projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
[PATCH] ipw2200: use generic ieee80211_get_hdrlen() to get packet length
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / drivers / net / wireless / ipw2200.c
CommitLineData
43f66a6c 1/******************************************************************************
bf79451e 2
afbf30a2 3 Copyright(c) 2003 - 2005 Intel Corporation. All rights reserved.
43f66a6c
JK		 4
5 802.11 status code portion of this file from ethereal-0.10.6:
6 Copyright 2000, Axis Communications AB
7 Ethereal - Network traffic analyzer
8 By Gerald Combs <gerald@ethereal.com>
9 Copyright 1998 Gerald Combs
10
bf79451e
JG		 11 This program is free software; you can redistribute it and/or modify it
12 under the terms of version 2 of the GNU General Public License as
43f66a6c 13 published by the Free Software Foundation.
bf79451e
JG		 14
15 This program is distributed in the hope that it will be useful, but WITHOUT
16 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
17 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
43f66a6c 18 more details.
bf79451e 19
43f66a6c 20 You should have received a copy of the GNU General Public License along with
bf79451e 21 this program; if not, write to the Free Software Foundation, Inc., 59
43f66a6c 22 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
bf79451e 23
43f66a6c
JK		 24 The full GNU General Public License is included in this distribution in the
25 file called LICENSE.
bf79451e 26
43f66a6c
JK		 27 Contact Information:
28 James P. Ketrenos <ipw2100-admin@linux.intel.com>
29 Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
30
31******************************************************************************/
32
33#include "ipw2200.h"
733482e4 34#include <linux/version.h>
43f66a6c 35
7c97eb3f 36#define IPW2200_VERSION "git-1.0.10"
43f66a6c 37#define DRV_DESCRIPTION "Intel(R) PRO/Wireless 2200/2915 Network Driver"
2b184d5b 38#define DRV_COPYRIGHT "Copyright(c) 2003-2005 Intel Corporation"
43f66a6c
JK		 39#define DRV_VERSION IPW2200_VERSION
40
b095c381
JK		 41#define ETH_P_80211_STATS (ETH_P_80211_RAW + 1)
42
43f66a6c
JK		 43MODULE_DESCRIPTION(DRV_DESCRIPTION);
44MODULE_VERSION(DRV_VERSION);
45MODULE_AUTHOR(DRV_COPYRIGHT);
46MODULE_LICENSE("GPL");
47
f6c5cb7c 48static int cmdlog = 0;
43f66a6c
JK		 49static int debug = 0;
50static int channel = 0;
43f66a6c
JK		 51static int mode = 0;
52
53static u32 ipw_debug_level;
54static int associate = 1;
55static int auto_create = 1;
a613bffd 56static int led = 0;
43f66a6c 57static int disable = 0;
810dabd4 58static int bt_coexist = 0;
bde37d03 59static int hwcrypto = 0;
4bfdb91d 60static int roaming = 1;
43f66a6c
JK		 61static const char ipw_modes[] = {
62 'a', 'b', 'g', '?'
63};
64
b095c381
JK		 65#ifdef CONFIG_IPW_QOS
66static int qos_enable = 0;
67static int qos_burst_enable = 0;
68static int qos_no_ack_mask = 0;
69static int burst_duration_CCK = 0;
70static int burst_duration_OFDM = 0;
71
72static struct ieee80211_qos_parameters def_qos_parameters_OFDM = {
73 {QOS_TX0_CW_MIN_OFDM, QOS_TX1_CW_MIN_OFDM, QOS_TX2_CW_MIN_OFDM,
74 QOS_TX3_CW_MIN_OFDM},
75 {QOS_TX0_CW_MAX_OFDM, QOS_TX1_CW_MAX_OFDM, QOS_TX2_CW_MAX_OFDM,
76 QOS_TX3_CW_MAX_OFDM},
77 {QOS_TX0_AIFS, QOS_TX1_AIFS, QOS_TX2_AIFS, QOS_TX3_AIFS},
78 {QOS_TX0_ACM, QOS_TX1_ACM, QOS_TX2_ACM, QOS_TX3_ACM},
79 {QOS_TX0_TXOP_LIMIT_OFDM, QOS_TX1_TXOP_LIMIT_OFDM,
80 QOS_TX2_TXOP_LIMIT_OFDM, QOS_TX3_TXOP_LIMIT_OFDM}
81};
82
83static struct ieee80211_qos_parameters def_qos_parameters_CCK = {
84 {QOS_TX0_CW_MIN_CCK, QOS_TX1_CW_MIN_CCK, QOS_TX2_CW_MIN_CCK,
85 QOS_TX3_CW_MIN_CCK},
86 {QOS_TX0_CW_MAX_CCK, QOS_TX1_CW_MAX_CCK, QOS_TX2_CW_MAX_CCK,
87 QOS_TX3_CW_MAX_CCK},
88 {QOS_TX0_AIFS, QOS_TX1_AIFS, QOS_TX2_AIFS, QOS_TX3_AIFS},
89 {QOS_TX0_ACM, QOS_TX1_ACM, QOS_TX2_ACM, QOS_TX3_ACM},
90 {QOS_TX0_TXOP_LIMIT_CCK, QOS_TX1_TXOP_LIMIT_CCK, QOS_TX2_TXOP_LIMIT_CCK,
91 QOS_TX3_TXOP_LIMIT_CCK}
92};
93
94static struct ieee80211_qos_parameters def_parameters_OFDM = {
95 {DEF_TX0_CW_MIN_OFDM, DEF_TX1_CW_MIN_OFDM, DEF_TX2_CW_MIN_OFDM,
96 DEF_TX3_CW_MIN_OFDM},
97 {DEF_TX0_CW_MAX_OFDM, DEF_TX1_CW_MAX_OFDM, DEF_TX2_CW_MAX_OFDM,
98 DEF_TX3_CW_MAX_OFDM},
99 {DEF_TX0_AIFS, DEF_TX1_AIFS, DEF_TX2_AIFS, DEF_TX3_AIFS},
100 {DEF_TX0_ACM, DEF_TX1_ACM, DEF_TX2_ACM, DEF_TX3_ACM},
101 {DEF_TX0_TXOP_LIMIT_OFDM, DEF_TX1_TXOP_LIMIT_OFDM,
102 DEF_TX2_TXOP_LIMIT_OFDM, DEF_TX3_TXOP_LIMIT_OFDM}
103};
104
105static struct ieee80211_qos_parameters def_parameters_CCK = {
106 {DEF_TX0_CW_MIN_CCK, DEF_TX1_CW_MIN_CCK, DEF_TX2_CW_MIN_CCK,
107 DEF_TX3_CW_MIN_CCK},
108 {DEF_TX0_CW_MAX_CCK, DEF_TX1_CW_MAX_CCK, DEF_TX2_CW_MAX_CCK,
109 DEF_TX3_CW_MAX_CCK},
110 {DEF_TX0_AIFS, DEF_TX1_AIFS, DEF_TX2_AIFS, DEF_TX3_AIFS},
111 {DEF_TX0_ACM, DEF_TX1_ACM, DEF_TX2_ACM, DEF_TX3_ACM},
112 {DEF_TX0_TXOP_LIMIT_CCK, DEF_TX1_TXOP_LIMIT_CCK, DEF_TX2_TXOP_LIMIT_CCK,
113 DEF_TX3_TXOP_LIMIT_CCK}
114};
115
116static u8 qos_oui[QOS_OUI_LEN] = { 0x00, 0x50, 0xF2 };
117
118static int from_priority_to_tx_queue[] = {
119 IPW_TX_QUEUE_1, IPW_TX_QUEUE_2, IPW_TX_QUEUE_2, IPW_TX_QUEUE_1,
120 IPW_TX_QUEUE_3, IPW_TX_QUEUE_3, IPW_TX_QUEUE_4, IPW_TX_QUEUE_4
121};
122
123static u32 ipw_qos_get_burst_duration(struct ipw_priv *priv);
124
125static int ipw_send_qos_params_command(struct ipw_priv *priv, struct ieee80211_qos_parameters
126 *qos_param);
127static int ipw_send_qos_info_command(struct ipw_priv *priv, struct ieee80211_qos_information_element
128 *qos_param);
129#endif /* CONFIG_IPW_QOS */
130
97a78ca9 131static struct iw_statistics *ipw_get_wireless_stats(struct net_device *dev);
b095c381 132static void ipw_remove_current_network(struct ipw_priv *priv);
43f66a6c 133static void ipw_rx(struct ipw_priv *priv);
bf79451e 134static int ipw_queue_tx_reclaim(struct ipw_priv *priv,
43f66a6c
JK		 135 struct clx2_tx_queue *txq, int qindex);
136static int ipw_queue_reset(struct ipw_priv *priv);
137
138static int ipw_queue_tx_hcmd(struct ipw_priv *priv, int hcmd, void *buf,
139 int len, int sync);
140
141static void ipw_tx_queue_free(struct ipw_priv *);
142
143static struct ipw_rx_queue *ipw_rx_queue_alloc(struct ipw_priv *);
144static void ipw_rx_queue_free(struct ipw_priv *, struct ipw_rx_queue *);
145static void ipw_rx_queue_replenish(void *);
43f66a6c 146static int ipw_up(struct ipw_priv *);
c848d0af 147static void ipw_bg_up(void *);
43f66a6c 148static void ipw_down(struct ipw_priv *);
c848d0af 149static void ipw_bg_down(void *);
43f66a6c 150static int ipw_config(struct ipw_priv *);
0edd5b44
JG		 151static int init_supported_rates(struct ipw_priv *priv,
152 struct ipw_supported_rates *prates);
b095c381
JK		 153static void ipw_set_hwcrypto_keys(struct ipw_priv *);
154static void ipw_send_wep_keys(struct ipw_priv *, int);
43f66a6c 155
f6c5cb7c
JK		 156static int snprint_line(char *buf, size_t count,
157 const u8 * data, u32 len, u32 ofs)
43f66a6c
JK		 158{
159 int out, i, j, l;
160 char c;
bf79451e 161
43f66a6c
JK		 162 out = snprintf(buf, count, "%08X", ofs);
163
164 for (l = 0, i = 0; i < 2; i++) {
165 out += snprintf(buf + out, count - out, " ");
bf79451e
JG		 166 for (j = 0; j < 8 && l < len; j++, l++)
167 out += snprintf(buf + out, count - out, "%02X ",
43f66a6c
JK		 168 data[(i * 8 + j)]);
169 for (; j < 8; j++)
170 out += snprintf(buf + out, count - out, " ");
171 }
bf79451e 172
43f66a6c
JK		 173 out += snprintf(buf + out, count - out, " ");
174 for (l = 0, i = 0; i < 2; i++) {
175 out += snprintf(buf + out, count - out, " ");
176 for (j = 0; j < 8 && l < len; j++, l++) {
177 c = data[(i * 8 + j)];
178 if (!isascii(c) || !isprint(c))
179 c = '.';
bf79451e 180
43f66a6c
JK		 181 out += snprintf(buf + out, count - out, "%c", c);
182 }
183
184 for (; j < 8; j++)
185 out += snprintf(buf + out, count - out, " ");
186 }
bf79451e 187
f6c5cb7c 188 return out;
43f66a6c
JK		 189}
190
0edd5b44 191static void printk_buf(int level, const u8 * data, u32 len)
43f66a6c
JK		 192{
193 char line[81];
194 u32 ofs = 0;
195 if (!(ipw_debug_level & level))
196 return;
197
198 while (len) {
f6c5cb7c
JK		 199 snprint_line(line, sizeof(line), &data[ofs],
200 min(len, 16U), ofs);
201 printk(KERN_DEBUG "%s\n", line);
43f66a6c
JK		 202 ofs += 16;
203 len -= min(len, 16U);
204 }
205}
206
f6c5cb7c
JK		 207static int snprintk_buf(u8 * output, size_t size, const u8 * data, size_t len)
208{
209 size_t out = size;
210 u32 ofs = 0;
211 int total = 0;
212
213 while (size && len) {
214 out = snprint_line(output, size, &data[ofs],
215 min_t(size_t, len, 16U), ofs);
216
217 ofs += 16;
218 output += out;
219 size -= out;
220 len -= min_t(size_t, len, 16U);
221 total += out;
222 }
223 return total;
224}
225
c8fe6679 226/* alias for 32-bit indirect read (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 227static u32 _ipw_read_reg32(struct ipw_priv *priv, u32 reg);
228#define ipw_read_reg32(a, b) _ipw_read_reg32(a, b)
229
c8fe6679 230/* alias for 8-bit indirect read (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 231static u8 _ipw_read_reg8(struct ipw_priv *ipw, u32 reg);
232#define ipw_read_reg8(a, b) _ipw_read_reg8(a, b)
233
c8fe6679 234/* 8-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 235static void _ipw_write_reg8(struct ipw_priv *priv, u32 reg, u8 value);
236static inline void ipw_write_reg8(struct ipw_priv *a, u32 b, u8 c)
237{
0edd5b44
JG		 238 IPW_DEBUG_IO("%s %d: write_indirect8(0x%08X, 0x%08X)\n", __FILE__,
239 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 240 _ipw_write_reg8(a, b, c);
241}
242
c8fe6679 243/* 16-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 244static void _ipw_write_reg16(struct ipw_priv *priv, u32 reg, u16 value);
245static inline void ipw_write_reg16(struct ipw_priv *a, u32 b, u16 c)
246{
0edd5b44
JG		 247 IPW_DEBUG_IO("%s %d: write_indirect16(0x%08X, 0x%08X)\n", __FILE__,
248 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 249 _ipw_write_reg16(a, b, c);
250}
251
c8fe6679 252/* 32-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 253static void _ipw_write_reg32(struct ipw_priv *priv, u32 reg, u32 value);
254static inline void ipw_write_reg32(struct ipw_priv *a, u32 b, u32 c)
255{
0edd5b44
JG		 256 IPW_DEBUG_IO("%s %d: write_indirect32(0x%08X, 0x%08X)\n", __FILE__,
257 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 258 _ipw_write_reg32(a, b, c);
259}
260
c8fe6679 261/* 8-bit direct write (low 4K) */
43f66a6c 262#define _ipw_write8(ipw, ofs, val) writeb((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY		 263
264/* 8-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 265#define ipw_write8(ipw, ofs, val) \
266 IPW_DEBUG_IO("%s %d: write_direct8(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
267 _ipw_write8(ipw, ofs, val)
268
c8fe6679 269/* 16-bit direct write (low 4K) */
43f66a6c 270#define _ipw_write16(ipw, ofs, val) writew((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY		 271
272/* 16-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 273#define ipw_write16(ipw, ofs, val) \
274 IPW_DEBUG_IO("%s %d: write_direct16(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
275 _ipw_write16(ipw, ofs, val)
276
c8fe6679 277/* 32-bit direct write (low 4K) */
43f66a6c 278#define _ipw_write32(ipw, ofs, val) writel((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY		 279
280/* 32-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 281#define ipw_write32(ipw, ofs, val) \
282 IPW_DEBUG_IO("%s %d: write_direct32(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
283 _ipw_write32(ipw, ofs, val)
284
c8fe6679 285/* 8-bit direct read (low 4K) */
43f66a6c 286#define _ipw_read8(ipw, ofs) readb((ipw)->hw_base + (ofs))
c8fe6679
ZY		 287
288/* 8-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG		 289static inline u8 __ipw_read8(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
290{
291 IPW_DEBUG_IO("%s %d: read_direct8(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK		 292 return _ipw_read8(ipw, ofs);
293}
0edd5b44 294
c8fe6679 295/* alias to 8-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 296#define ipw_read8(ipw, ofs) __ipw_read8(__FILE__, __LINE__, ipw, ofs)
297
c8fe6679 298/* 16-bit direct read (low 4K) */
43f66a6c 299#define _ipw_read16(ipw, ofs) readw((ipw)->hw_base + (ofs))
c8fe6679
ZY		 300
301/* 16-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG		 302static inline u16 __ipw_read16(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
303{
304 IPW_DEBUG_IO("%s %d: read_direct16(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK		 305 return _ipw_read16(ipw, ofs);
306}
0edd5b44 307
c8fe6679 308/* alias to 16-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 309#define ipw_read16(ipw, ofs) __ipw_read16(__FILE__, __LINE__, ipw, ofs)
310
c8fe6679 311/* 32-bit direct read (low 4K) */
43f66a6c 312#define _ipw_read32(ipw, ofs) readl((ipw)->hw_base + (ofs))
c8fe6679
ZY		 313
314/* 32-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG		 315static inline u32 __ipw_read32(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
316{
317 IPW_DEBUG_IO("%s %d: read_direct32(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK		 318 return _ipw_read32(ipw, ofs);
319}
0edd5b44 320
c8fe6679 321/* alias to 32-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK		 322#define ipw_read32(ipw, ofs) __ipw_read32(__FILE__, __LINE__, ipw, ofs)
323
c8fe6679 324/* multi-byte read (above 4K), with debug wrapper */
43f66a6c 325static void _ipw_read_indirect(struct ipw_priv *, u32, u8 *, int);
f6c5cb7c
JK		 326static inline void __ipw_read_indirect(const char *f, int l,
327 struct ipw_priv *a, u32 b, u8 * c, int d)
328{
329 IPW_DEBUG_IO("%s %d: read_indirect(0x%08X) %d bytes\n", f, l, (u32) (b),
330 d);
331 _ipw_read_indirect(a, b, c, d);
332}
333
c8fe6679 334/* alias to multi-byte read (SRAM/regs above 4K), with debug wrapper */
f6c5cb7c 335#define ipw_read_indirect(a, b, c, d) __ipw_read_indirect(__FILE__, __LINE__, a, b, c, d)
43f66a6c 336
c8fe6679 337/* alias to multi-byte read (SRAM/regs above 4K), with debug wrapper */
0edd5b44
JG		 338static void _ipw_write_indirect(struct ipw_priv *priv, u32 addr, u8 * data,
339 int num);
43f66a6c
JK		 340#define ipw_write_indirect(a, b, c, d) \
341 IPW_DEBUG_IO("%s %d: write_indirect(0x%08X) %d bytes\n", __FILE__, __LINE__, (u32)(b), d); \
afbf30a2 342 _ipw_write_indirect(a, b, c, d)
43f66a6c 343
c8fe6679 344/* 32-bit indirect write (above 4K) */
0edd5b44 345static void _ipw_write_reg32(struct ipw_priv *priv, u32 reg, u32 value)
43f66a6c 346{
0edd5b44 347 IPW_DEBUG_IO(" %p : reg = 0x%8X : value = 0x%8X\n", priv, reg, value);
b095c381
JK		 348 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg);
349 _ipw_write32(priv, IPW_INDIRECT_DATA, value);
43f66a6c
JK		 350}
351
c8fe6679 352/* 8-bit indirect write (above 4K) */
43f66a6c
JK		 353static void _ipw_write_reg8(struct ipw_priv *priv, u32 reg, u8 value)
354{
2638bc39 355 u32 aligned_addr = reg & IPW_INDIRECT_ADDR_MASK; /* dword align */
c8fe6679
ZY		 356 u32 dif_len = reg - aligned_addr;
357
43f66a6c 358 IPW_DEBUG_IO(" reg = 0x%8X : value = 0x%8X\n", reg, value);
c8fe6679
ZY		 359 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
360 _ipw_write8(priv, IPW_INDIRECT_DATA + dif_len, value);
43f66a6c
JK		 361}
362
c8fe6679 363/* 16-bit indirect write (above 4K) */
0edd5b44 364static void _ipw_write_reg16(struct ipw_priv *priv, u32 reg, u16 value)
43f66a6c 365{
2638bc39 366 u32 aligned_addr = reg & IPW_INDIRECT_ADDR_MASK; /* dword align */
c8fe6679
ZY		 367 u32 dif_len = (reg - aligned_addr) & (~0x1ul);
368
43f66a6c 369 IPW_DEBUG_IO(" reg = 0x%8X : value = 0x%8X\n", reg, value);
c8fe6679
ZY		 370 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
371 _ipw_write16(priv, IPW_INDIRECT_DATA + dif_len, value);
43f66a6c
JK		 372}
373
c8fe6679 374/* 8-bit indirect read (above 4K) */
43f66a6c
JK		 375static u8 _ipw_read_reg8(struct ipw_priv *priv, u32 reg)
376{
377 u32 word;
b095c381 378 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg & IPW_INDIRECT_ADDR_MASK);
43f66a6c 379 IPW_DEBUG_IO(" reg = 0x%8X : \n", reg);
b095c381 380 word = _ipw_read32(priv, IPW_INDIRECT_DATA);
0edd5b44 381 return (word >> ((reg & 0x3) * 8)) & 0xff;
43f66a6c
JK		 382}
383
c8fe6679 384/* 32-bit indirect read (above 4K) */
43f66a6c
JK		 385static u32 _ipw_read_reg32(struct ipw_priv *priv, u32 reg)
386{
387 u32 value;
388
389 IPW_DEBUG_IO("%p : reg = 0x%08x\n", priv, reg);
390
b095c381
JK		 391 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg);
392 value = _ipw_read32(priv, IPW_INDIRECT_DATA);
43f66a6c
JK		 393 IPW_DEBUG_IO(" reg = 0x%4X : value = 0x%4x \n", reg, value);
394 return value;
395}
396
c8fe6679
ZY		 397/* General purpose, no alignment requirement, iterative (multi-byte) read, */
398/* for area above 1st 4K of SRAM/reg space */
43f66a6c
JK		 399static void _ipw_read_indirect(struct ipw_priv *priv, u32 addr, u8 * buf,
400 int num)
401{
2638bc39 402 u32 aligned_addr = addr & IPW_INDIRECT_ADDR_MASK; /* dword align */
43f66a6c 403 u32 dif_len = addr - aligned_addr;
43f66a6c 404 u32 i;
bf79451e 405
43f66a6c
JK		 406 IPW_DEBUG_IO("addr = %i, buf = %p, num = %i\n", addr, buf, num);
407
ea2b26e0
JK		 408 if (num <= 0) {
409 return;
410 }
411
c8fe6679 412 /* Read the first dword (or portion) byte by byte */
43f66a6c 413 if (unlikely(dif_len)) {
b095c381 414 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
43f66a6c 415 /* Start reading at aligned_addr + dif_len */
ea2b26e0 416 for (i = dif_len; ((i < 4) && (num > 0)); i++, num--)
b095c381 417 *buf++ = _ipw_read8(priv, IPW_INDIRECT_DATA + i);
43f66a6c
JK		 418 aligned_addr += 4;
419 }
420
c8fe6679 421 /* Read all of the middle dwords as dwords, with auto-increment */
b095c381 422 _ipw_write32(priv, IPW_AUTOINC_ADDR, aligned_addr);
ea2b26e0 423 for (; num >= 4; buf += 4, aligned_addr += 4, num -= 4)
b095c381 424 *(u32 *) buf = _ipw_read32(priv, IPW_AUTOINC_DATA);
bf79451e 425
c8fe6679 426 /* Read the last dword (or portion) byte by byte */
ea2b26e0 427 if (unlikely(num)) {
b095c381 428 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
ea2b26e0 429 for (i = 0; num > 0; i++, num--)
b095c381 430 *buf++ = ipw_read8(priv, IPW_INDIRECT_DATA + i);
ea2b26e0 431 }
43f66a6c
JK		 432}
433
c8fe6679
ZY		 434/* General purpose, no alignment requirement, iterative (multi-byte) write, */
435/* for area above 1st 4K of SRAM/reg space */
0edd5b44 436static void _ipw_write_indirect(struct ipw_priv *priv, u32 addr, u8 * buf,
43f66a6c
JK		 437 int num)
438{
2638bc39 439 u32 aligned_addr = addr & IPW_INDIRECT_ADDR_MASK; /* dword align */
43f66a6c 440 u32 dif_len = addr - aligned_addr;
43f66a6c 441 u32 i;
bf79451e 442
43f66a6c 443 IPW_DEBUG_IO("addr = %i, buf = %p, num = %i\n", addr, buf, num);
bf79451e 444
ea2b26e0
JK		 445 if (num <= 0) {
446 return;
447 }
448
c8fe6679 449 /* Write the first dword (or portion) byte by byte */
43f66a6c 450 if (unlikely(dif_len)) {
b095c381 451 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
c8fe6679 452 /* Start writing at aligned_addr + dif_len */
ea2b26e0 453 for (i = dif_len; ((i < 4) && (num > 0)); i++, num--, buf++)
b095c381 454 _ipw_write8(priv, IPW_INDIRECT_DATA + i, *buf);
43f66a6c
JK		 455 aligned_addr += 4;
456 }
bf79451e 457
c8fe6679 458 /* Write all of the middle dwords as dwords, with auto-increment */
b095c381 459 _ipw_write32(priv, IPW_AUTOINC_ADDR, aligned_addr);
ea2b26e0 460 for (; num >= 4; buf += 4, aligned_addr += 4, num -= 4)
b095c381 461 _ipw_write32(priv, IPW_AUTOINC_DATA, *(u32 *) buf);
bf79451e 462
c8fe6679 463 /* Write the last dword (or portion) byte by byte */
ea2b26e0 464 if (unlikely(num)) {
b095c381 465 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
ea2b26e0 466 for (i = 0; num > 0; i++, num--, buf++)
b095c381 467 _ipw_write8(priv, IPW_INDIRECT_DATA + i, *buf);
ea2b26e0 468 }
43f66a6c
JK		 469}
470
c8fe6679
ZY		 471/* General purpose, no alignment requirement, iterative (multi-byte) write, */
472/* for 1st 4K of SRAM/regs space */
bf79451e 473static void ipw_write_direct(struct ipw_priv *priv, u32 addr, void *buf,
43f66a6c
JK		 474 int num)
475{
476 memcpy_toio((priv->hw_base + addr), buf, num);
477}
478
c8fe6679 479/* Set bit(s) in low 4K of SRAM/regs */
43f66a6c
JK		 480static inline void ipw_set_bit(struct ipw_priv *priv, u32 reg, u32 mask)
481{
482 ipw_write32(priv, reg, ipw_read32(priv, reg) | mask);
483}
484
c8fe6679 485/* Clear bit(s) in low 4K of SRAM/regs */
43f66a6c
JK		 486static inline void ipw_clear_bit(struct ipw_priv *priv, u32 reg, u32 mask)
487{
488 ipw_write32(priv, reg, ipw_read32(priv, reg) & ~mask);
489}
490
491static inline void ipw_enable_interrupts(struct ipw_priv *priv)
492{
493 if (priv->status & STATUS_INT_ENABLED)
494 return;
495 priv->status |= STATUS_INT_ENABLED;
b095c381 496 ipw_write32(priv, IPW_INTA_MASK_R, IPW_INTA_MASK_ALL);
43f66a6c
JK		 497}
498
499static inline void ipw_disable_interrupts(struct ipw_priv *priv)
500{
501 if (!(priv->status & STATUS_INT_ENABLED))
502 return;
503 priv->status &= ~STATUS_INT_ENABLED;
b095c381 504 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
43f66a6c
JK		 505}
506
0f52bf90 507#ifdef CONFIG_IPW2200_DEBUG
43f66a6c
JK		 508static char *ipw_error_desc(u32 val)
509{
510 switch (val) {
bf79451e 511 case IPW_FW_ERROR_OK:
43f66a6c 512 return "ERROR_OK";
bf79451e 513 case IPW_FW_ERROR_FAIL:
43f66a6c 514 return "ERROR_FAIL";
bf79451e 515 case IPW_FW_ERROR_MEMORY_UNDERFLOW:
43f66a6c 516 return "MEMORY_UNDERFLOW";
bf79451e 517 case IPW_FW_ERROR_MEMORY_OVERFLOW:
43f66a6c 518 return "MEMORY_OVERFLOW";
bf79451e 519 case IPW_FW_ERROR_BAD_PARAM:
b095c381 520 return "BAD_PARAM";
bf79451e 521 case IPW_FW_ERROR_BAD_CHECKSUM:
b095c381 522 return "BAD_CHECKSUM";
bf79451e 523 case IPW_FW_ERROR_NMI_INTERRUPT:
b095c381 524 return "NMI_INTERRUPT";
bf79451e 525 case IPW_FW_ERROR_BAD_DATABASE:
b095c381 526 return "BAD_DATABASE";
bf79451e 527 case IPW_FW_ERROR_ALLOC_FAIL:
b095c381 528 return "ALLOC_FAIL";
bf79451e 529 case IPW_FW_ERROR_DMA_UNDERRUN:
b095c381 530 return "DMA_UNDERRUN";
bf79451e 531 case IPW_FW_ERROR_DMA_STATUS:
b095c381
JK		 532 return "DMA_STATUS";
533 case IPW_FW_ERROR_DINO_ERROR:
534 return "DINO_ERROR";
535 case IPW_FW_ERROR_EEPROM_ERROR:
536 return "EEPROM_ERROR";
bf79451e 537 case IPW_FW_ERROR_SYSASSERT:
b095c381 538 return "SYSASSERT";
bf79451e 539 case IPW_FW_ERROR_FATAL_ERROR:
b095c381 540 return "FATAL_ERROR";
bf79451e 541 default:
b095c381 542 return "UNKNOWN_ERROR";
43f66a6c
JK		 543 }
544}
545
b39860c6
JK		 546static void ipw_dump_error_log(struct ipw_priv *priv,
547 struct ipw_fw_error *error)
43f66a6c 548{
b39860c6 549 u32 i;
bf79451e 550
b39860c6
JK		 551 if (!error) {
552 IPW_ERROR("Error allocating and capturing error log. "
553 "Nothing to dump.\n");
554 return;
43f66a6c
JK		 555 }
556
b39860c6
JK		 557 IPW_ERROR("Start IPW Error Log Dump:\n");
558 IPW_ERROR("Status: 0x%08X, Config: %08X\n",
559 error->status, error->config);
43f66a6c 560
b39860c6 561 for (i = 0; i < error->elem_len; i++)
0edd5b44 562 IPW_ERROR("%s %i 0x%08x 0x%08x 0x%08x 0x%08x 0x%08x\n",
b39860c6
JK		 563 ipw_error_desc(error->elem[i].desc),
564 error->elem[i].time,
565 error->elem[i].blink1,
566 error->elem[i].blink2,
567 error->elem[i].link1,
568 error->elem[i].link2, error->elem[i].data);
569 for (i = 0; i < error->log_len; i++)
570 IPW_ERROR("%i\t0x%08x\t%i\n",
571 error->log[i].time,
286568ab 572 error->log[i].data, error->log[i].event);
43f66a6c 573}
43f66a6c 574#endif
43f66a6c 575
c848d0af 576static inline int ipw_is_init(struct ipw_priv *priv)
43f66a6c 577{
c848d0af 578 return (priv->status & STATUS_INIT) ? 1 : 0;
43f66a6c
JK		 579}
580
0edd5b44 581static int ipw_get_ordinal(struct ipw_priv *priv, u32 ord, void *val, u32 * len)
43f66a6c
JK		 582{
583 u32 addr, field_info, field_len, field_count, total_len;
584
585 IPW_DEBUG_ORD("ordinal = %i\n", ord);
586
587 if (!priv || !val || !len) {
588 IPW_DEBUG_ORD("Invalid argument\n");
589 return -EINVAL;
590 }
bf79451e 591
43f66a6c
JK		 592 /* verify device ordinal tables have been initialized */
593 if (!priv->table0_addr || !priv->table1_addr || !priv->table2_addr) {
594 IPW_DEBUG_ORD("Access ordinals before initialization\n");
595 return -EINVAL;
596 }
597
598 switch (IPW_ORD_TABLE_ID_MASK & ord) {
599 case IPW_ORD_TABLE_0_MASK:
600 /*
601 * TABLE 0: Direct access to a table of 32 bit values
602 *
bf79451e 603 * This is a very simple table with the data directly
43f66a6c
JK		 604 * read from the table
605 */
606
607 /* remove the table id from the ordinal */
608 ord &= IPW_ORD_TABLE_VALUE_MASK;
609
610 /* boundary check */
611 if (ord > priv->table0_len) {
612 IPW_DEBUG_ORD("ordinal value (%i) longer then "
613 "max (%i)\n", ord, priv->table0_len);
614 return -EINVAL;
615 }
616
617 /* verify we have enough room to store the value */
618 if (*len < sizeof(u32)) {
619 IPW_DEBUG_ORD("ordinal buffer length too small, "
aaa4d308 620 "need %zd\n", sizeof(u32));
43f66a6c
JK		 621 return -EINVAL;
622 }
623
624 IPW_DEBUG_ORD("Reading TABLE0[%i] from offset 0x%08x\n",
0edd5b44 625 ord, priv->table0_addr + (ord << 2));
43f66a6c
JK		 626
627 *len = sizeof(u32);
628 ord <<= 2;
0edd5b44 629 *((u32 *) val) = ipw_read32(priv, priv->table0_addr + ord);
43f66a6c
JK		 630 break;
631
632 case IPW_ORD_TABLE_1_MASK:
633 /*
634 * TABLE 1: Indirect access to a table of 32 bit values
bf79451e
JG		 635 *
636 * This is a fairly large table of u32 values each
43f66a6c
JK		 637 * representing starting addr for the data (which is
638 * also a u32)
639 */
640
641 /* remove the table id from the ordinal */
642 ord &= IPW_ORD_TABLE_VALUE_MASK;
bf79451e 643
43f66a6c
JK		 644 /* boundary check */
645 if (ord > priv->table1_len) {
646 IPW_DEBUG_ORD("ordinal value too long\n");
647 return -EINVAL;
648 }
649
650 /* verify we have enough room to store the value */
651 if (*len < sizeof(u32)) {
652 IPW_DEBUG_ORD("ordinal buffer length too small, "
aaa4d308 653 "need %zd\n", sizeof(u32));
43f66a6c
JK		 654 return -EINVAL;
655 }
656
0edd5b44
JG		 657 *((u32 *) val) =
658 ipw_read_reg32(priv, (priv->table1_addr + (ord << 2)));
43f66a6c
JK		 659 *len = sizeof(u32);
660 break;
661
662 case IPW_ORD_TABLE_2_MASK:
663 /*
664 * TABLE 2: Indirect access to a table of variable sized values
665 *
666 * This table consist of six values, each containing
667 * - dword containing the starting offset of the data
668 * - dword containing the lengh in the first 16bits
669 * and the count in the second 16bits
670 */
671
672 /* remove the table id from the ordinal */
673 ord &= IPW_ORD_TABLE_VALUE_MASK;
674
675 /* boundary check */
676 if (ord > priv->table2_len) {
677 IPW_DEBUG_ORD("ordinal value too long\n");
678 return -EINVAL;
679 }
680
681 /* get the address of statistic */
682 addr = ipw_read_reg32(priv, priv->table2_addr + (ord << 3));
bf79451e
JG		 683
684 /* get the second DW of statistics ;
43f66a6c 685 * two 16-bit words - first is length, second is count */
0edd5b44
JG		 686 field_info =
687 ipw_read_reg32(priv,
688 priv->table2_addr + (ord << 3) +
689 sizeof(u32));
bf79451e 690
43f66a6c 691 /* get each entry length */
0edd5b44 692 field_len = *((u16 *) & field_info);
bf79451e 693
43f66a6c 694 /* get number of entries */
0edd5b44 695 field_count = *(((u16 *) & field_info) + 1);
bf79451e 696
43f66a6c
JK		 697 /* abort if not enought memory */
698 total_len = field_len * field_count;
699 if (total_len > *len) {
700 *len = total_len;
701 return -EINVAL;
702 }
bf79451e 703
43f66a6c
JK		 704 *len = total_len;
705 if (!total_len)
706 return 0;
707
708 IPW_DEBUG_ORD("addr = 0x%08x, total_len = %i, "
bf79451e 709 "field_info = 0x%08x\n",
43f66a6c
JK		 710 addr, total_len, field_info);
711 ipw_read_indirect(priv, addr, val, total_len);
712 break;
713
714 default:
715 IPW_DEBUG_ORD("Invalid ordinal!\n");
716 return -EINVAL;
717
718 }
719
43f66a6c
JK		 720 return 0;
721}
722
723static void ipw_init_ordinals(struct ipw_priv *priv)
724{
725 priv->table0_addr = IPW_ORDINALS_TABLE_LOWER;
bf79451e 726 priv->table0_len = ipw_read32(priv, priv->table0_addr);
43f66a6c
JK		 727
728 IPW_DEBUG_ORD("table 0 offset at 0x%08x, len = %i\n",
729 priv->table0_addr, priv->table0_len);
730
731 priv->table1_addr = ipw_read32(priv, IPW_ORDINALS_TABLE_1);
732 priv->table1_len = ipw_read_reg32(priv, priv->table1_addr);
733
734 IPW_DEBUG_ORD("table 1 offset at 0x%08x, len = %i\n",
735 priv->table1_addr, priv->table1_len);
736
737 priv->table2_addr = ipw_read32(priv, IPW_ORDINALS_TABLE_2);
738 priv->table2_len = ipw_read_reg32(priv, priv->table2_addr);
0edd5b44 739 priv->table2_len &= 0x0000ffff; /* use first two bytes */
43f66a6c
JK		 740
741 IPW_DEBUG_ORD("table 2 offset at 0x%08x, len = %i\n",
742 priv->table2_addr, priv->table2_len);
743
744}
745
a73e22b2 746static u32 ipw_register_toggle(u32 reg)
a613bffd 747{
b095c381
JK		 748 reg &= ~IPW_START_STANDBY;
749 if (reg & IPW_GATE_ODMA)
750 reg &= ~IPW_GATE_ODMA;
751 if (reg & IPW_GATE_IDMA)
752 reg &= ~IPW_GATE_IDMA;
753 if (reg & IPW_GATE_ADMA)
754 reg &= ~IPW_GATE_ADMA;
a613bffd
JK		 755 return reg;
756}
757
758/*
759 * LED behavior:
760 * - On radio ON, turn on any LEDs that require to be on during start
761 * - On initialization, start unassociated blink
762 * - On association, disable unassociated blink
763 * - On disassociation, start unassociated blink
764 * - On radio OFF, turn off any LEDs started during radio on
765 *
766 */
ede6111c
ZY		 767#define LD_TIME_LINK_ON msecs_to_jiffies(300)
768#define LD_TIME_LINK_OFF msecs_to_jiffies(2700)
769#define LD_TIME_ACT_ON msecs_to_jiffies(250)
a613bffd 770
a73e22b2 771static void ipw_led_link_on(struct ipw_priv *priv)
a613bffd
JK		 772{
773 unsigned long flags;
774 u32 led;
775
776 /* If configured to not use LEDs, or nic_type is 1,
777 * then we don't toggle a LINK led */
778 if (priv->config & CFG_NO_LED || priv->nic_type == EEPROM_NIC_TYPE_1)
779 return;
780
781 spin_lock_irqsave(&priv->lock, flags);
782
783 if (!(priv->status & STATUS_RF_KILL_MASK) &&
784 !(priv->status & STATUS_LED_LINK_ON)) {
785 IPW_DEBUG_LED("Link LED On\n");
b095c381 786 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 787 led |= priv->led_association_on;
788
789 led = ipw_register_toggle(led);
790
791 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 792 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 793
794 priv->status |= STATUS_LED_LINK_ON;
795
796 /* If we aren't associated, schedule turning the LED off */
797 if (!(priv->status & STATUS_ASSOCIATED))
798 queue_delayed_work(priv->workqueue,
799 &priv->led_link_off,
800 LD_TIME_LINK_ON);
801 }
802
803 spin_unlock_irqrestore(&priv->lock, flags);
804}
805
c848d0af
JK		 806static void ipw_bg_led_link_on(void *data)
807{
808 struct ipw_priv *priv = data;
4644151b 809 mutex_lock(&priv->mutex);
c848d0af 810 ipw_led_link_on(data);
4644151b 811 mutex_unlock(&priv->mutex);
c848d0af
JK		 812}
813
a73e22b2 814static void ipw_led_link_off(struct ipw_priv *priv)
a613bffd
JK		 815{
816 unsigned long flags;
817 u32 led;
818
819 /* If configured not to use LEDs, or nic type is 1,
820 * then we don't goggle the LINK led. */
821 if (priv->config & CFG_NO_LED || priv->nic_type == EEPROM_NIC_TYPE_1)
822 return;
823
824 spin_lock_irqsave(&priv->lock, flags);
825
826 if (priv->status & STATUS_LED_LINK_ON) {
b095c381 827 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 828 led &= priv->led_association_off;
829 led = ipw_register_toggle(led);
830
831 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 832 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 833
834 IPW_DEBUG_LED("Link LED Off\n");
835
836 priv->status &= ~STATUS_LED_LINK_ON;
837
838 /* If we aren't associated and the radio is on, schedule
839 * turning the LED on (blink while unassociated) */
840 if (!(priv->status & STATUS_RF_KILL_MASK) &&
841 !(priv->status & STATUS_ASSOCIATED))
842 queue_delayed_work(priv->workqueue, &priv->led_link_on,
843 LD_TIME_LINK_OFF);
844
845 }
846
847 spin_unlock_irqrestore(&priv->lock, flags);
848}
849
c848d0af
JK		 850static void ipw_bg_led_link_off(void *data)
851{
852 struct ipw_priv *priv = data;
4644151b 853 mutex_lock(&priv->mutex);
c848d0af 854 ipw_led_link_off(data);
4644151b 855 mutex_unlock(&priv->mutex);
c848d0af
JK		 856}
857
858119e1 858static void __ipw_led_activity_on(struct ipw_priv *priv)
a613bffd 859{
a613bffd
JK		 860 u32 led;
861
862 if (priv->config & CFG_NO_LED)
863 return;
864
b095c381 865 if (priv->status & STATUS_RF_KILL_MASK)
a613bffd 866 return;
a613bffd
JK		 867
868 if (!(priv->status & STATUS_LED_ACT_ON)) {
b095c381 869 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 870 led |= priv->led_activity_on;
871
872 led = ipw_register_toggle(led);
873
874 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 875 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 876
877 IPW_DEBUG_LED("Activity LED On\n");
878
879 priv->status |= STATUS_LED_ACT_ON;
880
c848d0af 881 cancel_delayed_work(&priv->led_act_off);
a613bffd
JK		 882 queue_delayed_work(priv->workqueue, &priv->led_act_off,
883 LD_TIME_ACT_ON);
884 } else {
885 /* Reschedule LED off for full time period */
886 cancel_delayed_work(&priv->led_act_off);
887 queue_delayed_work(priv->workqueue, &priv->led_act_off,
888 LD_TIME_ACT_ON);
889 }
b095c381 890}
a613bffd 891
a73e22b2 892#if 0
b095c381
JK		 893void ipw_led_activity_on(struct ipw_priv *priv)
894{
895 unsigned long flags;
896 spin_lock_irqsave(&priv->lock, flags);
897 __ipw_led_activity_on(priv);
a613bffd
JK		 898 spin_unlock_irqrestore(&priv->lock, flags);
899}
a73e22b2 900#endif /* 0 */
a613bffd 901
a73e22b2 902static void ipw_led_activity_off(struct ipw_priv *priv)
a613bffd
JK		 903{
904 unsigned long flags;
905 u32 led;
906
907 if (priv->config & CFG_NO_LED)
908 return;
909
910 spin_lock_irqsave(&priv->lock, flags);
911
912 if (priv->status & STATUS_LED_ACT_ON) {
b095c381 913 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 914 led &= priv->led_activity_off;
915
916 led = ipw_register_toggle(led);
917
918 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 919 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 920
921 IPW_DEBUG_LED("Activity LED Off\n");
922
923 priv->status &= ~STATUS_LED_ACT_ON;
924 }
925
926 spin_unlock_irqrestore(&priv->lock, flags);
927}
928
c848d0af
JK		 929static void ipw_bg_led_activity_off(void *data)
930{
931 struct ipw_priv *priv = data;
4644151b 932 mutex_lock(&priv->mutex);
c848d0af 933 ipw_led_activity_off(data);
4644151b 934 mutex_unlock(&priv->mutex);
c848d0af
JK		 935}
936
a73e22b2 937static void ipw_led_band_on(struct ipw_priv *priv)
a613bffd
JK		 938{
939 unsigned long flags;
940 u32 led;
941
942 /* Only nic type 1 supports mode LEDs */
c848d0af
JK		 943 if (priv->config & CFG_NO_LED ||
944 priv->nic_type != EEPROM_NIC_TYPE_1 || !priv->assoc_network)
a613bffd
JK		 945 return;
946
947 spin_lock_irqsave(&priv->lock, flags);
948
b095c381 949 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 950 if (priv->assoc_network->mode == IEEE_A) {
951 led |= priv->led_ofdm_on;
952 led &= priv->led_association_off;
953 IPW_DEBUG_LED("Mode LED On: 802.11a\n");
954 } else if (priv->assoc_network->mode == IEEE_G) {
955 led |= priv->led_ofdm_on;
956 led |= priv->led_association_on;
957 IPW_DEBUG_LED("Mode LED On: 802.11g\n");
958 } else {
959 led &= priv->led_ofdm_off;
960 led |= priv->led_association_on;
961 IPW_DEBUG_LED("Mode LED On: 802.11b\n");
962 }
963
964 led = ipw_register_toggle(led);
965
966 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 967 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 968
969 spin_unlock_irqrestore(&priv->lock, flags);
970}
971
a73e22b2 972static void ipw_led_band_off(struct ipw_priv *priv)
a613bffd
JK		 973{
974 unsigned long flags;
975 u32 led;
976
977 /* Only nic type 1 supports mode LEDs */
978 if (priv->config & CFG_NO_LED || priv->nic_type != EEPROM_NIC_TYPE_1)
979 return;
980
981 spin_lock_irqsave(&priv->lock, flags);
982
b095c381 983 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 984 led &= priv->led_ofdm_off;
985 led &= priv->led_association_off;
986
987 led = ipw_register_toggle(led);
988
989 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 990 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 991
992 spin_unlock_irqrestore(&priv->lock, flags);
993}
994
a73e22b2 995static void ipw_led_radio_on(struct ipw_priv *priv)
a613bffd
JK		 996{
997 ipw_led_link_on(priv);
998}
999
a73e22b2 1000static void ipw_led_radio_off(struct ipw_priv *priv)
a613bffd
JK		 1001{
1002 ipw_led_activity_off(priv);
1003 ipw_led_link_off(priv);
1004}
1005
a73e22b2 1006static void ipw_led_link_up(struct ipw_priv *priv)
a613bffd
JK		 1007{
1008 /* Set the Link Led on for all nic types */
1009 ipw_led_link_on(priv);
1010}
1011
a73e22b2 1012static void ipw_led_link_down(struct ipw_priv *priv)
a613bffd
JK		 1013{
1014 ipw_led_activity_off(priv);
1015 ipw_led_link_off(priv);
1016
1017 if (priv->status & STATUS_RF_KILL_MASK)
1018 ipw_led_radio_off(priv);
1019}
1020
a73e22b2 1021static void ipw_led_init(struct ipw_priv *priv)
a613bffd
JK		 1022{
1023 priv->nic_type = priv->eeprom[EEPROM_NIC_TYPE];
1024
1025 /* Set the default PINs for the link and activity leds */
b095c381
JK		 1026 priv->led_activity_on = IPW_ACTIVITY_LED;
1027 priv->led_activity_off = ~(IPW_ACTIVITY_LED);
a613bffd 1028
b095c381
JK		 1029 priv->led_association_on = IPW_ASSOCIATED_LED;
1030 priv->led_association_off = ~(IPW_ASSOCIATED_LED);
a613bffd
JK		 1031
1032 /* Set the default PINs for the OFDM leds */
b095c381
JK		 1033 priv->led_ofdm_on = IPW_OFDM_LED;
1034 priv->led_ofdm_off = ~(IPW_OFDM_LED);
a613bffd
JK		 1035
1036 switch (priv->nic_type) {
1037 case EEPROM_NIC_TYPE_1:
1038 /* In this NIC type, the LEDs are reversed.... */
b095c381
JK		 1039 priv->led_activity_on = IPW_ASSOCIATED_LED;
1040 priv->led_activity_off = ~(IPW_ASSOCIATED_LED);
1041 priv->led_association_on = IPW_ACTIVITY_LED;
1042 priv->led_association_off = ~(IPW_ACTIVITY_LED);
a613bffd
JK		 1043
1044 if (!(priv->config & CFG_NO_LED))
1045 ipw_led_band_on(priv);
1046
1047 /* And we don't blink link LEDs for this nic, so
1048 * just return here */
1049 return;
1050
1051 case EEPROM_NIC_TYPE_3:
1052 case EEPROM_NIC_TYPE_2:
1053 case EEPROM_NIC_TYPE_4:
1054 case EEPROM_NIC_TYPE_0:
1055 break;
1056
1057 default:
1058 IPW_DEBUG_INFO("Unknown NIC type from EEPROM: %d\n",
1059 priv->nic_type);
1060 priv->nic_type = EEPROM_NIC_TYPE_0;
1061 break;
1062 }
1063
1064 if (!(priv->config & CFG_NO_LED)) {
1065 if (priv->status & STATUS_ASSOCIATED)
1066 ipw_led_link_on(priv);
1067 else
1068 ipw_led_link_off(priv);
1069 }
1070}
1071
a73e22b2 1072static void ipw_led_shutdown(struct ipw_priv *priv)
a613bffd 1073{
a613bffd
JK		 1074 ipw_led_activity_off(priv);
1075 ipw_led_link_off(priv);
1076 ipw_led_band_off(priv);
afbf30a2
JK		 1077 cancel_delayed_work(&priv->led_link_on);
1078 cancel_delayed_work(&priv->led_link_off);
1079 cancel_delayed_work(&priv->led_act_off);
a613bffd
JK		 1080}
1081
43f66a6c
JK		 1082/*
1083 * The following adds a new attribute to the sysfs representation
1084 * of this device driver (i.e. a new file in /sys/bus/pci/drivers/ipw/)
1085 * used for controling the debug level.
bf79451e 1086 *
43f66a6c
JK		 1087 * See the level definitions in ipw for details.
1088 */
1089static ssize_t show_debug_level(struct device_driver *d, char *buf)
1090{
1091 return sprintf(buf, "0x%08X\n", ipw_debug_level);
1092}
a613bffd
JK		 1093
1094static ssize_t store_debug_level(struct device_driver *d, const char *buf,
1095 size_t count)
43f66a6c
JK		 1096{
1097 char *p = (char *)buf;
1098 u32 val;
1099
1100 if (p[1] == 'x' || p[1] == 'X' || p[0] == 'x' || p[0] == 'X') {
1101 p++;
1102 if (p[0] == 'x' || p[0] == 'X')
1103 p++;
1104 val = simple_strtoul(p, &p, 16);
1105 } else
1106 val = simple_strtoul(p, &p, 10);
bf79451e
JG		 1107 if (p == buf)
1108 printk(KERN_INFO DRV_NAME
43f66a6c
JK		 1109 ": %s is not in hex or decimal form.\n", buf);
1110 else
1111 ipw_debug_level = val;
1112
1113 return strnlen(buf, count);
1114}
1115
bf79451e 1116static DRIVER_ATTR(debug_level, S_IWUSR | S_IRUGO,
43f66a6c
JK		 1117 show_debug_level, store_debug_level);
1118
b39860c6 1119static inline u32 ipw_get_event_log_len(struct ipw_priv *priv)
43f66a6c 1120{
c8fe6679 1121 /* length = 1st dword in log */
b39860c6 1122 return ipw_read_reg32(priv, ipw_read32(priv, IPW_EVENT_LOG));
43f66a6c 1123}
0edd5b44 1124
b39860c6
JK		 1125static void ipw_capture_event_log(struct ipw_priv *priv,
1126 u32 log_len, struct ipw_event *log)
43f66a6c 1127{
b39860c6 1128 u32 base;
0edd5b44 1129
b39860c6
JK		 1130 if (log_len) {
1131 base = ipw_read32(priv, IPW_EVENT_LOG);
1132 ipw_read_indirect(priv, base + sizeof(base) + sizeof(u32),
1133 (u8 *) log, sizeof(*log) * log_len);
1134 }
1135}
43f66a6c 1136
b39860c6 1137static struct ipw_fw_error *ipw_alloc_error_log(struct ipw_priv *priv)
43f66a6c 1138{
b39860c6
JK		 1139 struct ipw_fw_error *error;
1140 u32 log_len = ipw_get_event_log_len(priv);
1141 u32 base = ipw_read32(priv, IPW_ERROR_LOG);
1142 u32 elem_len = ipw_read_reg32(priv, base);
43f66a6c 1143
b39860c6
JK		 1144 error = kmalloc(sizeof(*error) +
1145 sizeof(*error->elem) * elem_len +
1146 sizeof(*error->log) * log_len, GFP_ATOMIC);
1147 if (!error) {
1148 IPW_ERROR("Memory allocation for firmware error log "
1149 "failed.\n");
1150 return NULL;
43f66a6c 1151 }
f6c5cb7c 1152 error->jiffies = jiffies;
b39860c6
JK		 1153 error->status = priv->status;
1154 error->config = priv->config;
1155 error->elem_len = elem_len;
1156 error->log_len = log_len;
1157 error->elem = (struct ipw_error_elem *)error->payload;
3b26b110 1158 error->log = (struct ipw_event *)(error->elem + elem_len);
b39860c6
JK		 1159
1160 ipw_capture_event_log(priv, log_len, error->log);
bf79451e 1161
b39860c6
JK		 1162 if (elem_len)
1163 ipw_read_indirect(priv, base + sizeof(base), (u8 *) error->elem,
1164 sizeof(*error->elem) * elem_len);
1165
1166 return error;
43f66a6c 1167}
0edd5b44 1168
b39860c6
JK		 1169static void ipw_free_error_log(struct ipw_fw_error *error)
1170{
1171 if (error)
1172 kfree(error);
1173}
43f66a6c 1174
b39860c6
JK		 1175static ssize_t show_event_log(struct device *d,
1176 struct device_attribute *attr, char *buf)
43f66a6c 1177{
b39860c6
JK		 1178 struct ipw_priv *priv = dev_get_drvdata(d);
1179 u32 log_len = ipw_get_event_log_len(priv);
1180 struct ipw_event log[log_len];
1181 u32 len = 0, i;
43f66a6c 1182
b39860c6 1183 ipw_capture_event_log(priv, log_len, log);
43f66a6c 1184
b39860c6
JK		 1185 len += snprintf(buf + len, PAGE_SIZE - len, "%08X", log_len);
1186 for (i = 0; i < log_len; i++)
1187 len += snprintf(buf + len, PAGE_SIZE - len,
1188 "\n%08X%08X%08X",
1189 log[i].time, log[i].event, log[i].data);
1190 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1191 return len;
43f66a6c 1192}
0edd5b44 1193
b39860c6 1194static DEVICE_ATTR(event_log, S_IRUGO, show_event_log, NULL);
43f66a6c 1195
b39860c6
JK		 1196static ssize_t show_error(struct device *d,
1197 struct device_attribute *attr, char *buf)
43f66a6c 1198{
b39860c6
JK		 1199 struct ipw_priv *priv = dev_get_drvdata(d);
1200 u32 len = 0, i;
1201 if (!priv->error)
1202 return 0;
1203 len += snprintf(buf + len, PAGE_SIZE - len,
f6c5cb7c
JK		 1204 "%08lX%08X%08X%08X",
1205 priv->error->jiffies,
b39860c6
JK		 1206 priv->error->status,
1207 priv->error->config, priv->error->elem_len);
1208 for (i = 0; i < priv->error->elem_len; i++)
1209 len += snprintf(buf + len, PAGE_SIZE - len,
1210 "\n%08X%08X%08X%08X%08X%08X%08X",
1211 priv->error->elem[i].time,
1212 priv->error->elem[i].desc,
1213 priv->error->elem[i].blink1,
1214 priv->error->elem[i].blink2,
1215 priv->error->elem[i].link1,
1216 priv->error->elem[i].link2,
1217 priv->error->elem[i].data);
1218
1219 len += snprintf(buf + len, PAGE_SIZE - len,
1220 "\n%08X", priv->error->log_len);
1221 for (i = 0; i < priv->error->log_len; i++)
1222 len += snprintf(buf + len, PAGE_SIZE - len,
1223 "\n%08X%08X%08X",
1224 priv->error->log[i].time,
1225 priv->error->log[i].event,
1226 priv->error->log[i].data);
1227 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1228 return len;
1229}
1230
1231static ssize_t clear_error(struct device *d,
1232 struct device_attribute *attr,
1233 const char *buf, size_t count)
1234{
1235 struct ipw_priv *priv = dev_get_drvdata(d);
1236 if (priv->error) {
1237 ipw_free_error_log(priv->error);
1238 priv->error = NULL;
1239 }
1240 return count;
1241}
43f66a6c 1242
b39860c6 1243static DEVICE_ATTR(error, S_IRUGO | S_IWUSR, show_error, clear_error);
43f66a6c 1244
f6c5cb7c
JK		 1245static ssize_t show_cmd_log(struct device *d,
1246 struct device_attribute *attr, char *buf)
1247{
1248 struct ipw_priv *priv = dev_get_drvdata(d);
1249 u32 len = 0, i;
1250 if (!priv->cmdlog)
1251 return 0;
1252 for (i = (priv->cmdlog_pos + 1) % priv->cmdlog_len;
1253 (i != priv->cmdlog_pos) && (PAGE_SIZE - len);
1254 i = (i + 1) % priv->cmdlog_len) {
1255 len +=
1256 snprintf(buf + len, PAGE_SIZE - len,
1257 "\n%08lX%08X%08X%08X\n", priv->cmdlog[i].jiffies,
1258 priv->cmdlog[i].retcode, priv->cmdlog[i].cmd.cmd,
1259 priv->cmdlog[i].cmd.len);
1260 len +=
1261 snprintk_buf(buf + len, PAGE_SIZE - len,
1262 (u8 *) priv->cmdlog[i].cmd.param,
1263 priv->cmdlog[i].cmd.len);
1264 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1265 }
1266 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1267 return len;
43f66a6c 1268}
0edd5b44 1269
f6c5cb7c 1270static DEVICE_ATTR(cmd_log, S_IRUGO, show_cmd_log, NULL);
43f66a6c 1271
a613bffd
JK		 1272static ssize_t show_scan_age(struct device *d, struct device_attribute *attr,
1273 char *buf)
43f66a6c 1274{
a613bffd
JK		 1275 struct ipw_priv *priv = dev_get_drvdata(d);
1276 return sprintf(buf, "%d\n", priv->ieee->scan_age);
1277}
1278
1279static ssize_t store_scan_age(struct device *d, struct device_attribute *attr,
1280 const char *buf, size_t count)
1281{
1282 struct ipw_priv *priv = dev_get_drvdata(d);
0f52bf90 1283#ifdef CONFIG_IPW2200_DEBUG
a613bffd 1284 struct net_device *dev = priv->net_dev;
c848d0af 1285#endif
a613bffd
JK		 1286 char buffer[] = "00000000";
1287 unsigned long len =
1288 (sizeof(buffer) - 1) > count ? count : sizeof(buffer) - 1;
1289 unsigned long val;
1290 char *p = buffer;
1291
1292 IPW_DEBUG_INFO("enter\n");
1293
1294 strncpy(buffer, buf, len);
1295 buffer[len] = 0;
1296
1297 if (p[1] == 'x' || p[1] == 'X' || p[0] == 'x' || p[0] == 'X') {
1298 p++;
1299 if (p[0] == 'x' || p[0] == 'X')
1300 p++;
1301 val = simple_strtoul(p, &p, 16);
1302 } else
1303 val = simple_strtoul(p, &p, 10);
1304 if (p == buffer) {
1305 IPW_DEBUG_INFO("%s: user supplied invalid value.\n", dev->name);
1306 } else {
1307 priv->ieee->scan_age = val;
1308 IPW_DEBUG_INFO("set scan_age = %u\n", priv->ieee->scan_age);
1309 }
1310
1311 IPW_DEBUG_INFO("exit\n");
1312 return len;
1313}
1314
1315static DEVICE_ATTR(scan_age, S_IWUSR | S_IRUGO, show_scan_age, store_scan_age);
1316
1317static ssize_t show_led(struct device *d, struct device_attribute *attr,
1318 char *buf)
1319{
1320 struct ipw_priv *priv = dev_get_drvdata(d);
1321 return sprintf(buf, "%d\n", (priv->config & CFG_NO_LED) ? 0 : 1);
1322}
1323
1324static ssize_t store_led(struct device *d, struct device_attribute *attr,
1325 const char *buf, size_t count)
1326{
1327 struct ipw_priv *priv = dev_get_drvdata(d);
1328
1329 IPW_DEBUG_INFO("enter\n");
1330
1331 if (count == 0)
1332 return 0;
1333
1334 if (*buf == 0) {
1335 IPW_DEBUG_LED("Disabling LED control.\n");
1336 priv->config |= CFG_NO_LED;
1337 ipw_led_shutdown(priv);
1338 } else {
1339 IPW_DEBUG_LED("Enabling LED control.\n");
1340 priv->config &= ~CFG_NO_LED;
1341 ipw_led_init(priv);
1342 }
1343
1344 IPW_DEBUG_INFO("exit\n");
1345 return count;
1346}
1347
1348static DEVICE_ATTR(led, S_IWUSR | S_IRUGO, show_led, store_led);
1349
ad3fee56 1350static ssize_t show_status(struct device *d,
0edd5b44 1351 struct device_attribute *attr, char *buf)
43f66a6c 1352{
ad3fee56 1353 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1354 return sprintf(buf, "0x%08x\n", (int)p->status);
1355}
0edd5b44 1356
43f66a6c
JK		 1357static DEVICE_ATTR(status, S_IRUGO, show_status, NULL);
1358
ad3fee56
AM		 1359static ssize_t show_cfg(struct device *d, struct device_attribute *attr,
1360 char *buf)
43f66a6c 1361{
ad3fee56 1362 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1363 return sprintf(buf, "0x%08x\n", (int)p->config);
1364}
0edd5b44 1365
43f66a6c
JK		 1366static DEVICE_ATTR(cfg, S_IRUGO, show_cfg, NULL);
1367
ad3fee56 1368static ssize_t show_nic_type(struct device *d,
0edd5b44 1369 struct device_attribute *attr, char *buf)
43f66a6c 1370{
a613bffd
JK		 1371 struct ipw_priv *priv = d->driver_data;
1372 return sprintf(buf, "TYPE: %d\n", priv->nic_type);
43f66a6c 1373}
0edd5b44 1374
43f66a6c
JK		 1375static DEVICE_ATTR(nic_type, S_IRUGO, show_nic_type, NULL);
1376
ad3fee56 1377static ssize_t show_ucode_version(struct device *d,
0edd5b44 1378 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1379{
1380 u32 len = sizeof(u32), tmp = 0;
ad3fee56 1381 struct ipw_priv *p = d->driver_data;
43f66a6c 1382
0edd5b44 1383 if (ipw_get_ordinal(p, IPW_ORD_STAT_UCODE_VERSION, &tmp, &len))
43f66a6c
JK		 1384 return 0;
1385
1386 return sprintf(buf, "0x%08x\n", tmp);
1387}
0edd5b44
JG		 1388
1389static DEVICE_ATTR(ucode_version, S_IWUSR | S_IRUGO, show_ucode_version, NULL);
43f66a6c 1390
ad3fee56
AM		 1391static ssize_t show_rtc(struct device *d, struct device_attribute *attr,
1392 char *buf)
43f66a6c
JK		 1393{
1394 u32 len = sizeof(u32), tmp = 0;
ad3fee56 1395 struct ipw_priv *p = d->driver_data;
43f66a6c 1396
0edd5b44 1397 if (ipw_get_ordinal(p, IPW_ORD_STAT_RTC, &tmp, &len))
43f66a6c
JK		 1398 return 0;
1399
1400 return sprintf(buf, "0x%08x\n", tmp);
1401}
0edd5b44
JG		 1402
1403static DEVICE_ATTR(rtc, S_IWUSR | S_IRUGO, show_rtc, NULL);
43f66a6c
JK		 1404
1405/*
1406 * Add a device attribute to view/control the delay between eeprom
1407 * operations.
