Commit | Line | Data |
---|---|---|
47445cb9 | 1 | /* main.c - (formerly known as dldwd_cs.c, orinoco_cs.c and orinoco.c) |
1da177e4 LT |
2 | * |
3 | * A driver for Hermes or Prism 2 chipset based PCMCIA wireless | |
4 | * adaptors, with Lucent/Agere, Intersil or Symbol firmware. | |
5 | * | |
6 | * Current maintainers (as of 29 September 2003) are: | |
7 | * Pavel Roskin <proski AT gnu.org> | |
8 | * and David Gibson <hermes AT gibson.dropbear.id.au> | |
9 | * | |
10 | * (C) Copyright David Gibson, IBM Corporation 2001-2003. | |
11 | * Copyright (C) 2000 David Gibson, Linuxcare Australia. | |
12 | * With some help from : | |
13 | * Copyright (C) 2001 Jean Tourrilhes, HP Labs | |
14 | * Copyright (C) 2001 Benjamin Herrenschmidt | |
15 | * | |
16 | * Based on dummy_cs.c 1.27 2000/06/12 21:27:25 | |
17 | * | |
18 | * Portions based on wvlan_cs.c 1.0.6, Copyright Andreas Neuhaus <andy | |
19 | * AT fasta.fh-dortmund.de> | |
20 | * http://www.stud.fh-dortmund.de/~andy/wvlan/ | |
21 | * | |
22 | * The contents of this file are subject to the Mozilla Public License | |
23 | * Version 1.1 (the "License"); you may not use this file except in | |
24 | * compliance with the License. You may obtain a copy of the License | |
25 | * at http://www.mozilla.org/MPL/ | |
26 | * | |
27 | * Software distributed under the License is distributed on an "AS IS" | |
28 | * basis, WITHOUT WARRANTY OF ANY KIND, either express or implied. See | |
29 | * the License for the specific language governing rights and | |
30 | * limitations under the License. | |
31 | * | |
32 | * The initial developer of the original code is David A. Hinds | |
33 | * <dahinds AT users.sourceforge.net>. Portions created by David | |
34 | * A. Hinds are Copyright (C) 1999 David A. Hinds. All Rights | |
35 | * Reserved. | |
36 | * | |
37 | * Alternatively, the contents of this file may be used under the | |
38 | * terms of the GNU General Public License version 2 (the "GPL"), in | |
39 | * which case the provisions of the GPL are applicable instead of the | |
40 | * above. If you wish to allow the use of your version of this file | |
41 | * only under the terms of the GPL and not to allow others to use your | |
42 | * version of this file under the MPL, indicate your decision by | |
43 | * deleting the provisions above and replace them with the notice and | |
44 | * other provisions required by the GPL. If you do not delete the | |
45 | * provisions above, a recipient may use your version of this file | |
46 | * under either the MPL or the GPL. */ | |
47 | ||
48 | /* | |
1da177e4 | 49 | * TODO |
1da177e4 LT |
50 | * o Handle de-encapsulation within network layer, provide 802.11 |
51 | * headers (patch from Thomas 'Dent' Mirlacher) | |
1da177e4 LT |
52 | * o Fix possible races in SPY handling. |
53 | * o Disconnect wireless extensions from fundamental configuration. | |
54 | * o (maybe) Software WEP support (patch from Stano Meduna). | |
55 | * o (maybe) Use multiple Tx buffers - driver handling queue | |
56 | * rather than firmware. | |
57 | */ | |
58 | ||
59 | /* Locking and synchronization: | |
60 | * | |
61 | * The basic principle is that everything is serialized through a | |
62 | * single spinlock, priv->lock. The lock is used in user, bh and irq | |
63 | * context, so when taken outside hardirq context it should always be | |
64 | * taken with interrupts disabled. The lock protects both the | |
65 | * hardware and the struct orinoco_private. | |
66 | * | |
67 | * Another flag, priv->hw_unavailable indicates that the hardware is | |
68 | * unavailable for an extended period of time (e.g. suspended, or in | |
69 | * the middle of a hard reset). This flag is protected by the | |
70 | * spinlock. All code which touches the hardware should check the | |
71 | * flag after taking the lock, and if it is set, give up on whatever | |
72 | * they are doing and drop the lock again. The orinoco_lock() | |
73 | * function handles this (it unlocks and returns -EBUSY if | |
74 | * hw_unavailable is non-zero). | |
75 | */ | |
76 | ||
77 | #define DRIVER_NAME "orinoco" | |
78 | ||
1da177e4 LT |
79 | #include <linux/module.h> |
80 | #include <linux/kernel.h> | |
81 | #include <linux/init.h> | |
d03032af | 82 | #include <linux/delay.h> |
8e638267 | 83 | #include <linux/device.h> |
1da177e4 | 84 | #include <linux/netdevice.h> |
1da177e4 | 85 | #include <linux/etherdevice.h> |
39d1ffee | 86 | #include <linux/suspend.h> |
9c974fb1 | 87 | #include <linux/if_arp.h> |
1da177e4 | 88 | #include <linux/wireless.h> |
2c706002 | 89 | #include <linux/ieee80211.h> |
620554e4 | 90 | #include <net/iw_handler.h> |
ea60a6aa | 91 | #include <net/cfg80211.h> |
1da177e4 | 92 | |
1da177e4 | 93 | #include "hermes_rid.h" |
3994d502 | 94 | #include "hermes_dld.h" |
712a4342 | 95 | #include "hw.h" |
fb791b1c | 96 | #include "scan.h" |
4adb474b | 97 | #include "mic.h" |
37a2e566 | 98 | #include "fw.h" |
cb1576a8 | 99 | #include "wext.h" |
ea60a6aa | 100 | #include "cfg.h" |
cb1576a8 | 101 | #include "main.h" |
fb791b1c | 102 | |
1da177e4 | 103 | #include "orinoco.h" |
1da177e4 LT |
104 | |
105 | /********************************************************************/ | |
106 | /* Module information */ | |
107 | /********************************************************************/ | |
108 | ||
b2f30a0a DK |
109 | MODULE_AUTHOR("Pavel Roskin <proski@gnu.org> & " |
110 | "David Gibson <hermes@gibson.dropbear.id.au>"); | |
111 | MODULE_DESCRIPTION("Driver for Lucent Orinoco, Prism II based " | |
112 | "and similar wireless cards"); | |
1da177e4 LT |
113 | MODULE_LICENSE("Dual MPL/GPL"); |
114 | ||
115 | /* Level of debugging. Used in the macros in orinoco.h */ | |
116 | #ifdef ORINOCO_DEBUG | |
117 | int orinoco_debug = ORINOCO_DEBUG; | |
2131266d | 118 | EXPORT_SYMBOL(orinoco_debug); |
1da177e4 LT |
119 | module_param(orinoco_debug, int, 0644); |
120 | MODULE_PARM_DESC(orinoco_debug, "Debug level"); | |
1da177e4 LT |
121 | #endif |
122 | ||
123 | static int suppress_linkstatus; /* = 0 */ | |
124 | module_param(suppress_linkstatus, bool, 0644); | |
125 | MODULE_PARM_DESC(suppress_linkstatus, "Don't log link status changes"); | |
b2f30a0a | 126 | |
7bb7c3a3 DG |
127 | static int ignore_disconnect; /* = 0 */ |
128 | module_param(ignore_disconnect, int, 0644); | |
b2f30a0a DK |
129 | MODULE_PARM_DESC(ignore_disconnect, |
130 | "Don't report lost link to the network layer"); | |
1da177e4 | 131 | |
cb1576a8 | 132 | int force_monitor; /* = 0 */ |
98c4cae1 CH |
133 | module_param(force_monitor, int, 0644); |
134 | MODULE_PARM_DESC(force_monitor, "Allow monitor mode for all firmware versions"); | |
135 | ||
1da177e4 LT |
136 | /********************************************************************/ |
137 | /* Internal constants */ | |
138 | /********************************************************************/ | |
139 | ||
95dd91fb CH |
140 | /* 802.2 LLC/SNAP header used for Ethernet encapsulation over 802.11 */ |
141 | static const u8 encaps_hdr[] = {0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00}; | |
142 | #define ENCAPS_OVERHEAD (sizeof(encaps_hdr) + 2) | |
143 | ||
1da177e4 | 144 | #define ORINOCO_MIN_MTU 256 |
2c706002 | 145 | #define ORINOCO_MAX_MTU (IEEE80211_MAX_DATA_LEN - ENCAPS_OVERHEAD) |
1da177e4 | 146 | |
1da177e4 LT |
147 | #define MAX_IRQLOOPS_PER_IRQ 10 |
148 | #define MAX_IRQLOOPS_PER_JIFFY (20000/HZ) /* Based on a guestimate of | |
149 | * how many events the | |
150 | * device could | |
151 | * legitimately generate */ | |
1da177e4 LT |
152 | |
153 | #define DUMMY_FID 0xFFFF | |
154 | ||
155 | /*#define MAX_MULTICAST(priv) (priv->firmware_type == FIRMWARE_TYPE_AGERE ? \ | |
156 | HERMES_MAX_MULTICAST : 0)*/ | |
157 | #define MAX_MULTICAST(priv) (HERMES_MAX_MULTICAST) | |
158 | ||
159 | #define ORINOCO_INTEN (HERMES_EV_RX | HERMES_EV_ALLOC \ | |
160 | | HERMES_EV_TX | HERMES_EV_TXEXC \ | |
161 | | HERMES_EV_WTERR | HERMES_EV_INFO \ | |
a94e8427 | 162 | | HERMES_EV_INFDROP) |
1da177e4 | 163 | |
1da177e4 LT |
164 | /********************************************************************/ |
165 | /* Data types */ | |
166 | /********************************************************************/ | |
167 | ||
30c2d3b4 PR |
168 | /* Beginning of the Tx descriptor, used in TxExc handling */ |
169 | struct hermes_txexc_data { | |
170 | struct hermes_tx_descriptor desc; | |
d133ae4c PR |
171 | __le16 frame_ctl; |
172 | __le16 duration_id; | |
95dd91fb | 173 | u8 addr1[ETH_ALEN]; |
1da177e4 LT |
174 | } __attribute__ ((packed)); |
175 | ||
8f2abf44 | 176 | /* Rx frame header except compatibility 802.3 header */ |
1da177e4 | 177 | struct hermes_rx_descriptor { |
8f2abf44 | 178 | /* Control */ |
d133ae4c PR |
179 | __le16 status; |
180 | __le32 time; | |
1da177e4 LT |
181 | u8 silence; |
182 | u8 signal; | |
183 | u8 rate; | |
184 | u8 rxflow; | |
d133ae4c | 185 | __le32 reserved; |
8f2abf44 CH |
186 | |
187 | /* 802.11 header */ | |
d133ae4c PR |
188 | __le16 frame_ctl; |
189 | __le16 duration_id; | |
8f2abf44 CH |
190 | u8 addr1[ETH_ALEN]; |
191 | u8 addr2[ETH_ALEN]; | |
192 | u8 addr3[ETH_ALEN]; | |
d133ae4c | 193 | __le16 seq_ctl; |
8f2abf44 CH |
194 | u8 addr4[ETH_ALEN]; |
195 | ||
196 | /* Data length */ | |
d133ae4c | 197 | __le16 data_len; |
1da177e4 LT |
198 | } __attribute__ ((packed)); |
199 | ||
47166791 DK |
200 | struct orinoco_rx_data { |
201 | struct hermes_rx_descriptor *desc; | |
202 | struct sk_buff *skb; | |
203 | struct list_head list; | |
204 | }; | |
205 | ||
c63cdbe8 DK |
206 | struct orinoco_scan_data { |
207 | void *buf; | |
208 | size_t len; | |
209 | int type; | |
210 | struct list_head list; | |
211 | }; | |
212 | ||
1da177e4 LT |
213 | /********************************************************************/ |
214 | /* Function prototypes */ | |
215 | /********************************************************************/ | |
216 | ||
721aa2f7 | 217 | static int __orinoco_set_multicast_list(struct net_device *dev); |
6415f7df DK |
218 | static int __orinoco_up(struct orinoco_private *priv); |
219 | static int __orinoco_down(struct orinoco_private *priv); | |
721aa2f7 | 220 | static int __orinoco_commit(struct orinoco_private *priv); |
1da177e4 LT |
221 | |
222 | /********************************************************************/ | |
223 | /* Internal helper functions */ | |
224 | /********************************************************************/ | |
225 | ||
cb1576a8 | 226 | void set_port_type(struct orinoco_private *priv) |
1da177e4 LT |
227 | { |
228 | switch (priv->iw_mode) { | |
5217c571 | 229 | case NL80211_IFTYPE_STATION: |
1da177e4 LT |
230 | priv->port_type = 1; |
231 | priv->createibss = 0; | |
232 | break; | |
5217c571 | 233 | case NL80211_IFTYPE_ADHOC: |
1da177e4 LT |
234 | if (priv->prefer_port3) { |
235 | priv->port_type = 3; | |
236 | priv->createibss = 0; | |
237 | } else { | |
238 | priv->port_type = priv->ibss_port; | |
239 | priv->createibss = 1; | |
240 | } | |
241 | break; | |
5217c571 | 242 | case NL80211_IFTYPE_MONITOR: |
98c4cae1 CH |
243 | priv->port_type = 3; |
244 | priv->createibss = 0; | |
245 | break; | |
1da177e4 LT |
246 | default: |
247 | printk(KERN_ERR "%s: Invalid priv->iw_mode in set_port_type()\n", | |
248 | priv->ndev->name); | |
249 | } | |
250 | } | |
