIV_GET_PREAMBLE,
9971 IPW_PRIV_RESET,
9972 IPW_PRIV_SW_RESET,
9973#ifdef CONFIG_IPW2200_MONITOR
9974 IPW_PRIV_SET_MONITOR,
9975#endif
9976};
43f66a6c 9977
bf79451e 9978static struct iw_priv_args ipw_priv_args[] = {
43f66a6c 9979 {
0edd5b44
JG		 9980 .cmd = IPW_PRIV_SET_POWER,
9981 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9982 .name = "set_power"},
43f66a6c 9983 {
0edd5b44
JG		 9984 .cmd = IPW_PRIV_GET_POWER,
9985 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | MAX_WX_STRING,
9986 .name = "get_power"},
43f66a6c 9987 {
0edd5b44
JG		 9988 .cmd = IPW_PRIV_SET_MODE,
9989 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9990 .name = "set_mode"},
43f66a6c 9991 {
0edd5b44
JG		 9992 .cmd = IPW_PRIV_GET_MODE,
9993 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | MAX_WX_STRING,
9994 .name = "get_mode"},
43f66a6c 9995 {
ea2b26e0
JK		 9996 .cmd = IPW_PRIV_SET_PREAMBLE,
9997 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9998 .name = "set_preamble"},
9999 {
10000 .cmd = IPW_PRIV_GET_PREAMBLE,
10001 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ,
10002 .name = "get_preamble"},
43f66a6c 10003 {
0edd5b44
JG		 10004 IPW_PRIV_RESET,
10005 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 0, 0, "reset"},
b095c381
JK		 10006 {
10007 IPW_PRIV_SW_RESET,
10008 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 0, 0, "sw_reset"},
10009#ifdef CONFIG_IPW2200_MONITOR
10010 {
10011 IPW_PRIV_SET_MONITOR,
10012 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "monitor"},
10013#endif /* CONFIG_IPW2200_MONITOR */
43f66a6c
JK		 10014};
10015
10016static iw_handler ipw_priv_handler[] = {
10017 ipw_wx_set_powermode,
10018 ipw_wx_get_powermode,
10019 ipw_wx_set_wireless_mode,
10020 ipw_wx_get_wireless_mode,
ea2b26e0
JK		 10021 ipw_wx_set_preamble,
10022 ipw_wx_get_preamble,
bf79451e 10023 ipw_wx_reset,
b095c381
JK		 10024 ipw_wx_sw_reset,
10025#ifdef CONFIG_IPW2200_MONITOR
10026 ipw_wx_set_monitor,
43f66a6c
JK		 10027#endif
10028};
10029
0edd5b44 10030static struct iw_handler_def ipw_wx_handler_def = {
ea2b26e0
JK		 10031 .standard = ipw_wx_handlers,
10032 .num_standard = ARRAY_SIZE(ipw_wx_handlers),
10033 .num_private = ARRAY_SIZE(ipw_priv_handler),
10034 .num_private_args = ARRAY_SIZE(ipw_priv_args),
10035 .private = ipw_priv_handler,
10036 .private_args = ipw_priv_args,
97a78ca9 10037 .get_wireless_stats = ipw_get_wireless_stats,
43f66a6c
JK		 10038};
10039
43f66a6c
JK		 10040/*
10041 * Get wireless statistics.
10042 * Called by /proc/net/wireless
10043 * Also called by SIOCGIWSTATS
10044 */
0edd5b44 10045static struct iw_statistics *ipw_get_wireless_stats(struct net_device *dev)
43f66a6c
JK		 10046{
10047 struct ipw_priv *priv = ieee80211_priv(dev);
10048 struct iw_statistics *wstats;
bf79451e 10049
43f66a6c
JK		 10050 wstats = &priv->wstats;
10051
ea2b26e0 10052 /* if hw is disabled, then ipw_get_ordinal() can't be called.
afbf30a2 10053 * netdev->get_wireless_stats seems to be called before fw is
43f66a6c
JK		 10054 * initialized. STATUS_ASSOCIATED will only be set if the hw is up
10055 * and associated; if not associcated, the values are all meaningless
10056 * anyway, so set them all to NULL and INVALID */
10057 if (!(priv->status & STATUS_ASSOCIATED)) {
10058 wstats->miss.beacon = 0;
10059 wstats->discard.retries = 0;
10060 wstats->qual.qual = 0;
10061 wstats->qual.level = 0;
10062 wstats->qual.noise = 0;
10063 wstats->qual.updated = 7;
10064 wstats->qual.updated |= IW_QUAL_NOISE_INVALID |
0edd5b44 10065 IW_QUAL_QUAL_INVALID | IW_QUAL_LEVEL_INVALID;
43f66a6c 10066 return wstats;
bf79451e 10067 }
43f66a6c
JK		 10068
10069 wstats->qual.qual = priv->quality;
00d21de5
ZY		 10070 wstats->qual.level = priv->exp_avg_rssi;
10071 wstats->qual.noise = priv->exp_avg_noise;
43f66a6c 10072 wstats->qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED |
b191608a 10073 IW_QUAL_NOISE_UPDATED | IW_QUAL_DBM;
43f66a6c
JK		 10074
10075 wstats->miss.beacon = average_value(&priv->average_missed_beacons);
10076 wstats->discard.retries = priv->last_tx_failures;
10077 wstats->discard.code = priv->ieee->ieee_stats.rx_discards_undecryptable;
bf79451e 10078
43f66a6c
JK		 10079/* if (ipw_get_ordinal(priv, IPW_ORD_STAT_TX_RETRY, &tx_retry, &len))
10080 goto fail_get_ordinal;
10081 wstats->discard.retries += tx_retry; */
bf79451e 10082
43f66a6c
JK		 10083 return wstats;
10084}
10085
43f66a6c
JK		 10086/* net device stuff */
10087
858119e1 10088static void init_sys_config(struct ipw_sys_config *sys_config)
43f66a6c 10089{
0edd5b44 10090 memset(sys_config, 0, sizeof(struct ipw_sys_config));
810dabd4 10091 sys_config->bt_coexistence = 0;
43f66a6c
JK		 10092 sys_config->answer_broadcast_ssid_probe = 0;
10093 sys_config->accept_all_data_frames = 0;
10094 sys_config->accept_non_directed_frames = 1;
10095 sys_config->exclude_unicast_unencrypted = 0;
10096 sys_config->disable_unicast_decryption = 1;
10097 sys_config->exclude_multicast_unencrypted = 0;
10098 sys_config->disable_multicast_decryption = 1;
d2b83e12
ZY		 10099 if (antenna < CFG_SYS_ANTENNA_BOTH || antenna > CFG_SYS_ANTENNA_B)
10100 antenna = CFG_SYS_ANTENNA_BOTH;
10101 sys_config->antenna_diversity = antenna;
0edd5b44 10102 sys_config->pass_crc_to_host = 0; /* TODO: See if 1 gives us FCS */
43f66a6c 10103 sys_config->dot11g_auto_detection = 0;
bf79451e 10104 sys_config->enable_cts_to_self = 0;
43f66a6c 10105 sys_config->bt_coexist_collision_thr = 0;
67fd6b45 10106 sys_config->pass_noise_stats_to_host = 1; /* 1 -- fix for 256 */
12977154 10107 sys_config->silence_threshold = 0x1e;
43f66a6c
JK		 10108}
10109
10110static int ipw_net_open(struct net_device *dev)
10111{
10112 struct ipw_priv *priv = ieee80211_priv(dev);
10113 IPW_DEBUG_INFO("dev->open\n");
10114 /* we should be verifying the device is ready to be opened */
4644151b 10115 mutex_lock(&priv->mutex);
bf79451e
JG		 10116 if (!(priv->status & STATUS_RF_KILL_MASK) &&
10117 (priv->status & STATUS_ASSOCIATED))
43f66a6c 10118 netif_start_queue(dev);
4644151b 10119 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10120 return 0;
10121}
10122
10123static int ipw_net_stop(struct net_device *dev)
10124{
10125 IPW_DEBUG_INFO("dev->close\n");
10126 netif_stop_queue(dev);
10127 return 0;
10128}
10129
10130/*
10131todo:
10132
10133modify to send one tfd per fragment instead of using chunking. otherwise
10134we need to heavily modify the ieee80211_skb_to_txb.