1408 */
ad3fee56 1409static ssize_t show_eeprom_delay(struct device *d,
0edd5b44 1410 struct device_attribute *attr, char *buf)
43f66a6c 1411{
0edd5b44 1412 int n = ((struct ipw_priv *)d->driver_data)->eeprom_delay;
43f66a6c
JK		 1413 return sprintf(buf, "%i\n", n);
1414}
ad3fee56 1415static ssize_t store_eeprom_delay(struct device *d,
0edd5b44
JG		 1416 struct device_attribute *attr,
1417 const char *buf, size_t count)
43f66a6c 1418{
ad3fee56 1419 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1420 sscanf(buf, "%i", &p->eeprom_delay);
1421 return strnlen(buf, count);
1422}
0edd5b44
JG		 1423
1424static DEVICE_ATTR(eeprom_delay, S_IWUSR | S_IRUGO,
1425 show_eeprom_delay, store_eeprom_delay);
43f66a6c 1426
ad3fee56 1427static ssize_t show_command_event_reg(struct device *d,
0edd5b44 1428 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1429{
1430 u32 reg = 0;
ad3fee56 1431 struct ipw_priv *p = d->driver_data;
43f66a6c 1432
b095c381 1433 reg = ipw_read_reg32(p, IPW_INTERNAL_CMD_EVENT);
43f66a6c
JK		 1434 return sprintf(buf, "0x%08x\n", reg);
1435}
ad3fee56 1436static ssize_t store_command_event_reg(struct device *d,
0edd5b44
JG		 1437 struct device_attribute *attr,
1438 const char *buf, size_t count)
43f66a6c
JK		 1439{
1440 u32 reg;
ad3fee56 1441 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1442
1443 sscanf(buf, "%x", &reg);
b095c381 1444 ipw_write_reg32(p, IPW_INTERNAL_CMD_EVENT, reg);
43f66a6c
JK		 1445 return strnlen(buf, count);
1446}
0edd5b44
JG		 1447
1448static DEVICE_ATTR(command_event_reg, S_IWUSR | S_IRUGO,
1449 show_command_event_reg, store_command_event_reg);
43f66a6c 1450
ad3fee56 1451static ssize_t show_mem_gpio_reg(struct device *d,
0edd5b44 1452 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1453{
1454 u32 reg = 0;
ad3fee56 1455 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1456
1457 reg = ipw_read_reg32(p, 0x301100);
1458 return sprintf(buf, "0x%08x\n", reg);
1459}
ad3fee56 1460static ssize_t store_mem_gpio_reg(struct device *d,
0edd5b44
JG		 1461 struct device_attribute *attr,
1462 const char *buf, size_t count)
43f66a6c
JK		 1463{
1464 u32 reg;
ad3fee56 1465 struct ipw_priv *p = d->driver_data;
43f66a6c
JK		 1466
1467 sscanf(buf, "%x", &reg);
1468 ipw_write_reg32(p, 0x301100, reg);
1469 return strnlen(buf, count);
1470}
0edd5b44
JG		 1471
1472static DEVICE_ATTR(mem_gpio_reg, S_IWUSR | S_IRUGO,
1473 show_mem_gpio_reg, store_mem_gpio_reg);
43f66a6c 1474
ad3fee56 1475static ssize_t show_indirect_dword(struct device *d,
0edd5b44 1476 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1477{
1478 u32 reg = 0;
ad3fee56 1479 struct ipw_priv *priv = d->driver_data;
afbf30a2 1480
bf79451e 1481 if (priv->status & STATUS_INDIRECT_DWORD)
43f66a6c 1482 reg = ipw_read_reg32(priv, priv->indirect_dword);
bf79451e 1483 else
43f66a6c 1484 reg = 0;
bf79451e 1485
43f66a6c
JK		 1486 return sprintf(buf, "0x%08x\n", reg);
1487}
ad3fee56 1488static ssize_t store_indirect_dword(struct device *d,
0edd5b44
JG		 1489 struct device_attribute *attr,
1490 const char *buf, size_t count)
43f66a6c 1491{
ad3fee56 1492 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK		 1493
1494 sscanf(buf, "%x", &priv->indirect_dword);
1495 priv->status |= STATUS_INDIRECT_DWORD;
1496 return strnlen(buf, count);
1497}
0edd5b44
JG		 1498
1499static DEVICE_ATTR(indirect_dword, S_IWUSR | S_IRUGO,
1500 show_indirect_dword, store_indirect_dword);
43f66a6c 1501
ad3fee56 1502static ssize_t show_indirect_byte(struct device *d,
0edd5b44 1503 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1504{
1505 u8 reg = 0;
ad3fee56 1506 struct ipw_priv *priv = d->driver_data;
afbf30a2 1507
bf79451e 1508 if (priv->status & STATUS_INDIRECT_BYTE)
43f66a6c 1509 reg = ipw_read_reg8(priv, priv->indirect_byte);
bf79451e 1510 else
43f66a6c
JK		 1511 reg = 0;
1512
1513 return sprintf(buf, "0x%02x\n", reg);
1514}
ad3fee56 1515static ssize_t store_indirect_byte(struct device *d,
0edd5b44
JG		 1516 struct device_attribute *attr,
1517 const char *buf, size_t count)
43f66a6c 1518{
ad3fee56 1519 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK		 1520
1521 sscanf(buf, "%x", &priv->indirect_byte);
1522 priv->status |= STATUS_INDIRECT_BYTE;
1523 return strnlen(buf, count);
1524}
0edd5b44
JG		 1525
1526static DEVICE_ATTR(indirect_byte, S_IWUSR | S_IRUGO,
43f66a6c
JK		 1527 show_indirect_byte, store_indirect_byte);
1528
ad3fee56 1529static ssize_t show_direct_dword(struct device *d,
0edd5b44 1530 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1531{
1532 u32 reg = 0;
ad3fee56 1533 struct ipw_priv *priv = d->driver_data;
43f66a6c 1534
bf79451e 1535 if (priv->status & STATUS_DIRECT_DWORD)
43f66a6c 1536 reg = ipw_read32(priv, priv->direct_dword);
bf79451e 1537 else
43f66a6c
JK		 1538 reg = 0;
1539
1540 return sprintf(buf, "0x%08x\n", reg);
1541}
ad3fee56 1542static ssize_t store_direct_dword(struct device *d,
0edd5b44
JG		 1543 struct device_attribute *attr,
1544 const char *buf, size_t count)
43f66a6c 1545{
ad3fee56 1546 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK		 1547
1548 sscanf(buf, "%x", &priv->direct_dword);
1549 priv->status |= STATUS_DIRECT_DWORD;
1550 return strnlen(buf, count);
1551}
43f66a6c 1552
0edd5b44
JG		 1553static DEVICE_ATTR(direct_dword, S_IWUSR | S_IRUGO,
1554 show_direct_dword, store_direct_dword);
43f66a6c 1555
858119e1 1556static int rf_kill_active(struct ipw_priv *priv)
43f66a6c
JK		 1557{
1558 if (0 == (ipw_read32(priv, 0x30) & 0x10000))
1559 priv->status |= STATUS_RF_KILL_HW;
1560 else
1561 priv->status &= ~STATUS_RF_KILL_HW;
1562
1563 return (priv->status & STATUS_RF_KILL_HW) ? 1 : 0;
1564}
1565
ad3fee56 1566static ssize_t show_rf_kill(struct device *d, struct device_attribute *attr,
0edd5b44 1567 char *buf)
43f66a6c
JK		 1568{
1569 /* 0 - RF kill not enabled
bf79451e 1570 1 - SW based RF kill active (sysfs)
43f66a6c
JK		 1571 2 - HW based RF kill active
1572 3 - Both HW and SW baed RF kill active */
ad3fee56 1573 struct ipw_priv *priv = d->driver_data;
43f66a6c 1574 int val = ((priv->status & STATUS_RF_KILL_SW) ? 0x1 : 0x0) |
0edd5b44 1575 (rf_kill_active(priv) ? 0x2 : 0x0);
43f66a6c
JK		 1576 return sprintf(buf, "%i\n", val);
1577}
1578
1579static int ipw_radio_kill_sw(struct ipw_priv *priv, int disable_radio)
1580{
bf79451e 1581 if ((disable_radio ? 1 : 0) ==
ea2b26e0 1582 ((priv->status & STATUS_RF_KILL_SW) ? 1 : 0))
0edd5b44 1583 return 0;
43f66a6c
JK		 1584
1585 IPW_DEBUG_RF_KILL("Manual SW RF Kill set to: RADIO %s\n",
1586 disable_radio ? "OFF" : "ON");
1587
1588 if (disable_radio) {
1589 priv->status |= STATUS_RF_KILL_SW;
1590
a613bffd 1591 if (priv->workqueue)
43f66a6c 1592 cancel_delayed_work(&priv->request_scan);
43f66a6c
JK		 1593 queue_work(priv->workqueue, &priv->down);
1594 } else {
1595 priv->status &= ~STATUS_RF_KILL_SW;
1596 if (rf_kill_active(priv)) {
1597 IPW_DEBUG_RF_KILL("Can not turn radio back on - "
1598 "disabled by HW switch\n");
1599 /* Make sure the RF_KILL check timer is running */
1600 cancel_delayed_work(&priv->rf_kill);
bf79451e 1601 queue_delayed_work(priv->workqueue, &priv->rf_kill,
43f66a6c 1602 2 * HZ);
bf79451e 1603 } else
43f66a6c
JK		 1604 queue_work(priv->workqueue, &priv->up);
1605 }
1606
1607 return 1;
1608}
1609
0edd5b44
JG		 1610static ssize_t store_rf_kill(struct device *d, struct device_attribute *attr,
1611 const char *buf, size_t count)
43f66a6c 1612{
ad3fee56 1613 struct ipw_priv *priv = d->driver_data;
bf79451e 1614
43f66a6c
JK		 1615 ipw_radio_kill_sw(priv, buf[0] == '1');
1616
1617 return count;
1618}
0edd5b44
JG		 1619
1620static DEVICE_ATTR(rf_kill, S_IWUSR | S_IRUGO, show_rf_kill, store_rf_kill);
43f66a6c 1621
b095c381
JK		 1622static ssize_t show_speed_scan(struct device *d, struct device_attribute *attr,
1623 char *buf)
1624{
1625 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1626 int pos = 0, len = 0;
1627 if (priv->config & CFG_SPEED_SCAN) {
1628 while (priv->speed_scan[pos] != 0)
1629 len += sprintf(&buf[len], "%d ",
1630 priv->speed_scan[pos++]);
1631 return len + sprintf(&buf[len], "\n");
1632 }
1633
1634 return sprintf(buf, "0\n");
1635}
1636
1637static ssize_t store_speed_scan(struct device *d, struct device_attribute *attr,
1638 const char *buf, size_t count)
1639{
1640 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1641 int channel, pos = 0;
1642 const char *p = buf;
1643
1644 /* list of space separated channels to scan, optionally ending with 0 */
1645 while ((channel = simple_strtol(p, NULL, 0))) {
1646 if (pos == MAX_SPEED_SCAN - 1) {
1647 priv->speed_scan[pos] = 0;
1648 break;
1649 }
1650
1867b117 1651 if (ieee80211_is_valid_channel(priv->ieee, channel))
b095c381
JK		 1652 priv->speed_scan[pos++] = channel;
1653 else
1654 IPW_WARNING("Skipping invalid channel request: %d\n",
1655 channel);
1656 p = strchr(p, ' ');
1657 if (!p)
1658 break;
1659 while (*p == ' ' || *p == '\t')
1660 p++;
1661 }
1662
1663 if (pos == 0)
1664 priv->config &= ~CFG_SPEED_SCAN;
1665 else {
1666 priv->speed_scan_pos = 0;
1667 priv->config |= CFG_SPEED_SCAN;
1668 }
1669
1670 return count;
1671}
1672
1673static DEVICE_ATTR(speed_scan, S_IWUSR | S_IRUGO, show_speed_scan,
1674 store_speed_scan);
1675
1676static ssize_t show_net_stats(struct device *d, struct device_attribute *attr,
1677 char *buf)
1678{
1679 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1680 return sprintf(buf, "%c\n", (priv->config & CFG_NET_STATS) ? '1' : '0');
1681}
1682
1683static ssize_t store_net_stats(struct device *d, struct device_attribute *attr,
1684 const char *buf, size_t count)
1685{
1686 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1687 if (buf[0] == '1')
1688 priv->config |= CFG_NET_STATS;
1689 else
1690 priv->config &= ~CFG_NET_STATS;
1691
1692 return count;
1693}
1694
afbf30a2
JK		 1695static DEVICE_ATTR(net_stats, S_IWUSR | S_IRUGO,
1696 show_net_stats, store_net_stats);
b095c381 1697
ea2b26e0
JK		 1698static void notify_wx_assoc_event(struct ipw_priv *priv)
1699{
1700 union iwreq_data wrqu;
1701 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1702 if (priv->status & STATUS_ASSOCIATED)
1703 memcpy(wrqu.ap_addr.sa_data, priv->bssid, ETH_ALEN);
1704 else
1705 memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
1706 wireless_send_event(priv->net_dev, SIOCGIWAP, &wrqu, NULL);
1707}
1708
43f66a6c
JK		 1709static void ipw_irq_tasklet(struct ipw_priv *priv)
1710{
1711 u32 inta, inta_mask, handled = 0;
1712 unsigned long flags;
1713 int rc = 0;
1714
1715 spin_lock_irqsave(&priv->lock, flags);
1716
b095c381
JK		 1717 inta = ipw_read32(priv, IPW_INTA_RW);
1718 inta_mask = ipw_read32(priv, IPW_INTA_MASK_R);
1719 inta &= (IPW_INTA_MASK_ALL & inta_mask);
43f66a6c
JK		 1720
1721 /* Add any cached INTA values that need to be handled */
1722 inta |= priv->isr_inta;
1723
1724 /* handle all the justifications for the interrupt */
b095c381 1725 if (inta & IPW_INTA_BIT_RX_TRANSFER) {
43f66a6c 1726 ipw_rx(priv);
b095c381 1727 handled |= IPW_INTA_BIT_RX_TRANSFER;
43f66a6c
JK		 1728 }
1729
b095c381 1730 if (inta & IPW_INTA_BIT_TX_CMD_QUEUE) {
43f66a6c 1731 IPW_DEBUG_HC("Command completed.\n");
0edd5b44 1732 rc = ipw_queue_tx_reclaim(priv, &priv->txq_cmd, -1);
43f66a6c
JK		 1733 priv->status &= ~STATUS_HCMD_ACTIVE;
1734 wake_up_interruptible(&priv->wait_command_queue);
b095c381 1735 handled |= IPW_INTA_BIT_TX_CMD_QUEUE;
43f66a6c
JK		 1736 }
1737
b095c381 1738 if (inta & IPW_INTA_BIT_TX_QUEUE_1) {
43f66a6c 1739 IPW_DEBUG_TX("TX_QUEUE_1\n");
0edd5b44 1740 rc = ipw_queue_tx_reclaim(priv, &priv->txq[0], 0);
b095c381 1741 handled |= IPW_INTA_BIT_TX_QUEUE_1;
43f66a6c
JK		 1742 }
1743
b095c381 1744 if (inta & IPW_INTA_BIT_TX_QUEUE_2) {
43f66a6c 1745 IPW_DEBUG_TX("TX_QUEUE_2\n");
0edd5b44 1746 rc = ipw_queue_tx_reclaim(priv, &priv->txq[1], 1);
b095c381 1747 handled |= IPW_INTA_BIT_TX_QUEUE_2;
43f66a6c
JK		 1748 }
1749
b095c381 1750 if (inta & IPW_INTA_BIT_TX_QUEUE_3) {
43f66a6c 1751 IPW_DEBUG_TX("TX_QUEUE_3\n");
0edd5b44 1752 rc = ipw_queue_tx_reclaim(priv, &priv->txq[2], 2);
b095c381 1753 handled |= IPW_INTA_BIT_TX_QUEUE_3;
43f66a6c
JK		 1754 }
1755
b095c381 1756 if (inta & IPW_INTA_BIT_TX_QUEUE_4) {
43f66a6c 1757 IPW_DEBUG_TX("TX_QUEUE_4\n");
0edd5b44 1758 rc = ipw_queue_tx_reclaim(priv, &priv->txq[3], 3);
b095c381 1759 handled |= IPW_INTA_BIT_TX_QUEUE_4;
43f66a6c
JK		 1760 }
1761
b095c381 1762 if (inta & IPW_INTA_BIT_STATUS_CHANGE) {
43f66a6c 1763 IPW_WARNING("STATUS_CHANGE\n");
b095c381 1764 handled |= IPW_INTA_BIT_STATUS_CHANGE;
43f66a6c
JK		 1765 }
1766
b095c381 1767 if (inta & IPW_INTA_BIT_BEACON_PERIOD_EXPIRED) {
43f66a6c 1768 IPW_WARNING("TX_PERIOD_EXPIRED\n");
b095c381 1769 handled |= IPW_INTA_BIT_BEACON_PERIOD_EXPIRED;
43f66a6c
JK		 1770 }
1771
b095c381 1772 if (inta & IPW_INTA_BIT_SLAVE_MODE_HOST_CMD_DONE) {
43f66a6c 1773 IPW_WARNING("HOST_CMD_DONE\n");
b095c381 1774 handled |= IPW_INTA_BIT_SLAVE_MODE_HOST_CMD_DONE;
43f66a6c
JK		 1775 }
1776
b095c381 1777 if (inta & IPW_INTA_BIT_FW_INITIALIZATION_DONE) {
43f66a6c 1778 IPW_WARNING("FW_INITIALIZATION_DONE\n");
b095c381 1779 handled |= IPW_INTA_BIT_FW_INITIALIZATION_DONE;
43f66a6c
JK		 1780 }
1781
b095c381 1782 if (inta & IPW_INTA_BIT_FW_CARD_DISABLE_PHY_OFF_DONE) {
43f66a6c 1783 IPW_WARNING("PHY_OFF_DONE\n");
b095c381 1784 handled |= IPW_INTA_BIT_FW_CARD_DISABLE_PHY_OFF_DONE;
43f66a6c
JK		 1785 }
1786
b095c381 1787 if (inta & IPW_INTA_BIT_RF_KILL_DONE) {
43f66a6c
JK		 1788 IPW_DEBUG_RF_KILL("RF_KILL_DONE\n");
1789 priv->status |= STATUS_RF_KILL_HW;
1790 wake_up_interruptible(&priv->wait_command_queue);
ea2b26e0 1791 priv->status &= ~(STATUS_ASSOCIATED | STATUS_ASSOCIATING);
43f66a6c 1792 cancel_delayed_work(&priv->request_scan);
a613bffd 1793 schedule_work(&priv->link_down);
43f66a6c 1794 queue_delayed_work(priv->workqueue, &priv->rf_kill, 2 * HZ);
b095c381 1795 handled |= IPW_INTA_BIT_RF_KILL_DONE;
43f66a6c 1796 }
bf79451e 1797
b095c381 1798 if (inta & IPW_INTA_BIT_FATAL_ERROR) {
43f66a6c 1799 IPW_ERROR("Firmware error detected. Restarting.\n");
b39860c6
JK		 1800 if (priv->error) {
1801 IPW_ERROR("Sysfs 'error' log already exists.\n");
0f52bf90 1802#ifdef CONFIG_IPW2200_DEBUG
b39860c6
JK		 1803 if (ipw_debug_level & IPW_DL_FW_ERRORS) {
1804 struct ipw_fw_error *error =
1805 ipw_alloc_error_log(priv);
1806 ipw_dump_error_log(priv, error);
1807 if (error)
1808 ipw_free_error_log(error);
1809 }
1810#endif
1811 } else {
1812 priv->error = ipw_alloc_error_log(priv);
1813 if (priv->error)
1814 IPW_ERROR("Sysfs 'error' log captured.\n");
1815 else
1816 IPW_ERROR("Error allocating sysfs 'error' "
1817 "log.\n");
0f52bf90 1818#ifdef CONFIG_IPW2200_DEBUG
b39860c6
JK		 1819 if (ipw_debug_level & IPW_DL_FW_ERRORS)
1820 ipw_dump_error_log(priv, priv->error);
43f66a6c 1821#endif
b39860c6
JK		 1822 }
1823
b095c381
JK		 1824 /* XXX: If hardware encryption is for WPA/WPA2,
1825 * we have to notify the supplicant. */
1826 if (priv->ieee->sec.encrypt) {
1827 priv->status &= ~STATUS_ASSOCIATED;
1828 notify_wx_assoc_event(priv);
1829 }
1830
1831 /* Keep the restart process from trying to send host
1832 * commands by clearing the INIT status bit */
1833 priv->status &= ~STATUS_INIT;
afbf30a2
JK		 1834
1835 /* Cancel currently queued command. */
1836 priv->status &= ~STATUS_HCMD_ACTIVE;
1837 wake_up_interruptible(&priv->wait_command_queue);
1838
43f66a6c 1839 queue_work(priv->workqueue, &priv->adapter_restart);
b095c381 1840 handled |= IPW_INTA_BIT_FATAL_ERROR;
43f66a6c
JK		 1841 }
1842
b095c381 1843 if (inta & IPW_INTA_BIT_PARITY_ERROR) {
43f66a6c 1844 IPW_ERROR("Parity error\n");
b095c381 1845 handled |= IPW_INTA_BIT_PARITY_ERROR;
43f66a6c
JK		 1846 }
1847
1848 if (handled != inta) {
0edd5b44 1849 IPW_ERROR("Unhandled INTA bits 0x%08x\n", inta & ~handled);
43f66a6c
JK		 1850 }
1851
1852 /* enable all interrupts */
1853 ipw_enable_interrupts(priv);
1854
1855 spin_unlock_irqrestore(&priv->lock, flags);
1856}
bf79451e 1857
43f66a6c
JK		 1858#define IPW_CMD(x) case IPW_CMD_ ## x : return #x
1859static char *get_cmd_string(u8 cmd)
1860{
1861 switch (cmd) {
1862 IPW_CMD(HOST_COMPLETE);
bf79451e
JG		 1863 IPW_CMD(POWER_DOWN);
1864 IPW_CMD(SYSTEM_CONFIG);
1865 IPW_CMD(MULTICAST_ADDRESS);
1866 IPW_CMD(SSID);
1867 IPW_CMD(ADAPTER_ADDRESS);
1868 IPW_CMD(PORT_TYPE);
1869 IPW_CMD(RTS_THRESHOLD);
1870 IPW_CMD(FRAG_THRESHOLD);
1871 IPW_CMD(POWER_MODE);
1872 IPW_CMD(WEP_KEY);
1873 IPW_CMD(TGI_TX_KEY);
1874 IPW_CMD(SCAN_REQUEST);
1875 IPW_CMD(SCAN_REQUEST_EXT);
1876 IPW_CMD(ASSOCIATE);
1877 IPW_CMD(SUPPORTED_RATES);
1878 IPW_CMD(SCAN_ABORT);
1879 IPW_CMD(TX_FLUSH);
1880 IPW_CMD(QOS_PARAMETERS);
1881 IPW_CMD(DINO_CONFIG);
1882 IPW_CMD(RSN_CAPABILITIES);
1883 IPW_CMD(RX_KEY);
1884 IPW_CMD(CARD_DISABLE);
1885 IPW_CMD(SEED_NUMBER);
1886 IPW_CMD(TX_POWER);
1887 IPW_CMD(COUNTRY_INFO);
1888 IPW_CMD(AIRONET_INFO);
1889 IPW_CMD(AP_TX_POWER);
1890 IPW_CMD(CCKM_INFO);
1891 IPW_CMD(CCX_VER_INFO);
1892 IPW_CMD(SET_CALIBRATION);
1893 IPW_CMD(SENSITIVITY_CALIB);
1894 IPW_CMD(RETRY_LIMIT);
1895 IPW_CMD(IPW_PRE_POWER_DOWN);
1896 IPW_CMD(VAP_BEACON_TEMPLATE);
1897 IPW_CMD(VAP_DTIM_PERIOD);
1898 IPW_CMD(EXT_SUPPORTED_RATES);
1899 IPW_CMD(VAP_LOCAL_TX_PWR_CONSTRAINT);
1900 IPW_CMD(VAP_QUIET_INTERVALS);
1901 IPW_CMD(VAP_CHANNEL_SWITCH);
1902 IPW_CMD(VAP_MANDATORY_CHANNELS);
1903 IPW_CMD(VAP_CELL_PWR_LIMIT);
1904 IPW_CMD(VAP_CF_PARAM_SET);
1905 IPW_CMD(VAP_SET_BEACONING_STATE);
1906 IPW_CMD(MEASUREMENT);
1907 IPW_CMD(POWER_CAPABILITY);
1908 IPW_CMD(SUPPORTED_CHANNELS);
1909 IPW_CMD(TPC_REPORT);
1910 IPW_CMD(WME_INFO);
1911 IPW_CMD(PRODUCTION_COMMAND);
1912 default:
43f66a6c
JK		 1913 return "UNKNOWN";
1914 }
1915}
43f66a6c
JK		 1916
1917#define HOST_COMPLETE_TIMEOUT HZ
0a7bcf26
ZY		 1918
1919static int __ipw_send_cmd(struct ipw_priv *priv, struct host_cmd *cmd)
43f66a6c
JK		 1920{
1921 int rc = 0;
a613bffd 1922 unsigned long flags;
43f66a6c 1923
a613bffd 1924 spin_lock_irqsave(&priv->lock, flags);
43f66a6c 1925 if (priv->status & STATUS_HCMD_ACTIVE) {
9ddf84f6
JK		 1926 IPW_ERROR("Failed to send %s: Already sending a command.\n",
1927 get_cmd_string(cmd->cmd));
a613bffd 1928 spin_unlock_irqrestore(&priv->lock, flags);
9ddf84f6 1929 return -EAGAIN;
43f66a6c
JK		 1930 }
1931
1932 priv->status |= STATUS_HCMD_ACTIVE;
bf79451e 1933
f6c5cb7c
JK		 1934 if (priv->cmdlog) {
1935 priv->cmdlog[priv->cmdlog_pos].jiffies = jiffies;
1936 priv->cmdlog[priv->cmdlog_pos].cmd.cmd = cmd->cmd;
1937 priv->cmdlog[priv->cmdlog_pos].cmd.len = cmd->len;
1938 memcpy(priv->cmdlog[priv->cmdlog_pos].cmd.param, cmd->param,
1939 cmd->len);
1940 priv->cmdlog[priv->cmdlog_pos].retcode = -1;
1941 }
1942
b095c381
JK		 1943 IPW_DEBUG_HC("%s command (#%d) %d bytes: 0x%08X\n",
1944 get_cmd_string(cmd->cmd), cmd->cmd, cmd->len,
1945 priv->status);
f516dbcd
ZY		 1946
1947#ifndef DEBUG_CMD_WEP_KEY
1948 if (cmd->cmd == IPW_CMD_WEP_KEY)
1949 IPW_DEBUG_HC("WEP_KEY command masked out for secure.\n");
1950 else
1951#endif
1952 printk_buf(IPW_DL_HOST_COMMAND, (u8 *) cmd->param, cmd->len);
1953
0a7bcf26 1954 rc = ipw_queue_tx_hcmd(priv, cmd->cmd, cmd->param, cmd->len, 0);
a613bffd
JK		 1955 if (rc) {
1956 priv->status &= ~STATUS_HCMD_ACTIVE;
9ddf84f6
JK		 1957 IPW_ERROR("Failed to send %s: Reason %d\n",
1958 get_cmd_string(cmd->cmd), rc);
a613bffd 1959 spin_unlock_irqrestore(&priv->lock, flags);
f6c5cb7c 1960 goto exit;
a613bffd
JK		 1961 }
1962 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c 1963
0edd5b44
JG		 1964 rc = wait_event_interruptible_timeout(priv->wait_command_queue,
1965 !(priv->
1966 status & STATUS_HCMD_ACTIVE),
1967 HOST_COMPLETE_TIMEOUT);
43f66a6c 1968 if (rc == 0) {
a613bffd
JK		 1969 spin_lock_irqsave(&priv->lock, flags);
1970 if (priv->status & STATUS_HCMD_ACTIVE) {
9ddf84f6
JK		 1971 IPW_ERROR("Failed to send %s: Command timed out.\n",
1972 get_cmd_string(cmd->cmd));
a613bffd
JK		 1973 priv->status &= ~STATUS_HCMD_ACTIVE;
1974 spin_unlock_irqrestore(&priv->lock, flags);
f6c5cb7c
JK		 1975 rc = -EIO;
1976 goto exit;
a613bffd
JK		 1977 }
1978 spin_unlock_irqrestore(&priv->lock, flags);
3b9990cb
JK		 1979 } else
1980 rc = 0;
a613bffd 1981
b095c381 1982 if (priv->status & STATUS_RF_KILL_HW) {
9ddf84f6
JK		 1983 IPW_ERROR("Failed to send %s: Aborted due to RF kill switch.\n",
1984 get_cmd_string(cmd->cmd));
f6c5cb7c
JK		 1985 rc = -EIO;
1986 goto exit;
43f66a6c
JK		 1987 }
1988
2638bc39 1989 exit:
f6c5cb7c
JK		 1990 if (priv->cmdlog) {
1991 priv->cmdlog[priv->cmdlog_pos++].retcode = rc;
1992 priv->cmdlog_pos %= priv->cmdlog_len;
1993 }
1994 return rc;
43f66a6c
JK		 1995}
1996
0a7bcf26
ZY		 1997static int ipw_send_cmd_simple(struct ipw_priv *priv, u8 command)
1998{
1999 struct host_cmd cmd = {
2000 .cmd = command,
2001 };
2002
2003 return __ipw_send_cmd(priv, &cmd);
2004}
2005
2006static int ipw_send_cmd_pdu(struct ipw_priv *priv, u8 command, u8 len,
2007 void *data)
43f66a6c
JK		 2008{
2009 struct host_cmd cmd = {
0a7bcf26
ZY		 2010 .cmd = command,
2011 .len = len,
2012 .param = data,
43f66a6c
JK		 2013 };
2014
0a7bcf26
ZY		 2015 return __ipw_send_cmd(priv, &cmd);
2016}
2017
2018static int ipw_send_host_complete(struct ipw_priv *priv)
2019{
43f66a6c
JK		 2020 if (!priv) {
2021 IPW_ERROR("Invalid args\n");
2022 return -1;
2023 }
2024
0a7bcf26 2025 return ipw_send_cmd_simple(priv, IPW_CMD_HOST_COMPLETE);
43f66a6c
JK		 2026}
2027
bf79451e 2028static int ipw_send_system_config(struct ipw_priv *priv,
43f66a6c
JK		 2029 struct ipw_sys_config *config)
2030{
43f66a6c
JK		 2031 if (!priv || !config) {
2032 IPW_ERROR("Invalid args\n");
2033 return -1;
2034 }
2035
0a7bcf26 2036 return ipw_send_cmd_pdu(priv, IPW_CMD_SYSTEM_CONFIG, sizeof(*config),
2638bc39 2037 config);
43f66a6c
JK		 2038}
2039
0edd5b44 2040static int ipw_send_ssid(struct ipw_priv *priv, u8 * ssid, int len)
43f66a6c 2041{
43f66a6c
JK		 2042 if (!priv || !ssid) {
2043 IPW_ERROR("Invalid args\n");
2044 return -1;
2045 }
2046
0a7bcf26 2047 return ipw_send_cmd_pdu(priv, IPW_CMD_SSID, min(len, IW_ESSID_MAX_SIZE),
2638bc39 2048 ssid);
43f66a6c
JK		 2049}
2050
0edd5b44 2051static int ipw_send_adapter_address(struct ipw_priv *priv, u8 * mac)
43f66a6c 2052{
43f66a6c
JK		 2053 if (!priv || !mac) {
2054 IPW_ERROR("Invalid args\n");
2055 return -1;
2056 }
2057
2058 IPW_DEBUG_INFO("%s: Setting MAC to " MAC_FMT "\n",
2059 priv->net_dev->name, MAC_ARG(mac));
2060
2638bc39 2061 return ipw_send_cmd_pdu(priv, IPW_CMD_ADAPTER_ADDRESS, ETH_ALEN, mac);
43f66a6c
JK		 2062}
2063
a613bffd
JK		 2064/*
2065 * NOTE: This must be executed from our workqueue as it results in udelay
2066 * being called which may corrupt the keyboard if executed on default
2067 * workqueue
2068 */
43f66a6c
JK		 2069static void ipw_adapter_restart(void *adapter)
2070{
2071 struct ipw_priv *priv = adapter;
2072
2073 if (priv->status & STATUS_RF_KILL_MASK)
2074 return;
2075
2076 ipw_down(priv);
b095c381
JK		 2077
2078 if (priv->assoc_network &&
2079 (priv->assoc_network->capability & WLAN_CAPABILITY_IBSS))
2080 ipw_remove_current_network(priv);
2081
43f66a6c
JK		 2082 if (ipw_up(priv)) {
2083 IPW_ERROR("Failed to up device\n");
2084 return;
2085 }
2086}
2087
c848d0af
JK		 2088static void ipw_bg_adapter_restart(void *data)
2089{
2090 struct ipw_priv *priv = data;
4644151b 2091 mutex_lock(&priv->mutex);
c848d0af 2092 ipw_adapter_restart(data);
4644151b 2093 mutex_unlock(&priv->mutex);
c848d0af
JK		 2094}
2095
43f66a6c
JK		 2096#define IPW_SCAN_CHECK_WATCHDOG (5 * HZ)
2097
2098static void ipw_scan_check(void *data)
2099{
2100 struct ipw_priv *priv = data;
2101 if (priv->status & (STATUS_SCANNING | STATUS_SCAN_ABORTING)) {
2102 IPW_DEBUG_SCAN("Scan completion watchdog resetting "
c7b6a674
ZY		 2103 "adapter after (%dms).\n",
2104 jiffies_to_msecs(IPW_SCAN_CHECK_WATCHDOG));
a613bffd 2105 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c
JK		 2106 }
2107}
2108
c848d0af
JK		 2109static void ipw_bg_scan_check(void *data)
2110{
2111 struct ipw_priv *priv = data;
4644151b 2112 mutex_lock(&priv->mutex);
c848d0af 2113 ipw_scan_check(data);
4644151b 2114 mutex_unlock(&priv->mutex);
c848d0af
JK		 2115}
2116
43f66a6c
JK		 2117static int ipw_send_scan_request_ext(struct ipw_priv *priv,
2118 struct ipw_scan_request_ext *request)
2119{
0a7bcf26 2120 return ipw_send_cmd_pdu(priv, IPW_CMD_SCAN_REQUEST_EXT,
2638bc39 2121 sizeof(*request), request);
43f66a6c
JK		 2122}
2123
2124static int ipw_send_scan_abort(struct ipw_priv *priv)
2125{
43f66a6c
JK		 2126 if (!priv) {
2127 IPW_ERROR("Invalid args\n");
2128 return -1;
2129 }
2130
0a7bcf26 2131 return ipw_send_cmd_simple(priv, IPW_CMD_SCAN_ABORT);
43f66a6c
JK		 2132}
2133
2134static int ipw_set_sensitivity(struct ipw_priv *priv, u16 sens)
2135{
0a7bcf26
ZY		 2136 struct ipw_sensitivity_calib calib = {
2137 .beacon_rssi_raw = sens,
43f66a6c 2138 };
0a7bcf26
ZY		 2139
2140 return ipw_send_cmd_pdu(priv, IPW_CMD_SENSITIVITY_CALIB, sizeof(calib),
2638bc39 2141 &calib);
43f66a6c
JK		 2142}
2143
2144static int ipw_send_associate(struct ipw_priv *priv,
2145 struct ipw_associate *associate)
2146{
a613bffd 2147 struct ipw_associate tmp_associate;
0a7bcf26
ZY		 2148
2149 if (!priv || !associate) {
2150 IPW_ERROR("Invalid args\n");
2151 return -1;
2152 }
2153
a613bffd
JK		 2154 memcpy(&tmp_associate, associate, sizeof(*associate));
2155 tmp_associate.policy_support =
2156 cpu_to_le16(tmp_associate.policy_support);
2157 tmp_associate.assoc_tsf_msw = cpu_to_le32(tmp_associate.assoc_tsf_msw);
2158 tmp_associate.assoc_tsf_lsw = cpu_to_le32(tmp_associate.assoc_tsf_lsw);
2159 tmp_associate.capability = cpu_to_le16(tmp_associate.capability);
2160 tmp_associate.listen_interval =
2161 cpu_to_le16(tmp_associate.listen_interval);
2162 tmp_associate.beacon_interval =
2163 cpu_to_le16(tmp_associate.beacon_interval);
2164 tmp_associate.atim_window = cpu_to_le16(tmp_associate.atim_window);
2165
0a7bcf26 2166 return ipw_send_cmd_pdu(priv, IPW_CMD_ASSOCIATE, sizeof(tmp_associate),
2638bc39 2167 &tmp_associate);
43f66a6c
JK		 2168}
2169
2170static int ipw_send_supported_rates(struct ipw_priv *priv,
2171 struct ipw_supported_rates *rates)
2172{
43f66a6c
JK		 2173 if (!priv || !rates) {
2174 IPW_ERROR("Invalid args\n");
2175 return -1;
2176 }
2177
0a7bcf26 2178 return ipw_send_cmd_pdu(priv, IPW_CMD_SUPPORTED_RATES, sizeof(*rates),
2638bc39 2179 rates);
43f66a6c
JK		 2180}
2181
2182static int ipw_set_random_seed(struct ipw_priv *priv)
2183{
0a7bcf26 2184 u32 val;
43f66a6c
JK		 2185
2186 if (!priv) {
2187 IPW_ERROR("Invalid args\n");
2188 return -1;
2189 }
2190
0a7bcf26 2191 get_random_bytes(&val, sizeof(val));
43f66a6c 2192
0a7bcf26 2193 return ipw_send_cmd_pdu(priv, IPW_CMD_SEED_NUMBER, sizeof(val), &val);
43f66a6c
JK		 2194}
2195
43f66a6c
JK		 2196static int ipw_send_card_disable(struct ipw_priv *priv, u32 phy_off)
2197{
43f66a6c
JK		 2198 if (!priv) {
2199 IPW_ERROR("Invalid args\n");
2200 return -1;
2201 }
2202
0a7bcf26 2203 return ipw_send_cmd_pdu(priv, IPW_CMD_CARD_DISABLE, sizeof(phy_off),
2638bc39 2204 &phy_off);
43f66a6c 2205}
43f66a6c 2206
0edd5b44 2207static int ipw_send_tx_power(struct ipw_priv *priv, struct ipw_tx_power *power)
43f66a6c 2208{
43f66a6c
JK		 2209 if (!priv || !power) {
2210 IPW_ERROR("Invalid args\n");
2211 return -1;
2212 }
2213
2638bc39 2214 return ipw_send_cmd_pdu(priv, IPW_CMD_TX_POWER, sizeof(*power), power);
43f66a6c
JK		 2215}
2216
6de9f7f2
ZY		 2217static int ipw_set_tx_power(struct ipw_priv *priv)
2218{
1867b117 2219 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
6de9f7f2
ZY		 2220 struct ipw_tx_power tx_power;
2221 s8 max_power;
2222 int i;
2223
2224 memset(&tx_power, 0, sizeof(tx_power));
2225
2226 /* configure device for 'G' band */
2227 tx_power.ieee_mode = IPW_G_MODE;
2228 tx_power.num_channels = geo->bg_channels;
2229 for (i = 0; i < geo->bg_channels; i++) {
2230 max_power = geo->bg[i].max_power;
2231 tx_power.channels_tx_power[i].channel_number =
2232 geo->bg[i].channel;
2233 tx_power.channels_tx_power[i].tx_power = max_power ?
2234 min(max_power, priv->tx_power) : priv->tx_power;
43f66a6c 2235 }
6de9f7f2
ZY		 2236 if (ipw_send_tx_power(priv, &tx_power))
2237 return -EIO;
2238
2239 /* configure device to also handle 'B' band */
2240 tx_power.ieee_mode = IPW_B_MODE;
2241 if (ipw_send_tx_power(priv, &tx_power))
2242 return -EIO;
bf79451e 2243
6de9f7f2
ZY		 2244 /* configure device to also handle 'A' band */
2245 if (priv->ieee->abg_true) {
2246 tx_power.ieee_mode = IPW_A_MODE;
2247 tx_power.num_channels = geo->a_channels;
2248 for (i = 0; i < tx_power.num_channels; i++) {
2249 max_power = geo->a[i].max_power;
2250 tx_power.channels_tx_power[i].channel_number =
2251 geo->a[i].channel;
2252 tx_power.channels_tx_power[i].tx_power = max_power ?
2253 min(max_power, priv->tx_power) : priv->tx_power;
2254 }
2255 if (ipw_send_tx_power(priv, &tx_power))
2256 return -EIO;
2257 }
43f66a6c
JK		 2258 return 0;
2259}
2260
2261static int ipw_send_rts_threshold(struct ipw_priv *priv, u16 rts)
2262{
2263 struct ipw_rts_threshold rts_threshold = {
2264 .rts_threshold = rts,
2265 };
43f66a6c
JK		 2266
2267 if (!priv) {
2268 IPW_ERROR("Invalid args\n");
2269 return -1;
2270 }
2271
0a7bcf26
ZY		 2272 return ipw_send_cmd_pdu(priv, IPW_CMD_RTS_THRESHOLD,
2273 sizeof(rts_threshold), &rts_threshold);
43f66a6c
JK		 2274}
2275
2276static int ipw_send_frag_threshold(struct ipw_priv *priv, u16 frag)
2277{
2278 struct ipw_frag_threshold frag_threshold = {
2279 .frag_threshold = frag,
2280 };
43f66a6c
JK		 2281
2282 if (!priv) {
2283 IPW_ERROR("Invalid args\n");
2284 return -1;
2285 }
2286
0a7bcf26
ZY		 2287 return ipw_send_cmd_pdu(priv, IPW_CMD_FRAG_THRESHOLD,
2288 sizeof(frag_threshold), &frag_threshold);
43f66a6c
JK		 2289}
2290
2291static int ipw_send_power_mode(struct ipw_priv *priv, u32 mode)
2292{
0a7bcf26 2293 u32 param;
43f66a6c
JK		 2294
2295 if (!priv) {
2296 IPW_ERROR("Invalid args\n");
2297 return -1;
2298 }
bf79451e 2299
43f66a6c
JK		 2300 /* If on battery, set to 3, if AC set to CAM, else user
2301 * level */
2302 switch (mode) {
2303 case IPW_POWER_BATTERY:
0a7bcf26 2304 param = IPW_POWER_INDEX_3;
43f66a6c
JK		 2305 break;
2306 case IPW_POWER_AC:
0a7bcf26 2307 param = IPW_POWER_MODE_CAM;
43f66a6c
JK		 2308 break;
2309 default:
0a7bcf26 2310 param = mode;
43f66a6c
JK		 2311 break;
2312 }
2313
0a7bcf26 2314 return ipw_send_cmd_pdu(priv, IPW_CMD_POWER_MODE, sizeof(param),
2638bc39 2315 &param);
43f66a6c
JK		 2316}
2317
afbf30a2
JK		 2318static int ipw_send_retry_limit(struct ipw_priv *priv, u8 slimit, u8 llimit)
2319{
2320 struct ipw_retry_limit retry_limit = {
2321 .short_retry_limit = slimit,
2322 .long_retry_limit = llimit
2323 };
afbf30a2
JK		 2324
2325 if (!priv) {
2326 IPW_ERROR("Invalid args\n");
2327 return -1;
2328 }
2329
0a7bcf26 2330 return ipw_send_cmd_pdu(priv, IPW_CMD_RETRY_LIMIT, sizeof(retry_limit),
2638bc39 2331 &retry_limit);
afbf30a2
JK		 2332}
2333
43f66a6c
JK		 2334/*
2335 * The IPW device contains a Microwire compatible EEPROM that stores
2336 * various data like the MAC address. Usually the firmware has exclusive
2337 * access to the eeprom, but during device initialization (before the
2338 * device driver has sent the HostComplete command to the firmware) the
2339 * device driver has read access to the EEPROM by way of indirect addressing
2340 * through a couple of memory mapped registers.
2341 *
2342 * The following is a simplified implementation for pulling data out of the
2343 * the eeprom, along with some helper functions to find information in
2344 * the per device private data's copy of the eeprom.
2345 *
2346 * NOTE: To better understand how these functions work (i.e what is a chip
2347 * select and why do have to keep driving the eeprom clock?), read
2348 * just about any data sheet for a Microwire compatible EEPROM.
2349 */
2350
2351/* write a 32 bit value into the indirect accessor register */
2352static inline void eeprom_write_reg(struct ipw_priv *p, u32 data)
2353{
2354 ipw_write_reg32(p, FW_MEM_REG_EEPROM_ACCESS, data);
bf79451e 2355
43f66a6c
JK		 2356 /* the eeprom requires some time to complete the operation */
2357 udelay(p->eeprom_delay);
2358
2359 return;
2360}
2361
2362/* perform a chip select operation */
858119e1 2363static void eeprom_cs(struct ipw_priv *priv)
43f66a6c 2364{
0edd5b44
JG		 2365 eeprom_write_reg(priv, 0);
2366 eeprom_write_reg(priv, EEPROM_BIT_CS);
2367 eeprom_write_reg(priv, EEPROM_BIT_CS | EEPROM_BIT_SK);
2368 eeprom_write_reg(priv, EEPROM_BIT_CS);
43f66a6c
JK		 2369}
2370
2371/* perform a chip select operation */
858119e1 2372static void eeprom_disable_cs(struct ipw_priv *priv)
43f66a6c 2373{
0edd5b44
JG		 2374 eeprom_write_reg(priv, EEPROM_BIT_CS);
2375 eeprom_write_reg(priv, 0);
2376 eeprom_write_reg(priv, EEPROM_BIT_SK);
43f66a6c
JK		 2377}
2378
2379/* push a single bit down to the eeprom */
0edd5b44 2380static inline void eeprom_write_bit(struct ipw_priv *p, u8 bit)
43f66a6c 2381{
0edd5b44
JG		 2382 int d = (bit ? EEPROM_BIT_DI : 0);
2383 eeprom_write_reg(p, EEPROM_BIT_CS | d);
2384 eeprom_write_reg(p, EEPROM_BIT_CS | d | EEPROM_BIT_SK);
43f66a6c
JK		 2385}
2386
2387/* push an opcode followed by an address down to the eeprom */
0edd5b44 2388static void eeprom_op(struct ipw_priv *priv, u8 op, u8 addr)
43f66a6c
JK		 2389{
2390 int i;
2391
2392 eeprom_cs(priv);
0edd5b44
JG		 2393 eeprom_write_bit(priv, 1);
2394 eeprom_write_bit(priv, op & 2);
2395 eeprom_write_bit(priv, op & 1);
2396 for (i = 7; i >= 0; i--) {
2397 eeprom_write_bit(priv, addr & (1 << i));
43f66a6c
JK		 2398 }
2399}
2400
2401/* pull 16 bits off the eeprom, one bit at a time */
0edd5b44 2402static u16 eeprom_read_u16(struct ipw_priv *priv, u8 addr)
43f66a6c
JK		 2403{
2404 int i;
0edd5b44 2405 u16 r = 0;
bf79451e 2406
43f66a6c 2407 /* Send READ Opcode */
0edd5b44 2408 eeprom_op(priv, EEPROM_CMD_READ, addr);
43f66a6c
JK		 2409
2410 /* Send dummy bit */
0edd5b44 2411 eeprom_write_reg(priv, EEPROM_BIT_CS);
43f66a6c
JK		 2412
2413 /* Read the byte off the eeprom one bit at a time */
0edd5b44 2414 for (i = 0; i < 16; i++) {
43f66a6c 2415 u32 data = 0;
0edd5b44
JG		 2416 eeprom_write_reg(priv, EEPROM_BIT_CS | EEPROM_BIT_SK);
2417 eeprom_write_reg(priv, EEPROM_BIT_CS);
2418 data = ipw_read_reg32(priv, FW_MEM_REG_EEPROM_ACCESS);
2419 r = (r << 1) | ((data & EEPROM_BIT_DO) ? 1 : 0);
43f66a6c 2420 }
bf79451e 2421
43f66a6c 2422 /* Send another dummy bit */
0edd5b44 2423 eeprom_write_reg(priv, 0);
43f66a6c 2424 eeprom_disable_cs(priv);
bf79451e 2425
43f66a6c
JK		 2426 return r;
2427}
2428
2429/* helper function for pulling the mac address out of the private */
2430/* data's copy of the eeprom data */
0edd5b44 2431static void eeprom_parse_mac(struct ipw_priv *priv, u8 * mac)
43f66a6c 2432{
afbf30a2 2433 memcpy(mac, &priv->eeprom[EEPROM_MAC_ADDRESS], 6);
43f66a6c
JK		 2434}
2435
2436/*
2437 * Either the device driver (i.e. the host) or the firmware can
2438 * load eeprom data into the designated region in SRAM. If neither
2439 * happens then the FW will shutdown with a fatal error.
2440 *
2441 * In order to signal the FW to load the EEPROM, the EEPROM_LOAD_DISABLE
2442 * bit needs region of shared SRAM needs to be non-zero.
2443 */
2444static void ipw_eeprom_init_sram(struct ipw_priv *priv)
2445{
2446 int i;
0edd5b44 2447 u16 *eeprom = (u16 *) priv->eeprom;
bf79451e 2448
43f66a6c
JK		 2449 IPW_DEBUG_TRACE(">>\n");
2450
2451 /* read entire contents of eeprom into private buffer */
0edd5b44 2452 for (i = 0; i < 128; i++)
a613bffd 2453 eeprom[i] = le16_to_cpu(eeprom_read_u16(priv, (u8) i));
43f66a6c 2454
bf79451e
JG		 2455 /*
2456 If the data looks correct, then copy it to our private
43f66a6c 2457 copy. Otherwise let the firmware know to perform the operation
c7b6a674 2458 on its own.
0edd5b44 2459 */
386093ef 2460 if (priv->eeprom[EEPROM_VERSION] != 0) {
43f66a6c
JK		 2461 IPW_DEBUG_INFO("Writing EEPROM data into SRAM\n");
2462
2463 /* write the eeprom data to sram */
b095c381 2464 for (i = 0; i < IPW_EEPROM_IMAGE_SIZE; i++)
0edd5b44 2465 ipw_write8(priv, IPW_EEPROM_DATA + i, priv->eeprom[i]);
43f66a6c
JK		 2466
2467 /* Do not load eeprom data on fatal error or suspend */
2468 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 0);
2469 } else {
2470 IPW_DEBUG_INFO("Enabling FW initializationg of SRAM\n");
2471
2472 /* Load eeprom data on fatal error or suspend */
2473 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 1);
2474 }
2475
2476 IPW_DEBUG_TRACE("<<\n");
2477}
2478
858119e1 2479static void ipw_zero_memory(struct ipw_priv *priv, u32 start, u32 count)
43f66a6c
JK		 2480{
2481 count >>= 2;
0edd5b44
JG		 2482 if (!count)
2483 return;
b095c381 2484 _ipw_write32(priv, IPW_AUTOINC_ADDR, start);
bf79451e 2485 while (count--)
b095c381 2486 _ipw_write32(priv, IPW_AUTOINC_DATA, 0);
43f66a6c
JK		 2487}
2488
2489static inline void ipw_fw_dma_reset_command_blocks(struct ipw_priv *priv)
2490{
b095c381 2491 ipw_zero_memory(priv, IPW_SHARED_SRAM_DMA_CONTROL,
bf79451e 2492 CB_NUMBER_OF_ELEMENTS_SMALL *
43f66a6c
JK		 2493 sizeof(struct command_block));
2494}
2495
2496static int ipw_fw_dma_enable(struct ipw_priv *priv)
0edd5b44 2497{ /* start dma engine but no transfers yet */
43f66a6c
JK		 2498
2499 IPW_DEBUG_FW(">> : \n");
bf79451e 2500
43f66a6c
JK		 2501 /* Start the dma */
2502 ipw_fw_dma_reset_command_blocks(priv);
bf79451e 2503
43f66a6c 2504 /* Write CB base address */
b095c381 2505 ipw_write_reg32(priv, IPW_DMA_I_CB_BASE, IPW_SHARED_SRAM_DMA_CONTROL);
43f66a6c
JK		 2506
2507 IPW_DEBUG_FW("<< : \n");
2508 return 0;
2509}
2510
2511static void ipw_fw_dma_abort(struct ipw_priv *priv)
2512{
2513 u32 control = 0;
2514
2515 IPW_DEBUG_FW(">> :\n");
bf79451e
JG		 2516
2517 //set the Stop and Abort bit
43f66a6c 2518 control = DMA_CONTROL_SMALL_CB_CONST_VALUE | DMA_CB_STOP_AND_ABORT;
b095c381 2519 ipw_write_reg32(priv, IPW_DMA_I_DMA_CONTROL, control);
43f66a6c 2520 priv->sram_desc.last_cb_index = 0;
bf79451e 2521
43f66a6c
JK		 2522 IPW_DEBUG_FW("<< \n");
2523}
2524
0edd5b44
JG		 2525static int ipw_fw_dma_write_command_block(struct ipw_priv *priv, int index,
2526 struct command_block *cb)
43f66a6c 2527{
0edd5b44 2528 u32 address =
b095c381 2529 IPW_SHARED_SRAM_DMA_CONTROL +
0edd5b44 2530 (sizeof(struct command_block) * index);
43f66a6c
JK		 2531 IPW_DEBUG_FW(">> :\n");
2532
0edd5b44
JG		 2533 ipw_write_indirect(priv, address, (u8 *) cb,
2534 (int)sizeof(struct command_block));
43f66a6c
JK		 2535
2536 IPW_DEBUG_FW("<< :\n");
2537 return 0;
2538
2539}
2540
2541static int ipw_fw_dma_kick(struct ipw_priv *priv)
2542{
2543 u32 control = 0;
0edd5b44 2544 u32 index = 0;
43f66a6c
JK		 2545
2546 IPW_DEBUG_FW(">> :\n");
bf79451e 2547
43f66a6c 2548 for (index = 0; index < priv->sram_desc.last_cb_index; index++)
0edd5b44
JG		 2549 ipw_fw_dma_write_command_block(priv, index,
2550 &priv->sram_desc.cb_list[index]);
43f66a6c
JK		 2551
2552 /* Enable the DMA in the CSR register */
b095c381
JK		 2553 ipw_clear_bit(priv, IPW_RESET_REG,
2554 IPW_RESET_REG_MASTER_DISABLED |
2555 IPW_RESET_REG_STOP_MASTER);
bf79451e 2556
0edd5b44 2557 /* Set the Start bit. */
43f66a6c 2558 control = DMA_CONTROL_SMALL_CB_CONST_VALUE | DMA_CB_START;
b095c381 2559 ipw_write_reg32(priv, IPW_DMA_I_DMA_CONTROL, control);
43f66a6c
JK		 2560
2561 IPW_DEBUG_FW("<< :\n");
2562 return 0;
2563}
2564
2565static void ipw_fw_dma_dump_command_block(struct ipw_priv *priv)
2566{
2567 u32 address;
0edd5b44
JG		 2568 u32 register_value = 0;
2569 u32 cb_fields_address = 0;
43f66a6c
JK		 2570
2571 IPW_DEBUG_FW(">> :\n");
b095c381 2572 address = ipw_read_reg32(priv, IPW_DMA_I_CURRENT_CB);
0edd5b44 2573 IPW_DEBUG_FW_INFO("Current CB is 0x%x \n", address);
43f66a6c
JK		 2574
2575 /* Read the DMA Controlor register */
b095c381
JK		 2576 register_value = ipw_read_reg32(priv, IPW_DMA_I_DMA_CONTROL);
2577 IPW_DEBUG_FW_INFO("IPW_DMA_I_DMA_CONTROL is 0x%x \n", register_value);
43f66a6c 2578
0edd5b44 2579 /* Print the CB values */
43f66a6c
JK		 2580 cb_fields_address = address;
2581 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2582 IPW_DEBUG_FW_INFO("Current CB ControlField is 0x%x \n", register_value);
43f66a6c
JK		 2583
2584 cb_fields_address += sizeof(u32);
2585 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2586 IPW_DEBUG_FW_INFO("Current CB Source Field is 0x%x \n", register_value);
43f66a6c
JK		 2587
2588 cb_fields_address += sizeof(u32);
2589 register_value = ipw_read_reg32(priv, cb_fields_address);
2590 IPW_DEBUG_FW_INFO("Current CB Destination Field is 0x%x \n",
2591 register_value);
2592
2593 cb_fields_address += sizeof(u32);
2594 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2595 IPW_DEBUG_FW_INFO("Current CB Status Field is 0x%x \n", register_value);
43f66a6c
JK		 2596
2597 IPW_DEBUG_FW(">> :\n");
2598}
2599
2600static int ipw_fw_dma_command_block_index(struct ipw_priv *priv)
2601{
2602 u32 current_cb_address = 0;
2603 u32 current_cb_index = 0;
2604
2605 IPW_DEBUG_FW("<< :\n");
b095c381 2606 current_cb_address = ipw_read_reg32(priv, IPW_DMA_I_CURRENT_CB);
bf79451e 2607
b095c381 2608 current_cb_index = (current_cb_address - IPW_SHARED_SRAM_DMA_CONTROL) /
0edd5b44 2609 sizeof(struct command_block);
bf79451e 2610
43f66a6c 2611 IPW_DEBUG_FW_INFO("Current CB index 0x%x address = 0x%X \n",
0edd5b44 2612 current_cb_index, current_cb_address);
43f66a6c
JK		 2613
2614 IPW_DEBUG_FW(">> :\n");
2615 return current_cb_index;
2616
2617}
2618
2619static int ipw_fw_dma_add_command_block(struct ipw_priv *priv,
2620 u32 src_address,
2621 u32 dest_address,
2622 u32 length,
0edd5b44 2623 int interrupt_enabled, int is_last)
43f66a6c
JK		 2624{
2625
bf79451e 2626 u32 control = CB_VALID | CB_SRC_LE | CB_DEST_LE | CB_SRC_AUTOINC |
0edd5b44
JG		 2627 CB_SRC_IO_GATED | CB_DEST_AUTOINC | CB_SRC_SIZE_LONG |
2628 CB_DEST_SIZE_LONG;
43f66a6c 2629 struct command_block *cb;
0edd5b44 2630 u32 last_cb_element = 0;
43f66a6c
JK		 2631
2632 IPW_DEBUG_FW_INFO("src_address=0x%x dest_address=0x%x length=0x%x\n",
2633 src_address, dest_address, length);
2634
2635 if (priv->sram_desc.last_cb_index >= CB_NUMBER_OF_ELEMENTS_SMALL)
2636 return -1;
2637
2638 last_cb_element = priv->sram_desc.last_cb_index;
2639 cb = &priv->sram_desc.cb_list[last_cb_element];
2640 priv->sram_desc.last_cb_index++;
2641
2642 /* Calculate the new CB control word */
0edd5b44 2643 if (interrupt_enabled)
43f66a6c
JK		 2644 control |= CB_INT_ENABLED;
2645
2646 if (is_last)
2647 control |= CB_LAST_VALID;
bf79451e 2648
43f66a6c
JK		 2649 control |= length;
2650
2651 /* Calculate the CB Element's checksum value */
0edd5b44 2652 cb->status = control ^ src_address ^ dest_address;
43f66a6c
JK		 2653
2654 /* Copy the Source and Destination addresses */
2655 cb->dest_addr = dest_address;
2656 cb->source_addr = src_address;
2657
2658 /* Copy the Control Word last */
2659 cb->control = control;
2660
2661 return 0;
2662}
2663
2664static int ipw_fw_dma_add_buffer(struct ipw_priv *priv,
0edd5b44 2665 u32 src_phys, u32 dest_address, u32 length)
43f66a6c
JK		 2666{
2667 u32 bytes_left = length;
0edd5b44
JG		 2668 u32 src_offset = 0;
2669 u32 dest_offset = 0;
43f66a6c
JK		 2670 int status = 0;
2671 IPW_DEBUG_FW(">> \n");
2672 IPW_DEBUG_FW_INFO("src_phys=0x%x dest_address=0x%x length=0x%x\n",
2673 src_phys, dest_address, length);
2674 while (bytes_left > CB_MAX_LENGTH) {
0edd5b44
JG		 2675 status = ipw_fw_dma_add_command_block(priv,
2676 src_phys + src_offset,
2677 dest_address +
2678 dest_offset,
2679 CB_MAX_LENGTH, 0, 0);
43f66a6c
JK		 2680 if (status) {
2681 IPW_DEBUG_FW_INFO(": Failed\n");
2682 return -1;
bf79451e 2683 } else
43f66a6c
JK		 2684 IPW_DEBUG_FW_INFO(": Added new cb\n");
2685
2686 src_offset += CB_MAX_LENGTH;
2687 dest_offset += CB_MAX_LENGTH;
2688 bytes_left -= CB_MAX_LENGTH;
2689 }
2690
2691 /* add the buffer tail */
2692 if (bytes_left > 0) {
0edd5b44
JG		 2693 status =
2694 ipw_fw_dma_add_command_block(priv, src_phys + src_offset,
2695 dest_address + dest_offset,
2696 bytes_left, 0, 0);
43f66a6c
JK		 2697 if (status) {
2698 IPW_DEBUG_FW_INFO(": Failed on the buffer tail\n");
2699 return -1;
bf79451e 2700 } else
0edd5b44
JG		 2701 IPW_DEBUG_FW_INFO
2702 (": Adding new cb - the buffer tail\n");
43f66a6c 2703 }
bf79451e 2704
43f66a6c
JK		 2705 IPW_DEBUG_FW("<< \n");
2706 return 0;
2707}
2708
2709static int ipw_fw_dma_wait(struct ipw_priv *priv)
2710{
397ae121 2711 u32 current_index = 0, previous_index;
43f66a6c
JK		 2712 u32 watchdog = 0;
2713
2714 IPW_DEBUG_FW(">> : \n");
2715
2716 current_index = ipw_fw_dma_command_block_index(priv);
397ae121 2717 IPW_DEBUG_FW_INFO("sram_desc.last_cb_index:0x%08X\n",
0edd5b44 2718 (int)priv->sram_desc.last_cb_index);
43f66a6c
JK		 2719
2720 while (current_index < priv->sram_desc.last_cb_index) {
2721 udelay(50);
397ae121 2722 previous_index = current_index;
43f66a6c
JK		 2723 current_index = ipw_fw_dma_command_block_index(priv);
2724
397ae121
ZY		 2725 if (previous_index < current_index) {
2726 watchdog = 0;
2727 continue;
2728 }
2729 if (++watchdog > 400) {
43f66a6c
JK		 2730 IPW_DEBUG_FW_INFO("Timeout\n");
2731 ipw_fw_dma_dump_command_block(priv);
2732 ipw_fw_dma_abort(priv);
2733 return -1;
2734 }
2735 }
2736
2737 ipw_fw_dma_abort(priv);
2738
0edd5b44 2739 /*Disable the DMA in the CSR register */
b095c381
JK		 2740 ipw_set_bit(priv, IPW_RESET_REG,
2741 IPW_RESET_REG_MASTER_DISABLED | IPW_RESET_REG_STOP_MASTER);
43f66a6c
JK		 2742
2743 IPW_DEBUG_FW("<< dmaWaitSync \n");
2744 return 0;
2745}
2746
bf79451e 2747static void ipw_remove_current_network(struct ipw_priv *priv)
43f66a6c
JK		 2748{
2749 struct list_head *element, *safe;
bf79451e 2750 struct ieee80211_network *network = NULL;
a613bffd
JK		 2751 unsigned long flags;
2752
2753 spin_lock_irqsave(&priv->ieee->lock, flags);
43f66a6c
JK		 2754 list_for_each_safe(element, safe, &priv->ieee->network_list) {
2755 network = list_entry(element, struct ieee80211_network, list);
2756 if (!memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
2757 list_del(element);
bf79451e 2758 list_add_tail(&network->list,
43f66a6c
JK		 2759 &priv->ieee->network_free_list);
2760 }
2761 }
a613bffd 2762 spin_unlock_irqrestore(&priv->ieee->lock, flags);
43f66a6c
JK		 2763}
2764
2765/**
bf79451e 2766 * Check that card is still alive.
