[GitHub/mt8127/android_kernel_alcatel_ttab.git] / drivers / net / wireless / p54 / main.c

/*
 * mac80211 glue code for mac80211 Prism54 drivers
 *
 * Copyright (c) 2006, Michael Wu <flamingice@sourmilk.net>
 * Copyright (c) 2007-2009, Christian Lamparter <chunkeey@web.de>
 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
 *
 * Based on:
 * - the islsm (softmac prism54) driver, which is:
 *   Copyright 2004-2006 Jean-Baptiste Note <jbnote@gmail.com>, et al.
 * - stlc45xx driver
 *   Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies).
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/init.h>
#include <linux/slab.h>
#include <linux/firmware.h>
#include <linux/etherdevice.h>

#include <net/mac80211.h>

#include "p54.h"
#include "lmac.h"

static int modparam_nohwcrypt;
module_param_named(nohwcrypt, modparam_nohwcrypt, bool, S_IRUGO);
MODULE_PARM_DESC(nohwcrypt, "Disable hardware encryption.");
MODULE_AUTHOR("Michael Wu <flamingice@sourmilk.net>");
MODULE_DESCRIPTION("Softmac Prism54 common code");
MODULE_LICENSE("GPL");
MODULE_ALIAS("prism54common");

static int p54_sta_add_remove(struct ieee80211_hw *hw,
			      struct ieee80211_vif *vif,
			      struct ieee80211_sta *sta)
{
	struct p54_common *priv = hw->priv;

	/*
	 * Notify the firmware that we don't want or we don't
	 * need to buffer frames for this station anymore.
	 */

	p54_sta_unlock(priv, sta->addr);

	return 0;
}

static void p54_sta_notify(struct ieee80211_hw *dev, struct ieee80211_vif *vif,
			      enum sta_notify_cmd notify_cmd,
			      struct ieee80211_sta *sta)
{
	struct p54_common *priv = dev->priv;

	switch (notify_cmd) {
	case STA_NOTIFY_AWAKE:
		/* update the firmware's filter table */
		p54_sta_unlock(priv, sta->addr);
		break;
	default:
		break;
	}
}

static int p54_set_tim(struct ieee80211_hw *dev, struct ieee80211_sta *sta,
			bool set)
{
	struct p54_common *priv = dev->priv;

	return p54_update_beacon_tim(priv, sta->aid, set);
}

u8 *p54_find_ie(struct sk_buff *skb, u8 ie)
{
	struct ieee80211_mgmt *mgmt = (void *)skb->data;
	u8 *pos, *end;

	if (skb->len <= sizeof(mgmt))
		return NULL;

	pos = (u8 *)mgmt->u.beacon.variable;
	end = skb->data + skb->len;
	while (pos < end) {
		if (pos + 2 + pos[1] > end)
			return NULL;

		if (pos[0] == ie)
			return pos;

		pos += 2 + pos[1];
	}
	return NULL;
}

static int p54_beacon_format_ie_tim(struct sk_buff *skb)
{
	/*
	 * the good excuse for this mess is ... the firmware.
	 * The dummy TIM MUST be at the end of the beacon frame,
	 * because it'll be overwritten!
	 */
	u8 *tim;
	u8 dtim_len;
	u8 dtim_period;
	u8 *next;

	tim = p54_find_ie(skb, WLAN_EID_TIM);
	if (!tim)
		return 0;

	dtim_len = tim[1];
	dtim_period = tim[3];
	next = tim + 2 + dtim_len;

	if (dtim_len < 3)
		return -EINVAL;

	memmove(tim, next, skb_tail_pointer(skb) - next);
	tim = skb_tail_pointer(skb) - (dtim_len + 2);

	/* add the dummy at the end */
	tim[0] = WLAN_EID_TIM;
	tim[1] = 3;
	tim[2] = 0;
	tim[3] = dtim_period;
	tim[4] = 0;

	if (dtim_len > 3)
		skb_trim(skb, skb->len - (dtim_len - 3));

	return 0;
}

static int p54_beacon_update(struct p54_common *priv,
			struct ieee80211_vif *vif)
{
	struct sk_buff *beacon;
	int ret;

	beacon = ieee80211_beacon_get(priv->hw, vif);
	if (!beacon)
		return -ENOMEM;
	ret = p54_beacon_format_ie_tim(beacon);
	if (ret)
		return ret;

	/*
	 * During operation, the firmware takes care of beaconing.
	 * The driver only needs to upload a new beacon template, once
	 * the template was changed by the stack or userspace.
	 *
	 * LMAC API 3.2.2 also specifies that the driver does not need
	 * to cancel the old beacon template by hand, instead the firmware
	 * will release the previous one through the feedback mechanism.
	 */
	WARN_ON(p54_tx_80211(priv->hw, beacon));
	priv->tsf_high32 = 0;
	priv->tsf_low32 = 0;

	return 0;
}

static int p54_start(struct ieee80211_hw *dev)
{
	struct p54_common *priv = dev->priv;
	int err;

	mutex_lock(&priv->conf_mutex);
	err = priv->open(dev);
	if (err)
		goto out;
	P54_SET_QUEUE(priv->qos_params[0], 0x0002, 0x0003, 0x0007, 47);
	P54_SET_QUEUE(priv->qos_params[1], 0x0002, 0x0007, 0x000f, 94);
	P54_SET_QUEUE(priv->qos_params[2], 0x0003, 0x000f, 0x03ff, 0);
	P54_SET_QUEUE(priv->qos_params[3], 0x0007, 0x000f, 0x03ff, 0);
	err = p54_set_edcf(priv);
	if (err)
		goto out;

	memset(priv->bssid, ~0, ETH_ALEN);
	priv->mode = NL80211_IFTYPE_MONITOR;
	err = p54_setup_mac(priv);
	if (err) {
		priv->mode = NL80211_IFTYPE_UNSPECIFIED;
		goto out;
	}

	ieee80211_queue_delayed_work(dev, &priv->work, 0);

