projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
net: Fix spinlock use in alloc_netdev_mq()
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / drivers / net / wireless / ipw2x00 / ipw2200.c
CommitLineData
43f66a6c 1/******************************************************************************
bf79451e 2
171e7b2f 3 Copyright(c) 2003 - 2006 Intel Corporation. All rights reserved.
43f66a6c
JK		 4
5 802.11 status code portion of this file from ethereal-0.10.6:
6 Copyright 2000, Axis Communications AB
7 Ethereal - Network traffic analyzer
8 By Gerald Combs <gerald@ethereal.com>
9 Copyright 1998 Gerald Combs
10
bf79451e
JG		 11 This program is free software; you can redistribute it and/or modify it
12 under the terms of version 2 of the GNU General Public License as
43f66a6c 13 published by the Free Software Foundation.
bf79451e
JG		 14
15 This program is distributed in the hope that it will be useful, but WITHOUT
16 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
17 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
43f66a6c 18 more details.
bf79451e 19
43f66a6c 20 You should have received a copy of the GNU General Public License along with
bf79451e 21 this program; if not, write to the Free Software Foundation, Inc., 59
43f66a6c 22 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
bf79451e 23
43f66a6c
JK		 24 The full GNU General Public License is included in this distribution in the
25 file called LICENSE.
bf79451e 26
43f66a6c
JK		 27 Contact Information:
28 James P. Ketrenos <ipw2100-admin@linux.intel.com>
29 Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
30
31******************************************************************************/
32
33#include "ipw2200.h"
34
ae4af61f
ZY		 35
36#ifndef KBUILD_EXTMOD
37#define VK "k"
38#else
39#define VK
40#endif
41
42#ifdef CONFIG_IPW2200_DEBUG
43#define VD "d"
44#else
45#define VD
46#endif
47
48#ifdef CONFIG_IPW2200_MONITOR
49#define VM "m"
50#else
51#define VM
52#endif
53
54#ifdef CONFIG_IPW2200_PROMISCUOUS
55#define VP "p"
56#else
57#define VP
58#endif
59
459d4087 60#ifdef CONFIG_IPW2200_RADIOTAP
ae4af61f
ZY		 61#define VR "r"
62#else
63#define VR
64#endif
65
66#ifdef CONFIG_IPW2200_QOS
67#define VQ "q"
68#else
69#define VQ
70#endif
71
ee2c4add 72#define IPW2200_VERSION "1.2.2" VK VD VM VP VR VQ
43f66a6c 73#define DRV_DESCRIPTION "Intel(R) PRO/Wireless 2200/2915 Network Driver"
171e7b2f 74#define DRV_COPYRIGHT "Copyright(c) 2003-2006 Intel Corporation"
43f66a6c
JK		 75#define DRV_VERSION IPW2200_VERSION
76
b095c381
JK		 77#define ETH_P_80211_STATS (ETH_P_80211_RAW + 1)
78
43f66a6c
JK		 79MODULE_DESCRIPTION(DRV_DESCRIPTION);
80MODULE_VERSION(DRV_VERSION);
81MODULE_AUTHOR(DRV_COPYRIGHT);
82MODULE_LICENSE("GPL");
83
f6c5cb7c 84static int cmdlog = 0;
43f66a6c
JK		 85static int debug = 0;
86static int channel = 0;
43f66a6c
JK		 87static int mode = 0;
88
89static u32 ipw_debug_level;
5c7f9b73 90static int associate;
43f66a6c 91static int auto_create = 1;
a613bffd 92static int led = 0;
43f66a6c 93static int disable = 0;
810dabd4 94static int bt_coexist = 0;
bde37d03 95static int hwcrypto = 0;
4bfdb91d 96static int roaming = 1;
43f66a6c
JK		 97static const char ipw_modes[] = {
98 'a', 'b', 'g', '?'
99};
d2b83e12 100static int antenna = CFG_SYS_ANTENNA_BOTH;
43f66a6c 101
d685b8c2
ZY		 102#ifdef CONFIG_IPW2200_PROMISCUOUS
103static int rtap_iface = 0; /* def: 0 -- do not create rtap interface */
104#endif
105
106
e43e3c1e 107#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 108static int qos_enable = 0;
109static int qos_burst_enable = 0;
110static int qos_no_ack_mask = 0;
111static int burst_duration_CCK = 0;
112static int burst_duration_OFDM = 0;
113
114static struct ieee80211_qos_parameters def_qos_parameters_OFDM = {
115 {QOS_TX0_CW_MIN_OFDM, QOS_TX1_CW_MIN_OFDM, QOS_TX2_CW_MIN_OFDM,
116 QOS_TX3_CW_MIN_OFDM},
117 {QOS_TX0_CW_MAX_OFDM, QOS_TX1_CW_MAX_OFDM, QOS_TX2_CW_MAX_OFDM,
118 QOS_TX3_CW_MAX_OFDM},
119 {QOS_TX0_AIFS, QOS_TX1_AIFS, QOS_TX2_AIFS, QOS_TX3_AIFS},
120 {QOS_TX0_ACM, QOS_TX1_ACM, QOS_TX2_ACM, QOS_TX3_ACM},
121 {QOS_TX0_TXOP_LIMIT_OFDM, QOS_TX1_TXOP_LIMIT_OFDM,
122 QOS_TX2_TXOP_LIMIT_OFDM, QOS_TX3_TXOP_LIMIT_OFDM}
123};
124
125static struct ieee80211_qos_parameters def_qos_parameters_CCK = {
126 {QOS_TX0_CW_MIN_CCK, QOS_TX1_CW_MIN_CCK, QOS_TX2_CW_MIN_CCK,
127 QOS_TX3_CW_MIN_CCK},
128 {QOS_TX0_CW_MAX_CCK, QOS_TX1_CW_MAX_CCK, QOS_TX2_CW_MAX_CCK,
129 QOS_TX3_CW_MAX_CCK},
130 {QOS_TX0_AIFS, QOS_TX1_AIFS, QOS_TX2_AIFS, QOS_TX3_AIFS},
131 {QOS_TX0_ACM, QOS_TX1_ACM, QOS_TX2_ACM, QOS_TX3_ACM},
132 {QOS_TX0_TXOP_LIMIT_CCK, QOS_TX1_TXOP_LIMIT_CCK, QOS_TX2_TXOP_LIMIT_CCK,
133 QOS_TX3_TXOP_LIMIT_CCK}
134};
135
136static struct ieee80211_qos_parameters def_parameters_OFDM = {
137 {DEF_TX0_CW_MIN_OFDM, DEF_TX1_CW_MIN_OFDM, DEF_TX2_CW_MIN_OFDM,
138 DEF_TX3_CW_MIN_OFDM},
139 {DEF_TX0_CW_MAX_OFDM, DEF_TX1_CW_MAX_OFDM, DEF_TX2_CW_MAX_OFDM,
140 DEF_TX3_CW_MAX_OFDM},
141 {DEF_TX0_AIFS, DEF_TX1_AIFS, DEF_TX2_AIFS, DEF_TX3_AIFS},
142 {DEF_TX0_ACM, DEF_TX1_ACM, DEF_TX2_ACM, DEF_TX3_ACM},
143 {DEF_TX0_TXOP_LIMIT_OFDM, DEF_TX1_TXOP_LIMIT_OFDM,
144 DEF_TX2_TXOP_LIMIT_OFDM, DEF_TX3_TXOP_LIMIT_OFDM}
145};
146
147static struct ieee80211_qos_parameters def_parameters_CCK = {
148 {DEF_TX0_CW_MIN_CCK, DEF_TX1_CW_MIN_CCK, DEF_TX2_CW_MIN_CCK,
149 DEF_TX3_CW_MIN_CCK},
150 {DEF_TX0_CW_MAX_CCK, DEF_TX1_CW_MAX_CCK, DEF_TX2_CW_MAX_CCK,
151 DEF_TX3_CW_MAX_CCK},
152 {DEF_TX0_AIFS, DEF_TX1_AIFS, DEF_TX2_AIFS, DEF_TX3_AIFS},
153 {DEF_TX0_ACM, DEF_TX1_ACM, DEF_TX2_ACM, DEF_TX3_ACM},
154 {DEF_TX0_TXOP_LIMIT_CCK, DEF_TX1_TXOP_LIMIT_CCK, DEF_TX2_TXOP_LIMIT_CCK,
155 DEF_TX3_TXOP_LIMIT_CCK}
156};
157
158static u8 qos_oui[QOS_OUI_LEN] = { 0x00, 0x50, 0xF2 };
159
160static int from_priority_to_tx_queue[] = {
161 IPW_TX_QUEUE_1, IPW_TX_QUEUE_2, IPW_TX_QUEUE_2, IPW_TX_QUEUE_1,
162 IPW_TX_QUEUE_3, IPW_TX_QUEUE_3, IPW_TX_QUEUE_4, IPW_TX_QUEUE_4
163};
164
165static u32 ipw_qos_get_burst_duration(struct ipw_priv *priv);
166
167static int ipw_send_qos_params_command(struct ipw_priv *priv, struct ieee80211_qos_parameters
168 *qos_param);
169static int ipw_send_qos_info_command(struct ipw_priv *priv, struct ieee80211_qos_information_element
170 *qos_param);
e43e3c1e 171#endif /* CONFIG_IPW2200_QOS */
b095c381 172
97a78ca9 173static struct iw_statistics *ipw_get_wireless_stats(struct net_device *dev);
b095c381 174static void ipw_remove_current_network(struct ipw_priv *priv);
43f66a6c 175static void ipw_rx(struct ipw_priv *priv);
bf79451e 176static int ipw_queue_tx_reclaim(struct ipw_priv *priv,
43f66a6c
JK		 177 struct clx2_tx_queue *txq, int qindex);
178static int ipw_queue_reset(struct ipw_priv *priv);
179
180static int ipw_queue_tx_hcmd(struct ipw_priv *priv, int hcmd, void *buf,
181 int len, int sync);
182
183static void ipw_tx_queue_free(struct ipw_priv *);
184
185static struct ipw_rx_queue *ipw_rx_queue_alloc(struct ipw_priv *);
186static void ipw_rx_queue_free(struct ipw_priv *, struct ipw_rx_queue *);
187static void ipw_rx_queue_replenish(void *);
43f66a6c 188static int ipw_up(struct ipw_priv *);
c4028958 189static void ipw_bg_up(struct work_struct *work);
43f66a6c 190static void ipw_down(struct ipw_priv *);
c4028958 191static void ipw_bg_down(struct work_struct *work);
43f66a6c 192static int ipw_config(struct ipw_priv *);
0edd5b44
JG		 193static int init_supported_rates(struct ipw_priv *priv,
194 struct ipw_supported_rates *prates);
b095c381
JK		 195static void ipw_set_hwcrypto_keys(struct ipw_priv *);
196static void ipw_send_wep_keys(struct ipw_priv *, int);
43f66a6c 197
f6c5cb7c
JK		 198static int snprint_line(char *buf, size_t count,
199 const u8 * data, u32 len, u32 ofs)
43f66a6c
JK		 200{
201 int out, i, j, l;
202 char c;
bf79451e 203
43f66a6c
JK		 204 out = snprintf(buf, count, "%08X", ofs);
205
206 for (l = 0, i = 0; i < 2; i++) {
207 out += snprintf(buf + out, count - out, " ");
bf79451e
JG		 208 for (j = 0; j < 8 && l < len; j++, l++)
209 out += snprintf(buf + out, count - out, "%02X ",
43f66a6c
JK		 210 data[(i * 8 + j)]);
211 for (; j < 8; j++)
212 out += snprintf(buf + out, count - out, " ");
213 }
bf79451e 214
43f66a6c
JK		 215 out += snprintf(buf + out, count - out, " ");
216 for (l = 0, i = 0; i < 2; i++) {
217 out += snprintf(buf + out, count - out, " ");
218 for (j = 0; j < 8 && l < len; j++, l++) {
219 c = data[(i * 8 + j)];
220 if (!isascii(c) || !isprint(c))
221 c = '.';
bf79451e 222
43f66a6c
JK		 223 out += snprintf(buf + out, count - out, "%c", c);
224 }
225
226 for (; j < 8; j++)
227 out += snprintf(buf + out, count - out, " ");
228 }
bf79451e 229
f6c5cb7c 230 return out;
43f66a6c
JK		 231}
232
0edd5b44 233static void printk_buf(int level, const u8 * data, u32 len)
43f66a6c
JK		 234{
235 char line[81];
236 u32 ofs = 0;
237 if (!(ipw_debug_level & level))
238 return;
239
240 while (len) {
f6c5cb7c
JK		 241 snprint_line(line, sizeof(line), &data[ofs],
242 min(len, 16U), ofs);
243 printk(KERN_DEBUG "%s\n", line);
43f66a6c
JK		 244 ofs += 16;
245 len -= min(len, 16U);
246 }
247}
248
f6c5cb7c
JK		 249static int snprintk_buf(u8 * output, size_t size, const u8 * data, size_t len)
250{
251 size_t out = size;
252 u32 ofs = 0;
253 int total = 0;
254
255 while (size && len) {
256 out = snprint_line(output, size, &data[ofs],
257 min_t(size_t, len, 16U), ofs);
258
259 ofs += 16;
260 output += out;
261 size -= out;
262 len -= min_t(size_t, len, 16U);
263 total += out;
264 }
265 return total;
266}
267
c8fe6679 268/* alias for 32-bit indirect read (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 269static u32 _ipw_read_reg32(struct ipw_priv *priv, u32 reg);
270#define ipw_read_reg32(a, b) _ipw_read_reg32(a, b)
271
c8fe6679 272/* alias for 8-bit indirect read (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 273static u8 _ipw_read_reg8(struct ipw_priv *ipw, u32 reg);
274#define ipw_read_reg8(a, b) _ipw_read_reg8(a, b)
275
c8fe6679 276/* 8-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 277static void _ipw_write_reg8(struct ipw_priv *priv, u32 reg, u8 value);
278static inline void ipw_write_reg8(struct ipw_priv *a, u32 b, u8 c)
279{
0edd5b44
JG		 280 IPW_DEBUG_IO("%s %d: write_indirect8(0x%08X, 0x%08X)\n", __FILE__,
281 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 282 _ipw_write_reg8(a, b, c);
283}
284
c8fe6679 285/* 16-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 286static void _ipw_write_reg16(struct ipw_priv *priv, u32 reg, u16 value);
287static inline void ipw_write_reg16(struct ipw_priv *a, u32 b, u16 c)
288{
0edd5b44
JG		 289 IPW_DEBUG_IO("%s %d: write_indirect16(0x%08X, 0x%08X)\n", __FILE__,
290 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 291 _ipw_write_reg16(a, b, c);
292}
293
c8fe6679 294/* 32-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK		 295static void _ipw_write_reg32(struct ipw_priv *priv, u32 reg, u32 value);
296static inline void ipw_write_reg32(struct ipw_priv *a, u32 b, u32 c)
297{
0edd5b44
JG		 298 IPW_DEBUG_IO("%s %d: write_indirect32(0x%08X, 0x%08X)\n", __FILE__,
299 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK		 300 _ipw_write_reg32(a, b, c);
301}
302
c8fe6679 303/* 8-bit direct write (low 4K) */
1788bcd1
JS		 304static inline void _ipw_write8(struct ipw_priv *ipw, unsigned long ofs,
305 u8 val)
306{
307 writeb(val, ipw->hw_base + ofs);
308}
c8fe6679
ZY		 309
310/* 8-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
fb55d887 311#define ipw_write8(ipw, ofs, val) do { \
1788bcd1
JS		 312 IPW_DEBUG_IO("%s %d: write_direct8(0x%08X, 0x%08X)\n", __FILE__, \
313 __LINE__, (u32)(ofs), (u32)(val)); \
314 _ipw_write8(ipw, ofs, val); \
315} while (0)
43f66a6c 316
c8fe6679 317/* 16-bit direct write (low 4K) */
1788bcd1
JS		 318static inline void _ipw_write16(struct ipw_priv *ipw, unsigned long ofs,
319 u16 val)
320{
321 writew(val, ipw->hw_base + ofs);
322}
c8fe6679
ZY		 323
324/* 16-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
1788bcd1
JS		 325#define ipw_write16(ipw, ofs, val) do { \
326 IPW_DEBUG_IO("%s %d: write_direct16(0x%08X, 0x%08X)\n", __FILE__, \
327 __LINE__, (u32)(ofs), (u32)(val)); \
328 _ipw_write16(ipw, ofs, val); \
329} while (0)
43f66a6c 330
c8fe6679 331/* 32-bit direct write (low 4K) */
1788bcd1
JS		 332static inline void _ipw_write32(struct ipw_priv *ipw, unsigned long ofs,
333 u32 val)
334{
335 writel(val, ipw->hw_base + ofs);
336}
c8fe6679
ZY		 337
338/* 32-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
1788bcd1
JS		 339#define ipw_write32(ipw, ofs, val) do { \
340 IPW_DEBUG_IO("%s %d: write_direct32(0x%08X, 0x%08X)\n", __FILE__, \
341 __LINE__, (u32)(ofs), (u32)(val)); \
342 _ipw_write32(ipw, ofs, val); \
343} while (0)
43f66a6c 344
c8fe6679 345/* 8-bit direct read (low 4K) */
1788bcd1 346static inline u8 _ipw_read8(struct ipw_priv *ipw, unsigned long ofs)
0edd5b44 347{
1788bcd1 348 return readb(ipw->hw_base + ofs);
43f66a6c 349}
0edd5b44 350
c8fe6679 351/* alias to 8-bit direct read (low 4K of SRAM/regs), with debug wrapper */
1788bcd1
JS		 352#define ipw_read8(ipw, ofs) ({ \
353 IPW_DEBUG_IO("%s %d: read_direct8(0x%08X)\n", __FILE__, __LINE__, \
354 (u32)(ofs)); \
355 _ipw_read8(ipw, ofs); \
356})
43f66a6c 357
c8fe6679 358/* 16-bit direct read (low 4K) */
1788bcd1 359static inline u16 _ipw_read16(struct ipw_priv *ipw, unsigned long ofs)
0edd5b44 360{
1788bcd1 361 return readw(ipw->hw_base + ofs);
43f66a6c 362}
0edd5b44 363
c8fe6679 364/* alias to 16-bit direct read (low 4K of SRAM/regs), with debug wrapper */
1788bcd1
JS		 365#define ipw_read16(ipw, ofs) ({ \
366 IPW_DEBUG_IO("%s %d: read_direct16(0x%08X)\n", __FILE__, __LINE__, \
367 (u32)(ofs)); \
368 _ipw_read16(ipw, ofs); \
369})
43f66a6c 370
c8fe6679 371/* 32-bit direct read (low 4K) */
1788bcd1 372static inline u32 _ipw_read32(struct ipw_priv *ipw, unsigned long ofs)
0edd5b44 373{
1788bcd1 374 return readl(ipw->hw_base + ofs);
43f66a6c 375}
0edd5b44 376
c8fe6679 377/* alias to 32-bit direct read (low 4K of SRAM/regs), with debug wrapper */
1788bcd1
JS		 378#define ipw_read32(ipw, ofs) ({ \
379 IPW_DEBUG_IO("%s %d: read_direct32(0x%08X)\n", __FILE__, __LINE__, \
380 (u32)(ofs)); \
381 _ipw_read32(ipw, ofs); \
382})
43f66a6c
JK		 383
384static void _ipw_read_indirect(struct ipw_priv *, u32, u8 *, int);
c8fe6679 385/* alias to multi-byte read (SRAM/regs above 4K), with debug wrapper */
1788bcd1
JS		 386#define ipw_read_indirect(a, b, c, d) ({ \
387 IPW_DEBUG_IO("%s %d: read_indirect(0x%08X) %u bytes\n", __FILE__, \
388 __LINE__, (u32)(b), (u32)(d)); \
389 _ipw_read_indirect(a, b, c, d); \
390})
43f66a6c 391
c8fe6679 392/* alias to multi-byte read (SRAM/regs above 4K), with debug wrapper */
0edd5b44
JG		 393static void _ipw_write_indirect(struct ipw_priv *priv, u32 addr, u8 * data,
394 int num);
1788bcd1
JS		 395#define ipw_write_indirect(a, b, c, d) do { \
396 IPW_DEBUG_IO("%s %d: write_indirect(0x%08X) %u bytes\n", __FILE__, \
397 __LINE__, (u32)(b), (u32)(d)); \
398 _ipw_write_indirect(a, b, c, d); \
399} while (0)
43f66a6c 400
c8fe6679 401/* 32-bit indirect write (above 4K) */
0edd5b44 402static void _ipw_write_reg32(struct ipw_priv *priv, u32 reg, u32 value)
43f66a6c 403{
0edd5b44 404 IPW_DEBUG_IO(" %p : reg = 0x%8X : value = 0x%8X\n", priv, reg, value);
b095c381
JK		 405 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg);
406 _ipw_write32(priv, IPW_INDIRECT_DATA, value);
43f66a6c
JK		 407}
408
c8fe6679 409/* 8-bit indirect write (above 4K) */
43f66a6c
JK		 410static void _ipw_write_reg8(struct ipw_priv *priv, u32 reg, u8 value)
411{
2638bc39 412 u32 aligned_addr = reg & IPW_INDIRECT_ADDR_MASK; /* dword align */
c8fe6679
ZY		 413 u32 dif_len = reg - aligned_addr;
414
43f66a6c 415 IPW_DEBUG_IO(" reg = 0x%8X : value = 0x%8X\n", reg, value);
c8fe6679
ZY		 416 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
417 _ipw_write8(priv, IPW_INDIRECT_DATA + dif_len, value);
43f66a6c
JK		 418}
419
c8fe6679 420/* 16-bit indirect write (above 4K) */
0edd5b44 421static void _ipw_write_reg16(struct ipw_priv *priv, u32 reg, u16 value)
43f66a6c 422{
2638bc39 423 u32 aligned_addr = reg & IPW_INDIRECT_ADDR_MASK; /* dword align */
c8fe6679
ZY		 424 u32 dif_len = (reg - aligned_addr) & (~0x1ul);
425
43f66a6c 426 IPW_DEBUG_IO(" reg = 0x%8X : value = 0x%8X\n", reg, value);
c8fe6679
ZY		 427 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
428 _ipw_write16(priv, IPW_INDIRECT_DATA + dif_len, value);
43f66a6c
JK		 429}
430
c8fe6679 431/* 8-bit indirect read (above 4K) */
43f66a6c
JK		 432static u8 _ipw_read_reg8(struct ipw_priv *priv, u32 reg)
433{
434 u32 word;
b095c381 435 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg & IPW_INDIRECT_ADDR_MASK);
43f66a6c 436 IPW_DEBUG_IO(" reg = 0x%8X : \n", reg);
b095c381 437 word = _ipw_read32(priv, IPW_INDIRECT_DATA);
0edd5b44 438 return (word >> ((reg & 0x3) * 8)) & 0xff;
43f66a6c
JK		 439}
440
c8fe6679 441/* 32-bit indirect read (above 4K) */
43f66a6c
JK		 442static u32 _ipw_read_reg32(struct ipw_priv *priv, u32 reg)
443{
444 u32 value;
445
446 IPW_DEBUG_IO("%p : reg = 0x%08x\n", priv, reg);
447
b095c381
JK		 448 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg);
449 value = _ipw_read32(priv, IPW_INDIRECT_DATA);
43f66a6c
JK		 450 IPW_DEBUG_IO(" reg = 0x%4X : value = 0x%4x \n", reg, value);
451 return value;
452}
453
c8fe6679
ZY		 454/* General purpose, no alignment requirement, iterative (multi-byte) read, */
455/* for area above 1st 4K of SRAM/reg space */
43f66a6c
JK		 456static void _ipw_read_indirect(struct ipw_priv *priv, u32 addr, u8 * buf,
457 int num)
458{
2638bc39 459 u32 aligned_addr = addr & IPW_INDIRECT_ADDR_MASK; /* dword align */
43f66a6c 460 u32 dif_len = addr - aligned_addr;
43f66a6c 461 u32 i;
bf79451e 462
43f66a6c
JK		 463 IPW_DEBUG_IO("addr = %i, buf = %p, num = %i\n", addr, buf, num);
464
ea2b26e0
JK		 465 if (num <= 0) {
466 return;
467 }
468
c8fe6679 469 /* Read the first dword (or portion) byte by byte */
43f66a6c 470 if (unlikely(dif_len)) {
b095c381 471 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
43f66a6c 472 /* Start reading at aligned_addr + dif_len */
ea2b26e0 473 for (i = dif_len; ((i < 4) && (num > 0)); i++, num--)
b095c381 474 *buf++ = _ipw_read8(priv, IPW_INDIRECT_DATA + i);
43f66a6c
JK		 475 aligned_addr += 4;
476 }
477
c8fe6679 478 /* Read all of the middle dwords as dwords, with auto-increment */
b095c381 479 _ipw_write32(priv, IPW_AUTOINC_ADDR, aligned_addr);
ea2b26e0 480 for (; num >= 4; buf += 4, aligned_addr += 4, num -= 4)
b095c381 481 *(u32 *) buf = _ipw_read32(priv, IPW_AUTOINC_DATA);
bf79451e 482
c8fe6679 483 /* Read the last dword (or portion) byte by byte */
ea2b26e0 484 if (unlikely(num)) {
b095c381 485 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
ea2b26e0 486 for (i = 0; num > 0; i++, num--)
b095c381 487 *buf++ = ipw_read8(priv, IPW_INDIRECT_DATA + i);
ea2b26e0 488 }
43f66a6c
JK		 489}
490
c8fe6679
ZY		 491/* General purpose, no alignment requirement, iterative (multi-byte) write, */
492/* for area above 1st 4K of SRAM/reg space */
0edd5b44 493static void _ipw_write_indirect(struct ipw_priv *priv, u32 addr, u8 * buf,
43f66a6c
JK		 494 int num)
495{
2638bc39 496 u32 aligned_addr = addr & IPW_INDIRECT_ADDR_MASK; /* dword align */
43f66a6c 497 u32 dif_len = addr - aligned_addr;
43f66a6c 498 u32 i;
bf79451e 499
43f66a6c 500 IPW_DEBUG_IO("addr = %i, buf = %p, num = %i\n", addr, buf, num);
bf79451e 501
ea2b26e0
JK		 502 if (num <= 0) {
503 return;
504 }
505
c8fe6679 506 /* Write the first dword (or portion) byte by byte */
43f66a6c 507 if (unlikely(dif_len)) {
b095c381 508 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
c8fe6679 509 /* Start writing at aligned_addr + dif_len */
ea2b26e0 510 for (i = dif_len; ((i < 4) && (num > 0)); i++, num--, buf++)
b095c381 511 _ipw_write8(priv, IPW_INDIRECT_DATA + i, *buf);
43f66a6c
JK		 512 aligned_addr += 4;
513 }
bf79451e 514
c8fe6679 515 /* Write all of the middle dwords as dwords, with auto-increment */
b095c381 516 _ipw_write32(priv, IPW_AUTOINC_ADDR, aligned_addr);
ea2b26e0 517 for (; num >= 4; buf += 4, aligned_addr += 4, num -= 4)
b095c381 518 _ipw_write32(priv, IPW_AUTOINC_DATA, *(u32 *) buf);
bf79451e 519
c8fe6679 520 /* Write the last dword (or portion) byte by byte */
ea2b26e0 521 if (unlikely(num)) {
b095c381 522 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
ea2b26e0 523 for (i = 0; num > 0; i++, num--, buf++)
b095c381 524 _ipw_write8(priv, IPW_INDIRECT_DATA + i, *buf);
ea2b26e0 525 }
43f66a6c
JK		 526}
527
c8fe6679
ZY		 528/* General purpose, no alignment requirement, iterative (multi-byte) write, */
529/* for 1st 4K of SRAM/regs space */
bf79451e 530static void ipw_write_direct(struct ipw_priv *priv, u32 addr, void *buf,
43f66a6c
JK		 531 int num)
532{
533 memcpy_toio((priv->hw_base + addr), buf, num);
534}
535
c8fe6679 536/* Set bit(s) in low 4K of SRAM/regs */
43f66a6c
JK		 537static inline void ipw_set_bit(struct ipw_priv *priv, u32 reg, u32 mask)
538{
539 ipw_write32(priv, reg, ipw_read32(priv, reg) | mask);
540}
541
c8fe6679 542/* Clear bit(s) in low 4K of SRAM/regs */
43f66a6c
JK		 543static inline void ipw_clear_bit(struct ipw_priv *priv, u32 reg, u32 mask)
544{
545 ipw_write32(priv, reg, ipw_read32(priv, reg) & ~mask);
546}
547
89c318ed 548static inline void __ipw_enable_interrupts(struct ipw_priv *priv)
43f66a6c
JK		 549{
550 if (priv->status & STATUS_INT_ENABLED)
551 return;
552 priv->status |= STATUS_INT_ENABLED;
b095c381 553 ipw_write32(priv, IPW_INTA_MASK_R, IPW_INTA_MASK_ALL);
43f66a6c
JK		 554}
555
89c318ed 556static inline void __ipw_disable_interrupts(struct ipw_priv *priv)
43f66a6c
JK		 557{
558 if (!(priv->status & STATUS_INT_ENABLED))
559 return;
560 priv->status &= ~STATUS_INT_ENABLED;
b095c381 561 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
43f66a6c
JK		 562}
563
89c318ed
ZY		 564static inline void ipw_enable_interrupts(struct ipw_priv *priv)
565{
566 unsigned long flags;
567
568 spin_lock_irqsave(&priv->irq_lock, flags);
569 __ipw_enable_interrupts(priv);
570 spin_unlock_irqrestore(&priv->irq_lock, flags);
571}
572
573static inline void ipw_disable_interrupts(struct ipw_priv *priv)
574{
575 unsigned long flags;
576
577 spin_lock_irqsave(&priv->irq_lock, flags);
578 __ipw_disable_interrupts(priv);
579 spin_unlock_irqrestore(&priv->irq_lock, flags);
580}
581
43f66a6c
JK		 582static char *ipw_error_desc(u32 val)
583{
584 switch (val) {
bf79451e 585 case IPW_FW_ERROR_OK:
43f66a6c 586 return "ERROR_OK";
bf79451e 587 case IPW_FW_ERROR_FAIL:
43f66a6c 588 return "ERROR_FAIL";
bf79451e 589 case IPW_FW_ERROR_MEMORY_UNDERFLOW:
43f66a6c 590 return "MEMORY_UNDERFLOW";
bf79451e 591 case IPW_FW_ERROR_MEMORY_OVERFLOW:
43f66a6c 592 return "MEMORY_OVERFLOW";
bf79451e 593 case IPW_FW_ERROR_BAD_PARAM:
b095c381 594 return "BAD_PARAM";
bf79451e 595 case IPW_FW_ERROR_BAD_CHECKSUM:
b095c381 596 return "BAD_CHECKSUM";
bf79451e 597 case IPW_FW_ERROR_NMI_INTERRUPT:
b095c381 598 return "NMI_INTERRUPT";
bf79451e 599 case IPW_FW_ERROR_BAD_DATABASE:
b095c381 600 return "BAD_DATABASE";
bf79451e 601 case IPW_FW_ERROR_ALLOC_FAIL:
b095c381 602 return "ALLOC_FAIL";
bf79451e 603 case IPW_FW_ERROR_DMA_UNDERRUN:
b095c381 604 return "DMA_UNDERRUN";
bf79451e 605 case IPW_FW_ERROR_DMA_STATUS:
b095c381
JK		 606 return "DMA_STATUS";
607 case IPW_FW_ERROR_DINO_ERROR:
608 return "DINO_ERROR";
609 case IPW_FW_ERROR_EEPROM_ERROR:
610 return "EEPROM_ERROR";
bf79451e 611 case IPW_FW_ERROR_SYSASSERT:
b095c381 612 return "SYSASSERT";
bf79451e 613 case IPW_FW_ERROR_FATAL_ERROR:
b095c381 614 return "FATAL_ERROR";
bf79451e 615 default:
b095c381 616 return "UNKNOWN_ERROR";
43f66a6c
JK		 617 }
618}
619
b39860c6
JK		 620static void ipw_dump_error_log(struct ipw_priv *priv,
621 struct ipw_fw_error *error)
43f66a6c 622{
b39860c6 623 u32 i;
bf79451e 624
b39860c6
JK		 625 if (!error) {
626 IPW_ERROR("Error allocating and capturing error log. "
627 "Nothing to dump.\n");
628 return;
43f66a6c
JK		 629 }
630
b39860c6
JK		 631 IPW_ERROR("Start IPW Error Log Dump:\n");
632 IPW_ERROR("Status: 0x%08X, Config: %08X\n",
633 error->status, error->config);
43f66a6c 634
b39860c6 635 for (i = 0; i < error->elem_len; i++)
0edd5b44 636 IPW_ERROR("%s %i 0x%08x 0x%08x 0x%08x 0x%08x 0x%08x\n",
b39860c6
JK		 637 ipw_error_desc(error->elem[i].desc),
638 error->elem[i].time,
639 error->elem[i].blink1,
640 error->elem[i].blink2,
641 error->elem[i].link1,
642 error->elem[i].link2, error->elem[i].data);
643 for (i = 0; i < error->log_len; i++)
644 IPW_ERROR("%i\t0x%08x\t%i\n",
645 error->log[i].time,
286568ab 646 error->log[i].data, error->log[i].event);
43f66a6c
JK		 647}
648
c848d0af 649static inline int ipw_is_init(struct ipw_priv *priv)
43f66a6c 650{
c848d0af 651 return (priv->status & STATUS_INIT) ? 1 : 0;
43f66a6c
JK		 652}
653
0edd5b44 654static int ipw_get_ordinal(struct ipw_priv *priv, u32 ord, void *val, u32 * len)
43f66a6c
JK		 655{
656 u32 addr, field_info, field_len, field_count, total_len;
657
658 IPW_DEBUG_ORD("ordinal = %i\n", ord);
659
660 if (!priv || !val || !len) {
661 IPW_DEBUG_ORD("Invalid argument\n");
662 return -EINVAL;
663 }
bf79451e 664
43f66a6c
JK		 665 /* verify device ordinal tables have been initialized */
666 if (!priv->table0_addr || !priv->table1_addr || !priv->table2_addr) {
667 IPW_DEBUG_ORD("Access ordinals before initialization\n");
668 return -EINVAL;
669 }
670
671 switch (IPW_ORD_TABLE_ID_MASK & ord) {
672 case IPW_ORD_TABLE_0_MASK:
673 /*
674 * TABLE 0: Direct access to a table of 32 bit values
675 *
bf79451e 676 * This is a very simple table with the data directly
43f66a6c
JK		 677 * read from the table
678 */
679
680 /* remove the table id from the ordinal */
681 ord &= IPW_ORD_TABLE_VALUE_MASK;
682
683 /* boundary check */
684 if (ord > priv->table0_len) {
685 IPW_DEBUG_ORD("ordinal value (%i) longer then "
686 "max (%i)\n", ord, priv->table0_len);
687 return -EINVAL;
688 }
689
690 /* verify we have enough room to store the value */
691 if (*len < sizeof(u32)) {
692 IPW_DEBUG_ORD("ordinal buffer length too small, "
aaa4d308 693 "need %zd\n", sizeof(u32));
43f66a6c
JK		 694 return -EINVAL;
695 }
696
697 IPW_DEBUG_ORD("Reading TABLE0[%i] from offset 0x%08x\n",
0edd5b44 698 ord, priv->table0_addr + (ord << 2));
43f66a6c
JK		 699
700 *len = sizeof(u32);
701 ord <<= 2;
0edd5b44 702 *((u32 *) val) = ipw_read32(priv, priv->table0_addr + ord);
43f66a6c
JK		 703 break;
704
705 case IPW_ORD_TABLE_1_MASK:
706 /*
707 * TABLE 1: Indirect access to a table of 32 bit values
bf79451e
JG		 708 *
709 * This is a fairly large table of u32 values each
43f66a6c
JK		 710 * representing starting addr for the data (which is
711 * also a u32)
712 */
713
714 /* remove the table id from the ordinal */
715 ord &= IPW_ORD_TABLE_VALUE_MASK;
bf79451e 716
43f66a6c
JK		 717 /* boundary check */
718 if (ord > priv->table1_len) {
719 IPW_DEBUG_ORD("ordinal value too long\n");
720 return -EINVAL;
721 }
722
723 /* verify we have enough room to store the value */
724 if (*len < sizeof(u32)) {
725 IPW_DEBUG_ORD("ordinal buffer length too small, "
aaa4d308 726 "need %zd\n", sizeof(u32));
43f66a6c
JK		 727 return -EINVAL;
728 }
729
0edd5b44
JG		 730 *((u32 *) val) =
731 ipw_read_reg32(priv, (priv->table1_addr + (ord << 2)));
43f66a6c
JK		 732 *len = sizeof(u32);
733 break;
734
735 case IPW_ORD_TABLE_2_MASK:
736 /*
737 * TABLE 2: Indirect access to a table of variable sized values
738 *
739 * This table consist of six values, each containing
740 * - dword containing the starting offset of the data
741 * - dword containing the lengh in the first 16bits
742 * and the count in the second 16bits
743 */
744
745 /* remove the table id from the ordinal */
746 ord &= IPW_ORD_TABLE_VALUE_MASK;
747
748 /* boundary check */
749 if (ord > priv->table2_len) {
750 IPW_DEBUG_ORD("ordinal value too long\n");
751 return -EINVAL;
752 }
753
754 /* get the address of statistic */
755 addr = ipw_read_reg32(priv, priv->table2_addr + (ord << 3));
bf79451e
JG		 756
757 /* get the second DW of statistics ;
43f66a6c 758 * two 16-bit words - first is length, second is count */
0edd5b44
JG		 759 field_info =
760 ipw_read_reg32(priv,
761 priv->table2_addr + (ord << 3) +
762 sizeof(u32));
bf79451e 763
43f66a6c 764 /* get each entry length */
0edd5b44 765 field_len = *((u16 *) & field_info);
bf79451e 766
43f66a6c 767 /* get number of entries */
0edd5b44 768 field_count = *(((u16 *) & field_info) + 1);
bf79451e 769
43f66a6c
JK		 770 /* abort if not enought memory */
771 total_len = field_len * field_count;
772 if (total_len > *len) {
773 *len = total_len;
774 return -EINVAL;
775 }
bf79451e 776
43f66a6c
JK		 777 *len = total_len;
778 if (!total_len)
779 return 0;
780
781 IPW_DEBUG_ORD("addr = 0x%08x, total_len = %i, "
bf79451e 782 "field_info = 0x%08x\n",
43f66a6c
JK		 783 addr, total_len, field_info);
784 ipw_read_indirect(priv, addr, val, total_len);
785 break;
786
787 default:
788 IPW_DEBUG_ORD("Invalid ordinal!\n");
789 return -EINVAL;
790
791 }
792
43f66a6c
JK		 793 return 0;
794}
795
796static void ipw_init_ordinals(struct ipw_priv *priv)
797{
798 priv->table0_addr = IPW_ORDINALS_TABLE_LOWER;
bf79451e 799 priv->table0_len = ipw_read32(priv, priv->table0_addr);
43f66a6c
JK		 800
801 IPW_DEBUG_ORD("table 0 offset at 0x%08x, len = %i\n",
802 priv->table0_addr, priv->table0_len);
803
804 priv->table1_addr = ipw_read32(priv, IPW_ORDINALS_TABLE_1);
805 priv->table1_len = ipw_read_reg32(priv, priv->table1_addr);
806
807 IPW_DEBUG_ORD("table 1 offset at 0x%08x, len = %i\n",
808 priv->table1_addr, priv->table1_len);
809
810 priv->table2_addr = ipw_read32(priv, IPW_ORDINALS_TABLE_2);
811 priv->table2_len = ipw_read_reg32(priv, priv->table2_addr);
0edd5b44 812 priv->table2_len &= 0x0000ffff; /* use first two bytes */
43f66a6c
JK		 813
814 IPW_DEBUG_ORD("table 2 offset at 0x%08x, len = %i\n",
815 priv->table2_addr, priv->table2_len);
816
817}
818
a73e22b2 819static u32 ipw_register_toggle(u32 reg)
a613bffd 820{
b095c381
JK		 821 reg &= ~IPW_START_STANDBY;
822 if (reg & IPW_GATE_ODMA)
823 reg &= ~IPW_GATE_ODMA;
824 if (reg & IPW_GATE_IDMA)
825 reg &= ~IPW_GATE_IDMA;
826 if (reg & IPW_GATE_ADMA)
827 reg &= ~IPW_GATE_ADMA;
a613bffd
JK		 828 return reg;
829}
830
831/*
832 * LED behavior:
833 * - On radio ON, turn on any LEDs that require to be on during start
834 * - On initialization, start unassociated blink
835 * - On association, disable unassociated blink
836 * - On disassociation, start unassociated blink
837 * - On radio OFF, turn off any LEDs started during radio on
838 *
839 */
ede6111c
ZY		 840#define LD_TIME_LINK_ON msecs_to_jiffies(300)
841#define LD_TIME_LINK_OFF msecs_to_jiffies(2700)
842#define LD_TIME_ACT_ON msecs_to_jiffies(250)
a613bffd 843
a73e22b2 844static void ipw_led_link_on(struct ipw_priv *priv)
a613bffd
JK		 845{
846 unsigned long flags;
847 u32 led;
848
849 /* If configured to not use LEDs, or nic_type is 1,
850 * then we don't toggle a LINK led */
851 if (priv->config & CFG_NO_LED || priv->nic_type == EEPROM_NIC_TYPE_1)
852 return;
853
854 spin_lock_irqsave(&priv->lock, flags);
855
856 if (!(priv->status & STATUS_RF_KILL_MASK) &&
857 !(priv->status & STATUS_LED_LINK_ON)) {
858 IPW_DEBUG_LED("Link LED On\n");
b095c381 859 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 860 led |= priv->led_association_on;
861
862 led = ipw_register_toggle(led);
863
864 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 865 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 866
867 priv->status |= STATUS_LED_LINK_ON;
868
869 /* If we aren't associated, schedule turning the LED off */
870 if (!(priv->status & STATUS_ASSOCIATED))
871 queue_delayed_work(priv->workqueue,
872 &priv->led_link_off,
873 LD_TIME_LINK_ON);
874 }
875
876 spin_unlock_irqrestore(&priv->lock, flags);
877}
878
c4028958 879static void ipw_bg_led_link_on(struct work_struct *work)
c848d0af 880{
c4028958
DH		 881 struct ipw_priv *priv =
882 container_of(work, struct ipw_priv, led_link_on.work);
4644151b 883 mutex_lock(&priv->mutex);
c4028958 884 ipw_led_link_on(priv);
4644151b 885 mutex_unlock(&priv->mutex);
c848d0af
JK		 886}
887
a73e22b2 888static void ipw_led_link_off(struct ipw_priv *priv)
a613bffd
JK		 889{
890 unsigned long flags;
891 u32 led;
892
893 /* If configured not to use LEDs, or nic type is 1,
894 * then we don't goggle the LINK led. */
895 if (priv->config & CFG_NO_LED || priv->nic_type == EEPROM_NIC_TYPE_1)
896 return;
897
898 spin_lock_irqsave(&priv->lock, flags);
899
900 if (priv->status & STATUS_LED_LINK_ON) {
b095c381 901 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 902 led &= priv->led_association_off;
903 led = ipw_register_toggle(led);
904
905 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 906 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 907
908 IPW_DEBUG_LED("Link LED Off\n");
909
910 priv->status &= ~STATUS_LED_LINK_ON;
911
912 /* If we aren't associated and the radio is on, schedule
913 * turning the LED on (blink while unassociated) */
914 if (!(priv->status & STATUS_RF_KILL_MASK) &&
915 !(priv->status & STATUS_ASSOCIATED))
916 queue_delayed_work(priv->workqueue, &priv->led_link_on,
917 LD_TIME_LINK_OFF);
918
919 }
920
921 spin_unlock_irqrestore(&priv->lock, flags);
922}
923
c4028958 924static void ipw_bg_led_link_off(struct work_struct *work)
c848d0af 925{
c4028958
DH		 926 struct ipw_priv *priv =
927 container_of(work, struct ipw_priv, led_link_off.work);
4644151b 928 mutex_lock(&priv->mutex);
c4028958 929 ipw_led_link_off(priv);
4644151b 930 mutex_unlock(&priv->mutex);
c848d0af
JK		 931}
932
858119e1 933static void __ipw_led_activity_on(struct ipw_priv *priv)
a613bffd 934{
a613bffd
JK		 935 u32 led;
936
937 if (priv->config & CFG_NO_LED)
938 return;
939
b095c381 940 if (priv->status & STATUS_RF_KILL_MASK)
a613bffd 941 return;
a613bffd
JK		 942
943 if (!(priv->status & STATUS_LED_ACT_ON)) {
b095c381 944 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 945 led |= priv->led_activity_on;
946
947 led = ipw_register_toggle(led);
948
949 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 950 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 951
952 IPW_DEBUG_LED("Activity LED On\n");
953
954 priv->status |= STATUS_LED_ACT_ON;
955
c848d0af 956 cancel_delayed_work(&priv->led_act_off);
a613bffd
JK		 957 queue_delayed_work(priv->workqueue, &priv->led_act_off,
958 LD_TIME_ACT_ON);
959 } else {
960 /* Reschedule LED off for full time period */
961 cancel_delayed_work(&priv->led_act_off);
962 queue_delayed_work(priv->workqueue, &priv->led_act_off,
963 LD_TIME_ACT_ON);
964 }
b095c381 965}
a613bffd 966
a73e22b2 967#if 0
b095c381
JK		 968void ipw_led_activity_on(struct ipw_priv *priv)
969{
970 unsigned long flags;
971 spin_lock_irqsave(&priv->lock, flags);
972 __ipw_led_activity_on(priv);
a613bffd
JK		 973 spin_unlock_irqrestore(&priv->lock, flags);
974}
a73e22b2 975#endif /* 0 */
a613bffd 976
a73e22b2 977static void ipw_led_activity_off(struct ipw_priv *priv)
a613bffd
JK		 978{
979 unsigned long flags;
980 u32 led;
981
982 if (priv->config & CFG_NO_LED)
983 return;
984
985 spin_lock_irqsave(&priv->lock, flags);
986
987 if (priv->status & STATUS_LED_ACT_ON) {
b095c381 988 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 989 led &= priv->led_activity_off;
990
991 led = ipw_register_toggle(led);
992
993 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 994 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 995
996 IPW_DEBUG_LED("Activity LED Off\n");
997
998 priv->status &= ~STATUS_LED_ACT_ON;
999 }
1000
1001 spin_unlock_irqrestore(&priv->lock, flags);
1002}
1003
c4028958 1004static void ipw_bg_led_activity_off(struct work_struct *work)
c848d0af 1005{
c4028958
DH		 1006 struct ipw_priv *priv =
1007 container_of(work, struct ipw_priv, led_act_off.work);
4644151b 1008 mutex_lock(&priv->mutex);
c4028958 1009 ipw_led_activity_off(priv);
4644151b 1010 mutex_unlock(&priv->mutex);
c848d0af
JK		 1011}
1012
a73e22b2 1013static void ipw_led_band_on(struct ipw_priv *priv)
a613bffd
JK		 1014{
1015 unsigned long flags;
1016 u32 led;
1017
1018 /* Only nic type 1 supports mode LEDs */
c848d0af
JK		 1019 if (priv->config & CFG_NO_LED ||
1020 priv->nic_type != EEPROM_NIC_TYPE_1 || !priv->assoc_network)
a613bffd
JK		 1021 return;
1022
1023 spin_lock_irqsave(&priv->lock, flags);
1024
b095c381 1025 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 1026 if (priv->assoc_network->mode == IEEE_A) {
1027 led |= priv->led_ofdm_on;
1028 led &= priv->led_association_off;
1029 IPW_DEBUG_LED("Mode LED On: 802.11a\n");
1030 } else if (priv->assoc_network->mode == IEEE_G) {
1031 led |= priv->led_ofdm_on;
1032 led |= priv->led_association_on;
1033 IPW_DEBUG_LED("Mode LED On: 802.11g\n");
1034 } else {
1035 led &= priv->led_ofdm_off;
1036 led |= priv->led_association_on;
1037 IPW_DEBUG_LED("Mode LED On: 802.11b\n");
1038 }
1039
1040 led = ipw_register_toggle(led);
1041
1042 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 1043 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 1044
1045 spin_unlock_irqrestore(&priv->lock, flags);
1046}
1047
a73e22b2 1048static void ipw_led_band_off(struct ipw_priv *priv)
a613bffd
JK		 1049{
1050 unsigned long flags;
1051 u32 led;
1052
1053 /* Only nic type 1 supports mode LEDs */
1054 if (priv->config & CFG_NO_LED || priv->nic_type != EEPROM_NIC_TYPE_1)
1055 return;
1056
1057 spin_lock_irqsave(&priv->lock, flags);
1058
b095c381 1059 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK		 1060 led &= priv->led_ofdm_off;
1061 led &= priv->led_association_off;
1062
1063 led = ipw_register_toggle(led);
1064
1065 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 1066 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK		 1067
1068 spin_unlock_irqrestore(&priv->lock, flags);
1069}
1070
a73e22b2 1071static void ipw_led_radio_on(struct ipw_priv *priv)
a613bffd
JK		 1072{
1073 ipw_led_link_on(priv);
1074}
1075
a73e22b2 1076static void ipw_led_radio_off(struct ipw_priv *priv)
a613bffd
JK		 1077{
1078 ipw_led_activity_off(priv);
1079 ipw_led_link_off(priv);
1080}
1081
a73e22b2 1082static void ipw_led_link_up(struct ipw_priv *priv)
a613bffd
JK		 1083{
1084 /* Set the Link Led on for all nic types */
1085 ipw_led_link_on(priv);
1086}
1087
a73e22b2 1088static void ipw_led_link_down(struct ipw_priv *priv)
a613bffd
JK		 1089{
1090 ipw_led_activity_off(priv);
1091 ipw_led_link_off(priv);
1092
1093 if (priv->status & STATUS_RF_KILL_MASK)
1094 ipw_led_radio_off(priv);
1095}
1096
a73e22b2 1097static void ipw_led_init(struct ipw_priv *priv)
a613bffd
JK		 1098{
1099 priv->nic_type = priv->eeprom[EEPROM_NIC_TYPE];
1100
1101 /* Set the default PINs for the link and activity leds */
b095c381
JK		 1102 priv->led_activity_on = IPW_ACTIVITY_LED;
1103 priv->led_activity_off = ~(IPW_ACTIVITY_LED);
a613bffd 1104
b095c381
JK		 1105 priv->led_association_on = IPW_ASSOCIATED_LED;
1106 priv->led_association_off = ~(IPW_ASSOCIATED_LED);
a613bffd
JK		 1107
1108 /* Set the default PINs for the OFDM leds */
b095c381
JK		 1109 priv->led_ofdm_on = IPW_OFDM_LED;
1110 priv->led_ofdm_off = ~(IPW_OFDM_LED);
a613bffd
JK		 1111
1112 switch (priv->nic_type) {
1113 case EEPROM_NIC_TYPE_1:
1114 /* In this NIC type, the LEDs are reversed.... */
b095c381
JK		 1115 priv->led_activity_on = IPW_ASSOCIATED_LED;
1116 priv->led_activity_off = ~(IPW_ASSOCIATED_LED);
1117 priv->led_association_on = IPW_ACTIVITY_LED;
1118 priv->led_association_off = ~(IPW_ACTIVITY_LED);
a613bffd
JK		 1119
1120 if (!(priv->config & CFG_NO_LED))
1121 ipw_led_band_on(priv);
1122
1123 /* And we don't blink link LEDs for this nic, so
1124 * just return here */
1125 return;
1126
1127 case EEPROM_NIC_TYPE_3:
1128 case EEPROM_NIC_TYPE_2:
1129 case EEPROM_NIC_TYPE_4:
1130 case EEPROM_NIC_TYPE_0:
1131 break;
1132
1133 default:
1134 IPW_DEBUG_INFO("Unknown NIC type from EEPROM: %d\n",
1135 priv->nic_type);
1136 priv->nic_type = EEPROM_NIC_TYPE_0;
1137 break;
1138 }
1139
1140 if (!(priv->config & CFG_NO_LED)) {
1141 if (priv->status & STATUS_ASSOCIATED)
1142 ipw_led_link_on(priv);
1143 else
1144 ipw_led_link_off(priv);
1145 }
1146}
1147
a73e22b2 1148static void ipw_led_shutdown(struct ipw_priv *priv)
a613bffd 1149{
a613bffd
JK		 1150 ipw_led_activity_off(priv);
1151 ipw_led_link_off(priv);
1152 ipw_led_band_off(priv);
afbf30a2
JK		 1153 cancel_delayed_work(&priv->led_link_on);
1154 cancel_delayed_work(&priv->led_link_off);
1155 cancel_delayed_work(&priv->led_act_off);
a613bffd
JK		 1156}
1157
43f66a6c
JK		 1158/*
1159 * The following adds a new attribute to the sysfs representation
1160 * of this device driver (i.e. a new file in /sys/bus/pci/drivers/ipw/)
1161 * used for controling the debug level.
bf79451e 1162 *
43f66a6c
JK		 1163 * See the level definitions in ipw for details.
1164 */
1165static ssize_t show_debug_level(struct device_driver *d, char *buf)
1166{
1167 return sprintf(buf, "0x%08X\n", ipw_debug_level);
1168}
a613bffd
JK		 1169
1170static ssize_t store_debug_level(struct device_driver *d, const char *buf,
1171 size_t count)
43f66a6c
JK		 1172{
1173 char *p = (char *)buf;
1174 u32 val;
1175
1176 if (p[1] == 'x' || p[1] == 'X' || p[0] == 'x' || p[0] == 'X') {
1177 p++;
1178 if (p[0] == 'x' || p[0] == 'X')
1179 p++;
1180 val = simple_strtoul(p, &p, 16);
1181 } else
1182 val = simple_strtoul(p, &p, 10);
bf79451e
JG		 1183 if (p == buf)
1184 printk(KERN_INFO DRV_NAME
43f66a6c
JK		 1185 ": %s is not in hex or decimal form.\n", buf);
1186 else
1187 ipw_debug_level = val;
1188
1189 return strnlen(buf, count);
1190}
1191
bf79451e 1192static DRIVER_ATTR(debug_level, S_IWUSR | S_IRUGO,
43f66a6c
JK		 1193 show_debug_level, store_debug_level);
1194
b39860c6 1195static inline u32 ipw_get_event_log_len(struct ipw_priv *priv)
43f66a6c 1196{
c8fe6679 1197 /* length = 1st dword in log */
b39860c6 1198 return ipw_read_reg32(priv, ipw_read32(priv, IPW_EVENT_LOG));
43f66a6c 1199}
0edd5b44 1200
b39860c6
JK		 1201static void ipw_capture_event_log(struct ipw_priv *priv,
1202 u32 log_len, struct ipw_event *log)
43f66a6c 1203{
b39860c6 1204 u32 base;
0edd5b44 1205
b39860c6
JK		 1206 if (log_len) {
1207 base = ipw_read32(priv, IPW_EVENT_LOG);
1208 ipw_read_indirect(priv, base + sizeof(base) + sizeof(u32),
1209 (u8 *) log, sizeof(*log) * log_len);
1210 }
1211}
43f66a6c 1212
b39860c6 1213static struct ipw_fw_error *ipw_alloc_error_log(struct ipw_priv *priv)
43f66a6c 1214{
b39860c6
JK		 1215 struct ipw_fw_error *error;
1216 u32 log_len = ipw_get_event_log_len(priv);
1217 u32 base = ipw_read32(priv, IPW_ERROR_LOG);
1218 u32 elem_len = ipw_read_reg32(priv, base);
43f66a6c 1219
b39860c6
JK		 1220 error = kmalloc(sizeof(*error) +
1221 sizeof(*error->elem) * elem_len +
1222 sizeof(*error->log) * log_len, GFP_ATOMIC);
1223 if (!error) {
1224 IPW_ERROR("Memory allocation for firmware error log "
1225 "failed.\n");
1226 return NULL;
43f66a6c 1227 }
f6c5cb7c 1228 error->jiffies = jiffies;
b39860c6
JK		 1229 error->status = priv->status;
1230 error->config = priv->config;
1231 error->elem_len = elem_len;
1232 error->log_len = log_len;
1233 error->elem = (struct ipw_error_elem *)error->payload;
3b26b110 1234 error->log = (struct ipw_event *)(error->elem + elem_len);
b39860c6
JK		 1235
1236 ipw_capture_event_log(priv, log_len, error->log);
bf79451e 1237
b39860c6
JK		 1238 if (elem_len)
1239 ipw_read_indirect(priv, base + sizeof(base), (u8 *) error->elem,
1240 sizeof(*error->elem) * elem_len);
1241
1242 return error;
43f66a6c 1243}
0edd5b44 1244
b39860c6
JK		 1245static ssize_t show_event_log(struct device *d,
1246 struct device_attribute *attr, char *buf)
43f66a6c 1247{
b39860c6
JK		 1248 struct ipw_priv *priv = dev_get_drvdata(d);
1249 u32 log_len = ipw_get_event_log_len(priv);
412e9e78
RC		 1250 u32 log_size;
1251 struct ipw_event *log;
b39860c6 1252 u32 len = 0, i;
43f66a6c 1253
412e9e78
RC		 1254 /* not using min() because of its strict type checking */
1255 log_size = PAGE_SIZE / sizeof(*log) > log_len ?
1256 sizeof(*log) * log_len : PAGE_SIZE;
1257 log = kzalloc(log_size, GFP_KERNEL);
1258 if (!log) {
1259 IPW_ERROR("Unable to allocate memory for log\n");
1260 return 0;
1261 }
1262 log_len = log_size / sizeof(*log);
b39860c6 1263 ipw_capture_event_log(priv, log_len, log);
43f66a6c 1264
b39860c6
JK		 1265 len += snprintf(buf + len, PAGE_SIZE - len, "%08X", log_len);
1266 for (i = 0; i < log_len; i++)
1267 len += snprintf(buf + len, PAGE_SIZE - len,
1268 "\n%08X%08X%08X",
1269 log[i].time, log[i].event, log[i].data);
1270 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
412e9e78 1271 kfree(log);
b39860c6 1272 return len;
43f66a6c 1273}
0edd5b44 1274
b39860c6 1275static DEVICE_ATTR(event_log, S_IRUGO, show_event_log, NULL);
43f66a6c 1276
b39860c6
JK		 1277static ssize_t show_error(struct device *d,
1278 struct device_attribute *attr, char *buf)
43f66a6c 1279{
b39860c6
JK		 1280 struct ipw_priv *priv = dev_get_drvdata(d);
1281 u32 len = 0, i;
1282 if (!priv->error)
1283 return 0;
1284 len += snprintf(buf + len, PAGE_SIZE - len,
f6c5cb7c
JK		 1285 "%08lX%08X%08X%08X",
1286 priv->error->jiffies,
b39860c6
JK		 1287 priv->error->status,
1288 priv->error->config, priv->error->elem_len);
1289 for (i = 0; i < priv->error->elem_len; i++)
1290 len += snprintf(buf + len, PAGE_SIZE - len,
1291 "\n%08X%08X%08X%08X%08X%08X%08X",
1292 priv->error->elem[i].time,
1293 priv->error->elem[i].desc,
1294 priv->error->elem[i].blink1,
1295 priv->error->elem[i].blink2,
1296 priv->error->elem[i].link1,
1297 priv->error->elem[i].link2,
1298 priv->error->elem[i].data);
1299
1300 len += snprintf(buf + len, PAGE_SIZE - len,
1301 "\n%08X", priv->error->log_len);
1302 for (i = 0; i < priv->error->log_len; i++)
1303 len += snprintf(buf + len, PAGE_SIZE - len,
1304 "\n%08X%08X%08X",
1305 priv->error->log[i].time,
1306 priv->error->log[i].event,
1307 priv->error->log[i].data);
1308 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1309 return len;
1310}
1311
1312static ssize_t clear_error(struct device *d,
1313 struct device_attribute *attr,
1314 const char *buf, size_t count)
1315{
1316 struct ipw_priv *priv = dev_get_drvdata(d);
8f760780
JJ		 1317
1318 kfree(priv->error);
1319 priv->error = NULL;
b39860c6
JK		 1320 return count;
1321}
43f66a6c 1322
b39860c6 1323static DEVICE_ATTR(error, S_IRUGO | S_IWUSR, show_error, clear_error);
43f66a6c 1324
f6c5cb7c
JK		 1325static ssize_t show_cmd_log(struct device *d,
1326 struct device_attribute *attr, char *buf)
1327{
1328 struct ipw_priv *priv = dev_get_drvdata(d);
1329 u32 len = 0, i;
1330 if (!priv->cmdlog)
1331 return 0;
1332 for (i = (priv->cmdlog_pos + 1) % priv->cmdlog_len;
1333 (i != priv->cmdlog_pos) && (PAGE_SIZE - len);
1334 i = (i + 1) % priv->cmdlog_len) {
1335 len +=
1336 snprintf(buf + len, PAGE_SIZE - len,
1337 "\n%08lX%08X%08X%08X\n", priv->cmdlog[i].jiffies,
1338 priv->cmdlog[i].retcode, priv->cmdlog[i].cmd.cmd,
1339 priv->cmdlog[i].cmd.len);
1340 len +=
1341 snprintk_buf(buf + len, PAGE_SIZE - len,
1342 (u8 *) priv->cmdlog[i].cmd.param,
1343 priv->cmdlog[i].cmd.len);
1344 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1345 }
1346 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1347 return len;
43f66a6c 1348}
0edd5b44 1349
f6c5cb7c 1350static DEVICE_ATTR(cmd_log, S_IRUGO, show_cmd_log, NULL);
43f66a6c 1351
d685b8c2
ZY		 1352#ifdef CONFIG_IPW2200_PROMISCUOUS
1353static void ipw_prom_free(struct ipw_priv *priv);
1354static int ipw_prom_alloc(struct ipw_priv *priv);
1355static ssize_t store_rtap_iface(struct device *d,
1356 struct device_attribute *attr,
1357 const char *buf, size_t count)
1358{
1359 struct ipw_priv *priv = dev_get_drvdata(d);
1360 int rc = 0;
1361
1362 if (count < 1)
1363 return -EINVAL;
1364
1365 switch (buf[0]) {
1366 case '0':
1367 if (!rtap_iface)
1368 return count;
1369
1370 if (netif_running(priv->prom_net_dev)) {
1371 IPW_WARNING("Interface is up. Cannot unregister.\n");
1372 return count;
1373 }
1374
1375 ipw_prom_free(priv);
1376 rtap_iface = 0;
1377 break;
1378
1379 case '1':
1380 if (rtap_iface)
1381 return count;
1382
1383 rc = ipw_prom_alloc(priv);
1384 if (!rc)
1385 rtap_iface = 1;
1386 break;
1387
1388 default:
1389 return -EINVAL;
1390 }
1391
1392 if (rc) {
1393 IPW_ERROR("Failed to register promiscuous network "
1394 "device (error %d).\n", rc);
1395 }
1396
1397 return count;
1398}
1399
1400static ssize_t show_rtap_iface(struct device *d,
1401 struct device_attribute *attr,
1402 char *buf)
1403{
1404 struct ipw_priv *priv = dev_get_drvdata(d);
1405 if (rtap_iface)
1406 return sprintf(buf, "%s", priv->prom_net_dev->name);
1407 else {
1408 buf[0] = '-';
1409 buf[1] = '1';
1410 buf[2] = '\0';
1411 return 3;
1412 }
1413}
1414
1415static DEVICE_ATTR(rtap_iface, S_IWUSR | S_IRUSR, show_rtap_iface,
1416 store_rtap_iface);
1417
1418static ssize_t store_rtap_filter(struct device *d,
1419 struct device_attribute *attr,
1420 const char *buf, size_t count)
1421{
1422 struct ipw_priv *priv = dev_get_drvdata(d);
1423
1424 if (!priv->prom_priv) {
1425 IPW_ERROR("Attempting to set filter without "
1426 "rtap_iface enabled.\n");
1427 return -EPERM;
1428 }
1429
1430 priv->prom_priv->filter = simple_strtol(buf, NULL, 0);
1431
1432 IPW_DEBUG_INFO("Setting rtap filter to " BIT_FMT16 "\n",
1433 BIT_ARG16(priv->prom_priv->filter));
1434
1435 return count;
1436}
1437
1438static ssize_t show_rtap_filter(struct device *d,
1439 struct device_attribute *attr,
1440 char *buf)
1441{
1442 struct ipw_priv *priv = dev_get_drvdata(d);
1443 return sprintf(buf, "0x%04X",
1444 priv->prom_priv ? priv->prom_priv->filter : 0);
1445}
1446
1447static DEVICE_ATTR(rtap_filter, S_IWUSR | S_IRUSR, show_rtap_filter,
1448 store_rtap_filter);
1449#endif
1450
a613bffd
JK		 1451static ssize_t show_scan_age(struct device *d, struct device_attribute *attr,
1452 char *buf)
43f66a6c 1453{
a613bffd
JK		 1454 struct ipw_priv *priv = dev_get_drvdata(d);
1455 return sprintf(buf, "%d\n", priv->ieee->scan_age);
1456}
1457
1458static ssize_t store_scan_age(struct device *d, struct device_attribute *attr,
1459 const char *buf, size_t count)
1460{
1461 struct ipw_priv *priv = dev_get_drvdata(d);
1462 struct net_device *dev = priv->net_dev;
1463 char buffer[] = "00000000";
1464 unsigned long len =
1465 (sizeof(buffer) - 1) > count ? count : sizeof(buffer) - 1;
1466 unsigned long val;
1467 char *p = buffer;
1468
1469 IPW_DEBUG_INFO("enter\n");
1470
1471 strncpy(buffer, buf, len);
1472 buffer[len] = 0;
1473
1474 if (p[1] == 'x' || p[1] == 'X' || p[0] == 'x' || p[0] == 'X') {
1475 p++;
1476 if (p[0] == 'x' || p[0] == 'X')
1477 p++;
1478 val = simple_strtoul(p, &p, 16);
1479 } else
1480 val = simple_strtoul(p, &p, 10);
1481 if (p == buffer) {
1482 IPW_DEBUG_INFO("%s: user supplied invalid value.\n", dev->name);
1483 } else {
1484 priv->ieee->scan_age = val;
1485 IPW_DEBUG_INFO("set scan_age = %u\n", priv->ieee->scan_age);
1486 }
1487
1488 IPW_DEBUG_INFO("exit\n");
1489 return len;
1490}
1491
1492static DEVICE_ATTR(scan_age, S_IWUSR | S_IRUGO, show_scan_age, store_scan_age);
1493
1494static ssize_t show_led(struct device *d, struct device_attribute *attr,
1495 char *buf)
1496{
1497 struct ipw_priv *priv = dev_get_drvdata(d);
1498 return sprintf(buf, "%d\n", (priv->config & CFG_NO_LED) ? 0 : 1);
1499}
1500
1501static ssize_t store_led(struct device *d, struct device_attribute *attr,
1502 const char *buf, size_t count)
1503{
1504 struct ipw_priv *priv = dev_get_drvdata(d);
1505
1506 IPW_DEBUG_INFO("enter\n");
1507
1508 if (count == 0)
1509 return 0;
1510
1511 if (*buf == 0) {
1512 IPW_DEBUG_LED("Disabling LED control.\n");
1513 priv->config |= CFG_NO_LED;
1514 ipw_led_shutdown(priv);
1515 } else {
1516 IPW_DEBUG_LED("Enabling LED control.\n");
1517 priv->config &= ~CFG_NO_LED;
1518 ipw_led_init(priv);
1519 }
1520
1521 IPW_DEBUG_INFO("exit\n");
1522 return count;
1523}
1524
1525static DEVICE_ATTR(led, S_IWUSR | S_IRUGO, show_led, store_led);
1526
ad3fee56 1527static ssize_t show_status(struct device *d,
0edd5b44 1528 struct device_attribute *attr, char *buf)
43f66a6c 1529{
928841b1 1530 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c
JK		 1531 return sprintf(buf, "0x%08x\n", (int)p->status);
1532}
0edd5b44 1533
43f66a6c
JK		 1534static DEVICE_ATTR(status, S_IRUGO, show_status, NULL);
1535
ad3fee56
AM		 1536static ssize_t show_cfg(struct device *d, struct device_attribute *attr,
1537 char *buf)
43f66a6c 1538{
928841b1 1539 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c
JK		 1540 return sprintf(buf, "0x%08x\n", (int)p->config);
1541}
0edd5b44 1542
43f66a6c
JK		 1543static DEVICE_ATTR(cfg, S_IRUGO, show_cfg, NULL);
1544
ad3fee56 1545static ssize_t show_nic_type(struct device *d,
0edd5b44 1546 struct device_attribute *attr, char *buf)
43f66a6c 1547{
928841b1 1548 struct ipw_priv *priv = dev_get_drvdata(d);
a613bffd 1549 return sprintf(buf, "TYPE: %d\n", priv->nic_type);
43f66a6c 1550}
0edd5b44 1551
43f66a6c
JK		 1552static DEVICE_ATTR(nic_type, S_IRUGO, show_nic_type, NULL);
1553
ad3fee56 1554static ssize_t show_ucode_version(struct device *d,
0edd5b44 1555 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1556{
1557 u32 len = sizeof(u32), tmp = 0;
928841b1 1558 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c 1559
0edd5b44 1560 if (ipw_get_ordinal(p, IPW_ORD_STAT_UCODE_VERSION, &tmp, &len))
43f66a6c
JK		 1561 return 0;
1562
1563 return sprintf(buf, "0x%08x\n", tmp);
1564}
0edd5b44
JG		 1565
1566static DEVICE_ATTR(ucode_version, S_IWUSR | S_IRUGO, show_ucode_version, NULL);
43f66a6c 1567
ad3fee56
AM		 1568static ssize_t show_rtc(struct device *d, struct device_attribute *attr,
1569 char *buf)
43f66a6c
JK		 1570{
1571 u32 len = sizeof(u32), tmp = 0;
928841b1 1572 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c 1573
0edd5b44 1574 if (ipw_get_ordinal(p, IPW_ORD_STAT_RTC, &tmp, &len))
43f66a6c
JK		 1575 return 0;
1576
1577 return sprintf(buf, "0x%08x\n", tmp);
1578}
0edd5b44
JG		 1579
1580static DEVICE_ATTR(rtc, S_IWUSR | S_IRUGO, show_rtc, NULL);
43f66a6c
JK		 1581
1582/*
1583 * Add a device attribute to view/control the delay between eeprom
1584 * operations.