251 | ||
252 | /********************************************************************/ | |
253 | /* Device methods */ | |
254 | /********************************************************************/ | |
255 | ||
256 | static int orinoco_open(struct net_device *dev) | |
257 | { | |
ea60a6aa | 258 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
259 | unsigned long flags; |
260 | int err; | |
261 | ||
262 | if (orinoco_lock(priv, &flags) != 0) | |
263 | return -EBUSY; | |
264 | ||
a2608362 | 265 | err = __orinoco_up(priv); |
1da177e4 | 266 | |
a94e8427 | 267 | if (!err) |
1da177e4 LT |
268 | priv->open = 1; |
269 | ||
270 | orinoco_unlock(priv, &flags); | |
271 | ||
272 | return err; | |
273 | } | |
274 | ||
ad8f451b | 275 | static int orinoco_stop(struct net_device *dev) |
1da177e4 | 276 | { |
ea60a6aa | 277 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
278 | int err = 0; |
279 | ||
280 | /* We mustn't use orinoco_lock() here, because we need to be | |
281 | able to close the interface even if hw_unavailable is set | |
282 | (e.g. as we're released after a PC Card removal) */ | |
283 | spin_lock_irq(&priv->lock); | |
284 | ||
285 | priv->open = 0; | |
286 | ||
a2608362 | 287 | err = __orinoco_down(priv); |
1da177e4 LT |
288 | |
289 | spin_unlock_irq(&priv->lock); | |
290 | ||
291 | return err; | |
292 | } | |
293 | ||
294 | static struct net_device_stats *orinoco_get_stats(struct net_device *dev) | |
295 | { | |
ea60a6aa | 296 | struct orinoco_private *priv = ndev_priv(dev); |
6fe9deb1 | 297 | |
1da177e4 LT |
298 | return &priv->stats; |
299 | } | |
300 | ||
1da177e4 LT |
301 | static void orinoco_set_multicast_list(struct net_device *dev) |
302 | { | |
ea60a6aa | 303 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
304 | unsigned long flags; |
305 | ||
306 | if (orinoco_lock(priv, &flags) != 0) { | |
307 | printk(KERN_DEBUG "%s: orinoco_set_multicast_list() " | |
308 | "called when hw_unavailable\n", dev->name); | |
309 | return; | |
310 | } | |
311 | ||
312 | __orinoco_set_multicast_list(dev); | |
313 | orinoco_unlock(priv, &flags); | |
314 | } | |
315 | ||
316 | static int orinoco_change_mtu(struct net_device *dev, int new_mtu) | |
317 | { | |
ea60a6aa | 318 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 | 319 | |
a94e8427 | 320 | if ((new_mtu < ORINOCO_MIN_MTU) || (new_mtu > ORINOCO_MAX_MTU)) |
1da177e4 LT |
321 | return -EINVAL; |
322 | ||
2c706002 | 323 | /* MTU + encapsulation + header length */ |
a94e8427 DK |
324 | if ((new_mtu + ENCAPS_OVERHEAD + sizeof(struct ieee80211_hdr)) > |
325 | (priv->nicbuf_size - ETH_HLEN)) | |
1da177e4 LT |
326 | return -EINVAL; |
327 | ||
328 | dev->mtu = new_mtu; | |
329 | ||
330 | return 0; | |
331 | } | |
332 | ||
333 | /********************************************************************/ | |
334 | /* Tx path */ | |
335 | /********************************************************************/ | |
336 | ||
d0cf9c0d | 337 | static netdev_tx_t orinoco_xmit(struct sk_buff *skb, struct net_device *dev) |
1da177e4 | 338 | { |
ea60a6aa | 339 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 | 340 | struct net_device_stats *stats = &priv->stats; |
4af198fb | 341 | struct orinoco_tkip_key *key; |
1da177e4 LT |
342 | hermes_t *hw = &priv->hw; |
343 | int err = 0; | |
344 | u16 txfid = priv->txfid; | |
1da177e4 | 345 | struct ethhdr *eh; |
6eecad77 | 346 | int tx_control; |
1da177e4 | 347 | unsigned long flags; |
4af198fb | 348 | int do_mic; |
1da177e4 | 349 | |
a94e8427 | 350 | if (!netif_running(dev)) { |
1da177e4 LT |
351 | printk(KERN_ERR "%s: Tx on stopped device!\n", |
352 | dev->name); | |
b34b867e | 353 | return NETDEV_TX_BUSY; |
1da177e4 | 354 | } |
6fe9deb1 | 355 | |
1da177e4 | 356 | if (netif_queue_stopped(dev)) { |
6fe9deb1 | 357 | printk(KERN_DEBUG "%s: Tx while transmitter busy!\n", |
1da177e4 | 358 | dev->name); |
b34b867e | 359 | return NETDEV_TX_BUSY; |
1da177e4 | 360 | } |
6fe9deb1 | 361 | |
1da177e4 LT |
362 | if (orinoco_lock(priv, &flags) != 0) { |
363 | printk(KERN_ERR "%s: orinoco_xmit() called while hw_unavailable\n", | |
364 | dev->name); | |
b34b867e | 365 | return NETDEV_TX_BUSY; |
1da177e4 LT |
366 | } |
367 | ||
5217c571 DK |
368 | if (!netif_carrier_ok(dev) || |
369 | (priv->iw_mode == NL80211_IFTYPE_MONITOR)) { | |
1da177e4 | 370 | /* Oops, the firmware hasn't established a connection, |
6fe9deb1 DK |
371 | silently drop the packet (this seems to be the |
372 | safest approach). */ | |
470e2aa6 | 373 | goto drop; |
1da177e4 LT |
374 | } |
375 | ||
8d5be088 | 376 | /* Check packet length */ |
a28dc81d | 377 | if (skb->len < ETH_HLEN) |
470e2aa6 | 378 | goto drop; |
1da177e4 | 379 | |
4af198fb DK |
380 | key = (struct orinoco_tkip_key *) priv->keys[priv->tx_key].key; |
381 | ||
382 | do_mic = ((priv->encode_alg == ORINOCO_ALG_TKIP) && | |
383 | (key != NULL)); | |
384 | ||
6eecad77 DK |
385 | tx_control = HERMES_TXCTRL_TX_OK | HERMES_TXCTRL_TX_EX; |
386 | ||
4af198fb | 387 | if (do_mic) |
23edcc41 DK |
388 | tx_control |= (priv->tx_key << HERMES_MIC_KEY_ID_SHIFT) | |
389 | HERMES_TXCTRL_MIC; | |
390 | ||
6eecad77 DK |
391 | if (priv->has_alt_txcntl) { |
392 | /* WPA enabled firmwares have tx_cntl at the end of | |
393 | * the 802.11 header. So write zeroed descriptor and | |
394 | * 802.11 header at the same time | |
395 | */ | |
396 | char desc[HERMES_802_3_OFFSET]; | |
397 | __le16 *txcntl = (__le16 *) &desc[HERMES_TXCNTL2_OFFSET]; | |
398 | ||
399 | memset(&desc, 0, sizeof(desc)); | |
400 | ||
401 | *txcntl = cpu_to_le16(tx_control); | |
402 | err = hermes_bap_pwrite(hw, USER_BAP, &desc, sizeof(desc), | |
403 | txfid, 0); | |
404 | if (err) { | |
405 | if (net_ratelimit()) | |
406 | printk(KERN_ERR "%s: Error %d writing Tx " | |
407 | "descriptor to BAP\n", dev->name, err); | |
408 | goto busy; | |
409 | } | |
410 | } else { | |
411 | struct hermes_tx_descriptor desc; | |
412 | ||
413 | memset(&desc, 0, sizeof(desc)); | |
414 | ||
415 | desc.tx_control = cpu_to_le16(tx_control); | |
416 | err = hermes_bap_pwrite(hw, USER_BAP, &desc, sizeof(desc), | |
417 | txfid, 0); | |
418 | if (err) { | |
419 | if (net_ratelimit()) | |
420 | printk(KERN_ERR "%s: Error %d writing Tx " | |
421 | "descriptor to BAP\n", dev->name, err); | |
422 | goto busy; | |
423 | } | |
1da177e4 | 424 | |
6eecad77 DK |
425 | /* Clear the 802.11 header and data length fields - some |
426 | * firmwares (e.g. Lucent/Agere 8.xx) appear to get confused | |
427 | * if this isn't done. */ | |
428 | hermes_clear_words(hw, HERMES_DATA0, | |
429 | HERMES_802_3_OFFSET - HERMES_802_11_OFFSET); | |
430 | } | |
1da177e4 | 431 | |
23edcc41 DK |
432 | eh = (struct ethhdr *)skb->data; |
433 | ||
1da177e4 LT |
434 | /* Encapsulate Ethernet-II frames */ |
435 | if (ntohs(eh->h_proto) > ETH_DATA_LEN) { /* Ethernet-II frame */ | |
a28dc81d PR |
436 | struct header_struct { |
437 | struct ethhdr eth; /* 802.3 header */ | |
438 | u8 encap[6]; /* 802.2 header */ | |
439 | } __attribute__ ((packed)) hdr; | |
440 | ||
441 | /* Strip destination and source from the data */ | |
442 | skb_pull(skb, 2 * ETH_ALEN); | |
a28dc81d PR |
443 | |
444 | /* And move them to a separate header */ | |
445 | memcpy(&hdr.eth, eh, 2 * ETH_ALEN); | |
446 | hdr.eth.h_proto = htons(sizeof(encaps_hdr) + skb->len); | |
447 | memcpy(hdr.encap, encaps_hdr, sizeof(encaps_hdr)); | |
448 | ||
23edcc41 DK |
449 | /* Insert the SNAP header */ |
450 | if (skb_headroom(skb) < sizeof(hdr)) { | |
451 | printk(KERN_ERR | |
452 | "%s: Not enough headroom for 802.2 headers %d\n", | |
453 | dev->name, skb_headroom(skb)); | |
454 | goto drop; | |
1da177e4 | 455 | } |
23edcc41 DK |
456 | eh = (struct ethhdr *) skb_push(skb, sizeof(hdr)); |
457 | memcpy(eh, &hdr, sizeof(hdr)); | |
1da177e4 LT |
458 | } |
459 | ||
a28dc81d | 460 | err = hermes_bap_pwrite(hw, USER_BAP, skb->data, skb->len, |
23edcc41 | 461 | txfid, HERMES_802_3_OFFSET); |
1da177e4 LT |
462 | if (err) { |
463 | printk(KERN_ERR "%s: Error %d writing packet to BAP\n", | |
464 | dev->name, err); | |
470e2aa6 | 465 | goto busy; |
1da177e4 LT |
466 | } |
467 | ||
23edcc41 | 468 | /* Calculate Michael MIC */ |
4af198fb | 469 | if (do_mic) { |
23edcc41 DK |
470 | u8 mic_buf[MICHAEL_MIC_LEN + 1]; |
471 | u8 *mic; | |
472 | size_t offset; | |
473 | size_t len; | |
474 | ||
475 | if (skb->len % 2) { | |
476 | /* MIC start is on an odd boundary */ | |
477 | mic_buf[0] = skb->data[skb->len - 1]; | |
478 | mic = &mic_buf[1]; | |
479 | offset = skb->len - 1; | |
480 | len = MICHAEL_MIC_LEN + 1; | |
481 | } else { | |
482 | mic = &mic_buf[0]; | |
483 | offset = skb->len; | |
484 | len = MICHAEL_MIC_LEN; | |
485 | } | |
486 | ||
4af198fb | 487 | orinoco_mic(priv->tx_tfm_mic, key->tx_mic, |
23edcc41 DK |
488 | eh->h_dest, eh->h_source, 0 /* priority */, |
489 | skb->data + ETH_HLEN, skb->len - ETH_HLEN, mic); | |
490 | ||
491 | /* Write the MIC */ | |
492 | err = hermes_bap_pwrite(hw, USER_BAP, &mic_buf[0], len, | |
493 | txfid, HERMES_802_3_OFFSET + offset); | |
494 | if (err) { | |
495 | printk(KERN_ERR "%s: Error %d writing MIC to BAP\n", | |
496 | dev->name, err); | |
497 | goto busy; | |
498 | } | |
499 | } | |
500 | ||
1da177e4 LT |
501 | /* Finally, we actually initiate the send */ |
502 | netif_stop_queue(dev); | |
503 | ||
504 | err = hermes_docmd_wait(hw, HERMES_CMD_TX | HERMES_CMD_RECL, | |
505 | txfid, NULL); | |
506 | if (err) { | |
507 | netif_start_queue(dev); | |
c367c21c AM |
508 | if (net_ratelimit()) |
509 | printk(KERN_ERR "%s: Error %d transmitting packet\n", | |
510 | dev->name, err); | |
470e2aa6 | 511 | goto busy; |
1da177e4 LT |
512 | } |
513 | ||
514 | dev->trans_start = jiffies; | |
23edcc41 | 515 | stats->tx_bytes += HERMES_802_3_OFFSET + skb->len; |
470e2aa6 | 516 | goto ok; |
1da177e4 | 517 | |
470e2aa6 PR |
518 | drop: |
519 | stats->tx_errors++; | |
520 | stats->tx_dropped++; | |
1da177e4 | 521 | |
470e2aa6 PR |
522 | ok: |
523 | orinoco_unlock(priv, &flags); | |
1da177e4 | 524 | dev_kfree_skb(skb); |
b34b867e | 525 | return NETDEV_TX_OK; |
1da177e4 | 526 | |
470e2aa6 | 527 | busy: |
2c1bd260 JB |
528 | if (err == -EIO) |
529 | schedule_work(&priv->reset_work); | |
1da177e4 | 530 | orinoco_unlock(priv, &flags); |
b34b867e | 531 | return NETDEV_TX_BUSY; |
1da177e4 LT |
532 | } |
533 | ||
534 | static void __orinoco_ev_alloc(struct net_device *dev, hermes_t *hw) | |
535 | { | |
ea60a6aa | 536 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
537 | u16 fid = hermes_read_regn(hw, ALLOCFID); |
538 | ||
539 | if (fid != priv->txfid) { | |
540 | if (fid != DUMMY_FID) | |
541 | printk(KERN_WARNING "%s: Allocate event on unexpected fid (%04X)\n", | |
542 | dev->name, fid); | |
543 | return; | |
544 | } | |
545 | ||
546 | hermes_write_regn(hw, ALLOCFID, DUMMY_FID); | |
547 | } | |
548 | ||
549 | static void __orinoco_ev_tx(struct net_device *dev, hermes_t *hw) | |
550 | { | |
ea60a6aa | 551 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
552 | struct net_device_stats *stats = &priv->stats; |
553 | ||
554 | stats->tx_packets++; | |
555 | ||
556 | netif_wake_queue(dev); | |
557 | ||
558 | hermes_write_regn(hw, TXCOMPLFID, DUMMY_FID); | |
559 | } | |
560 | ||
561 | static void __orinoco_ev_txexc(struct net_device *dev, hermes_t *hw) | |
562 | { | |
