projects / GitHub / mt8127 / android_kernel_alcatel_ttab.git / blob
? search:
summary | shortlog | log | commit | commitdiff | tree
blame | history | raw | HEAD
IRQ: Maintain regs pointer globally rather than passing to IRQ handlers
[GitHub/mt8127/android_kernel_alcatel_ttab.git] / drivers / net / wireless / airo.c
1 /*======================================================================
2
3 Aironet driver for 4500 and 4800 series cards
4
5 This code is released under both the GPL version 2 and BSD licenses.
6 Either license may be used. The respective licenses are found at
7 the end of this file.
8
9 This code was developed by Benjamin Reed <breed@users.sourceforge.net>
10 including portions of which come from the Aironet PC4500
11 Developer's Reference Manual and used with permission. Copyright
12 (C) 1999 Benjamin Reed. All Rights Reserved. Permission to use
13 code in the Developer's manual was granted for this driver by
14 Aironet. Major code contributions were received from Javier Achirica
15 <achirica@users.sourceforge.net> and Jean Tourrilhes <jt@hpl.hp.com>.
16 Code was also integrated from the Cisco Aironet driver for Linux.
17 Support for MPI350 cards was added by Fabrice Bellet
18 <fabrice@bellet.info>.
19
20 ======================================================================*/
21
22 #include <linux/err.h>
23 #include <linux/init.h>
24
25 #include <linux/kernel.h>
26 #include <linux/module.h>
27 #include <linux/proc_fs.h>
28 #include <linux/smp_lock.h>
29
30 #include <linux/sched.h>
31 #include <linux/ptrace.h>
32 #include <linux/slab.h>
33 #include <linux/string.h>
34 #include <linux/timer.h>
35 #include <linux/interrupt.h>
36 #include <linux/in.h>
37 #include <linux/bitops.h>
38 #include <linux/scatterlist.h>
39 #include <linux/crypto.h>
40 #include <asm/io.h>
41 #include <asm/system.h>
42
43 #include <linux/netdevice.h>
44 #include <linux/etherdevice.h>
45 #include <linux/skbuff.h>
46 #include <linux/if_arp.h>
47 #include <linux/ioport.h>
48 #include <linux/pci.h>
49 #include <asm/uaccess.h>
50 #include <net/ieee80211.h>
51 #include <linux/kthread.h>
52
53 #include "airo.h"
54
55 #ifdef CONFIG_PCI
56 static struct pci_device_id card_ids[] = {
57 { 0x14b9, 1, PCI_ANY_ID, PCI_ANY_ID, },
58 { 0x14b9, 0x4500, PCI_ANY_ID, PCI_ANY_ID },
59 { 0x14b9, 0x4800, PCI_ANY_ID, PCI_ANY_ID, },
60 { 0x14b9, 0x0340, PCI_ANY_ID, PCI_ANY_ID, },
61 { 0x14b9, 0x0350, PCI_ANY_ID, PCI_ANY_ID, },
62 { 0x14b9, 0x5000, PCI_ANY_ID, PCI_ANY_ID, },
63 { 0x14b9, 0xa504, PCI_ANY_ID, PCI_ANY_ID, },
64 { 0, }
65 };
66 MODULE_DEVICE_TABLE(pci, card_ids);
67
68 static int airo_pci_probe(struct pci_dev *, const struct pci_device_id *);
69 static void airo_pci_remove(struct pci_dev *);
70 static int airo_pci_suspend(struct pci_dev *pdev, pm_message_t state);
71 static int airo_pci_resume(struct pci_dev *pdev);
72
73 static struct pci_driver airo_driver = {
74 .name = "airo",
75 .id_table = card_ids,
76 .probe = airo_pci_probe,
77 .remove = __devexit_p(airo_pci_remove),
78 .suspend = airo_pci_suspend,
79 .resume = airo_pci_resume,
80 };
81 #endif /* CONFIG_PCI */
82
83 /* Include Wireless Extension definition and check version - Jean II */
84 #include <linux/wireless.h>
85 #define WIRELESS_SPY // enable iwspy support
86 #include <net/iw_handler.h> // New driver API
87
88 #define CISCO_EXT // enable Cisco extensions
89 #ifdef CISCO_EXT
90 #include <linux/delay.h>
91 #endif
92
93 /* Hack to do some power saving */
94 #define POWER_ON_DOWN
95
96 /* As you can see this list is HUGH!
97 I really don't know what a lot of these counts are about, but they
98 are all here for completeness. If the IGNLABEL macro is put in
99 infront of the label, that statistic will not be included in the list
100 of statistics in the /proc filesystem */
101
102 #define IGNLABEL(comment) NULL
103 static char *statsLabels[] = {
104 "RxOverrun",
105 IGNLABEL("RxPlcpCrcErr"),
106 IGNLABEL("RxPlcpFormatErr"),
107 IGNLABEL("RxPlcpLengthErr"),
108 "RxMacCrcErr",
109 "RxMacCrcOk",
110 "RxWepErr",
111 "RxWepOk",
112 "RetryLong",
113 "RetryShort",
114 "MaxRetries",
115 "NoAck",
116 "NoCts",
117 "RxAck",
118 "RxCts",
119 "TxAck",
120 "TxRts",
121 "TxCts",
122 "TxMc",
123 "TxBc",
124 "TxUcFrags",
125 "TxUcPackets",
126 "TxBeacon",
127 "RxBeacon",
128 "TxSinColl",
129 "TxMulColl",
130 "DefersNo",
131 "DefersProt",
132 "DefersEngy",
133 "DupFram",
134 "RxFragDisc",
135 "TxAged",
136 "RxAged",
137 "LostSync-MaxRetry",
138 "LostSync-MissedBeacons",
139 "LostSync-ArlExceeded",
140 "LostSync-Deauth",
141 "LostSync-Disassoced",
142 "LostSync-TsfTiming",
143 "HostTxMc",
144 "HostTxBc",
145 "HostTxUc",
146 "HostTxFail",
147 "HostRxMc",
148 "HostRxBc",
149 "HostRxUc",
150 "HostRxDiscard",
151 IGNLABEL("HmacTxMc"),
152 IGNLABEL("HmacTxBc"),
153 IGNLABEL("HmacTxUc"),
154 IGNLABEL("HmacTxFail"),
155 IGNLABEL("HmacRxMc"),
156 IGNLABEL("HmacRxBc"),
157 IGNLABEL("HmacRxUc"),
158 IGNLABEL("HmacRxDiscard"),
159 IGNLABEL("HmacRxAccepted"),
160 "SsidMismatch",
161 "ApMismatch",
162 "RatesMismatch",
163 "AuthReject",
164 "AuthTimeout",
165 "AssocReject",
166 "AssocTimeout",
167 IGNLABEL("ReasonOutsideTable"),
168 IGNLABEL("ReasonStatus1"),
169 IGNLABEL("ReasonStatus2"),
170 IGNLABEL("ReasonStatus3"),
171 IGNLABEL("ReasonStatus4"),
172 IGNLABEL("ReasonStatus5"),
173 IGNLABEL("ReasonStatus6"),
174 IGNLABEL("ReasonStatus7"),
175 IGNLABEL("ReasonStatus8"),
176 IGNLABEL("ReasonStatus9"),
177 IGNLABEL("ReasonStatus10"),
178 IGNLABEL("ReasonStatus11"),
179 IGNLABEL("ReasonStatus12"),
180 IGNLABEL("ReasonStatus13"),
181 IGNLABEL("ReasonStatus14"),
182 IGNLABEL("ReasonStatus15"),
183 IGNLABEL("ReasonStatus16"),
184 IGNLABEL("ReasonStatus17"),
185 IGNLABEL("ReasonStatus18"),
186 IGNLABEL("ReasonStatus19"),
187 "RxMan",
188 "TxMan",
189 "RxRefresh",
190 "TxRefresh",
191 "RxPoll",
192 "TxPoll",
193 "HostRetries",
194 "LostSync-HostReq",
195 "HostTxBytes",
196 "HostRxBytes",
197 "ElapsedUsec",
198 "ElapsedSec",
199 "LostSyncBetterAP",
200 "PrivacyMismatch",
201 "Jammed",
202 "DiscRxNotWepped",
203 "PhyEleMismatch",
204 (char*)-1 };
205 #ifndef RUN_AT
206 #define RUN_AT(x) (jiffies+(x))
207 #endif
208
209
210 /* These variables are for insmod, since it seems that the rates
211 can only be set in setup_card. Rates should be a comma separated
212 (no spaces) list of rates (up to 8). */
213
214 static int rates[8];
215 static int basic_rate;
216 static char *ssids[3];
217
218 static int io[4];
219 static int irq[4];
220
221 static
222 int maxencrypt /* = 0 */; /* The highest rate that the card can encrypt at.
223 0 means no limit. For old cards this was 4 */
224
225 static int auto_wep /* = 0 */; /* If set, it tries to figure out the wep mode */
226 static int aux_bap /* = 0 */; /* Checks to see if the aux ports are needed to read
227 the bap, needed on some older cards and buses. */
228 static int adhoc;
229
230 static int probe = 1;
231
232 static int proc_uid /* = 0 */;
233
234 static int proc_gid /* = 0 */;
235
236 static int airo_perm = 0555;
237
238 static int proc_perm = 0644;
239
240 MODULE_AUTHOR("Benjamin Reed");
241 MODULE_DESCRIPTION("Support for Cisco/Aironet 802.11 wireless ethernet \
242 cards. Direct support for ISA/PCI/MPI cards and support \
243 for PCMCIA when used with airo_cs.");
244 MODULE_LICENSE("Dual BSD/GPL");
245 MODULE_SUPPORTED_DEVICE("Aironet 4500, 4800 and Cisco 340/350");
246 module_param_array(io, int, NULL, 0);
247 module_param_array(irq, int, NULL, 0);
248 module_param(basic_rate, int, 0);
249 module_param_array(rates, int, NULL, 0);
250 module_param_array(ssids, charp, NULL, 0);
251 module_param(auto_wep, int, 0);
252 MODULE_PARM_DESC(auto_wep, "If non-zero, the driver will keep looping through \
253 the authentication options until an association is made. The value of \
254 auto_wep is number of the wep keys to check. A value of 2 will try using \
255 the key at index 0 and index 1.");
256 module_param(aux_bap, int, 0);
257 MODULE_PARM_DESC(aux_bap, "If non-zero, the driver will switch into a mode \
258 than seems to work better for older cards with some older buses. Before \
259 switching it checks that the switch is needed.");
260 module_param(maxencrypt, int, 0);
261 MODULE_PARM_DESC(maxencrypt, "The maximum speed that the card can do \
262 encryption. Units are in 512kbs. Zero (default) means there is no limit. \
263 Older cards used to be limited to 2mbs (4).");
264 module_param(adhoc, int, 0);
265 MODULE_PARM_DESC(adhoc, "If non-zero, the card will start in adhoc mode.");
266 module_param(probe, int, 0);
267 MODULE_PARM_DESC(probe, "If zero, the driver won't start the card.");
268
269 module_param(proc_uid, int, 0);
270 MODULE_PARM_DESC(proc_uid, "The uid that the /proc files will belong to.");
271 module_param(proc_gid, int, 0);
272 MODULE_PARM_DESC(proc_gid, "The gid that the /proc files will belong to.");
273 module_param(airo_perm, int, 0);
274 MODULE_PARM_DESC(airo_perm, "The permission bits of /proc/[driver/]aironet.");
275 module_param(proc_perm, int, 0);
276 MODULE_PARM_DESC(proc_perm, "The permission bits of the files in /proc");
277
278 /* This is a kind of sloppy hack to get this information to OUT4500 and
279 IN4500. I would be extremely interested in the situation where this
280 doesn't work though!!! */
281 static int do8bitIO = 0;
282
283 /* Return codes */
284 #define SUCCESS 0
285 #define ERROR -1
286 #define NO_PACKET -2
287
288 /* Commands */
289 #define NOP2 0x0000
290 #define MAC_ENABLE 0x0001
291 #define MAC_DISABLE 0x0002
292 #define CMD_LOSE_SYNC 0x0003 /* Not sure what this does... */
293 #define CMD_SOFTRESET 0x0004
294 #define HOSTSLEEP 0x0005
295 #define CMD_MAGIC_PKT 0x0006
296 #define CMD_SETWAKEMASK 0x0007
297 #define CMD_READCFG 0x0008
298 #define CMD_SETMODE 0x0009
299 #define CMD_ALLOCATETX 0x000a
300 #define CMD_TRANSMIT 0x000b
301 #define CMD_DEALLOCATETX 0x000c
302 #define NOP 0x0010
303 #define CMD_WORKAROUND 0x0011
304 #define CMD_ALLOCATEAUX 0x0020
305 #define CMD_ACCESS 0x0021
306 #define CMD_PCIBAP 0x0022
307 #define CMD_PCIAUX 0x0023
308 #define CMD_ALLOCBUF 0x0028
309 #define CMD_GETTLV 0x0029
310 #define CMD_PUTTLV 0x002a
311 #define CMD_DELTLV 0x002b
312 #define CMD_FINDNEXTTLV 0x002c
313 #define CMD_PSPNODES 0x0030
314 #define CMD_SETCW 0x0031
315 #define CMD_SETPCF 0x0032
316 #define CMD_SETPHYREG 0x003e
317 #define CMD_TXTEST 0x003f
318 #define MAC_ENABLETX 0x0101
319 #define CMD_LISTBSS 0x0103
320 #define CMD_SAVECFG 0x0108
321 #define CMD_ENABLEAUX 0x0111
322 #define CMD_WRITERID 0x0121
323 #define CMD_USEPSPNODES 0x0130
324 #define MAC_ENABLERX 0x0201
325
326 /* Command errors */
327 #define ERROR_QUALIF 0x00
328 #define ERROR_ILLCMD 0x01
329 #define ERROR_ILLFMT 0x02
330 #define ERROR_INVFID 0x03
331 #define ERROR_INVRID 0x04
332 #define ERROR_LARGE 0x05
333 #define ERROR_NDISABL 0x06
334 #define ERROR_ALLOCBSY 0x07
335 #define ERROR_NORD 0x0B
336 #define ERROR_NOWR 0x0C
337 #define ERROR_INVFIDTX 0x0D
338 #define ERROR_TESTACT 0x0E
339 #define ERROR_TAGNFND 0x12
340 #define ERROR_DECODE 0x20
341 #define ERROR_DESCUNAV 0x21
342 #define ERROR_BADLEN 0x22
343 #define ERROR_MODE 0x80
344 #define ERROR_HOP 0x81
345 #define ERROR_BINTER 0x82
346 #define ERROR_RXMODE 0x83
347 #define ERROR_MACADDR 0x84
348 #define ERROR_RATES 0x85
349 #define ERROR_ORDER 0x86
350 #define ERROR_SCAN 0x87
351 #define ERROR_AUTH 0x88
352 #define ERROR_PSMODE 0x89
353 #define ERROR_RTYPE 0x8A
354 #define ERROR_DIVER 0x8B
355 #define ERROR_SSID 0x8C
356 #define ERROR_APLIST 0x8D
357 #define ERROR_AUTOWAKE 0x8E
358 #define ERROR_LEAP 0x8F
359
360 /* Registers */
361 #define COMMAND 0x00
362 #define PARAM0 0x02
363 #define PARAM1 0x04
364 #define PARAM2 0x06
365 #define STATUS 0x08
366 #define RESP0 0x0a
367 #define RESP1 0x0c
368 #define RESP2 0x0e
369 #define LINKSTAT 0x10
370 #define SELECT0 0x18
371 #define OFFSET0 0x1c
372 #define RXFID 0x20
373 #define TXALLOCFID 0x22
374 #define TXCOMPLFID 0x24
375 #define DATA0 0x36
376 #define EVSTAT 0x30
377 #define EVINTEN 0x32
378 #define EVACK 0x34
379 #define SWS0 0x28
380 #define SWS1 0x2a
381 #define SWS2 0x2c
382 #define SWS3 0x2e
383 #define AUXPAGE 0x3A
384 #define AUXOFF 0x3C
385 #define AUXDATA 0x3E
386
387 #define FID_TX 1
388 #define FID_RX 2
389 /* Offset into aux memory for descriptors */
390 #define AUX_OFFSET 0x800
391 /* Size of allocated packets */
392 #define PKTSIZE 1840
393 #define RIDSIZE 2048
394 /* Size of the transmit queue */
395 #define MAXTXQ 64
396
397 /* BAP selectors */
398 #define BAP0 0 // Used for receiving packets
399 #define BAP1 2 // Used for xmiting packets and working with RIDS
400
401 /* Flags */
402 #define COMMAND_BUSY 0x8000
403
404 #define BAP_BUSY 0x8000
405 #define BAP_ERR 0x4000
406 #define BAP_DONE 0x2000
407
408 #define PROMISC 0xffff
409 #define NOPROMISC 0x0000
410
411 #define EV_CMD 0x10
412 #define EV_CLEARCOMMANDBUSY 0x4000
413 #define EV_RX 0x01
414 #define EV_TX 0x02
415 #define EV_TXEXC 0x04
416 #define EV_ALLOC 0x08
417 #define EV_LINK 0x80
418 #define EV_AWAKE 0x100
419 #define EV_TXCPY 0x400
420 #define EV_UNKNOWN 0x800
421 #define EV_MIC 0x1000 /* Message Integrity Check Interrupt */
422 #define EV_AWAKEN 0x2000
423 #define STATUS_INTS (EV_AWAKE|EV_LINK|EV_TXEXC|EV_TX|EV_TXCPY|EV_RX|EV_MIC)
424
425 #ifdef CHECK_UNKNOWN_INTS
426 #define IGNORE_INTS ( EV_CMD | EV_UNKNOWN)
427 #else
428 #define IGNORE_INTS (~STATUS_INTS)
429 #endif
430
431 /* RID TYPES */
432 #define RID_RW 0x20
433
434 /* The RIDs */
435 #define RID_CAPABILITIES 0xFF00
436 #define RID_APINFO 0xFF01
437 #define RID_RADIOINFO 0xFF02
438 #define RID_UNKNOWN3 0xFF03
439 #define RID_RSSI 0xFF04
440 #define RID_CONFIG 0xFF10
441 #define RID_SSID 0xFF11
442 #define RID_APLIST 0xFF12
443 #define RID_DRVNAME 0xFF13
444 #define RID_ETHERENCAP 0xFF14
445 #define RID_WEP_TEMP 0xFF15
446 #define RID_WEP_PERM 0xFF16
447 #define RID_MODULATION 0xFF17
448 #define RID_OPTIONS 0xFF18
449 #define RID_ACTUALCONFIG 0xFF20 /*readonly*/
450 #define RID_FACTORYCONFIG 0xFF21
451 #define RID_UNKNOWN22 0xFF22
452 #define RID_LEAPUSERNAME 0xFF23
453 #define RID_LEAPPASSWORD 0xFF24
454 #define RID_STATUS 0xFF50
455 #define RID_BEACON_HST 0xFF51
456 #define RID_BUSY_HST 0xFF52
457 #define RID_RETRIES_HST 0xFF53
458 #define RID_UNKNOWN54 0xFF54
459 #define RID_UNKNOWN55 0xFF55
460 #define RID_UNKNOWN56 0xFF56
461 #define RID_MIC 0xFF57
462 #define RID_STATS16 0xFF60
463 #define RID_STATS16DELTA 0xFF61
464 #define RID_STATS16DELTACLEAR 0xFF62
465 #define RID_STATS 0xFF68
466 #define RID_STATSDELTA 0xFF69
467 #define RID_STATSDELTACLEAR 0xFF6A
468 #define RID_ECHOTEST_RID 0xFF70
469 #define RID_ECHOTEST_RESULTS 0xFF71
470 #define RID_BSSLISTFIRST 0xFF72
471 #define RID_BSSLISTNEXT 0xFF73
472 #define RID_WPA_BSSLISTFIRST 0xFF74
473 #define RID_WPA_BSSLISTNEXT 0xFF75
474
475 typedef struct {
476 u16 cmd;
477 u16 parm0;
478 u16 parm1;
479 u16 parm2;
480 } Cmd;
481
482 typedef struct {
483 u16 status;
484 u16 rsp0;
485 u16 rsp1;
486 u16 rsp2;
487 } Resp;
488
489 /*
490 * Rids and endian-ness: The Rids will always be in cpu endian, since
491 * this all the patches from the big-endian guys end up doing that.
492 * so all rid access should use the read/writeXXXRid routines.