1585 */
ad3fee56 1586static ssize_t show_eeprom_delay(struct device *d,
0edd5b44 1587 struct device_attribute *attr, char *buf)
43f66a6c 1588{
928841b1
GKH		 1589 struct ipw_priv *p = dev_get_drvdata(d);
1590 int n = p->eeprom_delay;
43f66a6c
JK		 1591 return sprintf(buf, "%i\n", n);
1592}
ad3fee56 1593static ssize_t store_eeprom_delay(struct device *d,
0edd5b44
JG		 1594 struct device_attribute *attr,
1595 const char *buf, size_t count)
43f66a6c 1596{
928841b1 1597 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c
JK		 1598 sscanf(buf, "%i", &p->eeprom_delay);
1599 return strnlen(buf, count);
1600}
0edd5b44
JG		 1601
1602static DEVICE_ATTR(eeprom_delay, S_IWUSR | S_IRUGO,
1603 show_eeprom_delay, store_eeprom_delay);
43f66a6c 1604
ad3fee56 1605static ssize_t show_command_event_reg(struct device *d,
0edd5b44 1606 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1607{
1608 u32 reg = 0;
928841b1 1609 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c 1610
b095c381 1611 reg = ipw_read_reg32(p, IPW_INTERNAL_CMD_EVENT);
43f66a6c
JK		 1612 return sprintf(buf, "0x%08x\n", reg);
1613}
ad3fee56 1614static ssize_t store_command_event_reg(struct device *d,
0edd5b44
JG		 1615 struct device_attribute *attr,
1616 const char *buf, size_t count)
43f66a6c
JK		 1617{
1618 u32 reg;
928841b1 1619 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c
JK		 1620
1621 sscanf(buf, "%x", &reg);
b095c381 1622 ipw_write_reg32(p, IPW_INTERNAL_CMD_EVENT, reg);
43f66a6c
JK		 1623 return strnlen(buf, count);
1624}
0edd5b44
JG		 1625
1626static DEVICE_ATTR(command_event_reg, S_IWUSR | S_IRUGO,
1627 show_command_event_reg, store_command_event_reg);
43f66a6c 1628
ad3fee56 1629static ssize_t show_mem_gpio_reg(struct device *d,
0edd5b44 1630 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1631{
1632 u32 reg = 0;
928841b1 1633 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c
JK		 1634
1635 reg = ipw_read_reg32(p, 0x301100);
1636 return sprintf(buf, "0x%08x\n", reg);
1637}
ad3fee56 1638static ssize_t store_mem_gpio_reg(struct device *d,
0edd5b44
JG		 1639 struct device_attribute *attr,
1640 const char *buf, size_t count)
43f66a6c
JK		 1641{
1642 u32 reg;
928841b1 1643 struct ipw_priv *p = dev_get_drvdata(d);
43f66a6c
JK		 1644
1645 sscanf(buf, "%x", &reg);
1646 ipw_write_reg32(p, 0x301100, reg);
1647 return strnlen(buf, count);
1648}
0edd5b44
JG		 1649
1650static DEVICE_ATTR(mem_gpio_reg, S_IWUSR | S_IRUGO,
1651 show_mem_gpio_reg, store_mem_gpio_reg);
43f66a6c 1652
ad3fee56 1653static ssize_t show_indirect_dword(struct device *d,
0edd5b44 1654 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1655{
1656 u32 reg = 0;
928841b1 1657 struct ipw_priv *priv = dev_get_drvdata(d);
afbf30a2 1658
bf79451e 1659 if (priv->status & STATUS_INDIRECT_DWORD)
43f66a6c 1660 reg = ipw_read_reg32(priv, priv->indirect_dword);
bf79451e 1661 else
43f66a6c 1662 reg = 0;
bf79451e 1663
43f66a6c
JK		 1664 return sprintf(buf, "0x%08x\n", reg);
1665}
ad3fee56 1666static ssize_t store_indirect_dword(struct device *d,
0edd5b44
JG		 1667 struct device_attribute *attr,
1668 const char *buf, size_t count)
43f66a6c 1669{
928841b1 1670 struct ipw_priv *priv = dev_get_drvdata(d);
43f66a6c
JK		 1671
1672 sscanf(buf, "%x", &priv->indirect_dword);
1673 priv->status |= STATUS_INDIRECT_DWORD;
1674 return strnlen(buf, count);
1675}
0edd5b44
JG		 1676
1677static DEVICE_ATTR(indirect_dword, S_IWUSR | S_IRUGO,
1678 show_indirect_dword, store_indirect_dword);
43f66a6c 1679
ad3fee56 1680static ssize_t show_indirect_byte(struct device *d,
0edd5b44 1681 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1682{
1683 u8 reg = 0;
928841b1 1684 struct ipw_priv *priv = dev_get_drvdata(d);
afbf30a2 1685
bf79451e 1686 if (priv->status & STATUS_INDIRECT_BYTE)
43f66a6c 1687 reg = ipw_read_reg8(priv, priv->indirect_byte);
bf79451e 1688 else
43f66a6c
JK		 1689 reg = 0;
1690
1691 return sprintf(buf, "0x%02x\n", reg);
1692}
ad3fee56 1693static ssize_t store_indirect_byte(struct device *d,
0edd5b44
JG		 1694 struct device_attribute *attr,
1695 const char *buf, size_t count)
43f66a6c 1696{
928841b1 1697 struct ipw_priv *priv = dev_get_drvdata(d);
43f66a6c
JK		 1698
1699 sscanf(buf, "%x", &priv->indirect_byte);
1700 priv->status |= STATUS_INDIRECT_BYTE;
1701 return strnlen(buf, count);
1702}
0edd5b44
JG		 1703
1704static DEVICE_ATTR(indirect_byte, S_IWUSR | S_IRUGO,
43f66a6c
JK		 1705 show_indirect_byte, store_indirect_byte);
1706
ad3fee56 1707static ssize_t show_direct_dword(struct device *d,
0edd5b44 1708 struct device_attribute *attr, char *buf)
43f66a6c
JK		 1709{
1710 u32 reg = 0;
928841b1 1711 struct ipw_priv *priv = dev_get_drvdata(d);
43f66a6c 1712
bf79451e 1713 if (priv->status & STATUS_DIRECT_DWORD)
43f66a6c 1714 reg = ipw_read32(priv, priv->direct_dword);
bf79451e 1715 else
43f66a6c
JK		 1716 reg = 0;
1717
1718 return sprintf(buf, "0x%08x\n", reg);
1719}
ad3fee56 1720static ssize_t store_direct_dword(struct device *d,
0edd5b44
JG		 1721 struct device_attribute *attr,
1722 const char *buf, size_t count)
43f66a6c 1723{
928841b1 1724 struct ipw_priv *priv = dev_get_drvdata(d);
43f66a6c
JK		 1725
1726 sscanf(buf, "%x", &priv->direct_dword);
1727 priv->status |= STATUS_DIRECT_DWORD;
1728 return strnlen(buf, count);
1729}
43f66a6c 1730
0edd5b44
JG		 1731static DEVICE_ATTR(direct_dword, S_IWUSR | S_IRUGO,
1732 show_direct_dword, store_direct_dword);
43f66a6c 1733
858119e1 1734static int rf_kill_active(struct ipw_priv *priv)
43f66a6c
JK		 1735{
1736 if (0 == (ipw_read32(priv, 0x30) & 0x10000))
1737 priv->status |= STATUS_RF_KILL_HW;
1738 else
1739 priv->status &= ~STATUS_RF_KILL_HW;
1740
1741 return (priv->status & STATUS_RF_KILL_HW) ? 1 : 0;
1742}
1743
ad3fee56 1744static ssize_t show_rf_kill(struct device *d, struct device_attribute *attr,
0edd5b44 1745 char *buf)
43f66a6c
JK		 1746{
1747 /* 0 - RF kill not enabled
bf79451e 1748 1 - SW based RF kill active (sysfs)
43f66a6c
JK		 1749 2 - HW based RF kill active
1750 3 - Both HW and SW baed RF kill active */
928841b1 1751 struct ipw_priv *priv = dev_get_drvdata(d);
43f66a6c 1752 int val = ((priv->status & STATUS_RF_KILL_SW) ? 0x1 : 0x0) |
0edd5b44 1753 (rf_kill_active(priv) ? 0x2 : 0x0);
43f66a6c
JK		 1754 return sprintf(buf, "%i\n", val);
1755}
1756
1757static int ipw_radio_kill_sw(struct ipw_priv *priv, int disable_radio)
1758{
bf79451e 1759 if ((disable_radio ? 1 : 0) ==
ea2b26e0 1760 ((priv->status & STATUS_RF_KILL_SW) ? 1 : 0))
0edd5b44 1761 return 0;
43f66a6c
JK		 1762
1763 IPW_DEBUG_RF_KILL("Manual SW RF Kill set to: RADIO %s\n",
1764 disable_radio ? "OFF" : "ON");
1765
1766 if (disable_radio) {
1767 priv->status |= STATUS_RF_KILL_SW;
1768
0b531676 1769 if (priv->workqueue) {
43f66a6c 1770 cancel_delayed_work(&priv->request_scan);
ea177305
DW		 1771 cancel_delayed_work(&priv->request_direct_scan);
1772 cancel_delayed_work(&priv->request_passive_scan);
0b531676
DW		 1773 cancel_delayed_work(&priv->scan_event);
1774 }
43f66a6c
JK		 1775 queue_work(priv->workqueue, &priv->down);
1776 } else {
1777 priv->status &= ~STATUS_RF_KILL_SW;
1778 if (rf_kill_active(priv)) {
1779 IPW_DEBUG_RF_KILL("Can not turn radio back on - "
1780 "disabled by HW switch\n");
1781 /* Make sure the RF_KILL check timer is running */
1782 cancel_delayed_work(&priv->rf_kill);
bf79451e 1783 queue_delayed_work(priv->workqueue, &priv->rf_kill,
be84e3d6 1784 round_jiffies_relative(2 * HZ));
bf79451e 1785 } else
43f66a6c
JK		 1786 queue_work(priv->workqueue, &priv->up);
1787 }
1788
1789 return 1;
1790}
1791
0edd5b44
JG		 1792static ssize_t store_rf_kill(struct device *d, struct device_attribute *attr,
1793 const char *buf, size_t count)
43f66a6c 1794{
928841b1 1795 struct ipw_priv *priv = dev_get_drvdata(d);
bf79451e 1796
43f66a6c
JK		 1797 ipw_radio_kill_sw(priv, buf[0] == '1');
1798
1799 return count;
1800}
0edd5b44
JG		 1801
1802static DEVICE_ATTR(rf_kill, S_IWUSR | S_IRUGO, show_rf_kill, store_rf_kill);
43f66a6c 1803
b095c381
JK		 1804static ssize_t show_speed_scan(struct device *d, struct device_attribute *attr,
1805 char *buf)
1806{
928841b1 1807 struct ipw_priv *priv = dev_get_drvdata(d);
b095c381
JK		 1808 int pos = 0, len = 0;
1809 if (priv->config & CFG_SPEED_SCAN) {
1810 while (priv->speed_scan[pos] != 0)
1811 len += sprintf(&buf[len], "%d ",
1812 priv->speed_scan[pos++]);
1813 return len + sprintf(&buf[len], "\n");
1814 }
1815
1816 return sprintf(buf, "0\n");
1817}
1818
1819static ssize_t store_speed_scan(struct device *d, struct device_attribute *attr,
1820 const char *buf, size_t count)
1821{
928841b1 1822 struct ipw_priv *priv = dev_get_drvdata(d);
b095c381
JK		 1823 int channel, pos = 0;
1824 const char *p = buf;
1825
1826 /* list of space separated channels to scan, optionally ending with 0 */
1827 while ((channel = simple_strtol(p, NULL, 0))) {
1828 if (pos == MAX_SPEED_SCAN - 1) {
1829 priv->speed_scan[pos] = 0;
1830 break;
1831 }
1832
1867b117 1833 if (ieee80211_is_valid_channel(priv->ieee, channel))
b095c381
JK		 1834 priv->speed_scan[pos++] = channel;
1835 else
1836 IPW_WARNING("Skipping invalid channel request: %d\n",
1837 channel);
1838 p = strchr(p, ' ');
1839 if (!p)
1840 break;
1841 while (*p == ' ' || *p == '\t')
1842 p++;
1843 }
1844
1845 if (pos == 0)
1846 priv->config &= ~CFG_SPEED_SCAN;
1847 else {
1848 priv->speed_scan_pos = 0;
1849 priv->config |= CFG_SPEED_SCAN;
1850 }
1851
1852 return count;
1853}
1854
1855static DEVICE_ATTR(speed_scan, S_IWUSR | S_IRUGO, show_speed_scan,
1856 store_speed_scan);
1857
1858static ssize_t show_net_stats(struct device *d, struct device_attribute *attr,
1859 char *buf)
1860{
928841b1 1861 struct ipw_priv *priv = dev_get_drvdata(d);
b095c381
JK		 1862 return sprintf(buf, "%c\n", (priv->config & CFG_NET_STATS) ? '1' : '0');
1863}
1864
1865static ssize_t store_net_stats(struct device *d, struct device_attribute *attr,
1866 const char *buf, size_t count)
1867{
928841b1 1868 struct ipw_priv *priv = dev_get_drvdata(d);
b095c381
JK		 1869 if (buf[0] == '1')
1870 priv->config |= CFG_NET_STATS;
1871 else
1872 priv->config &= ~CFG_NET_STATS;
1873
1874 return count;
1875}
1876
afbf30a2
JK		 1877static DEVICE_ATTR(net_stats, S_IWUSR | S_IRUGO,
1878 show_net_stats, store_net_stats);
b095c381 1879
375dd244
ZY		 1880static ssize_t show_channels(struct device *d,
1881 struct device_attribute *attr,
1882 char *buf)
1883{
1884 struct ipw_priv *priv = dev_get_drvdata(d);
742e9910 1885 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
375dd244
ZY		 1886 int len = 0, i;
1887
1888 len = sprintf(&buf[len],
1889 "Displaying %d channels in 2.4Ghz band "
1890 "(802.11bg):\n", geo->bg_channels);
1891
1892 for (i = 0; i < geo->bg_channels; i++) {
1893 len += sprintf(&buf[len], "%d: BSS%s%s, %s, Band %s.\n",
1894 geo->bg[i].channel,
1895 geo->bg[i].flags & IEEE80211_CH_RADAR_DETECT ?
1896 " (radar spectrum)" : "",
1897 ((geo->bg[i].flags & IEEE80211_CH_NO_IBSS) ||
1898 (geo->bg[i].flags & IEEE80211_CH_RADAR_DETECT))
1899 ? "" : ", IBSS",
1900 geo->bg[i].flags & IEEE80211_CH_PASSIVE_ONLY ?
1901 "passive only" : "active/passive",
1902 geo->bg[i].flags & IEEE80211_CH_B_ONLY ?
1903 "B" : "B/G");
1904 }
1905
1906 len += sprintf(&buf[len],
1907 "Displaying %d channels in 5.2Ghz band "
1908 "(802.11a):\n", geo->a_channels);
1909 for (i = 0; i < geo->a_channels; i++) {
1910 len += sprintf(&buf[len], "%d: BSS%s%s, %s.\n",
1911 geo->a[i].channel,
1912 geo->a[i].flags & IEEE80211_CH_RADAR_DETECT ?
1913 " (radar spectrum)" : "",
1914 ((geo->a[i].flags & IEEE80211_CH_NO_IBSS) ||
1915 (geo->a[i].flags & IEEE80211_CH_RADAR_DETECT))
1916 ? "" : ", IBSS",
1917 geo->a[i].flags & IEEE80211_CH_PASSIVE_ONLY ?
1918 "passive only" : "active/passive");
1919 }
1920
1921 return len;
1922}
1923
1924static DEVICE_ATTR(channels, S_IRUSR, show_channels, NULL);
1925
ea2b26e0
JK		 1926static void notify_wx_assoc_event(struct ipw_priv *priv)
1927{
1928 union iwreq_data wrqu;
1929 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1930 if (priv->status & STATUS_ASSOCIATED)
1931 memcpy(wrqu.ap_addr.sa_data, priv->bssid, ETH_ALEN);
1932 else
1933 memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
1934 wireless_send_event(priv->net_dev, SIOCGIWAP, &wrqu, NULL);
1935}
1936
43f66a6c
JK		 1937static void ipw_irq_tasklet(struct ipw_priv *priv)
1938{
1939 u32 inta, inta_mask, handled = 0;
1940 unsigned long flags;
1941 int rc = 0;
1942
89c318ed 1943 spin_lock_irqsave(&priv->irq_lock, flags);
43f66a6c 1944
b095c381
JK		 1945 inta = ipw_read32(priv, IPW_INTA_RW);
1946 inta_mask = ipw_read32(priv, IPW_INTA_MASK_R);
1947 inta &= (IPW_INTA_MASK_ALL & inta_mask);
43f66a6c
JK		 1948
1949 /* Add any cached INTA values that need to be handled */
1950 inta |= priv->isr_inta;
1951
89c318ed
ZY		 1952 spin_unlock_irqrestore(&priv->irq_lock, flags);
1953
1954 spin_lock_irqsave(&priv->lock, flags);
1955
43f66a6c 1956 /* handle all the justifications for the interrupt */
b095c381 1957 if (inta & IPW_INTA_BIT_RX_TRANSFER) {
43f66a6c 1958 ipw_rx(priv);
b095c381 1959 handled |= IPW_INTA_BIT_RX_TRANSFER;
43f66a6c
JK		 1960 }
1961
b095c381 1962 if (inta & IPW_INTA_BIT_TX_CMD_QUEUE) {
43f66a6c 1963 IPW_DEBUG_HC("Command completed.\n");
0edd5b44 1964 rc = ipw_queue_tx_reclaim(priv, &priv->txq_cmd, -1);
43f66a6c
JK		 1965 priv->status &= ~STATUS_HCMD_ACTIVE;
1966 wake_up_interruptible(&priv->wait_command_queue);
b095c381 1967 handled |= IPW_INTA_BIT_TX_CMD_QUEUE;
43f66a6c
JK		 1968 }
1969
b095c381 1970 if (inta & IPW_INTA_BIT_TX_QUEUE_1) {
43f66a6c 1971 IPW_DEBUG_TX("TX_QUEUE_1\n");
0edd5b44 1972 rc = ipw_queue_tx_reclaim(priv, &priv->txq[0], 0);
b095c381 1973 handled |= IPW_INTA_BIT_TX_QUEUE_1;
43f66a6c
JK		 1974 }
1975
b095c381 1976 if (inta & IPW_INTA_BIT_TX_QUEUE_2) {
43f66a6c 1977 IPW_DEBUG_TX("TX_QUEUE_2\n");
0edd5b44 1978 rc = ipw_queue_tx_reclaim(priv, &priv->txq[1], 1);
b095c381 1979 handled |= IPW_INTA_BIT_TX_QUEUE_2;
43f66a6c
JK		 1980 }
1981
b095c381 1982 if (inta & IPW_INTA_BIT_TX_QUEUE_3) {
43f66a6c 1983 IPW_DEBUG_TX("TX_QUEUE_3\n");
0edd5b44 1984 rc = ipw_queue_tx_reclaim(priv, &priv->txq[2], 2);
b095c381 1985 handled |= IPW_INTA_BIT_TX_QUEUE_3;
43f66a6c
JK		 1986 }
1987
b095c381 1988 if (inta & IPW_INTA_BIT_TX_QUEUE_4) {
43f66a6c 1989 IPW_DEBUG_TX("TX_QUEUE_4\n");
0edd5b44 1990 rc = ipw_queue_tx_reclaim(priv, &priv->txq[3], 3);
b095c381 1991 handled |= IPW_INTA_BIT_TX_QUEUE_4;
43f66a6c
JK		 1992 }
1993
b095c381 1994 if (inta & IPW_INTA_BIT_STATUS_CHANGE) {
43f66a6c 1995 IPW_WARNING("STATUS_CHANGE\n");
b095c381 1996 handled |= IPW_INTA_BIT_STATUS_CHANGE;
43f66a6c
JK		 1997 }
1998
b095c381 1999 if (inta & IPW_INTA_BIT_BEACON_PERIOD_EXPIRED) {
43f66a6c 2000 IPW_WARNING("TX_PERIOD_EXPIRED\n");
b095c381 2001 handled |= IPW_INTA_BIT_BEACON_PERIOD_EXPIRED;
43f66a6c
JK		 2002 }
2003
b095c381 2004 if (inta & IPW_INTA_BIT_SLAVE_MODE_HOST_CMD_DONE) {
43f66a6c 2005 IPW_WARNING("HOST_CMD_DONE\n");
b095c381 2006 handled |= IPW_INTA_BIT_SLAVE_MODE_HOST_CMD_DONE;
43f66a6c
JK		 2007 }
2008
b095c381 2009 if (inta & IPW_INTA_BIT_FW_INITIALIZATION_DONE) {
43f66a6c 2010 IPW_WARNING("FW_INITIALIZATION_DONE\n");
b095c381 2011 handled |= IPW_INTA_BIT_FW_INITIALIZATION_DONE;
43f66a6c
JK		 2012 }
2013
b095c381 2014 if (inta & IPW_INTA_BIT_FW_CARD_DISABLE_PHY_OFF_DONE) {
43f66a6c 2015 IPW_WARNING("PHY_OFF_DONE\n");
b095c381 2016 handled |= IPW_INTA_BIT_FW_CARD_DISABLE_PHY_OFF_DONE;
43f66a6c
JK		 2017 }
2018
b095c381 2019 if (inta & IPW_INTA_BIT_RF_KILL_DONE) {
43f66a6c
JK		 2020 IPW_DEBUG_RF_KILL("RF_KILL_DONE\n");
2021 priv->status |= STATUS_RF_KILL_HW;
2022 wake_up_interruptible(&priv->wait_command_queue);
ea2b26e0 2023 priv->status &= ~(STATUS_ASSOCIATED | STATUS_ASSOCIATING);
43f66a6c 2024 cancel_delayed_work(&priv->request_scan);
ea177305
DW		 2025 cancel_delayed_work(&priv->request_direct_scan);
2026 cancel_delayed_work(&priv->request_passive_scan);
0b531676 2027 cancel_delayed_work(&priv->scan_event);
a613bffd 2028 schedule_work(&priv->link_down);
43f66a6c 2029 queue_delayed_work(priv->workqueue, &priv->rf_kill, 2 * HZ);
b095c381 2030 handled |= IPW_INTA_BIT_RF_KILL_DONE;
43f66a6c 2031 }
bf79451e 2032
b095c381 2033 if (inta & IPW_INTA_BIT_FATAL_ERROR) {
1d1b09eb 2034 IPW_WARNING("Firmware error detected. Restarting.\n");
b39860c6 2035 if (priv->error) {
1d1b09eb 2036 IPW_DEBUG_FW("Sysfs 'error' log already exists.\n");
b39860c6
JK		 2037 if (ipw_debug_level & IPW_DL_FW_ERRORS) {
2038 struct ipw_fw_error *error =
2039 ipw_alloc_error_log(priv);
2040 ipw_dump_error_log(priv, error);
8f760780 2041 kfree(error);
b39860c6 2042 }
b39860c6
JK		 2043 } else {
2044 priv->error = ipw_alloc_error_log(priv);
2045 if (priv->error)
1d1b09eb 2046 IPW_DEBUG_FW("Sysfs 'error' log captured.\n");
b39860c6 2047 else
1d1b09eb
ZY		 2048 IPW_DEBUG_FW("Error allocating sysfs 'error' "
2049 "log.\n");
b39860c6
JK		 2050 if (ipw_debug_level & IPW_DL_FW_ERRORS)
2051 ipw_dump_error_log(priv, priv->error);
b39860c6
JK		 2052 }
2053
b095c381
JK		 2054 /* XXX: If hardware encryption is for WPA/WPA2,
2055 * we have to notify the supplicant. */
2056 if (priv->ieee->sec.encrypt) {
2057 priv->status &= ~STATUS_ASSOCIATED;
2058 notify_wx_assoc_event(priv);
2059 }
2060
2061 /* Keep the restart process from trying to send host
2062 * commands by clearing the INIT status bit */
2063 priv->status &= ~STATUS_INIT;
afbf30a2
JK		 2064
2065 /* Cancel currently queued command. */
2066 priv->status &= ~STATUS_HCMD_ACTIVE;
2067 wake_up_interruptible(&priv->wait_command_queue);
2068
43f66a6c 2069 queue_work(priv->workqueue, &priv->adapter_restart);
b095c381 2070 handled |= IPW_INTA_BIT_FATAL_ERROR;
43f66a6c
JK		 2071 }
2072
b095c381 2073 if (inta & IPW_INTA_BIT_PARITY_ERROR) {
43f66a6c 2074 IPW_ERROR("Parity error\n");
b095c381 2075 handled |= IPW_INTA_BIT_PARITY_ERROR;
43f66a6c
JK		 2076 }
2077
2078 if (handled != inta) {
0edd5b44 2079 IPW_ERROR("Unhandled INTA bits 0x%08x\n", inta & ~handled);
43f66a6c
JK		 2080 }
2081
89c318ed
ZY		 2082 spin_unlock_irqrestore(&priv->lock, flags);
2083
43f66a6c
JK		 2084 /* enable all interrupts */
2085 ipw_enable_interrupts(priv);
43f66a6c 2086}
bf79451e 2087
43f66a6c
JK		 2088#define IPW_CMD(x) case IPW_CMD_ ## x : return #x
2089static char *get_cmd_string(u8 cmd)
2090{
2091 switch (cmd) {
2092 IPW_CMD(HOST_COMPLETE);
bf79451e
JG		 2093 IPW_CMD(POWER_DOWN);
2094 IPW_CMD(SYSTEM_CONFIG);
2095 IPW_CMD(MULTICAST_ADDRESS);
2096 IPW_CMD(SSID);
2097 IPW_CMD(ADAPTER_ADDRESS);
2098 IPW_CMD(PORT_TYPE);
2099 IPW_CMD(RTS_THRESHOLD);
2100 IPW_CMD(FRAG_THRESHOLD);
2101 IPW_CMD(POWER_MODE);
2102 IPW_CMD(WEP_KEY);
2103 IPW_CMD(TGI_TX_KEY);
2104 IPW_CMD(SCAN_REQUEST);
2105 IPW_CMD(SCAN_REQUEST_EXT);
2106 IPW_CMD(ASSOCIATE);
2107 IPW_CMD(SUPPORTED_RATES);
2108 IPW_CMD(SCAN_ABORT);
2109 IPW_CMD(TX_FLUSH);
2110 IPW_CMD(QOS_PARAMETERS);
2111 IPW_CMD(DINO_CONFIG);
2112 IPW_CMD(RSN_CAPABILITIES);
2113 IPW_CMD(RX_KEY);
2114 IPW_CMD(CARD_DISABLE);
2115 IPW_CMD(SEED_NUMBER);
2116 IPW_CMD(TX_POWER);
2117 IPW_CMD(COUNTRY_INFO);
2118 IPW_CMD(AIRONET_INFO);
2119 IPW_CMD(AP_TX_POWER);
2120 IPW_CMD(CCKM_INFO);
2121 IPW_CMD(CCX_VER_INFO);
2122 IPW_CMD(SET_CALIBRATION);
2123 IPW_CMD(SENSITIVITY_CALIB);
2124 IPW_CMD(RETRY_LIMIT);
2125 IPW_CMD(IPW_PRE_POWER_DOWN);
2126 IPW_CMD(VAP_BEACON_TEMPLATE);
2127 IPW_CMD(VAP_DTIM_PERIOD);
2128 IPW_CMD(EXT_SUPPORTED_RATES);
2129 IPW_CMD(VAP_LOCAL_TX_PWR_CONSTRAINT);
2130 IPW_CMD(VAP_QUIET_INTERVALS);
2131 IPW_CMD(VAP_CHANNEL_SWITCH);
2132 IPW_CMD(VAP_MANDATORY_CHANNELS);
2133 IPW_CMD(VAP_CELL_PWR_LIMIT);
2134 IPW_CMD(VAP_CF_PARAM_SET);
2135 IPW_CMD(VAP_SET_BEACONING_STATE);
2136 IPW_CMD(MEASUREMENT);
2137 IPW_CMD(POWER_CAPABILITY);
2138 IPW_CMD(SUPPORTED_CHANNELS);
2139 IPW_CMD(TPC_REPORT);
2140 IPW_CMD(WME_INFO);
2141 IPW_CMD(PRODUCTION_COMMAND);
2142 default:
43f66a6c
JK		 2143 return "UNKNOWN";
2144 }
2145}
43f66a6c
JK		 2146
2147#define HOST_COMPLETE_TIMEOUT HZ
0a7bcf26
ZY		 2148
2149static int __ipw_send_cmd(struct ipw_priv *priv, struct host_cmd *cmd)
43f66a6c
JK		 2150{
2151 int rc = 0;
a613bffd 2152 unsigned long flags;
43f66a6c 2153
a613bffd 2154 spin_lock_irqsave(&priv->lock, flags);
43f66a6c 2155 if (priv->status & STATUS_HCMD_ACTIVE) {
9ddf84f6
JK		 2156 IPW_ERROR("Failed to send %s: Already sending a command.\n",
2157 get_cmd_string(cmd->cmd));
a613bffd 2158 spin_unlock_irqrestore(&priv->lock, flags);
9ddf84f6 2159 return -EAGAIN;
43f66a6c
JK		 2160 }
2161
2162 priv->status |= STATUS_HCMD_ACTIVE;
bf79451e 2163
f6c5cb7c
JK		 2164 if (priv->cmdlog) {
2165 priv->cmdlog[priv->cmdlog_pos].jiffies = jiffies;
2166 priv->cmdlog[priv->cmdlog_pos].cmd.cmd = cmd->cmd;
2167 priv->cmdlog[priv->cmdlog_pos].cmd.len = cmd->len;
2168 memcpy(priv->cmdlog[priv->cmdlog_pos].cmd.param, cmd->param,
2169 cmd->len);
2170 priv->cmdlog[priv->cmdlog_pos].retcode = -1;
2171 }
2172
b095c381
JK		 2173 IPW_DEBUG_HC("%s command (#%d) %d bytes: 0x%08X\n",
2174 get_cmd_string(cmd->cmd), cmd->cmd, cmd->len,
2175 priv->status);
f516dbcd
ZY		 2176
2177#ifndef DEBUG_CMD_WEP_KEY
2178 if (cmd->cmd == IPW_CMD_WEP_KEY)
2179 IPW_DEBUG_HC("WEP_KEY command masked out for secure.\n");
2180 else
2181#endif
2182 printk_buf(IPW_DL_HOST_COMMAND, (u8 *) cmd->param, cmd->len);
2183
0a7bcf26 2184 rc = ipw_queue_tx_hcmd(priv, cmd->cmd, cmd->param, cmd->len, 0);
a613bffd
JK		 2185 if (rc) {
2186 priv->status &= ~STATUS_HCMD_ACTIVE;
9ddf84f6
JK		 2187 IPW_ERROR("Failed to send %s: Reason %d\n",
2188 get_cmd_string(cmd->cmd), rc);
a613bffd 2189 spin_unlock_irqrestore(&priv->lock, flags);
f6c5cb7c 2190 goto exit;
a613bffd
JK		 2191 }
2192 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c 2193
0edd5b44
JG		 2194 rc = wait_event_interruptible_timeout(priv->wait_command_queue,
2195 !(priv->
2196 status & STATUS_HCMD_ACTIVE),
2197 HOST_COMPLETE_TIMEOUT);
43f66a6c 2198 if (rc == 0) {
a613bffd
JK		 2199 spin_lock_irqsave(&priv->lock, flags);
2200 if (priv->status & STATUS_HCMD_ACTIVE) {
9ddf84f6
JK		 2201 IPW_ERROR("Failed to send %s: Command timed out.\n",
2202 get_cmd_string(cmd->cmd));
a613bffd
JK		 2203 priv->status &= ~STATUS_HCMD_ACTIVE;
2204 spin_unlock_irqrestore(&priv->lock, flags);
f6c5cb7c
JK		 2205 rc = -EIO;
2206 goto exit;
a613bffd
JK		 2207 }
2208 spin_unlock_irqrestore(&priv->lock, flags);
3b9990cb
JK		 2209 } else
2210 rc = 0;
a613bffd 2211
b095c381 2212 if (priv->status & STATUS_RF_KILL_HW) {
9ddf84f6
JK		 2213 IPW_ERROR("Failed to send %s: Aborted due to RF kill switch.\n",
2214 get_cmd_string(cmd->cmd));
f6c5cb7c
JK		 2215 rc = -EIO;
2216 goto exit;
43f66a6c
JK		 2217 }
2218
2638bc39 2219 exit:
f6c5cb7c
JK		 2220 if (priv->cmdlog) {
2221 priv->cmdlog[priv->cmdlog_pos++].retcode = rc;
2222 priv->cmdlog_pos %= priv->cmdlog_len;
2223 }
2224 return rc;
43f66a6c
JK		 2225}
2226
0a7bcf26
ZY		 2227static int ipw_send_cmd_simple(struct ipw_priv *priv, u8 command)
2228{
2229 struct host_cmd cmd = {
2230 .cmd = command,
2231 };
2232
2233 return __ipw_send_cmd(priv, &cmd);
2234}
2235
2236static int ipw_send_cmd_pdu(struct ipw_priv *priv, u8 command, u8 len,
2237 void *data)
43f66a6c
JK		 2238{
2239 struct host_cmd cmd = {
0a7bcf26
ZY		 2240 .cmd = command,
2241 .len = len,
2242 .param = data,
43f66a6c
JK		 2243 };
2244
0a7bcf26
ZY		 2245 return __ipw_send_cmd(priv, &cmd);
2246}
2247
2248static int ipw_send_host_complete(struct ipw_priv *priv)
2249{
43f66a6c
JK		 2250 if (!priv) {
2251 IPW_ERROR("Invalid args\n");
2252 return -1;
2253 }
2254
0a7bcf26 2255 return ipw_send_cmd_simple(priv, IPW_CMD_HOST_COMPLETE);
43f66a6c
JK		 2256}
2257
d685b8c2 2258static int ipw_send_system_config(struct ipw_priv *priv)
43f66a6c 2259{
d685b8c2
ZY		 2260 return ipw_send_cmd_pdu(priv, IPW_CMD_SYSTEM_CONFIG,
2261 sizeof(priv->sys_config),
2262 &priv->sys_config);
43f66a6c
JK		 2263}
2264
0edd5b44 2265static int ipw_send_ssid(struct ipw_priv *priv, u8 * ssid, int len)
43f66a6c 2266{
43f66a6c
JK		 2267 if (!priv || !ssid) {
2268 IPW_ERROR("Invalid args\n");
2269 return -1;
2270 }
2271
0a7bcf26 2272 return ipw_send_cmd_pdu(priv, IPW_CMD_SSID, min(len, IW_ESSID_MAX_SIZE),
2638bc39 2273 ssid);
43f66a6c
JK		 2274}
2275
0edd5b44 2276static int ipw_send_adapter_address(struct ipw_priv *priv, u8 * mac)
43f66a6c 2277{
43f66a6c
JK		 2278 if (!priv || !mac) {
2279 IPW_ERROR("Invalid args\n");
2280 return -1;
2281 }
2282
e174961c
JB		 2283 IPW_DEBUG_INFO("%s: Setting MAC to %pM\n",
2284 priv->net_dev->name, mac);
43f66a6c 2285
2638bc39 2286 return ipw_send_cmd_pdu(priv, IPW_CMD_ADAPTER_ADDRESS, ETH_ALEN, mac);
43f66a6c
JK		 2287}
2288
a613bffd
JK		 2289/*
2290 * NOTE: This must be executed from our workqueue as it results in udelay
2291 * being called which may corrupt the keyboard if executed on default
2292 * workqueue
2293 */
43f66a6c
JK		 2294static void ipw_adapter_restart(void *adapter)
2295{
2296 struct ipw_priv *priv = adapter;
2297
2298 if (priv->status & STATUS_RF_KILL_MASK)
2299 return;
2300
2301 ipw_down(priv);
b095c381
JK		 2302
2303 if (priv->assoc_network &&
2304 (priv->assoc_network->capability & WLAN_CAPABILITY_IBSS))
2305 ipw_remove_current_network(priv);
2306
43f66a6c
JK		 2307 if (ipw_up(priv)) {
2308 IPW_ERROR("Failed to up device\n");
2309 return;
2310 }
2311}
2312
c4028958 2313static void ipw_bg_adapter_restart(struct work_struct *work)
c848d0af 2314{
c4028958
DH		 2315 struct ipw_priv *priv =
2316 container_of(work, struct ipw_priv, adapter_restart);
4644151b 2317 mutex_lock(&priv->mutex);
c4028958 2318 ipw_adapter_restart(priv);
4644151b 2319 mutex_unlock(&priv->mutex);
c848d0af
JK		 2320}
2321
43f66a6c
JK		 2322#define IPW_SCAN_CHECK_WATCHDOG (5 * HZ)
2323
2324static void ipw_scan_check(void *data)
2325{
2326 struct ipw_priv *priv = data;
2327 if (priv->status & (STATUS_SCANNING | STATUS_SCAN_ABORTING)) {
2328 IPW_DEBUG_SCAN("Scan completion watchdog resetting "
c7b6a674
ZY		 2329 "adapter after (%dms).\n",
2330 jiffies_to_msecs(IPW_SCAN_CHECK_WATCHDOG));
a613bffd 2331 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c
JK		 2332 }
2333}
2334
c4028958 2335static void ipw_bg_scan_check(struct work_struct *work)
c848d0af 2336{
c4028958
DH		 2337 struct ipw_priv *priv =
2338 container_of(work, struct ipw_priv, scan_check.work);
4644151b 2339 mutex_lock(&priv->mutex);
c4028958 2340 ipw_scan_check(priv);
4644151b 2341 mutex_unlock(&priv->mutex);
c848d0af
JK		 2342}
2343
43f66a6c
JK		 2344static int ipw_send_scan_request_ext(struct ipw_priv *priv,
2345 struct ipw_scan_request_ext *request)
2346{
0a7bcf26 2347 return ipw_send_cmd_pdu(priv, IPW_CMD_SCAN_REQUEST_EXT,
2638bc39 2348 sizeof(*request), request);
43f66a6c
JK		 2349}
2350
2351static int ipw_send_scan_abort(struct ipw_priv *priv)
2352{
43f66a6c
JK		 2353 if (!priv) {
2354 IPW_ERROR("Invalid args\n");
2355 return -1;
2356 }
2357
0a7bcf26 2358 return ipw_send_cmd_simple(priv, IPW_CMD_SCAN_ABORT);
43f66a6c
JK		 2359}
2360
2361static int ipw_set_sensitivity(struct ipw_priv *priv, u16 sens)
2362{
0a7bcf26 2363 struct ipw_sensitivity_calib calib = {
851ca268 2364 .beacon_rssi_raw = cpu_to_le16(sens),
43f66a6c 2365 };
0a7bcf26
ZY		 2366
2367 return ipw_send_cmd_pdu(priv, IPW_CMD_SENSITIVITY_CALIB, sizeof(calib),
2638bc39 2368 &calib);
43f66a6c
JK		 2369}
2370
2371static int ipw_send_associate(struct ipw_priv *priv,
2372 struct ipw_associate *associate)
2373{
0a7bcf26
ZY		 2374 if (!priv || !associate) {
2375 IPW_ERROR("Invalid args\n");
2376 return -1;
2377 }
2378
5b5e807f
AV		 2379 return ipw_send_cmd_pdu(priv, IPW_CMD_ASSOCIATE, sizeof(*associate),
2380 associate);
43f66a6c
JK		 2381}
2382
2383static int ipw_send_supported_rates(struct ipw_priv *priv,
2384 struct ipw_supported_rates *rates)
2385{
43f66a6c
JK		 2386 if (!priv || !rates) {
2387 IPW_ERROR("Invalid args\n");
2388 return -1;
2389 }
2390
0a7bcf26 2391 return ipw_send_cmd_pdu(priv, IPW_CMD_SUPPORTED_RATES, sizeof(*rates),
2638bc39 2392 rates);
43f66a6c
JK		 2393}
2394
2395static int ipw_set_random_seed(struct ipw_priv *priv)
2396{
0a7bcf26 2397 u32 val;
43f66a6c
JK		 2398
2399 if (!priv) {
2400 IPW_ERROR("Invalid args\n");
2401 return -1;
2402 }
2403
0a7bcf26 2404 get_random_bytes(&val, sizeof(val));
43f66a6c 2405
0a7bcf26 2406 return ipw_send_cmd_pdu(priv, IPW_CMD_SEED_NUMBER, sizeof(val), &val);
43f66a6c
JK		 2407}
2408
43f66a6c
JK		 2409static int ipw_send_card_disable(struct ipw_priv *priv, u32 phy_off)
2410{
e62e1ee0 2411 __le32 v = cpu_to_le32(phy_off);
43f66a6c
JK		 2412 if (!priv) {
2413 IPW_ERROR("Invalid args\n");
2414 return -1;
2415 }
2416
e62e1ee0 2417 return ipw_send_cmd_pdu(priv, IPW_CMD_CARD_DISABLE, sizeof(v), &v);
43f66a6c 2418}
43f66a6c 2419
0edd5b44 2420static int ipw_send_tx_power(struct ipw_priv *priv, struct ipw_tx_power *power)
43f66a6c 2421{
43f66a6c
JK		 2422 if (!priv || !power) {
2423 IPW_ERROR("Invalid args\n");
2424 return -1;
2425 }
2426
2638bc39 2427 return ipw_send_cmd_pdu(priv, IPW_CMD_TX_POWER, sizeof(*power), power);
43f66a6c
JK		 2428}
2429
6de9f7f2
ZY		 2430static int ipw_set_tx_power(struct ipw_priv *priv)
2431{
1867b117 2432 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
6de9f7f2
ZY		 2433 struct ipw_tx_power tx_power;
2434 s8 max_power;
2435 int i;
2436
2437 memset(&tx_power, 0, sizeof(tx_power));
2438
2439 /* configure device for 'G' band */
2440 tx_power.ieee_mode = IPW_G_MODE;
2441 tx_power.num_channels = geo->bg_channels;
2442 for (i = 0; i < geo->bg_channels; i++) {
2443 max_power = geo->bg[i].max_power;
2444 tx_power.channels_tx_power[i].channel_number =
2445 geo->bg[i].channel;
2446 tx_power.channels_tx_power[i].tx_power = max_power ?
2447 min(max_power, priv->tx_power) : priv->tx_power;
43f66a6c 2448 }
6de9f7f2
ZY		 2449 if (ipw_send_tx_power(priv, &tx_power))
2450 return -EIO;
2451
2452 /* configure device to also handle 'B' band */
2453 tx_power.ieee_mode = IPW_B_MODE;
2454 if (ipw_send_tx_power(priv, &tx_power))
2455 return -EIO;
bf79451e 2456
6de9f7f2
ZY		 2457 /* configure device to also handle 'A' band */
2458 if (priv->ieee->abg_true) {
2459 tx_power.ieee_mode = IPW_A_MODE;
2460 tx_power.num_channels = geo->a_channels;
2461 for (i = 0; i < tx_power.num_channels; i++) {
2462 max_power = geo->a[i].max_power;
2463 tx_power.channels_tx_power[i].channel_number =
2464 geo->a[i].channel;
2465 tx_power.channels_tx_power[i].tx_power = max_power ?
2466 min(max_power, priv->tx_power) : priv->tx_power;
2467 }
2468 if (ipw_send_tx_power(priv, &tx_power))
2469 return -EIO;
2470 }
43f66a6c
JK		 2471 return 0;
2472}
2473
2474static int ipw_send_rts_threshold(struct ipw_priv *priv, u16 rts)
2475{
2476 struct ipw_rts_threshold rts_threshold = {
851ca268 2477 .rts_threshold = cpu_to_le16(rts),
43f66a6c 2478 };
43f66a6c
JK		 2479
2480 if (!priv) {
2481 IPW_ERROR("Invalid args\n");
2482 return -1;
2483 }
2484
0a7bcf26
ZY		 2485 return ipw_send_cmd_pdu(priv, IPW_CMD_RTS_THRESHOLD,
2486 sizeof(rts_threshold), &rts_threshold);
43f66a6c
JK		 2487}
2488
2489static int ipw_send_frag_threshold(struct ipw_priv *priv, u16 frag)
2490{
2491 struct ipw_frag_threshold frag_threshold = {
851ca268 2492 .frag_threshold = cpu_to_le16(frag),
43f66a6c 2493 };
43f66a6c
JK		 2494
2495 if (!priv) {
2496 IPW_ERROR("Invalid args\n");
2497 return -1;
2498 }
2499
0a7bcf26
ZY		 2500 return ipw_send_cmd_pdu(priv, IPW_CMD_FRAG_THRESHOLD,
2501 sizeof(frag_threshold), &frag_threshold);
43f66a6c
JK		 2502}
2503
2504static int ipw_send_power_mode(struct ipw_priv *priv, u32 mode)
2505{
e62e1ee0 2506 __le32 param;
43f66a6c
JK		 2507
2508 if (!priv) {
2509 IPW_ERROR("Invalid args\n");
2510 return -1;
2511 }
bf79451e 2512
43f66a6c
JK		 2513 /* If on battery, set to 3, if AC set to CAM, else user
2514 * level */
2515 switch (mode) {
2516 case IPW_POWER_BATTERY:
e62e1ee0 2517 param = cpu_to_le32(IPW_POWER_INDEX_3);
43f66a6c
JK		 2518 break;
2519 case IPW_POWER_AC:
e62e1ee0 2520 param = cpu_to_le32(IPW_POWER_MODE_CAM);
43f66a6c
JK		 2521 break;
2522 default:
e62e1ee0 2523 param = cpu_to_le32(mode);
43f66a6c
JK		 2524 break;
2525 }
2526
0a7bcf26 2527 return ipw_send_cmd_pdu(priv, IPW_CMD_POWER_MODE, sizeof(param),
2638bc39 2528 &param);
43f66a6c
JK		 2529}
2530
afbf30a2
JK		 2531static int ipw_send_retry_limit(struct ipw_priv *priv, u8 slimit, u8 llimit)
2532{
2533 struct ipw_retry_limit retry_limit = {
2534 .short_retry_limit = slimit,
2535 .long_retry_limit = llimit
2536 };
afbf30a2
JK		 2537
2538 if (!priv) {
2539 IPW_ERROR("Invalid args\n");
2540 return -1;
2541 }
2542
0a7bcf26 2543 return ipw_send_cmd_pdu(priv, IPW_CMD_RETRY_LIMIT, sizeof(retry_limit),
2638bc39 2544 &retry_limit);
afbf30a2
JK		 2545}
2546
43f66a6c
JK		 2547/*
2548 * The IPW device contains a Microwire compatible EEPROM that stores
2549 * various data like the MAC address. Usually the firmware has exclusive
2550 * access to the eeprom, but during device initialization (before the
2551 * device driver has sent the HostComplete command to the firmware) the
2552 * device driver has read access to the EEPROM by way of indirect addressing
2553 * through a couple of memory mapped registers.
2554 *
2555 * The following is a simplified implementation for pulling data out of the
2556 * the eeprom, along with some helper functions to find information in
2557 * the per device private data's copy of the eeprom.
2558 *
2559 * NOTE: To better understand how these functions work (i.e what is a chip
2560 * select and why do have to keep driving the eeprom clock?), read
2561 * just about any data sheet for a Microwire compatible EEPROM.
2562 */
2563
2564/* write a 32 bit value into the indirect accessor register */
2565static inline void eeprom_write_reg(struct ipw_priv *p, u32 data)
2566{
2567 ipw_write_reg32(p, FW_MEM_REG_EEPROM_ACCESS, data);
bf79451e 2568
43f66a6c
JK		 2569 /* the eeprom requires some time to complete the operation */
2570 udelay(p->eeprom_delay);
2571
2572 return;
2573}
2574
2575/* perform a chip select operation */
858119e1 2576static void eeprom_cs(struct ipw_priv *priv)
43f66a6c 2577{
0edd5b44
JG		 2578 eeprom_write_reg(priv, 0);
2579 eeprom_write_reg(priv, EEPROM_BIT_CS);
2580 eeprom_write_reg(priv, EEPROM_BIT_CS | EEPROM_BIT_SK);
2581 eeprom_write_reg(priv, EEPROM_BIT_CS);
43f66a6c
JK		 2582}
2583
2584/* perform a chip select operation */
858119e1 2585static void eeprom_disable_cs(struct ipw_priv *priv)
43f66a6c 2586{
0edd5b44
JG		 2587 eeprom_write_reg(priv, EEPROM_BIT_CS);
2588 eeprom_write_reg(priv, 0);
2589 eeprom_write_reg(priv, EEPROM_BIT_SK);
43f66a6c
JK		 2590}
2591
2592/* push a single bit down to the eeprom */
0edd5b44 2593static inline void eeprom_write_bit(struct ipw_priv *p, u8 bit)
43f66a6c 2594{
0edd5b44
JG		 2595 int d = (bit ? EEPROM_BIT_DI : 0);
2596 eeprom_write_reg(p, EEPROM_BIT_CS | d);
2597 eeprom_write_reg(p, EEPROM_BIT_CS | d | EEPROM_BIT_SK);
43f66a6c
JK		 2598}
2599
2600/* push an opcode followed by an address down to the eeprom */
0edd5b44 2601static void eeprom_op(struct ipw_priv *priv, u8 op, u8 addr)
43f66a6c
JK		 2602{
2603 int i;
2604
2605 eeprom_cs(priv);
0edd5b44
JG		 2606 eeprom_write_bit(priv, 1);
2607 eeprom_write_bit(priv, op & 2);
2608 eeprom_write_bit(priv, op & 1);
2609 for (i = 7; i >= 0; i--) {
2610 eeprom_write_bit(priv, addr & (1 << i));
43f66a6c
JK		 2611 }
2612}
2613
2614/* pull 16 bits off the eeprom, one bit at a time */
0edd5b44 2615static u16 eeprom_read_u16(struct ipw_priv *priv, u8 addr)
43f66a6c
JK		 2616{
2617 int i;
0edd5b44 2618 u16 r = 0;
bf79451e 2619
43f66a6c 2620 /* Send READ Opcode */
0edd5b44 2621 eeprom_op(priv, EEPROM_CMD_READ, addr);
43f66a6c
JK		 2622
2623 /* Send dummy bit */
0edd5b44 2624 eeprom_write_reg(priv, EEPROM_BIT_CS);
43f66a6c
JK		 2625
2626 /* Read the byte off the eeprom one bit at a time */
0edd5b44 2627 for (i = 0; i < 16; i++) {
43f66a6c 2628 u32 data = 0;
0edd5b44
JG		 2629 eeprom_write_reg(priv, EEPROM_BIT_CS | EEPROM_BIT_SK);
2630 eeprom_write_reg(priv, EEPROM_BIT_CS);
2631 data = ipw_read_reg32(priv, FW_MEM_REG_EEPROM_ACCESS);
2632 r = (r << 1) | ((data & EEPROM_BIT_DO) ? 1 : 0);
43f66a6c 2633 }
bf79451e 2634
43f66a6c 2635 /* Send another dummy bit */
0edd5b44 2636 eeprom_write_reg(priv, 0);
43f66a6c 2637 eeprom_disable_cs(priv);
bf79451e 2638
43f66a6c
JK		 2639 return r;
2640}
2641
2642/* helper function for pulling the mac address out of the private */
2643/* data's copy of the eeprom data */
0edd5b44 2644static void eeprom_parse_mac(struct ipw_priv *priv, u8 * mac)
43f66a6c 2645{
afbf30a2 2646 memcpy(mac, &priv->eeprom[EEPROM_MAC_ADDRESS], 6);
43f66a6c
JK		 2647}
2648
2649/*
2650 * Either the device driver (i.e. the host) or the firmware can
2651 * load eeprom data into the designated region in SRAM. If neither
2652 * happens then the FW will shutdown with a fatal error.
2653 *
2654 * In order to signal the FW to load the EEPROM, the EEPROM_LOAD_DISABLE
2655 * bit needs region of shared SRAM needs to be non-zero.
2656 */
2657static void ipw_eeprom_init_sram(struct ipw_priv *priv)
2658{
2659 int i;
e62e1ee0 2660 __le16 *eeprom = (__le16 *) priv->eeprom;
bf79451e 2661
43f66a6c
JK		 2662 IPW_DEBUG_TRACE(">>\n");
2663
2664 /* read entire contents of eeprom into private buffer */
0edd5b44 2665 for (i = 0; i < 128; i++)
e62e1ee0 2666 eeprom[i] = cpu_to_le16(eeprom_read_u16(priv, (u8) i));
43f66a6c 2667
bf79451e
JG		 2668 /*
2669 If the data looks correct, then copy it to our private
43f66a6c 2670 copy. Otherwise let the firmware know to perform the operation
c7b6a674 2671 on its own.
0edd5b44 2672 */
386093ef 2673 if (priv->eeprom[EEPROM_VERSION] != 0) {
43f66a6c
JK		 2674 IPW_DEBUG_INFO("Writing EEPROM data into SRAM\n");
2675
2676 /* write the eeprom data to sram */
b095c381 2677 for (i = 0; i < IPW_EEPROM_IMAGE_SIZE; i++)
0edd5b44 2678 ipw_write8(priv, IPW_EEPROM_DATA + i, priv->eeprom[i]);
43f66a6c
JK		 2679
2680 /* Do not load eeprom data on fatal error or suspend */
2681 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 0);
2682 } else {
2683 IPW_DEBUG_INFO("Enabling FW initializationg of SRAM\n");
2684
2685 /* Load eeprom data on fatal error or suspend */
2686 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 1);
2687 }
2688
2689 IPW_DEBUG_TRACE("<<\n");
2690}
2691
858119e1 2692static void ipw_zero_memory(struct ipw_priv *priv, u32 start, u32 count)
43f66a6c
JK		 2693{
2694 count >>= 2;
0edd5b44
JG		 2695 if (!count)
2696 return;
b095c381 2697 _ipw_write32(priv, IPW_AUTOINC_ADDR, start);
bf79451e 2698 while (count--)
b095c381 2699 _ipw_write32(priv, IPW_AUTOINC_DATA, 0);
43f66a6c
JK		 2700}
2701
2702static inline void ipw_fw_dma_reset_command_blocks(struct ipw_priv *priv)
2703{
b095c381 2704 ipw_zero_memory(priv, IPW_SHARED_SRAM_DMA_CONTROL,
bf79451e 2705 CB_NUMBER_OF_ELEMENTS_SMALL *
43f66a6c
JK		 2706 sizeof(struct command_block));
2707}
2708
2709static int ipw_fw_dma_enable(struct ipw_priv *priv)
0edd5b44 2710{ /* start dma engine but no transfers yet */
43f66a6c
JK		 2711
2712 IPW_DEBUG_FW(">> : \n");
bf79451e 2713
43f66a6c
JK		 2714 /* Start the dma */
2715 ipw_fw_dma_reset_command_blocks(priv);
bf79451e 2716
43f66a6c 2717 /* Write CB base address */
b095c381 2718 ipw_write_reg32(priv, IPW_DMA_I_CB_BASE, IPW_SHARED_SRAM_DMA_CONTROL);
43f66a6c
JK		 2719
2720 IPW_DEBUG_FW("<< : \n");
2721 return 0;
2722}
2723
2724static void ipw_fw_dma_abort(struct ipw_priv *priv)
2725{
2726 u32 control = 0;
2727
2728 IPW_DEBUG_FW(">> :\n");
bf79451e 2729
67fd6b45 2730 /* set the Stop and Abort bit */
43f66a6c 2731 control = DMA_CONTROL_SMALL_CB_CONST_VALUE | DMA_CB_STOP_AND_ABORT;
b095c381 2732 ipw_write_reg32(priv, IPW_DMA_I_DMA_CONTROL, control);
43f66a6c 2733 priv->sram_desc.last_cb_index = 0;
bf79451e 2734
43f66a6c
JK		 2735 IPW_DEBUG_FW("<< \n");
2736}
2737
0edd5b44
JG		 2738static int ipw_fw_dma_write_command_block(struct ipw_priv *priv, int index,
2739 struct command_block *cb)
43f66a6c 2740{
0edd5b44 2741 u32 address =
b095c381 2742 IPW_SHARED_SRAM_DMA_CONTROL +
0edd5b44 2743 (sizeof(struct command_block) * index);
43f66a6c
JK		 2744 IPW_DEBUG_FW(">> :\n");
2745
0edd5b44
JG		 2746 ipw_write_indirect(priv, address, (u8 *) cb,
2747 (int)sizeof(struct command_block));
43f66a6c
JK		 2748
2749 IPW_DEBUG_FW("<< :\n");
2750 return 0;
2751
2752}
2753
2754static int ipw_fw_dma_kick(struct ipw_priv *priv)
2755{
2756 u32 control = 0;
0edd5b44 2757 u32 index = 0;
43f66a6c
JK		 2758
2759 IPW_DEBUG_FW(">> :\n");
bf79451e 2760
43f66a6c 2761 for (index = 0; index < priv->sram_desc.last_cb_index; index++)
0edd5b44
JG		 2762 ipw_fw_dma_write_command_block(priv, index,
2763 &priv->sram_desc.cb_list[index]);
43f66a6c
JK		 2764
2765 /* Enable the DMA in the CSR register */
b095c381
JK		 2766 ipw_clear_bit(priv, IPW_RESET_REG,
2767 IPW_RESET_REG_MASTER_DISABLED |
2768 IPW_RESET_REG_STOP_MASTER);
bf79451e 2769
0edd5b44 2770 /* Set the Start bit. */
43f66a6c 2771 control = DMA_CONTROL_SMALL_CB_CONST_VALUE | DMA_CB_START;
b095c381 2772 ipw_write_reg32(priv, IPW_DMA_I_DMA_CONTROL, control);
43f66a6c
JK		 2773
2774 IPW_DEBUG_FW("<< :\n");
2775 return 0;
2776}
2777
2778static void ipw_fw_dma_dump_command_block(struct ipw_priv *priv)
2779{
2780 u32 address;
0edd5b44
JG		 2781 u32 register_value = 0;
2782 u32 cb_fields_address = 0;
43f66a6c
JK		 2783
2784 IPW_DEBUG_FW(">> :\n");
b095c381 2785 address = ipw_read_reg32(priv, IPW_DMA_I_CURRENT_CB);
0edd5b44 2786 IPW_DEBUG_FW_INFO("Current CB is 0x%x \n", address);
43f66a6c
JK		 2787
2788 /* Read the DMA Controlor register */
b095c381
JK		 2789 register_value = ipw_read_reg32(priv, IPW_DMA_I_DMA_CONTROL);
2790 IPW_DEBUG_FW_INFO("IPW_DMA_I_DMA_CONTROL is 0x%x \n", register_value);
43f66a6c 2791
0edd5b44 2792 /* Print the CB values */
43f66a6c
JK		 2793 cb_fields_address = address;
2794 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2795 IPW_DEBUG_FW_INFO("Current CB ControlField is 0x%x \n", register_value);
43f66a6c
JK		 2796
2797 cb_fields_address += sizeof(u32);
2798 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2799 IPW_DEBUG_FW_INFO("Current CB Source Field is 0x%x \n", register_value);
43f66a6c
JK		 2800
2801 cb_fields_address += sizeof(u32);
2802 register_value = ipw_read_reg32(priv, cb_fields_address);
2803 IPW_DEBUG_FW_INFO("Current CB Destination Field is 0x%x \n",
2804 register_value);
2805
2806 cb_fields_address += sizeof(u32);
2807 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2808 IPW_DEBUG_FW_INFO("Current CB Status Field is 0x%x \n", register_value);
43f66a6c
JK		 2809
2810 IPW_DEBUG_FW(">> :\n");
2811}
2812
2813static int ipw_fw_dma_command_block_index(struct ipw_priv *priv)
2814{
2815 u32 current_cb_address = 0;
2816 u32 current_cb_index = 0;
2817
2818 IPW_DEBUG_FW("<< :\n");
b095c381 2819 current_cb_address = ipw_read_reg32(priv, IPW_DMA_I_CURRENT_CB);
bf79451e 2820
b095c381 2821 current_cb_index = (current_cb_address - IPW_SHARED_SRAM_DMA_CONTROL) /
0edd5b44 2822 sizeof(struct command_block);
bf79451e 2823
43f66a6c 2824 IPW_DEBUG_FW_INFO("Current CB index 0x%x address = 0x%X \n",
0edd5b44 2825 current_cb_index, current_cb_address);
43f66a6c
JK		 2826
2827 IPW_DEBUG_FW(">> :\n");
2828 return current_cb_index;
2829
2830}
2831
2832static int ipw_fw_dma_add_command_block(struct ipw_priv *priv,
2833 u32 src_address,
2834 u32 dest_address,
2835 u32 length,
0edd5b44 2836 int interrupt_enabled, int is_last)
43f66a6c
JK		 2837{
2838
bf79451e 2839 u32 control = CB_VALID | CB_SRC_LE | CB_DEST_LE | CB_SRC_AUTOINC |
0edd5b44
JG		 2840 CB_SRC_IO_GATED | CB_DEST_AUTOINC | CB_SRC_SIZE_LONG |
2841 CB_DEST_SIZE_LONG;
43f66a6c 2842 struct command_block *cb;
0edd5b44 2843 u32 last_cb_element = 0;
43f66a6c
JK		 2844
2845 IPW_DEBUG_FW_INFO("src_address=0x%x dest_address=0x%x length=0x%x\n",
2846 src_address, dest_address, length);
2847
2848 if (priv->sram_desc.last_cb_index >= CB_NUMBER_OF_ELEMENTS_SMALL)
2849 return -1;
2850
2851 last_cb_element = priv->sram_desc.last_cb_index;
2852 cb = &priv->sram_desc.cb_list[last_cb_element];
2853 priv->sram_desc.last_cb_index++;
2854
2855 /* Calculate the new CB control word */
0edd5b44 2856 if (interrupt_enabled)
43f66a6c
JK		 2857 control |= CB_INT_ENABLED;
2858
2859 if (is_last)
2860 control |= CB_LAST_VALID;
bf79451e 2861
43f66a6c
JK		 2862 control |= length;
2863
2864 /* Calculate the CB Element's checksum value */
0edd5b44 2865 cb->status = control ^ src_address ^ dest_address;
43f66a6c
JK		 2866
2867 /* Copy the Source and Destination addresses */
2868 cb->dest_addr = dest_address;
2869 cb->source_addr = src_address;
2870
2871 /* Copy the Control Word last */
2872 cb->control = control;
2873
2874 return 0;
2875}
2876
2877static int ipw_fw_dma_add_buffer(struct ipw_priv *priv,
0edd5b44 2878 u32 src_phys, u32 dest_address, u32 length)
43f66a6c
JK		 2879{
2880 u32 bytes_left = length;
0edd5b44
JG		 2881 u32 src_offset = 0;
2882 u32 dest_offset = 0;
43f66a6c
JK		 2883 int status = 0;
2884 IPW_DEBUG_FW(">> \n");
2885 IPW_DEBUG_FW_INFO("src_phys=0x%x dest_address=0x%x length=0x%x\n",
2886 src_phys, dest_address, length);
2887 while (bytes_left > CB_MAX_LENGTH) {
0edd5b44
JG		 2888 status = ipw_fw_dma_add_command_block(priv,
2889 src_phys + src_offset,
2890 dest_address +
2891 dest_offset,
2892 CB_MAX_LENGTH, 0, 0);
43f66a6c
JK		 2893 if (status) {
2894 IPW_DEBUG_FW_INFO(": Failed\n");
2895 return -1;
bf79451e 2896 } else
43f66a6c
JK		 2897 IPW_DEBUG_FW_INFO(": Added new cb\n");
2898
2899 src_offset += CB_MAX_LENGTH;
2900 dest_offset += CB_MAX_LENGTH;
2901 bytes_left -= CB_MAX_LENGTH;
2902 }
2903
2904 /* add the buffer tail */
2905 if (bytes_left > 0) {
0edd5b44
JG		 2906 status =
2907 ipw_fw_dma_add_command_block(priv, src_phys + src_offset,
2908 dest_address + dest_offset,
2909 bytes_left, 0, 0);
43f66a6c
JK		 2910 if (status) {
2911 IPW_DEBUG_FW_INFO(": Failed on the buffer tail\n");
2912 return -1;
bf79451e 2913 } else
0edd5b44
JG		 2914 IPW_DEBUG_FW_INFO
2915 (": Adding new cb - the buffer tail\n");
43f66a6c 2916 }
bf79451e 2917
43f66a6c
JK		 2918 IPW_DEBUG_FW("<< \n");
2919 return 0;
2920}
2921
2922static int ipw_fw_dma_wait(struct ipw_priv *priv)
2923{
397ae121 2924 u32 current_index = 0, previous_index;
43f66a6c
JK		 2925 u32 watchdog = 0;
2926
2927 IPW_DEBUG_FW(">> : \n");
2928
2929 current_index = ipw_fw_dma_command_block_index(priv);
397ae121 2930 IPW_DEBUG_FW_INFO("sram_desc.last_cb_index:0x%08X\n",
0edd5b44 2931 (int)priv->sram_desc.last_cb_index);
43f66a6c
JK		 2932
2933 while (current_index < priv->sram_desc.last_cb_index) {
2934 udelay(50);
397ae121 2935 previous_index = current_index;
43f66a6c
JK		 2936 current_index = ipw_fw_dma_command_block_index(priv);
2937
397ae121
ZY		 2938 if (previous_index < current_index) {
2939 watchdog = 0;
2940 continue;
2941 }
2942 if (++watchdog > 400) {
43f66a6c
JK		 2943 IPW_DEBUG_FW_INFO("Timeout\n");
2944 ipw_fw_dma_dump_command_block(priv);
2945 ipw_fw_dma_abort(priv);
2946 return -1;
2947 }
2948 }
2949
2950 ipw_fw_dma_abort(priv);
2951
0edd5b44 2952 /*Disable the DMA in the CSR register */
b095c381
JK		 2953 ipw_set_bit(priv, IPW_RESET_REG,
2954 IPW_RESET_REG_MASTER_DISABLED | IPW_RESET_REG_STOP_MASTER);
43f66a6c
JK		 2955
2956 IPW_DEBUG_FW("<< dmaWaitSync \n");
2957 return 0;
2958}
2959
bf79451e 2960static void ipw_remove_current_network(struct ipw_priv *priv)
43f66a6c
JK		 2961{
2962 struct list_head *element, *safe;
bf79451e 2963 struct ieee80211_network *network = NULL;
a613bffd
JK		 2964 unsigned long flags;
2965
2966 spin_lock_irqsave(&priv->ieee->lock, flags);
43f66a6c
JK		 2967 list_for_each_safe(element, safe, &priv->ieee->network_list) {
2968 network = list_entry(element, struct ieee80211_network, list);
2969 if (!memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
2970 list_del(element);
bf79451e 2971 list_add_tail(&network->list,
43f66a6c
JK		 2972 &priv->ieee->network_free_list);
2973 }
2974 }
a613bffd 2975 spin_unlock_irqrestore(&priv->ieee->lock, flags);
43f66a6c
JK		 2976}
2977
2978/**
bf79451e 2979 * Check that card is still alive.
43f66a6c
JK		 2980 * Reads debug register from domain0.
2981 * If card is present, pre-defined value should
2982 * be found there.
bf79451e 2983 *
43f66a6c
JK		 2984 * @param priv
2985 * @return 1 if card is present, 0 otherwise
2986 */
2987static inline int ipw_alive(struct ipw_priv *priv)
2988{
2989 return ipw_read32(priv, 0x90) == 0xd55555d5;
2990}
2991
c7b6a674 2992/* timeout in msec, attempted in 10-msec quanta */
858119e1 2993static int ipw_poll_bit(struct ipw_priv *priv, u32 addr, u32 mask,
43f66a6c
JK		 2994 int timeout)
2995{
2996 int i = 0;
2997
2998 do {
bf79451e 2999 if ((ipw_read32(priv, addr) & mask) == mask)
43f66a6c
JK		 3000 return i;
3001 mdelay(10);
3002 i += 10;
3003 } while (i < timeout);
bf79451e 3004
43f66a6c
JK		 3005 return -ETIME;
3006}
3007
bf79451e 3008/* These functions load the firmware and micro code for the operation of
43f66a6c
JK		 3009 * the ipw hardware. It assumes the buffer has all the bits for the
3010 * image and the caller is handling the memory allocation and clean up.