ea60a6aa | 563 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
564 | struct net_device_stats *stats = &priv->stats; |
565 | u16 fid = hermes_read_regn(hw, TXCOMPLFID); | |
d133ae4c | 566 | u16 status; |
30c2d3b4 | 567 | struct hermes_txexc_data hdr; |
1da177e4 LT |
568 | int err = 0; |
569 | ||
570 | if (fid == DUMMY_FID) | |
571 | return; /* Nothing's really happened */ | |
572 | ||
48ca7038 | 573 | /* Read part of the frame header - we need status and addr1 */ |
95dd91fb | 574 | err = hermes_bap_pread(hw, IRQ_BAP, &hdr, |
30c2d3b4 | 575 | sizeof(struct hermes_txexc_data), |
95dd91fb CH |
576 | fid, 0); |
577 | ||
578 | hermes_write_regn(hw, TXCOMPLFID, DUMMY_FID); | |
579 | stats->tx_errors++; | |
580 | ||
1da177e4 LT |
581 | if (err) { |
582 | printk(KERN_WARNING "%s: Unable to read descriptor on Tx error " | |
583 | "(FID=%04X error %d)\n", | |
584 | dev->name, fid, err); | |
95dd91fb | 585 | return; |
1da177e4 | 586 | } |
6fe9deb1 | 587 | |
95dd91fb CH |
588 | DEBUG(1, "%s: Tx error, err %d (FID=%04X)\n", dev->name, |
589 | err, fid); | |
6fe9deb1 | 590 | |
95dd91fb CH |
591 | /* We produce a TXDROP event only for retry or lifetime |
592 | * exceeded, because that's the only status that really mean | |
593 | * that this particular node went away. | |
594 | * Other errors means that *we* screwed up. - Jean II */ | |
30c2d3b4 | 595 | status = le16_to_cpu(hdr.desc.status); |
d133ae4c | 596 | if (status & (HERMES_TXSTAT_RETRYERR | HERMES_TXSTAT_AGEDERR)) { |
95dd91fb CH |
597 | union iwreq_data wrqu; |
598 | ||
599 | /* Copy 802.11 dest address. | |
600 | * We use the 802.11 header because the frame may | |
601 | * not be 802.3 or may be mangled... | |
602 | * In Ad-Hoc mode, it will be the node address. | |
603 | * In managed mode, it will be most likely the AP addr | |
604 | * User space will figure out how to convert it to | |
605 | * whatever it needs (IP address or else). | |
606 | * - Jean II */ | |
607 | memcpy(wrqu.addr.sa_data, hdr.addr1, ETH_ALEN); | |
608 | wrqu.addr.sa_family = ARPHRD_ETHER; | |
609 | ||
610 | /* Send event to user space */ | |
611 | wireless_send_event(dev, IWEVTXDROP, &wrqu, NULL); | |
612 | } | |
1da177e4 LT |
613 | |
614 | netif_wake_queue(dev); | |
1da177e4 LT |
615 | } |
616 | ||
617 | static void orinoco_tx_timeout(struct net_device *dev) | |
618 | { | |
ea60a6aa | 619 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
620 | struct net_device_stats *stats = &priv->stats; |
621 | struct hermes *hw = &priv->hw; | |
622 | ||
623 | printk(KERN_WARNING "%s: Tx timeout! " | |
624 | "ALLOCFID=%04x, TXCOMPLFID=%04x, EVSTAT=%04x\n", | |
625 | dev->name, hermes_read_regn(hw, ALLOCFID), | |
626 | hermes_read_regn(hw, TXCOMPLFID), hermes_read_regn(hw, EVSTAT)); | |
627 | ||
628 | stats->tx_errors++; | |
629 | ||
630 | schedule_work(&priv->reset_work); | |
631 | } | |
632 | ||
633 | /********************************************************************/ | |
634 | /* Rx path (data frames) */ | |
635 | /********************************************************************/ | |
636 | ||
637 | /* Does the frame have a SNAP header indicating it should be | |
638 | * de-encapsulated to Ethernet-II? */ | |
639 | static inline int is_ethersnap(void *_hdr) | |
640 | { | |
641 | u8 *hdr = _hdr; | |
642 | ||
643 | /* We de-encapsulate all packets which, a) have SNAP headers | |
644 | * (i.e. SSAP=DSAP=0xaa and CTRL=0x3 in the 802.2 LLC header | |
645 | * and where b) the OUI of the SNAP header is 00:00:00 or | |
646 | * 00:00:f8 - we need both because different APs appear to use | |
647 | * different OUIs for some reason */ | |
648 | return (memcmp(hdr, &encaps_hdr, 5) == 0) | |
a94e8427 | 649 | && ((hdr[5] == 0x00) || (hdr[5] == 0xf8)); |
1da177e4 LT |
650 | } |
651 | ||
652 | static inline void orinoco_spy_gather(struct net_device *dev, u_char *mac, | |
653 | int level, int noise) | |
654 | { | |
343c686c PR |
655 | struct iw_quality wstats; |
656 | wstats.level = level - 0x95; | |
657 | wstats.noise = noise - 0x95; | |
658 | wstats.qual = (level > noise) ? (level - noise) : 0; | |
f941f859 | 659 | wstats.updated = IW_QUAL_ALL_UPDATED | IW_QUAL_DBM; |
343c686c PR |
660 | /* Update spy records */ |
661 | wireless_spy_update(dev, mac, &wstats); | |
1da177e4 LT |
662 | } |
663 | ||
664 | static void orinoco_stat_gather(struct net_device *dev, | |
665 | struct sk_buff *skb, | |
666 | struct hermes_rx_descriptor *desc) | |
667 | { | |
ea60a6aa | 668 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
669 | |
670 | /* Using spy support with lots of Rx packets, like in an | |
671 | * infrastructure (AP), will really slow down everything, because | |
672 | * the MAC address must be compared to each entry of the spy list. | |
673 | * If the user really asks for it (set some address in the | |
674 | * spy list), we do it, but he will pay the price. | |
675 | * Note that to get here, you need both WIRELESS_SPY | |
676 | * compiled in AND some addresses in the list !!! | |
677 | */ | |
678 | /* Note : gcc will optimise the whole section away if | |
679 | * WIRELESS_SPY is not defined... - Jean II */ | |
680 | if (SPY_NUMBER(priv)) { | |
98e399f8 | 681 | orinoco_spy_gather(dev, skb_mac_header(skb) + ETH_ALEN, |
1da177e4 LT |
682 | desc->signal, desc->silence); |
683 | } | |
684 | } | |
685 | ||
98c4cae1 CH |
686 | /* |
687 | * orinoco_rx_monitor - handle received monitor frames. | |
688 | * | |
689 | * Arguments: | |
690 | * dev network device | |
691 | * rxfid received FID | |
692 | * desc rx descriptor of the frame | |
693 | * | |
694 | * Call context: interrupt | |
695 | */ | |
696 | static void orinoco_rx_monitor(struct net_device *dev, u16 rxfid, | |
697 | struct hermes_rx_descriptor *desc) | |
698 | { | |
699 | u32 hdrlen = 30; /* return full header by default */ | |
700 | u32 datalen = 0; | |
701 | u16 fc; | |
702 | int err; | |
703 | int len; | |
704 | struct sk_buff *skb; | |
ea60a6aa | 705 | struct orinoco_private *priv = ndev_priv(dev); |
98c4cae1 CH |
706 | struct net_device_stats *stats = &priv->stats; |
707 | hermes_t *hw = &priv->hw; | |
708 | ||
709 | len = le16_to_cpu(desc->data_len); | |
710 | ||
711 | /* Determine the size of the header and the data */ | |
712 | fc = le16_to_cpu(desc->frame_ctl); | |
713 | switch (fc & IEEE80211_FCTL_FTYPE) { | |
714 | case IEEE80211_FTYPE_DATA: | |
715 | if ((fc & IEEE80211_FCTL_TODS) | |
716 | && (fc & IEEE80211_FCTL_FROMDS)) | |
717 | hdrlen = 30; | |
718 | else | |
719 | hdrlen = 24; | |
720 | datalen = len; | |
721 | break; | |
722 | case IEEE80211_FTYPE_MGMT: | |
723 | hdrlen = 24; | |
724 | datalen = len; | |
725 | break; | |
726 | case IEEE80211_FTYPE_CTL: | |
727 | switch (fc & IEEE80211_FCTL_STYPE) { | |
728 | case IEEE80211_STYPE_PSPOLL: | |
729 | case IEEE80211_STYPE_RTS: | |
730 | case IEEE80211_STYPE_CFEND: | |
731 | case IEEE80211_STYPE_CFENDACK: | |
732 | hdrlen = 16; | |
733 | break; | |
734 | case IEEE80211_STYPE_CTS: | |
735 | case IEEE80211_STYPE_ACK: | |
736 | hdrlen = 10; | |
737 | break; | |
738 | } | |
739 | break; | |
740 | default: | |
741 | /* Unknown frame type */ | |
742 | break; | |
743 | } | |
744 | ||
745 | /* sanity check the length */ | |
2c706002 | 746 | if (datalen > IEEE80211_MAX_DATA_LEN + 12) { |
98c4cae1 CH |
747 | printk(KERN_DEBUG "%s: oversized monitor frame, " |
748 | "data length = %d\n", dev->name, datalen); | |
98c4cae1 CH |
749 | stats->rx_length_errors++; |
750 | goto update_stats; | |
751 | } | |
752 | ||
753 | skb = dev_alloc_skb(hdrlen + datalen); | |
754 | if (!skb) { | |
755 | printk(KERN_WARNING "%s: Cannot allocate skb for monitor frame\n", | |
756 | dev->name); | |
bb6e093d | 757 | goto update_stats; |
98c4cae1 CH |
758 | } |
759 | ||
760 | /* Copy the 802.11 header to the skb */ | |
761 | memcpy(skb_put(skb, hdrlen), &(desc->frame_ctl), hdrlen); | |
459a98ed | 762 | skb_reset_mac_header(skb); |
98c4cae1 CH |
763 | |
764 | /* If any, copy the data from the card to the skb */ | |
765 | if (datalen > 0) { | |
766 | err = hermes_bap_pread(hw, IRQ_BAP, skb_put(skb, datalen), | |
767 | ALIGN(datalen, 2), rxfid, | |
768 | HERMES_802_2_OFFSET); | |
769 | if (err) { | |
770 | printk(KERN_ERR "%s: error %d reading monitor frame\n", | |
771 | dev->name, err); | |
772 | goto drop; | |
773 | } | |
774 | } | |
775 | ||
776 | skb->dev = dev; | |
777 | skb->ip_summed = CHECKSUM_NONE; | |
778 | skb->pkt_type = PACKET_OTHERHOST; | |
c1b4aa3f | 779 | skb->protocol = cpu_to_be16(ETH_P_802_2); |
6fe9deb1 | 780 | |
98c4cae1 CH |
781 | stats->rx_packets++; |
782 | stats->rx_bytes += skb->len; | |
783 | ||
784 | netif_rx(skb); | |
785 | return; | |
786 | ||
787 | drop: | |
788 | dev_kfree_skb_irq(skb); | |
789 | update_stats: | |
790 | stats->rx_errors++; | |
791 | stats->rx_dropped++; | |
792 | } | |
793 | ||
1da177e4 LT |
794 | static void __orinoco_ev_rx(struct net_device *dev, hermes_t *hw) |
795 | { | |
ea60a6aa | 796 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
797 | struct net_device_stats *stats = &priv->stats; |
798 | struct iw_statistics *wstats = &priv->wstats; | |
799 | struct sk_buff *skb = NULL; | |
31afcef3 | 800 | u16 rxfid, status; |
8f2abf44 | 801 | int length; |
31afcef3 DK |
802 | struct hermes_rx_descriptor *desc; |
803 | struct orinoco_rx_data *rx_data; | |
1da177e4 LT |
804 | int err; |
805 | ||
31afcef3 DK |
806 | desc = kmalloc(sizeof(*desc), GFP_ATOMIC); |
807 | if (!desc) { | |
808 | printk(KERN_WARNING | |
809 | "%s: Can't allocate space for RX descriptor\n", | |
810 | dev->name); | |
811 | goto update_stats; | |
812 | } | |
813 | ||
1da177e4 LT |
814 | rxfid = hermes_read_regn(hw, RXFID); |
815 | ||
31afcef3 | 816 | err = hermes_bap_pread(hw, IRQ_BAP, desc, sizeof(*desc), |
1da177e4 LT |
817 | rxfid, 0); |
818 | if (err) { | |
819 | printk(KERN_ERR "%s: error %d reading Rx descriptor. " | |
820 | "Frame dropped.\n", dev->name, err); | |
98c4cae1 | 821 | goto update_stats; |
1da177e4 LT |
822 | } |
823 | ||
31afcef3 | 824 | status = le16_to_cpu(desc->status); |
1da177e4 | 825 | |
98c4cae1 CH |
826 | if (status & HERMES_RXSTAT_BADCRC) { |
827 | DEBUG(1, "%s: Bad CRC on Rx. Frame dropped.\n", | |
828 | dev->name); | |
829 | stats->rx_crc_errors++; | |
830 | goto update_stats; | |
1da177e4 LT |
831 | } |
832 | ||
98c4cae1 | 833 | /* Handle frames in monitor mode */ |
5217c571 | 834 | if (priv->iw_mode == NL80211_IFTYPE_MONITOR) { |
31afcef3 DK |
835 | orinoco_rx_monitor(dev, rxfid, desc); |
836 | goto out; | |
98c4cae1 | 837 | } |
1da177e4 | 838 | |
98c4cae1 CH |
839 | if (status & HERMES_RXSTAT_UNDECRYPTABLE) { |
840 | DEBUG(1, "%s: Undecryptable frame on Rx. Frame dropped.\n", | |
841 | dev->name); | |
842 | wstats->discard.code++; | |
843 | goto update_stats; | |
1da177e4 LT |
844 | } |
845 | ||
31afcef3 | 846 | length = le16_to_cpu(desc->data_len); |
8f2abf44 | 847 | |
1da177e4 LT |
848 | /* Sanity checks */ |
849 | if (length < 3) { /* No for even an 802.2 LLC header */ | |
850 | /* At least on Symbol firmware with PCF we get quite a | |
6fe9deb1 DK |
851 | lot of these legitimately - Poll frames with no |
852 | data. */ | |
31afcef3 | 853 | goto out; |
1da177e4 | 854 | } |
2c706002 | 855 | if (length > IEEE80211_MAX_DATA_LEN) { |
1da177e4 LT |
856 | printk(KERN_WARNING "%s: Oversized frame received (%d bytes)\n", |