	priv->softled_state = 0;
	err = p54_set_leds(priv);

out:
	mutex_unlock(&priv->conf_mutex);
	return err;
}

static void p54_stop(struct ieee80211_hw *dev)
{
	struct p54_common *priv = dev->priv;
	int i;

	mutex_lock(&priv->conf_mutex);
	priv->mode = NL80211_IFTYPE_UNSPECIFIED;
	priv->softled_state = 0;
	p54_set_leds(priv);

	cancel_delayed_work_sync(&priv->work);

	priv->stop(dev);
	skb_queue_purge(&priv->tx_pending);
	skb_queue_purge(&priv->tx_queue);
	for (i = 0; i < P54_QUEUE_NUM; i++) {
		priv->tx_stats[i].count = 0;
		priv->tx_stats[i].len = 0;
	}

	priv->beacon_req_id = cpu_to_le32(0);
	priv->tsf_high32 = priv->tsf_low32 = 0;
	mutex_unlock(&priv->conf_mutex);
}

static int p54_add_interface(struct ieee80211_hw *dev,
			     struct ieee80211_vif *vif)
{
	struct p54_common *priv = dev->priv;

	mutex_lock(&priv->conf_mutex);
	if (priv->mode != NL80211_IFTYPE_MONITOR) {
		mutex_unlock(&priv->conf_mutex);
		return -EOPNOTSUPP;
	}

	priv->vif = vif;

	switch (vif->type) {
	case NL80211_IFTYPE_STATION:
	case NL80211_IFTYPE_ADHOC:
	case NL80211_IFTYPE_AP:
	case NL80211_IFTYPE_MESH_POINT:
		priv->mode = vif->type;
		break;
	default:
		mutex_unlock(&priv->conf_mutex);
		return -EOPNOTSUPP;
	}

	memcpy(priv->mac_addr, vif->addr, ETH_ALEN);
	p54_setup_mac(priv);
	mutex_unlock(&priv->conf_mutex);
	return 0;
}

static void p54_remove_interface(struct ieee80211_hw *dev,
				 struct ieee80211_vif *vif)
{
	struct p54_common *priv = dev->priv;

	mutex_lock(&priv->conf_mutex);
	priv->vif = NULL;

	/*
	 * LMAC API 3.2.2 states that any active beacon template must be
	 * canceled by the driver before attempting a mode transition.
	 */
	if (le32_to_cpu(priv->beacon_req_id) != 0) {
		p54_tx_cancel(priv, priv->beacon_req_id);
		wait_for_completion_interruptible_timeout(&priv->beacon_comp, HZ);
	}
	priv->mode = NL80211_IFTYPE_MONITOR;
	memset(priv->mac_addr, 0, ETH_ALEN);
	memset(priv->bssid, 0, ETH_ALEN);
	p54_setup_mac(priv);
	mutex_unlock(&priv->conf_mutex);
}

static int p54_config(struct ieee80211_hw *dev, u32 changed)
{
	int ret = 0;
	struct p54_common *priv = dev->priv;
	struct ieee80211_conf *conf = &dev->conf;

	mutex_lock(&priv->conf_mutex);
	if (changed & IEEE80211_CONF_CHANGE_POWER)
		priv->output_power = conf->power_level << 2;
	if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
		ret = p54_scan(priv, P54_SCAN_EXIT, 0);
		if (ret)
			goto out;
	}
	if (changed & IEEE80211_CONF_CHANGE_PS) {
		ret = p54_set_ps(priv);
		if (ret)
			goto out;
	}
	if (changed & IEEE80211_CONF_CHANGE_IDLE) {
		ret = p54_setup_mac(priv);
		if (ret)
			goto out;
	}

out:
	mutex_unlock(&priv->conf_mutex);
	return ret;
}

static void p54_configure_filter(struct ieee80211_hw *dev,
				 unsigned int changed_flags,
				 unsigned int *total_flags,
				 u64 multicast)
{
	struct p54_common *priv = dev->priv;

	*total_flags &= FIF_PROMISC_IN_BSS |
			FIF_OTHER_BSS;

	priv->filter_flags = *total_flags;

	if (changed_flags & (FIF_PROMISC_IN_BSS | FIF_OTHER_BSS))
		p54_setup_mac(priv);
}

static int p54_conf_tx(struct ieee80211_hw *dev, u16 queue,
		       const struct ieee80211_tx_queue_params *params)
{
	struct p54_common *priv = dev->priv;
	int ret;

	mutex_lock(&priv->conf_mutex);
	if (queue < dev->queues) {
		P54_SET_QUEUE(priv->qos_params[queue], params->aifs,
			params->cw_min, params->cw_max, params->txop);
		ret = p54_set_edcf(priv);
	} else
		ret = -EINVAL;
	mutex_unlock(&priv->conf_mutex);
	return ret;
}

static void p54_work(struct work_struct *work)
{
	struct p54_common *priv = container_of(work, struct p54_common,
					       work.work);

	if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED))
		return ;

	/*
	 * TODO: walk through tx_queue and do the following tasks
	 * 	1. initiate bursts.
	 *      2. cancel stuck frames / reset the device if necessary.
	 */

	p54_fetch_statistics(priv);
}

static int p54_get_stats(struct ieee80211_hw *dev,
			 struct ieee80211_low_level_stats *stats)
{
	struct p54_common *priv = dev->priv;

	memcpy(stats, &priv->stats, sizeof(*stats));
	return 0;
}

static void p54_bss_info_changed(struct ieee80211_hw *dev,
				 struct ieee80211_vif *vif,
				 struct ieee80211_bss_conf *info,
				 u32 changed)
{
	struct p54_common *priv = dev->priv;

	mutex_lock(&priv->conf_mutex);
	if (changed & BSS_CHANGED_BSSID) {
		memcpy(priv->bssid, info->bssid, ETH_ALEN);
		p54_setup_mac(priv);
	}