3011 */
3012
0edd5b44 3013static int ipw_stop_master(struct ipw_priv *priv)
43f66a6c
JK		 3014{
3015 int rc;
bf79451e 3016
43f66a6c
JK		 3017 IPW_DEBUG_TRACE(">> \n");
3018 /* stop master. typical delay - 0 */
b095c381 3019 ipw_set_bit(priv, IPW_RESET_REG, IPW_RESET_REG_STOP_MASTER);
43f66a6c 3020
c7b6a674 3021 /* timeout is in msec, polled in 10-msec quanta */
b095c381
JK		 3022 rc = ipw_poll_bit(priv, IPW_RESET_REG,
3023 IPW_RESET_REG_MASTER_DISABLED, 100);
43f66a6c 3024 if (rc < 0) {
c7b6a674 3025 IPW_ERROR("wait for stop master failed after 100ms\n");
43f66a6c
JK		 3026 return -1;
3027 }
3028
3029 IPW_DEBUG_INFO("stop master %dms\n", rc);
3030
3031 return rc;
3032}
3033
3034static void ipw_arc_release(struct ipw_priv *priv)
3035{
3036 IPW_DEBUG_TRACE(">> \n");
3037 mdelay(5);
3038
b095c381 3039 ipw_clear_bit(priv, IPW_RESET_REG, CBD_RESET_REG_PRINCETON_RESET);
43f66a6c
JK		 3040
3041 /* no one knows timing, for safety add some delay */
3042 mdelay(5);
3043}
3044
43f66a6c 3045struct fw_chunk {
e62e1ee0
AV		 3046 __le32 address;
3047 __le32 length;
43f66a6c
JK		 3048};
3049
0edd5b44 3050static int ipw_load_ucode(struct ipw_priv *priv, u8 * data, size_t len)
43f66a6c
JK		 3051{
3052 int rc = 0, i, addr;
3053 u8 cr = 0;
e62e1ee0 3054 __le16 *image;
43f66a6c 3055
e62e1ee0 3056 image = (__le16 *) data;
bf79451e 3057
43f66a6c
JK		 3058 IPW_DEBUG_TRACE(">> \n");
3059
3060 rc = ipw_stop_master(priv);
3061
3062 if (rc < 0)
3063 return rc;
bf79451e 3064
b095c381
JK		 3065 for (addr = IPW_SHARED_LOWER_BOUND;
3066 addr < IPW_REGISTER_DOMAIN1_END; addr += 4) {
43f66a6c
JK		 3067 ipw_write32(priv, addr, 0);
3068 }
3069
3070 /* no ucode (yet) */
3071 memset(&priv->dino_alive, 0, sizeof(priv->dino_alive));
3072 /* destroy DMA queues */
3073 /* reset sequence */
3074
b095c381 3075 ipw_write_reg32(priv, IPW_MEM_HALT_AND_RESET, IPW_BIT_HALT_RESET_ON);
43f66a6c 3076 ipw_arc_release(priv);
b095c381 3077 ipw_write_reg32(priv, IPW_MEM_HALT_AND_RESET, IPW_BIT_HALT_RESET_OFF);
43f66a6c
JK		 3078 mdelay(1);
3079
3080 /* reset PHY */
b095c381 3081 ipw_write_reg32(priv, IPW_INTERNAL_CMD_EVENT, IPW_BASEBAND_POWER_DOWN);
43f66a6c 3082 mdelay(1);
bf79451e 3083
b095c381 3084 ipw_write_reg32(priv, IPW_INTERNAL_CMD_EVENT, 0);
43f66a6c 3085 mdelay(1);
bf79451e 3086
43f66a6c 3087 /* enable ucode store */
c8fe6679
ZY		 3088 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0x0);
3089 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, DINO_ENABLE_CS);
43f66a6c
JK		 3090 mdelay(1);
3091
3092 /* write ucode */
3093 /**
3094 * @bug
3095 * Do NOT set indirect address register once and then
3096 * store data to indirect data register in the loop.
3097 * It seems very reasonable, but in this case DINO do not
3098 * accept ucode. It is essential to set address each time.
3099 */
3100 /* load new ipw uCode */
3101 for (i = 0; i < len / 2; i++)
b095c381 3102 ipw_write_reg16(priv, IPW_BASEBAND_CONTROL_STORE,
e62e1ee0 3103 le16_to_cpu(image[i]));
43f66a6c 3104
43f66a6c 3105 /* enable DINO */
b095c381
JK		 3106 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0);
3107 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, DINO_ENABLE_SYSTEM);
43f66a6c 3108
0edd5b44 3109 /* this is where the igx / win driver deveates from the VAP driver. */
43f66a6c
JK		 3110
3111 /* wait for alive response */
3112 for (i = 0; i < 100; i++) {
3113 /* poll for incoming data */
b095c381 3114 cr = ipw_read_reg8(priv, IPW_BASEBAND_CONTROL_STATUS);
43f66a6c
JK		 3115 if (cr & DINO_RXFIFO_DATA)
3116 break;
3117 mdelay(1);
3118 }
3119
3120 if (cr & DINO_RXFIFO_DATA) {
3121 /* alive_command_responce size is NOT multiple of 4 */
e62e1ee0 3122 __le32 response_buffer[(sizeof(priv->dino_alive) + 3) / 4];
bf79451e
JG		 3123
3124 for (i = 0; i < ARRAY_SIZE(response_buffer); i++)
43f66a6c 3125 response_buffer[i] =
e62e1ee0 3126 cpu_to_le32(ipw_read_reg32(priv,
b095c381 3127 IPW_BASEBAND_RX_FIFO_READ));
43f66a6c
JK		 3128 memcpy(&priv->dino_alive, response_buffer,
3129 sizeof(priv->dino_alive));
3130 if (priv->dino_alive.alive_command == 1
3131 && priv->dino_alive.ucode_valid == 1) {
3132 rc = 0;
0edd5b44
JG		 3133 IPW_DEBUG_INFO
3134 ("Microcode OK, rev. %d (0x%x) dev. %d (0x%x) "
3135 "of %02d/%02d/%02d %02d:%02d\n",
3136 priv->dino_alive.software_revision,
3137 priv->dino_alive.software_revision,
3138 priv->dino_alive.device_identifier,
3139 priv->dino_alive.device_identifier,
3140 priv->dino_alive.time_stamp[0],
3141 priv->dino_alive.time_stamp[1],
3142 priv->dino_alive.time_stamp[2],
3143 priv->dino_alive.time_stamp[3],
3144 priv->dino_alive.time_stamp[4]);
43f66a6c
JK		 3145 } else {
3146 IPW_DEBUG_INFO("Microcode is not alive\n");
3147 rc = -EINVAL;
3148 }
3149 } else {
3150 IPW_DEBUG_INFO("No alive response from DINO\n");
3151 rc = -ETIME;
3152 }
3153
3154 /* disable DINO, otherwise for some reason
3155 firmware have problem getting alive resp. */
b095c381 3156 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0);
43f66a6c 3157
43f66a6c
JK		 3158 return rc;
3159}
3160
0edd5b44 3161static int ipw_load_firmware(struct ipw_priv *priv, u8 * data, size_t len)
43f66a6c
JK		 3162{
3163 int rc = -1;
3164 int offset = 0;
3165 struct fw_chunk *chunk;
3166 dma_addr_t shared_phys;
3167 u8 *shared_virt;
3168
3169 IPW_DEBUG_TRACE("<< : \n");
3170 shared_virt = pci_alloc_consistent(priv->pci_dev, len, &shared_phys);
3171
3172 if (!shared_virt)
3173 return -ENOMEM;
3174
3175 memmove(shared_virt, data, len);
3176
3177 /* Start the Dma */
3178 rc = ipw_fw_dma_enable(priv);
3179
0ee904c3
AB		 3180 /* the DMA is already ready this would be a bug. */
3181 BUG_ON(priv->sram_desc.last_cb_index > 0);
43f66a6c
JK		 3182
3183 do {
3184 chunk = (struct fw_chunk *)(data + offset);
3185 offset += sizeof(struct fw_chunk);
3186 /* build DMA packet and queue up for sending */
bf79451e 3187 /* dma to chunk->address, the chunk->length bytes from data +
43f66a6c
JK		 3188 * offeset*/
3189 /* Dma loading */
3190 rc = ipw_fw_dma_add_buffer(priv, shared_phys + offset,
a613bffd
JK		 3191 le32_to_cpu(chunk->address),
3192 le32_to_cpu(chunk->length));
43f66a6c
JK		 3193 if (rc) {
3194 IPW_DEBUG_INFO("dmaAddBuffer Failed\n");
3195 goto out;
3196 }
bf79451e 3197
a613bffd 3198 offset += le32_to_cpu(chunk->length);
43f66a6c
JK		 3199 } while (offset < len);
3200
0edd5b44 3201 /* Run the DMA and wait for the answer */
43f66a6c
JK		 3202 rc = ipw_fw_dma_kick(priv);
3203 if (rc) {
3204 IPW_ERROR("dmaKick Failed\n");
3205 goto out;
3206 }
3207
3208 rc = ipw_fw_dma_wait(priv);
3209 if (rc) {
3210 IPW_ERROR("dmaWaitSync Failed\n");
3211 goto out;
3212 }
0edd5b44
JG		 3213 out:
3214 pci_free_consistent(priv->pci_dev, len, shared_virt, shared_phys);
43f66a6c
JK		 3215 return rc;
3216}
3217
3218/* stop nic */
3219static int ipw_stop_nic(struct ipw_priv *priv)
3220{
3221 int rc = 0;
3222
0edd5b44 3223 /* stop */
b095c381 3224 ipw_write32(priv, IPW_RESET_REG, IPW_RESET_REG_STOP_MASTER);
bf79451e 3225
b095c381
JK		 3226 rc = ipw_poll_bit(priv, IPW_RESET_REG,
3227 IPW_RESET_REG_MASTER_DISABLED, 500);
43f66a6c 3228 if (rc < 0) {
c7b6a674 3229 IPW_ERROR("wait for reg master disabled failed after 500ms\n");
43f66a6c 3230 return rc;
bf79451e 3231 }
43f66a6c 3232
b095c381 3233 ipw_set_bit(priv, IPW_RESET_REG, CBD_RESET_REG_PRINCETON_RESET);
bf79451e 3234
43f66a6c
JK		 3235 return rc;
3236}
3237
3238static void ipw_start_nic(struct ipw_priv *priv)
3239{
3240 IPW_DEBUG_TRACE(">>\n");
3241
0edd5b44 3242 /* prvHwStartNic release ARC */
b095c381
JK		 3243 ipw_clear_bit(priv, IPW_RESET_REG,
3244 IPW_RESET_REG_MASTER_DISABLED |
3245 IPW_RESET_REG_STOP_MASTER |
43f66a6c 3246 CBD_RESET_REG_PRINCETON_RESET);
bf79451e 3247
43f66a6c 3248 /* enable power management */
b095c381
JK		 3249 ipw_set_bit(priv, IPW_GP_CNTRL_RW,
3250 IPW_GP_CNTRL_BIT_HOST_ALLOWS_STANDBY);
43f66a6c
JK		 3251
3252 IPW_DEBUG_TRACE("<<\n");
3253}
bf79451e 3254
43f66a6c
JK		 3255static int ipw_init_nic(struct ipw_priv *priv)
3256{
3257 int rc;
3258
3259 IPW_DEBUG_TRACE(">>\n");
bf79451e 3260 /* reset */
43f66a6c
JK		 3261 /*prvHwInitNic */
3262 /* set "initialization complete" bit to move adapter to D0 state */
b095c381 3263 ipw_set_bit(priv, IPW_GP_CNTRL_RW, IPW_GP_CNTRL_BIT_INIT_DONE);
43f66a6c
JK		 3264
3265 /* low-level PLL activation */
b095c381
JK		 3266 ipw_write32(priv, IPW_READ_INT_REGISTER,
3267 IPW_BIT_INT_HOST_SRAM_READ_INT_REGISTER);
43f66a6c
JK		 3268
3269 /* wait for clock stabilization */
b095c381
JK		 3270 rc = ipw_poll_bit(priv, IPW_GP_CNTRL_RW,
3271 IPW_GP_CNTRL_BIT_CLOCK_READY, 250);
0edd5b44 3272 if (rc < 0)
43f66a6c
JK		 3273 IPW_DEBUG_INFO("FAILED wait for clock stablization\n");
3274
3275 /* assert SW reset */
b095c381 3276 ipw_set_bit(priv, IPW_RESET_REG, IPW_RESET_REG_SW_RESET);
43f66a6c
JK		 3277
3278 udelay(10);
3279
3280 /* set "initialization complete" bit to move adapter to D0 state */
b095c381 3281 ipw_set_bit(priv, IPW_GP_CNTRL_RW, IPW_GP_CNTRL_BIT_INIT_DONE);
43f66a6c
JK		 3282
3283 IPW_DEBUG_TRACE(">>\n");
3284 return 0;
3285}
3286
bf79451e 3287/* Call this function from process context, it will sleep in request_firmware.
43f66a6c
JK		 3288 * Probe is an ok place to call this from.
3289 */
3290static int ipw_reset_nic(struct ipw_priv *priv)
3291{
3292 int rc = 0;
a613bffd 3293 unsigned long flags;
43f66a6c
JK		 3294
3295 IPW_DEBUG_TRACE(">>\n");
bf79451e 3296
43f66a6c 3297 rc = ipw_init_nic(priv);
bf79451e 3298
a613bffd 3299 spin_lock_irqsave(&priv->lock, flags);
43f66a6c
JK		 3300 /* Clear the 'host command active' bit... */
3301 priv->status &= ~STATUS_HCMD_ACTIVE;
3302 wake_up_interruptible(&priv->wait_command_queue);
afbf30a2
JK		 3303 priv->status &= ~(STATUS_SCANNING | STATUS_SCAN_ABORTING);
3304 wake_up_interruptible(&priv->wait_state);
a613bffd 3305 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c
JK		 3306
3307 IPW_DEBUG_TRACE("<<\n");
3308 return rc;
bf79451e 3309}
43f66a6c 3310
9006ea75
JK		 3311
3312struct ipw_fw {
0070f8c7
ZY		 3313 __le32 ver;
3314 __le32 boot_size;
3315 __le32 ucode_size;
3316 __le32 fw_size;
9006ea75
JK		 3317 u8 data[0];
3318};
3319
bf79451e 3320static int ipw_get_fw(struct ipw_priv *priv,
9006ea75 3321 const struct firmware **raw, const char *name)
43f66a6c 3322{
9006ea75 3323 struct ipw_fw *fw;
43f66a6c
JK		 3324 int rc;
3325
3326 /* ask firmware_class module to get the boot firmware off disk */
9006ea75 3327 rc = request_firmware(raw, name, &priv->pci_dev->dev);
43f66a6c 3328 if (rc < 0) {
9006ea75 3329 IPW_ERROR("%s request_firmware failed: Reason %d\n", name, rc);
43f66a6c 3330 return rc;
bf79451e 3331 }
43f66a6c 3332
9006ea75
JK		 3333 if ((*raw)->size < sizeof(*fw)) {
3334 IPW_ERROR("%s is too small (%zd)\n", name, (*raw)->size);
3335 return -EINVAL;
3336 }
3337
3338 fw = (void *)(*raw)->data;
3339
0070f8c7
ZY		 3340 if ((*raw)->size < sizeof(*fw) + le32_to_cpu(fw->boot_size) +
3341 le32_to_cpu(fw->ucode_size) + le32_to_cpu(fw->fw_size)) {
9006ea75
JK		 3342 IPW_ERROR("%s is too small or corrupt (%zd)\n",
3343 name, (*raw)->size);
43f66a6c
JK		 3344 return -EINVAL;
3345 }
3346
9006ea75 3347 IPW_DEBUG_INFO("Read firmware '%s' image v%d.%d (%zd bytes)\n",
43f66a6c 3348 name,
9006ea75
JK		 3349 le32_to_cpu(fw->ver) >> 16,
3350 le32_to_cpu(fw->ver) & 0xff,
3351 (*raw)->size - sizeof(*fw));
43f66a6c
JK		 3352 return 0;
3353}
3354
b095c381 3355#define IPW_RX_BUF_SIZE (3000)
43f66a6c 3356
858119e1 3357static void ipw_rx_queue_reset(struct ipw_priv *priv,
43f66a6c
JK		 3358 struct ipw_rx_queue *rxq)
3359{
3360 unsigned long flags;
3361 int i;
3362
3363 spin_lock_irqsave(&rxq->lock, flags);
3364
3365 INIT_LIST_HEAD(&rxq->rx_free);
3366 INIT_LIST_HEAD(&rxq->rx_used);
3367
3368 /* Fill the rx_used queue with _all_ of the Rx buffers */
3369 for (i = 0; i < RX_FREE_BUFFERS + RX_QUEUE_SIZE; i++) {
3370 /* In the reset function, these buffers may have been allocated
3371 * to an SKB, so we need to unmap and free potential storage */
3372 if (rxq->pool[i].skb != NULL) {
3373 pci_unmap_single(priv->pci_dev, rxq->pool[i].dma_addr,
b095c381 3374 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c 3375 dev_kfree_skb(rxq->pool[i].skb);
a613bffd 3376 rxq->pool[i].skb = NULL;
43f66a6c
JK		 3377 }
3378 list_add_tail(&rxq->pool[i].list, &rxq->rx_used);
3379 }
bf79451e 3380
43f66a6c
JK		 3381 /* Set us so that we have processed and used all buffers, but have
3382 * not restocked the Rx queue with fresh buffers */
3383 rxq->read = rxq->write = 0;
43f66a6c
JK		 3384 rxq->free_count = 0;
3385 spin_unlock_irqrestore(&rxq->lock, flags);
3386}
3387
3388#ifdef CONFIG_PM
3389static int fw_loaded = 0;
9006ea75 3390static const struct firmware *raw = NULL;
afbf30a2
JK		 3391
3392static void free_firmware(void)
3393{
3394 if (fw_loaded) {
9006ea75
JK		 3395 release_firmware(raw);
3396 raw = NULL;
afbf30a2
JK		 3397 fw_loaded = 0;
3398 }
3399}
3400#else
3401#define free_firmware() do {} while (0)
43f66a6c
JK		 3402#endif
3403
3404static int ipw_load(struct ipw_priv *priv)
3405{
3406#ifndef CONFIG_PM
9006ea75 3407 const struct firmware *raw = NULL;
43f66a6c 3408#endif
9006ea75
JK		 3409 struct ipw_fw *fw;
3410 u8 *boot_img, *ucode_img, *fw_img;
3411 u8 *name = NULL;
43f66a6c
JK		 3412 int rc = 0, retries = 3;
3413
397ae121
ZY		 3414 switch (priv->ieee->iw_mode) {
3415 case IW_MODE_ADHOC:
9006ea75 3416 name = "ipw2200-ibss.fw";
397ae121 3417 break;
b095c381 3418#ifdef CONFIG_IPW2200_MONITOR
397ae121 3419 case IW_MODE_MONITOR:
9006ea75 3420 name = "ipw2200-sniffer.fw";
397ae121 3421 break;
43f66a6c 3422#endif
397ae121 3423 case IW_MODE_INFRA:
9006ea75 3424 name = "ipw2200-bss.fw";
397ae121 3425 break;
9006ea75
JK		 3426 }
3427
3428 if (!name) {
397ae121 3429 rc = -EINVAL;
9006ea75
JK		 3430 goto error;
3431 }
3432
3433#ifdef CONFIG_PM
3434 if (!fw_loaded) {
3435#endif
3436 rc = ipw_get_fw(priv, &raw, name);
3437 if (rc < 0)
3438 goto error;
3439#ifdef CONFIG_PM
43f66a6c 3440 }
9006ea75
JK		 3441#endif
3442
3443 fw = (void *)raw->data;
3444 boot_img = &fw->data[0];
0070f8c7
ZY		 3445 ucode_img = &fw->data[le32_to_cpu(fw->boot_size)];
3446 fw_img = &fw->data[le32_to_cpu(fw->boot_size) +
3447 le32_to_cpu(fw->ucode_size)];
397ae121
ZY		 3448
3449 if (rc < 0)
3450 goto error;
43f66a6c
JK		 3451
3452 if (!priv->rxq)
3453 priv->rxq = ipw_rx_queue_alloc(priv);
3454 else
3455 ipw_rx_queue_reset(priv, priv->rxq);
3456 if (!priv->rxq) {
3457 IPW_ERROR("Unable to initialize Rx queue\n");
3458 goto error;
3459 }
3460
0edd5b44 3461 retry:
43f66a6c 3462 /* Ensure interrupts are disabled */
b095c381 3463 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
43f66a6c
JK		 3464 priv->status &= ~STATUS_INT_ENABLED;
3465
3466 /* ack pending interrupts */
b095c381 3467 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
bf79451e 3468
43f66a6c
JK		 3469 ipw_stop_nic(priv);
3470
3471 rc = ipw_reset_nic(priv);
397ae121 3472 if (rc < 0) {
43f66a6c
JK		 3473 IPW_ERROR("Unable to reset NIC\n");
3474 goto error;
3475 }
3476
b095c381
JK		 3477 ipw_zero_memory(priv, IPW_NIC_SRAM_LOWER_BOUND,
3478 IPW_NIC_SRAM_UPPER_BOUND - IPW_NIC_SRAM_LOWER_BOUND);
43f66a6c
JK		 3479
3480 /* DMA the initial boot firmware into the device */
0070f8c7 3481 rc = ipw_load_firmware(priv, boot_img, le32_to_cpu(fw->boot_size));
43f66a6c 3482 if (rc < 0) {
a4f6bbb3 3483 IPW_ERROR("Unable to load boot firmware: %d\n", rc);
43f66a6c
JK		 3484 goto error;
3485 }
3486
3487 /* kick start the device */
3488 ipw_start_nic(priv);
3489
c7b6a674 3490 /* wait for the device to finish its initial startup sequence */
b095c381
JK		 3491 rc = ipw_poll_bit(priv, IPW_INTA_RW,
3492 IPW_INTA_BIT_FW_INITIALIZATION_DONE, 500);
43f66a6c
JK		 3493 if (rc < 0) {
3494 IPW_ERROR("device failed to boot initial fw image\n");
3495 goto error;
3496 }
3497 IPW_DEBUG_INFO("initial device response after %dms\n", rc);
3498
bf79451e 3499 /* ack fw init done interrupt */
b095c381 3500 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_BIT_FW_INITIALIZATION_DONE);
43f66a6c
JK		 3501
3502 /* DMA the ucode into the device */
0070f8c7 3503 rc = ipw_load_ucode(priv, ucode_img, le32_to_cpu(fw->ucode_size));
43f66a6c 3504 if (rc < 0) {
a4f6bbb3 3505 IPW_ERROR("Unable to load ucode: %d\n", rc);
43f66a6c
JK		 3506 goto error;
3507 }
bf79451e 3508
43f66a6c
JK		 3509 /* stop nic */
3510 ipw_stop_nic(priv);
3511
3512 /* DMA bss firmware into the device */
0070f8c7 3513 rc = ipw_load_firmware(priv, fw_img, le32_to_cpu(fw->fw_size));
0edd5b44 3514 if (rc < 0) {
a4f6bbb3 3515 IPW_ERROR("Unable to load firmware: %d\n", rc);
43f66a6c
JK		 3516 goto error;
3517 }
397ae121
ZY		 3518#ifdef CONFIG_PM
3519 fw_loaded = 1;
3520#endif
3521
43f66a6c
JK		 3522 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 0);
3523
3524 rc = ipw_queue_reset(priv);
397ae121 3525 if (rc < 0) {
43f66a6c
JK		 3526 IPW_ERROR("Unable to initialize queues\n");
3527 goto error;
3528 }
3529
3530 /* Ensure interrupts are disabled */
b095c381 3531 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
c848d0af 3532 /* ack pending interrupts */
b095c381 3533 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
bf79451e 3534
43f66a6c
JK		 3535 /* kick start the device */
3536 ipw_start_nic(priv);
3537
b095c381 3538 if (ipw_read32(priv, IPW_INTA_RW) & IPW_INTA_BIT_PARITY_ERROR) {
43f66a6c
JK		 3539 if (retries > 0) {
3540 IPW_WARNING("Parity error. Retrying init.\n");
3541 retries--;
3542 goto retry;
3543 }
3544
3545 IPW_ERROR("TODO: Handle parity error -- schedule restart?\n");
3546 rc = -EIO;
3547 goto error;
3548 }
3549
3550 /* wait for the device */
b095c381
JK		 3551 rc = ipw_poll_bit(priv, IPW_INTA_RW,
3552 IPW_INTA_BIT_FW_INITIALIZATION_DONE, 500);
43f66a6c 3553 if (rc < 0) {
c7b6a674 3554 IPW_ERROR("device failed to start within 500ms\n");
43f66a6c
JK		 3555 goto error;
3556 }
3557 IPW_DEBUG_INFO("device response after %dms\n", rc);
3558
3559 /* ack fw init done interrupt */
b095c381 3560 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_BIT_FW_INITIALIZATION_DONE);
43f66a6c
JK		 3561
3562 /* read eeprom data and initialize the eeprom region of sram */
3563 priv->eeprom_delay = 1;
bf79451e 3564 ipw_eeprom_init_sram(priv);
43f66a6c
JK		 3565
3566 /* enable interrupts */
3567 ipw_enable_interrupts(priv);
3568
3569 /* Ensure our queue has valid packets */
3570 ipw_rx_queue_replenish(priv);
3571
b095c381 3572 ipw_write32(priv, IPW_RX_READ_INDEX, priv->rxq->read);
43f66a6c
JK		 3573
3574 /* ack pending interrupts */
b095c381 3575 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
43f66a6c
JK		 3576
3577#ifndef CONFIG_PM
9006ea75 3578 release_firmware(raw);
43f66a6c
JK		 3579#endif
3580 return 0;
3581
0edd5b44 3582 error:
43f66a6c
JK		 3583 if (priv->rxq) {
3584 ipw_rx_queue_free(priv, priv->rxq);
3585 priv->rxq = NULL;
3586 }
3587 ipw_tx_queue_free(priv);
9006ea75
JK		 3588 if (raw)
3589 release_firmware(raw);
43f66a6c
JK		 3590#ifdef CONFIG_PM
3591 fw_loaded = 0;
9006ea75 3592 raw = NULL;
43f66a6c
JK		 3593#endif
3594
3595 return rc;
3596}
3597
bf79451e 3598/**
43f66a6c
JK		 3599 * DMA services
3600 *
3601 * Theory of operation
3602 *
3603 * A queue is a circular buffers with 'Read' and 'Write' pointers.
3604 * 2 empty entries always kept in the buffer to protect from overflow.
3605 *
3606 * For Tx queue, there are low mark and high mark limits. If, after queuing
bf79451e
JG		 3607 * the packet for Tx, free space become < low mark, Tx queue stopped. When
3608 * reclaiming packets (on 'tx done IRQ), if free space become > high mark,
43f66a6c
JK		 3609 * Tx queue resumed.
3610 *
3611 * The IPW operates with six queues, one receive queue in the device's
3612 * sram, one transmit queue for sending commands to the device firmware,
bf79451e 3613 * and four transmit queues for data.
43f66a6c 3614 *
bf79451e 3615 * The four transmit queues allow for performing quality of service (qos)
43f66a6c 3616 * transmissions as per the 802.11 protocol. Currently Linux does not
bf79451e 3617 * provide a mechanism to the user for utilizing prioritized queues, so
43f66a6c
JK		 3618 * we only utilize the first data transmit queue (queue1).
3619 */
3620
3621/**
3622 * Driver allocates buffers of this size for Rx
3623 */
3624
943dbef4
DW		 3625/**
3626 * ipw_rx_queue_space - Return number of free slots available in queue.
3627 */
3628static int ipw_rx_queue_space(const struct ipw_rx_queue *q)
3629{
3630 int s = q->read - q->write;
3631 if (s <= 0)
3632 s += RX_QUEUE_SIZE;
3633 /* keep some buffer to not confuse full and empty queue */
3634 s -= 2;
3635 if (s < 0)
3636 s = 0;
3637 return s;
3638}
3639
3640static inline int ipw_tx_queue_space(const struct clx2_queue *q)
43f66a6c
JK		 3641{
3642 int s = q->last_used - q->first_empty;
3643 if (s <= 0)
3644 s += q->n_bd;
3645 s -= 2; /* keep some reserve to not confuse empty and full situations */
3646 if (s < 0)
3647 s = 0;
3648 return s;
3649}
3650
3651static inline int ipw_queue_inc_wrap(int index, int n_bd)
3652{
3653 return (++index == n_bd) ? 0 : index;
3654}
3655
3656/**
3657 * Initialize common DMA queue structure
bf79451e 3658 *
43f66a6c
JK		 3659 * @param q queue to init
3660 * @param count Number of BD's to allocate. Should be power of 2
3661 * @param read_register Address for 'read' register
3662 * (not offset within BAR, full address)
3663 * @param write_register Address for 'write' register
3664 * (not offset within BAR, full address)
3665 * @param base_register Address for 'base' register
3666 * (not offset within BAR, full address)
3667 * @param size Address for 'size' register
3668 * (not offset within BAR, full address)
3669 */
bf79451e 3670static void ipw_queue_init(struct ipw_priv *priv, struct clx2_queue *q,
0edd5b44 3671 int count, u32 read, u32 write, u32 base, u32 size)
43f66a6c
JK		 3672{
3673 q->n_bd = count;
3674
3675 q->low_mark = q->n_bd / 4;
3676 if (q->low_mark < 4)
3677 q->low_mark = 4;
3678
3679 q->high_mark = q->n_bd / 8;
3680 if (q->high_mark < 2)
3681 q->high_mark = 2;
3682
3683 q->first_empty = q->last_used = 0;
3684 q->reg_r = read;
3685 q->reg_w = write;
3686
3687 ipw_write32(priv, base, q->dma_addr);
3688 ipw_write32(priv, size, count);
3689 ipw_write32(priv, read, 0);
3690 ipw_write32(priv, write, 0);
3691
3692 _ipw_read32(priv, 0x90);
3693}
3694
bf79451e 3695static int ipw_queue_tx_init(struct ipw_priv *priv,
43f66a6c 3696 struct clx2_tx_queue *q,
0edd5b44 3697 int count, u32 read, u32 write, u32 base, u32 size)
43f66a6c
JK		 3698{
3699 struct pci_dev *dev = priv->pci_dev;
3700
3701 q->txb = kmalloc(sizeof(q->txb[0]) * count, GFP_KERNEL);
3702 if (!q->txb) {
3703 IPW_ERROR("vmalloc for auxilary BD structures failed\n");
3704 return -ENOMEM;
3705 }
3706
0edd5b44
JG		 3707 q->bd =
3708 pci_alloc_consistent(dev, sizeof(q->bd[0]) * count, &q->q.dma_addr);
43f66a6c 3709 if (!q->bd) {
aaa4d308 3710 IPW_ERROR("pci_alloc_consistent(%zd) failed\n",
0edd5b44 3711 sizeof(q->bd[0]) * count);
43f66a6c
JK		 3712 kfree(q->txb);
3713 q->txb = NULL;
3714 return -ENOMEM;
3715 }
3716
3717 ipw_queue_init(priv, &q->q, count, read, write, base, size);
3718 return 0;
3719}
3720
3721/**
3722 * Free one TFD, those at index [txq->q.last_used].
3723 * Do NOT advance any indexes
bf79451e 3724 *
43f66a6c
JK		 3725 * @param dev
3726 * @param txq
3727 */
3728static void ipw_queue_tx_free_tfd(struct ipw_priv *priv,
3729 struct clx2_tx_queue *txq)
3730{
3731 struct tfd_frame *bd = &txq->bd[txq->q.last_used];
3732 struct pci_dev *dev = priv->pci_dev;
3733 int i;
bf79451e 3734
43f66a6c
JK		 3735 /* classify bd */
3736 if (bd->control_flags.message_type == TX_HOST_COMMAND_TYPE)
3737 /* nothing to cleanup after for host commands */
3738 return;
3739
3740 /* sanity check */
a613bffd
JK		 3741 if (le32_to_cpu(bd->u.data.num_chunks) > NUM_TFD_CHUNKS) {
3742 IPW_ERROR("Too many chunks: %i\n",
3743 le32_to_cpu(bd->u.data.num_chunks));
43f66a6c
JK		 3744 /** @todo issue fatal error, it is quite serious situation */
3745 return;
3746 }
3747
3748 /* unmap chunks if any */
a613bffd
JK		 3749 for (i = 0; i < le32_to_cpu(bd->u.data.num_chunks); i++) {
3750 pci_unmap_single(dev, le32_to_cpu(bd->u.data.chunk_ptr[i]),
3751 le16_to_cpu(bd->u.data.chunk_len[i]),
3752 PCI_DMA_TODEVICE);
43f66a6c
JK		 3753 if (txq->txb[txq->q.last_used]) {
3754 ieee80211_txb_free(txq->txb[txq->q.last_used]);
3755 txq->txb[txq->q.last_used] = NULL;
3756 }
3757 }
3758}
3759
3760/**
3761 * Deallocate DMA queue.
bf79451e 3762 *
43f66a6c
JK		 3763 * Empty queue by removing and destroying all BD's.
3764 * Free all buffers.
bf79451e 3765 *
43f66a6c
JK		 3766 * @param dev
3767 * @param q
3768 */
0edd5b44 3769static void ipw_queue_tx_free(struct ipw_priv *priv, struct clx2_tx_queue *txq)
43f66a6c
JK		 3770{
3771 struct clx2_queue *q = &txq->q;
3772 struct pci_dev *dev = priv->pci_dev;
3773
bf79451e
JG		 3774 if (q->n_bd == 0)
3775 return;
43f66a6c
JK		 3776
3777 /* first, empty all BD's */
3778 for (; q->first_empty != q->last_used;
3779 q->last_used = ipw_queue_inc_wrap(q->last_used, q->n_bd)) {
3780 ipw_queue_tx_free_tfd(priv, txq);
3781 }
bf79451e 3782
43f66a6c 3783 /* free buffers belonging to queue itself */
0edd5b44 3784 pci_free_consistent(dev, sizeof(txq->bd[0]) * q->n_bd, txq->bd,
43f66a6c
JK		 3785 q->dma_addr);
3786 kfree(txq->txb);
3787
3788 /* 0 fill whole structure */
3789 memset(txq, 0, sizeof(*txq));
3790}
3791
43f66a6c
JK		 3792/**
3793 * Destroy all DMA queues and structures
bf79451e 3794 *
43f66a6c
JK		 3795 * @param priv
3796 */
3797static void ipw_tx_queue_free(struct ipw_priv *priv)
3798{
3799 /* Tx CMD queue */
3800 ipw_queue_tx_free(priv, &priv->txq_cmd);
3801
3802 /* Tx queues */
3803 ipw_queue_tx_free(priv, &priv->txq[0]);
3804 ipw_queue_tx_free(priv, &priv->txq[1]);
3805 ipw_queue_tx_free(priv, &priv->txq[2]);
3806 ipw_queue_tx_free(priv, &priv->txq[3]);
3807}
3808
858119e1 3809static void ipw_create_bssid(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3810{
3811 /* First 3 bytes are manufacturer */
3812 bssid[0] = priv->mac_addr[0];
3813 bssid[1] = priv->mac_addr[1];
3814 bssid[2] = priv->mac_addr[2];
3815
3816 /* Last bytes are random */
0edd5b44 3817 get_random_bytes(&bssid[3], ETH_ALEN - 3);
43f66a6c 3818
0edd5b44
JG		 3819 bssid[0] &= 0xfe; /* clear multicast bit */
3820 bssid[0] |= 0x02; /* set local assignment bit (IEEE802) */
43f66a6c
JK		 3821}
3822
858119e1 3823static u8 ipw_add_station(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3824{
3825 struct ipw_station_entry entry;
3826 int i;
3827
3828 for (i = 0; i < priv->num_stations; i++) {
3829 if (!memcmp(priv->stations[i], bssid, ETH_ALEN)) {
3830 /* Another node is active in network */
3831 priv->missed_adhoc_beacons = 0;
3832 if (!(priv->config & CFG_STATIC_CHANNEL))
3833 /* when other nodes drop out, we drop out */
3834 priv->config &= ~CFG_ADHOC_PERSIST;
3835
3836 return i;
3837 }
3838 }
3839
3840 if (i == MAX_STATIONS)
3841 return IPW_INVALID_STATION;
3842
e174961c 3843 IPW_DEBUG_SCAN("Adding AdHoc station: %pM\n", bssid);
43f66a6c
JK		 3844
3845 entry.reserved = 0;
3846 entry.support_mode = 0;
3847 memcpy(entry.mac_addr, bssid, ETH_ALEN);
3848 memcpy(priv->stations[i], bssid, ETH_ALEN);
3849 ipw_write_direct(priv, IPW_STATION_TABLE_LOWER + i * sizeof(entry),
0edd5b44 3850 &entry, sizeof(entry));
43f66a6c
JK		 3851 priv->num_stations++;
3852
3853 return i;
3854}
3855
858119e1 3856static u8 ipw_find_station(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK		 3857{
3858 int i;
3859
bf79451e
JG		 3860 for (i = 0; i < priv->num_stations; i++)
3861 if (!memcmp(priv->stations[i], bssid, ETH_ALEN))
43f66a6c
JK		 3862 return i;
3863
3864 return IPW_INVALID_STATION;
3865}
3866
3867static void ipw_send_disassociate(struct ipw_priv *priv, int quiet)
3868{
3869 int err;
3870
7b99659f
HL		 3871 if (priv->status & STATUS_ASSOCIATING) {
3872 IPW_DEBUG_ASSOC("Disassociating while associating.\n");
3873 queue_work(priv->workqueue, &priv->disassociate);
3874 return;
3875 }
3876
3877 if (!(priv->status & STATUS_ASSOCIATED)) {
43f66a6c
JK		 3878 IPW_DEBUG_ASSOC("Disassociating while not associated.\n");
3879 return;
3880 }
3881
e174961c 3882 IPW_DEBUG_ASSOC("Disassocation attempt from %pM "
43f66a6c 3883 "on channel %d.\n",
e174961c 3884 priv->assoc_request.bssid,
43f66a6c
JK		 3885 priv->assoc_request.channel);
3886
3887 priv->status &= ~(STATUS_ASSOCIATING | STATUS_ASSOCIATED);
3888 priv->status |= STATUS_DISASSOCIATING;
3889
3890 if (quiet)
3891 priv->assoc_request.assoc_type = HC_DISASSOC_QUIET;
3892 else
3893 priv->assoc_request.assoc_type = HC_DISASSOCIATE;
e6324726 3894
43f66a6c
JK		 3895 err = ipw_send_associate(priv, &priv->assoc_request);
3896 if (err) {
3897 IPW_DEBUG_HC("Attempt to send [dis]associate command "
3898 "failed.\n");
3899 return;
3900 }
3901
3902}
3903
c848d0af 3904static int ipw_disassociate(void *data)
43f66a6c 3905{
c848d0af
JK		 3906 struct ipw_priv *priv = data;
3907 if (!(priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)))
3908 return 0;
43f66a6c 3909 ipw_send_disassociate(data, 0);
b8ddafd7 3910 netif_carrier_off(priv->net_dev);
c848d0af 3911 return 1;
43f66a6c
JK		 3912}
3913
c4028958 3914static void ipw_bg_disassociate(struct work_struct *work)
43f66a6c 3915{
c4028958
DH		 3916 struct ipw_priv *priv =
3917 container_of(work, struct ipw_priv, disassociate);
4644151b 3918 mutex_lock(&priv->mutex);
c4028958 3919 ipw_disassociate(priv);
4644151b 3920 mutex_unlock(&priv->mutex);
43f66a6c
JK		 3921}
3922
c4028958 3923static void ipw_system_config(struct work_struct *work)
d8bad6df 3924{
c4028958
DH		 3925 struct ipw_priv *priv =
3926 container_of(work, struct ipw_priv, system_config);
d685b8c2
ZY		 3927
3928#ifdef CONFIG_IPW2200_PROMISCUOUS
3929 if (priv->prom_net_dev && netif_running(priv->prom_net_dev)) {
3930 priv->sys_config.accept_all_data_frames = 1;
3931 priv->sys_config.accept_non_directed_frames = 1;
3932 priv->sys_config.accept_all_mgmt_bcpr = 1;
3933 priv->sys_config.accept_all_mgmt_frames = 1;
3934 }
3935#endif
3936
3937 ipw_send_system_config(priv);
43f66a6c
JK		 3938}
3939
3940struct ipw_status_code {
3941 u16 status;
3942 const char *reason;
3943};
3944
3945static const struct ipw_status_code ipw_status_codes[] = {
3946 {0x00, "Successful"},
3947 {0x01, "Unspecified failure"},
3948 {0x0A, "Cannot support all requested capabilities in the "
3949 "Capability information field"},
3950 {0x0B, "Reassociation denied due to inability to confirm that "
3951 "association exists"},
3952 {0x0C, "Association denied due to reason outside the scope of this "
3953 "standard"},
0edd5b44
JG		 3954 {0x0D,
3955 "Responding station does not support the specified authentication "
43f66a6c 3956 "algorithm"},
0edd5b44
JG		 3957 {0x0E,
3958 "Received an Authentication frame with authentication sequence "
43f66a6c
JK		 3959 "transaction sequence number out of expected sequence"},
3960 {0x0F, "Authentication rejected because of challenge failure"},
3961 {0x10, "Authentication rejected due to timeout waiting for next "
3962 "frame in sequence"},
3963 {0x11, "Association denied because AP is unable to handle additional "
3964 "associated stations"},
0edd5b44
JG		 3965 {0x12,
3966 "Association denied due to requesting station not supporting all "
43f66a6c 3967 "of the datarates in the BSSBasicServiceSet Parameter"},
0edd5b44
JG		 3968 {0x13,
3969 "Association denied due to requesting station not supporting "
43f66a6c 3970 "short preamble operation"},
0edd5b44
JG		 3971 {0x14,
3972 "Association denied due to requesting station not supporting "
43f66a6c 3973 "PBCC encoding"},
0edd5b44
JG		 3974 {0x15,
3975 "Association denied due to requesting station not supporting "
43f66a6c 3976 "channel agility"},
0edd5b44
JG		 3977 {0x19,
3978 "Association denied due to requesting station not supporting "
43f66a6c 3979 "short slot operation"},
0edd5b44
JG		 3980 {0x1A,
3981 "Association denied due to requesting station not supporting "
43f66a6c
JK		 3982 "DSSS-OFDM operation"},
3983 {0x28, "Invalid Information Element"},
3984 {0x29, "Group Cipher is not valid"},
3985 {0x2A, "Pairwise Cipher is not valid"},
3986 {0x2B, "AKMP is not valid"},
3987 {0x2C, "Unsupported RSN IE version"},
3988 {0x2D, "Invalid RSN IE Capabilities"},
3989 {0x2E, "Cipher suite is rejected per security policy"},
3990};
3991
bf79451e 3992static const char *ipw_get_status_code(u16 status)
43f66a6c
JK		 3993{
3994 int i;
bf79451e 3995 for (i = 0; i < ARRAY_SIZE(ipw_status_codes); i++)
ea2b26e0 3996 if (ipw_status_codes[i].status == (status & 0xff))
43f66a6c
JK		 3997 return ipw_status_codes[i].reason;
3998 return "Unknown status value.";
3999}
43f66a6c
JK		 4000
4001static void inline average_init(struct average *avg)
4002{
4003 memset(avg, 0, sizeof(*avg));
4004}
4005
00d21de5
ZY		 4006#define DEPTH_RSSI 8
4007#define DEPTH_NOISE 16
4008static s16 exponential_average(s16 prev_avg, s16 val, u8 depth)
4009{
4010 return ((depth-1)*prev_avg + val)/depth;
4011}
4012
858119e1 4013static void average_add(struct average *avg, s16 val)
43f66a6c
JK		 4014{
4015 avg->sum -= avg->entries[avg->pos];
4016 avg->sum += val;
4017 avg->entries[avg->pos++] = val;
4018 if (unlikely(avg->pos == AVG_ENTRIES)) {
4019 avg->init = 1;
4020 avg->pos = 0;
4021 }
4022}
4023
858119e1 4024static s16 average_value(struct average *avg)
43f66a6c
JK		 4025{
4026 if (!unlikely(avg->init)) {
4027 if (avg->pos)
4028 return avg->sum / avg->pos;
4029 return 0;
4030 }
4031
4032 return avg->sum / AVG_ENTRIES;
4033}
4034
4035static void ipw_reset_stats(struct ipw_priv *priv)
4036{
4037 u32 len = sizeof(u32);
4038
4039 priv->quality = 0;
4040
4041 average_init(&priv->average_missed_beacons);
00d21de5
ZY		 4042 priv->exp_avg_rssi = -60;
4043 priv->exp_avg_noise = -85 + 0x100;
43f66a6c
JK		 4044
4045 priv->last_rate = 0;
4046 priv->last_missed_beacons = 0;
4047 priv->last_rx_packets = 0;
4048 priv->last_tx_packets = 0;
4049 priv->last_tx_failures = 0;
bf79451e 4050
43f66a6c
JK		 4051 /* Firmware managed, reset only when NIC is restarted, so we have to
4052 * normalize on the current value */
bf79451e 4053 ipw_get_ordinal(priv, IPW_ORD_STAT_RX_ERR_CRC,
43f66a6c 4054 &priv->last_rx_err, &len);
bf79451e 4055 ipw_get_ordinal(priv, IPW_ORD_STAT_TX_FAILURE,
43f66a6c
JK		 4056 &priv->last_tx_failures, &len);
4057
4058 /* Driver managed, reset with each association */
4059 priv->missed_adhoc_beacons = 0;
4060 priv->missed_beacons = 0;
4061 priv->tx_packets = 0;
4062 priv->rx_packets = 0;
4063
4064}
4065
858119e1 4066static u32 ipw_get_max_rate(struct ipw_priv *priv)
43f66a6c
JK		 4067{
4068 u32 i = 0x80000000;
4069 u32 mask = priv->rates_mask;
4070 /* If currently associated in B mode, restrict the maximum
4071 * rate match to B rates */
4072 if (priv->assoc_request.ieee_mode == IPW_B_MODE)
4073 mask &= IEEE80211_CCK_RATES_MASK;
4074
4075 /* TODO: Verify that the rate is supported by the current rates
4076 * list. */
4077
0edd5b44
JG		 4078 while (i && !(mask & i))
4079 i >>= 1;
43f66a6c 4080 switch (i) {
ea2b26e0
JK		 4081 case IEEE80211_CCK_RATE_1MB_MASK:
4082 return 1000000;
4083 case IEEE80211_CCK_RATE_2MB_MASK:
4084 return 2000000;
4085 case IEEE80211_CCK_RATE_5MB_MASK:
4086 return 5500000;
4087 case IEEE80211_OFDM_RATE_6MB_MASK:
4088 return 6000000;
4089 case IEEE80211_OFDM_RATE_9MB_MASK:
4090 return 9000000;
4091 case IEEE80211_CCK_RATE_11MB_MASK:
4092 return 11000000;
4093 case IEEE80211_OFDM_RATE_12MB_MASK:
4094 return 12000000;
4095 case IEEE80211_OFDM_RATE_18MB_MASK:
4096 return 18000000;
4097 case IEEE80211_OFDM_RATE_24MB_MASK:
4098 return 24000000;
4099 case IEEE80211_OFDM_RATE_36MB_MASK:
4100 return 36000000;
4101 case IEEE80211_OFDM_RATE_48MB_MASK:
4102 return 48000000;
4103 case IEEE80211_OFDM_RATE_54MB_MASK:
4104 return 54000000;
43f66a6c
JK		 4105 }
4106
bf79451e 4107 if (priv->ieee->mode == IEEE_B)
43f66a6c
JK		 4108 return 11000000;
4109 else
4110 return 54000000;
4111}
4112
4113static u32 ipw_get_current_rate(struct ipw_priv *priv)
4114{
4115 u32 rate, len = sizeof(rate);
4116 int err;
4117
bf79451e 4118 if (!(priv->status & STATUS_ASSOCIATED))
43f66a6c
JK		 4119 return 0;
4120
4121 if (priv->tx_packets > IPW_REAL_RATE_RX_PACKET_THRESHOLD) {
bf79451e 4122 err = ipw_get_ordinal(priv, IPW_ORD_STAT_TX_CURR_RATE, &rate,
43f66a6c
JK		 4123 &len);
4124 if (err) {
4125 IPW_DEBUG_INFO("failed querying ordinals.\n");
4126 return 0;
4127 }
bf79451e 4128 } else
43f66a6c
JK		 4129 return ipw_get_max_rate(priv);
4130
4131 switch (rate) {
ea2b26e0
JK		 4132 case IPW_TX_RATE_1MB:
4133 return 1000000;
4134 case IPW_TX_RATE_2MB:
4135 return 2000000;
4136 case IPW_TX_RATE_5MB:
4137 return 5500000;
4138 case IPW_TX_RATE_6MB:
4139 return 6000000;
4140 case IPW_TX_RATE_9MB:
4141 return 9000000;
4142 case IPW_TX_RATE_11MB:
4143 return 11000000;
4144 case IPW_TX_RATE_12MB:
4145 return 12000000;
4146 case IPW_TX_RATE_18MB:
4147 return 18000000;
4148 case IPW_TX_RATE_24MB:
4149 return 24000000;
4150 case IPW_TX_RATE_36MB:
4151 return 36000000;
4152 case IPW_TX_RATE_48MB:
4153 return 48000000;
4154 case IPW_TX_RATE_54MB:
4155 return 54000000;
43f66a6c
JK		 4156 }
4157
4158 return 0;
4159}
4160
43f66a6c
JK		 4161#define IPW_STATS_INTERVAL (2 * HZ)
4162static void ipw_gather_stats(struct ipw_priv *priv)
4163{
4164 u32 rx_err, rx_err_delta, rx_packets_delta;
4165 u32 tx_failures, tx_failures_delta, tx_packets_delta;
4166 u32 missed_beacons_percent, missed_beacons_delta;
4167 u32 quality = 0;
4168 u32 len = sizeof(u32);
4169 s16 rssi;
bf79451e 4170 u32 beacon_quality, signal_quality, tx_quality, rx_quality,
0edd5b44 4171 rate_quality;
ea2b26e0 4172 u32 max_rate;
43f66a6c
JK		 4173
4174 if (!(priv->status & STATUS_ASSOCIATED)) {
4175 priv->quality = 0;
4176 return;
4177 }
4178
4179 /* Update the statistics */
bf79451e 4180 ipw_get_ordinal(priv, IPW_ORD_STAT_MISSED_BEACONS,
43f66a6c 4181 &priv->missed_beacons, &len);
0edd5b44 4182 missed_beacons_delta = priv->missed_beacons - priv->last_missed_beacons;
43f66a6c
JK		 4183 priv->last_missed_beacons = priv->missed_beacons;
4184 if (priv->assoc_request.beacon_interval) {
4185 missed_beacons_percent = missed_beacons_delta *
5b5e807f 4186 (HZ * le16_to_cpu(priv->assoc_request.beacon_interval)) /
0edd5b44 4187 (IPW_STATS_INTERVAL * 10);
43f66a6c
JK		 4188 } else {
4189 missed_beacons_percent = 0;
4190 }
4191 average_add(&priv->average_missed_beacons, missed_beacons_percent);
4192
4193 ipw_get_ordinal(priv, IPW_ORD_STAT_RX_ERR_CRC, &rx_err, &len);
4194 rx_err_delta = rx_err - priv->last_rx_err;
4195 priv->last_rx_err = rx_err;
4196
4197 ipw_get_ordinal(priv, IPW_ORD_STAT_TX_FAILURE, &tx_failures, &len);
4198 tx_failures_delta = tx_failures - priv->last_tx_failures;
4199 priv->last_tx_failures = tx_failures;
4200
4201 rx_packets_delta = priv->rx_packets - priv->last_rx_packets;
4202 priv->last_rx_packets = priv->rx_packets;
4203
4204 tx_packets_delta = priv->tx_packets - priv->last_tx_packets;
4205 priv->last_tx_packets = priv->tx_packets;
4206
4207 /* Calculate quality based on the following:
bf79451e 4208 *
43f66a6c
JK		 4209 * Missed beacon: 100% = 0, 0% = 70% missed
4210 * Rate: 60% = 1Mbs, 100% = Max
4211 * Rx and Tx errors represent a straight % of total Rx/Tx
4212 * RSSI: 100% = > -50, 0% = < -80
4213 * Rx errors: 100% = 0, 0% = 50% missed
bf79451e 4214 *
43f66a6c
JK		 4215 * The lowest computed quality is used.
4216 *
4217 */
4218#define BEACON_THRESHOLD 5
4219 beacon_quality = 100 - missed_beacons_percent;
4220 if (beacon_quality < BEACON_THRESHOLD)
4221 beacon_quality = 0;
4222 else
bf79451e 4223 beacon_quality = (beacon_quality - BEACON_THRESHOLD) * 100 /
0edd5b44 4224 (100 - BEACON_THRESHOLD);
bf79451e 4225 IPW_DEBUG_STATS("Missed beacon: %3d%% (%d%%)\n",
43f66a6c 4226 beacon_quality, missed_beacons_percent);
bf79451e 4227
43f66a6c 4228 priv->last_rate = ipw_get_current_rate(priv);
ea2b26e0
JK		 4229 max_rate = ipw_get_max_rate(priv);
4230 rate_quality = priv->last_rate * 40 / max_rate + 60;
43f66a6c
JK		 4231 IPW_DEBUG_STATS("Rate quality : %3d%% (%dMbs)\n",
4232 rate_quality, priv->last_rate / 1000000);
bf79451e 4233
0edd5b44 4234 if (rx_packets_delta > 100 && rx_packets_delta + rx_err_delta)
bf79451e 4235 rx_quality = 100 - (rx_err_delta * 100) /
0edd5b44 4236 (rx_packets_delta + rx_err_delta);
43f66a6c
JK		 4237 else
4238 rx_quality = 100;
4239 IPW_DEBUG_STATS("Rx quality : %3d%% (%u errors, %u packets)\n",
4240 rx_quality, rx_err_delta, rx_packets_delta);
bf79451e 4241
0edd5b44 4242 if (tx_packets_delta > 100 && tx_packets_delta + tx_failures_delta)
bf79451e 4243 tx_quality = 100 - (tx_failures_delta * 100) /
0edd5b44 4244 (tx_packets_delta + tx_failures_delta);
43f66a6c
JK		 4245 else
4246 tx_quality = 100;
4247 IPW_DEBUG_STATS("Tx quality : %3d%% (%u errors, %u packets)\n",
4248 tx_quality, tx_failures_delta, tx_packets_delta);
bf79451e 4249
00d21de5 4250 rssi = priv->exp_avg_rssi;
c848d0af
JK		 4251 signal_quality =
4252 (100 *
4253 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) *
4254 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) -
4255 (priv->ieee->perfect_rssi - rssi) *
4256 (15 * (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) +
4257 62 * (priv->ieee->perfect_rssi - rssi))) /
4258 ((priv->ieee->perfect_rssi - priv->ieee->worst_rssi) *
4259 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi));
4260 if (signal_quality > 100)
43f66a6c 4261 signal_quality = 100;
c848d0af 4262 else if (signal_quality < 1)
43f66a6c 4263 signal_quality = 0;
ea2b26e0 4264
61fb9ed9 4265 IPW_DEBUG_STATS("Signal level : %3d%% (%d dBm)\n",
43f66a6c 4266 signal_quality, rssi);
bf79451e
JG		 4267
4268 quality = min(beacon_quality,
43f66a6c
JK		 4269 min(rate_quality,
4270 min(tx_quality, min(rx_quality, signal_quality))));
4271 if (quality == beacon_quality)
0edd5b44
JG		 4272 IPW_DEBUG_STATS("Quality (%d%%): Clamped to missed beacons.\n",
4273 quality);
43f66a6c 4274 if (quality == rate_quality)
0edd5b44
JG		 4275 IPW_DEBUG_STATS("Quality (%d%%): Clamped to rate quality.\n",
4276 quality);
43f66a6c 4277 if (quality == tx_quality)
0edd5b44
JG		 4278 IPW_DEBUG_STATS("Quality (%d%%): Clamped to Tx quality.\n",
4279 quality);
43f66a6c 4280 if (quality == rx_quality)
0edd5b44
JG		 4281 IPW_DEBUG_STATS("Quality (%d%%): Clamped to Rx quality.\n",
4282 quality);
43f66a6c 4283 if (quality == signal_quality)
0edd5b44
JG		 4284 IPW_DEBUG_STATS("Quality (%d%%): Clamped to signal quality.\n",
4285 quality);
43f66a6c
JK		 4286
4287 priv->quality = quality;
bf79451e
JG		 4288
4289 queue_delayed_work(priv->workqueue, &priv->gather_stats,
43f66a6c
JK		 4290 IPW_STATS_INTERVAL);
4291}
4292
c4028958 4293static void ipw_bg_gather_stats(struct work_struct *work)
c848d0af 4294{
c4028958
DH		 4295 struct ipw_priv *priv =
4296 container_of(work, struct ipw_priv, gather_stats.work);
4644151b 4297 mutex_lock(&priv->mutex);
c4028958 4298 ipw_gather_stats(priv);
4644151b 4299 mutex_unlock(&priv->mutex);
c848d0af
JK		 4300}
4301
e7582561
BC		 4302/* Missed beacon behavior:
4303 * 1st missed -> roaming_threshold, just wait, don't do any scan/roam.
4304 * roaming_threshold -> disassociate_threshold, scan and roam for better signal.
4305 * Above disassociate threshold, give up and stop scanning.
4306 * Roaming is disabled if disassociate_threshold <= roaming_threshold */
858119e1 4307static void ipw_handle_missed_beacon(struct ipw_priv *priv,
ea2b26e0
JK		 4308 int missed_count)
4309{
4310 priv->notif_missed_beacons = missed_count;
4311
afbf30a2 4312 if (missed_count > priv->disassociate_threshold &&
ea2b26e0
JK		 4313 priv->status & STATUS_ASSOCIATED) {
4314 /* If associated and we've hit the missed
4315 * beacon threshold, disassociate, turn
4316 * off roaming, and abort any active scans */
4317 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
afbf30a2 4318 IPW_DL_STATE | IPW_DL_ASSOC,
ea2b26e0
JK		 4319 "Missed beacon: %d - disassociate\n", missed_count);
4320 priv->status &= ~STATUS_ROAMING;
a613bffd
JK		 4321 if (priv->status & STATUS_SCANNING) {
4322 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
4323 IPW_DL_STATE,
4324 "Aborting scan with missed beacon.\n");
ea2b26e0 4325 queue_work(priv->workqueue, &priv->abort_scan);
a613bffd
JK		 4326 }
4327
ea2b26e0
JK		 4328 queue_work(priv->workqueue, &priv->disassociate);
4329 return;
4330 }
4331
4332 if (priv->status & STATUS_ROAMING) {
4333 /* If we are currently roaming, then just
4334 * print a debug statement... */
4335 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4336 "Missed beacon: %d - roam in progress\n",
4337 missed_count);
4338 return;
4339 }
4340
4bfdb91d
ZY		 4341 if (roaming &&
4342 (missed_count > priv->roaming_threshold &&
4343 missed_count <= priv->disassociate_threshold)) {
ea2b26e0 4344 /* If we are not already roaming, set the ROAM
e7582561
BC		 4345 * bit in the status and kick off a scan.
4346 * This can happen several times before we reach
4347 * disassociate_threshold. */
ea2b26e0
JK		 4348 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4349 "Missed beacon: %d - initiate "
4350 "roaming\n", missed_count);
4351 if (!(priv->status & STATUS_ROAMING)) {
4352 priv->status |= STATUS_ROAMING;
4353 if (!(priv->status & STATUS_SCANNING))
c4028958
DH		 4354 queue_delayed_work(priv->workqueue,
4355 &priv->request_scan, 0);
ea2b26e0
JK		 4356 }
4357 return;
4358 }
4359
14a4dfe2
HS		 4360 if (priv->status & STATUS_SCANNING &&
4361 missed_count > IPW_MB_SCAN_CANCEL_THRESHOLD) {
ea2b26e0
JK		 4362 /* Stop scan to keep fw from getting
4363 * stuck (only if we aren't roaming --
4364 * otherwise we'll never scan more than 2 or 3
4365 * channels..) */
b095c381
JK		 4366 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF | IPW_DL_STATE,
4367 "Aborting scan with missed beacon.\n");
ea2b26e0
JK		 4368 queue_work(priv->workqueue, &priv->abort_scan);
4369 }
4370
4371 IPW_DEBUG_NOTIF("Missed beacon: %d\n", missed_count);
ea2b26e0
JK		 4372}
4373
0b531676
DW		 4374static void ipw_scan_event(struct work_struct *work)
4375{
4376 union iwreq_data wrqu;
4377
4378 struct ipw_priv *priv =
4379 container_of(work, struct ipw_priv, scan_event.work);
4380
4381 wrqu.data.length = 0;
4382 wrqu.data.flags = 0;
4383 wireless_send_event(priv->net_dev, SIOCGIWSCAN, &wrqu, NULL);
4384}
4385
4386static void handle_scan_event(struct ipw_priv *priv)
4387{
4388 /* Only userspace-requested scan completion events go out immediately */
4389 if (!priv->user_requested_scan) {
4390 if (!delayed_work_pending(&priv->scan_event))
4391 queue_delayed_work(priv->workqueue, &priv->scan_event,
be84e3d6 4392 round_jiffies_relative(msecs_to_jiffies(4000)));
0b531676
DW		 4393 } else {
4394 union iwreq_data wrqu;
4395
4396 priv->user_requested_scan = 0;
4397 cancel_delayed_work(&priv->scan_event);
4398
4399 wrqu.data.length = 0;
4400 wrqu.data.flags = 0;
4401 wireless_send_event(priv->net_dev, SIOCGIWSCAN, &wrqu, NULL);
4402 }
4403}
4404
43f66a6c
JK		 4405/**
4406 * Handle host notification packet.
4407 * Called from interrupt routine
4408 */
858119e1 4409static void ipw_rx_notification(struct ipw_priv *priv,
43f66a6c
JK		 4410 struct ipw_rx_notification *notif)
4411{
9387b7ca 4412 DECLARE_SSID_BUF(ssid);
e62e1ee0 4413 u16 size = le16_to_cpu(notif->size);
a613bffd
JK		 4414 notif->size = le16_to_cpu(notif->size);
4415
e62e1ee0 4416 IPW_DEBUG_NOTIF("type = %i (%d bytes)\n", notif->subtype, size);
bf79451e 4417
43f66a6c 4418 switch (notif->subtype) {
0edd5b44
JG		 4419 case HOST_NOTIFICATION_STATUS_ASSOCIATED:{
4420 struct notif_association *assoc = &notif->u.assoc;
4421
4422 switch (assoc->state) {
4423 case CMAS_ASSOCIATED:{
4424 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4425 IPW_DL_ASSOC,
e174961c 4426 "associated: '%s' %pM \n",
9387b7ca
JL		 4427 print_ssid(ssid, priv->essid,
4428 priv->essid_len),
e174961c 4429 priv->bssid);
0edd5b44
JG		 4430
4431 switch (priv->ieee->iw_mode) {
4432 case IW_MODE_INFRA:
4433 memcpy(priv->ieee->bssid,
4434 priv->bssid, ETH_ALEN);
4435 break;
4436
4437 case IW_MODE_ADHOC:
4438 memcpy(priv->ieee->bssid,
4439 priv->bssid, ETH_ALEN);
4440
4441 /* clear out the station table */
4442 priv->num_stations = 0;
4443
4444 IPW_DEBUG_ASSOC
4445 ("queueing adhoc check\n");
4446 queue_delayed_work(priv->
4447 workqueue,
4448 &priv->
4449 adhoc_check,
5b5e807f 4450 le16_to_cpu(priv->
0edd5b44 4451 assoc_request.