43f66a6c
JK		 2767 * Reads debug register from domain0.
2768 * If card is present, pre-defined value should
2769 * be found there.
bf79451e 2770 *
43f66a6c
JK		 2771 * @param priv
2772 * @return 1 if card is present, 0 otherwise
2773 */
2774static inline int ipw_alive(struct ipw_priv *priv)
2775{
2776 return ipw_read32(priv, 0x90) == 0xd55555d5;
2777}
2778
c7b6a674 2779/* timeout in msec, attempted in 10-msec quanta */
858119e1 2780static int ipw_poll_bit(struct ipw_priv *priv, u32 addr, u32 mask,
43f66a6c
JK		 2781 int timeout)
2782{
2783 int i = 0;
2784
2785 do {
bf79451e 2786 if ((ipw_read32(priv, addr) & mask) == mask)
43f66a6c
JK		 2787 return i;
2788 mdelay(10);
2789 i += 10;
2790 } while (i < timeout);
bf79451e 2791
43f66a6c
JK		 2792 return -ETIME;
2793}
2794
bf79451e 2795/* These functions load the firmware and micro code for the operation of
43f66a6c
JK		 2796 * the ipw hardware. It assumes the buffer has all the bits for the
2797 * image and the caller is handling the memory allocation and clean up.
2798 */
2799
0edd5b44 2800static int ipw_stop_master(struct ipw_priv *priv)
43f66a6c
JK		 2801{
2802 int rc;
bf79451e 2803
43f66a6c
JK		 2804 IPW_DEBUG_TRACE(">> \n");
2805 /* stop master. typical delay - 0 */
b095c381 2806 ipw_set_bit(priv, IPW_RESET_REG, IPW_RESET_REG_STOP_MASTER);
43f66a6c 2807
c7b6a674 2808 /* timeout is in msec, polled in 10-msec quanta */
b095c381
JK		 2809 rc = ipw_poll_bit(priv, IPW_RESET_REG,
2810 IPW_RESET_REG_MASTER_DISABLED, 100);
43f66a6c 2811 if (rc < 0) {
c7b6a674 2812 IPW_ERROR("wait for stop master failed after 100ms\n");
43f66a6c
JK		 2813 return -1;
2814 }
2815
2816 IPW_DEBUG_INFO("stop master %dms\n", rc);
2817
2818 return rc;
2819}
2820
2821static void ipw_arc_release(struct ipw_priv *priv)
2822{
2823 IPW_DEBUG_TRACE(">> \n");
2824 mdelay(5);
2825
b095c381 2826 ipw_clear_bit(priv, IPW_RESET_REG, CBD_RESET_REG_PRINCETON_RESET);
43f66a6c
JK		 2827
2828 /* no one knows timing, for safety add some delay */
2829 mdelay(5);
2830}
2831
2832struct fw_header {
2833 u32 version;
2834 u32 mode;
2835};
2836
2837struct fw_chunk {
2838 u32 address;
2839 u32 length;
2840};
2841
2842#define IPW_FW_MAJOR_VERSION 2
81715376 2843#define IPW_FW_MINOR_VERSION 4
43f66a6c
JK		 2844
2845#define IPW_FW_MINOR(x) ((x & 0xff) >> 8)
2846#define IPW_FW_MAJOR(x) (x & 0xff)
2847
afbf30a2 2848#define IPW_FW_VERSION ((IPW_FW_MINOR_VERSION << 8) | IPW_FW_MAJOR_VERSION)
43f66a6c
JK		 2849
2850#define IPW_FW_PREFIX "ipw-" __stringify(IPW_FW_MAJOR_VERSION) \
2851"." __stringify(IPW_FW_MINOR_VERSION) "-"
2852
2853#if IPW_FW_MAJOR_VERSION >= 2 && IPW_FW_MINOR_VERSION > 0
2854#define IPW_FW_NAME(x) IPW_FW_PREFIX "" x ".fw"
2855#else
2856#define IPW_FW_NAME(x) "ipw2200_" x ".fw"
2857#endif
2858
0edd5b44 2859static int ipw_load_ucode(struct ipw_priv *priv, u8 * data, size_t len)
43f66a6c
JK		 2860{
2861 int rc = 0, i, addr;
2862 u8 cr = 0;
2863 u16 *image;
2864
0edd5b44 2865 image = (u16 *) data;
bf79451e 2866
43f66a6c
JK		 2867 IPW_DEBUG_TRACE(">> \n");
2868
2869 rc = ipw_stop_master(priv);
2870
2871 if (rc < 0)
2872 return rc;
bf79451e 2873
0edd5b44 2874// spin_lock_irqsave(&priv->lock, flags);
bf79451e 2875
b095c381
JK		 2876 for (addr = IPW_SHARED_LOWER_BOUND;
2877 addr < IPW_REGISTER_DOMAIN1_END; addr += 4) {
43f66a6c
JK		 2878 ipw_write32(priv, addr, 0);
2879 }
2880
2881 /* no ucode (yet) */
2882 memset(&priv->dino_alive, 0, sizeof(priv->dino_alive));
2883 /* destroy DMA queues */
2884 /* reset sequence */
2885
b095c381 2886 ipw_write_reg32(priv, IPW_MEM_HALT_AND_RESET, IPW_BIT_HALT_RESET_ON);
43f66a6c 2887 ipw_arc_release(priv);
b095c381 2888 ipw_write_reg32(priv, IPW_MEM_HALT_AND_RESET, IPW_BIT_HALT_RESET_OFF);
43f66a6c
JK		 2889 mdelay(1);
2890
2891 /* reset PHY */
b095c381 2892 ipw_write_reg32(priv, IPW_INTERNAL_CMD_EVENT, IPW_BASEBAND_POWER_DOWN);
43f66a6c 2893 mdelay(1);
bf79451e 2894
b095c381 2895 ipw_write_reg32(priv, IPW_INTERNAL_CMD_EVENT, 0);
43f66a6c 2896 mdelay(1);
bf79451e 2897
43f66a6c 2898 /* enable ucode store */
c8fe6679
ZY		 2899 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0x0);
2900 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, DINO_ENABLE_CS);
43f66a6c
JK		 2901 mdelay(1);
2902
2903 /* write ucode */
2904 /**
2905 * @bug
2906 * Do NOT set indirect address register once and then
2907 * store data to indirect data register in the loop.
2908 * It seems very reasonable, but in this case DINO do not
2909 * accept ucode. It is essential to set address each time.
2910 */
2911 /* load new ipw uCode */
2912 for (i = 0; i < len / 2; i++)
b095c381 2913 ipw_write_reg16(priv, IPW_BASEBAND_CONTROL_STORE,
a613bffd 2914 cpu_to_le16(image[i]));
43f66a6c 2915
43f66a6c 2916 /* enable DINO */
b095c381
JK		 2917 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0);
2918 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, DINO_ENABLE_SYSTEM);
43f66a6c 2919
0edd5b44 2920 /* this is where the igx / win driver deveates from the VAP driver. */
43f66a6c
JK		 2921
2922 /* wait for alive response */
2923 for (i = 0; i < 100; i++) {
2924 /* poll for incoming data */
b095c381 2925 cr = ipw_read_reg8(priv, IPW_BASEBAND_CONTROL_STATUS);
43f66a6c
JK		 2926 if (cr & DINO_RXFIFO_DATA)
2927 break;
2928 mdelay(1);
2929 }
2930
2931 if (cr & DINO_RXFIFO_DATA) {
2932 /* alive_command_responce size is NOT multiple of 4 */
2933 u32 response_buffer[(sizeof(priv->dino_alive) + 3) / 4];
bf79451e
JG		 2934
2935 for (i = 0; i < ARRAY_SIZE(response_buffer); i++)
43f66a6c 2936 response_buffer[i] =
a613bffd 2937 le32_to_cpu(ipw_read_reg32(priv,
b095c381 2938 IPW_BASEBAND_RX_FIFO_READ));
43f66a6c
JK		 2939 memcpy(&priv->dino_alive, response_buffer,
2940 sizeof(priv->dino_alive));
2941 if (priv->dino_alive.alive_command == 1
2942 && priv->dino_alive.ucode_valid == 1) {
2943 rc = 0;
0edd5b44
JG		 2944 IPW_DEBUG_INFO
2945 ("Microcode OK, rev. %d (0x%x) dev. %d (0x%x) "
2946 "of %02d/%02d/%02d %02d:%02d\n",
2947 priv->dino_alive.software_revision,
2948 priv->dino_alive.software_revision,
2949 priv->dino_alive.device_identifier,
2950 priv->dino_alive.device_identifier,
2951 priv->dino_alive.time_stamp[0],
2952 priv->dino_alive.time_stamp[1],
2953 priv->dino_alive.time_stamp[2],
2954 priv->dino_alive.time_stamp[3],
2955 priv->dino_alive.time_stamp[4]);
43f66a6c
JK		 2956 } else {
2957 IPW_DEBUG_INFO("Microcode is not alive\n");
2958 rc = -EINVAL;
2959 }
2960 } else {
2961 IPW_DEBUG_INFO("No alive response from DINO\n");
2962 rc = -ETIME;
2963 }
2964
2965 /* disable DINO, otherwise for some reason
2966 firmware have problem getting alive resp. */
b095c381 2967 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0);
43f66a6c 2968
0edd5b44 2969// spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c
JK		 2970
2971 return rc;
2972}
2973
0edd5b44 2974static int ipw_load_firmware(struct ipw_priv *priv, u8 * data, size_t len)
43f66a6c
JK		 2975{
2976 int rc = -1;
2977 int offset = 0;
2978 struct fw_chunk *chunk;
2979 dma_addr_t shared_phys;
2980 u8 *shared_virt;
2981
2982 IPW_DEBUG_TRACE("<< : \n");
2983 shared_virt = pci_alloc_consistent(priv->pci_dev, len, &shared_phys);
2984
2985 if (!shared_virt)
2986 return -ENOMEM;
2987
2988 memmove(shared_virt, data, len);
2989
2990 /* Start the Dma */
2991 rc = ipw_fw_dma_enable(priv);
2992
2993 if (priv->sram_desc.last_cb_index > 0) {
2994 /* the DMA is already ready this would be a bug. */
2995 BUG();
2996 goto out;
2997 }
2998
2999 do {
3000 chunk = (struct fw_chunk *)(data + offset);
3001 offset += sizeof(struct fw_chunk);
3002 /* build DMA packet and queue up for sending */
bf79451e 3003 /* dma to chunk->address, the chunk->length bytes from data +
43f66a6c
JK		 3004 * offeset*/
3005 /* Dma loading */
3006 rc = ipw_fw_dma_add_buffer(priv, shared_phys + offset,
a613bffd
JK		 3007 le32_to_cpu(chunk->address),
3008 le32_to_cpu(chunk->length));
43f66a6c
JK		 3009 if (rc) {
3010 IPW_DEBUG_INFO("dmaAddBuffer Failed\n");
3011 goto out;
3012 }
bf79451e 3013
a613bffd 3014 offset += le32_to_cpu(chunk->length);
43f66a6c
JK		 3015 } while (offset < len);
3016
0edd5b44 3017 /* Run the DMA and wait for the answer */
43f66a6c
JK		 3018 rc = ipw_fw_dma_kick(priv);
3019 if (rc) {
3020 IPW_ERROR("dmaKick Failed\n");
3021 goto out;
3022 }
3023
3024 rc = ipw_fw_dma_wait(priv);
3025 if (rc) {
3026 IPW_ERROR("dmaWaitSync Failed\n");
3027 goto out;
3028 }
0edd5b44
JG		 3029 out:
3030 pci_free_consistent(priv->pci_dev, len, shared_virt, shared_phys);
43f66a6c
JK		 3031 return rc;
3032}
3033
3034/* stop nic */
3035static int ipw_stop_nic(struct ipw_priv *priv)
3036{
3037 int rc = 0;
3038
0edd5b44 3039 /* stop */
b095c381 3040 ipw_write32(priv, IPW_RESET_REG, IPW_RESET_REG_STOP_MASTER);
bf79451e 3041
b095c381
JK		 3042 rc = ipw_poll_bit(priv, IPW_RESET_REG,
3043 IPW_RESET_REG_MASTER_DISABLED, 500);
43f66a6c 3044 if (rc < 0) {
c7b6a674 3045 IPW_ERROR("wait for reg master disabled failed after 500ms\n");
43f66a6c 3046 return rc;
bf79451e 3047 }
43f66a6c 3048
b095c381 3049 ipw_set_bit(priv, IPW_RESET_REG, CBD_RESET_REG_PRINCETON_RESET);
bf79451e 3050
43f66a6c
JK		 3051 return rc;
3052}
3053
3054static void ipw_start_nic(struct ipw_priv *priv)
3055{
3056 IPW_DEBUG_TRACE(">>\n");
3057
0edd5b44 3058 /* prvHwStartNic release ARC */
b095c381
JK		 3059 ipw_clear_bit(priv, IPW_RESET_REG,
3060 IPW_RESET_REG_MASTER_DISABLED |
3061 IPW_RESET_REG_STOP_MASTER |
43f66a6c 3062 CBD_RESET_REG_PRINCETON_RESET);
bf79451e 3063
43f66a6c 3064 /* enable power management */
b095c381
JK		 3065 ipw_set_bit(priv, IPW_GP_CNTRL_RW,
3066 IPW_GP_CNTRL_BIT_HOST_ALLOWS_STANDBY);
43f66a6c
JK		 3067
3068 IPW_DEBUG_TRACE("<<\n");
3069}
bf79451e 3070
43f66a6c
JK		 3071static int ipw_init_nic(struct ipw_priv *priv)
3072{
3073 int rc;
3074
3075 IPW_DEBUG_TRACE(">>\n");
bf79451e 3076 /* reset */
43f66a6c
JK		 3077 /*prvHwInitNic */
3078 /* set "initialization complete" bit to move adapter to D0 state */
b095c381 3079 ipw_set_bit(priv, IPW_GP_CNTRL_RW, IPW_GP_CNTRL_BIT_INIT_DONE);
43f66a6c
JK		 3080
3081 /* low-level PLL activation */
b095c381
JK		 3082 ipw_write32(priv, IPW_READ_INT_REGISTER,
3083 IPW_BIT_INT_HOST_SRAM_READ_INT_REGISTER);
43f66a6c
JK		 3084
3085 /* wait for clock stabilization */
b095c381
JK		 3086 rc = ipw_poll_bit(priv, IPW_GP_CNTRL_RW,
3087 IPW_GP_CNTRL_BIT_CLOCK_READY, 250);
0edd5b44 3088 if (rc < 0)
43f66a6c
JK		 3089 IPW_DEBUG_INFO("FAILED wait for clock stablization\n");
3090
3091 /* assert SW reset */
b095c381 3092 ipw_set_bit(priv, IPW_RESET_REG, IPW_RESET_REG_SW_RESET);
43f66a6c
JK		 3093
3094 udelay(10);
3095
3096 /* set "initialization complete" bit to move adapter to D0 state */
b095c381 3097 ipw_set_bit(priv, IPW_GP_CNTRL_RW, IPW_GP_CNTRL_BIT_INIT_DONE);
43f66a6c
JK		 3098
3099 IPW_DEBUG_TRACE(">>\n");
3100 return 0;
3101}
3102
bf79451e 3103/* Call this function from process context, it will sleep in request_firmware.
43f66a6c
JK		 3104 * Probe is an ok place to call this from.
3105 */
3106static int ipw_reset_nic(struct ipw_priv *priv)
3107{
3108 int rc = 0;
a613bffd 3109 unsigned long flags;
43f66a6c
JK		 3110
3111 IPW_DEBUG_TRACE(">>\n");
bf79451e 3112
43f66a6c 3113 rc = ipw_init_nic(priv);
bf79451e 3114
a613bffd 3115 spin_lock_irqsave(&priv->lock, flags);
43f66a6c
JK		 3116 /* Clear the 'host command active' bit... */
3117 priv->status &= ~STATUS_HCMD_ACTIVE;
3118 wake_up_interruptible(&priv->wait_command_queue);
afbf30a2
JK		 3119 priv->status &= ~(STATUS_SCANNING | STATUS_SCAN_ABORTING);
3120 wake_up_interruptible(&priv->wait_state);
a613bffd 3121 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c
JK		 3122
3123 IPW_DEBUG_TRACE("<<\n");
3124 return rc;
bf79451e 3125}
43f66a6c 3126
bf79451e 3127static int ipw_get_fw(struct ipw_priv *priv,
43f66a6c
JK		 3128 const struct firmware **fw, const char *name)
3129{
3130 struct fw_header *header;
3131 int rc;
3132
3133 /* ask firmware_class module to get the boot firmware off disk */
3134 rc = request_firmware(fw, name, &priv->pci_dev->dev);
3135 if (rc < 0) {
3136 IPW_ERROR("%s load failed: Reason %d\n", name, rc);
3137 return rc;
bf79451e 3138 }
43f66a6c
JK		 3139
3140 header = (struct fw_header *)(*fw)->data;
a613bffd 3141 if (IPW_FW_MAJOR(le32_to_cpu(header->version)) != IPW_FW_MAJOR_VERSION) {
43f66a6c
JK		 3142 IPW_ERROR("'%s' firmware version not compatible (%d != %d)\n",
3143 name,
a613bffd
JK		 3144 IPW_FW_MAJOR(le32_to_cpu(header->version)),
3145 IPW_FW_MAJOR_VERSION);
43f66a6c
JK		 3146 return -EINVAL;
3147 }
3148
aaa4d308 3149 IPW_DEBUG_INFO("Loading firmware '%s' file v%d.%d (%zd bytes)\n",
43f66a6c 3150 name,
a613bffd
JK		 3151 IPW_FW_MAJOR(le32_to_cpu(header->version)),
3152 IPW_FW_MINOR(le32_to_cpu(header->version)),
43f66a6c
JK		 3153 (*fw)->size - sizeof(struct fw_header));
3154 return 0;
3155}
3156
b095c381 3157#define IPW_RX_BUF_SIZE (3000)
43f66a6c 3158
858119e1 3159static void ipw_rx_queue_reset(struct ipw_priv *priv,
43f66a6c
JK		 3160 struct ipw_rx_queue *rxq)
3161{
3162 unsigned long flags;
3163 int i;
3164
3165 spin_lock_irqsave(&rxq->lock, flags);
3166
3167 INIT_LIST_HEAD(&rxq->rx_free);
3168 INIT_LIST_HEAD(&rxq->rx_used);
3169
3170 /* Fill the rx_used queue with _all_ of the Rx buffers */
3171 for (i = 0; i < RX_FREE_BUFFERS + RX_QUEUE_SIZE; i++) {
3172 /* In the reset function, these buffers may have been allocated
3173 * to an SKB, so we need to unmap and free potential storage */
3174 if (rxq->pool[i].skb != NULL) {
3175 pci_unmap_single(priv->pci_dev, rxq->pool[i].dma_addr,
b095c381 3176 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c 3177 dev_kfree_skb(rxq->pool[i].skb);
a613bffd 3178 rxq->pool[i].skb = NULL;
43f66a6c
JK		 3179 }
3180 list_add_tail(&rxq->pool[i].list, &rxq->rx_used);
3181 }
bf79451e 3182
43f66a6c
JK		 3183 /* Set us so that we have processed and used all buffers, but have
3184 * not restocked the Rx queue with fresh buffers */
3185 rxq->read = rxq->write = 0;
3186 rxq->processed = RX_QUEUE_SIZE - 1;
3187 rxq->free_count = 0;
3188 spin_unlock_irqrestore(&rxq->lock, flags);
3189}
3190
3191#ifdef CONFIG_PM
3192static int fw_loaded = 0;
3193static const struct firmware *bootfw = NULL;
3194static const struct firmware *firmware = NULL;
3195static const struct firmware *ucode = NULL;
afbf30a2
JK		 3196
3197static void free_firmware(void)
3198{
3199 if (fw_loaded) {
3200 release_firmware(bootfw);
3201 release_firmware(ucode);
3202 release_firmware(firmware);
3203 bootfw = ucode = firmware = NULL;
3204 fw_loaded = 0;
3205 }
3206}
3207#else
3208#define free_firmware() do {} while (0)
43f66a6c
JK		 3209#endif
3210
3211static int ipw_load(struct ipw_priv *priv)
3212{
3213#ifndef CONFIG_PM
3214 const struct firmware *bootfw = NULL;
3215 const struct firmware *firmware = NULL;
3216 const struct firmware *ucode = NULL;
3217#endif
397ae121
ZY		 3218 char *ucode_name;
3219 char *fw_name;
43f66a6c
JK		 3220 int rc = 0, retries = 3;
3221
397ae121
ZY		 3222 switch (priv->ieee->iw_mode) {
3223 case IW_MODE_ADHOC:
3224 ucode_name = IPW_FW_NAME("ibss_ucode");
3225 fw_name = IPW_FW_NAME("ibss");
3226 break;
b095c381 3227#ifdef CONFIG_IPW2200_MONITOR
397ae121
ZY		 3228 case IW_MODE_MONITOR:
3229 ucode_name = IPW_FW_NAME("sniffer_ucode");
3230 fw_name = IPW_FW_NAME("sniffer");
3231 break;
43f66a6c 3232#endif
397ae121
ZY		 3233 case IW_MODE_INFRA:
3234 ucode_name = IPW_FW_NAME("bss_ucode");
3235 fw_name = IPW_FW_NAME("bss");
3236 break;
3237 default:
3238 rc = -EINVAL;
43f66a6c 3239 }
397ae121
ZY		 3240
3241 if (rc < 0)
3242 goto error;
43f66a6c
JK		 3243
3244 if (!priv->rxq)
3245 priv->rxq = ipw_rx_queue_alloc(priv);
3246 else
3247 ipw_rx_queue_reset(priv, priv->rxq);
3248 if (!priv->rxq) {
3249 IPW_ERROR("Unable to initialize Rx queue\n");
3250 goto error;
3251 }
3252
0edd5b44 3253 retry:
43f66a6c 3254 /* Ensure interrupts are disabled */
b095c381 3255 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
43f66a6c
JK		 3256 priv->status &= ~STATUS_INT_ENABLED;
3257
3258 /* ack pending interrupts */
b095c381 3259 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
bf79451e 3260
43f66a6c
JK		 3261 ipw_stop_nic(priv);
3262
3263 rc = ipw_reset_nic(priv);
397ae121 3264 if (rc < 0) {
43f66a6c
JK		 3265 IPW_ERROR("Unable to reset NIC\n");
3266 goto error;
3267 }
3268
b095c381
JK		 3269 ipw_zero_memory(priv, IPW_NIC_SRAM_LOWER_BOUND,
3270 IPW_NIC_SRAM_UPPER_BOUND - IPW_NIC_SRAM_LOWER_BOUND);
43f66a6c 3271
397ae121
ZY		 3272#ifdef CONFIG_PM
3273 if (!fw_loaded) {
3274#endif
3275 rc = ipw_get_fw(priv, &bootfw, IPW_FW_NAME("boot"));
3276 if (rc < 0)
3277 goto error;
3278#ifdef CONFIG_PM
3279 }
3280#endif
43f66a6c 3281 /* DMA the initial boot firmware into the device */
bf79451e 3282 rc = ipw_load_firmware(priv, bootfw->data + sizeof(struct fw_header),
43f66a6c
JK		 3283 bootfw->size - sizeof(struct fw_header));
3284 if (rc < 0) {
a4f6bbb3 3285 IPW_ERROR("Unable to load boot firmware: %d\n", rc);
43f66a6c
JK		 3286 goto error;
3287 }
3288
3289 /* kick start the device */
3290 ipw_start_nic(priv);
3291
c7b6a674 3292 /* wait for the device to finish its initial startup sequence */
b095c381
JK		 3293 rc = ipw_poll_bit(priv, IPW_INTA_RW,
3294 IPW_INTA_BIT_FW_INITIALIZATION_DONE, 500);
43f66a6c
JK		 3295 if (rc < 0) {
3296 IPW_ERROR("device failed to boot initial fw image\n");
3297 goto error;
3298 }
3299 IPW_DEBUG_INFO("initial device response after %dms\n", rc);
3300
bf79451e 3301 /* ack fw init done interrupt */
b095c381 3302 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_BIT_FW_INITIALIZATION_DONE);
43f66a6c 3303
397ae121
ZY		 3304#ifdef CONFIG_PM
3305 if (!fw_loaded) {
3306#endif
3307 rc = ipw_get_fw(priv, &ucode, ucode_name);
3308 if (rc < 0)
3309 goto error;
3310#ifdef CONFIG_PM
3311 }
3312#endif
2638bc39 3313
43f66a6c 3314 /* DMA the ucode into the device */
bf79451e 3315 rc = ipw_load_ucode(priv, ucode->data + sizeof(struct fw_header),
43f66a6c
JK		 3316 ucode->size - sizeof(struct fw_header));
3317 if (rc < 0) {
a4f6bbb3 3318 IPW_ERROR("Unable to load ucode: %d\n", rc);
43f66a6c
JK		 3319 goto error;
3320 }
bf79451e 3321
43f66a6c
JK		 3322 /* stop nic */
3323 ipw_stop_nic(priv);
3324
397ae121
ZY		 3325#ifdef CONFIG_PM
3326 if (!fw_loaded) {
3327#endif
3328 rc = ipw_get_fw(priv, &firmware, fw_name);
3329 if (rc < 0)
3330 goto error;
3331#ifdef CONFIG_PM
3332 }
3333#endif
3334
43f66a6c 3335 /* DMA bss firmware into the device */
bf79451e
JG		 3336 rc = ipw_load_firmware(priv, firmware->data +
3337 sizeof(struct fw_header),
43f66a6c 3338 firmware->size - sizeof(struct fw_header));
0edd5b44 3339 if (rc < 0) {
a4f6bbb3 3340 IPW_ERROR("Unable to load firmware: %d\n", rc);
43f66a6c
JK		 3341 goto error;
3342 }
397ae121
ZY		 3343#ifdef CONFIG_PM
3344 fw_loaded = 1;
3345#endif
3346
43f66a6c
JK		 3347 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 0);
3348
3349 rc = ipw_queue_reset(priv);
397ae121 3350 if (rc < 0) {
43f66a6c
JK		 3351 IPW_ERROR("Unable to initialize queues\n");
3352 goto error;
3353 }
3354
3355 /* Ensure interrupts are disabled */
b095c381 3356 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
c848d0af 3357 /* ack pending interrupts */
b095c381 3358 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
bf79451e 3359
43f66a6c
JK		 3360 /* kick start the device */
3361 ipw_start_nic(priv);
3362
b095c381 3363 if (ipw_read32(priv, IPW_INTA_RW) & IPW_INTA_BIT_PARITY_ERROR) {
43f66a6c
JK		 3364 if (retries > 0) {
3365 IPW_WARNING("Parity error. Retrying init.\n");
3366 retries--;
3367 goto retry;
3368 }
3369
3370 IPW_ERROR("TODO: Handle parity error -- schedule restart?\n");
3371 rc = -EIO;
3372 goto error;
3373 }
3374
3375 /* wait for the device */
b095c381
JK		 3376 rc = ipw_poll_bit(priv, IPW_INTA_RW,
3377 IPW_INTA_BIT_FW_INITIALIZATION_DONE, 500);
43f66a6c 3378 if (rc < 0) {
c7b6a674 3379 IPW_ERROR("device failed to start within 500ms\n");
43f66a6c
JK		 3380 goto error;
3381 }
3382 IPW_DEBUG_INFO("device response after %dms\n", rc);
3383
3384 /* ack fw init done interrupt */
b095c381 3385 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_BIT_FW_INITIALIZATION_DONE);
43f66a6c
JK		 3386
3387 /* read eeprom data and initialize the eeprom region of sram */
3388 priv->eeprom_delay = 1;
bf79451e 3389 ipw_eeprom_init_sram(priv);
43f66a6c
JK		 3390
3391 /* enable interrupts */
3392 ipw_enable_interrupts(priv);
3393
3394 /* Ensure our queue has valid packets */
3395 ipw_rx_queue_replenish(priv);
3396
b095c381 3397 ipw_write32(priv, IPW_RX_READ_INDEX, priv->rxq->read);
43f66a6c
JK		 3398
3399 /* ack pending interrupts */
b095c381 3400 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
43f66a6c
JK		 3401
3402#ifndef CONFIG_PM
3403 release_firmware(bootfw);
3404 release_firmware(ucode);
3405 release_firmware(firmware);
3406#endif
3407 return 0;
3408
0edd5b44 3409 error:
43f66a6c
JK		 3410 if (priv->rxq) {
3411 ipw_rx_queue_free(priv, priv->rxq);
3412 priv->rxq = NULL;
3413 }
3414 ipw_tx_queue_free(priv);
3415 if (bootfw)
3416 release_firmware(bootfw);
3417 if (ucode)
3418 release_firmware(ucode);
3419 if (firmware)
3420 release_firmware(firmware);
3421#ifdef CONFIG_PM
3422 fw_loaded = 0;
3423 bootfw = ucode = firmware = NULL;
3424#endif
3425
3426 return rc;
3427}
3428
bf79451e 3429/**
43f66a6c
JK		 3430 * DMA services
3431 *
3432 * Theory of operation
3433 *
3434 * A queue is a circular buffers with 'Read' and 'Write' pointers.
3435 * 2 empty entries always kept in the buffer to protect from overflow.
3436 *
3437 * For Tx queue, there are low mark and high mark limits. If, after queuing
bf79451e
JG		 3438 * the packet for Tx, free space become < low mark, Tx queue stopped. When
3439 * reclaiming packets (on 'tx done IRQ), if free space become > high mark,
43f66a6c
JK		 3440 * Tx queue resumed.
3441 *
3442 * The IPW operates with six queues, one receive queue in the device's
3443 * sram, one transmit queue for sending commands to the device firmware,
bf79451e 3444 * and four transmit queues for data.
43f66a6c 3445 *
bf79451e 3446 * The four transmit queues allow for performing quality of service (qos)
43f66a6c 3447 * transmissions as per the 802.11 protocol. Currently Linux does not
bf79451e 3448 * provide a mechanism to the user for utilizing prioritized queues, so
43f66a6c
JK		 3449 * we only utilize the first data transmit queue (queue1).
3450 */
3451
3452/**
3453 * Driver allocates buffers of this size for Rx
3454 */
3455
3456static inline int ipw_queue_space(const struct clx2_queue *q)
3457{
3458 int s = q->last_used - q->first_empty;
3459 if (s <= 0)
3460 s += q->n_bd;
3461 s -= 2; /* keep some reserve to not confuse empty and full situations */
3462 if (s < 0)
3463 s = 0;
3464 return s;
3465}
3466
3467static inline int ipw_queue_inc_wrap(int index, int n_bd)
3468{
3469 return (++index == n_bd) ? 0 : index;
3470}
3471
3472/**
3473 * Initialize common DMA queue structure
bf79451e 3474 *
43f66a6c
JK		 3475 * @param q queue to init
3476 * @param count Number of BD's to allocate. Should be power of 2
3477 * @param read_register Address for 'read' register
3478 * (not offset within BAR, full address)
3479 * @param write_register Address for 'write' register
3480 * (not offset within BAR, full address)
3481 * @param base_register Address for 'base' register
3482 * (not offset within BAR, full address)
3483 * @param size Address for 'size' register
3484 * (not offset within BAR, full address)
3485 */
bf79451e 3486static void ipw_queue_init(struct ipw_priv *priv, struct clx2_queue *q,
0edd5b44 3487 int count, u32 read, u32 write, u32 base, u32 size)
43f66a6c
JK		 3488{
3489 q->n_bd = count;
3490
3491 q->low_mark = q->n_bd / 4;
3492 if (q->low_mark < 4)
3493 q->low_mark = 4;
3494
3495 q->high_mark = q->n_bd / 8;
3496 if (q->high_mark < 2)
3497 q->high_mark = 2;
3498
3499 q->first_empty = q->last_used = 0;
3500 q->reg_r = read;
3501 q->reg_w = write;
3502
3503 ipw_write32(priv, base, q->dma_addr);
3504 ipw_write32(priv, size, count);
3505 ipw_write32(priv, read, 0);
3506 ipw_write32(priv, write, 0);
3507
3508 _ipw_read32(priv, 0x90);
3509}
3510
bf79451e 3511static int ipw_queue_tx_init(struct ipw_priv *priv,
43f66a6c 3512 struct clx2_tx_queue *q,
0edd5b44 3513 int count, u32 read, u32 write, u32 base, u32 size)
43f66a6c
JK		 3514{
3515 struct pci_dev *dev = priv->pci_dev;
3516
3517 q->txb = kmalloc(sizeof(q->txb[0]) * count, GFP_KERNEL);
3518 if (!q->txb) {
3519 IPW_ERROR("vmalloc for auxilary BD structures failed\n");
3520 return -ENOMEM;
3521 }
3522
0edd5b44
JG		 3523 q->bd =
3524 pci_alloc_consistent(dev, sizeof(q->bd[0]) * count, &q->q.dma_addr);
43f66a6c 3525 if (!q->bd) {
aaa4d308 3526 IPW_ERROR("pci_alloc_consistent(%zd) failed\n",
0edd5b44 3527 sizeof(q->bd[0]) * count);
43f66a6c
JK		 3528 kfree(q->txb);
3529 q->txb = NULL;
3530 return -ENOMEM;
3531 }
3532
3533 ipw_queue_init(priv, &q->q, count, read, write, base, size);
3534 return 0;
3535}
3536
3537/**
3538 * Free one TFD, those at index [txq->q.last_used].
3539 * Do NOT advance any indexes
bf79451e 3540 *
43f66a6c
JK		 3541 * @param dev
3542 * @param txq
3543 */
3544static void ipw_queue_tx_free_tfd(struct ipw_priv *priv,
3545 struct clx2_tx_queue *txq)
3546{
3547 struct tfd_frame *bd = &txq->bd[txq->q.last_used];
3548 struct pci_dev *dev = priv->pci_dev;
3549 int i;
bf79451e 3550
43f66a6c
JK		 3551 /* classify bd */
3552 if (bd->control_flags.message_type == TX_HOST_COMMAND_TYPE)
3553 /* nothing to cleanup after for host commands */
3554 return;
3555
3556 /* sanity check */
a613bffd
JK		 3557 if (le32_to_cpu(bd->u.data.num_chunks) > NUM_TFD_CHUNKS) {
3558 IPW_ERROR("Too many chunks: %i\n",
3559 le32_to_cpu(bd->u.data.num_chunks));
43f66a6c
JK		 3560 /** @todo issue fatal error, it is quite serious situation */
3561 return;
3562 }
3563
3564 /* unmap chunks if any */
a613bffd
JK		 3565 for (i = 0; i < le32_to_cpu(bd->u.data.num_chunks); i++) {
3566 pci_unmap_single(dev, le32_to_cpu(bd->u.data.chunk_ptr[i]),
3567 le16_to_cpu(bd->u.data.chunk_len[i]),
3568 PCI_DMA_TODEVICE);
43f66a6c
JK		 3569 if (txq->txb[txq->q.last_used]) {
3570 ieee80211_txb_free(txq->txb[txq->q.last_used]);
3571 txq->txb[txq->q.last_used] = NULL;
3572 }
3573 }
3574}
3575
3576/**
3577 * Deallocate DMA queue.
bf79451e 3578 *
43f66a6c
JK		 3579 * Empty queue by removing and destroying all BD's.
3580 * Free all buffers.
bf79451e 3581 *
43f66a6c
JK		 3582 * @param dev
3583 * @param q
3584 */
0edd5b44 3585static void ipw_queue_tx_free(struct ipw_priv *priv, struct clx2_tx_queue *txq)
43f66a6c
JK		 3586{
3587 struct clx2_queue *q = &txq->q;
3588 struct pci_dev *dev = priv->pci_dev;
3589
bf79451e
JG		 3590 if (q->n_bd == 0)
3591 return;
43f66a6c
JK		 3592
3593 /* first, empty all BD's */
3594 for (; q->first_empty != q->last_used;
3595 q->last_used = ipw_queue_inc_wrap(q->last_used, q->n_bd)) {
3596 ipw_queue_tx_free_tfd(priv, txq);
3597 }
bf79451e 3598
43f66a6c 3599 /* free buffers belonging to queue itself */
0edd5b44 3600 pci_free_consistent(dev, sizeof(txq->bd[0]) * q->n_bd, txq->bd,
43f66a6c
JK		 3601 q->dma_addr);
3602 kfree(txq->txb);
3603
3604 /* 0 fill whole structure */
3605 memset(txq, 0, sizeof(*txq));
3606}
3607
43f66a6c
JK		 3608/**
3609 * Destroy all DMA queues and structures
bf79451e 3610 *
43f66a6c
JK		 3611 * @param priv
3612 */
3613static void ipw_tx_queue_free(struct ipw_priv *priv)
3614{
3615 /* Tx CMD queue */
3616 ipw_queue_tx_free(priv, &priv->txq_cmd);
3617
3618 /* Tx queues */
3619 ipw_queue_tx_free(priv, &priv->txq[0]);
3620 ipw_queue_tx_free(priv, &priv->txq[1]);
3621 ipw_queue_tx_free(priv, &priv->txq[2]);
3622 ipw_queue_tx_free(priv, &priv->txq[3]);
3623}
3624
858119e1 3625static void ipw_create_bssid(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3626{
3627 /* First 3 bytes are manufacturer */
3628 bssid[0] = priv->mac_addr[0];
3629 bssid[1] = priv->mac_addr[1];
3630 bssid[2] = priv->mac_addr[2];
3631
3632 /* Last bytes are random */
0edd5b44 3633 get_random_bytes(&bssid[3], ETH_ALEN - 3);
43f66a6c 3634
0edd5b44
JG		 3635 bssid[0] &= 0xfe; /* clear multicast bit */
3636 bssid[0] |= 0x02; /* set local assignment bit (IEEE802) */
43f66a6c
JK		 3637}
3638
858119e1 3639static u8 ipw_add_station(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3640{
3641 struct ipw_station_entry entry;
3642 int i;
3643
3644 for (i = 0; i < priv->num_stations; i++) {
3645 if (!memcmp(priv->stations[i], bssid, ETH_ALEN)) {
3646 /* Another node is active in network */
3647 priv->missed_adhoc_beacons = 0;
3648 if (!(priv->config & CFG_STATIC_CHANNEL))
3649 /* when other nodes drop out, we drop out */
3650 priv->config &= ~CFG_ADHOC_PERSIST;
3651
3652 return i;
3653 }
3654 }
3655
3656 if (i == MAX_STATIONS)
3657 return IPW_INVALID_STATION;
3658
3659 IPW_DEBUG_SCAN("Adding AdHoc station: " MAC_FMT "\n", MAC_ARG(bssid));
3660
3661 entry.reserved = 0;
3662 entry.support_mode = 0;
3663 memcpy(entry.mac_addr, bssid, ETH_ALEN);
3664 memcpy(priv->stations[i], bssid, ETH_ALEN);
3665 ipw_write_direct(priv, IPW_STATION_TABLE_LOWER + i * sizeof(entry),
0edd5b44 3666 &entry, sizeof(entry));
43f66a6c
JK		 3667 priv->num_stations++;
3668
3669 return i;
3670}
3671
858119e1 3672static u8 ipw_find_station(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3673{
3674 int i;
3675
bf79451e
JG		 3676 for (i = 0; i < priv->num_stations; i++)
3677 if (!memcmp(priv->stations[i], bssid, ETH_ALEN))
43f66a6c
JK		 3678 return i;
3679
3680 return IPW_INVALID_STATION;
3681}
3682
3683static void ipw_send_disassociate(struct ipw_priv *priv, int quiet)
3684{
3685 int err;
3686
7b99659f
HL		 3687 if (priv->status & STATUS_ASSOCIATING) {
3688 IPW_DEBUG_ASSOC("Disassociating while associating.\n");
3689 queue_work(priv->workqueue, &priv->disassociate);
3690 return;
3691 }
3692
3693 if (!(priv->status & STATUS_ASSOCIATED)) {
43f66a6c
JK		 3694 IPW_DEBUG_ASSOC("Disassociating while not associated.\n");
3695 return;
3696 }
3697
3698 IPW_DEBUG_ASSOC("Disassocation attempt from " MAC_FMT " "
3699 "on channel %d.\n",
bf79451e 3700 MAC_ARG(priv->assoc_request.bssid),
43f66a6c
JK		 3701 priv->assoc_request.channel);
3702
3703 priv->status &= ~(STATUS_ASSOCIATING | STATUS_ASSOCIATED);
3704 priv->status |= STATUS_DISASSOCIATING;
3705
3706 if (quiet)
3707 priv->assoc_request.assoc_type = HC_DISASSOC_QUIET;
3708 else
3709 priv->assoc_request.assoc_type = HC_DISASSOCIATE;
e6324726 3710
43f66a6c
JK		 3711 err = ipw_send_associate(priv, &priv->assoc_request);
3712 if (err) {
3713 IPW_DEBUG_HC("Attempt to send [dis]associate command "
3714 "failed.\n");
3715 return;
3716 }
3717
3718}
3719
c848d0af 3720static int ipw_disassociate(void *data)
43f66a6c 3721{
c848d0af
JK		 3722 struct ipw_priv *priv = data;
3723 if (!(priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)))
3724 return 0;
43f66a6c 3725 ipw_send_disassociate(data, 0);
c848d0af 3726 return 1;
43f66a6c
JK		 3727}
3728
c848d0af 3729static void ipw_bg_disassociate(void *data)
43f66a6c 3730{
c848d0af 3731 struct ipw_priv *priv = data;
4644151b 3732 mutex_lock(&priv->mutex);
c848d0af 3733 ipw_disassociate(data);
4644151b 3734 mutex_unlock(&priv->mutex);
43f66a6c
JK		 3735}
3736
d8bad6df
ZY		 3737static void ipw_system_config(void *data)
3738{
3739 struct ipw_priv *priv = data;
3740 ipw_send_system_config(priv, &priv->sys_config);
43f66a6c
JK		 3741}
3742
3743struct ipw_status_code {
3744 u16 status;
3745 const char *reason;
3746};
3747
3748static const struct ipw_status_code ipw_status_codes[] = {
3749 {0x00, "Successful"},
3750 {0x01, "Unspecified failure"},
3751 {0x0A, "Cannot support all requested capabilities in the "
3752 "Capability information field"},
3753 {0x0B, "Reassociation denied due to inability to confirm that "
3754 "association exists"},
3755 {0x0C, "Association denied due to reason outside the scope of this "
3756 "standard"},
0edd5b44
JG		 3757 {0x0D,
3758 "Responding station does not support the specified authentication "
43f66a6c 3759 "algorithm"},
0edd5b44
JG		 3760 {0x0E,
3761 "Received an Authentication frame with authentication sequence "
43f66a6c
JK		 3762 "transaction sequence number out of expected sequence"},
3763 {0x0F, "Authentication rejected because of challenge failure"},
3764 {0x10, "Authentication rejected due to timeout waiting for next "
3765 "frame in sequence"},
3766 {0x11, "Association denied because AP is unable to handle additional "
3767 "associated stations"},
0edd5b44
JG		 3768 {0x12,
3769 "Association denied due to requesting station not supporting all "
43f66a6c 3770 "of the datarates in the BSSBasicServiceSet Parameter"},
0edd5b44
JG		 3771 {0x13,
3772 "Association denied due to requesting station not supporting "
43f66a6c 3773 "short preamble operation"},
0edd5b44
JG		 3774 {0x14,
3775 "Association denied due to requesting station not supporting "
43f66a6c 3776 "PBCC encoding"},
0edd5b44
JG		 3777 {0x15,
3778 "Association denied due to requesting station not supporting "
43f66a6c 3779 "channel agility"},
0edd5b44
JG		 3780 {0x19,
3781 "Association denied due to requesting station not supporting "
43f66a6c 3782 "short slot operation"},
0edd5b44
JG		 3783 {0x1A,
3784 "Association denied due to requesting station not supporting "
43f66a6c
JK		 3785 "DSSS-OFDM operation"},
3786 {0x28, "Invalid Information Element"},
3787 {0x29, "Group Cipher is not valid"},
3788 {0x2A, "Pairwise Cipher is not valid"},
3789 {0x2B, "AKMP is not valid"},
3790 {0x2C, "Unsupported RSN IE version"},
3791 {0x2D, "Invalid RSN IE Capabilities"},
3792 {0x2E, "Cipher suite is rejected per security policy"},
3793};
3794
0f52bf90 3795#ifdef CONFIG_IPW2200_DEBUG
bf79451e 3796static const char *ipw_get_status_code(u16 status)
43f66a6c
JK		 3797{
3798 int i;
bf79451e 3799 for (i = 0; i < ARRAY_SIZE(ipw_status_codes); i++)
ea2b26e0 3800 if (ipw_status_codes[i].status == (status & 0xff))
43f66a6c
JK		 3801 return ipw_status_codes[i].reason;
3802 return "Unknown status value.";
3803}
3804#endif
3805
3806static void inline average_init(struct average *avg)
3807{
3808 memset(avg, 0, sizeof(*avg));
3809}
3810
858119e1 3811static void average_add(struct average *avg, s16 val)
43f66a6c
JK		 3812{
3813 avg->sum -= avg->entries[avg->pos];
3814 avg->sum += val;
3815 avg->entries[avg->pos++] = val;
3816 if (unlikely(avg->pos == AVG_ENTRIES)) {
3817 avg->init = 1;
3818 avg->pos = 0;
3819 }
3820}
3821
858119e1 3822static s16 average_value(struct average *avg)
43f66a6c
JK		 3823{
3824 if (!unlikely(avg->init)) {
3825 if (avg->pos)
3826 return avg->sum / avg->pos;
3827 return 0;
3828 }
3829
3830 return avg->sum / AVG_ENTRIES;
3831}
3832
3833static void ipw_reset_stats(struct ipw_priv *priv)
3834{
3835 u32 len = sizeof(u32);
3836
3837 priv->quality = 0;
3838
3839 average_init(&priv->average_missed_beacons);
3840 average_init(&priv->average_rssi);
3841 average_init(&priv->average_noise);
3842
3843 priv->last_rate = 0;
3844 priv->last_missed_beacons = 0;
3845 priv->last_rx_packets = 0;
3846 priv->last_tx_packets = 0;
3847 priv->last_tx_failures = 0;
bf79451e 3848
43f66a6c
JK		 3849 /* Firmware managed, reset only when NIC is restarted, so we have to
3850 * normalize on the current value */
bf79451e 3851 ipw_get_ordinal(priv, IPW_ORD_STAT_RX_ERR_CRC,
43f66a6c 3852 &priv->last_rx_err, &len);
bf79451e 3853 ipw_get_ordinal(priv, IPW_ORD_STAT_TX_FAILURE,
43f66a6c
JK		 3854 &priv->last_tx_failures, &len);
3855
3856 /* Driver managed, reset with each association */
3857 priv->missed_adhoc_beacons = 0;
3858 priv->missed_beacons = 0;
3859 priv->tx_packets = 0;
3860 priv->rx_packets = 0;
3861
3862}
3863
858119e1 3864static u32 ipw_get_max_rate(struct ipw_priv *priv)
43f66a6c
JK		 3865{
3866 u32 i = 0x80000000;
3867 u32 mask = priv->rates_mask;
3868 /* If currently associated in B mode, restrict the maximum
3869 * rate match to B rates */
3870 if (priv->assoc_request.ieee_mode == IPW_B_MODE)
3871 mask &= IEEE80211_CCK_RATES_MASK;
3872
3873 /* TODO: Verify that the rate is supported by the current rates
3874 * list. */
3875
0edd5b44
JG		 3876 while (i && !(mask & i))
3877 i >>= 1;
43f66a6c 3878 switch (i) {
ea2b26e0
JK		 3879 case IEEE80211_CCK_RATE_1MB_MASK:
3880 return 1000000;
3881 case IEEE80211_CCK_RATE_2MB_MASK:
3882 return 2000000;
3883 case IEEE80211_CCK_RATE_5MB_MASK:
3884 return 5500000;
3885 case IEEE80211_OFDM_RATE_6MB_MASK:
3886 return 6000000;
3887 case IEEE80211_OFDM_RATE_9MB_MASK:
3888 return 9000000;
3889 case IEEE80211_CCK_RATE_11MB_MASK:
3890 return 11000000;
3891 case IEEE80211_OFDM_RATE_12MB_MASK:
3892 return 12000000;
3893 case IEEE80211_OFDM_RATE_18MB_MASK:
3894 return 18000000;
3895 case IEEE80211_OFDM_RATE_24MB_MASK:
3896 return 24000000;
3897 case IEEE80211_OFDM_RATE_36MB_MASK:
3898 return 36000000;
3899 case IEEE80211_OFDM_RATE_48MB_MASK:
3900 return 48000000;
3901 case IEEE80211_OFDM_RATE_54MB_MASK:
3902 return 54000000;
43f66a6c
JK		 3903 }
3904
bf79451e 3905 if (priv->ieee->mode == IEEE_B)
43f66a6c
JK		 3906 return 11000000;
3907 else
3908 return 54000000;
3909}
3910
3911static u32 ipw_get_current_rate(struct ipw_priv *priv)
3912{
3913 u32 rate, len = sizeof(rate);
3914 int err;
3915
bf79451e 3916 if (!(priv->status & STATUS_ASSOCIATED))
43f66a6c
JK		 3917 return 0;
3918
3919 if (priv->tx_packets > IPW_REAL_RATE_RX_PACKET_THRESHOLD) {
bf79451e 3920 err = ipw_get_ordinal(priv, IPW_ORD_STAT_TX_CURR_RATE, &rate,
43f66a6c
JK		 3921 &len);
3922 if (err) {
3923 IPW_DEBUG_INFO("failed querying ordinals.\n");
3924 return 0;
3925 }
bf79451e 3926 } else
43f66a6c
JK		 3927 return ipw_get_max_rate(priv);
3928
3929 switch (rate) {
ea2b26e0
JK		 3930 case IPW_TX_RATE_1MB:
3931 return 1000000;
3932 case IPW_TX_RATE_2MB:
3933 return 2000000;
3934 case IPW_TX_RATE_5MB:
3935 return 5500000;
3936 case IPW_TX_RATE_6MB:
3937 return 6000000;
3938 case IPW_TX_RATE_9MB:
3939 return 9000000;
3940 case IPW_TX_RATE_11MB:
3941 return 11000000;
3942 case IPW_TX_RATE_12MB:
3943 return 12000000;
3944 case IPW_TX_RATE_18MB:
3945 return 18000000;
3946 case IPW_TX_RATE_24MB:
3947 return 24000000;
3948 case IPW_TX_RATE_36MB:
3949 return 36000000;
3950 case IPW_TX_RATE_48MB:
3951 return 48000000;
3952 case IPW_TX_RATE_54MB:
3953 return 54000000;
43f66a6c
JK		 3954 }
3955
3956 return 0;
3957}
3958
43f66a6c
JK		 3959#define IPW_STATS_INTERVAL (2 * HZ)
3960static void ipw_gather_stats(struct ipw_priv *priv)
3961{
3962 u32 rx_err, rx_err_delta, rx_packets_delta;
3963 u32 tx_failures, tx_failures_delta, tx_packets_delta;
3964 u32 missed_beacons_percent, missed_beacons_delta;
3965 u32 quality = 0;
3966 u32 len = sizeof(u32);
3967 s16 rssi;
bf79451e 3968 u32 beacon_quality, signal_quality, tx_quality, rx_quality,
0edd5b44 3969 rate_quality;
ea2b26e0 3970 u32 max_rate;
43f66a6c
JK		 3971
3972 if (!(priv->status & STATUS_ASSOCIATED)) {
3973 priv->quality = 0;
3974 return;
3975 }
3976
3977 /* Update the statistics */
bf79451e 3978 ipw_get_ordinal(priv, IPW_ORD_STAT_MISSED_BEACONS,
43f66a6c 3979 &priv->missed_beacons, &len);
0edd5b44 3980 missed_beacons_delta = priv->missed_beacons - priv->last_missed_beacons;
43f66a6c
JK		 3981 priv->last_missed_beacons = priv->missed_beacons;
3982 if (priv->assoc_request.beacon_interval) {
3983 missed_beacons_percent = missed_beacons_delta *
0edd5b44
JG		 3984 (HZ * priv->assoc_request.beacon_interval) /
3985 (IPW_STATS_INTERVAL * 10);
43f66a6c
JK		 3986 } else {
3987 missed_beacons_percent = 0;
3988 }
3989 average_add(&priv->average_missed_beacons, missed_beacons_percent);
3990
3991 ipw_get_ordinal(priv, IPW_ORD_STAT_RX_ERR_CRC, &rx_err, &len);
3992 rx_err_delta = rx_err - priv->last_rx_err;
3993 priv->last_rx_err = rx_err;
3994
3995 ipw_get_ordinal(priv, IPW_ORD_STAT_TX_FAILURE, &tx_failures, &len);
3996 tx_failures_delta = tx_failures - priv->last_tx_failures;
3997 priv->last_tx_failures = tx_failures;
3998
3999 rx_packets_delta = priv->rx_packets - priv->last_rx_packets;
4000 priv->last_rx_packets = priv->rx_packets;
4001
4002 tx_packets_delta = priv->tx_packets - priv->last_tx_packets;
4003 priv->last_tx_packets = priv->tx_packets;
4004
4005 /* Calculate quality based on the following:
bf79451e 4006 *
43f66a6c
JK		 4007 * Missed beacon: 100% = 0, 0% = 70% missed
4008 * Rate: 60% = 1Mbs, 100% = Max
4009 * Rx and Tx errors represent a straight % of total Rx/Tx
4010 * RSSI: 100% = > -50, 0% = < -80
4011 * Rx errors: 100% = 0, 0% = 50% missed
bf79451e 4012 *
43f66a6c
JK		 4013 * The lowest computed quality is used.
4014 *
4015 */
4016#define BEACON_THRESHOLD 5
4017 beacon_quality = 100 - missed_beacons_percent;
4018 if (beacon_quality < BEACON_THRESHOLD)
4019 beacon_quality = 0;
4020 else
bf79451e 4021 beacon_quality = (beacon_quality - BEACON_THRESHOLD) * 100 /
0edd5b44 4022 (100 - BEACON_THRESHOLD);
bf79451e 4023 IPW_DEBUG_STATS("Missed beacon: %3d%% (%d%%)\n",
43f66a6c 4024 beacon_quality, missed_beacons_percent);
bf79451e 4025
43f66a6c 4026 priv->last_rate = ipw_get_current_rate(priv);
ea2b26e0
JK		 4027 max_rate = ipw_get_max_rate(priv);
4028 rate_quality = priv->last_rate * 40 / max_rate + 60;
43f66a6c
JK		 4029 IPW_DEBUG_STATS("Rate quality : %3d%% (%dMbs)\n",
4030 rate_quality, priv->last_rate / 1000000);
bf79451e 4031
0edd5b44 4032 if (rx_packets_delta > 100 && rx_packets_delta + rx_err_delta)
bf79451e 4033 rx_quality = 100 - (rx_err_delta * 100) /
0edd5b44 4034 (rx_packets_delta + rx_err_delta);
43f66a6c
JK		 4035 else
4036 rx_quality = 100;
4037 IPW_DEBUG_STATS("Rx quality : %3d%% (%u errors, %u packets)\n",
4038 rx_quality, rx_err_delta, rx_packets_delta);
bf79451e 4039
0edd5b44 4040 if (tx_packets_delta > 100 && tx_packets_delta + tx_failures_delta)
bf79451e 4041 tx_quality = 100 - (tx_failures_delta * 100) /
0edd5b44 4042 (tx_packets_delta + tx_failures_delta);
43f66a6c
JK		 4043 else
4044 tx_quality = 100;
4045 IPW_DEBUG_STATS("Tx quality : %3d%% (%u errors, %u packets)\n",
4046 tx_quality, tx_failures_delta, tx_packets_delta);
bf79451e 4047
43f66a6c 4048 rssi = average_value(&priv->average_rssi);
c848d0af
JK		 4049 signal_quality =
4050 (100 *
4051 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) *
4052 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) -
4053 (priv->ieee->perfect_rssi - rssi) *
4054 (15 * (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) +
4055 62 * (priv->ieee->perfect_rssi - rssi))) /
4056 ((priv->ieee->perfect_rssi - priv->ieee->worst_rssi) *
4057 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi));
4058 if (signal_quality > 100)
43f66a6c 4059 signal_quality = 100;
c848d0af 4060 else if (signal_quality < 1)
43f66a6c 4061 signal_quality = 0;
ea2b26e0 4062
43f66a6c
JK		 4063 IPW_DEBUG_STATS("Signal level : %3d%% (%d dBm)\n",
4064 signal_quality, rssi);
bf79451e
JG		 4065
4066 quality = min(beacon_quality,
43f66a6c
JK		 4067 min(rate_quality,
4068 min(tx_quality, min(rx_quality, signal_quality))));
4069 if (quality == beacon_quality)
0edd5b44
JG		 4070 IPW_DEBUG_STATS("Quality (%d%%): Clamped to missed beacons.\n",
4071 quality);
43f66a6c 4072 if (quality == rate_quality)
0edd5b44
JG		 4073 IPW_DEBUG_STATS("Quality (%d%%): Clamped to rate quality.\n",
4074 quality);
43f66a6c 4075 if (quality == tx_quality)
0edd5b44
JG		 4076 IPW_DEBUG_STATS("Quality (%d%%): Clamped to Tx quality.\n",
4077 quality);
43f66a6c 4078 if (quality == rx_quality)
0edd5b44
JG		 4079 IPW_DEBUG_STATS("Quality (%d%%): Clamped to Rx quality.\n",
4080 quality);
43f66a6c 4081 if (quality == signal_quality)
0edd5b44
JG		 4082 IPW_DEBUG_STATS("Quality (%d%%): Clamped to signal quality.\n",
4083 quality);
43f66a6c
JK		 4084
4085 priv->quality = quality;
bf79451e
JG		 4086
4087 queue_delayed_work(priv->workqueue, &priv->gather_stats,
43f66a6c
JK		 4088 IPW_STATS_INTERVAL);
4089}
4090
c848d0af
JK		 4091static void ipw_bg_gather_stats(void *data)
4092{
4093 struct ipw_priv *priv = data;
4644151b 4094 mutex_lock(&priv->mutex);
c848d0af 4095 ipw_gather_stats(data);
4644151b 4096 mutex_unlock(&priv->mutex);
c848d0af
JK		 4097}
4098
e7582561
BC		 4099/* Missed beacon behavior:
4100 * 1st missed -> roaming_threshold, just wait, don't do any scan/roam.
4101 * roaming_threshold -> disassociate_threshold, scan and roam for better signal.
4102 * Above disassociate threshold, give up and stop scanning.
4103 * Roaming is disabled if disassociate_threshold <= roaming_threshold */
858119e1 4104static void ipw_handle_missed_beacon(struct ipw_priv *priv,
ea2b26e0
JK		 4105 int missed_count)
4106{
4107 priv->notif_missed_beacons = missed_count;
4108
afbf30a2 4109 if (missed_count > priv->disassociate_threshold &&
ea2b26e0
JK		 4110 priv->status & STATUS_ASSOCIATED) {
4111 /* If associated and we've hit the missed
4112 * beacon threshold, disassociate, turn
4113 * off roaming, and abort any active scans */
4114 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
afbf30a2 4115 IPW_DL_STATE | IPW_DL_ASSOC,
ea2b26e0
JK		 4116 "Missed beacon: %d - disassociate\n", missed_count);
4117 priv->status &= ~STATUS_ROAMING;
a613bffd
JK		 4118 if (priv->status & STATUS_SCANNING) {
4119 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
4120 IPW_DL_STATE,
4121 "Aborting scan with missed beacon.\n");
ea2b26e0 4122 queue_work(priv->workqueue, &priv->abort_scan);
a613bffd
JK		 4123 }
4124
ea2b26e0
JK		 4125 queue_work(priv->workqueue, &priv->disassociate);
4126 return;
4127 }
4128
4129 if (priv->status & STATUS_ROAMING) {
4130 /* If we are currently roaming, then just
4131 * print a debug statement... */
4132 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4133 "Missed beacon: %d - roam in progress\n",
4134 missed_count);
4135 return;
4136 }
4137
4bfdb91d
ZY		 4138 if (roaming &&
4139 (missed_count > priv->roaming_threshold &&
4140 missed_count <= priv->disassociate_threshold)) {
ea2b26e0 4141 /* If we are not already roaming, set the ROAM
e7582561
BC		 4142 * bit in the status and kick off a scan.
4143 * This can happen several times before we reach
4144 * disassociate_threshold. */
ea2b26e0
JK		 4145 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4146 "Missed beacon: %d - initiate "
4147 "roaming\n", missed_count);
4148 if (!(priv->status & STATUS_ROAMING)) {
4149 priv->status |= STATUS_ROAMING;
4150 if (!(priv->status & STATUS_SCANNING))
4151 queue_work(priv->workqueue,
4152 &priv->request_scan);
4153 }
4154 return;
4155 }
4156
4157 if (priv->status & STATUS_SCANNING) {
4158 /* Stop scan to keep fw from getting
4159 * stuck (only if we aren't roaming --
4160 * otherwise we'll never scan more than 2 or 3
4161 * channels..) */
b095c381
JK		 4162 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF | IPW_DL_STATE,
4163 "Aborting scan with missed beacon.\n");
ea2b26e0
JK		 4164 queue_work(priv->workqueue, &priv->abort_scan);
4165 }
4166
4167 IPW_DEBUG_NOTIF("Missed beacon: %d\n", missed_count);
ea2b26e0
JK		 4168}
4169
43f66a6c
JK		 4170/**
4171 * Handle host notification packet.
4172 * Called from interrupt routine
4173 */
858119e1 4174static void ipw_rx_notification(struct ipw_priv *priv,
43f66a6c
JK		 4175 struct ipw_rx_notification *notif)
4176{
a613bffd
JK		 4177 notif->size = le16_to_cpu(notif->size);
4178
0edd5b44 4179 IPW_DEBUG_NOTIF("type = %i (%d bytes)\n", notif->subtype, notif->size);
bf79451e 4180
43f66a6c 4181 switch (notif->subtype) {
0edd5b44
JG		 4182 case HOST_NOTIFICATION_STATUS_ASSOCIATED:{
4183 struct notif_association *assoc = &notif->u.assoc;
4184
4185 switch (assoc->state) {
4186 case CMAS_ASSOCIATED:{
4187 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4188 IPW_DL_ASSOC,
4189 "associated: '%s' " MAC_FMT
4190 " \n",
4191 escape_essid(priv->essid,
4192 priv->essid_len),
4193 MAC_ARG(priv->bssid));
4194
4195 switch (priv->ieee->iw_mode) {
4196 case IW_MODE_INFRA:
4197 memcpy(priv->ieee->bssid,
4198 priv->bssid, ETH_ALEN);
4199 break;
4200
4201 case IW_MODE_ADHOC:
4202 memcpy(priv->ieee->bssid,
4203 priv->bssid, ETH_ALEN);
4204
4205 /* clear out the station table */
4206 priv->num_stations = 0;
4207
4208 IPW_DEBUG_ASSOC
4209 ("queueing adhoc check\n");
4210 queue_delayed_work(priv->
4211 workqueue,
4212 &priv->
4213 adhoc_check,
4214 priv->
4215 assoc_request.