857 | dev->name, length); | |
858 | stats->rx_length_errors++; | |
98c4cae1 | 859 | goto update_stats; |
1da177e4 LT |
860 | } |
861 | ||
23edcc41 DK |
862 | /* Payload size does not include Michael MIC. Increase payload |
863 | * size to read it together with the data. */ | |
864 | if (status & HERMES_RXSTAT_MIC) | |
865 | length += MICHAEL_MIC_LEN; | |
866 | ||
1da177e4 LT |
867 | /* We need space for the packet data itself, plus an ethernet |
868 | header, plus 2 bytes so we can align the IP header on a | |
869 | 32bit boundary, plus 1 byte so we can read in odd length | |
870 | packets from the card, which has an IO granularity of 16 | |
6fe9deb1 | 871 | bits */ |
1da177e4 LT |
872 | skb = dev_alloc_skb(length+ETH_HLEN+2+1); |
873 | if (!skb) { | |
874 | printk(KERN_WARNING "%s: Can't allocate skb for Rx\n", | |
875 | dev->name); | |
98c4cae1 | 876 | goto update_stats; |
1da177e4 LT |
877 | } |
878 | ||
8f2abf44 CH |
879 | /* We'll prepend the header, so reserve space for it. The worst |
880 | case is no decapsulation, when 802.3 header is prepended and | |
881 | nothing is removed. 2 is for aligning the IP header. */ | |
882 | skb_reserve(skb, ETH_HLEN + 2); | |
883 | ||
884 | err = hermes_bap_pread(hw, IRQ_BAP, skb_put(skb, length), | |
885 | ALIGN(length, 2), rxfid, | |
886 | HERMES_802_2_OFFSET); | |
887 | if (err) { | |
888 | printk(KERN_ERR "%s: error %d reading frame. " | |
889 | "Frame dropped.\n", dev->name, err); | |
8f2abf44 CH |
890 | goto drop; |
891 | } | |
1da177e4 | 892 | |
31afcef3 DK |
893 | /* Add desc and skb to rx queue */ |
894 | rx_data = kzalloc(sizeof(*rx_data), GFP_ATOMIC); | |
895 | if (!rx_data) { | |
896 | printk(KERN_WARNING "%s: Can't allocate RX packet\n", | |
897 | dev->name); | |
898 | goto drop; | |
899 | } | |
900 | rx_data->desc = desc; | |
901 | rx_data->skb = skb; | |
902 | list_add_tail(&rx_data->list, &priv->rx_list); | |
903 | tasklet_schedule(&priv->rx_tasklet); | |
904 | ||
905 | return; | |
906 | ||
907 | drop: | |
908 | dev_kfree_skb_irq(skb); | |
909 | update_stats: | |
910 | stats->rx_errors++; | |
911 | stats->rx_dropped++; | |
912 | out: | |
913 | kfree(desc); | |
914 | } | |
915 | ||
916 | static void orinoco_rx(struct net_device *dev, | |
917 | struct hermes_rx_descriptor *desc, | |
918 | struct sk_buff *skb) | |
919 | { | |
ea60a6aa | 920 | struct orinoco_private *priv = ndev_priv(dev); |
31afcef3 DK |
921 | struct net_device_stats *stats = &priv->stats; |
922 | u16 status, fc; | |
923 | int length; | |
924 | struct ethhdr *hdr; | |
925 | ||
926 | status = le16_to_cpu(desc->status); | |
927 | length = le16_to_cpu(desc->data_len); | |
928 | fc = le16_to_cpu(desc->frame_ctl); | |
929 | ||
23edcc41 DK |
930 | /* Calculate and check MIC */ |
931 | if (status & HERMES_RXSTAT_MIC) { | |
4af198fb | 932 | struct orinoco_tkip_key *key; |
23edcc41 DK |
933 | int key_id = ((status & HERMES_RXSTAT_MIC_KEY_ID) >> |
934 | HERMES_MIC_KEY_ID_SHIFT); | |
935 | u8 mic[MICHAEL_MIC_LEN]; | |
936 | u8 *rxmic; | |
937 | u8 *src = (fc & IEEE80211_FCTL_FROMDS) ? | |
938 | desc->addr3 : desc->addr2; | |
939 | ||
940 | /* Extract Michael MIC from payload */ | |
941 | rxmic = skb->data + skb->len - MICHAEL_MIC_LEN; | |
942 | ||
943 | skb_trim(skb, skb->len - MICHAEL_MIC_LEN); | |
944 | length -= MICHAEL_MIC_LEN; | |
945 | ||
4af198fb DK |
946 | key = (struct orinoco_tkip_key *) priv->keys[key_id].key; |
947 | ||
948 | if (!key) { | |
949 | printk(KERN_WARNING "%s: Received encrypted frame from " | |
950 | "%pM using key %i, but key is not installed\n", | |
951 | dev->name, src, key_id); | |
952 | goto drop; | |
953 | } | |
954 | ||
955 | orinoco_mic(priv->rx_tfm_mic, key->rx_mic, desc->addr1, src, | |
23edcc41 | 956 | 0, /* priority or QoS? */ |
4af198fb | 957 | skb->data, skb->len, &mic[0]); |
23edcc41 DK |
958 | |
959 | if (memcmp(mic, rxmic, | |
960 | MICHAEL_MIC_LEN)) { | |
961 | union iwreq_data wrqu; | |
962 | struct iw_michaelmicfailure wxmic; | |
23edcc41 DK |
963 | |
964 | printk(KERN_WARNING "%s: " | |
e174961c | 965 | "Invalid Michael MIC in data frame from %pM, " |
23edcc41 | 966 | "using key %i\n", |
e174961c | 967 | dev->name, src, key_id); |
23edcc41 DK |
968 | |
969 | /* TODO: update stats */ | |
970 | ||
971 | /* Notify userspace */ | |
972 | memset(&wxmic, 0, sizeof(wxmic)); | |
973 | wxmic.flags = key_id & IW_MICFAILURE_KEY_ID; | |
974 | wxmic.flags |= (desc->addr1[0] & 1) ? | |
975 | IW_MICFAILURE_GROUP : IW_MICFAILURE_PAIRWISE; | |
976 | wxmic.src_addr.sa_family = ARPHRD_ETHER; | |
977 | memcpy(wxmic.src_addr.sa_data, src, ETH_ALEN); | |
978 | ||
979 | (void) orinoco_hw_get_tkip_iv(priv, key_id, | |
980 | &wxmic.tsc[0]); | |
981 | ||
982 | memset(&wrqu, 0, sizeof(wrqu)); | |
983 | wrqu.data.length = sizeof(wxmic); | |
984 | wireless_send_event(dev, IWEVMICHAELMICFAILURE, &wrqu, | |
985 | (char *) &wxmic); | |
986 | ||
987 | goto drop; | |
988 | } | |
989 | } | |
990 | ||
1da177e4 LT |
991 | /* Handle decapsulation |
992 | * In most cases, the firmware tell us about SNAP frames. | |
993 | * For some reason, the SNAP frames sent by LinkSys APs | |
994 | * are not properly recognised by most firmwares. | |
995 | * So, check ourselves */ | |
8f2abf44 CH |
996 | if (length >= ENCAPS_OVERHEAD && |
997 | (((status & HERMES_RXSTAT_MSGTYPE) == HERMES_RXSTAT_1042) || | |
998 | ((status & HERMES_RXSTAT_MSGTYPE) == HERMES_RXSTAT_TUNNEL) || | |
999 | is_ethersnap(skb->data))) { | |
1da177e4 LT |
1000 | /* These indicate a SNAP within 802.2 LLC within |
1001 | 802.11 frame which we'll need to de-encapsulate to | |
1002 | the original EthernetII frame. */ | |
b2f30a0a DK |
1003 | hdr = (struct ethhdr *)skb_push(skb, |
1004 | ETH_HLEN - ENCAPS_OVERHEAD); | |
1da177e4 | 1005 | } else { |
8f2abf44 CH |
1006 | /* 802.3 frame - prepend 802.3 header as is */ |
1007 | hdr = (struct ethhdr *)skb_push(skb, ETH_HLEN); | |
1008 | hdr->h_proto = htons(length); | |
1da177e4 | 1009 | } |
31afcef3 | 1010 | memcpy(hdr->h_dest, desc->addr1, ETH_ALEN); |
8f2abf44 | 1011 | if (fc & IEEE80211_FCTL_FROMDS) |
31afcef3 | 1012 | memcpy(hdr->h_source, desc->addr3, ETH_ALEN); |
8f2abf44 | 1013 | else |
31afcef3 | 1014 | memcpy(hdr->h_source, desc->addr2, ETH_ALEN); |
1da177e4 | 1015 | |
1da177e4 LT |
1016 | skb->protocol = eth_type_trans(skb, dev); |
1017 | skb->ip_summed = CHECKSUM_NONE; | |
8f2abf44 CH |
1018 | if (fc & IEEE80211_FCTL_TODS) |
1019 | skb->pkt_type = PACKET_OTHERHOST; | |
6fe9deb1 | 1020 | |
1da177e4 | 1021 | /* Process the wireless stats if needed */ |
31afcef3 | 1022 | orinoco_stat_gather(dev, skb, desc); |
1da177e4 LT |
1023 | |
1024 | /* Pass the packet to the networking stack */ | |
1025 | netif_rx(skb); | |
1026 | stats->rx_packets++; | |
1027 | stats->rx_bytes += length; | |
1028 | ||
1029 | return; | |
23edcc41 DK |
1030 | |
1031 | drop: | |
1032 | dev_kfree_skb(skb); | |
1033 | stats->rx_errors++; | |
1034 | stats->rx_dropped++; | |
31afcef3 | 1035 | } |
1da177e4 | 1036 | |
31afcef3 DK |
1037 | static void orinoco_rx_isr_tasklet(unsigned long data) |
1038 | { | |
5381956b DK |
1039 | struct orinoco_private *priv = (struct orinoco_private *) data; |
1040 | struct net_device *dev = priv->ndev; | |
31afcef3 DK |
1041 | struct orinoco_rx_data *rx_data, *temp; |
1042 | struct hermes_rx_descriptor *desc; | |
1043 | struct sk_buff *skb; | |
20953ad6 DK |
1044 | unsigned long flags; |
1045 | ||
1046 | /* orinoco_rx requires the driver lock, and we also need to | |
1047 | * protect priv->rx_list, so just hold the lock over the | |
1048 | * lot. | |
1049 | * | |
1050 | * If orinoco_lock fails, we've unplugged the card. In this | |
1051 | * case just abort. */ | |
1052 | if (orinoco_lock(priv, &flags) != 0) | |
1053 | return; | |
31afcef3 DK |
1054 | |
1055 | /* extract desc and skb from queue */ | |
1056 | list_for_each_entry_safe(rx_data, temp, &priv->rx_list, list) { | |
1057 | desc = rx_data->desc; | |
1058 | skb = rx_data->skb; | |
1059 | list_del(&rx_data->list); | |
1060 | kfree(rx_data); | |
1061 | ||
1062 | orinoco_rx(dev, desc, skb); | |
1063 | ||
1064 | kfree(desc); | |
1065 | } | |
20953ad6 DK |
1066 | |
1067 | orinoco_unlock(priv, &flags); | |
1da177e4 LT |
1068 | } |
1069 | ||
1070 | /********************************************************************/ | |
1071 | /* Rx path (info frames) */ | |
1072 | /********************************************************************/ | |
1073 | ||
1074 | static void print_linkstatus(struct net_device *dev, u16 status) | |
1075 | { | |
2131266d | 1076 | char *s; |
1da177e4 LT |
1077 | |
1078 | if (suppress_linkstatus) | |
1079 | return; | |
1080 | ||
1081 | switch (status) { | |
1082 | case HERMES_LINKSTATUS_NOT_CONNECTED: | |
1083 | s = "Not Connected"; | |
1084 | break; | |
1085 | case HERMES_LINKSTATUS_CONNECTED: | |
1086 | s = "Connected"; | |
1087 | break; | |
1088 | case HERMES_LINKSTATUS_DISCONNECTED: | |
1089 | s = "Disconnected"; | |
1090 | break; | |
1091 | case HERMES_LINKSTATUS_AP_CHANGE: | |
1092 | s = "AP Changed"; | |
1093 | break; | |
1094 | case HERMES_LINKSTATUS_AP_OUT_OF_RANGE: | |
1095 | s = "AP Out of Range"; | |
1096 | break; | |
1097 | case HERMES_LINKSTATUS_AP_IN_RANGE: | |
1098 | s = "AP In Range"; | |
1099 | break; | |
1100 | case HERMES_LINKSTATUS_ASSOC_FAILED: | |
1101 | s = "Association Failed"; | |
1102 | break; | |
1103 | default: | |
1104 | s = "UNKNOWN"; | |
1105 | } | |
6fe9deb1 | 1106 | |
11eaea41 | 1107 | printk(KERN_DEBUG "%s: New link status: %s (%04x)\n", |
1da177e4 LT |
1108 | dev->name, s, status); |
1109 | } | |
1110 | ||
16739b06 | 1111 | /* Search scan results for requested BSSID, join it if found */ |
c4028958 | 1112 | static void orinoco_join_ap(struct work_struct *work) |
16739b06 | 1113 | { |
c4028958 DH |
1114 | struct orinoco_private *priv = |
1115 | container_of(work, struct orinoco_private, join_work); | |
1116 | struct net_device *dev = priv->ndev; | |
16739b06 CH |
1117 | struct hermes *hw = &priv->hw; |
1118 | int err; | |
1119 | unsigned long flags; | |
1120 | struct join_req { | |
1121 | u8 bssid[ETH_ALEN]; | |
d133ae4c | 1122 | __le16 channel; |
16739b06 CH |
1123 | } __attribute__ ((packed)) req; |
1124 | const int atom_len = offsetof(struct prism2_scan_apinfo, atim); | |
c89cc225 | 1125 | struct prism2_scan_apinfo *atom = NULL; |
16739b06 | 1126 | int offset = 4; |
c89cc225 | 1127 | int found = 0; |
16739b06 CH |
1128 | u8 *buf; |
1129 | u16 len; | |
1130 | ||
1131 | /* Allocate buffer for scan results */ | |
1132 | buf = kmalloc(MAX_SCAN_LEN, GFP_KERNEL); | |
a94e8427 | 1133 | if (!buf) |
16739b06 CH |
1134 | return; |
1135 | ||
1136 | if (orinoco_lock(priv, &flags) != 0) | |
f3cb4cc1 | 1137 | goto fail_lock; |
16739b06 CH |
1138 | |
1139 | /* Sanity checks in case user changed something in the meantime */ | |
a94e8427 | 1140 | if (!priv->bssid_fixed) |
16739b06 CH |
1141 | goto out; |
1142 | ||
1143 | if (strlen(priv->desired_essid) == 0) | |
1144 | goto out; | |
1145 | ||
1146 | /* Read scan results from the firmware */ | |
1147 | err = hermes_read_ltv(hw, USER_BAP, | |
1148 | HERMES_RID_SCANRESULTSTABLE, | |
1149 | MAX_SCAN_LEN, &len, buf); | |
1150 | if (err) { | |
1151 | printk(KERN_ERR "%s: Cannot read scan results\n", | |
1152 | dev->name); | |
1153 | goto out; | |
1154 | } | |
1155 | ||