	if (changed & BSS_CHANGED_BEACON) {
		p54_scan(priv, P54_SCAN_EXIT, 0);
		p54_setup_mac(priv);
		p54_beacon_update(priv, vif);
		p54_set_edcf(priv);
	}

	if (changed & (BSS_CHANGED_ERP_SLOT | BSS_CHANGED_BEACON)) {
		priv->use_short_slot = info->use_short_slot;
		p54_set_edcf(priv);
	}
	if (changed & BSS_CHANGED_BASIC_RATES) {
		if (dev->conf.channel->band == IEEE80211_BAND_5GHZ)
			priv->basic_rate_mask = (info->basic_rates << 4);
		else
			priv->basic_rate_mask = info->basic_rates;
		p54_setup_mac(priv);
		if (priv->fw_var >= 0x500)
			p54_scan(priv, P54_SCAN_EXIT, 0);
	}
	if (changed & BSS_CHANGED_ASSOC) {
		if (info->assoc) {
			priv->aid = info->aid;
			priv->wakeup_timer = info->beacon_int *
					     info->dtim_period * 5;
			p54_setup_mac(priv);
		} else {
			priv->wakeup_timer = 500;
			priv->aid = 0;
		}
	}

	mutex_unlock(&priv->conf_mutex);
}

static int p54_set_key(struct ieee80211_hw *dev, enum set_key_cmd cmd,
		       struct ieee80211_vif *vif, struct ieee80211_sta *sta,
		       struct ieee80211_key_conf *key)
{
	struct p54_common *priv = dev->priv;
	int slot, ret = 0;
	u8 algo = 0;
	u8 *addr = NULL;

	if (modparam_nohwcrypt)
		return -EOPNOTSUPP;

	mutex_lock(&priv->conf_mutex);
	if (cmd == SET_KEY) {
		switch (key->alg) {
		case ALG_TKIP:
			if (!(priv->privacy_caps & (BR_DESC_PRIV_CAP_MICHAEL |
			      BR_DESC_PRIV_CAP_TKIP))) {
				ret = -EOPNOTSUPP;
				goto out_unlock;
			}
			key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
			algo = P54_CRYPTO_TKIPMICHAEL;
			break;
		case ALG_WEP:
			if (!(priv->privacy_caps & BR_DESC_PRIV_CAP_WEP)) {
				ret = -EOPNOTSUPP;
				goto out_unlock;
			}
			key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
			algo = P54_CRYPTO_WEP;
			break;
		case ALG_CCMP:
			if (!(priv->privacy_caps & BR_DESC_PRIV_CAP_AESCCMP)) {
				ret = -EOPNOTSUPP;
				goto out_unlock;
			}
			key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
			algo = P54_CRYPTO_AESCCMP;
			break;
		default:
			ret = -EOPNOTSUPP;
			goto out_unlock;
		}
		slot = bitmap_find_free_region(priv->used_rxkeys,
					       priv->rx_keycache_size, 0);

		if (slot < 0) {
			/*
			 * The device supports the choosen algorithm, but the
			 * firmware does not provide enough key slots to store
			 * all of them.
			 * But encryption offload for outgoing frames is always
			 * possible, so we just pretend that the upload was
			 * successful and do the decryption in software.
			 */

			/* mark the key as invalid. */
			key->hw_key_idx = 0xff;
			goto out_unlock;
		}
	} else {
		slot = key->hw_key_idx;

		if (slot == 0xff) {
			/* This key was not uploaded into the rx key cache. */

			goto out_unlock;
		}

		bitmap_release_region(priv->used_rxkeys, slot, 0);
		algo = 0;
	}

	if (sta)
		addr = sta->addr;

	ret = p54_upload_key(priv, algo, slot, key->keyidx,
			     key->keylen, addr, key->key);
	if (ret) {
		bitmap_release_region(priv->used_rxkeys, slot, 0);
		ret = -EOPNOTSUPP;
		goto out_unlock;
	}

	key->hw_key_idx = slot;

out_unlock:
	mutex_unlock(&priv->conf_mutex);
	return ret;
}

static const struct ieee80211_ops p54_ops = {
	.tx			= p54_tx_80211,
	.start			= p54_start,
	.stop			= p54_stop,
	.add_interface		= p54_add_interface,
	.remove_interface	= p54_remove_interface,
	.set_tim		= p54_set_tim,
	.sta_notify		= p54_sta_notify,
	.sta_add		= p54_sta_add_remove,
	.sta_remove		= p54_sta_add_remove,
	.set_key		= p54_set_key,
	.config			= p54_config,
	.bss_info_changed	= p54_bss_info_changed,
	.configure_filter	= p54_configure_filter,
	.conf_tx		= p54_conf_tx,
	.get_stats		= p54_get_stats,
};

struct ieee80211_hw *p54_init_common(size_t priv_data_len)
{
	struct ieee80211_hw *dev;
	struct p54_common *priv;

	dev = ieee80211_alloc_hw(priv_data_len, &p54_ops);
	if (!dev)
		return NULL;

	priv = dev->priv;
	priv->hw = dev;
	priv->mode = NL80211_IFTYPE_UNSPECIFIED;
	priv->basic_rate_mask = 0x15f;
	spin_lock_init(&priv->tx_stats_lock);
	skb_queue_head_init(&priv->tx_queue);
	skb_queue_head_init(&priv->tx_pending);
	dev->flags = IEEE80211_HW_RX_INCLUDES_FCS |
		     IEEE80211_HW_SIGNAL_DBM |
		     IEEE80211_HW_SUPPORTS_PS |
		     IEEE80211_HW_PS_NULLFUNC_STACK |
		     IEEE80211_HW_BEACON_FILTER |
		     IEEE80211_HW_NOISE_DBM;

	dev->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
				      BIT(NL80211_IFTYPE_ADHOC) |
				      BIT(NL80211_IFTYPE_AP) |
				      BIT(NL80211_IFTYPE_MESH_POINT);