5b5e807f 4452 beacon_interval));
0edd5b44
JG		 4453 break;
4454 }
4455
4456 priv->status &= ~STATUS_ASSOCIATING;
4457 priv->status |= STATUS_ASSOCIATED;
d8bad6df
ZY		 4458 queue_work(priv->workqueue,
4459 &priv->system_config);
0edd5b44 4460
e43e3c1e 4461#ifdef CONFIG_IPW2200_QOS
afbf30a2 4462#define IPW_GET_PACKET_STYPE(x) WLAN_FC_GET_STYPE( \
72118015 4463 le16_to_cpu(((struct ieee80211_hdr *)(x))->frame_control))
afbf30a2
JK		 4464 if ((priv->status & STATUS_AUTH) &&
4465 (IPW_GET_PACKET_STYPE(&notif->u.raw)
4466 == IEEE80211_STYPE_ASSOC_RESP)) {
b095c381
JK		 4467 if ((sizeof
4468 (struct
2b184d5b 4469 ieee80211_assoc_response)
e62e1ee0
AV		 4470 <= size)
4471 && (size <= 2314)) {
b095c381
JK		 4472 struct
4473 ieee80211_rx_stats
4474 stats = {
e62e1ee0 4475 .len = size - 1,
b095c381
JK		 4476 };
4477
4478 IPW_DEBUG_QOS
4479 ("QoS Associate "
e62e1ee0 4480 "size %d\n", size);
b095c381
JK		 4481 ieee80211_rx_mgt(priv->
4482 ieee,
4483 (struct
2b184d5b 4484 ieee80211_hdr_4addr
b095c381
JK		 4485 *)
4486 &notif->u.raw, &stats);
4487 }
0edd5b44 4488 }
b095c381 4489#endif
0edd5b44 4490
a613bffd 4491 schedule_work(&priv->link_up);
43f66a6c 4492
0edd5b44
JG		 4493 break;
4494 }
bf79451e 4495
0edd5b44
JG		 4496 case CMAS_AUTHENTICATED:{
4497 if (priv->
4498 status & (STATUS_ASSOCIATED |
4499 STATUS_AUTH)) {
0edd5b44
JG		 4500 struct notif_authenticate *auth
4501 = &notif->u.auth;
4502 IPW_DEBUG(IPW_DL_NOTIF |
4503 IPW_DL_STATE |
4504 IPW_DL_ASSOC,
4505 "deauthenticated: '%s' "
e174961c 4506 "%pM"
0edd5b44 4507 ": (0x%04X) - %s \n",
9387b7ca
JL		 4508 print_ssid(ssid,
4509 priv->
4510 essid,
4511 priv->
4512 essid_len),
e174961c 4513 priv->bssid,
83f7d57c 4514 le16_to_cpu(auth->status),
0edd5b44 4515 ipw_get_status_code
83f7d57c 4516 (le16_to_cpu
0edd5b44 4517 (auth->status)));
43f66a6c 4518
0edd5b44
JG		 4519 priv->status &=
4520 ~(STATUS_ASSOCIATING |
4521 STATUS_AUTH |
4522 STATUS_ASSOCIATED);
4523
a613bffd 4524 schedule_work(&priv->link_down);
0edd5b44
JG		 4525 break;
4526 }
4527
4528 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4529 IPW_DL_ASSOC,
e174961c 4530 "authenticated: '%s' %pM\n",
9387b7ca
JL		 4531 print_ssid(ssid, priv->essid,
4532 priv->essid_len),
e174961c 4533 priv->bssid);
0edd5b44
JG		 4534 break;
4535 }
4536
4537 case CMAS_INIT:{
ea2b26e0
JK		 4538 if (priv->status & STATUS_AUTH) {
4539 struct
4540 ieee80211_assoc_response
4541 *resp;
4542 resp =
4543 (struct
4544 ieee80211_assoc_response
4545 *)&notif->u.raw;
4546 IPW_DEBUG(IPW_DL_NOTIF |
4547 IPW_DL_STATE |
4548 IPW_DL_ASSOC,
4549 "association failed (0x%04X): %s\n",
83f7d57c 4550 le16_to_cpu(resp->status),
ea2b26e0 4551 ipw_get_status_code
83f7d57c 4552 (le16_to_cpu
ea2b26e0
JK		 4553 (resp->status)));
4554 }
4555
0edd5b44
JG		 4556 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4557 IPW_DL_ASSOC,
e174961c 4558 "disassociated: '%s' %pM \n",
9387b7ca
JL		 4559 print_ssid(ssid, priv->essid,
4560 priv->essid_len),
e174961c 4561 priv->bssid);
0edd5b44
JG		 4562
4563 priv->status &=
4564 ~(STATUS_DISASSOCIATING |
4565 STATUS_ASSOCIATING |
4566 STATUS_ASSOCIATED | STATUS_AUTH);
b095c381
JK		 4567 if (priv->assoc_network
4568 && (priv->assoc_network->
4569 capability &
4570 WLAN_CAPABILITY_IBSS))
4571 ipw_remove_current_network
4572 (priv);
0edd5b44 4573
a613bffd 4574 schedule_work(&priv->link_down);
0edd5b44 4575
0edd5b44
JG		 4576 break;
4577 }
43f66a6c 4578
b095c381
JK		 4579 case CMAS_RX_ASSOC_RESP:
4580 break;
4581
0edd5b44
JG		 4582 default:
4583 IPW_ERROR("assoc: unknown (%d)\n",
4584 assoc->state);
43f66a6c 4585 break;
bf79451e 4586 }
43f66a6c 4587
43f66a6c
JK		 4588 break;
4589 }
bf79451e 4590
0edd5b44
JG		 4591 case HOST_NOTIFICATION_STATUS_AUTHENTICATE:{
4592 struct notif_authenticate *auth = &notif->u.auth;
4593 switch (auth->state) {
4594 case CMAS_AUTHENTICATED:
4595 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
e174961c 4596 "authenticated: '%s' %pM \n",
9387b7ca
JL		 4597 print_ssid(ssid, priv->essid,
4598 priv->essid_len),
e174961c 4599 priv->bssid);
0edd5b44
JG		 4600 priv->status |= STATUS_AUTH;
4601 break;
43f66a6c 4602
0edd5b44
JG		 4603 case CMAS_INIT:
4604 if (priv->status & STATUS_AUTH) {
4605 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4606 IPW_DL_ASSOC,
4607 "authentication failed (0x%04X): %s\n",
83f7d57c
AV		 4608 le16_to_cpu(auth->status),
4609 ipw_get_status_code(le16_to_cpu
0edd5b44
JG		 4610 (auth->
4611 status)));
4612 }
4613 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4614 IPW_DL_ASSOC,
e174961c 4615 "deauthenticated: '%s' %pM\n",
9387b7ca
JL		 4616 print_ssid(ssid, priv->essid,
4617 priv->essid_len),
e174961c 4618 priv->bssid);
bf79451e 4619
0edd5b44
JG		 4620 priv->status &= ~(STATUS_ASSOCIATING |
4621 STATUS_AUTH |
4622 STATUS_ASSOCIATED);
43f66a6c 4623
a613bffd 4624 schedule_work(&priv->link_down);
0edd5b44 4625 break;
43f66a6c 4626
0edd5b44
JG		 4627 case CMAS_TX_AUTH_SEQ_1:
4628 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4629 IPW_DL_ASSOC, "AUTH_SEQ_1\n");
4630 break;
4631 case CMAS_RX_AUTH_SEQ_2:
4632 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4633 IPW_DL_ASSOC, "AUTH_SEQ_2\n");
4634 break;
4635 case CMAS_AUTH_SEQ_1_PASS:
4636 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4637 IPW_DL_ASSOC, "AUTH_SEQ_1_PASS\n");
4638 break;
4639 case CMAS_AUTH_SEQ_1_FAIL:
4640 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4641 IPW_DL_ASSOC, "AUTH_SEQ_1_FAIL\n");
4642 break;
4643 case CMAS_TX_AUTH_SEQ_3:
4644 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4645 IPW_DL_ASSOC, "AUTH_SEQ_3\n");
4646 break;
4647 case CMAS_RX_AUTH_SEQ_4:
4648 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4649 IPW_DL_ASSOC, "RX_AUTH_SEQ_4\n");
4650 break;
4651 case CMAS_AUTH_SEQ_2_PASS:
4652 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4653 IPW_DL_ASSOC, "AUTH_SEQ_2_PASS\n");
4654 break;
4655 case CMAS_AUTH_SEQ_2_FAIL:
4656 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4657 IPW_DL_ASSOC, "AUT_SEQ_2_FAIL\n");
4658 break;
4659 case CMAS_TX_ASSOC:
4660 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4661 IPW_DL_ASSOC, "TX_ASSOC\n");
4662 break;
4663 case CMAS_RX_ASSOC_RESP:
4664 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4665 IPW_DL_ASSOC, "RX_ASSOC_RESP\n");
b095c381 4666
0edd5b44
JG		 4667 break;
4668 case CMAS_ASSOCIATED:
4669 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4670 IPW_DL_ASSOC, "ASSOCIATED\n");
4671 break;
4672 default:
4673 IPW_DEBUG_NOTIF("auth: failure - %d\n",
4674 auth->state);
4675 break;
43f66a6c 4676 }
43f66a6c
JK		 4677 break;
4678 }
4679
0edd5b44
JG		 4680 case HOST_NOTIFICATION_STATUS_SCAN_CHANNEL_RESULT:{
4681 struct notif_channel_result *x =
4682 &notif->u.channel_result;
43f66a6c 4683
e62e1ee0 4684 if (size == sizeof(*x)) {
0edd5b44
JG		 4685 IPW_DEBUG_SCAN("Scan result for channel %d\n",
4686 x->channel_num);
4687 } else {
4688 IPW_DEBUG_SCAN("Scan result of wrong size %d "
4689 "(should be %zd)\n",
e62e1ee0 4690 size, sizeof(*x));
bf79451e 4691 }
43f66a6c
JK		 4692 break;
4693 }
43f66a6c 4694
0edd5b44
JG		 4695 case HOST_NOTIFICATION_STATUS_SCAN_COMPLETED:{
4696 struct notif_scan_complete *x = &notif->u.scan_complete;
e62e1ee0 4697 if (size == sizeof(*x)) {
0edd5b44
JG		 4698 IPW_DEBUG_SCAN
4699 ("Scan completed: type %d, %d channels, "
4700 "%d status\n", x->scan_type,
4701 x->num_channels, x->status);
4702 } else {
4703 IPW_ERROR("Scan completed of wrong size %d "
4704 "(should be %zd)\n",
e62e1ee0 4705 size, sizeof(*x));
0edd5b44 4706 }
43f66a6c 4707
0edd5b44
JG		 4708 priv->status &=
4709 ~(STATUS_SCANNING | STATUS_SCAN_ABORTING);
4710
a0e04ab3 4711 wake_up_interruptible(&priv->wait_state);
0edd5b44
JG		 4712 cancel_delayed_work(&priv->scan_check);
4713
b095c381
JK		 4714 if (priv->status & STATUS_EXIT_PENDING)
4715 break;
4716
4717 priv->ieee->scans++;
4718
4719#ifdef CONFIG_IPW2200_MONITOR
4720 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 4721 priv->status |= STATUS_SCAN_FORCED;
c4028958
DH		 4722 queue_delayed_work(priv->workqueue,
4723 &priv->request_scan, 0);
b095c381
JK		 4724 break;
4725 }
afbf30a2 4726 priv->status &= ~STATUS_SCAN_FORCED;
b095c381
JK		 4727#endif /* CONFIG_IPW2200_MONITOR */
4728
ea177305
DW		 4729 /* Do queued direct scans first */
4730 if (priv->status & STATUS_DIRECT_SCAN_PENDING) {
4731 queue_delayed_work(priv->workqueue,
4732 &priv->request_direct_scan, 0);
4733 }
4734
0edd5b44
JG		 4735 if (!(priv->status & (STATUS_ASSOCIATED |
4736 STATUS_ASSOCIATING |
4737 STATUS_ROAMING |
4738 STATUS_DISASSOCIATING)))
4739 queue_work(priv->workqueue, &priv->associate);
4740 else if (priv->status & STATUS_ROAMING) {
e7582561
BC		 4741 if (x->status == SCAN_COMPLETED_STATUS_COMPLETE)
4742 /* If a scan completed and we are in roam mode, then
4743 * the scan that completed was the one requested as a
4744 * result of entering roam... so, schedule the
4745 * roam work */
4746 queue_work(priv->workqueue,
4747 &priv->roam);
4748 else
4749 /* Don't schedule if we aborted the scan */
4750 priv->status &= ~STATUS_ROAMING;
0edd5b44 4751 } else if (priv->status & STATUS_SCAN_PENDING)
c4028958
DH		 4752 queue_delayed_work(priv->workqueue,
4753 &priv->request_scan, 0);
a613bffd
JK		 4754 else if (priv->config & CFG_BACKGROUND_SCAN
4755 && priv->status & STATUS_ASSOCIATED)
4756 queue_delayed_work(priv->workqueue,
1c9d5e41 4757 &priv->request_scan,
be84e3d6 4758 round_jiffies_relative(HZ));
07f02e46
ZY		 4759
4760 /* Send an empty event to user space.
4761 * We don't send the received data on the event because
4762 * it would require us to do complex transcoding, and
4763 * we want to minimise the work done in the irq handler
4764 * Use a request to extract the data.
4765 * Also, we generate this even for any scan, regardless
4766 * on how the scan was initiated. User space can just
4767 * sync on periodic scan to get fresh data...
4768 * Jean II */
0b531676
DW		 4769 if (x->status == SCAN_COMPLETED_STATUS_COMPLETE)
4770 handle_scan_event(priv);
0edd5b44 4771 break;
43f66a6c 4772 }
43f66a6c 4773
0edd5b44
JG		 4774 case HOST_NOTIFICATION_STATUS_FRAG_LENGTH:{
4775 struct notif_frag_length *x = &notif->u.frag_len;
43f66a6c 4776
e62e1ee0 4777 if (size == sizeof(*x))
a613bffd
JK		 4778 IPW_ERROR("Frag length: %d\n",
4779 le16_to_cpu(x->frag_length));
4780 else
0edd5b44
JG		 4781 IPW_ERROR("Frag length of wrong size %d "
4782 "(should be %zd)\n",
e62e1ee0 4783 size, sizeof(*x));
0edd5b44 4784 break;
43f66a6c 4785 }
43f66a6c 4786
0edd5b44
JG		 4787 case HOST_NOTIFICATION_STATUS_LINK_DETERIORATION:{
4788 struct notif_link_deterioration *x =
4789 &notif->u.link_deterioration;
afbf30a2 4790
e62e1ee0 4791 if (size == sizeof(*x)) {
0edd5b44 4792 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
12977154
BC		 4793 "link deterioration: type %d, cnt %d\n",
4794 x->silence_notification_type,
4795 x->silence_count);
0edd5b44
JG		 4796 memcpy(&priv->last_link_deterioration, x,
4797 sizeof(*x));
4798 } else {
4799 IPW_ERROR("Link Deterioration of wrong size %d "
4800 "(should be %zd)\n",
e62e1ee0 4801 size, sizeof(*x));
0edd5b44 4802 }
43f66a6c
JK		 4803 break;
4804 }
4805
0edd5b44
JG		 4806 case HOST_NOTIFICATION_DINO_CONFIG_RESPONSE:{
4807 IPW_ERROR("Dino config\n");
4808 if (priv->hcmd
a613bffd 4809 && priv->hcmd->cmd != HOST_CMD_DINO_CONFIG)
0edd5b44 4810 IPW_ERROR("Unexpected DINO_CONFIG_RESPONSE\n");
a613bffd 4811
0edd5b44
JG		 4812 break;
4813 }
43f66a6c 4814
0edd5b44
JG		 4815 case HOST_NOTIFICATION_STATUS_BEACON_STATE:{
4816 struct notif_beacon_state *x = &notif->u.beacon_state;
e62e1ee0 4817 if (size != sizeof(*x)) {
0edd5b44
JG		 4818 IPW_ERROR
4819 ("Beacon state of wrong size %d (should "
e62e1ee0 4820 "be %zd)\n", size, sizeof(*x));
0edd5b44 4821 break;
43f66a6c
JK		 4822 }
4823
a613bffd
JK		 4824 if (le32_to_cpu(x->state) ==
4825 HOST_NOTIFICATION_STATUS_BEACON_MISSING)
4826 ipw_handle_missed_beacon(priv,
4827 le32_to_cpu(x->
4828 number));
43f66a6c 4829
0edd5b44
JG		 4830 break;
4831 }
43f66a6c 4832
0edd5b44
JG		 4833 case HOST_NOTIFICATION_STATUS_TGI_TX_KEY:{
4834 struct notif_tgi_tx_key *x = &notif->u.tgi_tx_key;
e62e1ee0 4835 if (size == sizeof(*x)) {
0edd5b44
JG		 4836 IPW_ERROR("TGi Tx Key: state 0x%02x sec type "
4837 "0x%02x station %d\n",
4838 x->key_state, x->security_type,
4839 x->station_index);
4840 break;
4841 }
43f66a6c 4842
0edd5b44
JG		 4843 IPW_ERROR
4844 ("TGi Tx Key of wrong size %d (should be %zd)\n",
e62e1ee0 4845 size, sizeof(*x));
43f66a6c 4846 break;
bf79451e 4847 }
43f66a6c 4848
0edd5b44
JG		 4849 case HOST_NOTIFICATION_CALIB_KEEP_RESULTS:{
4850 struct notif_calibration *x = &notif->u.calibration;
43f66a6c 4851
e62e1ee0 4852 if (size == sizeof(*x)) {
0edd5b44
JG		 4853 memcpy(&priv->calib, x, sizeof(*x));
4854 IPW_DEBUG_INFO("TODO: Calibration\n");
4855 break;
4856 }
43f66a6c 4857
0edd5b44
JG		 4858 IPW_ERROR
4859 ("Calibration of wrong size %d (should be %zd)\n",
e62e1ee0 4860 size, sizeof(*x));
43f66a6c 4861 break;
bf79451e
JG		 4862 }
4863
0edd5b44 4864 case HOST_NOTIFICATION_NOISE_STATS:{
e62e1ee0 4865 if (size == sizeof(u32)) {
00d21de5
ZY		 4866 priv->exp_avg_noise =
4867 exponential_average(priv->exp_avg_noise,
4868 (u8) (le32_to_cpu(notif->u.noise.value) & 0xff),
4869 DEPTH_NOISE);
0edd5b44
JG		 4870 break;
4871 }
43f66a6c 4872
0edd5b44
JG		 4873 IPW_ERROR
4874 ("Noise stat is wrong size %d (should be %zd)\n",
e62e1ee0 4875 size, sizeof(u32));
43f66a6c
JK		 4876 break;
4877 }
4878
43f66a6c 4879 default:
1dd31b6c
ZY		 4880 IPW_DEBUG_NOTIF("Unknown notification: "
4881 "subtype=%d,flags=0x%2x,size=%d\n",
e62e1ee0 4882 notif->subtype, notif->flags, size);
43f66a6c
JK		 4883 }
4884}
4885
4886/**
4887 * Destroys all DMA structures and initialise them again
bf79451e 4888 *
43f66a6c
JK		 4889 * @param priv
4890 * @return error code
4891 */
4892static int ipw_queue_reset(struct ipw_priv *priv)
4893{
4894 int rc = 0;
4895 /** @todo customize queue sizes */
4896 int nTx = 64, nTxCmd = 8;
4897 ipw_tx_queue_free(priv);
4898 /* Tx CMD queue */
4899 rc = ipw_queue_tx_init(priv, &priv->txq_cmd, nTxCmd,
b095c381
JK		 4900 IPW_TX_CMD_QUEUE_READ_INDEX,
4901 IPW_TX_CMD_QUEUE_WRITE_INDEX,
4902 IPW_TX_CMD_QUEUE_BD_BASE,
4903 IPW_TX_CMD_QUEUE_BD_SIZE);
43f66a6c
JK		 4904 if (rc) {
4905 IPW_ERROR("Tx Cmd queue init failed\n");
4906 goto error;
4907 }
4908 /* Tx queue(s) */
4909 rc = ipw_queue_tx_init(priv, &priv->txq[0], nTx,
b095c381
JK		 4910 IPW_TX_QUEUE_0_READ_INDEX,
4911 IPW_TX_QUEUE_0_WRITE_INDEX,
4912 IPW_TX_QUEUE_0_BD_BASE, IPW_TX_QUEUE_0_BD_SIZE);
43f66a6c
JK		 4913 if (rc) {
4914 IPW_ERROR("Tx 0 queue init failed\n");
4915 goto error;
4916 }
4917 rc = ipw_queue_tx_init(priv, &priv->txq[1], nTx,
b095c381
JK		 4918 IPW_TX_QUEUE_1_READ_INDEX,
4919 IPW_TX_QUEUE_1_WRITE_INDEX,
4920 IPW_TX_QUEUE_1_BD_BASE, IPW_TX_QUEUE_1_BD_SIZE);
43f66a6c
JK		 4921 if (rc) {
4922 IPW_ERROR("Tx 1 queue init failed\n");
4923 goto error;
4924 }
4925 rc = ipw_queue_tx_init(priv, &priv->txq[2], nTx,
b095c381
JK		 4926 IPW_TX_QUEUE_2_READ_INDEX,
4927 IPW_TX_QUEUE_2_WRITE_INDEX,
4928 IPW_TX_QUEUE_2_BD_BASE, IPW_TX_QUEUE_2_BD_SIZE);
43f66a6c
JK		 4929 if (rc) {
4930 IPW_ERROR("Tx 2 queue init failed\n");
4931 goto error;
4932 }
4933 rc = ipw_queue_tx_init(priv, &priv->txq[3], nTx,
b095c381
JK		 4934 IPW_TX_QUEUE_3_READ_INDEX,
4935 IPW_TX_QUEUE_3_WRITE_INDEX,
4936 IPW_TX_QUEUE_3_BD_BASE, IPW_TX_QUEUE_3_BD_SIZE);
43f66a6c
JK		 4937 if (rc) {
4938 IPW_ERROR("Tx 3 queue init failed\n");
4939 goto error;
4940 }
4941 /* statistics */
4942 priv->rx_bufs_min = 0;
4943 priv->rx_pend_max = 0;
4944 return rc;
4945
0edd5b44 4946 error:
43f66a6c
JK		 4947 ipw_tx_queue_free(priv);
4948 return rc;
4949}
4950
4951/**
4952 * Reclaim Tx queue entries no more used by NIC.
bf79451e 4953 *
8ff9d21e 4954 * When FW advances 'R' index, all entries between old and
43f66a6c
JK		 4955 * new 'R' index need to be reclaimed. As result, some free space
4956 * forms. If there is enough free space (> low mark), wake Tx queue.
bf79451e 4957 *
43f66a6c
JK		 4958 * @note Need to protect against garbage in 'R' index
4959 * @param priv
4960 * @param txq
4961 * @param qindex
4962 * @return Number of used entries remains in the queue
4963 */
bf79451e 4964static int ipw_queue_tx_reclaim(struct ipw_priv *priv,
43f66a6c
JK		 4965 struct clx2_tx_queue *txq, int qindex)
4966{
4967 u32 hw_tail;
4968 int used;
4969 struct clx2_queue *q = &txq->q;
4970
4971 hw_tail = ipw_read32(priv, q->reg_r);
4972 if (hw_tail >= q->n_bd) {
4973 IPW_ERROR
0edd5b44
JG		 4974 ("Read index for DMA queue (%d) is out of range [0-%d)\n",
4975 hw_tail, q->n_bd);
43f66a6c
JK		 4976 goto done;
4977 }
4978 for (; q->last_used != hw_tail;
4979 q->last_used = ipw_queue_inc_wrap(q->last_used, q->n_bd)) {
4980 ipw_queue_tx_free_tfd(priv, txq);
4981 priv->tx_packets++;
4982 }
0edd5b44 4983 done:
943dbef4 4984 if ((ipw_tx_queue_space(q) > q->low_mark) &&
521c4d96 4985 (qindex >= 0))
9ddf84f6 4986 netif_wake_queue(priv->net_dev);
43f66a6c
JK		 4987 used = q->first_empty - q->last_used;
4988 if (used < 0)
4989 used += q->n_bd;
4990
4991 return used;
4992}
4993
4994static int ipw_queue_tx_hcmd(struct ipw_priv *priv, int hcmd, void *buf,
4995 int len, int sync)
4996{
4997 struct clx2_tx_queue *txq = &priv->txq_cmd;
4998 struct clx2_queue *q = &txq->q;
4999 struct tfd_frame *tfd;
5000
943dbef4 5001 if (ipw_tx_queue_space(q) < (sync ? 1 : 2)) {
43f66a6c
JK		 5002 IPW_ERROR("No space for Tx\n");
5003 return -EBUSY;
5004 }
5005
5006 tfd = &txq->bd[q->first_empty];
5007 txq->txb[q->first_empty] = NULL;
5008
5009 memset(tfd, 0, sizeof(*tfd));
5010 tfd->control_flags.message_type = TX_HOST_COMMAND_TYPE;
5011 tfd->control_flags.control_bits = TFD_NEED_IRQ_MASK;
5012 priv->hcmd_seq++;
5013 tfd->u.cmd.index = hcmd;
5014 tfd->u.cmd.length = len;
5015 memcpy(tfd->u.cmd.payload, buf, len);
5016 q->first_empty = ipw_queue_inc_wrap(q->first_empty, q->n_bd);
5017 ipw_write32(priv, q->reg_w, q->first_empty);
5018 _ipw_read32(priv, 0x90);
5019
5020 return 0;
5021}
5022
bf79451e 5023/*
43f66a6c
JK		 5024 * Rx theory of operation
5025 *
5026 * The host allocates 32 DMA target addresses and passes the host address
b095c381 5027 * to the firmware at register IPW_RFDS_TABLE_LOWER + N * RFD_SIZE where N is
43f66a6c
JK		 5028 * 0 to 31
5029 *
5030 * Rx Queue Indexes
5031 * The host/firmware share two index registers for managing the Rx buffers.
5032 *
bf79451e
JG		 5033 * The READ index maps to the first position that the firmware may be writing
5034 * to -- the driver can read up to (but not including) this position and get
5035 * good data.
43f66a6c
JK		 5036 * The READ index is managed by the firmware once the card is enabled.
5037 *
5038 * The WRITE index maps to the last position the driver has read from -- the
5039 * position preceding WRITE is the last slot the firmware can place a packet.
5040 *
5041 * The queue is empty (no good data) if WRITE = READ - 1, and is full if
bf79451e 5042 * WRITE = READ.
43f66a6c 5043 *
bf79451e 5044 * During initialization the host sets up the READ queue position to the first
43f66a6c
JK		 5045 * INDEX position, and WRITE to the last (READ - 1 wrapped)
5046 *
5047 * When the firmware places a packet in a buffer it will advance the READ index
5048 * and fire the RX interrupt. The driver can then query the READ index and
5049 * process as many packets as possible, moving the WRITE index forward as it
5050 * resets the Rx queue buffers with new memory.
bf79451e 5051 *
43f66a6c 5052 * The management in the driver is as follows:
bf79451e 5053 * + A list of pre-allocated SKBs is stored in ipw->rxq->rx_free. When
43f66a6c 5054 * ipw->rxq->free_count drops to or below RX_LOW_WATERMARK, work is scheduled
bf79451e 5055 * to replensish the ipw->rxq->rx_free.
43f66a6c
JK		 5056 * + In ipw_rx_queue_replenish (scheduled) if 'processed' != 'read' then the
5057 * ipw->rxq is replenished and the READ INDEX is updated (updating the
5058 * 'processed' and 'read' driver indexes as well)
5059 * + A received packet is processed and handed to the kernel network stack,
5060 * detached from the ipw->rxq. The driver 'processed' index is updated.
5061 * + The Host/Firmware ipw->rxq is replenished at tasklet time from the rx_free
bf79451e
JG		 5062 * list. If there are no allocated buffers in ipw->rxq->rx_free, the READ
5063 * INDEX is not incremented and ipw->status(RX_STALLED) is set. If there
43f66a6c
JK		 5064 * were enough free buffers and RX_STALLED is set it is cleared.
5065 *
5066 *
5067 * Driver sequence:
5068 *
bf79451e 5069 * ipw_rx_queue_alloc() Allocates rx_free
43f66a6c
JK		 5070 * ipw_rx_queue_replenish() Replenishes rx_free list from rx_used, and calls
5071 * ipw_rx_queue_restock
5072 * ipw_rx_queue_restock() Moves available buffers from rx_free into Rx
5073 * queue, updates firmware pointers, and updates
5074 * the WRITE index. If insufficient rx_free buffers
5075 * are available, schedules ipw_rx_queue_replenish
5076 *
5077 * -- enable interrupts --
5078 * ISR - ipw_rx() Detach ipw_rx_mem_buffers from pool up to the
bf79451e 5079 * READ INDEX, detaching the SKB from the pool.
43f66a6c
JK		 5080 * Moves the packet buffer from queue to rx_used.
5081 * Calls ipw_rx_queue_restock to refill any empty
5082 * slots.
5083 * ...
5084 *
5085 */
5086
bf79451e 5087/*
43f66a6c
JK		 5088 * If there are slots in the RX queue that need to be restocked,
5089 * and we have free pre-allocated buffers, fill the ranks as much
5090 * as we can pulling from rx_free.
5091 *
5092 * This moves the 'write' index forward to catch up with 'processed', and
5093 * also updates the memory address in the firmware to reference the new
5094 * target buffer.
5095 */
5096static void ipw_rx_queue_restock(struct ipw_priv *priv)
5097{
5098 struct ipw_rx_queue *rxq = priv->rxq;
5099 struct list_head *element;
5100 struct ipw_rx_mem_buffer *rxb;
5101 unsigned long flags;
5102 int write;
5103
5104 spin_lock_irqsave(&rxq->lock, flags);
5105 write = rxq->write;
943dbef4 5106 while ((ipw_rx_queue_space(rxq) > 0) && (rxq->free_count)) {
43f66a6c
JK		 5107 element = rxq->rx_free.next;
5108 rxb = list_entry(element, struct ipw_rx_mem_buffer, list);
5109 list_del(element);
5110
b095c381 5111 ipw_write32(priv, IPW_RFDS_TABLE_LOWER + rxq->write * RFD_SIZE,
43f66a6c
JK		 5112 rxb->dma_addr);
5113 rxq->queue[rxq->write] = rxb;
5114 rxq->write = (rxq->write + 1) % RX_QUEUE_SIZE;
5115 rxq->free_count--;
5116 }
5117 spin_unlock_irqrestore(&rxq->lock, flags);
5118
bf79451e 5119 /* If the pre-allocated buffer pool is dropping low, schedule to
43f66a6c
JK		 5120 * refill it */
5121 if (rxq->free_count <= RX_LOW_WATERMARK)
5122 queue_work(priv->workqueue, &priv->rx_replenish);
5123
5124 /* If we've added more space for the firmware to place data, tell it */
bf79451e 5125 if (write != rxq->write)
b095c381 5126 ipw_write32(priv, IPW_RX_WRITE_INDEX, rxq->write);
43f66a6c
JK		 5127}
5128
5129/*
5130 * Move all used packet from rx_used to rx_free, allocating a new SKB for each.
bf79451e
JG		 5131 * Also restock the Rx queue via ipw_rx_queue_restock.
5132 *
43f66a6c
JK		 5133 * This is called as a scheduled work item (except for during intialization)
5134 */
5135static void ipw_rx_queue_replenish(void *data)
5136{
5137 struct ipw_priv *priv = data;
5138 struct ipw_rx_queue *rxq = priv->rxq;
5139 struct list_head *element;
5140 struct ipw_rx_mem_buffer *rxb;
5141 unsigned long flags;
5142
5143 spin_lock_irqsave(&rxq->lock, flags);
5144 while (!list_empty(&rxq->rx_used)) {
5145 element = rxq->rx_used.next;
5146 rxb = list_entry(element, struct ipw_rx_mem_buffer, list);
b095c381 5147 rxb->skb = alloc_skb(IPW_RX_BUF_SIZE, GFP_ATOMIC);
43f66a6c
JK		 5148 if (!rxb->skb) {
5149 printk(KERN_CRIT "%s: Can not allocate SKB buffers.\n",
5150 priv->net_dev->name);
5151 /* We don't reschedule replenish work here -- we will
5152 * call the restock method and if it still needs
5153 * more buffers it will schedule replenish */
5154 break;
5155 }
5156 list_del(element);
bf79451e 5157
0edd5b44
JG		 5158 rxb->dma_addr =
5159 pci_map_single(priv->pci_dev, rxb->skb->data,
b095c381 5160 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
bf79451e 5161
43f66a6c
JK		 5162 list_add_tail(&rxb->list, &rxq->rx_free);
5163 rxq->free_count++;
5164 }
5165 spin_unlock_irqrestore(&rxq->lock, flags);
5166
5167 ipw_rx_queue_restock(priv);
5168}
5169
c4028958 5170static void ipw_bg_rx_queue_replenish(struct work_struct *work)
c848d0af 5171{
c4028958
DH		 5172 struct ipw_priv *priv =
5173 container_of(work, struct ipw_priv, rx_replenish);
4644151b 5174 mutex_lock(&priv->mutex);
c4028958 5175 ipw_rx_queue_replenish(priv);
4644151b 5176 mutex_unlock(&priv->mutex);
c848d0af
JK		 5177}
5178
43f66a6c 5179/* Assumes that the skb field of the buffers in 'pool' is kept accurate.
c7b6a674 5180 * If an SKB has been detached, the POOL needs to have its SKB set to NULL
bf79451e 5181 * This free routine walks the list of POOL entries and if SKB is set to
43f66a6c
JK		 5182 * non NULL it is unmapped and freed
5183 */
0edd5b44 5184static void ipw_rx_queue_free(struct ipw_priv *priv, struct ipw_rx_queue *rxq)
43f66a6c
JK		 5185{
5186 int i;
5187
5188 if (!rxq)
5189 return;
bf79451e 5190
43f66a6c
JK		 5191 for (i = 0; i < RX_QUEUE_SIZE + RX_FREE_BUFFERS; i++) {
5192 if (rxq->pool[i].skb != NULL) {
5193 pci_unmap_single(priv->pci_dev, rxq->pool[i].dma_addr,
b095c381 5194 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c
JK		 5195 dev_kfree_skb(rxq->pool[i].skb);
5196 }
5197 }
5198
5199 kfree(rxq);
5200}
5201
5202static struct ipw_rx_queue *ipw_rx_queue_alloc(struct ipw_priv *priv)
5203{
5204 struct ipw_rx_queue *rxq;
5205 int i;
5206
c75f4742 5207 rxq = kzalloc(sizeof(*rxq), GFP_KERNEL);
ad18b0ea
PI		 5208 if (unlikely(!rxq)) {
5209 IPW_ERROR("memory allocation failed\n");
5210 return NULL;
5211 }
43f66a6c
JK		 5212 spin_lock_init(&rxq->lock);
5213 INIT_LIST_HEAD(&rxq->rx_free);
5214 INIT_LIST_HEAD(&rxq->rx_used);
5215
5216 /* Fill the rx_used queue with _all_ of the Rx buffers */
bf79451e 5217 for (i = 0; i < RX_FREE_BUFFERS + RX_QUEUE_SIZE; i++)
43f66a6c
JK		 5218 list_add_tail(&rxq->pool[i].list, &rxq->rx_used);
5219
5220 /* Set us so that we have processed and used all buffers, but have
5221 * not restocked the Rx queue with fresh buffers */
5222 rxq->read = rxq->write = 0;
43f66a6c
JK		 5223 rxq->free_count = 0;
5224
5225 return rxq;
5226}
5227
5228static int ipw_is_rate_in_mask(struct ipw_priv *priv, int ieee_mode, u8 rate)
5229{
5230 rate &= ~IEEE80211_BASIC_RATE_MASK;
5231 if (ieee_mode == IEEE_A) {
5232 switch (rate) {
bf79451e
JG		 5233 case IEEE80211_OFDM_RATE_6MB:
5234 return priv->rates_mask & IEEE80211_OFDM_RATE_6MB_MASK ?
0edd5b44 5235 1 : 0;
bf79451e
JG		 5236 case IEEE80211_OFDM_RATE_9MB:
5237 return priv->rates_mask & IEEE80211_OFDM_RATE_9MB_MASK ?
0edd5b44 5238 1 : 0;
bf79451e 5239 case IEEE80211_OFDM_RATE_12MB:
0edd5b44
JG		 5240 return priv->
5241 rates_mask & IEEE80211_OFDM_RATE_12MB_MASK ? 1 : 0;
bf79451e 5242 case IEEE80211_OFDM_RATE_18MB:
0edd5b44
JG		 5243 return priv->
5244 rates_mask & IEEE80211_OFDM_RATE_18MB_MASK ? 1 : 0;
bf79451e 5245 case IEEE80211_OFDM_RATE_24MB:
0edd5b44
JG		 5246 return priv->
5247 rates_mask & IEEE80211_OFDM_RATE_24MB_MASK ? 1 : 0;
bf79451e 5248 case IEEE80211_OFDM_RATE_36MB:
0edd5b44
JG		 5249 return priv->
5250 rates_mask & IEEE80211_OFDM_RATE_36MB_MASK ? 1 : 0;
bf79451e 5251 case IEEE80211_OFDM_RATE_48MB:
0edd5b44
JG		 5252 return priv->
5253 rates_mask & IEEE80211_OFDM_RATE_48MB_MASK ? 1 : 0;
bf79451e 5254 case IEEE80211_OFDM_RATE_54MB:
0edd5b44
JG		 5255 return priv->
5256 rates_mask & IEEE80211_OFDM_RATE_54MB_MASK ? 1 : 0;
43f66a6c
JK		 5257 default:
5258 return 0;
5259 }
5260 }
bf79451e 5261
43f66a6c
JK		 5262 /* B and G mixed */
5263 switch (rate) {
bf79451e 5264 case IEEE80211_CCK_RATE_1MB:
43f66a6c 5265 return priv->rates_mask & IEEE80211_CCK_RATE_1MB_MASK ? 1 : 0;
bf79451e 5266 case IEEE80211_CCK_RATE_2MB:
43f66a6c 5267 return priv->rates_mask & IEEE80211_CCK_RATE_2MB_MASK ? 1 : 0;
bf79451e 5268 case IEEE80211_CCK_RATE_5MB:
43f66a6c 5269 return priv->rates_mask & IEEE80211_CCK_RATE_5MB_MASK ? 1 : 0;
bf79451e 5270 case IEEE80211_CCK_RATE_11MB:
43f66a6c
JK		 5271 return priv->rates_mask & IEEE80211_CCK_RATE_11MB_MASK ? 1 : 0;
5272 }
5273
5274 /* If we are limited to B modulations, bail at this point */
5275 if (ieee_mode == IEEE_B)
5276 return 0;
5277
5278 /* G */
5279 switch (rate) {
bf79451e 5280 case IEEE80211_OFDM_RATE_6MB:
43f66a6c 5281 return priv->rates_mask & IEEE80211_OFDM_RATE_6MB_MASK ? 1 : 0;
bf79451e 5282 case IEEE80211_OFDM_RATE_9MB:
43f66a6c 5283 return priv->rates_mask & IEEE80211_OFDM_RATE_9MB_MASK ? 1 : 0;
bf79451e 5284 case IEEE80211_OFDM_RATE_12MB:
43f66a6c 5285 return priv->rates_mask & IEEE80211_OFDM_RATE_12MB_MASK ? 1 : 0;
bf79451e 5286 case IEEE80211_OFDM_RATE_18MB:
43f66a6c 5287 return priv->rates_mask & IEEE80211_OFDM_RATE_18MB_MASK ? 1 : 0;
bf79451e 5288 case IEEE80211_OFDM_RATE_24MB:
43f66a6c 5289 return priv->rates_mask & IEEE80211_OFDM_RATE_24MB_MASK ? 1 : 0;
bf79451e 5290 case IEEE80211_OFDM_RATE_36MB:
43f66a6c 5291 return priv->rates_mask & IEEE80211_OFDM_RATE_36MB_MASK ? 1 : 0;
bf79451e 5292 case IEEE80211_OFDM_RATE_48MB:
43f66a6c 5293 return priv->rates_mask & IEEE80211_OFDM_RATE_48MB_MASK ? 1 : 0;
bf79451e 5294 case IEEE80211_OFDM_RATE_54MB:
43f66a6c
JK		 5295 return priv->rates_mask & IEEE80211_OFDM_RATE_54MB_MASK ? 1 : 0;
5296 }
5297
5298 return 0;
5299}
5300
bf79451e 5301static int ipw_compatible_rates(struct ipw_priv *priv,
43f66a6c
JK		 5302 const struct ieee80211_network *network,
5303 struct ipw_supported_rates *rates)
5304{
5305 int num_rates, i;
5306
5307 memset(rates, 0, sizeof(*rates));
0edd5b44 5308 num_rates = min(network->rates_len, (u8) IPW_MAX_RATES);
43f66a6c
JK		 5309 rates->num_rates = 0;
5310 for (i = 0; i < num_rates; i++) {
a613bffd
JK		 5311 if (!ipw_is_rate_in_mask(priv, network->mode,
5312 network->rates[i])) {
5313
ea2b26e0 5314 if (network->rates[i] & IEEE80211_BASIC_RATE_MASK) {
a613bffd
JK		 5315 IPW_DEBUG_SCAN("Adding masked mandatory "
5316 "rate %02X\n",
5317 network->rates[i]);
5318 rates->supported_rates[rates->num_rates++] =
5319 network->rates[i];
5320 continue;
ea2b26e0
JK		 5321 }
5322
43f66a6c
JK		 5323 IPW_DEBUG_SCAN("Rate %02X masked : 0x%08X\n",
5324 network->rates[i], priv->rates_mask);
5325 continue;
5326 }
bf79451e 5327
43f66a6c
JK		 5328 rates->supported_rates[rates->num_rates++] = network->rates[i];
5329 }
5330
a613bffd
JK		 5331 num_rates = min(network->rates_ex_len,
5332 (u8) (IPW_MAX_RATES - num_rates));
43f66a6c 5333 for (i = 0; i < num_rates; i++) {
a613bffd
JK		 5334 if (!ipw_is_rate_in_mask(priv, network->mode,
5335 network->rates_ex[i])) {
ea2b26e0 5336 if (network->rates_ex[i] & IEEE80211_BASIC_RATE_MASK) {
a613bffd
JK		 5337 IPW_DEBUG_SCAN("Adding masked mandatory "
5338 "rate %02X\n",
5339 network->rates_ex[i]);
5340 rates->supported_rates[rates->num_rates++] =
5341 network->rates[i];
5342 continue;
ea2b26e0
JK		 5343 }
5344
43f66a6c
JK		 5345 IPW_DEBUG_SCAN("Rate %02X masked : 0x%08X\n",
5346 network->rates_ex[i], priv->rates_mask);
5347 continue;
5348 }
bf79451e 5349
0edd5b44
JG		 5350 rates->supported_rates[rates->num_rates++] =
5351 network->rates_ex[i];
43f66a6c
JK		 5352 }
5353
ea2b26e0 5354 return 1;
43f66a6c
JK		 5355}
5356
858119e1 5357static void ipw_copy_rates(struct ipw_supported_rates *dest,
43f66a6c
JK		 5358 const struct ipw_supported_rates *src)
5359{
5360 u8 i;
5361 for (i = 0; i < src->num_rates; i++)
5362 dest->supported_rates[i] = src->supported_rates[i];
5363 dest->num_rates = src->num_rates;
5364}
5365
5366/* TODO: Look at sniffed packets in the air to determine if the basic rate
5367 * mask should ever be used -- right now all callers to add the scan rates are
5368 * set with the modulation = CCK, so BASIC_RATE_MASK is never set... */
5369static void ipw_add_cck_scan_rates(struct ipw_supported_rates *rates,
0edd5b44 5370 u8 modulation, u32 rate_mask)
43f66a6c 5371{
bf79451e 5372 u8 basic_mask = (IEEE80211_OFDM_MODULATION == modulation) ?
0edd5b44 5373 IEEE80211_BASIC_RATE_MASK : 0;
bf79451e 5374
43f66a6c 5375 if (rate_mask & IEEE80211_CCK_RATE_1MB_MASK)
bf79451e 5376 rates->supported_rates[rates->num_rates++] =
0edd5b44 5377 IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_1MB;
43f66a6c
JK		 5378
5379 if (rate_mask & IEEE80211_CCK_RATE_2MB_MASK)
bf79451e 5380 rates->supported_rates[rates->num_rates++] =
0edd5b44 5381 IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_2MB;
43f66a6c
JK		 5382
5383 if (rate_mask & IEEE80211_CCK_RATE_5MB_MASK)
bf79451e 5384 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5385 IEEE80211_CCK_RATE_5MB;
43f66a6c
JK		 5386
5387 if (rate_mask & IEEE80211_CCK_RATE_11MB_MASK)
bf79451e 5388 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5389 IEEE80211_CCK_RATE_11MB;
43f66a6c
JK		 5390}
5391
5392static void ipw_add_ofdm_scan_rates(struct ipw_supported_rates *rates,
0edd5b44 5393 u8 modulation, u32 rate_mask)
43f66a6c 5394{
bf79451e 5395 u8 basic_mask = (IEEE80211_OFDM_MODULATION == modulation) ?
0edd5b44 5396 IEEE80211_BASIC_RATE_MASK : 0;
43f66a6c
JK		 5397
5398 if (rate_mask & IEEE80211_OFDM_RATE_6MB_MASK)
bf79451e 5399 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5400 IEEE80211_OFDM_RATE_6MB;
43f66a6c
JK		 5401
5402 if (rate_mask & IEEE80211_OFDM_RATE_9MB_MASK)
bf79451e 5403 rates->supported_rates[rates->num_rates++] =
0edd5b44 5404 IEEE80211_OFDM_RATE_9MB;
43f66a6c
JK		 5405
5406 if (rate_mask & IEEE80211_OFDM_RATE_12MB_MASK)
bf79451e 5407 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5408 IEEE80211_OFDM_RATE_12MB;
43f66a6c
JK		 5409
5410 if (rate_mask & IEEE80211_OFDM_RATE_18MB_MASK)
bf79451e 5411 rates->supported_rates[rates->num_rates++] =
0edd5b44 5412 IEEE80211_OFDM_RATE_18MB;
43f66a6c
JK		 5413
5414 if (rate_mask & IEEE80211_OFDM_RATE_24MB_MASK)
bf79451e 5415 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5416 IEEE80211_OFDM_RATE_24MB;
43f66a6c
JK		 5417
5418 if (rate_mask & IEEE80211_OFDM_RATE_36MB_MASK)
bf79451e 5419 rates->supported_rates[rates->num_rates++] =
0edd5b44 5420 IEEE80211_OFDM_RATE_36MB;
43f66a6c
JK		 5421
5422 if (rate_mask & IEEE80211_OFDM_RATE_48MB_MASK)
bf79451e 5423 rates->supported_rates[rates->num_rates++] =
0edd5b44 5424 IEEE80211_OFDM_RATE_48MB;
43f66a6c
JK		 5425
5426 if (rate_mask & IEEE80211_OFDM_RATE_54MB_MASK)
bf79451e 5427 rates->supported_rates[rates->num_rates++] =
0edd5b44 5428 IEEE80211_OFDM_RATE_54MB;
43f66a6c
JK		 5429}
5430
5431struct ipw_network_match {
5432 struct ieee80211_network *network;
5433 struct ipw_supported_rates rates;
5434};
5435
c848d0af
JK		 5436static int ipw_find_adhoc_network(struct ipw_priv *priv,
5437 struct ipw_network_match *match,
5438 struct ieee80211_network *network,
5439 int roaming)
43f66a6c
JK		 5440{
5441 struct ipw_supported_rates rates;
9387b7ca 5442 DECLARE_SSID_BUF(ssid);
43f66a6c
JK		 5443
5444 /* Verify that this network's capability is compatible with the
5445 * current mode (AdHoc or Infrastructure) */
c848d0af 5446 if ((priv->ieee->iw_mode == IW_MODE_ADHOC &&
43f66a6c 5447 !(network->capability & WLAN_CAPABILITY_IBSS))) {
e174961c 5448 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded due to "
bf79451e 5449 "capability mismatch.\n",
9387b7ca
JL		 5450 print_ssid(ssid, network->ssid,
5451 network->ssid_len),
e174961c 5452 network->bssid);
43f66a6c
JK		 5453 return 0;
5454 }
5455
43f66a6c
JK		 5456 if (unlikely(roaming)) {
5457 /* If we are roaming, then ensure check if this is a valid
5458 * network to try and roam to */
5459 if ((network->ssid_len != match->network->ssid_len) ||
bf79451e 5460 memcmp(network->ssid, match->network->ssid,
43f66a6c 5461 network->ssid_len)) {
e174961c 5462 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c 5463 "because of non-network ESSID.\n",
9387b7ca
JL		 5464 print_ssid(ssid, network->ssid,
5465 network->ssid_len),
e174961c 5466 network->bssid);
43f66a6c
JK		 5467 return 0;
5468 }
5469 } else {
bf79451e
JG		 5470 /* If an ESSID has been configured then compare the broadcast
5471 * ESSID to ours */
5472 if ((priv->config & CFG_STATIC_ESSID) &&
43f66a6c 5473 ((network->ssid_len != priv->essid_len) ||
bf79451e 5474 memcmp(network->ssid, priv->essid,
43f66a6c
JK		 5475 min(network->ssid_len, priv->essid_len)))) {
5476 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
afbf30a2 5477
0edd5b44 5478 strncpy(escaped,
9387b7ca
JL		 5479 print_ssid(ssid, network->ssid,
5480 network->ssid_len),
43f66a6c 5481 sizeof(escaped));
e174961c 5482 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
bf79451e 5483 "because of ESSID mismatch: '%s'.\n",
e174961c 5484 escaped, network->bssid,
9387b7ca
JL		 5485 print_ssid(ssid, priv->essid,
5486 priv->essid_len));
43f66a6c
JK		 5487 return 0;
5488 }
5489 }
5490
5491 /* If the old network rate is better than this one, don't bother
5492 * testing everything else. */
c848d0af
JK		 5493
5494 if (network->time_stamp[0] < match->network->time_stamp[0]) {
afbf30a2
JK		 5495 IPW_DEBUG_MERGE("Network '%s excluded because newer than "
5496 "current network.\n",
9387b7ca
JL		 5497 print_ssid(ssid, match->network->ssid,
5498 match->network->ssid_len));
43f66a6c 5499 return 0;
c848d0af 5500 } else if (network->time_stamp[1] < match->network->time_stamp[1]) {
afbf30a2
JK		 5501 IPW_DEBUG_MERGE("Network '%s excluded because newer than "
5502 "current network.\n",
9387b7ca
JL		 5503 print_ssid(ssid, match->network->ssid,
5504 match->network->ssid_len));
43f66a6c
JK		 5505 return 0;
5506 }
5507
5508 /* Now go through and see if the requested network is valid... */
bf79451e 5509 if (priv->ieee->scan_age != 0 &&
c848d0af 5510 time_after(jiffies, network->last_scanned + priv->ieee->scan_age)) {
e174961c 5511 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
c7b6a674 5512 "because of age: %ums.\n",
9387b7ca
JL		 5513 print_ssid(ssid, network->ssid,
5514 network->ssid_len),
e174961c 5515 network->bssid,
2638bc39
ZY		 5516 jiffies_to_msecs(jiffies -
5517 network->last_scanned));
43f66a6c 5518 return 0;
bf79451e 5519 }
43f66a6c 5520
bf79451e 5521 if ((priv->config & CFG_STATIC_CHANNEL) &&
43f66a6c 5522 (network->channel != priv->channel)) {
e174961c 5523 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c 5524 "because of channel mismatch: %d != %d.\n",
9387b7ca
JL		 5525 print_ssid(ssid, network->ssid,
5526 network->ssid_len),
e174961c 5527 network->bssid,
43f66a6c
JK		 5528 network->channel, priv->channel);
5529 return 0;
5530 }
bf79451e 5531
43f66a6c 5532 /* Verify privacy compatability */
bf79451e 5533 if (((priv->capability & CAP_PRIVACY_ON) ? 1 : 0) !=
43f66a6c 5534 ((network->capability & WLAN_CAPABILITY_PRIVACY) ? 1 : 0)) {
e174961c 5535 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c 5536 "because of privacy mismatch: %s != %s.\n",
9387b7ca
JL		 5537 print_ssid(ssid, network->ssid,
5538 network->ssid_len),
e174961c 5539 network->bssid,
afbf30a2
JK		 5540 priv->
5541 capability & CAP_PRIVACY_ON ? "on" : "off",
5542 network->
5543 capability & WLAN_CAPABILITY_PRIVACY ? "on" :
5544 "off");
43f66a6c
JK		 5545 return 0;
5546 }
bf79451e 5547
c848d0af 5548 if (!memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
e174961c
JB		 5549 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
5550 "because of the same BSSID match: %pM"
9387b7ca
JL		 5551 ".\n", print_ssid(ssid, network->ssid,
5552 network->ssid_len),
e174961c
JB		 5553 network->bssid,
5554 priv->bssid);
43f66a6c
JK		 5555 return 0;
5556 }
bf79451e 5557
43f66a6c
JK		 5558 /* Filter out any incompatible freq / mode combinations */
5559 if (!ieee80211_is_valid_mode(priv->ieee, network->mode)) {
e174961c 5560 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c
JK		 5561 "because of invalid frequency/mode "
5562 "combination.\n",
9387b7ca
JL		 5563 print_ssid(ssid, network->ssid,
5564 network->ssid_len),
e174961c 5565 network->bssid);
43f66a6c
JK		 5566 return 0;
5567 }
bf79451e 5568
c848d0af
JK		 5569 /* Ensure that the rates supported by the driver are compatible with
5570 * this AP, including verification of basic rates (mandatory) */
5571 if (!ipw_compatible_rates(priv, network, &rates)) {
e174961c 5572 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
c848d0af
JK		 5573 "because configured rate mask excludes "
5574 "AP mandatory rate.\n",
9387b7ca
JL		 5575 print_ssid(ssid, network->ssid,
5576 network->ssid_len),
e174961c 5577 network->bssid);
c848d0af
JK		 5578 return 0;
5579 }
5580
43f66a6c 5581 if (rates.num_rates == 0) {
e174961c 5582 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c 5583 "because of no compatible rates.\n",
9387b7ca
JL		 5584 print_ssid(ssid, network->ssid,
5585 network->ssid_len),
e174961c 5586 network->bssid);
43f66a6c
JK		 5587 return 0;
5588 }
bf79451e 5589
43f66a6c
JK		 5590 /* TODO: Perform any further minimal comparititive tests. We do not
5591 * want to put too much policy logic here; intelligent scan selection
5592 * should occur within a generic IEEE 802.11 user space tool. */
5593
5594 /* Set up 'new' AP to this network */
5595 ipw_copy_rates(&match->rates, &rates);
5596 match->network = network;
e174961c 5597 IPW_DEBUG_MERGE("Network '%s (%pM)' is a viable match.\n",
9387b7ca 5598 print_ssid(ssid, network->ssid, network->ssid_len),
e174961c 5599 network->bssid);
43f66a6c
JK		 5600
5601 return 1;
5602}
5603
c4028958 5604static void ipw_merge_adhoc_network(struct work_struct *work)
43f66a6c 5605{
9387b7ca 5606 DECLARE_SSID_BUF(ssid);
c4028958
DH		 5607 struct ipw_priv *priv =
5608 container_of(work, struct ipw_priv, merge_networks);
c848d0af
JK		 5609 struct ieee80211_network *network = NULL;
5610 struct ipw_network_match match = {
5611 .network = priv->assoc_network
5612 };
5613
afbf30a2
JK		 5614 if ((priv->status & STATUS_ASSOCIATED) &&
5615 (priv->ieee->iw_mode == IW_MODE_ADHOC)) {
c848d0af
JK		 5616 /* First pass through ROAM process -- look for a better
5617 * network */
5618 unsigned long flags;
5619
5620 spin_lock_irqsave(&priv->ieee->lock, flags);
5621 list_for_each_entry(network, &priv->ieee->network_list, list) {
5622 if (network != priv->assoc_network)
5623 ipw_find_adhoc_network(priv, &match, network,
5624 1);
5625 }
5626 spin_unlock_irqrestore(&priv->ieee->lock, flags);
5627
5628 if (match.network == priv->assoc_network) {
5629 IPW_DEBUG_MERGE("No better ADHOC in this network to "
5630 "merge to.\n");
5631 return;
5632 }
5633
4644151b 5634 mutex_lock(&priv->mutex);
c848d0af
JK		 5635 if ((priv->ieee->iw_mode == IW_MODE_ADHOC)) {
5636 IPW_DEBUG_MERGE("remove network %s\n",
9387b7ca
JL		 5637 print_ssid(ssid, priv->essid,
5638 priv->essid_len));
c848d0af 5639 ipw_remove_current_network(priv);
43f66a6c 5640 }
c848d0af
JK		 5641
5642 ipw_disassociate(priv);
5643 priv->assoc_network = match.network;
4644151b 5644 mutex_unlock(&priv->mutex);
c848d0af 5645 return;
43f66a6c 5646 }
c848d0af 5647}
43f66a6c 5648
0edd5b44
JG		 5649static int ipw_best_network(struct ipw_priv *priv,
5650 struct ipw_network_match *match,
5651 struct ieee80211_network *network, int roaming)
43f66a6c
JK		 5652{
5653 struct ipw_supported_rates rates;
9387b7ca 5654 DECLARE_SSID_BUF(ssid);
43f66a6c
JK		 5655
5656 /* Verify that this network's capability is compatible with the
5657 * current mode (AdHoc or Infrastructure) */
5658 if ((priv->ieee->iw_mode == IW_MODE_INFRA &&
2474385e 5659 !(network->capability & WLAN_CAPABILITY_ESS)) ||
43f66a6c
JK		 5660 (priv->ieee->iw_mode == IW_MODE_ADHOC &&
5661 !(network->capability & WLAN_CAPABILITY_IBSS))) {
e174961c 5662 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded due to "
bf79451e 5663 "capability mismatch.\n",
9387b7ca
JL		 5664 print_ssid(ssid, network->ssid,
5665 network->ssid_len),
e174961c 5666 network->bssid);
43f66a6c
JK		 5667 return 0;
5668 }
5669
43f66a6c
JK		 5670 if (unlikely(roaming)) {
5671 /* If we are roaming, then ensure check if this is a valid
5672 * network to try and roam to */
5673 if ((network->ssid_len != match->network->ssid_len) ||
bf79451e 5674 memcmp(network->ssid, match->network->ssid,
43f66a6c 5675 network->ssid_len)) {
e174961c 5676 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c 5677 "because of non-network ESSID.\n",
9387b7ca
JL		 5678 print_ssid(ssid, network->ssid,
5679 network->ssid_len),
e174961c 5680 network->bssid);
43f66a6c
JK		 5681 return 0;
5682 }
5683 } else {
bf79451e
JG		 5684 /* If an ESSID has been configured then compare the broadcast
5685 * ESSID to ours */
5686 if ((priv->config & CFG_STATIC_ESSID) &&
43f66a6c 5687 ((network->ssid_len != priv->essid_len) ||
bf79451e 5688 memcmp(network->ssid, priv->essid,
43f66a6c
JK		 5689 min(network->ssid_len, priv->essid_len)))) {
5690 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
0edd5b44 5691 strncpy(escaped,
9387b7ca
JL		 5692 print_ssid(ssid, network->ssid,
5693 network->ssid_len),
43f66a6c 5694 sizeof(escaped));
e174961c 5695 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
bf79451e 5696 "because of ESSID mismatch: '%s'.\n",
e174961c 5697 escaped, network->bssid,
9387b7ca
JL		 5698 print_ssid(ssid, priv->essid,
5699 priv->essid_len));
43f66a6c
JK		 5700 return 0;
5701 }
5702 }
5703
5704 /* If the old network rate is better than this one, don't bother
5705 * testing everything else. */
0edd5b44 5706 if (match->network && match->network->stats.rssi > network->stats.rssi) {
43f66a6c 5707 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
bf79451e 5708 strncpy(escaped,
9387b7ca 5709 print_ssid(ssid, network->ssid, network->ssid_len),
43f66a6c 5710 sizeof(escaped));
e174961c
JB		 5711 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded because "
5712 "'%s (%pM)' has a stronger signal.\n",
5713 escaped, network->bssid,
9387b7ca
JL		 5714 print_ssid(ssid, match->network->ssid,
5715 match->network->ssid_len),
e174961c 5716 match->network->bssid);
43f66a6c
JK		 5717 return 0;
5718 }
bf79451e 5719
43f66a6c
JK		 5720 /* If this network has already had an association attempt within the
5721 * last 3 seconds, do not try and associate again... */
5722 if (network->last_associate &&
ea2b26e0 5723 time_after(network->last_associate + (HZ * 3UL), jiffies)) {
e174961c 5724 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
c7b6a674 5725 "because of storming (%ums since last "
43f66a6c 5726 "assoc attempt).\n",
9387b7ca
JL		 5727 print_ssid(ssid, network->ssid,
5728 network->ssid_len),
e174961c 5729 network->bssid,
2638bc39
ZY		 5730 jiffies_to_msecs(jiffies -
5731 network->last_associate));
43f66a6c
JK		 5732 return 0;
5733 }
5734
5735 /* Now go through and see if the requested network is valid... */
bf79451e 5736 if (priv->ieee->scan_age != 0 &&
ea2b26e0 5737 time_after(jiffies, network->last_scanned + priv->ieee->scan_age)) {
e174961c 5738 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
c7b6a674 5739 "because of age: %ums.\n",
9387b7ca
JL		 5740 print_ssid(ssid, network->ssid,
5741 network->ssid_len),
e174961c 5742 network->bssid,
2638bc39
ZY		 5743 jiffies_to_msecs(jiffies -
5744 network->last_scanned));
43f66a6c 5745 return 0;
bf79451e 5746 }
43f66a6c 5747
bf79451e 5748 if ((priv->config & CFG_STATIC_CHANNEL) &&
43f66a6c 5749 (network->channel != priv->channel)) {
e174961c 5750 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c 5751 "because of channel mismatch: %d != %d.\n",
9387b7ca
JL		 5752 print_ssid(ssid, network->ssid,
5753 network->ssid_len),
e174961c 5754 network->bssid,
43f66a6c
JK		 5755 network->channel, priv->channel);
5756 return 0;
5757 }
bf79451e 5758
43f66a6c 5759 /* Verify privacy compatability */
bf79451e 5760 if (((priv->capability & CAP_PRIVACY_ON) ? 1 : 0) !=
43f66a6c 5761 ((network->capability & WLAN_CAPABILITY_PRIVACY) ? 1 : 0)) {
e174961c 5762 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c 5763 "because of privacy mismatch: %s != %s.\n",
9387b7ca
JL		 5764 print_ssid(ssid, network->ssid,
5765 network->ssid_len),
e174961c 5766 network->bssid,
bf79451e 5767 priv->capability & CAP_PRIVACY_ON ? "on" :
43f66a6c 5768 "off",
bf79451e 5769 network->capability &
0edd5b44 5770 WLAN_CAPABILITY_PRIVACY ? "on" : "off");
43f66a6c
JK		 5771 return 0;
5772 }
bf79451e
JG		 5773
5774 if ((priv->config & CFG_STATIC_BSSID) &&
43f66a6c 5775 memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
e174961c
JB		 5776 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
5777 "because of BSSID mismatch: %pM.\n",
9387b7ca
JL		 5778 print_ssid(ssid, network->ssid,
5779 network->ssid_len),
e174961c 5780 network->bssid, priv->bssid);
43f66a6c
JK		 5781 return 0;
5782 }
bf79451e 5783
43f66a6c
JK		 5784 /* Filter out any incompatible freq / mode combinations */
5785 if (!ieee80211_is_valid_mode(priv->ieee, network->mode)) {
e174961c 5786 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c
JK		 5787 "because of invalid frequency/mode "
5788 "combination.\n",
9387b7ca
JL		 5789 print_ssid(ssid, network->ssid,
5790 network->ssid_len),
e174961c 5791 network->bssid);
43f66a6c
JK		 5792 return 0;
5793 }
bf79451e 5794
1fe0adb4 5795 /* Filter out invalid channel in current GEO */
1867b117 5796 if (!ieee80211_is_valid_channel(priv->ieee, network->channel)) {
e174961c 5797 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
1fe0adb4 5798 "because of invalid channel in current GEO\n",
9387b7ca
JL		 5799 print_ssid(ssid, network->ssid,
5800 network->ssid_len),
e174961c 5801 network->bssid);
1fe0adb4
LH		 5802 return 0;
5803 }
5804
ea2b26e0
JK		 5805 /* Ensure that the rates supported by the driver are compatible with
5806 * this AP, including verification of basic rates (mandatory) */
5807 if (!ipw_compatible_rates(priv, network, &rates)) {
e174961c 5808 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
ea2b26e0
JK		 5809 "because configured rate mask excludes "
5810 "AP mandatory rate.\n",
9387b7ca
JL		 5811 print_ssid(ssid, network->ssid,
5812 network->ssid_len),
e174961c 5813 network->bssid);
ea2b26e0
JK		 5814 return 0;
5815 }
5816
43f66a6c 5817 if (rates.num_rates == 0) {
e174961c 5818 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c 5819 "because of no compatible rates.\n",
9387b7ca
JL		 5820 print_ssid(ssid, network->ssid,
5821 network->ssid_len),
e174961c 5822 network->bssid);
43f66a6c
JK		 5823 return 0;
5824 }
bf79451e 5825
43f66a6c
JK		 5826 /* TODO: Perform any further minimal comparititive tests. We do not
5827 * want to put too much policy logic here; intelligent scan selection
5828 * should occur within a generic IEEE 802.11 user space tool. */
5829
5830 /* Set up 'new' AP to this network */
5831 ipw_copy_rates(&match->rates, &rates);
5832 match->network = network;
5833
e174961c 5834 IPW_DEBUG_ASSOC("Network '%s (%pM)' is a viable match.\n",
9387b7ca 5835 print_ssid(ssid, network->ssid, network->ssid_len),
e174961c 5836 network->bssid);
43f66a6c
JK		 5837
5838 return 1;
5839}
5840
bf79451e 5841static void ipw_adhoc_create(struct ipw_priv *priv,
0edd5b44 5842 struct ieee80211_network *network)
43f66a6c 5843{
1867b117 5844 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
afbf30a2
JK		 5845 int i;
5846
43f66a6c
JK		 5847 /*
5848 * For the purposes of scanning, we can set our wireless mode
5849 * to trigger scans across combinations of bands, but when it
5850 * comes to creating a new ad-hoc network, we have tell the FW
5851 * exactly which band to use.
5852 *
bf79451e 5853 * We also have the possibility of an invalid channel for the
43f66a6c
JK		 5854 * chossen band. Attempting to create a new ad-hoc network
5855 * with an invalid channel for wireless mode will trigger a
5856 * FW fatal error.
afbf30a2 5857 *
43f66a6c 5858 */
1867b117 5859 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
afbf30a2
JK		 5860 case IEEE80211_52GHZ_BAND:
5861 network->mode = IEEE_A;
1867b117 5862 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
5d9428de 5863 BUG_ON(i == -1);
afbf30a2
JK		 5864 if (geo->a[i].flags & IEEE80211_CH_PASSIVE_ONLY) {
5865 IPW_WARNING("Overriding invalid channel\n");
5866 priv->channel = geo->a[0].channel;
5867 }
5868 break;
5869
5870 case IEEE80211_24GHZ_BAND:
5871 if (priv->ieee->mode & IEEE_G)
5872 network->mode = IEEE_G;
5873 else
5874 network->mode = IEEE_B;
1867b117 5875 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
5d9428de 5876 BUG_ON(i == -1);
1fe0adb4
LH		 5877 if (geo->bg[i].flags & IEEE80211_CH_PASSIVE_ONLY) {
5878 IPW_WARNING("Overriding invalid channel\n");
5879 priv->channel = geo->bg[0].channel;
5880 }
afbf30a2
JK		 5881 break;
5882
5883 default:
43f66a6c
JK		 5884 IPW_WARNING("Overriding invalid channel\n");
5885 if (priv->ieee->mode & IEEE_A) {
5886 network->mode = IEEE_A;
b095c381 5887 priv->channel = geo->a[0].channel;
43f66a6c
JK		 5888 } else if (priv->ieee->mode & IEEE_G) {
5889 network->mode = IEEE_G;
b095c381 5890 priv->channel = geo->bg[0].channel;
43f66a6c
JK		 5891 } else {
5892 network->mode = IEEE_B;
b095c381 5893 priv->channel = geo->bg[0].channel;
43f66a6c 5894 }
afbf30a2
JK		 5895 break;
5896 }
43f66a6c
JK		 5897
5898 network->channel = priv->channel;
5899 priv->config |= CFG_ADHOC_PERSIST;
5900 ipw_create_bssid(priv, network->bssid);
5901 network->ssid_len = priv->essid_len;
5902 memcpy(network->ssid, priv->essid, priv->essid_len);
5903 memset(&network->stats, 0, sizeof(network->stats));
5904 network->capability = WLAN_CAPABILITY_IBSS;
ea2b26e0
JK		 5905 if (!(priv->config & CFG_PREAMBLE_LONG))
5906 network->capability |= WLAN_CAPABILITY_SHORT_PREAMBLE;
43f66a6c
JK		 5907 if (priv->capability & CAP_PRIVACY_ON)
5908 network->capability |= WLAN_CAPABILITY_PRIVACY;
5909 network->rates_len = min(priv->rates.num_rates, MAX_RATES_LENGTH);
0edd5b44 5910 memcpy(network->rates, priv->rates.supported_rates, network->rates_len);
43f66a6c 5911 network->rates_ex_len = priv->rates.num_rates - network->rates_len;
bf79451e 5912 memcpy(network->rates_ex,
43f66a6c
JK		 5913 &priv->rates.supported_rates[network->rates_len],
5914 network->rates_ex_len);
5915 network->last_scanned = 0;
5916 network->flags = 0;
5917 network->last_associate = 0;
5918 network->time_stamp[0] = 0;
5919 network->time_stamp[1] = 0;
0edd5b44
JG		 5920 network->beacon_interval = 100; /* Default */
5921 network->listen_interval = 10; /* Default */
5922 network->atim_window = 0; /* Default */
43f66a6c
JK		 5923 network->wpa_ie_len = 0;
5924 network->rsn_ie_len = 0;
43f66a6c
JK		 5925}
5926
b095c381
JK		 5927static void ipw_send_tgi_tx_key(struct ipw_priv *priv, int type, int index)
5928{
0a7bcf26 5929 struct ipw_tgi_tx_key key;
b095c381
JK		 5930
5931 if (!(priv->ieee->sec.flags & (1 << index)))
5932 return;
5933
0a7bcf26
ZY		 5934 key.key_id = index;
5935 memcpy(key.key, priv->ieee->sec.keys[index], SCM_TEMPORAL_KEY_LENGTH);
5936 key.security_type = type;
5937 key.station_index = 0; /* always 0 for BSS */
5938 key.flags = 0;
b095c381 5939 /* 0 for new key; previous value of counter (after fatal error) */
851ca268
ZY		 5940 key.tx_counter[0] = cpu_to_le32(0);
5941 key.tx_counter[1] = cpu_to_le32(0);
b095c381 5942
0a7bcf26 5943 ipw_send_cmd_pdu(priv, IPW_CMD_TGI_TX_KEY, sizeof(key), &key);
b095c381
JK		 5944}
5945
5946static void ipw_send_wep_keys(struct ipw_priv *priv, int type)
43f66a6c 5947{
0a7bcf26 5948 struct ipw_wep_key key;
43f66a6c 5949 int i;
43f66a6c 5950
0a7bcf26
ZY		 5951 key.cmd_id = DINO_CMD_WEP_KEY;
5952 key.seq_num = 0;
43f66a6c 5953
b095c381
JK		 5954 /* Note: AES keys cannot be set for multiple times.