4216 beacon_interval);
4217 break;
4218 }
4219
4220 priv->status &= ~STATUS_ASSOCIATING;
4221 priv->status |= STATUS_ASSOCIATED;
d8bad6df
ZY		 4222 queue_work(priv->workqueue,
4223 &priv->system_config);
0edd5b44 4224
b095c381 4225#ifdef CONFIG_IPW_QOS
afbf30a2
JK		 4226#define IPW_GET_PACKET_STYPE(x) WLAN_FC_GET_STYPE( \
4227 le16_to_cpu(((struct ieee80211_hdr *)(x))->frame_ctl))
4228 if ((priv->status & STATUS_AUTH) &&
4229 (IPW_GET_PACKET_STYPE(&notif->u.raw)
4230 == IEEE80211_STYPE_ASSOC_RESP)) {
b095c381
JK		 4231 if ((sizeof
4232 (struct
2b184d5b 4233 ieee80211_assoc_response)
b095c381
JK		 4234 <= notif->size)
4235 && (notif->size <= 2314)) {
4236 struct
4237 ieee80211_rx_stats
4238 stats = {
4239 .len =
4240 notif->
4241 size - 1,
4242 };
4243
4244 IPW_DEBUG_QOS
4245 ("QoS Associate "
4246 "size %d\n",
4247 notif->size);
4248 ieee80211_rx_mgt(priv->
4249 ieee,
4250 (struct
2b184d5b 4251 ieee80211_hdr_4addr
b095c381
JK		 4252 *)
4253 &notif->u.raw, &stats);
4254 }
0edd5b44 4255 }
b095c381 4256#endif
0edd5b44 4257
a613bffd 4258 schedule_work(&priv->link_up);
43f66a6c 4259
0edd5b44
JG		 4260 break;
4261 }
bf79451e 4262
0edd5b44
JG		 4263 case CMAS_AUTHENTICATED:{
4264 if (priv->
4265 status & (STATUS_ASSOCIATED |
4266 STATUS_AUTH)) {
0f52bf90 4267#ifdef CONFIG_IPW2200_DEBUG
0edd5b44
JG		 4268 struct notif_authenticate *auth
4269 = &notif->u.auth;
4270 IPW_DEBUG(IPW_DL_NOTIF |
4271 IPW_DL_STATE |
4272 IPW_DL_ASSOC,
4273 "deauthenticated: '%s' "
4274 MAC_FMT
4275 ": (0x%04X) - %s \n",
4276 escape_essid(priv->
4277 essid,
4278 priv->
4279 essid_len),
4280 MAC_ARG(priv->bssid),
4281 ntohs(auth->status),
4282 ipw_get_status_code
4283 (ntohs
4284 (auth->status)));
43f66a6c
JK		 4285#endif
4286
0edd5b44
JG		 4287 priv->status &=
4288 ~(STATUS_ASSOCIATING |
4289 STATUS_AUTH |
4290 STATUS_ASSOCIATED);
4291
a613bffd 4292 schedule_work(&priv->link_down);
0edd5b44
JG		 4293 break;
4294 }
4295
4296 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4297 IPW_DL_ASSOC,
4298 "authenticated: '%s' " MAC_FMT
4299 "\n",
4300 escape_essid(priv->essid,
4301 priv->essid_len),
4302 MAC_ARG(priv->bssid));
4303 break;
4304 }
4305
4306 case CMAS_INIT:{
ea2b26e0
JK		 4307 if (priv->status & STATUS_AUTH) {
4308 struct
4309 ieee80211_assoc_response
4310 *resp;
4311 resp =
4312 (struct
4313 ieee80211_assoc_response
4314 *)&notif->u.raw;
4315 IPW_DEBUG(IPW_DL_NOTIF |
4316 IPW_DL_STATE |
4317 IPW_DL_ASSOC,
4318 "association failed (0x%04X): %s\n",
4319 ntohs(resp->status),
4320 ipw_get_status_code
4321 (ntohs
4322 (resp->status)));
4323 }
4324
0edd5b44
JG		 4325 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4326 IPW_DL_ASSOC,
4327 "disassociated: '%s' " MAC_FMT
4328 " \n",
4329 escape_essid(priv->essid,
4330 priv->essid_len),
4331 MAC_ARG(priv->bssid));
4332
4333 priv->status &=
4334 ~(STATUS_DISASSOCIATING |
4335 STATUS_ASSOCIATING |
4336 STATUS_ASSOCIATED | STATUS_AUTH);
b095c381
JK		 4337 if (priv->assoc_network
4338 && (priv->assoc_network->
4339 capability &
4340 WLAN_CAPABILITY_IBSS))
4341 ipw_remove_current_network
4342 (priv);
0edd5b44 4343
a613bffd 4344 schedule_work(&priv->link_down);
0edd5b44 4345
0edd5b44
JG		 4346 break;
4347 }
43f66a6c 4348
b095c381
JK		 4349 case CMAS_RX_ASSOC_RESP:
4350 break;
4351
0edd5b44
JG		 4352 default:
4353 IPW_ERROR("assoc: unknown (%d)\n",
4354 assoc->state);
43f66a6c 4355 break;
bf79451e 4356 }
43f66a6c 4357
43f66a6c
JK		 4358 break;
4359 }
bf79451e 4360
0edd5b44
JG		 4361 case HOST_NOTIFICATION_STATUS_AUTHENTICATE:{
4362 struct notif_authenticate *auth = &notif->u.auth;
4363 switch (auth->state) {
4364 case CMAS_AUTHENTICATED:
4365 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4366 "authenticated: '%s' " MAC_FMT " \n",
4367 escape_essid(priv->essid,
4368 priv->essid_len),
4369 MAC_ARG(priv->bssid));
4370 priv->status |= STATUS_AUTH;
4371 break;
43f66a6c 4372
0edd5b44
JG		 4373 case CMAS_INIT:
4374 if (priv->status & STATUS_AUTH) {
4375 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4376 IPW_DL_ASSOC,
4377 "authentication failed (0x%04X): %s\n",
4378 ntohs(auth->status),
4379 ipw_get_status_code(ntohs
4380 (auth->
4381 status)));
4382 }
4383 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4384 IPW_DL_ASSOC,
4385 "deauthenticated: '%s' " MAC_FMT "\n",
4386 escape_essid(priv->essid,
4387 priv->essid_len),
4388 MAC_ARG(priv->bssid));
bf79451e 4389
0edd5b44
JG		 4390 priv->status &= ~(STATUS_ASSOCIATING |
4391 STATUS_AUTH |
4392 STATUS_ASSOCIATED);
43f66a6c 4393
a613bffd 4394 schedule_work(&priv->link_down);
0edd5b44 4395 break;
43f66a6c 4396
0edd5b44
JG		 4397 case CMAS_TX_AUTH_SEQ_1:
4398 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4399 IPW_DL_ASSOC, "AUTH_SEQ_1\n");
4400 break;
4401 case CMAS_RX_AUTH_SEQ_2:
4402 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4403 IPW_DL_ASSOC, "AUTH_SEQ_2\n");
4404 break;
4405 case CMAS_AUTH_SEQ_1_PASS:
4406 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4407 IPW_DL_ASSOC, "AUTH_SEQ_1_PASS\n");
4408 break;
4409 case CMAS_AUTH_SEQ_1_FAIL:
4410 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4411 IPW_DL_ASSOC, "AUTH_SEQ_1_FAIL\n");
4412 break;
4413 case CMAS_TX_AUTH_SEQ_3:
4414 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4415 IPW_DL_ASSOC, "AUTH_SEQ_3\n");
4416 break;
4417 case CMAS_RX_AUTH_SEQ_4:
4418 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4419 IPW_DL_ASSOC, "RX_AUTH_SEQ_4\n");
4420 break;
4421 case CMAS_AUTH_SEQ_2_PASS:
4422 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4423 IPW_DL_ASSOC, "AUTH_SEQ_2_PASS\n");
4424 break;
4425 case CMAS_AUTH_SEQ_2_FAIL:
4426 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4427 IPW_DL_ASSOC, "AUT_SEQ_2_FAIL\n");
4428 break;
4429 case CMAS_TX_ASSOC:
4430 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4431 IPW_DL_ASSOC, "TX_ASSOC\n");
4432 break;
4433 case CMAS_RX_ASSOC_RESP:
4434 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4435 IPW_DL_ASSOC, "RX_ASSOC_RESP\n");
b095c381 4436
0edd5b44
JG		 4437 break;
4438 case CMAS_ASSOCIATED:
4439 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4440 IPW_DL_ASSOC, "ASSOCIATED\n");
4441 break;
4442 default:
4443 IPW_DEBUG_NOTIF("auth: failure - %d\n",
4444 auth->state);
4445 break;
43f66a6c 4446 }
43f66a6c
JK		 4447 break;
4448 }
4449
0edd5b44
JG		 4450 case HOST_NOTIFICATION_STATUS_SCAN_CHANNEL_RESULT:{
4451 struct notif_channel_result *x =
4452 &notif->u.channel_result;
43f66a6c 4453
0edd5b44
JG		 4454 if (notif->size == sizeof(*x)) {
4455 IPW_DEBUG_SCAN("Scan result for channel %d\n",
4456 x->channel_num);
4457 } else {
4458 IPW_DEBUG_SCAN("Scan result of wrong size %d "
4459 "(should be %zd)\n",
4460 notif->size, sizeof(*x));
bf79451e 4461 }
43f66a6c
JK		 4462 break;
4463 }
43f66a6c 4464
0edd5b44
JG		 4465 case HOST_NOTIFICATION_STATUS_SCAN_COMPLETED:{
4466 struct notif_scan_complete *x = &notif->u.scan_complete;
4467 if (notif->size == sizeof(*x)) {
4468 IPW_DEBUG_SCAN
4469 ("Scan completed: type %d, %d channels, "
4470 "%d status\n", x->scan_type,
4471 x->num_channels, x->status);
4472 } else {
4473 IPW_ERROR("Scan completed of wrong size %d "
4474 "(should be %zd)\n",
4475 notif->size, sizeof(*x));
4476 }
43f66a6c 4477
0edd5b44
JG		 4478 priv->status &=
4479 ~(STATUS_SCANNING | STATUS_SCAN_ABORTING);
4480
a0e04ab3 4481 wake_up_interruptible(&priv->wait_state);
0edd5b44
JG		 4482 cancel_delayed_work(&priv->scan_check);
4483
b095c381
JK		 4484 if (priv->status & STATUS_EXIT_PENDING)
4485 break;
4486
4487 priv->ieee->scans++;
4488
4489#ifdef CONFIG_IPW2200_MONITOR
4490 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 4491 priv->status |= STATUS_SCAN_FORCED;
b095c381
JK		 4492 queue_work(priv->workqueue,
4493 &priv->request_scan);
4494 break;
4495 }
afbf30a2 4496 priv->status &= ~STATUS_SCAN_FORCED;
b095c381
JK		 4497#endif /* CONFIG_IPW2200_MONITOR */
4498
0edd5b44
JG		 4499 if (!(priv->status & (STATUS_ASSOCIATED |
4500 STATUS_ASSOCIATING |
4501 STATUS_ROAMING |
4502 STATUS_DISASSOCIATING)))
4503 queue_work(priv->workqueue, &priv->associate);
4504 else if (priv->status & STATUS_ROAMING) {
e7582561
BC		 4505 if (x->status == SCAN_COMPLETED_STATUS_COMPLETE)
4506 /* If a scan completed and we are in roam mode, then
4507 * the scan that completed was the one requested as a
4508 * result of entering roam... so, schedule the
4509 * roam work */
4510 queue_work(priv->workqueue,
4511 &priv->roam);
4512 else
4513 /* Don't schedule if we aborted the scan */
4514 priv->status &= ~STATUS_ROAMING;
0edd5b44
JG		 4515 } else if (priv->status & STATUS_SCAN_PENDING)
4516 queue_work(priv->workqueue,
4517 &priv->request_scan);
a613bffd
JK		 4518 else if (priv->config & CFG_BACKGROUND_SCAN
4519 && priv->status & STATUS_ASSOCIATED)
4520 queue_delayed_work(priv->workqueue,
4521 &priv->request_scan, HZ);
0edd5b44 4522 break;
43f66a6c 4523 }
43f66a6c 4524
0edd5b44
JG		 4525 case HOST_NOTIFICATION_STATUS_FRAG_LENGTH:{
4526 struct notif_frag_length *x = &notif->u.frag_len;
43f66a6c 4527
a613bffd
JK		 4528 if (notif->size == sizeof(*x))
4529 IPW_ERROR("Frag length: %d\n",
4530 le16_to_cpu(x->frag_length));
4531 else
0edd5b44
JG		 4532 IPW_ERROR("Frag length of wrong size %d "
4533 "(should be %zd)\n",
4534 notif->size, sizeof(*x));
0edd5b44 4535 break;
43f66a6c 4536 }
43f66a6c 4537
0edd5b44
JG		 4538 case HOST_NOTIFICATION_STATUS_LINK_DETERIORATION:{
4539 struct notif_link_deterioration *x =
4540 &notif->u.link_deterioration;
afbf30a2 4541
0edd5b44
JG		 4542 if (notif->size == sizeof(*x)) {
4543 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4544 "link deterioration: '%s' " MAC_FMT
4545 " \n", escape_essid(priv->essid,
4546 priv->essid_len),
4547 MAC_ARG(priv->bssid));
4548 memcpy(&priv->last_link_deterioration, x,
4549 sizeof(*x));
4550 } else {
4551 IPW_ERROR("Link Deterioration of wrong size %d "
4552 "(should be %zd)\n",
4553 notif->size, sizeof(*x));
4554 }
43f66a6c
JK		 4555 break;
4556 }
4557
0edd5b44
JG		 4558 case HOST_NOTIFICATION_DINO_CONFIG_RESPONSE:{
4559 IPW_ERROR("Dino config\n");
4560 if (priv->hcmd
a613bffd 4561 && priv->hcmd->cmd != HOST_CMD_DINO_CONFIG)
0edd5b44 4562 IPW_ERROR("Unexpected DINO_CONFIG_RESPONSE\n");
a613bffd 4563
0edd5b44
JG		 4564 break;
4565 }
43f66a6c 4566
0edd5b44
JG		 4567 case HOST_NOTIFICATION_STATUS_BEACON_STATE:{
4568 struct notif_beacon_state *x = &notif->u.beacon_state;
4569 if (notif->size != sizeof(*x)) {
4570 IPW_ERROR
4571 ("Beacon state of wrong size %d (should "
4572 "be %zd)\n", notif->size, sizeof(*x));
4573 break;
43f66a6c
JK		 4574 }
4575
a613bffd
JK		 4576 if (le32_to_cpu(x->state) ==
4577 HOST_NOTIFICATION_STATUS_BEACON_MISSING)
4578 ipw_handle_missed_beacon(priv,
4579 le32_to_cpu(x->
4580 number));
43f66a6c 4581
0edd5b44
JG		 4582 break;
4583 }
43f66a6c 4584
0edd5b44
JG		 4585 case HOST_NOTIFICATION_STATUS_TGI_TX_KEY:{
4586 struct notif_tgi_tx_key *x = &notif->u.tgi_tx_key;
4587 if (notif->size == sizeof(*x)) {
4588 IPW_ERROR("TGi Tx Key: state 0x%02x sec type "
4589 "0x%02x station %d\n",
4590 x->key_state, x->security_type,
4591 x->station_index);
4592 break;
4593 }
43f66a6c 4594
0edd5b44
JG		 4595 IPW_ERROR
4596 ("TGi Tx Key of wrong size %d (should be %zd)\n",
4597 notif->size, sizeof(*x));
43f66a6c 4598 break;
bf79451e 4599 }
43f66a6c 4600
0edd5b44
JG		 4601 case HOST_NOTIFICATION_CALIB_KEEP_RESULTS:{
4602 struct notif_calibration *x = &notif->u.calibration;
43f66a6c 4603
0edd5b44
JG		 4604 if (notif->size == sizeof(*x)) {
4605 memcpy(&priv->calib, x, sizeof(*x));
4606 IPW_DEBUG_INFO("TODO: Calibration\n");
4607 break;
4608 }
43f66a6c 4609
0edd5b44
JG		 4610 IPW_ERROR
4611 ("Calibration of wrong size %d (should be %zd)\n",
4612 notif->size, sizeof(*x));
43f66a6c 4613 break;
bf79451e
JG		 4614 }
4615
0edd5b44
JG		 4616 case HOST_NOTIFICATION_NOISE_STATS:{
4617 if (notif->size == sizeof(u32)) {
4618 priv->last_noise =
a613bffd
JK		 4619 (u8) (le32_to_cpu(notif->u.noise.value) &
4620 0xff);
0edd5b44
JG		 4621 average_add(&priv->average_noise,
4622 priv->last_noise);
4623 break;
4624 }
43f66a6c 4625
0edd5b44
JG		 4626 IPW_ERROR
4627 ("Noise stat is wrong size %d (should be %zd)\n",
4628 notif->size, sizeof(u32));
43f66a6c
JK		 4629 break;
4630 }
4631
43f66a6c 4632 default:
1dd31b6c
ZY		 4633 IPW_DEBUG_NOTIF("Unknown notification: "
4634 "subtype=%d,flags=0x%2x,size=%d\n",
4635 notif->subtype, notif->flags, notif->size);
43f66a6c
JK		 4636 }
4637}
4638
4639/**
4640 * Destroys all DMA structures and initialise them again
bf79451e 4641 *
43f66a6c
JK		 4642 * @param priv
4643 * @return error code
4644 */
4645static int ipw_queue_reset(struct ipw_priv *priv)
4646{
4647 int rc = 0;
4648 /** @todo customize queue sizes */
4649 int nTx = 64, nTxCmd = 8;
4650 ipw_tx_queue_free(priv);
4651 /* Tx CMD queue */
4652 rc = ipw_queue_tx_init(priv, &priv->txq_cmd, nTxCmd,
b095c381
JK		 4653 IPW_TX_CMD_QUEUE_READ_INDEX,
4654 IPW_TX_CMD_QUEUE_WRITE_INDEX,
4655 IPW_TX_CMD_QUEUE_BD_BASE,
4656 IPW_TX_CMD_QUEUE_BD_SIZE);
43f66a6c
JK		 4657 if (rc) {
4658 IPW_ERROR("Tx Cmd queue init failed\n");
4659 goto error;
4660 }
4661 /* Tx queue(s) */
4662 rc = ipw_queue_tx_init(priv, &priv->txq[0], nTx,
b095c381
JK		 4663 IPW_TX_QUEUE_0_READ_INDEX,
4664 IPW_TX_QUEUE_0_WRITE_INDEX,
4665 IPW_TX_QUEUE_0_BD_BASE, IPW_TX_QUEUE_0_BD_SIZE);
43f66a6c
JK		 4666 if (rc) {
4667 IPW_ERROR("Tx 0 queue init failed\n");
4668 goto error;
4669 }
4670 rc = ipw_queue_tx_init(priv, &priv->txq[1], nTx,
b095c381
JK		 4671 IPW_TX_QUEUE_1_READ_INDEX,
4672 IPW_TX_QUEUE_1_WRITE_INDEX,
4673 IPW_TX_QUEUE_1_BD_BASE, IPW_TX_QUEUE_1_BD_SIZE);
43f66a6c
JK		 4674 if (rc) {
4675 IPW_ERROR("Tx 1 queue init failed\n");
4676 goto error;
4677 }
4678 rc = ipw_queue_tx_init(priv, &priv->txq[2], nTx,
b095c381
JK		 4679 IPW_TX_QUEUE_2_READ_INDEX,
4680 IPW_TX_QUEUE_2_WRITE_INDEX,
4681 IPW_TX_QUEUE_2_BD_BASE, IPW_TX_QUEUE_2_BD_SIZE);
43f66a6c
JK		 4682 if (rc) {
4683 IPW_ERROR("Tx 2 queue init failed\n");
4684 goto error;
4685 }
4686 rc = ipw_queue_tx_init(priv, &priv->txq[3], nTx,
b095c381
JK		 4687 IPW_TX_QUEUE_3_READ_INDEX,
4688 IPW_TX_QUEUE_3_WRITE_INDEX,
4689 IPW_TX_QUEUE_3_BD_BASE, IPW_TX_QUEUE_3_BD_SIZE);
43f66a6c
JK		 4690 if (rc) {
4691 IPW_ERROR("Tx 3 queue init failed\n");
4692 goto error;
4693 }
4694 /* statistics */
4695 priv->rx_bufs_min = 0;
4696 priv->rx_pend_max = 0;
4697 return rc;
4698
0edd5b44 4699 error:
43f66a6c
JK		 4700 ipw_tx_queue_free(priv);
4701 return rc;
4702}
4703
4704/**
4705 * Reclaim Tx queue entries no more used by NIC.
bf79451e 4706 *
43f66a6c
JK		 4707 * When FW adwances 'R' index, all entries between old and
4708 * new 'R' index need to be reclaimed. As result, some free space
4709 * forms. If there is enough free space (> low mark), wake Tx queue.
bf79451e 4710 *
43f66a6c
JK		 4711 * @note Need to protect against garbage in 'R' index
4712 * @param priv
4713 * @param txq
4714 * @param qindex
4715 * @return Number of used entries remains in the queue
4716 */
bf79451e 4717static int ipw_queue_tx_reclaim(struct ipw_priv *priv,
43f66a6c
JK		 4718 struct clx2_tx_queue *txq, int qindex)
4719{
4720 u32 hw_tail;
4721 int used;
4722 struct clx2_queue *q = &txq->q;
4723
4724 hw_tail = ipw_read32(priv, q->reg_r);
4725 if (hw_tail >= q->n_bd) {
4726 IPW_ERROR
0edd5b44
JG		 4727 ("Read index for DMA queue (%d) is out of range [0-%d)\n",
4728 hw_tail, q->n_bd);
43f66a6c
JK		 4729 goto done;
4730 }
4731 for (; q->last_used != hw_tail;
4732 q->last_used = ipw_queue_inc_wrap(q->last_used, q->n_bd)) {
4733 ipw_queue_tx_free_tfd(priv, txq);
4734 priv->tx_packets++;
4735 }
0edd5b44 4736 done:
9ddf84f6
JK		 4737 if ((ipw_queue_space(q) > q->low_mark) &&
4738 (qindex >= 0) &&
4739 (priv->status & STATUS_ASSOCIATED) && netif_running(priv->net_dev))
4740 netif_wake_queue(priv->net_dev);
43f66a6c
JK		 4741 used = q->first_empty - q->last_used;
4742 if (used < 0)
4743 used += q->n_bd;
4744
4745 return used;
4746}
4747
4748static int ipw_queue_tx_hcmd(struct ipw_priv *priv, int hcmd, void *buf,
4749 int len, int sync)
4750{
4751 struct clx2_tx_queue *txq = &priv->txq_cmd;
4752 struct clx2_queue *q = &txq->q;
4753 struct tfd_frame *tfd;
4754
4755 if (ipw_queue_space(q) < (sync ? 1 : 2)) {
4756 IPW_ERROR("No space for Tx\n");
4757 return -EBUSY;
4758 }
4759
4760 tfd = &txq->bd[q->first_empty];
4761 txq->txb[q->first_empty] = NULL;
4762
4763 memset(tfd, 0, sizeof(*tfd));
4764 tfd->control_flags.message_type = TX_HOST_COMMAND_TYPE;
4765 tfd->control_flags.control_bits = TFD_NEED_IRQ_MASK;
4766 priv->hcmd_seq++;
4767 tfd->u.cmd.index = hcmd;
4768 tfd->u.cmd.length = len;
4769 memcpy(tfd->u.cmd.payload, buf, len);
4770 q->first_empty = ipw_queue_inc_wrap(q->first_empty, q->n_bd);
4771 ipw_write32(priv, q->reg_w, q->first_empty);
4772 _ipw_read32(priv, 0x90);
4773
4774 return 0;
4775}
4776
bf79451e 4777/*
43f66a6c
JK		 4778 * Rx theory of operation
4779 *
4780 * The host allocates 32 DMA target addresses and passes the host address
b095c381 4781 * to the firmware at register IPW_RFDS_TABLE_LOWER + N * RFD_SIZE where N is
43f66a6c
JK		 4782 * 0 to 31
4783 *
4784 * Rx Queue Indexes
4785 * The host/firmware share two index registers for managing the Rx buffers.
4786 *
bf79451e
JG		 4787 * The READ index maps to the first position that the firmware may be writing
4788 * to -- the driver can read up to (but not including) this position and get
4789 * good data.
43f66a6c
JK		 4790 * The READ index is managed by the firmware once the card is enabled.
4791 *
4792 * The WRITE index maps to the last position the driver has read from -- the
4793 * position preceding WRITE is the last slot the firmware can place a packet.
4794 *
4795 * The queue is empty (no good data) if WRITE = READ - 1, and is full if
bf79451e 4796 * WRITE = READ.
43f66a6c 4797 *
bf79451e 4798 * During initialization the host sets up the READ queue position to the first
43f66a6c
JK		 4799 * INDEX position, and WRITE to the last (READ - 1 wrapped)
4800 *
4801 * When the firmware places a packet in a buffer it will advance the READ index
4802 * and fire the RX interrupt. The driver can then query the READ index and
4803 * process as many packets as possible, moving the WRITE index forward as it
4804 * resets the Rx queue buffers with new memory.
bf79451e 4805 *
43f66a6c 4806 * The management in the driver is as follows:
bf79451e 4807 * + A list of pre-allocated SKBs is stored in ipw->rxq->rx_free. When
43f66a6c 4808 * ipw->rxq->free_count drops to or below RX_LOW_WATERMARK, work is scheduled
bf79451e 4809 * to replensish the ipw->rxq->rx_free.
43f66a6c
JK		 4810 * + In ipw_rx_queue_replenish (scheduled) if 'processed' != 'read' then the
4811 * ipw->rxq is replenished and the READ INDEX is updated (updating the
4812 * 'processed' and 'read' driver indexes as well)
4813 * + A received packet is processed and handed to the kernel network stack,
4814 * detached from the ipw->rxq. The driver 'processed' index is updated.
4815 * + The Host/Firmware ipw->rxq is replenished at tasklet time from the rx_free
bf79451e
JG		 4816 * list. If there are no allocated buffers in ipw->rxq->rx_free, the READ
4817 * INDEX is not incremented and ipw->status(RX_STALLED) is set. If there
43f66a6c
JK		 4818 * were enough free buffers and RX_STALLED is set it is cleared.
4819 *
4820 *
4821 * Driver sequence:
4822 *
bf79451e 4823 * ipw_rx_queue_alloc() Allocates rx_free
43f66a6c
JK		 4824 * ipw_rx_queue_replenish() Replenishes rx_free list from rx_used, and calls
4825 * ipw_rx_queue_restock
4826 * ipw_rx_queue_restock() Moves available buffers from rx_free into Rx
4827 * queue, updates firmware pointers, and updates
4828 * the WRITE index. If insufficient rx_free buffers
4829 * are available, schedules ipw_rx_queue_replenish
4830 *
4831 * -- enable interrupts --
4832 * ISR - ipw_rx() Detach ipw_rx_mem_buffers from pool up to the
bf79451e 4833 * READ INDEX, detaching the SKB from the pool.
43f66a6c
JK		 4834 * Moves the packet buffer from queue to rx_used.
4835 * Calls ipw_rx_queue_restock to refill any empty
4836 * slots.
4837 * ...
4838 *
4839 */
4840
bf79451e 4841/*
43f66a6c
JK		 4842 * If there are slots in the RX queue that need to be restocked,
4843 * and we have free pre-allocated buffers, fill the ranks as much
4844 * as we can pulling from rx_free.
4845 *
4846 * This moves the 'write' index forward to catch up with 'processed', and
4847 * also updates the memory address in the firmware to reference the new
4848 * target buffer.
4849 */
4850static void ipw_rx_queue_restock(struct ipw_priv *priv)
4851{
4852 struct ipw_rx_queue *rxq = priv->rxq;
4853 struct list_head *element;
4854 struct ipw_rx_mem_buffer *rxb;
4855 unsigned long flags;
4856 int write;
4857
4858 spin_lock_irqsave(&rxq->lock, flags);
4859 write = rxq->write;
4860 while ((rxq->write != rxq->processed) && (rxq->free_count)) {
4861 element = rxq->rx_free.next;
4862 rxb = list_entry(element, struct ipw_rx_mem_buffer, list);
4863 list_del(element);
4864
b095c381 4865 ipw_write32(priv, IPW_RFDS_TABLE_LOWER + rxq->write * RFD_SIZE,
43f66a6c
JK		 4866 rxb->dma_addr);
4867 rxq->queue[rxq->write] = rxb;
4868 rxq->write = (rxq->write + 1) % RX_QUEUE_SIZE;
4869 rxq->free_count--;
4870 }
4871 spin_unlock_irqrestore(&rxq->lock, flags);
4872
bf79451e 4873 /* If the pre-allocated buffer pool is dropping low, schedule to
43f66a6c
JK		 4874 * refill it */
4875 if (rxq->free_count <= RX_LOW_WATERMARK)
4876 queue_work(priv->workqueue, &priv->rx_replenish);
4877
4878 /* If we've added more space for the firmware to place data, tell it */
bf79451e 4879 if (write != rxq->write)
b095c381 4880 ipw_write32(priv, IPW_RX_WRITE_INDEX, rxq->write);
43f66a6c
JK		 4881}
4882
4883/*
4884 * Move all used packet from rx_used to rx_free, allocating a new SKB for each.
bf79451e
JG		 4885 * Also restock the Rx queue via ipw_rx_queue_restock.
4886 *
43f66a6c
JK		 4887 * This is called as a scheduled work item (except for during intialization)
4888 */
4889static void ipw_rx_queue_replenish(void *data)
4890{
4891 struct ipw_priv *priv = data;
4892 struct ipw_rx_queue *rxq = priv->rxq;
4893 struct list_head *element;
4894 struct ipw_rx_mem_buffer *rxb;
4895 unsigned long flags;
4896
4897 spin_lock_irqsave(&rxq->lock, flags);
4898 while (!list_empty(&rxq->rx_used)) {
4899 element = rxq->rx_used.next;
4900 rxb = list_entry(element, struct ipw_rx_mem_buffer, list);
b095c381 4901 rxb->skb = alloc_skb(IPW_RX_BUF_SIZE, GFP_ATOMIC);
43f66a6c
JK		 4902 if (!rxb->skb) {
4903 printk(KERN_CRIT "%s: Can not allocate SKB buffers.\n",
4904 priv->net_dev->name);
4905 /* We don't reschedule replenish work here -- we will
4906 * call the restock method and if it still needs
4907 * more buffers it will schedule replenish */
4908 break;
4909 }
4910 list_del(element);
bf79451e 4911
43f66a6c 4912 rxb->rxb = (struct ipw_rx_buffer *)rxb->skb->data;
0edd5b44
JG		 4913 rxb->dma_addr =
4914 pci_map_single(priv->pci_dev, rxb->skb->data,
b095c381 4915 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
bf79451e 4916
43f66a6c
JK		 4917 list_add_tail(&rxb->list, &rxq->rx_free);
4918 rxq->free_count++;
4919 }
4920 spin_unlock_irqrestore(&rxq->lock, flags);
4921
4922 ipw_rx_queue_restock(priv);
4923}
4924
c848d0af
JK		 4925static void ipw_bg_rx_queue_replenish(void *data)
4926{
4927 struct ipw_priv *priv = data;
4644151b 4928 mutex_lock(&priv->mutex);
c848d0af 4929 ipw_rx_queue_replenish(data);
4644151b 4930 mutex_unlock(&priv->mutex);
c848d0af
JK		 4931}
4932
43f66a6c 4933/* Assumes that the skb field of the buffers in 'pool' is kept accurate.
c7b6a674 4934 * If an SKB has been detached, the POOL needs to have its SKB set to NULL
bf79451e 4935 * This free routine walks the list of POOL entries and if SKB is set to
43f66a6c
JK		 4936 * non NULL it is unmapped and freed
4937 */
0edd5b44 4938static void ipw_rx_queue_free(struct ipw_priv *priv, struct ipw_rx_queue *rxq)
43f66a6c
JK		 4939{
4940 int i;
4941
4942 if (!rxq)
4943 return;
bf79451e 4944
43f66a6c
JK		 4945 for (i = 0; i < RX_QUEUE_SIZE + RX_FREE_BUFFERS; i++) {
4946 if (rxq->pool[i].skb != NULL) {
4947 pci_unmap_single(priv->pci_dev, rxq->pool[i].dma_addr,
b095c381 4948 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c
JK		 4949 dev_kfree_skb(rxq->pool[i].skb);
4950 }
4951 }
4952
4953 kfree(rxq);
4954}
4955
4956static struct ipw_rx_queue *ipw_rx_queue_alloc(struct ipw_priv *priv)
4957{
4958 struct ipw_rx_queue *rxq;
4959 int i;
4960
c75f4742 4961 rxq = kzalloc(sizeof(*rxq), GFP_KERNEL);
ad18b0ea
PI		 4962 if (unlikely(!rxq)) {
4963 IPW_ERROR("memory allocation failed\n");
4964 return NULL;
4965 }
43f66a6c
JK		 4966 spin_lock_init(&rxq->lock);
4967 INIT_LIST_HEAD(&rxq->rx_free);
4968 INIT_LIST_HEAD(&rxq->rx_used);
4969
4970 /* Fill the rx_used queue with _all_ of the Rx buffers */
bf79451e 4971 for (i = 0; i < RX_FREE_BUFFERS + RX_QUEUE_SIZE; i++)
43f66a6c
JK		 4972 list_add_tail(&rxq->pool[i].list, &rxq->rx_used);
4973
4974 /* Set us so that we have processed and used all buffers, but have
4975 * not restocked the Rx queue with fresh buffers */
4976 rxq->read = rxq->write = 0;
4977 rxq->processed = RX_QUEUE_SIZE - 1;
4978 rxq->free_count = 0;
4979
4980 return rxq;
4981}
4982
4983static int ipw_is_rate_in_mask(struct ipw_priv *priv, int ieee_mode, u8 rate)
4984{
4985 rate &= ~IEEE80211_BASIC_RATE_MASK;
4986 if (ieee_mode == IEEE_A) {
4987 switch (rate) {
bf79451e
JG		 4988 case IEEE80211_OFDM_RATE_6MB:
4989 return priv->rates_mask & IEEE80211_OFDM_RATE_6MB_MASK ?
0edd5b44 4990 1 : 0;
bf79451e
JG		 4991 case IEEE80211_OFDM_RATE_9MB:
4992 return priv->rates_mask & IEEE80211_OFDM_RATE_9MB_MASK ?
0edd5b44 4993 1 : 0;
bf79451e 4994 case IEEE80211_OFDM_RATE_12MB:
0edd5b44
JG		 4995 return priv->
4996 rates_mask & IEEE80211_OFDM_RATE_12MB_MASK ? 1 : 0;
bf79451e 4997 case IEEE80211_OFDM_RATE_18MB:
0edd5b44
JG		 4998 return priv->
4999 rates_mask & IEEE80211_OFDM_RATE_18MB_MASK ? 1 : 0;
bf79451e 5000 case IEEE80211_OFDM_RATE_24MB:
0edd5b44
JG		 5001 return priv->
5002 rates_mask & IEEE80211_OFDM_RATE_24MB_MASK ? 1 : 0;
bf79451e 5003 case IEEE80211_OFDM_RATE_36MB:
0edd5b44
JG		 5004 return priv->
5005 rates_mask & IEEE80211_OFDM_RATE_36MB_MASK ? 1 : 0;
bf79451e 5006 case IEEE80211_OFDM_RATE_48MB:
0edd5b44
JG		 5007 return priv->
5008 rates_mask & IEEE80211_OFDM_RATE_48MB_MASK ? 1 : 0;
bf79451e 5009 case IEEE80211_OFDM_RATE_54MB:
0edd5b44
JG		 5010 return priv->
5011 rates_mask & IEEE80211_OFDM_RATE_54MB_MASK ? 1 : 0;
43f66a6c
JK		 5012 default:
5013 return 0;
5014 }
5015 }
bf79451e 5016
43f66a6c
JK		 5017 /* B and G mixed */
5018 switch (rate) {
bf79451e 5019 case IEEE80211_CCK_RATE_1MB:
43f66a6c 5020 return priv->rates_mask & IEEE80211_CCK_RATE_1MB_MASK ? 1 : 0;
bf79451e 5021 case IEEE80211_CCK_RATE_2MB:
43f66a6c 5022 return priv->rates_mask & IEEE80211_CCK_RATE_2MB_MASK ? 1 : 0;
bf79451e 5023 case IEEE80211_CCK_RATE_5MB:
43f66a6c 5024 return priv->rates_mask & IEEE80211_CCK_RATE_5MB_MASK ? 1 : 0;
bf79451e 5025 case IEEE80211_CCK_RATE_11MB:
43f66a6c
JK		 5026 return priv->rates_mask & IEEE80211_CCK_RATE_11MB_MASK ? 1 : 0;
5027 }
5028
5029 /* If we are limited to B modulations, bail at this point */
5030 if (ieee_mode == IEEE_B)
5031 return 0;
5032
5033 /* G */
5034 switch (rate) {
bf79451e 5035 case IEEE80211_OFDM_RATE_6MB:
43f66a6c 5036 return priv->rates_mask & IEEE80211_OFDM_RATE_6MB_MASK ? 1 : 0;
bf79451e 5037 case IEEE80211_OFDM_RATE_9MB:
43f66a6c 5038 return priv->rates_mask & IEEE80211_OFDM_RATE_9MB_MASK ? 1 : 0;
bf79451e 5039 case IEEE80211_OFDM_RATE_12MB:
43f66a6c 5040 return priv->rates_mask & IEEE80211_OFDM_RATE_12MB_MASK ? 1 : 0;
bf79451e 5041 case IEEE80211_OFDM_RATE_18MB:
43f66a6c 5042 return priv->rates_mask & IEEE80211_OFDM_RATE_18MB_MASK ? 1 : 0;
bf79451e 5043 case IEEE80211_OFDM_RATE_24MB:
43f66a6c 5044 return priv->rates_mask & IEEE80211_OFDM_RATE_24MB_MASK ? 1 : 0;
bf79451e 5045 case IEEE80211_OFDM_RATE_36MB:
43f66a6c 5046 return priv->rates_mask & IEEE80211_OFDM_RATE_36MB_MASK ? 1 : 0;
bf79451e 5047 case IEEE80211_OFDM_RATE_48MB:
43f66a6c 5048 return priv->rates_mask & IEEE80211_OFDM_RATE_48MB_MASK ? 1 : 0;
bf79451e 5049 case IEEE80211_OFDM_RATE_54MB:
43f66a6c
JK		 5050 return priv->rates_mask & IEEE80211_OFDM_RATE_54MB_MASK ? 1 : 0;
5051 }
5052
5053 return 0;
5054}
5055
bf79451e 5056static int ipw_compatible_rates(struct ipw_priv *priv,
43f66a6c
JK		 5057 const struct ieee80211_network *network,
5058 struct ipw_supported_rates *rates)
5059{
5060 int num_rates, i;
5061
5062 memset(rates, 0, sizeof(*rates));
0edd5b44 5063 num_rates = min(network->rates_len, (u8) IPW_MAX_RATES);
43f66a6c
JK		 5064 rates->num_rates = 0;
5065 for (i = 0; i < num_rates; i++) {
a613bffd
JK		 5066 if (!ipw_is_rate_in_mask(priv, network->mode,
5067 network->rates[i])) {
5068
ea2b26e0 5069 if (network->rates[i] & IEEE80211_BASIC_RATE_MASK) {
a613bffd
JK		 5070 IPW_DEBUG_SCAN("Adding masked mandatory "
5071 "rate %02X\n",
5072 network->rates[i]);
5073 rates->supported_rates[rates->num_rates++] =
5074 network->rates[i];
5075 continue;
ea2b26e0
JK		 5076 }
5077
43f66a6c
JK		 5078 IPW_DEBUG_SCAN("Rate %02X masked : 0x%08X\n",
5079 network->rates[i], priv->rates_mask);
5080 continue;
5081 }
bf79451e 5082
43f66a6c
JK		 5083 rates->supported_rates[rates->num_rates++] = network->rates[i];
5084 }
5085
a613bffd
JK		 5086 num_rates = min(network->rates_ex_len,
5087 (u8) (IPW_MAX_RATES - num_rates));
43f66a6c 5088 for (i = 0; i < num_rates; i++) {
a613bffd
JK		 5089 if (!ipw_is_rate_in_mask(priv, network->mode,
5090 network->rates_ex[i])) {
ea2b26e0 5091 if (network->rates_ex[i] & IEEE80211_BASIC_RATE_MASK) {
a613bffd
JK		 5092 IPW_DEBUG_SCAN("Adding masked mandatory "
5093 "rate %02X\n",
5094 network->rates_ex[i]);
5095 rates->supported_rates[rates->num_rates++] =
5096 network->rates[i];
5097 continue;
ea2b26e0
JK		 5098 }
5099
43f66a6c
JK		 5100 IPW_DEBUG_SCAN("Rate %02X masked : 0x%08X\n",
5101 network->rates_ex[i], priv->rates_mask);
5102 continue;
5103 }
bf79451e 5104
0edd5b44
JG		 5105 rates->supported_rates[rates->num_rates++] =
5106 network->rates_ex[i];
43f66a6c
JK		 5107 }
5108
ea2b26e0 5109 return 1;
43f66a6c
JK		 5110}
5111
858119e1 5112static void ipw_copy_rates(struct ipw_supported_rates *dest,
43f66a6c
JK		 5113 const struct ipw_supported_rates *src)
5114{
5115 u8 i;
5116 for (i = 0; i < src->num_rates; i++)
5117 dest->supported_rates[i] = src->supported_rates[i];
5118 dest->num_rates = src->num_rates;
5119}
5120
5121/* TODO: Look at sniffed packets in the air to determine if the basic rate
5122 * mask should ever be used -- right now all callers to add the scan rates are
5123 * set with the modulation = CCK, so BASIC_RATE_MASK is never set... */
5124static void ipw_add_cck_scan_rates(struct ipw_supported_rates *rates,
0edd5b44 5125 u8 modulation, u32 rate_mask)
43f66a6c 5126{
bf79451e 5127 u8 basic_mask = (IEEE80211_OFDM_MODULATION == modulation) ?
0edd5b44 5128 IEEE80211_BASIC_RATE_MASK : 0;
bf79451e 5129
43f66a6c 5130 if (rate_mask & IEEE80211_CCK_RATE_1MB_MASK)
bf79451e 5131 rates->supported_rates[rates->num_rates++] =
0edd5b44 5132 IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_1MB;
43f66a6c
JK		 5133
5134 if (rate_mask & IEEE80211_CCK_RATE_2MB_MASK)
bf79451e 5135 rates->supported_rates[rates->num_rates++] =
0edd5b44 5136 IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_2MB;
43f66a6c
JK		 5137
5138 if (rate_mask & IEEE80211_CCK_RATE_5MB_MASK)
bf79451e 5139 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5140 IEEE80211_CCK_RATE_5MB;
43f66a6c
JK		 5141
5142 if (rate_mask & IEEE80211_CCK_RATE_11MB_MASK)
bf79451e 5143 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5144 IEEE80211_CCK_RATE_11MB;
43f66a6c
JK		 5145}
5146
5147static void ipw_add_ofdm_scan_rates(struct ipw_supported_rates *rates,
0edd5b44 5148 u8 modulation, u32 rate_mask)
43f66a6c 5149{
bf79451e 5150 u8 basic_mask = (IEEE80211_OFDM_MODULATION == modulation) ?
0edd5b44 5151 IEEE80211_BASIC_RATE_MASK : 0;
43f66a6c
JK		 5152
5153 if (rate_mask & IEEE80211_OFDM_RATE_6MB_MASK)
bf79451e 5154 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5155 IEEE80211_OFDM_RATE_6MB;
43f66a6c
JK		 5156
5157 if (rate_mask & IEEE80211_OFDM_RATE_9MB_MASK)
bf79451e 5158 rates->supported_rates[rates->num_rates++] =
0edd5b44 5159 IEEE80211_OFDM_RATE_9MB;
43f66a6c
JK		 5160
5161 if (rate_mask & IEEE80211_OFDM_RATE_12MB_MASK)
bf79451e 5162 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5163 IEEE80211_OFDM_RATE_12MB;
43f66a6c
JK		 5164
5165 if (rate_mask & IEEE80211_OFDM_RATE_18MB_MASK)
bf79451e 5166 rates->supported_rates[rates->num_rates++] =
0edd5b44 5167 IEEE80211_OFDM_RATE_18MB;
43f66a6c
JK		 5168
5169 if (rate_mask & IEEE80211_OFDM_RATE_24MB_MASK)
bf79451e 5170 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5171 IEEE80211_OFDM_RATE_24MB;
43f66a6c
JK		 5172
5173 if (rate_mask & IEEE80211_OFDM_RATE_36MB_MASK)
bf79451e 5174 rates->supported_rates[rates->num_rates++] =
0edd5b44 5175 IEEE80211_OFDM_RATE_36MB;
43f66a6c
JK		 5176
5177 if (rate_mask & IEEE80211_OFDM_RATE_48MB_MASK)
bf79451e 5178 rates->supported_rates[rates->num_rates++] =
0edd5b44 5179 IEEE80211_OFDM_RATE_48MB;
43f66a6c
JK		 5180
5181 if (rate_mask & IEEE80211_OFDM_RATE_54MB_MASK)
bf79451e 5182 rates->supported_rates[rates->num_rates++] =
0edd5b44 5183 IEEE80211_OFDM_RATE_54MB;
43f66a6c
JK		 5184}
5185
5186struct ipw_network_match {
5187 struct ieee80211_network *network;
5188 struct ipw_supported_rates rates;
5189};
5190
c848d0af
JK		 5191static int ipw_find_adhoc_network(struct ipw_priv *priv,
5192 struct ipw_network_match *match,
5193 struct ieee80211_network *network,
5194 int roaming)
43f66a6c
JK		 5195{
5196 struct ipw_supported_rates rates;
5197
5198 /* Verify that this network's capability is compatible with the
5199 * current mode (AdHoc or Infrastructure) */
c848d0af 5200 if ((priv->ieee->iw_mode == IW_MODE_ADHOC &&
43f66a6c 5201 !(network->capability & WLAN_CAPABILITY_IBSS))) {
c848d0af 5202 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded due to "
bf79451e 5203 "capability mismatch.\n",
43f66a6c
JK		 5204 escape_essid(network->ssid, network->ssid_len),
5205 MAC_ARG(network->bssid));
5206 return 0;
5207 }
5208
5209 /* If we do not have an ESSID for this AP, we can not associate with
5210 * it */
5211 if (network->flags & NETWORK_EMPTY_ESSID) {
c848d0af 5212 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
43f66a6c
JK		 5213 "because of hidden ESSID.\n",
5214 escape_essid(network->ssid, network->ssid_len),
5215 MAC_ARG(network->bssid));
5216 return 0;
5217 }
bf79451e 5218
43f66a6c
JK		 5219 if (unlikely(roaming)) {
5220 /* If we are roaming, then ensure check if this is a valid
5221 * network to try and roam to */
5222 if ((network->ssid_len != match->network->ssid_len) ||
bf79451e 5223 memcmp(network->ssid, match->network->ssid,
43f66a6c 5224 network->ssid_len)) {
c848d0af 5225 IPW_DEBUG_MERGE("Netowrk '%s (" MAC_FMT ")' excluded "
43f66a6c 5226 "because of non-network ESSID.\n",
bf79451e 5227 escape_essid(network->ssid,
43f66a6c
JK		 5228 network->ssid_len),
5229 MAC_ARG(network->bssid));
5230 return 0;
5231 }
5232 } else {
bf79451e
JG		 5233 /* If an ESSID has been configured then compare the broadcast
5234 * ESSID to ours */
5235 if ((priv->config & CFG_STATIC_ESSID) &&
43f66a6c 5236 ((network->ssid_len != priv->essid_len) ||
bf79451e 5237 memcmp(network->ssid, priv->essid,
43f66a6c
JK		 5238 min(network->ssid_len, priv->essid_len)))) {
5239 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
afbf30a2 5240
0edd5b44
JG		 5241 strncpy(escaped,
5242 escape_essid(network->ssid, network->ssid_len),
43f66a6c 5243 sizeof(escaped));
c848d0af 5244 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
bf79451e 5245 "because of ESSID mismatch: '%s'.\n",
43f66a6c 5246 escaped, MAC_ARG(network->bssid),
0edd5b44
JG		 5247 escape_essid(priv->essid,
5248 priv->essid_len));
43f66a6c
JK		 5249 return 0;
5250 }
5251 }
5252
5253 /* If the old network rate is better than this one, don't bother
5254 * testing everything else. */
c848d0af
JK		 5255
5256 if (network->time_stamp[0] < match->network->time_stamp[0]) {
afbf30a2
JK		 5257 IPW_DEBUG_MERGE("Network '%s excluded because newer than "
5258 "current network.\n",
43f66a6c 5259 escape_essid(match->network->ssid,
afbf30a2 5260 match->network->ssid_len));
43f66a6c 5261 return 0;
c848d0af 5262 } else if (network->time_stamp[1] < match->network->time_stamp[1]) {
afbf30a2
JK		 5263 IPW_DEBUG_MERGE("Network '%s excluded because newer than "
5264 "current network.\n",
5265 escape_essid(match->network->ssid,
5266 match->network->ssid_len));
43f66a6c
JK		 5267 return 0;
5268 }
5269
5270 /* Now go through and see if the requested network is valid... */
bf79451e 5271 if (priv->ieee->scan_age != 0 &&
c848d0af
JK		 5272 time_after(jiffies, network->last_scanned + priv->ieee->scan_age)) {
5273 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
c7b6a674 5274 "because of age: %ums.\n",
43f66a6c
JK		 5275 escape_essid(network->ssid, network->ssid_len),
5276 MAC_ARG(network->bssid),
2638bc39
ZY		 5277 jiffies_to_msecs(jiffies -
5278 network->last_scanned));
43f66a6c 5279 return 0;
bf79451e 5280 }
43f66a6c 5281
bf79451e 5282 if ((priv->config & CFG_STATIC_CHANNEL) &&
43f66a6c 5283 (network->channel != priv->channel)) {
c848d0af 5284 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
43f66a6c
JK		 5285 "because of channel mismatch: %d != %d.\n",
5286 escape_essid(network->ssid, network->ssid_len),
5287 MAC_ARG(network->bssid),
5288 network->channel, priv->channel);
5289 return 0;
5290 }
bf79451e 5291
43f66a6c 5292 /* Verify privacy compatability */
bf79451e 5293 if (((priv->capability & CAP_PRIVACY_ON) ? 1 : 0) !=
43f66a6c 5294 ((network->capability & WLAN_CAPABILITY_PRIVACY) ? 1 : 0)) {
c848d0af 5295 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
43f66a6c
JK		 5296 "because of privacy mismatch: %s != %s.\n",
5297 escape_essid(network->ssid, network->ssid_len),
5298 MAC_ARG(network->bssid),
afbf30a2
JK		 5299 priv->
5300 capability & CAP_PRIVACY_ON ? "on" : "off",
5301 network->
5302 capability & WLAN_CAPABILITY_PRIVACY ? "on" :
5303 "off");
43f66a6c
JK		 5304 return 0;
5305 }
bf79451e 5306
c848d0af
JK		 5307 if (!memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
5308 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
5309 "because of the same BSSID match: " MAC_FMT
5310 ".\n", escape_essid(network->ssid,
5311 network->ssid_len),
0edd5b44 5312 MAC_ARG(network->bssid), MAC_ARG(priv->bssid));
43f66a6c
JK		 5313 return 0;
5314 }
bf79451e 5315
43f66a6c
JK		 5316 /* Filter out any incompatible freq / mode combinations */
5317 if (!ieee80211_is_valid_mode(priv->ieee, network->mode)) {
c848d0af 5318 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
43f66a6c
JK		 5319 "because of invalid frequency/mode "
5320 "combination.\n",
5321 escape_essid(network->ssid, network->ssid_len),
5322 MAC_ARG(network->bssid));
5323 return 0;
5324 }
bf79451e 5325
c848d0af
JK		 5326 /* Ensure that the rates supported by the driver are compatible with
5327 * this AP, including verification of basic rates (mandatory) */
5328 if (!ipw_compatible_rates(priv, network, &rates)) {
5329 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
5330 "because configured rate mask excludes "
5331 "AP mandatory rate.\n",
5332 escape_essid(network->ssid, network->ssid_len),
5333 MAC_ARG(network->bssid));
5334 return 0;
5335 }
5336
43f66a6c 5337 if (rates.num_rates == 0) {
c848d0af 5338 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' excluded "
43f66a6c
JK		 5339 "because of no compatible rates.\n",
5340 escape_essid(network->ssid, network->ssid_len),
5341 MAC_ARG(network->bssid));
5342 return 0;
5343 }
bf79451e 5344
43f66a6c
JK		 5345 /* TODO: Perform any further minimal comparititive tests. We do not
5346 * want to put too much policy logic here; intelligent scan selection
5347 * should occur within a generic IEEE 802.11 user space tool. */
5348
5349 /* Set up 'new' AP to this network */
5350 ipw_copy_rates(&match->rates, &rates);
5351 match->network = network;
c848d0af 5352 IPW_DEBUG_MERGE("Network '%s (" MAC_FMT ")' is a viable match.\n",
43f66a6c
JK		 5353 escape_essid(network->ssid, network->ssid_len),
5354 MAC_ARG(network->bssid));
5355
5356 return 1;
5357}
5358
c848d0af 5359static void ipw_merge_adhoc_network(void *data)
43f66a6c 5360{
c848d0af
JK		 5361 struct ipw_priv *priv = data;
5362 struct ieee80211_network *network = NULL;
5363 struct ipw_network_match match = {
5364 .network = priv->assoc_network
5365 };
5366
afbf30a2
JK		 5367 if ((priv->status & STATUS_ASSOCIATED) &&
5368 (priv->ieee->iw_mode == IW_MODE_ADHOC)) {
c848d0af
JK		 5369 /* First pass through ROAM process -- look for a better
5370 * network */
5371 unsigned long flags;
5372
5373 spin_lock_irqsave(&priv->ieee->lock, flags);
5374 list_for_each_entry(network, &priv->ieee->network_list, list) {
5375 if (network != priv->assoc_network)
5376 ipw_find_adhoc_network(priv, &match, network,
5377 1);
5378 }
5379 spin_unlock_irqrestore(&priv->ieee->lock, flags);
5380
5381 if (match.network == priv->assoc_network) {
5382 IPW_DEBUG_MERGE("No better ADHOC in this network to "
5383 "merge to.\n");
5384 return;
5385 }
5386
4644151b 5387 mutex_lock(&priv->mutex);
c848d0af
JK		 5388 if ((priv->ieee->iw_mode == IW_MODE_ADHOC)) {
5389 IPW_DEBUG_MERGE("remove network %s\n",
5390 escape_essid(priv->essid,
5391 priv->essid_len));
5392 ipw_remove_current_network(priv);
43f66a6c 5393 }
c848d0af
JK		 5394
5395 ipw_disassociate(priv);
5396 priv->assoc_network = match.network;
4644151b 5397 mutex_unlock(&priv->mutex);
c848d0af 5398 return;
43f66a6c 5399 }
c848d0af 5400}
43f66a6c 5401
0edd5b44
JG		 5402static int ipw_best_network(struct ipw_priv *priv,
5403 struct ipw_network_match *match,
5404 struct ieee80211_network *network, int roaming)
43f66a6c
JK		 5405{
5406 struct ipw_supported_rates rates;
5407
5408 /* Verify that this network's capability is compatible with the
5409 * current mode (AdHoc or Infrastructure) */
5410 if ((priv->ieee->iw_mode == IW_MODE_INFRA &&
2474385e 5411 !(network->capability & WLAN_CAPABILITY_ESS)) ||
43f66a6c
JK		 5412 (priv->ieee->iw_mode == IW_MODE_ADHOC &&
5413 !(network->capability & WLAN_CAPABILITY_IBSS))) {
5414 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded due to "
bf79451e 5415 "capability mismatch.\n",
43f66a6c
JK		 5416 escape_essid(network->ssid, network->ssid_len),
5417 MAC_ARG(network->bssid));
5418 return 0;
5419 }
5420
5421 /* If we do not have an ESSID for this AP, we can not associate with
5422 * it */
5423 if (network->flags & NETWORK_EMPTY_ESSID) {
5424 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5425 "because of hidden ESSID.\n",
5426 escape_essid(network->ssid, network->ssid_len),
5427 MAC_ARG(network->bssid));
5428 return 0;
5429 }
bf79451e 5430
43f66a6c
JK		 5431 if (unlikely(roaming)) {
5432 /* If we are roaming, then ensure check if this is a valid
5433 * network to try and roam to */
5434 if ((network->ssid_len != match->network->ssid_len) ||
bf79451e 5435 memcmp(network->ssid, match->network->ssid,
43f66a6c
JK		 5436 network->ssid_len)) {
5437 IPW_DEBUG_ASSOC("Netowrk '%s (" MAC_FMT ")' excluded "
5438 "because of non-network ESSID.\n",
bf79451e 5439 escape_essid(network->ssid,
43f66a6c
JK		 5440 network->ssid_len),
5441 MAC_ARG(network->bssid));
5442 return 0;
5443 }
5444 } else {
bf79451e
JG		 5445 /* If an ESSID has been configured then compare the broadcast
5446 * ESSID to ours */
5447 if ((priv->config & CFG_STATIC_ESSID) &&
43f66a6c 5448 ((network->ssid_len != priv->essid_len) ||
bf79451e 5449 memcmp(network->ssid, priv->essid,
43f66a6c
JK		 5450 min(network->ssid_len, priv->essid_len)))) {
5451 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
0edd5b44
JG		 5452 strncpy(escaped,
5453 escape_essid(network->ssid, network->ssid_len),
43f66a6c
JK		 5454 sizeof(escaped));
5455 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
bf79451e 5456 "because of ESSID mismatch: '%s'.\n",
43f66a6c 5457 escaped, MAC_ARG(network->bssid),
0edd5b44
JG		 5458 escape_essid(priv->essid,
5459 priv->essid_len));
43f66a6c
JK		 5460 return 0;
5461 }
5462 }
5463
5464 /* If the old network rate is better than this one, don't bother
5465 * testing everything else. */
0edd5b44 5466 if (match->network && match->network->stats.rssi > network->stats.rssi) {
43f66a6c 5467 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
bf79451e
JG		 5468 strncpy(escaped,
5469 escape_essid(network->ssid, network->ssid_len),
43f66a6c
JK		 5470 sizeof(escaped));
5471 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded because "
5472 "'%s (" MAC_FMT ")' has a stronger signal.\n",
5473 escaped, MAC_ARG(network->bssid),
5474 escape_essid(match->network->ssid,
5475 match->network->ssid_len),
5476 MAC_ARG(match->network->bssid));
5477 return 0;
5478 }
bf79451e 5479
43f66a6c
JK		 5480 /* If this network has already had an association attempt within the
5481 * last 3 seconds, do not try and associate again... */
5482 if (network->last_associate &&
ea2b26e0 5483 time_after(network->last_associate + (HZ * 3UL), jiffies)) {
43f66a6c 5484 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
c7b6a674 5485 "because of storming (%ums since last "
43f66a6c
JK		 5486 "assoc attempt).\n",
5487 escape_essid(network->ssid, network->ssid_len),
5488 MAC_ARG(network->bssid),
2638bc39
ZY		 5489 jiffies_to_msecs(jiffies -
5490 network->last_associate));
43f66a6c
JK		 5491 return 0;
5492 }
5493
5494 /* Now go through and see if the requested network is valid... */
bf79451e 5495 if (priv->ieee->scan_age != 0 &&
ea2b26e0 5496 time_after(jiffies, network->last_scanned + priv->ieee->scan_age)) {
43f66a6c 5497 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
c7b6a674 5498 "because of age: %ums.\n",
43f66a6c
JK		 5499 escape_essid(network->ssid, network->ssid_len),
5500 MAC_ARG(network->bssid),
2638bc39
ZY		 5501 jiffies_to_msecs(jiffies -
5502 network->last_scanned));
43f66a6c 5503 return 0;
bf79451e 5504 }
43f66a6c 5505
bf79451e 5506 if ((priv->config & CFG_STATIC_CHANNEL) &&
43f66a6c
JK		 5507 (network->channel != priv->channel)) {
5508 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5509 "because of channel mismatch: %d != %d.\n",
5510 escape_essid(network->ssid, network->ssid_len),
5511 MAC_ARG(network->bssid),
5512 network->channel, priv->channel);
5513 return 0;
5514 }
bf79451e 5515
43f66a6c 5516 /* Verify privacy compatability */
bf79451e 5517 if (((priv->capability & CAP_PRIVACY_ON) ? 1 : 0) !=
43f66a6c
JK		 5518 ((network->capability & WLAN_CAPABILITY_PRIVACY) ? 1 : 0)) {
5519 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5520 "because of privacy mismatch: %s != %s.\n",
5521 escape_essid(network->ssid, network->ssid_len),
5522 MAC_ARG(network->bssid),
bf79451e 5523 priv->capability & CAP_PRIVACY_ON ? "on" :
43f66a6c 5524 "off",
bf79451e 5525 network->capability &
0edd5b44 5526 WLAN_CAPABILITY_PRIVACY ? "on" : "off");
43f66a6c
JK		 5527 return 0;
5528 }
bf79451e 5529
23afaec4
SR		 5530 if (priv->ieee->wpa_enabled &&
5531 network->wpa_ie_len == 0 && network->rsn_ie_len == 0) {
cdd1fa1e
HL		 5532 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5533 "because of WPA capability mismatch.\n",
5534 escape_essid(network->ssid, network->ssid_len),
5535 MAC_ARG(network->bssid));
5536 return 0;
5537 }
5538
bf79451e 5539 if ((priv->config & CFG_STATIC_BSSID) &&
43f66a6c
JK		 5540 memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
5541 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5542 "because of BSSID mismatch: " MAC_FMT ".\n",
5543 escape_essid(network->ssid, network->ssid_len),
0edd5b44 5544 MAC_ARG(network->bssid), MAC_ARG(priv->bssid));
43f66a6c
JK		 5545 return 0;
5546 }
bf79451e 5547
43f66a6c
JK		 5548 /* Filter out any incompatible freq / mode combinations */
5549 if (!ieee80211_is_valid_mode(priv->ieee, network->mode)) {
5550 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5551 "because of invalid frequency/mode "
5552 "combination.\n",
5553 escape_essid(network->ssid, network->ssid_len),
5554 MAC_ARG(network->bssid));
5555 return 0;
5556 }
bf79451e 5557
1fe0adb4 5558 /* Filter out invalid channel in current GEO */
1867b117 5559 if (!ieee80211_is_valid_channel(priv->ieee, network->channel)) {
1fe0adb4
LH		 5560 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5561 "because of invalid channel in current GEO\n",
5562 escape_essid(network->ssid, network->ssid_len),
5563 MAC_ARG(network->bssid));
5564 return 0;
5565 }
5566
ea2b26e0
JK		 5567 /* Ensure that the rates supported by the driver are compatible with
5568 * this AP, including verification of basic rates (mandatory) */
5569 if (!ipw_compatible_rates(priv, network, &rates)) {
5570 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5571 "because configured rate mask excludes "
5572 "AP mandatory rate.\n",
5573 escape_essid(network->ssid, network->ssid_len),
5574 MAC_ARG(network->bssid));
5575 return 0;
5576 }
5577
43f66a6c
JK		 5578 if (rates.num_rates == 0) {
5579 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' excluded "
5580 "because of no compatible rates.\n",
5581 escape_essid(network->ssid, network->ssid_len),
5582 MAC_ARG(network->bssid));
5583 return 0;
5584 }
bf79451e 5585
43f66a6c
JK		 5586 /* TODO: Perform any further minimal comparititive tests. We do not
5587 * want to put too much policy logic here; intelligent scan selection
5588 * should occur within a generic IEEE 802.11 user space tool. */
5589
5590 /* Set up 'new' AP to this network */
5591 ipw_copy_rates(&match->rates, &rates);
5592 match->network = network;
5593
5594 IPW_DEBUG_ASSOC("Network '%s (" MAC_FMT ")' is a viable match.\n",
5595 escape_essid(network->ssid, network->ssid_len),
5596 MAC_ARG(network->bssid));
5597
5598 return 1;
5599}
5600
bf79451e 5601static void ipw_adhoc_create(struct ipw_priv *priv,
0edd5b44 5602 struct ieee80211_network *network)
43f66a6c 5603{
1867b117 5604 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
afbf30a2
JK		 5605 int i;
5606
43f66a6c
JK		 5607 /*
5608 * For the purposes of scanning, we can set our wireless mode
5609 * to trigger scans across combinations of bands, but when it
5610 * comes to creating a new ad-hoc network, we have tell the FW
5611 * exactly which band to use.