1156 | len = HERMES_RECLEN_TO_BYTES(len); | |
1157 | ||
1158 | /* Go through the scan results looking for the channel of the AP | |
1159 | * we were requested to join */ | |
1160 | for (; offset + atom_len <= len; offset += atom_len) { | |
1161 | atom = (struct prism2_scan_apinfo *) (buf + offset); | |
c89cc225 PR |
1162 | if (memcmp(&atom->bssid, priv->desired_bssid, ETH_ALEN) == 0) { |
1163 | found = 1; | |
1164 | break; | |
1165 | } | |
16739b06 CH |
1166 | } |
1167 | ||
a94e8427 | 1168 | if (!found) { |
c89cc225 PR |
1169 | DEBUG(1, "%s: Requested AP not found in scan results\n", |
1170 | dev->name); | |
1171 | goto out; | |
1172 | } | |
16739b06 | 1173 | |
16739b06 CH |
1174 | memcpy(req.bssid, priv->desired_bssid, ETH_ALEN); |
1175 | req.channel = atom->channel; /* both are little-endian */ | |
1176 | err = HERMES_WRITE_RECORD(hw, USER_BAP, HERMES_RID_CNFJOINREQUEST, | |
1177 | &req); | |
1178 | if (err) | |
1179 | printk(KERN_ERR "%s: Error issuing join request\n", dev->name); | |
1180 | ||
1181 | out: | |
16739b06 | 1182 | orinoco_unlock(priv, &flags); |
f3cb4cc1 PR |
1183 | |
1184 | fail_lock: | |
1185 | kfree(buf); | |
16739b06 CH |
1186 | } |
1187 | ||
95dd91fb | 1188 | /* Send new BSSID to userspace */ |
6cd90b1c | 1189 | static void orinoco_send_bssid_wevent(struct orinoco_private *priv) |
95dd91fb | 1190 | { |
c4028958 | 1191 | struct net_device *dev = priv->ndev; |
95dd91fb CH |
1192 | struct hermes *hw = &priv->hw; |
1193 | union iwreq_data wrqu; | |
1194 | int err; | |
95dd91fb | 1195 | |
499b702a | 1196 | err = hermes_read_ltv(hw, USER_BAP, HERMES_RID_CURRENTBSSID, |
95dd91fb CH |
1197 | ETH_ALEN, NULL, wrqu.ap_addr.sa_data); |
1198 | if (err != 0) | |
6cd90b1c | 1199 | return; |
95dd91fb CH |
1200 | |
1201 | wrqu.ap_addr.sa_family = ARPHRD_ETHER; | |
1202 | ||
1203 | /* Send event to user space */ | |
1204 | wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL); | |
6cd90b1c DK |
1205 | } |
1206 | ||
06009fda DK |
1207 | static void orinoco_send_assocreqie_wevent(struct orinoco_private *priv) |
1208 | { | |
1209 | struct net_device *dev = priv->ndev; | |
1210 | struct hermes *hw = &priv->hw; | |
1211 | union iwreq_data wrqu; | |
1212 | int err; | |
1213 | u8 buf[88]; | |
1214 | u8 *ie; | |
1215 | ||
1216 | if (!priv->has_wpa) | |
1217 | return; | |
1218 | ||
499b702a | 1219 | err = hermes_read_ltv(hw, USER_BAP, HERMES_RID_CURRENT_ASSOC_REQ_INFO, |
06009fda DK |
1220 | sizeof(buf), NULL, &buf); |
1221 | if (err != 0) | |
1222 | return; | |
1223 | ||
1224 | ie = orinoco_get_wpa_ie(buf, sizeof(buf)); | |
1225 | if (ie) { | |
1226 | int rem = sizeof(buf) - (ie - &buf[0]); | |
1227 | wrqu.data.length = ie[1] + 2; | |
1228 | if (wrqu.data.length > rem) | |
1229 | wrqu.data.length = rem; | |
1230 | ||
1231 | if (wrqu.data.length) | |
1232 | /* Send event to user space */ | |
1233 | wireless_send_event(dev, IWEVASSOCREQIE, &wrqu, ie); | |
1234 | } | |
1235 | } | |
1236 | ||
1237 | static void orinoco_send_assocrespie_wevent(struct orinoco_private *priv) | |
1238 | { | |
1239 | struct net_device *dev = priv->ndev; | |
1240 | struct hermes *hw = &priv->hw; | |
1241 | union iwreq_data wrqu; | |
1242 | int err; | |
1243 | u8 buf[88]; /* TODO: verify max size or IW_GENERIC_IE_MAX */ | |
1244 | u8 *ie; | |
1245 | ||
1246 | if (!priv->has_wpa) | |
1247 | return; | |
1248 | ||
499b702a | 1249 | err = hermes_read_ltv(hw, USER_BAP, HERMES_RID_CURRENT_ASSOC_RESP_INFO, |
06009fda DK |
1250 | sizeof(buf), NULL, &buf); |
1251 | if (err != 0) | |
1252 | return; | |
1253 | ||
1254 | ie = orinoco_get_wpa_ie(buf, sizeof(buf)); | |
1255 | if (ie) { | |
1256 | int rem = sizeof(buf) - (ie - &buf[0]); | |
1257 | wrqu.data.length = ie[1] + 2; | |
1258 | if (wrqu.data.length > rem) | |
1259 | wrqu.data.length = rem; | |
1260 | ||
1261 | if (wrqu.data.length) | |
1262 | /* Send event to user space */ | |
1263 | wireless_send_event(dev, IWEVASSOCRESPIE, &wrqu, ie); | |
1264 | } | |
1265 | } | |
1266 | ||
6cd90b1c DK |
1267 | static void orinoco_send_wevents(struct work_struct *work) |
1268 | { | |
1269 | struct orinoco_private *priv = | |
1270 | container_of(work, struct orinoco_private, wevent_work); | |
1271 | unsigned long flags; | |
1272 | ||
1273 | if (orinoco_lock(priv, &flags) != 0) | |
1274 | return; | |
1275 | ||
06009fda DK |
1276 | orinoco_send_assocreqie_wevent(priv); |
1277 | orinoco_send_assocrespie_wevent(priv); | |
6cd90b1c | 1278 | orinoco_send_bssid_wevent(priv); |
8aeabc37 | 1279 | |
95dd91fb CH |
1280 | orinoco_unlock(priv, &flags); |
1281 | } | |
1282 | ||
c63cdbe8 DK |
1283 | static void qbuf_scan(struct orinoco_private *priv, void *buf, |
1284 | int len, int type) | |
1285 | { | |
1286 | struct orinoco_scan_data *sd; | |
1287 | unsigned long flags; | |
1288 | ||
1289 | sd = kmalloc(sizeof(*sd), GFP_ATOMIC); | |
1290 | sd->buf = buf; | |
1291 | sd->len = len; | |
1292 | sd->type = type; | |
1293 | ||
1294 | spin_lock_irqsave(&priv->scan_lock, flags); | |
1295 | list_add_tail(&sd->list, &priv->scan_list); | |
1296 | spin_unlock_irqrestore(&priv->scan_lock, flags); | |
1297 | ||
1298 | schedule_work(&priv->process_scan); | |
1299 | } | |
1300 | ||
1301 | static void qabort_scan(struct orinoco_private *priv) | |
1302 | { | |
1303 | struct orinoco_scan_data *sd; | |
1304 | unsigned long flags; | |
1305 | ||
1306 | sd = kmalloc(sizeof(*sd), GFP_ATOMIC); | |
1307 | sd->len = -1; /* Abort */ | |
1308 | ||
1309 | spin_lock_irqsave(&priv->scan_lock, flags); | |
1310 | list_add_tail(&sd->list, &priv->scan_list); | |
1311 | spin_unlock_irqrestore(&priv->scan_lock, flags); | |
1312 | ||
1313 | schedule_work(&priv->process_scan); | |
1314 | } | |
1315 | ||
1316 | static void orinoco_process_scan_results(struct work_struct *work) | |
1317 | { | |
1318 | struct orinoco_private *priv = | |
1319 | container_of(work, struct orinoco_private, process_scan); | |
1320 | struct orinoco_scan_data *sd, *temp; | |
1321 | unsigned long flags; | |
1322 | void *buf; | |
1323 | int len; | |
1324 | int type; | |
1325 | ||
1326 | spin_lock_irqsave(&priv->scan_lock, flags); | |
1327 | list_for_each_entry_safe(sd, temp, &priv->scan_list, list) { | |
1328 | spin_unlock_irqrestore(&priv->scan_lock, flags); | |
1329 | ||
1330 | buf = sd->buf; | |
1331 | len = sd->len; | |
1332 | type = sd->type; | |
1333 | ||
1334 | list_del(&sd->list); | |
1335 | kfree(sd); | |
1336 | ||
1337 | if (len > 0) { | |
1338 | if (type == HERMES_INQ_CHANNELINFO) | |
1339 | orinoco_add_extscan_result(priv, buf, len); | |
1340 | else | |
1341 | orinoco_add_hostscan_results(priv, buf, len); | |
1342 | ||
1343 | kfree(buf); | |
1344 | } else if (priv->scan_request) { | |
1345 | /* Either abort or complete the scan */ | |
1346 | cfg80211_scan_done(priv->scan_request, (len < 0)); | |
1347 | priv->scan_request = NULL; | |
1348 | } | |
1349 | ||
1350 | spin_lock_irqsave(&priv->scan_lock, flags); | |
1351 | } | |
1352 | spin_unlock_irqrestore(&priv->scan_lock, flags); | |
1353 | } | |
1354 | ||
1da177e4 LT |
1355 | static void __orinoco_ev_info(struct net_device *dev, hermes_t *hw) |
1356 | { | |
ea60a6aa | 1357 | struct orinoco_private *priv = ndev_priv(dev); |
1da177e4 LT |
1358 | u16 infofid; |
1359 | struct { | |
d133ae4c PR |
1360 | __le16 len; |
1361 | __le16 type; | |
1da177e4 LT |
1362 | } __attribute__ ((packed)) info; |
1363 | int len, type; | |
1364 | int err; | |
1365 | ||
1366 | /* This is an answer to an INQUIRE command that we did earlier, | |
1367 | * or an information "event" generated by the card | |
1368 | * The controller return to us a pseudo frame containing | |
1369 | * the information in question - Jean II */ | |
1370 | infofid = hermes_read_regn(hw, INFOFID); | |
1371 | ||
1372 | /* Read the info frame header - don't try too hard */ | |
1373 | err = hermes_bap_pread(hw, IRQ_BAP, &info, sizeof(info), | |
1374 | infofid, 0); | |
1375 | if (err) { | |
1376 | printk(KERN_ERR "%s: error %d reading info frame. " | |
1377 | "Frame dropped.\n", dev->name, err); | |
1378 | return; | |
1379 | } | |
6fe9deb1 | 1380 | |
1da177e4 LT |
1381 | len = HERMES_RECLEN_TO_BYTES(le16_to_cpu(info.len)); |
1382 | type = le16_to_cpu(info.type); | |
1383 | ||
1384 | switch (type) { | |
1385 | case HERMES_INQ_TALLIES: { | |
1386 | struct hermes_tallies_frame tallies; | |
1387 | struct iw_statistics *wstats = &priv->wstats; | |
6fe9deb1 | 1388 | |
1da177e4 LT |
1389 | if (len > sizeof(tallies)) { |
1390 | printk(KERN_WARNING "%s: Tallies frame too long (%d bytes)\n", | |
1391 | dev->name, len); | |
1392 | len = sizeof(tallies); | |
1393 | } | |
6fe9deb1 | 1394 | |
84d8a2fb CH |
1395 | err = hermes_bap_pread(hw, IRQ_BAP, &tallies, len, |
1396 | infofid, sizeof(info)); | |
1397 | if (err) | |
1398 | break; | |
6fe9deb1 | 1399 | |
1da177e4 LT |
1400 | /* Increment our various counters */ |
1401 | /* wstats->discard.nwid - no wrong BSSID stuff */ | |
1402 | wstats->discard.code += | |
1403 | le16_to_cpu(tallies.RxWEPUndecryptable); | |
6fe9deb1 | 1404 | if (len == sizeof(tallies)) |
1da177e4 LT |
1405 | wstats->discard.code += |
1406 | le16_to_cpu(tallies.RxDiscards_WEPICVError) + | |
1407 | le16_to_cpu(tallies.RxDiscards_WEPExcluded); | |
1408 | wstats->discard.misc += | |
1409 | le16_to_cpu(tallies.TxDiscardsWrongSA); | |
1410 | wstats->discard.fragment += | |
1411 | le16_to_cpu(tallies.RxMsgInBadMsgFragments); | |
1412 | wstats->discard.retries += | |
1413 | le16_to_cpu(tallies.TxRetryLimitExceeded); | |
1414 | /* wstats->miss.beacon - no match */ | |
1415 | } | |
1416 | break; | |
1417 | case HERMES_INQ_LINKSTATUS: { | |
1418 | struct hermes_linkstatus linkstatus; | |
1419 | u16 newstatus; | |
1420 | int connected; | |
1421 | ||
5217c571 | 1422 | if (priv->iw_mode == NL80211_IFTYPE_MONITOR) |
8f2abf44 CH |
1423 | break; |
1424 | ||
1da177e4 LT |
1425 | if (len != sizeof(linkstatus)) { |
1426 | printk(KERN_WARNING "%s: Unexpected size for linkstatus frame (%d bytes)\n", | |
1427 | dev->name, len); | |
1428 | break; | |
1429 | } | |
1430 | ||
84d8a2fb CH |
1431 | err = hermes_bap_pread(hw, IRQ_BAP, &linkstatus, len, |
1432 | infofid, sizeof(info)); | |
1433 | if (err) | |
1434 | break; | |
1da177e4 LT |
1435 | newstatus = le16_to_cpu(linkstatus.linkstatus); |
1436 | ||
95dd91fb CH |
1437 | /* Symbol firmware uses "out of range" to signal that |
1438 | * the hostscan frame can be requested. */ | |
1439 | if (newstatus == HERMES_LINKSTATUS_AP_OUT_OF_RANGE && | |
1440 | priv->firmware_type == FIRMWARE_TYPE_SYMBOL && | |
c63cdbe8 | 1441 | priv->has_hostscan && priv->scan_request) { |
95dd91fb CH |
1442 | hermes_inquire(hw, HERMES_INQ_HOSTSCAN_SYMBOL); |
1443 | break; | |
1444 | } | |
1445 | ||
1da177e4 LT |
1446 | connected = (newstatus == HERMES_LINKSTATUS_CONNECTED) |
1447 | || (newstatus == HERMES_LINKSTATUS_AP_CHANGE) | |
1448 | || (newstatus == HERMES_LINKSTATUS_AP_IN_RANGE); | |
1449 | ||
1450 | if (connected) | |
1451 | netif_carrier_on(dev); | |
7bb7c3a3 | 1452 | else if (!ignore_disconnect) |
1da177e4 LT |
1453 | netif_carrier_off(dev); |
1454 | ||
95dd91fb CH |
1455 | if (newstatus != priv->last_linkstatus) { |
1456 | priv->last_linkstatus = newstatus; | |
1da177e4 | 1457 | print_linkstatus(dev, newstatus); |
95dd91fb CH |
1458 | /* The info frame contains only one word which is the |