10135*/
10136
858119e1 10137static int ipw_tx_skb(struct ipw_priv *priv, struct ieee80211_txb *txb,
227d2dc1 10138 int pri)
43f66a6c 10139{
a5cf4fe6 10140 struct ieee80211_hdr_3addrqos *hdr = (struct ieee80211_hdr_3addrqos *)
0edd5b44 10141 txb->fragments[0]->data;
43f66a6c
JK		 10142 int i = 0;
10143 struct tfd_frame *tfd;
e43e3c1e 10144#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 10145 int tx_id = ipw_get_tx_queue_number(priv, pri);
10146 struct clx2_tx_queue *txq = &priv->txq[tx_id];
10147#else
43f66a6c 10148 struct clx2_tx_queue *txq = &priv->txq[0];
b095c381 10149#endif
43f66a6c
JK		 10150 struct clx2_queue *q = &txq->q;
10151 u8 id, hdr_len, unicast;
10152 u16 remaining_bytes;
c848d0af 10153 int fc;
0795af57 10154 DECLARE_MAC_BUF(mac);
43f66a6c 10155
a5cf4fe6 10156 hdr_len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_ctl));
43f66a6c
JK		 10157 switch (priv->ieee->iw_mode) {
10158 case IW_MODE_ADHOC:
3c19065a 10159 unicast = !is_multicast_ether_addr(hdr->addr1);
43f66a6c
JK		 10160 id = ipw_find_station(priv, hdr->addr1);
10161 if (id == IPW_INVALID_STATION) {
10162 id = ipw_add_station(priv, hdr->addr1);
10163 if (id == IPW_INVALID_STATION) {
10164 IPW_WARNING("Attempt to send data to "
0795af57
JP		 10165 "invalid cell: %s\n",
10166 print_mac(mac, hdr->addr1));
43f66a6c
JK		 10167 goto drop;
10168 }
10169 }
10170 break;
10171
10172 case IW_MODE_INFRA:
10173 default:
3c19065a 10174 unicast = !is_multicast_ether_addr(hdr->addr3);
43f66a6c
JK		 10175 id = 0;
10176 break;
10177 }
10178
10179 tfd = &txq->bd[q->first_empty];
10180 txq->txb[q->first_empty] = txb;
10181 memset(tfd, 0, sizeof(*tfd));
10182 tfd->u.data.station_number = id;
10183
10184 tfd->control_flags.message_type = TX_FRAME_TYPE;
10185 tfd->control_flags.control_bits = TFD_NEED_IRQ_MASK;
10186
10187 tfd->u.data.cmd_id = DINO_CMD_TX;
a613bffd 10188 tfd->u.data.len = cpu_to_le16(txb->payload_size);
43f66a6c 10189 remaining_bytes = txb->payload_size;
bf79451e 10190
43f66a6c 10191 if (priv->assoc_request.ieee_mode == IPW_B_MODE)
b095c381 10192 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_MODE_CCK;
43f66a6c 10193 else
b095c381 10194 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_MODE_OFDM;
43f66a6c 10195
ea2b26e0
JK		 10196 if (priv->assoc_request.preamble_length == DCT_FLAG_SHORT_PREAMBLE)
10197 tfd->u.data.tx_flags |= DCT_FLAG_SHORT_PREAMBLE;
43f66a6c 10198
c848d0af
JK		 10199 fc = le16_to_cpu(hdr->frame_ctl);
10200 hdr->frame_ctl = cpu_to_le16(fc & ~IEEE80211_FCTL_MOREFRAGS);
43f66a6c
JK		 10201
10202 memcpy(&tfd->u.data.tfd.tfd_24.mchdr, hdr, hdr_len);
10203
b095c381
JK		 10204 if (likely(unicast))
10205 tfd->u.data.tx_flags |= DCT_FLAG_ACK_REQD;
10206
10207 if (txb->encrypted && !priv->ieee->host_encrypt) {
10208 switch (priv->ieee->sec.level) {
10209 case SEC_LEVEL_3:
10210 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10211 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
b095c381
JK		 10212 /* XXX: ACK flag must be set for CCMP even if it
10213 * is a multicast/broadcast packet, because CCMP
10214 * group communication encrypted by GTK is
10215 * actually done by the AP. */
10216 if (!unicast)
10217 tfd->u.data.tx_flags |= DCT_FLAG_ACK_REQD;
10218
10219 tfd->u.data.tx_flags &= ~DCT_FLAG_NO_WEP;
10220 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_SECURITY_CCM;
10221 tfd->u.data.key_index = 0;
10222 tfd->u.data.key_index |= DCT_WEP_INDEX_USE_IMMEDIATE;
10223 break;
10224 case SEC_LEVEL_2:
10225 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10226 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
b095c381
JK		 10227 tfd->u.data.tx_flags &= ~DCT_FLAG_NO_WEP;
10228 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_SECURITY_TKIP;
10229 tfd->u.data.key_index = DCT_WEP_INDEX_USE_IMMEDIATE;
10230 break;
10231 case SEC_LEVEL_1:
10232 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10233 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
b095c381
JK		 10234 tfd->u.data.key_index = priv->ieee->tx_keyidx;
10235 if (priv->ieee->sec.key_sizes[priv->ieee->tx_keyidx] <=
10236 40)
10237 tfd->u.data.key_index |= DCT_WEP_KEY_64Bit;
10238 else
10239 tfd->u.data.key_index |= DCT_WEP_KEY_128Bit;
10240 break;
10241 case SEC_LEVEL_0:
10242 break;
10243 default:
10244 printk(KERN_ERR "Unknow security level %d\n",
10245 priv->ieee->sec.level);
10246 break;
10247 }
10248 } else
10249 /* No hardware encryption */
10250 tfd->u.data.tx_flags |= DCT_FLAG_NO_WEP;
10251
e43e3c1e 10252#ifdef CONFIG_IPW2200_QOS
a5cf4fe6
ZY		 10253 if (fc & IEEE80211_STYPE_QOS_DATA)
10254 ipw_qos_set_tx_queue_command(priv, pri, &(tfd->u.data));
e43e3c1e 10255#endif /* CONFIG_IPW2200_QOS */
b095c381 10256
43f66a6c 10257 /* payload */
a613bffd
JK		 10258 tfd->u.data.num_chunks = cpu_to_le32(min((u8) (NUM_TFD_CHUNKS - 2),
10259 txb->nr_frags));
10260 IPW_DEBUG_FRAG("%i fragments being sent as %i chunks.\n",
10261 txb->nr_frags, le32_to_cpu(tfd->u.data.num_chunks));
10262 for (i = 0; i < le32_to_cpu(tfd->u.data.num_chunks); i++) {
10263 IPW_DEBUG_FRAG("Adding fragment %i of %i (%d bytes).\n",
10264 i, le32_to_cpu(tfd->u.data.num_chunks),
10265 txb->fragments[i]->len - hdr_len);
bf79451e 10266 IPW_DEBUG_TX("Dumping TX packet frag %i of %i (%d bytes):\n",
43f66a6c
JK		 10267 i, tfd->u.data.num_chunks,
10268 txb->fragments[i]->len - hdr_len);
bf79451e 10269 printk_buf(IPW_DL_TX, txb->fragments[i]->data + hdr_len,
43f66a6c
JK		 10270 txb->fragments[i]->len - hdr_len);
10271
0edd5b44 10272 tfd->u.data.chunk_ptr[i] =
a613bffd
JK		 10273 cpu_to_le32(pci_map_single
10274 (priv->pci_dev,
10275 txb->fragments[i]->data + hdr_len,
10276 txb->fragments[i]->len - hdr_len,
10277 PCI_DMA_TODEVICE));
10278 tfd->u.data.chunk_len[i] =
10279 cpu_to_le16(txb->fragments[i]->len - hdr_len);
43f66a6c
JK		 10280 }
10281
10282 if (i != txb->nr_frags) {
10283 struct sk_buff *skb;
10284 u16 remaining_bytes = 0;
10285 int j;
10286
10287 for (j = i; j < txb->nr_frags; j++)
10288 remaining_bytes += txb->fragments[j]->len - hdr_len;
10289
10290 printk(KERN_INFO "Trying to reallocate for %d bytes\n",
10291 remaining_bytes);
10292 skb = alloc_skb(remaining_bytes, GFP_ATOMIC);
10293 if (skb != NULL) {
a613bffd 10294 tfd->u.data.chunk_len[i] = cpu_to_le16(remaining_bytes);
43f66a6c
JK		 10295 for (j = i; j < txb->nr_frags; j++) {
10296 int size = txb->fragments[j]->len - hdr_len;
afbf30a2 10297
43f66a6c 10298 printk(KERN_INFO "Adding frag %d %d...\n",
0edd5b44 10299 j, size);
43f66a6c 10300 memcpy(skb_put(skb, size),
0edd5b44 10301 txb->fragments[j]->data + hdr_len, size);
43f66a6c
JK		 10302 }
10303 dev_kfree_skb_any(txb->fragments[i]);
10304 txb->fragments[i] = skb;
0edd5b44 10305 tfd->u.data.chunk_ptr[i] =
a613bffd
JK		 10306 cpu_to_le32(pci_map_single
10307 (priv->pci_dev, skb->data,
10308 tfd->u.data.chunk_len[i],
10309 PCI_DMA_TODEVICE));
10310
10311 tfd->u.data.num_chunks =
10312 cpu_to_le32(le32_to_cpu(tfd->u.data.num_chunks) +
10313 1);
bf79451e 10314 }
43f66a6c
JK		 10315 }
10316
10317 /* kick DMA */
10318 q->first_empty = ipw_queue_inc_wrap(q->first_empty, q->n_bd);
10319 ipw_write32(priv, q->reg_w, q->first_empty);
10320
f697014a
JK		 10321 if (ipw_queue_space(q) < q->high_mark)
10322 netif_stop_queue(priv->net_dev);
10323
227d2dc1 10324 return NETDEV_TX_OK;
43f66a6c 10325
0edd5b44 10326 drop:
43f66a6c
JK		 10327 IPW_DEBUG_DROP("Silently dropping Tx packet.\n");
10328 ieee80211_txb_free(txb);
227d2dc1
JK		 10329 return NETDEV_TX_OK;
10330}
10331
10332static int ipw_net_is_queue_full(struct net_device *dev, int pri)
10333{
10334 struct ipw_priv *priv = ieee80211_priv(dev);
e43e3c1e 10335#ifdef CONFIG_IPW2200_QOS
227d2dc1
JK		 10336 int tx_id = ipw_get_tx_queue_number(priv, pri);
10337 struct clx2_tx_queue *txq = &priv->txq[tx_id];
10338#else
10339 struct clx2_tx_queue *txq = &priv->txq[0];
e43e3c1e 10340#endif /* CONFIG_IPW2200_QOS */
227d2dc1
JK		 10341
10342 if (ipw_queue_space(&txq->q) < txq->q.high_mark)
10343 return 1;
10344
10345 return 0;
43f66a6c
JK		 10346}
10347
d685b8c2
ZY		 10348#ifdef CONFIG_IPW2200_PROMISCUOUS
10349static void ipw_handle_promiscuous_tx(struct ipw_priv *priv,
10350 struct ieee80211_txb *txb)
10351{
10352 struct ieee80211_rx_stats dummystats;
10353 struct ieee80211_hdr *hdr;
10354 u8 n;
10355 u16 filter = priv->prom_priv->filter;
10356 int hdr_only = 0;
10357
10358 if (filter & IPW_PROM_NO_TX)
10359 return;
10360
10361 memset(&dummystats, 0, sizeof(dummystats));
10362
10363 /* Filtering of fragment chains is done agains the first fragment */
10364 hdr = (void *)txb->fragments[0]->data;
851ca268 10365 if (ieee80211_is_management(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY		 10366 if (filter & IPW_PROM_NO_MGMT)
10367 return;
10368 if (filter & IPW_PROM_MGMT_HEADER_ONLY)
10369 hdr_only = 1;
851ca268 10370 } else if (ieee80211_is_control(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY		 10371 if (filter & IPW_PROM_NO_CTL)
10372 return;
10373 if (filter & IPW_PROM_CTL_HEADER_ONLY)
10374 hdr_only = 1;
851ca268 10375 } else if (ieee80211_is_data(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY		 10376 if (filter & IPW_PROM_NO_DATA)
10377 return;
10378 if (filter & IPW_PROM_DATA_HEADER_ONLY)