5612 *
bf79451e 5613 * We also have the possibility of an invalid channel for the
43f66a6c
JK		 5614 * chossen band. Attempting to create a new ad-hoc network
5615 * with an invalid channel for wireless mode will trigger a
5616 * FW fatal error.
afbf30a2 5617 *
43f66a6c 5618 */
1867b117 5619 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
afbf30a2
JK		 5620 case IEEE80211_52GHZ_BAND:
5621 network->mode = IEEE_A;
1867b117 5622 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
afbf30a2
JK		 5623 if (i == -1)
5624 BUG();
5625 if (geo->a[i].flags & IEEE80211_CH_PASSIVE_ONLY) {
5626 IPW_WARNING("Overriding invalid channel\n");
5627 priv->channel = geo->a[0].channel;
5628 }
5629 break;
5630
5631 case IEEE80211_24GHZ_BAND:
5632 if (priv->ieee->mode & IEEE_G)
5633 network->mode = IEEE_G;
5634 else
5635 network->mode = IEEE_B;
1867b117 5636 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
1fe0adb4
LH		 5637 if (i == -1)
5638 BUG();
5639 if (geo->bg[i].flags & IEEE80211_CH_PASSIVE_ONLY) {
5640 IPW_WARNING("Overriding invalid channel\n");
5641 priv->channel = geo->bg[0].channel;
5642 }
afbf30a2
JK		 5643 break;
5644
5645 default:
43f66a6c
JK		 5646 IPW_WARNING("Overriding invalid channel\n");
5647 if (priv->ieee->mode & IEEE_A) {
5648 network->mode = IEEE_A;
b095c381 5649 priv->channel = geo->a[0].channel;
43f66a6c
JK		 5650 } else if (priv->ieee->mode & IEEE_G) {
5651 network->mode = IEEE_G;
b095c381 5652 priv->channel = geo->bg[0].channel;
43f66a6c
JK		 5653 } else {
5654 network->mode = IEEE_B;
b095c381 5655 priv->channel = geo->bg[0].channel;
43f66a6c 5656 }
afbf30a2
JK		 5657 break;
5658 }
43f66a6c
JK		 5659
5660 network->channel = priv->channel;
5661 priv->config |= CFG_ADHOC_PERSIST;
5662 ipw_create_bssid(priv, network->bssid);
5663 network->ssid_len = priv->essid_len;
5664 memcpy(network->ssid, priv->essid, priv->essid_len);
5665 memset(&network->stats, 0, sizeof(network->stats));
5666 network->capability = WLAN_CAPABILITY_IBSS;
ea2b26e0
JK		 5667 if (!(priv->config & CFG_PREAMBLE_LONG))
5668 network->capability |= WLAN_CAPABILITY_SHORT_PREAMBLE;
43f66a6c
JK		 5669 if (priv->capability & CAP_PRIVACY_ON)
5670 network->capability |= WLAN_CAPABILITY_PRIVACY;
5671 network->rates_len = min(priv->rates.num_rates, MAX_RATES_LENGTH);
0edd5b44 5672 memcpy(network->rates, priv->rates.supported_rates, network->rates_len);
43f66a6c 5673 network->rates_ex_len = priv->rates.num_rates - network->rates_len;
bf79451e 5674 memcpy(network->rates_ex,
43f66a6c
JK		 5675 &priv->rates.supported_rates[network->rates_len],
5676 network->rates_ex_len);
5677 network->last_scanned = 0;
5678 network->flags = 0;
5679 network->last_associate = 0;
5680 network->time_stamp[0] = 0;
5681 network->time_stamp[1] = 0;
0edd5b44
JG		 5682 network->beacon_interval = 100; /* Default */
5683 network->listen_interval = 10; /* Default */
5684 network->atim_window = 0; /* Default */
43f66a6c
JK		 5685 network->wpa_ie_len = 0;
5686 network->rsn_ie_len = 0;
43f66a6c
JK		 5687}
5688
b095c381
JK		 5689static void ipw_send_tgi_tx_key(struct ipw_priv *priv, int type, int index)
5690{
0a7bcf26 5691 struct ipw_tgi_tx_key key;
b095c381
JK		 5692
5693 if (!(priv->ieee->sec.flags & (1 << index)))
5694 return;
5695
0a7bcf26
ZY		 5696 key.key_id = index;
5697 memcpy(key.key, priv->ieee->sec.keys[index], SCM_TEMPORAL_KEY_LENGTH);
5698 key.security_type = type;
5699 key.station_index = 0; /* always 0 for BSS */
5700 key.flags = 0;
b095c381 5701 /* 0 for new key; previous value of counter (after fatal error) */
0a7bcf26
ZY		 5702 key.tx_counter[0] = 0;
5703 key.tx_counter[1] = 0;
b095c381 5704
0a7bcf26 5705 ipw_send_cmd_pdu(priv, IPW_CMD_TGI_TX_KEY, sizeof(key), &key);
b095c381
JK		 5706}
5707
5708static void ipw_send_wep_keys(struct ipw_priv *priv, int type)
43f66a6c 5709{
0a7bcf26 5710 struct ipw_wep_key key;
43f66a6c 5711 int i;
43f66a6c 5712
0a7bcf26
ZY		 5713 key.cmd_id = DINO_CMD_WEP_KEY;
5714 key.seq_num = 0;
43f66a6c 5715
b095c381
JK		 5716 /* Note: AES keys cannot be set for multiple times.
5717 * Only set it at the first time. */
bf79451e 5718 for (i = 0; i < 4; i++) {
0a7bcf26 5719 key.key_index = i | type;
b095c381 5720 if (!(priv->ieee->sec.flags & (1 << i))) {
0a7bcf26 5721 key.key_size = 0;
b095c381 5722 continue;
43f66a6c
JK		 5723 }
5724
0a7bcf26
ZY		 5725 key.key_size = priv->ieee->sec.key_sizes[i];
5726 memcpy(key.key, priv->ieee->sec.keys[i], key.key_size);
b095c381 5727
0a7bcf26 5728 ipw_send_cmd_pdu(priv, IPW_CMD_WEP_KEY, sizeof(key), &key);
bf79451e 5729 }
43f66a6c
JK		 5730}
5731
1fbfea54 5732static void ipw_set_hw_decrypt_unicast(struct ipw_priv *priv, int level)
43f66a6c 5733{
1fbfea54 5734 if (priv->ieee->host_encrypt)
43f66a6c 5735 return;
43f66a6c 5736
1fbfea54
ZY		 5737 switch (level) {
5738 case SEC_LEVEL_3:
5739 priv->sys_config.disable_unicast_decryption = 0;
5740 priv->ieee->host_decrypt = 0;
5741 break;
5742 case SEC_LEVEL_2:
5743 priv->sys_config.disable_unicast_decryption = 1;
5744 priv->ieee->host_decrypt = 1;
5745 break;
5746 case SEC_LEVEL_1:
5747 priv->sys_config.disable_unicast_decryption = 0;
5748 priv->ieee->host_decrypt = 0;
5749 break;
5750 case SEC_LEVEL_0:
5751 priv->sys_config.disable_unicast_decryption = 1;
5752 break;
5753 default:
5754 break;
5755 }
5756}
5757
5758static void ipw_set_hw_decrypt_multicast(struct ipw_priv *priv, int level)
5759{
5760 if (priv->ieee->host_encrypt)
5761 return;
5762
5763 switch (level) {
5764 case SEC_LEVEL_3:
5765 priv->sys_config.disable_multicast_decryption = 0;
5766 break;
5767 case SEC_LEVEL_2:
5768 priv->sys_config.disable_multicast_decryption = 1;
5769 break;
5770 case SEC_LEVEL_1:
5771 priv->sys_config.disable_multicast_decryption = 0;
5772 break;
5773 case SEC_LEVEL_0:
5774 priv->sys_config.disable_multicast_decryption = 1;
5775 break;
5776 default:
5777 break;
5778 }
5779}
5780
b095c381
JK		 5781static void ipw_set_hwcrypto_keys(struct ipw_priv *priv)
5782{
5783 switch (priv->ieee->sec.level) {
5784 case SEC_LEVEL_3:
d8bad6df
ZY		 5785 if (priv->ieee->sec.flags & SEC_ACTIVE_KEY)
5786 ipw_send_tgi_tx_key(priv,
5787 DCT_FLAG_EXT_SECURITY_CCM,
5788 priv->ieee->sec.active_key);
afbf30a2 5789
567deaf6
HL		 5790 if (!priv->ieee->host_mc_decrypt)
5791 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_CCM);
b095c381
JK		 5792 break;
5793 case SEC_LEVEL_2:
d8bad6df
ZY		 5794 if (priv->ieee->sec.flags & SEC_ACTIVE_KEY)
5795 ipw_send_tgi_tx_key(priv,
5796 DCT_FLAG_EXT_SECURITY_TKIP,
5797 priv->ieee->sec.active_key);
b095c381
JK		 5798 break;
5799 case SEC_LEVEL_1:
5800 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_WEP);
29cb843e
HL		 5801 ipw_set_hw_decrypt_unicast(priv, priv->ieee->sec.level);
5802 ipw_set_hw_decrypt_multicast(priv, priv->ieee->sec.level);
b095c381
JK		 5803 break;
5804 case SEC_LEVEL_0:
5805 default:
5806 break;
5807 }
5808}
5809
43f66a6c
JK		 5810static void ipw_adhoc_check(void *data)
5811{
5812 struct ipw_priv *priv = data;
bf79451e 5813
afbf30a2 5814 if (priv->missed_adhoc_beacons++ > priv->disassociate_threshold &&
43f66a6c 5815 !(priv->config & CFG_ADHOC_PERSIST)) {
afbf30a2
JK		 5816 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
5817 IPW_DL_STATE | IPW_DL_ASSOC,
5818 "Missed beacon: %d - disassociate\n",
5819 priv->missed_adhoc_beacons);
43f66a6c
JK		 5820 ipw_remove_current_network(priv);
5821 ipw_disassociate(priv);
5822 return;
5823 }
5824
bf79451e 5825 queue_delayed_work(priv->workqueue, &priv->adhoc_check,
43f66a6c
JK		 5826 priv->assoc_request.beacon_interval);
5827}
5828
c848d0af
JK		 5829static void ipw_bg_adhoc_check(void *data)
5830{
5831 struct ipw_priv *priv = data;
4644151b 5832 mutex_lock(&priv->mutex);
c848d0af 5833 ipw_adhoc_check(data);
4644151b 5834 mutex_unlock(&priv->mutex);
c848d0af
JK		 5835}
5836
0f52bf90 5837#ifdef CONFIG_IPW2200_DEBUG
43f66a6c
JK		 5838static void ipw_debug_config(struct ipw_priv *priv)
5839{
5840 IPW_DEBUG_INFO("Scan completed, no valid APs matched "
5841 "[CFG 0x%08X]\n", priv->config);
5842 if (priv->config & CFG_STATIC_CHANNEL)
0edd5b44 5843 IPW_DEBUG_INFO("Channel locked to %d\n", priv->channel);
43f66a6c
JK		 5844 else
5845 IPW_DEBUG_INFO("Channel unlocked.\n");
5846 if (priv->config & CFG_STATIC_ESSID)
bf79451e 5847 IPW_DEBUG_INFO("ESSID locked to '%s'\n",
0edd5b44 5848 escape_essid(priv->essid, priv->essid_len));
43f66a6c
JK		 5849 else
5850 IPW_DEBUG_INFO("ESSID unlocked.\n");
5851 if (priv->config & CFG_STATIC_BSSID)
ea2b26e0
JK		 5852 IPW_DEBUG_INFO("BSSID locked to " MAC_FMT "\n",
5853 MAC_ARG(priv->bssid));
43f66a6c
JK		 5854 else
5855 IPW_DEBUG_INFO("BSSID unlocked.\n");
5856 if (priv->capability & CAP_PRIVACY_ON)
5857 IPW_DEBUG_INFO("PRIVACY on\n");
5858 else
5859 IPW_DEBUG_INFO("PRIVACY off\n");
5860 IPW_DEBUG_INFO("RATE MASK: 0x%08X\n", priv->rates_mask);
5861}
5862#else
8d45ff7d 5863#define ipw_debug_config(x) do {} while (0)
43f66a6c
JK		 5864#endif
5865
858119e1 5866static void ipw_set_fixed_rate(struct ipw_priv *priv, int mode)
43f66a6c
JK		 5867{
5868 /* TODO: Verify that this works... */
5869 struct ipw_fixed_rate fr = {
5870 .tx_rates = priv->rates_mask
5871 };
5872 u32 reg;
5873 u16 mask = 0;
5874
bf79451e 5875 /* Identify 'current FW band' and match it with the fixed
43f66a6c 5876 * Tx rates */
bf79451e 5877
43f66a6c 5878 switch (priv->ieee->freq_band) {
0edd5b44 5879 case IEEE80211_52GHZ_BAND: /* A only */
43f66a6c
JK		 5880 /* IEEE_A */
5881 if (priv->rates_mask & ~IEEE80211_OFDM_RATES_MASK) {
5882 /* Invalid fixed rate mask */
ea2b26e0
JK		 5883 IPW_DEBUG_WX
5884 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 5885 fr.tx_rates = 0;
5886 break;
5887 }
bf79451e 5888
43f66a6c
JK		 5889 fr.tx_rates >>= IEEE80211_OFDM_SHIFT_MASK_A;
5890 break;
5891
0edd5b44 5892 default: /* 2.4Ghz or Mixed */
43f66a6c 5893 /* IEEE_B */
b095c381 5894 if (mode == IEEE_B) {
43f66a6c
JK		 5895 if (fr.tx_rates & ~IEEE80211_CCK_RATES_MASK) {
5896 /* Invalid fixed rate mask */
ea2b26e0
JK		 5897 IPW_DEBUG_WX
5898 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 5899 fr.tx_rates = 0;
5900 }
5901 break;
bf79451e 5902 }
43f66a6c
JK		 5903
5904 /* IEEE_G */
5905 if (fr.tx_rates & ~(IEEE80211_CCK_RATES_MASK |
5906 IEEE80211_OFDM_RATES_MASK)) {
5907 /* Invalid fixed rate mask */
ea2b26e0
JK		 5908 IPW_DEBUG_WX
5909 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 5910 fr.tx_rates = 0;
5911 break;
5912 }
bf79451e 5913
43f66a6c
JK		 5914 if (IEEE80211_OFDM_RATE_6MB_MASK & fr.tx_rates) {
5915 mask |= (IEEE80211_OFDM_RATE_6MB_MASK >> 1);
5916 fr.tx_rates &= ~IEEE80211_OFDM_RATE_6MB_MASK;
5917 }
bf79451e 5918
43f66a6c
JK		 5919 if (IEEE80211_OFDM_RATE_9MB_MASK & fr.tx_rates) {
5920 mask |= (IEEE80211_OFDM_RATE_9MB_MASK >> 1);
5921 fr.tx_rates &= ~IEEE80211_OFDM_RATE_9MB_MASK;
5922 }
bf79451e 5923
43f66a6c
JK		 5924 if (IEEE80211_OFDM_RATE_12MB_MASK & fr.tx_rates) {
5925 mask |= (IEEE80211_OFDM_RATE_12MB_MASK >> 1);
5926 fr.tx_rates &= ~IEEE80211_OFDM_RATE_12MB_MASK;
5927 }
bf79451e 5928
43f66a6c
JK		 5929 fr.tx_rates |= mask;
5930 break;
5931 }
5932
5933 reg = ipw_read32(priv, IPW_MEM_FIXED_OVERRIDE);
0edd5b44 5934 ipw_write_reg32(priv, reg, *(u32 *) & fr);
43f66a6c
JK		 5935}
5936
ea2b26e0 5937static void ipw_abort_scan(struct ipw_priv *priv)
43f66a6c
JK		 5938{
5939 int err;
5940
ea2b26e0
JK		 5941 if (priv->status & STATUS_SCAN_ABORTING) {
5942 IPW_DEBUG_HC("Ignoring concurrent scan abort request.\n");
5943 return;
5944 }
5945 priv->status |= STATUS_SCAN_ABORTING;
43f66a6c 5946
ea2b26e0
JK		 5947 err = ipw_send_scan_abort(priv);
5948 if (err)
5949 IPW_DEBUG_HC("Request to abort scan failed.\n");
5950}
5951
afbf30a2
JK		 5952static void ipw_add_scan_channels(struct ipw_priv *priv,
5953 struct ipw_scan_request_ext *scan,
5954 int scan_type)
ea2b26e0 5955{
ea2b26e0 5956 int channel_index = 0;
b095c381 5957 const struct ieee80211_geo *geo;
afbf30a2 5958 int i;
b095c381 5959
1867b117 5960 geo = ieee80211_get_geo(priv->ieee);
43f66a6c 5961
afbf30a2
JK		 5962 if (priv->ieee->freq_band & IEEE80211_52GHZ_BAND) {
5963 int start = channel_index;
5964 for (i = 0; i < geo->a_channels; i++) {
5965 if ((priv->status & STATUS_ASSOCIATED) &&
5966 geo->a[i].channel == priv->channel)
5967 continue;
5968 channel_index++;
5969 scan->channels_list[channel_index] = geo->a[i].channel;
1fe0adb4
LH		 5970 ipw_set_scan_type(scan, channel_index,
5971 geo->a[i].
5972 flags & IEEE80211_CH_PASSIVE_ONLY ?
5973 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN :
5974 scan_type);
afbf30a2
JK		 5975 }
5976
5977 if (start != channel_index) {
5978 scan->channels_list[start] = (u8) (IPW_A_MODE << 6) |
5979 (channel_index - start);
5980 channel_index++;
5981 }
5982 }
5983
5984 if (priv->ieee->freq_band & IEEE80211_24GHZ_BAND) {
5985 int start = channel_index;
5986 if (priv->config & CFG_SPEED_SCAN) {
1fe0adb4 5987 int index;
afbf30a2
JK		 5988 u8 channels[IEEE80211_24GHZ_CHANNELS] = {
5989 /* nop out the list */
5990 [0] = 0
5991 };
5992
5993 u8 channel;
5994 while (channel_index < IPW_SCAN_CHANNELS) {
5995 channel =
5996 priv->speed_scan[priv->speed_scan_pos];
5997 if (channel == 0) {
5998 priv->speed_scan_pos = 0;
5999 channel = priv->speed_scan[0];
6000 }
6001 if ((priv->status & STATUS_ASSOCIATED) &&
6002 channel == priv->channel) {
6003 priv->speed_scan_pos++;
6004 continue;
6005 }
6006
6007 /* If this channel has already been
6008 * added in scan, break from loop
6009 * and this will be the first channel
6010 * in the next scan.
6011 */
6012 if (channels[channel - 1] != 0)
6013 break;
6014
6015 channels[channel - 1] = 1;
6016 priv->speed_scan_pos++;
6017 channel_index++;
6018 scan->channels_list[channel_index] = channel;
1fe0adb4 6019 index =
1867b117 6020 ieee80211_channel_to_index(priv->ieee, channel);
afbf30a2 6021 ipw_set_scan_type(scan, channel_index,
1fe0adb4
LH		 6022 geo->bg[index].
6023 flags &
6024 IEEE80211_CH_PASSIVE_ONLY ?
6025 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN
6026 : scan_type);
afbf30a2
JK		 6027 }
6028 } else {
6029 for (i = 0; i < geo->bg_channels; i++) {
6030 if ((priv->status & STATUS_ASSOCIATED) &&
6031 geo->bg[i].channel == priv->channel)
6032 continue;
6033 channel_index++;
6034 scan->channels_list[channel_index] =
6035 geo->bg[i].channel;
6036 ipw_set_scan_type(scan, channel_index,
1fe0adb4
LH		 6037 geo->bg[i].
6038 flags &
6039 IEEE80211_CH_PASSIVE_ONLY ?
6040 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN
6041 : scan_type);
afbf30a2
JK		 6042 }
6043 }
6044
6045 if (start != channel_index) {
6046 scan->channels_list[start] = (u8) (IPW_B_MODE << 6) |
6047 (channel_index - start);
6048 }
6049 }
6050}
6051
6052static int ipw_request_scan(struct ipw_priv *priv)
6053{
6054 struct ipw_scan_request_ext scan;
6055 int err = 0, scan_type;
6056
6057 if (!(priv->status & STATUS_INIT) ||
6058 (priv->status & STATUS_EXIT_PENDING))
6059 return 0;
6060
4644151b 6061 mutex_lock(&priv->mutex);
afbf30a2 6062
ea2b26e0 6063 if (priv->status & STATUS_SCANNING) {
a613bffd 6064 IPW_DEBUG_HC("Concurrent scan requested. Ignoring.\n");
ea2b26e0 6065 priv->status |= STATUS_SCAN_PENDING;
b095c381 6066 goto done;
ea2b26e0 6067 }
43f66a6c 6068
afbf30a2
JK		 6069 if (!(priv->status & STATUS_SCAN_FORCED) &&
6070 priv->status & STATUS_SCAN_ABORTING) {
ea2b26e0
JK		 6071 IPW_DEBUG_HC("Scan request while abort pending. Queuing.\n");
6072 priv->status |= STATUS_SCAN_PENDING;
b095c381 6073 goto done;
43f66a6c
JK		 6074 }
6075
ea2b26e0
JK		 6076 if (priv->status & STATUS_RF_KILL_MASK) {
6077 IPW_DEBUG_HC("Aborting scan due to RF Kill activation\n");
6078 priv->status |= STATUS_SCAN_PENDING;
b095c381 6079 goto done;
ea2b26e0 6080 }
43f66a6c 6081
ea2b26e0 6082 memset(&scan, 0, sizeof(scan));
43f66a6c 6083
b095c381
JK		 6084 if (priv->config & CFG_SPEED_SCAN)
6085 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
6086 cpu_to_le16(30);
6087 else
6088 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
6089 cpu_to_le16(20);
6090
a613bffd
JK		 6091 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN] =
6092 cpu_to_le16(20);
1fe0adb4 6093 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] = cpu_to_le16(120);
43f66a6c 6094
a613bffd 6095 scan.full_scan_index = cpu_to_le32(ieee80211_get_scans(priv->ieee));
43f66a6c 6096
b095c381 6097#ifdef CONFIG_IPW2200_MONITOR
ea2b26e0 6098 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 6099 u8 channel;
b095c381 6100 u8 band = 0;
43f66a6c 6101
1867b117 6102 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
b095c381 6103 case IEEE80211_52GHZ_BAND:
ea2b26e0 6104 band = (u8) (IPW_A_MODE << 6) | 1;
b095c381
JK		 6105 channel = priv->channel;
6106 break;
ea2b26e0 6107
b095c381 6108 case IEEE80211_24GHZ_BAND:
ea2b26e0 6109 band = (u8) (IPW_B_MODE << 6) | 1;
b095c381
JK		 6110 channel = priv->channel;
6111 break;
ea2b26e0 6112
b095c381 6113 default:
ea2b26e0
JK		 6114 band = (u8) (IPW_B_MODE << 6) | 1;
6115 channel = 9;
b095c381 6116 break;
ea2b26e0
JK		 6117 }
6118
b095c381
JK		 6119 scan.channels_list[0] = band;
6120 scan.channels_list[1] = channel;
6121 ipw_set_scan_type(&scan, 1, IPW_SCAN_PASSIVE_FULL_DWELL_SCAN);
ea2b26e0 6122
b095c381
JK		 6123 /* NOTE: The card will sit on this channel for this time
6124 * period. Scan aborts are timing sensitive and frequently
6125 * result in firmware restarts. As such, it is best to
6126 * set a small dwell_time here and just keep re-issuing
6127 * scans. Otherwise fast channel hopping will not actually
6128 * hop channels.
6129 *
6130 * TODO: Move SPEED SCAN support to all modes and bands */
a613bffd
JK		 6131 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] =
6132 cpu_to_le16(2000);
43f66a6c 6133 } else {
b095c381
JK		 6134#endif /* CONFIG_IPW2200_MONITOR */
6135 /* If we are roaming, then make this a directed scan for the
6136 * current network. Otherwise, ensure that every other scan
6137 * is a fast channel hop scan */
6138 if ((priv->status & STATUS_ROAMING)
6139 || (!(priv->status & STATUS_ASSOCIATED)
6140 && (priv->config & CFG_STATIC_ESSID)
6141 && (le32_to_cpu(scan.full_scan_index) % 2))) {
ea2b26e0
JK		 6142 err = ipw_send_ssid(priv, priv->essid, priv->essid_len);
6143 if (err) {
b095c381
JK		 6144 IPW_DEBUG_HC("Attempt to send SSID command "
6145 "failed.\n");
6146 goto done;
ea2b26e0 6147 }
43f66a6c 6148
ea2b26e0 6149 scan_type = IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN;
afbf30a2 6150 } else
ea2b26e0 6151 scan_type = IPW_SCAN_ACTIVE_BROADCAST_SCAN;
ea2b26e0 6152
afbf30a2 6153 ipw_add_scan_channels(priv, &scan, scan_type);
b095c381 6154#ifdef CONFIG_IPW2200_MONITOR
43f66a6c 6155 }
ea2b26e0 6156#endif
bf79451e 6157
ea2b26e0 6158 err = ipw_send_scan_request_ext(priv, &scan);
43f66a6c 6159 if (err) {
ea2b26e0 6160 IPW_DEBUG_HC("Sending scan command failed: %08X\n", err);
b095c381 6161 goto done;
43f66a6c
JK		 6162 }
6163
ea2b26e0
JK		 6164 priv->status |= STATUS_SCANNING;
6165 priv->status &= ~STATUS_SCAN_PENDING;
afbf30a2
JK		 6166 queue_delayed_work(priv->workqueue, &priv->scan_check,
6167 IPW_SCAN_CHECK_WATCHDOG);
b095c381 6168 done:
4644151b 6169 mutex_unlock(&priv->mutex);
b095c381 6170 return err;
c848d0af
JK		 6171}
6172
6173static void ipw_bg_abort_scan(void *data)
6174{
6175 struct ipw_priv *priv = data;
4644151b 6176 mutex_lock(&priv->mutex);
c848d0af 6177 ipw_abort_scan(data);
4644151b 6178 mutex_unlock(&priv->mutex);
c848d0af
JK		 6179}
6180
ea2b26e0
JK		 6181static int ipw_wpa_enable(struct ipw_priv *priv, int value)
6182{
b095c381
JK		 6183 /* This is called when wpa_supplicant loads and closes the driver
6184 * interface. */
cdd1fa1e 6185 priv->ieee->wpa_enabled = value;
b095c381 6186 return 0;
ea2b26e0
JK		 6187}
6188
ea2b26e0
JK		 6189static int ipw_wpa_set_auth_algs(struct ipw_priv *priv, int value)
6190{
6191 struct ieee80211_device *ieee = priv->ieee;
6192 struct ieee80211_security sec = {
6193 .flags = SEC_AUTH_MODE,
6194 };
6195 int ret = 0;
6196
afbf30a2 6197 if (value & IW_AUTH_ALG_SHARED_KEY) {
ea2b26e0
JK		 6198 sec.auth_mode = WLAN_AUTH_SHARED_KEY;
6199 ieee->open_wep = 0;
afbf30a2 6200 } else if (value & IW_AUTH_ALG_OPEN_SYSTEM) {
ea2b26e0
JK		 6201 sec.auth_mode = WLAN_AUTH_OPEN;
6202 ieee->open_wep = 1;
3e234b4e
ZY		 6203 } else if (value & IW_AUTH_ALG_LEAP) {
6204 sec.auth_mode = WLAN_AUTH_LEAP;
6205 ieee->open_wep = 1;
afbf30a2
JK		 6206 } else
6207 return -EINVAL;
ea2b26e0
JK		 6208
6209 if (ieee->set_security)
6210 ieee->set_security(ieee->dev, &sec);
6211 else
6212 ret = -EOPNOTSUPP;
6213
6214 return ret;
6215}
6216
a73e22b2
AB		 6217static void ipw_wpa_assoc_frame(struct ipw_priv *priv, char *wpa_ie,
6218 int wpa_ie_len)
afbf30a2
JK		 6219{
6220 /* make sure WPA is enabled */
6221 ipw_wpa_enable(priv, 1);
6222
6223 ipw_disassociate(priv);
6224}
6225
6226static int ipw_set_rsn_capa(struct ipw_priv *priv,
6227 char *capabilities, int length)
6228{
afbf30a2
JK		 6229 IPW_DEBUG_HC("HOST_CMD_RSN_CAPABILITIES\n");
6230
0a7bcf26 6231 return ipw_send_cmd_pdu(priv, IPW_CMD_RSN_CAPABILITIES, length,
2638bc39 6232 capabilities);
afbf30a2
JK		 6233}
6234
b095c381 6235/*
afbf30a2
JK		 6236 * WE-18 support
6237 */
6238
6239/* SIOCSIWGENIE */
6240static int ipw_wx_set_genie(struct net_device *dev,
6241 struct iw_request_info *info,
6242 union iwreq_data *wrqu, char *extra)
ea2b26e0 6243{
afbf30a2
JK		 6244 struct ipw_priv *priv = ieee80211_priv(dev);
6245 struct ieee80211_device *ieee = priv->ieee;
6246 u8 *buf;
6247 int err = 0;
ea2b26e0 6248
afbf30a2
JK		 6249 if (wrqu->data.length > MAX_WPA_IE_LEN ||
6250 (wrqu->data.length && extra == NULL))
6251 return -EINVAL;
ea2b26e0 6252
4644151b 6253 //mutex_lock(&priv->mutex);
afbf30a2
JK		 6254
6255 //if (!ieee->wpa_enabled) {
6256 // err = -EOPNOTSUPP;
6257 // goto out;
6258 //}
6259
6260 if (wrqu->data.length) {
6261 buf = kmalloc(wrqu->data.length, GFP_KERNEL);
6262 if (buf == NULL) {
6263 err = -ENOMEM;
6264 goto out;
6265 }
6266
6267 memcpy(buf, extra, wrqu->data.length);
6268 kfree(ieee->wpa_ie);
6269 ieee->wpa_ie = buf;
6270 ieee->wpa_ie_len = wrqu->data.length;
b095c381 6271 } else {
afbf30a2
JK		 6272 kfree(ieee->wpa_ie);
6273 ieee->wpa_ie = NULL;
6274 ieee->wpa_ie_len = 0;
ea2b26e0 6275 }
afbf30a2
JK		 6276
6277 ipw_wpa_assoc_frame(priv, ieee->wpa_ie, ieee->wpa_ie_len);
6278 out:
4644151b 6279 //mutex_unlock(&priv->mutex);
afbf30a2
JK		 6280 return err;
6281}
6282
6283/* SIOCGIWGENIE */
6284static int ipw_wx_get_genie(struct net_device *dev,
6285 struct iw_request_info *info,
6286 union iwreq_data *wrqu, char *extra)
6287{
6288 struct ipw_priv *priv = ieee80211_priv(dev);
6289 struct ieee80211_device *ieee = priv->ieee;
6290 int err = 0;
6291
4644151b 6292 //mutex_lock(&priv->mutex);
afbf30a2
JK		 6293
6294 //if (!ieee->wpa_enabled) {
6295 // err = -EOPNOTSUPP;
6296 // goto out;
6297 //}
6298
6299 if (ieee->wpa_ie_len == 0 || ieee->wpa_ie == NULL) {
6300 wrqu->data.length = 0;
6301 goto out;
6302 }
6303
6304 if (wrqu->data.length < ieee->wpa_ie_len) {
6305 err = -E2BIG;
6306 goto out;
6307 }
6308
6309 wrqu->data.length = ieee->wpa_ie_len;
6310 memcpy(extra, ieee->wpa_ie, ieee->wpa_ie_len);
6311
6312 out:
4644151b 6313 //mutex_unlock(&priv->mutex);
afbf30a2
JK		 6314 return err;
6315}
6316
1fbfea54
ZY		 6317static int wext_cipher2level(int cipher)
6318{
6319 switch (cipher) {
6320 case IW_AUTH_CIPHER_NONE:
6321 return SEC_LEVEL_0;
6322 case IW_AUTH_CIPHER_WEP40:
6323 case IW_AUTH_CIPHER_WEP104:
6324 return SEC_LEVEL_1;
6325 case IW_AUTH_CIPHER_TKIP:
6326 return SEC_LEVEL_2;
6327 case IW_AUTH_CIPHER_CCMP:
6328 return SEC_LEVEL_3;
6329 default:
6330 return -1;
6331 }
6332}
6333
afbf30a2
JK		 6334/* SIOCSIWAUTH */
6335static int ipw_wx_set_auth(struct net_device *dev,
6336 struct iw_request_info *info,
6337 union iwreq_data *wrqu, char *extra)
6338{
6339 struct ipw_priv *priv = ieee80211_priv(dev);
6340 struct ieee80211_device *ieee = priv->ieee;
6341 struct iw_param *param = &wrqu->param;
6342 struct ieee80211_crypt_data *crypt;
6343 unsigned long flags;
6344 int ret = 0;
6345
6346 switch (param->flags & IW_AUTH_INDEX) {
6347 case IW_AUTH_WPA_VERSION:
1fbfea54 6348 break;
afbf30a2 6349 case IW_AUTH_CIPHER_PAIRWISE:
1fbfea54
ZY		 6350 ipw_set_hw_decrypt_unicast(priv,
6351 wext_cipher2level(param->value));
6352 break;
afbf30a2 6353 case IW_AUTH_CIPHER_GROUP:
1fbfea54
ZY		 6354 ipw_set_hw_decrypt_multicast(priv,
6355 wext_cipher2level(param->value));
6356 break;
afbf30a2
JK		 6357 case IW_AUTH_KEY_MGMT:
6358 /*
6359 * ipw2200 does not use these parameters
6360 */
6361 break;
6362
6363 case IW_AUTH_TKIP_COUNTERMEASURES:
6364 crypt = priv->ieee->crypt[priv->ieee->tx_keyidx];
991d1cc5 6365 if (!crypt || !crypt->ops->set_flags || !crypt->ops->get_flags)
afbf30a2 6366 break;
afbf30a2
JK		 6367
6368 flags = crypt->ops->get_flags(crypt->priv);
6369
6370 if (param->value)
6371 flags |= IEEE80211_CRYPTO_TKIP_COUNTERMEASURES;
6372 else
6373 flags &= ~IEEE80211_CRYPTO_TKIP_COUNTERMEASURES;
6374
6375 crypt->ops->set_flags(flags, crypt->priv);
6376
6377 break;
6378
6379 case IW_AUTH_DROP_UNENCRYPTED:{
6380 /* HACK:
6381 *
6382 * wpa_supplicant calls set_wpa_enabled when the driver
6383 * is loaded and unloaded, regardless of if WPA is being
6384 * used. No other calls are made which can be used to
6385 * determine if encryption will be used or not prior to
6386 * association being expected. If encryption is not being
6387 * used, drop_unencrypted is set to false, else true -- we
6388 * can use this to determine if the CAP_PRIVACY_ON bit should
6389 * be set.
6390 */
6391 struct ieee80211_security sec = {
6392 .flags = SEC_ENABLED,
6393 .enabled = param->value,
6394 };
6395 priv->ieee->drop_unencrypted = param->value;
6396 /* We only change SEC_LEVEL for open mode. Others
6397 * are set by ipw_wpa_set_encryption.
6398 */
6399 if (!param->value) {
6400 sec.flags |= SEC_LEVEL;
6401 sec.level = SEC_LEVEL_0;
6402 } else {
6403 sec.flags |= SEC_LEVEL;
6404 sec.level = SEC_LEVEL_1;
6405 }
6406 if (priv->ieee->set_security)
6407 priv->ieee->set_security(priv->ieee->dev, &sec);
6408 break;
6409 }
6410
6411 case IW_AUTH_80211_AUTH_ALG:
6412 ret = ipw_wpa_set_auth_algs(priv, param->value);
6413 break;
6414
6415 case IW_AUTH_WPA_ENABLED:
6416 ret = ipw_wpa_enable(priv, param->value);
6417 break;
6418
6419 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6420 ieee->ieee802_1x = param->value;
6421 break;
6422
6423 //case IW_AUTH_ROAMING_CONTROL:
6424 case IW_AUTH_PRIVACY_INVOKED:
6425 ieee->privacy_invoked = param->value;
6426 break;
6427
6428 default:
6429 return -EOPNOTSUPP;
6430 }
6431 return ret;
6432}
6433
6434/* SIOCGIWAUTH */
6435static int ipw_wx_get_auth(struct net_device *dev,
6436 struct iw_request_info *info,
6437 union iwreq_data *wrqu, char *extra)
6438{
6439 struct ipw_priv *priv = ieee80211_priv(dev);
6440 struct ieee80211_device *ieee = priv->ieee;
6441 struct ieee80211_crypt_data *crypt;
6442 struct iw_param *param = &wrqu->param;
6443 int ret = 0;
6444
6445 switch (param->flags & IW_AUTH_INDEX) {
6446 case IW_AUTH_WPA_VERSION:
6447 case IW_AUTH_CIPHER_PAIRWISE:
6448 case IW_AUTH_CIPHER_GROUP:
6449 case IW_AUTH_KEY_MGMT:
6450 /*
6451 * wpa_supplicant will control these internally
6452 */
6453 ret = -EOPNOTSUPP;
6454 break;
6455
6456 case IW_AUTH_TKIP_COUNTERMEASURES:
6457 crypt = priv->ieee->crypt[priv->ieee->tx_keyidx];
991d1cc5 6458 if (!crypt || !crypt->ops->get_flags)
afbf30a2 6459 break;
afbf30a2
JK		 6460
6461 param->value = (crypt->ops->get_flags(crypt->priv) &
6462 IEEE80211_CRYPTO_TKIP_COUNTERMEASURES) ? 1 : 0;
6463
6464 break;
6465
6466 case IW_AUTH_DROP_UNENCRYPTED:
6467 param->value = ieee->drop_unencrypted;
6468 break;
6469
6470 case IW_AUTH_80211_AUTH_ALG:
6471 param->value = ieee->sec.auth_mode;
6472 break;
6473
6474 case IW_AUTH_WPA_ENABLED:
6475 param->value = ieee->wpa_enabled;
6476 break;
6477
6478 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6479 param->value = ieee->ieee802_1x;
6480 break;
6481
6482 case IW_AUTH_ROAMING_CONTROL:
6483 case IW_AUTH_PRIVACY_INVOKED:
6484 param->value = ieee->privacy_invoked;
6485 break;
6486
6487 default:
6488 return -EOPNOTSUPP;
6489 }
6490 return 0;
6491}
6492
6493/* SIOCSIWENCODEEXT */
6494static int ipw_wx_set_encodeext(struct net_device *dev,
6495 struct iw_request_info *info,
6496 union iwreq_data *wrqu, char *extra)
6497{
6498 struct ipw_priv *priv = ieee80211_priv(dev);
6499 struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
6500
6501 if (hwcrypto) {
afbf30a2 6502 if (ext->alg == IW_ENCODE_ALG_TKIP) {
567deaf6
HL		 6503 /* IPW HW can't build TKIP MIC,
6504 host decryption still needed */
6505 if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
6506 priv->ieee->host_mc_decrypt = 1;
6507 else {
6508 priv->ieee->host_encrypt = 0;
6509 priv->ieee->host_encrypt_msdu = 1;
6510 priv->ieee->host_decrypt = 1;
6511 }
afbf30a2
JK		 6512 } else {
6513 priv->ieee->host_encrypt = 0;
6514 priv->ieee->host_encrypt_msdu = 0;
6515 priv->ieee->host_decrypt = 0;
567deaf6 6516 priv->ieee->host_mc_decrypt = 0;
afbf30a2
JK		 6517 }
6518 }
6519
6520 return ieee80211_wx_set_encodeext(priv->ieee, info, wrqu, extra);
6521}
6522
6523/* SIOCGIWENCODEEXT */
6524static int ipw_wx_get_encodeext(struct net_device *dev,
6525 struct iw_request_info *info,
6526 union iwreq_data *wrqu, char *extra)
6527{
6528 struct ipw_priv *priv = ieee80211_priv(dev);
6529 return ieee80211_wx_get_encodeext(priv->ieee, info, wrqu, extra);
6530}
6531
6532/* SIOCSIWMLME */
6533static int ipw_wx_set_mlme(struct net_device *dev,
6534 struct iw_request_info *info,
6535 union iwreq_data *wrqu, char *extra)
6536{
6537 struct ipw_priv *priv = ieee80211_priv(dev);
6538 struct iw_mlme *mlme = (struct iw_mlme *)extra;
6539 u16 reason;
6540
6541 reason = cpu_to_le16(mlme->reason_code);
6542
6543 switch (mlme->cmd) {
6544 case IW_MLME_DEAUTH:
6545 // silently ignore
6546 break;
6547
6548 case IW_MLME_DISASSOC:
6549 ipw_disassociate(priv);
6550 break;
6551
6552 default:
6553 return -EOPNOTSUPP;
6554 }
6555 return 0;
6556}
afbf30a2
JK		 6557
6558#ifdef CONFIG_IPW_QOS
6559
6560/* QoS */
6561/*
6562* get the modulation type of the current network or
6563* the card current mode
6564*/
53d0bcf8 6565static u8 ipw_qos_current_mode(struct ipw_priv * priv)
afbf30a2
JK		 6566{
6567 u8 mode = 0;
6568
6569 if (priv->status & STATUS_ASSOCIATED) {
6570 unsigned long flags;
6571
6572 spin_lock_irqsave(&priv->ieee->lock, flags);
6573 mode = priv->assoc_network->mode;
6574 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6575 } else {
6576 mode = priv->ieee->mode;
6577 }
6578 IPW_DEBUG_QOS("QoS network/card mode %d \n", mode);
6579 return mode;
b095c381 6580}
ea2b26e0 6581
b095c381
JK		 6582/*
6583* Handle management frame beacon and probe response
6584*/
3b9990cb
JK		 6585static int ipw_qos_handle_probe_response(struct ipw_priv *priv,
6586 int active_network,
6587 struct ieee80211_network *network)
b095c381
JK		 6588{
6589 u32 size = sizeof(struct ieee80211_qos_parameters);
6590
afbf30a2 6591 if (network->capability & WLAN_CAPABILITY_IBSS)
b095c381
JK		 6592 network->qos_data.active = network->qos_data.supported;
6593
6594 if (network->flags & NETWORK_HAS_QOS_MASK) {
afbf30a2
JK		 6595 if (active_network &&
6596 (network->flags & NETWORK_HAS_QOS_PARAMETERS))
b095c381
JK		 6597 network->qos_data.active = network->qos_data.supported;
6598
6599 if ((network->qos_data.active == 1) && (active_network == 1) &&
6600 (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
6601 (network->qos_data.old_param_count !=
6602 network->qos_data.param_count)) {
6603 network->qos_data.old_param_count =
6604 network->qos_data.param_count;
6605 schedule_work(&priv->qos_activate);
afbf30a2
JK		 6606 IPW_DEBUG_QOS("QoS parameters change call "
6607 "qos_activate\n");
b095c381 6608 }
ea2b26e0 6609 } else {
afbf30a2
JK		 6610 if ((priv->ieee->mode == IEEE_B) || (network->mode == IEEE_B))
6611 memcpy(&network->qos_data.parameters,
b095c381 6612 &def_parameters_CCK, size);
afbf30a2
JK		 6613 else
6614 memcpy(&network->qos_data.parameters,
b095c381 6615 &def_parameters_OFDM, size);
afbf30a2 6616
b095c381
JK		 6617 if ((network->qos_data.active == 1) && (active_network == 1)) {
6618 IPW_DEBUG_QOS("QoS was disabled call qos_activate \n");
6619 schedule_work(&priv->qos_activate);
6620 }
6621
6622 network->qos_data.active = 0;
6623 network->qos_data.supported = 0;
ea2b26e0 6624 }
afbf30a2
JK		 6625 if ((priv->status & STATUS_ASSOCIATED) &&
6626 (priv->ieee->iw_mode == IW_MODE_ADHOC) && (active_network == 0)) {
6627 if (memcmp(network->bssid, priv->bssid, ETH_ALEN))
6628 if ((network->capability & WLAN_CAPABILITY_IBSS) &&
6629 !(network->flags & NETWORK_EMPTY_ESSID))
b095c381 6630 if ((network->ssid_len ==
afbf30a2
JK		 6631 priv->assoc_network->ssid_len) &&
6632 !memcmp(network->ssid,
6633 priv->assoc_network->ssid,
6634 network->ssid_len)) {
b095c381
JK		 6635 queue_work(priv->workqueue,
6636 &priv->merge_networks);
6637 }
b095c381 6638 }
ea2b26e0 6639
b095c381
JK		 6640 return 0;
6641}
6642
6643/*
6644* This function set up the firmware to support QoS. It sends
6645* IPW_CMD_QOS_PARAMETERS and IPW_CMD_WME_INFO
6646*/
6647static int ipw_qos_activate(struct ipw_priv *priv,
6648 struct ieee80211_qos_data *qos_network_data)
6649{
6650 int err;
6651 struct ieee80211_qos_parameters qos_parameters[QOS_QOS_SETS];
6652 struct ieee80211_qos_parameters *active_one = NULL;
6653 u32 size = sizeof(struct ieee80211_qos_parameters);
6654 u32 burst_duration;
6655 int i;
6656 u8 type;
6657
6658 type = ipw_qos_current_mode(priv);
6659
6660 active_one = &(qos_parameters[QOS_PARAM_SET_DEF_CCK]);
6661 memcpy(active_one, priv->qos_data.def_qos_parm_CCK, size);
6662 active_one = &(qos_parameters[QOS_PARAM_SET_DEF_OFDM]);
6663 memcpy(active_one, priv->qos_data.def_qos_parm_OFDM, size);
6664
6665 if (qos_network_data == NULL) {
6666 if (type == IEEE_B) {
6667 IPW_DEBUG_QOS("QoS activate network mode %d\n", type);
6668 active_one = &def_parameters_CCK;
6669 } else
6670 active_one = &def_parameters_OFDM;
6671
afbf30a2 6672 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6673 burst_duration = ipw_qos_get_burst_duration(priv);
6674 for (i = 0; i < QOS_QUEUE_NUM; i++)
afbf30a2
JK		 6675 qos_parameters[QOS_PARAM_SET_ACTIVE].tx_op_limit[i] =
6676 (u16) burst_duration;
6677 } else if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
b095c381
JK		 6678 if (type == IEEE_B) {
6679 IPW_DEBUG_QOS("QoS activate IBSS nework mode %d\n",
6680 type);
6681 if (priv->qos_data.qos_enable == 0)
6682 active_one = &def_parameters_CCK;
6683 else
6684 active_one = priv->qos_data.def_qos_parm_CCK;
6685 } else {
6686 if (priv->qos_data.qos_enable == 0)
6687 active_one = &def_parameters_OFDM;
6688 else
6689 active_one = priv->qos_data.def_qos_parm_OFDM;
6690 }
afbf30a2 6691 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6692 } else {
6693 unsigned long flags;
6694 int active;
6695
6696 spin_lock_irqsave(&priv->ieee->lock, flags);
6697 active_one = &(qos_network_data->parameters);
6698 qos_network_data->old_param_count =
6699 qos_network_data->param_count;
afbf30a2 6700 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6701 active = qos_network_data->supported;
6702 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6703
6704 if (active == 0) {
6705 burst_duration = ipw_qos_get_burst_duration(priv);
6706 for (i = 0; i < QOS_QUEUE_NUM; i++)
6707 qos_parameters[QOS_PARAM_SET_ACTIVE].
6708 tx_op_limit[i] = (u16) burst_duration;
6709 }
6710 }
6711
6712 IPW_DEBUG_QOS("QoS sending IPW_CMD_QOS_PARAMETERS\n");
afbf30a2
JK		 6713 err = ipw_send_qos_params_command(priv,
6714 (struct ieee80211_qos_parameters *)
6715 &(qos_parameters[0]));
b095c381
JK		 6716 if (err)
6717 IPW_DEBUG_QOS("QoS IPW_CMD_QOS_PARAMETERS failed\n");
6718
6719 return err;
6720}
6721
6722/*
6723* send IPW_CMD_WME_INFO to the firmware
6724*/
6725static int ipw_qos_set_info_element(struct ipw_priv *priv)
6726{
6727 int ret = 0;
6728 struct ieee80211_qos_information_element qos_info;
6729
6730 if (priv == NULL)
6731 return -1;
6732
6733 qos_info.elementID = QOS_ELEMENT_ID;
6734 qos_info.length = sizeof(struct ieee80211_qos_information_element) - 2;
6735
6736 qos_info.version = QOS_VERSION_1;
6737 qos_info.ac_info = 0;
6738
6739 memcpy(qos_info.qui, qos_oui, QOS_OUI_LEN);
6740 qos_info.qui_type = QOS_OUI_TYPE;
6741 qos_info.qui_subtype = QOS_OUI_INFO_SUB_TYPE;
6742
6743 ret = ipw_send_qos_info_command(priv, &qos_info);
6744 if (ret != 0) {
6745 IPW_DEBUG_QOS("QoS error calling ipw_send_qos_info_command\n");
6746 }
6747 return ret;
6748}
6749
6750/*
6751* Set the QoS parameter with the association request structure
6752*/
6753static int ipw_qos_association(struct ipw_priv *priv,
6754 struct ieee80211_network *network)
6755{
6756 int err = 0;
6757 struct ieee80211_qos_data *qos_data = NULL;
6758 struct ieee80211_qos_data ibss_data = {
6759 .supported = 1,
6760 .active = 1,
6761 };
6762
6763 switch (priv->ieee->iw_mode) {
6764 case IW_MODE_ADHOC:
6765 if (!(network->capability & WLAN_CAPABILITY_IBSS))
6766 BUG();
6767
6768 qos_data = &ibss_data;
6769 break;
6770
6771 case IW_MODE_INFRA:
6772 qos_data = &network->qos_data;
6773 break;
6774
6775 default:
6776 BUG();
6777 break;
6778 }
6779
6780 err = ipw_qos_activate(priv, qos_data);
6781 if (err) {
6782 priv->assoc_request.policy_support &= ~HC_QOS_SUPPORT_ASSOC;
6783 return err;
6784 }
6785
6786 if (priv->qos_data.qos_enable && qos_data->supported) {
6787 IPW_DEBUG_QOS("QoS will be enabled for this association\n");
6788 priv->assoc_request.policy_support |= HC_QOS_SUPPORT_ASSOC;
6789 return ipw_qos_set_info_element(priv);
6790 }
6791
6792 return 0;
6793}
6794
6795/*
6796* handling the beaconing responces. if we get different QoS setting
6797* of the network from the the associated setting adjust the QoS
6798* setting
6799*/
6800static int ipw_qos_association_resp(struct ipw_priv *priv,
6801 struct ieee80211_network *network)
6802{
6803 int ret = 0;
6804 unsigned long flags;
6805 u32 size = sizeof(struct ieee80211_qos_parameters);
6806 int set_qos_param = 0;
6807
afbf30a2
JK		 6808 if ((priv == NULL) || (network == NULL) ||
6809 (priv->assoc_network == NULL))
b095c381
JK		 6810 return ret;
6811
6812 if (!(priv->status & STATUS_ASSOCIATED))
6813 return ret;
6814
afbf30a2 6815 if ((priv->ieee->iw_mode != IW_MODE_INFRA))
b095c381 6816 return ret;
b095c381
JK		 6817
6818 spin_lock_irqsave(&priv->ieee->lock, flags);
6819 if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
afbf30a2 6820 memcpy(&priv->assoc_network->qos_data, &network->qos_data,
b095c381
JK		 6821 sizeof(struct ieee80211_qos_data));
6822 priv->assoc_network->qos_data.active = 1;
6823 if ((network->qos_data.old_param_count !=
6824 network->qos_data.param_count)) {
6825 set_qos_param = 1;
6826 network->qos_data.old_param_count =
6827 network->qos_data.param_count;
6828 }
6829
6830 } else {
afbf30a2
JK		 6831 if ((network->mode == IEEE_B) || (priv->ieee->mode == IEEE_B))
6832 memcpy(&priv->assoc_network->qos_data.parameters,
b095c381 6833 &def_parameters_CCK, size);
afbf30a2
JK		 6834 else
6835 memcpy(&priv->assoc_network->qos_data.parameters,
b095c381 6836 &def_parameters_OFDM, size);
b095c381
JK		 6837 priv->assoc_network->qos_data.active = 0;
6838 priv->assoc_network->qos_data.supported = 0;
6839 set_qos_param = 1;
6840 }
6841
6842 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6843
6844 if (set_qos_param == 1)
6845 schedule_work(&priv->qos_activate);
6846
6847 return ret;
6848}
6849
6850static u32 ipw_qos_get_burst_duration(struct ipw_priv *priv)
6851{
6852 u32 ret = 0;
6853
6854 if ((priv == NULL))
6855 return 0;
6856
afbf30a2 6857 if (!(priv->ieee->modulation & IEEE80211_OFDM_MODULATION))
b095c381 6858 ret = priv->qos_data.burst_duration_CCK;
afbf30a2 6859 else
b095c381 6860 ret = priv->qos_data.burst_duration_OFDM;
afbf30a2 6861
b095c381
JK		 6862 return ret;
6863}
6864
6865/*
6866* Initialize the setting of QoS global
6867*/
6868static void ipw_qos_init(struct ipw_priv *priv, int enable,
6869 int burst_enable, u32 burst_duration_CCK,
6870 u32 burst_duration_OFDM)
6871{
6872 priv->qos_data.qos_enable = enable;
6873
6874 if (priv->qos_data.qos_enable) {
6875 priv->qos_data.def_qos_parm_CCK = &def_qos_parameters_CCK;
6876 priv->qos_data.def_qos_parm_OFDM = &def_qos_parameters_OFDM;
6877 IPW_DEBUG_QOS("QoS is enabled\n");
6878 } else {
6879 priv->qos_data.def_qos_parm_CCK = &def_parameters_CCK;
6880 priv->qos_data.def_qos_parm_OFDM = &def_parameters_OFDM;
6881 IPW_DEBUG_QOS("QoS is not enabled\n");
6882 }
6883
6884 priv->qos_data.burst_enable = burst_enable;
6885
6886 if (burst_enable) {
6887 priv->qos_data.burst_duration_CCK = burst_duration_CCK;
6888 priv->qos_data.burst_duration_OFDM = burst_duration_OFDM;
6889 } else {
6890 priv->qos_data.burst_duration_CCK = 0;
6891 priv->qos_data.burst_duration_OFDM = 0;
6892 }
6893}
6894
6895/*
6896* map the packet priority to the right TX Queue
6897*/
6898static int ipw_get_tx_queue_number(struct ipw_priv *priv, u16 priority)
6899{
6900 if (priority > 7 || !priv->qos_data.qos_enable)
6901 priority = 0;
6902
6903 return from_priority_to_tx_queue[priority] - 1;
6904}
6905
6906/*
6907* add QoS parameter to the TX command
6908*/
6909static int ipw_qos_set_tx_queue_command(struct ipw_priv *priv,
6910 u16 priority,
6911 struct tfd_data *tfd, u8 unicast)
6912{
6913 int ret = 0;
6914 int tx_queue_id = 0;
6915 struct ieee80211_qos_data *qos_data = NULL;
6916 int active, supported;
6917 unsigned long flags;
6918
6919 if (!(priv->status & STATUS_ASSOCIATED))
6920 return 0;
6921
6922 qos_data = &priv->assoc_network->qos_data;
6923
6924 spin_lock_irqsave(&priv->ieee->lock, flags);
6925
6926 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
6927 if (unicast == 0)
6928 qos_data->active = 0;
6929 else
6930 qos_data->active = qos_data->supported;
6931 }
6932
6933 active = qos_data->active;
6934 supported = qos_data->supported;
6935
6936 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6937
afbf30a2
JK		 6938 IPW_DEBUG_QOS("QoS %d network is QoS active %d supported %d "
6939 "unicast %d\n",
6940 priv->qos_data.qos_enable, active, supported, unicast);
b095c381
JK		 6941 if (active && priv->qos_data.qos_enable) {
6942 ret = from_priority_to_tx_queue[priority];
6943 tx_queue_id = ret - 1;
6944 IPW_DEBUG_QOS("QoS packet priority is %d \n", priority);
6945 if (priority <= 7) {
6946 tfd->tx_flags_ext |= DCT_FLAG_EXT_QOS_ENABLED;
6947 tfd->tfd.tfd_26.mchdr.qos_ctrl = priority;
6948 tfd->tfd.tfd_26.mchdr.frame_ctl |=
6949 IEEE80211_STYPE_QOS_DATA;
6950
6951 if (priv->qos_data.qos_no_ack_mask &
6952 (1UL << tx_queue_id)) {
6953 tfd->tx_flags &= ~DCT_FLAG_ACK_REQD;
6954 tfd->tfd.tfd_26.mchdr.qos_ctrl |=
6955 CTRL_QOS_NO_ACK;
6956 }
6957 }
6958 }
6959
6960 return ret;
6961}
6962
6963/*
6964* background support to run QoS activate functionality
6965*/
6966static void ipw_bg_qos_activate(void *data)
6967{
6968 struct ipw_priv *priv = data;
6969
6970 if (priv == NULL)
6971 return;
6972
4644151b 6973 mutex_lock(&priv->mutex);
b095c381
JK		 6974
6975 if (priv->status & STATUS_ASSOCIATED)
6976 ipw_qos_activate(priv, &(priv->assoc_network->qos_data));
6977
4644151b 6978 mutex_unlock(&priv->mutex);
b095c381
JK		 6979}
6980
3b9990cb
JK		 6981static int ipw_handle_probe_response(struct net_device *dev,
6982 struct ieee80211_probe_response *resp,
6983 struct ieee80211_network *network)
b095c381
JK		 6984{
6985 struct ipw_priv *priv = ieee80211_priv(dev);
3b9990cb
JK		 6986 int active_network = ((priv->status & STATUS_ASSOCIATED) &&
6987 (network == priv->assoc_network));
43f66a6c 6988
3b9990cb 6989 ipw_qos_handle_probe_response(priv, active_network, network);
43f66a6c 6990
3b9990cb
JK		 6991 return 0;
6992}
43f66a6c 6993
3b9990cb
JK		 6994static int ipw_handle_beacon(struct net_device *dev,
6995 struct ieee80211_beacon *resp,
6996 struct ieee80211_network *network)
6997{
6998 struct ipw_priv *priv = ieee80211_priv(dev);
6999 int active_network = ((priv->status & STATUS_ASSOCIATED) &&
7000 (network == priv->assoc_network));
bf79451e 7001
3b9990cb 7002 ipw_qos_handle_probe_response(priv, active_network, network);
bf79451e 7003
b095c381
JK		 7004 return 0;
7005}
bf79451e 7006
3b9990cb
JK		 7007static int ipw_handle_assoc_response(struct net_device *dev,
7008 struct ieee80211_assoc_response *resp,
7009 struct ieee80211_network *network)
7010{
7011 struct ipw_priv *priv = ieee80211_priv(dev);
7012 ipw_qos_association_resp(priv, network);
7013 return 0;
7014}
43f66a6c 7015
b095c381
JK		 7016static int ipw_send_qos_params_command(struct ipw_priv *priv, struct ieee80211_qos_parameters
7017 *qos_param)
7018{
4e22699f
ZY		 7019 return ipw_send_cmd_pdu(priv, IPW_CMD_QOS_PARAMETERS,
7020 sizeof(*qos_param) * 3, qos_param);
b095c381
JK		 7021}
7022
7023static int ipw_send_qos_info_command(struct ipw_priv *priv, struct ieee80211_qos_information_element
7024 *qos_param)
7025{
4e22699f
ZY		 7026 return ipw_send_cmd_pdu(priv, IPW_CMD_WME_INFO, sizeof(*qos_param),
7027 qos_param);
43f66a6c
JK		 7028}
7029
b095c381
JK		 7030#endif /* CONFIG_IPW_QOS */
7031
43f66a6c
JK		 7032static int ipw_associate_network(struct ipw_priv *priv,
7033 struct ieee80211_network *network,
0edd5b44 7034 struct ipw_supported_rates *rates, int roaming)
43f66a6c
JK		 7035{
7036 int err;
7037
7038 if (priv->config & CFG_FIXED_RATE)
b095c381 7039 ipw_set_fixed_rate(priv, network->mode);
43f66a6c
JK		 7040
7041 if (!(priv->config & CFG_STATIC_ESSID)) {
bf79451e 7042 priv->essid_len = min(network->ssid_len,
0edd5b44 7043 (u8) IW_ESSID_MAX_SIZE);
43f66a6c
JK		 7044 memcpy(priv->essid, network->ssid, priv->essid_len);
7045 }
7046
7047 network->last_associate = jiffies;
7048
7049 memset(&priv->assoc_request, 0, sizeof(priv->assoc_request));
7050 priv->assoc_request.channel = network->channel;
3e234b4e
ZY		 7051 priv->assoc_request.auth_key = 0;
7052
43f66a6c 7053 if ((priv->capability & CAP_PRIVACY_ON) &&
3e234b4e 7054 (priv->ieee->sec.auth_mode == WLAN_AUTH_SHARED_KEY)) {
43f66a6c 7055 priv->assoc_request.auth_type = AUTH_SHARED_KEY;
b095c381
JK		 7056 priv->assoc_request.auth_key = priv->ieee->sec.active_key;
7057
1ba61e05 7058 if (priv->ieee->sec.level == SEC_LEVEL_1)
b095c381 7059 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_WEP);
3e234b4e
ZY		 7060
7061 } else if ((priv->capability & CAP_PRIVACY_ON) &&
7062 (priv->ieee->sec.auth_mode == WLAN_AUTH_LEAP))
7063 priv->assoc_request.auth_type = AUTH_LEAP;
7064 else
43f66a6c 7065 priv->assoc_request.auth_type = AUTH_OPEN;
43f66a6c 7066
b095c381 7067 if (priv->ieee->wpa_ie_len) {
ea2b26e0
JK		 7068 priv->assoc_request.policy_support = 0x02; /* RSN active */
7069 ipw_set_rsn_capa(priv, priv->ieee->wpa_ie,
7070 priv->ieee->wpa_ie_len);
7071 }
43f66a6c 7072
bf79451e
JG		 7073 /*
7074 * It is valid for our ieee device to support multiple modes, but
7075 * when it comes to associating to a given network we have to choose
43f66a6c
JK		 7076 * just one mode.