493 */
494
495 /* This is redundant for x86 archs, but it seems necessary for ARM */
496 #pragma pack(1)
497
498 /* This structure came from an email sent to me from an engineer at
499 aironet for inclusion into this driver */
500 typedef struct {
501 u16 len;
502 u16 kindex;
503 u8 mac[ETH_ALEN];
504 u16 klen;
505 u8 key[16];
506 } WepKeyRid;
507
508 /* These structures are from the Aironet's PC4500 Developers Manual */
509 typedef struct {
510 u16 len;
511 u8 ssid[32];
512 } Ssid;
513
514 typedef struct {
515 u16 len;
516 Ssid ssids[3];
517 } SsidRid;
518
519 typedef struct {
520 u16 len;
521 u16 modulation;
522 #define MOD_DEFAULT 0
523 #define MOD_CCK 1
524 #define MOD_MOK 2
525 } ModulationRid;
526
527 typedef struct {
528 u16 len; /* sizeof(ConfigRid) */
529 u16 opmode; /* operating mode */
530 #define MODE_STA_IBSS 0
531 #define MODE_STA_ESS 1
532 #define MODE_AP 2
533 #define MODE_AP_RPTR 3
534 #define MODE_ETHERNET_HOST (0<<8) /* rx payloads converted */
535 #define MODE_LLC_HOST (1<<8) /* rx payloads left as is */
536 #define MODE_AIRONET_EXTEND (1<<9) /* enable Aironet extenstions */
537 #define MODE_AP_INTERFACE (1<<10) /* enable ap interface extensions */
538 #define MODE_ANTENNA_ALIGN (1<<11) /* enable antenna alignment */
539 #define MODE_ETHER_LLC (1<<12) /* enable ethernet LLC */
540 #define MODE_LEAF_NODE (1<<13) /* enable leaf node bridge */
541 #define MODE_CF_POLLABLE (1<<14) /* enable CF pollable */
542 #define MODE_MIC (1<<15) /* enable MIC */
543 u16 rmode; /* receive mode */
544 #define RXMODE_BC_MC_ADDR 0
545 #define RXMODE_BC_ADDR 1 /* ignore multicasts */
546 #define RXMODE_ADDR 2 /* ignore multicast and broadcast */
547 #define RXMODE_RFMON 3 /* wireless monitor mode */
548 #define RXMODE_RFMON_ANYBSS 4
549 #define RXMODE_LANMON 5 /* lan style monitor -- data packets only */
550 #define RXMODE_DISABLE_802_3_HEADER (1<<8) /* disables 802.3 header on rx */
551 #define RXMODE_NORMALIZED_RSSI (1<<9) /* return normalized RSSI */
552 u16 fragThresh;
553 u16 rtsThres;
554 u8 macAddr[ETH_ALEN];
555 u8 rates[8];
556 u16 shortRetryLimit;
557 u16 longRetryLimit;
558 u16 txLifetime; /* in kusec */
559 u16 rxLifetime; /* in kusec */
560 u16 stationary;
561 u16 ordering;
562 u16 u16deviceType; /* for overriding device type */
563 u16 cfpRate;
564 u16 cfpDuration;
565 u16 _reserved1[3];
566 /*---------- Scanning/Associating ----------*/
567 u16 scanMode;
568 #define SCANMODE_ACTIVE 0
569 #define SCANMODE_PASSIVE 1
570 #define SCANMODE_AIROSCAN 2
571 u16 probeDelay; /* in kusec */
572 u16 probeEnergyTimeout; /* in kusec */
573 u16 probeResponseTimeout;
574 u16 beaconListenTimeout;
575 u16 joinNetTimeout;
576 u16 authTimeout;
577 u16 authType;
578 #define AUTH_OPEN 0x1
579 #define AUTH_ENCRYPT 0x101
580 #define AUTH_SHAREDKEY 0x102
581 #define AUTH_ALLOW_UNENCRYPTED 0x200
582 u16 associationTimeout;
583 u16 specifiedApTimeout;
584 u16 offlineScanInterval;
585 u16 offlineScanDuration;
586 u16 linkLossDelay;
587 u16 maxBeaconLostTime;
588 u16 refreshInterval;
589 #define DISABLE_REFRESH 0xFFFF
590 u16 _reserved1a[1];
591 /*---------- Power save operation ----------*/
592 u16 powerSaveMode;
593 #define POWERSAVE_CAM 0
594 #define POWERSAVE_PSP 1
595 #define POWERSAVE_PSPCAM 2
596 u16 sleepForDtims;
597 u16 listenInterval;
598 u16 fastListenInterval;
599 u16 listenDecay;
600 u16 fastListenDelay;
601 u16 _reserved2[2];
602 /*---------- Ap/Ibss config items ----------*/
603 u16 beaconPeriod;
604 u16 atimDuration;
605 u16 hopPeriod;
606 u16 channelSet;
607 u16 channel;
608 u16 dtimPeriod;
609 u16 bridgeDistance;
610 u16 radioID;
611 /*---------- Radio configuration ----------*/
612 u16 radioType;
613 #define RADIOTYPE_DEFAULT 0
614 #define RADIOTYPE_802_11 1
615 #define RADIOTYPE_LEGACY 2
616 u8 rxDiversity;
617 u8 txDiversity;
618 u16 txPower;
619 #define TXPOWER_DEFAULT 0
620 u16 rssiThreshold;
621 #define RSSI_DEFAULT 0
622 u16 modulation;
623 #define PREAMBLE_AUTO 0
624 #define PREAMBLE_LONG 1
625 #define PREAMBLE_SHORT 2
626 u16 preamble;
627 u16 homeProduct;
628 u16 radioSpecific;
629 /*---------- Aironet Extensions ----------*/
630 u8 nodeName[16];
631 u16 arlThreshold;
632 u16 arlDecay;
633 u16 arlDelay;
634 u16 _reserved4[1];
635 /*---------- Aironet Extensions ----------*/
636 u8 magicAction;
637 #define MAGIC_ACTION_STSCHG 1
638 #define MAGIC_ACTION_RESUME 2
639 #define MAGIC_IGNORE_MCAST (1<<8)
640 #define MAGIC_IGNORE_BCAST (1<<9)
641 #define MAGIC_SWITCH_TO_PSP (0<<10)
642 #define MAGIC_STAY_IN_CAM (1<<10)
643 u8 magicControl;
644 u16 autoWake;
645 } ConfigRid;
646
647 typedef struct {
648 u16 len;
649 u8 mac[ETH_ALEN];
650 u16 mode;
651 u16 errorCode;
652 u16 sigQuality;
653 u16 SSIDlen;
654 char SSID[32];
655 char apName[16];
656 u8 bssid[4][ETH_ALEN];
657 u16 beaconPeriod;
658 u16 dimPeriod;
659 u16 atimDuration;
660 u16 hopPeriod;
661 u16 channelSet;
662 u16 channel;
663 u16 hopsToBackbone;
664 u16 apTotalLoad;
665 u16 generatedLoad;
666 u16 accumulatedArl;
667 u16 signalQuality;
668 u16 currentXmitRate;
669 u16 apDevExtensions;
670 u16 normalizedSignalStrength;
671 u16 shortPreamble;
672 u8 apIP[4];
673 u8 noisePercent; /* Noise percent in last second */
674 u8 noisedBm; /* Noise dBm in last second */
675 u8 noiseAvePercent; /* Noise percent in last minute */
676 u8 noiseAvedBm; /* Noise dBm in last minute */
677 u8 noiseMaxPercent; /* Highest noise percent in last minute */
678 u8 noiseMaxdBm; /* Highest noise dbm in last minute */
679 u16 load;
680 u8 carrier[4];
681 u16 assocStatus;
682 #define STAT_NOPACKETS 0
683 #define STAT_NOCARRIERSET 10
684 #define STAT_GOTCARRIERSET 11
685 #define STAT_WRONGSSID 20
686 #define STAT_BADCHANNEL 25
687 #define STAT_BADBITRATES 30
688 #define STAT_BADPRIVACY 35
689 #define STAT_APFOUND 40
690 #define STAT_APREJECTED 50
691 #define STAT_AUTHENTICATING 60
692 #define STAT_DEAUTHENTICATED 61
693 #define STAT_AUTHTIMEOUT 62
694 #define STAT_ASSOCIATING 70
695 #define STAT_DEASSOCIATED 71
696 #define STAT_ASSOCTIMEOUT 72
697 #define STAT_NOTAIROAP 73
698 #define STAT_ASSOCIATED 80
699 #define STAT_LEAPING 90
700 #define STAT_LEAPFAILED 91
701 #define STAT_LEAPTIMEDOUT 92
702 #define STAT_LEAPCOMPLETE 93
703 } StatusRid;
704
705 typedef struct {
706 u16 len;
707 u16 spacer;
708 u32 vals[100];
709 } StatsRid;
710
711
712 typedef struct {
713 u16 len;
714 u8 ap[4][ETH_ALEN];
715 } APListRid;
716
717 typedef struct {
718 u16 len;
719 char oui[3];
720 char zero;
721 u16 prodNum;
722 char manName[32];
723 char prodName[16];
724 char prodVer[8];
725 char factoryAddr[ETH_ALEN];
726 char aironetAddr[ETH_ALEN];
727 u16 radioType;
728 u16 country;
729 char callid[ETH_ALEN];
730 char supportedRates[8];
731 char rxDiversity;
732 char txDiversity;
733 u16 txPowerLevels[8];
734 u16 hardVer;
735 u16 hardCap;
736 u16 tempRange;
737 u16 softVer;
738 u16 softSubVer;
739 u16 interfaceVer;
740 u16 softCap;
741 u16 bootBlockVer;
742 u16 requiredHard;
743 u16 extSoftCap;
744 } CapabilityRid;
745
746
747 /* Only present on firmware >= 5.30.17 */
748 typedef struct {
749 u16 unknown[4];
750 u8 fixed[12]; /* WLAN management frame */
751 u8 iep[624];
752 } BSSListRidExtra;
753
754 typedef struct {
755 u16 len;
756 u16 index; /* First is 0 and 0xffff means end of list */
757 #define RADIO_FH 1 /* Frequency hopping radio type */
758 #define RADIO_DS 2 /* Direct sequence radio type */
759 #define RADIO_TMA 4 /* Proprietary radio used in old cards (2500) */
760 u16 radioType;
761 u8 bssid[ETH_ALEN]; /* Mac address of the BSS */
762 u8 zero;
763 u8 ssidLen;
764 u8 ssid[32];
765 u16 dBm;
766 #define CAP_ESS (1<<0)
767 #define CAP_IBSS (1<<1)
768 #define CAP_PRIVACY (1<<4)
769 #define CAP_SHORTHDR (1<<5)
770 u16 cap;
771 u16 beaconInterval;
772 u8 rates[8]; /* Same as rates for config rid */
773 struct { /* For frequency hopping only */
774 u16 dwell;
775 u8 hopSet;
776 u8 hopPattern;
777 u8 hopIndex;
778 u8 fill;
779 } fh;
780 u16 dsChannel;
781 u16 atimWindow;
782
783 /* Only present on firmware >= 5.30.17 */
784 BSSListRidExtra extra;
785 } BSSListRid;
786
787 typedef struct {
788 BSSListRid bss;
789 struct list_head list;
790 } BSSListElement;
791
792 typedef struct {
793 u8 rssipct;
794 u8 rssidBm;
795 } tdsRssiEntry;
796
797 typedef struct {
798 u16 len;
799 tdsRssiEntry x[256];
800 } tdsRssiRid;
801
802 typedef struct {
803 u16 len;
804 u16 state;
805 u16 multicastValid;
806 u8 multicast[16];
807 u16 unicastValid;
808 u8 unicast[16];
809 } MICRid;
810
811 typedef struct {
812 u16 typelen;
813
814 union {
815 u8 snap[8];
816 struct {
817 u8 dsap;
818 u8 ssap;
819 u8 control;
820 u8 orgcode[3];
821 u8 fieldtype[2];
822 } llc;
823 } u;
824 u32 mic;
825 u32 seq;
826 } MICBuffer;
827
828 typedef struct {
829 u8 da[ETH_ALEN];
830 u8 sa[ETH_ALEN];
831 } etherHead;
832
833 #pragma pack()
834
835 #define TXCTL_TXOK (1<<1) /* report if tx is ok */
836 #define TXCTL_TXEX (1<<2) /* report if tx fails */
837 #define TXCTL_802_3 (0<<3) /* 802.3 packet */
838 #define TXCTL_802_11 (1<<3) /* 802.11 mac packet */
839 #define TXCTL_ETHERNET (0<<4) /* payload has ethertype */
840 #define TXCTL_LLC (1<<4) /* payload is llc */
841 #define TXCTL_RELEASE (0<<5) /* release after completion */
842 #define TXCTL_NORELEASE (1<<5) /* on completion returns to host */
843
844 #define BUSY_FID 0x10000
845
846 #ifdef CISCO_EXT
847 #define AIROMAGIC 0xa55a
848 /* Warning : SIOCDEVPRIVATE may disapear during 2.5.X - Jean II */
849 #ifdef SIOCIWFIRSTPRIV
850 #ifdef SIOCDEVPRIVATE
851 #define AIROOLDIOCTL SIOCDEVPRIVATE
852 #define AIROOLDIDIFC AIROOLDIOCTL + 1
853 #endif /* SIOCDEVPRIVATE */
854 #else /* SIOCIWFIRSTPRIV */
855 #define SIOCIWFIRSTPRIV SIOCDEVPRIVATE
856 #endif /* SIOCIWFIRSTPRIV */
857 /* This may be wrong. When using the new SIOCIWFIRSTPRIV range, we probably
858 * should use only "GET" ioctls (last bit set to 1). "SET" ioctls are root
859 * only and don't return the modified struct ifreq to the application which
860 * is usually a problem. - Jean II */
861 #define AIROIOCTL SIOCIWFIRSTPRIV
862 #define AIROIDIFC AIROIOCTL + 1
863
864 /* Ioctl constants to be used in airo_ioctl.command */
865
866 #define AIROGCAP 0 // Capability rid
867 #define AIROGCFG 1 // USED A LOT
868 #define AIROGSLIST 2 // System ID list
869 #define AIROGVLIST 3 // List of specified AP's
870 #define AIROGDRVNAM 4 // NOTUSED
871 #define AIROGEHTENC 5 // NOTUSED
872 #define AIROGWEPKTMP 6
873 #define AIROGWEPKNV 7
874 #define AIROGSTAT 8
875 #define AIROGSTATSC32 9
876 #define AIROGSTATSD32 10
877 #define AIROGMICRID 11
878 #define AIROGMICSTATS 12
879 #define AIROGFLAGS 13
880 #define AIROGID 14
881 #define AIRORRID 15
882 #define AIRORSWVERSION 17
883
884 /* Leave gap of 40 commands after AIROGSTATSD32 for future */
885
886 #define AIROPCAP AIROGSTATSD32 + 40
887 #define AIROPVLIST AIROPCAP + 1
888 #define AIROPSLIST AIROPVLIST + 1
889 #define AIROPCFG AIROPSLIST + 1
890 #define AIROPSIDS AIROPCFG + 1
891 #define AIROPAPLIST AIROPSIDS + 1
892 #define AIROPMACON AIROPAPLIST + 1 /* Enable mac */
893 #define AIROPMACOFF AIROPMACON + 1 /* Disable mac */
894 #define AIROPSTCLR AIROPMACOFF + 1
895 #define AIROPWEPKEY AIROPSTCLR + 1
896 #define AIROPWEPKEYNV AIROPWEPKEY + 1
897 #define AIROPLEAPPWD AIROPWEPKEYNV + 1
898 #define AIROPLEAPUSR AIROPLEAPPWD + 1
899
900 /* Flash codes */
901
902 #define AIROFLSHRST AIROPWEPKEYNV + 40
903 #define AIROFLSHGCHR AIROFLSHRST + 1
904 #define AIROFLSHSTFL AIROFLSHGCHR + 1
905 #define AIROFLSHPCHR AIROFLSHSTFL + 1
906 #define AIROFLPUTBUF AIROFLSHPCHR + 1
907 #define AIRORESTART AIROFLPUTBUF + 1
908
909 #define FLASHSIZE 32768
910 #define AUXMEMSIZE (256 * 1024)
911
912 typedef struct aironet_ioctl {
913 unsigned short command; // What to do
914 unsigned short len; // Len of data
915 unsigned short ridnum; // rid number
916 unsigned char __user *data; // d-data
917 } aironet_ioctl;
918
919 static char swversion[] = "2.1";
920 #endif /* CISCO_EXT */
921
922 #define NUM_MODULES 2
923 #define MIC_MSGLEN_MAX 2400
924 #define EMMH32_MSGLEN_MAX MIC_MSGLEN_MAX
925 #define AIRO_DEF_MTU 2312
926
927 typedef struct {
928 u32 size; // size
929 u8 enabled; // MIC enabled or not
930 u32 rxSuccess; // successful packets received
931 u32 rxIncorrectMIC; // pkts dropped due to incorrect MIC comparison
932 u32 rxNotMICed; // pkts dropped due to not being MIC'd
933 u32 rxMICPlummed; // pkts dropped due to not having a MIC plummed
934 u32 rxWrongSequence; // pkts dropped due to sequence number violation
935 u32 reserve[32];
936 } mic_statistics;
937
938 typedef struct {
939 u32 coeff[((EMMH32_MSGLEN_MAX)+3)>>2];
940 u64 accum; // accumulated mic, reduced to u32 in final()
941 int position; // current position (byte offset) in message
942 union {
943 u8 d8[4];
944 u32 d32;
945 } part; // saves partial message word across update() calls
946 } emmh32_context;
947
948 typedef struct {
949 emmh32_context seed; // Context - the seed
950 u32 rx; // Received sequence number
951 u32 tx; // Tx sequence number
952 u32 window; // Start of window
953 u8 valid; // Flag to say if context is valid or not
954 u8 key[16];
955 } miccntx;
956
957 typedef struct {
958 miccntx mCtx; // Multicast context
959 miccntx uCtx; // Unicast context
960 } mic_module;
961
962 typedef struct {
963 unsigned int rid: 16;
964 unsigned int len: 15;
965 unsigned int valid: 1;
966 dma_addr_t host_addr;
967 } Rid;
968
969 typedef struct {
970 unsigned int offset: 15;
971 unsigned int eoc: 1;
972 unsigned int len: 15;
973 unsigned int valid: 1;
974 dma_addr_t host_addr;
975 } TxFid;
976
977 typedef struct {
978 unsigned int ctl: 15;
979 unsigned int rdy: 1;
980 unsigned int len: 15;
981 unsigned int valid: 1;
982 dma_addr_t host_addr;
983 } RxFid;
984
985 /*
986 * Host receive descriptor
987 */
988 typedef struct {
989 unsigned char __iomem *card_ram_off; /* offset into card memory of the
990 desc */
991 RxFid rx_desc; /* card receive descriptor */
992 char *virtual_host_addr; /* virtual address of host receive
993 buffer */
994 int pending;
995 } HostRxDesc;
996
997 /*
998 * Host transmit descriptor
999 */
1000 typedef struct {
1001 unsigned char __iomem *card_ram_off; /* offset into card memory of the
1002 desc */
1003 TxFid tx_desc; /* card transmit descriptor */
1004 char *virtual_host_addr; /* virtual address of host receive
1005 buffer */
1006 int pending;
1007 } HostTxDesc;
1008
1009 /*
1010 * Host RID descriptor
1011 */
1012 typedef struct {
1013 unsigned char __iomem *card_ram_off; /* offset into card memory of the
1014 descriptor */
1015 Rid rid_desc; /* card RID descriptor */
1016 char *virtual_host_addr; /* virtual address of host receive
1017 buffer */
1018 } HostRidDesc;
1019
1020 typedef struct {
1021 u16 sw0;
1022 u16 sw1;
1023 u16 status;
1024 u16 len;
1025 #define HOST_SET (1 << 0)
1026 #define HOST_INT_TX (1 << 1) /* Interrupt on successful TX */
1027 #define HOST_INT_TXERR (1 << 2) /* Interrupt on unseccessful TX */
1028 #define HOST_LCC_PAYLOAD (1 << 4) /* LLC payload, 0 = Ethertype */
1029 #define HOST_DONT_RLSE (1 << 5) /* Don't release buffer when done */
1030 #define HOST_DONT_RETRY (1 << 6) /* Don't retry trasmit */
1031 #define HOST_CLR_AID (1 << 7) /* clear AID failure */
1032 #define HOST_RTS (1 << 9) /* Force RTS use */
1033 #define HOST_SHORT (1 << 10) /* Do short preamble */
1034 u16 ctl;
1035 u16 aid;
1036 u16 retries;
1037 u16 fill;
1038 } TxCtlHdr;
1039
1040 typedef struct {
1041 u16 ctl;
1042 u16 duration;
1043 char addr1[6];
1044 char addr2[6];
1045 char addr3[6];
1046 u16 seq;
1047 char addr4[6];
1048 } WifiHdr;
1049
1050
1051 typedef struct {
1052 TxCtlHdr ctlhdr;
1053 u16 fill1;
1054 u16 fill2;
1055 WifiHdr wifihdr;
1056 u16 gaplen;
1057 u16 status;
1058 } WifiCtlHdr;
1059
1060 static WifiCtlHdr wifictlhdr8023 = {
1061 .ctlhdr = {
1062 .ctl = HOST_DONT_RLSE,
1063 }
1064 };
1065
1066 // Frequency list (map channels to frequencies)
1067 static const long frequency_list[] = { 2412, 2417, 2422, 2427, 2432, 2437, 2442,
1068 2447, 2452, 2457, 2462, 2467, 2472, 2484 };
1069
1070 // A few details needed for WEP (Wireless Equivalent Privacy)
1071 #define MAX_KEY_SIZE 13 // 128 (?) bits
1072 #define MIN_KEY_SIZE 5 // 40 bits RC4 - WEP
1073 typedef struct wep_key_t {
1074 u16 len;
1075 u8 key[16]; /* 40-bit and 104-bit keys */
1076 } wep_key_t;
1077
1078 /* Backward compatibility */
1079 #ifndef IW_ENCODE_NOKEY
1080 #define IW_ENCODE_NOKEY 0x0800 /* Key is write only, so not present */
1081 #define IW_ENCODE_MODE (IW_ENCODE_DISABLED | IW_ENCODE_RESTRICTED | IW_ENCODE_OPEN)
1082 #endif /* IW_ENCODE_NOKEY */
1083
1084 /* List of Wireless Handlers (new API) */
1085 static const struct iw_handler_def airo_handler_def;
1086
1087 static const char version[] = "airo.c 0.6 (Ben Reed & Javier Achirica)";
1088
1089 struct airo_info;
1090
1091 static int get_dec_u16( char *buffer, int *start, int limit );
1092 static void OUT4500( struct airo_info *, u16 register, u16 value );
1093 static unsigned short IN4500( struct airo_info *, u16 register );
1094 static u16 setup_card(struct airo_info*, u8 *mac, int lock);
1095 static int enable_MAC( struct airo_info *ai, Resp *rsp, int lock );
1096 static void disable_MAC(struct airo_info *ai, int lock);