5955 * Only set it at the first time. */
bf79451e 5956 for (i = 0; i < 4; i++) {
0a7bcf26 5957 key.key_index = i | type;
b095c381 5958 if (!(priv->ieee->sec.flags & (1 << i))) {
0a7bcf26 5959 key.key_size = 0;
b095c381 5960 continue;
43f66a6c
JK		 5961 }
5962
0a7bcf26
ZY		 5963 key.key_size = priv->ieee->sec.key_sizes[i];
5964 memcpy(key.key, priv->ieee->sec.keys[i], key.key_size);
b095c381 5965
0a7bcf26 5966 ipw_send_cmd_pdu(priv, IPW_CMD_WEP_KEY, sizeof(key), &key);
bf79451e 5967 }
43f66a6c
JK		 5968}
5969
1fbfea54 5970static void ipw_set_hw_decrypt_unicast(struct ipw_priv *priv, int level)
43f66a6c 5971{
1fbfea54 5972 if (priv->ieee->host_encrypt)
43f66a6c 5973 return;
43f66a6c 5974
1fbfea54
ZY		 5975 switch (level) {
5976 case SEC_LEVEL_3:
5977 priv->sys_config.disable_unicast_decryption = 0;
5978 priv->ieee->host_decrypt = 0;
5979 break;
5980 case SEC_LEVEL_2:
5981 priv->sys_config.disable_unicast_decryption = 1;
5982 priv->ieee->host_decrypt = 1;
5983 break;
5984 case SEC_LEVEL_1:
5985 priv->sys_config.disable_unicast_decryption = 0;
5986 priv->ieee->host_decrypt = 0;
5987 break;
5988 case SEC_LEVEL_0:
5989 priv->sys_config.disable_unicast_decryption = 1;
5990 break;
5991 default:
5992 break;
5993 }
5994}
5995
5996static void ipw_set_hw_decrypt_multicast(struct ipw_priv *priv, int level)
5997{
5998 if (priv->ieee->host_encrypt)
5999 return;
6000
6001 switch (level) {
6002 case SEC_LEVEL_3:
6003 priv->sys_config.disable_multicast_decryption = 0;
6004 break;
6005 case SEC_LEVEL_2:
6006 priv->sys_config.disable_multicast_decryption = 1;
6007 break;
6008 case SEC_LEVEL_1:
6009 priv->sys_config.disable_multicast_decryption = 0;
6010 break;
6011 case SEC_LEVEL_0:
6012 priv->sys_config.disable_multicast_decryption = 1;
6013 break;
6014 default:
6015 break;
6016 }
6017}
6018
b095c381
JK		 6019static void ipw_set_hwcrypto_keys(struct ipw_priv *priv)
6020{
6021 switch (priv->ieee->sec.level) {
6022 case SEC_LEVEL_3:
d8bad6df
ZY		 6023 if (priv->ieee->sec.flags & SEC_ACTIVE_KEY)
6024 ipw_send_tgi_tx_key(priv,
6025 DCT_FLAG_EXT_SECURITY_CCM,
6026 priv->ieee->sec.active_key);
afbf30a2 6027
567deaf6
HL		 6028 if (!priv->ieee->host_mc_decrypt)
6029 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_CCM);
b095c381
JK		 6030 break;
6031 case SEC_LEVEL_2:
d8bad6df
ZY		 6032 if (priv->ieee->sec.flags & SEC_ACTIVE_KEY)
6033 ipw_send_tgi_tx_key(priv,
6034 DCT_FLAG_EXT_SECURITY_TKIP,
6035 priv->ieee->sec.active_key);
b095c381
JK		 6036 break;
6037 case SEC_LEVEL_1:
6038 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_WEP);
29cb843e
HL		 6039 ipw_set_hw_decrypt_unicast(priv, priv->ieee->sec.level);
6040 ipw_set_hw_decrypt_multicast(priv, priv->ieee->sec.level);
b095c381
JK		 6041 break;
6042 case SEC_LEVEL_0:
6043 default:
6044 break;
6045 }
6046}
6047
43f66a6c
JK		 6048static void ipw_adhoc_check(void *data)
6049{
6050 struct ipw_priv *priv = data;
bf79451e 6051
afbf30a2 6052 if (priv->missed_adhoc_beacons++ > priv->disassociate_threshold &&
43f66a6c 6053 !(priv->config & CFG_ADHOC_PERSIST)) {
afbf30a2
JK		 6054 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
6055 IPW_DL_STATE | IPW_DL_ASSOC,
6056 "Missed beacon: %d - disassociate\n",
6057 priv->missed_adhoc_beacons);
43f66a6c
JK		 6058 ipw_remove_current_network(priv);
6059 ipw_disassociate(priv);
6060 return;
6061 }
6062
bf79451e 6063 queue_delayed_work(priv->workqueue, &priv->adhoc_check,
5b5e807f 6064 le16_to_cpu(priv->assoc_request.beacon_interval));
43f66a6c
JK		 6065}
6066
c4028958 6067static void ipw_bg_adhoc_check(struct work_struct *work)
c848d0af 6068{
c4028958
DH		 6069 struct ipw_priv *priv =
6070 container_of(work, struct ipw_priv, adhoc_check.work);
4644151b 6071 mutex_lock(&priv->mutex);
c4028958 6072 ipw_adhoc_check(priv);
4644151b 6073 mutex_unlock(&priv->mutex);
c848d0af
JK		 6074}
6075
43f66a6c
JK		 6076static void ipw_debug_config(struct ipw_priv *priv)
6077{
9387b7ca 6078 DECLARE_SSID_BUF(ssid);
43f66a6c
JK		 6079 IPW_DEBUG_INFO("Scan completed, no valid APs matched "
6080 "[CFG 0x%08X]\n", priv->config);
6081 if (priv->config & CFG_STATIC_CHANNEL)
0edd5b44 6082 IPW_DEBUG_INFO("Channel locked to %d\n", priv->channel);
43f66a6c
JK		 6083 else
6084 IPW_DEBUG_INFO("Channel unlocked.\n");
6085 if (priv->config & CFG_STATIC_ESSID)
bf79451e 6086 IPW_DEBUG_INFO("ESSID locked to '%s'\n",
9387b7ca 6087 print_ssid(ssid, priv->essid, priv->essid_len));
43f66a6c
JK		 6088 else
6089 IPW_DEBUG_INFO("ESSID unlocked.\n");
6090 if (priv->config & CFG_STATIC_BSSID)
e174961c 6091 IPW_DEBUG_INFO("BSSID locked to %pM\n", priv->bssid);
43f66a6c
JK		 6092 else
6093 IPW_DEBUG_INFO("BSSID unlocked.\n");
6094 if (priv->capability & CAP_PRIVACY_ON)
6095 IPW_DEBUG_INFO("PRIVACY on\n");
6096 else
6097 IPW_DEBUG_INFO("PRIVACY off\n");
6098 IPW_DEBUG_INFO("RATE MASK: 0x%08X\n", priv->rates_mask);
6099}
43f66a6c 6100
858119e1 6101static void ipw_set_fixed_rate(struct ipw_priv *priv, int mode)
43f66a6c
JK		 6102{
6103 /* TODO: Verify that this works... */
6104 struct ipw_fixed_rate fr = {
6105 .tx_rates = priv->rates_mask
6106 };
6107 u32 reg;
6108 u16 mask = 0;
6109
bf79451e 6110 /* Identify 'current FW band' and match it with the fixed
43f66a6c 6111 * Tx rates */
bf79451e 6112
43f66a6c 6113 switch (priv->ieee->freq_band) {
0edd5b44 6114 case IEEE80211_52GHZ_BAND: /* A only */
43f66a6c
JK		 6115 /* IEEE_A */
6116 if (priv->rates_mask & ~IEEE80211_OFDM_RATES_MASK) {
6117 /* Invalid fixed rate mask */
ea2b26e0
JK		 6118 IPW_DEBUG_WX
6119 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 6120 fr.tx_rates = 0;
6121 break;
6122 }
bf79451e 6123
43f66a6c
JK		 6124 fr.tx_rates >>= IEEE80211_OFDM_SHIFT_MASK_A;
6125 break;
6126
0edd5b44 6127 default: /* 2.4Ghz or Mixed */
43f66a6c 6128 /* IEEE_B */
b095c381 6129 if (mode == IEEE_B) {
43f66a6c
JK		 6130 if (fr.tx_rates & ~IEEE80211_CCK_RATES_MASK) {
6131 /* Invalid fixed rate mask */
ea2b26e0
JK		 6132 IPW_DEBUG_WX
6133 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 6134 fr.tx_rates = 0;
6135 }
6136 break;
bf79451e 6137 }
43f66a6c
JK		 6138
6139 /* IEEE_G */
6140 if (fr.tx_rates & ~(IEEE80211_CCK_RATES_MASK |
6141 IEEE80211_OFDM_RATES_MASK)) {
6142 /* Invalid fixed rate mask */
ea2b26e0
JK		 6143 IPW_DEBUG_WX
6144 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK		 6145 fr.tx_rates = 0;
6146 break;
6147 }
bf79451e 6148
43f66a6c
JK		 6149 if (IEEE80211_OFDM_RATE_6MB_MASK & fr.tx_rates) {
6150 mask |= (IEEE80211_OFDM_RATE_6MB_MASK >> 1);
6151 fr.tx_rates &= ~IEEE80211_OFDM_RATE_6MB_MASK;
6152 }
bf79451e 6153
43f66a6c
JK		 6154 if (IEEE80211_OFDM_RATE_9MB_MASK & fr.tx_rates) {
6155 mask |= (IEEE80211_OFDM_RATE_9MB_MASK >> 1);
6156 fr.tx_rates &= ~IEEE80211_OFDM_RATE_9MB_MASK;
6157 }
bf79451e 6158
43f66a6c
JK		 6159 if (IEEE80211_OFDM_RATE_12MB_MASK & fr.tx_rates) {
6160 mask |= (IEEE80211_OFDM_RATE_12MB_MASK >> 1);
6161 fr.tx_rates &= ~IEEE80211_OFDM_RATE_12MB_MASK;
6162 }
bf79451e 6163
43f66a6c
JK		 6164 fr.tx_rates |= mask;
6165 break;
6166 }
6167
6168 reg = ipw_read32(priv, IPW_MEM_FIXED_OVERRIDE);
0edd5b44 6169 ipw_write_reg32(priv, reg, *(u32 *) & fr);
43f66a6c
JK		 6170}
6171
ea2b26e0 6172static void ipw_abort_scan(struct ipw_priv *priv)
43f66a6c
JK		 6173{
6174 int err;
6175
ea2b26e0
JK		 6176 if (priv->status & STATUS_SCAN_ABORTING) {
6177 IPW_DEBUG_HC("Ignoring concurrent scan abort request.\n");
6178 return;
6179 }
6180 priv->status |= STATUS_SCAN_ABORTING;
43f66a6c 6181
ea2b26e0
JK		 6182 err = ipw_send_scan_abort(priv);
6183 if (err)
6184 IPW_DEBUG_HC("Request to abort scan failed.\n");
6185}
6186
afbf30a2
JK		 6187static void ipw_add_scan_channels(struct ipw_priv *priv,
6188 struct ipw_scan_request_ext *scan,
6189 int scan_type)
ea2b26e0 6190{
ea2b26e0 6191 int channel_index = 0;
b095c381 6192 const struct ieee80211_geo *geo;
afbf30a2 6193 int i;
b095c381 6194
1867b117 6195 geo = ieee80211_get_geo(priv->ieee);
43f66a6c 6196
afbf30a2
JK		 6197 if (priv->ieee->freq_band & IEEE80211_52GHZ_BAND) {
6198 int start = channel_index;
6199 for (i = 0; i < geo->a_channels; i++) {
6200 if ((priv->status & STATUS_ASSOCIATED) &&
6201 geo->a[i].channel == priv->channel)
6202 continue;
6203 channel_index++;
6204 scan->channels_list[channel_index] = geo->a[i].channel;
1fe0adb4
LH		 6205 ipw_set_scan_type(scan, channel_index,
6206 geo->a[i].
6207 flags & IEEE80211_CH_PASSIVE_ONLY ?
6208 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN :
6209 scan_type);
afbf30a2
JK		 6210 }
6211
6212 if (start != channel_index) {
6213 scan->channels_list[start] = (u8) (IPW_A_MODE << 6) |
6214 (channel_index - start);
6215 channel_index++;
6216 }
6217 }
6218
6219 if (priv->ieee->freq_band & IEEE80211_24GHZ_BAND) {
6220 int start = channel_index;
6221 if (priv->config & CFG_SPEED_SCAN) {
1fe0adb4 6222 int index;
afbf30a2
JK		 6223 u8 channels[IEEE80211_24GHZ_CHANNELS] = {
6224 /* nop out the list */
6225 [0] = 0
6226 };
6227
6228 u8 channel;
6229 while (channel_index < IPW_SCAN_CHANNELS) {
6230 channel =
6231 priv->speed_scan[priv->speed_scan_pos];
6232 if (channel == 0) {
6233 priv->speed_scan_pos = 0;
6234 channel = priv->speed_scan[0];
6235 }
6236 if ((priv->status & STATUS_ASSOCIATED) &&
6237 channel == priv->channel) {
6238 priv->speed_scan_pos++;
6239 continue;
6240 }
6241
6242 /* If this channel has already been
6243 * added in scan, break from loop
6244 * and this will be the first channel
6245 * in the next scan.
6246 */
6247 if (channels[channel - 1] != 0)
6248 break;
6249
6250 channels[channel - 1] = 1;
6251 priv->speed_scan_pos++;
6252 channel_index++;
6253 scan->channels_list[channel_index] = channel;
1fe0adb4 6254 index =
1867b117 6255 ieee80211_channel_to_index(priv->ieee, channel);
afbf30a2 6256 ipw_set_scan_type(scan, channel_index,
1fe0adb4
LH		 6257 geo->bg[index].
6258 flags &
6259 IEEE80211_CH_PASSIVE_ONLY ?
6260 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN
6261 : scan_type);
afbf30a2
JK		 6262 }
6263 } else {
6264 for (i = 0; i < geo->bg_channels; i++) {
6265 if ((priv->status & STATUS_ASSOCIATED) &&
6266 geo->bg[i].channel == priv->channel)
6267 continue;
6268 channel_index++;
6269 scan->channels_list[channel_index] =
6270 geo->bg[i].channel;
6271 ipw_set_scan_type(scan, channel_index,
1fe0adb4
LH		 6272 geo->bg[i].
6273 flags &
6274 IEEE80211_CH_PASSIVE_ONLY ?
6275 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN
6276 : scan_type);
afbf30a2
JK		 6277 }
6278 }
6279
6280 if (start != channel_index) {
6281 scan->channels_list[start] = (u8) (IPW_B_MODE << 6) |
6282 (channel_index - start);
6283 }
6284 }
6285}
6286
14a4dfe2
HS		 6287static int ipw_passive_dwell_time(struct ipw_priv *priv)
6288{
6289 /* staying on passive channels longer than the DTIM interval during a
6290 * scan, while associated, causes the firmware to cancel the scan
6291 * without notification. Hence, don't stay on passive channels longer
6292 * than the beacon interval.
6293 */
6294 if (priv->status & STATUS_ASSOCIATED
6295 && priv->assoc_network->beacon_interval > 10)
6296 return priv->assoc_network->beacon_interval - 10;
6297 else
6298 return 120;
6299}
6300
ea177305 6301static int ipw_request_scan_helper(struct ipw_priv *priv, int type, int direct)
afbf30a2
JK		 6302{
6303 struct ipw_scan_request_ext scan;
6304 int err = 0, scan_type;
6305
6306 if (!(priv->status & STATUS_INIT) ||
6307 (priv->status & STATUS_EXIT_PENDING))
6308 return 0;
6309
4644151b 6310 mutex_lock(&priv->mutex);
afbf30a2 6311
ea177305
DW		 6312 if (direct && (priv->direct_scan_ssid_len == 0)) {
6313 IPW_DEBUG_HC("Direct scan requested but no SSID to scan for\n");
6314 priv->status &= ~STATUS_DIRECT_SCAN_PENDING;
6315 goto done;
6316 }
6317
ea2b26e0 6318 if (priv->status & STATUS_SCANNING) {
ea177305
DW		 6319 IPW_DEBUG_HC("Concurrent scan requested. Queuing.\n");
6320 priv->status |= direct ? STATUS_DIRECT_SCAN_PENDING :
6321 STATUS_SCAN_PENDING;
b095c381 6322 goto done;
ea2b26e0 6323 }
43f66a6c 6324
afbf30a2
JK		 6325 if (!(priv->status & STATUS_SCAN_FORCED) &&
6326 priv->status & STATUS_SCAN_ABORTING) {
ea2b26e0 6327 IPW_DEBUG_HC("Scan request while abort pending. Queuing.\n");
ea177305
DW		 6328 priv->status |= direct ? STATUS_DIRECT_SCAN_PENDING :
6329 STATUS_SCAN_PENDING;
b095c381 6330 goto done;
43f66a6c
JK		 6331 }
6332
ea2b26e0 6333 if (priv->status & STATUS_RF_KILL_MASK) {
ea177305
DW		 6334 IPW_DEBUG_HC("Queuing scan due to RF Kill activation\n");
6335 priv->status |= direct ? STATUS_DIRECT_SCAN_PENDING :
6336 STATUS_SCAN_PENDING;
b095c381 6337 goto done;
ea2b26e0 6338 }
43f66a6c 6339
ea2b26e0 6340 memset(&scan, 0, sizeof(scan));
094c4d2d 6341 scan.full_scan_index = cpu_to_le32(ieee80211_get_scans(priv->ieee));
43f66a6c 6342
094c4d2d 6343 if (type == IW_SCAN_TYPE_PASSIVE) {
14a4dfe2
HS		 6344 IPW_DEBUG_WX("use passive scanning\n");
6345 scan_type = IPW_SCAN_PASSIVE_FULL_DWELL_SCAN;
094c4d2d 6346 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] =
14a4dfe2 6347 cpu_to_le16(ipw_passive_dwell_time(priv));
094c4d2d
ZY		 6348 ipw_add_scan_channels(priv, &scan, scan_type);
6349 goto send_request;
6350 }
6351
6352 /* Use active scan by default. */
14a4dfe2 6353 if (priv->config & CFG_SPEED_SCAN)
b095c381 6354 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
094c4d2d 6355 cpu_to_le16(30);
b095c381
JK		 6356 else
6357 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
094c4d2d 6358 cpu_to_le16(20);
b095c381 6359
a613bffd 6360 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN] =
094c4d2d 6361 cpu_to_le16(20);
43f66a6c 6362
14a4dfe2
HS		 6363 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] =
6364 cpu_to_le16(ipw_passive_dwell_time(priv));
ea177305 6365 scan.dwell_time[IPW_SCAN_ACTIVE_DIRECT_SCAN] = cpu_to_le16(20);
43f66a6c 6366
b095c381 6367#ifdef CONFIG_IPW2200_MONITOR
ea2b26e0 6368 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 6369 u8 channel;
b095c381 6370 u8 band = 0;
43f66a6c 6371
1867b117 6372 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
b095c381 6373 case IEEE80211_52GHZ_BAND:
ea2b26e0 6374 band = (u8) (IPW_A_MODE << 6) | 1;
b095c381
JK		 6375 channel = priv->channel;
6376 break;
ea2b26e0 6377
b095c381 6378 case IEEE80211_24GHZ_BAND:
ea2b26e0 6379 band = (u8) (IPW_B_MODE << 6) | 1;
b095c381
JK		 6380 channel = priv->channel;
6381 break;
ea2b26e0 6382
b095c381 6383 default:
ea2b26e0
JK		 6384 band = (u8) (IPW_B_MODE << 6) | 1;
6385 channel = 9;
b095c381 6386 break;
ea2b26e0
JK		 6387 }
6388
b095c381
JK		 6389 scan.channels_list[0] = band;
6390 scan.channels_list[1] = channel;
6391 ipw_set_scan_type(&scan, 1, IPW_SCAN_PASSIVE_FULL_DWELL_SCAN);
ea2b26e0 6392
b095c381
JK		 6393 /* NOTE: The card will sit on this channel for this time
6394 * period. Scan aborts are timing sensitive and frequently
6395 * result in firmware restarts. As such, it is best to
6396 * set a small dwell_time here and just keep re-issuing
6397 * scans. Otherwise fast channel hopping will not actually
6398 * hop channels.
6399 *
6400 * TODO: Move SPEED SCAN support to all modes and bands */
a613bffd 6401 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] =
094c4d2d 6402 cpu_to_le16(2000);
43f66a6c 6403 } else {
b095c381 6404#endif /* CONFIG_IPW2200_MONITOR */
ea177305
DW		 6405 /* Honor direct scans first, otherwise if we are roaming make
6406 * this a direct scan for the current network. Finally,
6407 * ensure that every other scan is a fast channel hop scan */
6408 if (direct) {
6409 err = ipw_send_ssid(priv, priv->direct_scan_ssid,
6410 priv->direct_scan_ssid_len);
6411 if (err) {
6412 IPW_DEBUG_HC("Attempt to send SSID command "
6413 "failed\n");
6414 goto done;
6415 }
6416
6417 scan_type = IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN;
6418 } else if ((priv->status & STATUS_ROAMING)
6419 || (!(priv->status & STATUS_ASSOCIATED)
6420 && (priv->config & CFG_STATIC_ESSID)
6421 && (le32_to_cpu(scan.full_scan_index) % 2))) {
ea2b26e0
JK		 6422 err = ipw_send_ssid(priv, priv->essid, priv->essid_len);
6423 if (err) {
b095c381
JK		 6424 IPW_DEBUG_HC("Attempt to send SSID command "
6425 "failed.\n");
6426 goto done;
ea2b26e0 6427 }
43f66a6c 6428
ea2b26e0 6429 scan_type = IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN;
afbf30a2 6430 } else
ea2b26e0 6431 scan_type = IPW_SCAN_ACTIVE_BROADCAST_SCAN;
ea2b26e0 6432
afbf30a2 6433 ipw_add_scan_channels(priv, &scan, scan_type);
b095c381 6434#ifdef CONFIG_IPW2200_MONITOR
43f66a6c 6435 }
ea2b26e0 6436#endif
bf79451e 6437
094c4d2d 6438send_request:
ea2b26e0 6439 err = ipw_send_scan_request_ext(priv, &scan);
43f66a6c 6440 if (err) {
ea2b26e0 6441 IPW_DEBUG_HC("Sending scan command failed: %08X\n", err);
b095c381 6442 goto done;
43f66a6c
JK		 6443 }
6444
ea2b26e0 6445 priv->status |= STATUS_SCANNING;
ea177305
DW		 6446 if (direct) {
6447 priv->status &= ~STATUS_DIRECT_SCAN_PENDING;
6448 priv->direct_scan_ssid_len = 0;
6449 } else
6450 priv->status &= ~STATUS_SCAN_PENDING;
6451
afbf30a2
JK		 6452 queue_delayed_work(priv->workqueue, &priv->scan_check,
6453 IPW_SCAN_CHECK_WATCHDOG);
094c4d2d 6454done:
4644151b 6455 mutex_unlock(&priv->mutex);
b095c381 6456 return err;
c848d0af
JK		 6457}
6458
c4028958
DH		 6459static void ipw_request_passive_scan(struct work_struct *work)
6460{
6461 struct ipw_priv *priv =
ea177305
DW		 6462 container_of(work, struct ipw_priv, request_passive_scan.work);
6463 ipw_request_scan_helper(priv, IW_SCAN_TYPE_PASSIVE, 0);
094c4d2d
ZY		 6464}
6465
c4028958
DH		 6466static void ipw_request_scan(struct work_struct *work)
6467{
6468 struct ipw_priv *priv =
6469 container_of(work, struct ipw_priv, request_scan.work);
ea177305
DW		 6470 ipw_request_scan_helper(priv, IW_SCAN_TYPE_ACTIVE, 0);
6471}
6472
6473static void ipw_request_direct_scan(struct work_struct *work)
6474{
6475 struct ipw_priv *priv =
6476 container_of(work, struct ipw_priv, request_direct_scan.work);
6477 ipw_request_scan_helper(priv, IW_SCAN_TYPE_ACTIVE, 1);
094c4d2d
ZY		 6478}
6479
c4028958 6480static void ipw_bg_abort_scan(struct work_struct *work)
c848d0af 6481{
c4028958
DH		 6482 struct ipw_priv *priv =
6483 container_of(work, struct ipw_priv, abort_scan);
4644151b 6484 mutex_lock(&priv->mutex);
c4028958 6485 ipw_abort_scan(priv);
4644151b 6486 mutex_unlock(&priv->mutex);
c848d0af
JK		 6487}
6488
ea2b26e0
JK		 6489static int ipw_wpa_enable(struct ipw_priv *priv, int value)
6490{
b095c381
JK		 6491 /* This is called when wpa_supplicant loads and closes the driver
6492 * interface. */
cdd1fa1e 6493 priv->ieee->wpa_enabled = value;
b095c381 6494 return 0;
ea2b26e0
JK		 6495}
6496
ea2b26e0
JK		 6497static int ipw_wpa_set_auth_algs(struct ipw_priv *priv, int value)
6498{
6499 struct ieee80211_device *ieee = priv->ieee;
6500 struct ieee80211_security sec = {
6501 .flags = SEC_AUTH_MODE,
6502 };
6503 int ret = 0;
6504
afbf30a2 6505 if (value & IW_AUTH_ALG_SHARED_KEY) {
ea2b26e0
JK		 6506 sec.auth_mode = WLAN_AUTH_SHARED_KEY;
6507 ieee->open_wep = 0;
afbf30a2 6508 } else if (value & IW_AUTH_ALG_OPEN_SYSTEM) {
ea2b26e0
JK		 6509 sec.auth_mode = WLAN_AUTH_OPEN;
6510 ieee->open_wep = 1;
3e234b4e
ZY		 6511 } else if (value & IW_AUTH_ALG_LEAP) {
6512 sec.auth_mode = WLAN_AUTH_LEAP;
6513 ieee->open_wep = 1;
afbf30a2
JK		 6514 } else
6515 return -EINVAL;
ea2b26e0
JK		 6516
6517 if (ieee->set_security)
6518 ieee->set_security(ieee->dev, &sec);
6519 else
6520 ret = -EOPNOTSUPP;
6521
6522 return ret;
6523}
6524
a73e22b2
AB		 6525static void ipw_wpa_assoc_frame(struct ipw_priv *priv, char *wpa_ie,
6526 int wpa_ie_len)
afbf30a2
JK		 6527{
6528 /* make sure WPA is enabled */
6529 ipw_wpa_enable(priv, 1);
afbf30a2
JK		 6530}
6531
6532static int ipw_set_rsn_capa(struct ipw_priv *priv,
6533 char *capabilities, int length)
6534{
afbf30a2
JK		 6535 IPW_DEBUG_HC("HOST_CMD_RSN_CAPABILITIES\n");
6536
0a7bcf26 6537 return ipw_send_cmd_pdu(priv, IPW_CMD_RSN_CAPABILITIES, length,
2638bc39 6538 capabilities);
afbf30a2
JK		 6539}
6540
b095c381 6541/*
afbf30a2
JK		 6542 * WE-18 support
6543 */
6544
6545/* SIOCSIWGENIE */
6546static int ipw_wx_set_genie(struct net_device *dev,
6547 struct iw_request_info *info,
6548 union iwreq_data *wrqu, char *extra)
ea2b26e0 6549{
afbf30a2
JK		 6550 struct ipw_priv *priv = ieee80211_priv(dev);
6551 struct ieee80211_device *ieee = priv->ieee;
6552 u8 *buf;
6553 int err = 0;
ea2b26e0 6554
afbf30a2
JK		 6555 if (wrqu->data.length > MAX_WPA_IE_LEN ||
6556 (wrqu->data.length && extra == NULL))
6557 return -EINVAL;
ea2b26e0 6558
afbf30a2
JK		 6559 if (wrqu->data.length) {
6560 buf = kmalloc(wrqu->data.length, GFP_KERNEL);
6561 if (buf == NULL) {
6562 err = -ENOMEM;
6563 goto out;
6564 }
6565
6566 memcpy(buf, extra, wrqu->data.length);
6567 kfree(ieee->wpa_ie);
6568 ieee->wpa_ie = buf;
6569 ieee->wpa_ie_len = wrqu->data.length;
b095c381 6570 } else {
afbf30a2
JK		 6571 kfree(ieee->wpa_ie);
6572 ieee->wpa_ie = NULL;
6573 ieee->wpa_ie_len = 0;
ea2b26e0 6574 }
afbf30a2
JK		 6575
6576 ipw_wpa_assoc_frame(priv, ieee->wpa_ie, ieee->wpa_ie_len);
6577 out:
afbf30a2
JK		 6578 return err;
6579}
6580
6581/* SIOCGIWGENIE */
6582static int ipw_wx_get_genie(struct net_device *dev,
6583 struct iw_request_info *info,
6584 union iwreq_data *wrqu, char *extra)
6585{
6586 struct ipw_priv *priv = ieee80211_priv(dev);
6587 struct ieee80211_device *ieee = priv->ieee;
6588 int err = 0;
6589
afbf30a2
JK		 6590 if (ieee->wpa_ie_len == 0 || ieee->wpa_ie == NULL) {
6591 wrqu->data.length = 0;
6592 goto out;
6593 }
6594
6595 if (wrqu->data.length < ieee->wpa_ie_len) {
6596 err = -E2BIG;
6597 goto out;
6598 }
6599
6600 wrqu->data.length = ieee->wpa_ie_len;
6601 memcpy(extra, ieee->wpa_ie, ieee->wpa_ie_len);
6602
6603 out:
afbf30a2
JK		 6604 return err;
6605}
6606
1fbfea54
ZY		 6607static int wext_cipher2level(int cipher)
6608{
6609 switch (cipher) {
6610 case IW_AUTH_CIPHER_NONE:
6611 return SEC_LEVEL_0;
6612 case IW_AUTH_CIPHER_WEP40:
6613 case IW_AUTH_CIPHER_WEP104:
6614 return SEC_LEVEL_1;
6615 case IW_AUTH_CIPHER_TKIP:
6616 return SEC_LEVEL_2;
6617 case IW_AUTH_CIPHER_CCMP:
6618 return SEC_LEVEL_3;
6619 default:
6620 return -1;
6621 }
6622}
6623
afbf30a2
JK		 6624/* SIOCSIWAUTH */
6625static int ipw_wx_set_auth(struct net_device *dev,
6626 struct iw_request_info *info,
6627 union iwreq_data *wrqu, char *extra)
6628{
6629 struct ipw_priv *priv = ieee80211_priv(dev);
6630 struct ieee80211_device *ieee = priv->ieee;
6631 struct iw_param *param = &wrqu->param;
274bfb8d 6632 struct lib80211_crypt_data *crypt;
afbf30a2
JK		 6633 unsigned long flags;
6634 int ret = 0;
6635
6636 switch (param->flags & IW_AUTH_INDEX) {
6637 case IW_AUTH_WPA_VERSION:
1fbfea54 6638 break;
afbf30a2 6639 case IW_AUTH_CIPHER_PAIRWISE:
1fbfea54
ZY		 6640 ipw_set_hw_decrypt_unicast(priv,
6641 wext_cipher2level(param->value));
6642 break;
afbf30a2 6643 case IW_AUTH_CIPHER_GROUP:
1fbfea54
ZY		 6644 ipw_set_hw_decrypt_multicast(priv,
6645 wext_cipher2level(param->value));
6646 break;
afbf30a2
JK		 6647 case IW_AUTH_KEY_MGMT:
6648 /*
6649 * ipw2200 does not use these parameters
6650 */
6651 break;
6652
6653 case IW_AUTH_TKIP_COUNTERMEASURES:
274bfb8d 6654 crypt = priv->ieee->crypt_info.crypt[priv->ieee->crypt_info.tx_keyidx];
991d1cc5 6655 if (!crypt || !crypt->ops->set_flags || !crypt->ops->get_flags)
afbf30a2 6656 break;
afbf30a2
JK		 6657
6658 flags = crypt->ops->get_flags(crypt->priv);
6659
6660 if (param->value)
6661 flags |= IEEE80211_CRYPTO_TKIP_COUNTERMEASURES;
6662 else
6663 flags &= ~IEEE80211_CRYPTO_TKIP_COUNTERMEASURES;
6664
6665 crypt->ops->set_flags(flags, crypt->priv);
6666
6667 break;
6668
6669 case IW_AUTH_DROP_UNENCRYPTED:{
6670 /* HACK:
6671 *
6672 * wpa_supplicant calls set_wpa_enabled when the driver
6673 * is loaded and unloaded, regardless of if WPA is being
6674 * used. No other calls are made which can be used to
6675 * determine if encryption will be used or not prior to
6676 * association being expected. If encryption is not being
6677 * used, drop_unencrypted is set to false, else true -- we
6678 * can use this to determine if the CAP_PRIVACY_ON bit should
6679 * be set.
6680 */
6681 struct ieee80211_security sec = {
6682 .flags = SEC_ENABLED,
6683 .enabled = param->value,
6684 };
6685 priv->ieee->drop_unencrypted = param->value;
6686 /* We only change SEC_LEVEL for open mode. Others
6687 * are set by ipw_wpa_set_encryption.
6688 */
6689 if (!param->value) {
6690 sec.flags |= SEC_LEVEL;
6691 sec.level = SEC_LEVEL_0;
6692 } else {
6693 sec.flags |= SEC_LEVEL;
6694 sec.level = SEC_LEVEL_1;
6695 }
6696 if (priv->ieee->set_security)
6697 priv->ieee->set_security(priv->ieee->dev, &sec);
6698 break;
6699 }
6700
6701 case IW_AUTH_80211_AUTH_ALG:
6702 ret = ipw_wpa_set_auth_algs(priv, param->value);
6703 break;
6704
6705 case IW_AUTH_WPA_ENABLED:
6706 ret = ipw_wpa_enable(priv, param->value);
e3c5a64e 6707 ipw_disassociate(priv);
afbf30a2
JK		 6708 break;
6709
6710 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6711 ieee->ieee802_1x = param->value;
6712 break;
6713
afbf30a2
JK		 6714 case IW_AUTH_PRIVACY_INVOKED:
6715 ieee->privacy_invoked = param->value;
6716 break;
6717
6718 default:
6719 return -EOPNOTSUPP;
6720 }
6721 return ret;
6722}
6723
6724/* SIOCGIWAUTH */
6725static int ipw_wx_get_auth(struct net_device *dev,
6726 struct iw_request_info *info,
6727 union iwreq_data *wrqu, char *extra)
6728{
6729 struct ipw_priv *priv = ieee80211_priv(dev);
6730 struct ieee80211_device *ieee = priv->ieee;
274bfb8d 6731 struct lib80211_crypt_data *crypt;
afbf30a2
JK		 6732 struct iw_param *param = &wrqu->param;
6733 int ret = 0;
6734
6735 switch (param->flags & IW_AUTH_INDEX) {
6736 case IW_AUTH_WPA_VERSION:
6737 case IW_AUTH_CIPHER_PAIRWISE:
6738 case IW_AUTH_CIPHER_GROUP:
6739 case IW_AUTH_KEY_MGMT:
6740 /*
6741 * wpa_supplicant will control these internally
6742 */
6743 ret = -EOPNOTSUPP;
6744 break;
6745
6746 case IW_AUTH_TKIP_COUNTERMEASURES:
274bfb8d 6747 crypt = priv->ieee->crypt_info.crypt[priv->ieee->crypt_info.tx_keyidx];
991d1cc5 6748 if (!crypt || !crypt->ops->get_flags)
afbf30a2 6749 break;
afbf30a2
JK		 6750
6751 param->value = (crypt->ops->get_flags(crypt->priv) &
6752 IEEE80211_CRYPTO_TKIP_COUNTERMEASURES) ? 1 : 0;
6753
6754 break;
6755
6756 case IW_AUTH_DROP_UNENCRYPTED:
6757 param->value = ieee->drop_unencrypted;
6758 break;
6759
6760 case IW_AUTH_80211_AUTH_ALG:
6761 param->value = ieee->sec.auth_mode;
6762 break;
6763
6764 case IW_AUTH_WPA_ENABLED:
6765 param->value = ieee->wpa_enabled;
6766 break;
6767
6768 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6769 param->value = ieee->ieee802_1x;
6770 break;
6771
6772 case IW_AUTH_ROAMING_CONTROL:
6773 case IW_AUTH_PRIVACY_INVOKED:
6774 param->value = ieee->privacy_invoked;
6775 break;
6776
6777 default:
6778 return -EOPNOTSUPP;
6779 }
6780 return 0;
6781}
6782
6783/* SIOCSIWENCODEEXT */
6784static int ipw_wx_set_encodeext(struct net_device *dev,
6785 struct iw_request_info *info,
6786 union iwreq_data *wrqu, char *extra)
6787{
6788 struct ipw_priv *priv = ieee80211_priv(dev);
6789 struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
6790
6791 if (hwcrypto) {
afbf30a2 6792 if (ext->alg == IW_ENCODE_ALG_TKIP) {
567deaf6
HL		 6793 /* IPW HW can't build TKIP MIC,
6794 host decryption still needed */
6795 if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
6796 priv->ieee->host_mc_decrypt = 1;
6797 else {
6798 priv->ieee->host_encrypt = 0;
6799 priv->ieee->host_encrypt_msdu = 1;
6800 priv->ieee->host_decrypt = 1;
6801 }
afbf30a2
JK		 6802 } else {
6803 priv->ieee->host_encrypt = 0;
6804 priv->ieee->host_encrypt_msdu = 0;
6805 priv->ieee->host_decrypt = 0;
567deaf6 6806 priv->ieee->host_mc_decrypt = 0;
afbf30a2
JK		 6807 }
6808 }
6809
6810 return ieee80211_wx_set_encodeext(priv->ieee, info, wrqu, extra);
6811}
6812
6813/* SIOCGIWENCODEEXT */
6814static int ipw_wx_get_encodeext(struct net_device *dev,
6815 struct iw_request_info *info,
6816 union iwreq_data *wrqu, char *extra)
6817{
6818 struct ipw_priv *priv = ieee80211_priv(dev);
6819 return ieee80211_wx_get_encodeext(priv->ieee, info, wrqu, extra);
6820}
6821
6822/* SIOCSIWMLME */
6823static int ipw_wx_set_mlme(struct net_device *dev,
6824 struct iw_request_info *info,
6825 union iwreq_data *wrqu, char *extra)
6826{
6827 struct ipw_priv *priv = ieee80211_priv(dev);
6828 struct iw_mlme *mlme = (struct iw_mlme *)extra;
e62e1ee0 6829 __le16 reason;
afbf30a2
JK		 6830
6831 reason = cpu_to_le16(mlme->reason_code);
6832
6833 switch (mlme->cmd) {
6834 case IW_MLME_DEAUTH:
67fd6b45 6835 /* silently ignore */
afbf30a2
JK		 6836 break;
6837
6838 case IW_MLME_DISASSOC:
6839 ipw_disassociate(priv);
6840 break;
6841
6842 default:
6843 return -EOPNOTSUPP;
6844 }
6845 return 0;
6846}
afbf30a2 6847
e43e3c1e 6848#ifdef CONFIG_IPW2200_QOS
afbf30a2
JK		 6849
6850/* QoS */
6851/*
6852* get the modulation type of the current network or
6853* the card current mode
6854*/
53d0bcf8 6855static u8 ipw_qos_current_mode(struct ipw_priv * priv)
afbf30a2
JK		 6856{
6857 u8 mode = 0;
6858
6859 if (priv->status & STATUS_ASSOCIATED) {
6860 unsigned long flags;
6861
6862 spin_lock_irqsave(&priv->ieee->lock, flags);
6863 mode = priv->assoc_network->mode;
6864 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6865 } else {
6866 mode = priv->ieee->mode;
6867 }
6868 IPW_DEBUG_QOS("QoS network/card mode %d \n", mode);
6869 return mode;
b095c381 6870}
ea2b26e0 6871
b095c381
JK		 6872/*
6873* Handle management frame beacon and probe response
6874*/
3b9990cb
JK		 6875static int ipw_qos_handle_probe_response(struct ipw_priv *priv,
6876 int active_network,
6877 struct ieee80211_network *network)
b095c381
JK		 6878{
6879 u32 size = sizeof(struct ieee80211_qos_parameters);
6880
afbf30a2 6881 if (network->capability & WLAN_CAPABILITY_IBSS)
b095c381
JK		 6882 network->qos_data.active = network->qos_data.supported;
6883
6884 if (network->flags & NETWORK_HAS_QOS_MASK) {
afbf30a2
JK		 6885 if (active_network &&
6886 (network->flags & NETWORK_HAS_QOS_PARAMETERS))
b095c381
JK		 6887 network->qos_data.active = network->qos_data.supported;
6888
6889 if ((network->qos_data.active == 1) && (active_network == 1) &&
6890 (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
6891 (network->qos_data.old_param_count !=
6892 network->qos_data.param_count)) {
6893 network->qos_data.old_param_count =
6894 network->qos_data.param_count;
6895 schedule_work(&priv->qos_activate);
afbf30a2
JK		 6896 IPW_DEBUG_QOS("QoS parameters change call "
6897 "qos_activate\n");
b095c381 6898 }
ea2b26e0 6899 } else {
afbf30a2
JK		 6900 if ((priv->ieee->mode == IEEE_B) || (network->mode == IEEE_B))
6901 memcpy(&network->qos_data.parameters,
b095c381 6902 &def_parameters_CCK, size);
afbf30a2
JK		 6903 else
6904 memcpy(&network->qos_data.parameters,
b095c381 6905 &def_parameters_OFDM, size);
afbf30a2 6906
b095c381
JK		 6907 if ((network->qos_data.active == 1) && (active_network == 1)) {
6908 IPW_DEBUG_QOS("QoS was disabled call qos_activate \n");
6909 schedule_work(&priv->qos_activate);
6910 }
6911
6912 network->qos_data.active = 0;
6913 network->qos_data.supported = 0;
ea2b26e0 6914 }
afbf30a2
JK		 6915 if ((priv->status & STATUS_ASSOCIATED) &&
6916 (priv->ieee->iw_mode == IW_MODE_ADHOC) && (active_network == 0)) {
6917 if (memcmp(network->bssid, priv->bssid, ETH_ALEN))
c5d3dce8 6918 if (network->capability & WLAN_CAPABILITY_IBSS)
b095c381 6919 if ((network->ssid_len ==
afbf30a2
JK		 6920 priv->assoc_network->ssid_len) &&
6921 !memcmp(network->ssid,
6922 priv->assoc_network->ssid,
6923 network->ssid_len)) {
b095c381
JK		 6924 queue_work(priv->workqueue,
6925 &priv->merge_networks);
6926 }
b095c381 6927 }
ea2b26e0 6928
b095c381
JK		 6929 return 0;
6930}
6931
6932/*
6933* This function set up the firmware to support QoS. It sends
6934* IPW_CMD_QOS_PARAMETERS and IPW_CMD_WME_INFO
6935*/
6936static int ipw_qos_activate(struct ipw_priv *priv,
6937 struct ieee80211_qos_data *qos_network_data)
6938{
6939 int err;
6940 struct ieee80211_qos_parameters qos_parameters[QOS_QOS_SETS];
6941 struct ieee80211_qos_parameters *active_one = NULL;
6942 u32 size = sizeof(struct ieee80211_qos_parameters);
6943 u32 burst_duration;
6944 int i;
6945 u8 type;
6946
6947 type = ipw_qos_current_mode(priv);
6948
6949 active_one = &(qos_parameters[QOS_PARAM_SET_DEF_CCK]);
6950 memcpy(active_one, priv->qos_data.def_qos_parm_CCK, size);
6951 active_one = &(qos_parameters[QOS_PARAM_SET_DEF_OFDM]);
6952 memcpy(active_one, priv->qos_data.def_qos_parm_OFDM, size);
6953
6954 if (qos_network_data == NULL) {
6955 if (type == IEEE_B) {
6956 IPW_DEBUG_QOS("QoS activate network mode %d\n", type);
6957 active_one = &def_parameters_CCK;
6958 } else
6959 active_one = &def_parameters_OFDM;
6960
afbf30a2 6961 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6962 burst_duration = ipw_qos_get_burst_duration(priv);
6963 for (i = 0; i < QOS_QUEUE_NUM; i++)
afbf30a2 6964 qos_parameters[QOS_PARAM_SET_ACTIVE].tx_op_limit[i] =
8fffc15d 6965 cpu_to_le16(burst_duration);
afbf30a2 6966 } else if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
b095c381
JK		 6967 if (type == IEEE_B) {
6968 IPW_DEBUG_QOS("QoS activate IBSS nework mode %d\n",
6969 type);
6970 if (priv->qos_data.qos_enable == 0)
6971 active_one = &def_parameters_CCK;
6972 else
6973 active_one = priv->qos_data.def_qos_parm_CCK;
6974 } else {
6975 if (priv->qos_data.qos_enable == 0)
6976 active_one = &def_parameters_OFDM;
6977 else
6978 active_one = priv->qos_data.def_qos_parm_OFDM;
6979 }
afbf30a2 6980 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6981 } else {
6982 unsigned long flags;
6983 int active;
6984
6985 spin_lock_irqsave(&priv->ieee->lock, flags);
6986 active_one = &(qos_network_data->parameters);
6987 qos_network_data->old_param_count =
6988 qos_network_data->param_count;
afbf30a2 6989 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK		 6990 active = qos_network_data->supported;
6991 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6992
6993 if (active == 0) {
6994 burst_duration = ipw_qos_get_burst_duration(priv);
6995 for (i = 0; i < QOS_QUEUE_NUM; i++)
6996 qos_parameters[QOS_PARAM_SET_ACTIVE].
8fffc15d 6997 tx_op_limit[i] = cpu_to_le16(burst_duration);
b095c381
JK		 6998 }
6999 }
7000
7001 IPW_DEBUG_QOS("QoS sending IPW_CMD_QOS_PARAMETERS\n");
afbf30a2
JK		 7002 err = ipw_send_qos_params_command(priv,
7003 (struct ieee80211_qos_parameters *)
7004 &(qos_parameters[0]));
b095c381
JK		 7005 if (err)
7006 IPW_DEBUG_QOS("QoS IPW_CMD_QOS_PARAMETERS failed\n");
7007
7008 return err;
7009}
7010
7011/*
7012* send IPW_CMD_WME_INFO to the firmware
7013*/
7014static int ipw_qos_set_info_element(struct ipw_priv *priv)
7015{
7016 int ret = 0;
7017 struct ieee80211_qos_information_element qos_info;
7018
7019 if (priv == NULL)
7020 return -1;
7021
7022 qos_info.elementID = QOS_ELEMENT_ID;
7023 qos_info.length = sizeof(struct ieee80211_qos_information_element) - 2;
7024
7025 qos_info.version = QOS_VERSION_1;
7026 qos_info.ac_info = 0;
7027
7028 memcpy(qos_info.qui, qos_oui, QOS_OUI_LEN);
7029 qos_info.qui_type = QOS_OUI_TYPE;
7030 qos_info.qui_subtype = QOS_OUI_INFO_SUB_TYPE;
7031
7032 ret = ipw_send_qos_info_command(priv, &qos_info);
7033 if (ret != 0) {
7034 IPW_DEBUG_QOS("QoS error calling ipw_send_qos_info_command\n");
7035 }
7036 return ret;
7037}
7038
7039/*
7040* Set the QoS parameter with the association request structure
7041*/
7042static int ipw_qos_association(struct ipw_priv *priv,
7043 struct ieee80211_network *network)
7044{
7045 int err = 0;
7046 struct ieee80211_qos_data *qos_data = NULL;
7047 struct ieee80211_qos_data ibss_data = {
7048 .supported = 1,
7049 .active = 1,
7050 };
7051
7052 switch (priv->ieee->iw_mode) {
7053 case IW_MODE_ADHOC:
5d9428de 7054 BUG_ON(!(network->capability & WLAN_CAPABILITY_IBSS));
b095c381
JK		 7055
7056 qos_data = &ibss_data;
7057 break;
7058
7059 case IW_MODE_INFRA:
7060 qos_data = &network->qos_data;
7061 break;
7062
7063 default:
7064 BUG();
7065 break;
7066 }
7067
7068 err = ipw_qos_activate(priv, qos_data);
7069 if (err) {
7070 priv->assoc_request.policy_support &= ~HC_QOS_SUPPORT_ASSOC;
7071 return err;
7072 }
7073
7074 if (priv->qos_data.qos_enable && qos_data->supported) {
7075 IPW_DEBUG_QOS("QoS will be enabled for this association\n");
7076 priv->assoc_request.policy_support |= HC_QOS_SUPPORT_ASSOC;
7077 return ipw_qos_set_info_element(priv);
7078 }
7079
7080 return 0;
7081}
7082
7083/*
0779bf2d
ML		 7084* handling the beaconing responses. if we get different QoS setting
7085* off the network from the associated setting, adjust the QoS
b095c381
JK		 7086* setting
7087*/
7088static int ipw_qos_association_resp(struct ipw_priv *priv,
7089 struct ieee80211_network *network)
7090{
7091 int ret = 0;
7092 unsigned long flags;
7093 u32 size = sizeof(struct ieee80211_qos_parameters);
7094 int set_qos_param = 0;
7095
afbf30a2
JK		 7096 if ((priv == NULL) || (network == NULL) ||
7097 (priv->assoc_network == NULL))
b095c381
JK		 7098 return ret;
7099
7100 if (!(priv->status & STATUS_ASSOCIATED))
7101 return ret;
7102
afbf30a2 7103 if ((priv->ieee->iw_mode != IW_MODE_INFRA))
b095c381 7104 return ret;
b095c381
JK		 7105
7106 spin_lock_irqsave(&priv->ieee->lock, flags);
7107 if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
afbf30a2 7108 memcpy(&priv->assoc_network->qos_data, &network->qos_data,
b095c381
JK		 7109 sizeof(struct ieee80211_qos_data));
7110 priv->assoc_network->qos_data.active = 1;
7111 if ((network->qos_data.old_param_count !=
7112 network->qos_data.param_count)) {
7113 set_qos_param = 1;
7114 network->qos_data.old_param_count =
7115 network->qos_data.param_count;
7116 }
7117
7118 } else {
afbf30a2
JK		 7119 if ((network->mode == IEEE_B) || (priv->ieee->mode == IEEE_B))
7120 memcpy(&priv->assoc_network->qos_data.parameters,
b095c381 7121 &def_parameters_CCK, size);
afbf30a2
JK		 7122 else
7123 memcpy(&priv->assoc_network->qos_data.parameters,
b095c381 7124 &def_parameters_OFDM, size);
b095c381
JK		 7125 priv->assoc_network->qos_data.active = 0;
7126 priv->assoc_network->qos_data.supported = 0;
7127 set_qos_param = 1;
7128 }
7129
7130 spin_unlock_irqrestore(&priv->ieee->lock, flags);
7131
7132 if (set_qos_param == 1)
7133 schedule_work(&priv->qos_activate);
7134
7135 return ret;
7136}
7137
7138static u32 ipw_qos_get_burst_duration(struct ipw_priv *priv)
7139{
7140 u32 ret = 0;
7141
7142 if ((priv == NULL))
7143 return 0;
7144
afbf30a2 7145 if (!(priv->ieee->modulation & IEEE80211_OFDM_MODULATION))
b095c381 7146 ret = priv->qos_data.burst_duration_CCK;
afbf30a2 7147 else
b095c381 7148 ret = priv->qos_data.burst_duration_OFDM;
afbf30a2 7149
b095c381
JK		 7150 return ret;
7151}
7152
7153/*
7154* Initialize the setting of QoS global
7155*/
7156static void ipw_qos_init(struct ipw_priv *priv, int enable,
7157 int burst_enable, u32 burst_duration_CCK,
7158 u32 burst_duration_OFDM)
7159{
7160 priv->qos_data.qos_enable = enable;
7161
7162 if (priv->qos_data.qos_enable) {
7163 priv->qos_data.def_qos_parm_CCK = &def_qos_parameters_CCK;
7164 priv->qos_data.def_qos_parm_OFDM = &def_qos_parameters_OFDM;
7165 IPW_DEBUG_QOS("QoS is enabled\n");
7166 } else {
7167 priv->qos_data.def_qos_parm_CCK = &def_parameters_CCK;
7168 priv->qos_data.def_qos_parm_OFDM = &def_parameters_OFDM;
7169 IPW_DEBUG_QOS("QoS is not enabled\n");
7170 }
7171
7172 priv->qos_data.burst_enable = burst_enable;
7173
7174 if (burst_enable) {
7175 priv->qos_data.burst_duration_CCK = burst_duration_CCK;
7176 priv->qos_data.burst_duration_OFDM = burst_duration_OFDM;
7177 } else {
7178 priv->qos_data.burst_duration_CCK = 0;
7179 priv->qos_data.burst_duration_OFDM = 0;
7180 }
7181}
7182
7183/*
7184* map the packet priority to the right TX Queue
7185*/
7186static int ipw_get_tx_queue_number(struct ipw_priv *priv, u16 priority)
7187{
7188 if (priority > 7 || !priv->qos_data.qos_enable)
7189 priority = 0;
7190
7191 return from_priority_to_tx_queue[priority] - 1;
7192}
7193
a5cf4fe6
ZY		 7194static int ipw_is_qos_active(struct net_device *dev,
7195 struct sk_buff *skb)
b095c381 7196{
a5cf4fe6 7197 struct ipw_priv *priv = ieee80211_priv(dev);
b095c381
JK		 7198 struct ieee80211_qos_data *qos_data = NULL;
7199 int active, supported;
a5cf4fe6
ZY		 7200 u8 *daddr = skb->data + ETH_ALEN;
7201 int unicast = !is_multicast_ether_addr(daddr);
b095c381
JK		 7202
7203 if (!(priv->status & STATUS_ASSOCIATED))
7204 return 0;
7205
7206 qos_data = &priv->assoc_network->qos_data;
7207
b095c381
JK		 7208 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
7209 if (unicast == 0)
7210 qos_data->active = 0;
7211 else
7212 qos_data->active = qos_data->supported;
7213 }
b095c381
JK		 7214 active = qos_data->active;
7215 supported = qos_data->supported;
afbf30a2
JK		 7216 IPW_DEBUG_QOS("QoS %d network is QoS active %d supported %d "
7217 "unicast %d\n",
7218 priv->qos_data.qos_enable, active, supported, unicast);
a5cf4fe6
ZY		 7219 if (active && priv->qos_data.qos_enable)
7220 return 1;
b095c381 7221
a5cf4fe6
ZY		 7222 return 0;
7223
7224}
7225/*
7226* add QoS parameter to the TX command
7227*/
7228static int ipw_qos_set_tx_queue_command(struct ipw_priv *priv,
7229 u16 priority,
7230 struct tfd_data *tfd)
7231{
7232 int tx_queue_id = 0;
7233
7234
7235 tx_queue_id = from_priority_to_tx_queue[priority] - 1;
7236 tfd->tx_flags_ext |= DCT_FLAG_EXT_QOS_ENABLED;
7237
7238 if (priv->qos_data.qos_no_ack_mask & (1UL << tx_queue_id)) {
7239 tfd->tx_flags &= ~DCT_FLAG_ACK_REQD;
851ca268 7240 tfd->tfd.tfd_26.mchdr.qos_ctrl |= cpu_to_le16(CTRL_QOS_NO_ACK);
a5cf4fe6
ZY		 7241 }
7242 return 0;
b095c381
JK		 7243}
7244
7245/*
7246* background support to run QoS activate functionality
7247*/
c4028958 7248static void ipw_bg_qos_activate(struct work_struct *work)
b095c381 7249{
c4028958
DH		 7250 struct ipw_priv *priv =
7251 container_of(work, struct ipw_priv, qos_activate);
b095c381
JK		 7252
7253 if (priv == NULL)
7254 return;
7255
4644151b 7256 mutex_lock(&priv->mutex);
b095c381
JK		 7257
7258 if (priv->status & STATUS_ASSOCIATED)
7259 ipw_qos_activate(priv, &(priv->assoc_network->qos_data));
7260
4644151b 7261 mutex_unlock(&priv->mutex);
b095c381
JK		 7262}
7263
3b9990cb
JK		 7264static int ipw_handle_probe_response(struct net_device *dev,
7265 struct ieee80211_probe_response *resp,
7266 struct ieee80211_network *network)
b095c381
JK		 7267{
7268 struct ipw_priv *priv = ieee80211_priv(dev);
3b9990cb
JK		 7269 int active_network = ((priv->status & STATUS_ASSOCIATED) &&
7270 (network == priv->assoc_network));
43f66a6c 7271
3b9990cb 7272 ipw_qos_handle_probe_response(priv, active_network, network);
43f66a6c 7273
3b9990cb
JK		 7274 return 0;
7275}
43f66a6c 7276
3b9990cb
JK		 7277static int ipw_handle_beacon(struct net_device *dev,
7278 struct ieee80211_beacon *resp,
7279 struct ieee80211_network *network)
7280{
7281 struct ipw_priv *priv = ieee80211_priv(dev);
7282 int active_network = ((priv->status & STATUS_ASSOCIATED) &&
7283 (network == priv->assoc_network));
bf79451e 7284
3b9990cb 7285 ipw_qos_handle_probe_response(priv, active_network, network);
bf79451e 7286
b095c381
JK		 7287 return 0;
7288}
bf79451e 7289
3b9990cb
JK		 7290static int ipw_handle_assoc_response(struct net_device *dev,
7291 struct ieee80211_assoc_response *resp,
7292 struct ieee80211_network *network)
7293{
7294 struct ipw_priv *priv = ieee80211_priv(dev);
7295 ipw_qos_association_resp(priv, network);
7296 return 0;
7297}
43f66a6c 7298
b095c381
JK		 7299static int ipw_send_qos_params_command(struct ipw_priv *priv, struct ieee80211_qos_parameters
7300 *qos_param)
7301{
4e22699f
ZY		 7302 return ipw_send_cmd_pdu(priv, IPW_CMD_QOS_PARAMETERS,
7303 sizeof(*qos_param) * 3, qos_param);
b095c381
JK		 7304}
7305
7306static int ipw_send_qos_info_command(struct ipw_priv *priv, struct ieee80211_qos_information_element
7307 *qos_param)
7308{
4e22699f
ZY		 7309 return ipw_send_cmd_pdu(priv, IPW_CMD_WME_INFO, sizeof(*qos_param),
7310 qos_param);
43f66a6c
JK		 7311}
7312
e43e3c1e 7313#endif /* CONFIG_IPW2200_QOS */
b095c381 7314
43f66a6c
JK		 7315static int ipw_associate_network(struct ipw_priv *priv,
7316 struct ieee80211_network *network,
0edd5b44 7317 struct ipw_supported_rates *rates, int roaming)
43f66a6c
JK		 7318{
7319 int err;
9387b7ca 7320 DECLARE_SSID_BUF(ssid);
43f66a6c
JK		 7321
7322 if (priv->config & CFG_FIXED_RATE)
b095c381 7323 ipw_set_fixed_rate(priv, network->mode);
43f66a6c
JK		 7324
7325 if (!(priv->config & CFG_STATIC_ESSID)) {
bf79451e 7326 priv->essid_len = min(network->ssid_len,
0edd5b44 7327 (u8) IW_ESSID_MAX_SIZE);
43f66a6c
JK		 7328 memcpy(priv->essid, network->ssid, priv->essid_len);
7329 }
7330
7331 network->last_associate = jiffies;
7332
7333 memset(&priv->assoc_request, 0, sizeof(priv->assoc_request));
7334 priv->assoc_request.channel = network->channel;
3e234b4e
ZY		 7335 priv->assoc_request.auth_key = 0;
7336
43f66a6c 7337 if ((priv->capability & CAP_PRIVACY_ON) &&
3e234b4e 7338 (priv->ieee->sec.auth_mode == WLAN_AUTH_SHARED_KEY)) {
43f66a6c 7339 priv->assoc_request.auth_type = AUTH_SHARED_KEY;
b095c381
JK		 7340 priv->assoc_request.auth_key = priv->ieee->sec.active_key;
7341
1ba61e05 7342 if (priv->ieee->sec.level == SEC_LEVEL_1)
b095c381 7343 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_WEP);
3e234b4e
ZY		 7344
7345 } else if ((priv->capability & CAP_PRIVACY_ON) &&
7346 (priv->ieee->sec.auth_mode == WLAN_AUTH_LEAP))
7347 priv->assoc_request.auth_type = AUTH_LEAP;
7348 else
43f66a6c 7349 priv->assoc_request.auth_type = AUTH_OPEN;
43f66a6c 7350
b095c381 7351 if (priv->ieee->wpa_ie_len) {
5b5e807f 7352 priv->assoc_request.policy_support = cpu_to_le16(0x02); /* RSN active */
ea2b26e0
JK		 7353 ipw_set_rsn_capa(priv, priv->ieee->wpa_ie,
7354 priv->ieee->wpa_ie_len);
7355 }
43f66a6c 7356
bf79451e
JG		 7357 /*
7358 * It is valid for our ieee device to support multiple modes, but
7359 * when it comes to associating to a given network we have to choose
43f66a6c
JK		 7360 * just one mode.
7361 */
7362 if (network->mode & priv->ieee->mode & IEEE_A)
7363 priv->assoc_request.ieee_mode = IPW_A_MODE;
7364 else if (network->mode & priv->ieee->mode & IEEE_G)
7365 priv->assoc_request.ieee_mode = IPW_G_MODE;
7366 else if (network->mode & priv->ieee->mode & IEEE_B)
7367 priv->assoc_request.ieee_mode = IPW_B_MODE;
7368
5b5e807f 7369 priv->assoc_request.capability = cpu_to_le16(network->capability);
ea2b26e0
JK		 7370 if ((network->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
7371 && !(priv->config & CFG_PREAMBLE_LONG)) {
7372 priv->assoc_request.preamble_length = DCT_FLAG_SHORT_PREAMBLE;
7373 } else {
7374 priv->assoc_request.preamble_length = DCT_FLAG_LONG_PREAMBLE;
7375
7376 /* Clear the short preamble if we won't be supporting it */
7377 priv->assoc_request.capability &=
5b5e807f 7378 ~cpu_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE);
ea2b26e0
JK		 7379 }
7380
afbf30a2
JK		 7381 /* Clear capability bits that aren't used in Ad Hoc */
7382 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
7383 priv->assoc_request.capability &=
5b5e807f 7384 ~cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT_TIME);
afbf30a2 7385
43f66a6c 7386 IPW_DEBUG_ASSOC("%sssocation attempt: '%s', channel %d, "
ea2b26e0 7387 "802.11%c [%d], %s[:%s], enc=%s%s%s%c%c\n",
43f66a6c 7388 roaming ? "Rea" : "A",
9387b7ca 7389 print_ssid(ssid, priv->essid, priv->essid_len),
bf79451e
JG		 7390 network->channel,
7391 ipw_modes[priv->assoc_request.ieee_mode],
7392 rates->num_rates,
ea2b26e0
JK		 7393 (priv->assoc_request.preamble_length ==
7394 DCT_FLAG_LONG_PREAMBLE) ? "long" : "short",
7395 network->capability &
7396 WLAN_CAPABILITY_SHORT_PREAMBLE ? "short" : "long",
43f66a6c 7397 priv->capability & CAP_PRIVACY_ON ? "on " : "off",
bf79451e
JG		 7398 priv->capability & CAP_PRIVACY_ON ?
7399 (priv->capability & CAP_SHARED_KEY ? "(shared)" :
43f66a6c
JK		 7400 "(open)") : "",
7401 priv->capability & CAP_PRIVACY_ON ? " key=" : "",
bf79451e 7402 priv->capability & CAP_PRIVACY_ON ?
b095c381 7403 '1' + priv->ieee->sec.active_key : '.',
0edd5b44 7404 priv->capability & CAP_PRIVACY_ON ? '.' : ' ');
43f66a6c 7405
5b5e807f 7406 priv->assoc_request.beacon_interval = cpu_to_le16(network->beacon_interval);
43f66a6c 7407 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
0edd5b44 7408 (network->time_stamp[0] == 0) && (network->time_stamp[1] == 0)) {
43f66a6c
JK		 7409 priv->assoc_request.assoc_type = HC_IBSS_START;
7410 priv->assoc_request.assoc_tsf_msw = 0;
7411 priv->assoc_request.assoc_tsf_lsw = 0;
7412 } else {
7413 if (unlikely(roaming))
7414 priv->assoc_request.assoc_type = HC_REASSOCIATE;
7415 else
7416 priv->assoc_request.assoc_type = HC_ASSOCIATE;
5b5e807f
AV		 7417 priv->assoc_request.assoc_tsf_msw = cpu_to_le32(network->time_stamp[1]);
7418 priv->assoc_request.assoc_tsf_lsw = cpu_to_le32(network->time_stamp[0]);
43f66a6c
JK		 7419 }
7420
afbf30a2 7421 memcpy(priv->assoc_request.bssid, network->bssid, ETH_ALEN);
43f66a6c
JK		 7422
7423 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
7424 memset(&priv->assoc_request.dest, 0xFF, ETH_ALEN);
5b5e807f 7425 priv->assoc_request.atim_window = cpu_to_le16(network->atim_window);
43f66a6c 7426 } else {
afbf30a2 7427 memcpy(priv->assoc_request.dest, network->bssid, ETH_ALEN);
43f66a6c
JK		 7428 priv->assoc_request.atim_window = 0;
7429 }
7430
5b5e807f 7431 priv->assoc_request.listen_interval = cpu_to_le16(network->listen_interval);
bf79451e 7432
43f66a6c
JK		 7433 err = ipw_send_ssid(priv, priv->essid, priv->essid_len);
7434 if (err) {
7435 IPW_DEBUG_HC("Attempt to send SSID command failed.\n");
7436 return err;
7437 }
7438
7439 rates->ieee_mode = priv->assoc_request.ieee_mode;
7440 rates->purpose = IPW_RATE_CONNECT;
7441 ipw_send_supported_rates(priv, rates);
bf79451e 7442
43f66a6c
JK		 7443 if (priv->assoc_request.ieee_mode == IPW_G_MODE)
7444 priv->sys_config.dot11g_auto_detection = 1;
7445 else
7446 priv->sys_config.dot11g_auto_detection = 0;
c848d0af
JK		 7447
7448 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
7449 priv->sys_config.answer_broadcast_ssid_probe = 1;
7450 else
7451 priv->sys_config.answer_broadcast_ssid_probe = 0;
7452
d685b8c2 7453 err = ipw_send_system_config(priv);
43f66a6c
JK		 7454 if (err) {
7455 IPW_DEBUG_HC("Attempt to send sys config command failed.\n");
7456 return err;
7457 }
bf79451e 7458
43f66a6c 7459 IPW_DEBUG_ASSOC("Association sensitivity: %d\n", network->stats.rssi);
ea2b26e0 7460 err = ipw_set_sensitivity(priv, network->stats.rssi + IPW_RSSI_TO_DBM);
43f66a6c
JK		 7461 if (err) {
7462 IPW_DEBUG_HC("Attempt to send associate command failed.\n");
7463 return err;
7464 }
7465
7466 /*
7467 * If preemption is enabled, it is possible for the association
7468 * to complete before we return from ipw_send_associate. Therefore
7469 * we have to be sure and update our priviate data first.
7470 */
7471 priv->channel = network->channel;
7472 memcpy(priv->bssid, network->bssid, ETH_ALEN);
bf79451e 7473 priv->status |= STATUS_ASSOCIATING;
43f66a6c
JK		 7474 priv->status &= ~STATUS_SECURITY_UPDATED;
7475
7476 priv->assoc_network = network;
7477
e43e3c1e 7478#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 7479 ipw_qos_association(priv, network);
7480#endif
7481
43f66a6c
JK		 7482 err = ipw_send_associate(priv, &priv->assoc_request);
7483 if (err) {
7484 IPW_DEBUG_HC("Attempt to send associate command failed.\n");
7485 return err;
7486 }
bf79451e 7487
e174961c 7488 IPW_DEBUG(IPW_DL_STATE, "associating: '%s' %pM \n",
9387b7ca 7489 print_ssid(ssid, priv->essid, priv->essid_len),
e174961c 7490 priv->bssid);
43f66a6c
JK		 7491
7492 return 0;
7493}
7494
7495static void ipw_roam(void *data)
7496{
7497 struct ipw_priv *priv = data;
7498 struct ieee80211_network *network = NULL;
7499 struct ipw_network_match match = {
7500 .network = priv->assoc_network
7501 };
7502
7503 /* The roaming process is as follows:
bf79451e
JG		 7504 *
7505 * 1. Missed beacon threshold triggers the roaming process by
43f66a6c
JK		 7506 * setting the status ROAM bit and requesting a scan.
7507 * 2. When the scan completes, it schedules the ROAM work
7508 * 3. The ROAM work looks at all of the known networks for one that
7509 * is a better network than the currently associated. If none
7510 * found, the ROAM process is over (ROAM bit cleared)
7511 * 4. If a better network is found, a disassociation request is
7512 * sent.
7513 * 5. When the disassociation completes, the roam work is again
7514 * scheduled. The second time through, the driver is no longer
7515 * associated, and the newly selected network is sent an
bf79451e 7516 * association request.
43f66a6c
JK		 7517 * 6. At this point ,the roaming process is complete and the ROAM
7518 * status bit is cleared.