7077 */
7078 if (network->mode & priv->ieee->mode & IEEE_A)
7079 priv->assoc_request.ieee_mode = IPW_A_MODE;
7080 else if (network->mode & priv->ieee->mode & IEEE_G)
7081 priv->assoc_request.ieee_mode = IPW_G_MODE;
7082 else if (network->mode & priv->ieee->mode & IEEE_B)
7083 priv->assoc_request.ieee_mode = IPW_B_MODE;
7084
ea2b26e0
JK		 7085 priv->assoc_request.capability = network->capability;
7086 if ((network->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
7087 && !(priv->config & CFG_PREAMBLE_LONG)) {
7088 priv->assoc_request.preamble_length = DCT_FLAG_SHORT_PREAMBLE;
7089 } else {
7090 priv->assoc_request.preamble_length = DCT_FLAG_LONG_PREAMBLE;
7091
7092 /* Clear the short preamble if we won't be supporting it */
7093 priv->assoc_request.capability &=
7094 ~WLAN_CAPABILITY_SHORT_PREAMBLE;
7095 }
7096
afbf30a2
JK		 7097 /* Clear capability bits that aren't used in Ad Hoc */
7098 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
7099 priv->assoc_request.capability &=
7100 ~WLAN_CAPABILITY_SHORT_SLOT_TIME;
7101
43f66a6c 7102 IPW_DEBUG_ASSOC("%sssocation attempt: '%s', channel %d, "
ea2b26e0 7103 "802.11%c [%d], %s[:%s], enc=%s%s%s%c%c\n",
43f66a6c 7104 roaming ? "Rea" : "A",
bf79451e
JG		 7105 escape_essid(priv->essid, priv->essid_len),
7106 network->channel,
7107 ipw_modes[priv->assoc_request.ieee_mode],
7108 rates->num_rates,
ea2b26e0
JK		 7109 (priv->assoc_request.preamble_length ==
7110 DCT_FLAG_LONG_PREAMBLE) ? "long" : "short",
7111 network->capability &
7112 WLAN_CAPABILITY_SHORT_PREAMBLE ? "short" : "long",
43f66a6c 7113 priv->capability & CAP_PRIVACY_ON ? "on " : "off",
bf79451e
JG		 7114 priv->capability & CAP_PRIVACY_ON ?
7115 (priv->capability & CAP_SHARED_KEY ? "(shared)" :
43f66a6c
JK		 7116 "(open)") : "",
7117 priv->capability & CAP_PRIVACY_ON ? " key=" : "",
bf79451e 7118 priv->capability & CAP_PRIVACY_ON ?
b095c381 7119 '1' + priv->ieee->sec.active_key : '.',
0edd5b44 7120 priv->capability & CAP_PRIVACY_ON ? '.' : ' ');
43f66a6c
JK		 7121
7122 priv->assoc_request.beacon_interval = network->beacon_interval;
7123 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
0edd5b44 7124 (network->time_stamp[0] == 0) && (network->time_stamp[1] == 0)) {
43f66a6c
JK		 7125 priv->assoc_request.assoc_type = HC_IBSS_START;
7126 priv->assoc_request.assoc_tsf_msw = 0;
7127 priv->assoc_request.assoc_tsf_lsw = 0;
7128 } else {
7129 if (unlikely(roaming))
7130 priv->assoc_request.assoc_type = HC_REASSOCIATE;
7131 else
7132 priv->assoc_request.assoc_type = HC_ASSOCIATE;
7133 priv->assoc_request.assoc_tsf_msw = network->time_stamp[1];
7134 priv->assoc_request.assoc_tsf_lsw = network->time_stamp[0];
7135 }
7136
afbf30a2 7137 memcpy(priv->assoc_request.bssid, network->bssid, ETH_ALEN);
43f66a6c
JK		 7138
7139 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
7140 memset(&priv->assoc_request.dest, 0xFF, ETH_ALEN);
7141 priv->assoc_request.atim_window = network->atim_window;
7142 } else {
afbf30a2 7143 memcpy(priv->assoc_request.dest, network->bssid, ETH_ALEN);
43f66a6c
JK		 7144 priv->assoc_request.atim_window = 0;
7145 }
7146
43f66a6c 7147 priv->assoc_request.listen_interval = network->listen_interval;
bf79451e 7148
43f66a6c
JK		 7149 err = ipw_send_ssid(priv, priv->essid, priv->essid_len);
7150 if (err) {
7151 IPW_DEBUG_HC("Attempt to send SSID command failed.\n");
7152 return err;
7153 }
7154
7155 rates->ieee_mode = priv->assoc_request.ieee_mode;
7156 rates->purpose = IPW_RATE_CONNECT;
7157 ipw_send_supported_rates(priv, rates);
bf79451e 7158
43f66a6c
JK		 7159 if (priv->assoc_request.ieee_mode == IPW_G_MODE)
7160 priv->sys_config.dot11g_auto_detection = 1;
7161 else
7162 priv->sys_config.dot11g_auto_detection = 0;
c848d0af
JK		 7163
7164 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
7165 priv->sys_config.answer_broadcast_ssid_probe = 1;
7166 else
7167 priv->sys_config.answer_broadcast_ssid_probe = 0;
7168
43f66a6c
JK		 7169 err = ipw_send_system_config(priv, &priv->sys_config);
7170 if (err) {
7171 IPW_DEBUG_HC("Attempt to send sys config command failed.\n");
7172 return err;
7173 }
bf79451e 7174
43f66a6c 7175 IPW_DEBUG_ASSOC("Association sensitivity: %d\n", network->stats.rssi);
ea2b26e0 7176 err = ipw_set_sensitivity(priv, network->stats.rssi + IPW_RSSI_TO_DBM);
43f66a6c
JK		 7177 if (err) {
7178 IPW_DEBUG_HC("Attempt to send associate command failed.\n");
7179 return err;
7180 }
7181
7182 /*
7183 * If preemption is enabled, it is possible for the association
7184 * to complete before we return from ipw_send_associate. Therefore
7185 * we have to be sure and update our priviate data first.
7186 */
7187 priv->channel = network->channel;
7188 memcpy(priv->bssid, network->bssid, ETH_ALEN);
bf79451e 7189 priv->status |= STATUS_ASSOCIATING;
43f66a6c
JK		 7190 priv->status &= ~STATUS_SECURITY_UPDATED;
7191
7192 priv->assoc_network = network;
7193
b095c381
JK		 7194#ifdef CONFIG_IPW_QOS
7195 ipw_qos_association(priv, network);
7196#endif
7197
43f66a6c
JK		 7198 err = ipw_send_associate(priv, &priv->assoc_request);
7199 if (err) {
7200 IPW_DEBUG_HC("Attempt to send associate command failed.\n");
7201 return err;
7202 }
bf79451e
JG		 7203
7204 IPW_DEBUG(IPW_DL_STATE, "associating: '%s' " MAC_FMT " \n",
43f66a6c
JK		 7205 escape_essid(priv->essid, priv->essid_len),
7206 MAC_ARG(priv->bssid));
7207
7208 return 0;
7209}
7210
7211static void ipw_roam(void *data)
7212{
7213 struct ipw_priv *priv = data;
7214 struct ieee80211_network *network = NULL;
7215 struct ipw_network_match match = {
7216 .network = priv->assoc_network
7217 };
7218
7219 /* The roaming process is as follows:
bf79451e
JG		 7220 *
7221 * 1. Missed beacon threshold triggers the roaming process by
43f66a6c
JK		 7222 * setting the status ROAM bit and requesting a scan.
7223 * 2. When the scan completes, it schedules the ROAM work
7224 * 3. The ROAM work looks at all of the known networks for one that
7225 * is a better network than the currently associated. If none
7226 * found, the ROAM process is over (ROAM bit cleared)
7227 * 4. If a better network is found, a disassociation request is
7228 * sent.
7229 * 5. When the disassociation completes, the roam work is again
7230 * scheduled. The second time through, the driver is no longer
7231 * associated, and the newly selected network is sent an
bf79451e 7232 * association request.
43f66a6c
JK		 7233 * 6. At this point ,the roaming process is complete and the ROAM
7234 * status bit is cleared.
7235 */
7236
7237 /* If we are no longer associated, and the roaming bit is no longer
7238 * set, then we are not actively roaming, so just return */
7239 if (!(priv->status & (STATUS_ASSOCIATED | STATUS_ROAMING)))
7240 return;
bf79451e 7241
43f66a6c 7242 if (priv->status & STATUS_ASSOCIATED) {
bf79451e 7243 /* First pass through ROAM process -- look for a better
43f66a6c 7244 * network */
a613bffd 7245 unsigned long flags;
43f66a6c
JK		 7246 u8 rssi = priv->assoc_network->stats.rssi;
7247 priv->assoc_network->stats.rssi = -128;
a613bffd 7248 spin_lock_irqsave(&priv->ieee->lock, flags);
43f66a6c
JK		 7249 list_for_each_entry(network, &priv->ieee->network_list, list) {
7250 if (network != priv->assoc_network)
7251 ipw_best_network(priv, &match, network, 1);
7252 }
a613bffd 7253 spin_unlock_irqrestore(&priv->ieee->lock, flags);
43f66a6c 7254 priv->assoc_network->stats.rssi = rssi;
bf79451e 7255
43f66a6c
JK		 7256 if (match.network == priv->assoc_network) {
7257 IPW_DEBUG_ASSOC("No better APs in this network to "
7258 "roam to.\n");
7259 priv->status &= ~STATUS_ROAMING;
7260 ipw_debug_config(priv);
7261 return;
7262 }
bf79451e 7263
43f66a6c
JK		 7264 ipw_send_disassociate(priv, 1);
7265 priv->assoc_network = match.network;
7266
7267 return;
bf79451e 7268 }
43f66a6c
JK		 7269
7270 /* Second pass through ROAM process -- request association */
7271 ipw_compatible_rates(priv, priv->assoc_network, &match.rates);
7272 ipw_associate_network(priv, priv->assoc_network, &match.rates, 1);
7273 priv->status &= ~STATUS_ROAMING;
7274}
7275
c848d0af
JK		 7276static void ipw_bg_roam(void *data)
7277{
7278 struct ipw_priv *priv = data;
4644151b 7279 mutex_lock(&priv->mutex);
c848d0af 7280 ipw_roam(data);
4644151b 7281 mutex_unlock(&priv->mutex);
c848d0af
JK		 7282}
7283
7284static int ipw_associate(void *data)
43f66a6c
JK		 7285{
7286 struct ipw_priv *priv = data;
7287
7288 struct ieee80211_network *network = NULL;
7289 struct ipw_network_match match = {
7290 .network = NULL
7291 };
7292 struct ipw_supported_rates *rates;
7293 struct list_head *element;
a613bffd 7294 unsigned long flags;
43f66a6c 7295
b095c381
JK		 7296 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
7297 IPW_DEBUG_ASSOC("Not attempting association (monitor mode)\n");
7298 return 0;
7299 }
7300
c848d0af 7301 if (priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
afbf30a2
JK		 7302 IPW_DEBUG_ASSOC("Not attempting association (already in "
7303 "progress)\n");
c848d0af
JK		 7304 return 0;
7305 }
7306
e6324726
HL		 7307 if (priv->status & STATUS_DISASSOCIATING) {
7308 IPW_DEBUG_ASSOC("Not attempting association (in "
7309 "disassociating)\n ");
7310 queue_work(priv->workqueue, &priv->associate);
7311 return 0;
7312 }
7313
c848d0af 7314 if (!ipw_is_init(priv) || (priv->status & STATUS_SCANNING)) {
afbf30a2
JK		 7315 IPW_DEBUG_ASSOC("Not attempting association (scanning or not "
7316 "initialized)\n");
c848d0af
JK		 7317 return 0;
7318 }
43f66a6c
JK		 7319
7320 if (!(priv->config & CFG_ASSOCIATE) &&
7321 !(priv->config & (CFG_STATIC_ESSID |
0edd5b44 7322 CFG_STATIC_CHANNEL | CFG_STATIC_BSSID))) {
43f66a6c 7323 IPW_DEBUG_ASSOC("Not attempting association (associate=0)\n");
c848d0af 7324 return 0;
43f66a6c
JK		 7325 }
7326
a613bffd
JK		 7327 /* Protect our use of the network_list */
7328 spin_lock_irqsave(&priv->ieee->lock, flags);
bf79451e 7329 list_for_each_entry(network, &priv->ieee->network_list, list)
0edd5b44 7330 ipw_best_network(priv, &match, network, 0);
43f66a6c
JK		 7331
7332 network = match.network;
7333 rates = &match.rates;
7334
7335 if (network == NULL &&
7336 priv->ieee->iw_mode == IW_MODE_ADHOC &&
7337 priv->config & CFG_ADHOC_CREATE &&
7338 priv->config & CFG_STATIC_ESSID &&
a613bffd 7339 priv->config & CFG_STATIC_CHANNEL &&
43f66a6c
JK		 7340 !list_empty(&priv->ieee->network_free_list)) {
7341 element = priv->ieee->network_free_list.next;
0edd5b44 7342 network = list_entry(element, struct ieee80211_network, list);
43f66a6c
JK		 7343 ipw_adhoc_create(priv, network);
7344 rates = &priv->rates;
7345 list_del(element);
7346 list_add_tail(&network->list, &priv->ieee->network_list);
7347 }
a613bffd 7348 spin_unlock_irqrestore(&priv->ieee->lock, flags);
bf79451e 7349
43f66a6c
JK		 7350 /* If we reached the end of the list, then we don't have any valid
7351 * matching APs */
7352 if (!network) {
7353 ipw_debug_config(priv);
7354
b095c381
JK		 7355 if (!(priv->status & STATUS_SCANNING)) {
7356 if (!(priv->config & CFG_SPEED_SCAN))
7357 queue_delayed_work(priv->workqueue,
7358 &priv->request_scan,
7359 SCAN_INTERVAL);
7360 else
7361 queue_work(priv->workqueue,
7362 &priv->request_scan);
7363 }
bf79451e 7364
c848d0af 7365 return 0;
43f66a6c
JK		 7366 }
7367
7368 ipw_associate_network(priv, network, rates, 0);
c848d0af
JK		 7369
7370 return 1;
7371}
7372
7373static void ipw_bg_associate(void *data)
7374{
7375 struct ipw_priv *priv = data;
4644151b 7376 mutex_lock(&priv->mutex);
c848d0af 7377 ipw_associate(data);
4644151b 7378 mutex_unlock(&priv->mutex);
43f66a6c 7379}
bf79451e 7380
b095c381
JK		 7381static void ipw_rebuild_decrypted_skb(struct ipw_priv *priv,
7382 struct sk_buff *skb)
7383{
7384 struct ieee80211_hdr *hdr;
7385 u16 fc;
7386
7387 hdr = (struct ieee80211_hdr *)skb->data;
7388 fc = le16_to_cpu(hdr->frame_ctl);
7389 if (!(fc & IEEE80211_FCTL_PROTECTED))
7390 return;
7391
7392 fc &= ~IEEE80211_FCTL_PROTECTED;
7393 hdr->frame_ctl = cpu_to_le16(fc);
7394 switch (priv->ieee->sec.level) {
7395 case SEC_LEVEL_3:
7396 /* Remove CCMP HDR */
7397 memmove(skb->data + IEEE80211_3ADDR_LEN,
7398 skb->data + IEEE80211_3ADDR_LEN + 8,
7399 skb->len - IEEE80211_3ADDR_LEN - 8);
f4ff497d 7400 skb_trim(skb, skb->len - 16); /* CCMP_HDR_LEN + CCMP_MIC_LEN */
b095c381
JK		 7401 break;
7402 case SEC_LEVEL_2:
7403 break;
7404 case SEC_LEVEL_1:
7405 /* Remove IV */
7406 memmove(skb->data + IEEE80211_3ADDR_LEN,
7407 skb->data + IEEE80211_3ADDR_LEN + 4,
7408 skb->len - IEEE80211_3ADDR_LEN - 4);
f4ff497d 7409 skb_trim(skb, skb->len - 8); /* IV + ICV */
b095c381
JK		 7410 break;
7411 case SEC_LEVEL_0:
7412 break;
7413 default:
7414 printk(KERN_ERR "Unknow security level %d\n",
7415 priv->ieee->sec.level);
7416 break;
7417 }
43f66a6c 7418}
bf79451e 7419
b095c381
JK		 7420static void ipw_handle_data_packet(struct ipw_priv *priv,
7421 struct ipw_rx_mem_buffer *rxb,
7422 struct ieee80211_rx_stats *stats)
43f66a6c 7423{
567deaf6 7424 struct ieee80211_hdr_4addr *hdr;
43f66a6c
JK		 7425 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7426
7427 /* We received data from the HW, so stop the watchdog */
7428 priv->net_dev->trans_start = jiffies;
7429
bf79451e 7430 /* We only process data packets if the
43f66a6c 7431 * interface is open */
a613bffd 7432 if (unlikely((le16_to_cpu(pkt->u.frame.length) + IPW_RX_FRAME_SIZE) >
43f66a6c
JK		 7433 skb_tailroom(rxb->skb))) {
7434 priv->ieee->stats.rx_errors++;
7435 priv->wstats.discard.misc++;
7436 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7437 return;
7438 } else if (unlikely(!netif_running(priv->net_dev))) {
7439 priv->ieee->stats.rx_dropped++;
7440 priv->wstats.discard.misc++;
7441 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7442 return;
7443 }
7444
7445 /* Advance skb->data to the start of the actual payload */
aaa4d308 7446 skb_reserve(rxb->skb, offsetof(struct ipw_rx_packet, u.frame.data));
43f66a6c
JK		 7447
7448 /* Set the size of the skb to the size of the frame */
a613bffd 7449 skb_put(rxb->skb, le16_to_cpu(pkt->u.frame.length));
43f66a6c
JK		 7450
7451 IPW_DEBUG_RX("Rx packet of %d bytes.\n", rxb->skb->len);
7452
b095c381 7453 /* HW decrypt will not clear the WEP bit, MIC, PN, etc. */
567deaf6
HL		 7454 hdr = (struct ieee80211_hdr_4addr *)rxb->skb->data;
7455 if (priv->ieee->iw_mode != IW_MODE_MONITOR &&
3c19065a 7456 (is_multicast_ether_addr(hdr->addr1) ?
567deaf6 7457 !priv->ieee->host_mc_decrypt : !priv->ieee->host_decrypt))
b095c381
JK		 7458 ipw_rebuild_decrypted_skb(priv, rxb->skb);
7459
bf79451e 7460 if (!ieee80211_rx(priv->ieee, rxb->skb, stats))
43f66a6c 7461 priv->ieee->stats.rx_errors++;
a613bffd 7462 else { /* ieee80211_rx succeeded, so it now owns the SKB */
43f66a6c 7463 rxb->skb = NULL;
b095c381 7464 __ipw_led_activity_on(priv);
a613bffd 7465 }
43f66a6c
JK		 7466}
7467
24a47dbd
MK		 7468#ifdef CONFIG_IEEE80211_RADIOTAP
7469static void ipw_handle_data_packet_monitor(struct ipw_priv *priv,
7470 struct ipw_rx_mem_buffer *rxb,
7471 struct ieee80211_rx_stats *stats)
7472{
7473 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7474 struct ipw_rx_frame *frame = &pkt->u.frame;
7475
7476 /* initial pull of some data */
7477 u16 received_channel = frame->received_channel;
7478 u8 antennaAndPhy = frame->antennaAndPhy;
7479 s8 antsignal = frame->rssi_dbm - IPW_RSSI_TO_DBM; /* call it signed anyhow */
7480 u16 pktrate = frame->rate;
7481
7482 /* Magic struct that slots into the radiotap header -- no reason
7483 * to build this manually element by element, we can write it much
7484 * more efficiently than we can parse it. ORDER MATTERS HERE */
7485 struct ipw_rt_hdr {
7486 struct ieee80211_radiotap_header rt_hdr;
7487 u8 rt_flags; /* radiotap packet flags */
7488 u8 rt_rate; /* rate in 500kb/s */
7489 u16 rt_channel; /* channel in mhz */
7490 u16 rt_chbitmask; /* channel bitfield */
7491 s8 rt_dbmsignal; /* signal in dbM, kluged to signed */
7492 u8 rt_antenna; /* antenna number */
7493 } *ipw_rt;
7494
7495 short len = le16_to_cpu(pkt->u.frame.length);
7496
7497 /* We received data from the HW, so stop the watchdog */
7498 priv->net_dev->trans_start = jiffies;
7499
7500 /* We only process data packets if the
7501 * interface is open */
7502 if (unlikely((le16_to_cpu(pkt->u.frame.length) + IPW_RX_FRAME_SIZE) >
7503 skb_tailroom(rxb->skb))) {
7504 priv->ieee->stats.rx_errors++;
7505 priv->wstats.discard.misc++;
7506 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7507 return;
7508 } else if (unlikely(!netif_running(priv->net_dev))) {
7509 priv->ieee->stats.rx_dropped++;
7510 priv->wstats.discard.misc++;
7511 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7512 return;
7513 }
7514
7515 /* Libpcap 0.9.3+ can handle variable length radiotap, so we'll use
7516 * that now */
7517 if (len > IPW_RX_BUF_SIZE - sizeof(struct ipw_rt_hdr)) {
7518 /* FIXME: Should alloc bigger skb instead */
7519 priv->ieee->stats.rx_dropped++;
7520 priv->wstats.discard.misc++;
7521 IPW_DEBUG_DROP("Dropping too large packet in monitor\n");
7522 return;
7523 }
7524
7525 /* copy the frame itself */
7526 memmove(rxb->skb->data + sizeof(struct ipw_rt_hdr),
7527 rxb->skb->data + IPW_RX_FRAME_SIZE, len);
7528
7529 /* Zero the radiotap static buffer ... We only need to zero the bytes NOT
7530 * part of our real header, saves a little time.
7531 *
7532 * No longer necessary since we fill in all our data. Purge before merging
7533 * patch officially.
7534 * memset(rxb->skb->data + sizeof(struct ipw_rt_hdr), 0,
7535 * IEEE80211_RADIOTAP_HDRLEN - sizeof(struct ipw_rt_hdr));
7536 */
7537
7538 ipw_rt = (struct ipw_rt_hdr *)rxb->skb->data;
7539
7540 ipw_rt->rt_hdr.it_version = PKTHDR_RADIOTAP_VERSION;
7541 ipw_rt->rt_hdr.it_pad = 0; /* always good to zero */
7542 ipw_rt->rt_hdr.it_len = sizeof(struct ipw_rt_hdr); /* total header+data */
7543
7544 /* Big bitfield of all the fields we provide in radiotap */
7545 ipw_rt->rt_hdr.it_present =
7546 ((1 << IEEE80211_RADIOTAP_FLAGS) |
7547 (1 << IEEE80211_RADIOTAP_RATE) |
7548 (1 << IEEE80211_RADIOTAP_CHANNEL) |
7549 (1 << IEEE80211_RADIOTAP_DBM_ANTSIGNAL) |
7550 (1 << IEEE80211_RADIOTAP_ANTENNA));
7551
7552 /* Zero the flags, we'll add to them as we go */
7553 ipw_rt->rt_flags = 0;
7554
7555 /* Convert signal to DBM */
7556 ipw_rt->rt_dbmsignal = antsignal;
7557
7558 /* Convert the channel data and set the flags */
7559 ipw_rt->rt_channel = cpu_to_le16(ieee80211chan2mhz(received_channel));
7560 if (received_channel > 14) { /* 802.11a */
7561 ipw_rt->rt_chbitmask =
7562 cpu_to_le16((IEEE80211_CHAN_OFDM | IEEE80211_CHAN_5GHZ));
7563 } else if (antennaAndPhy & 32) { /* 802.11b */
7564 ipw_rt->rt_chbitmask =
7565 cpu_to_le16((IEEE80211_CHAN_CCK | IEEE80211_CHAN_2GHZ));
7566 } else { /* 802.11g */
7567 ipw_rt->rt_chbitmask =
7568 (IEEE80211_CHAN_OFDM | IEEE80211_CHAN_2GHZ);
7569 }
7570
7571 /* set the rate in multiples of 500k/s */
7572 switch (pktrate) {
7573 case IPW_TX_RATE_1MB:
7574 ipw_rt->rt_rate = 2;
7575 break;
7576 case IPW_TX_RATE_2MB:
7577 ipw_rt->rt_rate = 4;
7578 break;
7579 case IPW_TX_RATE_5MB:
7580 ipw_rt->rt_rate = 10;
7581 break;
7582 case IPW_TX_RATE_6MB:
7583 ipw_rt->rt_rate = 12;
7584 break;
7585 case IPW_TX_RATE_9MB:
7586 ipw_rt->rt_rate = 18;
7587 break;
7588 case IPW_TX_RATE_11MB:
7589 ipw_rt->rt_rate = 22;
7590 break;
7591 case IPW_TX_RATE_12MB:
7592 ipw_rt->rt_rate = 24;
7593 break;
7594 case IPW_TX_RATE_18MB:
7595 ipw_rt->rt_rate = 36;
7596 break;
7597 case IPW_TX_RATE_24MB:
7598 ipw_rt->rt_rate = 48;
7599 break;
7600 case IPW_TX_RATE_36MB:
7601 ipw_rt->rt_rate = 72;
7602 break;
7603 case IPW_TX_RATE_48MB:
7604 ipw_rt->rt_rate = 96;
7605 break;
7606 case IPW_TX_RATE_54MB:
7607 ipw_rt->rt_rate = 108;
7608 break;
7609 default:
7610 ipw_rt->rt_rate = 0;
7611 break;
7612 }
7613
7614 /* antenna number */
7615 ipw_rt->rt_antenna = (antennaAndPhy & 3); /* Is this right? */
7616
7617 /* set the preamble flag if we have it */
7618 if ((antennaAndPhy & 64))
7619 ipw_rt->rt_flags |= IEEE80211_RADIOTAP_F_SHORTPRE;
7620
7621 /* Set the size of the skb to the size of the frame */
7622 skb_put(rxb->skb, len + sizeof(struct ipw_rt_hdr));
43f66a6c
JK		 7623
7624 IPW_DEBUG_RX("Rx packet of %d bytes.\n", rxb->skb->len);
7625
bf79451e 7626 if (!ieee80211_rx(priv->ieee, rxb->skb, stats))
43f66a6c 7627 priv->ieee->stats.rx_errors++;
24a47dbd
MK		 7628 else { /* ieee80211_rx succeeded, so it now owns the SKB */
7629 rxb->skb = NULL;
7630 /* no LED during capture */
7631 }
7632}
7633#endif
7634
858119e1 7635static int is_network_packet(struct ipw_priv *priv,
ea2b26e0
JK		 7636 struct ieee80211_hdr_4addr *header)
7637{
7638 /* Filter incoming packets to determine if they are targetted toward
7639 * this network, discarding packets coming from ourselves */
7640 switch (priv->ieee->iw_mode) {
a613bffd 7641 case IW_MODE_ADHOC: /* Header: Dest. | Source | BSSID */
c848d0af
JK		 7642 /* packets from our adapter are dropped (echo) */
7643 if (!memcmp(header->addr2, priv->net_dev->dev_addr, ETH_ALEN))
7644 return 0;
7645
90700fd9 7646 /* {broad,multi}cast packets to our BSSID go through */
3c19065a 7647 if (is_multicast_ether_addr(header->addr1))
ea2b26e0 7648 return !memcmp(header->addr3, priv->bssid, ETH_ALEN);
a613bffd
JK		 7649
7650 /* packets to our adapter go through */
7651 return !memcmp(header->addr1, priv->net_dev->dev_addr,
7652 ETH_ALEN);
a613bffd 7653
90700fd9 7654 case IW_MODE_INFRA: /* Header: Dest. | BSSID | Source */
c848d0af
JK		 7655 /* packets from our adapter are dropped (echo) */
7656 if (!memcmp(header->addr3, priv->net_dev->dev_addr, ETH_ALEN))
7657 return 0;
7658
90700fd9 7659 /* {broad,multi}cast packets to our BSS go through */
3c19065a 7660 if (is_multicast_ether_addr(header->addr1))
a613bffd
JK		 7661 return !memcmp(header->addr2, priv->bssid, ETH_ALEN);
7662
7663 /* packets to our adapter go through */
7664 return !memcmp(header->addr1, priv->net_dev->dev_addr,
7665 ETH_ALEN);
ea2b26e0 7666 }
a613bffd 7667
ea2b26e0
JK		 7668 return 1;
7669}
7670
afbf30a2
JK		 7671#define IPW_PACKET_RETRY_TIME HZ
7672
858119e1 7673static int is_duplicate_packet(struct ipw_priv *priv,
afbf30a2
JK		 7674 struct ieee80211_hdr_4addr *header)
7675{
afbf30a2
JK		 7676 u16 sc = le16_to_cpu(header->seq_ctl);
7677 u16 seq = WLAN_GET_SEQ_SEQ(sc);
7678 u16 frag = WLAN_GET_SEQ_FRAG(sc);
7679 u16 *last_seq, *last_frag;
7680 unsigned long *last_time;
7681
7682 switch (priv->ieee->iw_mode) {
7683 case IW_MODE_ADHOC:
7684 {
7685 struct list_head *p;
7686 struct ipw_ibss_seq *entry = NULL;
7687 u8 *mac = header->addr2;
7688 int index = mac[5] % IPW_IBSS_MAC_HASH_SIZE;
7689
7690 __list_for_each(p, &priv->ibss_mac_hash[index]) {
7691 entry =
7692 list_entry(p, struct ipw_ibss_seq, list);
7693 if (!memcmp(entry->mac, mac, ETH_ALEN))
7694 break;
7695 }
7696 if (p == &priv->ibss_mac_hash[index]) {
7697 entry = kmalloc(sizeof(*entry), GFP_ATOMIC);
7698 if (!entry) {
7699 IPW_ERROR
7700 ("Cannot malloc new mac entry\n");
7701 return 0;
7702 }
7703 memcpy(entry->mac, mac, ETH_ALEN);
7704 entry->seq_num = seq;
7705 entry->frag_num = frag;
7706 entry->packet_time = jiffies;
7707 list_add(&entry->list,
7708 &priv->ibss_mac_hash[index]);
7709 return 0;
7710 }
7711 last_seq = &entry->seq_num;
7712 last_frag = &entry->frag_num;
7713 last_time = &entry->packet_time;
7714 break;
7715 }
7716 case IW_MODE_INFRA:
7717 last_seq = &priv->last_seq_num;
7718 last_frag = &priv->last_frag_num;
7719 last_time = &priv->last_packet_time;
7720 break;
7721 default:
7722 return 0;
7723 }
7724 if ((*last_seq == seq) &&
7725 time_after(*last_time + IPW_PACKET_RETRY_TIME, jiffies)) {
7726 if (*last_frag == frag)
7727 goto drop;
7728 if (*last_frag + 1 != frag)
7729 /* out-of-order fragment */
7730 goto drop;
afbf30a2
JK		 7731 } else
7732 *last_seq = seq;
7733
f57ce7ce 7734 *last_frag = frag;
afbf30a2
JK		 7735 *last_time = jiffies;
7736 return 0;
7737
7738 drop:
87b016cb
ZY		 7739 /* Comment this line now since we observed the card receives
7740 * duplicate packets but the FCTL_RETRY bit is not set in the
7741 * IBSS mode with fragmentation enabled.
7742 BUG_ON(!(le16_to_cpu(header->frame_ctl) & IEEE80211_FCTL_RETRY)); */
afbf30a2
JK		 7743 return 1;
7744}
7745
b095c381
JK		 7746static void ipw_handle_mgmt_packet(struct ipw_priv *priv,
7747 struct ipw_rx_mem_buffer *rxb,
7748 struct ieee80211_rx_stats *stats)
7749{
7750 struct sk_buff *skb = rxb->skb;
7751 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)skb->data;
7752 struct ieee80211_hdr_4addr *header = (struct ieee80211_hdr_4addr *)
7753 (skb->data + IPW_RX_FRAME_SIZE);
7754
7755 ieee80211_rx_mgt(priv->ieee, header, stats);
7756
7757 if (priv->ieee->iw_mode == IW_MODE_ADHOC &&
7758 ((WLAN_FC_GET_STYPE(le16_to_cpu(header->frame_ctl)) ==
7759 IEEE80211_STYPE_PROBE_RESP) ||
7760 (WLAN_FC_GET_STYPE(le16_to_cpu(header->frame_ctl)) ==
7761 IEEE80211_STYPE_BEACON))) {
7762 if (!memcmp(header->addr3, priv->bssid, ETH_ALEN))
7763 ipw_add_station(priv, header->addr2);
7764 }
7765
7766 if (priv->config & CFG_NET_STATS) {
7767 IPW_DEBUG_HC("sending stat packet\n");
7768
7769 /* Set the size of the skb to the size of the full
7770 * ipw header and 802.11 frame */
7771 skb_put(skb, le16_to_cpu(pkt->u.frame.length) +
7772 IPW_RX_FRAME_SIZE);
7773
7774 /* Advance past the ipw packet header to the 802.11 frame */
7775 skb_pull(skb, IPW_RX_FRAME_SIZE);
7776
7777 /* Push the ieee80211_rx_stats before the 802.11 frame */
7778 memcpy(skb_push(skb, sizeof(*stats)), stats, sizeof(*stats));
7779
7780 skb->dev = priv->ieee->dev;
7781
7782 /* Point raw at the ieee80211_stats */
7783 skb->mac.raw = skb->data;
7784
7785 skb->pkt_type = PACKET_OTHERHOST;
7786 skb->protocol = __constant_htons(ETH_P_80211_STATS);
7787 memset(skb->cb, 0, sizeof(rxb->skb->cb));
7788 netif_rx(skb);
43f66a6c 7789 rxb->skb = NULL;
b095c381 7790 }
43f66a6c
JK		 7791}
7792
43f66a6c
JK		 7793/*
7794 * Main entry function for recieving a packet with 80211 headers. This
7795 * should be called when ever the FW has notified us that there is a new
7796 * skb in the recieve queue.
7797 */
7798static void ipw_rx(struct ipw_priv *priv)
7799{
7800 struct ipw_rx_mem_buffer *rxb;
7801 struct ipw_rx_packet *pkt;
0dacca1f 7802 struct ieee80211_hdr_4addr *header;
43f66a6c
JK		 7803 u32 r, w, i;
7804 u8 network_packet;
7805
b095c381
JK		 7806 r = ipw_read32(priv, IPW_RX_READ_INDEX);
7807 w = ipw_read32(priv, IPW_RX_WRITE_INDEX);
43f66a6c
JK		 7808 i = (priv->rxq->processed + 1) % RX_QUEUE_SIZE;
7809
7810 while (i != r) {
7811 rxb = priv->rxq->queue[i];
43f66a6c
JK		 7812 if (unlikely(rxb == NULL)) {
7813 printk(KERN_CRIT "Queue not allocated!\n");
7814 break;
7815 }
43f66a6c
JK		 7816 priv->rxq->queue[i] = NULL;
7817
7818 pci_dma_sync_single_for_cpu(priv->pci_dev, rxb->dma_addr,
b095c381 7819 IPW_RX_BUF_SIZE,
43f66a6c
JK		 7820 PCI_DMA_FROMDEVICE);
7821
7822 pkt = (struct ipw_rx_packet *)rxb->skb->data;
7823 IPW_DEBUG_RX("Packet: type=%02X seq=%02X bits=%02X\n",
7824 pkt->header.message_type,
0edd5b44 7825 pkt->header.rx_seq_num, pkt->header.control_bits);
43f66a6c
JK		 7826
7827 switch (pkt->header.message_type) {
0edd5b44
JG		 7828 case RX_FRAME_TYPE: /* 802.11 frame */ {
7829 struct ieee80211_rx_stats stats = {
c848d0af
JK		 7830 .rssi =
7831 le16_to_cpu(pkt->u.frame.rssi_dbm) -
0edd5b44 7832 IPW_RSSI_TO_DBM,
c848d0af
JK		 7833 .signal =
7834 le16_to_cpu(pkt->u.frame.signal),
7835 .noise =
7836 le16_to_cpu(pkt->u.frame.noise),
0edd5b44
JG		 7837 .rate = pkt->u.frame.rate,
7838 .mac_time = jiffies,
7839 .received_channel =
7840 pkt->u.frame.received_channel,
7841 .freq =
7842 (pkt->u.frame.
7843 control & (1 << 0)) ?
7844 IEEE80211_24GHZ_BAND :
7845 IEEE80211_52GHZ_BAND,
a613bffd 7846 .len = le16_to_cpu(pkt->u.frame.length),
0edd5b44
JG		 7847 };
7848
7849 if (stats.rssi != 0)
7850 stats.mask |= IEEE80211_STATMASK_RSSI;
7851 if (stats.signal != 0)
7852 stats.mask |= IEEE80211_STATMASK_SIGNAL;
c848d0af
JK		 7853 if (stats.noise != 0)
7854 stats.mask |= IEEE80211_STATMASK_NOISE;
0edd5b44
JG		 7855 if (stats.rate != 0)
7856 stats.mask |= IEEE80211_STATMASK_RATE;
7857
7858 priv->rx_packets++;
43f66a6c 7859
b095c381 7860#ifdef CONFIG_IPW2200_MONITOR
0edd5b44 7861 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
24a47dbd
MK		 7862#ifdef CONFIG_IEEE80211_RADIOTAP
7863 ipw_handle_data_packet_monitor(priv,
7864 rxb,
7865 &stats);
7866#else
0edd5b44
JG		 7867 ipw_handle_data_packet(priv, rxb,
7868 &stats);
24a47dbd 7869#endif
0edd5b44
JG		 7870 break;
7871 }
43f66a6c 7872#endif
bf79451e 7873
0edd5b44 7874 header =
0dacca1f
JK		 7875 (struct ieee80211_hdr_4addr *)(rxb->skb->
7876 data +
7877 IPW_RX_FRAME_SIZE);
43f66a6c
JK		 7878 /* TODO: Check Ad-Hoc dest/source and make sure
7879 * that we are actually parsing these packets
bf79451e 7880 * correctly -- we should probably use the
43f66a6c
JK		 7881 * frame control of the packet and disregard
7882 * the current iw_mode */
0edd5b44 7883
ea2b26e0
JK		 7884 network_packet =
7885 is_network_packet(priv, header);
0edd5b44
JG		 7886 if (network_packet && priv->assoc_network) {
7887 priv->assoc_network->stats.rssi =
7888 stats.rssi;
7889 average_add(&priv->average_rssi,
7890 stats.rssi);
7891 priv->last_rx_rssi = stats.rssi;
7892 }
7893
7894 IPW_DEBUG_RX("Frame: len=%u\n",
a613bffd 7895 le16_to_cpu(pkt->u.frame.length));
0edd5b44 7896
a613bffd 7897 if (le16_to_cpu(pkt->u.frame.length) <
9d0be03a
ZY		 7898 ieee80211_get_hdrlen(le16_to_cpu(
7899 header->frame_ctl))) {
0edd5b44
JG		 7900 IPW_DEBUG_DROP
7901 ("Received packet is too small. "
7902 "Dropping.\n");
7903 priv->ieee->stats.rx_errors++;
7904 priv->wstats.discard.misc++;
7905 break;
7906 }
7907
a613bffd
JK		 7908 switch (WLAN_FC_GET_TYPE
7909 (le16_to_cpu(header->frame_ctl))) {
b095c381 7910
0edd5b44 7911 case IEEE80211_FTYPE_MGMT:
b095c381
JK		 7912 ipw_handle_mgmt_packet(priv, rxb,
7913 &stats);
0edd5b44
JG		 7914 break;
7915
7916 case IEEE80211_FTYPE_CTL:
7917 break;
7918
7919 case IEEE80211_FTYPE_DATA:
afbf30a2
JK		 7920 if (unlikely(!network_packet ||
7921 is_duplicate_packet(priv,
7922 header)))
7923 {
0edd5b44
JG		 7924 IPW_DEBUG_DROP("Dropping: "
7925 MAC_FMT ", "
7926 MAC_FMT ", "
7927 MAC_FMT "\n",
7928 MAC_ARG(header->
7929 addr1),
7930 MAC_ARG(header->
7931 addr2),
7932 MAC_ARG(header->
7933 addr3));
b095c381
JK		 7934 break;
7935 }
7936
7937 ipw_handle_data_packet(priv, rxb,
7938 &stats);
7939
0edd5b44
JG		 7940 break;
7941 }
43f66a6c
JK		 7942 break;
7943 }
bf79451e 7944
0edd5b44
JG		 7945 case RX_HOST_NOTIFICATION_TYPE:{
7946 IPW_DEBUG_RX
7947 ("Notification: subtype=%02X flags=%02X size=%d\n",
43f66a6c
JK		 7948 pkt->u.notification.subtype,
7949 pkt->u.notification.flags,
7950 pkt->u.notification.size);
0edd5b44
JG		 7951 ipw_rx_notification(priv, &pkt->u.notification);
7952 break;
7953 }
43f66a6c
JK		 7954
7955 default:
7956 IPW_DEBUG_RX("Bad Rx packet of type %d\n",
7957 pkt->header.message_type);
7958 break;
7959 }
bf79451e
JG		 7960
7961 /* For now we just don't re-use anything. We can tweak this
7962 * later to try and re-use notification packets and SKBs that
43f66a6c
JK		 7963 * fail to Rx correctly */
7964 if (rxb->skb != NULL) {
7965 dev_kfree_skb_any(rxb->skb);
7966 rxb->skb = NULL;
7967 }
bf79451e 7968
43f66a6c 7969 pci_unmap_single(priv->pci_dev, rxb->dma_addr,
b095c381 7970 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c 7971 list_add_tail(&rxb->list, &priv->rxq->rx_used);
bf79451e 7972
43f66a6c
JK		 7973 i = (i + 1) % RX_QUEUE_SIZE;
7974 }
7975
7976 /* Backtrack one entry */
7977 priv->rxq->processed = (i ? i : RX_QUEUE_SIZE) - 1;
7978
7979 ipw_rx_queue_restock(priv);
7980}
7981
afbf30a2
JK		 7982#define DEFAULT_RTS_THRESHOLD 2304U
7983#define MIN_RTS_THRESHOLD 1U
7984#define MAX_RTS_THRESHOLD 2304U
7985#define DEFAULT_BEACON_INTERVAL 100U
7986#define DEFAULT_SHORT_RETRY_LIMIT 7U
7987#define DEFAULT_LONG_RETRY_LIMIT 4U
7988
7989static int ipw_sw_reset(struct ipw_priv *priv, int init)
43f66a6c 7990{
afbf30a2
JK		 7991 int band, modulation;
7992 int old_mode = priv->ieee->iw_mode;
43f66a6c 7993
afbf30a2
JK		 7994 /* Initialize module parameter values here */
7995 priv->config = 0;
43f66a6c 7996
afbf30a2
JK		 7997 /* We default to disabling the LED code as right now it causes
7998 * too many systems to lock up... */
7999 if (!led)
8000 priv->config |= CFG_NO_LED;
43f66a6c 8001
afbf30a2
JK		 8002 if (associate)
8003 priv->config |= CFG_ASSOCIATE;
8004 else
8005 IPW_DEBUG_INFO("Auto associate disabled.\n");
bf79451e 8006
afbf30a2
JK		 8007 if (auto_create)
8008 priv->config |= CFG_ADHOC_CREATE;
8009 else
8010 IPW_DEBUG_INFO("Auto adhoc creation disabled.\n");
43f66a6c 8011
17ed081d
ZY		 8012 priv->config &= ~CFG_STATIC_ESSID;
8013 priv->essid_len = 0;
8014 memset(priv->essid, 0, IW_ESSID_MAX_SIZE);
8015
afbf30a2
JK		 8016 if (disable) {
8017 priv->status |= STATUS_RF_KILL_SW;
8018 IPW_DEBUG_INFO("Radio disabled.\n");
43f66a6c 8019 }
bf79451e 8020
afbf30a2
JK		 8021 if (channel != 0) {
8022 priv->config |= CFG_STATIC_CHANNEL;
8023 priv->channel = channel;
8024 IPW_DEBUG_INFO("Bind to static channel %d\n", channel);
8025 /* TODO: Validate that provided channel is in range */
43f66a6c 8026 }
afbf30a2
JK		 8027#ifdef CONFIG_IPW_QOS
8028 ipw_qos_init(priv, qos_enable, qos_burst_enable,
8029 burst_duration_CCK, burst_duration_OFDM);
8030#endif /* CONFIG_IPW_QOS */
43f66a6c 8031
afbf30a2
JK		 8032 switch (mode) {
8033 case 1:
8034 priv->ieee->iw_mode = IW_MODE_ADHOC;
8035 priv->net_dev->type = ARPHRD_ETHER;
8036
8037 break;
8038#ifdef CONFIG_IPW2200_MONITOR
8039 case 2:
8040 priv->ieee->iw_mode = IW_MODE_MONITOR;
24a47dbd
MK		 8041#ifdef CONFIG_IEEE80211_RADIOTAP
8042 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
8043#else
afbf30a2 8044 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 8045#endif
afbf30a2
JK		 8046 break;
8047#endif
8048 default:
8049 case 0:
8050 priv->net_dev->type = ARPHRD_ETHER;
8051 priv->ieee->iw_mode = IW_MODE_INFRA;
8052 break;
43f66a6c
JK		 8053 }
8054
afbf30a2
JK		 8055 if (hwcrypto) {
8056 priv->ieee->host_encrypt = 0;
8057 priv->ieee->host_encrypt_msdu = 0;
8058 priv->ieee->host_decrypt = 0;
567deaf6 8059 priv->ieee->host_mc_decrypt = 0;
afbf30a2
JK		 8060 }
8061 IPW_DEBUG_INFO("Hardware crypto [%s]\n", hwcrypto ? "on" : "off");
43f66a6c 8062
e402c937
ZY		 8063 /* IPW2200/2915 is abled to do hardware fragmentation. */
8064 priv->ieee->host_open_frag = 0;
bf79451e 8065
afbf30a2
JK		 8066 if ((priv->pci_dev->device == 0x4223) ||
8067 (priv->pci_dev->device == 0x4224)) {
8068 if (init)
8069 printk(KERN_INFO DRV_NAME
8070 ": Detected Intel PRO/Wireless 2915ABG Network "
8071 "Connection\n");
8072 priv->ieee->abg_true = 1;
8073 band = IEEE80211_52GHZ_BAND | IEEE80211_24GHZ_BAND;
8074 modulation = IEEE80211_OFDM_MODULATION |
8075 IEEE80211_CCK_MODULATION;
8076 priv->adapter = IPW_2915ABG;
8077 priv->ieee->mode = IEEE_A | IEEE_G | IEEE_B;
43f66a6c 8078 } else {
afbf30a2
JK		 8079 if (init)
8080 printk(KERN_INFO DRV_NAME
8081 ": Detected Intel PRO/Wireless 2200BG Network "
8082 "Connection\n");
bf79451e 8083
afbf30a2
JK		 8084 priv->ieee->abg_true = 0;
8085 band = IEEE80211_24GHZ_BAND;
8086 modulation = IEEE80211_OFDM_MODULATION |
8087 IEEE80211_CCK_MODULATION;
8088 priv->adapter = IPW_2200BG;
8089 priv->ieee->mode = IEEE_G | IEEE_B;
43f66a6c
JK		 8090 }
8091
afbf30a2
JK		 8092 priv->ieee->freq_band = band;
8093 priv->ieee->modulation = modulation;
43f66a6c 8094
afbf30a2 8095 priv->rates_mask = IEEE80211_DEFAULT_RATES_MASK;
bf79451e 8096
afbf30a2
JK		 8097 priv->disassociate_threshold = IPW_MB_DISASSOCIATE_THRESHOLD_DEFAULT;
8098 priv->roaming_threshold = IPW_MB_ROAMING_THRESHOLD_DEFAULT;
43f66a6c 8099
afbf30a2
JK		 8100 priv->rts_threshold = DEFAULT_RTS_THRESHOLD;
8101 priv->short_retry_limit = DEFAULT_SHORT_RETRY_LIMIT;
8102 priv->long_retry_limit = DEFAULT_LONG_RETRY_LIMIT;
43f66a6c 8103
afbf30a2
JK		 8104 /* If power management is turned on, default to AC mode */
8105 priv->power_mode = IPW_POWER_AC;
8106 priv->tx_power = IPW_TX_POWER_DEFAULT;
8107
0ece35b5 8108 return old_mode == priv->ieee->iw_mode;
43f66a6c
JK		 8109}
8110
8111/*
8112 * This file defines the Wireless Extension handlers. It does not
8113 * define any methods of hardware manipulation and relies on the
8114 * functions defined in ipw_main to provide the HW interaction.
bf79451e
JG		 8115 *
8116 * The exception to this is the use of the ipw_get_ordinal()
43f66a6c
JK		 8117 * function used to poll the hardware vs. making unecessary calls.
8118 *
8119 */
8120
bf79451e
JG		 8121static int ipw_wx_get_name(struct net_device *dev,
8122 struct iw_request_info *info,
43f66a6c
JK		 8123 union iwreq_data *wrqu, char *extra)
8124{
8125 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8126 mutex_lock(&priv->mutex);
c848d0af 8127 if (priv->status & STATUS_RF_KILL_MASK)
a613bffd 8128 strcpy(wrqu->name, "radio off");
c848d0af 8129 else if (!(priv->status & STATUS_ASSOCIATED))
43f66a6c 8130 strcpy(wrqu->name, "unassociated");
bf79451e 8131 else
43f66a6c
JK		 8132 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11%c",
8133 ipw_modes[priv->assoc_request.ieee_mode]);
8134 IPW_DEBUG_WX("Name: %s\n", wrqu->name);
4644151b 8135 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8136 return 0;
8137}
8138
8139static int ipw_set_channel(struct ipw_priv *priv, u8 channel)
8140{
8141 if (channel == 0) {
8142 IPW_DEBUG_INFO("Setting channel to ANY (0)\n");
8143 priv->config &= ~CFG_STATIC_CHANNEL;
c848d0af
JK		 8144 IPW_DEBUG_ASSOC("Attempting to associate with new "
8145 "parameters.\n");
8146 ipw_associate(priv);
43f66a6c
JK		 8147 return 0;
8148 }
8149
8150 priv->config |= CFG_STATIC_CHANNEL;
8151
8152 if (priv->channel == channel) {
0edd5b44
JG		 8153 IPW_DEBUG_INFO("Request to set channel to current value (%d)\n",
8154 channel);
43f66a6c
JK		 8155 return 0;
8156 }
8157
8158 IPW_DEBUG_INFO("Setting channel to %i\n", (int)channel);
8159 priv->channel = channel;
8160
b095c381
JK		 8161#ifdef CONFIG_IPW2200_MONITOR
8162 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 8163 int i;
b095c381 8164 if (priv->status & STATUS_SCANNING) {
afbf30a2 8165 IPW_DEBUG_SCAN("Scan abort triggered due to "
b095c381 8166 "channel change.\n");
afbf30a2 8167 ipw_abort_scan(priv);
b095c381
JK		 8168 }
8169
8170 for (i = 1000; i && (priv->status & STATUS_SCANNING); i--)
8171 udelay(10);
8172
8173 if (priv->status & STATUS_SCANNING)
8174 IPW_DEBUG_SCAN("Still scanning...\n");
8175 else
8176 IPW_DEBUG_SCAN("Took %dms to abort current scan\n",
8177 1000 - i);
8178
8179 return 0;
43f66a6c 8180 }
b095c381
JK		 8181#endif /* CONFIG_IPW2200_MONITOR */
8182
c848d0af
JK		 8183 /* Network configuration changed -- force [re]association */
8184 IPW_DEBUG_ASSOC("[re]association triggered due to channel change.\n");
8185 if (!ipw_disassociate(priv))
43f66a6c 8186 ipw_associate(priv);
43f66a6c
JK		 8187
8188 return 0;
8189}
8190
bf79451e
JG		 8191static int ipw_wx_set_freq(struct net_device *dev,
8192 struct iw_request_info *info,
8193 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 8194{
8195 struct ipw_priv *priv = ieee80211_priv(dev);
1867b117 8196 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
43f66a6c 8197 struct iw_freq *fwrq = &wrqu->freq;
afbf30a2 8198 int ret = 0, i;
1fe0adb4
LH		 8199 u8 channel, flags;
8200 int band;
b095c381
JK		 8201
8202 if (fwrq->m == 0) {
8203 IPW_DEBUG_WX("SET Freq/Channel -> any\n");
4644151b 8204 mutex_lock(&priv->mutex);
b095c381 8205 ret = ipw_set_channel(priv, 0);
4644151b 8206 mutex_unlock(&priv->mutex);
b095c381
JK		 8207 return ret;
8208 }
43f66a6c
JK		 8209 /* if setting by freq convert to channel */
8210 if (fwrq->e == 1) {
1867b117 8211 channel = ieee80211_freq_to_channel(priv->ieee, fwrq->m);
b095c381
JK		 8212 if (channel == 0)
8213 return -EINVAL;
8214 } else
8215 channel = fwrq->m;
bf79451e 8216
1867b117 8217 if (!(band = ieee80211_is_valid_channel(priv->ieee, channel)))
b095c381 8218 return -EINVAL;
43f66a6c 8219
1fe0adb4 8220 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
1867b117 8221 i = ieee80211_channel_to_index(priv->ieee, channel);
afbf30a2
JK		 8222 if (i == -1)
8223 return -EINVAL;
bf79451e 8224
1fe0adb4
LH		 8225 flags = (band == IEEE80211_24GHZ_BAND) ?