1097 static void enable_interrupts(struct airo_info*);
1098 static void disable_interrupts(struct airo_info*);
1099 static u16 issuecommand(struct airo_info*, Cmd *pCmd, Resp *pRsp);
1100 static int bap_setup(struct airo_info*, u16 rid, u16 offset, int whichbap);
1101 static int aux_bap_read(struct airo_info*, u16 *pu16Dst, int bytelen,
1102 int whichbap);
1103 static int fast_bap_read(struct airo_info*, u16 *pu16Dst, int bytelen,
1104 int whichbap);
1105 static int bap_write(struct airo_info*, const u16 *pu16Src, int bytelen,
1106 int whichbap);
1107 static int PC4500_accessrid(struct airo_info*, u16 rid, u16 accmd);
1108 static int PC4500_readrid(struct airo_info*, u16 rid, void *pBuf, int len, int lock);
1109 static int PC4500_writerid(struct airo_info*, u16 rid, const void
1110 *pBuf, int len, int lock);
1111 static int do_writerid( struct airo_info*, u16 rid, const void *rid_data,
1112 int len, int dummy );
1113 static u16 transmit_allocate(struct airo_info*, int lenPayload, int raw);
1114 static int transmit_802_3_packet(struct airo_info*, int len, char *pPacket);
1115 static int transmit_802_11_packet(struct airo_info*, int len, char *pPacket);
1116
1117 static int mpi_send_packet (struct net_device *dev);
1118 static void mpi_unmap_card(struct pci_dev *pci);
1119 static void mpi_receive_802_3(struct airo_info *ai);
1120 static void mpi_receive_802_11(struct airo_info *ai);
1121 static int waitbusy (struct airo_info *ai);
1122
1123 static irqreturn_t airo_interrupt( int irq, void* dev_id);
1124 static int airo_thread(void *data);
1125 static void timer_func( struct net_device *dev );
1126 static int airo_ioctl(struct net_device *dev, struct ifreq *rq, int cmd);
1127 static struct iw_statistics *airo_get_wireless_stats (struct net_device *dev);
1128 static void airo_read_wireless_stats (struct airo_info *local);
1129 #ifdef CISCO_EXT
1130 static int readrids(struct net_device *dev, aironet_ioctl *comp);
1131 static int writerids(struct net_device *dev, aironet_ioctl *comp);
1132 static int flashcard(struct net_device *dev, aironet_ioctl *comp);
1133 #endif /* CISCO_EXT */
1134 static void micinit(struct airo_info *ai);
1135 static int micsetup(struct airo_info *ai);
1136 static int encapsulate(struct airo_info *ai, etherHead *pPacket, MICBuffer *buffer, int len);
1137 static int decapsulate(struct airo_info *ai, MICBuffer *mic, etherHead *pPacket, u16 payLen);
1138
1139 static u8 airo_rssi_to_dbm (tdsRssiEntry *rssi_rid, u8 rssi);
1140 static u8 airo_dbm_to_pct (tdsRssiEntry *rssi_rid, u8 dbm);
1141
1142 static void airo_networks_free(struct airo_info *ai);
1143
1144 struct airo_info {
1145 struct net_device_stats stats;
1146 struct net_device *dev;
1147 /* Note, we can have MAX_FIDS outstanding. FIDs are 16-bits, so we
1148 use the high bit to mark whether it is in use. */
1149 #define MAX_FIDS 6
1150 #define MPI_MAX_FIDS 1
1151 int fids[MAX_FIDS];
1152 ConfigRid config;
1153 char keyindex; // Used with auto wep
1154 char defindex; // Used with auto wep
1155 struct proc_dir_entry *proc_entry;
1156 spinlock_t aux_lock;
1157 #define FLAG_RADIO_OFF 0 /* User disabling of MAC */
1158 #define FLAG_RADIO_DOWN 1 /* ifup/ifdown disabling of MAC */
1159 #define FLAG_RADIO_MASK 0x03
1160 #define FLAG_ENABLED 2
1161 #define FLAG_ADHOC 3 /* Needed by MIC */
1162 #define FLAG_MIC_CAPABLE 4
1163 #define FLAG_UPDATE_MULTI 5
1164 #define FLAG_UPDATE_UNI 6
1165 #define FLAG_802_11 7
1166 #define FLAG_PROMISC 8 /* IFF_PROMISC 0x100 - include/linux/if.h */
1167 #define FLAG_PENDING_XMIT 9
1168 #define FLAG_PENDING_XMIT11 10
1169 #define FLAG_MPI 11
1170 #define FLAG_REGISTERED 12
1171 #define FLAG_COMMIT 13
1172 #define FLAG_RESET 14
1173 #define FLAG_FLASHING 15
1174 #define FLAG_WPA_CAPABLE 16
1175 unsigned long flags;
1176 #define JOB_DIE 0
1177 #define JOB_XMIT 1
1178 #define JOB_XMIT11 2
1179 #define JOB_STATS 3
1180 #define JOB_PROMISC 4
1181 #define JOB_MIC 5
1182 #define JOB_EVENT 6
1183 #define JOB_AUTOWEP 7
1184 #define JOB_WSTATS 8
1185 #define JOB_SCAN_RESULTS 9
1186 unsigned long jobs;
1187 int (*bap_read)(struct airo_info*, u16 *pu16Dst, int bytelen,
1188 int whichbap);
1189 unsigned short *flash;
1190 tdsRssiEntry *rssi;
1191 struct task_struct *list_bss_task;
1192 struct task_struct *airo_thread_task;
1193 struct semaphore sem;
1194 wait_queue_head_t thr_wait;
1195 unsigned long expires;
1196 struct {
1197 struct sk_buff *skb;
1198 int fid;
1199 } xmit, xmit11;
1200 struct net_device *wifidev;
1201 struct iw_statistics wstats; // wireless stats
1202 unsigned long scan_timeout; /* Time scan should be read */
1203 struct iw_spy_data spy_data;
1204 struct iw_public_data wireless_data;
1205 /* MIC stuff */
1206 struct crypto_cipher *tfm;
1207 mic_module mod[2];
1208 mic_statistics micstats;
1209 HostRxDesc rxfids[MPI_MAX_FIDS]; // rx/tx/config MPI350 descriptors
1210 HostTxDesc txfids[MPI_MAX_FIDS];
1211 HostRidDesc config_desc;
1212 unsigned long ridbus; // phys addr of config_desc
1213 struct sk_buff_head txq;// tx queue used by mpi350 code
1214 struct pci_dev *pci;
1215 unsigned char __iomem *pcimem;
1216 unsigned char __iomem *pciaux;
1217 unsigned char *shared;
1218 dma_addr_t shared_dma;
1219 pm_message_t power;
1220 SsidRid *SSID;
1221 APListRid *APList;
1222 #define PCI_SHARED_LEN 2*MPI_MAX_FIDS*PKTSIZE+RIDSIZE
1223 char proc_name[IFNAMSIZ];
1224
1225 /* WPA-related stuff */
1226 unsigned int bssListFirst;
1227 unsigned int bssListNext;
1228 unsigned int bssListRidLen;
1229
1230 struct list_head network_list;
1231 struct list_head network_free_list;
1232 BSSListElement *networks;
1233 };
1234
1235 static inline int bap_read(struct airo_info *ai, u16 *pu16Dst, int bytelen,
1236 int whichbap) {
1237 return ai->bap_read(ai, pu16Dst, bytelen, whichbap);
1238 }
1239
1240 static int setup_proc_entry( struct net_device *dev,
1241 struct airo_info *apriv );
1242 static int takedown_proc_entry( struct net_device *dev,
1243 struct airo_info *apriv );
1244
1245 static int cmdreset(struct airo_info *ai);
1246 static int setflashmode (struct airo_info *ai);
1247 static int flashgchar(struct airo_info *ai,int matchbyte,int dwelltime);
1248 static int flashputbuf(struct airo_info *ai);
1249 static int flashrestart(struct airo_info *ai,struct net_device *dev);
1250
1251 #define airo_print(type, name, fmt, args...) \
1252 { printk(type "airo(%s): " fmt "\n", name, ##args); }
1253
1254 #define airo_print_info(name, fmt, args...) \
1255 airo_print(KERN_INFO, name, fmt, ##args)
1256
1257 #define airo_print_dbg(name, fmt, args...) \
1258 airo_print(KERN_DEBUG, name, fmt, ##args)
1259
1260 #define airo_print_warn(name, fmt, args...) \
1261 airo_print(KERN_WARNING, name, fmt, ##args)
1262
1263 #define airo_print_err(name, fmt, args...) \
1264 airo_print(KERN_ERR, name, fmt, ##args)
1265
1266
1267 /***********************************************************************
1268 * MIC ROUTINES *
1269 ***********************************************************************
1270 */
1271
1272 static int RxSeqValid (struct airo_info *ai,miccntx *context,int mcast,u32 micSeq);
1273 static void MoveWindow(miccntx *context, u32 micSeq);
1274 static void emmh32_setseed(emmh32_context *context, u8 *pkey, int keylen,
1275 struct crypto_cipher *tfm);
1276 static void emmh32_init(emmh32_context *context);
1277 static void emmh32_update(emmh32_context *context, u8 *pOctets, int len);
1278 static void emmh32_final(emmh32_context *context, u8 digest[4]);
1279 static int flashpchar(struct airo_info *ai,int byte,int dwelltime);
1280
1281 /* micinit - Initialize mic seed */
1282
1283 static void micinit(struct airo_info *ai)
1284 {
1285 MICRid mic_rid;
1286
1287 clear_bit(JOB_MIC, &ai->jobs);
1288 PC4500_readrid(ai, RID_MIC, &mic_rid, sizeof(mic_rid), 0);
1289 up(&ai->sem);
1290
1291 ai->micstats.enabled = (mic_rid.state & 0x00FF) ? 1 : 0;
1292
1293 if (ai->micstats.enabled) {
1294 /* Key must be valid and different */
1295 if (mic_rid.multicastValid && (!ai->mod[0].mCtx.valid ||
1296 (memcmp (ai->mod[0].mCtx.key, mic_rid.multicast,
1297 sizeof(ai->mod[0].mCtx.key)) != 0))) {
1298 /* Age current mic Context */
1299 memcpy(&ai->mod[1].mCtx,&ai->mod[0].mCtx,sizeof(miccntx));
1300 /* Initialize new context */
1301 memcpy(&ai->mod[0].mCtx.key,mic_rid.multicast,sizeof(mic_rid.multicast));
1302 ai->mod[0].mCtx.window = 33; //Window always points to the middle
1303 ai->mod[0].mCtx.rx = 0; //Rx Sequence numbers
1304 ai->mod[0].mCtx.tx = 0; //Tx sequence numbers
1305 ai->mod[0].mCtx.valid = 1; //Key is now valid
1306
1307 /* Give key to mic seed */
1308 emmh32_setseed(&ai->mod[0].mCtx.seed,mic_rid.multicast,sizeof(mic_rid.multicast), ai->tfm);
1309 }
1310
1311 /* Key must be valid and different */
1312 if (mic_rid.unicastValid && (!ai->mod[0].uCtx.valid ||
1313 (memcmp(ai->mod[0].uCtx.key, mic_rid.unicast,
1314 sizeof(ai->mod[0].uCtx.key)) != 0))) {
1315 /* Age current mic Context */
1316 memcpy(&ai->mod[1].uCtx,&ai->mod[0].uCtx,sizeof(miccntx));
1317 /* Initialize new context */
1318 memcpy(&ai->mod[0].uCtx.key,mic_rid.unicast,sizeof(mic_rid.unicast));
1319
1320 ai->mod[0].uCtx.window = 33; //Window always points to the middle
1321 ai->mod[0].uCtx.rx = 0; //Rx Sequence numbers
1322 ai->mod[0].uCtx.tx = 0; //Tx sequence numbers
1323 ai->mod[0].uCtx.valid = 1; //Key is now valid
1324
1325 //Give key to mic seed
1326 emmh32_setseed(&ai->mod[0].uCtx.seed, mic_rid.unicast, sizeof(mic_rid.unicast), ai->tfm);
1327 }
1328 } else {
1329 /* So next time we have a valid key and mic is enabled, we will update
1330 * the sequence number if the key is the same as before.
1331 */
1332 ai->mod[0].uCtx.valid = 0;
1333 ai->mod[0].mCtx.valid = 0;
1334 }
1335 }
1336
1337 /* micsetup - Get ready for business */
1338
1339 static int micsetup(struct airo_info *ai) {
1340 int i;
1341
1342 if (ai->tfm == NULL)
1343 ai->tfm = crypto_alloc_cipher("aes", 0, CRYPTO_ALG_ASYNC);
1344
1345 if (IS_ERR(ai->tfm)) {
1346 airo_print_err(ai->dev->name, "failed to load transform for AES");
1347 ai->tfm = NULL;
1348 return ERROR;
1349 }
1350
1351 for (i=0; i < NUM_MODULES; i++) {
1352 memset(&ai->mod[i].mCtx,0,sizeof(miccntx));
1353 memset(&ai->mod[i].uCtx,0,sizeof(miccntx));
1354 }
1355 return SUCCESS;
1356 }
1357
1358 static char micsnap[] = {0xAA,0xAA,0x03,0x00,0x40,0x96,0x00,0x02};
1359
1360 /*===========================================================================
1361 * Description: Mic a packet
1362 *
1363 * Inputs: etherHead * pointer to an 802.3 frame
1364 *
1365 * Returns: BOOLEAN if successful, otherwise false.
1366 * PacketTxLen will be updated with the mic'd packets size.
1367 *
1368 * Caveats: It is assumed that the frame buffer will already
1369 * be big enough to hold the largets mic message possible.
1370 * (No memory allocation is done here).
1371 *
1372 * Author: sbraneky (10/15/01)
1373 * Merciless hacks by rwilcher (1/14/02)
1374 */
1375
1376 static int encapsulate(struct airo_info *ai ,etherHead *frame, MICBuffer *mic, int payLen)
1377 {
1378 miccntx *context;
1379
1380 // Determine correct context
1381 // If not adhoc, always use unicast key
1382
1383 if (test_bit(FLAG_ADHOC, &ai->flags) && (frame->da[0] & 0x1))
1384 context = &ai->mod[0].mCtx;
1385 else
1386 context = &ai->mod[0].uCtx;
1387
1388 if (!context->valid)
1389 return ERROR;
1390
1391 mic->typelen = htons(payLen + 16); //Length of Mic'd packet
1392
1393 memcpy(&mic->u.snap, micsnap, sizeof(micsnap)); // Add Snap
1394
1395 // Add Tx sequence
1396 mic->seq = htonl(context->tx);
1397 context->tx += 2;
1398
1399 emmh32_init(&context->seed); // Mic the packet
1400 emmh32_update(&context->seed,frame->da,ETH_ALEN * 2); // DA,SA
1401 emmh32_update(&context->seed,(u8*)&mic->typelen,10); // Type/Length and Snap
1402 emmh32_update(&context->seed,(u8*)&mic->seq,sizeof(mic->seq)); //SEQ
1403 emmh32_update(&context->seed,frame->da + ETH_ALEN * 2,payLen); //payload
1404 emmh32_final(&context->seed, (u8*)&mic->mic);
1405
1406 /* New Type/length ?????????? */
1407 mic->typelen = 0; //Let NIC know it could be an oversized packet
1408 return SUCCESS;
1409 }
1410
1411 typedef enum {
1412 NONE,
1413 NOMIC,
1414 NOMICPLUMMED,
1415 SEQUENCE,
1416 INCORRECTMIC,
1417 } mic_error;
1418
1419 /*===========================================================================
1420 * Description: Decapsulates a MIC'd packet and returns the 802.3 packet
1421 * (removes the MIC stuff) if packet is a valid packet.
1422 *
1423 * Inputs: etherHead pointer to the 802.3 packet
1424 *
1425 * Returns: BOOLEAN - TRUE if packet should be dropped otherwise FALSE
1426 *
1427 * Author: sbraneky (10/15/01)
1428 * Merciless hacks by rwilcher (1/14/02)
1429 *---------------------------------------------------------------------------
1430 */
1431
1432 static int decapsulate(struct airo_info *ai, MICBuffer *mic, etherHead *eth, u16 payLen)
1433 {
1434 int i;
1435 u32 micSEQ;
1436 miccntx *context;
1437 u8 digest[4];
1438 mic_error micError = NONE;
1439
1440 // Check if the packet is a Mic'd packet
1441
1442 if (!ai->micstats.enabled) {
1443 //No Mic set or Mic OFF but we received a MIC'd packet.
1444 if (memcmp ((u8*)eth + 14, micsnap, sizeof(micsnap)) == 0) {
1445 ai->micstats.rxMICPlummed++;
1446 return ERROR;
1447 }
1448 return SUCCESS;
1449 }
1450
1451 if (ntohs(mic->typelen) == 0x888E)
1452 return SUCCESS;
1453
1454 if (memcmp (mic->u.snap, micsnap, sizeof(micsnap)) != 0) {
1455 // Mic enabled but packet isn't Mic'd
1456 ai->micstats.rxMICPlummed++;
1457 return ERROR;
1458 }
1459
1460 micSEQ = ntohl(mic->seq); //store SEQ as CPU order
1461
1462 //At this point we a have a mic'd packet and mic is enabled
1463 //Now do the mic error checking.
1464
1465 //Receive seq must be odd
1466 if ( (micSEQ & 1) == 0 ) {
1467 ai->micstats.rxWrongSequence++;
1468 return ERROR;
1469 }
1470
1471 for (i = 0; i < NUM_MODULES; i++) {
1472 int mcast = eth->da[0] & 1;
1473 //Determine proper context
1474 context = mcast ? &ai->mod[i].mCtx : &ai->mod[i].uCtx;
1475
1476 //Make sure context is valid
1477 if (!context->valid) {
1478 if (i == 0)
1479 micError = NOMICPLUMMED;
1480 continue;
1481 }
1482 //DeMic it
1483
1484 if (!mic->typelen)
1485 mic->typelen = htons(payLen + sizeof(MICBuffer) - 2);
1486
1487 emmh32_init(&context->seed);
1488 emmh32_update(&context->seed, eth->da, ETH_ALEN*2);
1489 emmh32_update(&context->seed, (u8 *)&mic->typelen, sizeof(mic->typelen)+sizeof(mic->u.snap));
1490 emmh32_update(&context->seed, (u8 *)&mic->seq,sizeof(mic->seq));
1491 emmh32_update(&context->seed, eth->da + ETH_ALEN*2,payLen);
1492 //Calculate MIC
1493 emmh32_final(&context->seed, digest);
1494
1495 if (memcmp(digest, &mic->mic, 4)) { //Make sure the mics match
1496 //Invalid Mic
1497 if (i == 0)
1498 micError = INCORRECTMIC;
1499 continue;
1500 }
1501
1502 //Check Sequence number if mics pass
1503 if (RxSeqValid(ai, context, mcast, micSEQ) == SUCCESS) {
1504 ai->micstats.rxSuccess++;
1505 return SUCCESS;
1506 }
1507 if (i == 0)
1508 micError = SEQUENCE;
1509 }
1510
1511 // Update statistics
1512 switch (micError) {
1513 case NOMICPLUMMED: ai->micstats.rxMICPlummed++; break;
1514 case SEQUENCE: ai->micstats.rxWrongSequence++; break;
1515 case INCORRECTMIC: ai->micstats.rxIncorrectMIC++; break;
1516 case NONE: break;
1517 case NOMIC: break;
1518 }
1519 return ERROR;
1520 }
1521
1522 /*===========================================================================
1523 * Description: Checks the Rx Seq number to make sure it is valid
1524 * and hasn't already been received
1525 *
1526 * Inputs: miccntx - mic context to check seq against
1527 * micSeq - the Mic seq number
1528 *
1529 * Returns: TRUE if valid otherwise FALSE.
1530 *
1531 * Author: sbraneky (10/15/01)
1532 * Merciless hacks by rwilcher (1/14/02)
1533 *---------------------------------------------------------------------------
1534 */
1535
1536 static int RxSeqValid (struct airo_info *ai,miccntx *context,int mcast,u32 micSeq)
1537 {
1538 u32 seq,index;
1539
1540 //Allow for the ap being rebooted - if it is then use the next
1541 //sequence number of the current sequence number - might go backwards
1542
1543 if (mcast) {
1544 if (test_bit(FLAG_UPDATE_MULTI, &ai->flags)) {
1545 clear_bit (FLAG_UPDATE_MULTI, &ai->flags);
1546 context->window = (micSeq > 33) ? micSeq : 33;
1547 context->rx = 0; // Reset rx
1548 }
1549 } else if (test_bit(FLAG_UPDATE_UNI, &ai->flags)) {
1550 clear_bit (FLAG_UPDATE_UNI, &ai->flags);
1551 context->window = (micSeq > 33) ? micSeq : 33; // Move window
1552 context->rx = 0; // Reset rx
1553 }
1554
1555 //Make sequence number relative to START of window
1556 seq = micSeq - (context->window - 33);
1557
1558 //Too old of a SEQ number to check.
1559 if ((s32)seq < 0)
1560 return ERROR;
1561
1562 if ( seq > 64 ) {
1563 //Window is infinite forward
1564 MoveWindow(context,micSeq);
1565 return SUCCESS;
1566 }
1567
1568 // We are in the window. Now check the context rx bit to see if it was already sent
1569 seq >>= 1; //divide by 2 because we only have odd numbers
1570 index = 1 << seq; //Get an index number
1571
1572 if (!(context->rx & index)) {
1573 //micSEQ falls inside the window.
1574 //Add seqence number to the list of received numbers.