10379 hdr_only = 1;
10380 }
10381
10382 for(n=0; n<txb->nr_frags; ++n) {
10383 struct sk_buff *src = txb->fragments[n];
10384 struct sk_buff *dst;
10385 struct ieee80211_radiotap_header *rt_hdr;
10386 int len;
10387
10388 if (hdr_only) {
10389 hdr = (void *)src->data;
851ca268 10390 len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_ctl));
d685b8c2
ZY		 10391 } else
10392 len = src->len;
10393
10394 dst = alloc_skb(
10395 len + IEEE80211_RADIOTAP_HDRLEN, GFP_ATOMIC);
10396 if (!dst) continue;
10397
10398 rt_hdr = (void *)skb_put(dst, sizeof(*rt_hdr));
10399
10400 rt_hdr->it_version = PKTHDR_RADIOTAP_VERSION;
10401 rt_hdr->it_pad = 0;
10402 rt_hdr->it_present = 0; /* after all, it's just an idea */
10403 rt_hdr->it_present |= (1 << IEEE80211_RADIOTAP_CHANNEL);
10404
10405 *(u16*)skb_put(dst, sizeof(u16)) = cpu_to_le16(
10406 ieee80211chan2mhz(priv->channel));
10407 if (priv->channel > 14) /* 802.11a */
10408 *(u16*)skb_put(dst, sizeof(u16)) =
10409 cpu_to_le16(IEEE80211_CHAN_OFDM |
10410 IEEE80211_CHAN_5GHZ);
10411 else if (priv->ieee->mode == IEEE_B) /* 802.11b */
10412 *(u16*)skb_put(dst, sizeof(u16)) =
10413 cpu_to_le16(IEEE80211_CHAN_CCK |
10414 IEEE80211_CHAN_2GHZ);
10415 else /* 802.11g */
10416 *(u16*)skb_put(dst, sizeof(u16)) =
10417 cpu_to_le16(IEEE80211_CHAN_OFDM |
10418 IEEE80211_CHAN_2GHZ);
10419
10420 rt_hdr->it_len = dst->len;
10421
d626f62b 10422 skb_copy_from_linear_data(src, skb_put(dst, len), len);
d685b8c2
ZY		 10423
10424 if (!ieee80211_rx(priv->prom_priv->ieee, dst, &dummystats))
10425 dev_kfree_skb_any(dst);
10426 }
10427}
10428#endif
10429
43f66a6c 10430static int ipw_net_hard_start_xmit(struct ieee80211_txb *txb,
c8d42d1a 10431 struct net_device *dev, int pri)
43f66a6c
JK		 10432{
10433 struct ipw_priv *priv = ieee80211_priv(dev);
10434 unsigned long flags;
227d2dc1 10435 int ret;
43f66a6c
JK		 10436
10437 IPW_DEBUG_TX("dev->xmit(%d bytes)\n", txb->payload_size);
43f66a6c
JK		 10438 spin_lock_irqsave(&priv->lock, flags);
10439
10440 if (!(priv->status & STATUS_ASSOCIATED)) {
10441 IPW_DEBUG_INFO("Tx attempt while not associated.\n");
10442 priv->ieee->stats.tx_carrier_errors++;
10443 netif_stop_queue(dev);
10444 goto fail_unlock;
10445 }
10446
d685b8c2
ZY		 10447#ifdef CONFIG_IPW2200_PROMISCUOUS
10448 if (rtap_iface && netif_running(priv->prom_net_dev))
10449 ipw_handle_promiscuous_tx(priv, txb);
10450#endif
10451
227d2dc1
JK		 10452 ret = ipw_tx_skb(priv, txb, pri);
10453 if (ret == NETDEV_TX_OK)
10454 __ipw_led_activity_on(priv);
43f66a6c 10455 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c 10456
227d2dc1 10457 return ret;
43f66a6c 10458
0edd5b44 10459 fail_unlock:
43f66a6c
JK		 10460 spin_unlock_irqrestore(&priv->lock, flags);
10461 return 1;
10462}
10463
10464static struct net_device_stats *ipw_net_get_stats(struct net_device *dev)
10465{
10466 struct ipw_priv *priv = ieee80211_priv(dev);
bf79451e 10467
43f66a6c
JK		 10468 priv->ieee->stats.tx_packets = priv->tx_packets;
10469 priv->ieee->stats.rx_packets = priv->rx_packets;
10470 return &priv->ieee->stats;
10471}
10472
10473static void ipw_net_set_multicast_list(struct net_device *dev)
10474{
10475
10476}
10477
10478static int ipw_net_set_mac_address(struct net_device *dev, void *p)
10479{
10480 struct ipw_priv *priv = ieee80211_priv(dev);
10481 struct sockaddr *addr = p;
0795af57
JP		 10482 DECLARE_MAC_BUF(mac);
10483
43f66a6c
JK		 10484 if (!is_valid_ether_addr(addr->sa_data))
10485 return -EADDRNOTAVAIL;
4644151b 10486 mutex_lock(&priv->mutex);
43f66a6c
JK		 10487 priv->config |= CFG_CUSTOM_MAC;
10488 memcpy(priv->mac_addr, addr->sa_data, ETH_ALEN);
0795af57
JP		 10489 printk(KERN_INFO "%s: Setting MAC to %s\n",
10490 priv->net_dev->name, print_mac(mac, priv->mac_addr));
a613bffd 10491 queue_work(priv->workqueue, &priv->adapter_restart);
4644151b 10492 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10493 return 0;
10494}
10495
bf79451e 10496static void ipw_ethtool_get_drvinfo(struct net_device *dev,
43f66a6c
JK		 10497 struct ethtool_drvinfo *info)
10498{
10499 struct ipw_priv *p = ieee80211_priv(dev);
10500 char vers[64];
10501 char date[32];
10502 u32 len;
10503
10504 strcpy(info->driver, DRV_NAME);
10505 strcpy(info->version, DRV_VERSION);
10506
10507 len = sizeof(vers);
10508 ipw_get_ordinal(p, IPW_ORD_STAT_FW_VERSION, vers, &len);
10509 len = sizeof(date);
10510 ipw_get_ordinal(p, IPW_ORD_STAT_FW_DATE, date, &len);
10511
0edd5b44 10512 snprintf(info->fw_version, sizeof(info->fw_version), "%s (%s)",
43f66a6c
JK		 10513 vers, date);
10514 strcpy(info->bus_info, pci_name(p->pci_dev));
b095c381 10515 info->eedump_len = IPW_EEPROM_IMAGE_SIZE;
43f66a6c
JK		 10516}
10517
10518static u32 ipw_ethtool_get_link(struct net_device *dev)
10519{
10520 struct ipw_priv *priv = ieee80211_priv(dev);
10521 return (priv->status & STATUS_ASSOCIATED) != 0;
10522}
10523
10524static int ipw_ethtool_get_eeprom_len(struct net_device *dev)
10525{
b095c381 10526 return IPW_EEPROM_IMAGE_SIZE;
43f66a6c
JK		 10527}
10528
10529static int ipw_ethtool_get_eeprom(struct net_device *dev,
0edd5b44 10530 struct ethtool_eeprom *eeprom, u8 * bytes)
43f66a6c
JK		 10531{
10532 struct ipw_priv *p = ieee80211_priv(dev);
10533
b095c381 10534 if (eeprom->offset + eeprom->len > IPW_EEPROM_IMAGE_SIZE)
43f66a6c 10535 return -EINVAL;
4644151b 10536 mutex_lock(&p->mutex);
afbf30a2 10537 memcpy(bytes, &p->eeprom[eeprom->offset], eeprom->len);
4644151b 10538 mutex_unlock(&p->mutex);
43f66a6c
JK		 10539 return 0;
10540}
10541
10542static int ipw_ethtool_set_eeprom(struct net_device *dev,
0edd5b44 10543 struct ethtool_eeprom *eeprom, u8 * bytes)
43f66a6c
JK		 10544{
10545 struct ipw_priv *p = ieee80211_priv(dev);
10546 int i;
10547
b095c381 10548 if (eeprom->offset + eeprom->len > IPW_EEPROM_IMAGE_SIZE)
43f66a6c 10549 return -EINVAL;
4644151b 10550 mutex_lock(&p->mutex);
afbf30a2 10551 memcpy(&p->eeprom[eeprom->offset], bytes, eeprom->len);
71e585fc
AB		 10552 for (i = 0; i < IPW_EEPROM_IMAGE_SIZE; i++)
10553 ipw_write8(p, i + IPW_EEPROM_DATA, p->eeprom[i]);
4644151b 10554 mutex_unlock(&p->mutex);
43f66a6c
JK		 10555 return 0;
10556}
10557
7282d491 10558static const struct ethtool_ops ipw_ethtool_ops = {
ea2b26e0
JK		 10559 .get_link = ipw_ethtool_get_link,
10560 .get_drvinfo = ipw_ethtool_get_drvinfo,
10561 .get_eeprom_len = ipw_ethtool_get_eeprom_len,
10562 .get_eeprom = ipw_ethtool_get_eeprom,
10563 .set_eeprom = ipw_ethtool_set_eeprom,
43f66a6c
JK		 10564};
10565
7d12e780 10566static irqreturn_t ipw_isr(int irq, void *data)
43f66a6c
JK		 10567{
10568 struct ipw_priv *priv = data;
10569 u32 inta, inta_mask;
bf79451e 10570
43f66a6c
JK		 10571 if (!priv)
10572 return IRQ_NONE;
10573
89c318ed 10574 spin_lock(&priv->irq_lock);
43f66a6c
JK		 10575
10576 if (!(priv->status & STATUS_INT_ENABLED)) {
d00d0121 10577 /* IRQ is disabled */
43f66a6c
JK		 10578 goto none;
10579 }
10580
b095c381
JK		 10581 inta = ipw_read32(priv, IPW_INTA_RW);
10582 inta_mask = ipw_read32(priv, IPW_INTA_MASK_R);
bf79451e 10583
43f66a6c
JK		 10584 if (inta == 0xFFFFFFFF) {
10585 /* Hardware disappeared */
10586 IPW_WARNING("IRQ INTA == 0xFFFFFFFF\n");
10587 goto none;
10588 }
10589
b095c381 10590 if (!(inta & (IPW_INTA_MASK_ALL & inta_mask))) {
43f66a6c
JK		 10591 /* Shared interrupt */
10592 goto none;
10593 }
10594
10595 /* tell the device to stop sending interrupts */
89c318ed 10596 __ipw_disable_interrupts(priv);
bf79451e 10597
43f66a6c 10598 /* ack current interrupts */
b095c381
JK		 10599 inta &= (IPW_INTA_MASK_ALL & inta_mask);
10600 ipw_write32(priv, IPW_INTA_RW, inta);
bf79451e 10601
43f66a6c
JK		 10602 /* Cache INTA value for our tasklet */
10603 priv->isr_inta = inta;
10604
10605 tasklet_schedule(&priv->irq_tasklet);
10606
89c318ed 10607 spin_unlock(&priv->irq_lock);
43f66a6c
JK		 10608
10609 return IRQ_HANDLED;
0edd5b44 10610 none:
89c318ed 10611 spin_unlock(&priv->irq_lock);
43f66a6c
JK		 10612 return IRQ_NONE;
10613}
10614
10615static void ipw_rf_kill(void *adapter)
10616{
10617 struct ipw_priv *priv = adapter;
10618 unsigned long flags;
bf79451e 10619
43f66a6c
JK		 10620 spin_lock_irqsave(&priv->lock, flags);
10621
10622 if (rf_kill_active(priv)) {
10623 IPW_DEBUG_RF_KILL("RF Kill active, rescheduling GPIO check\n");
10624 if (priv->workqueue)
10625 queue_delayed_work(priv->workqueue,
10626 &priv->rf_kill, 2 * HZ);
10627 goto exit_unlock;
10628 }
10629
10630 /* RF Kill is now disabled, so bring the device back up */
10631
10632 if (!(priv->status & STATUS_RF_KILL_MASK)) {
10633 IPW_DEBUG_RF_KILL("HW RF Kill no longer active, restarting "
10634 "device\n");
10635
10636 /* we can not do an adapter restart while inside an irq lock */
10637 queue_work(priv->workqueue, &priv->adapter_restart);
bf79451e 10638 } else
43f66a6c
JK		 10639 IPW_DEBUG_RF_KILL("HW RF Kill deactivated. SW RF Kill still "
10640 "enabled\n");
10641
0edd5b44 10642 exit_unlock:
43f66a6c
JK		 10643 spin_unlock_irqrestore(&priv->lock, flags);
10644}
10645
c4028958 10646static void ipw_bg_rf_kill(struct work_struct *work)
c848d0af 10647{
c4028958
DH		 10648 struct ipw_priv *priv =
10649 container_of(work, struct ipw_priv, rf_kill.work);
4644151b 10650 mutex_lock(&priv->mutex);
c4028958 10651 ipw_rf_kill(priv);