8226 geo->bg[i].flags : geo->a[i].flags;
8227 if (flags & IEEE80211_CH_PASSIVE_ONLY) {
afbf30a2
JK		 8228 IPW_DEBUG_WX("Invalid Ad-Hoc channel for 802.11a\n");
8229 return -EINVAL;
43f66a6c
JK		 8230 }
8231 }
bf79451e 8232
43f66a6c 8233 IPW_DEBUG_WX("SET Freq/Channel -> %d \n", fwrq->m);
4644151b 8234 mutex_lock(&priv->mutex);
b095c381 8235 ret = ipw_set_channel(priv, channel);
4644151b 8236 mutex_unlock(&priv->mutex);
c848d0af 8237 return ret;
43f66a6c
JK		 8238}
8239
bf79451e
JG		 8240static int ipw_wx_get_freq(struct net_device *dev,
8241 struct iw_request_info *info,
43f66a6c
JK		 8242 union iwreq_data *wrqu, char *extra)
8243{
8244 struct ipw_priv *priv = ieee80211_priv(dev);
8245
8246 wrqu->freq.e = 0;
8247
8248 /* If we are associated, trying to associate, or have a statically
8249 * configured CHANNEL then return that; otherwise return ANY */
4644151b 8250 mutex_lock(&priv->mutex);
43f66a6c
JK		 8251 if (priv->config & CFG_STATIC_CHANNEL ||
8252 priv->status & (STATUS_ASSOCIATING | STATUS_ASSOCIATED))
8253 wrqu->freq.m = priv->channel;
bf79451e 8254 else
43f66a6c
JK		 8255 wrqu->freq.m = 0;
8256
4644151b 8257 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8258 IPW_DEBUG_WX("GET Freq/Channel -> %d \n", priv->channel);
8259 return 0;
8260}
8261
bf79451e
JG		 8262static int ipw_wx_set_mode(struct net_device *dev,
8263 struct iw_request_info *info,
43f66a6c
JK		 8264 union iwreq_data *wrqu, char *extra)
8265{
8266 struct ipw_priv *priv = ieee80211_priv(dev);
8267 int err = 0;
8268
8269 IPW_DEBUG_WX("Set MODE: %d\n", wrqu->mode);
8270
43f66a6c 8271 switch (wrqu->mode) {
b095c381 8272#ifdef CONFIG_IPW2200_MONITOR
43f66a6c
JK		 8273 case IW_MODE_MONITOR:
8274#endif
8275 case IW_MODE_ADHOC:
8276 case IW_MODE_INFRA:
8277 break;
8278 case IW_MODE_AUTO:
8279 wrqu->mode = IW_MODE_INFRA;
8280 break;
8281 default:
8282 return -EINVAL;
8283 }
b095c381
JK		 8284 if (wrqu->mode == priv->ieee->iw_mode)
8285 return 0;
43f66a6c 8286
4644151b 8287 mutex_lock(&priv->mutex);
43f66a6c 8288
afbf30a2
JK		 8289 ipw_sw_reset(priv, 0);
8290
b095c381 8291#ifdef CONFIG_IPW2200_MONITOR
bf79451e 8292 if (priv->ieee->iw_mode == IW_MODE_MONITOR)
43f66a6c 8293 priv->net_dev->type = ARPHRD_ETHER;
bf79451e
JG		 8294
8295 if (wrqu->mode == IW_MODE_MONITOR)
24a47dbd
MK		 8296#ifdef CONFIG_IEEE80211_RADIOTAP
8297 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
8298#else
43f66a6c 8299 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 8300#endif
b095c381 8301#endif /* CONFIG_IPW2200_MONITOR */
bf79451e 8302
bf79451e 8303 /* Free the existing firmware and reset the fw_loaded
43f66a6c 8304 * flag so ipw_load() will bring in the new firmawre */
afbf30a2 8305 free_firmware();
43f66a6c
JK		 8306
8307 priv->ieee->iw_mode = wrqu->mode;
bf79451e 8308
c848d0af 8309 queue_work(priv->workqueue, &priv->adapter_restart);
4644151b 8310 mutex_unlock(&priv->mutex);
0edd5b44 8311 return err;
43f66a6c
JK		 8312}
8313
bf79451e 8314static int ipw_wx_get_mode(struct net_device *dev,
0edd5b44
JG		 8315 struct iw_request_info *info,
8316 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 8317{
8318 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8319 mutex_lock(&priv->mutex);
43f66a6c
JK		 8320 wrqu->mode = priv->ieee->iw_mode;
8321 IPW_DEBUG_WX("Get MODE -> %d\n", wrqu->mode);
4644151b 8322 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8323 return 0;
8324}
8325
43f66a6c
JK		 8326/* Values are in microsecond */
8327static const s32 timeout_duration[] = {
8328 350000,
8329 250000,
8330 75000,
8331 37000,
8332 25000,
8333};
8334
8335static const s32 period_duration[] = {
8336 400000,
8337 700000,
8338 1000000,
8339 1000000,
8340 1000000
8341};
8342
bf79451e
JG		 8343static int ipw_wx_get_range(struct net_device *dev,
8344 struct iw_request_info *info,
43f66a6c
JK		 8345 union iwreq_data *wrqu, char *extra)
8346{
8347 struct ipw_priv *priv = ieee80211_priv(dev);
8348 struct iw_range *range = (struct iw_range *)extra;
1867b117 8349 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
b095c381 8350 int i = 0, j;
43f66a6c
JK		 8351
8352 wrqu->data.length = sizeof(*range);
8353 memset(range, 0, sizeof(*range));
8354
8355 /* 54Mbs == ~27 Mb/s real (802.11g) */
bf79451e 8356 range->throughput = 27 * 1000 * 1000;
43f66a6c
JK		 8357
8358 range->max_qual.qual = 100;
8359 /* TODO: Find real max RSSI and stick here */
8360 range->max_qual.level = 0;
c848d0af 8361 range->max_qual.noise = priv->ieee->worst_rssi + 0x100;
0edd5b44 8362 range->max_qual.updated = 7; /* Updated all three */
43f66a6c
JK		 8363
8364 range->avg_qual.qual = 70;
8365 /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
0edd5b44 8366 range->avg_qual.level = 0; /* FIXME to real average level */
43f66a6c 8367 range->avg_qual.noise = 0;
0edd5b44 8368 range->avg_qual.updated = 7; /* Updated all three */
4644151b 8369 mutex_lock(&priv->mutex);
0edd5b44 8370 range->num_bitrates = min(priv->rates.num_rates, (u8) IW_MAX_BITRATES);
43f66a6c 8371
bf79451e
JG		 8372 for (i = 0; i < range->num_bitrates; i++)
8373 range->bitrate[i] = (priv->rates.supported_rates[i] & 0x7F) *
0edd5b44 8374 500000;
bf79451e 8375
43f66a6c
JK		 8376 range->max_rts = DEFAULT_RTS_THRESHOLD;
8377 range->min_frag = MIN_FRAG_THRESHOLD;
8378 range->max_frag = MAX_FRAG_THRESHOLD;
8379
8380 range->encoding_size[0] = 5;
bf79451e 8381 range->encoding_size[1] = 13;
43f66a6c
JK		 8382 range->num_encoding_sizes = 2;
8383 range->max_encoding_tokens = WEP_KEYS;
8384
8385 /* Set the Wireless Extension versions */
8386 range->we_version_compiled = WIRELESS_EXT;
f1b50863 8387 range->we_version_source = 18;
43f66a6c 8388
b095c381
JK		 8389 i = 0;
8390 if (priv->ieee->mode & (IEEE_B | IEEE_G)) {
8391 for (j = 0; j < geo->bg_channels && i < IW_MAX_FREQUENCIES;
8392 i++, j++) {
8393 range->freq[i].i = geo->bg[j].channel;
8394 range->freq[i].m = geo->bg[j].freq * 100000;
8395 range->freq[i].e = 1;
8396 }
8397 }
43f66a6c 8398
b095c381
JK		 8399 if (priv->ieee->mode & IEEE_A) {
8400 for (j = 0; j < geo->a_channels && i < IW_MAX_FREQUENCIES;
8401 i++, j++) {
8402 range->freq[i].i = geo->a[j].channel;
8403 range->freq[i].m = geo->a[j].freq * 100000;
8404 range->freq[i].e = 1;
8405 }
43f66a6c 8406 }
b095c381
JK		 8407
8408 range->num_channels = i;
8409 range->num_frequency = i;
8410
4644151b 8411 mutex_unlock(&priv->mutex);
97a78ca9
BB		 8412
8413 /* Event capability (kernel + driver) */
8414 range->event_capa[0] = (IW_EVENT_CAPA_K_0 |
8415 IW_EVENT_CAPA_MASK(SIOCGIWTHRSPY) |
8416 IW_EVENT_CAPA_MASK(SIOCGIWAP));
8417 range->event_capa[1] = IW_EVENT_CAPA_K_1;
43f66a6c 8418
f1b50863
DW		 8419 range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
8420 IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
8421
43f66a6c
JK		 8422 IPW_DEBUG_WX("GET Range\n");
8423 return 0;
8424}
8425
bf79451e
JG		 8426static int ipw_wx_set_wap(struct net_device *dev,
8427 struct iw_request_info *info,
43f66a6c
JK		 8428 union iwreq_data *wrqu, char *extra)
8429{
8430 struct ipw_priv *priv = ieee80211_priv(dev);
8431
8432 static const unsigned char any[] = {
8433 0xff, 0xff, 0xff, 0xff, 0xff, 0xff
8434 };
8435 static const unsigned char off[] = {
8436 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
8437 };
8438
bf79451e 8439 if (wrqu->ap_addr.sa_family != ARPHRD_ETHER)
43f66a6c 8440 return -EINVAL;
4644151b 8441 mutex_lock(&priv->mutex);
43f66a6c
JK		 8442 if (!memcmp(any, wrqu->ap_addr.sa_data, ETH_ALEN) ||
8443 !memcmp(off, wrqu->ap_addr.sa_data, ETH_ALEN)) {
8444 /* we disable mandatory BSSID association */
8445 IPW_DEBUG_WX("Setting AP BSSID to ANY\n");
8446 priv->config &= ~CFG_STATIC_BSSID;
c848d0af
JK		 8447 IPW_DEBUG_ASSOC("Attempting to associate with new "
8448 "parameters.\n");
8449 ipw_associate(priv);
4644151b 8450 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8451 return 0;
8452 }
8453
8454 priv->config |= CFG_STATIC_BSSID;
8455 if (!memcmp(priv->bssid, wrqu->ap_addr.sa_data, ETH_ALEN)) {
8456 IPW_DEBUG_WX("BSSID set to current BSSID.\n");
4644151b 8457 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8458 return 0;
8459 }
8460
8461 IPW_DEBUG_WX("Setting mandatory BSSID to " MAC_FMT "\n",
8462 MAC_ARG(wrqu->ap_addr.sa_data));
8463
8464 memcpy(priv->bssid, wrqu->ap_addr.sa_data, ETH_ALEN);
8465
c848d0af
JK		 8466 /* Network configuration changed -- force [re]association */
8467 IPW_DEBUG_ASSOC("[re]association triggered due to BSSID change.\n");
8468 if (!ipw_disassociate(priv))
43f66a6c 8469 ipw_associate(priv);
43f66a6c 8470
4644151b 8471 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8472 return 0;
8473}
8474
bf79451e
JG		 8475static int ipw_wx_get_wap(struct net_device *dev,
8476 struct iw_request_info *info,
43f66a6c
JK		 8477 union iwreq_data *wrqu, char *extra)
8478{
8479 struct ipw_priv *priv = ieee80211_priv(dev);
8480 /* If we are associated, trying to associate, or have a statically
8481 * configured BSSID then return that; otherwise return ANY */
4644151b 8482 mutex_lock(&priv->mutex);
bf79451e 8483 if (priv->config & CFG_STATIC_BSSID ||
43f66a6c
JK		 8484 priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
8485 wrqu->ap_addr.sa_family = ARPHRD_ETHER;
afbf30a2 8486 memcpy(wrqu->ap_addr.sa_data, priv->bssid, ETH_ALEN);
43f66a6c
JK		 8487 } else
8488 memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
8489
8490 IPW_DEBUG_WX("Getting WAP BSSID: " MAC_FMT "\n",
8491 MAC_ARG(wrqu->ap_addr.sa_data));
4644151b 8492 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8493 return 0;
8494}
8495
bf79451e
JG		 8496static int ipw_wx_set_essid(struct net_device *dev,
8497 struct iw_request_info *info,
43f66a6c
JK		 8498 union iwreq_data *wrqu, char *extra)
8499{
8500 struct ipw_priv *priv = ieee80211_priv(dev);
0edd5b44 8501 char *essid = ""; /* ANY */
43f66a6c 8502 int length = 0;
4644151b 8503 mutex_lock(&priv->mutex);
43f66a6c
JK		 8504 if (wrqu->essid.flags && wrqu->essid.length) {
8505 length = wrqu->essid.length - 1;
8506 essid = extra;
8507 }
8508 if (length == 0) {
8509 IPW_DEBUG_WX("Setting ESSID to ANY\n");
afbf30a2
JK		 8510 if ((priv->config & CFG_STATIC_ESSID) &&
8511 !(priv->status & (STATUS_ASSOCIATED |
43f66a6c
JK		 8512 STATUS_ASSOCIATING))) {
8513 IPW_DEBUG_ASSOC("Attempting to associate with new "
8514 "parameters.\n");
afbf30a2 8515 priv->config &= ~CFG_STATIC_ESSID;
43f66a6c
JK		 8516 ipw_associate(priv);
8517 }
4644151b 8518 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8519 return 0;
8520 }
8521
8522 length = min(length, IW_ESSID_MAX_SIZE);
8523
8524 priv->config |= CFG_STATIC_ESSID;
8525
8526 if (priv->essid_len == length && !memcmp(priv->essid, extra, length)) {
8527 IPW_DEBUG_WX("ESSID set to current ESSID.\n");
4644151b 8528 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8529 return 0;
8530 }
8531
8532 IPW_DEBUG_WX("Setting ESSID: '%s' (%d)\n", escape_essid(essid, length),
8533 length);
8534
8535 priv->essid_len = length;
8536 memcpy(priv->essid, essid, priv->essid_len);
bf79451e 8537
c848d0af
JK		 8538 /* Network configuration changed -- force [re]association */
8539 IPW_DEBUG_ASSOC("[re]association triggered due to ESSID change.\n");
8540 if (!ipw_disassociate(priv))
43f66a6c 8541 ipw_associate(priv);
43f66a6c 8542
4644151b 8543 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8544 return 0;
8545}
8546
bf79451e
JG		 8547static int ipw_wx_get_essid(struct net_device *dev,
8548 struct iw_request_info *info,
43f66a6c
JK		 8549 union iwreq_data *wrqu, char *extra)
8550{
8551 struct ipw_priv *priv = ieee80211_priv(dev);
8552
8553 /* If we are associated, trying to associate, or have a statically
8554 * configured ESSID then return that; otherwise return ANY */
4644151b 8555 mutex_lock(&priv->mutex);
43f66a6c 8556 if (priv->config & CFG_STATIC_ESSID ||
bf79451e
JG		 8557 priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
8558 IPW_DEBUG_WX("Getting essid: '%s'\n",
43f66a6c 8559 escape_essid(priv->essid, priv->essid_len));
bf79451e 8560 memcpy(extra, priv->essid, priv->essid_len);
43f66a6c 8561 wrqu->essid.length = priv->essid_len;
0edd5b44 8562 wrqu->essid.flags = 1; /* active */
43f66a6c
JK		 8563 } else {
8564 IPW_DEBUG_WX("Getting essid: ANY\n");
8565 wrqu->essid.length = 0;
0edd5b44 8566 wrqu->essid.flags = 0; /* active */
43f66a6c 8567 }
4644151b 8568 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8569 return 0;
8570}
8571
bf79451e
JG		 8572static int ipw_wx_set_nick(struct net_device *dev,
8573 struct iw_request_info *info,
43f66a6c 8574 union iwreq_data *wrqu, char *extra)
bf79451e 8575{
43f66a6c
JK		 8576 struct ipw_priv *priv = ieee80211_priv(dev);
8577
8578 IPW_DEBUG_WX("Setting nick to '%s'\n", extra);
8579 if (wrqu->data.length > IW_ESSID_MAX_SIZE)
8580 return -E2BIG;
4644151b 8581 mutex_lock(&priv->mutex);
0edd5b44 8582 wrqu->data.length = min((size_t) wrqu->data.length, sizeof(priv->nick));
43f66a6c 8583 memset(priv->nick, 0, sizeof(priv->nick));
0edd5b44 8584 memcpy(priv->nick, extra, wrqu->data.length);
43f66a6c 8585 IPW_DEBUG_TRACE("<<\n");
4644151b 8586 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8587 return 0;
8588
8589}
8590
bf79451e
JG		 8591static int ipw_wx_get_nick(struct net_device *dev,
8592 struct iw_request_info *info,
43f66a6c 8593 union iwreq_data *wrqu, char *extra)
bf79451e 8594{
43f66a6c
JK		 8595 struct ipw_priv *priv = ieee80211_priv(dev);
8596 IPW_DEBUG_WX("Getting nick\n");
4644151b 8597 mutex_lock(&priv->mutex);
43f66a6c
JK		 8598 wrqu->data.length = strlen(priv->nick) + 1;
8599 memcpy(extra, priv->nick, wrqu->data.length);
0edd5b44 8600 wrqu->data.flags = 1; /* active */
4644151b 8601 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8602 return 0;
8603}
8604
43f66a6c
JK		 8605static int ipw_wx_set_rate(struct net_device *dev,
8606 struct iw_request_info *info,
8607 union iwreq_data *wrqu, char *extra)
bf79451e 8608{
ea2b26e0
JK		 8609 /* TODO: We should use semaphores or locks for access to priv */
8610 struct ipw_priv *priv = ieee80211_priv(dev);
8611 u32 target_rate = wrqu->bitrate.value;
8612 u32 fixed, mask;
8613
8614 /* value = -1, fixed = 0 means auto only, so we should use all rates offered by AP */
8615 /* value = X, fixed = 1 means only rate X */
8616 /* value = X, fixed = 0 means all rates lower equal X */
8617
8618 if (target_rate == -1) {
8619 fixed = 0;
8620 mask = IEEE80211_DEFAULT_RATES_MASK;
8621 /* Now we should reassociate */
8622 goto apply;
8623 }
8624
8625 mask = 0;
8626 fixed = wrqu->bitrate.fixed;
8627
8628 if (target_rate == 1000000 || !fixed)
8629 mask |= IEEE80211_CCK_RATE_1MB_MASK;
8630 if (target_rate == 1000000)
8631 goto apply;
8632
8633 if (target_rate == 2000000 || !fixed)
8634 mask |= IEEE80211_CCK_RATE_2MB_MASK;
8635 if (target_rate == 2000000)
8636 goto apply;
8637
8638 if (target_rate == 5500000 || !fixed)
8639 mask |= IEEE80211_CCK_RATE_5MB_MASK;
8640 if (target_rate == 5500000)
8641 goto apply;
8642
8643 if (target_rate == 6000000 || !fixed)
8644 mask |= IEEE80211_OFDM_RATE_6MB_MASK;
8645 if (target_rate == 6000000)
8646 goto apply;
8647
8648 if (target_rate == 9000000 || !fixed)
8649 mask |= IEEE80211_OFDM_RATE_9MB_MASK;
8650 if (target_rate == 9000000)
8651 goto apply;
8652
8653 if (target_rate == 11000000 || !fixed)
8654 mask |= IEEE80211_CCK_RATE_11MB_MASK;
8655 if (target_rate == 11000000)
8656 goto apply;
8657
8658 if (target_rate == 12000000 || !fixed)
8659 mask |= IEEE80211_OFDM_RATE_12MB_MASK;
8660 if (target_rate == 12000000)
8661 goto apply;
8662
8663 if (target_rate == 18000000 || !fixed)
8664 mask |= IEEE80211_OFDM_RATE_18MB_MASK;
8665 if (target_rate == 18000000)
8666 goto apply;
8667
8668 if (target_rate == 24000000 || !fixed)
8669 mask |= IEEE80211_OFDM_RATE_24MB_MASK;
8670 if (target_rate == 24000000)
8671 goto apply;
8672
8673 if (target_rate == 36000000 || !fixed)
8674 mask |= IEEE80211_OFDM_RATE_36MB_MASK;
8675 if (target_rate == 36000000)
8676 goto apply;
8677
8678 if (target_rate == 48000000 || !fixed)
8679 mask |= IEEE80211_OFDM_RATE_48MB_MASK;
8680 if (target_rate == 48000000)
8681 goto apply;
8682
8683 if (target_rate == 54000000 || !fixed)
8684 mask |= IEEE80211_OFDM_RATE_54MB_MASK;
8685 if (target_rate == 54000000)
8686 goto apply;
8687
8688 IPW_DEBUG_WX("invalid rate specified, returning error\n");
8689 return -EINVAL;
8690
8691 apply:
8692 IPW_DEBUG_WX("Setting rate mask to 0x%08X [%s]\n",
8693 mask, fixed ? "fixed" : "sub-rates");
4644151b 8694 mutex_lock(&priv->mutex);
b095c381 8695 if (mask == IEEE80211_DEFAULT_RATES_MASK) {
ea2b26e0 8696 priv->config &= ~CFG_FIXED_RATE;
b095c381
JK		 8697 ipw_set_fixed_rate(priv, priv->ieee->mode);
8698 } else
ea2b26e0
JK		 8699 priv->config |= CFG_FIXED_RATE;
8700
c848d0af
JK		 8701 if (priv->rates_mask == mask) {
8702 IPW_DEBUG_WX("Mask set to current mask.\n");
4644151b 8703 mutex_unlock(&priv->mutex);
c848d0af 8704 return 0;
ea2b26e0
JK		 8705 }
8706
c848d0af
JK		 8707 priv->rates_mask = mask;
8708
8709 /* Network configuration changed -- force [re]association */
8710 IPW_DEBUG_ASSOC("[re]association triggered due to rates change.\n");
8711 if (!ipw_disassociate(priv))
8712 ipw_associate(priv);
8713
4644151b 8714 mutex_unlock(&priv->mutex);
ea2b26e0 8715 return 0;
43f66a6c
JK		 8716}
8717
bf79451e
JG		 8718static int ipw_wx_get_rate(struct net_device *dev,
8719 struct iw_request_info *info,
43f66a6c 8720 union iwreq_data *wrqu, char *extra)
bf79451e 8721{
0edd5b44 8722 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8723 mutex_lock(&priv->mutex);
43f66a6c 8724 wrqu->bitrate.value = priv->last_rate;
4644151b 8725 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8726 IPW_DEBUG_WX("GET Rate -> %d \n", wrqu->bitrate.value);
8727 return 0;
8728}
8729
bf79451e
JG		 8730static int ipw_wx_set_rts(struct net_device *dev,
8731 struct iw_request_info *info,
43f66a6c 8732 union iwreq_data *wrqu, char *extra)
bf79451e 8733{
43f66a6c 8734 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8735 mutex_lock(&priv->mutex);
43f66a6c
JK		 8736 if (wrqu->rts.disabled)
8737 priv->rts_threshold = DEFAULT_RTS_THRESHOLD;
8738 else {
8739 if (wrqu->rts.value < MIN_RTS_THRESHOLD ||
c848d0af 8740 wrqu->rts.value > MAX_RTS_THRESHOLD) {
4644151b 8741 mutex_unlock(&priv->mutex);
43f66a6c 8742 return -EINVAL;
c848d0af 8743 }
43f66a6c
JK		 8744 priv->rts_threshold = wrqu->rts.value;
8745 }
8746
8747 ipw_send_rts_threshold(priv, priv->rts_threshold);
4644151b 8748 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8749 IPW_DEBUG_WX("SET RTS Threshold -> %d \n", priv->rts_threshold);
8750 return 0;
8751}
8752
bf79451e
JG		 8753static int ipw_wx_get_rts(struct net_device *dev,
8754 struct iw_request_info *info,
43f66a6c 8755 union iwreq_data *wrqu, char *extra)
bf79451e 8756{
43f66a6c 8757 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8758 mutex_lock(&priv->mutex);
43f66a6c
JK		 8759 wrqu->rts.value = priv->rts_threshold;
8760 wrqu->rts.fixed = 0; /* no auto select */
0edd5b44 8761 wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD);
4644151b 8762 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8763 IPW_DEBUG_WX("GET RTS Threshold -> %d \n", wrqu->rts.value);
8764 return 0;
8765}
8766
bf79451e
JG		 8767static int ipw_wx_set_txpow(struct net_device *dev,
8768 struct iw_request_info *info,
43f66a6c 8769 union iwreq_data *wrqu, char *extra)
bf79451e 8770{
43f66a6c 8771 struct ipw_priv *priv = ieee80211_priv(dev);
6de9f7f2 8772 int err = 0;
43f66a6c 8773
4644151b 8774 mutex_lock(&priv->mutex);
c848d0af 8775 if (ipw_radio_kill_sw(priv, wrqu->power.disabled)) {
6de9f7f2
ZY		 8776 err = -EINPROGRESS;
8777 goto out;
43f66a6c 8778 }
43f66a6c 8779
b095c381
JK		 8780 if (!wrqu->power.fixed)
8781 wrqu->power.value = IPW_TX_POWER_DEFAULT;
8782
c848d0af 8783 if (wrqu->power.flags != IW_TXPOW_DBM) {
6de9f7f2
ZY		 8784 err = -EINVAL;
8785 goto out;
c848d0af 8786 }
43f66a6c 8787
b095c381 8788 if ((wrqu->power.value > IPW_TX_POWER_MAX) ||
afbf30a2 8789 (wrqu->power.value < IPW_TX_POWER_MIN)) {
6de9f7f2
ZY		 8790 err = -EINVAL;
8791 goto out;
c848d0af 8792 }
43f66a6c 8793
43f66a6c 8794 priv->tx_power = wrqu->power.value;
6de9f7f2
ZY		 8795 err = ipw_set_tx_power(priv);
8796 out:
4644151b 8797 mutex_unlock(&priv->mutex);
6de9f7f2 8798 return err;
43f66a6c
JK		 8799}
8800
bf79451e
JG		 8801static int ipw_wx_get_txpow(struct net_device *dev,
8802 struct iw_request_info *info,
43f66a6c 8803 union iwreq_data *wrqu, char *extra)
bf79451e 8804{
43f66a6c 8805 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8806 mutex_lock(&priv->mutex);
43f66a6c
JK		 8807 wrqu->power.value = priv->tx_power;
8808 wrqu->power.fixed = 1;
8809 wrqu->power.flags = IW_TXPOW_DBM;
8810 wrqu->power.disabled = (priv->status & STATUS_RF_KILL_MASK) ? 1 : 0;
4644151b 8811 mutex_unlock(&priv->mutex);
43f66a6c 8812
bf79451e 8813 IPW_DEBUG_WX("GET TX Power -> %s %d \n",
22501c8e 8814 wrqu->power.disabled ? "OFF" : "ON", wrqu->power.value);
43f66a6c
JK		 8815
8816 return 0;
8817}
8818
bf79451e 8819static int ipw_wx_set_frag(struct net_device *dev,
0edd5b44
JG		 8820 struct iw_request_info *info,
8821 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 8822{
8823 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8824 mutex_lock(&priv->mutex);
43f66a6c
JK		 8825 if (wrqu->frag.disabled)
8826 priv->ieee->fts = DEFAULT_FTS;
8827 else {
8828 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
b095c381 8829 wrqu->frag.value > MAX_FRAG_THRESHOLD) {
4644151b 8830 mutex_unlock(&priv->mutex);
43f66a6c 8831 return -EINVAL;
b095c381 8832 }
bf79451e 8833
43f66a6c
JK		 8834 priv->ieee->fts = wrqu->frag.value & ~0x1;
8835 }
8836
8837 ipw_send_frag_threshold(priv, wrqu->frag.value);
4644151b 8838 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8839 IPW_DEBUG_WX("SET Frag Threshold -> %d \n", wrqu->frag.value);
8840 return 0;
8841}
8842
bf79451e 8843static int ipw_wx_get_frag(struct net_device *dev,
0edd5b44
JG		 8844 struct iw_request_info *info,
8845 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 8846{
8847 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8848 mutex_lock(&priv->mutex);
43f66a6c
JK		 8849 wrqu->frag.value = priv->ieee->fts;
8850 wrqu->frag.fixed = 0; /* no auto select */
0edd5b44 8851 wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FTS);
4644151b 8852 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8853 IPW_DEBUG_WX("GET Frag Threshold -> %d \n", wrqu->frag.value);
8854
8855 return 0;
8856}
8857
bf79451e
JG		 8858static int ipw_wx_set_retry(struct net_device *dev,
8859 struct iw_request_info *info,
43f66a6c 8860 union iwreq_data *wrqu, char *extra)
bf79451e 8861{
afbf30a2
JK		 8862 struct ipw_priv *priv = ieee80211_priv(dev);
8863
8864 if (wrqu->retry.flags & IW_RETRY_LIFETIME || wrqu->retry.disabled)
8865 return -EINVAL;
8866
8867 if (!(wrqu->retry.flags & IW_RETRY_LIMIT))
8868 return 0;
8869
8870 if (wrqu->retry.value < 0 || wrqu->retry.value > 255)
8871 return -EINVAL;
8872
4644151b 8873 mutex_lock(&priv->mutex);
afbf30a2
JK		 8874 if (wrqu->retry.flags & IW_RETRY_MIN)
8875 priv->short_retry_limit = (u8) wrqu->retry.value;
8876 else if (wrqu->retry.flags & IW_RETRY_MAX)
8877 priv->long_retry_limit = (u8) wrqu->retry.value;
8878 else {
8879 priv->short_retry_limit = (u8) wrqu->retry.value;
8880 priv->long_retry_limit = (u8) wrqu->retry.value;
8881 }
8882
8883 ipw_send_retry_limit(priv, priv->short_retry_limit,
8884 priv->long_retry_limit);
4644151b 8885 mutex_unlock(&priv->mutex);
afbf30a2
JK		 8886 IPW_DEBUG_WX("SET retry limit -> short:%d long:%d\n",
8887 priv->short_retry_limit, priv->long_retry_limit);
8888 return 0;
43f66a6c
JK		 8889}
8890
bf79451e
JG		 8891static int ipw_wx_get_retry(struct net_device *dev,
8892 struct iw_request_info *info,
43f66a6c 8893 union iwreq_data *wrqu, char *extra)
bf79451e 8894{
afbf30a2
JK		 8895 struct ipw_priv *priv = ieee80211_priv(dev);
8896
4644151b 8897 mutex_lock(&priv->mutex);
afbf30a2
JK		 8898 wrqu->retry.disabled = 0;
8899
8900 if ((wrqu->retry.flags & IW_RETRY_TYPE) == IW_RETRY_LIFETIME) {
4644151b 8901 mutex_unlock(&priv->mutex);
afbf30a2
JK		 8902 return -EINVAL;
8903 }
8904
8905 if (wrqu->retry.flags & IW_RETRY_MAX) {
8906 wrqu->retry.flags = IW_RETRY_LIMIT | IW_RETRY_MAX;
8907 wrqu->retry.value = priv->long_retry_limit;
8908 } else if (wrqu->retry.flags & IW_RETRY_MIN) {
8909 wrqu->retry.flags = IW_RETRY_LIMIT | IW_RETRY_MIN;
8910 wrqu->retry.value = priv->short_retry_limit;
8911 } else {
8912 wrqu->retry.flags = IW_RETRY_LIMIT;
8913 wrqu->retry.value = priv->short_retry_limit;
8914 }
4644151b 8915 mutex_unlock(&priv->mutex);
afbf30a2
JK		 8916
8917 IPW_DEBUG_WX("GET retry -> %d \n", wrqu->retry.value);
8918
8919 return 0;
8920}
8921
afbf30a2
JK		 8922static int ipw_request_direct_scan(struct ipw_priv *priv, char *essid,
8923 int essid_len)
8924{
8925 struct ipw_scan_request_ext scan;
8926 int err = 0, scan_type;
8927
efb3442c
PE		 8928 if (!(priv->status & STATUS_INIT) ||
8929 (priv->status & STATUS_EXIT_PENDING))
8930 return 0;
8931
4644151b 8932 mutex_lock(&priv->mutex);
afbf30a2
JK		 8933
8934 if (priv->status & STATUS_RF_KILL_MASK) {
8935 IPW_DEBUG_HC("Aborting scan due to RF kill activation\n");
8936 priv->status |= STATUS_SCAN_PENDING;
8937 goto done;
8938 }
8939
8940 IPW_DEBUG_HC("starting request direct scan!\n");
8941
8942 if (priv->status & (STATUS_SCANNING | STATUS_SCAN_ABORTING)) {
d834a41c
OK		 8943 /* We should not sleep here; otherwise we will block most
8944 * of the system (for instance, we hold rtnl_lock when we
8945 * get here).
8946 */
8947 err = -EAGAIN;
8948 goto done;
afbf30a2
JK		 8949 }
8950 memset(&scan, 0, sizeof(scan));
8951
8952 if (priv->config & CFG_SPEED_SCAN)
8953 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
8954 cpu_to_le16(30);
8955 else
8956 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
8957 cpu_to_le16(20);
8958
8959 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN] =
8960 cpu_to_le16(20);
1fe0adb4 8961 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] = cpu_to_le16(120);
afbf30a2
JK		 8962 scan.dwell_time[IPW_SCAN_ACTIVE_DIRECT_SCAN] = cpu_to_le16(20);
8963
8964 scan.full_scan_index = cpu_to_le32(ieee80211_get_scans(priv->ieee));
8965
8966 err = ipw_send_ssid(priv, essid, essid_len);
8967 if (err) {
8968 IPW_DEBUG_HC("Attempt to send SSID command failed\n");
8969 goto done;
8970 }
8971 scan_type = IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN;
8972
8973 ipw_add_scan_channels(priv, &scan, scan_type);
8974
8975 err = ipw_send_scan_request_ext(priv, &scan);
8976 if (err) {
8977 IPW_DEBUG_HC("Sending scan command failed: %08X\n", err);
8978 goto done;
8979 }
8980
8981 priv->status |= STATUS_SCANNING;
8982
8983 done:
4644151b 8984 mutex_unlock(&priv->mutex);
afbf30a2 8985 return err;
43f66a6c
JK		 8986}
8987
bf79451e
JG		 8988static int ipw_wx_set_scan(struct net_device *dev,
8989 struct iw_request_info *info,
43f66a6c
JK		 8990 union iwreq_data *wrqu, char *extra)
8991{
8992 struct ipw_priv *priv = ieee80211_priv(dev);
afbf30a2
JK		 8993 struct iw_scan_req *req = NULL;
8994 if (wrqu->data.length
8995 && wrqu->data.length == sizeof(struct iw_scan_req)) {
8996 req = (struct iw_scan_req *)extra;
8997 if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
8998 ipw_request_direct_scan(priv, req->essid,
8999 req->essid_len);
9000 return 0;
9001 }
9002 }
8935f39e 9003
43f66a6c 9004 IPW_DEBUG_WX("Start scan\n");
b095c381
JK		 9005
9006 queue_work(priv->workqueue, &priv->request_scan);
9007
43f66a6c
JK		 9008 return 0;
9009}
9010
bf79451e
JG		 9011static int ipw_wx_get_scan(struct net_device *dev,
9012 struct iw_request_info *info,
43f66a6c 9013 union iwreq_data *wrqu, char *extra)
bf79451e 9014{
43f66a6c
JK		 9015 struct ipw_priv *priv = ieee80211_priv(dev);
9016 return ieee80211_wx_get_scan(priv->ieee, info, wrqu, extra);
9017}
9018
bf79451e 9019static int ipw_wx_set_encode(struct net_device *dev,
0edd5b44
JG		 9020 struct iw_request_info *info,
9021 union iwreq_data *wrqu, char *key)
43f66a6c
JK		 9022{
9023 struct ipw_priv *priv = ieee80211_priv(dev);
afbf30a2 9024 int ret;
caeff81b 9025 u32 cap = priv->capability;
afbf30a2 9026
4644151b 9027 mutex_lock(&priv->mutex);
afbf30a2 9028 ret = ieee80211_wx_set_encode(priv->ieee, info, wrqu, key);
afbf30a2 9029
caeff81b
HL		 9030 /* In IBSS mode, we need to notify the firmware to update
9031 * the beacon info after we changed the capability. */
9032 if (cap != priv->capability &&
9033 priv->ieee->iw_mode == IW_MODE_ADHOC &&
9034 priv->status & STATUS_ASSOCIATED)
9035 ipw_disassociate(priv);
9036
4644151b 9037 mutex_unlock(&priv->mutex);
afbf30a2 9038 return ret;
43f66a6c
JK		 9039}
9040
bf79451e 9041static int ipw_wx_get_encode(struct net_device *dev,
0edd5b44
JG		 9042 struct iw_request_info *info,
9043 union iwreq_data *wrqu, char *key)
43f66a6c
JK		 9044{
9045 struct ipw_priv *priv = ieee80211_priv(dev);
9046 return ieee80211_wx_get_encode(priv->ieee, info, wrqu, key);
9047}
9048
bf79451e 9049static int ipw_wx_set_power(struct net_device *dev,
0edd5b44
JG		 9050 struct iw_request_info *info,
9051 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9052{
9053 struct ipw_priv *priv = ieee80211_priv(dev);
9054 int err;
4644151b 9055 mutex_lock(&priv->mutex);
43f66a6c
JK		 9056 if (wrqu->power.disabled) {
9057 priv->power_mode = IPW_POWER_LEVEL(priv->power_mode);
9058 err = ipw_send_power_mode(priv, IPW_POWER_MODE_CAM);
9059 if (err) {
9060 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9061 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9062 return err;
9063 }
43f66a6c 9064 IPW_DEBUG_WX("SET Power Management Mode -> off\n");
4644151b 9065 mutex_unlock(&priv->mutex);
43f66a6c 9066 return 0;
bf79451e 9067 }
43f66a6c
JK		 9068
9069 switch (wrqu->power.flags & IW_POWER_MODE) {
0edd5b44
JG		 9070 case IW_POWER_ON: /* If not specified */
9071 case IW_POWER_MODE: /* If set all mask */
9072 case IW_POWER_ALL_R: /* If explicitely state all */
43f66a6c 9073 break;
0edd5b44 9074 default: /* Otherwise we don't support it */
43f66a6c
JK		 9075 IPW_DEBUG_WX("SET PM Mode: %X not supported.\n",
9076 wrqu->power.flags);
4644151b 9077 mutex_unlock(&priv->mutex);
bf79451e 9078 return -EOPNOTSUPP;
43f66a6c 9079 }
bf79451e 9080
43f66a6c
JK		 9081 /* If the user hasn't specified a power management mode yet, default
9082 * to BATTERY */
0edd5b44 9083 if (IPW_POWER_LEVEL(priv->power_mode) == IPW_POWER_AC)
43f66a6c 9084 priv->power_mode = IPW_POWER_ENABLED | IPW_POWER_BATTERY;
bf79451e 9085 else
43f66a6c
JK		 9086 priv->power_mode = IPW_POWER_ENABLED | priv->power_mode;
9087 err = ipw_send_power_mode(priv, IPW_POWER_LEVEL(priv->power_mode));
9088 if (err) {
9089 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9090 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9091 return err;
9092 }
9093
0edd5b44 9094 IPW_DEBUG_WX("SET Power Management Mode -> 0x%02X\n", priv->power_mode);
4644151b 9095 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9096 return 0;
9097}
9098
bf79451e 9099static int ipw_wx_get_power(struct net_device *dev,
0edd5b44
JG		 9100 struct iw_request_info *info,
9101 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9102{
9103 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9104 mutex_lock(&priv->mutex);
a613bffd 9105 if (!(priv->power_mode & IPW_POWER_ENABLED))
43f66a6c 9106 wrqu->power.disabled = 1;
a613bffd 9107 else
43f66a6c 9108 wrqu->power.disabled = 0;
43f66a6c 9109
4644151b 9110 mutex_unlock(&priv->mutex);
43f66a6c 9111 IPW_DEBUG_WX("GET Power Management Mode -> %02X\n", priv->power_mode);
bf79451e 9112
43f66a6c
JK		 9113 return 0;
9114}
9115
bf79451e 9116static int ipw_wx_set_powermode(struct net_device *dev,
0edd5b44
JG		 9117 struct iw_request_info *info,
9118 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9119{
9120 struct ipw_priv *priv = ieee80211_priv(dev);
9121 int mode = *(int *)extra;
9122 int err;
4644151b 9123 mutex_lock(&priv->mutex);
43f66a6c
JK		 9124 if ((mode < 1) || (mode > IPW_POWER_LIMIT)) {
9125 mode = IPW_POWER_AC;
9126 priv->power_mode = mode;
9127 } else {
9128 priv->power_mode = IPW_POWER_ENABLED | mode;
9129 }
bf79451e 9130
43f66a6c
JK		 9131 if (priv->power_mode != mode) {
9132 err = ipw_send_power_mode(priv, mode);
bf79451e 9133
43f66a6c
JK		 9134 if (err) {
9135 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9136 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9137 return err;
9138 }
9139 }
4644151b 9140 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9141 return 0;
9142}
9143
9144#define MAX_WX_STRING 80
bf79451e 9145static int ipw_wx_get_powermode(struct net_device *dev,
0edd5b44
JG		 9146 struct iw_request_info *info,
9147 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9148{
9149 struct ipw_priv *priv = ieee80211_priv(dev);
9150 int level = IPW_POWER_LEVEL(priv->power_mode);
9151 char *p = extra;
9152
9153 p += snprintf(p, MAX_WX_STRING, "Power save level: %d ", level);
9154
9155 switch (level) {
9156 case IPW_POWER_AC:
9157 p += snprintf(p, MAX_WX_STRING - (p - extra), "(AC)");
9158 break;
9159 case IPW_POWER_BATTERY:
9160 p += snprintf(p, MAX_WX_STRING - (p - extra), "(BATTERY)");
9161 break;
9162 default:
9163 p += snprintf(p, MAX_WX_STRING - (p - extra),
bf79451e 9164 "(Timeout %dms, Period %dms)",
43f66a6c
JK		 9165 timeout_duration[level - 1] / 1000,
9166 period_duration[level - 1] / 1000);
9167 }
9168
9169 if (!(priv->power_mode & IPW_POWER_ENABLED))
0edd5b44 9170 p += snprintf(p, MAX_WX_STRING - (p - extra), " OFF");
43f66a6c
JK		 9171
9172 wrqu->data.length = p - extra + 1;
9173
9174 return 0;
9175}
9176
9177static int ipw_wx_set_wireless_mode(struct net_device *dev,
0edd5b44
JG		 9178 struct iw_request_info *info,
9179 union iwreq_data *wrqu, char *extra)
43f66a6c 9180{
0edd5b44 9181 struct ipw_priv *priv = ieee80211_priv(dev);
43f66a6c
JK		 9182 int mode = *(int *)extra;
9183 u8 band = 0, modulation = 0;
9184
9185 if (mode == 0 || mode & ~IEEE_MODE_MASK) {
0edd5b44 9186 IPW_WARNING("Attempt to set invalid wireless mode: %d\n", mode);
43f66a6c
JK		 9187 return -EINVAL;
9188 }
4644151b 9189 mutex_lock(&priv->mutex);
43f66a6c 9190 if (priv->adapter == IPW_2915ABG) {
a33a1982 9191 priv->ieee->abg_true = 1;
43f66a6c
JK		 9192 if (mode & IEEE_A) {
9193 band |= IEEE80211_52GHZ_BAND;
9194 modulation |= IEEE80211_OFDM_MODULATION;
9195 } else
a33a1982 9196 priv->ieee->abg_true = 0;
43f66a6c
JK		 9197 } else {
9198 if (mode & IEEE_A) {
9199 IPW_WARNING("Attempt to set 2200BG into "
9200 "802.11a mode\n");
4644151b 9201 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9202 return -EINVAL;
9203 }
9204
a33a1982 9205 priv->ieee->abg_true = 0;
43f66a6c
JK		 9206 }
9207
9208 if (mode & IEEE_B) {
9209 band |= IEEE80211_24GHZ_BAND;
9210 modulation |= IEEE80211_CCK_MODULATION;
9211 } else
a33a1982 9212 priv->ieee->abg_true = 0;
bf79451e 9213
43f66a6c
JK		 9214 if (mode & IEEE_G) {
9215 band |= IEEE80211_24GHZ_BAND;
9216 modulation |= IEEE80211_OFDM_MODULATION;
9217 } else
a33a1982 9218 priv->ieee->abg_true = 0;
43f66a6c
JK		 9219
9220 priv->ieee->mode = mode;
9221 priv->ieee->freq_band = band;
9222 priv->ieee->modulation = modulation;
0edd5b44 9223 init_supported_rates(priv, &priv->rates);
43f66a6c 9224
c848d0af
JK		 9225 /* Network configuration changed -- force [re]association */
9226 IPW_DEBUG_ASSOC("[re]association triggered due to mode change.\n");
9227 if (!ipw_disassociate(priv)) {
43f66a6c 9228 ipw_send_supported_rates(priv, &priv->rates);
c848d0af
JK		 9229 ipw_associate(priv);
9230 }
43f66a6c 9231
a613bffd
JK		 9232 /* Update the band LEDs */
9233 ipw_led_band_on(priv);
43f66a6c 9234
bf79451e 9235 IPW_DEBUG_WX("PRIV SET MODE: %c%c%c\n",
43f66a6c 9236 mode & IEEE_A ? 'a' : '.',
0edd5b44 9237 mode & IEEE_B ? 'b' : '.', mode & IEEE_G ? 'g' : '.');
4644151b 9238 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9239 return 0;
9240}
9241
9242static int ipw_wx_get_wireless_mode(struct net_device *dev,
0edd5b44
JG		 9243 struct iw_request_info *info,
9244 union iwreq_data *wrqu, char *extra)
43f66a6c 9245{
0edd5b44 9246 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9247 mutex_lock(&priv->mutex);
ea2b26e0
JK		 9248 switch (priv->ieee->mode) {
9249 case IEEE_A:
43f66a6c
JK		 9250 strncpy(extra, "802.11a (1)", MAX_WX_STRING);
9251 break;
ea2b26e0
JK		 9252 case IEEE_B:
9253 strncpy(extra, "802.11b (2)", MAX_WX_STRING);
9254 break;
9255 case IEEE_A | IEEE_B:
9256 strncpy(extra, "802.11ab (3)", MAX_WX_STRING);
9257 break;
9258 case IEEE_G:
9259 strncpy(extra, "802.11g (4)", MAX_WX_STRING);
9260 break;
9261 case IEEE_A | IEEE_G:
9262 strncpy(extra, "802.11ag (5)", MAX_WX_STRING);
9263 break;
9264 case IEEE_B | IEEE_G:
9265 strncpy(extra, "802.11bg (6)", MAX_WX_STRING);
9266 break;
9267 case IEEE_A | IEEE_B | IEEE_G:
9268 strncpy(extra, "802.11abg (7)", MAX_WX_STRING);
9269 break;
9270 default:
9271 strncpy(extra, "unknown", MAX_WX_STRING);
43f66a6c 9272 break;
bf79451e
JG		 9273 }
9274
43f66a6c
JK		 9275 IPW_DEBUG_WX("PRIV GET MODE: %s\n", extra);
9276
0edd5b44 9277 wrqu->data.length = strlen(extra) + 1;
4644151b 9278 mutex_unlock(&priv->mutex);
b095c381
JK		 9279
9280 return 0;
9281}
9282
9283static int ipw_wx_set_preamble(struct net_device *dev,
9284 struct iw_request_info *info,
9285 union iwreq_data *wrqu, char *extra)
9286{
9287 struct ipw_priv *priv = ieee80211_priv(dev);
9288 int mode = *(int *)extra;
4644151b 9289 mutex_lock(&priv->mutex);
b095c381
JK		 9290 /* Switching from SHORT -> LONG requires a disassociation */
9291 if (mode == 1) {
9292 if (!(priv->config & CFG_PREAMBLE_LONG)) {
9293 priv->config |= CFG_PREAMBLE_LONG;
9294
9295 /* Network configuration changed -- force [re]association */
9296 IPW_DEBUG_ASSOC
9297 ("[re]association triggered due to preamble change.\n");
9298 if (!ipw_disassociate(priv))
9299 ipw_associate(priv);
9300 }
9301 goto done;
9302 }
43f66a6c 9303
b095c381
JK		 9304 if (mode == 0) {
9305 priv->config &= ~CFG_PREAMBLE_LONG;
9306 goto done;
9307 }
4644151b 9308 mutex_unlock(&priv->mutex);
b095c381
JK		 9309 return -EINVAL;
9310
9311 done:
4644151b 9312 mutex_unlock(&priv->mutex);
b095c381
JK		 9313 return 0;
9314}
9315
9316static int ipw_wx_get_preamble(struct net_device *dev,
9317 struct iw_request_info *info,
9318 union iwreq_data *wrqu, char *extra)
9319{
9320 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9321 mutex_lock(&priv->mutex);
b095c381
JK		 9322 if (priv->config & CFG_PREAMBLE_LONG)
9323 snprintf(wrqu->name, IFNAMSIZ, "long (1)");
9324 else
9325 snprintf(wrqu->name, IFNAMSIZ, "auto (0)");
4644151b 9326 mutex_unlock(&priv->mutex);
0edd5b44 9327 return 0;
43f66a6c
JK		 9328}
9329
b095c381
JK		 9330#ifdef CONFIG_IPW2200_MONITOR
9331static int ipw_wx_set_monitor(struct net_device *dev,
bf79451e 9332 struct iw_request_info *info,
43f66a6c 9333 union iwreq_data *wrqu, char *extra)
bf79451e 9334{
43f66a6c
JK		 9335 struct ipw_priv *priv = ieee80211_priv(dev);
9336 int *parms = (int *)extra;
9337 int enable = (parms[0] > 0);
4644151b 9338 mutex_lock(&priv->mutex);
b095c381 9339 IPW_DEBUG_WX("SET MONITOR: %d %d\n", enable, parms[1]);
43f66a6c
JK		 9340 if (enable) {
9341 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
24a47dbd
MK		 9342#ifdef CONFIG_IEEE80211_RADIOTAP
9343 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
9344#else
43f66a6c 9345 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 9346#endif
b095c381 9347 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c 9348 }
bf79451e 9349
43f66a6c
JK		 9350 ipw_set_channel(priv, parms[1]);
9351 } else {
b095c381 9352 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
4644151b 9353 mutex_unlock(&priv->mutex);
43f66a6c 9354 return 0;
b095c381 9355 }
43f66a6c 9356 priv->net_dev->type = ARPHRD_ETHER;
b095c381 9357 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c 9358 }
4644151b 9359 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9360 return 0;
9361}
9362
b095c381
JK		 9363#endif // CONFIG_IPW2200_MONITOR
9364
bf79451e
JG		 9365static int ipw_wx_reset(struct net_device *dev,
9366 struct iw_request_info *info,
43f66a6c 9367 union iwreq_data *wrqu, char *extra)
bf79451e 9368{
43f66a6c
JK		 9369 struct ipw_priv *priv = ieee80211_priv(dev);
9370 IPW_DEBUG_WX("RESET\n");
b095c381
JK		 9371 queue_work(priv->workqueue, &priv->adapter_restart);
9372 return 0;
9373}
9374
b095c381
JK		 9375static int ipw_wx_sw_reset(struct net_device *dev,
9376 struct iw_request_info *info,
9377 union iwreq_data *wrqu, char *extra)
ea2b26e0
JK		 9378{
9379 struct ipw_priv *priv = ieee80211_priv(dev);
b095c381
JK		 9380 union iwreq_data wrqu_sec = {
9381 .encoding = {
9382 .flags = IW_ENCODE_DISABLED,
9383 },
9384 };
afbf30a2 9385 int ret;
c848d0af 9386
b095c381 9387 IPW_DEBUG_WX("SW_RESET\n");
ea2b26e0 9388
4644151b 9389 mutex_lock(&priv->mutex);
ea2b26e0 9390
afbf30a2
JK		 9391 ret = ipw_sw_reset(priv, 0);
9392 if (!ret) {
9393 free_firmware();
9394 ipw_adapter_restart(priv);
9395 }
ea2b26e0 9396
b095c381
JK		 9397 /* The SW reset bit might have been toggled on by the 'disable'
9398 * module parameter, so take appropriate action */
9399 ipw_radio_kill_sw(priv, priv->status & STATUS_RF_KILL_SW);
ea2b26e0 9400
4644151b 9401 mutex_unlock(&priv->mutex);
b095c381 9402 ieee80211_wx_set_encode(priv->ieee, info, &wrqu_sec, NULL);
4644151b 9403 mutex_lock(&priv->mutex);
bf79451e 9404
b095c381
JK		 9405 if (!(priv->status & STATUS_RF_KILL_MASK)) {
9406 /* Configuration likely changed -- force [re]association */
9407 IPW_DEBUG_ASSOC("[re]association triggered due to sw "
9408 "reset.\n");
9409 if (!ipw_disassociate(priv))
9410 ipw_associate(priv);
43f66a6c 9411 }
b095c381 9412
4644151b 9413 mutex_unlock(&priv->mutex);
43f66a6c 9414
43f66a6c
JK		 9415 return 0;
9416}
43f66a6c
JK		 9417
9418/* Rebase the WE IOCTLs to zero for the handler array */
9419#define IW_IOCTL(x) [(x)-SIOCSIWCOMMIT]
0edd5b44 9420static iw_handler ipw_wx_handlers[] = {
ea2b26e0
JK		 9421 IW_IOCTL(SIOCGIWNAME) = ipw_wx_get_name,
9422 IW_IOCTL(SIOCSIWFREQ) = ipw_wx_set_freq,
9423 IW_IOCTL(SIOCGIWFREQ) = ipw_wx_get_freq,
9424 IW_IOCTL(SIOCSIWMODE) = ipw_wx_set_mode,
9425 IW_IOCTL(SIOCGIWMODE) = ipw_wx_get_mode,
9426 IW_IOCTL(SIOCGIWRANGE) = ipw_wx_get_range,
9427 IW_IOCTL(SIOCSIWAP) = ipw_wx_set_wap,
9428 IW_IOCTL(SIOCGIWAP) = ipw_wx_get_wap,
9429 IW_IOCTL(SIOCSIWSCAN) = ipw_wx_set_scan,
9430 IW_IOCTL(SIOCGIWSCAN) = ipw_wx_get_scan,
9431 IW_IOCTL(SIOCSIWESSID) = ipw_wx_set_essid,
9432 IW_IOCTL(SIOCGIWESSID) = ipw_wx_get_essid,
9433 IW_IOCTL(SIOCSIWNICKN) = ipw_wx_set_nick,
9434 IW_IOCTL(SIOCGIWNICKN) = ipw_wx_get_nick,
9435 IW_IOCTL(SIOCSIWRATE) = ipw_wx_set_rate,
9436 IW_IOCTL(SIOCGIWRATE) = ipw_wx_get_rate,
9437 IW_IOCTL(SIOCSIWRTS) = ipw_wx_set_rts,
9438 IW_IOCTL(SIOCGIWRTS) = ipw_wx_get_rts,
9439 IW_IOCTL(SIOCSIWFRAG) = ipw_wx_set_frag,
9440 IW_IOCTL(SIOCGIWFRAG) = ipw_wx_get_frag,
9441 IW_IOCTL(SIOCSIWTXPOW) = ipw_wx_set_txpow,
9442 IW_IOCTL(SIOCGIWTXPOW) = ipw_wx_get_txpow,
9443 IW_IOCTL(SIOCSIWRETRY) = ipw_wx_set_retry,
9444 IW_IOCTL(SIOCGIWRETRY) = ipw_wx_get_retry,
9445 IW_IOCTL(SIOCSIWENCODE) = ipw_wx_set_encode,
9446 IW_IOCTL(SIOCGIWENCODE) = ipw_wx_get_encode,
9447 IW_IOCTL(SIOCSIWPOWER) = ipw_wx_set_power,
9448 IW_IOCTL(SIOCGIWPOWER) = ipw_wx_get_power,
a613bffd
JK		 9449 IW_IOCTL(SIOCSIWSPY) = iw_handler_set_spy,
9450 IW_IOCTL(SIOCGIWSPY) = iw_handler_get_spy,
9451 IW_IOCTL(SIOCSIWTHRSPY) = iw_handler_set_thrspy,
9452 IW_IOCTL(SIOCGIWTHRSPY) = iw_handler_get_thrspy,
afbf30a2
JK		 9453 IW_IOCTL(SIOCSIWGENIE) = ipw_wx_set_genie,
9454 IW_IOCTL(SIOCGIWGENIE) = ipw_wx_get_genie,
9455 IW_IOCTL(SIOCSIWMLME) = ipw_wx_set_mlme,
9456 IW_IOCTL(SIOCSIWAUTH) = ipw_wx_set_auth,
9457 IW_IOCTL(SIOCGIWAUTH) = ipw_wx_get_auth,
9458 IW_IOCTL(SIOCSIWENCODEEXT) = ipw_wx_set_encodeext,
9459 IW_IOCTL(SIOCGIWENCODEEXT) = ipw_wx_get_encodeext,
43f66a6c
JK		 9460};
9461
b095c381
JK		 9462enum {
9463 IPW_PRIV_SET_POWER = SIOCIWFIRSTPRIV,
9464 IPW_PRIV_GET_POWER,
9465 IPW_PRIV_SET_MODE,
9466 IPW_PRIV_GET_MODE,
9467 IPW_PRIV_SET_PREAMBLE,
9468 IPW_PRIV_GET_PREAMBLE,
9469 IPW_PRIV_RESET,
9470 IPW_PRIV_SW_RESET,
9471#ifdef CONFIG_IPW2200_MONITOR
9472 IPW_PRIV_SET_MONITOR,
9473#endif
9474};
43f66a6c 9475
bf79451e 9476static struct iw_priv_args ipw_priv_args[] = {
43f66a6c 9477 {
0edd5b44
JG		 9478 .cmd = IPW_PRIV_SET_POWER,
9479 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9480 .name = "set_power"},
43f66a6c 9481 {
0edd5b44
JG		 9482 .cmd = IPW_PRIV_GET_POWER,
9483 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | MAX_WX_STRING,
9484 .name = "get_power"},
43f66a6c 9485 {
0edd5b44
JG		 9486 .cmd = IPW_PRIV_SET_MODE,
9487 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9488 .name = "set_mode"},
43f66a6c 9489 {
0edd5b44
JG		 9490 .cmd = IPW_PRIV_GET_MODE,
9491 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | MAX_WX_STRING,
9492 .name = "get_mode"},
43f66a6c 9493 {
ea2b26e0
JK		 9494 .cmd = IPW_PRIV_SET_PREAMBLE,
9495 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9496 .name = "set_preamble"},
9497 {
9498 .cmd = IPW_PRIV_GET_PREAMBLE,
9499 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ,
9500 .name = "get_preamble"},
43f66a6c 9501 {
0edd5b44
JG		 9502 IPW_PRIV_RESET,
9503 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 0, 0, "reset"},
b095c381
JK		 9504 {
9505 IPW_PRIV_SW_RESET,
9506 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 0, 0, "sw_reset"},
9507#ifdef CONFIG_IPW2200_MONITOR
9508 {
9509 IPW_PRIV_SET_MONITOR,
9510 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "monitor"},
9511#endif /* CONFIG_IPW2200_MONITOR */
43f66a6c
JK		 9512};
9513
9514static iw_handler ipw_priv_handler[] = {
9515 ipw_wx_set_powermode,
9516 ipw_wx_get_powermode,
9517 ipw_wx_set_wireless_mode,
9518 ipw_wx_get_wireless_mode,
ea2b26e0
JK		 9519 ipw_wx_set_preamble,
9520 ipw_wx_get_preamble,
bf79451e 9521 ipw_wx_reset,
b095c381
JK		 9522 ipw_wx_sw_reset,
9523#ifdef CONFIG_IPW2200_MONITOR
9524 ipw_wx_set_monitor,
43f66a6c
JK		 9525#endif
9526};
9527
0edd5b44 9528static struct iw_handler_def ipw_wx_handler_def = {
ea2b26e0
JK		 9529 .standard = ipw_wx_handlers,
9530 .num_standard = ARRAY_SIZE(ipw_wx_handlers),
9531 .num_private = ARRAY_SIZE(ipw_priv_handler),
9532 .num_private_args = ARRAY_SIZE(ipw_priv_args),
9533 .private = ipw_priv_handler,
9534 .private_args = ipw_priv_args,
97a78ca9 9535 .get_wireless_stats = ipw_get_wireless_stats,
43f66a6c
JK		 9536};
9537
43f66a6c
JK		 9538/*
9539 * Get wireless statistics.
9540 * Called by /proc/net/wireless
9541 * Also called by SIOCGIWSTATS
9542 */
0edd5b44 9543static struct iw_statistics *ipw_get_wireless_stats(struct net_device *dev)
43f66a6c
JK		 9544{
9545 struct ipw_priv *priv = ieee80211_priv(dev);
9546 struct iw_statistics *wstats;
bf79451e 9547
43f66a6c
JK		 9548 wstats = &priv->wstats;
9549
ea2b26e0 9550 /* if hw is disabled, then ipw_get_ordinal() can't be called.
afbf30a2 9551 * netdev->get_wireless_stats seems to be called before fw is
43f66a6c
JK		 9552 * initialized. STATUS_ASSOCIATED will only be set if the hw is up
9553 * and associated; if not associcated, the values are all meaningless
9554 * anyway, so set them all to NULL and INVALID */
9555 if (!(priv->status & STATUS_ASSOCIATED)) {
9556 wstats->miss.beacon = 0;
9557 wstats->discard.retries = 0;
9558 wstats->qual.qual = 0;
9559 wstats->qual.level = 0;
9560 wstats->qual.noise = 0;
9561 wstats->qual.updated = 7;
9562 wstats->qual.updated |= IW_QUAL_NOISE_INVALID |
0edd5b44 9563 IW_QUAL_QUAL_INVALID | IW_QUAL_LEVEL_INVALID;
43f66a6c 9564 return wstats;
bf79451e 9565 }
43f66a6c
JK		 9566
9567 wstats->qual.qual = priv->quality;
9568 wstats->qual.level = average_value(&priv->average_rssi);
9569 wstats->qual.noise = average_value(&priv->average_noise);
9570 wstats->qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED |
0edd5b44 9571 IW_QUAL_NOISE_UPDATED;
43f66a6c
JK		 9572
9573 wstats->miss.beacon = average_value(&priv->average_missed_beacons);
9574 wstats->discard.retries = priv->last_tx_failures;
9575 wstats->discard.code = priv->ieee->ieee_stats.rx_discards_undecryptable;
bf79451e 9576
43f66a6c
JK		 9577/* if (ipw_get_ordinal(priv, IPW_ORD_STAT_TX_RETRY, &tx_retry, &len))
9578 goto fail_get_ordinal;
9579 wstats->discard.retries += tx_retry; */
bf79451e 9580
43f66a6c
JK		 9581 return wstats;
9582}
9583
43f66a6c
JK		 9584/* net device stuff */
9585
858119e1 9586static void init_sys_config(struct ipw_sys_config *sys_config)
43f66a6c 9587{
0edd5b44 9588 memset(sys_config, 0, sizeof(struct ipw_sys_config));
810dabd4 9589 sys_config->bt_coexistence = 0;
43f66a6c
JK		 9590 sys_config->answer_broadcast_ssid_probe = 0;
9591 sys_config->accept_all_data_frames = 0;
9592 sys_config->accept_non_directed_frames = 1;
9593 sys_config->exclude_unicast_unencrypted = 0;
9594 sys_config->disable_unicast_decryption = 1;
9595 sys_config->exclude_multicast_unencrypted = 0;
9596 sys_config->disable_multicast_decryption = 1;
9597 sys_config->antenna_diversity = CFG_SYS_ANTENNA_BOTH;
0edd5b44 9598 sys_config->pass_crc_to_host = 0; /* TODO: See if 1 gives us FCS */
43f66a6c 9599 sys_config->dot11g_auto_detection = 0;
bf79451e 9600 sys_config->enable_cts_to_self = 0;
43f66a6c 9601 sys_config->bt_coexist_collision_thr = 0;
c848d0af 9602 sys_config->pass_noise_stats_to_host = 1; //1 -- fix for 256
43f66a6c
JK		 9603}
9604
9605static int ipw_net_open(struct net_device *dev)
9606{
9607 struct ipw_priv *priv = ieee80211_priv(dev);
9608 IPW_DEBUG_INFO("dev->open\n");
9609 /* we should be verifying the device is ready to be opened */
4644151b 9610 mutex_lock(&priv->mutex);
bf79451e
JG		 9611 if (!(priv->status & STATUS_RF_KILL_MASK) &&
9612 (priv->status & STATUS_ASSOCIATED))
43f66a6c 9613 netif_start_queue(dev);
4644151b 9614 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9615 return 0;
9616}
9617
9618static int ipw_net_stop(struct net_device *dev)
9619{
9620 IPW_DEBUG_INFO("dev->close\n");
9621 netif_stop_queue(dev);
9622 return 0;
9623}
9624
9625/*
9626todo:
9627
9628modify to send one tfd per fragment instead of using chunking. otherwise
9629we need to heavily modify the ieee80211_skb_to_txb.