1575 context->rx |= index;
1576
1577 MoveWindow(context,micSeq);
1578
1579 return SUCCESS;
1580 }
1581 return ERROR;
1582 }
1583
1584 static void MoveWindow(miccntx *context, u32 micSeq)
1585 {
1586 u32 shift;
1587
1588 //Move window if seq greater than the middle of the window
1589 if (micSeq > context->window) {
1590 shift = (micSeq - context->window) >> 1;
1591
1592 //Shift out old
1593 if (shift < 32)
1594 context->rx >>= shift;
1595 else
1596 context->rx = 0;
1597
1598 context->window = micSeq; //Move window
1599 }
1600 }
1601
1602 /*==============================================*/
1603 /*========== EMMH ROUTINES ====================*/
1604 /*==============================================*/
1605
1606 /* mic accumulate */
1607 #define MIC_ACCUM(val) \
1608 context->accum += (u64)(val) * context->coeff[coeff_position++];
1609
1610 static unsigned char aes_counter[16];
1611
1612 /* expand the key to fill the MMH coefficient array */
1613 static void emmh32_setseed(emmh32_context *context, u8 *pkey, int keylen,
1614 struct crypto_cipher *tfm)
1615 {
1616 /* take the keying material, expand if necessary, truncate at 16-bytes */
1617 /* run through AES counter mode to generate context->coeff[] */
1618
1619 int i,j;
1620 u32 counter;
1621 u8 *cipher, plain[16];
1622
1623 crypto_cipher_setkey(tfm, pkey, 16);
1624 counter = 0;
1625 for (i = 0; i < (sizeof(context->coeff)/sizeof(context->coeff[0])); ) {
1626 aes_counter[15] = (u8)(counter >> 0);
1627 aes_counter[14] = (u8)(counter >> 8);
1628 aes_counter[13] = (u8)(counter >> 16);
1629 aes_counter[12] = (u8)(counter >> 24);
1630 counter++;
1631 memcpy (plain, aes_counter, 16);
1632 crypto_cipher_encrypt_one(tfm, plain, plain);
1633 cipher = plain;
1634 for (j=0; (j<16) && (i< (sizeof(context->coeff)/sizeof(context->coeff[0]))); ) {
1635 context->coeff[i++] = ntohl(*(u32 *)&cipher[j]);
1636 j += 4;
1637 }
1638 }
1639 }
1640
1641 /* prepare for calculation of a new mic */
1642 static void emmh32_init(emmh32_context *context)
1643 {
1644 /* prepare for new mic calculation */
1645 context->accum = 0;
1646 context->position = 0;
1647 }
1648
1649 /* add some bytes to the mic calculation */
1650 static void emmh32_update(emmh32_context *context, u8 *pOctets, int len)
1651 {
1652 int coeff_position, byte_position;
1653
1654 if (len == 0) return;
1655
1656 coeff_position = context->position >> 2;
1657
1658 /* deal with partial 32-bit word left over from last update */
1659 byte_position = context->position & 3;
1660 if (byte_position) {
1661 /* have a partial word in part to deal with */
1662 do {
1663 if (len == 0) return;
1664 context->part.d8[byte_position++] = *pOctets++;
1665 context->position++;
1666 len--;
1667 } while (byte_position < 4);
1668 MIC_ACCUM(htonl(context->part.d32));
1669 }
1670
1671 /* deal with full 32-bit words */
1672 while (len >= 4) {
1673 MIC_ACCUM(htonl(*(u32 *)pOctets));
1674 context->position += 4;
1675 pOctets += 4;
1676 len -= 4;
1677 }
1678
1679 /* deal with partial 32-bit word that will be left over from this update */
1680 byte_position = 0;
1681 while (len > 0) {
1682 context->part.d8[byte_position++] = *pOctets++;
1683 context->position++;
1684 len--;
1685 }
1686 }
1687
1688 /* mask used to zero empty bytes for final partial word */
1689 static u32 mask32[4] = { 0x00000000L, 0xFF000000L, 0xFFFF0000L, 0xFFFFFF00L };
1690
1691 /* calculate the mic */
1692 static void emmh32_final(emmh32_context *context, u8 digest[4])
1693 {
1694 int coeff_position, byte_position;
1695 u32 val;
1696
1697 u64 sum, utmp;
1698 s64 stmp;
1699
1700 coeff_position = context->position >> 2;
1701
1702 /* deal with partial 32-bit word left over from last update */
1703 byte_position = context->position & 3;
1704 if (byte_position) {
1705 /* have a partial word in part to deal with */
1706 val = htonl(context->part.d32);
1707 MIC_ACCUM(val & mask32[byte_position]); /* zero empty bytes */
1708 }
1709
1710 /* reduce the accumulated u64 to a 32-bit MIC */
1711 sum = context->accum;
1712 stmp = (sum & 0xffffffffLL) - ((sum >> 32) * 15);
1713 utmp = (stmp & 0xffffffffLL) - ((stmp >> 32) * 15);
1714 sum = utmp & 0xffffffffLL;
1715 if (utmp > 0x10000000fLL)
1716 sum -= 15;
1717
1718 val = (u32)sum;
1719 digest[0] = (val>>24) & 0xFF;
1720 digest[1] = (val>>16) & 0xFF;
1721 digest[2] = (val>>8) & 0xFF;
1722 digest[3] = val & 0xFF;
1723 }
1724
1725 static int readBSSListRid(struct airo_info *ai, int first,
1726 BSSListRid *list) {
1727 int rc;
1728 Cmd cmd;
1729 Resp rsp;
1730
1731 if (first == 1) {
1732 if (ai->flags & FLAG_RADIO_MASK) return -ENETDOWN;
1733 memset(&cmd, 0, sizeof(cmd));
1734 cmd.cmd=CMD_LISTBSS;
1735 if (down_interruptible(&ai->sem))
1736 return -ERESTARTSYS;
1737 ai->list_bss_task = current;
1738 issuecommand(ai, &cmd, &rsp);
1739 up(&ai->sem);
1740 /* Let the command take effect */
1741 schedule_timeout_uninterruptible(3 * HZ);
1742 ai->list_bss_task = NULL;
1743 }
1744 rc = PC4500_readrid(ai, first ? ai->bssListFirst : ai->bssListNext,
1745 list, ai->bssListRidLen, 1);
1746
1747 list->len = le16_to_cpu(list->len);
1748 list->index = le16_to_cpu(list->index);
1749 list->radioType = le16_to_cpu(list->radioType);
1750 list->cap = le16_to_cpu(list->cap);
1751 list->beaconInterval = le16_to_cpu(list->beaconInterval);
1752 list->fh.dwell = le16_to_cpu(list->fh.dwell);
1753 list->dsChannel = le16_to_cpu(list->dsChannel);
1754 list->atimWindow = le16_to_cpu(list->atimWindow);
1755 list->dBm = le16_to_cpu(list->dBm);
1756 return rc;
1757 }
1758
1759 static int readWepKeyRid(struct airo_info*ai, WepKeyRid *wkr, int temp, int lock) {
1760 int rc = PC4500_readrid(ai, temp ? RID_WEP_TEMP : RID_WEP_PERM,
1761 wkr, sizeof(*wkr), lock);
1762
1763 wkr->len = le16_to_cpu(wkr->len);
1764 wkr->kindex = le16_to_cpu(wkr->kindex);
1765 wkr->klen = le16_to_cpu(wkr->klen);
1766 return rc;
1767 }
1768 /* In the writeXXXRid routines we copy the rids so that we don't screwup
1769 * the originals when we endian them... */
1770 static int writeWepKeyRid(struct airo_info*ai, WepKeyRid *pwkr, int perm, int lock) {
1771 int rc;
1772 WepKeyRid wkr = *pwkr;
1773
1774 wkr.len = cpu_to_le16(wkr.len);
1775 wkr.kindex = cpu_to_le16(wkr.kindex);
1776 wkr.klen = cpu_to_le16(wkr.klen);
1777 rc = PC4500_writerid(ai, RID_WEP_TEMP, &wkr, sizeof(wkr), lock);
1778 if (rc!=SUCCESS) airo_print_err(ai->dev->name, "WEP_TEMP set %x", rc);
1779 if (perm) {
1780 rc = PC4500_writerid(ai, RID_WEP_PERM, &wkr, sizeof(wkr), lock);
1781 if (rc!=SUCCESS) {
1782 airo_print_err(ai->dev->name, "WEP_PERM set %x", rc);
1783 }
1784 }
1785 return rc;
1786 }
1787
1788 static int readSsidRid(struct airo_info*ai, SsidRid *ssidr) {
1789 int i;
1790 int rc = PC4500_readrid(ai, RID_SSID, ssidr, sizeof(*ssidr), 1);
1791
1792 ssidr->len = le16_to_cpu(ssidr->len);
1793 for(i = 0; i < 3; i++) {
1794 ssidr->ssids[i].len = le16_to_cpu(ssidr->ssids[i].len);
1795 }
1796 return rc;
1797 }
1798 static int writeSsidRid(struct airo_info*ai, SsidRid *pssidr, int lock) {
1799 int rc;
1800 int i;
1801 SsidRid ssidr = *pssidr;
1802
1803 ssidr.len = cpu_to_le16(ssidr.len);
1804 for(i = 0; i < 3; i++) {
1805 ssidr.ssids[i].len = cpu_to_le16(ssidr.ssids[i].len);
1806 }
1807 rc = PC4500_writerid(ai, RID_SSID, &ssidr, sizeof(ssidr), lock);
1808 return rc;
1809 }
1810 static int readConfigRid(struct airo_info*ai, int lock) {
1811 int rc;
1812 u16 *s;
1813 ConfigRid cfg;
1814
1815 if (ai->config.len)
1816 return SUCCESS;
1817
1818 rc = PC4500_readrid(ai, RID_ACTUALCONFIG, &cfg, sizeof(cfg), lock);
1819 if (rc != SUCCESS)
1820 return rc;
1821
1822 for(s = &cfg.len; s <= &cfg.rtsThres; s++) *s = le16_to_cpu(*s);
1823
1824 for(s = &cfg.shortRetryLimit; s <= &cfg.radioType; s++)
1825 *s = le16_to_cpu(*s);
1826
1827 for(s = &cfg.txPower; s <= &cfg.radioSpecific; s++)
1828 *s = le16_to_cpu(*s);
1829
1830 for(s = &cfg.arlThreshold; s <= &cfg._reserved4[0]; s++)
1831 *s = cpu_to_le16(*s);
1832
1833 for(s = &cfg.autoWake; s <= &cfg.autoWake; s++)
1834 *s = cpu_to_le16(*s);
1835
1836 ai->config = cfg;
1837 return SUCCESS;
1838 }
1839 static inline void checkThrottle(struct airo_info *ai) {
1840 int i;
1841 /* Old hardware had a limit on encryption speed */
1842 if (ai->config.authType != AUTH_OPEN && maxencrypt) {
1843 for(i=0; i<8; i++) {
1844 if (ai->config.rates[i] > maxencrypt) {
1845 ai->config.rates[i] = 0;
1846 }
1847 }
1848 }
1849 }
1850 static int writeConfigRid(struct airo_info*ai, int lock) {
1851 u16 *s;
1852 ConfigRid cfgr;
1853
1854 if (!test_bit (FLAG_COMMIT, &ai->flags))
1855 return SUCCESS;
1856
1857 clear_bit (FLAG_COMMIT, &ai->flags);
1858 clear_bit (FLAG_RESET, &ai->flags);
1859 checkThrottle(ai);
1860 cfgr = ai->config;
1861
1862 if ((cfgr.opmode & 0xFF) == MODE_STA_IBSS)
1863 set_bit(FLAG_ADHOC, &ai->flags);
1864 else
1865 clear_bit(FLAG_ADHOC, &ai->flags);
1866
1867 for(s = &cfgr.len; s <= &cfgr.rtsThres; s++) *s = cpu_to_le16(*s);
1868
1869 for(s = &cfgr.shortRetryLimit; s <= &cfgr.radioType; s++)
1870 *s = cpu_to_le16(*s);
1871
1872 for(s = &cfgr.txPower; s <= &cfgr.radioSpecific; s++)
1873 *s = cpu_to_le16(*s);
1874
1875 for(s = &cfgr.arlThreshold; s <= &cfgr._reserved4[0]; s++)
1876 *s = cpu_to_le16(*s);
1877
1878 for(s = &cfgr.autoWake; s <= &cfgr.autoWake; s++)
1879 *s = cpu_to_le16(*s);
1880
1881 return PC4500_writerid( ai, RID_CONFIG, &cfgr, sizeof(cfgr), lock);
1882 }
1883 static int readStatusRid(struct airo_info*ai, StatusRid *statr, int lock) {
1884 int rc = PC4500_readrid(ai, RID_STATUS, statr, sizeof(*statr), lock);
1885 u16 *s;
1886
1887 statr->len = le16_to_cpu(statr->len);
1888 for(s = &statr->mode; s <= &statr->SSIDlen; s++) *s = le16_to_cpu(*s);
1889
1890 for(s = &statr->beaconPeriod; s <= &statr->shortPreamble; s++)
1891 *s = le16_to_cpu(*s);
1892 statr->load = le16_to_cpu(statr->load);
1893 statr->assocStatus = le16_to_cpu(statr->assocStatus);
1894 return rc;
1895 }
1896 static int readAPListRid(struct airo_info*ai, APListRid *aplr) {
1897 int rc = PC4500_readrid(ai, RID_APLIST, aplr, sizeof(*aplr), 1);
1898 aplr->len = le16_to_cpu(aplr->len);
1899 return rc;
1900 }
1901 static int writeAPListRid(struct airo_info*ai, APListRid *aplr, int lock) {
1902 int rc;
1903 aplr->len = cpu_to_le16(aplr->len);
1904 rc = PC4500_writerid(ai, RID_APLIST, aplr, sizeof(*aplr), lock);
1905 return rc;
1906 }
1907 static int readCapabilityRid(struct airo_info*ai, CapabilityRid *capr, int lock) {
1908 int rc = PC4500_readrid(ai, RID_CAPABILITIES, capr, sizeof(*capr), lock);
1909 u16 *s;
1910
1911 capr->len = le16_to_cpu(capr->len);
1912 capr->prodNum = le16_to_cpu(capr->prodNum);
1913 capr->radioType = le16_to_cpu(capr->radioType);
1914 capr->country = le16_to_cpu(capr->country);
1915 for(s = &capr->txPowerLevels[0]; s <= &capr->requiredHard; s++)
1916 *s = le16_to_cpu(*s);
1917 return rc;
1918 }
1919 static int readStatsRid(struct airo_info*ai, StatsRid *sr, int rid, int lock) {
1920 int rc = PC4500_readrid(ai, rid, sr, sizeof(*sr), lock);
1921 u32 *i;
1922
1923 sr->len = le16_to_cpu(sr->len);
1924 for(i = &sr->vals[0]; i <= &sr->vals[99]; i++) *i = le32_to_cpu(*i);
1925 return rc;
1926 }
1927
1928 static int airo_open(struct net_device *dev) {
1929 struct airo_info *info = dev->priv;
1930 Resp rsp;
1931
1932 if (test_bit(FLAG_FLASHING, &info->flags))
1933 return -EIO;
1934
1935 /* Make sure the card is configured.
1936 * Wireless Extensions may postpone config changes until the card
1937 * is open (to pipeline changes and speed-up card setup). If
1938 * those changes are not yet commited, do it now - Jean II */
1939 if (test_bit (FLAG_COMMIT, &info->flags)) {
1940 disable_MAC(info, 1);
1941 writeConfigRid(info, 1);
1942 }
1943
1944 if (info->wifidev != dev) {
1945 /* Power on the MAC controller (which may have been disabled) */
1946 clear_bit(FLAG_RADIO_DOWN, &info->flags);
1947 enable_interrupts(info);
1948 }
1949 enable_MAC(info, &rsp, 1);
1950
1951 netif_start_queue(dev);
1952 return 0;
1953 }
1954
1955 static int mpi_start_xmit(struct sk_buff *skb, struct net_device *dev) {
1956 int npacks, pending;
1957 unsigned long flags;
1958 struct airo_info *ai = dev->priv;
1959
1960 if (!skb) {
1961 airo_print_err(dev->name, "%s: skb == NULL!",__FUNCTION__);
1962 return 0;
1963 }
1964 npacks = skb_queue_len (&ai->txq);
1965
1966 if (npacks >= MAXTXQ - 1) {
1967 netif_stop_queue (dev);
1968 if (npacks > MAXTXQ) {
1969 ai->stats.tx_fifo_errors++;
1970 return 1;
1971 }
1972 skb_queue_tail (&ai->txq, skb);
1973 return 0;
1974 }
1975
1976 spin_lock_irqsave(&ai->aux_lock, flags);
1977 skb_queue_tail (&ai->txq, skb);
1978 pending = test_bit(FLAG_PENDING_XMIT, &ai->flags);
1979 spin_unlock_irqrestore(&ai->aux_lock,flags);
1980 netif_wake_queue (dev);
1981
1982 if (pending == 0) {
1983 set_bit(FLAG_PENDING_XMIT, &ai->flags);
1984 mpi_send_packet (dev);
1985 }
1986 return 0;
1987 }
1988
1989 /*
1990 * @mpi_send_packet
1991 *
1992 * Attempt to transmit a packet. Can be called from interrupt
1993 * or transmit . return number of packets we tried to send
1994 */
1995
1996 static int mpi_send_packet (struct net_device *dev)
1997 {
1998 struct sk_buff *skb;
1999 unsigned char *buffer;
2000 s16 len, *payloadLen;
2001 struct airo_info *ai = dev->priv;
2002 u8 *sendbuf;
2003
2004 /* get a packet to send */
2005
2006 if ((skb = skb_dequeue(&ai->txq)) == 0) {
2007 airo_print_err(dev->name,
2008 "%s: Dequeue'd zero in send_packet()",
2009 __FUNCTION__);
2010 return 0;
2011 }
2012
2013 /* check min length*/
2014 len = ETH_ZLEN < skb->len ? skb->len : ETH_ZLEN;
2015 buffer = skb->data;
2016
2017 ai->txfids[0].tx_desc.offset = 0;
2018 ai->txfids[0].tx_desc.valid = 1;
2019 ai->txfids[0].tx_desc.eoc = 1;
2020 ai->txfids[0].tx_desc.len =len+sizeof(WifiHdr);
2021
2022 /*
2023 * Magic, the cards firmware needs a length count (2 bytes) in the host buffer
2024 * right after TXFID_HDR.The TXFID_HDR contains the status short so payloadlen
2025 * is immediatly after it. ------------------------------------------------
2026 * |TXFIDHDR+STATUS|PAYLOADLEN|802.3HDR|PACKETDATA|
2027 * ------------------------------------------------
2028 */
2029
2030 memcpy((char *)ai->txfids[0].virtual_host_addr,
2031 (char *)&wifictlhdr8023, sizeof(wifictlhdr8023));
2032
2033 payloadLen = (s16 *)(ai->txfids[0].virtual_host_addr +
2034 sizeof(wifictlhdr8023));
2035 sendbuf = ai->txfids[0].virtual_host_addr +
2036 sizeof(wifictlhdr8023) + 2 ;
2037
2038 /*
2039 * Firmware automaticly puts 802 header on so
2040 * we don't need to account for it in the length
2041 */
2042 if (test_bit(FLAG_MIC_CAPABLE, &ai->flags) && ai->micstats.enabled &&
2043 (ntohs(((u16 *)buffer)[6]) != 0x888E)) {
2044 MICBuffer pMic;
2045
2046 if (encapsulate(ai, (etherHead *)buffer, &pMic, len - sizeof(etherHead)) != SUCCESS)
2047 return ERROR;
2048
2049 *payloadLen = cpu_to_le16(len-sizeof(etherHead)+sizeof(pMic));
2050 ai->txfids[0].tx_desc.len += sizeof(pMic);
2051 /* copy data into airo dma buffer */
2052 memcpy (sendbuf, buffer, sizeof(etherHead));
2053 buffer += sizeof(etherHead);
2054 sendbuf += sizeof(etherHead);
2055 memcpy (sendbuf, &pMic, sizeof(pMic));
2056 sendbuf += sizeof(pMic);
2057 memcpy (sendbuf, buffer, len - sizeof(etherHead));
2058 } else {
2059 *payloadLen = cpu_to_le16(len - sizeof(etherHead));
2060
2061 dev->trans_start = jiffies;
2062
2063 /* copy data into airo dma buffer */
2064 memcpy(sendbuf, buffer, len);
2065 }
2066
2067 memcpy_toio(ai->txfids[0].card_ram_off,
2068 &ai->txfids[0].tx_desc, sizeof(TxFid));
2069
2070 OUT4500(ai, EVACK, 8);
2071
2072 dev_kfree_skb_any(skb);
2073 return 1;
2074 }
2075
2076 static void get_tx_error(struct airo_info *ai, s32 fid)
2077 {
2078 u16 status;
2079
2080 if (fid < 0)
2081 status = ((WifiCtlHdr *)ai->txfids[0].virtual_host_addr)->ctlhdr.status;
2082 else {
2083 if (bap_setup(ai, ai->fids[fid] & 0xffff, 4, BAP0) != SUCCESS)
2084 return;
2085 bap_read(ai, &status, 2, BAP0);
2086 }
2087 if (le16_to_cpu(status) & 2) /* Too many retries */
2088 ai->stats.tx_aborted_errors++;
2089 if (le16_to_cpu(status) & 4) /* Transmit lifetime exceeded */
2090 ai->stats.tx_heartbeat_errors++;
2091 if (le16_to_cpu(status) & 8) /* Aid fail */
2092 { }
2093 if (le16_to_cpu(status) & 0x10) /* MAC disabled */
2094 ai->stats.tx_carrier_errors++;
2095 if (le16_to_cpu(status) & 0x20) /* Association lost */
2096 { }
2097 /* We produce a TXDROP event only for retry or lifetime
2098 * exceeded, because that's the only status that really mean
2099 * that this particular node went away.
2100 * Other errors means that *we* screwed up. - Jean II */
2101 if ((le16_to_cpu(status) & 2) ||
2102 (le16_to_cpu(status) & 4)) {
2103 union iwreq_data wrqu;
2104 char junk[0x18];
2105
2106 /* Faster to skip over useless data than to do
2107 * another bap_setup(). We are at offset 0x6 and
2108 * need to go to 0x18 and read 6 bytes - Jean II */
2109 bap_read(ai, (u16 *) junk, 0x18, BAP0);
2110
2111 /* Copy 802.11 dest address.
2112 * We use the 802.11 header because the frame may
2113 * not be 802.3 or may be mangled...
2114 * In Ad-Hoc mode, it will be the node address.
2115 * In managed mode, it will be most likely the AP addr
2116 * User space will figure out how to convert it to
2117 * whatever it needs (IP address or else).