7519 */
7520
7521 /* If we are no longer associated, and the roaming bit is no longer
7522 * set, then we are not actively roaming, so just return */
7523 if (!(priv->status & (STATUS_ASSOCIATED | STATUS_ROAMING)))
7524 return;
bf79451e 7525
43f66a6c 7526 if (priv->status & STATUS_ASSOCIATED) {
bf79451e 7527 /* First pass through ROAM process -- look for a better
43f66a6c 7528 * network */
a613bffd 7529 unsigned long flags;
43f66a6c
JK		 7530 u8 rssi = priv->assoc_network->stats.rssi;
7531 priv->assoc_network->stats.rssi = -128;
a613bffd 7532 spin_lock_irqsave(&priv->ieee->lock, flags);
43f66a6c
JK		 7533 list_for_each_entry(network, &priv->ieee->network_list, list) {
7534 if (network != priv->assoc_network)
7535 ipw_best_network(priv, &match, network, 1);
7536 }
a613bffd 7537 spin_unlock_irqrestore(&priv->ieee->lock, flags);
43f66a6c 7538 priv->assoc_network->stats.rssi = rssi;
bf79451e 7539
43f66a6c
JK		 7540 if (match.network == priv->assoc_network) {
7541 IPW_DEBUG_ASSOC("No better APs in this network to "
7542 "roam to.\n");
7543 priv->status &= ~STATUS_ROAMING;
7544 ipw_debug_config(priv);
7545 return;
7546 }
bf79451e 7547
43f66a6c
JK		 7548 ipw_send_disassociate(priv, 1);
7549 priv->assoc_network = match.network;
7550
7551 return;
bf79451e 7552 }
43f66a6c
JK		 7553
7554 /* Second pass through ROAM process -- request association */
7555 ipw_compatible_rates(priv, priv->assoc_network, &match.rates);
7556 ipw_associate_network(priv, priv->assoc_network, &match.rates, 1);
7557 priv->status &= ~STATUS_ROAMING;
7558}
7559
c4028958 7560static void ipw_bg_roam(struct work_struct *work)
c848d0af 7561{
c4028958
DH		 7562 struct ipw_priv *priv =
7563 container_of(work, struct ipw_priv, roam);
4644151b 7564 mutex_lock(&priv->mutex);
c4028958 7565 ipw_roam(priv);
4644151b 7566 mutex_unlock(&priv->mutex);
c848d0af
JK		 7567}
7568
7569static int ipw_associate(void *data)
43f66a6c
JK		 7570{
7571 struct ipw_priv *priv = data;
7572
7573 struct ieee80211_network *network = NULL;
7574 struct ipw_network_match match = {
7575 .network = NULL
7576 };
7577 struct ipw_supported_rates *rates;
7578 struct list_head *element;
a613bffd 7579 unsigned long flags;
9387b7ca 7580 DECLARE_SSID_BUF(ssid);
43f66a6c 7581
b095c381
JK		 7582 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
7583 IPW_DEBUG_ASSOC("Not attempting association (monitor mode)\n");
7584 return 0;
7585 }
7586
c848d0af 7587 if (priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
afbf30a2
JK		 7588 IPW_DEBUG_ASSOC("Not attempting association (already in "
7589 "progress)\n");
c848d0af
JK		 7590 return 0;
7591 }
7592
e6324726
HL		 7593 if (priv->status & STATUS_DISASSOCIATING) {
7594 IPW_DEBUG_ASSOC("Not attempting association (in "
7595 "disassociating)\n ");
7596 queue_work(priv->workqueue, &priv->associate);
7597 return 0;
7598 }
7599
c848d0af 7600 if (!ipw_is_init(priv) || (priv->status & STATUS_SCANNING)) {
afbf30a2
JK		 7601 IPW_DEBUG_ASSOC("Not attempting association (scanning or not "
7602 "initialized)\n");
c848d0af
JK		 7603 return 0;
7604 }
43f66a6c
JK		 7605
7606 if (!(priv->config & CFG_ASSOCIATE) &&
3e4127fa 7607 !(priv->config & (CFG_STATIC_ESSID | CFG_STATIC_BSSID))) {
43f66a6c 7608 IPW_DEBUG_ASSOC("Not attempting association (associate=0)\n");
c848d0af 7609 return 0;
43f66a6c
JK		 7610 }
7611
a613bffd
JK		 7612 /* Protect our use of the network_list */
7613 spin_lock_irqsave(&priv->ieee->lock, flags);
bf79451e 7614 list_for_each_entry(network, &priv->ieee->network_list, list)
0edd5b44 7615 ipw_best_network(priv, &match, network, 0);
43f66a6c
JK		 7616
7617 network = match.network;
7618 rates = &match.rates;
7619
7620 if (network == NULL &&
7621 priv->ieee->iw_mode == IW_MODE_ADHOC &&
7622 priv->config & CFG_ADHOC_CREATE &&
7623 priv->config & CFG_STATIC_ESSID &&
a6d4eae8
DW		 7624 priv->config & CFG_STATIC_CHANNEL) {
7625 /* Use oldest network if the free list is empty */
7626 if (list_empty(&priv->ieee->network_free_list)) {
7627 struct ieee80211_network *oldest = NULL;
7628 struct ieee80211_network *target;
a6d4eae8
DW		 7629
7630 list_for_each_entry(target, &priv->ieee->network_list, list) {
7631 if ((oldest == NULL) ||
7632 (target->last_scanned < oldest->last_scanned))
7633 oldest = target;
7634 }
7635
7636 /* If there are no more slots, expire the oldest */
7637 list_del(&oldest->list);
7638 target = oldest;
e174961c 7639 IPW_DEBUG_ASSOC("Expired '%s' (%pM) from "
a6d4eae8 7640 "network list.\n",
9387b7ca
JL		 7641 print_ssid(ssid, target->ssid,
7642 target->ssid_len),
e174961c 7643 target->bssid);
a6d4eae8
DW		 7644 list_add_tail(&target->list,
7645 &priv->ieee->network_free_list);
7646 }
7647
43f66a6c 7648 element = priv->ieee->network_free_list.next;
0edd5b44 7649 network = list_entry(element, struct ieee80211_network, list);
43f66a6c
JK		 7650 ipw_adhoc_create(priv, network);
7651 rates = &priv->rates;
7652 list_del(element);
7653 list_add_tail(&network->list, &priv->ieee->network_list);
7654 }
a613bffd 7655 spin_unlock_irqrestore(&priv->ieee->lock, flags);
bf79451e 7656
43f66a6c
JK		 7657 /* If we reached the end of the list, then we don't have any valid
7658 * matching APs */
7659 if (!network) {
7660 ipw_debug_config(priv);
7661
b095c381
JK		 7662 if (!(priv->status & STATUS_SCANNING)) {
7663 if (!(priv->config & CFG_SPEED_SCAN))
7664 queue_delayed_work(priv->workqueue,
7665 &priv->request_scan,
7666 SCAN_INTERVAL);
7667 else
c4028958
DH		 7668 queue_delayed_work(priv->workqueue,
7669 &priv->request_scan, 0);
b095c381 7670 }
bf79451e 7671
c848d0af 7672 return 0;
43f66a6c
JK		 7673 }
7674
7675 ipw_associate_network(priv, network, rates, 0);
c848d0af
JK		 7676
7677 return 1;
7678}
7679
c4028958 7680static void ipw_bg_associate(struct work_struct *work)
c848d0af 7681{
c4028958
DH		 7682 struct ipw_priv *priv =
7683 container_of(work, struct ipw_priv, associate);
4644151b 7684 mutex_lock(&priv->mutex);
c4028958 7685 ipw_associate(priv);
4644151b 7686 mutex_unlock(&priv->mutex);
43f66a6c 7687}
bf79451e 7688
b095c381
JK		 7689static void ipw_rebuild_decrypted_skb(struct ipw_priv *priv,
7690 struct sk_buff *skb)
7691{
7692 struct ieee80211_hdr *hdr;
7693 u16 fc;
7694
7695 hdr = (struct ieee80211_hdr *)skb->data;
72118015 7696 fc = le16_to_cpu(hdr->frame_control);
b095c381
JK		 7697 if (!(fc & IEEE80211_FCTL_PROTECTED))
7698 return;
7699
7700 fc &= ~IEEE80211_FCTL_PROTECTED;
72118015 7701 hdr->frame_control = cpu_to_le16(fc);
b095c381
JK		 7702 switch (priv->ieee->sec.level) {
7703 case SEC_LEVEL_3:
7704 /* Remove CCMP HDR */
7705 memmove(skb->data + IEEE80211_3ADDR_LEN,
7706 skb->data + IEEE80211_3ADDR_LEN + 8,
7707 skb->len - IEEE80211_3ADDR_LEN - 8);
f4ff497d 7708 skb_trim(skb, skb->len - 16); /* CCMP_HDR_LEN + CCMP_MIC_LEN */
b095c381
JK		 7709 break;
7710 case SEC_LEVEL_2:
7711 break;
7712 case SEC_LEVEL_1:
7713 /* Remove IV */
7714 memmove(skb->data + IEEE80211_3ADDR_LEN,
7715 skb->data + IEEE80211_3ADDR_LEN + 4,
7716 skb->len - IEEE80211_3ADDR_LEN - 4);
f4ff497d 7717 skb_trim(skb, skb->len - 8); /* IV + ICV */
b095c381
JK		 7718 break;
7719 case SEC_LEVEL_0:
7720 break;
7721 default:
7722 printk(KERN_ERR "Unknow security level %d\n",
7723 priv->ieee->sec.level);
7724 break;
7725 }
43f66a6c 7726}
bf79451e 7727
b095c381
JK		 7728static void ipw_handle_data_packet(struct ipw_priv *priv,
7729 struct ipw_rx_mem_buffer *rxb,
7730 struct ieee80211_rx_stats *stats)
43f66a6c 7731{
ce55cbaf 7732 struct net_device *dev = priv->net_dev;
567deaf6 7733 struct ieee80211_hdr_4addr *hdr;
43f66a6c
JK		 7734 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7735
7736 /* We received data from the HW, so stop the watchdog */
ce55cbaf 7737 dev->trans_start = jiffies;
43f66a6c 7738
bf79451e 7739 /* We only process data packets if the
43f66a6c 7740 * interface is open */
a613bffd 7741 if (unlikely((le16_to_cpu(pkt->u.frame.length) + IPW_RX_FRAME_SIZE) >
43f66a6c 7742 skb_tailroom(rxb->skb))) {
ce55cbaf 7743 dev->stats.rx_errors++;
43f66a6c
JK		 7744 priv->wstats.discard.misc++;
7745 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7746 return;
7747 } else if (unlikely(!netif_running(priv->net_dev))) {
ce55cbaf 7748 dev->stats.rx_dropped++;
43f66a6c
JK		 7749 priv->wstats.discard.misc++;
7750 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7751 return;
7752 }
7753
7754 /* Advance skb->data to the start of the actual payload */
aaa4d308 7755 skb_reserve(rxb->skb, offsetof(struct ipw_rx_packet, u.frame.data));
43f66a6c
JK		 7756
7757 /* Set the size of the skb to the size of the frame */
a613bffd 7758 skb_put(rxb->skb, le16_to_cpu(pkt->u.frame.length));
43f66a6c
JK		 7759
7760 IPW_DEBUG_RX("Rx packet of %d bytes.\n", rxb->skb->len);
7761
b095c381 7762 /* HW decrypt will not clear the WEP bit, MIC, PN, etc. */
567deaf6
HL		 7763 hdr = (struct ieee80211_hdr_4addr *)rxb->skb->data;
7764 if (priv->ieee->iw_mode != IW_MODE_MONITOR &&
3c19065a 7765 (is_multicast_ether_addr(hdr->addr1) ?
567deaf6 7766 !priv->ieee->host_mc_decrypt : !priv->ieee->host_decrypt))
b095c381
JK		 7767 ipw_rebuild_decrypted_skb(priv, rxb->skb);
7768
bf79451e 7769 if (!ieee80211_rx(priv->ieee, rxb->skb, stats))
ce55cbaf 7770 dev->stats.rx_errors++;
a613bffd 7771 else { /* ieee80211_rx succeeded, so it now owns the SKB */
43f66a6c 7772 rxb->skb = NULL;
b095c381 7773 __ipw_led_activity_on(priv);
a613bffd 7774 }
43f66a6c
JK		 7775}
7776
459d4087 7777#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK		 7778static void ipw_handle_data_packet_monitor(struct ipw_priv *priv,
7779 struct ipw_rx_mem_buffer *rxb,
7780 struct ieee80211_rx_stats *stats)
7781{
ce55cbaf 7782 struct net_device *dev = priv->net_dev;
24a47dbd
MK		 7783 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7784 struct ipw_rx_frame *frame = &pkt->u.frame;
7785
7786 /* initial pull of some data */
7787 u16 received_channel = frame->received_channel;
7788 u8 antennaAndPhy = frame->antennaAndPhy;
7789 s8 antsignal = frame->rssi_dbm - IPW_RSSI_TO_DBM; /* call it signed anyhow */
7790 u16 pktrate = frame->rate;
7791
7792 /* Magic struct that slots into the radiotap header -- no reason
7793 * to build this manually element by element, we can write it much
7794 * more efficiently than we can parse it. ORDER MATTERS HERE */
d685b8c2 7795 struct ipw_rt_hdr *ipw_rt;
24a47dbd
MK		 7796
7797 short len = le16_to_cpu(pkt->u.frame.length);
7798
7799 /* We received data from the HW, so stop the watchdog */
ce55cbaf 7800 dev->trans_start = jiffies;
24a47dbd
MK		 7801
7802 /* We only process data packets if the
7803 * interface is open */
7804 if (unlikely((le16_to_cpu(pkt->u.frame.length) + IPW_RX_FRAME_SIZE) >
7805 skb_tailroom(rxb->skb))) {
ce55cbaf 7806 dev->stats.rx_errors++;
24a47dbd
MK		 7807 priv->wstats.discard.misc++;
7808 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7809 return;
7810 } else if (unlikely(!netif_running(priv->net_dev))) {
ce55cbaf 7811 dev->stats.rx_dropped++;
24a47dbd
MK		 7812 priv->wstats.discard.misc++;
7813 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7814 return;
7815 }
7816
7817 /* Libpcap 0.9.3+ can handle variable length radiotap, so we'll use
7818 * that now */
7819 if (len > IPW_RX_BUF_SIZE - sizeof(struct ipw_rt_hdr)) {
7820 /* FIXME: Should alloc bigger skb instead */
ce55cbaf 7821 dev->stats.rx_dropped++;
24a47dbd
MK		 7822 priv->wstats.discard.misc++;
7823 IPW_DEBUG_DROP("Dropping too large packet in monitor\n");
7824 return;
7825 }
7826
7827 /* copy the frame itself */
7828 memmove(rxb->skb->data + sizeof(struct ipw_rt_hdr),
7829 rxb->skb->data + IPW_RX_FRAME_SIZE, len);
7830
24a47dbd
MK		 7831 ipw_rt = (struct ipw_rt_hdr *)rxb->skb->data;
7832
7833 ipw_rt->rt_hdr.it_version = PKTHDR_RADIOTAP_VERSION;
7834 ipw_rt->rt_hdr.it_pad = 0; /* always good to zero */
743b84d2 7835 ipw_rt->rt_hdr.it_len = cpu_to_le16(sizeof(struct ipw_rt_hdr)); /* total header+data */
24a47dbd
MK		 7836
7837 /* Big bitfield of all the fields we provide in radiotap */
743b84d2
AV		 7838 ipw_rt->rt_hdr.it_present = cpu_to_le32(
7839 (1 << IEEE80211_RADIOTAP_TSFT) |
4b1f8a99 7840 (1 << IEEE80211_RADIOTAP_FLAGS) |
24a47dbd
MK		 7841 (1 << IEEE80211_RADIOTAP_RATE) |
7842 (1 << IEEE80211_RADIOTAP_CHANNEL) |
7843 (1 << IEEE80211_RADIOTAP_DBM_ANTSIGNAL) |
d685b8c2 7844 (1 << IEEE80211_RADIOTAP_DBM_ANTNOISE) |
24a47dbd
MK		 7845 (1 << IEEE80211_RADIOTAP_ANTENNA));
7846
7847 /* Zero the flags, we'll add to them as we go */
7848 ipw_rt->rt_flags = 0;
4b1f8a99
ZY		 7849 ipw_rt->rt_tsf = (u64)(frame->parent_tsf[3] << 24 |
7850 frame->parent_tsf[2] << 16 |
7851 frame->parent_tsf[1] << 8 |
7852 frame->parent_tsf[0]);
24a47dbd
MK		 7853
7854 /* Convert signal to DBM */
7855 ipw_rt->rt_dbmsignal = antsignal;
4b1f8a99 7856 ipw_rt->rt_dbmnoise = frame->noise;
24a47dbd
MK		 7857
7858 /* Convert the channel data and set the flags */
7859 ipw_rt->rt_channel = cpu_to_le16(ieee80211chan2mhz(received_channel));
7860 if (received_channel > 14) { /* 802.11a */
7861 ipw_rt->rt_chbitmask =
7862 cpu_to_le16((IEEE80211_CHAN_OFDM | IEEE80211_CHAN_5GHZ));
7863 } else if (antennaAndPhy & 32) { /* 802.11b */
7864 ipw_rt->rt_chbitmask =
7865 cpu_to_le16((IEEE80211_CHAN_CCK | IEEE80211_CHAN_2GHZ));
7866 } else { /* 802.11g */
7867 ipw_rt->rt_chbitmask =
472caf8c 7868 cpu_to_le16(IEEE80211_CHAN_OFDM | IEEE80211_CHAN_2GHZ);
24a47dbd
MK		 7869 }
7870
7871 /* set the rate in multiples of 500k/s */
7872 switch (pktrate) {
7873 case IPW_TX_RATE_1MB:
7874 ipw_rt->rt_rate = 2;
7875 break;
7876 case IPW_TX_RATE_2MB:
7877 ipw_rt->rt_rate = 4;
7878 break;
7879 case IPW_TX_RATE_5MB:
7880 ipw_rt->rt_rate = 10;
7881 break;
7882 case IPW_TX_RATE_6MB:
7883 ipw_rt->rt_rate = 12;
7884 break;
7885 case IPW_TX_RATE_9MB:
7886 ipw_rt->rt_rate = 18;
7887 break;
7888 case IPW_TX_RATE_11MB:
7889 ipw_rt->rt_rate = 22;
7890 break;
7891 case IPW_TX_RATE_12MB:
7892 ipw_rt->rt_rate = 24;
7893 break;
7894 case IPW_TX_RATE_18MB:
7895 ipw_rt->rt_rate = 36;
7896 break;
7897 case IPW_TX_RATE_24MB:
7898 ipw_rt->rt_rate = 48;
7899 break;
7900 case IPW_TX_RATE_36MB:
7901 ipw_rt->rt_rate = 72;
7902 break;
7903 case IPW_TX_RATE_48MB:
7904 ipw_rt->rt_rate = 96;
7905 break;
7906 case IPW_TX_RATE_54MB:
7907 ipw_rt->rt_rate = 108;
7908 break;
7909 default:
7910 ipw_rt->rt_rate = 0;
7911 break;
7912 }
7913
7914 /* antenna number */
7915 ipw_rt->rt_antenna = (antennaAndPhy & 3); /* Is this right? */
7916
7917 /* set the preamble flag if we have it */
7918 if ((antennaAndPhy & 64))
7919 ipw_rt->rt_flags |= IEEE80211_RADIOTAP_F_SHORTPRE;
7920
7921 /* Set the size of the skb to the size of the frame */
7922 skb_put(rxb->skb, len + sizeof(struct ipw_rt_hdr));
43f66a6c
JK		 7923
7924 IPW_DEBUG_RX("Rx packet of %d bytes.\n", rxb->skb->len);
7925
bf79451e 7926 if (!ieee80211_rx(priv->ieee, rxb->skb, stats))
ce55cbaf 7927 dev->stats.rx_errors++;
24a47dbd
MK		 7928 else { /* ieee80211_rx succeeded, so it now owns the SKB */
7929 rxb->skb = NULL;
7930 /* no LED during capture */
7931 }
7932}
7933#endif
7934
d685b8c2
ZY		 7935#ifdef CONFIG_IPW2200_PROMISCUOUS
7936#define ieee80211_is_probe_response(fc) \
7937 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT && \
7938 (fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_PROBE_RESP )
7939
7940#define ieee80211_is_management(fc) \
7941 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT)
7942
7943#define ieee80211_is_control(fc) \
7944 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_CTL)
7945
7946#define ieee80211_is_data(fc) \
7947 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_DATA)
7948
7949#define ieee80211_is_assoc_request(fc) \
7950 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_ASSOC_REQ)
7951
7952#define ieee80211_is_reassoc_request(fc) \
7953 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_REASSOC_REQ)
7954
7955static void ipw_handle_promiscuous_rx(struct ipw_priv *priv,
7956 struct ipw_rx_mem_buffer *rxb,
7957 struct ieee80211_rx_stats *stats)
7958{
ce55cbaf 7959 struct net_device *dev = priv->prom_net_dev;
d685b8c2
ZY		 7960 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7961 struct ipw_rx_frame *frame = &pkt->u.frame;
7962 struct ipw_rt_hdr *ipw_rt;
7963
7964 /* First cache any information we need before we overwrite
7965 * the information provided in the skb from the hardware */
7966 struct ieee80211_hdr *hdr;
7967 u16 channel = frame->received_channel;
7968 u8 phy_flags = frame->antennaAndPhy;
7969 s8 signal = frame->rssi_dbm - IPW_RSSI_TO_DBM;
7970 s8 noise = frame->noise;
7971 u8 rate = frame->rate;
7972 short len = le16_to_cpu(pkt->u.frame.length);
d685b8c2
ZY		 7973 struct sk_buff *skb;
7974 int hdr_only = 0;
7975 u16 filter = priv->prom_priv->filter;
7976
7977 /* If the filter is set to not include Rx frames then return */
7978 if (filter & IPW_PROM_NO_RX)
7979 return;
7980
d685b8c2 7981 /* We received data from the HW, so stop the watchdog */
ce55cbaf 7982 dev->trans_start = jiffies;
d685b8c2
ZY		 7983
7984 if (unlikely((len + IPW_RX_FRAME_SIZE) > skb_tailroom(rxb->skb))) {
ce55cbaf 7985 dev->stats.rx_errors++;
d685b8c2
ZY		 7986 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7987 return;
7988 }
7989
7990 /* We only process data packets if the interface is open */
ce55cbaf
SH		 7991 if (unlikely(!netif_running(dev))) {
7992 dev->stats.rx_dropped++;
d685b8c2
ZY		 7993 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7994 return;
7995 }
7996
7997 /* Libpcap 0.9.3+ can handle variable length radiotap, so we'll use
7998 * that now */
7999 if (len > IPW_RX_BUF_SIZE - sizeof(struct ipw_rt_hdr)) {
8000 /* FIXME: Should alloc bigger skb instead */
ce55cbaf 8001 dev->stats.rx_dropped++;
d685b8c2
ZY		 8002 IPW_DEBUG_DROP("Dropping too large packet in monitor\n");
8003 return;
8004 }
8005
8006 hdr = (void *)rxb->skb->data + IPW_RX_FRAME_SIZE;
72118015 8007 if (ieee80211_is_management(le16_to_cpu(hdr->frame_control))) {
d685b8c2
ZY		 8008 if (filter & IPW_PROM_NO_MGMT)
8009 return;
8010 if (filter & IPW_PROM_MGMT_HEADER_ONLY)
8011 hdr_only = 1;
72118015 8012 } else if (ieee80211_is_control(le16_to_cpu(hdr->frame_control))) {
d685b8c2
ZY		 8013 if (filter & IPW_PROM_NO_CTL)
8014 return;
8015 if (filter & IPW_PROM_CTL_HEADER_ONLY)
8016 hdr_only = 1;
72118015 8017 } else if (ieee80211_is_data(le16_to_cpu(hdr->frame_control))) {
d685b8c2
ZY		 8018 if (filter & IPW_PROM_NO_DATA)
8019 return;
8020 if (filter & IPW_PROM_DATA_HEADER_ONLY)
8021 hdr_only = 1;
8022 }
8023
8024 /* Copy the SKB since this is for the promiscuous side */
8025 skb = skb_copy(rxb->skb, GFP_ATOMIC);
8026 if (skb == NULL) {
8027 IPW_ERROR("skb_clone failed for promiscuous copy.\n");
8028 return;
8029 }
8030
8031 /* copy the frame data to write after where the radiotap header goes */
8032 ipw_rt = (void *)skb->data;
8033
8034 if (hdr_only)
72118015 8035 len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_control));
d685b8c2
ZY		 8036
8037 memcpy(ipw_rt->payload, hdr, len);
8038
d685b8c2
ZY		 8039 ipw_rt->rt_hdr.it_version = PKTHDR_RADIOTAP_VERSION;
8040 ipw_rt->rt_hdr.it_pad = 0; /* always good to zero */
743b84d2 8041 ipw_rt->rt_hdr.it_len = cpu_to_le16(sizeof(*ipw_rt)); /* total header+data */
d685b8c2
ZY		 8042
8043 /* Set the size of the skb to the size of the frame */
743b84d2 8044 skb_put(skb, sizeof(*ipw_rt) + len);
d685b8c2
ZY		 8045
8046 /* Big bitfield of all the fields we provide in radiotap */
743b84d2
AV		 8047 ipw_rt->rt_hdr.it_present = cpu_to_le32(
8048 (1 << IEEE80211_RADIOTAP_TSFT) |
4b1f8a99 8049 (1 << IEEE80211_RADIOTAP_FLAGS) |
d685b8c2
ZY		 8050 (1 << IEEE80211_RADIOTAP_RATE) |
8051 (1 << IEEE80211_RADIOTAP_CHANNEL) |
8052 (1 << IEEE80211_RADIOTAP_DBM_ANTSIGNAL) |
8053 (1 << IEEE80211_RADIOTAP_DBM_ANTNOISE) |
8054 (1 << IEEE80211_RADIOTAP_ANTENNA));
8055
8056 /* Zero the flags, we'll add to them as we go */
8057 ipw_rt->rt_flags = 0;
4b1f8a99
ZY		 8058 ipw_rt->rt_tsf = (u64)(frame->parent_tsf[3] << 24 |
8059 frame->parent_tsf[2] << 16 |
8060 frame->parent_tsf[1] << 8 |
8061 frame->parent_tsf[0]);
d685b8c2
ZY		 8062
8063 /* Convert to DBM */
8064 ipw_rt->rt_dbmsignal = signal;
8065 ipw_rt->rt_dbmnoise = noise;
8066
8067 /* Convert the channel data and set the flags */
8068 ipw_rt->rt_channel = cpu_to_le16(ieee80211chan2mhz(channel));
8069 if (channel > 14) { /* 802.11a */
8070 ipw_rt->rt_chbitmask =
8071 cpu_to_le16((IEEE80211_CHAN_OFDM | IEEE80211_CHAN_5GHZ));
8072 } else if (phy_flags & (1 << 5)) { /* 802.11b */
8073 ipw_rt->rt_chbitmask =
8074 cpu_to_le16((IEEE80211_CHAN_CCK | IEEE80211_CHAN_2GHZ));
8075 } else { /* 802.11g */
8076 ipw_rt->rt_chbitmask =
472caf8c 8077 cpu_to_le16(IEEE80211_CHAN_OFDM | IEEE80211_CHAN_2GHZ);
d685b8c2
ZY		 8078 }
8079
8080 /* set the rate in multiples of 500k/s */
8081 switch (rate) {
8082 case IPW_TX_RATE_1MB:
8083 ipw_rt->rt_rate = 2;
8084 break;
8085 case IPW_TX_RATE_2MB:
8086 ipw_rt->rt_rate = 4;
8087 break;
8088 case IPW_TX_RATE_5MB:
8089 ipw_rt->rt_rate = 10;
8090 break;
8091 case IPW_TX_RATE_6MB:
8092 ipw_rt->rt_rate = 12;
8093 break;
8094 case IPW_TX_RATE_9MB:
8095 ipw_rt->rt_rate = 18;
8096 break;
8097 case IPW_TX_RATE_11MB:
8098 ipw_rt->rt_rate = 22;
8099 break;
8100 case IPW_TX_RATE_12MB:
8101 ipw_rt->rt_rate = 24;
8102 break;
8103 case IPW_TX_RATE_18MB:
8104 ipw_rt->rt_rate = 36;
8105 break;
8106 case IPW_TX_RATE_24MB:
8107 ipw_rt->rt_rate = 48;
8108 break;
8109 case IPW_TX_RATE_36MB:
8110 ipw_rt->rt_rate = 72;
8111 break;
8112 case IPW_TX_RATE_48MB:
8113 ipw_rt->rt_rate = 96;
8114 break;
8115 case IPW_TX_RATE_54MB:
8116 ipw_rt->rt_rate = 108;
8117 break;
8118 default:
8119 ipw_rt->rt_rate = 0;
8120 break;
8121 }
8122
8123 /* antenna number */
8124 ipw_rt->rt_antenna = (phy_flags & 3);
8125
8126 /* set the preamble flag if we have it */
8127 if (phy_flags & (1 << 6))
8128 ipw_rt->rt_flags |= IEEE80211_RADIOTAP_F_SHORTPRE;
8129
8130 IPW_DEBUG_RX("Rx packet of %d bytes.\n", skb->len);
8131
8132 if (!ieee80211_rx(priv->prom_priv->ieee, skb, stats)) {
ce55cbaf 8133 dev->stats.rx_errors++;
d685b8c2
ZY		 8134 dev_kfree_skb_any(skb);
8135 }
8136}
8137#endif
8138
858119e1 8139static int is_network_packet(struct ipw_priv *priv,
ea2b26e0
JK		 8140 struct ieee80211_hdr_4addr *header)
8141{
8142 /* Filter incoming packets to determine if they are targetted toward
8143 * this network, discarding packets coming from ourselves */
8144 switch (priv->ieee->iw_mode) {
a613bffd 8145 case IW_MODE_ADHOC: /* Header: Dest. | Source | BSSID */
c848d0af
JK		 8146 /* packets from our adapter are dropped (echo) */
8147 if (!memcmp(header->addr2, priv->net_dev->dev_addr, ETH_ALEN))
8148 return 0;
8149
90700fd9 8150 /* {broad,multi}cast packets to our BSSID go through */
3c19065a 8151 if (is_multicast_ether_addr(header->addr1))
ea2b26e0 8152 return !memcmp(header->addr3, priv->bssid, ETH_ALEN);
a613bffd
JK		 8153
8154 /* packets to our adapter go through */
8155 return !memcmp(header->addr1, priv->net_dev->dev_addr,
8156 ETH_ALEN);
a613bffd 8157
90700fd9 8158 case IW_MODE_INFRA: /* Header: Dest. | BSSID | Source */
c848d0af
JK		 8159 /* packets from our adapter are dropped (echo) */
8160 if (!memcmp(header->addr3, priv->net_dev->dev_addr, ETH_ALEN))
8161 return 0;
8162
90700fd9 8163 /* {broad,multi}cast packets to our BSS go through */
3c19065a 8164 if (is_multicast_ether_addr(header->addr1))
a613bffd
JK		 8165 return !memcmp(header->addr2, priv->bssid, ETH_ALEN);
8166
8167 /* packets to our adapter go through */
8168 return !memcmp(header->addr1, priv->net_dev->dev_addr,
8169 ETH_ALEN);
ea2b26e0 8170 }
a613bffd 8171
ea2b26e0
JK		 8172 return 1;
8173}
8174
afbf30a2
JK		 8175#define IPW_PACKET_RETRY_TIME HZ
8176
858119e1 8177static int is_duplicate_packet(struct ipw_priv *priv,
afbf30a2
JK		 8178 struct ieee80211_hdr_4addr *header)
8179{
afbf30a2
JK		 8180 u16 sc = le16_to_cpu(header->seq_ctl);
8181 u16 seq = WLAN_GET_SEQ_SEQ(sc);
8182 u16 frag = WLAN_GET_SEQ_FRAG(sc);
8183 u16 *last_seq, *last_frag;
8184 unsigned long *last_time;
8185
8186 switch (priv->ieee->iw_mode) {
8187 case IW_MODE_ADHOC:
8188 {
8189 struct list_head *p;
8190 struct ipw_ibss_seq *entry = NULL;
8191 u8 *mac = header->addr2;
8192 int index = mac[5] % IPW_IBSS_MAC_HASH_SIZE;
8193
8194 __list_for_each(p, &priv->ibss_mac_hash[index]) {
8195 entry =
8196 list_entry(p, struct ipw_ibss_seq, list);
8197 if (!memcmp(entry->mac, mac, ETH_ALEN))
8198 break;
8199 }
8200 if (p == &priv->ibss_mac_hash[index]) {
8201 entry = kmalloc(sizeof(*entry), GFP_ATOMIC);
8202 if (!entry) {
8203 IPW_ERROR
8204 ("Cannot malloc new mac entry\n");
8205 return 0;
8206 }
8207 memcpy(entry->mac, mac, ETH_ALEN);
8208 entry->seq_num = seq;
8209 entry->frag_num = frag;
8210 entry->packet_time = jiffies;
8211 list_add(&entry->list,
8212 &priv->ibss_mac_hash[index]);
8213 return 0;
8214 }
8215 last_seq = &entry->seq_num;
8216 last_frag = &entry->frag_num;
8217 last_time = &entry->packet_time;
8218 break;
8219 }
8220 case IW_MODE_INFRA:
8221 last_seq = &priv->last_seq_num;
8222 last_frag = &priv->last_frag_num;
8223 last_time = &priv->last_packet_time;
8224 break;
8225 default:
8226 return 0;
8227 }
8228 if ((*last_seq == seq) &&
8229 time_after(*last_time + IPW_PACKET_RETRY_TIME, jiffies)) {
8230 if (*last_frag == frag)
8231 goto drop;
8232 if (*last_frag + 1 != frag)
8233 /* out-of-order fragment */
8234 goto drop;
afbf30a2
JK		 8235 } else
8236 *last_seq = seq;
8237
f57ce7ce 8238 *last_frag = frag;
afbf30a2
JK		 8239 *last_time = jiffies;
8240 return 0;
8241
8242 drop:
87b016cb
ZY		 8243 /* Comment this line now since we observed the card receives
8244 * duplicate packets but the FCTL_RETRY bit is not set in the
8245 * IBSS mode with fragmentation enabled.
72118015 8246 BUG_ON(!(le16_to_cpu(header->frame_control) & IEEE80211_FCTL_RETRY)); */
afbf30a2
JK		 8247 return 1;
8248}
8249
b095c381
JK		 8250static void ipw_handle_mgmt_packet(struct ipw_priv *priv,
8251 struct ipw_rx_mem_buffer *rxb,
8252 struct ieee80211_rx_stats *stats)
8253{
8254 struct sk_buff *skb = rxb->skb;
8255 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)skb->data;
8256 struct ieee80211_hdr_4addr *header = (struct ieee80211_hdr_4addr *)
8257 (skb->data + IPW_RX_FRAME_SIZE);
8258
8259 ieee80211_rx_mgt(priv->ieee, header, stats);
8260
8261 if (priv->ieee->iw_mode == IW_MODE_ADHOC &&
8262 ((WLAN_FC_GET_STYPE(le16_to_cpu(header->frame_ctl)) ==
8263 IEEE80211_STYPE_PROBE_RESP) ||
8264 (WLAN_FC_GET_STYPE(le16_to_cpu(header->frame_ctl)) ==
8265 IEEE80211_STYPE_BEACON))) {
8266 if (!memcmp(header->addr3, priv->bssid, ETH_ALEN))
8267 ipw_add_station(priv, header->addr2);
8268 }
8269
8270 if (priv->config & CFG_NET_STATS) {
8271 IPW_DEBUG_HC("sending stat packet\n");
8272
8273 /* Set the size of the skb to the size of the full
8274 * ipw header and 802.11 frame */
8275 skb_put(skb, le16_to_cpu(pkt->u.frame.length) +
8276 IPW_RX_FRAME_SIZE);
8277
8278 /* Advance past the ipw packet header to the 802.11 frame */
8279 skb_pull(skb, IPW_RX_FRAME_SIZE);
8280
8281 /* Push the ieee80211_rx_stats before the 802.11 frame */
8282 memcpy(skb_push(skb, sizeof(*stats)), stats, sizeof(*stats));
8283
8284 skb->dev = priv->ieee->dev;
8285
8286 /* Point raw at the ieee80211_stats */
459a98ed 8287 skb_reset_mac_header(skb);
b095c381
JK		 8288
8289 skb->pkt_type = PACKET_OTHERHOST;
c1b4aa3f 8290 skb->protocol = cpu_to_be16(ETH_P_80211_STATS);
b095c381
JK		 8291 memset(skb->cb, 0, sizeof(rxb->skb->cb));
8292 netif_rx(skb);
43f66a6c 8293 rxb->skb = NULL;
b095c381 8294 }
43f66a6c
JK		 8295}
8296
43f66a6c
JK		 8297/*
8298 * Main entry function for recieving a packet with 80211 headers. This
8299 * should be called when ever the FW has notified us that there is a new
8300 * skb in the recieve queue.
8301 */
8302static void ipw_rx(struct ipw_priv *priv)
8303{
8304 struct ipw_rx_mem_buffer *rxb;
8305 struct ipw_rx_packet *pkt;
0dacca1f 8306 struct ieee80211_hdr_4addr *header;
43f66a6c
JK		 8307 u32 r, w, i;
8308 u8 network_packet;
943dbef4 8309 u8 fill_rx = 0;
43f66a6c 8310
b095c381
JK		 8311 r = ipw_read32(priv, IPW_RX_READ_INDEX);
8312 w = ipw_read32(priv, IPW_RX_WRITE_INDEX);
943dbef4
DW		 8313 i = priv->rxq->read;
8314
8315 if (ipw_rx_queue_space (priv->rxq) > (RX_QUEUE_SIZE / 2))
8316 fill_rx = 1;
43f66a6c
JK		 8317
8318 while (i != r) {
8319 rxb = priv->rxq->queue[i];
43f66a6c
JK		 8320 if (unlikely(rxb == NULL)) {
8321 printk(KERN_CRIT "Queue not allocated!\n");
8322 break;
8323 }
43f66a6c
JK		 8324 priv->rxq->queue[i] = NULL;
8325
8326 pci_dma_sync_single_for_cpu(priv->pci_dev, rxb->dma_addr,
b095c381 8327 IPW_RX_BUF_SIZE,
43f66a6c
JK		 8328 PCI_DMA_FROMDEVICE);
8329
8330 pkt = (struct ipw_rx_packet *)rxb->skb->data;
8331 IPW_DEBUG_RX("Packet: type=%02X seq=%02X bits=%02X\n",
8332 pkt->header.message_type,
0edd5b44 8333 pkt->header.rx_seq_num, pkt->header.control_bits);
43f66a6c
JK		 8334
8335 switch (pkt->header.message_type) {
0edd5b44
JG		 8336 case RX_FRAME_TYPE: /* 802.11 frame */ {
8337 struct ieee80211_rx_stats stats = {
851ca268 8338 .rssi = pkt->u.frame.rssi_dbm -
0edd5b44 8339 IPW_RSSI_TO_DBM,
c848d0af 8340 .signal =
b191608a
BM		 8341 le16_to_cpu(pkt->u.frame.rssi_dbm) -
8342 IPW_RSSI_TO_DBM + 0x100,
c848d0af
JK		 8343 .noise =
8344 le16_to_cpu(pkt->u.frame.noise),
0edd5b44
JG		 8345 .rate = pkt->u.frame.rate,
8346 .mac_time = jiffies,
8347 .received_channel =
8348 pkt->u.frame.received_channel,
8349 .freq =
8350 (pkt->u.frame.
8351 control & (1 << 0)) ?
8352 IEEE80211_24GHZ_BAND :
8353 IEEE80211_52GHZ_BAND,
a613bffd 8354 .len = le16_to_cpu(pkt->u.frame.length),
0edd5b44
JG		 8355 };
8356
8357 if (stats.rssi != 0)
8358 stats.mask |= IEEE80211_STATMASK_RSSI;
8359 if (stats.signal != 0)
8360 stats.mask |= IEEE80211_STATMASK_SIGNAL;
c848d0af
JK		 8361 if (stats.noise != 0)
8362 stats.mask |= IEEE80211_STATMASK_NOISE;
0edd5b44
JG		 8363 if (stats.rate != 0)
8364 stats.mask |= IEEE80211_STATMASK_RATE;
8365
8366 priv->rx_packets++;
43f66a6c 8367
d685b8c2
ZY		 8368#ifdef CONFIG_IPW2200_PROMISCUOUS
8369 if (priv->prom_net_dev && netif_running(priv->prom_net_dev))
8370 ipw_handle_promiscuous_rx(priv, rxb, &stats);
8371#endif
8372
b095c381 8373#ifdef CONFIG_IPW2200_MONITOR
0edd5b44 8374 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
459d4087 8375#ifdef CONFIG_IPW2200_RADIOTAP
d685b8c2
ZY		 8376
8377 ipw_handle_data_packet_monitor(priv,
8378 rxb,
8379 &stats);
24a47dbd 8380#else
d685b8c2
ZY		 8381 ipw_handle_data_packet(priv, rxb,
8382 &stats);
24a47dbd 8383#endif
0edd5b44
JG		 8384 break;
8385 }
43f66a6c 8386#endif
bf79451e 8387
0edd5b44 8388 header =
0dacca1f
JK		 8389 (struct ieee80211_hdr_4addr *)(rxb->skb->
8390 data +
8391 IPW_RX_FRAME_SIZE);
43f66a6c
JK		 8392 /* TODO: Check Ad-Hoc dest/source and make sure
8393 * that we are actually parsing these packets
bf79451e 8394 * correctly -- we should probably use the
43f66a6c
JK		 8395 * frame control of the packet and disregard
8396 * the current iw_mode */
0edd5b44 8397
ea2b26e0
JK		 8398 network_packet =
8399 is_network_packet(priv, header);
0edd5b44
JG		 8400 if (network_packet && priv->assoc_network) {
8401 priv->assoc_network->stats.rssi =
8402 stats.rssi;
00d21de5
ZY		 8403 priv->exp_avg_rssi =
8404 exponential_average(priv->exp_avg_rssi,
8405 stats.rssi, DEPTH_RSSI);
0edd5b44
JG		 8406 }
8407
8408 IPW_DEBUG_RX("Frame: len=%u\n",
a613bffd 8409 le16_to_cpu(pkt->u.frame.length));
0edd5b44 8410
a613bffd 8411 if (le16_to_cpu(pkt->u.frame.length) <
9d0be03a
ZY		 8412 ieee80211_get_hdrlen(le16_to_cpu(
8413 header->frame_ctl))) {
0edd5b44
JG		 8414 IPW_DEBUG_DROP
8415 ("Received packet is too small. "
8416 "Dropping.\n");
ce55cbaf 8417 priv->net_dev->stats.rx_errors++;
0edd5b44
JG		 8418 priv->wstats.discard.misc++;
8419 break;
8420 }
8421
a613bffd
JK		 8422 switch (WLAN_FC_GET_TYPE
8423 (le16_to_cpu(header->frame_ctl))) {
b095c381 8424
0edd5b44 8425 case IEEE80211_FTYPE_MGMT:
b095c381
JK		 8426 ipw_handle_mgmt_packet(priv, rxb,
8427 &stats);
0edd5b44
JG		 8428 break;
8429
8430 case IEEE80211_FTYPE_CTL:
8431 break;
8432
8433 case IEEE80211_FTYPE_DATA:
afbf30a2
JK		 8434 if (unlikely(!network_packet ||
8435 is_duplicate_packet(priv,
8436 header)))
8437 {
0edd5b44 8438 IPW_DEBUG_DROP("Dropping: "
e174961c
JB		 8439 "%pM, "
8440 "%pM, "
8441 "%pM\n",
8442 header->addr1,
8443 header->addr2,
8444 header->addr3);
b095c381
JK		 8445 break;
8446 }
8447
8448 ipw_handle_data_packet(priv, rxb,
8449 &stats);
8450
0edd5b44
JG		 8451 break;
8452 }
43f66a6c
JK		 8453 break;
8454 }
bf79451e 8455
0edd5b44
JG		 8456 case RX_HOST_NOTIFICATION_TYPE:{
8457 IPW_DEBUG_RX
8458 ("Notification: subtype=%02X flags=%02X size=%d\n",
43f66a6c
JK		 8459 pkt->u.notification.subtype,
8460 pkt->u.notification.flags,
720eeb43 8461 le16_to_cpu(pkt->u.notification.size));
0edd5b44
JG		 8462 ipw_rx_notification(priv, &pkt->u.notification);
8463 break;
8464 }
43f66a6c
JK		 8465
8466 default:
8467 IPW_DEBUG_RX("Bad Rx packet of type %d\n",
8468 pkt->header.message_type);
8469 break;
8470 }
bf79451e
JG		 8471
8472 /* For now we just don't re-use anything. We can tweak this
8473 * later to try and re-use notification packets and SKBs that
43f66a6c
JK		 8474 * fail to Rx correctly */
8475 if (rxb->skb != NULL) {
8476 dev_kfree_skb_any(rxb->skb);
8477 rxb->skb = NULL;
8478 }
bf79451e 8479
43f66a6c 8480 pci_unmap_single(priv->pci_dev, rxb->dma_addr,
b095c381 8481 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c 8482 list_add_tail(&rxb->list, &priv->rxq->rx_used);
bf79451e 8483
43f66a6c 8484 i = (i + 1) % RX_QUEUE_SIZE;
943dbef4
DW		 8485
8486 /* If there are a lot of unsued frames, restock the Rx queue
8487 * so the ucode won't assert */
8488 if (fill_rx) {
8489 priv->rxq->read = i;
8490 ipw_rx_queue_replenish(priv);
8491 }
43f66a6c
JK		 8492 }
8493
8494 /* Backtrack one entry */
943dbef4 8495 priv->rxq->read = i;
43f66a6c
JK		 8496 ipw_rx_queue_restock(priv);
8497}
8498
afbf30a2
JK		 8499#define DEFAULT_RTS_THRESHOLD 2304U
8500#define MIN_RTS_THRESHOLD 1U
8501#define MAX_RTS_THRESHOLD 2304U
8502#define DEFAULT_BEACON_INTERVAL 100U
8503#define DEFAULT_SHORT_RETRY_LIMIT 7U
8504#define DEFAULT_LONG_RETRY_LIMIT 4U
8505
d6d5b5c1
ZY		 8506/**
8507 * ipw_sw_reset
8508 * @option: options to control different reset behaviour
8509 * 0 = reset everything except the 'disable' module_param
8510 * 1 = reset everything and print out driver info (for probe only)
8511 * 2 = reset everything
8512 */
8513static int ipw_sw_reset(struct ipw_priv *priv, int option)
43f66a6c 8514{
afbf30a2
JK		 8515 int band, modulation;
8516 int old_mode = priv->ieee->iw_mode;
43f66a6c 8517
afbf30a2
JK		 8518 /* Initialize module parameter values here */
8519 priv->config = 0;
43f66a6c 8520
afbf30a2
JK		 8521 /* We default to disabling the LED code as right now it causes
8522 * too many systems to lock up... */
8523 if (!led)
8524 priv->config |= CFG_NO_LED;
43f66a6c 8525
afbf30a2
JK		 8526 if (associate)
8527 priv->config |= CFG_ASSOCIATE;
8528 else
8529 IPW_DEBUG_INFO("Auto associate disabled.\n");
bf79451e 8530
afbf30a2
JK		 8531 if (auto_create)
8532 priv->config |= CFG_ADHOC_CREATE;
8533 else
8534 IPW_DEBUG_INFO("Auto adhoc creation disabled.\n");
43f66a6c 8535
17ed081d
ZY		 8536 priv->config &= ~CFG_STATIC_ESSID;
8537 priv->essid_len = 0;
8538 memset(priv->essid, 0, IW_ESSID_MAX_SIZE);
8539
d6d5b5c1 8540 if (disable && option) {
afbf30a2
JK		 8541 priv->status |= STATUS_RF_KILL_SW;
8542 IPW_DEBUG_INFO("Radio disabled.\n");
43f66a6c 8543 }
bf79451e 8544
afbf30a2
JK		 8545 if (channel != 0) {
8546 priv->config |= CFG_STATIC_CHANNEL;
8547 priv->channel = channel;
8548 IPW_DEBUG_INFO("Bind to static channel %d\n", channel);
8549 /* TODO: Validate that provided channel is in range */
43f66a6c 8550 }
e43e3c1e 8551#ifdef CONFIG_IPW2200_QOS
afbf30a2
JK		 8552 ipw_qos_init(priv, qos_enable, qos_burst_enable,
8553 burst_duration_CCK, burst_duration_OFDM);
e43e3c1e 8554#endif /* CONFIG_IPW2200_QOS */
43f66a6c 8555
afbf30a2
JK		 8556 switch (mode) {
8557 case 1:
8558 priv->ieee->iw_mode = IW_MODE_ADHOC;
8559 priv->net_dev->type = ARPHRD_ETHER;
8560
8561 break;
8562#ifdef CONFIG_IPW2200_MONITOR
8563 case 2:
8564 priv->ieee->iw_mode = IW_MODE_MONITOR;
459d4087 8565#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK		 8566 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
8567#else
afbf30a2 8568 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 8569#endif
afbf30a2
JK		 8570 break;
8571#endif
8572 default:
8573 case 0:
8574 priv->net_dev->type = ARPHRD_ETHER;
8575 priv->ieee->iw_mode = IW_MODE_INFRA;
8576 break;
43f66a6c
JK		 8577 }
8578
afbf30a2
JK		 8579 if (hwcrypto) {
8580 priv->ieee->host_encrypt = 0;
8581 priv->ieee->host_encrypt_msdu = 0;
8582 priv->ieee->host_decrypt = 0;
567deaf6 8583 priv->ieee->host_mc_decrypt = 0;
afbf30a2
JK		 8584 }
8585 IPW_DEBUG_INFO("Hardware crypto [%s]\n", hwcrypto ? "on" : "off");
43f66a6c 8586
e402c937
ZY		 8587 /* IPW2200/2915 is abled to do hardware fragmentation. */
8588 priv->ieee->host_open_frag = 0;
bf79451e 8589
afbf30a2
JK		 8590 if ((priv->pci_dev->device == 0x4223) ||
8591 (priv->pci_dev->device == 0x4224)) {
e8c69e27 8592 if (option == 1)
afbf30a2
JK		 8593 printk(KERN_INFO DRV_NAME
8594 ": Detected Intel PRO/Wireless 2915ABG Network "
8595 "Connection\n");
8596 priv->ieee->abg_true = 1;
8597 band = IEEE80211_52GHZ_BAND | IEEE80211_24GHZ_BAND;
8598 modulation = IEEE80211_OFDM_MODULATION |
8599 IEEE80211_CCK_MODULATION;
8600 priv->adapter = IPW_2915ABG;
8601 priv->ieee->mode = IEEE_A | IEEE_G | IEEE_B;
43f66a6c 8602 } else {
e8c69e27 8603 if (option == 1)
afbf30a2
JK		 8604 printk(KERN_INFO DRV_NAME
8605 ": Detected Intel PRO/Wireless 2200BG Network "
8606 "Connection\n");
bf79451e 8607
afbf30a2
JK		 8608 priv->ieee->abg_true = 0;
8609 band = IEEE80211_24GHZ_BAND;
8610 modulation = IEEE80211_OFDM_MODULATION |
8611 IEEE80211_CCK_MODULATION;
8612 priv->adapter = IPW_2200BG;
8613 priv->ieee->mode = IEEE_G | IEEE_B;
43f66a6c
JK		 8614 }
8615
afbf30a2
JK		 8616 priv->ieee->freq_band = band;
8617 priv->ieee->modulation = modulation;
43f66a6c 8618
afbf30a2 8619 priv->rates_mask = IEEE80211_DEFAULT_RATES_MASK;
bf79451e 8620
afbf30a2
JK		 8621 priv->disassociate_threshold = IPW_MB_DISASSOCIATE_THRESHOLD_DEFAULT;
8622 priv->roaming_threshold = IPW_MB_ROAMING_THRESHOLD_DEFAULT;
43f66a6c 8623
afbf30a2
JK		 8624 priv->rts_threshold = DEFAULT_RTS_THRESHOLD;
8625 priv->short_retry_limit = DEFAULT_SHORT_RETRY_LIMIT;
8626 priv->long_retry_limit = DEFAULT_LONG_RETRY_LIMIT;
43f66a6c 8627
afbf30a2
JK		 8628 /* If power management is turned on, default to AC mode */
8629 priv->power_mode = IPW_POWER_AC;
8630 priv->tx_power = IPW_TX_POWER_DEFAULT;
8631
0ece35b5 8632 return old_mode == priv->ieee->iw_mode;
43f66a6c
JK		 8633}
8634
8635/*
8636 * This file defines the Wireless Extension handlers. It does not
8637 * define any methods of hardware manipulation and relies on the
8638 * functions defined in ipw_main to provide the HW interaction.
bf79451e
JG		 8639 *
8640 * The exception to this is the use of the ipw_get_ordinal()
43f66a6c
JK		 8641 * function used to poll the hardware vs. making unecessary calls.
8642 *
8643 */
8644
bf79451e
JG		 8645static int ipw_wx_get_name(struct net_device *dev,
8646 struct iw_request_info *info,
43f66a6c
JK		 8647 union iwreq_data *wrqu, char *extra)
8648{
8649 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8650 mutex_lock(&priv->mutex);
c848d0af 8651 if (priv->status & STATUS_RF_KILL_MASK)
a613bffd 8652 strcpy(wrqu->name, "radio off");
c848d0af 8653 else if (!(priv->status & STATUS_ASSOCIATED))
43f66a6c 8654 strcpy(wrqu->name, "unassociated");
bf79451e 8655 else
43f66a6c
JK		 8656 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11%c",
8657 ipw_modes[priv->assoc_request.ieee_mode]);
8658 IPW_DEBUG_WX("Name: %s\n", wrqu->name);
4644151b 8659 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8660 return 0;
8661}
8662
8663static int ipw_set_channel(struct ipw_priv *priv, u8 channel)
8664{
8665 if (channel == 0) {
8666 IPW_DEBUG_INFO("Setting channel to ANY (0)\n");
8667 priv->config &= ~CFG_STATIC_CHANNEL;
c848d0af
JK		 8668 IPW_DEBUG_ASSOC("Attempting to associate with new "
8669 "parameters.\n");
8670 ipw_associate(priv);
43f66a6c
JK		 8671 return 0;
8672 }
8673
8674 priv->config |= CFG_STATIC_CHANNEL;
8675
8676 if (priv->channel == channel) {
0edd5b44
JG		 8677 IPW_DEBUG_INFO("Request to set channel to current value (%d)\n",
8678 channel);
43f66a6c
JK		 8679 return 0;
8680 }
8681
8682 IPW_DEBUG_INFO("Setting channel to %i\n", (int)channel);
8683 priv->channel = channel;
8684
b095c381
JK		 8685#ifdef CONFIG_IPW2200_MONITOR
8686 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 8687 int i;
b095c381 8688 if (priv->status & STATUS_SCANNING) {
afbf30a2 8689 IPW_DEBUG_SCAN("Scan abort triggered due to "
b095c381 8690 "channel change.\n");
afbf30a2 8691 ipw_abort_scan(priv);
b095c381
JK		 8692 }
8693
8694 for (i = 1000; i && (priv->status & STATUS_SCANNING); i--)
8695 udelay(10);
8696
8697 if (priv->status & STATUS_SCANNING)
8698 IPW_DEBUG_SCAN("Still scanning...\n");
8699 else
8700 IPW_DEBUG_SCAN("Took %dms to abort current scan\n",
8701 1000 - i);
8702
8703 return 0;
43f66a6c 8704 }
b095c381
JK		 8705#endif /* CONFIG_IPW2200_MONITOR */
8706
c848d0af
JK		 8707 /* Network configuration changed -- force [re]association */
8708 IPW_DEBUG_ASSOC("[re]association triggered due to channel change.\n");
8709 if (!ipw_disassociate(priv))
43f66a6c 8710 ipw_associate(priv);
43f66a6c
JK		 8711
8712 return 0;
8713}
8714
bf79451e
JG		 8715static int ipw_wx_set_freq(struct net_device *dev,
8716 struct iw_request_info *info,
8717 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 8718{
8719 struct ipw_priv *priv = ieee80211_priv(dev);
1867b117 8720 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
43f66a6c 8721 struct iw_freq *fwrq = &wrqu->freq;
afbf30a2 8722 int ret = 0, i;
1fe0adb4
LH		 8723 u8 channel, flags;
8724 int band;
b095c381
JK		 8725
8726 if (fwrq->m == 0) {
8727 IPW_DEBUG_WX("SET Freq/Channel -> any\n");
4644151b 8728 mutex_lock(&priv->mutex);
b095c381 8729 ret = ipw_set_channel(priv, 0);
4644151b 8730 mutex_unlock(&priv->mutex);
b095c381
JK		 8731 return ret;
8732 }
43f66a6c
JK		 8733 /* if setting by freq convert to channel */
8734 if (fwrq->e == 1) {
1867b117 8735 channel = ieee80211_freq_to_channel(priv->ieee, fwrq->m);
b095c381
JK		 8736 if (channel == 0)
8737 return -EINVAL;
8738 } else
8739 channel = fwrq->m;
bf79451e 8740
1867b117 8741 if (!(band = ieee80211_is_valid_channel(priv->ieee, channel)))
b095c381 8742 return -EINVAL;
43f66a6c 8743
1fe0adb4 8744 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
1867b117 8745 i = ieee80211_channel_to_index(priv->ieee, channel);
afbf30a2
JK		 8746 if (i == -1)
8747 return -EINVAL;
bf79451e 8748
1fe0adb4
LH		 8749 flags = (band == IEEE80211_24GHZ_BAND) ?