9630*/
9631
858119e1 9632static int ipw_tx_skb(struct ipw_priv *priv, struct ieee80211_txb *txb,
227d2dc1 9633 int pri)
43f66a6c 9634{
0dacca1f 9635 struct ieee80211_hdr_3addr *hdr = (struct ieee80211_hdr_3addr *)
0edd5b44 9636 txb->fragments[0]->data;
43f66a6c
JK		 9637 int i = 0;
9638 struct tfd_frame *tfd;
b095c381
JK		 9639#ifdef CONFIG_IPW_QOS
9640 int tx_id = ipw_get_tx_queue_number(priv, pri);
9641 struct clx2_tx_queue *txq = &priv->txq[tx_id];
9642#else
43f66a6c 9643 struct clx2_tx_queue *txq = &priv->txq[0];
b095c381 9644#endif
43f66a6c
JK		 9645 struct clx2_queue *q = &txq->q;
9646 u8 id, hdr_len, unicast;
9647 u16 remaining_bytes;
c848d0af 9648 int fc;
43f66a6c
JK		 9649
9650 switch (priv->ieee->iw_mode) {
9651 case IW_MODE_ADHOC:
9652 hdr_len = IEEE80211_3ADDR_LEN;
3c19065a 9653 unicast = !is_multicast_ether_addr(hdr->addr1);
43f66a6c
JK		 9654 id = ipw_find_station(priv, hdr->addr1);
9655 if (id == IPW_INVALID_STATION) {
9656 id = ipw_add_station(priv, hdr->addr1);
9657 if (id == IPW_INVALID_STATION) {
9658 IPW_WARNING("Attempt to send data to "
bf79451e 9659 "invalid cell: " MAC_FMT "\n",
43f66a6c
JK		 9660 MAC_ARG(hdr->addr1));
9661 goto drop;
9662 }
9663 }
9664 break;
9665
9666 case IW_MODE_INFRA:
9667 default:
3c19065a 9668 unicast = !is_multicast_ether_addr(hdr->addr3);
43f66a6c
JK		 9669 hdr_len = IEEE80211_3ADDR_LEN;
9670 id = 0;
9671 break;
9672 }
9673
9674 tfd = &txq->bd[q->first_empty];
9675 txq->txb[q->first_empty] = txb;
9676 memset(tfd, 0, sizeof(*tfd));
9677 tfd->u.data.station_number = id;
9678
9679 tfd->control_flags.message_type = TX_FRAME_TYPE;
9680 tfd->control_flags.control_bits = TFD_NEED_IRQ_MASK;
9681
9682 tfd->u.data.cmd_id = DINO_CMD_TX;
a613bffd 9683 tfd->u.data.len = cpu_to_le16(txb->payload_size);
43f66a6c 9684 remaining_bytes = txb->payload_size;
bf79451e 9685
43f66a6c 9686 if (priv->assoc_request.ieee_mode == IPW_B_MODE)
b095c381 9687 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_MODE_CCK;
43f66a6c 9688 else
b095c381 9689 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_MODE_OFDM;
43f66a6c 9690
ea2b26e0
JK		 9691 if (priv->assoc_request.preamble_length == DCT_FLAG_SHORT_PREAMBLE)
9692 tfd->u.data.tx_flags |= DCT_FLAG_SHORT_PREAMBLE;
43f66a6c 9693
c848d0af
JK		 9694 fc = le16_to_cpu(hdr->frame_ctl);
9695 hdr->frame_ctl = cpu_to_le16(fc & ~IEEE80211_FCTL_MOREFRAGS);
43f66a6c
JK		 9696
9697 memcpy(&tfd->u.data.tfd.tfd_24.mchdr, hdr, hdr_len);
9698
b095c381
JK		 9699 if (likely(unicast))
9700 tfd->u.data.tx_flags |= DCT_FLAG_ACK_REQD;
9701
9702 if (txb->encrypted && !priv->ieee->host_encrypt) {
9703 switch (priv->ieee->sec.level) {
9704 case SEC_LEVEL_3:
9705 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
9706 IEEE80211_FCTL_PROTECTED;
9707 /* XXX: ACK flag must be set for CCMP even if it
9708 * is a multicast/broadcast packet, because CCMP
9709 * group communication encrypted by GTK is
9710 * actually done by the AP. */
9711 if (!unicast)
9712 tfd->u.data.tx_flags |= DCT_FLAG_ACK_REQD;
9713
9714 tfd->u.data.tx_flags &= ~DCT_FLAG_NO_WEP;
9715 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_SECURITY_CCM;
9716 tfd->u.data.key_index = 0;
9717 tfd->u.data.key_index |= DCT_WEP_INDEX_USE_IMMEDIATE;
9718 break;
9719 case SEC_LEVEL_2:
9720 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
9721 IEEE80211_FCTL_PROTECTED;
9722 tfd->u.data.tx_flags &= ~DCT_FLAG_NO_WEP;
9723 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_SECURITY_TKIP;
9724 tfd->u.data.key_index = DCT_WEP_INDEX_USE_IMMEDIATE;
9725 break;
9726 case SEC_LEVEL_1:
9727 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
9728 IEEE80211_FCTL_PROTECTED;
9729 tfd->u.data.key_index = priv->ieee->tx_keyidx;
9730 if (priv->ieee->sec.key_sizes[priv->ieee->tx_keyidx] <=
9731 40)
9732 tfd->u.data.key_index |= DCT_WEP_KEY_64Bit;
9733 else
9734 tfd->u.data.key_index |= DCT_WEP_KEY_128Bit;
9735 break;
9736 case SEC_LEVEL_0:
9737 break;
9738 default:
9739 printk(KERN_ERR "Unknow security level %d\n",
9740 priv->ieee->sec.level);
9741 break;
9742 }
9743 } else
9744 /* No hardware encryption */
9745 tfd->u.data.tx_flags |= DCT_FLAG_NO_WEP;
9746
9747#ifdef CONFIG_IPW_QOS
9748 ipw_qos_set_tx_queue_command(priv, pri, &(tfd->u.data), unicast);
9749#endif /* CONFIG_IPW_QOS */
9750
43f66a6c 9751 /* payload */
a613bffd
JK		 9752 tfd->u.data.num_chunks = cpu_to_le32(min((u8) (NUM_TFD_CHUNKS - 2),
9753 txb->nr_frags));
9754 IPW_DEBUG_FRAG("%i fragments being sent as %i chunks.\n",
9755 txb->nr_frags, le32_to_cpu(tfd->u.data.num_chunks));
9756 for (i = 0; i < le32_to_cpu(tfd->u.data.num_chunks); i++) {
9757 IPW_DEBUG_FRAG("Adding fragment %i of %i (%d bytes).\n",
9758 i, le32_to_cpu(tfd->u.data.num_chunks),
9759 txb->fragments[i]->len - hdr_len);
bf79451e 9760 IPW_DEBUG_TX("Dumping TX packet frag %i of %i (%d bytes):\n",
43f66a6c
JK		 9761 i, tfd->u.data.num_chunks,
9762 txb->fragments[i]->len - hdr_len);
bf79451e 9763 printk_buf(IPW_DL_TX, txb->fragments[i]->data + hdr_len,
43f66a6c
JK		 9764 txb->fragments[i]->len - hdr_len);
9765
0edd5b44 9766 tfd->u.data.chunk_ptr[i] =
a613bffd
JK		 9767 cpu_to_le32(pci_map_single
9768 (priv->pci_dev,
9769 txb->fragments[i]->data + hdr_len,
9770 txb->fragments[i]->len - hdr_len,
9771 PCI_DMA_TODEVICE));
9772 tfd->u.data.chunk_len[i] =
9773 cpu_to_le16(txb->fragments[i]->len - hdr_len);
43f66a6c
JK		 9774 }
9775
9776 if (i != txb->nr_frags) {
9777 struct sk_buff *skb;
9778 u16 remaining_bytes = 0;
9779 int j;
9780
9781 for (j = i; j < txb->nr_frags; j++)
9782 remaining_bytes += txb->fragments[j]->len - hdr_len;
9783
9784 printk(KERN_INFO "Trying to reallocate for %d bytes\n",
9785 remaining_bytes);
9786 skb = alloc_skb(remaining_bytes, GFP_ATOMIC);
9787 if (skb != NULL) {
a613bffd 9788 tfd->u.data.chunk_len[i] = cpu_to_le16(remaining_bytes);
43f66a6c
JK		 9789 for (j = i; j < txb->nr_frags; j++) {
9790 int size = txb->fragments[j]->len - hdr_len;
afbf30a2 9791
43f66a6c 9792 printk(KERN_INFO "Adding frag %d %d...\n",
0edd5b44 9793 j, size);
43f66a6c 9794 memcpy(skb_put(skb, size),
0edd5b44 9795 txb->fragments[j]->data + hdr_len, size);
43f66a6c
JK		 9796 }
9797 dev_kfree_skb_any(txb->fragments[i]);
9798 txb->fragments[i] = skb;
0edd5b44 9799 tfd->u.data.chunk_ptr[i] =
a613bffd
JK		 9800 cpu_to_le32(pci_map_single
9801 (priv->pci_dev, skb->data,
9802 tfd->u.data.chunk_len[i],
9803 PCI_DMA_TODEVICE));
9804
9805 tfd->u.data.num_chunks =
9806 cpu_to_le32(le32_to_cpu(tfd->u.data.num_chunks) +
9807 1);
bf79451e 9808 }
43f66a6c
JK		 9809 }
9810
9811 /* kick DMA */
9812 q->first_empty = ipw_queue_inc_wrap(q->first_empty, q->n_bd);
9813 ipw_write32(priv, q->reg_w, q->first_empty);
9814
f697014a
JK		 9815 if (ipw_queue_space(q) < q->high_mark)
9816 netif_stop_queue(priv->net_dev);
9817
227d2dc1 9818 return NETDEV_TX_OK;
43f66a6c 9819
0edd5b44 9820 drop:
43f66a6c
JK		 9821 IPW_DEBUG_DROP("Silently dropping Tx packet.\n");
9822 ieee80211_txb_free(txb);
227d2dc1
JK		 9823 return NETDEV_TX_OK;
9824}
9825
9826static int ipw_net_is_queue_full(struct net_device *dev, int pri)
9827{
9828 struct ipw_priv *priv = ieee80211_priv(dev);
9829#ifdef CONFIG_IPW_QOS
9830 int tx_id = ipw_get_tx_queue_number(priv, pri);
9831 struct clx2_tx_queue *txq = &priv->txq[tx_id];
9832#else
9833 struct clx2_tx_queue *txq = &priv->txq[0];
9834#endif /* CONFIG_IPW_QOS */
9835
9836 if (ipw_queue_space(&txq->q) < txq->q.high_mark)
9837 return 1;
9838
9839 return 0;
43f66a6c
JK		 9840}
9841
9842static int ipw_net_hard_start_xmit(struct ieee80211_txb *txb,
c8d42d1a 9843 struct net_device *dev, int pri)
43f66a6c
JK		 9844{
9845 struct ipw_priv *priv = ieee80211_priv(dev);
9846 unsigned long flags;
227d2dc1 9847 int ret;
43f66a6c
JK		 9848
9849 IPW_DEBUG_TX("dev->xmit(%d bytes)\n", txb->payload_size);
43f66a6c
JK		 9850 spin_lock_irqsave(&priv->lock, flags);
9851
9852 if (!(priv->status & STATUS_ASSOCIATED)) {
9853 IPW_DEBUG_INFO("Tx attempt while not associated.\n");
9854 priv->ieee->stats.tx_carrier_errors++;
9855 netif_stop_queue(dev);
9856 goto fail_unlock;
9857 }
9858
227d2dc1
JK		 9859 ret = ipw_tx_skb(priv, txb, pri);
9860 if (ret == NETDEV_TX_OK)
9861 __ipw_led_activity_on(priv);
43f66a6c 9862 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c 9863
227d2dc1 9864 return ret;
43f66a6c 9865
0edd5b44 9866 fail_unlock:
43f66a6c
JK		 9867 spin_unlock_irqrestore(&priv->lock, flags);
9868 return 1;
9869}
9870
9871static struct net_device_stats *ipw_net_get_stats(struct net_device *dev)
9872{
9873 struct ipw_priv *priv = ieee80211_priv(dev);
bf79451e 9874
43f66a6c
JK		 9875 priv->ieee->stats.tx_packets = priv->tx_packets;
9876 priv->ieee->stats.rx_packets = priv->rx_packets;
9877 return &priv->ieee->stats;
9878}
9879
9880static void ipw_net_set_multicast_list(struct net_device *dev)
9881{
9882
9883}
9884
9885static int ipw_net_set_mac_address(struct net_device *dev, void *p)
9886{
9887 struct ipw_priv *priv = ieee80211_priv(dev);
9888 struct sockaddr *addr = p;
9889 if (!is_valid_ether_addr(addr->sa_data))
9890 return -EADDRNOTAVAIL;
4644151b 9891 mutex_lock(&priv->mutex);
43f66a6c
JK		 9892 priv->config |= CFG_CUSTOM_MAC;
9893 memcpy(priv->mac_addr, addr->sa_data, ETH_ALEN);
9894 printk(KERN_INFO "%s: Setting MAC to " MAC_FMT "\n",
9895 priv->net_dev->name, MAC_ARG(priv->mac_addr));
a613bffd 9896 queue_work(priv->workqueue, &priv->adapter_restart);
4644151b 9897 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9898 return 0;
9899}
9900
bf79451e 9901static void ipw_ethtool_get_drvinfo(struct net_device *dev,
43f66a6c
JK		 9902 struct ethtool_drvinfo *info)
9903{
9904 struct ipw_priv *p = ieee80211_priv(dev);
9905 char vers[64];
9906 char date[32];
9907 u32 len;
9908
9909 strcpy(info->driver, DRV_NAME);
9910 strcpy(info->version, DRV_VERSION);
9911
9912 len = sizeof(vers);
9913 ipw_get_ordinal(p, IPW_ORD_STAT_FW_VERSION, vers, &len);
9914 len = sizeof(date);
9915 ipw_get_ordinal(p, IPW_ORD_STAT_FW_DATE, date, &len);
9916
0edd5b44 9917 snprintf(info->fw_version, sizeof(info->fw_version), "%s (%s)",
43f66a6c
JK		 9918 vers, date);
9919 strcpy(info->bus_info, pci_name(p->pci_dev));
b095c381 9920 info->eedump_len = IPW_EEPROM_IMAGE_SIZE;
43f66a6c
JK		 9921}
9922
9923static u32 ipw_ethtool_get_link(struct net_device *dev)
9924{
9925 struct ipw_priv *priv = ieee80211_priv(dev);
9926 return (priv->status & STATUS_ASSOCIATED) != 0;
9927}
9928
9929static int ipw_ethtool_get_eeprom_len(struct net_device *dev)
9930{
b095c381 9931 return IPW_EEPROM_IMAGE_SIZE;
43f66a6c
JK		 9932}
9933
9934static int ipw_ethtool_get_eeprom(struct net_device *dev,
0edd5b44 9935 struct ethtool_eeprom *eeprom, u8 * bytes)
43f66a6c
JK		 9936{
9937 struct ipw_priv *p = ieee80211_priv(dev);
9938
b095c381 9939 if (eeprom->offset + eeprom->len > IPW_EEPROM_IMAGE_SIZE)
43f66a6c 9940 return -EINVAL;
4644151b 9941 mutex_lock(&p->mutex);
afbf30a2 9942 memcpy(bytes, &p->eeprom[eeprom->offset], eeprom->len);
4644151b 9943 mutex_unlock(&p->mutex);
43f66a6c
JK		 9944 return 0;
9945}
9946
9947static int ipw_ethtool_set_eeprom(struct net_device *dev,
0edd5b44 9948 struct ethtool_eeprom *eeprom, u8 * bytes)
43f66a6c
JK		 9949{
9950 struct ipw_priv *p = ieee80211_priv(dev);
9951 int i;
9952
b095c381 9953 if (eeprom->offset + eeprom->len > IPW_EEPROM_IMAGE_SIZE)
43f66a6c 9954 return -EINVAL;
4644151b 9955 mutex_lock(&p->mutex);
afbf30a2 9956 memcpy(&p->eeprom[eeprom->offset], bytes, eeprom->len);
bf79451e 9957 for (i = IPW_EEPROM_DATA;
b095c381 9958 i < IPW_EEPROM_DATA + IPW_EEPROM_IMAGE_SIZE; i++)
43f66a6c 9959 ipw_write8(p, i, p->eeprom[i]);
4644151b 9960 mutex_unlock(&p->mutex);
43f66a6c
JK		 9961 return 0;
9962}
9963
9964static struct ethtool_ops ipw_ethtool_ops = {
ea2b26e0
JK		 9965 .get_link = ipw_ethtool_get_link,
9966 .get_drvinfo = ipw_ethtool_get_drvinfo,
9967 .get_eeprom_len = ipw_ethtool_get_eeprom_len,
9968 .get_eeprom = ipw_ethtool_get_eeprom,
9969 .set_eeprom = ipw_ethtool_set_eeprom,
43f66a6c
JK		 9970};
9971
9972static irqreturn_t ipw_isr(int irq, void *data, struct pt_regs *regs)
9973{
9974 struct ipw_priv *priv = data;
9975 u32 inta, inta_mask;
bf79451e 9976
43f66a6c
JK		 9977 if (!priv)
9978 return IRQ_NONE;
9979
9980 spin_lock(&priv->lock);
9981
9982 if (!(priv->status & STATUS_INT_ENABLED)) {
9983 /* Shared IRQ */
9984 goto none;
9985 }
9986
b095c381
JK		 9987 inta = ipw_read32(priv, IPW_INTA_RW);
9988 inta_mask = ipw_read32(priv, IPW_INTA_MASK_R);
bf79451e 9989
43f66a6c
JK		 9990 if (inta == 0xFFFFFFFF) {
9991 /* Hardware disappeared */
9992 IPW_WARNING("IRQ INTA == 0xFFFFFFFF\n");
9993 goto none;
9994 }
9995
b095c381 9996 if (!(inta & (IPW_INTA_MASK_ALL & inta_mask))) {
43f66a6c
JK		 9997 /* Shared interrupt */
9998 goto none;
9999 }
10000
10001 /* tell the device to stop sending interrupts */
10002 ipw_disable_interrupts(priv);
bf79451e 10003
43f66a6c 10004 /* ack current interrupts */
b095c381
JK		 10005 inta &= (IPW_INTA_MASK_ALL & inta_mask);
10006 ipw_write32(priv, IPW_INTA_RW, inta);
bf79451e 10007
43f66a6c
JK		 10008 /* Cache INTA value for our tasklet */
10009 priv->isr_inta = inta;
10010
10011 tasklet_schedule(&priv->irq_tasklet);
10012
0edd5b44 10013 spin_unlock(&priv->lock);
43f66a6c
JK		 10014
10015 return IRQ_HANDLED;
0edd5b44 10016 none:
43f66a6c
JK		 10017 spin_unlock(&priv->lock);
10018 return IRQ_NONE;
10019}
10020
10021static void ipw_rf_kill(void *adapter)
10022{
10023 struct ipw_priv *priv = adapter;
10024 unsigned long flags;
bf79451e 10025
43f66a6c
JK		 10026 spin_lock_irqsave(&priv->lock, flags);
10027
10028 if (rf_kill_active(priv)) {
10029 IPW_DEBUG_RF_KILL("RF Kill active, rescheduling GPIO check\n");
10030 if (priv->workqueue)
10031 queue_delayed_work(priv->workqueue,
10032 &priv->rf_kill, 2 * HZ);
10033 goto exit_unlock;
10034 }
10035
10036 /* RF Kill is now disabled, so bring the device back up */
10037
10038 if (!(priv->status & STATUS_RF_KILL_MASK)) {
10039 IPW_DEBUG_RF_KILL("HW RF Kill no longer active, restarting "
10040 "device\n");
10041
10042 /* we can not do an adapter restart while inside an irq lock */
10043 queue_work(priv->workqueue, &priv->adapter_restart);
bf79451e 10044 } else
43f66a6c
JK		 10045 IPW_DEBUG_RF_KILL("HW RF Kill deactivated. SW RF Kill still "
10046 "enabled\n");
10047
0edd5b44 10048 exit_unlock:
43f66a6c
JK		 10049 spin_unlock_irqrestore(&priv->lock, flags);
10050}
10051
c848d0af
JK		 10052static void ipw_bg_rf_kill(void *data)
10053{
10054 struct ipw_priv *priv = data;
4644151b 10055 mutex_lock(&priv->mutex);
c848d0af 10056 ipw_rf_kill(data);
4644151b 10057 mutex_unlock(&priv->mutex);
c848d0af
JK		 10058}
10059
a73e22b2 10060static void ipw_link_up(struct ipw_priv *priv)
a613bffd 10061{
afbf30a2
JK		 10062 priv->last_seq_num = -1;
10063 priv->last_frag_num = -1;
10064 priv->last_packet_time = 0;
10065
a613bffd
JK		 10066 netif_carrier_on(priv->net_dev);
10067 if (netif_queue_stopped(priv->net_dev)) {
10068 IPW_DEBUG_NOTIF("waking queue\n");
10069 netif_wake_queue(priv->net_dev);
10070 } else {
10071 IPW_DEBUG_NOTIF("starting queue\n");
10072 netif_start_queue(priv->net_dev);
10073 }
10074
c848d0af 10075 cancel_delayed_work(&priv->request_scan);
a613bffd
JK		 10076 ipw_reset_stats(priv);
10077 /* Ensure the rate is updated immediately */
10078 priv->last_rate = ipw_get_current_rate(priv);
10079 ipw_gather_stats(priv);
10080 ipw_led_link_up(priv);
10081 notify_wx_assoc_event(priv);
10082
10083 if (priv->config & CFG_BACKGROUND_SCAN)
10084 queue_delayed_work(priv->workqueue, &priv->request_scan, HZ);
10085}
10086
c848d0af
JK		 10087static void ipw_bg_link_up(void *data)
10088{
10089 struct ipw_priv *priv = data;
4644151b 10090 mutex_lock(&priv->mutex);
c848d0af 10091 ipw_link_up(data);
4644151b 10092 mutex_unlock(&priv->mutex);
c848d0af
JK		 10093}
10094
a73e22b2 10095static void ipw_link_down(struct ipw_priv *priv)
a613bffd
JK		 10096{
10097 ipw_led_link_down(priv);
10098 netif_carrier_off(priv->net_dev);
10099 netif_stop_queue(priv->net_dev);
10100 notify_wx_assoc_event(priv);
10101
10102 /* Cancel any queued work ... */
10103 cancel_delayed_work(&priv->request_scan);
10104 cancel_delayed_work(&priv->adhoc_check);
10105 cancel_delayed_work(&priv->gather_stats);
10106
10107 ipw_reset_stats(priv);
10108
afbf30a2
JK		 10109 if (!(priv->status & STATUS_EXIT_PENDING)) {
10110 /* Queue up another scan... */
10111 queue_work(priv->workqueue, &priv->request_scan);
10112 }
a613bffd
JK		 10113}
10114
c848d0af
JK		 10115static void ipw_bg_link_down(void *data)
10116{
10117 struct ipw_priv *priv = data;
4644151b 10118 mutex_lock(&priv->mutex);
c848d0af 10119 ipw_link_down(data);
4644151b 10120 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10121}
10122
10123static int ipw_setup_deferred_work(struct ipw_priv *priv)
10124{
10125 int ret = 0;
10126
43f66a6c 10127 priv->workqueue = create_workqueue(DRV_NAME);
43f66a6c 10128 init_waitqueue_head(&priv->wait_command_queue);
afbf30a2 10129 init_waitqueue_head(&priv->wait_state);
43f66a6c 10130
c848d0af
JK		 10131 INIT_WORK(&priv->adhoc_check, ipw_bg_adhoc_check, priv);
10132 INIT_WORK(&priv->associate, ipw_bg_associate, priv);
10133 INIT_WORK(&priv->disassociate, ipw_bg_disassociate, priv);
d8bad6df 10134 INIT_WORK(&priv->system_config, ipw_system_config, priv);
c848d0af
JK		 10135 INIT_WORK(&priv->rx_replenish, ipw_bg_rx_queue_replenish, priv);
10136 INIT_WORK(&priv->adapter_restart, ipw_bg_adapter_restart, priv);
10137 INIT_WORK(&priv->rf_kill, ipw_bg_rf_kill, priv);
10138 INIT_WORK(&priv->up, (void (*)(void *))ipw_bg_up, priv);
10139 INIT_WORK(&priv->down, (void (*)(void *))ipw_bg_down, priv);
bf79451e 10140 INIT_WORK(&priv->request_scan,
43f66a6c 10141 (void (*)(void *))ipw_request_scan, priv);
bf79451e 10142 INIT_WORK(&priv->gather_stats,
c848d0af
JK		 10143 (void (*)(void *))ipw_bg_gather_stats, priv);
10144 INIT_WORK(&priv->abort_scan, (void (*)(void *))ipw_bg_abort_scan, priv);
10145 INIT_WORK(&priv->roam, ipw_bg_roam, priv);
10146 INIT_WORK(&priv->scan_check, ipw_bg_scan_check, priv);
10147 INIT_WORK(&priv->link_up, (void (*)(void *))ipw_bg_link_up, priv);
10148 INIT_WORK(&priv->link_down, (void (*)(void *))ipw_bg_link_down, priv);
10149 INIT_WORK(&priv->led_link_on, (void (*)(void *))ipw_bg_led_link_on,
10150 priv);
10151 INIT_WORK(&priv->led_link_off, (void (*)(void *))ipw_bg_led_link_off,
a613bffd 10152 priv);
c848d0af 10153 INIT_WORK(&priv->led_act_off, (void (*)(void *))ipw_bg_led_activity_off,
a613bffd 10154 priv);
c848d0af
JK		 10155 INIT_WORK(&priv->merge_networks,
10156 (void (*)(void *))ipw_merge_adhoc_network, priv);
43f66a6c 10157
b095c381
JK		 10158#ifdef CONFIG_IPW_QOS
10159 INIT_WORK(&priv->qos_activate, (void (*)(void *))ipw_bg_qos_activate,
10160 priv);
10161#endif /* CONFIG_IPW_QOS */
43f66a6c
JK		 10162
10163 tasklet_init(&priv->irq_tasklet, (void (*)(unsigned long))
10164 ipw_irq_tasklet, (unsigned long)priv);
10165
10166 return ret;
10167}
10168
43f66a6c
JK		 10169static void shim__set_security(struct net_device *dev,
10170 struct ieee80211_security *sec)
10171{
10172 struct ipw_priv *priv = ieee80211_priv(dev);
10173 int i;
bf79451e 10174 for (i = 0; i < 4; i++) {
43f66a6c 10175 if (sec->flags & (1 << i)) {
afbf30a2 10176 priv->ieee->sec.encode_alg[i] = sec->encode_alg[i];
b095c381 10177 priv->ieee->sec.key_sizes[i] = sec->key_sizes[i];
43f66a6c 10178 if (sec->key_sizes[i] == 0)
b095c381
JK		 10179 priv->ieee->sec.flags &= ~(1 << i);
10180 else {
10181 memcpy(priv->ieee->sec.keys[i], sec->keys[i],
43f66a6c 10182 sec->key_sizes[i]);
b095c381
JK		 10183 priv->ieee->sec.flags |= (1 << i);
10184 }
43f66a6c 10185 priv->status |= STATUS_SECURITY_UPDATED;
b095c381
JK		 10186 } else if (sec->level != SEC_LEVEL_1)
10187 priv->ieee->sec.flags &= ~(1 << i);
43f66a6c
JK		 10188 }
10189
b095c381 10190 if (sec->flags & SEC_ACTIVE_KEY) {
43f66a6c 10191 if (sec->active_key <= 3) {
b095c381
JK		 10192 priv->ieee->sec.active_key = sec->active_key;
10193 priv->ieee->sec.flags |= SEC_ACTIVE_KEY;
bf79451e 10194 } else
b095c381 10195 priv->ieee->sec.flags &= ~SEC_ACTIVE_KEY;
43f66a6c 10196 priv->status |= STATUS_SECURITY_UPDATED;
b095c381
JK		 10197 } else
10198 priv->ieee->sec.flags &= ~SEC_ACTIVE_KEY;
43f66a6c
JK		 10199
10200 if ((sec->flags & SEC_AUTH_MODE) &&
b095c381
JK		 10201 (priv->ieee->sec.auth_mode != sec->auth_mode)) {
10202 priv->ieee->sec.auth_mode = sec->auth_mode;
10203 priv->ieee->sec.flags |= SEC_AUTH_MODE;
43f66a6c
JK		 10204 if (sec->auth_mode == WLAN_AUTH_SHARED_KEY)
10205 priv->capability |= CAP_SHARED_KEY;
10206 else
10207 priv->capability &= ~CAP_SHARED_KEY;
10208 priv->status |= STATUS_SECURITY_UPDATED;
10209 }
bf79451e 10210
b095c381
JK		 10211 if (sec->flags & SEC_ENABLED && priv->ieee->sec.enabled != sec->enabled) {
10212 priv->ieee->sec.flags |= SEC_ENABLED;
10213 priv->ieee->sec.enabled = sec->enabled;
43f66a6c 10214 priv->status |= STATUS_SECURITY_UPDATED;
bf79451e 10215 if (sec->enabled)
43f66a6c
JK		 10216 priv->capability |= CAP_PRIVACY_ON;
10217 else
10218 priv->capability &= ~CAP_PRIVACY_ON;
10219 }
bf79451e 10220
afbf30a2
JK		 10221 if (sec->flags & SEC_ENCRYPT)
10222 priv->ieee->sec.encrypt = sec->encrypt;
bf79451e 10223
b095c381
JK		 10224 if (sec->flags & SEC_LEVEL && priv->ieee->sec.level != sec->level) {
10225 priv->ieee->sec.level = sec->level;
10226 priv->ieee->sec.flags |= SEC_LEVEL;
43f66a6c
JK		 10227 priv->status |= STATUS_SECURITY_UPDATED;
10228 }
10229
1fbfea54
ZY		 10230 if (!priv->ieee->host_encrypt && (sec->flags & SEC_ENCRYPT))
10231 ipw_set_hwcrypto_keys(priv);
10232
bf79451e
JG		 10233 /* To match current functionality of ipw2100 (which works well w/
10234 * various supplicants, we don't force a disassociate if the
43f66a6c
JK		 10235 * privacy capability changes ... */
10236#if 0
10237 if ((priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) &&
bf79451e 10238 (((priv->assoc_request.capability &
43f66a6c 10239 WLAN_CAPABILITY_PRIVACY) && !sec->enabled) ||
bf79451e 10240 (!(priv->assoc_request.capability &
0edd5b44 10241 WLAN_CAPABILITY_PRIVACY) && sec->enabled))) {
43f66a6c
JK		 10242 IPW_DEBUG_ASSOC("Disassociating due to capability "
10243 "change.\n");
10244 ipw_disassociate(priv);
10245 }
10246#endif
10247}
10248
bf79451e 10249static int init_supported_rates(struct ipw_priv *priv,
43f66a6c
JK		 10250 struct ipw_supported_rates *rates)
10251{
10252 /* TODO: Mask out rates based on priv->rates_mask */
10253
10254 memset(rates, 0, sizeof(*rates));
0edd5b44 10255 /* configure supported rates */
43f66a6c
JK		 10256 switch (priv->ieee->freq_band) {
10257 case IEEE80211_52GHZ_BAND:
10258 rates->ieee_mode = IPW_A_MODE;
10259 rates->purpose = IPW_RATE_CAPABILITIES;
10260 ipw_add_ofdm_scan_rates(rates, IEEE80211_CCK_MODULATION,
10261 IEEE80211_OFDM_DEFAULT_RATES_MASK);
10262 break;
10263
0edd5b44 10264 default: /* Mixed or 2.4Ghz */
43f66a6c
JK		 10265 rates->ieee_mode = IPW_G_MODE;
10266 rates->purpose = IPW_RATE_CAPABILITIES;
10267 ipw_add_cck_scan_rates(rates, IEEE80211_CCK_MODULATION,
10268 IEEE80211_CCK_DEFAULT_RATES_MASK);
10269 if (priv->ieee->modulation & IEEE80211_OFDM_MODULATION) {
10270 ipw_add_ofdm_scan_rates(rates, IEEE80211_CCK_MODULATION,
10271 IEEE80211_OFDM_DEFAULT_RATES_MASK);
10272 }
10273 break;
10274 }
10275
10276 return 0;
10277}
10278
bf79451e 10279static int ipw_config(struct ipw_priv *priv)
43f66a6c 10280{
43f66a6c
JK		 10281 /* This is only called from ipw_up, which resets/reloads the firmware
10282 so, we don't need to first disable the card before we configure
10283 it */
6de9f7f2 10284 if (ipw_set_tx_power(priv))
43f66a6c
JK		 10285 goto error;
10286
10287 /* initialize adapter address */
10288 if (ipw_send_adapter_address(priv, priv->net_dev->dev_addr))
10289 goto error;
10290
10291 /* set basic system config settings */
10292 init_sys_config(&priv->sys_config);
810dabd4
ZY		 10293
10294 /* Support Bluetooth if we have BT h/w on board, and user wants to.
10295 * Does not support BT priority yet (don't abort or defer our Tx) */
10296 if (bt_coexist) {
2638bc39 10297 unsigned char bt_caps = priv->eeprom[EEPROM_SKU_CAPABILITY];
810dabd4
ZY		 10298
10299 if (bt_caps & EEPROM_SKU_CAP_BT_CHANNEL_SIG)
10300 priv->sys_config.bt_coexistence
2638bc39 10301 |= CFG_BT_COEXISTENCE_SIGNAL_CHNL;
810dabd4
ZY		 10302 if (bt_caps & EEPROM_SKU_CAP_BT_OOB)
10303 priv->sys_config.bt_coexistence
2638bc39 10304 |= CFG_BT_COEXISTENCE_OOB;
810dabd4
ZY		 10305 }
10306
c848d0af
JK		 10307 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
10308 priv->sys_config.answer_broadcast_ssid_probe = 1;
10309 else
10310 priv->sys_config.answer_broadcast_ssid_probe = 0;
10311
43f66a6c
JK		 10312 if (ipw_send_system_config(priv, &priv->sys_config))
10313 goto error;
10314
0edd5b44
JG		 10315 init_supported_rates(priv, &priv->rates);
10316 if (ipw_send_supported_rates(priv, &priv->rates))
43f66a6c
JK		 10317 goto error;
10318
10319 /* Set request-to-send threshold */
10320 if (priv->rts_threshold) {
10321 if (ipw_send_rts_threshold(priv, priv->rts_threshold))
10322 goto error;
10323 }
b095c381
JK		 10324#ifdef CONFIG_IPW_QOS
10325 IPW_DEBUG_QOS("QoS: call ipw_qos_activate\n");
10326 ipw_qos_activate(priv, NULL);
10327#endif /* CONFIG_IPW_QOS */
43f66a6c
JK		 10328
10329 if (ipw_set_random_seed(priv))
10330 goto error;
bf79451e 10331
43f66a6c
JK		 10332 /* final state transition to the RUN state */
10333 if (ipw_send_host_complete(priv))
10334 goto error;
10335
e666619e
JK		 10336 priv->status |= STATUS_INIT;
10337
10338 ipw_led_init(priv);
10339 ipw_led_radio_on(priv);
10340 priv->notif_missed_beacons = 0;
10341
10342 /* Set hardware WEP key if it is configured. */
10343 if ((priv->capability & CAP_PRIVACY_ON) &&
10344 (priv->ieee->sec.level == SEC_LEVEL_1) &&
10345 !(priv->ieee->host_encrypt || priv->ieee->host_decrypt))
10346 ipw_set_hwcrypto_keys(priv);
43f66a6c
JK		 10347
10348 return 0;
bf79451e 10349
0edd5b44 10350 error:
43f66a6c
JK		 10351 return -EIO;
10352}
10353
4f36f808
JK		 10354/*
10355 * NOTE:
10356 *
10357 * These tables have been tested in conjunction with the
10358 * Intel PRO/Wireless 2200BG and 2915ABG Network Connection Adapters.
10359 *
10360 * Altering this values, using it on other hardware, or in geographies
10361 * not intended for resale of the above mentioned Intel adapters has
10362 * not been tested.
10363 *
48a84770
HBA		 10364 * Remember to update the table in README.ipw2200 when changing this
10365 * table.
10366 *
4f36f808
JK		 10367 */
10368static const struct ieee80211_geo ipw_geos[] = {
10369 { /* Restricted */
10370 "---",
10371 .bg_channels = 11,
10372 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10373 {2427, 4}, {2432, 5}, {2437, 6},
10374 {2442, 7}, {2447, 8}, {2452, 9},
10375 {2457, 10}, {2462, 11}},
10376 },
10377
10378 { /* Custom US/Canada */
10379 "ZZF",
10380 .bg_channels = 11,
10381 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10382 {2427, 4}, {2432, 5}, {2437, 6},
10383 {2442, 7}, {2447, 8}, {2452, 9},
10384 {2457, 10}, {2462, 11}},
10385 .a_channels = 8,
10386 .a = {{5180, 36},
10387 {5200, 40},
10388 {5220, 44},
10389 {5240, 48},
10390 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10391 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10392 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10393 {5320, 64, IEEE80211_CH_PASSIVE_ONLY}},
10394 },
10395
10396 { /* Rest of World */
10397 "ZZD",
10398 .bg_channels = 13,
10399 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10400 {2427, 4}, {2432, 5}, {2437, 6},
10401 {2442, 7}, {2447, 8}, {2452, 9},
10402 {2457, 10}, {2462, 11}, {2467, 12},
10403 {2472, 13}},
10404 },
10405
10406 { /* Custom USA & Europe & High */
10407 "ZZA",
10408 .bg_channels = 11,
10409 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10410 {2427, 4}, {2432, 5}, {2437, 6},
10411 {2442, 7}, {2447, 8}, {2452, 9},
10412 {2457, 10}, {2462, 11}},
10413 .a_channels = 13,
10414 .a = {{5180, 36},
10415 {5200, 40},
10416 {5220, 44},
10417 {5240, 48},
10418 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10419 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10420 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10421 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
10422 {5745, 149},
10423 {5765, 153},
10424 {5785, 157},
10425 {5805, 161},
10426 {5825, 165}},
10427 },
10428
10429 { /* Custom NA & Europe */
10430 "ZZB",
10431 .bg_channels = 11,
10432 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10433 {2427, 4}, {2432, 5}, {2437, 6},
10434 {2442, 7}, {2447, 8}, {2452, 9},
10435 {2457, 10}, {2462, 11}},
10436 .a_channels = 13,
10437 .a = {{5180, 36},
10438 {5200, 40},
10439 {5220, 44},
10440 {5240, 48},
10441 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10442 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10443 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10444 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
10445 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
10446 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
10447 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
10448 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
10449 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
10450 },
10451
10452 { /* Custom Japan */
10453 "ZZC",
10454 .bg_channels = 11,
10455 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10456 {2427, 4}, {2432, 5}, {2437, 6},
10457 {2442, 7}, {2447, 8}, {2452, 9},
10458 {2457, 10}, {2462, 11}},
10459 .a_channels = 4,
10460 .a = {{5170, 34}, {5190, 38},
10461 {5210, 42}, {5230, 46}},
10462 },
10463
10464 { /* Custom */
10465 "ZZM",
10466 .bg_channels = 11,
10467 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10468 {2427, 4}, {2432, 5}, {2437, 6},
10469 {2442, 7}, {2447, 8}, {2452, 9},
10470 {2457, 10}, {2462, 11}},
10471 },
10472
10473 { /* Europe */
10474 "ZZE",
10475 .bg_channels = 13,
10476 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10477 {2427, 4}, {2432, 5}, {2437, 6},
10478 {2442, 7}, {2447, 8}, {2452, 9},
10479 {2457, 10}, {2462, 11}, {2467, 12},
10480 {2472, 13}},
10481 .a_channels = 19,
10482 .a = {{5180, 36},
10483 {5200, 40},
10484 {5220, 44},
10485 {5240, 48},
10486 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10487 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10488 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10489 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
10490 {5500, 100, IEEE80211_CH_PASSIVE_ONLY},
10491 {5520, 104, IEEE80211_CH_PASSIVE_ONLY},
10492 {5540, 108, IEEE80211_CH_PASSIVE_ONLY},
10493 {5560, 112, IEEE80211_CH_PASSIVE_ONLY},
10494 {5580, 116, IEEE80211_CH_PASSIVE_ONLY},
10495 {5600, 120, IEEE80211_CH_PASSIVE_ONLY},
10496 {5620, 124, IEEE80211_CH_PASSIVE_ONLY},
10497 {5640, 128, IEEE80211_CH_PASSIVE_ONLY},
10498 {5660, 132, IEEE80211_CH_PASSIVE_ONLY},
10499 {5680, 136, IEEE80211_CH_PASSIVE_ONLY},
10500 {5700, 140, IEEE80211_CH_PASSIVE_ONLY}},
10501 },
10502
10503 { /* Custom Japan */
10504 "ZZJ",
10505 .bg_channels = 14,
10506 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10507 {2427, 4}, {2432, 5}, {2437, 6},
10508 {2442, 7}, {2447, 8}, {2452, 9},
10509 {2457, 10}, {2462, 11}, {2467, 12},
10510 {2472, 13}, {2484, 14, IEEE80211_CH_B_ONLY}},
10511 .a_channels = 4,
10512 .a = {{5170, 34}, {5190, 38},
10513 {5210, 42}, {5230, 46}},
10514 },
10515
03520576
JK		 10516 { /* Rest of World */
10517 "ZZR",
10518 .bg_channels = 14,
10519 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10520 {2427, 4}, {2432, 5}, {2437, 6},
10521 {2442, 7}, {2447, 8}, {2452, 9},
10522 {2457, 10}, {2462, 11}, {2467, 12},
10523 {2472, 13}, {2484, 14, IEEE80211_CH_B_ONLY |
10524 IEEE80211_CH_PASSIVE_ONLY}},
10525 },
10526
4f36f808
JK		 10527 { /* High Band */
10528 "ZZH",
10529 .bg_channels = 13,
10530 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10531 {2427, 4}, {2432, 5}, {2437, 6},
10532 {2442, 7}, {2447, 8}, {2452, 9},
10533 {2457, 10}, {2462, 11},
10534 {2467, 12, IEEE80211_CH_PASSIVE_ONLY},
10535 {2472, 13, IEEE80211_CH_PASSIVE_ONLY}},
10536 .a_channels = 4,
10537 .a = {{5745, 149}, {5765, 153},
10538 {5785, 157}, {5805, 161}},
10539 },
10540
10541 { /* Custom Europe */
10542 "ZZG",
10543 .bg_channels = 13,
10544 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10545 {2427, 4}, {2432, 5}, {2437, 6},
10546 {2442, 7}, {2447, 8}, {2452, 9},
10547 {2457, 10}, {2462, 11},
10548 {2467, 12}, {2472, 13}},
10549 .a_channels = 4,
10550 .a = {{5180, 36}, {5200, 40},
10551 {5220, 44}, {5240, 48}},
10552 },
10553
10554 { /* Europe */
10555 "ZZK",
10556 .bg_channels = 13,
10557 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10558 {2427, 4}, {2432, 5}, {2437, 6},
10559 {2442, 7}, {2447, 8}, {2452, 9},
10560 {2457, 10}, {2462, 11},
10561 {2467, 12, IEEE80211_CH_PASSIVE_ONLY},
10562 {2472, 13, IEEE80211_CH_PASSIVE_ONLY}},
10563 .a_channels = 24,
10564 .a = {{5180, 36, IEEE80211_CH_PASSIVE_ONLY},
10565 {5200, 40, IEEE80211_CH_PASSIVE_ONLY},
10566 {5220, 44, IEEE80211_CH_PASSIVE_ONLY},
10567 {5240, 48, IEEE80211_CH_PASSIVE_ONLY},
10568 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10569 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10570 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10571 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
10572 {5500, 100, IEEE80211_CH_PASSIVE_ONLY},
10573 {5520, 104, IEEE80211_CH_PASSIVE_ONLY},
10574 {5540, 108, IEEE80211_CH_PASSIVE_ONLY},
10575 {5560, 112, IEEE80211_CH_PASSIVE_ONLY},
10576 {5580, 116, IEEE80211_CH_PASSIVE_ONLY},
10577 {5600, 120, IEEE80211_CH_PASSIVE_ONLY},
10578 {5620, 124, IEEE80211_CH_PASSIVE_ONLY},
10579 {5640, 128, IEEE80211_CH_PASSIVE_ONLY},
10580 {5660, 132, IEEE80211_CH_PASSIVE_ONLY},
10581 {5680, 136, IEEE80211_CH_PASSIVE_ONLY},
10582 {5700, 140, IEEE80211_CH_PASSIVE_ONLY},
10583 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
10584 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
10585 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
10586 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
10587 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
10588 },
10589
10590 { /* Europe */
10591 "ZZL",
10592 .bg_channels = 11,
10593 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10594 {2427, 4}, {2432, 5}, {2437, 6},
10595 {2442, 7}, {2447, 8}, {2452, 9},
10596 {2457, 10}, {2462, 11}},
10597 .a_channels = 13,
10598 .a = {{5180, 36, IEEE80211_CH_PASSIVE_ONLY},
10599 {5200, 40, IEEE80211_CH_PASSIVE_ONLY},
10600 {5220, 44, IEEE80211_CH_PASSIVE_ONLY},
10601 {5240, 48, IEEE80211_CH_PASSIVE_ONLY},
10602 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10603 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10604 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10605 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
10606 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
10607 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
10608 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
10609 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
10610 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
10611 }
afbf30a2
JK		 10612};
10613
43f66a6c
JK		 10614#define MAX_HW_RESTARTS 5
10615static int ipw_up(struct ipw_priv *priv)
10616{
4f36f808 10617 int rc, i, j;
43f66a6c
JK		 10618
10619 if (priv->status & STATUS_EXIT_PENDING)
10620 return -EIO;
10621
f6c5cb7c
JK		 10622 if (cmdlog && !priv->cmdlog) {
10623 priv->cmdlog = kmalloc(sizeof(*priv->cmdlog) * cmdlog,
10624 GFP_KERNEL);
10625 if (priv->cmdlog == NULL) {
10626 IPW_ERROR("Error allocating %d command log entries.\n",
10627 cmdlog);
10628 } else {
10629 memset(priv->cmdlog, 0, sizeof(*priv->cmdlog) * cmdlog);
10630 priv->cmdlog_len = cmdlog;
10631 }
10632 }
10633
0edd5b44 10634 for (i = 0; i < MAX_HW_RESTARTS; i++) {
bf79451e 10635 /* Load the microcode, firmware, and eeprom.
43f66a6c
JK		 10636 * Also start the clocks. */
10637 rc = ipw_load(priv);
10638 if (rc) {
a4f6bbb3 10639 IPW_ERROR("Unable to load firmware: %d\n", rc);
43f66a6c
JK		 10640 return rc;
10641 }
10642
10643 ipw_init_ordinals(priv);
10644 if (!(priv->config & CFG_CUSTOM_MAC))
10645 eeprom_parse_mac(priv, priv->mac_addr);
10646 memcpy(priv->net_dev->dev_addr, priv->mac_addr, ETH_ALEN);
10647
4f36f808
JK		 10648 for (j = 0; j < ARRAY_SIZE(ipw_geos); j++) {
10649 if (!memcmp(&priv->eeprom[EEPROM_COUNTRY_CODE],
10650 ipw_geos[j].name, 3))
10651 break;
10652 }
03520576
JK		 10653 if (j == ARRAY_SIZE(ipw_geos)) {
10654 IPW_WARNING("SKU [%c%c%c] not recognized.\n",
10655 priv->eeprom[EEPROM_COUNTRY_CODE + 0],
10656 priv->eeprom[EEPROM_COUNTRY_CODE + 1],
10657 priv->eeprom[EEPROM_COUNTRY_CODE + 2]);
4f36f808 10658 j = 0;
03520576 10659 }
1867b117 10660 if (ieee80211_set_geo(priv->ieee, &ipw_geos[j])) {
4f36f808
JK		 10661 IPW_WARNING("Could not set geography.");
10662 return 0;
10663 }
10664
b095c381
JK		 10665 if (priv->status & STATUS_RF_KILL_SW) {
10666 IPW_WARNING("Radio disabled by module parameter.\n");
10667 return 0;
10668 } else if (rf_kill_active(priv)) {
10669 IPW_WARNING("Radio Frequency Kill Switch is On:\n"
10670 "Kill switch must be turned off for "
10671 "wireless networking to work.\n");
10672 queue_delayed_work(priv->workqueue, &priv->rf_kill,
10673 2 * HZ);
43f66a6c 10674 return 0;
c848d0af 10675 }
43f66a6c
JK		 10676
10677 rc = ipw_config(priv);
10678 if (!rc) {
10679 IPW_DEBUG_INFO("Configured device on count %i\n", i);
e666619e
JK		 10680
10681 /* If configure to try and auto-associate, kick
10682 * off a scan. */
10683 queue_work(priv->workqueue, &priv->request_scan);
afbf30a2 10684
43f66a6c 10685 return 0;
43f66a6c 10686 }
bf79451e 10687
c848d0af 10688 IPW_DEBUG_INFO("Device configuration failed: 0x%08X\n", rc);
43f66a6c
JK		 10689 IPW_DEBUG_INFO("Failed to config device on retry %d of %d\n",
10690 i, MAX_HW_RESTARTS);
10691
10692 /* We had an error bringing up the hardware, so take it
10693 * all the way back down so we can try again */
10694 ipw_down(priv);
10695 }
10696
bf79451e 10697 /* tried to restart and config the device for as long as our
43f66a6c 10698 * patience could withstand */
0edd5b44 10699 IPW_ERROR("Unable to initialize device after %d attempts.\n", i);
c848d0af 10700
43f66a6c
JK		 10701 return -EIO;
10702}
10703
c848d0af
JK		 10704static void ipw_bg_up(void *data)
10705{
10706 struct ipw_priv *priv = data;
4644151b 10707 mutex_lock(&priv->mutex);
c848d0af 10708 ipw_up(data);
4644151b 10709 mutex_unlock(&priv->mutex);
c848d0af
JK		 10710}
10711
b095c381 10712static void ipw_deinit(struct ipw_priv *priv)
43f66a6c 10713{
b095c381
JK		 10714 int i;
10715
10716 if (priv->status & STATUS_SCANNING) {
10717 IPW_DEBUG_INFO("Aborting scan during shutdown.\n");
10718 ipw_abort_scan(priv);
10719 }
10720
10721 if (priv->status & STATUS_ASSOCIATED) {
10722 IPW_DEBUG_INFO("Disassociating during shutdown.\n");
10723 ipw_disassociate(priv);
10724 }
10725
10726 ipw_led_shutdown(priv);
10727
10728 /* Wait up to 1s for status to change to not scanning and not
10729 * associated (disassociation can take a while for a ful 802.11
10730 * exchange */
10731 for (i = 1000; i && (priv->status &
10732 (STATUS_DISASSOCIATING |
10733 STATUS_ASSOCIATED | STATUS_SCANNING)); i--)
10734 udelay(10);
10735
10736 if (priv->status & (STATUS_DISASSOCIATING |
10737 STATUS_ASSOCIATED | STATUS_SCANNING))
10738 IPW_DEBUG_INFO("Still associated or scanning...\n");
10739 else
10740 IPW_DEBUG_INFO("Took %dms to de-init\n", 1000 - i);
10741
43f66a6c 10742 /* Attempt to disable the card */
43f66a6c 10743 ipw_send_card_disable(priv, 0);
b095c381
JK		 10744
10745 priv->status &= ~STATUS_INIT;
10746}
10747
10748static void ipw_down(struct ipw_priv *priv)
10749{
10750 int exit_pending = priv->status & STATUS_EXIT_PENDING;
10751
10752 priv->status |= STATUS_EXIT_PENDING;
10753
10754 if (ipw_is_init(priv))
10755 ipw_deinit(priv);
10756
10757 /* Wipe out the EXIT_PENDING status bit if we are not actually
10758 * exiting the module */
10759 if (!exit_pending)
10760 priv->status &= ~STATUS_EXIT_PENDING;
43f66a6c
JK		 10761
10762 /* tell the device to stop sending interrupts */
10763 ipw_disable_interrupts(priv);
10764
10765 /* Clear all bits but the RF Kill */
b095c381 10766 priv->status &= STATUS_RF_KILL_MASK | STATUS_EXIT_PENDING;
43f66a6c
JK		 10767 netif_carrier_off(priv->net_dev);
10768 netif_stop_queue(priv->net_dev);
10769
10770 ipw_stop_nic(priv);
a613bffd
JK		 10771
10772 ipw_led_radio_off(priv);
43f66a6c
JK		 10773}
10774
c848d0af
JK		 10775static void ipw_bg_down(void *data)
10776{
10777 struct ipw_priv *priv = data;
4644151b 10778 mutex_lock(&priv->mutex);
c848d0af 10779 ipw_down(data);
4644151b 10780 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10781}
10782
10783/* Called by register_netdev() */
10784static int ipw_net_init(struct net_device *dev)
10785{
10786 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 10787 mutex_lock(&priv->mutex);
43f66a6c 10788
c848d0af 10789 if (ipw_up(priv)) {
4644151b 10790 mutex_unlock(&priv->mutex);
43f66a6c 10791 return -EIO;
c848d0af 10792 }
43f66a6c 10793
4644151b 10794 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10795 return 0;
10796}
10797
10798/* PCI driver stuff */
10799static struct pci_device_id card_ids[] = {
10800 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2701, 0, 0, 0},
10801 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2702, 0, 0, 0},
10802 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2711, 0, 0, 0},
10803 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2712, 0, 0, 0},
10804 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2721, 0, 0, 0},
10805 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2722, 0, 0, 0},
10806 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2731, 0, 0, 0},
10807 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2732, 0, 0, 0},
10808 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2741, 0, 0, 0},
10809 {PCI_VENDOR_ID_INTEL, 0x1043, 0x103c, 0x2741, 0, 0, 0},
10810 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2742, 0, 0, 0},
10811 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2751, 0, 0, 0},
10812 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2752, 0, 0, 0},
10813 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2753, 0, 0, 0},
10814 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2754, 0, 0, 0},
10815 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2761, 0, 0, 0},
10816 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2762, 0, 0, 0},
10817 {PCI_VENDOR_ID_INTEL, 0x104f, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0},
0edd5b44 10818 {PCI_VENDOR_ID_INTEL, 0x4220, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* BG */
a613bffd 10819 {PCI_VENDOR_ID_INTEL, 0x4221, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* BG */
0edd5b44
JG		 10820 {PCI_VENDOR_ID_INTEL, 0x4223, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* ABG */
10821 {PCI_VENDOR_ID_INTEL, 0x4224, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* ABG */
bf79451e 10822
43f66a6c
JK		 10823 /* required last entry */
10824 {0,}
10825};
10826
10827MODULE_DEVICE_TABLE(pci, card_ids);
10828
10829static struct attribute *ipw_sysfs_entries[] = {
10830 &dev_attr_rf_kill.attr,
10831 &dev_attr_direct_dword.attr,
10832 &dev_attr_indirect_byte.attr,
10833 &dev_attr_indirect_dword.attr,
10834 &dev_attr_mem_gpio_reg.attr,
10835 &dev_attr_command_event_reg.attr,
10836 &dev_attr_nic_type.attr,
10837 &dev_attr_status.attr,
10838 &dev_attr_cfg.attr,
b39860c6
JK		 10839 &dev_attr_error.attr,
10840 &dev_attr_event_log.attr,
f6c5cb7c 10841 &dev_attr_cmd_log.attr,
43f66a6c
JK		 10842 &dev_attr_eeprom_delay.attr,
10843 &dev_attr_ucode_version.attr,
10844 &dev_attr_rtc.attr,
a613bffd
JK		 10845 &dev_attr_scan_age.attr,
10846 &dev_attr_led.attr,
b095c381
JK		 10847 &dev_attr_speed_scan.attr,
10848 &dev_attr_net_stats.attr,
43f66a6c
JK		 10849 NULL
10850};
10851
10852static struct attribute_group ipw_attribute_group = {
10853 .name = NULL, /* put in device directory */
0edd5b44 10854 .attrs = ipw_sysfs_entries,
43f66a6c
JK		 10855};
10856
0edd5b44 10857static int ipw_pci_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
43f66a6c
JK		 10858{
10859 int err = 0;
10860 struct net_device *net_dev;
10861 void __iomem *base;
10862 u32 length, val;
10863 struct ipw_priv *priv;
afbf30a2 10864 int i;
43f66a6c
JK		 10865
10866 net_dev = alloc_ieee80211(sizeof(struct ipw_priv));
10867 if (net_dev == NULL) {
10868 err = -ENOMEM;
10869 goto out;
10870 }
10871
10872 priv = ieee80211_priv(net_dev);
10873 priv->ieee = netdev_priv(net_dev);
a613bffd 10874
43f66a6c
JK		 10875 priv->net_dev = net_dev;
10876 priv->pci_dev = pdev;
0f52bf90 10877#ifdef CONFIG_IPW2200_DEBUG
43f66a6c
JK		 10878 ipw_debug_level = debug;
10879#endif
10880 spin_lock_init(&priv->lock);
afbf30a2
JK		 10881 for (i = 0; i < IPW_IBSS_MAC_HASH_SIZE; i++)
10882 INIT_LIST_HEAD(&priv->ibss_mac_hash[i]);
43f66a6c 10883
4644151b 10884 mutex_init(&priv->mutex);
43f66a6c
JK		 10885 if (pci_enable_device(pdev)) {
10886 err = -ENODEV;
10887 goto out_free_ieee80211;
10888 }
10889
10890 pci_set_master(pdev);
10891
0e08b44e 10892 err = pci_set_dma_mask(pdev, DMA_32BIT_MASK);
bf79451e 10893 if (!err)
0e08b44e 10894 err = pci_set_consistent_dma_mask(pdev, DMA_32BIT_MASK);
43f66a6c
JK		 10895 if (err) {
10896 printk(KERN_WARNING DRV_NAME ": No suitable DMA available.\n");
10897 goto out_pci_disable_device;
10898 }
10899
10900 pci_set_drvdata(pdev, priv);
10901
10902 err = pci_request_regions(pdev, DRV_NAME);
bf79451e 10903 if (err)
43f66a6c
JK		 10904 goto out_pci_disable_device;
10905
bf79451e 10906 /* We disable the RETRY_TIMEOUT register (0x41) to keep
43f66a6c 10907 * PCI Tx retries from interfering with C3 CPU state */
bf79451e
JG		 10908 pci_read_config_dword(pdev, 0x40, &val);
10909 if ((val & 0x0000ff00) != 0)
43f66a6c 10910 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
bf79451e 10911
43f66a6c
JK		 10912 length = pci_resource_len(pdev, 0);
10913 priv->hw_len = length;
bf79451e 10914
43f66a6c
JK		 10915 base = ioremap_nocache(pci_resource_start(pdev, 0), length);
10916 if (!base) {
10917 err = -ENODEV;
10918 goto out_pci_release_regions;
10919 }
10920
10921 priv->hw_base = base;
10922 IPW_DEBUG_INFO("pci_resource_len = 0x%08x\n", length);
10923 IPW_DEBUG_INFO("pci_resource_base = %p\n", base);
10924
10925 err = ipw_setup_deferred_work(priv);
10926 if (err) {
10927 IPW_ERROR("Unable to setup deferred work\n");
10928 goto out_iounmap;
10929 }
10930
b095c381 10931 ipw_sw_reset(priv, 1);
43f66a6c 10932
0edd5b44 10933 err = request_irq(pdev->irq, ipw_isr, SA_SHIRQ, DRV_NAME, priv);
43f66a6c
JK		 10934 if (err) {
10935 IPW_ERROR("Error allocating IRQ %d\n", pdev->irq);
10936 goto out_destroy_workqueue;
10937 }
10938
10939 SET_MODULE_OWNER(net_dev);
10940 SET_NETDEV_DEV(net_dev, &pdev->dev);
10941
4644151b 10942 mutex_lock(&priv->mutex);
c848d0af 10943
43f66a6c
JK		 10944 priv->ieee->hard_start_xmit = ipw_net_hard_start_xmit;
10945 priv->ieee->set_security = shim__set_security;
227d2dc1 10946 priv->ieee->is_queue_full = ipw_net_is_queue_full;
43f66a6c 10947
b095c381 10948#ifdef CONFIG_IPW_QOS
3b9990cb
JK		 10949 priv->ieee->handle_probe_response = ipw_handle_beacon;
10950 priv->ieee->handle_beacon = ipw_handle_probe_response;
10951 priv->ieee->handle_assoc_response = ipw_handle_assoc_response;
b095c381
JK		 10952#endif /* CONFIG_IPW_QOS */
10953
c848d0af
JK		 10954 priv->ieee->perfect_rssi = -20;
10955 priv->ieee->worst_rssi = -85;
43f66a6c
JK		 10956
10957 net_dev->open = ipw_net_open;
10958 net_dev->stop = ipw_net_stop;
10959 net_dev->init = ipw_net_init;
10960 net_dev->get_stats = ipw_net_get_stats;
10961 net_dev->set_multicast_list = ipw_net_set_multicast_list;
10962 net_dev->set_mac_address = ipw_net_set_mac_address;
97a78ca9 10963 priv->wireless_data.spy_data = &priv->ieee->spy_data;
97a78ca9 10964 net_dev->wireless_data = &priv->wireless_data;
43f66a6c
JK		 10965 net_dev->wireless_handlers = &ipw_wx_handler_def;
10966 net_dev->ethtool_ops = &ipw_ethtool_ops;
10967 net_dev->irq = pdev->irq;
0edd5b44 10968 net_dev->base_addr = (unsigned long)priv->hw_base;
43f66a6c
JK		 10969 net_dev->mem_start = pci_resource_start(pdev, 0);
10970 net_dev->mem_end = net_dev->mem_start + pci_resource_len(pdev, 0) - 1;
10971
10972 err = sysfs_create_group(&pdev->dev.kobj, &ipw_attribute_group);
10973 if (err) {
10974 IPW_ERROR("failed to create sysfs device attributes\n");
4644151b 10975 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10976 goto out_release_irq;
10977 }
10978
4644151b 10979 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10980 err = register_netdev(net_dev);
10981 if (err) {
10982 IPW_ERROR("failed to register network device\n");
a613bffd 10983 goto out_remove_sysfs;
43f66a6c 10984 }
48a84770
HBA		 10985
10986 printk(KERN_INFO DRV_NAME ": Detected geography %s (%d 802.11bg "
10987 "channels, %d 802.11a channels)\n",
10988 priv->ieee->geo.name, priv->ieee->geo.bg_channels,
10989 priv->ieee->geo.a_channels);
10990
43f66a6c
JK		 10991 return 0;
10992
a613bffd 10993 out_remove_sysfs:
43f66a6c 10994 sysfs_remove_group(&pdev->dev.kobj, &ipw_attribute_group);
0edd5b44 10995 out_release_irq:
43f66a6c 10996 free_irq(pdev->irq, priv);
0edd5b44 10997 out_destroy_workqueue:
43f66a6c
JK		 10998 destroy_workqueue(priv->workqueue);
10999 priv->workqueue = NULL;
0edd5b44 11000 out_iounmap:
43f66a6c 11001 iounmap(priv->hw_base);
0edd5b44 11002 out_pci_release_regions:
43f66a6c 11003 pci_release_regions(pdev);
0edd5b44 11004 out_pci_disable_device:
43f66a6c
JK		 11005 pci_disable_device(pdev);
11006 pci_set_drvdata(pdev, NULL);
0edd5b44 11007 out_free_ieee80211:
43f66a6c 11008 free_ieee80211(priv->net_dev);
0edd5b44 11009 out:
43f66a6c
JK		 11010 return err;
11011}
11012
11013static void ipw_pci_remove(struct pci_dev *pdev)
11014{
11015 struct ipw_priv *priv = pci_get_drvdata(pdev);
afbf30a2
JK		 11016 struct list_head *p, *q;
11017 int i;
b095c381 11018
43f66a6c
JK		 11019 if (!priv)
11020 return;
11021
4644151b 11022 mutex_lock(&priv->mutex);
43f66a6c 11023
afbf30a2 11024 priv->status |= STATUS_EXIT_PENDING;
43f66a6c 11025 ipw_down(priv);
43f66a6c
JK		 11026 sysfs_remove_group(&pdev->dev.kobj, &ipw_attribute_group);
11027
4644151b 11028 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11029
11030 unregister_netdev(priv->net_dev);
11031
11032 if (priv->rxq) {
11033 ipw_rx_queue_free(priv, priv->rxq);
11034 priv->rxq = NULL;
11035 }
11036 ipw_tx_queue_free(priv);
11037
f6c5cb7c
JK		 11038 if (priv->cmdlog) {
11039 kfree(priv->cmdlog);
11040 priv->cmdlog = NULL;
11041 }
43f66a6c
JK		 11042 /* ipw_down will ensure that there is no more pending work
11043 * in the workqueue's, so we can safely remove them now. */
a613bffd
JK		 11044 cancel_delayed_work(&priv->adhoc_check);
11045 cancel_delayed_work(&priv->gather_stats);
11046 cancel_delayed_work(&priv->request_scan);
11047 cancel_delayed_work(&priv->rf_kill);
11048 cancel_delayed_work(&priv->scan_check);
11049 destroy_workqueue(priv->workqueue);
11050 priv->workqueue = NULL;
43f66a6c 11051
afbf30a2
JK		 11052 /* Free MAC hash list for ADHOC */
11053 for (i = 0; i < IPW_IBSS_MAC_HASH_SIZE; i++) {
11054 list_for_each_safe(p, q, &priv->ibss_mac_hash[i]) {
afbf30a2 11055 list_del(p);
489f4458 11056 kfree(list_entry(p, struct ipw_ibss_seq, list));
afbf30a2
JK		 11057 }
11058 }
11059
b39860c6
JK		 11060 if (priv->error) {
11061 ipw_free_error_log(priv->error);
11062 priv->error = NULL;
43f66a6c
JK		 11063 }
11064
11065 free_irq(pdev->irq, priv);
11066 iounmap(priv->hw_base);
11067 pci_release_regions(pdev);
11068 pci_disable_device(pdev);
11069 pci_set_drvdata(pdev, NULL);
11070 free_ieee80211(priv->net_dev);
afbf30a2 11071 free_firmware();
43f66a6c
JK		 11072}
11073
43f66a6c 11074#ifdef CONFIG_PM
583a4e88 11075static int ipw_pci_suspend(struct pci_dev *pdev, pm_message_t state)
43f66a6c
JK		 11076{
11077 struct ipw_priv *priv = pci_get_drvdata(pdev);
11078 struct net_device *dev = priv->net_dev;
11079
11080 printk(KERN_INFO "%s: Going into suspend...\n", dev->name);
11081
0edd5b44 11082 /* Take down the device; powers it off, etc. */
43f66a6c
JK		 11083 ipw_down(priv);
11084
11085 /* Remove the PRESENT state of the device */
11086 netif_device_detach(dev);
11087
43f66a6c 11088 pci_save_state(pdev);
43f66a6c 11089 pci_disable_device(pdev);
583a4e88 11090 pci_set_power_state(pdev, pci_choose_state(pdev, state));
bf79451e 11091
43f66a6c
JK		 11092 return 0;
11093}
11094
11095static int ipw_pci_resume(struct pci_dev *pdev)
11096{
11097 struct ipw_priv *priv = pci_get_drvdata(pdev);
11098 struct net_device *dev = priv->net_dev;
11099 u32 val;
bf79451e 11100
43f66a6c
JK		 11101 printk(KERN_INFO "%s: Coming out of suspend...\n", dev->name);
11102
ea2b26e0 11103 pci_set_power_state(pdev, PCI_D0);
43f66a6c 11104 pci_enable_device(pdev);
43f66a6c 11105 pci_restore_state(pdev);
ea2b26e0 11106
43f66a6c
JK		 11107 /*
11108 * Suspend/Resume resets the PCI configuration space, so we have to
11109 * re-disable the RETRY_TIMEOUT register (0x41) to keep PCI Tx retries
11110 * from interfering with C3 CPU state. pci_restore_state won't help
11111 * here since it only restores the first 64 bytes pci config header.
11112 */
bf79451e
JG		 11113 pci_read_config_dword(pdev, 0x40, &val);
11114 if ((val & 0x0000ff00) != 0)
43f66a6c
JK		 11115 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
11116
11117 /* Set the device back into the PRESENT state; this will also wake
11118 * the queue of needed */
11119 netif_device_attach(dev);
11120
11121 /* Bring the device back up */
11122 queue_work(priv->workqueue, &priv->up);
bf79451e 11123
43f66a6c
JK		 11124 return 0;
11125}
11126#endif
11127
11128/* driver initialization stuff */
11129static struct pci_driver ipw_driver = {
11130 .name = DRV_NAME,
11131 .id_table = card_ids,
11132 .probe = ipw_pci_probe,
11133 .remove = __devexit_p(ipw_pci_remove),
11134#ifdef CONFIG_PM
11135 .suspend = ipw_pci_suspend,
11136 .resume = ipw_pci_resume,
11137#endif
11138};
11139
11140static int __init ipw_init(void)
11141{
11142 int ret;
11143
11144 printk(KERN_INFO DRV_NAME ": " DRV_DESCRIPTION ", " DRV_VERSION "\n");
11145 printk(KERN_INFO DRV_NAME ": " DRV_COPYRIGHT "\n");
11146
11147 ret = pci_module_init(&ipw_driver);
11148 if (ret) {
11149 IPW_ERROR("Unable to initialize PCI module\n");
11150 return ret;
11151 }
11152
0edd5b44 11153 ret = driver_create_file(&ipw_driver.driver, &driver_attr_debug_level);
43f66a6c
JK		 11154 if (ret) {
11155 IPW_ERROR("Unable to create driver sysfs file\n");
11156 pci_unregister_driver(&ipw_driver);
11157 return ret;
11158 }
11159
11160 return ret;
11161}
11162
11163static void __exit ipw_exit(void)
11164{
11165 driver_remove_file(&ipw_driver.driver, &driver_attr_debug_level);
11166 pci_unregister_driver(&ipw_driver);
11167}
11168
11169module_param(disable, int, 0444);
11170MODULE_PARM_DESC(disable, "manually disable the radio (default 0 [radio on])");
11171
11172module_param(associate, int, 0444);
11173MODULE_PARM_DESC(associate, "auto associate when scanning (default on)");
11174
11175module_param(auto_create, int, 0444);
11176MODULE_PARM_DESC(auto_create, "auto create adhoc network (default on)");
11177
a613bffd 11178module_param(led, int, 0444);
c848d0af 11179MODULE_PARM_DESC(led, "enable led control on some systems (default 0 off)\n");
a613bffd 11180
43f66a6c
JK		 11181module_param(debug, int, 0444);
11182MODULE_PARM_DESC(debug, "debug output mask");
11183
11184module_param(channel, int, 0444);
bf79451e 11185MODULE_PARM_DESC(channel, "channel to limit associate to (default 0 [ANY])");
43f66a6c 11186
b095c381
JK		 11187#ifdef CONFIG_IPW_QOS
11188module_param(qos_enable, int, 0444);
11189MODULE_PARM_DESC(qos_enable, "enable all QoS functionalitis");
11190
11191module_param(qos_burst_enable, int, 0444);
11192MODULE_PARM_DESC(qos_burst_enable, "enable QoS burst mode");
11193
11194module_param(qos_no_ack_mask, int, 0444);
11195MODULE_PARM_DESC(qos_no_ack_mask, "mask Tx_Queue to no ack");
43f66a6c 11196
b095c381
JK		 11197module_param(burst_duration_CCK, int, 0444);
11198MODULE_PARM_DESC(burst_duration_CCK, "set CCK burst value");
11199
11200module_param(burst_duration_OFDM, int, 0444);
11201MODULE_PARM_DESC(burst_duration_OFDM, "set OFDM burst value");
11202#endif /* CONFIG_IPW_QOS */
11203
11204#ifdef CONFIG_IPW2200_MONITOR
43f66a6c
JK		 11205module_param(mode, int, 0444);
11206MODULE_PARM_DESC(mode, "network mode (0=BSS,1=IBSS,2=Monitor)");
11207#else
11208module_param(mode, int, 0444);
11209MODULE_PARM_DESC(mode, "network mode (0=BSS,1=IBSS)");
11210#endif
11211
810dabd4
ZY		 11212module_param(bt_coexist, int, 0444);
11213MODULE_PARM_DESC(bt_coexist, "enable bluetooth coexistence (default off)");
11214
b095c381 11215module_param(hwcrypto, int, 0444);
bde37d03 11216MODULE_PARM_DESC(hwcrypto, "enable hardware crypto (default off)");
b095c381 11217
f6c5cb7c
JK		 11218module_param(cmdlog, int, 0444);
11219MODULE_PARM_DESC(cmdlog,
11220 "allocate a ring buffer for logging firmware commands");
11221
4bfdb91d
ZY		 11222module_param(roaming, int, 0444);
11223MODULE_PARM_DESC(roaming, "enable roaming support (default on)");
11224
43f66a6c
JK		 11225module_exit(ipw_exit);
11226module_init(ipw_init);
kernel source for telekom puls (alcatel/mediatek)