	dev->channel_change_time = 1000;	/* TODO: find actual value */
	priv->beacon_req_id = cpu_to_le32(0);
	priv->tx_stats[P54_QUEUE_BEACON].limit = 1;
	priv->tx_stats[P54_QUEUE_FWSCAN].limit = 1;
	priv->tx_stats[P54_QUEUE_MGMT].limit = 3;
	priv->tx_stats[P54_QUEUE_CAB].limit = 3;
	priv->tx_stats[P54_QUEUE_DATA].limit = 5;
	dev->queues = 1;
	priv->noise = -94;
	/*
	 * We support at most 8 tries no matter which rate they're at,
	 * we cannot support max_rates * max_rate_tries as we set it
	 * here, but setting it correctly to 4/2 or so would limit us
	 * artificially if the RC algorithm wants just two rates, so
	 * let's say 4/7, we'll redistribute it at TX time, see the
	 * comments there.
	 */
	dev->max_rates = 4;
	dev->max_rate_tries = 7;
	dev->extra_tx_headroom = sizeof(struct p54_hdr) + 4 +
				 sizeof(struct p54_tx_data);

	/*
	 * For now, disable PS by default because it affects
	 * link stability significantly.
	 */
	dev->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;

	mutex_init(&priv->conf_mutex);
	mutex_init(&priv->eeprom_mutex);
	init_completion(&priv->eeprom_comp);
	init_completion(&priv->beacon_comp);
	INIT_DELAYED_WORK(&priv->work, p54_work);

	return dev;
}
EXPORT_SYMBOL_GPL(p54_init_common);

int p54_register_common(struct ieee80211_hw *dev, struct device *pdev)
{
	struct p54_common *priv = dev->priv;
	int err;

	err = ieee80211_register_hw(dev);
	if (err) {
		dev_err(pdev, "Cannot register device (%d).\n", err);
		return err;
	}

#ifdef CONFIG_P54_LEDS
	err = p54_init_leds(priv);
	if (err)
		return err;
#endif /* CONFIG_P54_LEDS */

	dev_info(pdev, "is registered as '%s'\n", wiphy_name(dev->wiphy));
	return 0;
}
EXPORT_SYMBOL_GPL(p54_register_common);

void p54_free_common(struct ieee80211_hw *dev)
{
	struct p54_common *priv = dev->priv;
	unsigned int i;

	for (i = 0; i < IEEE80211_NUM_BANDS; i++)
		kfree(priv->band_table[i]);

	kfree(priv->iq_autocal);
	kfree(priv->output_limit);
	kfree(priv->curve_data);
	kfree(priv->used_rxkeys);
	priv->iq_autocal = NULL;
	priv->output_limit = NULL;
	priv->curve_data = NULL;
	priv->used_rxkeys = NULL;
	ieee80211_free_hw(dev);
}
EXPORT_SYMBOL_GPL(p54_free_common);

void p54_unregister_common(struct ieee80211_hw *dev)
{
	struct p54_common *priv = dev->priv;