8750 geo->bg[i].flags : geo->a[i].flags;
8751 if (flags & IEEE80211_CH_PASSIVE_ONLY) {
afbf30a2
JK		 8752 IPW_DEBUG_WX("Invalid Ad-Hoc channel for 802.11a\n");
8753 return -EINVAL;
43f66a6c
JK		 8754 }
8755 }
bf79451e 8756
43f66a6c 8757 IPW_DEBUG_WX("SET Freq/Channel -> %d \n", fwrq->m);
4644151b 8758 mutex_lock(&priv->mutex);
b095c381 8759 ret = ipw_set_channel(priv, channel);
4644151b 8760 mutex_unlock(&priv->mutex);
c848d0af 8761 return ret;
43f66a6c
JK		 8762}
8763
bf79451e
JG		 8764static int ipw_wx_get_freq(struct net_device *dev,
8765 struct iw_request_info *info,
43f66a6c
JK		 8766 union iwreq_data *wrqu, char *extra)
8767{
8768 struct ipw_priv *priv = ieee80211_priv(dev);
8769
8770 wrqu->freq.e = 0;
8771
8772 /* If we are associated, trying to associate, or have a statically
8773 * configured CHANNEL then return that; otherwise return ANY */
4644151b 8774 mutex_lock(&priv->mutex);
43f66a6c 8775 if (priv->config & CFG_STATIC_CHANNEL ||
c580f67f
ZY		 8776 priv->status & (STATUS_ASSOCIATING | STATUS_ASSOCIATED)) {
8777 int i;
8778
8779 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
8780 BUG_ON(i == -1);
8781 wrqu->freq.e = 1;
8782
8783 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
8784 case IEEE80211_52GHZ_BAND:
8785 wrqu->freq.m = priv->ieee->geo.a[i].freq * 100000;
8786 break;
8787
8788 case IEEE80211_24GHZ_BAND:
8789 wrqu->freq.m = priv->ieee->geo.bg[i].freq * 100000;
8790 break;
8791
8792 default:
8793 BUG();
8794 }
8795 } else
43f66a6c
JK		 8796 wrqu->freq.m = 0;
8797
4644151b 8798 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8799 IPW_DEBUG_WX("GET Freq/Channel -> %d \n", priv->channel);
8800 return 0;
8801}
8802
bf79451e
JG		 8803static int ipw_wx_set_mode(struct net_device *dev,
8804 struct iw_request_info *info,
43f66a6c
JK		 8805 union iwreq_data *wrqu, char *extra)
8806{
8807 struct ipw_priv *priv = ieee80211_priv(dev);
8808 int err = 0;
8809
8810 IPW_DEBUG_WX("Set MODE: %d\n", wrqu->mode);
8811
43f66a6c 8812 switch (wrqu->mode) {
b095c381 8813#ifdef CONFIG_IPW2200_MONITOR
43f66a6c
JK		 8814 case IW_MODE_MONITOR:
8815#endif
8816 case IW_MODE_ADHOC:
8817 case IW_MODE_INFRA:
8818 break;
8819 case IW_MODE_AUTO:
8820 wrqu->mode = IW_MODE_INFRA;
8821 break;
8822 default:
8823 return -EINVAL;
8824 }
b095c381
JK		 8825 if (wrqu->mode == priv->ieee->iw_mode)
8826 return 0;
43f66a6c 8827
4644151b 8828 mutex_lock(&priv->mutex);
43f66a6c 8829
afbf30a2
JK		 8830 ipw_sw_reset(priv, 0);
8831
b095c381 8832#ifdef CONFIG_IPW2200_MONITOR
bf79451e 8833 if (priv->ieee->iw_mode == IW_MODE_MONITOR)
43f66a6c 8834 priv->net_dev->type = ARPHRD_ETHER;
bf79451e
JG		 8835
8836 if (wrqu->mode == IW_MODE_MONITOR)
459d4087 8837#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK		 8838 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
8839#else
43f66a6c 8840 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 8841#endif
b095c381 8842#endif /* CONFIG_IPW2200_MONITOR */
bf79451e 8843
bf79451e 8844 /* Free the existing firmware and reset the fw_loaded
877d0310 8845 * flag so ipw_load() will bring in the new firmware */
afbf30a2 8846 free_firmware();
43f66a6c
JK		 8847
8848 priv->ieee->iw_mode = wrqu->mode;
bf79451e 8849
c848d0af 8850 queue_work(priv->workqueue, &priv->adapter_restart);
4644151b 8851 mutex_unlock(&priv->mutex);
0edd5b44 8852 return err;
43f66a6c
JK		 8853}
8854
bf79451e 8855static int ipw_wx_get_mode(struct net_device *dev,
0edd5b44
JG		 8856 struct iw_request_info *info,
8857 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 8858{
8859 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8860 mutex_lock(&priv->mutex);
43f66a6c
JK		 8861 wrqu->mode = priv->ieee->iw_mode;
8862 IPW_DEBUG_WX("Get MODE -> %d\n", wrqu->mode);
4644151b 8863 mutex_unlock(&priv->mutex);
43f66a6c
JK		 8864 return 0;
8865}
8866
43f66a6c
JK		 8867/* Values are in microsecond */
8868static const s32 timeout_duration[] = {
8869 350000,
8870 250000,
8871 75000,
8872 37000,
8873 25000,
8874};
8875
8876static const s32 period_duration[] = {
8877 400000,
8878 700000,
8879 1000000,
8880 1000000,
8881 1000000
8882};
8883
bf79451e
JG		 8884static int ipw_wx_get_range(struct net_device *dev,
8885 struct iw_request_info *info,
43f66a6c
JK		 8886 union iwreq_data *wrqu, char *extra)
8887{
8888 struct ipw_priv *priv = ieee80211_priv(dev);
8889 struct iw_range *range = (struct iw_range *)extra;
1867b117 8890 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
b095c381 8891 int i = 0, j;
43f66a6c
JK		 8892
8893 wrqu->data.length = sizeof(*range);
8894 memset(range, 0, sizeof(*range));
8895
8896 /* 54Mbs == ~27 Mb/s real (802.11g) */
bf79451e 8897 range->throughput = 27 * 1000 * 1000;
43f66a6c
JK		 8898
8899 range->max_qual.qual = 100;
8900 /* TODO: Find real max RSSI and stick here */
8901 range->max_qual.level = 0;
b191608a 8902 range->max_qual.noise = 0;
0edd5b44 8903 range->max_qual.updated = 7; /* Updated all three */
43f66a6c
JK		 8904
8905 range->avg_qual.qual = 70;
8906 /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
0edd5b44 8907 range->avg_qual.level = 0; /* FIXME to real average level */
43f66a6c 8908 range->avg_qual.noise = 0;
0edd5b44 8909 range->avg_qual.updated = 7; /* Updated all three */
4644151b 8910 mutex_lock(&priv->mutex);
0edd5b44 8911 range->num_bitrates = min(priv->rates.num_rates, (u8) IW_MAX_BITRATES);
43f66a6c 8912
bf79451e
JG		 8913 for (i = 0; i < range->num_bitrates; i++)
8914 range->bitrate[i] = (priv->rates.supported_rates[i] & 0x7F) *
0edd5b44 8915 500000;
bf79451e 8916
43f66a6c
JK		 8917 range->max_rts = DEFAULT_RTS_THRESHOLD;
8918 range->min_frag = MIN_FRAG_THRESHOLD;
8919 range->max_frag = MAX_FRAG_THRESHOLD;
8920
8921 range->encoding_size[0] = 5;
bf79451e 8922 range->encoding_size[1] = 13;
43f66a6c
JK		 8923 range->num_encoding_sizes = 2;
8924 range->max_encoding_tokens = WEP_KEYS;
8925
8926 /* Set the Wireless Extension versions */
8927 range->we_version_compiled = WIRELESS_EXT;
f1b50863 8928 range->we_version_source = 18;
43f66a6c 8929
b095c381
JK		 8930 i = 0;
8931 if (priv->ieee->mode & (IEEE_B | IEEE_G)) {
e815de42
ZY		 8932 for (j = 0; j < geo->bg_channels && i < IW_MAX_FREQUENCIES; j++) {
8933 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
8934 (geo->bg[j].flags & IEEE80211_CH_PASSIVE_ONLY))
8935 continue;
8936
b095c381
JK		 8937 range->freq[i].i = geo->bg[j].channel;
8938 range->freq[i].m = geo->bg[j].freq * 100000;
8939 range->freq[i].e = 1;
e815de42 8940 i++;
b095c381
JK		 8941 }
8942 }
43f66a6c 8943
b095c381 8944 if (priv->ieee->mode & IEEE_A) {
e815de42
ZY		 8945 for (j = 0; j < geo->a_channels && i < IW_MAX_FREQUENCIES; j++) {
8946 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
8947 (geo->a[j].flags & IEEE80211_CH_PASSIVE_ONLY))
8948 continue;
8949
b095c381
JK		 8950 range->freq[i].i = geo->a[j].channel;
8951 range->freq[i].m = geo->a[j].freq * 100000;
8952 range->freq[i].e = 1;
e815de42 8953 i++;
b095c381 8954 }
43f66a6c 8955 }
b095c381
JK		 8956
8957 range->num_channels = i;
8958 range->num_frequency = i;
8959
4644151b 8960 mutex_unlock(&priv->mutex);
97a78ca9
BB		 8961
8962 /* Event capability (kernel + driver) */
8963 range->event_capa[0] = (IW_EVENT_CAPA_K_0 |
8964 IW_EVENT_CAPA_MASK(SIOCGIWTHRSPY) |
07f02e46
ZY		 8965 IW_EVENT_CAPA_MASK(SIOCGIWAP) |
8966 IW_EVENT_CAPA_MASK(SIOCGIWSCAN));
97a78ca9 8967 range->event_capa[1] = IW_EVENT_CAPA_K_1;
43f66a6c 8968
f1b50863
DW		 8969 range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
8970 IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
8971
374fdfbc
DW		 8972 range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE;
8973
43f66a6c
JK		 8974 IPW_DEBUG_WX("GET Range\n");
8975 return 0;
8976}
8977
bf79451e
JG		 8978static int ipw_wx_set_wap(struct net_device *dev,
8979 struct iw_request_info *info,
43f66a6c
JK		 8980 union iwreq_data *wrqu, char *extra)
8981{
8982 struct ipw_priv *priv = ieee80211_priv(dev);
8983
8984 static const unsigned char any[] = {
8985 0xff, 0xff, 0xff, 0xff, 0xff, 0xff
8986 };
8987 static const unsigned char off[] = {
8988 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
8989 };
8990
bf79451e 8991 if (wrqu->ap_addr.sa_family != ARPHRD_ETHER)
43f66a6c 8992 return -EINVAL;
4644151b 8993 mutex_lock(&priv->mutex);
43f66a6c
JK		 8994 if (!memcmp(any, wrqu->ap_addr.sa_data, ETH_ALEN) ||
8995 !memcmp(off, wrqu->ap_addr.sa_data, ETH_ALEN)) {
8996 /* we disable mandatory BSSID association */
8997 IPW_DEBUG_WX("Setting AP BSSID to ANY\n");
8998 priv->config &= ~CFG_STATIC_BSSID;
c848d0af
JK		 8999 IPW_DEBUG_ASSOC("Attempting to associate with new "
9000 "parameters.\n");
9001 ipw_associate(priv);
4644151b 9002 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9003 return 0;
9004 }
9005
9006 priv->config |= CFG_STATIC_BSSID;
9007 if (!memcmp(priv->bssid, wrqu->ap_addr.sa_data, ETH_ALEN)) {
9008 IPW_DEBUG_WX("BSSID set to current BSSID.\n");
4644151b 9009 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9010 return 0;
9011 }
9012
e174961c
JB		 9013 IPW_DEBUG_WX("Setting mandatory BSSID to %pM\n",
9014 wrqu->ap_addr.sa_data);
43f66a6c
JK		 9015
9016 memcpy(priv->bssid, wrqu->ap_addr.sa_data, ETH_ALEN);
9017
c848d0af
JK		 9018 /* Network configuration changed -- force [re]association */
9019 IPW_DEBUG_ASSOC("[re]association triggered due to BSSID change.\n");
9020 if (!ipw_disassociate(priv))
43f66a6c 9021 ipw_associate(priv);
43f66a6c 9022
4644151b 9023 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9024 return 0;
9025}
9026
bf79451e
JG		 9027static int ipw_wx_get_wap(struct net_device *dev,
9028 struct iw_request_info *info,
43f66a6c
JK		 9029 union iwreq_data *wrqu, char *extra)
9030{
9031 struct ipw_priv *priv = ieee80211_priv(dev);
0795af57 9032
43f66a6c
JK		 9033 /* If we are associated, trying to associate, or have a statically
9034 * configured BSSID then return that; otherwise return ANY */
4644151b 9035 mutex_lock(&priv->mutex);
bf79451e 9036 if (priv->config & CFG_STATIC_BSSID ||
43f66a6c
JK		 9037 priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
9038 wrqu->ap_addr.sa_family = ARPHRD_ETHER;
afbf30a2 9039 memcpy(wrqu->ap_addr.sa_data, priv->bssid, ETH_ALEN);
43f66a6c
JK		 9040 } else
9041 memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
9042
e174961c
JB		 9043 IPW_DEBUG_WX("Getting WAP BSSID: %pM\n",
9044 wrqu->ap_addr.sa_data);
4644151b 9045 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9046 return 0;
9047}
9048
bf79451e
JG		 9049static int ipw_wx_set_essid(struct net_device *dev,
9050 struct iw_request_info *info,
43f66a6c
JK		 9051 union iwreq_data *wrqu, char *extra)
9052{
9053 struct ipw_priv *priv = ieee80211_priv(dev);
ab644b0b 9054 int length;
9387b7ca 9055 DECLARE_SSID_BUF(ssid);
ab644b0b
ZY		 9056
9057 mutex_lock(&priv->mutex);
43f66a6c 9058
ab644b0b
ZY		 9059 if (!wrqu->essid.flags)
9060 {
9061 IPW_DEBUG_WX("Setting ESSID to ANY\n");
9062 ipw_disassociate(priv);
9063 priv->config &= ~CFG_STATIC_ESSID;
9064 ipw_associate(priv);
9065 mutex_unlock(&priv->mutex);
9066 return 0;
9067 }
43f66a6c 9068
a9f0d423 9069 length = min((int)wrqu->essid.length, IW_ESSID_MAX_SIZE);
43f66a6c
JK		 9070
9071 priv->config |= CFG_STATIC_ESSID;
9072
a9f0d423
ZY		 9073 if (priv->essid_len == length && !memcmp(priv->essid, extra, length)
9074 && (priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING))) {
43f66a6c 9075 IPW_DEBUG_WX("ESSID set to current ESSID.\n");
4644151b 9076 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9077 return 0;
9078 }
9079
9387b7ca
JL		 9080 IPW_DEBUG_WX("Setting ESSID: '%s' (%d)\n",
9081 print_ssid(ssid, extra, length), length);
43f66a6c
JK		 9082
9083 priv->essid_len = length;
a9f0d423 9084 memcpy(priv->essid, extra, priv->essid_len);
bf79451e 9085
c848d0af
JK		 9086 /* Network configuration changed -- force [re]association */
9087 IPW_DEBUG_ASSOC("[re]association triggered due to ESSID change.\n");
9088 if (!ipw_disassociate(priv))
43f66a6c 9089 ipw_associate(priv);
43f66a6c 9090
4644151b 9091 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9092 return 0;
9093}
9094
bf79451e
JG		 9095static int ipw_wx_get_essid(struct net_device *dev,
9096 struct iw_request_info *info,
43f66a6c
JK		 9097 union iwreq_data *wrqu, char *extra)
9098{
9099 struct ipw_priv *priv = ieee80211_priv(dev);
9387b7ca 9100 DECLARE_SSID_BUF(ssid);
43f66a6c
JK		 9101
9102 /* If we are associated, trying to associate, or have a statically
9103 * configured ESSID then return that; otherwise return ANY */
4644151b 9104 mutex_lock(&priv->mutex);
43f66a6c 9105 if (priv->config & CFG_STATIC_ESSID ||
bf79451e
JG		 9106 priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
9107 IPW_DEBUG_WX("Getting essid: '%s'\n",
9387b7ca 9108 print_ssid(ssid, priv->essid, priv->essid_len));
bf79451e 9109 memcpy(extra, priv->essid, priv->essid_len);
43f66a6c 9110 wrqu->essid.length = priv->essid_len;
0edd5b44 9111 wrqu->essid.flags = 1; /* active */
43f66a6c
JK		 9112 } else {
9113 IPW_DEBUG_WX("Getting essid: ANY\n");
9114 wrqu->essid.length = 0;
0edd5b44 9115 wrqu->essid.flags = 0; /* active */
43f66a6c 9116 }
4644151b 9117 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9118 return 0;
9119}
9120
bf79451e
JG		 9121static int ipw_wx_set_nick(struct net_device *dev,
9122 struct iw_request_info *info,
43f66a6c 9123 union iwreq_data *wrqu, char *extra)
bf79451e 9124{
43f66a6c
JK		 9125 struct ipw_priv *priv = ieee80211_priv(dev);
9126
9127 IPW_DEBUG_WX("Setting nick to '%s'\n", extra);
9128 if (wrqu->data.length > IW_ESSID_MAX_SIZE)
9129 return -E2BIG;
4644151b 9130 mutex_lock(&priv->mutex);
0edd5b44 9131 wrqu->data.length = min((size_t) wrqu->data.length, sizeof(priv->nick));
43f66a6c 9132 memset(priv->nick, 0, sizeof(priv->nick));
0edd5b44 9133 memcpy(priv->nick, extra, wrqu->data.length);
43f66a6c 9134 IPW_DEBUG_TRACE("<<\n");
4644151b 9135 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9136 return 0;
9137
9138}
9139
bf79451e
JG		 9140static int ipw_wx_get_nick(struct net_device *dev,
9141 struct iw_request_info *info,
43f66a6c 9142 union iwreq_data *wrqu, char *extra)
bf79451e 9143{
43f66a6c
JK		 9144 struct ipw_priv *priv = ieee80211_priv(dev);
9145 IPW_DEBUG_WX("Getting nick\n");
4644151b 9146 mutex_lock(&priv->mutex);
919ee6dd 9147 wrqu->data.length = strlen(priv->nick);
43f66a6c 9148 memcpy(extra, priv->nick, wrqu->data.length);
0edd5b44 9149 wrqu->data.flags = 1; /* active */
4644151b 9150 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9151 return 0;
9152}
9153
651be26f
OH		 9154static int ipw_wx_set_sens(struct net_device *dev,
9155 struct iw_request_info *info,
9156 union iwreq_data *wrqu, char *extra)
9157{
9158 struct ipw_priv *priv = ieee80211_priv(dev);
9159 int err = 0;
9160
9161 IPW_DEBUG_WX("Setting roaming threshold to %d\n", wrqu->sens.value);
9162 IPW_DEBUG_WX("Setting disassociate threshold to %d\n", 3*wrqu->sens.value);
9163 mutex_lock(&priv->mutex);
9164
9165 if (wrqu->sens.fixed == 0)
9166 {
9167 priv->roaming_threshold = IPW_MB_ROAMING_THRESHOLD_DEFAULT;
9168 priv->disassociate_threshold = IPW_MB_DISASSOCIATE_THRESHOLD_DEFAULT;
9169 goto out;
9170 }
9171 if ((wrqu->sens.value > IPW_MB_ROAMING_THRESHOLD_MAX) ||
9172 (wrqu->sens.value < IPW_MB_ROAMING_THRESHOLD_MIN)) {
9173 err = -EINVAL;
9174 goto out;
9175 }
9176
9177 priv->roaming_threshold = wrqu->sens.value;
9178 priv->disassociate_threshold = 3*wrqu->sens.value;
9179 out:
9180 mutex_unlock(&priv->mutex);
9181 return err;
9182}
9183
9184static int ipw_wx_get_sens(struct net_device *dev,
9185 struct iw_request_info *info,
9186 union iwreq_data *wrqu, char *extra)
9187{
9188 struct ipw_priv *priv = ieee80211_priv(dev);
9189 mutex_lock(&priv->mutex);
9190 wrqu->sens.fixed = 1;
9191 wrqu->sens.value = priv->roaming_threshold;
9192 mutex_unlock(&priv->mutex);
9193
9194 IPW_DEBUG_WX("GET roaming threshold -> %s %d \n",
9195 wrqu->power.disabled ? "OFF" : "ON", wrqu->power.value);
9196
9197 return 0;
9198}
9199
43f66a6c
JK		 9200static int ipw_wx_set_rate(struct net_device *dev,
9201 struct iw_request_info *info,
9202 union iwreq_data *wrqu, char *extra)
bf79451e 9203{
ea2b26e0
JK		 9204 /* TODO: We should use semaphores or locks for access to priv */
9205 struct ipw_priv *priv = ieee80211_priv(dev);
9206 u32 target_rate = wrqu->bitrate.value;
9207 u32 fixed, mask;
9208
9209 /* value = -1, fixed = 0 means auto only, so we should use all rates offered by AP */
9210 /* value = X, fixed = 1 means only rate X */
9211 /* value = X, fixed = 0 means all rates lower equal X */
9212
9213 if (target_rate == -1) {
9214 fixed = 0;
9215 mask = IEEE80211_DEFAULT_RATES_MASK;
9216 /* Now we should reassociate */
9217 goto apply;
9218 }
9219
9220 mask = 0;
9221 fixed = wrqu->bitrate.fixed;
9222
9223 if (target_rate == 1000000 || !fixed)
9224 mask |= IEEE80211_CCK_RATE_1MB_MASK;
9225 if (target_rate == 1000000)
9226 goto apply;
9227
9228 if (target_rate == 2000000 || !fixed)
9229 mask |= IEEE80211_CCK_RATE_2MB_MASK;
9230 if (target_rate == 2000000)
9231 goto apply;
9232
9233 if (target_rate == 5500000 || !fixed)
9234 mask |= IEEE80211_CCK_RATE_5MB_MASK;
9235 if (target_rate == 5500000)
9236 goto apply;
9237
9238 if (target_rate == 6000000 || !fixed)
9239 mask |= IEEE80211_OFDM_RATE_6MB_MASK;
9240 if (target_rate == 6000000)
9241 goto apply;
9242
9243 if (target_rate == 9000000 || !fixed)
9244 mask |= IEEE80211_OFDM_RATE_9MB_MASK;
9245 if (target_rate == 9000000)
9246 goto apply;
9247
9248 if (target_rate == 11000000 || !fixed)
9249 mask |= IEEE80211_CCK_RATE_11MB_MASK;
9250 if (target_rate == 11000000)
9251 goto apply;
9252
9253 if (target_rate == 12000000 || !fixed)
9254 mask |= IEEE80211_OFDM_RATE_12MB_MASK;
9255 if (target_rate == 12000000)
9256 goto apply;
9257
9258 if (target_rate == 18000000 || !fixed)
9259 mask |= IEEE80211_OFDM_RATE_18MB_MASK;
9260 if (target_rate == 18000000)
9261 goto apply;
9262
9263 if (target_rate == 24000000 || !fixed)
9264 mask |= IEEE80211_OFDM_RATE_24MB_MASK;
9265 if (target_rate == 24000000)
9266 goto apply;
9267
9268 if (target_rate == 36000000 || !fixed)
9269 mask |= IEEE80211_OFDM_RATE_36MB_MASK;
9270 if (target_rate == 36000000)
9271 goto apply;
9272
9273 if (target_rate == 48000000 || !fixed)
9274 mask |= IEEE80211_OFDM_RATE_48MB_MASK;
9275 if (target_rate == 48000000)
9276 goto apply;
9277
9278 if (target_rate == 54000000 || !fixed)
9279 mask |= IEEE80211_OFDM_RATE_54MB_MASK;
9280 if (target_rate == 54000000)
9281 goto apply;
9282
9283 IPW_DEBUG_WX("invalid rate specified, returning error\n");
9284 return -EINVAL;
9285
9286 apply:
9287 IPW_DEBUG_WX("Setting rate mask to 0x%08X [%s]\n",
9288 mask, fixed ? "fixed" : "sub-rates");
4644151b 9289 mutex_lock(&priv->mutex);
b095c381 9290 if (mask == IEEE80211_DEFAULT_RATES_MASK) {
ea2b26e0 9291 priv->config &= ~CFG_FIXED_RATE;
b095c381
JK		 9292 ipw_set_fixed_rate(priv, priv->ieee->mode);
9293 } else
ea2b26e0
JK		 9294 priv->config |= CFG_FIXED_RATE;
9295
c848d0af
JK		 9296 if (priv->rates_mask == mask) {
9297 IPW_DEBUG_WX("Mask set to current mask.\n");
4644151b 9298 mutex_unlock(&priv->mutex);
c848d0af 9299 return 0;
ea2b26e0
JK		 9300 }
9301
c848d0af
JK		 9302 priv->rates_mask = mask;
9303
9304 /* Network configuration changed -- force [re]association */
9305 IPW_DEBUG_ASSOC("[re]association triggered due to rates change.\n");
9306 if (!ipw_disassociate(priv))
9307 ipw_associate(priv);
9308
4644151b 9309 mutex_unlock(&priv->mutex);
ea2b26e0 9310 return 0;
43f66a6c
JK		 9311}
9312
bf79451e
JG		 9313static int ipw_wx_get_rate(struct net_device *dev,
9314 struct iw_request_info *info,
43f66a6c 9315 union iwreq_data *wrqu, char *extra)
bf79451e 9316{
0edd5b44 9317 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9318 mutex_lock(&priv->mutex);
43f66a6c 9319 wrqu->bitrate.value = priv->last_rate;
455936c7 9320 wrqu->bitrate.fixed = (priv->config & CFG_FIXED_RATE) ? 1 : 0;
4644151b 9321 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9322 IPW_DEBUG_WX("GET Rate -> %d \n", wrqu->bitrate.value);
9323 return 0;
9324}
9325
bf79451e
JG		 9326static int ipw_wx_set_rts(struct net_device *dev,
9327 struct iw_request_info *info,
43f66a6c 9328 union iwreq_data *wrqu, char *extra)
bf79451e 9329{
43f66a6c 9330 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9331 mutex_lock(&priv->mutex);
ea8862dc 9332 if (wrqu->rts.disabled || !wrqu->rts.fixed)
43f66a6c
JK		 9333 priv->rts_threshold = DEFAULT_RTS_THRESHOLD;
9334 else {
9335 if (wrqu->rts.value < MIN_RTS_THRESHOLD ||
c848d0af 9336 wrqu->rts.value > MAX_RTS_THRESHOLD) {
4644151b 9337 mutex_unlock(&priv->mutex);
43f66a6c 9338 return -EINVAL;
c848d0af 9339 }
43f66a6c
JK		 9340 priv->rts_threshold = wrqu->rts.value;
9341 }
9342
9343 ipw_send_rts_threshold(priv, priv->rts_threshold);
4644151b 9344 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9345 IPW_DEBUG_WX("SET RTS Threshold -> %d \n", priv->rts_threshold);
9346 return 0;
9347}
9348
bf79451e
JG		 9349static int ipw_wx_get_rts(struct net_device *dev,
9350 struct iw_request_info *info,
43f66a6c 9351 union iwreq_data *wrqu, char *extra)
bf79451e 9352{
43f66a6c 9353 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9354 mutex_lock(&priv->mutex);
43f66a6c
JK		 9355 wrqu->rts.value = priv->rts_threshold;
9356 wrqu->rts.fixed = 0; /* no auto select */
0edd5b44 9357 wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD);
4644151b 9358 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9359 IPW_DEBUG_WX("GET RTS Threshold -> %d \n", wrqu->rts.value);
9360 return 0;
9361}
9362
bf79451e
JG		 9363static int ipw_wx_set_txpow(struct net_device *dev,
9364 struct iw_request_info *info,
43f66a6c 9365 union iwreq_data *wrqu, char *extra)
bf79451e 9366{
43f66a6c 9367 struct ipw_priv *priv = ieee80211_priv(dev);
6de9f7f2 9368 int err = 0;
43f66a6c 9369
4644151b 9370 mutex_lock(&priv->mutex);
c848d0af 9371 if (ipw_radio_kill_sw(priv, wrqu->power.disabled)) {
6de9f7f2
ZY		 9372 err = -EINPROGRESS;
9373 goto out;
43f66a6c 9374 }
43f66a6c 9375
b095c381
JK		 9376 if (!wrqu->power.fixed)
9377 wrqu->power.value = IPW_TX_POWER_DEFAULT;
9378
c848d0af 9379 if (wrqu->power.flags != IW_TXPOW_DBM) {
6de9f7f2
ZY		 9380 err = -EINVAL;
9381 goto out;
c848d0af 9382 }
43f66a6c 9383
b095c381 9384 if ((wrqu->power.value > IPW_TX_POWER_MAX) ||
afbf30a2 9385 (wrqu->power.value < IPW_TX_POWER_MIN)) {
6de9f7f2
ZY		 9386 err = -EINVAL;
9387 goto out;
c848d0af 9388 }
43f66a6c 9389
43f66a6c 9390 priv->tx_power = wrqu->power.value;
6de9f7f2
ZY		 9391 err = ipw_set_tx_power(priv);
9392 out:
4644151b 9393 mutex_unlock(&priv->mutex);
6de9f7f2 9394 return err;
43f66a6c
JK		 9395}
9396
bf79451e
JG		 9397static int ipw_wx_get_txpow(struct net_device *dev,
9398 struct iw_request_info *info,
43f66a6c 9399 union iwreq_data *wrqu, char *extra)
bf79451e 9400{
43f66a6c 9401 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9402 mutex_lock(&priv->mutex);
43f66a6c
JK		 9403 wrqu->power.value = priv->tx_power;
9404 wrqu->power.fixed = 1;
9405 wrqu->power.flags = IW_TXPOW_DBM;
9406 wrqu->power.disabled = (priv->status & STATUS_RF_KILL_MASK) ? 1 : 0;
4644151b 9407 mutex_unlock(&priv->mutex);
43f66a6c 9408
bf79451e 9409 IPW_DEBUG_WX("GET TX Power -> %s %d \n",
22501c8e 9410 wrqu->power.disabled ? "OFF" : "ON", wrqu->power.value);
43f66a6c
JK		 9411
9412 return 0;
9413}
9414
bf79451e 9415static int ipw_wx_set_frag(struct net_device *dev,
0edd5b44
JG		 9416 struct iw_request_info *info,
9417 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9418{
9419 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9420 mutex_lock(&priv->mutex);
ea8862dc 9421 if (wrqu->frag.disabled || !wrqu->frag.fixed)
43f66a6c
JK		 9422 priv->ieee->fts = DEFAULT_FTS;
9423 else {
9424 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
b095c381 9425 wrqu->frag.value > MAX_FRAG_THRESHOLD) {
4644151b 9426 mutex_unlock(&priv->mutex);
43f66a6c 9427 return -EINVAL;
b095c381 9428 }
bf79451e 9429
43f66a6c
JK		 9430 priv->ieee->fts = wrqu->frag.value & ~0x1;
9431 }
9432
9433 ipw_send_frag_threshold(priv, wrqu->frag.value);
4644151b 9434 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9435 IPW_DEBUG_WX("SET Frag Threshold -> %d \n", wrqu->frag.value);
9436 return 0;
9437}
9438
bf79451e 9439static int ipw_wx_get_frag(struct net_device *dev,
0edd5b44
JG		 9440 struct iw_request_info *info,
9441 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9442{
9443 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9444 mutex_lock(&priv->mutex);
43f66a6c
JK		 9445 wrqu->frag.value = priv->ieee->fts;
9446 wrqu->frag.fixed = 0; /* no auto select */
0edd5b44 9447 wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FTS);
4644151b 9448 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9449 IPW_DEBUG_WX("GET Frag Threshold -> %d \n", wrqu->frag.value);
9450
9451 return 0;
9452}
9453
bf79451e
JG		 9454static int ipw_wx_set_retry(struct net_device *dev,
9455 struct iw_request_info *info,
43f66a6c 9456 union iwreq_data *wrqu, char *extra)
bf79451e 9457{
afbf30a2
JK		 9458 struct ipw_priv *priv = ieee80211_priv(dev);
9459
9460 if (wrqu->retry.flags & IW_RETRY_LIFETIME || wrqu->retry.disabled)
9461 return -EINVAL;
9462
9463 if (!(wrqu->retry.flags & IW_RETRY_LIMIT))
9464 return 0;
9465
d5f7ac20 9466 if (wrqu->retry.value < 0 || wrqu->retry.value >= 255)
afbf30a2
JK		 9467 return -EINVAL;
9468
4644151b 9469 mutex_lock(&priv->mutex);
919ee6dd 9470 if (wrqu->retry.flags & IW_RETRY_SHORT)
afbf30a2 9471 priv->short_retry_limit = (u8) wrqu->retry.value;
919ee6dd 9472 else if (wrqu->retry.flags & IW_RETRY_LONG)
afbf30a2
JK		 9473 priv->long_retry_limit = (u8) wrqu->retry.value;
9474 else {
9475 priv->short_retry_limit = (u8) wrqu->retry.value;
9476 priv->long_retry_limit = (u8) wrqu->retry.value;
9477 }
9478
9479 ipw_send_retry_limit(priv, priv->short_retry_limit,
9480 priv->long_retry_limit);
4644151b 9481 mutex_unlock(&priv->mutex);
afbf30a2
JK		 9482 IPW_DEBUG_WX("SET retry limit -> short:%d long:%d\n",
9483 priv->short_retry_limit, priv->long_retry_limit);
9484 return 0;
43f66a6c
JK		 9485}
9486
bf79451e
JG		 9487static int ipw_wx_get_retry(struct net_device *dev,
9488 struct iw_request_info *info,
43f66a6c 9489 union iwreq_data *wrqu, char *extra)
bf79451e 9490{
afbf30a2
JK		 9491 struct ipw_priv *priv = ieee80211_priv(dev);
9492
4644151b 9493 mutex_lock(&priv->mutex);
afbf30a2
JK		 9494 wrqu->retry.disabled = 0;
9495
9496 if ((wrqu->retry.flags & IW_RETRY_TYPE) == IW_RETRY_LIFETIME) {
4644151b 9497 mutex_unlock(&priv->mutex);
afbf30a2
JK		 9498 return -EINVAL;
9499 }
9500
919ee6dd
JT		 9501 if (wrqu->retry.flags & IW_RETRY_LONG) {
9502 wrqu->retry.flags = IW_RETRY_LIMIT | IW_RETRY_LONG;
afbf30a2 9503 wrqu->retry.value = priv->long_retry_limit;
919ee6dd
JT		 9504 } else if (wrqu->retry.flags & IW_RETRY_SHORT) {
9505 wrqu->retry.flags = IW_RETRY_LIMIT | IW_RETRY_SHORT;
afbf30a2
JK		 9506 wrqu->retry.value = priv->short_retry_limit;
9507 } else {
9508 wrqu->retry.flags = IW_RETRY_LIMIT;
9509 wrqu->retry.value = priv->short_retry_limit;
9510 }
4644151b 9511 mutex_unlock(&priv->mutex);
afbf30a2
JK		 9512
9513 IPW_DEBUG_WX("GET retry -> %d \n", wrqu->retry.value);
9514
9515 return 0;
9516}
9517
bf79451e
JG		 9518static int ipw_wx_set_scan(struct net_device *dev,
9519 struct iw_request_info *info,
43f66a6c
JK		 9520 union iwreq_data *wrqu, char *extra)
9521{
9522 struct ipw_priv *priv = ieee80211_priv(dev);
094c4d2d 9523 struct iw_scan_req *req = (struct iw_scan_req *)extra;
ea177305 9524 struct delayed_work *work = NULL;
094c4d2d 9525
0b531676 9526 mutex_lock(&priv->mutex);
ea177305 9527
0b531676 9528 priv->user_requested_scan = 1;
0b531676 9529
094c4d2d 9530 if (wrqu->data.length == sizeof(struct iw_scan_req)) {
afbf30a2 9531 if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
ea177305
DW		 9532 int len = min((int)req->essid_len,
9533 (int)sizeof(priv->direct_scan_ssid));
9534 memcpy(priv->direct_scan_ssid, req->essid, len);
9535 priv->direct_scan_ssid_len = len;
9536 work = &priv->request_direct_scan;
9537 } else if (req->scan_type == IW_SCAN_TYPE_PASSIVE) {
9538 work = &priv->request_passive_scan;
094c4d2d 9539 }
ea177305
DW		 9540 } else {
9541 /* Normal active broadcast scan */
9542 work = &priv->request_scan;
afbf30a2 9543 }
8935f39e 9544
ea177305
DW		 9545 mutex_unlock(&priv->mutex);
9546
43f66a6c 9547 IPW_DEBUG_WX("Start scan\n");
b095c381 9548
ea177305 9549 queue_delayed_work(priv->workqueue, work, 0);
b095c381 9550
43f66a6c
JK		 9551 return 0;
9552}
9553
bf79451e
JG		 9554static int ipw_wx_get_scan(struct net_device *dev,
9555 struct iw_request_info *info,
43f66a6c 9556 union iwreq_data *wrqu, char *extra)
bf79451e 9557{
43f66a6c
JK		 9558 struct ipw_priv *priv = ieee80211_priv(dev);
9559 return ieee80211_wx_get_scan(priv->ieee, info, wrqu, extra);
9560}
9561
bf79451e 9562static int ipw_wx_set_encode(struct net_device *dev,
0edd5b44
JG		 9563 struct iw_request_info *info,
9564 union iwreq_data *wrqu, char *key)
43f66a6c
JK		 9565{
9566 struct ipw_priv *priv = ieee80211_priv(dev);
afbf30a2 9567 int ret;
caeff81b 9568 u32 cap = priv->capability;
afbf30a2 9569
4644151b 9570 mutex_lock(&priv->mutex);
afbf30a2 9571 ret = ieee80211_wx_set_encode(priv->ieee, info, wrqu, key);
afbf30a2 9572
caeff81b
HL		 9573 /* In IBSS mode, we need to notify the firmware to update
9574 * the beacon info after we changed the capability. */
9575 if (cap != priv->capability &&
9576 priv->ieee->iw_mode == IW_MODE_ADHOC &&
9577 priv->status & STATUS_ASSOCIATED)
9578 ipw_disassociate(priv);
9579
4644151b 9580 mutex_unlock(&priv->mutex);
afbf30a2 9581 return ret;
43f66a6c
JK		 9582}
9583
bf79451e 9584static int ipw_wx_get_encode(struct net_device *dev,
0edd5b44
JG		 9585 struct iw_request_info *info,
9586 union iwreq_data *wrqu, char *key)
43f66a6c
JK		 9587{
9588 struct ipw_priv *priv = ieee80211_priv(dev);
9589 return ieee80211_wx_get_encode(priv->ieee, info, wrqu, key);
9590}
9591
bf79451e 9592static int ipw_wx_set_power(struct net_device *dev,
0edd5b44
JG		 9593 struct iw_request_info *info,
9594 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9595{
9596 struct ipw_priv *priv = ieee80211_priv(dev);
9597 int err;
4644151b 9598 mutex_lock(&priv->mutex);
43f66a6c
JK		 9599 if (wrqu->power.disabled) {
9600 priv->power_mode = IPW_POWER_LEVEL(priv->power_mode);
9601 err = ipw_send_power_mode(priv, IPW_POWER_MODE_CAM);
9602 if (err) {
9603 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9604 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9605 return err;
9606 }
43f66a6c 9607 IPW_DEBUG_WX("SET Power Management Mode -> off\n");
4644151b 9608 mutex_unlock(&priv->mutex);
43f66a6c 9609 return 0;
bf79451e 9610 }
43f66a6c
JK		 9611
9612 switch (wrqu->power.flags & IW_POWER_MODE) {
0edd5b44
JG		 9613 case IW_POWER_ON: /* If not specified */
9614 case IW_POWER_MODE: /* If set all mask */
c03983ac 9615 case IW_POWER_ALL_R: /* If explicitly state all */
43f66a6c 9616 break;
0edd5b44 9617 default: /* Otherwise we don't support it */
43f66a6c
JK		 9618 IPW_DEBUG_WX("SET PM Mode: %X not supported.\n",
9619 wrqu->power.flags);
4644151b 9620 mutex_unlock(&priv->mutex);
bf79451e 9621 return -EOPNOTSUPP;
43f66a6c 9622 }
bf79451e 9623
43f66a6c
JK		 9624 /* If the user hasn't specified a power management mode yet, default
9625 * to BATTERY */
0edd5b44 9626 if (IPW_POWER_LEVEL(priv->power_mode) == IPW_POWER_AC)
43f66a6c 9627 priv->power_mode = IPW_POWER_ENABLED | IPW_POWER_BATTERY;
bf79451e 9628 else
43f66a6c 9629 priv->power_mode = IPW_POWER_ENABLED | priv->power_mode;
4e157f08 9630
43f66a6c
JK		 9631 err = ipw_send_power_mode(priv, IPW_POWER_LEVEL(priv->power_mode));
9632 if (err) {
9633 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9634 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9635 return err;
9636 }
9637
0edd5b44 9638 IPW_DEBUG_WX("SET Power Management Mode -> 0x%02X\n", priv->power_mode);
4644151b 9639 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9640 return 0;
9641}
9642
bf79451e 9643static int ipw_wx_get_power(struct net_device *dev,
0edd5b44
JG		 9644 struct iw_request_info *info,
9645 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9646{
9647 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9648 mutex_lock(&priv->mutex);
a613bffd 9649 if (!(priv->power_mode & IPW_POWER_ENABLED))
43f66a6c 9650 wrqu->power.disabled = 1;
a613bffd 9651 else
43f66a6c 9652 wrqu->power.disabled = 0;
43f66a6c 9653
4644151b 9654 mutex_unlock(&priv->mutex);
43f66a6c 9655 IPW_DEBUG_WX("GET Power Management Mode -> %02X\n", priv->power_mode);
bf79451e 9656
43f66a6c
JK		 9657 return 0;
9658}
9659
bf79451e 9660static int ipw_wx_set_powermode(struct net_device *dev,
0edd5b44
JG		 9661 struct iw_request_info *info,
9662 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9663{
9664 struct ipw_priv *priv = ieee80211_priv(dev);
9665 int mode = *(int *)extra;
9666 int err;
4e157f08 9667
4644151b 9668 mutex_lock(&priv->mutex);
4e157f08 9669 if ((mode < 1) || (mode > IPW_POWER_LIMIT))
43f66a6c 9670 mode = IPW_POWER_AC;
bf79451e 9671
4e157f08 9672 if (IPW_POWER_LEVEL(priv->power_mode) != mode) {
43f66a6c 9673 err = ipw_send_power_mode(priv, mode);
43f66a6c
JK		 9674 if (err) {
9675 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9676 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9677 return err;
9678 }
4e157f08 9679 priv->power_mode = IPW_POWER_ENABLED | mode;
43f66a6c 9680 }
4644151b 9681 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9682 return 0;
9683}
9684
9685#define MAX_WX_STRING 80
bf79451e 9686static int ipw_wx_get_powermode(struct net_device *dev,
0edd5b44
JG		 9687 struct iw_request_info *info,
9688 union iwreq_data *wrqu, char *extra)
43f66a6c
JK		 9689{
9690 struct ipw_priv *priv = ieee80211_priv(dev);
9691 int level = IPW_POWER_LEVEL(priv->power_mode);
9692 char *p = extra;
9693
9694 p += snprintf(p, MAX_WX_STRING, "Power save level: %d ", level);
9695
9696 switch (level) {
9697 case IPW_POWER_AC:
9698 p += snprintf(p, MAX_WX_STRING - (p - extra), "(AC)");
9699 break;
9700 case IPW_POWER_BATTERY:
9701 p += snprintf(p, MAX_WX_STRING - (p - extra), "(BATTERY)");
9702 break;
9703 default:
9704 p += snprintf(p, MAX_WX_STRING - (p - extra),
bf79451e 9705 "(Timeout %dms, Period %dms)",
43f66a6c
JK		 9706 timeout_duration[level - 1] / 1000,
9707 period_duration[level - 1] / 1000);
9708 }
9709
9710 if (!(priv->power_mode & IPW_POWER_ENABLED))
0edd5b44 9711 p += snprintf(p, MAX_WX_STRING - (p - extra), " OFF");
43f66a6c
JK		 9712
9713 wrqu->data.length = p - extra + 1;
9714
9715 return 0;
9716}
9717
9718static int ipw_wx_set_wireless_mode(struct net_device *dev,
0edd5b44
JG		 9719 struct iw_request_info *info,
9720 union iwreq_data *wrqu, char *extra)
43f66a6c 9721{
0edd5b44 9722 struct ipw_priv *priv = ieee80211_priv(dev);
43f66a6c
JK		 9723 int mode = *(int *)extra;
9724 u8 band = 0, modulation = 0;
9725
9726 if (mode == 0 || mode & ~IEEE_MODE_MASK) {
0edd5b44 9727 IPW_WARNING("Attempt to set invalid wireless mode: %d\n", mode);
43f66a6c
JK		 9728 return -EINVAL;
9729 }
4644151b 9730 mutex_lock(&priv->mutex);
43f66a6c 9731 if (priv->adapter == IPW_2915ABG) {
a33a1982 9732 priv->ieee->abg_true = 1;
43f66a6c
JK		 9733 if (mode & IEEE_A) {
9734 band |= IEEE80211_52GHZ_BAND;
9735 modulation |= IEEE80211_OFDM_MODULATION;
9736 } else
a33a1982 9737 priv->ieee->abg_true = 0;
43f66a6c
JK		 9738 } else {
9739 if (mode & IEEE_A) {
9740 IPW_WARNING("Attempt to set 2200BG into "
9741 "802.11a mode\n");
4644151b 9742 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9743 return -EINVAL;
9744 }
9745
a33a1982 9746 priv->ieee->abg_true = 0;
43f66a6c
JK		 9747 }
9748
9749 if (mode & IEEE_B) {
9750 band |= IEEE80211_24GHZ_BAND;
9751 modulation |= IEEE80211_CCK_MODULATION;
9752 } else
a33a1982 9753 priv->ieee->abg_true = 0;
bf79451e 9754
43f66a6c
JK		 9755 if (mode & IEEE_G) {
9756 band |= IEEE80211_24GHZ_BAND;
9757 modulation |= IEEE80211_OFDM_MODULATION;
9758 } else
a33a1982 9759 priv->ieee->abg_true = 0;
43f66a6c
JK		 9760
9761 priv->ieee->mode = mode;
9762 priv->ieee->freq_band = band;
9763 priv->ieee->modulation = modulation;
0edd5b44 9764 init_supported_rates(priv, &priv->rates);
43f66a6c 9765
c848d0af
JK		 9766 /* Network configuration changed -- force [re]association */
9767 IPW_DEBUG_ASSOC("[re]association triggered due to mode change.\n");
9768 if (!ipw_disassociate(priv)) {
43f66a6c 9769 ipw_send_supported_rates(priv, &priv->rates);
c848d0af
JK		 9770 ipw_associate(priv);
9771 }
43f66a6c 9772
a613bffd
JK		 9773 /* Update the band LEDs */
9774 ipw_led_band_on(priv);
43f66a6c 9775
bf79451e 9776 IPW_DEBUG_WX("PRIV SET MODE: %c%c%c\n",
43f66a6c 9777 mode & IEEE_A ? 'a' : '.',
0edd5b44 9778 mode & IEEE_B ? 'b' : '.', mode & IEEE_G ? 'g' : '.');
4644151b 9779 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9780 return 0;
9781}
9782
9783static int ipw_wx_get_wireless_mode(struct net_device *dev,
0edd5b44
JG		 9784 struct iw_request_info *info,
9785 union iwreq_data *wrqu, char *extra)
43f66a6c 9786{
0edd5b44 9787 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9788 mutex_lock(&priv->mutex);
ea2b26e0
JK		 9789 switch (priv->ieee->mode) {
9790 case IEEE_A:
43f66a6c
JK		 9791 strncpy(extra, "802.11a (1)", MAX_WX_STRING);
9792 break;
ea2b26e0
JK		 9793 case IEEE_B:
9794 strncpy(extra, "802.11b (2)", MAX_WX_STRING);
9795 break;
9796 case IEEE_A | IEEE_B:
9797 strncpy(extra, "802.11ab (3)", MAX_WX_STRING);
9798 break;
9799 case IEEE_G:
9800 strncpy(extra, "802.11g (4)", MAX_WX_STRING);
9801 break;
9802 case IEEE_A | IEEE_G:
9803 strncpy(extra, "802.11ag (5)", MAX_WX_STRING);
9804 break;
9805 case IEEE_B | IEEE_G:
9806 strncpy(extra, "802.11bg (6)", MAX_WX_STRING);
9807 break;
9808 case IEEE_A | IEEE_B | IEEE_G:
9809 strncpy(extra, "802.11abg (7)", MAX_WX_STRING);
9810 break;
9811 default:
9812 strncpy(extra, "unknown", MAX_WX_STRING);
43f66a6c 9813 break;
bf79451e
JG		 9814 }
9815
43f66a6c
JK		 9816 IPW_DEBUG_WX("PRIV GET MODE: %s\n", extra);
9817
0edd5b44 9818 wrqu->data.length = strlen(extra) + 1;
4644151b 9819 mutex_unlock(&priv->mutex);
b095c381
JK		 9820
9821 return 0;
9822}
9823
9824static int ipw_wx_set_preamble(struct net_device *dev,
9825 struct iw_request_info *info,
9826 union iwreq_data *wrqu, char *extra)
9827{
9828 struct ipw_priv *priv = ieee80211_priv(dev);
9829 int mode = *(int *)extra;
4644151b 9830 mutex_lock(&priv->mutex);
b095c381
JK		 9831 /* Switching from SHORT -> LONG requires a disassociation */
9832 if (mode == 1) {
9833 if (!(priv->config & CFG_PREAMBLE_LONG)) {
9834 priv->config |= CFG_PREAMBLE_LONG;
9835
9836 /* Network configuration changed -- force [re]association */
9837 IPW_DEBUG_ASSOC
9838 ("[re]association triggered due to preamble change.\n");
9839 if (!ipw_disassociate(priv))
9840 ipw_associate(priv);
9841 }
9842 goto done;
9843 }
43f66a6c 9844
b095c381
JK		 9845 if (mode == 0) {
9846 priv->config &= ~CFG_PREAMBLE_LONG;
9847 goto done;
9848 }
4644151b 9849 mutex_unlock(&priv->mutex);
b095c381
JK		 9850 return -EINVAL;
9851
9852 done:
4644151b 9853 mutex_unlock(&priv->mutex);
b095c381
JK		 9854 return 0;
9855}
9856
9857static int ipw_wx_get_preamble(struct net_device *dev,
9858 struct iw_request_info *info,
9859 union iwreq_data *wrqu, char *extra)
9860{
9861 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9862 mutex_lock(&priv->mutex);
b095c381
JK		 9863 if (priv->config & CFG_PREAMBLE_LONG)
9864 snprintf(wrqu->name, IFNAMSIZ, "long (1)");
9865 else
9866 snprintf(wrqu->name, IFNAMSIZ, "auto (0)");
4644151b 9867 mutex_unlock(&priv->mutex);
0edd5b44 9868 return 0;
43f66a6c
JK		 9869}
9870
b095c381
JK		 9871#ifdef CONFIG_IPW2200_MONITOR
9872static int ipw_wx_set_monitor(struct net_device *dev,
bf79451e 9873 struct iw_request_info *info,
43f66a6c 9874 union iwreq_data *wrqu, char *extra)
bf79451e 9875{
43f66a6c
JK		 9876 struct ipw_priv *priv = ieee80211_priv(dev);
9877 int *parms = (int *)extra;
9878 int enable = (parms[0] > 0);
4644151b 9879 mutex_lock(&priv->mutex);
b095c381 9880 IPW_DEBUG_WX("SET MONITOR: %d %d\n", enable, parms[1]);
43f66a6c
JK		 9881 if (enable) {
9882 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
459d4087 9883#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK		 9884 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
9885#else
43f66a6c 9886 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 9887#endif
b095c381 9888 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c 9889 }
bf79451e 9890
43f66a6c
JK		 9891 ipw_set_channel(priv, parms[1]);
9892 } else {
b095c381 9893 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
4644151b 9894 mutex_unlock(&priv->mutex);
43f66a6c 9895 return 0;
b095c381 9896 }
43f66a6c 9897 priv->net_dev->type = ARPHRD_ETHER;
b095c381 9898 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c 9899 }
4644151b 9900 mutex_unlock(&priv->mutex);
43f66a6c
JK		 9901 return 0;
9902}
9903
67fd6b45 9904#endif /* CONFIG_IPW2200_MONITOR */
b095c381 9905
bf79451e
JG		 9906static int ipw_wx_reset(struct net_device *dev,
9907 struct iw_request_info *info,
43f66a6c 9908 union iwreq_data *wrqu, char *extra)
bf79451e 9909{
43f66a6c
JK		 9910 struct ipw_priv *priv = ieee80211_priv(dev);
9911 IPW_DEBUG_WX("RESET\n");
b095c381
JK		 9912 queue_work(priv->workqueue, &priv->adapter_restart);
9913 return 0;
9914}
9915
b095c381
JK		 9916static int ipw_wx_sw_reset(struct net_device *dev,
9917 struct iw_request_info *info,
9918 union iwreq_data *wrqu, char *extra)
ea2b26e0
JK		 9919{
9920 struct ipw_priv *priv = ieee80211_priv(dev);
b095c381
JK		 9921 union iwreq_data wrqu_sec = {
9922 .encoding = {
9923 .flags = IW_ENCODE_DISABLED,
9924 },
9925 };
afbf30a2 9926 int ret;
c848d0af 9927
b095c381 9928 IPW_DEBUG_WX("SW_RESET\n");
ea2b26e0 9929
4644151b 9930 mutex_lock(&priv->mutex);
ea2b26e0 9931
d6d5b5c1 9932 ret = ipw_sw_reset(priv, 2);
afbf30a2
JK		 9933 if (!ret) {
9934 free_firmware();
9935 ipw_adapter_restart(priv);
9936 }
ea2b26e0 9937
b095c381
JK		 9938 /* The SW reset bit might have been toggled on by the 'disable'
9939 * module parameter, so take appropriate action */
9940 ipw_radio_kill_sw(priv, priv->status & STATUS_RF_KILL_SW);
ea2b26e0 9941
4644151b 9942 mutex_unlock(&priv->mutex);
b095c381 9943 ieee80211_wx_set_encode(priv->ieee, info, &wrqu_sec, NULL);
4644151b 9944 mutex_lock(&priv->mutex);
bf79451e 9945
b095c381
JK		 9946 if (!(priv->status & STATUS_RF_KILL_MASK)) {
9947 /* Configuration likely changed -- force [re]association */
9948 IPW_DEBUG_ASSOC("[re]association triggered due to sw "
9949 "reset.\n");
9950 if (!ipw_disassociate(priv))
9951 ipw_associate(priv);
43f66a6c 9952 }
b095c381 9953
4644151b 9954 mutex_unlock(&priv->mutex);
43f66a6c 9955
43f66a6c
JK		 9956 return 0;
9957}
43f66a6c
JK		 9958
9959/* Rebase the WE IOCTLs to zero for the handler array */
9960#define IW_IOCTL(x) [(x)-SIOCSIWCOMMIT]
0edd5b44 9961static iw_handler ipw_wx_handlers[] = {
ea2b26e0
JK		 9962 IW_IOCTL(SIOCGIWNAME) = ipw_wx_get_name,
9963 IW_IOCTL(SIOCSIWFREQ) = ipw_wx_set_freq,
9964 IW_IOCTL(SIOCGIWFREQ) = ipw_wx_get_freq,
9965 IW_IOCTL(SIOCSIWMODE) = ipw_wx_set_mode,
9966 IW_IOCTL(SIOCGIWMODE) = ipw_wx_get_mode,
651be26f
OH		 9967 IW_IOCTL(SIOCSIWSENS) = ipw_wx_set_sens,
9968 IW_IOCTL(SIOCGIWSENS) = ipw_wx_get_sens,
ea2b26e0
JK		 9969 IW_IOCTL(SIOCGIWRANGE) = ipw_wx_get_range,
9970 IW_IOCTL(SIOCSIWAP) = ipw_wx_set_wap,
9971 IW_IOCTL(SIOCGIWAP) = ipw_wx_get_wap,
9972 IW_IOCTL(SIOCSIWSCAN) = ipw_wx_set_scan,
9973 IW_IOCTL(SIOCGIWSCAN) = ipw_wx_get_scan,
9974 IW_IOCTL(SIOCSIWESSID) = ipw_wx_set_essid,
9975 IW_IOCTL(SIOCGIWESSID) = ipw_wx_get_essid,
9976 IW_IOCTL(SIOCSIWNICKN) = ipw_wx_set_nick,
9977 IW_IOCTL(SIOCGIWNICKN) = ipw_wx_get_nick,
9978 IW_IOCTL(SIOCSIWRATE) = ipw_wx_set_rate,
9979 IW_IOCTL(SIOCGIWRATE) = ipw_wx_get_rate,
9980 IW_IOCTL(SIOCSIWRTS) = ipw_wx_set_rts,
9981 IW_IOCTL(SIOCGIWRTS) = ipw_wx_get_rts,
9982 IW_IOCTL(SIOCSIWFRAG) = ipw_wx_set_frag,
9983 IW_IOCTL(SIOCGIWFRAG) = ipw_wx_get_frag,
9984 IW_IOCTL(SIOCSIWTXPOW) = ipw_wx_set_txpow,
9985 IW_IOCTL(SIOCGIWTXPOW) = ipw_wx_get_txpow,
9986 IW_IOCTL(SIOCSIWRETRY) = ipw_wx_set_retry,
9987 IW_IOCTL(SIOCGIWRETRY) = ipw_wx_get_retry,
9988 IW_IOCTL(SIOCSIWENCODE) = ipw_wx_set_encode,
9989 IW_IOCTL(SIOCGIWENCODE) = ipw_wx_get_encode,
9990 IW_IOCTL(SIOCSIWPOWER) = ipw_wx_set_power,
9991 IW_IOCTL(SIOCGIWPOWER) = ipw_wx_get_power,
a613bffd
JK		 9992 IW_IOCTL(SIOCSIWSPY) = iw_handler_set_spy,
9993 IW_IOCTL(SIOCGIWSPY) = iw_handler_get_spy,
9994 IW_IOCTL(SIOCSIWTHRSPY) = iw_handler_set_thrspy,
9995 IW_IOCTL(SIOCGIWTHRSPY) = iw_handler_get_thrspy,
afbf30a2
JK		 9996 IW_IOCTL(SIOCSIWGENIE) = ipw_wx_set_genie,
9997 IW_IOCTL(SIOCGIWGENIE) = ipw_wx_get_genie,
9998 IW_IOCTL(SIOCSIWMLME) = ipw_wx_set_mlme,
9999 IW_IOCTL(SIOCSIWAUTH) = ipw_wx_set_auth,
10000 IW_IOCTL(SIOCGIWAUTH) = ipw_wx_get_auth,
10001 IW_IOCTL(SIOCSIWENCODEEXT) = ipw_wx_set_encodeext,
10002 IW_IOCTL(SIOCGIWENCODEEXT) = ipw_wx_get_encodeext,
43f66a6c
JK		 10003};
10004
b095c381
JK		 10005enum {
10006 IPW_PRIV_SET_POWER = SIOCIWFIRSTPRIV,
10007 IPW_PRIV_GET_POWER,
10008 IPW_PRIV_SET_MODE,
10009 IPW_PRIV_GET_MODE,
10010 IPW_PRIV_SET_PREAMBLE,
10011 IPW_PRIV_GET_PREAMBLE,
10012 IPW_PRIV_RESET,
10013 IPW_PRIV_SW_RESET,
10014#ifdef CONFIG_IPW2200_MONITOR
10015 IPW_PRIV_SET_MONITOR,
10016#endif
10017};
43f66a6c 10018
bf79451e 10019static struct iw_priv_args ipw_priv_args[] = {
43f66a6c 10020 {
0edd5b44
JG		 10021 .cmd = IPW_PRIV_SET_POWER,
10022 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
10023 .name = "set_power"},
43f66a6c 10024 {
0edd5b44
JG		 10025 .cmd = IPW_PRIV_GET_POWER,
10026 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | MAX_WX_STRING,
10027 .name = "get_power"},
43f66a6c 10028 {
0edd5b44
JG		 10029 .cmd = IPW_PRIV_SET_MODE,
10030 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
10031 .name = "set_mode"},
43f66a6c 10032 {
0edd5b44
JG		 10033 .cmd = IPW_PRIV_GET_MODE,
10034 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | MAX_WX_STRING,
10035 .name = "get_mode"},
43f66a6c 10036 {
ea2b26e0
JK		 10037 .cmd = IPW_PRIV_SET_PREAMBLE,
10038 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
10039 .name = "set_preamble"},
10040 {
10041 .cmd = IPW_PRIV_GET_PREAMBLE,
10042 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ,
10043 .name = "get_preamble"},
43f66a6c 10044 {
0edd5b44
JG		 10045 IPW_PRIV_RESET,
10046 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 0, 0, "reset"},
b095c381
JK		 10047 {
10048 IPW_PRIV_SW_RESET,
10049 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 0, 0, "sw_reset"},
10050#ifdef CONFIG_IPW2200_MONITOR
10051 {
10052 IPW_PRIV_SET_MONITOR,
10053 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "monitor"},
10054#endif /* CONFIG_IPW2200_MONITOR */
43f66a6c
JK		 10055};
10056
10057static iw_handler ipw_priv_handler[] = {
10058 ipw_wx_set_powermode,
10059 ipw_wx_get_powermode,
10060 ipw_wx_set_wireless_mode,
10061 ipw_wx_get_wireless_mode,
ea2b26e0
JK		 10062 ipw_wx_set_preamble,
10063 ipw_wx_get_preamble,
bf79451e 10064 ipw_wx_reset,
b095c381
JK		 10065 ipw_wx_sw_reset,
10066#ifdef CONFIG_IPW2200_MONITOR
10067 ipw_wx_set_monitor,
43f66a6c
JK		 10068#endif
10069};
10070
0edd5b44 10071static struct iw_handler_def ipw_wx_handler_def = {
ea2b26e0
JK		 10072 .standard = ipw_wx_handlers,
10073 .num_standard = ARRAY_SIZE(ipw_wx_handlers),
10074 .num_private = ARRAY_SIZE(ipw_priv_handler),
10075 .num_private_args = ARRAY_SIZE(ipw_priv_args),
10076 .private = ipw_priv_handler,
10077 .private_args = ipw_priv_args,
97a78ca9 10078 .get_wireless_stats = ipw_get_wireless_stats,
43f66a6c
JK		 10079};
10080
43f66a6c
JK		 10081/*
10082 * Get wireless statistics.
10083 * Called by /proc/net/wireless
10084 * Also called by SIOCGIWSTATS
10085 */
0edd5b44 10086static struct iw_statistics *ipw_get_wireless_stats(struct net_device *dev)
43f66a6c
JK		 10087{
10088 struct ipw_priv *priv = ieee80211_priv(dev);
10089 struct iw_statistics *wstats;
bf79451e 10090
43f66a6c
JK		 10091 wstats = &priv->wstats;
10092
ea2b26e0 10093 /* if hw is disabled, then ipw_get_ordinal() can't be called.
afbf30a2 10094 * netdev->get_wireless_stats seems to be called before fw is
43f66a6c
JK		 10095 * initialized. STATUS_ASSOCIATED will only be set if the hw is up
10096 * and associated; if not associcated, the values are all meaningless
10097 * anyway, so set them all to NULL and INVALID */
10098 if (!(priv->status & STATUS_ASSOCIATED)) {
10099 wstats->miss.beacon = 0;
10100 wstats->discard.retries = 0;
10101 wstats->qual.qual = 0;
10102 wstats->qual.level = 0;
10103 wstats->qual.noise = 0;
10104 wstats->qual.updated = 7;
10105 wstats->qual.updated |= IW_QUAL_NOISE_INVALID |
0edd5b44 10106 IW_QUAL_QUAL_INVALID | IW_QUAL_LEVEL_INVALID;
43f66a6c 10107 return wstats;
bf79451e 10108 }
43f66a6c
JK		 10109
10110 wstats->qual.qual = priv->quality;
00d21de5
ZY		 10111 wstats->qual.level = priv->exp_avg_rssi;
10112 wstats->qual.noise = priv->exp_avg_noise;
43f66a6c 10113 wstats->qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED |
b191608a 10114 IW_QUAL_NOISE_UPDATED | IW_QUAL_DBM;
43f66a6c
JK		 10115
10116 wstats->miss.beacon = average_value(&priv->average_missed_beacons);
10117 wstats->discard.retries = priv->last_tx_failures;
10118 wstats->discard.code = priv->ieee->ieee_stats.rx_discards_undecryptable;
bf79451e 10119
43f66a6c
JK		 10120/* if (ipw_get_ordinal(priv, IPW_ORD_STAT_TX_RETRY, &tx_retry, &len))
10121 goto fail_get_ordinal;
10122 wstats->discard.retries += tx_retry; */
bf79451e 10123
43f66a6c
JK		 10124 return wstats;
10125}
10126
43f66a6c
JK		 10127/* net device stuff */
10128
858119e1 10129static void init_sys_config(struct ipw_sys_config *sys_config)
43f66a6c 10130{
0edd5b44 10131 memset(sys_config, 0, sizeof(struct ipw_sys_config));
810dabd4 10132 sys_config->bt_coexistence = 0;
43f66a6c
JK		 10133 sys_config->answer_broadcast_ssid_probe = 0;
10134 sys_config->accept_all_data_frames = 0;
10135 sys_config->accept_non_directed_frames = 1;
10136 sys_config->exclude_unicast_unencrypted = 0;
10137 sys_config->disable_unicast_decryption = 1;
10138 sys_config->exclude_multicast_unencrypted = 0;
10139 sys_config->disable_multicast_decryption = 1;
d2b83e12
ZY		 10140 if (antenna < CFG_SYS_ANTENNA_BOTH || antenna > CFG_SYS_ANTENNA_B)
10141 antenna = CFG_SYS_ANTENNA_BOTH;
10142 sys_config->antenna_diversity = antenna;
0edd5b44 10143 sys_config->pass_crc_to_host = 0; /* TODO: See if 1 gives us FCS */
43f66a6c 10144 sys_config->dot11g_auto_detection = 0;
bf79451e 10145 sys_config->enable_cts_to_self = 0;
43f66a6c 10146 sys_config->bt_coexist_collision_thr = 0;
67fd6b45 10147 sys_config->pass_noise_stats_to_host = 1; /* 1 -- fix for 256 */
12977154 10148 sys_config->silence_threshold = 0x1e;
43f66a6c
JK		 10149}
10150
10151static int ipw_net_open(struct net_device *dev)
10152{
43f66a6c 10153 IPW_DEBUG_INFO("dev->open\n");
521c4d96 10154 netif_start_queue(dev);
43f66a6c
JK		 10155 return 0;
10156}
10157
10158static int ipw_net_stop(struct net_device *dev)
10159{
10160 IPW_DEBUG_INFO("dev->close\n");
10161 netif_stop_queue(dev);
10162 return 0;
10163}
10164
10165/*
10166todo:
10167
10168modify to send one tfd per fragment instead of using chunking. otherwise
10169we need to heavily modify the ieee80211_skb_to_txb.