2118 * - Jean II */
2119 memcpy(wrqu.addr.sa_data, junk + 0x12, ETH_ALEN);
2120 wrqu.addr.sa_family = ARPHRD_ETHER;
2121
2122 /* Send event to user space */
2123 wireless_send_event(ai->dev, IWEVTXDROP, &wrqu, NULL);
2124 }
2125 }
2126
2127 static void airo_end_xmit(struct net_device *dev) {
2128 u16 status;
2129 int i;
2130 struct airo_info *priv = dev->priv;
2131 struct sk_buff *skb = priv->xmit.skb;
2132 int fid = priv->xmit.fid;
2133 u32 *fids = priv->fids;
2134
2135 clear_bit(JOB_XMIT, &priv->jobs);
2136 clear_bit(FLAG_PENDING_XMIT, &priv->flags);
2137 status = transmit_802_3_packet (priv, fids[fid], skb->data);
2138 up(&priv->sem);
2139
2140 i = 0;
2141 if ( status == SUCCESS ) {
2142 dev->trans_start = jiffies;
2143 for (; i < MAX_FIDS / 2 && (priv->fids[i] & 0xffff0000); i++);
2144 } else {
2145 priv->fids[fid] &= 0xffff;
2146 priv->stats.tx_window_errors++;
2147 }
2148 if (i < MAX_FIDS / 2)
2149 netif_wake_queue(dev);
2150 dev_kfree_skb(skb);
2151 }
2152
2153 static int airo_start_xmit(struct sk_buff *skb, struct net_device *dev) {
2154 s16 len;
2155 int i, j;
2156 struct airo_info *priv = dev->priv;
2157 u32 *fids = priv->fids;
2158
2159 if ( skb == NULL ) {
2160 airo_print_err(dev->name, "%s: skb == NULL!", __FUNCTION__);
2161 return 0;
2162 }
2163
2164 /* Find a vacant FID */
2165 for( i = 0; i < MAX_FIDS / 2 && (fids[i] & 0xffff0000); i++ );
2166 for( j = i + 1; j < MAX_FIDS / 2 && (fids[j] & 0xffff0000); j++ );
2167
2168 if ( j >= MAX_FIDS / 2 ) {
2169 netif_stop_queue(dev);
2170
2171 if (i == MAX_FIDS / 2) {
2172 priv->stats.tx_fifo_errors++;
2173 return 1;
2174 }
2175 }
2176 /* check min length*/
2177 len = ETH_ZLEN < skb->len ? skb->len : ETH_ZLEN;
2178 /* Mark fid as used & save length for later */
2179 fids[i] |= (len << 16);
2180 priv->xmit.skb = skb;
2181 priv->xmit.fid = i;
2182 if (down_trylock(&priv->sem) != 0) {
2183 set_bit(FLAG_PENDING_XMIT, &priv->flags);
2184 netif_stop_queue(dev);
2185 set_bit(JOB_XMIT, &priv->jobs);
2186 wake_up_interruptible(&priv->thr_wait);
2187 } else
2188 airo_end_xmit(dev);
2189 return 0;
2190 }
2191
2192 static void airo_end_xmit11(struct net_device *dev) {
2193 u16 status;
2194 int i;
2195 struct airo_info *priv = dev->priv;
2196 struct sk_buff *skb = priv->xmit11.skb;
2197 int fid = priv->xmit11.fid;
2198 u32 *fids = priv->fids;
2199
2200 clear_bit(JOB_XMIT11, &priv->jobs);
2201 clear_bit(FLAG_PENDING_XMIT11, &priv->flags);
2202 status = transmit_802_11_packet (priv, fids[fid], skb->data);
2203 up(&priv->sem);
2204
2205 i = MAX_FIDS / 2;
2206 if ( status == SUCCESS ) {
2207 dev->trans_start = jiffies;
2208 for (; i < MAX_FIDS && (priv->fids[i] & 0xffff0000); i++);
2209 } else {
2210 priv->fids[fid] &= 0xffff;
2211 priv->stats.tx_window_errors++;
2212 }
2213 if (i < MAX_FIDS)
2214 netif_wake_queue(dev);
2215 dev_kfree_skb(skb);
2216 }
2217
2218 static int airo_start_xmit11(struct sk_buff *skb, struct net_device *dev) {
2219 s16 len;
2220 int i, j;
2221 struct airo_info *priv = dev->priv;
2222 u32 *fids = priv->fids;
2223
2224 if (test_bit(FLAG_MPI, &priv->flags)) {
2225 /* Not implemented yet for MPI350 */
2226 netif_stop_queue(dev);
2227 return -ENETDOWN;
2228 }
2229
2230 if ( skb == NULL ) {
2231 airo_print_err(dev->name, "%s: skb == NULL!", __FUNCTION__);
2232 return 0;
2233 }
2234
2235 /* Find a vacant FID */
2236 for( i = MAX_FIDS / 2; i < MAX_FIDS && (fids[i] & 0xffff0000); i++ );
2237 for( j = i + 1; j < MAX_FIDS && (fids[j] & 0xffff0000); j++ );
2238
2239 if ( j >= MAX_FIDS ) {
2240 netif_stop_queue(dev);
2241
2242 if (i == MAX_FIDS) {
2243 priv->stats.tx_fifo_errors++;
2244 return 1;
2245 }
2246 }
2247 /* check min length*/
2248 len = ETH_ZLEN < skb->len ? skb->len : ETH_ZLEN;
2249 /* Mark fid as used & save length for later */
2250 fids[i] |= (len << 16);
2251 priv->xmit11.skb = skb;
2252 priv->xmit11.fid = i;
2253 if (down_trylock(&priv->sem) != 0) {
2254 set_bit(FLAG_PENDING_XMIT11, &priv->flags);
2255 netif_stop_queue(dev);
2256 set_bit(JOB_XMIT11, &priv->jobs);
2257 wake_up_interruptible(&priv->thr_wait);
2258 } else
2259 airo_end_xmit11(dev);
2260 return 0;
2261 }
2262
2263 static void airo_read_stats(struct airo_info *ai) {
2264 StatsRid stats_rid;
2265 u32 *vals = stats_rid.vals;
2266
2267 clear_bit(JOB_STATS, &ai->jobs);
2268 if (ai->power.event) {
2269 up(&ai->sem);
2270 return;
2271 }
2272 readStatsRid(ai, &stats_rid, RID_STATS, 0);
2273 up(&ai->sem);
2274
2275 ai->stats.rx_packets = vals[43] + vals[44] + vals[45];
2276 ai->stats.tx_packets = vals[39] + vals[40] + vals[41];
2277 ai->stats.rx_bytes = vals[92];
2278 ai->stats.tx_bytes = vals[91];
2279 ai->stats.rx_errors = vals[0] + vals[2] + vals[3] + vals[4];
2280 ai->stats.tx_errors = vals[42] + ai->stats.tx_fifo_errors;
2281 ai->stats.multicast = vals[43];
2282 ai->stats.collisions = vals[89];
2283
2284 /* detailed rx_errors: */
2285 ai->stats.rx_length_errors = vals[3];
2286 ai->stats.rx_crc_errors = vals[4];
2287 ai->stats.rx_frame_errors = vals[2];
2288 ai->stats.rx_fifo_errors = vals[0];
2289 }
2290
2291 static struct net_device_stats *airo_get_stats(struct net_device *dev)
2292 {
2293 struct airo_info *local = dev->priv;
2294
2295 if (!test_bit(JOB_STATS, &local->jobs)) {
2296 /* Get stats out of the card if available */
2297 if (down_trylock(&local->sem) != 0) {
2298 set_bit(JOB_STATS, &local->jobs);
2299 wake_up_interruptible(&local->thr_wait);
2300 } else
2301 airo_read_stats(local);
2302 }
2303
2304 return &local->stats;
2305 }
2306
2307 static void airo_set_promisc(struct airo_info *ai) {
2308 Cmd cmd;
2309 Resp rsp;
2310
2311 memset(&cmd, 0, sizeof(cmd));
2312 cmd.cmd=CMD_SETMODE;
2313 clear_bit(JOB_PROMISC, &ai->jobs);
2314 cmd.parm0=(ai->flags&IFF_PROMISC) ? PROMISC : NOPROMISC;
2315 issuecommand(ai, &cmd, &rsp);
2316 up(&ai->sem);
2317 }
2318
2319 static void airo_set_multicast_list(struct net_device *dev) {
2320 struct airo_info *ai = dev->priv;
2321
2322 if ((dev->flags ^ ai->flags) & IFF_PROMISC) {
2323 change_bit(FLAG_PROMISC, &ai->flags);
2324 if (down_trylock(&ai->sem) != 0) {
2325 set_bit(JOB_PROMISC, &ai->jobs);
2326 wake_up_interruptible(&ai->thr_wait);
2327 } else
2328 airo_set_promisc(ai);
2329 }
2330
2331 if ((dev->flags&IFF_ALLMULTI)||dev->mc_count>0) {
2332 /* Turn on multicast. (Should be already setup...) */
2333 }
2334 }
2335
2336 static int airo_set_mac_address(struct net_device *dev, void *p)
2337 {
2338 struct airo_info *ai = dev->priv;
2339 struct sockaddr *addr = p;
2340 Resp rsp;
2341
2342 readConfigRid(ai, 1);
2343 memcpy (ai->config.macAddr, addr->sa_data, dev->addr_len);
2344 set_bit (FLAG_COMMIT, &ai->flags);
2345 disable_MAC(ai, 1);
2346 writeConfigRid (ai, 1);
2347 enable_MAC(ai, &rsp, 1);
2348 memcpy (ai->dev->dev_addr, addr->sa_data, dev->addr_len);
2349 if (ai->wifidev)
2350 memcpy (ai->wifidev->dev_addr, addr->sa_data, dev->addr_len);
2351 return 0;
2352 }
2353
2354 static int airo_change_mtu(struct net_device *dev, int new_mtu)
2355 {
2356 if ((new_mtu < 68) || (new_mtu > 2400))
2357 return -EINVAL;
2358 dev->mtu = new_mtu;
2359 return 0;
2360 }
2361
2362
2363 static int airo_close(struct net_device *dev) {
2364 struct airo_info *ai = dev->priv;
2365
2366 netif_stop_queue(dev);
2367
2368 if (ai->wifidev != dev) {
2369 #ifdef POWER_ON_DOWN
2370 /* Shut power to the card. The idea is that the user can save
2371 * power when he doesn't need the card with "ifconfig down".
2372 * That's the method that is most friendly towards the network
2373 * stack (i.e. the network stack won't try to broadcast
2374 * anything on the interface and routes are gone. Jean II */
2375 set_bit(FLAG_RADIO_DOWN, &ai->flags);
2376 disable_MAC(ai, 1);
2377 #endif
2378 disable_interrupts( ai );
2379 }
2380 return 0;
2381 }
2382
2383 static void del_airo_dev( struct net_device *dev );
2384
2385 void stop_airo_card( struct net_device *dev, int freeres )
2386 {
2387 struct airo_info *ai = dev->priv;
2388
2389 set_bit(FLAG_RADIO_DOWN, &ai->flags);
2390 disable_MAC(ai, 1);
2391 disable_interrupts(ai);
2392 free_irq( dev->irq, dev );
2393 takedown_proc_entry( dev, ai );
2394 if (test_bit(FLAG_REGISTERED, &ai->flags)) {
2395 unregister_netdev( dev );
2396 if (ai->wifidev) {
2397 unregister_netdev(ai->wifidev);
2398 free_netdev(ai->wifidev);
2399 ai->wifidev = NULL;
2400 }
2401 clear_bit(FLAG_REGISTERED, &ai->flags);
2402 }
2403 set_bit(JOB_DIE, &ai->jobs);
2404 kthread_stop(ai->airo_thread_task);
2405
2406 /*
2407 * Clean out tx queue
2408 */
2409 if (test_bit(FLAG_MPI, &ai->flags) && !skb_queue_empty(&ai->txq)) {
2410 struct sk_buff *skb = NULL;
2411 for (;(skb = skb_dequeue(&ai->txq));)
2412 dev_kfree_skb(skb);
2413 }
2414
2415 airo_networks_free (ai);
2416
2417 kfree(ai->flash);
2418 kfree(ai->rssi);
2419 kfree(ai->APList);
2420 kfree(ai->SSID);
2421 if (freeres) {
2422 /* PCMCIA frees this stuff, so only for PCI and ISA */
2423 release_region( dev->base_addr, 64 );
2424 if (test_bit(FLAG_MPI, &ai->flags)) {
2425 if (ai->pci)
2426 mpi_unmap_card(ai->pci);
2427 if (ai->pcimem)
2428 iounmap(ai->pcimem);
2429 if (ai->pciaux)
2430 iounmap(ai->pciaux);
2431 pci_free_consistent(ai->pci, PCI_SHARED_LEN,
2432 ai->shared, ai->shared_dma);
2433 }
2434 }
2435 crypto_free_cipher(ai->tfm);
2436 del_airo_dev( dev );
2437 free_netdev( dev );
2438 }
2439
2440 EXPORT_SYMBOL(stop_airo_card);
2441
2442 static int add_airo_dev( struct net_device *dev );
2443
2444 static int wll_header_parse(struct sk_buff *skb, unsigned char *haddr)
2445 {
2446 memcpy(haddr, skb->mac.raw + 10, ETH_ALEN);
2447 return ETH_ALEN;
2448 }
2449
2450 static void mpi_unmap_card(struct pci_dev *pci)
2451 {
2452 unsigned long mem_start = pci_resource_start(pci, 1);
2453 unsigned long mem_len = pci_resource_len(pci, 1);
2454 unsigned long aux_start = pci_resource_start(pci, 2);
2455 unsigned long aux_len = AUXMEMSIZE;
2456
2457 release_mem_region(aux_start, aux_len);
2458 release_mem_region(mem_start, mem_len);
2459 }
2460
2461 /*************************************************************
2462 * This routine assumes that descriptors have been setup .
2463 * Run at insmod time or after reset when the decriptors
2464 * have been initialized . Returns 0 if all is well nz
2465 * otherwise . Does not allocate memory but sets up card
2466 * using previously allocated descriptors.
2467 */
2468 static int mpi_init_descriptors (struct airo_info *ai)
2469 {
2470 Cmd cmd;
2471 Resp rsp;
2472 int i;
2473 int rc = SUCCESS;
2474
2475 /* Alloc card RX descriptors */
2476 netif_stop_queue(ai->dev);
2477
2478 memset(&rsp,0,sizeof(rsp));
2479 memset(&cmd,0,sizeof(cmd));
2480
2481 cmd.cmd = CMD_ALLOCATEAUX;
2482 cmd.parm0 = FID_RX;
2483 cmd.parm1 = (ai->rxfids[0].card_ram_off - ai->pciaux);
2484 cmd.parm2 = MPI_MAX_FIDS;
2485 rc=issuecommand(ai, &cmd, &rsp);
2486 if (rc != SUCCESS) {
2487 airo_print_err(ai->dev->name, "Couldn't allocate RX FID");
2488 return rc;
2489 }
2490
2491 for (i=0; i<MPI_MAX_FIDS; i++) {
2492 memcpy_toio(ai->rxfids[i].card_ram_off,
2493 &ai->rxfids[i].rx_desc, sizeof(RxFid));
2494 }
2495
2496 /* Alloc card TX descriptors */
2497
2498 memset(&rsp,0,sizeof(rsp));
2499 memset(&cmd,0,sizeof(cmd));
2500
2501 cmd.cmd = CMD_ALLOCATEAUX;
2502 cmd.parm0 = FID_TX;
2503 cmd.parm1 = (ai->txfids[0].card_ram_off - ai->pciaux);
2504 cmd.parm2 = MPI_MAX_FIDS;
2505
2506 for (i=0; i<MPI_MAX_FIDS; i++) {
2507 ai->txfids[i].tx_desc.valid = 1;
2508 memcpy_toio(ai->txfids[i].card_ram_off,
2509 &ai->txfids[i].tx_desc, sizeof(TxFid));
2510 }
2511 ai->txfids[i-1].tx_desc.eoc = 1; /* Last descriptor has EOC set */
2512
2513 rc=issuecommand(ai, &cmd, &rsp);
2514 if (rc != SUCCESS) {
2515 airo_print_err(ai->dev->name, "Couldn't allocate TX FID");
2516 return rc;
2517 }
2518
2519 /* Alloc card Rid descriptor */
2520 memset(&rsp,0,sizeof(rsp));
2521 memset(&cmd,0,sizeof(cmd));
2522
2523 cmd.cmd = CMD_ALLOCATEAUX;
2524 cmd.parm0 = RID_RW;
2525 cmd.parm1 = (ai->config_desc.card_ram_off - ai->pciaux);
2526 cmd.parm2 = 1; /* Magic number... */
2527 rc=issuecommand(ai, &cmd, &rsp);
2528 if (rc != SUCCESS) {
2529 airo_print_err(ai->dev->name, "Couldn't allocate RID");
2530 return rc;
2531 }
2532
2533 memcpy_toio(ai->config_desc.card_ram_off,
2534 &ai->config_desc.rid_desc, sizeof(Rid));
2535
2536 return rc;
2537 }
2538
2539 /*
2540 * We are setting up three things here:
2541 * 1) Map AUX memory for descriptors: Rid, TxFid, or RxFid.
2542 * 2) Map PCI memory for issueing commands.
2543 * 3) Allocate memory (shared) to send and receive ethernet frames.
2544 */
2545 static int mpi_map_card(struct airo_info *ai, struct pci_dev *pci,
2546 const char *name)
2547 {
2548 unsigned long mem_start, mem_len, aux_start, aux_len;
2549 int rc = -1;
2550 int i;
2551 dma_addr_t busaddroff;
2552 unsigned char *vpackoff;
2553 unsigned char __iomem *pciaddroff;
2554
2555 mem_start = pci_resource_start(pci, 1);
2556 mem_len = pci_resource_len(pci, 1);
2557 aux_start = pci_resource_start(pci, 2);
2558 aux_len = AUXMEMSIZE;
2559
2560 if (!request_mem_region(mem_start, mem_len, name)) {
2561 airo_print_err(ai->dev->name, "Couldn't get region %x[%x] for %s",
2562 (int)mem_start, (int)mem_len, name);
2563 goto out;
2564 }
2565 if (!request_mem_region(aux_start, aux_len, name)) {
2566 airo_print_err(ai->dev->name, "Couldn't get region %x[%x] for %s",
2567 (int)aux_start, (int)aux_len, name);
2568 goto free_region1;
2569 }
2570
2571 ai->pcimem = ioremap(mem_start, mem_len);
2572 if (!ai->pcimem) {
2573 airo_print_err(ai->dev->name, "Couldn't map region %x[%x] for %s",
2574 (int)mem_start, (int)mem_len, name);
2575 goto free_region2;
2576 }
2577 ai->pciaux = ioremap(aux_start, aux_len);
2578 if (!ai->pciaux) {
2579 airo_print_err(ai->dev->name, "Couldn't map region %x[%x] for %s",
2580 (int)aux_start, (int)aux_len, name);
2581 goto free_memmap;
2582 }
2583
2584 /* Reserve PKTSIZE for each fid and 2K for the Rids */
2585 ai->shared = pci_alloc_consistent(pci, PCI_SHARED_LEN, &ai->shared_dma);
2586 if (!ai->shared) {
2587 airo_print_err(ai->dev->name, "Couldn't alloc_consistent %d",
2588 PCI_SHARED_LEN);
2589 goto free_auxmap;
2590 }
2591
2592 /*
2593 * Setup descriptor RX, TX, CONFIG
2594 */
2595 busaddroff = ai->shared_dma;
2596 pciaddroff = ai->pciaux + AUX_OFFSET;
2597 vpackoff = ai->shared;
2598
2599 /* RX descriptor setup */
2600 for(i = 0; i < MPI_MAX_FIDS; i++) {
2601 ai->rxfids[i].pending = 0;
2602 ai->rxfids[i].card_ram_off = pciaddroff;
2603 ai->rxfids[i].virtual_host_addr = vpackoff;
2604 ai->rxfids[i].rx_desc.host_addr = busaddroff;
2605 ai->rxfids[i].rx_desc.valid = 1;
2606 ai->rxfids[i].rx_desc.len = PKTSIZE;
2607 ai->rxfids[i].rx_desc.rdy = 0;
2608
2609 pciaddroff += sizeof(RxFid);
2610 busaddroff += PKTSIZE;
2611 vpackoff += PKTSIZE;
2612 }
2613
2614 /* TX descriptor setup */
2615 for(i = 0; i < MPI_MAX_FIDS; i++) {
2616 ai->txfids[i].card_ram_off = pciaddroff;
2617 ai->txfids[i].virtual_host_addr = vpackoff;
2618 ai->txfids[i].tx_desc.valid = 1;
2619 ai->txfids[i].tx_desc.host_addr = busaddroff;
2620 memcpy(ai->txfids[i].virtual_host_addr,
2621 &wifictlhdr8023, sizeof(wifictlhdr8023));
2622
2623 pciaddroff += sizeof(TxFid);
2624 busaddroff += PKTSIZE;
2625 vpackoff += PKTSIZE;
2626 }
2627 ai->txfids[i-1].tx_desc.eoc = 1; /* Last descriptor has EOC set */
2628
2629 /* Rid descriptor setup */
2630 ai->config_desc.card_ram_off = pciaddroff;
2631 ai->config_desc.virtual_host_addr = vpackoff;
2632 ai->config_desc.rid_desc.host_addr = busaddroff;
2633 ai->ridbus = busaddroff;
2634 ai->config_desc.rid_desc.rid = 0;
2635 ai->config_desc.rid_desc.len = RIDSIZE;
2636 ai->config_desc.rid_desc.valid = 1;
2637 pciaddroff += sizeof(Rid);
2638 busaddroff += RIDSIZE;
2639 vpackoff += RIDSIZE;
2640
2641 /* Tell card about descriptors */
2642 if (mpi_init_descriptors (ai) != SUCCESS)
2643 goto free_shared;
2644
2645 return 0;
2646 free_shared:
2647 pci_free_consistent(pci, PCI_SHARED_LEN, ai->shared, ai->shared_dma);
2648 free_auxmap:
2649 iounmap(ai->pciaux);
2650 free_memmap:
2651 iounmap(ai->pcimem);
2652 free_region2:
2653 release_mem_region(aux_start, aux_len);
2654 free_region1:
2655 release_mem_region(mem_start, mem_len);
2656 out:
2657 return rc;
2658 }
2659
2660 static void wifi_setup(struct net_device *dev)
2661 {
2662 dev->hard_header = NULL;
2663 dev->rebuild_header = NULL;
2664 dev->hard_header_cache = NULL;
2665 dev->header_cache_update= NULL;
2666
2667 dev->hard_header_parse = wll_header_parse;
2668 dev->hard_start_xmit = &airo_start_xmit11;
2669 dev->get_stats = &airo_get_stats;
2670 dev->set_mac_address = &airo_set_mac_address;
2671 dev->do_ioctl = &airo_ioctl;
2672 dev->wireless_handlers = &airo_handler_def;
2673 dev->change_mtu = &airo_change_mtu;
2674 dev->open = &airo_open;
2675 dev->stop = &airo_close;
2676
2677 dev->type = ARPHRD_IEEE80211;
2678 dev->hard_header_len = ETH_HLEN;
2679 dev->mtu = AIRO_DEF_MTU;
2680 dev->addr_len = ETH_ALEN;
2681 dev->tx_queue_len = 100;
2682
2683 memset(dev->broadcast,0xFF, ETH_ALEN);
2684
2685 dev->flags = IFF_BROADCAST|IFF_MULTICAST;
2686 }
2687
2688 static struct net_device *init_wifidev(struct airo_info *ai,
2689 struct net_device *ethdev)
2690 {
2691 int err;
2692 struct net_device *dev = alloc_netdev(0, "wifi%d", wifi_setup);
2693 if (!dev)
2694 return NULL;
2695 dev->priv = ethdev->priv;
2696 dev->irq = ethdev->irq;
2697 dev->base_addr = ethdev->base_addr;
2698 dev->wireless_data = ethdev->wireless_data;
2699 memcpy(dev->dev_addr, ethdev->dev_addr, dev->addr_len);
2700 err = register_netdev(dev);
2701 if (err<0) {
2702 free_netdev(dev);
2703 return NULL;
2704 }
2705 return dev;
2706 }
2707
2708 static int reset_card( struct net_device *dev , int lock) {
2709 struct airo_info *ai = dev->priv;
2710
2711 if (lock && down_interruptible(&ai->sem))
2712 return -1;
2713 waitbusy (ai);
2714 OUT4500(ai,COMMAND,CMD_SOFTRESET);
2715 msleep(200);
2716 waitbusy (ai);
2717 msleep(200);
2718 if (lock)
2719 up(&ai->sem);
2720 return 0;
2721 }
2722
2723 #define AIRO_MAX_NETWORK_COUNT 64
2724 static int airo_networks_allocate(struct airo_info *ai)
2725 {
2726 if (ai->networks)
2727 return 0;
2728
2729 ai->networks =
2730 kzalloc(AIRO_MAX_NETWORK_COUNT * sizeof(BSSListElement),
2731 GFP_KERNEL);
2732 if (!ai->networks) {
2733 airo_print_warn(ai->dev->name, "Out of memory allocating beacons");
2734 return -ENOMEM;
2735 }
2736
2737 return 0;
2738 }
2739
2740 static void airo_networks_free(struct airo_info *ai)
2741 {
2742 if (!ai->networks)
2743 return;
2744 kfree(ai->networks);
2745 ai->networks = NULL;
2746 }
2747
2748 static void airo_networks_initialize(struct airo_info *ai)
2749 {
2750 int i;
2751
2752 INIT_LIST_HEAD(&ai->network_free_list);
2753 INIT_LIST_HEAD(&ai->network_list);
2754 for (i = 0; i < AIRO_MAX_NETWORK_COUNT; i++)
2755 list_add_tail(&ai->networks[i].list,
2756 &ai->network_free_list);
2757 }
2758
2759 static int airo_test_wpa_capable(struct airo_info *ai)
2760 {
2761 int status;
2762 CapabilityRid cap_rid;
2763 const char *name = ai->dev->name;
2764
2765 status = readCapabilityRid(ai, &cap_rid, 1);
2766 if (status != SUCCESS) return 0;
2767
2768 /* Only firmware versions 5.30.17 or better can do WPA */
2769 if ((cap_rid.softVer > 0x530)
2770 || ((cap_rid.softVer == 0x530) && (cap_rid.softSubVer >= 17))) {
2771 airo_print_info(name, "WPA is supported.");
2772 return 1;
2773 }
2774
2775 /* No WPA support */
2776 airo_print_info(name, "WPA unsupported (only firmware versions 5.30.17"
2777 " and greater support WPA. Detected %s)", cap_rid.prodVer);
2778 return 0;
2779 }
2780
2781 static struct net_device *_init_airo_card( unsigned short irq, int port,
2782 int is_pcmcia, struct pci_dev *pci,
2783 struct device *dmdev )
2784 {
2785 struct net_device *dev;
2786 struct airo_info *ai;
2787 int i, rc;
2788
2789 /* Create the network device object. */
2790 dev = alloc_etherdev(sizeof(*ai));
2791 if (!dev) {
2792 airo_print_err("", "Couldn't alloc_etherdev");
2793 return NULL;
2794 }
2795 if (dev_alloc_name(dev, dev->name) < 0) {
2796 airo_print_err("", "Couldn't get name!");
2797 goto err_out_free;
2798 }
2799
2800 ai = dev->priv;
2801 ai->wifidev = NULL;
2802 ai->flags = 0;
2803 ai->jobs = 0;
2804 ai->dev = dev;
2805 if (pci && (pci->device == 0x5000 || pci->device == 0xa504)) {
2806 airo_print_dbg(dev->name, "Found an MPI350 card");
2807 set_bit(FLAG_MPI, &ai->flags);
2808 }
2809 spin_lock_init(&ai->aux_lock);
2810 sema_init(&ai->sem, 1);