4644151b 10652 mutex_unlock(&priv->mutex);
c848d0af
JK		 10653}
10654
a73e22b2 10655static void ipw_link_up(struct ipw_priv *priv)
a613bffd 10656{
afbf30a2
JK		 10657 priv->last_seq_num = -1;
10658 priv->last_frag_num = -1;
10659 priv->last_packet_time = 0;
10660
a613bffd
JK		 10661 netif_carrier_on(priv->net_dev);
10662 if (netif_queue_stopped(priv->net_dev)) {
10663 IPW_DEBUG_NOTIF("waking queue\n");
10664 netif_wake_queue(priv->net_dev);
10665 } else {
10666 IPW_DEBUG_NOTIF("starting queue\n");
10667 netif_start_queue(priv->net_dev);
10668 }
10669
c848d0af 10670 cancel_delayed_work(&priv->request_scan);
a613bffd
JK		 10671 ipw_reset_stats(priv);
10672 /* Ensure the rate is updated immediately */
10673 priv->last_rate = ipw_get_current_rate(priv);
10674 ipw_gather_stats(priv);
10675 ipw_led_link_up(priv);
10676 notify_wx_assoc_event(priv);
10677
10678 if (priv->config & CFG_BACKGROUND_SCAN)
10679 queue_delayed_work(priv->workqueue, &priv->request_scan, HZ);
10680}
10681
c4028958 10682static void ipw_bg_link_up(struct work_struct *work)
c848d0af 10683{
c4028958
DH		 10684 struct ipw_priv *priv =
10685 container_of(work, struct ipw_priv, link_up);
4644151b 10686 mutex_lock(&priv->mutex);
c4028958 10687 ipw_link_up(priv);
4644151b 10688 mutex_unlock(&priv->mutex);
c848d0af
JK		 10689}
10690
a73e22b2 10691static void ipw_link_down(struct ipw_priv *priv)
a613bffd
JK		 10692{
10693 ipw_led_link_down(priv);
10694 netif_carrier_off(priv->net_dev);
10695 netif_stop_queue(priv->net_dev);
10696 notify_wx_assoc_event(priv);
10697
10698 /* Cancel any queued work ... */
10699 cancel_delayed_work(&priv->request_scan);
10700 cancel_delayed_work(&priv->adhoc_check);
10701 cancel_delayed_work(&priv->gather_stats);
10702
10703 ipw_reset_stats(priv);
10704
afbf30a2
JK		 10705 if (!(priv->status & STATUS_EXIT_PENDING)) {
10706 /* Queue up another scan... */
c4028958 10707 queue_delayed_work(priv->workqueue, &priv->request_scan, 0);
afbf30a2 10708 }
a613bffd
JK		 10709}
10710
c4028958 10711static void ipw_bg_link_down(struct work_struct *work)
c848d0af 10712{
c4028958
DH		 10713 struct ipw_priv *priv =
10714 container_of(work, struct ipw_priv, link_down);
4644151b 10715 mutex_lock(&priv->mutex);
c4028958 10716 ipw_link_down(priv);
4644151b 10717 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10718}
10719
10720static int ipw_setup_deferred_work(struct ipw_priv *priv)
10721{
10722 int ret = 0;
10723
43f66a6c 10724 priv->workqueue = create_workqueue(DRV_NAME);
43f66a6c 10725 init_waitqueue_head(&priv->wait_command_queue);
afbf30a2 10726 init_waitqueue_head(&priv->wait_state);
43f66a6c 10727
c4028958
DH		 10728 INIT_DELAYED_WORK(&priv->adhoc_check, ipw_bg_adhoc_check);
10729 INIT_WORK(&priv->associate, ipw_bg_associate);
10730 INIT_WORK(&priv->disassociate, ipw_bg_disassociate);
10731 INIT_WORK(&priv->system_config, ipw_system_config);
10732 INIT_WORK(&priv->rx_replenish, ipw_bg_rx_queue_replenish);
10733 INIT_WORK(&priv->adapter_restart, ipw_bg_adapter_restart);
10734 INIT_DELAYED_WORK(&priv->rf_kill, ipw_bg_rf_kill);
10735 INIT_WORK(&priv->up, ipw_bg_up);
10736 INIT_WORK(&priv->down, ipw_bg_down);
10737 INIT_DELAYED_WORK(&priv->request_scan, ipw_request_scan);
10738 INIT_WORK(&priv->request_passive_scan, ipw_request_passive_scan);
10739 INIT_DELAYED_WORK(&priv->gather_stats, ipw_bg_gather_stats);
10740 INIT_WORK(&priv->abort_scan, ipw_bg_abort_scan);
10741 INIT_WORK(&priv->roam, ipw_bg_roam);
10742 INIT_DELAYED_WORK(&priv->scan_check, ipw_bg_scan_check);
10743 INIT_WORK(&priv->link_up, ipw_bg_link_up);
10744 INIT_WORK(&priv->link_down, ipw_bg_link_down);
10745 INIT_DELAYED_WORK(&priv->led_link_on, ipw_bg_led_link_on);
10746 INIT_DELAYED_WORK(&priv->led_link_off, ipw_bg_led_link_off);
10747 INIT_DELAYED_WORK(&priv->led_act_off, ipw_bg_led_activity_off);
10748 INIT_WORK(&priv->merge_networks, ipw_merge_adhoc_network);
43f66a6c 10749
e43e3c1e 10750#ifdef CONFIG_IPW2200_QOS
c4028958 10751 INIT_WORK(&priv->qos_activate, ipw_bg_qos_activate);
e43e3c1e 10752#endif /* CONFIG_IPW2200_QOS */
43f66a6c
JK		 10753
10754 tasklet_init(&priv->irq_tasklet, (void (*)(unsigned long))
10755 ipw_irq_tasklet, (unsigned long)priv);
10756
10757 return ret;
10758}
10759
43f66a6c
JK		 10760static void shim__set_security(struct net_device *dev,
10761 struct ieee80211_security *sec)
10762{
10763 struct ipw_priv *priv = ieee80211_priv(dev);
10764 int i;
bf79451e 10765 for (i = 0; i < 4; i++) {
43f66a6c 10766 if (sec->flags & (1 << i)) {
afbf30a2 10767 priv->ieee->sec.encode_alg[i] = sec->encode_alg[i];
b095c381 10768 priv->ieee->sec.key_sizes[i] = sec->key_sizes[i];
43f66a6c 10769 if (sec->key_sizes[i] == 0)
b095c381
JK		 10770 priv->ieee->sec.flags &= ~(1 << i);
10771 else {
10772 memcpy(priv->ieee->sec.keys[i], sec->keys[i],
43f66a6c 10773 sec->key_sizes[i]);
b095c381
JK		 10774 priv->ieee->sec.flags |= (1 << i);
10775 }
43f66a6c 10776 priv->status |= STATUS_SECURITY_UPDATED;
b095c381
JK		 10777 } else if (sec->level != SEC_LEVEL_1)
10778 priv->ieee->sec.flags &= ~(1 << i);
43f66a6c
JK		 10779 }
10780
b095c381 10781 if (sec->flags & SEC_ACTIVE_KEY) {
43f66a6c 10782 if (sec->active_key <= 3) {
b095c381
JK		 10783 priv->ieee->sec.active_key = sec->active_key;
10784 priv->ieee->sec.flags |= SEC_ACTIVE_KEY;
bf79451e 10785 } else
b095c381 10786 priv->ieee->sec.flags &= ~SEC_ACTIVE_KEY;
43f66a6c 10787 priv->status |= STATUS_SECURITY_UPDATED;
b095c381
JK		 10788 } else
10789 priv->ieee->sec.flags &= ~SEC_ACTIVE_KEY;
43f66a6c
JK		 10790
10791 if ((sec->flags & SEC_AUTH_MODE) &&
b095c381
JK		 10792 (priv->ieee->sec.auth_mode != sec->auth_mode)) {
10793 priv->ieee->sec.auth_mode = sec->auth_mode;
10794 priv->ieee->sec.flags |= SEC_AUTH_MODE;
43f66a6c
JK		 10795 if (sec->auth_mode == WLAN_AUTH_SHARED_KEY)
10796 priv->capability |= CAP_SHARED_KEY;
10797 else
10798 priv->capability &= ~CAP_SHARED_KEY;
10799 priv->status |= STATUS_SECURITY_UPDATED;
10800 }
bf79451e 10801
b095c381
JK		 10802 if (sec->flags & SEC_ENABLED && priv->ieee->sec.enabled != sec->enabled) {
10803 priv->ieee->sec.flags |= SEC_ENABLED;
10804 priv->ieee->sec.enabled = sec->enabled;
43f66a6c 10805 priv->status |= STATUS_SECURITY_UPDATED;
bf79451e 10806 if (sec->enabled)
43f66a6c
JK		 10807 priv->capability |= CAP_PRIVACY_ON;
10808 else
10809 priv->capability &= ~CAP_PRIVACY_ON;
10810 }
bf79451e 10811
afbf30a2
JK		 10812 if (sec->flags & SEC_ENCRYPT)
10813 priv->ieee->sec.encrypt = sec->encrypt;
bf79451e 10814
b095c381
JK		 10815 if (sec->flags & SEC_LEVEL && priv->ieee->sec.level != sec->level) {
10816 priv->ieee->sec.level = sec->level;
10817 priv->ieee->sec.flags |= SEC_LEVEL;
43f66a6c
JK		 10818 priv->status |= STATUS_SECURITY_UPDATED;
10819 }
10820
1fbfea54
ZY		 10821 if (!priv->ieee->host_encrypt && (sec->flags & SEC_ENCRYPT))
10822 ipw_set_hwcrypto_keys(priv);
10823
bf79451e
JG		 10824 /* To match current functionality of ipw2100 (which works well w/
10825 * various supplicants, we don't force a disassociate if the
43f66a6c
JK		 10826 * privacy capability changes ... */
10827#if 0
10828 if ((priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) &&
bf79451e 10829 (((priv->assoc_request.capability &
43f66a6c 10830 WLAN_CAPABILITY_PRIVACY) && !sec->enabled) ||
bf79451e 10831 (!(priv->assoc_request.capability &
0edd5b44 10832 WLAN_CAPABILITY_PRIVACY) && sec->enabled))) {
43f66a6c
JK		 10833 IPW_DEBUG_ASSOC("Disassociating due to capability "
10834 "change.\n");
10835 ipw_disassociate(priv);
10836 }
10837#endif
10838}
10839
bf79451e 10840static int init_supported_rates(struct ipw_priv *priv,
43f66a6c
JK		 10841 struct ipw_supported_rates *rates)
10842{
10843 /* TODO: Mask out rates based on priv->rates_mask */
10844
10845 memset(rates, 0, sizeof(*rates));
0edd5b44 10846 /* configure supported rates */
43f66a6c
JK		 10847 switch (priv->ieee->freq_band) {
10848 case IEEE80211_52GHZ_BAND:
10849 rates->ieee_mode = IPW_A_MODE;
10850 rates->purpose = IPW_RATE_CAPABILITIES;
10851 ipw_add_ofdm_scan_rates(rates, IEEE80211_CCK_MODULATION,
10852 IEEE80211_OFDM_DEFAULT_RATES_MASK);
10853 break;
10854
0edd5b44 10855 default: /* Mixed or 2.4Ghz */
43f66a6c
JK		 10856 rates->ieee_mode = IPW_G_MODE;
10857 rates->purpose = IPW_RATE_CAPABILITIES;
10858 ipw_add_cck_scan_rates(rates, IEEE80211_CCK_MODULATION,
10859 IEEE80211_CCK_DEFAULT_RATES_MASK);
10860 if (priv->ieee->modulation & IEEE80211_OFDM_MODULATION) {
10861 ipw_add_ofdm_scan_rates(rates, IEEE80211_CCK_MODULATION,
10862 IEEE80211_OFDM_DEFAULT_RATES_MASK);
10863 }
10864 break;
10865 }
10866
10867 return 0;
10868}
10869
bf79451e 10870static int ipw_config(struct ipw_priv *priv)
43f66a6c 10871{
43f66a6c
JK		 10872 /* This is only called from ipw_up, which resets/reloads the firmware
10873 so, we don't need to first disable the card before we configure
10874 it */
6de9f7f2 10875 if (ipw_set_tx_power(priv))
43f66a6c
JK		 10876 goto error;
10877
10878 /* initialize adapter address */
10879 if (ipw_send_adapter_address(priv, priv->net_dev->dev_addr))
10880 goto error;
10881
10882 /* set basic system config settings */
10883 init_sys_config(&priv->sys_config);
810dabd4
ZY		 10884
10885 /* Support Bluetooth if we have BT h/w on board, and user wants to.