1459 | * status (see hermes.h). The status is pretty boring | |
1460 | * in itself, that's why we export the new BSSID... | |
1461 | * Jean II */ | |
1462 | schedule_work(&priv->wevent_work); | |
1463 | } | |
1464 | } | |
1465 | break; | |
1466 | case HERMES_INQ_SCAN: | |
c63cdbe8 | 1467 | if (!priv->scan_request && priv->bssid_fixed && |
95dd91fb CH |
1468 | priv->firmware_type == FIRMWARE_TYPE_INTERSIL) { |
1469 | schedule_work(&priv->join_work); | |
1470 | break; | |
1471 | } | |
1472 | /* fall through */ | |
1473 | case HERMES_INQ_HOSTSCAN: | |
1474 | case HERMES_INQ_HOSTSCAN_SYMBOL: { | |
1475 | /* Result of a scanning. Contains information about | |
1476 | * cells in the vicinity - Jean II */ | |
95dd91fb CH |
1477 | unsigned char *buf; |
1478 | ||
1479 | /* Sanity check */ | |
1480 | if (len > 4096) { | |
1481 | printk(KERN_WARNING "%s: Scan results too large (%d bytes)\n", | |
1482 | dev->name, len); | |
c63cdbe8 | 1483 | qabort_scan(priv); |
95dd91fb CH |
1484 | break; |
1485 | } | |
1486 | ||
95dd91fb CH |
1487 | /* Allocate buffer for results */ |
1488 | buf = kmalloc(len, GFP_ATOMIC); | |
c63cdbe8 | 1489 | if (buf == NULL) { |
95dd91fb | 1490 | /* No memory, so can't printk()... */ |
c63cdbe8 | 1491 | qabort_scan(priv); |
95dd91fb | 1492 | break; |
c63cdbe8 | 1493 | } |
95dd91fb CH |
1494 | |
1495 | /* Read scan data */ | |
1496 | err = hermes_bap_pread(hw, IRQ_BAP, (void *) buf, len, | |
1497 | infofid, sizeof(info)); | |
708218b0 PR |
1498 | if (err) { |
1499 | kfree(buf); | |
c63cdbe8 | 1500 | qabort_scan(priv); |
95dd91fb | 1501 | break; |
708218b0 | 1502 | } |
1da177e4 | 1503 | |
95dd91fb CH |
1504 | #ifdef ORINOCO_DEBUG |
1505 | { | |
1506 | int i; | |
1507 | printk(KERN_DEBUG "Scan result [%02X", buf[0]); | |
a94e8427 | 1508 | for (i = 1; i < (len * 2); i++) |
95dd91fb CH |
1509 | printk(":%02X", buf[i]); |
1510 | printk("]\n"); | |
1511 | } | |
1512 | #endif /* ORINOCO_DEBUG */ | |
1513 | ||
c63cdbe8 | 1514 | qbuf_scan(priv, buf, len, type); |
1da177e4 LT |
1515 | } |
1516 | break; | |
01632fa4 DK |
1517 | case HERMES_INQ_CHANNELINFO: |
1518 | { | |
1519 | struct agere_ext_scan_info *bss; | |
1520 | ||
c63cdbe8 | 1521 | if (!priv->scan_request) { |
01632fa4 DK |
1522 | printk(KERN_DEBUG "%s: Got chaninfo without scan, " |
1523 | "len=%d\n", dev->name, len); | |
1524 | break; | |
1525 | } | |
1526 | ||
1527 | /* An empty result indicates that the scan is complete */ | |
1528 | if (len == 0) { | |
c63cdbe8 | 1529 | qbuf_scan(priv, NULL, len, type); |
01632fa4 DK |
1530 | break; |
1531 | } | |
1532 | ||
1533 | /* Sanity check */ | |
c63cdbe8 | 1534 | else if (len < (offsetof(struct agere_ext_scan_info, |
01632fa4 DK |
1535 | data) + 2)) { |
1536 | /* Drop this result now so we don't have to | |
1537 | * keep checking later */ | |
1538 | printk(KERN_WARNING | |
1539 | "%s: Ext scan results too short (%d bytes)\n", | |
1540 | dev->name, len); | |
1541 | break; | |
1542 | } | |
1543 | ||
c63cdbe8 | 1544 | bss = kmalloc(len, GFP_ATOMIC); |
01632fa4 DK |
1545 | if (bss == NULL) |
1546 | break; | |
1547 | ||
1548 | /* Read scan data */ | |
1549 | err = hermes_bap_pread(hw, IRQ_BAP, (void *) bss, len, | |
1550 | infofid, sizeof(info)); | |
c63cdbe8 | 1551 | if (err) |
01632fa4 | 1552 | kfree(bss); |
c63cdbe8 DK |
1553 | else |
1554 | qbuf_scan(priv, bss, len, type); | |
01632fa4 | 1555 | |
01632fa4 DK |
1556 | break; |
1557 | } | |
95dd91fb CH |
1558 | case HERMES_INQ_SEC_STAT_AGERE: |
1559 | /* Security status (Agere specific) */ | |
1560 | /* Ignore this frame for now */ | |
1561 | if (priv->firmware_type == FIRMWARE_TYPE_AGERE) | |
1562 | break; | |
1563 | /* fall through */ | |
1da177e4 LT |
1564 | default: |
1565 | printk(KERN_DEBUG "%s: Unknown information frame received: " | |
1566 | "type 0x%04x, length %d\n", dev->name, type, len); | |
1567 | /* We don't actually do anything about it */ | |
1568 | break; | |
1569 | } | |
c63cdbe8 DK |
1570 | |
1571 | return; | |
1da177e4 LT |
1572 | } |
1573 | ||
1574 | static void __orinoco_ev_infdrop(struct net_device *dev, hermes_t *hw) | |
1575 | { | |
1576 | if (net_ratelimit()) | |
1577 | printk(KERN_DEBUG "%s: Information frame lost.\n", dev->name); | |
1578 | } | |
1579 | ||
1580 | /********************************************************************/ | |
1581 | /* Internal hardware control routines */ | |
1582 | /********************************************************************/ | |
1583 | ||
6415f7df | 1584 | static int __orinoco_up(struct orinoco_private *priv) |
1da177e4 | 1585 | { |
a2608362 | 1586 | struct net_device *dev = priv->ndev; |
1da177e4 LT |
1587 | struct hermes *hw = &priv->hw; |
1588 | int err; | |
1589 | ||
84d8a2fb CH |
1590 | netif_carrier_off(dev); /* just to make sure */ |
1591 | ||
721aa2f7 | 1592 | err = __orinoco_commit(priv); |
1da177e4 LT |
1593 | if (err) { |
1594 | printk(KERN_ERR "%s: Error %d configuring card\n", | |
1595 | dev->name, err); | |
1596 | return err; | |
1597 | } | |
1598 | ||
1599 | /* Fire things up again */ | |
1600 | hermes_set_irqmask(hw, ORINOCO_INTEN); | |
1601 | err = hermes_enable_port(hw, 0); | |
1602 | if (err) { | |
1603 | printk(KERN_ERR "%s: Error %d enabling MAC port\n", | |
1604 | dev->name, err); | |
1605 | return err; | |
1606 | } | |
1607 | ||
1608 | netif_start_queue(dev); | |
1609 | ||
1610 | return 0; | |
1611 | } | |
1612 | ||
6415f7df | 1613 | static int __orinoco_down(struct orinoco_private *priv) |
1da177e4 | 1614 | { |
a2608362 | 1615 | struct net_device *dev = priv->ndev; |
1da177e4 LT |
1616 | struct hermes *hw = &priv->hw; |
1617 | int err; | |
1618 | ||
1619 | netif_stop_queue(dev); | |
1620 | ||
a94e8427 DK |
1621 | if (!priv->hw_unavailable) { |
1622 | if (!priv->broken_disableport) { | |
1da177e4 LT |
1623 | err = hermes_disable_port(hw, 0); |
1624 | if (err) { | |
1625 | /* Some firmwares (e.g. Intersil 1.3.x) seem | |
1626 | * to have problems disabling the port, oh | |
1627 | * well, too bad. */ | |
1628 | printk(KERN_WARNING "%s: Error %d disabling MAC port\n", | |
1629 | dev->name, err); | |
1630 | priv->broken_disableport = 1; | |
1631 | } | |
1632 | } | |
1633 | hermes_set_irqmask(hw, 0); | |
1634 | hermes_write_regn(hw, EVACK, 0xffff); | |
1635 | } | |
6fe9deb1 | 1636 | |
1da177e4 LT |
1637 | /* firmware will have to reassociate */ |
1638 | netif_carrier_off(dev); | |
1639 | priv->last_linkstatus = 0xffff; | |
1640 | ||
1641 | return 0; | |
1642 | } | |
1643 | ||
6415f7df | 1644 | static int orinoco_reinit_firmware(struct orinoco_private *priv) |
37a6c611 | 1645 | { |
37a6c611 PR |
1646 | struct hermes *hw = &priv->hw; |
1647 | int err; | |
1648 | ||
1649 | err = hermes_init(hw); | |
0df6cbb7 AB |
1650 | if (priv->do_fw_download && !err) { |
1651 | err = orinoco_download(priv); | |
1652 | if (err) | |
1653 | priv->do_fw_download = 0; | |
1654 | } | |
37a6c611 | 1655 | if (!err) |
42a51b93 | 1656 | err = orinoco_hw_allocate_fid(priv); |
37a6c611 PR |
1657 | |
1658 | return err; | |
1659 | } | |
1660 | ||
721aa2f7 | 1661 | static int |
5865d015 DK |
1662 | __orinoco_set_multicast_list(struct net_device *dev) |
1663 | { | |
ea60a6aa | 1664 | struct orinoco_private *priv = ndev_priv(dev); |
5865d015 DK |
1665 | int err = 0; |
1666 | int promisc, mc_count; | |
1667 | ||
1668 | /* The Hermes doesn't seem to have an allmulti mode, so we go | |
1669 | * into promiscuous mode and let the upper levels deal. */ | |
1670 | if ((dev->flags & IFF_PROMISC) || (dev->flags & IFF_ALLMULTI) || | |
4cd24eaf | 1671 | (netdev_mc_count(dev) > MAX_MULTICAST(priv))) { |
5865d015 DK |
1672 | promisc = 1; |
1673 | mc_count = 0; | |
1674 | } else { | |
1675 | promisc = 0; | |
4cd24eaf | 1676 | mc_count = netdev_mc_count(dev); |
5865d015 DK |
1677 | } |
1678 | ||
655ffee2 | 1679 | err = __orinoco_hw_set_multicast_list(priv, dev, mc_count, promisc); |
721aa2f7 DK |
1680 | |
1681 | return err; | |
1da177e4 LT |
1682 | } |
1683 | ||
1da177e4 LT |
1684 | /* This must be called from user context, without locks held - use |
1685 | * schedule_work() */ | |
cb1576a8 | 1686 | void orinoco_reset(struct work_struct *work) |
1da177e4 | 1687 | { |
c4028958 DH |
1688 | struct orinoco_private *priv = |
1689 | container_of(work, struct orinoco_private, reset_work); | |
1690 | struct net_device *dev = priv->ndev; | |
1da177e4 | 1691 | struct hermes *hw = &priv->hw; |
8551cb98 | 1692 | int err; |
1da177e4 LT |
1693 | unsigned long flags; |
1694 | ||
1695 | if (orinoco_lock(priv, &flags) != 0) | |
1696 | /* When the hardware becomes available again, whatever | |
1697 | * detects that is responsible for re-initializing | |
1698 | * it. So no need for anything further */ | |
1699 | return; | |
1700 | ||
1701 | netif_stop_queue(dev); | |
1702 | ||
1703 | /* Shut off interrupts. Depending on what state the hardware | |
1704 | * is in, this might not work, but we'll try anyway */ | |
1705 | hermes_set_irqmask(hw, 0); | |
1706 | hermes_write_regn(hw, EVACK, 0xffff); | |
1707 | ||
1708 | priv->hw_unavailable++; | |
1709 | priv->last_linkstatus = 0xffff; /* firmware will have to reassociate */ | |
1710 | netif_carrier_off(dev); | |
1711 | ||
1712 | orinoco_unlock(priv, &flags); | |
1713 | ||
c63cdbe8 DK |
1714 | /* Scanning support: Notify scan cancellation */ |
1715 | if (priv->scan_request) { | |
1716 | cfg80211_scan_done(priv->scan_request, 1); | |
1717 | priv->scan_request = NULL; | |
1718 | } | |
95dd91fb | 1719 | |
8551cb98 | 1720 | if (priv->hard_reset) { |
1da177e4 | 1721 | err = (*priv->hard_reset)(priv); |
8551cb98 CH |
1722 | if (err) { |
1723 | printk(KERN_ERR "%s: orinoco_reset: Error %d " | |
1724 | "performing hard reset\n", dev->name, err); | |
1725 | goto disable; | |
1726 | } | |
1da177e4 LT |
1727 | } |
1728 | ||
a2608362 | 1729 | err = orinoco_reinit_firmware(priv); |
1da177e4 LT |
1730 | if (err) { |
1731 | printk(KERN_ERR "%s: orinoco_reset: Error %d re-initializing firmware\n", | |
1732 | dev->name, err); | |
8551cb98 | 1733 | goto disable; |
1da177e4 LT |
1734 | } |
1735 | ||
b2f30a0a DK |
1736 | /* This has to be called from user context */ |
1737 | spin_lock_irq(&priv->lock); | |
1da177e4 LT |
1738 | |
1739 | priv->hw_unavailable--; | |
1740 | ||
1741 | /* priv->open or priv->hw_unavailable might have changed while | |
1742 | * we dropped the lock */ | |
a94e8427 | 1743 | if (priv->open && (!priv->hw_unavailable)) { |
a2608362 | 1744 | err = __orinoco_up(priv); |
1da177e4 LT |
1745 | if (err) { |
1746 | printk(KERN_ERR "%s: orinoco_reset: Error %d reenabling card\n", | |
1747 | dev->name, err); | |
1748 | } else | |
1749 | dev->trans_start = jiffies; | |
1750 | } | |
1751 | ||
1752 | spin_unlock_irq(&priv->lock); | |
1753 | ||
1754 | return; | |
8551cb98 CH |
1755 | disable: |
1756 | hermes_set_irqmask(hw, 0); | |
1757 | netif_device_detach(dev); | |
1758 | printk(KERN_ERR "%s: Device has been disabled!\n", dev->name); | |
1da177e4 LT |
1759 | } |
1760 | ||
721aa2f7 DK |
1761 | static int __orinoco_commit(struct orinoco_private *priv) |
1762 | { | |
1763 | struct net_device *dev = priv->ndev; | |
1764 | int err = 0; | |
1765 | ||
1766 | err = orinoco_hw_program_rids(priv); | |
1767 | ||
1768 | /* FIXME: what about netif_tx_lock */ | |
1769 | (void) __orinoco_set_multicast_list(dev); | |
1770 | ||
1771 | return err; | |
1772 | } | |