10170*/
10171
858119e1 10172static int ipw_tx_skb(struct ipw_priv *priv, struct ieee80211_txb *txb,
227d2dc1 10173 int pri)
43f66a6c 10174{
a5cf4fe6 10175 struct ieee80211_hdr_3addrqos *hdr = (struct ieee80211_hdr_3addrqos *)
0edd5b44 10176 txb->fragments[0]->data;
43f66a6c
JK		 10177 int i = 0;
10178 struct tfd_frame *tfd;
e43e3c1e 10179#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 10180 int tx_id = ipw_get_tx_queue_number(priv, pri);
10181 struct clx2_tx_queue *txq = &priv->txq[tx_id];
10182#else
43f66a6c 10183 struct clx2_tx_queue *txq = &priv->txq[0];
b095c381 10184#endif
43f66a6c
JK		 10185 struct clx2_queue *q = &txq->q;
10186 u8 id, hdr_len, unicast;
10187 u16 remaining_bytes;
c848d0af 10188 int fc;
43f66a6c 10189
b8ddafd7
ZY		 10190 if (!(priv->status & STATUS_ASSOCIATED))
10191 goto drop;
10192
a5cf4fe6 10193 hdr_len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_ctl));
43f66a6c
JK		 10194 switch (priv->ieee->iw_mode) {
10195 case IW_MODE_ADHOC:
3c19065a 10196 unicast = !is_multicast_ether_addr(hdr->addr1);
43f66a6c
JK		 10197 id = ipw_find_station(priv, hdr->addr1);
10198 if (id == IPW_INVALID_STATION) {
10199 id = ipw_add_station(priv, hdr->addr1);
10200 if (id == IPW_INVALID_STATION) {
10201 IPW_WARNING("Attempt to send data to "
e174961c
JB		 10202 "invalid cell: %pM\n",
10203 hdr->addr1);
43f66a6c
JK		 10204 goto drop;
10205 }
10206 }
10207 break;
10208
10209 case IW_MODE_INFRA:
10210 default:
3c19065a 10211 unicast = !is_multicast_ether_addr(hdr->addr3);
43f66a6c
JK		 10212 id = 0;
10213 break;
10214 }
10215
10216 tfd = &txq->bd[q->first_empty];
10217 txq->txb[q->first_empty] = txb;
10218 memset(tfd, 0, sizeof(*tfd));
10219 tfd->u.data.station_number = id;
10220
10221 tfd->control_flags.message_type = TX_FRAME_TYPE;
10222 tfd->control_flags.control_bits = TFD_NEED_IRQ_MASK;
10223
10224 tfd->u.data.cmd_id = DINO_CMD_TX;
a613bffd 10225 tfd->u.data.len = cpu_to_le16(txb->payload_size);
43f66a6c 10226 remaining_bytes = txb->payload_size;
bf79451e 10227
43f66a6c 10228 if (priv->assoc_request.ieee_mode == IPW_B_MODE)
b095c381 10229 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_MODE_CCK;
43f66a6c 10230 else
b095c381 10231 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_MODE_OFDM;
43f66a6c 10232
ea2b26e0
JK		 10233 if (priv->assoc_request.preamble_length == DCT_FLAG_SHORT_PREAMBLE)
10234 tfd->u.data.tx_flags |= DCT_FLAG_SHORT_PREAMBLE;
43f66a6c 10235
c848d0af
JK		 10236 fc = le16_to_cpu(hdr->frame_ctl);
10237 hdr->frame_ctl = cpu_to_le16(fc & ~IEEE80211_FCTL_MOREFRAGS);
43f66a6c
JK		 10238
10239 memcpy(&tfd->u.data.tfd.tfd_24.mchdr, hdr, hdr_len);
10240
b095c381
JK		 10241 if (likely(unicast))
10242 tfd->u.data.tx_flags |= DCT_FLAG_ACK_REQD;
10243
10244 if (txb->encrypted && !priv->ieee->host_encrypt) {
10245 switch (priv->ieee->sec.level) {
10246 case SEC_LEVEL_3:
10247 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10248 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
b095c381
JK		 10249 /* XXX: ACK flag must be set for CCMP even if it
10250 * is a multicast/broadcast packet, because CCMP
10251 * group communication encrypted by GTK is
10252 * actually done by the AP. */
10253 if (!unicast)
10254 tfd->u.data.tx_flags |= DCT_FLAG_ACK_REQD;
10255
10256 tfd->u.data.tx_flags &= ~DCT_FLAG_NO_WEP;
10257 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_SECURITY_CCM;
10258 tfd->u.data.key_index = 0;
10259 tfd->u.data.key_index |= DCT_WEP_INDEX_USE_IMMEDIATE;
10260 break;
10261 case SEC_LEVEL_2:
10262 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10263 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
b095c381
JK		 10264 tfd->u.data.tx_flags &= ~DCT_FLAG_NO_WEP;
10265 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_SECURITY_TKIP;
10266 tfd->u.data.key_index = DCT_WEP_INDEX_USE_IMMEDIATE;
10267 break;
10268 case SEC_LEVEL_1:
10269 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10270 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
274bfb8d
JL		 10271 tfd->u.data.key_index = priv->ieee->crypt_info.tx_keyidx;
10272 if (priv->ieee->sec.key_sizes[priv->ieee->crypt_info.tx_keyidx] <=
b095c381
JK		 10273 40)
10274 tfd->u.data.key_index |= DCT_WEP_KEY_64Bit;
10275 else
10276 tfd->u.data.key_index |= DCT_WEP_KEY_128Bit;
10277 break;
10278 case SEC_LEVEL_0:
10279 break;
10280 default:
10281 printk(KERN_ERR "Unknow security level %d\n",
10282 priv->ieee->sec.level);
10283 break;
10284 }
10285 } else
10286 /* No hardware encryption */
10287 tfd->u.data.tx_flags |= DCT_FLAG_NO_WEP;
10288
e43e3c1e 10289#ifdef CONFIG_IPW2200_QOS
a5cf4fe6
ZY		 10290 if (fc & IEEE80211_STYPE_QOS_DATA)
10291 ipw_qos_set_tx_queue_command(priv, pri, &(tfd->u.data));
e43e3c1e 10292#endif /* CONFIG_IPW2200_QOS */
b095c381 10293
43f66a6c 10294 /* payload */
a613bffd
JK		 10295 tfd->u.data.num_chunks = cpu_to_le32(min((u8) (NUM_TFD_CHUNKS - 2),
10296 txb->nr_frags));
10297 IPW_DEBUG_FRAG("%i fragments being sent as %i chunks.\n",
10298 txb->nr_frags, le32_to_cpu(tfd->u.data.num_chunks));
10299 for (i = 0; i < le32_to_cpu(tfd->u.data.num_chunks); i++) {
10300 IPW_DEBUG_FRAG("Adding fragment %i of %i (%d bytes).\n",
10301 i, le32_to_cpu(tfd->u.data.num_chunks),
10302 txb->fragments[i]->len - hdr_len);
bf79451e 10303 IPW_DEBUG_TX("Dumping TX packet frag %i of %i (%d bytes):\n",
43f66a6c
JK		 10304 i, tfd->u.data.num_chunks,
10305 txb->fragments[i]->len - hdr_len);
bf79451e 10306 printk_buf(IPW_DL_TX, txb->fragments[i]->data + hdr_len,
43f66a6c
JK		 10307 txb->fragments[i]->len - hdr_len);
10308
0edd5b44 10309 tfd->u.data.chunk_ptr[i] =
a613bffd
JK		 10310 cpu_to_le32(pci_map_single
10311 (priv->pci_dev,
10312 txb->fragments[i]->data + hdr_len,
10313 txb->fragments[i]->len - hdr_len,
10314 PCI_DMA_TODEVICE));
10315 tfd->u.data.chunk_len[i] =
10316 cpu_to_le16(txb->fragments[i]->len - hdr_len);
43f66a6c
JK		 10317 }
10318
10319 if (i != txb->nr_frags) {
10320 struct sk_buff *skb;
10321 u16 remaining_bytes = 0;
10322 int j;
10323
10324 for (j = i; j < txb->nr_frags; j++)
10325 remaining_bytes += txb->fragments[j]->len - hdr_len;
10326
10327 printk(KERN_INFO "Trying to reallocate for %d bytes\n",
10328 remaining_bytes);
10329 skb = alloc_skb(remaining_bytes, GFP_ATOMIC);
10330 if (skb != NULL) {
a613bffd 10331 tfd->u.data.chunk_len[i] = cpu_to_le16(remaining_bytes);
43f66a6c
JK		 10332 for (j = i; j < txb->nr_frags; j++) {
10333 int size = txb->fragments[j]->len - hdr_len;
afbf30a2 10334
43f66a6c 10335 printk(KERN_INFO "Adding frag %d %d...\n",
0edd5b44 10336 j, size);
43f66a6c 10337 memcpy(skb_put(skb, size),
0edd5b44 10338 txb->fragments[j]->data + hdr_len, size);
43f66a6c
JK		 10339 }
10340 dev_kfree_skb_any(txb->fragments[i]);
10341 txb->fragments[i] = skb;
0edd5b44 10342 tfd->u.data.chunk_ptr[i] =
a613bffd
JK		 10343 cpu_to_le32(pci_map_single
10344 (priv->pci_dev, skb->data,
4958730e 10345 remaining_bytes,
a613bffd
JK		 10346 PCI_DMA_TODEVICE));
10347
5c05863d 10348 le32_add_cpu(&tfd->u.data.num_chunks, 1);
bf79451e 10349 }
43f66a6c
JK		 10350 }
10351
10352 /* kick DMA */
10353 q->first_empty = ipw_queue_inc_wrap(q->first_empty, q->n_bd);
10354 ipw_write32(priv, q->reg_w, q->first_empty);
10355
943dbef4 10356 if (ipw_tx_queue_space(q) < q->high_mark)
f697014a
JK		 10357 netif_stop_queue(priv->net_dev);
10358
227d2dc1 10359 return NETDEV_TX_OK;
43f66a6c 10360
0edd5b44 10361 drop:
43f66a6c
JK		 10362 IPW_DEBUG_DROP("Silently dropping Tx packet.\n");
10363 ieee80211_txb_free(txb);
227d2dc1
JK		 10364 return NETDEV_TX_OK;
10365}
10366
10367static int ipw_net_is_queue_full(struct net_device *dev, int pri)
10368{
10369 struct ipw_priv *priv = ieee80211_priv(dev);
e43e3c1e 10370#ifdef CONFIG_IPW2200_QOS
227d2dc1
JK		 10371 int tx_id = ipw_get_tx_queue_number(priv, pri);
10372 struct clx2_tx_queue *txq = &priv->txq[tx_id];
10373#else
10374 struct clx2_tx_queue *txq = &priv->txq[0];
e43e3c1e 10375#endif /* CONFIG_IPW2200_QOS */
227d2dc1 10376
943dbef4 10377 if (ipw_tx_queue_space(&txq->q) < txq->q.high_mark)
227d2dc1
JK		 10378 return 1;
10379
10380 return 0;
43f66a6c
JK		 10381}
10382
d685b8c2
ZY		 10383#ifdef CONFIG_IPW2200_PROMISCUOUS
10384static void ipw_handle_promiscuous_tx(struct ipw_priv *priv,
10385 struct ieee80211_txb *txb)
10386{
10387 struct ieee80211_rx_stats dummystats;
10388 struct ieee80211_hdr *hdr;
10389 u8 n;
10390 u16 filter = priv->prom_priv->filter;
10391 int hdr_only = 0;
10392
10393 if (filter & IPW_PROM_NO_TX)
10394 return;
10395
10396 memset(&dummystats, 0, sizeof(dummystats));
10397
10398 /* Filtering of fragment chains is done agains the first fragment */
10399 hdr = (void *)txb->fragments[0]->data;
72118015 10400 if (ieee80211_is_management(le16_to_cpu(hdr->frame_control))) {
d685b8c2
ZY		 10401 if (filter & IPW_PROM_NO_MGMT)
10402 return;
10403 if (filter & IPW_PROM_MGMT_HEADER_ONLY)
10404 hdr_only = 1;
72118015 10405 } else if (ieee80211_is_control(le16_to_cpu(hdr->frame_control))) {
d685b8c2
ZY		 10406 if (filter & IPW_PROM_NO_CTL)
10407 return;
10408 if (filter & IPW_PROM_CTL_HEADER_ONLY)
10409 hdr_only = 1;
72118015 10410 } else if (ieee80211_is_data(le16_to_cpu(hdr->frame_control))) {
d685b8c2
ZY		 10411 if (filter & IPW_PROM_NO_DATA)
10412 return;
10413 if (filter & IPW_PROM_DATA_HEADER_ONLY)
10414 hdr_only = 1;
10415 }
10416
10417 for(n=0; n<txb->nr_frags; ++n) {
10418 struct sk_buff *src = txb->fragments[n];
10419 struct sk_buff *dst;
10420 struct ieee80211_radiotap_header *rt_hdr;
10421 int len;
10422
10423 if (hdr_only) {
10424 hdr = (void *)src->data;
72118015 10425 len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_control));
d685b8c2
ZY		 10426 } else
10427 len = src->len;
10428
007e5ddd
JB		 10429 dst = alloc_skb(len + sizeof(*rt_hdr), GFP_ATOMIC);
10430 if (!dst)
10431 continue;
d685b8c2
ZY		 10432
10433 rt_hdr = (void *)skb_put(dst, sizeof(*rt_hdr));
10434
10435 rt_hdr->it_version = PKTHDR_RADIOTAP_VERSION;
10436 rt_hdr->it_pad = 0;
10437 rt_hdr->it_present = 0; /* after all, it's just an idea */
743b84d2 10438 rt_hdr->it_present |= cpu_to_le32(1 << IEEE80211_RADIOTAP_CHANNEL);
d685b8c2 10439
e62e1ee0 10440 *(__le16*)skb_put(dst, sizeof(u16)) = cpu_to_le16(
d685b8c2
ZY		 10441 ieee80211chan2mhz(priv->channel));
10442 if (priv->channel > 14) /* 802.11a */
e62e1ee0 10443 *(__le16*)skb_put(dst, sizeof(u16)) =
d685b8c2
ZY		 10444 cpu_to_le16(IEEE80211_CHAN_OFDM |
10445 IEEE80211_CHAN_5GHZ);
10446 else if (priv->ieee->mode == IEEE_B) /* 802.11b */
e62e1ee0 10447 *(__le16*)skb_put(dst, sizeof(u16)) =
d685b8c2
ZY		 10448 cpu_to_le16(IEEE80211_CHAN_CCK |
10449 IEEE80211_CHAN_2GHZ);
10450 else /* 802.11g */
e62e1ee0 10451 *(__le16*)skb_put(dst, sizeof(u16)) =
d685b8c2
ZY		 10452 cpu_to_le16(IEEE80211_CHAN_OFDM |
10453 IEEE80211_CHAN_2GHZ);
10454
743b84d2 10455 rt_hdr->it_len = cpu_to_le16(dst->len);
d685b8c2 10456
d626f62b 10457 skb_copy_from_linear_data(src, skb_put(dst, len), len);
d685b8c2
ZY		 10458
10459 if (!ieee80211_rx(priv->prom_priv->ieee, dst, &dummystats))
10460 dev_kfree_skb_any(dst);
10461 }
10462}
10463#endif
10464
43f66a6c 10465static int ipw_net_hard_start_xmit(struct ieee80211_txb *txb,
c8d42d1a 10466 struct net_device *dev, int pri)
43f66a6c
JK		 10467{
10468 struct ipw_priv *priv = ieee80211_priv(dev);
10469 unsigned long flags;
227d2dc1 10470 int ret;
43f66a6c
JK		 10471
10472 IPW_DEBUG_TX("dev->xmit(%d bytes)\n", txb->payload_size);
43f66a6c
JK		 10473 spin_lock_irqsave(&priv->lock, flags);
10474
d685b8c2
ZY		 10475#ifdef CONFIG_IPW2200_PROMISCUOUS
10476 if (rtap_iface && netif_running(priv->prom_net_dev))
10477 ipw_handle_promiscuous_tx(priv, txb);
10478#endif
10479
227d2dc1
JK		 10480 ret = ipw_tx_skb(priv, txb, pri);
10481 if (ret == NETDEV_TX_OK)
10482 __ipw_led_activity_on(priv);
43f66a6c 10483 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c 10484
227d2dc1 10485 return ret;
43f66a6c
JK		 10486}
10487
43f66a6c
JK		 10488static void ipw_net_set_multicast_list(struct net_device *dev)
10489{
10490
10491}
10492
10493static int ipw_net_set_mac_address(struct net_device *dev, void *p)
10494{
10495 struct ipw_priv *priv = ieee80211_priv(dev);
10496 struct sockaddr *addr = p;
0795af57 10497
43f66a6c
JK		 10498 if (!is_valid_ether_addr(addr->sa_data))
10499 return -EADDRNOTAVAIL;
4644151b 10500 mutex_lock(&priv->mutex);
43f66a6c
JK		 10501 priv->config |= CFG_CUSTOM_MAC;
10502 memcpy(priv->mac_addr, addr->sa_data, ETH_ALEN);
e174961c
JB		 10503 printk(KERN_INFO "%s: Setting MAC to %pM\n",
10504 priv->net_dev->name, priv->mac_addr);
a613bffd 10505 queue_work(priv->workqueue, &priv->adapter_restart);
4644151b 10506 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10507 return 0;
10508}
10509
bf79451e 10510static void ipw_ethtool_get_drvinfo(struct net_device *dev,
43f66a6c
JK		 10511 struct ethtool_drvinfo *info)
10512{
10513 struct ipw_priv *p = ieee80211_priv(dev);
10514 char vers[64];
10515 char date[32];
10516 u32 len;
10517
10518 strcpy(info->driver, DRV_NAME);
10519 strcpy(info->version, DRV_VERSION);
10520
10521 len = sizeof(vers);
10522 ipw_get_ordinal(p, IPW_ORD_STAT_FW_VERSION, vers, &len);
10523 len = sizeof(date);
10524 ipw_get_ordinal(p, IPW_ORD_STAT_FW_DATE, date, &len);
10525
0edd5b44 10526 snprintf(info->fw_version, sizeof(info->fw_version), "%s (%s)",
43f66a6c
JK		 10527 vers, date);
10528 strcpy(info->bus_info, pci_name(p->pci_dev));
b095c381 10529 info->eedump_len = IPW_EEPROM_IMAGE_SIZE;
43f66a6c
JK		 10530}
10531
10532static u32 ipw_ethtool_get_link(struct net_device *dev)
10533{
10534 struct ipw_priv *priv = ieee80211_priv(dev);
10535 return (priv->status & STATUS_ASSOCIATED) != 0;
10536}
10537
10538static int ipw_ethtool_get_eeprom_len(struct net_device *dev)
10539{
b095c381 10540 return IPW_EEPROM_IMAGE_SIZE;
43f66a6c
JK		 10541}
10542
10543static int ipw_ethtool_get_eeprom(struct net_device *dev,
0edd5b44 10544 struct ethtool_eeprom *eeprom, u8 * bytes)
43f66a6c
JK		 10545{
10546 struct ipw_priv *p = ieee80211_priv(dev);
10547
b095c381 10548 if (eeprom->offset + eeprom->len > IPW_EEPROM_IMAGE_SIZE)
43f66a6c 10549 return -EINVAL;
4644151b 10550 mutex_lock(&p->mutex);
afbf30a2 10551 memcpy(bytes, &p->eeprom[eeprom->offset], eeprom->len);
4644151b 10552 mutex_unlock(&p->mutex);
43f66a6c
JK		 10553 return 0;
10554}
10555
10556static int ipw_ethtool_set_eeprom(struct net_device *dev,
0edd5b44 10557 struct ethtool_eeprom *eeprom, u8 * bytes)
43f66a6c
JK		 10558{
10559 struct ipw_priv *p = ieee80211_priv(dev);
10560 int i;
10561
b095c381 10562 if (eeprom->offset + eeprom->len > IPW_EEPROM_IMAGE_SIZE)
43f66a6c 10563 return -EINVAL;
4644151b 10564 mutex_lock(&p->mutex);
afbf30a2 10565 memcpy(&p->eeprom[eeprom->offset], bytes, eeprom->len);
71e585fc
AB		 10566 for (i = 0; i < IPW_EEPROM_IMAGE_SIZE; i++)
10567 ipw_write8(p, i + IPW_EEPROM_DATA, p->eeprom[i]);
4644151b 10568 mutex_unlock(&p->mutex);
43f66a6c
JK		 10569 return 0;
10570}
10571
7282d491 10572static const struct ethtool_ops ipw_ethtool_ops = {
ea2b26e0
JK		 10573 .get_link = ipw_ethtool_get_link,
10574 .get_drvinfo = ipw_ethtool_get_drvinfo,
10575 .get_eeprom_len = ipw_ethtool_get_eeprom_len,
10576 .get_eeprom = ipw_ethtool_get_eeprom,
10577 .set_eeprom = ipw_ethtool_set_eeprom,
43f66a6c
JK		 10578};
10579
7d12e780 10580static irqreturn_t ipw_isr(int irq, void *data)
43f66a6c
JK		 10581{
10582 struct ipw_priv *priv = data;
10583 u32 inta, inta_mask;
bf79451e 10584
43f66a6c
JK		 10585 if (!priv)
10586 return IRQ_NONE;
10587
89c318ed 10588 spin_lock(&priv->irq_lock);
43f66a6c
JK		 10589
10590 if (!(priv->status & STATUS_INT_ENABLED)) {
d00d0121 10591 /* IRQ is disabled */
43f66a6c
JK		 10592 goto none;
10593 }
10594
b095c381
JK		 10595 inta = ipw_read32(priv, IPW_INTA_RW);
10596 inta_mask = ipw_read32(priv, IPW_INTA_MASK_R);
bf79451e 10597
43f66a6c
JK		 10598 if (inta == 0xFFFFFFFF) {
10599 /* Hardware disappeared */
10600 IPW_WARNING("IRQ INTA == 0xFFFFFFFF\n");
10601 goto none;
10602 }
10603
b095c381 10604 if (!(inta & (IPW_INTA_MASK_ALL & inta_mask))) {
43f66a6c
JK		 10605 /* Shared interrupt */
10606 goto none;
10607 }
10608
10609 /* tell the device to stop sending interrupts */
89c318ed 10610 __ipw_disable_interrupts(priv);
bf79451e 10611
43f66a6c 10612 /* ack current interrupts */
b095c381
JK		 10613 inta &= (IPW_INTA_MASK_ALL & inta_mask);
10614 ipw_write32(priv, IPW_INTA_RW, inta);
bf79451e 10615
43f66a6c
JK		 10616 /* Cache INTA value for our tasklet */
10617 priv->isr_inta = inta;
10618
10619 tasklet_schedule(&priv->irq_tasklet);
10620
89c318ed 10621 spin_unlock(&priv->irq_lock);
43f66a6c
JK		 10622
10623 return IRQ_HANDLED;
0edd5b44 10624 none:
89c318ed 10625 spin_unlock(&priv->irq_lock);
43f66a6c
JK		 10626 return IRQ_NONE;
10627}
10628
10629static void ipw_rf_kill(void *adapter)
10630{
10631 struct ipw_priv *priv = adapter;
10632 unsigned long flags;
bf79451e 10633
43f66a6c
JK		 10634 spin_lock_irqsave(&priv->lock, flags);
10635
10636 if (rf_kill_active(priv)) {
10637 IPW_DEBUG_RF_KILL("RF Kill active, rescheduling GPIO check\n");
10638 if (priv->workqueue)
10639 queue_delayed_work(priv->workqueue,
10640 &priv->rf_kill, 2 * HZ);
10641 goto exit_unlock;
10642 }
10643
10644 /* RF Kill is now disabled, so bring the device back up */
10645
10646 if (!(priv->status & STATUS_RF_KILL_MASK)) {
10647 IPW_DEBUG_RF_KILL("HW RF Kill no longer active, restarting "
10648 "device\n");
10649
10650 /* we can not do an adapter restart while inside an irq lock */
10651 queue_work(priv->workqueue, &priv->adapter_restart);
bf79451e 10652 } else
43f66a6c
JK		 10653 IPW_DEBUG_RF_KILL("HW RF Kill deactivated. SW RF Kill still "
10654 "enabled\n");
10655
0edd5b44 10656 exit_unlock:
43f66a6c
JK		 10657 spin_unlock_irqrestore(&priv->lock, flags);
10658}
10659
c4028958 10660static void ipw_bg_rf_kill(struct work_struct *work)
c848d0af 10661{
c4028958
DH		 10662 struct ipw_priv *priv =
10663 container_of(work, struct ipw_priv, rf_kill.work);
4644151b 10664 mutex_lock(&priv->mutex);
c4028958 10665 ipw_rf_kill(priv);
4644151b 10666 mutex_unlock(&priv->mutex);
c848d0af
JK		 10667}
10668
a73e22b2 10669static void ipw_link_up(struct ipw_priv *priv)
a613bffd 10670{
afbf30a2
JK		 10671 priv->last_seq_num = -1;
10672 priv->last_frag_num = -1;
10673 priv->last_packet_time = 0;
10674
a613bffd 10675 netif_carrier_on(priv->net_dev);
a613bffd 10676
c848d0af 10677 cancel_delayed_work(&priv->request_scan);
ea177305
DW		 10678 cancel_delayed_work(&priv->request_direct_scan);
10679 cancel_delayed_work(&priv->request_passive_scan);
0b531676 10680 cancel_delayed_work(&priv->scan_event);
a613bffd
JK		 10681 ipw_reset_stats(priv);
10682 /* Ensure the rate is updated immediately */
10683 priv->last_rate = ipw_get_current_rate(priv);
10684 ipw_gather_stats(priv);
10685 ipw_led_link_up(priv);
10686 notify_wx_assoc_event(priv);
10687
10688 if (priv->config & CFG_BACKGROUND_SCAN)
10689 queue_delayed_work(priv->workqueue, &priv->request_scan, HZ);
10690}
10691
c4028958 10692static void ipw_bg_link_up(struct work_struct *work)
c848d0af 10693{
c4028958
DH		 10694 struct ipw_priv *priv =
10695 container_of(work, struct ipw_priv, link_up);
4644151b 10696 mutex_lock(&priv->mutex);
c4028958 10697 ipw_link_up(priv);
4644151b 10698 mutex_unlock(&priv->mutex);
c848d0af
JK		 10699}
10700
a73e22b2 10701static void ipw_link_down(struct ipw_priv *priv)
a613bffd
JK		 10702{
10703 ipw_led_link_down(priv);
10704 netif_carrier_off(priv->net_dev);
a613bffd
JK		 10705 notify_wx_assoc_event(priv);
10706
10707 /* Cancel any queued work ... */
10708 cancel_delayed_work(&priv->request_scan);
ea177305
DW		 10709 cancel_delayed_work(&priv->request_direct_scan);
10710 cancel_delayed_work(&priv->request_passive_scan);
a613bffd
JK		 10711 cancel_delayed_work(&priv->adhoc_check);
10712 cancel_delayed_work(&priv->gather_stats);
10713
10714 ipw_reset_stats(priv);
10715
afbf30a2
JK		 10716 if (!(priv->status & STATUS_EXIT_PENDING)) {
10717 /* Queue up another scan... */
c4028958 10718 queue_delayed_work(priv->workqueue, &priv->request_scan, 0);
0b531676
DW		 10719 } else
10720 cancel_delayed_work(&priv->scan_event);
a613bffd
JK		 10721}
10722
c4028958 10723static void ipw_bg_link_down(struct work_struct *work)
c848d0af 10724{
c4028958
DH		 10725 struct ipw_priv *priv =
10726 container_of(work, struct ipw_priv, link_down);
4644151b 10727 mutex_lock(&priv->mutex);
c4028958 10728 ipw_link_down(priv);
4644151b 10729 mutex_unlock(&priv->mutex);
43f66a6c
JK		 10730}
10731
2ef19e63 10732static int __devinit ipw_setup_deferred_work(struct ipw_priv *priv)
43f66a6c
JK		 10733{
10734 int ret = 0;
10735
43f66a6c 10736 priv->workqueue = create_workqueue(DRV_NAME);
43f66a6c 10737 init_waitqueue_head(&priv->wait_command_queue);
afbf30a2 10738 init_waitqueue_head(&priv->wait_state);
43f66a6c 10739
c4028958
DH		 10740 INIT_DELAYED_WORK(&priv->adhoc_check, ipw_bg_adhoc_check);
10741 INIT_WORK(&priv->associate, ipw_bg_associate);
10742 INIT_WORK(&priv->disassociate, ipw_bg_disassociate);
10743 INIT_WORK(&priv->system_config, ipw_system_config);
10744 INIT_WORK(&priv->rx_replenish, ipw_bg_rx_queue_replenish);
10745 INIT_WORK(&priv->adapter_restart, ipw_bg_adapter_restart);
10746 INIT_DELAYED_WORK(&priv->rf_kill, ipw_bg_rf_kill);
10747 INIT_WORK(&priv->up, ipw_bg_up);
10748 INIT_WORK(&priv->down, ipw_bg_down);
10749 INIT_DELAYED_WORK(&priv->request_scan, ipw_request_scan);
ea177305
DW		 10750 INIT_DELAYED_WORK(&priv->request_direct_scan, ipw_request_direct_scan);
10751 INIT_DELAYED_WORK(&priv->request_passive_scan, ipw_request_passive_scan);
0b531676 10752 INIT_DELAYED_WORK(&priv->scan_event, ipw_scan_event);
c4028958
DH		 10753 INIT_DELAYED_WORK(&priv->gather_stats, ipw_bg_gather_stats);
10754 INIT_WORK(&priv->abort_scan, ipw_bg_abort_scan);
10755 INIT_WORK(&priv->roam, ipw_bg_roam);
10756 INIT_DELAYED_WORK(&priv->scan_check, ipw_bg_scan_check);
10757 INIT_WORK(&priv->link_up, ipw_bg_link_up);
10758 INIT_WORK(&priv->link_down, ipw_bg_link_down);
10759 INIT_DELAYED_WORK(&priv->led_link_on, ipw_bg_led_link_on);
10760 INIT_DELAYED_WORK(&priv->led_link_off, ipw_bg_led_link_off);
10761 INIT_DELAYED_WORK(&priv->led_act_off, ipw_bg_led_activity_off);
10762 INIT_WORK(&priv->merge_networks, ipw_merge_adhoc_network);
43f66a6c 10763
e43e3c1e 10764#ifdef CONFIG_IPW2200_QOS
c4028958 10765 INIT_WORK(&priv->qos_activate, ipw_bg_qos_activate);
e43e3c1e 10766#endif /* CONFIG_IPW2200_QOS */
43f66a6c
JK		 10767
10768 tasklet_init(&priv->irq_tasklet, (void (*)(unsigned long))
10769 ipw_irq_tasklet, (unsigned long)priv);
10770
10771 return ret;
10772}
10773
43f66a6c
JK		 10774static void shim__set_security(struct net_device *dev,
10775 struct ieee80211_security *sec)
10776{
10777 struct ipw_priv *priv = ieee80211_priv(dev);
10778 int i;
bf79451e 10779 for (i = 0; i < 4; i++) {
43f66a6c 10780 if (sec->flags & (1 << i)) {
afbf30a2 10781 priv->ieee->sec.encode_alg[i] = sec->encode_alg[i];
b095c381 10782 priv->ieee->sec.key_sizes[i] = sec->key_sizes[i];
43f66a6c 10783 if (sec->key_sizes[i] == 0)
b095c381
JK		 10784 priv->ieee->sec.flags &= ~(1 << i);
10785 else {
10786 memcpy(priv->ieee->sec.keys[i], sec->keys[i],
43f66a6c 10787 sec->key_sizes[i]);
b095c381
JK		 10788 priv->ieee->sec.flags |= (1 << i);
10789 }
43f66a6c 10790 priv->status |= STATUS_SECURITY_UPDATED;
b095c381
JK		 10791 } else if (sec->level != SEC_LEVEL_1)
10792 priv->ieee->sec.flags &= ~(1 << i);
43f66a6c
JK		 10793 }
10794
b095c381 10795 if (sec->flags & SEC_ACTIVE_KEY) {
43f66a6c 10796 if (sec->active_key <= 3) {
b095c381
JK		 10797 priv->ieee->sec.active_key = sec->active_key;
10798 priv->ieee->sec.flags |= SEC_ACTIVE_KEY;
bf79451e 10799 } else
b095c381 10800 priv->ieee->sec.flags &= ~SEC_ACTIVE_KEY;
43f66a6c 10801 priv->status |= STATUS_SECURITY_UPDATED;
b095c381
JK		 10802 } else
10803 priv->ieee->sec.flags &= ~SEC_ACTIVE_KEY;
43f66a6c
JK		 10804
10805 if ((sec->flags & SEC_AUTH_MODE) &&
b095c381
JK		 10806 (priv->ieee->sec.auth_mode != sec->auth_mode)) {
10807 priv->ieee->sec.auth_mode = sec->auth_mode;
10808 priv->ieee->sec.flags |= SEC_AUTH_MODE;
43f66a6c
JK		 10809 if (sec->auth_mode == WLAN_AUTH_SHARED_KEY)
10810 priv->capability |= CAP_SHARED_KEY;
10811 else
10812 priv->capability &= ~CAP_SHARED_KEY;
10813 priv->status |= STATUS_SECURITY_UPDATED;
10814 }
bf79451e 10815
b095c381
JK		 10816 if (sec->flags & SEC_ENABLED && priv->ieee->sec.enabled != sec->enabled) {
10817 priv->ieee->sec.flags |= SEC_ENABLED;
10818 priv->ieee->sec.enabled = sec->enabled;
43f66a6c 10819 priv->status |= STATUS_SECURITY_UPDATED;
bf79451e 10820 if (sec->enabled)
43f66a6c
JK		 10821 priv->capability |= CAP_PRIVACY_ON;
10822 else
10823 priv->capability &= ~CAP_PRIVACY_ON;
10824 }
bf79451e 10825
afbf30a2
JK		 10826 if (sec->flags & SEC_ENCRYPT)
10827 priv->ieee->sec.encrypt = sec->encrypt;
bf79451e 10828
b095c381
JK		 10829 if (sec->flags & SEC_LEVEL && priv->ieee->sec.level != sec->level) {
10830 priv->ieee->sec.level = sec->level;
10831 priv->ieee->sec.flags |= SEC_LEVEL;
43f66a6c
JK		 10832 priv->status |= STATUS_SECURITY_UPDATED;
10833 }
10834
1fbfea54
ZY		 10835 if (!priv->ieee->host_encrypt && (sec->flags & SEC_ENCRYPT))
10836 ipw_set_hwcrypto_keys(priv);
10837
bf79451e
JG		 10838 /* To match current functionality of ipw2100 (which works well w/
10839 * various supplicants, we don't force a disassociate if the
43f66a6c
JK		 10840 * privacy capability changes ... */
10841#if 0
10842 if ((priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) &&
bf79451e 10843 (((priv->assoc_request.capability &
5b5e807f 10844 cpu_to_le16(WLAN_CAPABILITY_PRIVACY)) && !sec->enabled) ||
bf79451e 10845 (!(priv->assoc_request.capability &
5b5e807f 10846 cpu_to_le16(WLAN_CAPABILITY_PRIVACY)) && sec->enabled))) {
43f66a6c
JK		 10847 IPW_DEBUG_ASSOC("Disassociating due to capability "
10848 "change.\n");
10849 ipw_disassociate(priv);
10850 }
10851#endif
10852}
10853
bf79451e 10854static int init_supported_rates(struct ipw_priv *priv,
43f66a6c
JK		 10855 struct ipw_supported_rates *rates)
10856{
10857 /* TODO: Mask out rates based on priv->rates_mask */
10858
10859 memset(rates, 0, sizeof(*rates));
0edd5b44 10860 /* configure supported rates */
43f66a6c
JK		 10861 switch (priv->ieee->freq_band) {
10862 case IEEE80211_52GHZ_BAND:
10863 rates->ieee_mode = IPW_A_MODE;
10864 rates->purpose = IPW_RATE_CAPABILITIES;
10865 ipw_add_ofdm_scan_rates(rates, IEEE80211_CCK_MODULATION,
10866 IEEE80211_OFDM_DEFAULT_RATES_MASK);
10867 break;
10868
0edd5b44 10869 default: /* Mixed or 2.4Ghz */
43f66a6c
JK		 10870 rates->ieee_mode = IPW_G_MODE;
10871 rates->purpose = IPW_RATE_CAPABILITIES;
10872 ipw_add_cck_scan_rates(rates, IEEE80211_CCK_MODULATION,
10873 IEEE80211_CCK_DEFAULT_RATES_MASK);
10874 if (priv->ieee->modulation & IEEE80211_OFDM_MODULATION) {
10875 ipw_add_ofdm_scan_rates(rates, IEEE80211_CCK_MODULATION,
10876 IEEE80211_OFDM_DEFAULT_RATES_MASK);
10877 }
10878 break;
10879 }
10880
10881 return 0;
10882}
10883
bf79451e 10884static int ipw_config(struct ipw_priv *priv)
43f66a6c 10885{
43f66a6c
JK		 10886 /* This is only called from ipw_up, which resets/reloads the firmware
10887 so, we don't need to first disable the card before we configure
10888 it */
6de9f7f2 10889 if (ipw_set_tx_power(priv))
43f66a6c
JK		 10890 goto error;
10891
10892 /* initialize adapter address */
10893 if (ipw_send_adapter_address(priv, priv->net_dev->dev_addr))
10894 goto error;
10895
10896 /* set basic system config settings */
10897 init_sys_config(&priv->sys_config);
810dabd4
ZY		 10898
10899 /* Support Bluetooth if we have BT h/w on board, and user wants to.
10900 * Does not support BT priority yet (don't abort or defer our Tx) */
10901 if (bt_coexist) {
2638bc39 10902 unsigned char bt_caps = priv->eeprom[EEPROM_SKU_CAPABILITY];
810dabd4
ZY		 10903
10904 if (bt_caps & EEPROM_SKU_CAP_BT_CHANNEL_SIG)
10905 priv->sys_config.bt_coexistence
2638bc39 10906 |= CFG_BT_COEXISTENCE_SIGNAL_CHNL;
810dabd4
ZY		 10907 if (bt_caps & EEPROM_SKU_CAP_BT_OOB)
10908 priv->sys_config.bt_coexistence
2638bc39 10909 |= CFG_BT_COEXISTENCE_OOB;
810dabd4
ZY		 10910 }
10911
d685b8c2
ZY		 10912#ifdef CONFIG_IPW2200_PROMISCUOUS
10913 if (priv->prom_net_dev && netif_running(priv->prom_net_dev)) {
10914 priv->sys_config.accept_all_data_frames = 1;
10915 priv->sys_config.accept_non_directed_frames = 1;
10916 priv->sys_config.accept_all_mgmt_bcpr = 1;
10917 priv->sys_config.accept_all_mgmt_frames = 1;
10918 }
10919#endif
10920
c848d0af
JK		 10921 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
10922 priv->sys_config.answer_broadcast_ssid_probe = 1;
10923 else
10924 priv->sys_config.answer_broadcast_ssid_probe = 0;
10925
d685b8c2 10926 if (ipw_send_system_config(priv))
43f66a6c
JK		 10927 goto error;
10928
0edd5b44
JG		 10929 init_supported_rates(priv, &priv->rates);
10930 if (ipw_send_supported_rates(priv, &priv->rates))
43f66a6c
JK		 10931 goto error;
10932
10933 /* Set request-to-send threshold */
10934 if (priv->rts_threshold) {
10935 if (ipw_send_rts_threshold(priv, priv->rts_threshold))
10936 goto error;
10937 }
e43e3c1e 10938#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 10939 IPW_DEBUG_QOS("QoS: call ipw_qos_activate\n");
10940 ipw_qos_activate(priv, NULL);
e43e3c1e 10941#endif /* CONFIG_IPW2200_QOS */
43f66a6c
JK		 10942
10943 if (ipw_set_random_seed(priv))
10944 goto error;
bf79451e 10945
43f66a6c
JK		 10946 /* final state transition to the RUN state */
10947 if (ipw_send_host_complete(priv))
10948 goto error;
10949
e666619e
JK		 10950 priv->status |= STATUS_INIT;
10951
10952 ipw_led_init(priv);
10953 ipw_led_radio_on(priv);
10954 priv->notif_missed_beacons = 0;
10955
10956 /* Set hardware WEP key if it is configured. */
10957 if ((priv->capability & CAP_PRIVACY_ON) &&
10958 (priv->ieee->sec.level == SEC_LEVEL_1) &&
10959 !(priv->ieee->host_encrypt || priv->ieee->host_decrypt))
10960 ipw_set_hwcrypto_keys(priv);
43f66a6c
JK		 10961
10962 return 0;
bf79451e 10963
0edd5b44 10964 error:
43f66a6c
JK		 10965 return -EIO;
10966}
10967
4f36f808
JK		 10968/*
10969 * NOTE:
10970 *
10971 * These tables have been tested in conjunction with the
10972 * Intel PRO/Wireless 2200BG and 2915ABG Network Connection Adapters.
10973 *
10974 * Altering this values, using it on other hardware, or in geographies
10975 * not intended for resale of the above mentioned Intel adapters has
10976 * not been tested.
10977 *
48a84770
HBA		 10978 * Remember to update the table in README.ipw2200 when changing this
10979 * table.
10980 *
4f36f808
JK		 10981 */
10982static const struct ieee80211_geo ipw_geos[] = {
10983 { /* Restricted */
10984 "---",
10985 .bg_channels = 11,
10986 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10987 {2427, 4}, {2432, 5}, {2437, 6},
10988 {2442, 7}, {2447, 8}, {2452, 9},
10989 {2457, 10}, {2462, 11}},
10990 },
10991
10992 { /* Custom US/Canada */
10993 "ZZF",
10994 .bg_channels = 11,
10995 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10996 {2427, 4}, {2432, 5}, {2437, 6},
10997 {2442, 7}, {2447, 8}, {2452, 9},
10998 {2457, 10}, {2462, 11}},
10999 .a_channels = 8,
11000 .a = {{5180, 36},
11001 {5200, 40},
11002 {5220, 44},
11003 {5240, 48},
11004 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11005 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11006 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11007 {5320, 64, IEEE80211_CH_PASSIVE_ONLY}},
11008 },
11009
11010 { /* Rest of World */
11011 "ZZD",
11012 .bg_channels = 13,
11013 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11014 {2427, 4}, {2432, 5}, {2437, 6},
11015 {2442, 7}, {2447, 8}, {2452, 9},
11016 {2457, 10}, {2462, 11}, {2467, 12},
11017 {2472, 13}},
11018 },
11019
11020 { /* Custom USA & Europe & High */
11021 "ZZA",
11022 .bg_channels = 11,
11023 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11024 {2427, 4}, {2432, 5}, {2437, 6},
11025 {2442, 7}, {2447, 8}, {2452, 9},
11026 {2457, 10}, {2462, 11}},
11027 .a_channels = 13,
11028 .a = {{5180, 36},
11029 {5200, 40},
11030 {5220, 44},
11031 {5240, 48},
11032 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11033 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11034 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11035 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11036 {5745, 149},
11037 {5765, 153},
11038 {5785, 157},
11039 {5805, 161},
11040 {5825, 165}},
11041 },
11042
11043 { /* Custom NA & Europe */
11044 "ZZB",
11045 .bg_channels = 11,
11046 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11047 {2427, 4}, {2432, 5}, {2437, 6},
11048 {2442, 7}, {2447, 8}, {2452, 9},
11049 {2457, 10}, {2462, 11}},
11050 .a_channels = 13,
11051 .a = {{5180, 36},
11052 {5200, 40},
11053 {5220, 44},
11054 {5240, 48},
11055 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11056 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11057 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11058 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11059 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11060 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11061 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11062 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11063 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11064 },
11065
11066 { /* Custom Japan */
11067 "ZZC",
11068 .bg_channels = 11,
11069 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11070 {2427, 4}, {2432, 5}, {2437, 6},
11071 {2442, 7}, {2447, 8}, {2452, 9},
11072 {2457, 10}, {2462, 11}},
11073 .a_channels = 4,
11074 .a = {{5170, 34}, {5190, 38},
11075 {5210, 42}, {5230, 46}},
11076 },
11077
11078 { /* Custom */
11079 "ZZM",
11080 .bg_channels = 11,
11081 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11082 {2427, 4}, {2432, 5}, {2437, 6},
11083 {2442, 7}, {2447, 8}, {2452, 9},
11084 {2457, 10}, {2462, 11}},
11085 },
11086
11087 { /* Europe */
11088 "ZZE",
11089 .bg_channels = 13,
11090 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11091 {2427, 4}, {2432, 5}, {2437, 6},
11092 {2442, 7}, {2447, 8}, {2452, 9},
11093 {2457, 10}, {2462, 11}, {2467, 12},
11094 {2472, 13}},
11095 .a_channels = 19,
11096 .a = {{5180, 36},
11097 {5200, 40},
11098 {5220, 44},
11099 {5240, 48},
11100 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11101 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11102 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11103 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11104 {5500, 100, IEEE80211_CH_PASSIVE_ONLY},
11105 {5520, 104, IEEE80211_CH_PASSIVE_ONLY},
11106 {5540, 108, IEEE80211_CH_PASSIVE_ONLY},
11107 {5560, 112, IEEE80211_CH_PASSIVE_ONLY},
11108 {5580, 116, IEEE80211_CH_PASSIVE_ONLY},
11109 {5600, 120, IEEE80211_CH_PASSIVE_ONLY},
11110 {5620, 124, IEEE80211_CH_PASSIVE_ONLY},
11111 {5640, 128, IEEE80211_CH_PASSIVE_ONLY},
11112 {5660, 132, IEEE80211_CH_PASSIVE_ONLY},
11113 {5680, 136, IEEE80211_CH_PASSIVE_ONLY},
11114 {5700, 140, IEEE80211_CH_PASSIVE_ONLY}},
11115 },
11116
11117 { /* Custom Japan */
11118 "ZZJ",
11119 .bg_channels = 14,
11120 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11121 {2427, 4}, {2432, 5}, {2437, 6},
11122 {2442, 7}, {2447, 8}, {2452, 9},
11123 {2457, 10}, {2462, 11}, {2467, 12},
11124 {2472, 13}, {2484, 14, IEEE80211_CH_B_ONLY}},
11125 .a_channels = 4,
11126 .a = {{5170, 34}, {5190, 38},
11127 {5210, 42}, {5230, 46}},
11128 },
11129
03520576
JK		 11130 { /* Rest of World */
11131 "ZZR",
11132 .bg_channels = 14,
11133 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11134 {2427, 4}, {2432, 5}, {2437, 6},
11135 {2442, 7}, {2447, 8}, {2452, 9},
11136 {2457, 10}, {2462, 11}, {2467, 12},
11137 {2472, 13}, {2484, 14, IEEE80211_CH_B_ONLY |
11138 IEEE80211_CH_PASSIVE_ONLY}},
11139 },
11140
4f36f808
JK		 11141 { /* High Band */
11142 "ZZH",
11143 .bg_channels = 13,
11144 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11145 {2427, 4}, {2432, 5}, {2437, 6},
11146 {2442, 7}, {2447, 8}, {2452, 9},
11147 {2457, 10}, {2462, 11},
11148 {2467, 12, IEEE80211_CH_PASSIVE_ONLY},
11149 {2472, 13, IEEE80211_CH_PASSIVE_ONLY}},
11150 .a_channels = 4,
11151 .a = {{5745, 149}, {5765, 153},
11152 {5785, 157}, {5805, 161}},
11153 },
11154
11155 { /* Custom Europe */
11156 "ZZG",
11157 .bg_channels = 13,
11158 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11159 {2427, 4}, {2432, 5}, {2437, 6},
11160 {2442, 7}, {2447, 8}, {2452, 9},
11161 {2457, 10}, {2462, 11},
11162 {2467, 12}, {2472, 13}},
11163 .a_channels = 4,
11164 .a = {{5180, 36}, {5200, 40},
11165 {5220, 44}, {5240, 48}},
11166 },
11167
11168 { /* Europe */
11169 "ZZK",
11170 .bg_channels = 13,
11171 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11172 {2427, 4}, {2432, 5}, {2437, 6},
11173 {2442, 7}, {2447, 8}, {2452, 9},
11174 {2457, 10}, {2462, 11},
11175 {2467, 12, IEEE80211_CH_PASSIVE_ONLY},
11176 {2472, 13, IEEE80211_CH_PASSIVE_ONLY}},
11177 .a_channels = 24,
11178 .a = {{5180, 36, IEEE80211_CH_PASSIVE_ONLY},
11179 {5200, 40, IEEE80211_CH_PASSIVE_ONLY},
11180 {5220, 44, IEEE80211_CH_PASSIVE_ONLY},
11181 {5240, 48, IEEE80211_CH_PASSIVE_ONLY},
11182 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11183 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11184 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11185 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11186 {5500, 100, IEEE80211_CH_PASSIVE_ONLY},
11187 {5520, 104, IEEE80211_CH_PASSIVE_ONLY},
11188 {5540, 108, IEEE80211_CH_PASSIVE_ONLY},
11189 {5560, 112, IEEE80211_CH_PASSIVE_ONLY},
11190 {5580, 116, IEEE80211_CH_PASSIVE_ONLY},
11191 {5600, 120, IEEE80211_CH_PASSIVE_ONLY},
11192 {5620, 124, IEEE80211_CH_PASSIVE_ONLY},
11193 {5640, 128, IEEE80211_CH_PASSIVE_ONLY},
11194 {5660, 132, IEEE80211_CH_PASSIVE_ONLY},
11195 {5680, 136, IEEE80211_CH_PASSIVE_ONLY},
11196 {5700, 140, IEEE80211_CH_PASSIVE_ONLY},
11197 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11198 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11199 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11200 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11201 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11202 },
11203
11204 { /* Europe */
11205 "ZZL",
11206 .bg_channels = 11,
11207 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11208 {2427, 4}, {2432, 5}, {2437, 6},
11209 {2442, 7}, {2447, 8}, {2452, 9},
11210 {2457, 10}, {2462, 11}},
11211 .a_channels = 13,
11212 .a = {{5180, 36, IEEE80211_CH_PASSIVE_ONLY},
11213 {5200, 40, IEEE80211_CH_PASSIVE_ONLY},
11214 {5220, 44, IEEE80211_CH_PASSIVE_ONLY},
11215 {5240, 48, IEEE80211_CH_PASSIVE_ONLY},
11216 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11217 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11218 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11219 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11220 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11221 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11222 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11223 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11224 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11225 }
afbf30a2
JK		 11226};
11227
43f66a6c
JK		 11228#define MAX_HW_RESTARTS 5
11229static int ipw_up(struct ipw_priv *priv)
11230{
4f36f808 11231 int rc, i, j;
43f66a6c 11232
c3d72b96
DW		 11233 /* Age scan list entries found before suspend */
11234 if (priv->suspend_time) {
11235 ieee80211_networks_age(priv->ieee, priv->suspend_time);
11236 priv->suspend_time = 0;
11237 }
11238
43f66a6c
JK		 11239 if (priv->status & STATUS_EXIT_PENDING)
11240 return -EIO;
11241
f6c5cb7c 11242 if (cmdlog && !priv->cmdlog) {
e6e3f12a 11243 priv->cmdlog = kcalloc(cmdlog, sizeof(*priv->cmdlog),
f6c5cb7c
JK		 11244 GFP_KERNEL);
11245 if (priv->cmdlog == NULL) {
11246 IPW_ERROR("Error allocating %d command log entries.\n",
11247 cmdlog);
d0b526b7 11248 return -ENOMEM;
f6c5cb7c 11249 } else {
f6c5cb7c
JK		 11250 priv->cmdlog_len = cmdlog;
11251 }
11252 }
11253
0edd5b44 11254 for (i = 0; i < MAX_HW_RESTARTS; i++) {
bf79451e 11255 /* Load the microcode, firmware, and eeprom.
43f66a6c
JK		 11256 * Also start the clocks. */
11257 rc = ipw_load(priv);
11258 if (rc) {
a4f6bbb3 11259 IPW_ERROR("Unable to load firmware: %d\n", rc);
43f66a6c
JK		 11260 return rc;
11261 }
11262
11263 ipw_init_ordinals(priv);
11264 if (!(priv->config & CFG_CUSTOM_MAC))
11265 eeprom_parse_mac(priv, priv->mac_addr);
11266 memcpy(priv->net_dev->dev_addr, priv->mac_addr, ETH_ALEN);
11267
4f36f808
JK		 11268 for (j = 0; j < ARRAY_SIZE(ipw_geos); j++) {
11269 if (!memcmp(&priv->eeprom[EEPROM_COUNTRY_CODE],
11270 ipw_geos[j].name, 3))
11271 break;
11272 }
03520576
JK		 11273 if (j == ARRAY_SIZE(ipw_geos)) {
11274 IPW_WARNING("SKU [%c%c%c] not recognized.\n",
11275 priv->eeprom[EEPROM_COUNTRY_CODE + 0],
11276 priv->eeprom[EEPROM_COUNTRY_CODE + 1],
11277 priv->eeprom[EEPROM_COUNTRY_CODE + 2]);
4f36f808 11278 j = 0;
03520576 11279 }
1867b117 11280 if (ieee80211_set_geo(priv->ieee, &ipw_geos[j])) {
4f36f808
JK		 11281 IPW_WARNING("Could not set geography.");
11282 return 0;
11283 }
11284
b095c381
JK		 11285 if (priv->status & STATUS_RF_KILL_SW) {
11286 IPW_WARNING("Radio disabled by module parameter.\n");
11287 return 0;
11288 } else if (rf_kill_active(priv)) {
11289 IPW_WARNING("Radio Frequency Kill Switch is On:\n"
11290 "Kill switch must be turned off for "
11291 "wireless networking to work.\n");
11292 queue_delayed_work(priv->workqueue, &priv->rf_kill,
11293 2 * HZ);
43f66a6c 11294 return 0;
c848d0af 11295 }
43f66a6c
JK		 11296
11297 rc = ipw_config(priv);
11298 if (!rc) {
11299 IPW_DEBUG_INFO("Configured device on count %i\n", i);
e666619e
JK		 11300
11301 /* If configure to try and auto-associate, kick
11302 * off a scan. */
c4028958
DH		 11303 queue_delayed_work(priv->workqueue,
11304 &priv->request_scan, 0);
afbf30a2 11305
43f66a6c 11306 return 0;
43f66a6c 11307 }
bf79451e 11308
c848d0af 11309 IPW_DEBUG_INFO("Device configuration failed: 0x%08X\n", rc);
43f66a6c
JK		 11310 IPW_DEBUG_INFO("Failed to config device on retry %d of %d\n",
11311 i, MAX_HW_RESTARTS);
11312
11313 /* We had an error bringing up the hardware, so take it
11314 * all the way back down so we can try again */
11315 ipw_down(priv);
11316 }
11317
bf79451e 11318 /* tried to restart and config the device for as long as our
43f66a6c 11319 * patience could withstand */
0edd5b44 11320 IPW_ERROR("Unable to initialize device after %d attempts.\n", i);
c848d0af 11321
43f66a6c
JK		 11322 return -EIO;
11323}
11324
c4028958 11325static void ipw_bg_up(struct work_struct *work)
c848d0af 11326{
c4028958
DH		 11327 struct ipw_priv *priv =
11328 container_of(work, struct ipw_priv, up);
4644151b 11329 mutex_lock(&priv->mutex);
c4028958 11330 ipw_up(priv);
4644151b 11331 mutex_unlock(&priv->mutex);
c848d0af
JK		 11332}
11333
b095c381 11334static void ipw_deinit(struct ipw_priv *priv)
43f66a6c 11335{
b095c381
JK		 11336 int i;
11337
11338 if (priv->status & STATUS_SCANNING) {
11339 IPW_DEBUG_INFO("Aborting scan during shutdown.\n");
11340 ipw_abort_scan(priv);
11341 }
11342
11343 if (priv->status & STATUS_ASSOCIATED) {
11344 IPW_DEBUG_INFO("Disassociating during shutdown.\n");
11345 ipw_disassociate(priv);
11346 }
11347
11348 ipw_led_shutdown(priv);
11349
11350 /* Wait up to 1s for status to change to not scanning and not
11351 * associated (disassociation can take a while for a ful 802.11
11352 * exchange */
11353 for (i = 1000; i && (priv->status &
11354 (STATUS_DISASSOCIATING |
11355 STATUS_ASSOCIATED | STATUS_SCANNING)); i--)
11356 udelay(10);
11357
11358 if (priv->status & (STATUS_DISASSOCIATING |
11359 STATUS_ASSOCIATED | STATUS_SCANNING))
11360 IPW_DEBUG_INFO("Still associated or scanning...\n");
11361 else
11362 IPW_DEBUG_INFO("Took %dms to de-init\n", 1000 - i);
11363
43f66a6c 11364 /* Attempt to disable the card */
43f66a6c 11365 ipw_send_card_disable(priv, 0);
b095c381
JK		 11366
11367 priv->status &= ~STATUS_INIT;
11368}
11369
11370static void ipw_down(struct ipw_priv *priv)
11371{
11372 int exit_pending = priv->status & STATUS_EXIT_PENDING;
11373
11374 priv->status |= STATUS_EXIT_PENDING;
11375
11376 if (ipw_is_init(priv))
11377 ipw_deinit(priv);
11378
11379 /* Wipe out the EXIT_PENDING status bit if we are not actually
11380 * exiting the module */
11381 if (!exit_pending)
11382 priv->status &= ~STATUS_EXIT_PENDING;
43f66a6c
JK		 11383
11384 /* tell the device to stop sending interrupts */
11385 ipw_disable_interrupts(priv);
11386
11387 /* Clear all bits but the RF Kill */
b095c381 11388 priv->status &= STATUS_RF_KILL_MASK | STATUS_EXIT_PENDING;
43f66a6c 11389 netif_carrier_off(priv->net_dev);
43f66a6c
JK		 11390
11391 ipw_stop_nic(priv);
a613bffd
JK		 11392
11393 ipw_led_radio_off(priv);
43f66a6c
JK		 11394}
11395
c4028958 11396static void ipw_bg_down(struct work_struct *work)
c848d0af 11397{
c4028958
DH		 11398 struct ipw_priv *priv =
11399 container_of(work, struct ipw_priv, down);
4644151b 11400 mutex_lock(&priv->mutex);
c4028958 11401 ipw_down(priv);
4644151b 11402 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11403}
11404
11405/* Called by register_netdev() */
11406static int ipw_net_init(struct net_device *dev)
11407{
11408 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 11409 mutex_lock(&priv->mutex);
43f66a6c 11410
c848d0af 11411 if (ipw_up(priv)) {
4644151b 11412 mutex_unlock(&priv->mutex);
43f66a6c 11413 return -EIO;
c848d0af 11414 }
43f66a6c 11415
4644151b 11416 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11417 return 0;
11418}
11419
11420/* PCI driver stuff */
11421static struct pci_device_id card_ids[] = {
11422 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2701, 0, 0, 0},
11423 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2702, 0, 0, 0},
11424 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2711, 0, 0, 0},
11425 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2712, 0, 0, 0},
11426 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2721, 0, 0, 0},
11427 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2722, 0, 0, 0},
11428 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2731, 0, 0, 0},
11429 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2732, 0, 0, 0},
11430 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2741, 0, 0, 0},
11431 {PCI_VENDOR_ID_INTEL, 0x1043, 0x103c, 0x2741, 0, 0, 0},
11432 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2742, 0, 0, 0},
11433 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2751, 0, 0, 0},
11434 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2752, 0, 0, 0},
11435 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2753, 0, 0, 0},
11436 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2754, 0, 0, 0},
11437 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2761, 0, 0, 0},
11438 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2762, 0, 0, 0},
11439 {PCI_VENDOR_ID_INTEL, 0x104f, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0},
0edd5b44 11440 {PCI_VENDOR_ID_INTEL, 0x4220, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* BG */
a613bffd 11441 {PCI_VENDOR_ID_INTEL, 0x4221, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* BG */
0edd5b44
JG		 11442 {PCI_VENDOR_ID_INTEL, 0x4223, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* ABG */
11443 {PCI_VENDOR_ID_INTEL, 0x4224, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* ABG */
bf79451e 11444
43f66a6c
JK		 11445 /* required last entry */
11446 {0,}
11447};
11448
11449MODULE_DEVICE_TABLE(pci, card_ids);
11450
11451static struct attribute *ipw_sysfs_entries[] = {
11452 &dev_attr_rf_kill.attr,
11453 &dev_attr_direct_dword.attr,
11454 &dev_attr_indirect_byte.attr,
11455 &dev_attr_indirect_dword.attr,
11456 &dev_attr_mem_gpio_reg.attr,
11457 &dev_attr_command_event_reg.attr,
11458 &dev_attr_nic_type.attr,
11459 &dev_attr_status.attr,
11460 &dev_attr_cfg.attr,
b39860c6
JK		 11461 &dev_attr_error.attr,
11462 &dev_attr_event_log.attr,
f6c5cb7c 11463 &dev_attr_cmd_log.attr,
43f66a6c
JK		 11464 &dev_attr_eeprom_delay.attr,
11465 &dev_attr_ucode_version.attr,
11466 &dev_attr_rtc.attr,
a613bffd
JK		 11467 &dev_attr_scan_age.attr,
11468 &dev_attr_led.attr,
b095c381
JK		 11469 &dev_attr_speed_scan.attr,
11470 &dev_attr_net_stats.attr,
375dd244 11471 &dev_attr_channels.attr,
d685b8c2
ZY		 11472#ifdef CONFIG_IPW2200_PROMISCUOUS
11473 &dev_attr_rtap_iface.attr,
11474 &dev_attr_rtap_filter.attr,
11475#endif
43f66a6c
JK		 11476 NULL
11477};
11478
11479static struct attribute_group ipw_attribute_group = {
11480 .name = NULL, /* put in device directory */
0edd5b44 11481 .attrs = ipw_sysfs_entries,
43f66a6c
JK		 11482};
11483
d685b8c2
ZY		 11484#ifdef CONFIG_IPW2200_PROMISCUOUS
11485static int ipw_prom_open(struct net_device *dev)
11486{
11487 struct ipw_prom_priv *prom_priv = ieee80211_priv(dev);
11488 struct ipw_priv *priv = prom_priv->priv;
11489
11490 IPW_DEBUG_INFO("prom dev->open\n");
11491 netif_carrier_off(dev);
d685b8c2
ZY		 11492
11493 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
11494 priv->sys_config.accept_all_data_frames = 1;
11495 priv->sys_config.accept_non_directed_frames = 1;
11496 priv->sys_config.accept_all_mgmt_bcpr = 1;
11497 priv->sys_config.accept_all_mgmt_frames = 1;
11498
11499 ipw_send_system_config(priv);
11500 }
11501
11502 return 0;
11503}
11504
11505static int ipw_prom_stop(struct net_device *dev)
11506{
11507 struct ipw_prom_priv *prom_priv = ieee80211_priv(dev);
11508 struct ipw_priv *priv = prom_priv->priv;
11509
11510 IPW_DEBUG_INFO("prom dev->stop\n");
11511
11512 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
11513 priv->sys_config.accept_all_data_frames = 0;
11514 priv->sys_config.accept_non_directed_frames = 0;
11515 priv->sys_config.accept_all_mgmt_bcpr = 0;
11516 priv->sys_config.accept_all_mgmt_frames = 0;
11517
11518 ipw_send_system_config(priv);
11519 }
11520
11521 return 0;
11522}
11523
11524static int ipw_prom_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
11525{
11526 IPW_DEBUG_INFO("prom dev->xmit\n");
4153e775
PM		 11527 dev_kfree_skb(skb);
11528 return NETDEV_TX_OK;
d685b8c2
ZY		 11529}
11530
44e9ad0b
SH		 11531static const struct net_device_ops ipw_prom_netdev_ops = {
11532 .ndo_open = ipw_prom_open,
11533 .ndo_stop = ipw_prom_stop,
11534 .ndo_start_xmit = ipw_prom_hard_start_xmit,
11535 .ndo_change_mtu = ieee80211_change_mtu,
11536 .ndo_set_mac_address = eth_mac_addr,
11537 .ndo_validate_addr = eth_validate_addr,
11538};
11539
d685b8c2
ZY		 11540static int ipw_prom_alloc(struct ipw_priv *priv)
11541{
11542 int rc = 0;
11543
11544 if (priv->prom_net_dev)
11545 return -EPERM;
11546
11547 priv->prom_net_dev = alloc_ieee80211(sizeof(struct ipw_prom_priv));
11548 if (priv->prom_net_dev == NULL)
11549 return -ENOMEM;
11550
11551 priv->prom_priv = ieee80211_priv(priv->prom_net_dev);
11552 priv->prom_priv->ieee = netdev_priv(priv->prom_net_dev);
11553 priv->prom_priv->priv = priv;
11554
11555 strcpy(priv->prom_net_dev->name, "rtap%d");
3f2eeac9 11556 memcpy(priv->prom_net_dev->dev_addr, priv->mac_addr, ETH_ALEN);
d685b8c2
ZY		 11557
11558 priv->prom_net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
44e9ad0b 11559 priv->prom_net_dev->netdev_ops = &ipw_prom_netdev_ops;
d685b8c2
ZY		 11560
11561 priv->prom_priv->ieee->iw_mode = IW_MODE_MONITOR;
229ce3ab 11562 SET_NETDEV_DEV(priv->prom_net_dev, &priv->pci_dev->dev);
d685b8c2
ZY		 11563
11564 rc = register_netdev(priv->prom_net_dev);
11565 if (rc) {
11566 free_ieee80211(priv->prom_net_dev);
11567 priv->prom_net_dev = NULL;
11568 return rc;
11569 }
11570
11571 return 0;
11572}
11573
11574static void ipw_prom_free(struct ipw_priv *priv)
11575{
11576 if (!priv->prom_net_dev)
11577 return;
11578
11579 unregister_netdev(priv->prom_net_dev);
11580 free_ieee80211(priv->prom_net_dev);
11581
11582 priv->prom_net_dev = NULL;
11583}
11584
11585#endif
11586
44e9ad0b
SH		 11587static const struct net_device_ops ipw_netdev_ops = {
11588 .ndo_init = ipw_net_init,
11589 .ndo_open = ipw_net_open,
11590 .ndo_stop = ipw_net_stop,
11591 .ndo_set_multicast_list = ipw_net_set_multicast_list,
11592 .ndo_set_mac_address = ipw_net_set_mac_address,
11593 .ndo_start_xmit = ieee80211_xmit,
11594 .ndo_change_mtu = ieee80211_change_mtu,
44e9ad0b
SH		 11595 .ndo_validate_addr = eth_validate_addr,
11596};
d685b8c2 11597
2ef19e63
AB		 11598static int __devinit ipw_pci_probe(struct pci_dev *pdev,
11599 const struct pci_device_id *ent)
43f66a6c
JK		 11600{
11601 int err = 0;
11602 struct net_device *net_dev;
11603 void __iomem *base;
11604 u32 length, val;
11605 struct ipw_priv *priv;
afbf30a2 11606 int i;
43f66a6c
JK		 11607
11608 net_dev = alloc_ieee80211(sizeof(struct ipw_priv));
11609 if (net_dev == NULL) {
11610 err = -ENOMEM;
11611 goto out;
11612 }
11613
11614 priv = ieee80211_priv(net_dev);
11615 priv->ieee = netdev_priv(net_dev);
a613bffd 11616
43f66a6c
JK		 11617 priv->net_dev = net_dev;
11618 priv->pci_dev = pdev;
43f66a6c 11619 ipw_debug_level = debug;
89c318ed 11620 spin_lock_init(&priv->irq_lock);
43f66a6c 11621 spin_lock_init(&priv->lock);
afbf30a2
JK		 11622 for (i = 0; i < IPW_IBSS_MAC_HASH_SIZE; i++)
11623 INIT_LIST_HEAD(&priv->ibss_mac_hash[i]);
43f66a6c 11624
4644151b 11625 mutex_init(&priv->mutex);
43f66a6c
JK		 11626 if (pci_enable_device(pdev)) {
11627 err = -ENODEV;
11628 goto out_free_ieee80211;
11629 }
11630
11631 pci_set_master(pdev);
11632
284901a9 11633 err = pci_set_dma_mask(pdev, DMA_BIT_MASK(32));
bf79451e 11634 if (!err)
284901a9 11635 err = pci_set_consistent_dma_mask(pdev, DMA_BIT_MASK(32));
43f66a6c
JK		 11636 if (err) {
11637 printk(KERN_WARNING DRV_NAME ": No suitable DMA available.\n");
11638 goto out_pci_disable_device;
11639 }
11640
11641 pci_set_drvdata(pdev, priv);
11642
11643 err = pci_request_regions(pdev, DRV_NAME);
bf79451e 11644 if (err)
43f66a6c
JK		 11645 goto out_pci_disable_device;
11646
bf79451e 11647 /* We disable the RETRY_TIMEOUT register (0x41) to keep
43f66a6c 11648 * PCI Tx retries from interfering with C3 CPU state */
bf79451e
JG		 11649 pci_read_config_dword(pdev, 0x40, &val);
11650 if ((val & 0x0000ff00) != 0)
43f66a6c 11651 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
bf79451e 11652
43f66a6c
JK		 11653 length = pci_resource_len(pdev, 0);
11654 priv->hw_len = length;
bf79451e 11655
275f165f 11656 base = pci_ioremap_bar(pdev, 0);
43f66a6c
JK		 11657 if (!base) {
11658 err = -ENODEV;
11659 goto out_pci_release_regions;
11660 }
11661
11662 priv->hw_base = base;
11663 IPW_DEBUG_INFO("pci_resource_len = 0x%08x\n", length);
11664 IPW_DEBUG_INFO("pci_resource_base = %p\n", base);
11665
11666 err = ipw_setup_deferred_work(priv);
11667 if (err) {
11668 IPW_ERROR("Unable to setup deferred work\n");
11669 goto out_iounmap;
11670 }
11671
b095c381 11672 ipw_sw_reset(priv, 1);
43f66a6c 11673
1fb9df5d 11674 err = request_irq(pdev->irq, ipw_isr, IRQF_SHARED, DRV_NAME, priv);
43f66a6c
JK		 11675 if (err) {
11676 IPW_ERROR("Error allocating IRQ %d\n", pdev->irq);
11677 goto out_destroy_workqueue;
11678 }
11679
43f66a6c
JK		 11680 SET_NETDEV_DEV(net_dev, &pdev->dev);
11681
4644151b 11682 mutex_lock(&priv->mutex);
c848d0af 11683
43f66a6c
JK		 11684 priv->ieee->hard_start_xmit = ipw_net_hard_start_xmit;
11685 priv->ieee->set_security = shim__set_security;
227d2dc1 11686 priv->ieee->is_queue_full = ipw_net_is_queue_full;
43f66a6c 11687
e43e3c1e 11688#ifdef CONFIG_IPW2200_QOS
a5cf4fe6 11689 priv->ieee->is_qos_active = ipw_is_qos_active;
3b9990cb
JK		 11690 priv->ieee->handle_probe_response = ipw_handle_beacon;
11691 priv->ieee->handle_beacon = ipw_handle_probe_response;
11692 priv->ieee->handle_assoc_response = ipw_handle_assoc_response;
e43e3c1e 11693#endif /* CONFIG_IPW2200_QOS */
b095c381 11694
c848d0af
JK		 11695 priv->ieee->perfect_rssi = -20;
11696 priv->ieee->worst_rssi = -85;
43f66a6c 11697
44e9ad0b 11698 net_dev->netdev_ops = &ipw_netdev_ops;
97a78ca9 11699 priv->wireless_data.spy_data = &priv->ieee->spy_data;
97a78ca9 11700 net_dev->wireless_data = &priv->wireless_data;
43f66a6c
JK		 11701 net_dev->wireless_handlers = &ipw_wx_handler_def;
11702 net_dev->ethtool_ops = &ipw_ethtool_ops;
11703 net_dev->irq = pdev->irq;
0edd5b44 11704 net_dev->base_addr = (unsigned long)priv->hw_base;
43f66a6c
JK		 11705 net_dev->mem_start = pci_resource_start(pdev, 0);
11706 net_dev->mem_end = net_dev->mem_start + pci_resource_len(pdev, 0) - 1;
11707
11708 err = sysfs_create_group(&pdev->dev.kobj, &ipw_attribute_group);
11709 if (err) {
11710 IPW_ERROR("failed to create sysfs device attributes\n");
4644151b 11711 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11712 goto out_release_irq;
11713 }
11714
4644151b 11715 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11716 err = register_netdev(net_dev);
11717 if (err) {
11718 IPW_ERROR("failed to register network device\n");
a613bffd 11719 goto out_remove_sysfs;
43f66a6c 11720 }
48a84770 11721
d685b8c2
ZY		 11722#ifdef CONFIG_IPW2200_PROMISCUOUS
11723 if (rtap_iface) {
11724 err = ipw_prom_alloc(priv);
11725 if (err) {
11726 IPW_ERROR("Failed to register promiscuous network "
11727 "device (error %d).\n", err);
11728 unregister_netdev(priv->net_dev);
11729 goto out_remove_sysfs;
11730 }
11731 }
11732#endif
11733
48a84770
HBA		 11734 printk(KERN_INFO DRV_NAME ": Detected geography %s (%d 802.11bg "
11735 "channels, %d 802.11a channels)\n",
11736 priv->ieee->geo.name, priv->ieee->geo.bg_channels,
11737 priv->ieee->geo.a_channels);
11738
43f66a6c
JK		 11739 return 0;
11740
a613bffd 11741 out_remove_sysfs:
43f66a6c 11742 sysfs_remove_group(&pdev->dev.kobj, &ipw_attribute_group);
0edd5b44 11743 out_release_irq:
43f66a6c 11744 free_irq(pdev->irq, priv);
0edd5b44 11745 out_destroy_workqueue:
43f66a6c
JK		 11746 destroy_workqueue(priv->workqueue);
11747 priv->workqueue = NULL;
0edd5b44 11748 out_iounmap:
43f66a6c 11749 iounmap(priv->hw_base);
0edd5b44 11750 out_pci_release_regions:
43f66a6c 11751 pci_release_regions(pdev);
0edd5b44 11752 out_pci_disable_device:
43f66a6c
JK		 11753 pci_disable_device(pdev);
11754 pci_set_drvdata(pdev, NULL);
0edd5b44 11755 out_free_ieee80211:
43f66a6c 11756 free_ieee80211(priv->net_dev);
0edd5b44 11757 out:
43f66a6c
JK		 11758 return err;
11759}
11760
2ef19e63 11761static void __devexit ipw_pci_remove(struct pci_dev *pdev)
43f66a6c
JK		 11762{
11763 struct ipw_priv *priv = pci_get_drvdata(pdev);
afbf30a2
JK		 11764 struct list_head *p, *q;
11765 int i;
b095c381 11766
43f66a6c
JK		 11767 if (!priv)
11768 return;
11769
4644151b 11770 mutex_lock(&priv->mutex);
43f66a6c 11771
afbf30a2 11772 priv->status |= STATUS_EXIT_PENDING;
43f66a6c 11773 ipw_down(priv);
43f66a6c
JK		 11774 sysfs_remove_group(&pdev->dev.kobj, &ipw_attribute_group);
11775
4644151b 11776 mutex_unlock(&priv->mutex);
43f66a6c
JK		 11777
11778 unregister_netdev(priv->net_dev);
11779
11780 if (priv->rxq) {
11781 ipw_rx_queue_free(priv, priv->rxq);
11782 priv->rxq = NULL;
11783 }
11784 ipw_tx_queue_free(priv);
11785
f6c5cb7c
JK		 11786 if (priv->cmdlog) {
11787 kfree(priv->cmdlog);
11788 priv->cmdlog = NULL;
11789 }
43f66a6c
JK		 11790 /* ipw_down will ensure that there is no more pending work
11791 * in the workqueue's, so we can safely remove them now. */
a613bffd
JK		 11792 cancel_delayed_work(&priv->adhoc_check);
11793 cancel_delayed_work(&priv->gather_stats);
11794 cancel_delayed_work(&priv->request_scan);
ea177305
DW		 11795 cancel_delayed_work(&priv->request_direct_scan);
11796 cancel_delayed_work(&priv->request_passive_scan);
0b531676 11797 cancel_delayed_work(&priv->scan_event);
a613bffd
JK		 11798 cancel_delayed_work(&priv->rf_kill);
11799 cancel_delayed_work(&priv->scan_check);
11800 destroy_workqueue(priv->workqueue);
11801 priv->workqueue = NULL;
43f66a6c 11802
afbf30a2
JK		 11803 /* Free MAC hash list for ADHOC */
11804 for (i = 0; i < IPW_IBSS_MAC_HASH_SIZE; i++) {
11805 list_for_each_safe(p, q, &priv->ibss_mac_hash[i]) {
afbf30a2 11806 list_del(p);
489f4458 11807 kfree(list_entry(p, struct ipw_ibss_seq, list));
afbf30a2
JK		 11808 }
11809 }
11810
8f760780
JJ		 11811 kfree(priv->error);
11812 priv->error = NULL;
43f66a6c 11813
d685b8c2
ZY		 11814#ifdef CONFIG_IPW2200_PROMISCUOUS
11815 ipw_prom_free(priv);
11816#endif
11817
43f66a6c
JK		 11818 free_irq(pdev->irq, priv);
11819 iounmap(priv->hw_base);
11820 pci_release_regions(pdev);
11821 pci_disable_device(pdev);
11822 pci_set_drvdata(pdev, NULL);
11823 free_ieee80211(priv->net_dev);
afbf30a2 11824 free_firmware();
43f66a6c
JK		 11825}
11826
43f66a6c 11827#ifdef CONFIG_PM
583a4e88 11828static int ipw_pci_suspend(struct pci_dev *pdev, pm_message_t state)
43f66a6c
JK		 11829{
11830 struct ipw_priv *priv = pci_get_drvdata(pdev);
11831 struct net_device *dev = priv->net_dev;
11832
11833 printk(KERN_INFO "%s: Going into suspend...\n", dev->name);
11834
0edd5b44 11835 /* Take down the device; powers it off, etc. */
43f66a6c
JK		 11836 ipw_down(priv);
11837
11838 /* Remove the PRESENT state of the device */
11839 netif_device_detach(dev);
11840
43f66a6c 11841 pci_save_state(pdev);
43f66a6c 11842 pci_disable_device(pdev);
583a4e88 11843 pci_set_power_state(pdev, pci_choose_state(pdev, state));
bf79451e 11844
c3d72b96
DW		 11845 priv->suspend_at = get_seconds();
11846
43f66a6c
JK		 11847 return 0;
11848}
11849
11850static int ipw_pci_resume(struct pci_dev *pdev)
11851{
11852 struct ipw_priv *priv = pci_get_drvdata(pdev);
11853 struct net_device *dev = priv->net_dev;
02e0e5e9 11854 int err;
43f66a6c 11855 u32 val;
bf79451e 11856
43f66a6c
JK		 11857 printk(KERN_INFO "%s: Coming out of suspend...\n", dev->name);
11858
ea2b26e0 11859 pci_set_power_state(pdev, PCI_D0);
02e0e5e9
JL		 11860 err = pci_enable_device(pdev);
11861 if (err) {
11862 printk(KERN_ERR "%s: pci_enable_device failed on resume\n",
11863 dev->name);
11864 return err;
11865 }
43f66a6c 11866 pci_restore_state(pdev);
ea2b26e0 11867
43f66a6c
JK		 11868 /*
11869 * Suspend/Resume resets the PCI configuration space, so we have to
11870 * re-disable the RETRY_TIMEOUT register (0x41) to keep PCI Tx retries
11871 * from interfering with C3 CPU state. pci_restore_state won't help
11872 * here since it only restores the first 64 bytes pci config header.
11873 */
bf79451e
JG		 11874 pci_read_config_dword(pdev, 0x40, &val);
11875 if ((val & 0x0000ff00) != 0)
43f66a6c
JK		 11876 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
11877
11878 /* Set the device back into the PRESENT state; this will also wake
11879 * the queue of needed */
11880 netif_device_attach(dev);
11881
c3d72b96
DW		 11882 priv->suspend_time = get_seconds() - priv->suspend_at;
11883
43f66a6c
JK		 11884 /* Bring the device back up */
11885 queue_work(priv->workqueue, &priv->up);
bf79451e 11886
43f66a6c
JK		 11887 return 0;
11888}
11889#endif
11890
c8c22c94
ZY		 11891static void ipw_pci_shutdown(struct pci_dev *pdev)
11892{
11893 struct ipw_priv *priv = pci_get_drvdata(pdev);
11894
11895 /* Take down the device; powers it off, etc. */
11896 ipw_down(priv);
11897
11898 pci_disable_device(pdev);
11899}
11900
43f66a6c
JK		 11901/* driver initialization stuff */
11902static struct pci_driver ipw_driver = {
11903 .name = DRV_NAME,
11904 .id_table = card_ids,
11905 .probe = ipw_pci_probe,
11906 .remove = __devexit_p(ipw_pci_remove),
11907#ifdef CONFIG_PM
11908 .suspend = ipw_pci_suspend,
11909 .resume = ipw_pci_resume,
11910#endif
c8c22c94 11911 .shutdown = ipw_pci_shutdown,
43f66a6c
JK		 11912};
11913
11914static int __init ipw_init(void)
11915{
11916 int ret;
11917
11918 printk(KERN_INFO DRV_NAME ": " DRV_DESCRIPTION ", " DRV_VERSION "\n");
11919 printk(KERN_INFO DRV_NAME ": " DRV_COPYRIGHT "\n");
11920
29917620 11921 ret = pci_register_driver(&ipw_driver);
43f66a6c
JK		 11922 if (ret) {
11923 IPW_ERROR("Unable to initialize PCI module\n");
11924 return ret;
11925 }
11926
0edd5b44 11927 ret = driver_create_file(&ipw_driver.driver, &driver_attr_debug_level);
43f66a6c
JK		 11928 if (ret) {
11929 IPW_ERROR("Unable to create driver sysfs file\n");
11930 pci_unregister_driver(&ipw_driver);
11931 return ret;
11932 }
11933
11934 return ret;
11935}
11936
11937static void __exit ipw_exit(void)
11938{
11939 driver_remove_file(&ipw_driver.driver, &driver_attr_debug_level);
11940 pci_unregister_driver(&ipw_driver);
11941}
11942
11943module_param(disable, int, 0444);
11944MODULE_PARM_DESC(disable, "manually disable the radio (default 0 [radio on])");
11945
11946module_param(associate, int, 0444);
5c7f9b73 11947MODULE_PARM_DESC(associate, "auto associate when scanning (default off)");
43f66a6c
JK		 11948
11949module_param(auto_create, int, 0444);
11950MODULE_PARM_DESC(auto_create, "auto create adhoc network (default on)");
11951
a613bffd 11952module_param(led, int, 0444);
61a2d07d 11953MODULE_PARM_DESC(led, "enable led control on some systems (default 0 off)");
a613bffd 11954
43f66a6c
JK		 11955module_param(debug, int, 0444);
11956MODULE_PARM_DESC(debug, "debug output mask");
11957
11958module_param(channel, int, 0444);
bf79451e 11959MODULE_PARM_DESC(channel, "channel to limit associate to (default 0 [ANY])");
43f66a6c 11960
d685b8c2
ZY		 11961#ifdef CONFIG_IPW2200_PROMISCUOUS
11962module_param(rtap_iface, int, 0444);
11963MODULE_PARM_DESC(rtap_iface, "create the rtap interface (1 - create, default 0)");
11964#endif
11965
e43e3c1e 11966#ifdef CONFIG_IPW2200_QOS
b095c381
JK		 11967module_param(qos_enable, int, 0444);
11968MODULE_PARM_DESC(qos_enable, "enable all QoS functionalitis");
11969
11970module_param(qos_burst_enable, int, 0444);
11971MODULE_PARM_DESC(qos_burst_enable, "enable QoS burst mode");
11972
11973module_param(qos_no_ack_mask, int, 0444);
11974MODULE_PARM_DESC(qos_no_ack_mask, "mask Tx_Queue to no ack");
43f66a6c 11975
b095c381
JK		 11976module_param(burst_duration_CCK, int, 0444);
11977MODULE_PARM_DESC(burst_duration_CCK, "set CCK burst value");
11978
11979module_param(burst_duration_OFDM, int, 0444);
11980MODULE_PARM_DESC(burst_duration_OFDM, "set OFDM burst value");
e43e3c1e 11981#endif /* CONFIG_IPW2200_QOS */
b095c381
JK		 11982
11983#ifdef CONFIG_IPW2200_MONITOR
43f66a6c
JK		 11984module_param(mode, int, 0444);
11985MODULE_PARM_DESC(mode, "network mode (0=BSS,1=IBSS,2=Monitor)");
11986#else
11987module_param(mode, int, 0444);
11988MODULE_PARM_DESC(mode, "network mode (0=BSS,1=IBSS)");
11989#endif
11990
810dabd4
ZY		 11991module_param(bt_coexist, int, 0444);
11992MODULE_PARM_DESC(bt_coexist, "enable bluetooth coexistence (default off)");
11993
b095c381 11994module_param(hwcrypto, int, 0444);
bde37d03 11995MODULE_PARM_DESC(hwcrypto, "enable hardware crypto (default off)");
b095c381 11996
f6c5cb7c
JK		 11997module_param(cmdlog, int, 0444);
11998MODULE_PARM_DESC(cmdlog,
11999 "allocate a ring buffer for logging firmware commands");
12000
4bfdb91d
ZY		 12001module_param(roaming, int, 0444);
12002MODULE_PARM_DESC(roaming, "enable roaming support (default on)");
12003
d2b83e12
ZY		 12004module_param(antenna, int, 0444);
12005MODULE_PARM_DESC(antenna, "select antenna 1=Main, 3=Aux, default 0 [both], 2=slow_diversity (choose the one with lower background noise)");
12006
43f66a6c
JK		 12007module_exit(ipw_exit);
12008module_init(ipw_init);
kernel source for telekom puls (alcatel/mediatek)