#ifdef CONFIG_P54_LEDS
	p54_unregister_leds(priv);
#endif /* CONFIG_P54_LEDS */

	ieee80211_unregister_hw(dev);
	mutex_destroy(&priv->conf_mutex);
	mutex_destroy(&priv->eeprom_mutex);
}
EXPORT_SYMBOL_GPL(p54_unregister_common);
Commit	Line	Data
0ac0d6ce CL	1	/*
	2	* mac80211 glue code for mac80211 Prism54 drivers
	3	*
	4	* Copyright (c) 2006, Michael Wu <flamingice@sourmilk.net>
	5	* Copyright (c) 2007-2009, Christian Lamparter <chunkeey@web.de>
	6	* Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
	7	*
	8	* Based on:
	9	* - the islsm (softmac prism54) driver, which is:
	10	* Copyright 2004-2006 Jean-Baptiste Note <jbnote@gmail.com>, et al.
	11	* - stlc45xx driver
	12	* Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies).
	13	*
	14	* This program is free software; you can redistribute it and/or modify
	15	* it under the terms of the GNU General Public License version 2 as
	16	* published by the Free Software Foundation.
	17	*/
	18
	19	#include <linux/init.h>
5a0e3ad6	20	#include <linux/slab.h>
0ac0d6ce CL	21	#include <linux/firmware.h>
	22	#include <linux/etherdevice.h>
	23
	24	#include <net/mac80211.h>
	25
	26	#include "p54.h"
	27	#include "lmac.h"
	28
	29	static int modparam_nohwcrypt;
	30	module_param_named(nohwcrypt, modparam_nohwcrypt, bool, S_IRUGO);
	31	MODULE_PARM_DESC(nohwcrypt, "Disable hardware encryption.");
	32	MODULE_AUTHOR("Michael Wu <flamingice@sourmilk.net>");
	33	MODULE_DESCRIPTION("Softmac Prism54 common code");
	34	MODULE_LICENSE("GPL");
	35	MODULE_ALIAS("prism54common");
	36
17f6f054 JB	37	static int p54_sta_add_remove(struct ieee80211_hw *hw,
	38	struct ieee80211_vif *vif,
	39	struct ieee80211_sta *sta)
	40	{
	41	struct p54_common *priv = hw->priv;
	42
	43	/*
	44	* Notify the firmware that we don't want or we don't
	45	* need to buffer frames for this station anymore.
	46	*/
	47
	48	p54_sta_unlock(priv, sta->addr);
	49
	50	return 0;
	51	}
	52
0ac0d6ce CL	53	static void p54_sta_notify(struct ieee80211_hw dev, struct ieee80211_vif vif,
	54	enum sta_notify_cmd notify_cmd,
	55	struct ieee80211_sta *sta)
	56	{
	57	struct p54_common *priv = dev->priv;
0ac0d6ce	58
17f6f054	59	switch (notify_cmd) {
0ac0d6ce CL	60	case STA_NOTIFY_AWAKE:
	61	/* update the firmware's filter table */
	62	p54_sta_unlock(priv, sta->addr);
	63	break;
	64	default:
	65	break;
	66	}
	67	}
	68
	69	static int p54_set_tim(struct ieee80211_hw dev, struct ieee80211_sta sta,
	70	bool set)
	71	{
	72	struct p54_common *priv = dev->priv;
	73
	74	return p54_update_beacon_tim(priv, sta->aid, set);
	75	}
	76
e0f114e8	77	u8 p54_find_ie(struct sk_buff skb, u8 ie)
0ac0d6ce	78	{
0ac0d6ce CL	79	struct ieee80211_mgmt mgmt = (void )skb->data;
	80	u8 pos, end;
	81
	82	if (skb->len <= sizeof(mgmt))
e0f114e8	83	return NULL;
0ac0d6ce CL	84
	85	pos = (u8 *)mgmt->u.beacon.variable;
	86	end = skb->data + skb->len;
	87	while (pos < end) {
	88	if (pos + 2 + pos[1] > end)
e0f114e8	89	return NULL;
0ac0d6ce	90
e0f114e8 CL	91	if (pos[0] == ie)
e0f114e8 CL	92	return pos;
0ac0d6ce	93
e0f114e8 CL	94	pos += 2 + pos[1];
	95	}
	96	return NULL;
	97	}
0ac0d6ce	98
e0f114e8 CL	99	static int p54_beacon_format_ie_tim(struct sk_buff *skb)
	100	{
	101	/*
	102	* the good excuse for this mess is ... the firmware.
	103	* The dummy TIM MUST be at the end of the beacon frame,
	104	* because it'll be overwritten!
	105	*/
	106	u8 *tim;
	107	u8 dtim_len;
	108	u8 dtim_period;
	109	u8 *next;
0ac0d6ce	110
e0f114e8 CL	111	tim = p54_find_ie(skb, WLAN_EID_TIM);
	112	if (!tim)
	113	return 0;
0ac0d6ce	114
e0f114e8 CL	115	dtim_len = tim[1];
	116	dtim_period = tim[3];
	117	next = tim + 2 + dtim_len;
	118
	119	if (dtim_len < 3)
	120	return -EINVAL;
	121
	122	memmove(tim, next, skb_tail_pointer(skb) - next);
	123	tim = skb_tail_pointer(skb) - (dtim_len + 2);
	124
	125	/* add the dummy at the end */
	126	tim[0] = WLAN_EID_TIM;
	127	tim[1] = 3;
	128	tim[2] = 0;
	129	tim[3] = dtim_period;
	130	tim[4] = 0;
	131
	132	if (dtim_len > 3)
	133	skb_trim(skb, skb->len - (dtim_len - 3));
0ac0d6ce	134
0ac0d6ce CL	135	return 0;
	136	}
	137
	138	static int p54_beacon_update(struct p54_common *priv,
	139	struct ieee80211_vif *vif)
	140	{
	141	struct sk_buff *beacon;
0ac0d6ce CL	142	int ret;
	143
	144	beacon = ieee80211_beacon_get(priv->hw, vif);
	145	if (!beacon)
	146	return -ENOMEM;
	147	ret = p54_beacon_format_ie_tim(beacon);
	148	if (ret)
	149	return ret;
	150
46df10ae CL	151	/*
	152	* During operation, the firmware takes care of beaconing.
	153	* The driver only needs to upload a new beacon template, once
	154	* the template was changed by the stack or userspace.
	155	*
	156	* LMAC API 3.2.2 also specifies that the driver does not need
	157	* to cancel the old beacon template by hand, instead the firmware