1773 | ||
1774 | /* Ensures configuration changes are applied. May result in a reset. | |
1775 | * The caller should hold priv->lock | |
1776 | */ | |
1777 | int orinoco_commit(struct orinoco_private *priv) | |
1778 | { | |
1779 | struct net_device *dev = priv->ndev; | |
1780 | hermes_t *hw = &priv->hw; | |
1781 | int err; | |
1782 | ||
1783 | if (priv->broken_disableport) { | |
1784 | schedule_work(&priv->reset_work); | |
1785 | return 0; | |
1786 | } | |
1787 | ||
1788 | err = hermes_disable_port(hw, 0); | |
1789 | if (err) { | |
1790 | printk(KERN_WARNING "%s: Unable to disable port " | |
1791 | "while reconfiguring card\n", dev->name); | |
1792 | priv->broken_disableport = 1; | |
1793 | goto out; | |
1794 | } | |
1795 | ||
1796 | err = __orinoco_commit(priv); | |
1797 | if (err) { | |
1798 | printk(KERN_WARNING "%s: Unable to reconfigure card\n", | |
1799 | dev->name); | |
1800 | goto out; | |
1801 | } | |
1802 | ||
1803 | err = hermes_enable_port(hw, 0); | |
1804 | if (err) { | |
1805 | printk(KERN_WARNING "%s: Unable to enable port while reconfiguring card\n", | |
1806 | dev->name); | |
1807 | goto out; | |
1808 | } | |
1809 | ||
1810 | out: | |
1811 | if (err) { | |
1812 | printk(KERN_WARNING "%s: Resetting instead...\n", dev->name); | |
1813 | schedule_work(&priv->reset_work); | |
1814 | err = 0; | |
1815 | } | |
1816 | return err; | |
1817 | } | |
1818 | ||
1da177e4 LT |
1819 | /********************************************************************/ |
1820 | /* Interrupt handler */ | |
1821 | /********************************************************************/ | |
1822 | ||
1823 | static void __orinoco_ev_tick(struct net_device *dev, hermes_t *hw) | |
1824 | { | |
1825 | printk(KERN_DEBUG "%s: TICK\n", dev->name); | |
1826 | } | |
1827 | ||
1828 | static void __orinoco_ev_wterr(struct net_device *dev, hermes_t *hw) | |
1829 | { | |
1830 | /* This seems to happen a fair bit under load, but ignoring it | |
1831 | seems to work fine...*/ | |
1832 | printk(KERN_DEBUG "%s: MAC controller error (WTERR). Ignoring.\n", | |
1833 | dev->name); | |
1834 | } | |
1835 | ||
7d12e780 | 1836 | irqreturn_t orinoco_interrupt(int irq, void *dev_id) |
1da177e4 | 1837 | { |
a2608362 DK |
1838 | struct orinoco_private *priv = dev_id; |
1839 | struct net_device *dev = priv->ndev; | |
1da177e4 LT |
1840 | hermes_t *hw = &priv->hw; |
1841 | int count = MAX_IRQLOOPS_PER_IRQ; | |
1842 | u16 evstat, events; | |
2131266d DK |
1843 | /* These are used to detect a runaway interrupt situation. |
1844 | * | |
1845 | * If we get more than MAX_IRQLOOPS_PER_JIFFY iterations in a jiffy, | |
1846 | * we panic and shut down the hardware | |
1847 | */ | |
1848 | /* jiffies value the last time we were called */ | |
1849 | static int last_irq_jiffy; /* = 0 */ | |
1850 | static int loops_this_jiffy; /* = 0 */ | |
1da177e4 LT |
1851 | unsigned long flags; |
1852 | ||
1853 | if (orinoco_lock(priv, &flags) != 0) { | |
1854 | /* If hw is unavailable - we don't know if the irq was | |
1855 | * for us or not */ | |
1856 | return IRQ_HANDLED; | |
1857 | } | |
1858 | ||
1859 | evstat = hermes_read_regn(hw, EVSTAT); | |
1860 | events = evstat & hw->inten; | |
a94e8427 | 1861 | if (!events) { |
1da177e4 LT |
1862 | orinoco_unlock(priv, &flags); |
1863 | return IRQ_NONE; | |
1864 | } | |
6fe9deb1 | 1865 | |
1da177e4 LT |
1866 | if (jiffies != last_irq_jiffy) |
1867 | loops_this_jiffy = 0; | |
1868 | last_irq_jiffy = jiffies; | |
1869 | ||
1870 | while (events && count--) { | |
1871 | if (++loops_this_jiffy > MAX_IRQLOOPS_PER_JIFFY) { | |
1872 | printk(KERN_WARNING "%s: IRQ handler is looping too " | |
1873 | "much! Resetting.\n", dev->name); | |
1874 | /* Disable interrupts for now */ | |
1875 | hermes_set_irqmask(hw, 0); | |
1876 | schedule_work(&priv->reset_work); | |
1877 | break; | |
1878 | } | |
1879 | ||
1880 | /* Check the card hasn't been removed */ | |
a94e8427 | 1881 | if (!hermes_present(hw)) { |
1da177e4 LT |
1882 | DEBUG(0, "orinoco_interrupt(): card removed\n"); |
1883 | break; | |
1884 | } | |
1885 | ||
1886 | if (events & HERMES_EV_TICK) | |
1887 | __orinoco_ev_tick(dev, hw); | |
1888 | if (events & HERMES_EV_WTERR) | |
1889 | __orinoco_ev_wterr(dev, hw); | |
1890 | if (events & HERMES_EV_INFDROP) | |
1891 | __orinoco_ev_infdrop(dev, hw); | |
1892 | if (events & HERMES_EV_INFO) | |
1893 | __orinoco_ev_info(dev, hw); | |
1894 | if (events & HERMES_EV_RX) | |
1895 | __orinoco_ev_rx(dev, hw); | |
1896 | if (events & HERMES_EV_TXEXC) | |
1897 | __orinoco_ev_txexc(dev, hw); | |
1898 | if (events & HERMES_EV_TX) | |
1899 | __orinoco_ev_tx(dev, hw); | |
1900 | if (events & HERMES_EV_ALLOC) | |
1901 | __orinoco_ev_alloc(dev, hw); | |
6fe9deb1 | 1902 | |
84d8a2fb | 1903 | hermes_write_regn(hw, EVACK, evstat); |
1da177e4 LT |
1904 | |
1905 | evstat = hermes_read_regn(hw, EVSTAT); | |
1906 | events = evstat & hw->inten; | |
1907 | }; | |
1908 | ||
1909 | orinoco_unlock(priv, &flags); | |
1910 | return IRQ_HANDLED; | |
1911 | } | |
2131266d | 1912 | EXPORT_SYMBOL(orinoco_interrupt); |
1da177e4 | 1913 | |
39d1ffee DK |
1914 | /********************************************************************/ |
1915 | /* Power management */ | |
1916 | /********************************************************************/ | |
1917 | #if defined(CONFIG_PM_SLEEP) && !defined(CONFIG_HERMES_CACHE_FW_ON_INIT) | |
1918 | static int orinoco_pm_notifier(struct notifier_block *notifier, | |
1919 | unsigned long pm_event, | |
1920 | void *unused) | |
1921 | { | |
1922 | struct orinoco_private *priv = container_of(notifier, | |
1923 | struct orinoco_private, | |
1924 | pm_notifier); | |
1925 | ||
1926 | /* All we need to do is cache the firmware before suspend, and | |
1927 | * release it when we come out. | |
1928 | * | |
1929 | * Only need to do this if we're downloading firmware. */ | |
1930 | if (!priv->do_fw_download) | |
1931 | return NOTIFY_DONE; | |
1932 | ||
1933 | switch (pm_event) { | |
1934 | case PM_HIBERNATION_PREPARE: | |
1935 | case PM_SUSPEND_PREPARE: | |
1936 | orinoco_cache_fw(priv, 0); | |
1937 | break; | |
1938 | ||
1939 | case PM_POST_RESTORE: | |
1940 | /* Restore from hibernation failed. We need to clean | |
1941 | * up in exactly the same way, so fall through. */ | |
1942 | case PM_POST_HIBERNATION: | |
1943 | case PM_POST_SUSPEND: | |
1944 | orinoco_uncache_fw(priv); | |
1945 | break; | |
1946 | ||
1947 | case PM_RESTORE_PREPARE: | |
1948 | default: | |
1949 | break; | |
1950 | } | |
1951 | ||
1952 | return NOTIFY_DONE; | |
1953 | } | |
f11c179e DM |
1954 | |
1955 | static void orinoco_register_pm_notifier(struct orinoco_private *priv) | |
1956 | { | |
1957 | priv->pm_notifier.notifier_call = orinoco_pm_notifier; | |
1958 | register_pm_notifier(&priv->pm_notifier); | |
1959 | } | |
1960 | ||
1961 | static void orinoco_unregister_pm_notifier(struct orinoco_private *priv) | |
1962 | { | |
1963 | unregister_pm_notifier(&priv->pm_notifier); | |
1964 | } | |
39d1ffee | 1965 | #else /* !PM_SLEEP || HERMES_CACHE_FW_ON_INIT */ |
f11c179e DM |
1966 | #define orinoco_register_pm_notifier(priv) do { } while(0) |
1967 | #define orinoco_unregister_pm_notifier(priv) do { } while(0) | |
39d1ffee DK |
1968 | #endif |
1969 | ||
1da177e4 LT |
1970 | /********************************************************************/ |
1971 | /* Initialization */ | |
1972 | /********************************************************************/ | |
1973 | ||
8e638267 | 1974 | int orinoco_init(struct orinoco_private *priv) |
1da177e4 | 1975 | { |
8e638267 | 1976 | struct device *dev = priv->dev; |
ea60a6aa | 1977 | struct wiphy *wiphy = priv_to_wiphy(priv); |
1da177e4 LT |
1978 | hermes_t *hw = &priv->hw; |
1979 | int err = 0; | |
1da177e4 | 1980 | |
1da177e4 LT |
1981 | /* No need to lock, the hw_unavailable flag is already set in |
1982 | * alloc_orinocodev() */ | |
2c706002 | 1983 | priv->nicbuf_size = IEEE80211_MAX_FRAME_LEN + ETH_HLEN; |
1da177e4 LT |
1984 | |
1985 | /* Initialize the firmware */ | |
37a6c611 | 1986 | err = hermes_init(hw); |
1da177e4 | 1987 | if (err != 0) { |
8e638267 DK |
1988 | dev_err(dev, "Failed to initialize firmware (err = %d)\n", |
1989 | err); | |
1da177e4 LT |
1990 | goto out; |
1991 | } | |
1992 | ||
3414fc3f DK |
1993 | err = determine_fw_capabilities(priv, wiphy->fw_version, |
1994 | sizeof(wiphy->fw_version), | |
1995 | &wiphy->hw_version); | |
1da177e4 | 1996 | if (err != 0) { |
8e638267 | 1997 | dev_err(dev, "Incompatible firmware, aborting\n"); |
1da177e4 LT |
1998 | goto out; |
1999 | } | |
2000 | ||
3994d502 | 2001 | if (priv->do_fw_download) { |
39d1ffee | 2002 | #ifdef CONFIG_HERMES_CACHE_FW_ON_INIT |
74734312 | 2003 | orinoco_cache_fw(priv, 0); |
39d1ffee | 2004 | #endif |
74734312 | 2005 | |
3994d502 DK |
2006 | err = orinoco_download(priv); |
2007 | if (err) | |
2008 | priv->do_fw_download = 0; | |
2009 | ||
2010 | /* Check firmware version again */ | |
3414fc3f DK |
2011 | err = determine_fw_capabilities(priv, wiphy->fw_version, |
2012 | sizeof(wiphy->fw_version), | |
2013 | &wiphy->hw_version); | |
3994d502 | 2014 | if (err != 0) { |
8e638267 | 2015 | dev_err(dev, "Incompatible firmware, aborting\n"); |
3994d502 DK |
2016 | goto out; |
2017 | } | |
2018 | } | |
2019 | ||
1da177e4 | 2020 | if (priv->has_port3) |
8e638267 | 2021 | dev_info(dev, "Ad-hoc demo mode supported\n"); |
1da177e4 | 2022 | if (priv->has_ibss) |
8e638267 DK |
2023 | dev_info(dev, "IEEE standard IBSS ad-hoc mode supported\n"); |
2024 | if (priv->has_wep) | |
2025 | dev_info(dev, "WEP supported, %s-bit key\n", | |
2026 | priv->has_big_wep ? "104" : "40"); | |
23edcc41 | 2027 | if (priv->has_wpa) { |
8e638267 | 2028 | dev_info(dev, "WPA-PSK supported\n"); |
23edcc41 | 2029 | if (orinoco_mic_init(priv)) { |
8e638267 DK |
2030 | dev_err(dev, "Failed to setup MIC crypto algorithm. " |
2031 | "Disabling WPA support\n"); | |
23edcc41 DK |
2032 | priv->has_wpa = 0; |
2033 | } | |
2034 | } | |
1da177e4 | 2035 | |
ea60a6aa | 2036 | err = orinoco_hw_read_card_settings(priv, wiphy->perm_addr); |
e9e3d010 | 2037 | if (err) |
1da177e4 | 2038 | goto out; |
1da177e4 | 2039 | |
42a51b93 | 2040 | err = orinoco_hw_allocate_fid(priv); |
37a6c611 | 2041 | if (err) { |
8e638267 | 2042 | dev_err(dev, "Failed to allocate NIC buffer!\n"); |
37a6c611 PR |
2043 | goto out; |
2044 | } | |
2045 | ||
1da177e4 | 2046 | /* Set up the default configuration */ |
5217c571 | 2047 | priv->iw_mode = NL80211_IFTYPE_STATION; |
1da177e4 | 2048 | /* By default use IEEE/IBSS ad-hoc mode if we have it */ |
a94e8427 | 2049 | priv->prefer_port3 = priv->has_port3 && (!priv->has_ibss); |
1da177e4 | 2050 | set_port_type(priv); |
d51d8b1f | 2051 | priv->channel = 0; /* use firmware default */ |
1da177e4 LT |
2052 | |
2053 | priv->promiscuous = 0; | |
5c9f41e2 | 2054 | priv->encode_alg = ORINOCO_ALG_NONE; |
1da177e4 | 2055 | priv->tx_key = 0; |
d03032af DK |
2056 | priv->wpa_enabled = 0; |
2057 | priv->tkip_cm_active = 0; | |
2058 | priv->key_mgmt = 0; | |
2059 | priv->wpa_ie_len = 0; | |
2060 | priv->wpa_ie = NULL; | |
1da177e4 | 2061 | |
ea60a6aa DK |
2062 | if (orinoco_wiphy_register(wiphy)) { |
2063 | err = -ENODEV; | |
2064 | goto out; | |
2065 | } | |
2066 | ||
1da177e4 LT |
2067 | /* Make the hardware available, as long as it hasn't been |