10886 * Does not support BT priority yet (don't abort or defer our Tx) */
10887 if (bt_coexist) {
2638bc39 10888 unsigned char bt_caps = priv->eeprom[EEPROM_SKU_CAPABILITY];
810dabd4
ZY		 10889
10890 if (bt_caps & EEPROM_SKU_CAP_BT_CHANNEL_SIG)
10891 priv->sys_config.bt_coexistence
2638bc39 10892 |= CFG_BT_COEXISTENCE_SIGNAL_CHNL;
810dabd4
ZY		 10893 if (bt_caps & EEPROM_SKU_CAP_BT_OOB)
10894 priv->sys_config.bt_coexistence
2638bc39 10895 |= CFG_BT_COEXISTENCE_OOB;
810dabd4
ZY		 10896 }
10897
d685b8c2
ZY		 10898#ifdef CONFIG_IPW2200_PROMISCUOUS
10899 if (priv->prom_net_dev && netif_running(priv->prom_net_dev)) {
10900 priv->sys_config.accept_all_data_frames = 1;
10901 priv->sys_config.accept_non_directed_frames = 1;
10902 priv->sys_config.accept_all_mgmt_bcpr = 1;
10903 priv->sys_config.accept_all_mgmt_frames = 1;
10904 }
10905#endif
10906
c848d0af
JK		 10907 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
10908 priv->sys_config.answer_broadcast_ssid_probe = 1;
10909 else
10910 priv->sys_config.answer_broadcast_ssid_probe = 0;
10911
d685b8c2 10912 if (ipw_send_system_config(priv))
43f66a6c
JK		 10913 goto error;
10914
0edd5b44
JG		 10915 init_supported_rates(priv, &priv->rates);
10916 if (ipw_send_supported_rates(priv, &priv->rates))
43f66a6c
JK		 10917 goto error;
10918
10919 /* Set request-to-send threshold */
10920 if (priv->rts_threshold) {
10921 if (ipw_send_rts_threshold(priv, priv->rts_threshold))
10922 goto error;
10923 }
e43e3c1e 10924#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 10925 IPW_DEBUG_QOS("QoS: call ipw_qos_activate\n");
10926 ipw_qos_activate(priv, NULL);
e43e3c1e 10927#endif /* CONFIG_IPW2200_QOS */
43f66a6c
JK		 10928
10929 if (ipw_set_random_seed(priv))
10930 goto error;
bf79451e 10931
43f66a6c
JK		 10932 /* final state transition to the RUN state */
10933 if (ipw_send_host_complete(priv))
10934 goto error;
10935
e666619e
JK		 10936 priv->status |= STATUS_INIT;
10937
10938 ipw_led_init(priv);
10939 ipw_led_radio_on(priv);
10940 priv->notif_missed_beacons = 0;
10941
10942 /* Set hardware WEP key if it is configured. */
10943 if ((priv->capability & CAP_PRIVACY_ON) &&
10944 (priv->ieee->sec.level == SEC_LEVEL_1) &&
10945 !(priv->ieee->host_encrypt || priv->ieee->host_decrypt))
10946 ipw_set_hwcrypto_keys(priv);
43f66a6c
JK		 10947
10948 return 0;
bf79451e 10949
0edd5b44 10950 error:
43f66a6c
JK		 10951 return -EIO;
10952}
10953
4f36f808
JK		 10954/*
10955 * NOTE:
10956 *
10957 * These tables have been tested in conjunction with the
10958 * Intel PRO/Wireless 2200BG and 2915ABG Network Connection Adapters.
10959 *
10960 * Altering this values, using it on other hardware, or in geographies
10961 * not intended for resale of the above mentioned Intel adapters has
10962 * not been tested.
10963 *
48a84770
HBA		 10964 * Remember to update the table in README.ipw2200 when changing this
10965 * table.
10966 *
4f36f808
JK		 10967 */
10968static const struct ieee80211_geo ipw_geos[] = {
10969 { /* Restricted */
10970 "---",
10971 .bg_channels = 11,
10972 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10973 {2427, 4}, {2432, 5}, {2437, 6},
10974 {2442, 7}, {2447, 8}, {2452, 9},
10975 {2457, 10}, {2462, 11}},
10976 },
10977
10978 { /* Custom US/Canada */
10979 "ZZF",
10980 .bg_channels = 11,
10981 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10982 {2427, 4}, {2432, 5}, {2437, 6},
10983 {2442, 7}, {2447, 8}, {2452, 9},
10984 {2457, 10}, {2462, 11}},
10985 .a_channels = 8,
10986 .a = {{5180, 36},
10987 {5200, 40},
10988 {5220, 44},
10989 {5240, 48},
10990 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10991 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10992 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10993 {5320, 64, IEEE80211_CH_PASSIVE_ONLY}},
10994 },
10995
10996 { /* Rest of World */
10997 "ZZD",
10998 .bg_channels = 13,
10999 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11000 {2427, 4}, {2432, 5}, {2437, 6},
11001 {2442, 7}, {2447, 8}, {2452, 9},
11002 {2457, 10}, {2462, 11}, {2467, 12},
11003 {2472, 13}},
11004 },
11005
11006 { /* Custom USA & Europe & High */
11007 "ZZA",
11008 .bg_channels = 11,
11009 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11010 {2427, 4}, {2432, 5}, {2437, 6},
11011 {2442, 7}, {2447, 8}, {2452, 9},
11012 {2457, 10}, {2462, 11}},
11013 .a_channels = 13,
11014 .a = {{5180, 36},
11015 {5200, 40},
11016 {5220, 44},
11017 {5240, 48},
11018 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11019 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11020 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11021 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11022 {5745, 149},
11023 {5765, 153},
11024 {5785, 157},
11025 {5805, 161},
11026 {5825, 165}},
11027 },
11028
11029 { /* Custom NA & Europe */
11030 "ZZB",
11031 .bg_channels = 11,
11032 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11033 {2427, 4}, {2432, 5}, {2437, 6},
11034 {2442, 7}, {2447, 8}, {2452, 9},
11035 {2457, 10}, {2462, 11}},
11036 .a_channels = 13,
11037 .a = {{5180, 36},
11038 {5200, 40},
11039 {5220, 44},
11040 {5240, 48},
11041 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11042 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11043 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11044 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11045 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11046 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11047 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11048 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11049 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11050 },
11051
11052 { /* Custom Japan */
11053 "ZZC",
11054 .bg_channels = 11,
11055 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11056 {2427, 4}, {2432, 5}, {2437, 6},
11057 {2442, 7}, {2447, 8}, {2452, 9},
11058 {2457, 10}, {2462, 11}},
11059 .a_channels = 4,
11060 .a = {{5170, 34}, {5190, 38},
11061 {5210, 42}, {5230, 46}},
11062 },
11063
11064 { /* Custom */
11065 "ZZM",
11066 .bg_channels = 11,
11067 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11068 {2427, 4}, {2432, 5}, {2437, 6},
11069 {2442, 7}, {2447, 8}, {2452, 9},
11070 {2457, 10}, {2462, 11}},
11071 },
11072
11073 { /* Europe */
11074 "ZZE",
11075 .bg_channels = 13,
11076 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11077 {2427, 4}, {2432, 5}, {2437, 6},
11078 {2442, 7}, {2447, 8}, {2452, 9},
11079 {2457, 10}, {2462, 11}, {2467, 12},
11080 {2472, 13}},
11081 .a_channels = 19,
11082 .a = {{5180, 36},
11083 {5200, 40},
11084 {5220, 44},
11085 {5240, 48},
11086 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11087 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11088 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11089 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11090 {5500, 100, IEEE80211_CH_PASSIVE_ONLY},
11091 {5520, 104, IEEE80211_CH_PASSIVE_ONLY},
11092 {5540, 108, IEEE80211_CH_PASSIVE_ONLY},
11093 {5560, 112, IEEE80211_CH_PASSIVE_ONLY},
11094 {5580, 116, IEEE80211_CH_PASSIVE_ONLY},
11095 {5600, 120, IEEE80211_CH_PASSIVE_ONLY},
11096 {5620, 124, IEEE80211_CH_PASSIVE_ONLY},
11097 {5640, 128, IEEE80211_CH_PASSIVE_ONLY},
11098 {5660, 132, IEEE80211_CH_PASSIVE_ONLY},
11099 {5680, 136, IEEE80211_CH_PASSIVE_ONLY},
11100 {5700, 140, IEEE80211_CH_PASSIVE_ONLY}},
11101 },
11102
11103 { /* Custom Japan */
11104 "ZZJ",
11105 .bg_channels = 14,
11106 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11107 {2427, 4}, {2432, 5}, {2437, 6},
11108 {2442, 7}, {2447, 8}, {2452, 9},
11109 {2457, 10}, {2462, 11}, {2467, 12},
11110 {2472, 13}, {2484, 14, IEEE80211_CH_B_ONLY}},
11111 .a_channels = 4,
11112 .a = {{5170, 34}, {5190, 38},
11113 {5210, 42}, {5230, 46}},
11114 },
11115
03520576
JK		 11116 { /* Rest of World */
11117 "ZZR",
11118 .bg_channels = 14,
11119 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11120 {2427, 4}, {2432, 5}, {2437, 6},
11121 {2442, 7}, {2447, 8}, {2452, 9},
11122 {2457, 10}, {2462, 11}, {2467, 12},
11123 {2472, 13}, {2484, 14, IEEE80211_CH_B_ONLY |
11124 IEEE80211_CH_PASSIVE_ONLY}},
11125 },
11126
4f36f808
JK		 11127 { /* High Band */
11128 "ZZH",
11129 .bg_channels = 13,
11130 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11131 {2427, 4}, {2432, 5}, {2437, 6},
11132 {2442, 7}, {2447, 8}, {2452, 9},
11133 {2457, 10}, {2462, 11},
11134 {2467, 12, IEEE80211_CH_PASSIVE_ONLY},
11135 {2472, 13, IEEE80211_CH_PASSIVE_ONLY}},
11136 .a_channels = 4,
11137 .a = {{5745, 149}, {5765, 153},
11138 {5785, 157}, {5805, 161}},
11139 },
11140
11141 { /* Custom Europe */
11142 "ZZG",
11143 .bg_channels = 13,
11144 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11145 {2427, 4}, {2432, 5}, {2437, 6},
11146 {2442, 7}, {2447, 8}, {2452, 9},
11147 {2457, 10}, {2462, 11},
11148 {2467, 12}, {2472, 13}},
11149 .a_channels = 4,
11150 .a = {{5180, 36}, {5200, 40},
11151 {5220, 44}, {5240, 48}},
11152 },
11153
11154 { /* Europe */
11155 "ZZK",
11156 .bg_channels = 13,
11157 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11158 {2427, 4}, {2432, 5}, {2437, 6},
11159 {2442, 7}, {2447, 8}, {2452, 9},
11160 {2457, 10}, {2462, 11},
11161 {2467, 12, IEEE80211_CH_PASSIVE_ONLY},
11162 {2472, 13, IEEE80211_CH_PASSIVE_ONLY}},
11163 .a_channels = 24,
11164 .a = {{5180, 36, IEEE80211_CH_PASSIVE_ONLY},
11165 {5200, 40, IEEE80211_CH_PASSIVE_ONLY},
11166 {5220, 44, IEEE80211_CH_PASSIVE_ONLY},
11167 {5240, 48, IEEE80211_CH_PASSIVE_ONLY},
11168 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11169 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11170 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11171 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11172 {5500, 100, IEEE80211_CH_PASSIVE_ONLY},
11173 {5520, 104, IEEE80211_CH_PASSIVE_ONLY},
11174 {5540, 108, IEEE80211_CH_PASSIVE_ONLY},
11175 {5560, 112, IEEE80211_CH_PASSIVE_ONLY},
11176 {5580, 116, IEEE80211_CH_PASSIVE_ONLY},
11177 {5600, 120, IEEE80211_CH_PASSIVE_ONLY},
11178 {5620, 124, IEEE80211_CH_PASSIVE_ONLY},
11179 {5640, 128, IEEE80211_CH_PASSIVE_ONLY},
11180 {5660, 132, IEEE80211_CH_PASSIVE_ONLY},
11181 {5680, 136, IEEE80211_CH_PASSIVE_ONLY},
11182 {5700, 140, IEEE80211_CH_PASSIVE_ONLY},
11183 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11184 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11185 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11186 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11187 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11188 },
11189
11190 { /* Europe */
11191 "ZZL",
11192 .bg_channels = 11,
11193 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11194 {2427, 4}, {2432, 5}, {2437, 6},
11195 {2442, 7}, {2447, 8}, {2452, 9},
11196 {2457, 10}, {2462, 11}},
11197 .a_channels = 13,
11198 .a = {{5180, 36, IEEE80211_CH_PASSIVE_ONLY},
11199 {5200, 40, IEEE80211_CH_PASSIVE_ONLY},
11200 {5220, 44, IEEE80211_CH_PASSIVE_ONLY},
11201 {5240, 48, IEEE80211_CH_PASSIVE_ONLY},
11202 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11203 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11204 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11205 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11206 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11207 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11208 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11209 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11210 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11211 }
afbf30a2
JK		 11212};
11213
43f66a6c
JK		 11214#define MAX_HW_RESTARTS 5
11215static int ipw_up(struct ipw_priv *priv)
11216{
4f36f808 11217 int rc, i, j;
43f66a6c
JK		 11218
11219 if (priv->status & STATUS_EXIT_PENDING)
11220 return -EIO;
11221
f6c5cb7c 11222 if (cmdlog && !priv->cmdlog) {
e6e3f12a 11223 priv->cmdlog = kcalloc(cmdlog, sizeof(*priv->cmdlog),
f6c5cb7c
JK		 11224 GFP_KERNEL);
11225 if (priv->cmdlog == NULL) {
11226 IPW_ERROR("Error allocating %d command log entries.\n",
11227 cmdlog);
d0b526b7 11228 return -ENOMEM;
f6c5cb7c 11229 } else {
f6c5cb7c
JK		 11230 priv->cmdlog_len = cmdlog;
11231 }
11232 }
11233
0edd5b44 11234 for (i = 0; i < MAX_HW_RESTARTS; i++) {
bf79451e 11235 /* Load the microcode, firmware, and eeprom.