2811 ai->config.len = 0;
2812 ai->pci = pci;
2813 init_waitqueue_head (&ai->thr_wait);
2814 ai->airo_thread_task = kthread_run(airo_thread, dev, dev->name);
2815 if (IS_ERR(ai->airo_thread_task))
2816 goto err_out_free;
2817 ai->tfm = NULL;
2818 rc = add_airo_dev( dev );
2819 if (rc)
2820 goto err_out_thr;
2821
2822 if (airo_networks_allocate (ai))
2823 goto err_out_unlink;
2824 airo_networks_initialize (ai);
2825
2826 /* The Airo-specific entries in the device structure. */
2827 if (test_bit(FLAG_MPI,&ai->flags)) {
2828 skb_queue_head_init (&ai->txq);
2829 dev->hard_start_xmit = &mpi_start_xmit;
2830 } else
2831 dev->hard_start_xmit = &airo_start_xmit;
2832 dev->get_stats = &airo_get_stats;
2833 dev->set_multicast_list = &airo_set_multicast_list;
2834 dev->set_mac_address = &airo_set_mac_address;
2835 dev->do_ioctl = &airo_ioctl;
2836 dev->wireless_handlers = &airo_handler_def;
2837 ai->wireless_data.spy_data = &ai->spy_data;
2838 dev->wireless_data = &ai->wireless_data;
2839 dev->change_mtu = &airo_change_mtu;
2840 dev->open = &airo_open;
2841 dev->stop = &airo_close;
2842 dev->irq = irq;
2843 dev->base_addr = port;
2844
2845 SET_NETDEV_DEV(dev, dmdev);
2846
2847 reset_card (dev, 1);
2848 msleep(400);
2849
2850 rc = request_irq( dev->irq, airo_interrupt, IRQF_SHARED, dev->name, dev );
2851 if (rc) {
2852 airo_print_err(dev->name, "register interrupt %d failed, rc %d",
2853 irq, rc);
2854 goto err_out_unlink;
2855 }
2856 if (!is_pcmcia) {
2857 if (!request_region( dev->base_addr, 64, dev->name )) {
2858 rc = -EBUSY;
2859 airo_print_err(dev->name, "Couldn't request region");
2860 goto err_out_irq;
2861 }
2862 }
2863
2864 if (test_bit(FLAG_MPI,&ai->flags)) {
2865 if (mpi_map_card(ai, pci, dev->name)) {
2866 airo_print_err(dev->name, "Could not map memory");
2867 goto err_out_res;
2868 }
2869 }
2870
2871 if (probe) {
2872 if ( setup_card( ai, dev->dev_addr, 1 ) != SUCCESS ) {
2873 airo_print_err(dev->name, "MAC could not be enabled" );
2874 rc = -EIO;
2875 goto err_out_map;
2876 }
2877 } else if (!test_bit(FLAG_MPI,&ai->flags)) {
2878 ai->bap_read = fast_bap_read;
2879 set_bit(FLAG_FLASHING, &ai->flags);
2880 }
2881
2882 /* Test for WPA support */
2883 if (airo_test_wpa_capable(ai)) {
2884 set_bit(FLAG_WPA_CAPABLE, &ai->flags);
2885 ai->bssListFirst = RID_WPA_BSSLISTFIRST;
2886 ai->bssListNext = RID_WPA_BSSLISTNEXT;
2887 ai->bssListRidLen = sizeof(BSSListRid);
2888 } else {
2889 ai->bssListFirst = RID_BSSLISTFIRST;
2890 ai->bssListNext = RID_BSSLISTNEXT;
2891 ai->bssListRidLen = sizeof(BSSListRid) - sizeof(BSSListRidExtra);
2892 }
2893
2894 rc = register_netdev(dev);
2895 if (rc) {
2896 airo_print_err(dev->name, "Couldn't register_netdev");
2897 goto err_out_map;
2898 }
2899 ai->wifidev = init_wifidev(ai, dev);
2900
2901 set_bit(FLAG_REGISTERED,&ai->flags);
2902 airo_print_info(dev->name, "MAC enabled %x:%x:%x:%x:%x:%x",
2903 dev->dev_addr[0], dev->dev_addr[1], dev->dev_addr[2],
2904 dev->dev_addr[3], dev->dev_addr[4], dev->dev_addr[5] );
2905
2906 /* Allocate the transmit buffers */
2907 if (probe && !test_bit(FLAG_MPI,&ai->flags))
2908 for( i = 0; i < MAX_FIDS; i++ )
2909 ai->fids[i] = transmit_allocate(ai,AIRO_DEF_MTU,i>=MAX_FIDS/2);
2910
2911 setup_proc_entry( dev, dev->priv ); /* XXX check for failure */
2912 netif_start_queue(dev);
2913 SET_MODULE_OWNER(dev);
2914 return dev;
2915
2916 err_out_map:
2917 if (test_bit(FLAG_MPI,&ai->flags) && pci) {
2918 pci_free_consistent(pci, PCI_SHARED_LEN, ai->shared, ai->shared_dma);
2919 iounmap(ai->pciaux);
2920 iounmap(ai->pcimem);
2921 mpi_unmap_card(ai->pci);
2922 }
2923 err_out_res:
2924 if (!is_pcmcia)
2925 release_region( dev->base_addr, 64 );
2926 err_out_irq:
2927 free_irq(dev->irq, dev);
2928 err_out_unlink:
2929 del_airo_dev(dev);
2930 err_out_thr:
2931 set_bit(JOB_DIE, &ai->jobs);
2932 kthread_stop(ai->airo_thread_task);
2933 err_out_free:
2934 free_netdev(dev);
2935 return NULL;
2936 }
2937
2938 struct net_device *init_airo_card( unsigned short irq, int port, int is_pcmcia,
2939 struct device *dmdev)
2940 {
2941 return _init_airo_card ( irq, port, is_pcmcia, NULL, dmdev);
2942 }
2943
2944 EXPORT_SYMBOL(init_airo_card);
2945
2946 static int waitbusy (struct airo_info *ai) {
2947 int delay = 0;
2948 while ((IN4500 (ai, COMMAND) & COMMAND_BUSY) & (delay < 10000)) {
2949 udelay (10);
2950 if ((++delay % 20) == 0)
2951 OUT4500(ai, EVACK, EV_CLEARCOMMANDBUSY);
2952 }
2953 return delay < 10000;
2954 }
2955
2956 int reset_airo_card( struct net_device *dev )
2957 {
2958 int i;
2959 struct airo_info *ai = dev->priv;
2960
2961 if (reset_card (dev, 1))
2962 return -1;
2963
2964 if ( setup_card(ai, dev->dev_addr, 1 ) != SUCCESS ) {
2965 airo_print_err(dev->name, "MAC could not be enabled");
2966 return -1;
2967 }
2968 airo_print_info(dev->name, "MAC enabled %x:%x:%x:%x:%x:%x",
2969 dev->dev_addr[0], dev->dev_addr[1], dev->dev_addr[2],
2970 dev->dev_addr[3], dev->dev_addr[4], dev->dev_addr[5]);
2971 /* Allocate the transmit buffers if needed */
2972 if (!test_bit(FLAG_MPI,&ai->flags))
2973 for( i = 0; i < MAX_FIDS; i++ )
2974 ai->fids[i] = transmit_allocate (ai,AIRO_DEF_MTU,i>=MAX_FIDS/2);
2975
2976 enable_interrupts( ai );
2977 netif_wake_queue(dev);
2978 return 0;
2979 }
2980
2981 EXPORT_SYMBOL(reset_airo_card);
2982
2983 static void airo_send_event(struct net_device *dev) {
2984 struct airo_info *ai = dev->priv;
2985 union iwreq_data wrqu;
2986 StatusRid status_rid;
2987
2988 clear_bit(JOB_EVENT, &ai->jobs);
2989 PC4500_readrid(ai, RID_STATUS, &status_rid, sizeof(status_rid), 0);
2990 up(&ai->sem);
2991 wrqu.data.length = 0;
2992 wrqu.data.flags = 0;
2993 memcpy(wrqu.ap_addr.sa_data, status_rid.bssid[0], ETH_ALEN);
2994 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
2995
2996 /* Send event to user space */
2997 wireless_send_event(dev, SIOCGIWAP, &wrqu, NULL);
2998 }
2999
3000 static void airo_process_scan_results (struct airo_info *ai) {
3001 union iwreq_data wrqu;
3002 BSSListRid bss;
3003 int rc;
3004 BSSListElement * loop_net;
3005 BSSListElement * tmp_net;
3006
3007 /* Blow away current list of scan results */
3008 list_for_each_entry_safe (loop_net, tmp_net, &ai->network_list, list) {
3009 list_move_tail (&loop_net->list, &ai->network_free_list);
3010 /* Don't blow away ->list, just BSS data */
3011 memset (loop_net, 0, sizeof (loop_net->bss));
3012 }
3013
3014 /* Try to read the first entry of the scan result */
3015 rc = PC4500_readrid(ai, ai->bssListFirst, &bss, ai->bssListRidLen, 0);
3016 if((rc) || (bss.index == 0xffff)) {
3017 /* No scan results */
3018 goto out;
3019 }
3020
3021 /* Read and parse all entries */
3022 tmp_net = NULL;
3023 while((!rc) && (bss.index != 0xffff)) {
3024 /* Grab a network off the free list */
3025 if (!list_empty(&ai->network_free_list)) {
3026 tmp_net = list_entry(ai->network_free_list.next,
3027 BSSListElement, list);
3028 list_del(ai->network_free_list.next);
3029 }
3030
3031 if (tmp_net != NULL) {
3032 memcpy(tmp_net, &bss, sizeof(tmp_net->bss));
3033 list_add_tail(&tmp_net->list, &ai->network_list);
3034 tmp_net = NULL;
3035 }
3036
3037 /* Read next entry */
3038 rc = PC4500_readrid(ai, ai->bssListNext,
3039 &bss, ai->bssListRidLen, 0);
3040 }
3041
3042 out:
3043 ai->scan_timeout = 0;
3044 clear_bit(JOB_SCAN_RESULTS, &ai->jobs);
3045 up(&ai->sem);
3046
3047 /* Send an empty event to user space.
3048 * We don't send the received data on
3049 * the event because it would require
3050 * us to do complex transcoding, and
3051 * we want to minimise the work done in
3052 * the irq handler. Use a request to
3053 * extract the data - Jean II */
3054 wrqu.data.length = 0;
3055 wrqu.data.flags = 0;
3056 wireless_send_event(ai->dev, SIOCGIWSCAN, &wrqu, NULL);
3057 }
3058
3059 static int airo_thread(void *data) {
3060 struct net_device *dev = data;
3061 struct airo_info *ai = dev->priv;
3062 int locked;
3063
3064 while(1) {
3065 /* make swsusp happy with our thread */
3066 try_to_freeze();
3067
3068 if (test_bit(JOB_DIE, &ai->jobs))
3069 break;
3070
3071 if (ai->jobs) {
3072 locked = down_interruptible(&ai->sem);
3073 } else {
3074 wait_queue_t wait;
3075
3076 init_waitqueue_entry(&wait, current);
3077 add_wait_queue(&ai->thr_wait, &wait);
3078 for (;;) {
3079 set_current_state(TASK_INTERRUPTIBLE);
3080 if (ai->jobs)
3081 break;
3082 if (ai->expires || ai->scan_timeout) {
3083 if (ai->scan_timeout &&
3084 time_after_eq(jiffies,ai->scan_timeout)){
3085 set_bit(JOB_SCAN_RESULTS, &ai->jobs);
3086 break;
3087 } else if (ai->expires &&
3088 time_after_eq(jiffies,ai->expires)){
3089 set_bit(JOB_AUTOWEP, &ai->jobs);
3090 break;
3091 }
3092 if (!kthread_should_stop()) {
3093 unsigned long wake_at;
3094 if (!ai->expires || !ai->scan_timeout) {
3095 wake_at = max(ai->expires,
3096 ai->scan_timeout);
3097 } else {
3098 wake_at = min(ai->expires,
3099 ai->scan_timeout);
3100 }
3101 schedule_timeout(wake_at - jiffies);
3102 continue;
3103 }
3104 } else if (!kthread_should_stop()) {
3105 schedule();
3106 continue;
3107 }
3108 break;
3109 }
3110 current->state = TASK_RUNNING;
3111 remove_wait_queue(&ai->thr_wait, &wait);
3112 locked = 1;
3113 }
3114
3115 if (locked)
3116 continue;
3117
3118 if (test_bit(JOB_DIE, &ai->jobs)) {
3119 up(&ai->sem);
3120 break;
3121 }
3122
3123 if (ai->power.event || test_bit(FLAG_FLASHING, &ai->flags)) {
3124 up(&ai->sem);
3125 continue;
3126 }
3127
3128 if (test_bit(JOB_XMIT, &ai->jobs))
3129 airo_end_xmit(dev);
3130 else if (test_bit(JOB_XMIT11, &ai->jobs))
3131 airo_end_xmit11(dev);
3132 else if (test_bit(JOB_STATS, &ai->jobs))
3133 airo_read_stats(ai);
3134 else if (test_bit(JOB_WSTATS, &ai->jobs))
3135 airo_read_wireless_stats(ai);
3136 else if (test_bit(JOB_PROMISC, &ai->jobs))
3137 airo_set_promisc(ai);
3138 else if (test_bit(JOB_MIC, &ai->jobs))
3139 micinit(ai);
3140 else if (test_bit(JOB_EVENT, &ai->jobs))
3141 airo_send_event(dev);
3142 else if (test_bit(JOB_AUTOWEP, &ai->jobs))
3143 timer_func(dev);
3144 else if (test_bit(JOB_SCAN_RESULTS, &ai->jobs))
3145 airo_process_scan_results(ai);
3146 else /* Shouldn't get here, but we make sure to unlock */
3147 up(&ai->sem);
3148 }
3149
3150 return 0;
3151 }
3152
3153 static irqreturn_t airo_interrupt ( int irq, void* dev_id) {
3154 struct net_device *dev = (struct net_device *)dev_id;
3155 u16 status;
3156 u16 fid;
3157 struct airo_info *apriv = dev->priv;
3158 u16 savedInterrupts = 0;
3159 int handled = 0;
3160
3161 if (!netif_device_present(dev))
3162 return IRQ_NONE;
3163
3164 for (;;) {
3165 status = IN4500( apriv, EVSTAT );
3166 if ( !(status & STATUS_INTS) || status == 0xffff ) break;
3167
3168 handled = 1;
3169
3170 if ( status & EV_AWAKE ) {
3171 OUT4500( apriv, EVACK, EV_AWAKE );
3172 OUT4500( apriv, EVACK, EV_AWAKE );
3173 }
3174
3175 if (!savedInterrupts) {
3176 savedInterrupts = IN4500( apriv, EVINTEN );
3177 OUT4500( apriv, EVINTEN, 0 );
3178 }
3179
3180 if ( status & EV_MIC ) {
3181 OUT4500( apriv, EVACK, EV_MIC );
3182 if (test_bit(FLAG_MIC_CAPABLE, &apriv->flags)) {
3183 set_bit(JOB_MIC, &apriv->jobs);
3184 wake_up_interruptible(&apriv->thr_wait);
3185 }
3186 }
3187 if ( status & EV_LINK ) {
3188 union iwreq_data wrqu;
3189 int scan_forceloss = 0;
3190 /* The link status has changed, if you want to put a
3191 monitor hook in, do it here. (Remember that
3192 interrupts are still disabled!)
3193 */
3194 u16 newStatus = IN4500(apriv, LINKSTAT);
3195 OUT4500( apriv, EVACK, EV_LINK);
3196 /* Here is what newStatus means: */
3197 #define NOBEACON 0x8000 /* Loss of sync - missed beacons */
3198 #define MAXRETRIES 0x8001 /* Loss of sync - max retries */
3199 #define MAXARL 0x8002 /* Loss of sync - average retry level exceeded*/
3200 #define FORCELOSS 0x8003 /* Loss of sync - host request */
3201 #define TSFSYNC 0x8004 /* Loss of sync - TSF synchronization */
3202 #define DEAUTH 0x8100 /* Deauthentication (low byte is reason code) */
3203 #define DISASS 0x8200 /* Disassociation (low byte is reason code) */
3204 #define ASSFAIL 0x8400 /* Association failure (low byte is reason
3205 code) */
3206 #define AUTHFAIL 0x0300 /* Authentication failure (low byte is reason
3207 code) */
3208 #define ASSOCIATED 0x0400 /* Associated */
3209 #define REASSOCIATED 0x0600 /* Reassociated? Only on firmware >= 5.30.17 */
3210 #define RC_RESERVED 0 /* Reserved return code */
3211 #define RC_NOREASON 1 /* Unspecified reason */
3212 #define RC_AUTHINV 2 /* Previous authentication invalid */
3213 #define RC_DEAUTH 3 /* Deauthenticated because sending station is
3214 leaving */
3215 #define RC_NOACT 4 /* Disassociated due to inactivity */
3216 #define RC_MAXLOAD 5 /* Disassociated because AP is unable to handle
3217 all currently associated stations */
3218 #define RC_BADCLASS2 6 /* Class 2 frame received from
3219 non-Authenticated station */
3220 #define RC_BADCLASS3 7 /* Class 3 frame received from
3221 non-Associated station */
3222 #define RC_STATLEAVE 8 /* Disassociated because sending station is
3223 leaving BSS */
3224 #define RC_NOAUTH 9 /* Station requesting (Re)Association is not
3225 Authenticated with the responding station */
3226 if (newStatus == FORCELOSS && apriv->scan_timeout > 0)
3227 scan_forceloss = 1;
3228 if(newStatus == ASSOCIATED || newStatus == REASSOCIATED) {
3229 if (auto_wep)
3230 apriv->expires = 0;
3231 if (apriv->list_bss_task)
3232 wake_up_process(apriv->list_bss_task);
3233 set_bit(FLAG_UPDATE_UNI, &apriv->flags);
3234 set_bit(FLAG_UPDATE_MULTI, &apriv->flags);
3235
3236 if (down_trylock(&apriv->sem) != 0) {
3237 set_bit(JOB_EVENT, &apriv->jobs);
3238 wake_up_interruptible(&apriv->thr_wait);
3239 } else
3240 airo_send_event(dev);
3241 } else if (!scan_forceloss) {
3242 if (auto_wep && !apriv->expires) {
3243 apriv->expires = RUN_AT(3*HZ);
3244 wake_up_interruptible(&apriv->thr_wait);
3245 }
3246
3247 /* Send event to user space */
3248 memset(wrqu.ap_addr.sa_data, '\0', ETH_ALEN);
3249 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
3250 wireless_send_event(dev, SIOCGIWAP, &wrqu,NULL);
3251 }
3252 }
3253
3254 /* Check to see if there is something to receive */
3255 if ( status & EV_RX ) {
3256 struct sk_buff *skb = NULL;
3257 u16 fc, len, hdrlen = 0;
3258 #pragma pack(1)
3259 struct {
3260 u16 status, len;
3261 u8 rssi[2];
3262 u8 rate;
3263 u8 freq;
3264 u16 tmp[4];
3265 } hdr;
3266 #pragma pack()
3267 u16 gap;
3268 u16 tmpbuf[4];
3269 u16 *buffer;
3270
3271 if (test_bit(FLAG_MPI,&apriv->flags)) {
3272 if (test_bit(FLAG_802_11, &apriv->flags))
3273 mpi_receive_802_11(apriv);
3274 else
3275 mpi_receive_802_3(apriv);
3276 OUT4500(apriv, EVACK, EV_RX);
3277 goto exitrx;
3278 }
3279
3280 fid = IN4500( apriv, RXFID );
3281
3282 /* Get the packet length */
3283 if (test_bit(FLAG_802_11, &apriv->flags)) {
3284 bap_setup (apriv, fid, 4, BAP0);
3285 bap_read (apriv, (u16*)&hdr, sizeof(hdr), BAP0);
3286 /* Bad CRC. Ignore packet */
3287 if (le16_to_cpu(hdr.status) & 2)
3288 hdr.len = 0;
3289 if (apriv->wifidev == NULL)
3290 hdr.len = 0;
3291 } else {
3292 bap_setup (apriv, fid, 0x36, BAP0);
3293 bap_read (apriv, (u16*)&hdr.len, 2, BAP0);
3294 }
3295 len = le16_to_cpu(hdr.len);
3296
3297 if (len > AIRO_DEF_MTU) {
3298 airo_print_err(apriv->dev->name, "Bad size %d", len);
3299 goto badrx;
3300 }
3301 if (len == 0)
3302 goto badrx;
3303
3304 if (test_bit(FLAG_802_11, &apriv->flags)) {
3305 bap_read (apriv, (u16*)&fc, sizeof(fc), BAP0);
3306 fc = le16_to_cpu(fc);
3307 switch (fc & 0xc) {
3308 case 4:
3309 if ((fc & 0xe0) == 0xc0)
3310 hdrlen = 10;
3311 else
3312 hdrlen = 16;
3313 break;
3314 case 8:
3315 if ((fc&0x300)==0x300){
3316 hdrlen = 30;
3317 break;
3318 }
3319 default:
3320 hdrlen = 24;
3321 }
3322 } else
3323 hdrlen = ETH_ALEN * 2;
3324
3325 skb = dev_alloc_skb( len + hdrlen + 2 + 2 );
3326 if ( !skb ) {
3327 apriv->stats.rx_dropped++;
3328 goto badrx;
3329 }
3330 skb_reserve(skb, 2); /* This way the IP header is aligned */
3331 buffer = (u16*)skb_put (skb, len + hdrlen);
3332 if (test_bit(FLAG_802_11, &apriv->flags)) {
3333 buffer[0] = fc;
3334 bap_read (apriv, buffer + 1, hdrlen - 2, BAP0);
3335 if (hdrlen == 24)
3336 bap_read (apriv, tmpbuf, 6, BAP0);
3337
3338 bap_read (apriv, &gap, sizeof(gap), BAP0);
3339 gap = le16_to_cpu(gap);
3340 if (gap) {
3341 if (gap <= 8) {
3342 bap_read (apriv, tmpbuf, gap, BAP0);
3343 } else {
3344 airo_print_err(apriv->dev->name, "gaplen too "
3345 "big. Problems will follow...");
3346 }
3347 }
3348 bap_read (apriv, buffer + hdrlen/2, len, BAP0);
3349 } else {
3350 MICBuffer micbuf;
3351 bap_read (apriv, buffer, ETH_ALEN*2, BAP0);
3352 if (apriv->micstats.enabled) {
3353 bap_read (apriv,(u16*)&micbuf,sizeof(micbuf),BAP0);
3354 if (ntohs(micbuf.typelen) > 0x05DC)
3355 bap_setup (apriv, fid, 0x44, BAP0);
3356 else {
3357 if (len <= sizeof(micbuf))
3358 goto badmic;
3359
3360 len -= sizeof(micbuf);
3361 skb_trim (skb, len + hdrlen);
3362 }
3363 }
3364 bap_read(apriv,buffer+ETH_ALEN,len,BAP0);
3365 if (decapsulate(apriv,&micbuf,(etherHead*)buffer,len)) {
3366 badmic:
3367 dev_kfree_skb_irq (skb);
3368 badrx:
3369 OUT4500( apriv, EVACK, EV_RX);
3370 goto exitrx;
3371 }
3372 }
3373 #ifdef WIRELESS_SPY
3374 if (apriv->spy_data.spy_number > 0) {
3375 char *sa;
3376 struct iw_quality wstats;
3377 /* Prepare spy data : addr + qual */
3378 if (!test_bit(FLAG_802_11, &apriv->flags)) {
3379 sa = (char*)buffer + 6;
3380 bap_setup (apriv, fid, 8, BAP0);
3381 bap_read (apriv, (u16*)hdr.rssi, 2, BAP0);
3382 } else
3383 sa = (char*)buffer + 10;
3384 wstats.qual = hdr.rssi[0];
3385 if (apriv->rssi)
3386 wstats.level = 0x100 - apriv->rssi[hdr.rssi[1]].rssidBm;
3387 else
3388 wstats.level = (hdr.rssi[1] + 321) / 2;
3389 wstats.noise = apriv->wstats.qual.noise;
3390 wstats.updated = IW_QUAL_LEVEL_UPDATED
3391 | IW_QUAL_QUAL_UPDATED
3392 | IW_QUAL_DBM;
3393 /* Update spy records */
3394 wireless_spy_update(dev, sa, &wstats);
3395 }
3396 #endif /* WIRELESS_SPY */
3397 OUT4500( apriv, EVACK, EV_RX);
3398
3399 if (test_bit(FLAG_802_11, &apriv->flags)) {
3400 skb->mac.raw = skb->data;
3401 skb->pkt_type = PACKET_OTHERHOST;
3402 skb->dev = apriv->wifidev;
3403 skb->protocol = htons(ETH_P_802_2);
3404 } else {
3405 skb->dev = dev;
3406 skb->protocol = eth_type_trans(skb,dev);
3407 }
3408 skb->dev->last_rx = jiffies;
3409 skb->ip_summed = CHECKSUM_NONE;
3410
3411 netif_rx( skb );
3412 }
3413 exitrx:
3414
3415 /* Check to see if a packet has been transmitted */
3416 if ( status & ( EV_TX|EV_TXCPY|EV_TXEXC ) ) {
3417 int i;
3418 int len = 0;
3419 int index = -1;
3420
3421 if (test_bit(FLAG_MPI,&apriv->flags)) {
3422 unsigned long flags;
3423
3424 if (status & EV_TXEXC)
3425 get_tx_error(apriv, -1);
3426 spin_lock_irqsave(&apriv->aux_lock, flags);
3427 if (!skb_queue_empty(&apriv->txq)) {
3428 spin_unlock_irqrestore(&apriv->aux_lock,flags);
3429 mpi_send_packet (dev);
3430 } else {
3431 clear_bit(FLAG_PENDING_XMIT, &apriv->flags);
3432 spin_unlock_irqrestore(&apriv->aux_lock,flags);
3433 netif_wake_queue (dev);
3434 }
3435 OUT4500( apriv, EVACK,
3436 status & (EV_TX|EV_TXCPY|EV_TXEXC));
3437 goto exittx;
3438 }
3439
3440 fid = IN4500(apriv, TXCOMPLFID);
3441
3442 for( i = 0; i < MAX_FIDS; i++ ) {
3443 if ( ( apriv->fids[i] & 0xffff ) == fid ) {
3444 len = apriv->fids[i] >> 16;
3445 index = i;
3446 }
3447 }
3448 if (index != -1) {
3449 if (status & EV_TXEXC)
3450 get_tx_error(apriv, index);
3451 OUT4500( apriv, EVACK, status & (EV_TX | EV_TXEXC));
3452 /* Set up to be used again */
3453 apriv->fids[index] &= 0xffff;
3454 if (index < MAX_FIDS / 2) {
3455 if (!test_bit(FLAG_PENDING_XMIT, &apriv->flags))
3456 netif_wake_queue(dev);
3457 } else {
3458 if (!test_bit(FLAG_PENDING_XMIT11, &apriv->flags))
3459 netif_wake_queue(apriv->wifidev);
3460 }
3461 } else {
3462 OUT4500( apriv, EVACK, status & (EV_TX | EV_TXCPY | EV_TXEXC));
3463 airo_print_err(apriv->dev->name, "Unallocated FID was "
3464 "used to xmit" );
3465 }
3466 }
3467 exittx:
3468 if ( status & ~STATUS_INTS & ~IGNORE_INTS )
3469 airo_print_warn(apriv->dev->name, "Got weird status %x",
3470 status & ~STATUS_INTS & ~IGNORE_INTS );
3471 }
3472
3473 if (savedInterrupts)
3474 OUT4500( apriv, EVINTEN, savedInterrupts );
3475
3476 /* done.. */
3477 return IRQ_RETVAL(handled);
3478 }
3479
3480 /*
3481 * Routines to talk to the card
3482 */
3483
3484 /*
3485 * This was originally written for the 4500, hence the name
3486 * NOTE: If use with 8bit mode and SMP bad things will happen!