2068 | * removed elsewhere (e.g. by PCMCIA hot unplug) */ | |
2069 | spin_lock_irq(&priv->lock); | |
2070 | priv->hw_unavailable--; | |
2071 | spin_unlock_irq(&priv->lock); | |
2072 | ||
8e638267 | 2073 | dev_dbg(dev, "Ready\n"); |
1da177e4 LT |
2074 | |
2075 | out: | |
1da177e4 LT |
2076 | return err; |
2077 | } | |
8e638267 | 2078 | EXPORT_SYMBOL(orinoco_init); |
1da177e4 | 2079 | |
89ea4090 | 2080 | static const struct net_device_ops orinoco_netdev_ops = { |
89ea4090 AB |
2081 | .ndo_open = orinoco_open, |
2082 | .ndo_stop = orinoco_stop, | |
2083 | .ndo_start_xmit = orinoco_xmit, | |
2084 | .ndo_set_multicast_list = orinoco_set_multicast_list, | |
2085 | .ndo_change_mtu = orinoco_change_mtu, | |
240c102d BH |
2086 | .ndo_set_mac_address = eth_mac_addr, |
2087 | .ndo_validate_addr = eth_validate_addr, | |
89ea4090 AB |
2088 | .ndo_tx_timeout = orinoco_tx_timeout, |
2089 | .ndo_get_stats = orinoco_get_stats, | |
2090 | }; | |
2091 | ||
ea60a6aa DK |
2092 | /* Allocate private data. |
2093 | * | |
2094 | * This driver has a number of structures associated with it | |
2095 | * netdev - Net device structure for each network interface | |
2096 | * wiphy - structure associated with wireless phy | |
2097 | * wireless_dev (wdev) - structure for each wireless interface | |
2098 | * hw - structure for hermes chip info | |
2099 | * card - card specific structure for use by the card driver | |
2100 | * (airport, orinoco_cs) | |
2101 | * priv - orinoco private data | |
2102 | * device - generic linux device structure | |
2103 | * | |
2104 | * +---------+ +---------+ | |
2105 | * | wiphy | | netdev | | |
2106 | * | +-------+ | +-------+ | |
2107 | * | | priv | | | wdev | | |
2108 | * | | +-----+ +-+-------+ | |
2109 | * | | | hw | | |
2110 | * | +-+-----+ | |
2111 | * | | card | | |
2112 | * +-+-------+ | |
2113 | * | |
2114 | * priv has a link to netdev and device | |
2115 | * wdev has a link to wiphy | |
2116 | */ | |
a2608362 | 2117 | struct orinoco_private |
3994d502 DK |
2118 | *alloc_orinocodev(int sizeof_card, |
2119 | struct device *device, | |
2120 | int (*hard_reset)(struct orinoco_private *), | |
2121 | int (*stop_fw)(struct orinoco_private *, int)) | |
1da177e4 | 2122 | { |
1da177e4 | 2123 | struct orinoco_private *priv; |
ea60a6aa DK |
2124 | struct wiphy *wiphy; |
2125 | ||
2126 | /* allocate wiphy | |
2127 | * NOTE: We only support a single virtual interface | |
2128 | * but this may change when monitor mode is added | |
2129 | */ | |
2130 | wiphy = wiphy_new(&orinoco_cfg_ops, | |
2131 | sizeof(struct orinoco_private) + sizeof_card); | |
2132 | if (!wiphy) | |
2133 | return NULL; | |
1da177e4 | 2134 | |
ea60a6aa | 2135 | priv = wiphy_priv(wiphy); |
5381956b | 2136 | priv->dev = device; |
ea60a6aa | 2137 | |
1da177e4 | 2138 | if (sizeof_card) |
84d8a2fb | 2139 | priv->card = (void *)((unsigned long)priv |
1da177e4 LT |
2140 | + sizeof(struct orinoco_private)); |
2141 | else | |
2142 | priv->card = NULL; | |
2143 | ||
ea60a6aa DK |
2144 | orinoco_wiphy_init(wiphy); |
2145 | ||
343c686c PR |
2146 | #ifdef WIRELESS_SPY |
2147 | priv->wireless_data.spy_data = &priv->spy_data; | |
343c686c | 2148 | #endif |
23edcc41 | 2149 | |
1da177e4 | 2150 | /* Set up default callbacks */ |
1da177e4 | 2151 | priv->hard_reset = hard_reset; |
3994d502 | 2152 | priv->stop_fw = stop_fw; |
1da177e4 LT |
2153 | |
2154 | spin_lock_init(&priv->lock); | |
2155 | priv->open = 0; | |
2156 | priv->hw_unavailable = 1; /* orinoco_init() must clear this | |
2157 | * before anything else touches the | |
2158 | * hardware */ | |
c4028958 DH |
2159 | INIT_WORK(&priv->reset_work, orinoco_reset); |
2160 | INIT_WORK(&priv->join_work, orinoco_join_ap); | |
2161 | INIT_WORK(&priv->wevent_work, orinoco_send_wevents); | |
1da177e4 | 2162 | |
31afcef3 DK |
2163 | INIT_LIST_HEAD(&priv->rx_list); |
2164 | tasklet_init(&priv->rx_tasklet, orinoco_rx_isr_tasklet, | |
5381956b | 2165 | (unsigned long) priv); |
31afcef3 | 2166 | |
c63cdbe8 DK |
2167 | spin_lock_init(&priv->scan_lock); |
2168 | INIT_LIST_HEAD(&priv->scan_list); | |
2169 | INIT_WORK(&priv->process_scan, orinoco_process_scan_results); | |
2170 | ||
1da177e4 LT |
2171 | priv->last_linkstatus = 0xffff; |
2172 | ||
2bfc5cb5 | 2173 | #if defined(CONFIG_HERMES_CACHE_FW_ON_INIT) || defined(CONFIG_PM_SLEEP) |
2cea7b26 | 2174 | priv->cached_pri_fw = NULL; |
4fb30784 | 2175 | priv->cached_fw = NULL; |
2bfc5cb5 | 2176 | #endif |
4fb30784 | 2177 | |
39d1ffee | 2178 | /* Register PM notifiers */ |
f11c179e | 2179 | orinoco_register_pm_notifier(priv); |
39d1ffee | 2180 | |
a2608362 | 2181 | return priv; |
1da177e4 | 2182 | } |
2131266d | 2183 | EXPORT_SYMBOL(alloc_orinocodev); |
1da177e4 | 2184 | |
5381956b DK |
2185 | /* We can only support a single interface. We provide a separate |
2186 | * function to set it up to distinguish between hardware | |
2187 | * initialisation and interface setup. | |
2188 | * | |
2189 | * The base_addr and irq parameters are passed on to netdev for use | |
2190 | * with SIOCGIFMAP. | |
2191 | */ | |
2192 | int orinoco_if_add(struct orinoco_private *priv, | |
2193 | unsigned long base_addr, | |
2194 | unsigned int irq) | |
2195 | { | |
2196 | struct wiphy *wiphy = priv_to_wiphy(priv); | |
2197 | struct wireless_dev *wdev; | |
2198 | struct net_device *dev; | |
2199 | int ret; | |
2200 | ||
2201 | dev = alloc_etherdev(sizeof(struct wireless_dev)); | |
2202 | ||
2203 | if (!dev) | |
2204 | return -ENOMEM; | |
2205 | ||
2206 | /* Initialise wireless_dev */ | |
2207 | wdev = netdev_priv(dev); | |
2208 | wdev->wiphy = wiphy; | |
2209 | wdev->iftype = NL80211_IFTYPE_STATION; | |
2210 | ||
2211 | /* Setup / override net_device fields */ | |
2212 | dev->ieee80211_ptr = wdev; | |
2213 | dev->netdev_ops = &orinoco_netdev_ops; | |
2214 | dev->watchdog_timeo = HZ; /* 1 second timeout */ | |
5381956b DK |
2215 | dev->wireless_handlers = &orinoco_handler_def; |
2216 | #ifdef WIRELESS_SPY | |
2217 | dev->wireless_data = &priv->wireless_data; | |
2218 | #endif | |
2219 | /* we use the default eth_mac_addr for setting the MAC addr */ | |
2220 | ||
2221 | /* Reserve space in skb for the SNAP header */ | |
2222 | dev->hard_header_len += ENCAPS_OVERHEAD; | |
2223 | ||
2224 | netif_carrier_off(dev); | |
2225 | ||
2226 | memcpy(dev->dev_addr, wiphy->perm_addr, ETH_ALEN); | |
cf32ed92 | 2227 | memcpy(dev->perm_addr, wiphy->perm_addr, ETH_ALEN); |
5381956b DK |
2228 | |
2229 | dev->base_addr = base_addr; | |
2230 | dev->irq = irq; | |
2231 | ||
2232 | SET_NETDEV_DEV(dev, priv->dev); | |
2233 | ret = register_netdev(dev); | |
2234 | if (ret) | |
2235 | goto fail; | |
2236 | ||
2237 | priv->ndev = dev; | |
2238 | ||
2239 | /* Report what we've done */ | |
2240 | dev_dbg(priv->dev, "Registerred interface %s.\n", dev->name); | |
2241 | ||
2242 | return 0; | |
2243 | ||
2244 | fail: | |
2245 | free_netdev(dev); | |
2246 | return ret; | |
2247 | } | |
2248 | EXPORT_SYMBOL(orinoco_if_add); | |
2249 | ||
2250 | void orinoco_if_del(struct orinoco_private *priv) | |
1da177e4 | 2251 | { |
a2608362 | 2252 | struct net_device *dev = priv->ndev; |
5381956b DK |
2253 | |
2254 | unregister_netdev(dev); | |
2255 | free_netdev(dev); | |
2256 | } | |
2257 | EXPORT_SYMBOL(orinoco_if_del); | |
2258 | ||
2259 | void free_orinocodev(struct orinoco_private *priv) | |
2260 | { | |
ea60a6aa | 2261 | struct wiphy *wiphy = priv_to_wiphy(priv); |
20953ad6 | 2262 | struct orinoco_rx_data *rx_data, *temp; |
c63cdbe8 | 2263 | struct orinoco_scan_data *sd, *sdtemp; |
95dd91fb | 2264 | |
ea60a6aa DK |
2265 | wiphy_unregister(wiphy); |
2266 | ||
20953ad6 DK |
2267 | /* If the tasklet is scheduled when we call tasklet_kill it |
2268 | * will run one final time. However the tasklet will only | |
2269 | * drain priv->rx_list if the hw is still available. */ | |
31afcef3 | 2270 | tasklet_kill(&priv->rx_tasklet); |
74734312 | 2271 | |
20953ad6 DK |
2272 | /* Explicitly drain priv->rx_list */ |
2273 | list_for_each_entry_safe(rx_data, temp, &priv->rx_list, list) { | |
2274 | list_del(&rx_data->list); | |
2275 | ||
2276 | dev_kfree_skb(rx_data->skb); | |
2277 | kfree(rx_data->desc); | |
2278 | kfree(rx_data); | |
2279 | } | |
2280 | ||
c63cdbe8 DK |
2281 | cancel_work_sync(&priv->process_scan); |
2282 | /* Explicitly drain priv->scan_list */ | |
2283 | list_for_each_entry_safe(sd, sdtemp, &priv->scan_list, list) { | |
2284 | list_del(&sd->list); | |
2285 | ||
2286 | if ((sd->len > 0) && sd->buf) | |
2287 | kfree(sd->buf); | |
2288 | kfree(sd); | |
2289 | } | |
2290 | ||
f11c179e | 2291 | orinoco_unregister_pm_notifier(priv); |
74734312 DK |
2292 | orinoco_uncache_fw(priv); |
2293 | ||
d03032af DK |
2294 | priv->wpa_ie_len = 0; |
2295 | kfree(priv->wpa_ie); | |
23edcc41 | 2296 | orinoco_mic_free(priv); |
ea60a6aa | 2297 | wiphy_free(wiphy); |
1da177e4 | 2298 | } |
2131266d | 2299 | EXPORT_SYMBOL(free_orinocodev); |
1da177e4 | 2300 | |
6415f7df DK |
2301 | int orinoco_up(struct orinoco_private *priv) |
2302 | { | |
2303 | struct net_device *dev = priv->ndev; | |
2304 | unsigned long flags; | |
2305 | int err; | |
2306 | ||
2307 | spin_lock_irqsave(&priv->lock, flags); | |
2308 | ||
2309 | err = orinoco_reinit_firmware(priv); | |
2310 | if (err) { | |
2311 | printk(KERN_ERR "%s: Error %d re-initializing firmware\n", | |
2312 | dev->name, err); | |
2313 | goto exit; | |
2314 | } | |
2315 | ||
2316 | netif_device_attach(dev); | |
2317 | priv->hw_unavailable--; | |
2318 | ||
2319 | if (priv->open && !priv->hw_unavailable) { | |
2320 | err = __orinoco_up(priv); | |
2321 | if (err) | |
2322 | printk(KERN_ERR "%s: Error %d restarting card\n", | |
2323 | dev->name, err); | |
2324 | } | |
2325 | ||
2326 | exit: | |
2327 | spin_unlock_irqrestore(&priv->lock, flags); | |
2328 | ||
2329 | return 0; | |
2330 | } | |
2331 | EXPORT_SYMBOL(orinoco_up); | |
2332 | ||
2333 | void orinoco_down(struct orinoco_private *priv) | |
2334 | { | |
2335 | struct net_device *dev = priv->ndev; | |
2336 | unsigned long flags; | |
2337 | int err; | |
2338 | ||
2339 | spin_lock_irqsave(&priv->lock, flags); | |
2340 | err = __orinoco_down(priv); | |
2341 | if (err) | |
2342 | printk(KERN_WARNING "%s: Error %d downing interface\n", | |
2343 | dev->name, err); | |
2344 | ||
2345 | netif_device_detach(dev); | |
2346 | priv->hw_unavailable++; | |
2347 | spin_unlock_irqrestore(&priv->lock, flags); | |
2348 | } | |
2349 | EXPORT_SYMBOL(orinoco_down); | |
2350 | ||
1da177e4 LT |
2351 | /********************************************************************/ |
2352 | /* Module initialization */ | |
2353 | /********************************************************************/ | |
2354 | ||
1da177e4 LT |
2355 | /* Can't be declared "const" or the whole __initdata section will |
2356 | * become const */ | |
2357 | static char version[] __initdata = DRIVER_NAME " " DRIVER_VERSION | |
2358 | " (David Gibson <hermes@gibson.dropbear.id.au>, " | |
2359 | "Pavel Roskin <proski@gnu.org>, et al)"; | |
2360 | ||
2361 | static int __init init_orinoco(void) | |
2362 | { | |
2363 | printk(KERN_DEBUG "%s\n", version); | |
2364 | return 0; | |
2365 | } | |
2366 | ||
2367 | static void __exit exit_orinoco(void) | |
2368 | { | |
2369 | } | |
2370 | ||
2371 | module_init(init_orinoco); | |
2372 | module_exit(exit_orinoco); |