	158	* will release the previous one through the feedback mechanism.
	159	*/
	160	WARN_ON(p54_tx_80211(priv->hw, beacon));
0ac0d6ce CL	161	priv->tsf_high32 = 0;
	162	priv->tsf_low32 = 0;
	163
	164	return 0;
	165	}
	166
	167	static int p54_start(struct ieee80211_hw *dev)
	168	{
	169	struct p54_common *priv = dev->priv;
	170	int err;
	171
	172	mutex_lock(&priv->conf_mutex);
	173	err = priv->open(dev);
	174	if (err)
	175	goto out;
	176	P54_SET_QUEUE(priv->qos_params[0], 0x0002, 0x0003, 0x0007, 47);
	177	P54_SET_QUEUE(priv->qos_params[1], 0x0002, 0x0007, 0x000f, 94);
	178	P54_SET_QUEUE(priv->qos_params[2], 0x0003, 0x000f, 0x03ff, 0);
	179	P54_SET_QUEUE(priv->qos_params[3], 0x0007, 0x000f, 0x03ff, 0);
	180	err = p54_set_edcf(priv);
	181	if (err)
	182	goto out;
	183
	184	memset(priv->bssid, ~0, ETH_ALEN);
	185	priv->mode = NL80211_IFTYPE_MONITOR;
	186	err = p54_setup_mac(priv);
	187	if (err) {
	188	priv->mode = NL80211_IFTYPE_UNSPECIFIED;
	189	goto out;
	190	}
	191
42935eca	192	ieee80211_queue_delayed_work(dev, &priv->work, 0);
0ac0d6ce CL	193
	194	priv->softled_state = 0;
	195	err = p54_set_leds(priv);
	196
	197	out:
	198	mutex_unlock(&priv->conf_mutex);
	199	return err;
	200	}
	201
	202	static void p54_stop(struct ieee80211_hw *dev)
	203	{
	204	struct p54_common *priv = dev->priv;
	205	int i;
	206
	207	mutex_lock(&priv->conf_mutex);
	208	priv->mode = NL80211_IFTYPE_UNSPECIFIED;
	209	priv->softled_state = 0;
	210	p54_set_leds(priv);
	211
	212	cancel_delayed_work_sync(&priv->work);
	213
	214	priv->stop(dev);
	215	skb_queue_purge(&priv->tx_pending);
	216	skb_queue_purge(&priv->tx_queue);
	217	for (i = 0; i < P54_QUEUE_NUM; i++) {
	218	priv->tx_stats[i].count = 0;
	219	priv->tx_stats[i].len = 0;
	220	}
	221
	222	priv->beacon_req_id = cpu_to_le32(0);
	223	priv->tsf_high32 = priv->tsf_low32 = 0;
	224	mutex_unlock(&priv->conf_mutex);
	225	}
	226
	227	static int p54_add_interface(struct ieee80211_hw *dev,
1ed32e4f	228	struct ieee80211_vif *vif)
0ac0d6ce CL	229	{
	230	struct p54_common *priv = dev->priv;
	231
	232	mutex_lock(&priv->conf_mutex);
	233	if (priv->mode != NL80211_IFTYPE_MONITOR) {
	234	mutex_unlock(&priv->conf_mutex);
	235	return -EOPNOTSUPP;
	236	}
	237
1ed32e4f	238	priv->vif = vif;
0ac0d6ce	239
1ed32e4f	240	switch (vif->type) {
0ac0d6ce CL	241	case NL80211_IFTYPE_STATION:
	242	case NL80211_IFTYPE_ADHOC:
	243	case NL80211_IFTYPE_AP:
	244	case NL80211_IFTYPE_MESH_POINT:
1ed32e4f	245	priv->mode = vif->type;
0ac0d6ce CL	246	break;
	247	default:
	248	mutex_unlock(&priv->conf_mutex);
	249	return -EOPNOTSUPP;
	250	}
	251
1ed32e4f	252	memcpy(priv->mac_addr, vif->addr, ETH_ALEN);
0ac0d6ce CL	253	p54_setup_mac(priv);
	254	mutex_unlock(&priv->conf_mutex);
	255	return 0;
	256	}
	257
	258	static void p54_remove_interface(struct ieee80211_hw *dev,
1ed32e4f	259	struct ieee80211_vif *vif)
0ac0d6ce CL	260	{
	261	struct p54_common *priv = dev->priv;
	262
	263	mutex_lock(&priv->conf_mutex);
	264	priv->vif = NULL;
46df10ae CL	265
	266	/*
	267	* LMAC API 3.2.2 states that any active beacon template must be
	268	* canceled by the driver before attempting a mode transition.
	269	*/
	270	if (le32_to_cpu(priv->beacon_req_id) != 0) {
0ac0d6ce	271	p54_tx_cancel(priv, priv->beacon_req_id);
46df10ae	272	wait_for_completion_interruptible_timeout(&priv->beacon_comp, HZ);
0ac0d6ce CL	273	}
	274	priv->mode = NL80211_IFTYPE_MONITOR;
	275	memset(priv->mac_addr, 0, ETH_ALEN);
	276	memset(priv->bssid, 0, ETH_ALEN);
	277	p54_setup_mac(priv);
	278	mutex_unlock(&priv->conf_mutex);
	279	}
	280
	281	static int p54_config(struct ieee80211_hw *dev, u32 changed)
	282	{
	283	int ret = 0;
	284	struct p54_common *priv = dev->priv;
	285	struct ieee80211_conf *conf = &dev->conf;
	286
	287	mutex_lock(&priv->conf_mutex);
	288	if (changed & IEEE80211_CONF_CHANGE_POWER)
	289	priv->output_power = conf->power_level << 2;
	290	if (changed & IEEE80211_CONF_CHANGE_CHANNEL) {
	291	ret = p54_scan(priv, P54_SCAN_EXIT, 0);
	292	if (ret)
	293	goto out;
	294	}
	295	if (changed & IEEE80211_CONF_CHANGE_PS) {
	296	ret = p54_set_ps(priv);
	297	if (ret)
	298	goto out;
	299	}
6208f8b2 CL	300	if (changed & IEEE80211_CONF_CHANGE_IDLE) {
	301	ret = p54_setup_mac(priv);
	302	if (ret)
	303	goto out;
	304	}
0ac0d6ce CL	305
	306	out:
	307	mutex_unlock(&priv->conf_mutex);
	308	return ret;
	309	}
	310
	311	static void p54_configure_filter(struct ieee80211_hw *dev,
	312	unsigned int changed_flags,
	313	unsigned int *total_flags,
3ac64bee	314	u64 multicast)
0ac0d6ce CL	315	{
	316	struct p54_common *priv = dev->priv;
	317
	318	*total_flags &= FIF_PROMISC_IN_BSS \|
	319	FIF_OTHER_BSS;
	320
	321	priv->filter_flags = *total_flags;
	322
	323	if (changed_flags & (FIF_PROMISC_IN_BSS \| FIF_OTHER_BSS))