43f66a6c
JK		 11236 * Also start the clocks. */
11237 rc = ipw_load(priv);
11238 if (rc) {
a4f6bbb3 11239 IPW_ERROR("Unable to load firmware: %d\n", rc);
43f66a6c
JK		 11240 return rc;
11241 }
11242
11243 ipw_init_ordinals(priv);
11244 if (!(priv->config & CFG_CUSTOM_MAC))
11245 eeprom_parse_mac(priv, priv->mac_addr);
11246 memcpy(priv->net_dev->dev_addr, priv->mac_addr, ETH_ALEN);
11247
4f36f808
JK		 11248 for (j = 0; j < ARRAY_SIZE(ipw_geos); j++) {
11249 if (!memcmp(&priv->eeprom[EEPROM_COUNTRY_CODE],
11250 ipw_geos[j].name, 3))
11251 break;
11252 }
03520576
JK		 11253 if (j == ARRAY_SIZE(ipw_geos)) {
11254 IPW_WARNING("SKU [%c%c%c] not recognized.\n",
11255 priv->eeprom[EEPROM_COUNTRY_CODE + 0],
11256 priv->eeprom[EEPROM_COUNTRY_CODE + 1],
11257 priv->eeprom[EEPROM_COUNTRY_CODE + 2]);
4f36f808 11258 j = 0;
03520576 11259 }
1867b117 11260 if (ieee80211_set_geo(priv->ieee, &ipw_geos[j])) {
4f36f808
JK		 11261 IPW_WARNING("Could not set geography.");
11262 return 0;
11263 }
11264
b095c381
JK		 11265 if (priv->status & STATUS_RF_KILL_SW) {
11266 IPW_WARNING("Radio disabled by module parameter.\n");
11267 return 0;
11268 } else if (rf_kill_active(priv)) {
11269 IPW_WARNING("Radio Frequency Kill Switch is On:\n"
11270 "Kill switch must be turned off for "
11271 "wireless networking to work.\n");
11272 queue_delayed_work(priv->workqueue, &priv->rf_kill,
11273 2 * HZ);
43f66a6c 11274 return 0;
c848d0af 11275 }
43f66a6c
JK		 11276
11277 rc = ipw_config(priv);
11278 if (!rc) {
11279 IPW_DEBUG_INFO("Configured device on count %i\n", i);
e666619e
JK		 11280
11281 /* If configure to try and auto-associate, kick
11282 * off a scan. */
c4028958
DH		 11283 queue_delayed_work(priv->workqueue,
11284 &priv->request_scan, 0);
afbf30a2 11285
43f66a6c 11286 return 0;
43f66a6c 11287 }
bf79451e 11288
c848d0af 11289 IPW_DEBUG_INFO("Device configuration failed: 0x%08X\n", rc);
43f66a6c
JK		 11290 IPW_DEBUG_INFO("Failed to config device on retry %d of %d\n",
11291 i, MAX_HW_RESTARTS);
11292
11293 /* We had an error bringing up the hardware, so take it
11294 * all the way back down so we can try again */
11295 ipw_down(priv);
11296 }
11297
bf79451e 11298 /* tried to restart and config the device for as long as our
43f66a6c 11299 * patience could withstand */
0edd5b44 11300 IPW_ERROR("Unable to initialize device after %d attempts.\n", i);
c848d0af 11301
43f66a6c
JK		 11302 return -EIO;
11303}
11304
c4028958 11305static void ipw_bg_up(struct work_struct *work)
c848d0af 11306{
c4028958
DH		 11307 struct ipw_priv *priv =
11308 container_of(work, struct ipw_priv, up);
4644151b 11309 mutex_lock(&priv->mutex);
c4028958 11310 ipw_up(priv);
4644151b 11311 mutex_unlock(&priv->mutex);
c848d0af
JK		 11312}
11313
b095c381 11314static void ipw_deinit(struct ipw_priv *priv)
43f66a6c 11315{
b095c381
JK		 11316 int i;
11317
11318 if (priv->status & STATUS_SCANNING) {
11319 IPW_DEBUG_INFO("Aborting scan during shutdown.\n");
11320 ipw_abort_scan(priv);
11321 }
11322
11323 if (priv->status & STATUS_ASSOCIATED) {
11324 IPW_DEBUG_INFO("Disassociating during shutdown.\n");
11325 ipw_disassociate(priv);
11326 }
11327
11328 ipw_led_shutdown(priv);
11329
11330 /* Wait up to 1s for status to change to not scanning and not
11331 * associated (disassociation can take a while for a ful 802.11
11332 * exchange */
11333 for (i = 1000; i && (priv->status &
11334 (STATUS_DISASSOCIATING |
11335 STATUS_ASSOCIATED | STATUS_SCANNING)); i--)
11336 udelay(10);
11337
11338 if (priv->status & (STATUS_DISASSOCIATING |
11339 STATUS_ASSOCIATED | STATUS_SCANNING))
11340 IPW_DEBUG_INFO("Still associated or scanning...\n");
11341 else
11342 IPW_DEBUG_INFO("Took %dms to de-init\n", 1000 - i);
11343
43f66a6c 11344 /* Attempt to disable the card */
43f66a6c 11345 ipw_send_card_disable(priv, 0);
b095c381
JK		 11346
11347 priv->status &= ~STATUS_INIT;
11348}
11349
11350static void ipw_down(struct ipw_priv *priv)
11351{
11352 int exit_pending = priv->status & STATUS_EXIT_PENDING;
11353
11354 priv->status |= STATUS_EXIT_PENDING;
11355
11356 if (ipw_is_init(priv))
11357 ipw_deinit(priv);
11358
11359 /* Wipe out the EXIT_PENDING status bit if we are not actually
11360 * exiting the module */
11361 if (!exit_pending)
11362 priv->status &= ~STATUS_EXIT_PENDING;
43f66a6c
JK		 11363
11364 /* tell the device to stop sending interrupts */
11365 ipw_disable_interrupts(priv);
11366
11367 /* Clear all bits but the RF Kill */
b095c381 11368 priv->status &= STATUS_RF_KILL_MASK | STATUS_EXIT_PENDING;
43f66a6c
JK		 11369 netif_carrier_off(priv->net_dev);
11370 netif_stop_queue(priv->net_dev);
11371
11372 ipw_stop_nic(priv);
a613bffd
JK		 11373
11374 ipw_led_radio_off(priv);
43f66a6c
JK		 11375}
11376
c4028958 11377static void ipw_bg_down(struct work_struct *work)
c848d0af 11378{
c4028958
DH		 11379 struct ipw_priv *priv =
11380 container_of(work, struct ipw_priv, down);
4644151b 11381 mutex_lock(&priv->mutex);
c4028958 11382 ipw_down(priv);
4644151b 11383 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11384}
11385
11386/* Called by register_netdev() */
11387static int ipw_net_init(struct net_device *dev)
11388{
11389 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 11390 mutex_lock(&priv->mutex);
43f66a6c 11391
c848d0af 11392 if (ipw_up(priv)) {
4644151b 11393 mutex_unlock(&priv->mutex);
43f66a6c 11394 return -EIO;
c848d0af 11395 }
43f66a6c 11396
4644151b 11397 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11398 return 0;
11399}
11400
11401/* PCI driver stuff */
11402static struct pci_device_id card_ids[] = {
11403 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2701, 0, 0, 0},
11404 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2702, 0, 0, 0},
11405 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2711, 0, 0, 0},
11406 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2712, 0, 0, 0},
11407 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2721, 0, 0, 0},
11408 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2722, 0, 0, 0},
11409 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2731, 0, 0, 0},
11410 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2732, 0, 0, 0},
11411 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2741, 0, 0, 0},
11412 {PCI_VENDOR_ID_INTEL, 0x1043, 0x103c, 0x2741, 0, 0, 0},
11413 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2742, 0, 0, 0},
11414 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2751, 0, 0, 0},
11415 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2752, 0, 0, 0},
11416 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2753, 0, 0, 0},
11417 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2754, 0, 0, 0},
11418 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2761, 0, 0, 0},
11419 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2762, 0, 0, 0},
11420 {PCI_VENDOR_ID_INTEL, 0x104f, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0},
0edd5b44 11421 {PCI_VENDOR_ID_INTEL, 0x4220, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* BG */
a613bffd 11422 {PCI_VENDOR_ID_INTEL, 0x4221, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* BG */
0edd5b44
JG		 11423 {PCI_VENDOR_ID_INTEL, 0x4223, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* ABG */
11424 {PCI_VENDOR_ID_INTEL, 0x4224, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* ABG */
bf79451e 11425
43f66a6c
JK		 11426 /* required last entry */
11427 {0,}
11428};
11429
11430MODULE_DEVICE_TABLE(pci, card_ids);
11431
11432static struct attribute *ipw_sysfs_entries[] = {
11433 &dev_attr_rf_kill.attr,
11434 &dev_attr_direct_dword.attr,
11435 &dev_attr_indirect_byte.attr,
11436 &dev_attr_indirect_dword.attr,
11437 &dev_attr_mem_gpio_reg.attr,
11438 &dev_attr_command_event_reg.attr,
11439 &dev_attr_nic_type.attr,
11440 &dev_attr_status.attr,
11441 &dev_attr_cfg.attr,
b39860c6
JK		 11442 &dev_attr_error.attr,
11443 &dev_attr_event_log.attr,
f6c5cb7c 11444 &dev_attr_cmd_log.attr,
43f66a6c
JK		 11445 &dev_attr_eeprom_delay.attr,
11446 &dev_attr_ucode_version.attr,
11447 &dev_attr_rtc.attr,
a613bffd
JK		 11448 &dev_attr_scan_age.attr,
11449 &dev_attr_led.attr,
b095c381
JK		 11450 &dev_attr_speed_scan.attr,
11451 &dev_attr_net_stats.attr,
375dd244 11452 &dev_attr_channels.attr,
d685b8c2
ZY		 11453#ifdef CONFIG_IPW2200_PROMISCUOUS
11454 &dev_attr_rtap_iface.attr,
11455 &dev_attr_rtap_filter.attr,
11456#endif
43f66a6c
JK		 11457 NULL
11458};
11459
11460static struct attribute_group ipw_attribute_group = {
11461 .name = NULL, /* put in device directory */
0edd5b44 11462 .attrs = ipw_sysfs_entries,
43f66a6c
JK		 11463};
11464
d685b8c2
ZY		 11465#ifdef CONFIG_IPW2200_PROMISCUOUS
11466static int ipw_prom_open(struct net_device *dev)
11467{
11468 struct ipw_prom_priv *prom_priv = ieee80211_priv(dev);