3487 * Why would some one do 8 bit IO in an SMP machine?!?
3488 */
3489 static void OUT4500( struct airo_info *ai, u16 reg, u16 val ) {
3490 if (test_bit(FLAG_MPI,&ai->flags))
3491 reg <<= 1;
3492 if ( !do8bitIO )
3493 outw( val, ai->dev->base_addr + reg );
3494 else {
3495 outb( val & 0xff, ai->dev->base_addr + reg );
3496 outb( val >> 8, ai->dev->base_addr + reg + 1 );
3497 }
3498 }
3499
3500 static u16 IN4500( struct airo_info *ai, u16 reg ) {
3501 unsigned short rc;
3502
3503 if (test_bit(FLAG_MPI,&ai->flags))
3504 reg <<= 1;
3505 if ( !do8bitIO )
3506 rc = inw( ai->dev->base_addr + reg );
3507 else {
3508 rc = inb( ai->dev->base_addr + reg );
3509 rc += ((int)inb( ai->dev->base_addr + reg + 1 )) << 8;
3510 }
3511 return rc;
3512 }
3513
3514 static int enable_MAC( struct airo_info *ai, Resp *rsp, int lock ) {
3515 int rc;
3516 Cmd cmd;
3517
3518 /* FLAG_RADIO_OFF : Radio disabled via /proc or Wireless Extensions
3519 * FLAG_RADIO_DOWN : Radio disabled via "ifconfig ethX down"
3520 * Note : we could try to use !netif_running(dev) in enable_MAC()
3521 * instead of this flag, but I don't trust it *within* the
3522 * open/close functions, and testing both flags together is
3523 * "cheaper" - Jean II */
3524 if (ai->flags & FLAG_RADIO_MASK) return SUCCESS;
3525
3526 if (lock && down_interruptible(&ai->sem))
3527 return -ERESTARTSYS;
3528
3529 if (!test_bit(FLAG_ENABLED, &ai->flags)) {
3530 memset(&cmd, 0, sizeof(cmd));
3531 cmd.cmd = MAC_ENABLE;
3532 rc = issuecommand(ai, &cmd, rsp);
3533 if (rc == SUCCESS)
3534 set_bit(FLAG_ENABLED, &ai->flags);
3535 } else
3536 rc = SUCCESS;
3537
3538 if (lock)
3539 up(&ai->sem);
3540
3541 if (rc)
3542 airo_print_err(ai->dev->name, "%s: Cannot enable MAC, err=%d",
3543 __FUNCTION__, rc);
3544 return rc;
3545 }
3546
3547 static void disable_MAC( struct airo_info *ai, int lock ) {
3548 Cmd cmd;
3549 Resp rsp;
3550
3551 if (lock && down_interruptible(&ai->sem))
3552 return;
3553
3554 if (test_bit(FLAG_ENABLED, &ai->flags)) {
3555 memset(&cmd, 0, sizeof(cmd));
3556 cmd.cmd = MAC_DISABLE; // disable in case already enabled
3557 issuecommand(ai, &cmd, &rsp);
3558 clear_bit(FLAG_ENABLED, &ai->flags);
3559 }
3560 if (lock)
3561 up(&ai->sem);
3562 }
3563
3564 static void enable_interrupts( struct airo_info *ai ) {
3565 /* Enable the interrupts */
3566 OUT4500( ai, EVINTEN, STATUS_INTS );
3567 }
3568
3569 static void disable_interrupts( struct airo_info *ai ) {
3570 OUT4500( ai, EVINTEN, 0 );
3571 }
3572
3573 static void mpi_receive_802_3(struct airo_info *ai)
3574 {
3575 RxFid rxd;
3576 int len = 0;
3577 struct sk_buff *skb;
3578 char *buffer;
3579 int off = 0;
3580 MICBuffer micbuf;
3581
3582 memcpy_fromio(&rxd, ai->rxfids[0].card_ram_off, sizeof(rxd));
3583 /* Make sure we got something */
3584 if (rxd.rdy && rxd.valid == 0) {
3585 len = rxd.len + 12;
3586 if (len < 12 || len > 2048)
3587 goto badrx;
3588
3589 skb = dev_alloc_skb(len);
3590 if (!skb) {
3591 ai->stats.rx_dropped++;
3592 goto badrx;
3593 }
3594 buffer = skb_put(skb,len);
3595 memcpy(buffer, ai->rxfids[0].virtual_host_addr, ETH_ALEN * 2);
3596 if (ai->micstats.enabled) {
3597 memcpy(&micbuf,
3598 ai->rxfids[0].virtual_host_addr + ETH_ALEN * 2,
3599 sizeof(micbuf));
3600 if (ntohs(micbuf.typelen) <= 0x05DC) {
3601 if (len <= sizeof(micbuf) + ETH_ALEN * 2)
3602 goto badmic;
3603
3604 off = sizeof(micbuf);
3605 skb_trim (skb, len - off);
3606 }
3607 }
3608 memcpy(buffer + ETH_ALEN * 2,
3609 ai->rxfids[0].virtual_host_addr + ETH_ALEN * 2 + off,
3610 len - ETH_ALEN * 2 - off);
3611 if (decapsulate (ai, &micbuf, (etherHead*)buffer, len - off - ETH_ALEN * 2)) {
3612 badmic:
3613 dev_kfree_skb_irq (skb);
3614 goto badrx;
3615 }
3616 #ifdef WIRELESS_SPY
3617 if (ai->spy_data.spy_number > 0) {
3618 char *sa;
3619 struct iw_quality wstats;
3620 /* Prepare spy data : addr + qual */
3621 sa = buffer + ETH_ALEN;
3622 wstats.qual = 0; /* XXX Where do I get that info from ??? */
3623 wstats.level = 0;
3624 wstats.updated = 0;
3625 /* Update spy records */
3626 wireless_spy_update(ai->dev, sa, &wstats);
3627 }
3628 #endif /* WIRELESS_SPY */
3629
3630 skb->dev = ai->dev;
3631 skb->ip_summed = CHECKSUM_NONE;
3632 skb->protocol = eth_type_trans(skb, ai->dev);
3633 skb->dev->last_rx = jiffies;
3634 netif_rx(skb);
3635 }
3636 badrx:
3637 if (rxd.valid == 0) {
3638 rxd.valid = 1;
3639 rxd.rdy = 0;
3640 rxd.len = PKTSIZE;
3641 memcpy_toio(ai->rxfids[0].card_ram_off, &rxd, sizeof(rxd));
3642 }
3643 }
3644
3645 void mpi_receive_802_11 (struct airo_info *ai)
3646 {
3647 RxFid rxd;
3648 struct sk_buff *skb = NULL;
3649 u16 fc, len, hdrlen = 0;
3650 #pragma pack(1)
3651 struct {
3652 u16 status, len;
3653 u8 rssi[2];
3654 u8 rate;
3655 u8 freq;
3656 u16 tmp[4];
3657 } hdr;
3658 #pragma pack()
3659 u16 gap;
3660 u16 *buffer;
3661 char *ptr = ai->rxfids[0].virtual_host_addr+4;
3662
3663 memcpy_fromio(&rxd, ai->rxfids[0].card_ram_off, sizeof(rxd));
3664 memcpy ((char *)&hdr, ptr, sizeof(hdr));
3665 ptr += sizeof(hdr);
3666 /* Bad CRC. Ignore packet */
3667 if (le16_to_cpu(hdr.status) & 2)
3668 hdr.len = 0;
3669 if (ai->wifidev == NULL)
3670 hdr.len = 0;
3671 len = le16_to_cpu(hdr.len);
3672 if (len > AIRO_DEF_MTU) {
3673 airo_print_err(ai->dev->name, "Bad size %d", len);
3674 goto badrx;
3675 }
3676 if (len == 0)
3677 goto badrx;
3678
3679 memcpy ((char *)&fc, ptr, sizeof(fc));
3680 fc = le16_to_cpu(fc);
3681 switch (fc & 0xc) {
3682 case 4:
3683 if ((fc & 0xe0) == 0xc0)
3684 hdrlen = 10;
3685 else
3686 hdrlen = 16;
3687 break;
3688 case 8:
3689 if ((fc&0x300)==0x300){
3690 hdrlen = 30;
3691 break;
3692 }
3693 default:
3694 hdrlen = 24;
3695 }
3696
3697 skb = dev_alloc_skb( len + hdrlen + 2 );
3698 if ( !skb ) {
3699 ai->stats.rx_dropped++;
3700 goto badrx;
3701 }
3702 buffer = (u16*)skb_put (skb, len + hdrlen);
3703 memcpy ((char *)buffer, ptr, hdrlen);
3704 ptr += hdrlen;
3705 if (hdrlen == 24)
3706 ptr += 6;
3707 memcpy ((char *)&gap, ptr, sizeof(gap));
3708 ptr += sizeof(gap);
3709 gap = le16_to_cpu(gap);
3710 if (gap) {
3711 if (gap <= 8)
3712 ptr += gap;
3713 else
3714 airo_print_err(ai->dev->name,
3715 "gaplen too big. Problems will follow...");
3716 }
3717 memcpy ((char *)buffer + hdrlen, ptr, len);
3718 ptr += len;
3719 #ifdef IW_WIRELESS_SPY /* defined in iw_handler.h */
3720 if (ai->spy_data.spy_number > 0) {
3721 char *sa;
3722 struct iw_quality wstats;
3723 /* Prepare spy data : addr + qual */
3724 sa = (char*)buffer + 10;
3725 wstats.qual = hdr.rssi[0];
3726 if (ai->rssi)
3727 wstats.level = 0x100 - ai->rssi[hdr.rssi[1]].rssidBm;
3728 else
3729 wstats.level = (hdr.rssi[1] + 321) / 2;
3730 wstats.noise = ai->wstats.qual.noise;
3731 wstats.updated = IW_QUAL_QUAL_UPDATED
3732 | IW_QUAL_LEVEL_UPDATED
3733 | IW_QUAL_DBM;
3734 /* Update spy records */
3735 wireless_spy_update(ai->dev, sa, &wstats);
3736 }
3737 #endif /* IW_WIRELESS_SPY */
3738 skb->mac.raw = skb->data;
3739 skb->pkt_type = PACKET_OTHERHOST;
3740 skb->dev = ai->wifidev;
3741 skb->protocol = htons(ETH_P_802_2);
3742 skb->dev->last_rx = jiffies;
3743 skb->ip_summed = CHECKSUM_NONE;
3744 netif_rx( skb );
3745 badrx:
3746 if (rxd.valid == 0) {
3747 rxd.valid = 1;
3748 rxd.rdy = 0;
3749 rxd.len = PKTSIZE;
3750 memcpy_toio(ai->rxfids[0].card_ram_off, &rxd, sizeof(rxd));
3751 }
3752 }
3753
3754 static u16 setup_card(struct airo_info *ai, u8 *mac, int lock)
3755 {
3756 Cmd cmd;
3757 Resp rsp;
3758 int status;
3759 int i;
3760 SsidRid mySsid;
3761 u16 lastindex;
3762 WepKeyRid wkr;
3763 int rc;
3764
3765 memset( &mySsid, 0, sizeof( mySsid ) );
3766 kfree (ai->flash);
3767 ai->flash = NULL;
3768
3769 /* The NOP is the first step in getting the card going */
3770 cmd.cmd = NOP;
3771 cmd.parm0 = cmd.parm1 = cmd.parm2 = 0;
3772 if (lock && down_interruptible(&ai->sem))
3773 return ERROR;
3774 if ( issuecommand( ai, &cmd, &rsp ) != SUCCESS ) {
3775 if (lock)
3776 up(&ai->sem);
3777 return ERROR;
3778 }
3779 disable_MAC( ai, 0);
3780
3781 // Let's figure out if we need to use the AUX port
3782 if (!test_bit(FLAG_MPI,&ai->flags)) {
3783 cmd.cmd = CMD_ENABLEAUX;
3784 if (issuecommand(ai, &cmd, &rsp) != SUCCESS) {
3785 if (lock)
3786 up(&ai->sem);
3787 airo_print_err(ai->dev->name, "Error checking for AUX port");
3788 return ERROR;
3789 }
3790 if (!aux_bap || rsp.status & 0xff00) {
3791 ai->bap_read = fast_bap_read;
3792 airo_print_dbg(ai->dev->name, "Doing fast bap_reads");
3793 } else {
3794 ai->bap_read = aux_bap_read;
3795 airo_print_dbg(ai->dev->name, "Doing AUX bap_reads");
3796 }
3797 }
3798 if (lock)
3799 up(&ai->sem);
3800 if (ai->config.len == 0) {
3801 tdsRssiRid rssi_rid;
3802 CapabilityRid cap_rid;
3803
3804 kfree(ai->APList);
3805 ai->APList = NULL;
3806 kfree(ai->SSID);
3807 ai->SSID = NULL;
3808 // general configuration (read/modify/write)
3809 status = readConfigRid(ai, lock);
3810 if ( status != SUCCESS ) return ERROR;
3811
3812 status = readCapabilityRid(ai, &cap_rid, lock);
3813 if ( status != SUCCESS ) return ERROR;
3814
3815 status = PC4500_readrid(ai,RID_RSSI,&rssi_rid,sizeof(rssi_rid),lock);
3816 if ( status == SUCCESS ) {
3817 if (ai->rssi || (ai->rssi = kmalloc(512, GFP_KERNEL)) != NULL)
3818 memcpy(ai->rssi, (u8*)&rssi_rid + 2, 512); /* Skip RID length member */
3819 }
3820 else {
3821 kfree(ai->rssi);
3822 ai->rssi = NULL;
3823 if (cap_rid.softCap & 8)
3824 ai->config.rmode |= RXMODE_NORMALIZED_RSSI;
3825 else
3826 airo_print_warn(ai->dev->name, "unknown received signal "
3827 "level scale");
3828 }
3829 ai->config.opmode = adhoc ? MODE_STA_IBSS : MODE_STA_ESS;
3830 ai->config.authType = AUTH_OPEN;
3831 ai->config.modulation = MOD_CCK;
3832
3833 if ((cap_rid.len>=sizeof(cap_rid)) && (cap_rid.extSoftCap&1) &&
3834 (micsetup(ai) == SUCCESS)) {
3835 ai->config.opmode |= MODE_MIC;
3836 set_bit(FLAG_MIC_CAPABLE, &ai->flags);
3837 }
3838
3839 /* Save off the MAC */
3840 for( i = 0; i < ETH_ALEN; i++ ) {
3841 mac[i] = ai->config.macAddr[i];
3842 }
3843
3844 /* Check to see if there are any insmod configured
3845 rates to add */
3846 if ( rates[0] ) {
3847 int i = 0;
3848 memset(ai->config.rates,0,sizeof(ai->config.rates));
3849 for( i = 0; i < 8 && rates[i]; i++ ) {
3850 ai->config.rates[i] = rates[i];
3851 }
3852 }
3853 if ( basic_rate > 0 ) {
3854 int i;
3855 for( i = 0; i < 8; i++ ) {
3856 if ( ai->config.rates[i] == basic_rate ||
3857 !ai->config.rates ) {
3858 ai->config.rates[i] = basic_rate | 0x80;
3859 break;
3860 }
3861 }
3862 }
3863 set_bit (FLAG_COMMIT, &ai->flags);
3864 }
3865
3866 /* Setup the SSIDs if present */
3867 if ( ssids[0] ) {
3868 int i;
3869 for( i = 0; i < 3 && ssids[i]; i++ ) {
3870 mySsid.ssids[i].len = strlen(ssids[i]);
3871 if ( mySsid.ssids[i].len > 32 )
3872 mySsid.ssids[i].len = 32;
3873 memcpy(mySsid.ssids[i].ssid, ssids[i],
3874 mySsid.ssids[i].len);
3875 }
3876 mySsid.len = sizeof(mySsid);
3877 }
3878
3879 status = writeConfigRid(ai, lock);
3880 if ( status != SUCCESS ) return ERROR;
3881
3882 /* Set up the SSID list */
3883 if ( ssids[0] ) {
3884 status = writeSsidRid(ai, &mySsid, lock);
3885 if ( status != SUCCESS ) return ERROR;
3886 }
3887
3888 status = enable_MAC(ai, &rsp, lock);
3889 if ( status != SUCCESS || (rsp.status & 0xFF00) != 0) {
3890 airo_print_err(ai->dev->name, "Bad MAC enable reason = %x, rid = %x,"
3891 " offset = %d", rsp.rsp0, rsp.rsp1, rsp.rsp2 );
3892 return ERROR;
3893 }
3894
3895 /* Grab the initial wep key, we gotta save it for auto_wep */
3896 rc = readWepKeyRid(ai, &wkr, 1, lock);
3897 if (rc == SUCCESS) do {
3898 lastindex = wkr.kindex;
3899 if (wkr.kindex == 0xffff) {
3900 ai->defindex = wkr.mac[0];
3901 }
3902 rc = readWepKeyRid(ai, &wkr, 0, lock);
3903 } while(lastindex != wkr.kindex);
3904
3905 if (auto_wep) {
3906 ai->expires = RUN_AT(3*HZ);
3907 wake_up_interruptible(&ai->thr_wait);
3908 }
3909
3910 return SUCCESS;
3911 }
3912
3913 static u16 issuecommand(struct airo_info *ai, Cmd *pCmd, Resp *pRsp) {
3914 // Im really paranoid about letting it run forever!