	324	p54_setup_mac(priv);
	325	}
	326
	327	static int p54_conf_tx(struct ieee80211_hw *dev, u16 queue,
	328	const struct ieee80211_tx_queue_params *params)
	329	{
	330	struct p54_common *priv = dev->priv;
	331	int ret;
	332
	333	mutex_lock(&priv->conf_mutex);
718126a7	334	if (queue < dev->queues) {
0ac0d6ce CL	335	P54_SET_QUEUE(priv->qos_params[queue], params->aifs,
	336	params->cw_min, params->cw_max, params->txop);
	337	ret = p54_set_edcf(priv);
	338	} else
	339	ret = -EINVAL;
	340	mutex_unlock(&priv->conf_mutex);
	341	return ret;
	342	}
	343
	344	static void p54_work(struct work_struct *work)
	345	{
	346	struct p54_common *priv = container_of(work, struct p54_common,
	347	work.work);
	348
	349	if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED))
	350	return ;
	351
	352	/*
	353	* TODO: walk through tx_queue and do the following tasks
	354	* 1. initiate bursts.
	355	* 2. cancel stuck frames / reset the device if necessary.
	356	*/
	357
	358	p54_fetch_statistics(priv);
	359	}
	360
	361	static int p54_get_stats(struct ieee80211_hw *dev,
	362	struct ieee80211_low_level_stats *stats)
	363	{
	364	struct p54_common *priv = dev->priv;
	365
	366	memcpy(stats, &priv->stats, sizeof(*stats));
	367	return 0;
	368	}
	369
0ac0d6ce CL	370	static void p54_bss_info_changed(struct ieee80211_hw *dev,
	371	struct ieee80211_vif *vif,
	372	struct ieee80211_bss_conf *info,
	373	u32 changed)
	374	{
	375	struct p54_common *priv = dev->priv;
	376
	377	mutex_lock(&priv->conf_mutex);
	378	if (changed & BSS_CHANGED_BSSID) {
	379	memcpy(priv->bssid, info->bssid, ETH_ALEN);
	380	p54_setup_mac(priv);
	381	}
	382
	383	if (changed & BSS_CHANGED_BEACON) {
	384	p54_scan(priv, P54_SCAN_EXIT, 0);
	385	p54_setup_mac(priv);
	386	p54_beacon_update(priv, vif);
	387	p54_set_edcf(priv);
	388	}
	389
	390	if (changed & (BSS_CHANGED_ERP_SLOT \| BSS_CHANGED_BEACON)) {
	391	priv->use_short_slot = info->use_short_slot;
	392	p54_set_edcf(priv);
	393	}
	394	if (changed & BSS_CHANGED_BASIC_RATES) {
	395	if (dev->conf.channel->band == IEEE80211_BAND_5GHZ)
	396	priv->basic_rate_mask = (info->basic_rates << 4);
	397	else
	398	priv->basic_rate_mask = info->basic_rates;
	399	p54_setup_mac(priv);
	400	if (priv->fw_var >= 0x500)
	401	p54_scan(priv, P54_SCAN_EXIT, 0);
	402	}
	403	if (changed & BSS_CHANGED_ASSOC) {
	404	if (info->assoc) {
	405	priv->aid = info->aid;
	406	priv->wakeup_timer = info->beacon_int *
	407	info->dtim_period * 5;
	408	p54_setup_mac(priv);
e0f114e8 CL	409	} else {
	410	priv->wakeup_timer = 500;
	411	priv->aid = 0;
0ac0d6ce CL	412	}
	413	}
	414
	415	mutex_unlock(&priv->conf_mutex);
	416	}
	417
	418	static int p54_set_key(struct ieee80211_hw *dev, enum set_key_cmd cmd,
	419	struct ieee80211_vif vif, struct ieee80211_sta sta,
	420	struct ieee80211_key_conf *key)
	421	{
	422	struct p54_common *priv = dev->priv;
	423	int slot, ret = 0;
	424	u8 algo = 0;
	425	u8 *addr = NULL;
	426
	427	if (modparam_nohwcrypt)
	428	return -EOPNOTSUPP;
	429
	430	mutex_lock(&priv->conf_mutex);
	431	if (cmd == SET_KEY) {
	432	switch (key->alg) {
	433	case ALG_TKIP:
	434	if (!(priv->privacy_caps & (BR_DESC_PRIV_CAP_MICHAEL \|
	435	BR_DESC_PRIV_CAP_TKIP))) {
	436	ret = -EOPNOTSUPP;
	437	goto out_unlock;
	438	}
	439	key->flags \|= IEEE80211_KEY_FLAG_GENERATE_IV;
	440	algo = P54_CRYPTO_TKIPMICHAEL;
	441	break;
	442	case ALG_WEP:
	443	if (!(priv->privacy_caps & BR_DESC_PRIV_CAP_WEP)) {
	444	ret = -EOPNOTSUPP;
	445	goto out_unlock;
	446	}
	447	key->flags \|= IEEE80211_KEY_FLAG_GENERATE_IV;
	448	algo = P54_CRYPTO_WEP;
	449	break;
	450	case ALG_CCMP:
	451	if (!(priv->privacy_caps & BR_DESC_PRIV_CAP_AESCCMP)) {
	452	ret = -EOPNOTSUPP;
	453	goto out_unlock;
	454	}
	455	key->flags \|= IEEE80211_KEY_FLAG_GENERATE_IV;
	456	algo = P54_CRYPTO_AESCCMP;
	457	break;
	458	default:
	459	ret = -EOPNOTSUPP;
	460	goto out_unlock;
	461	}
	462	slot = bitmap_find_free_region(priv->used_rxkeys,
	463	priv->rx_keycache_size, 0);
	464
	465	if (slot < 0) {
	466	/*
	467	* The device supports the choosen algorithm, but the
	468	* firmware does not provide enough key slots to store
	469	* all of them.
	470	* But encryption offload for outgoing frames is always
	471	* possible, so we just pretend that the upload was
	472	* successful and do the decryption in software.
	473	*/
	474
	475	/* mark the key as invalid. */
476	key->hw_key_idx = 0xff;
477	goto out_unlock;
478	}
479	} else {
480	slot = key->hw_key_idx;
481
482	if (slot == 0xff) {
483	/* This key was not uploaded into the rx key cache. */
484
485	goto out_unlock;
486	}
487
488	bitmap_release_region(priv->used_rxkeys, slot, 0);
489	algo = 0;
490	}
491
492	if (sta)
493	addr = sta->addr;
494
495	ret = p54_upload_key(priv, algo, slot, key->keyidx,
496	key->keylen, addr, key->key);