11469 struct ipw_priv *priv = prom_priv->priv;
11470
11471 IPW_DEBUG_INFO("prom dev->open\n");
11472 netif_carrier_off(dev);
11473 netif_stop_queue(dev);
11474
11475 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
11476 priv->sys_config.accept_all_data_frames = 1;
11477 priv->sys_config.accept_non_directed_frames = 1;
11478 priv->sys_config.accept_all_mgmt_bcpr = 1;
11479 priv->sys_config.accept_all_mgmt_frames = 1;
11480
11481 ipw_send_system_config(priv);
11482 }
11483
11484 return 0;
11485}
11486
11487static int ipw_prom_stop(struct net_device *dev)
11488{
11489 struct ipw_prom_priv *prom_priv = ieee80211_priv(dev);
11490 struct ipw_priv *priv = prom_priv->priv;
11491
11492 IPW_DEBUG_INFO("prom dev->stop\n");
11493
11494 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
11495 priv->sys_config.accept_all_data_frames = 0;
11496 priv->sys_config.accept_non_directed_frames = 0;
11497 priv->sys_config.accept_all_mgmt_bcpr = 0;
11498 priv->sys_config.accept_all_mgmt_frames = 0;
11499
11500 ipw_send_system_config(priv);
11501 }
11502
11503 return 0;
11504}
11505
11506static int ipw_prom_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
11507{
11508 IPW_DEBUG_INFO("prom dev->xmit\n");
11509 netif_stop_queue(dev);
11510 return -EOPNOTSUPP;
11511}
11512
11513static struct net_device_stats *ipw_prom_get_stats(struct net_device *dev)
11514{
11515 struct ipw_prom_priv *prom_priv = ieee80211_priv(dev);
11516 return &prom_priv->ieee->stats;
11517}
11518
11519static int ipw_prom_alloc(struct ipw_priv *priv)
11520{
11521 int rc = 0;
11522
11523 if (priv->prom_net_dev)
11524 return -EPERM;
11525
11526 priv->prom_net_dev = alloc_ieee80211(sizeof(struct ipw_prom_priv));
11527 if (priv->prom_net_dev == NULL)
11528 return -ENOMEM;
11529
11530 priv->prom_priv = ieee80211_priv(priv->prom_net_dev);
11531 priv->prom_priv->ieee = netdev_priv(priv->prom_net_dev);
11532 priv->prom_priv->priv = priv;
11533
11534 strcpy(priv->prom_net_dev->name, "rtap%d");
11535
11536 priv->prom_net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
11537 priv->prom_net_dev->open = ipw_prom_open;
11538 priv->prom_net_dev->stop = ipw_prom_stop;
11539 priv->prom_net_dev->get_stats = ipw_prom_get_stats;
11540 priv->prom_net_dev->hard_start_xmit = ipw_prom_hard_start_xmit;
11541
11542 priv->prom_priv->ieee->iw_mode = IW_MODE_MONITOR;
11543
11544 rc = register_netdev(priv->prom_net_dev);
11545 if (rc) {
11546 free_ieee80211(priv->prom_net_dev);
11547 priv->prom_net_dev = NULL;
11548 return rc;
11549 }
11550
11551 return 0;
11552}
11553
11554static void ipw_prom_free(struct ipw_priv *priv)
11555{
11556 if (!priv->prom_net_dev)
11557 return;
11558
11559 unregister_netdev(priv->prom_net_dev);
11560 free_ieee80211(priv->prom_net_dev);
11561
11562 priv->prom_net_dev = NULL;
11563}
11564
11565#endif
11566
11567
0edd5b44 11568static int ipw_pci_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
43f66a6c
JK		 11569{
11570 int err = 0;
11571 struct net_device *net_dev;
11572 void __iomem *base;
11573 u32 length, val;
11574 struct ipw_priv *priv;
afbf30a2 11575 int i;
43f66a6c
JK		 11576
11577 net_dev = alloc_ieee80211(sizeof(struct ipw_priv));
11578 if (net_dev == NULL) {
11579 err = -ENOMEM;
11580 goto out;
11581 }
11582
11583 priv = ieee80211_priv(net_dev);
11584 priv->ieee = netdev_priv(net_dev);
a613bffd 11585
43f66a6c
JK		 11586 priv->net_dev = net_dev;
11587 priv->pci_dev = pdev;
43f66a6c 11588 ipw_debug_level = debug;
89c318ed 11589 spin_lock_init(&priv->irq_lock);
43f66a6c 11590 spin_lock_init(&priv->lock);
afbf30a2
JK		 11591 for (i = 0; i < IPW_IBSS_MAC_HASH_SIZE; i++)
11592 INIT_LIST_HEAD(&priv->ibss_mac_hash[i]);
43f66a6c 11593
4644151b 11594 mutex_init(&priv->mutex);
43f66a6c
JK		 11595 if (pci_enable_device(pdev)) {
11596 err = -ENODEV;
11597 goto out_free_ieee80211;
11598 }
11599
11600 pci_set_master(pdev);
11601
0e08b44e 11602 err = pci_set_dma_mask(pdev, DMA_32BIT_MASK);
bf79451e 11603 if (!err)
0e08b44e 11604 err = pci_set_consistent_dma_mask(pdev, DMA_32BIT_MASK);
43f66a6c
JK		 11605 if (err) {
11606 printk(KERN_WARNING DRV_NAME ": No suitable DMA available.\n");
11607 goto out_pci_disable_device;
11608 }
11609
11610 pci_set_drvdata(pdev, priv);
11611
11612 err = pci_request_regions(pdev, DRV_NAME);
bf79451e 11613 if (err)
43f66a6c
JK		 11614 goto out_pci_disable_device;
11615
bf79451e 11616 /* We disable the RETRY_TIMEOUT register (0x41) to keep
43f66a6c 11617 * PCI Tx retries from interfering with C3 CPU state */
bf79451e
JG		 11618 pci_read_config_dword(pdev, 0x40, &val);
11619 if ((val & 0x0000ff00) != 0)
43f66a6c 11620 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
bf79451e 11621
43f66a6c
JK		 11622 length = pci_resource_len(pdev, 0);
11623 priv->hw_len = length;
bf79451e 11624
43f66a6c
JK		 11625 base = ioremap_nocache(pci_resource_start(pdev, 0), length);
11626 if (!base) {
11627 err = -ENODEV;
11628 goto out_pci_release_regions;
11629 }
11630
11631 priv->hw_base = base;
11632 IPW_DEBUG_INFO("pci_resource_len = 0x%08x\n", length);
11633 IPW_DEBUG_INFO("pci_resource_base = %p\n", base);
11634
11635 err = ipw_setup_deferred_work(priv);
11636 if (err) {
11637 IPW_ERROR("Unable to setup deferred work\n");
11638 goto out_iounmap;
11639 }
11640
b095c381 11641 ipw_sw_reset(priv, 1);
43f66a6c 11642
1fb9df5d 11643 err = request_irq(pdev->irq, ipw_isr, IRQF_SHARED, DRV_NAME, priv);
43f66a6c
JK		 11644 if (err) {
11645 IPW_ERROR("Error allocating IRQ %d\n", pdev->irq);
11646 goto out_destroy_workqueue;
11647 }
11648
43f66a6c
JK		 11649 SET_NETDEV_DEV(net_dev, &pdev->dev);
11650
4644151b 11651 mutex_lock(&priv->mutex);
c848d0af 11652
43f66a6c
JK		 11653 priv->ieee->hard_start_xmit = ipw_net_hard_start_xmit;
11654 priv->ieee->set_security = shim__set_security;
227d2dc1 11655 priv->ieee->is_queue_full = ipw_net_is_queue_full;
43f66a6c 11656
e43e3c1e 11657#ifdef CONFIG_IPW2200_QOS
a5cf4fe6 11658 priv->ieee->is_qos_active = ipw_is_qos_active;
3b9990cb
JK		 11659 priv->ieee->handle_probe_response = ipw_handle_beacon;
11660 priv->ieee->handle_beacon = ipw_handle_probe_response;
11661 priv->ieee->handle_assoc_response = ipw_handle_assoc_response;
e43e3c1e 11662#endif /* CONFIG_IPW2200_QOS */
b095c381 11663
c848d0af
JK		 11664 priv->ieee->perfect_rssi = -20;
11665 priv->ieee->worst_rssi = -85;
43f66a6c
JK		 11666
11667 net_dev->open = ipw_net_open;
11668 net_dev->stop = ipw_net_stop;
11669 net_dev->init = ipw_net_init;
11670 net_dev->get_stats = ipw_net_get_stats;
11671 net_dev->set_multicast_list = ipw_net_set_multicast_list;
11672 net_dev->set_mac_address = ipw_net_set_mac_address;
97a78ca9 11673 priv->wireless_data.spy_data = &priv->ieee->spy_data;
97a78ca9 11674 net_dev->wireless_data = &priv->wireless_data;
43f66a6c
JK		 11675 net_dev->wireless_handlers = &ipw_wx_handler_def;
11676 net_dev->ethtool_ops = &ipw_ethtool_ops;
11677 net_dev->irq = pdev->irq;
0edd5b44 11678 net_dev->base_addr = (unsigned long)priv->hw_base;
43f66a6c
JK		 11679 net_dev->mem_start = pci_resource_start(pdev, 0);
11680 net_dev->mem_end = net_dev->mem_start + pci_resource_len(pdev, 0) - 1;
11681
11682 err = sysfs_create_group(&pdev->dev.kobj, &ipw_attribute_group);
11683 if (err) {
11684 IPW_ERROR("failed to create sysfs device attributes\n");
4644151b 11685 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11686 goto out_release_irq;
11687 }
11688
4644151b 11689 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11690 err = register_netdev(net_dev);
11691 if (err) {
11692 IPW_ERROR("failed to register network device\n");
a613bffd 11693 goto out_remove_sysfs;
43f66a6c 11694 }
48a84770 11695
d685b8c2
ZY		 11696#ifdef CONFIG_IPW2200_PROMISCUOUS
11697 if (rtap_iface) {
11698 err = ipw_prom_alloc(priv);
11699 if (err) {
11700 IPW_ERROR("Failed to register promiscuous network "
11701 "device (error %d).\n", err);
11702 unregister_netdev(priv->net_dev);
11703 goto out_remove_sysfs;
11704 }
11705 }
11706#endif
11707
48a84770
HBA		 11708 printk(KERN_INFO DRV_NAME ": Detected geography %s (%d 802.11bg "
11709 "channels, %d 802.11a channels)\n",
11710 priv->ieee->geo.name, priv->ieee->geo.bg_channels,
11711 priv->ieee->geo.a_channels);
11712
43f66a6c
JK		 11713 return 0;
11714
a613bffd 11715 out_remove_sysfs:
43f66a6c 11716 sysfs_remove_group(&pdev->dev.kobj, &ipw_attribute_group);
0edd5b44 11717 out_release_irq:
43f66a6c 11718 free_irq(pdev->irq, priv);
0edd5b44 11719 out_destroy_workqueue:
43f66a6c
JK		 11720 destroy_workqueue(priv->workqueue);
11721 priv->workqueue = NULL;
0edd5b44 11722 out_iounmap:
43f66a6c 11723 iounmap(priv->hw_base);
0edd5b44 11724 out_pci_release_regions:
43f66a6c 11725 pci_release_regions(pdev);
0edd5b44 11726 out_pci_disable_device:
43f66a6c
JK		 11727 pci_disable_device(pdev);