497	if (ret) {
498	bitmap_release_region(priv->used_rxkeys, slot, 0);
499	ret = -EOPNOTSUPP;
500	goto out_unlock;
501	}
502
503	key->hw_key_idx = slot;
504
505	out_unlock:
506	mutex_unlock(&priv->conf_mutex);
507	return ret;
508	}
509
510	static const struct ieee80211_ops p54_ops = {
511	.tx = p54_tx_80211,
512	.start = p54_start,
513	.stop = p54_stop,
514	.add_interface = p54_add_interface,
515	.remove_interface = p54_remove_interface,
516	.set_tim = p54_set_tim,
517	.sta_notify = p54_sta_notify,
17f6f054 JB	518	.sta_add = p54_sta_add_remove,
17f6f054 JB	519	.sta_remove = p54_sta_add_remove,
0ac0d6ce CL	520	.set_key = p54_set_key,
	521	.config = p54_config,
	522	.bss_info_changed = p54_bss_info_changed,
	523	.configure_filter = p54_configure_filter,
	524	.conf_tx = p54_conf_tx,
	525	.get_stats = p54_get_stats,
0ac0d6ce CL	526	};
	527
	528	struct ieee80211_hw *p54_init_common(size_t priv_data_len)
	529	{
	530	struct ieee80211_hw *dev;
	531	struct p54_common *priv;
	532
	533	dev = ieee80211_alloc_hw(priv_data_len, &p54_ops);
	534	if (!dev)
	535	return NULL;
	536
	537	priv = dev->priv;
	538	priv->hw = dev;
	539	priv->mode = NL80211_IFTYPE_UNSPECIFIED;
	540	priv->basic_rate_mask = 0x15f;
	541	spin_lock_init(&priv->tx_stats_lock);
	542	skb_queue_head_init(&priv->tx_queue);
	543	skb_queue_head_init(&priv->tx_pending);
	544	dev->flags = IEEE80211_HW_RX_INCLUDES_FCS \|
	545	IEEE80211_HW_SIGNAL_DBM \|
e0f114e8 CL	546	IEEE80211_HW_SUPPORTS_PS \|
	547	IEEE80211_HW_PS_NULLFUNC_STACK \|
	548	IEEE80211_HW_BEACON_FILTER \|
0ac0d6ce CL	549	IEEE80211_HW_NOISE_DBM;
	550
	551	dev->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) \|
	552	BIT(NL80211_IFTYPE_ADHOC) \|
	553	BIT(NL80211_IFTYPE_AP) \|
	554	BIT(NL80211_IFTYPE_MESH_POINT);
	555
	556	dev->channel_change_time = 1000; /* TODO: find actual value */
46df10ae	557	priv->beacon_req_id = cpu_to_le32(0);
0ac0d6ce CL	558	priv->tx_stats[P54_QUEUE_BEACON].limit = 1;
	559	priv->tx_stats[P54_QUEUE_FWSCAN].limit = 1;
	560	priv->tx_stats[P54_QUEUE_MGMT].limit = 3;
	561	priv->tx_stats[P54_QUEUE_CAB].limit = 3;
	562	priv->tx_stats[P54_QUEUE_DATA].limit = 5;
	563	dev->queues = 1;
	564	priv->noise = -94;
	565	/*
	566	* We support at most 8 tries no matter which rate they're at,
	567	* we cannot support max_rates * max_rate_tries as we set it
	568	* here, but setting it correctly to 4/2 or so would limit us
	569	* artificially if the RC algorithm wants just two rates, so
	570	* let's say 4/7, we'll redistribute it at TX time, see the
	571	* comments there.
	572	*/
	573	dev->max_rates = 4;
	574	dev->max_rate_tries = 7;
	575	dev->extra_tx_headroom = sizeof(struct p54_hdr) + 4 +
	576	sizeof(struct p54_tx_data);
	577
c46aaba7 CL	578	/*
	579	* For now, disable PS by default because it affects
	580	* link stability significantly.
	581	*/
5be83de5	582	dev->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
c46aaba7	583
0ac0d6ce CL	584	mutex_init(&priv->conf_mutex);
	585	mutex_init(&priv->eeprom_mutex);
	586	init_completion(&priv->eeprom_comp);
46df10ae	587	init_completion(&priv->beacon_comp);
0ac0d6ce CL	588	INIT_DELAYED_WORK(&priv->work, p54_work);
	589
	590	return dev;
	591	}
	592	EXPORT_SYMBOL_GPL(p54_init_common);
	593
	594	int p54_register_common(struct ieee80211_hw dev, struct device pdev)
	595	{
	596	struct p54_common *priv = dev->priv;
	597	int err;
	598
	599	err = ieee80211_register_hw(dev);
	600	if (err) {
	601	dev_err(pdev, "Cannot register device (%d).\n", err);
	602	return err;
	603	}
	604
	605	#ifdef CONFIG_P54_LEDS
	606	err = p54_init_leds(priv);
	607	if (err)
	608	return err;
	609	#endif /* CONFIG_P54_LEDS */
	610
	611	dev_info(pdev, "is registered as '%s'\n", wiphy_name(dev->wiphy));
	612	return 0;
	613	}
	614	EXPORT_SYMBOL_GPL(p54_register_common);
	615
	616	void p54_free_common(struct ieee80211_hw *dev)
	617	{
	618	struct p54_common *priv = dev->priv;
1a9b6679 CL	619	unsigned int i;
	620
	621	for (i = 0; i < IEEE80211_NUM_BANDS; i++)
	622	kfree(priv->band_table[i]);
0ac0d6ce CL	623
	624	kfree(priv->iq_autocal);
	625	kfree(priv->output_limit);
	626	kfree(priv->curve_data);
	627	kfree(priv->used_rxkeys);
	628	priv->iq_autocal = NULL;
	629	priv->output_limit = NULL;
	630	priv->curve_data = NULL;
	631	priv->used_rxkeys = NULL;
	632	ieee80211_free_hw(dev);
	633	}
	634	EXPORT_SYMBOL_GPL(p54_free_common);
	635
	636	void p54_unregister_common(struct ieee80211_hw *dev)
	637	{
	638	struct p54_common *priv = dev->priv;
	639
	640	#ifdef CONFIG_P54_LEDS
	641	p54_unregister_leds(priv);
	642	#endif /* CONFIG_P54_LEDS */
	643
	644	ieee80211_unregister_hw(dev);
	645	mutex_destroy(&priv->conf_mutex);
	646	mutex_destroy(&priv->eeprom_mutex);
	647	}
	648	EXPORT_SYMBOL_GPL(p54_unregister_common);