11728 pci_set_drvdata(pdev, NULL);
0edd5b44 11729 out_free_ieee80211:
43f66a6c 11730 free_ieee80211(priv->net_dev);
0edd5b44 11731 out:
43f66a6c
JK		 11732 return err;
11733}
11734
11735static void ipw_pci_remove(struct pci_dev *pdev)
11736{
11737 struct ipw_priv *priv = pci_get_drvdata(pdev);
afbf30a2
JK		 11738 struct list_head *p, *q;
11739 int i;
b095c381 11740
43f66a6c
JK		 11741 if (!priv)
11742 return;
11743
4644151b 11744 mutex_lock(&priv->mutex);
43f66a6c 11745
afbf30a2 11746 priv->status |= STATUS_EXIT_PENDING;
43f66a6c 11747 ipw_down(priv);
43f66a6c
JK		 11748 sysfs_remove_group(&pdev->dev.kobj, &ipw_attribute_group);
11749
4644151b 11750 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11751
11752 unregister_netdev(priv->net_dev);
11753
11754 if (priv->rxq) {
11755 ipw_rx_queue_free(priv, priv->rxq);
11756 priv->rxq = NULL;
11757 }
11758 ipw_tx_queue_free(priv);
11759
f6c5cb7c
JK		 11760 if (priv->cmdlog) {
11761 kfree(priv->cmdlog);
11762 priv->cmdlog = NULL;
11763 }
43f66a6c
JK		 11764 /* ipw_down will ensure that there is no more pending work
11765 * in the workqueue's, so we can safely remove them now. */
a613bffd
JK		 11766 cancel_delayed_work(&priv->adhoc_check);
11767 cancel_delayed_work(&priv->gather_stats);
11768 cancel_delayed_work(&priv->request_scan);
11769 cancel_delayed_work(&priv->rf_kill);
11770 cancel_delayed_work(&priv->scan_check);
11771 destroy_workqueue(priv->workqueue);
11772 priv->workqueue = NULL;
43f66a6c 11773
afbf30a2
JK		 11774 /* Free MAC hash list for ADHOC */
11775 for (i = 0; i < IPW_IBSS_MAC_HASH_SIZE; i++) {
11776 list_for_each_safe(p, q, &priv->ibss_mac_hash[i]) {
afbf30a2 11777 list_del(p);
489f4458 11778 kfree(list_entry(p, struct ipw_ibss_seq, list));
afbf30a2
JK		 11779 }
11780 }
11781
8f760780
JJ		 11782 kfree(priv->error);
11783 priv->error = NULL;
43f66a6c 11784
d685b8c2
ZY		 11785#ifdef CONFIG_IPW2200_PROMISCUOUS
11786 ipw_prom_free(priv);
11787#endif
11788
43f66a6c
JK		 11789 free_irq(pdev->irq, priv);
11790 iounmap(priv->hw_base);
11791 pci_release_regions(pdev);
11792 pci_disable_device(pdev);
11793 pci_set_drvdata(pdev, NULL);
11794 free_ieee80211(priv->net_dev);
afbf30a2 11795 free_firmware();
43f66a6c
JK		 11796}
11797
43f66a6c 11798#ifdef CONFIG_PM
583a4e88 11799static int ipw_pci_suspend(struct pci_dev *pdev, pm_message_t state)
43f66a6c
JK		 11800{
11801 struct ipw_priv *priv = pci_get_drvdata(pdev);
11802 struct net_device *dev = priv->net_dev;
11803
11804 printk(KERN_INFO "%s: Going into suspend...\n", dev->name);
11805
0edd5b44 11806 /* Take down the device; powers it off, etc. */
43f66a6c
JK		 11807 ipw_down(priv);
11808
11809 /* Remove the PRESENT state of the device */
11810 netif_device_detach(dev);
11811
43f66a6c 11812 pci_save_state(pdev);
43f66a6c 11813 pci_disable_device(pdev);
583a4e88 11814 pci_set_power_state(pdev, pci_choose_state(pdev, state));
bf79451e 11815
43f66a6c
JK		 11816 return 0;
11817}
11818
11819static int ipw_pci_resume(struct pci_dev *pdev)
11820{
11821 struct ipw_priv *priv = pci_get_drvdata(pdev);
11822 struct net_device *dev = priv->net_dev;
02e0e5e9 11823 int err;
43f66a6c 11824 u32 val;
bf79451e 11825
43f66a6c
JK		 11826 printk(KERN_INFO "%s: Coming out of suspend...\n", dev->name);
11827
ea2b26e0 11828 pci_set_power_state(pdev, PCI_D0);
02e0e5e9
JL		 11829 err = pci_enable_device(pdev);
11830 if (err) {
11831 printk(KERN_ERR "%s: pci_enable_device failed on resume\n",
11832 dev->name);
11833 return err;
11834 }
43f66a6c 11835 pci_restore_state(pdev);
ea2b26e0 11836
43f66a6c
JK		 11837 /*
11838 * Suspend/Resume resets the PCI configuration space, so we have to
11839 * re-disable the RETRY_TIMEOUT register (0x41) to keep PCI Tx retries
11840 * from interfering with C3 CPU state. pci_restore_state won't help
11841 * here since it only restores the first 64 bytes pci config header.
11842 */
bf79451e
JG		 11843 pci_read_config_dword(pdev, 0x40, &val);
11844 if ((val & 0x0000ff00) != 0)
43f66a6c
JK		 11845 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
11846
11847 /* Set the device back into the PRESENT state; this will also wake
11848 * the queue of needed */
11849 netif_device_attach(dev);
11850
11851 /* Bring the device back up */
11852 queue_work(priv->workqueue, &priv->up);
bf79451e 11853
43f66a6c
JK		 11854 return 0;
11855}
11856#endif
11857
c8c22c94
ZY		 11858static void ipw_pci_shutdown(struct pci_dev *pdev)
11859{
11860 struct ipw_priv *priv = pci_get_drvdata(pdev);
11861
11862 /* Take down the device; powers it off, etc. */
11863 ipw_down(priv);
11864
11865 pci_disable_device(pdev);
11866}
11867
43f66a6c
JK		 11868/* driver initialization stuff */
11869static struct pci_driver ipw_driver = {
11870 .name = DRV_NAME,
11871 .id_table = card_ids,
11872 .probe = ipw_pci_probe,
11873 .remove = __devexit_p(ipw_pci_remove),
11874#ifdef CONFIG_PM
11875 .suspend = ipw_pci_suspend,
11876 .resume = ipw_pci_resume,
11877#endif
c8c22c94 11878 .shutdown = ipw_pci_shutdown,
43f66a6c
JK		 11879};
11880
11881static int __init ipw_init(void)
11882{
11883 int ret;
11884
11885 printk(KERN_INFO DRV_NAME ": " DRV_DESCRIPTION ", " DRV_VERSION "\n");
11886 printk(KERN_INFO DRV_NAME ": " DRV_COPYRIGHT "\n");
11887
29917620 11888 ret = pci_register_driver(&ipw_driver);
43f66a6c
JK		 11889 if (ret) {
11890 IPW_ERROR("Unable to initialize PCI module\n");
11891 return ret;
11892 }
11893
0edd5b44 11894 ret = driver_create_file(&ipw_driver.driver, &driver_attr_debug_level);
43f66a6c
JK		 11895 if (ret) {
11896 IPW_ERROR("Unable to create driver sysfs file\n");
11897 pci_unregister_driver(&ipw_driver);
11898 return ret;
11899 }
11900
11901 return ret;
11902}
11903
11904static void __exit ipw_exit(void)
11905{
11906 driver_remove_file(&ipw_driver.driver, &driver_attr_debug_level);
11907 pci_unregister_driver(&ipw_driver);
11908}
11909
11910module_param(disable, int, 0444);
11911MODULE_PARM_DESC(disable, "manually disable the radio (default 0 [radio on])");
11912
11913module_param(associate, int, 0444);
11914MODULE_PARM_DESC(associate, "auto associate when scanning (default on)");
11915
11916module_param(auto_create, int, 0444);
11917MODULE_PARM_DESC(auto_create, "auto create adhoc network (default on)");
11918
a613bffd 11919module_param(led, int, 0444);
c848d0af 11920MODULE_PARM_DESC(led, "enable led control on some systems (default 0 off)\n");
a613bffd 11921
43f66a6c
JK		 11922module_param(debug, int, 0444);
11923MODULE_PARM_DESC(debug, "debug output mask");
11924
11925module_param(channel, int, 0444);
bf79451e 11926MODULE_PARM_DESC(channel, "channel to limit associate to (default 0 [ANY])");
43f66a6c 11927
d685b8c2
ZY		 11928#ifdef CONFIG_IPW2200_PROMISCUOUS
11929module_param(rtap_iface, int, 0444);
11930MODULE_PARM_DESC(rtap_iface, "create the rtap interface (1 - create, default 0)");
11931#endif
11932
e43e3c1e 11933#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 11934module_param(qos_enable, int, 0444);
11935MODULE_PARM_DESC(qos_enable, "enable all QoS functionalitis");
11936
11937module_param(qos_burst_enable, int, 0444);
11938MODULE_PARM_DESC(qos_burst_enable, "enable QoS burst mode");
11939
11940module_param(qos_no_ack_mask, int, 0444);
11941MODULE_PARM_DESC(qos_no_ack_mask, "mask Tx_Queue to no ack");
43f66a6c 11942
b095c381
JK		 11943module_param(burst_duration_CCK, int, 0444);
11944MODULE_PARM_DESC(burst_duration_CCK, "set CCK burst value");
11945
11946module_param(burst_duration_OFDM, int, 0444);
11947MODULE_PARM_DESC(burst_duration_OFDM, "set OFDM burst value");
e43e3c1e 11948#endif /* CONFIG_IPW2200_QOS */
b095c381
JK		 11949
11950#ifdef CONFIG_IPW2200_MONITOR
43f66a6c
JK		 11951module_param(mode, int, 0444);
11952MODULE_PARM_DESC(mode, "network mode (0=BSS,1=IBSS,2=Monitor)");
11953#else
11954module_param(mode, int, 0444);
11955MODULE_PARM_DESC(mode, "network mode (0=BSS,1=IBSS)");
11956#endif
11957
810dabd4
ZY		 11958module_param(bt_coexist, int, 0444);
11959MODULE_PARM_DESC(bt_coexist, "enable bluetooth coexistence (default off)");
11960
b095c381 11961module_param(hwcrypto, int, 0444);
bde37d03 11962MODULE_PARM_DESC(hwcrypto, "enable hardware crypto (default off)");
b095c381 11963
f6c5cb7c
JK		 11964module_param(cmdlog, int, 0444);
11965MODULE_PARM_DESC(cmdlog,
11966 "allocate a ring buffer for logging firmware commands");
11967
4bfdb91d
ZY		 11968module_param(roaming, int, 0444);
11969MODULE_PARM_DESC(roaming, "enable roaming support (default on)");
11970
d2b83e12
ZY		 11971module_param(antenna, int, 0444);
11972MODULE_PARM_DESC(antenna, "select antenna 1=Main, 3=Aux, default 0 [both], 2=slow_diversity (choose the one with lower background noise)");
11973
43f66a6c
JK		 11974module_exit(ipw_exit);
11975module_init(ipw_init);
kernel source for telekom puls (alcatel/mediatek)