3915 int max_tries = 600000;
3916
3917 if (IN4500(ai, EVSTAT) & EV_CMD)
3918 OUT4500(ai, EVACK, EV_CMD);
3919
3920 OUT4500(ai, PARAM0, pCmd->parm0);
3921 OUT4500(ai, PARAM1, pCmd->parm1);
3922 OUT4500(ai, PARAM2, pCmd->parm2);
3923 OUT4500(ai, COMMAND, pCmd->cmd);
3924
3925 while (max_tries-- && (IN4500(ai, EVSTAT) & EV_CMD) == 0) {
3926 if ((IN4500(ai, COMMAND)) == pCmd->cmd)
3927 // PC4500 didn't notice command, try again
3928 OUT4500(ai, COMMAND, pCmd->cmd);
3929 if (!in_atomic() && (max_tries & 255) == 0)
3930 schedule();
3931 }
3932
3933 if ( max_tries == -1 ) {
3934 airo_print_err(ai->dev->name,
3935 "Max tries exceeded when issueing command");
3936 if (IN4500(ai, COMMAND) & COMMAND_BUSY)
3937 OUT4500(ai, EVACK, EV_CLEARCOMMANDBUSY);
3938 return ERROR;
3939 }
3940
3941 // command completed
3942 pRsp->status = IN4500(ai, STATUS);
3943 pRsp->rsp0 = IN4500(ai, RESP0);
3944 pRsp->rsp1 = IN4500(ai, RESP1);
3945 pRsp->rsp2 = IN4500(ai, RESP2);
3946 if ((pRsp->status & 0xff00)!=0 && pCmd->cmd != CMD_SOFTRESET)
3947 airo_print_err(ai->dev->name,
3948 "cmd:%x status:%x rsp0:%x rsp1:%x rsp2:%x",
3949 pCmd->cmd, pRsp->status, pRsp->rsp0, pRsp->rsp1,
3950 pRsp->rsp2);
3951
3952 // clear stuck command busy if necessary
3953 if (IN4500(ai, COMMAND) & COMMAND_BUSY) {
3954 OUT4500(ai, EVACK, EV_CLEARCOMMANDBUSY);
3955 }
3956 // acknowledge processing the status/response
3957 OUT4500(ai, EVACK, EV_CMD);
3958
3959 return SUCCESS;
3960 }
3961
3962 /* Sets up the bap to start exchange data. whichbap should
3963 * be one of the BAP0 or BAP1 defines. Locks should be held before
3964 * calling! */
3965 static int bap_setup(struct airo_info *ai, u16 rid, u16 offset, int whichbap )
3966 {
3967 int timeout = 50;
3968 int max_tries = 3;
3969
3970 OUT4500(ai, SELECT0+whichbap, rid);
3971 OUT4500(ai, OFFSET0+whichbap, offset);
3972 while (1) {
3973 int status = IN4500(ai, OFFSET0+whichbap);
3974 if (status & BAP_BUSY) {
3975 /* This isn't really a timeout, but its kinda
3976 close */
3977 if (timeout--) {
3978 continue;
3979 }
3980 } else if ( status & BAP_ERR ) {
3981 /* invalid rid or offset */
3982 airo_print_err(ai->dev->name, "BAP error %x %d",
3983 status, whichbap );
3984 return ERROR;
3985 } else if (status & BAP_DONE) { // success
3986 return SUCCESS;
3987 }
3988 if ( !(max_tries--) ) {
3989 airo_print_err(ai->dev->name,
3990 "airo: BAP setup error too many retries\n");
3991 return ERROR;
3992 }
3993 // -- PC4500 missed it, try again
3994 OUT4500(ai, SELECT0+whichbap, rid);
3995 OUT4500(ai, OFFSET0+whichbap, offset);
3996 timeout = 50;
3997 }
3998 }
3999
4000 /* should only be called by aux_bap_read. This aux function and the
4001 following use concepts not documented in the developers guide. I
4002 got them from a patch given to my by Aironet */
4003 static u16 aux_setup(struct airo_info *ai, u16 page,
4004 u16 offset, u16 *len)
4005 {
4006 u16 next;
4007
4008 OUT4500(ai, AUXPAGE, page);
4009 OUT4500(ai, AUXOFF, 0);
4010 next = IN4500(ai, AUXDATA);
4011 *len = IN4500(ai, AUXDATA)&0xff;
4012 if (offset != 4) OUT4500(ai, AUXOFF, offset);
4013 return next;
4014 }
4015
4016 /* requires call to bap_setup() first */
4017 static int aux_bap_read(struct airo_info *ai, u16 *pu16Dst,
4018 int bytelen, int whichbap)
4019 {
4020 u16 len;
4021 u16 page;
4022 u16 offset;
4023 u16 next;
4024 int words;
4025 int i;
4026 unsigned long flags;
4027
4028 spin_lock_irqsave(&ai->aux_lock, flags);
4029 page = IN4500(ai, SWS0+whichbap);
4030 offset = IN4500(ai, SWS2+whichbap);
4031 next = aux_setup(ai, page, offset, &len);
4032 words = (bytelen+1)>>1;
4033
4034 for (i=0; i<words;) {
4035 int count;
4036 count = (len>>1) < (words-i) ? (len>>1) : (words-i);
4037 if ( !do8bitIO )
4038 insw( ai->dev->base_addr+DATA0+whichbap,
4039 pu16Dst+i,count );
4040 else
4041 insb( ai->dev->base_addr+DATA0+whichbap,
4042 pu16Dst+i, count << 1 );
4043 i += count;
4044 if (i<words) {
4045 next = aux_setup(ai, next, 4, &len);
4046 }
4047 }
4048 spin_unlock_irqrestore(&ai->aux_lock, flags);
4049 return SUCCESS;
4050 }
4051
4052
4053 /* requires call to bap_setup() first */
4054 static int fast_bap_read(struct airo_info *ai, u16 *pu16Dst,
4055 int bytelen, int whichbap)
4056 {
4057 bytelen = (bytelen + 1) & (~1); // round up to even value
4058 if ( !do8bitIO )
4059 insw( ai->dev->base_addr+DATA0+whichbap, pu16Dst, bytelen>>1 );
4060 else
4061 insb( ai->dev->base_addr+DATA0+whichbap, pu16Dst, bytelen );
4062 return SUCCESS;
4063 }
4064
4065 /* requires call to bap_setup() first */
4066 static int bap_write(struct airo_info *ai, const u16 *pu16Src,
4067 int bytelen, int whichbap)
4068 {
4069 bytelen = (bytelen + 1) & (~1); // round up to even value
4070 if ( !do8bitIO )
4071 outsw( ai->dev->base_addr+DATA0+whichbap,
4072 pu16Src, bytelen>>1 );
4073 else
4074 outsb( ai->dev->base_addr+DATA0+whichbap, pu16Src, bytelen );
4075 return SUCCESS;
4076 }
4077
4078 static int PC4500_accessrid(struct airo_info *ai, u16 rid, u16 accmd)
4079 {
4080 Cmd cmd; /* for issuing commands */
4081 Resp rsp; /* response from commands */
4082 u16 status;
4083
4084 memset(&cmd, 0, sizeof(cmd));
4085 cmd.cmd = accmd;
4086 cmd.parm0 = rid;
4087 status = issuecommand(ai, &cmd, &rsp);
4088 if (status != 0) return status;
4089 if ( (rsp.status & 0x7F00) != 0) {
4090 return (accmd << 8) + (rsp.rsp0 & 0xFF);
4091 }
4092 return 0;
4093 }
4094
4095 /* Note, that we are using BAP1 which is also used by transmit, so
4096 * we must get a lock. */
4097 static int PC4500_readrid(struct airo_info *ai, u16 rid, void *pBuf, int len, int lock)
4098 {
4099 u16 status;
4100 int rc = SUCCESS;
4101
4102 if (lock) {
4103 if (down_interruptible(&ai->sem))
4104 return ERROR;
4105 }
4106 if (test_bit(FLAG_MPI,&ai->flags)) {
4107 Cmd cmd;
4108 Resp rsp;
4109
4110 memset(&cmd, 0, sizeof(cmd));
4111 memset(&rsp, 0, sizeof(rsp));
4112 ai->config_desc.rid_desc.valid = 1;
4113 ai->config_desc.rid_desc.len = RIDSIZE;
4114 ai->config_desc.rid_desc.rid = 0;
4115 ai->config_desc.rid_desc.host_addr = ai->ridbus;
4116
4117 cmd.cmd = CMD_ACCESS;
4118 cmd.parm0 = rid;
4119
4120 memcpy_toio(ai->config_desc.card_ram_off,
4121 &ai->config_desc.rid_desc, sizeof(Rid));
4122
4123 rc = issuecommand(ai, &cmd, &rsp);
4124
4125 if (rsp.status & 0x7f00)
4126 rc = rsp.rsp0;
4127 if (!rc)
4128 memcpy(pBuf, ai->config_desc.virtual_host_addr, len);
4129 goto done;
4130 } else {
4131 if ((status = PC4500_accessrid(ai, rid, CMD_ACCESS))!=SUCCESS) {
4132 rc = status;
4133 goto done;
4134 }
4135 if (bap_setup(ai, rid, 0, BAP1) != SUCCESS) {
4136 rc = ERROR;
4137 goto done;
4138 }
4139 // read the rid length field
4140 bap_read(ai, pBuf, 2, BAP1);
4141 // length for remaining part of rid
4142 len = min(len, (int)le16_to_cpu(*(u16*)pBuf)) - 2;
4143
4144 if ( len <= 2 ) {
4145 airo_print_err(ai->dev->name,
4146 "Rid %x has a length of %d which is too short",
4147 (int)rid, (int)len );
4148 rc = ERROR;
4149 goto done;
4150 }
4151 // read remainder of the rid
4152 rc = bap_read(ai, ((u16*)pBuf)+1, len, BAP1);
4153 }
4154 done:
4155 if (lock)
4156 up(&ai->sem);
4157 return rc;
4158 }
4159
4160 /* Note, that we are using BAP1 which is also used by transmit, so
4161 * make sure this isnt called when a transmit is happening */
4162 static int PC4500_writerid(struct airo_info *ai, u16 rid,
4163 const void *pBuf, int len, int lock)
4164 {
4165 u16 status;
4166 int rc = SUCCESS;
4167
4168 *(u16*)pBuf = cpu_to_le16((u16)len);
4169
4170 if (lock) {
4171 if (down_interruptible(&ai->sem))
4172 return ERROR;
4173 }
4174 if (test_bit(FLAG_MPI,&ai->flags)) {
4175 Cmd cmd;
4176 Resp rsp;
4177
4178 if (test_bit(FLAG_ENABLED, &ai->flags) && (RID_WEP_TEMP != rid))
4179 airo_print_err(ai->dev->name,
4180 "%s: MAC should be disabled (rid=%04x)",
4181 __FUNCTION__, rid);
4182 memset(&cmd, 0, sizeof(cmd));
4183 memset(&rsp, 0, sizeof(rsp));
4184
4185 ai->config_desc.rid_desc.valid = 1;
4186 ai->config_desc.rid_desc.len = *((u16 *)pBuf);
4187 ai->config_desc.rid_desc.rid = 0;
4188
4189 cmd.cmd = CMD_WRITERID;
4190 cmd.parm0 = rid;
4191
4192 memcpy_toio(ai->config_desc.card_ram_off,
4193 &ai->config_desc.rid_desc, sizeof(Rid));
4194
4195 if (len < 4 || len > 2047) {
4196 airo_print_err(ai->dev->name, "%s: len=%d", __FUNCTION__, len);
4197 rc = -1;
4198 } else {
4199 memcpy((char *)ai->config_desc.virtual_host_addr,
4200 pBuf, len);
4201
4202 rc = issuecommand(ai, &cmd, &rsp);
4203 if ((rc & 0xff00) != 0) {
4204 airo_print_err(ai->dev->name, "%s: Write rid Error %d",
4205 __FUNCTION__, rc);
4206 airo_print_err(ai->dev->name, "%s: Cmd=%04x",
4207 __FUNCTION__, cmd.cmd);
4208 }
4209
4210 if ((rsp.status & 0x7f00))
4211 rc = rsp.rsp0;
4212 }
4213 } else {
4214 // --- first access so that we can write the rid data
4215 if ( (status = PC4500_accessrid(ai, rid, CMD_ACCESS)) != 0) {
4216 rc = status;
4217 goto done;
4218 }
4219 // --- now write the rid data
4220 if (bap_setup(ai, rid, 0, BAP1) != SUCCESS) {
4221 rc = ERROR;
4222 goto done;
4223 }
4224 bap_write(ai, pBuf, len, BAP1);
4225 // ---now commit the rid data
4226 rc = PC4500_accessrid(ai, rid, 0x100|CMD_ACCESS);
4227 }
4228 done:
4229 if (lock)
4230 up(&ai->sem);
4231 return rc;
4232 }
4233
4234 /* Allocates a FID to be used for transmitting packets. We only use
4235 one for now. */
4236 static u16 transmit_allocate(struct airo_info *ai, int lenPayload, int raw)
4237 {
4238 unsigned int loop = 3000;
4239 Cmd cmd;
4240 Resp rsp;
4241 u16 txFid;
4242 u16 txControl;
4243
4244 cmd.cmd = CMD_ALLOCATETX;
4245 cmd.parm0 = lenPayload;
4246 if (down_interruptible(&ai->sem))
4247 return ERROR;
4248 if (issuecommand(ai, &cmd, &rsp) != SUCCESS) {
4249 txFid = ERROR;
4250 goto done;
4251 }
4252 if ( (rsp.status & 0xFF00) != 0) {
4253 txFid = ERROR;
4254 goto done;
4255 }
4256 /* wait for the allocate event/indication
4257 * It makes me kind of nervous that this can just sit here and spin,
4258 * but in practice it only loops like four times. */
4259 while (((IN4500(ai, EVSTAT) & EV_ALLOC) == 0) && --loop);
4260 if (!loop) {
4261 txFid = ERROR;
4262 goto done;
4263 }
4264
4265 // get the allocated fid and acknowledge
4266 txFid = IN4500(ai, TXALLOCFID);
4267 OUT4500(ai, EVACK, EV_ALLOC);
4268
4269 /* The CARD is pretty cool since it converts the ethernet packet
4270 * into 802.11. Also note that we don't release the FID since we
4271 * will be using the same one over and over again. */
4272 /* We only have to setup the control once since we are not
4273 * releasing the fid. */
4274 if (raw)
4275 txControl = cpu_to_le16(TXCTL_TXOK | TXCTL_TXEX | TXCTL_802_11
4276 | TXCTL_ETHERNET | TXCTL_NORELEASE);
4277 else
4278 txControl = cpu_to_le16(TXCTL_TXOK | TXCTL_TXEX | TXCTL_802_3
4279 | TXCTL_ETHERNET | TXCTL_NORELEASE);
4280 if (bap_setup(ai, txFid, 0x0008, BAP1) != SUCCESS)
4281 txFid = ERROR;
4282 else
4283 bap_write(ai, &txControl, sizeof(txControl), BAP1);
4284
4285 done:
4286 up(&ai->sem);
4287
4288 return txFid;
4289 }
4290
4291 /* In general BAP1 is dedicated to transmiting packets. However,
4292 since we need a BAP when accessing RIDs, we also use BAP1 for that.
4293 Make sure the BAP1 spinlock is held when this is called. */
4294 static int transmit_802_3_packet(struct airo_info *ai, int len, char *pPacket)
4295 {
4296 u16 payloadLen;
4297 Cmd cmd;
4298 Resp rsp;
4299 int miclen = 0;
4300 u16 txFid = len;
4301 MICBuffer pMic;
4302
4303 len >>= 16;
4304
4305 if (len <= ETH_ALEN * 2) {
4306 airo_print_warn(ai->dev->name, "Short packet %d", len);
4307 return ERROR;
4308 }
4309 len -= ETH_ALEN * 2;
4310
4311 if (test_bit(FLAG_MIC_CAPABLE, &ai->flags) && ai->micstats.enabled &&
4312 (ntohs(((u16 *)pPacket)[6]) != 0x888E)) {
4313 if (encapsulate(ai,(etherHead *)pPacket,&pMic,len) != SUCCESS)
4314 return ERROR;
4315 miclen = sizeof(pMic);
4316 }
4317 // packet is destination[6], source[6], payload[len-12]
4318 // write the payload length and dst/src/payload
4319 if (bap_setup(ai, txFid, 0x0036, BAP1) != SUCCESS) return ERROR;
4320 /* The hardware addresses aren't counted as part of the payload, so
4321 * we have to subtract the 12 bytes for the addresses off */
4322 payloadLen = cpu_to_le16(len + miclen);
4323 bap_write(ai, &payloadLen, sizeof(payloadLen),BAP1);
4324 bap_write(ai, (const u16*)pPacket, sizeof(etherHead), BAP1);
4325 if (miclen)
4326 bap_write(ai, (const u16*)&pMic, miclen, BAP1);
4327 bap_write(ai, (const u16*)(pPacket + sizeof(etherHead)), len, BAP1);
4328 // issue the transmit command
4329 memset( &cmd, 0, sizeof( cmd ) );
4330 cmd.cmd = CMD_TRANSMIT;
4331 cmd.parm0 = txFid;
4332 if (issuecommand(ai, &cmd, &rsp) != SUCCESS) return ERROR;
4333 if ( (rsp.status & 0xFF00) != 0) return ERROR;
4334 return SUCCESS;
4335 }
4336
4337 static int transmit_802_11_packet(struct airo_info *ai, int len, char *pPacket)
4338 {
4339 u16 fc, payloadLen;
4340 Cmd cmd;
4341 Resp rsp;
4342 int hdrlen;
4343 struct {
4344 u8 addr4[ETH_ALEN];
4345 u16 gaplen;
4346 u8 gap[6];
4347 } gap;
4348 u16 txFid = len;
4349 len >>= 16;
4350 gap.gaplen = 6;
4351
4352 fc = le16_to_cpu(*(const u16*)pPacket);
4353 switch (fc & 0xc) {
4354 case 4:
4355 if ((fc & 0xe0) == 0xc0)
4356 hdrlen = 10;
4357 else
4358 hdrlen = 16;
4359 break;
4360 case 8:
4361 if ((fc&0x300)==0x300){
4362 hdrlen = 30;
4363 break;
4364 }
4365 default:
4366 hdrlen = 24;
4367 }
4368
4369 if (len < hdrlen) {
4370 airo_print_warn(ai->dev->name, "Short packet %d", len);
4371 return ERROR;
4372 }
4373
4374 /* packet is 802.11 header + payload
4375 * write the payload length and dst/src/payload */
4376 if (bap_setup(ai, txFid, 6, BAP1) != SUCCESS) return ERROR;
4377 /* The 802.11 header aren't counted as part of the payload, so
4378 * we have to subtract the header bytes off */
4379 payloadLen = cpu_to_le16(len-hdrlen);
4380 bap_write(ai, &payloadLen, sizeof(payloadLen),BAP1);
4381 if (bap_setup(ai, txFid, 0x0014, BAP1) != SUCCESS) return ERROR;
4382 bap_write(ai, (const u16*)pPacket, hdrlen, BAP1);
4383 bap_write(ai, hdrlen == 30 ?
4384 (const u16*)&gap.gaplen : (const u16*)&gap, 38 - hdrlen, BAP1);
4385
4386 bap_write(ai, (const u16*)(pPacket + hdrlen), len - hdrlen, BAP1);
4387 // issue the transmit command
4388 memset( &cmd, 0, sizeof( cmd ) );
4389 cmd.cmd = CMD_TRANSMIT;
4390 cmd.parm0 = txFid;
4391 if (issuecommand(ai, &cmd, &rsp) != SUCCESS) return ERROR;
4392 if ( (rsp.status & 0xFF00) != 0) return ERROR;
4393 return SUCCESS;
4394 }
4395
4396 /*
4397 * This is the proc_fs routines. It is a bit messier than I would
4398 * like! Feel free to clean it up!
4399 */
4400
4401 static ssize_t proc_read( struct file *file,
4402 char __user *buffer,
4403 size_t len,
4404 loff_t *offset);
4405
4406 static ssize_t proc_write( struct file *file,
4407 const char __user *buffer,
4408 size_t len,
4409 loff_t *offset );
4410 static int proc_close( struct inode *inode, struct file *file );
4411
4412 static int proc_stats_open( struct inode *inode, struct file *file );
4413 static int proc_statsdelta_open( struct inode *inode, struct file *file );
4414 static int proc_status_open( struct inode *inode, struct file *file );
4415 static int proc_SSID_open( struct inode *inode, struct file *file );
4416 static int proc_APList_open( struct inode *inode, struct file *file );
4417 static int proc_BSSList_open( struct inode *inode, struct file *file );
4418 static int proc_config_open( struct inode *inode, struct file *file );
4419 static int proc_wepkey_open( struct inode *inode, struct file *file );
4420
4421 static struct file_operations proc_statsdelta_ops = {
4422 .read = proc_read,
4423 .open = proc_statsdelta_open,
4424 .release = proc_close
4425 };
4426
4427 static struct file_operations proc_stats_ops = {
4428 .read = proc_read,
4429 .open = proc_stats_open,
4430 .release = proc_close
4431 };
4432
4433 static struct file_operations proc_status_ops = {
4434 .read = proc_read,
4435 .open = proc_status_open,
4436 .release = proc_close
4437 };
4438
4439 static struct file_operations proc_SSID_ops = {
4440 .read = proc_read,
4441 .write = proc_write,
4442 .open = proc_SSID_open,
4443 .release = proc_close
4444 };
4445
4446 static struct file_operations proc_BSSList_ops = {
4447 .read = proc_read,
4448 .write = proc_write,
4449 .open = proc_BSSList_open,
4450 .release = proc_close
4451 };
4452
4453 static struct file_operations proc_APList_ops = {
4454 .read = proc_read,
4455 .write = proc_write,
4456 .open = proc_APList_open,
4457 .release = proc_close
4458 };
4459
4460 static struct file_operations proc_config_ops = {
4461 .read = proc_read,
4462 .write = proc_write,
4463 .open = proc_config_open,
4464 .release = proc_close
4465 };
4466
4467 static struct file_operations proc_wepkey_ops = {
4468 .read = proc_read,
4469 .write = proc_write,
4470 .open = proc_wepkey_open,
4471 .release = proc_close
4472 };
4473
4474 static struct proc_dir_entry *airo_entry;
4475
4476 struct proc_data {
4477 int release_buffer;
4478 int readlen;
4479 char *rbuffer;
4480 int writelen;
4481 int maxwritelen;
4482 char *wbuffer;
4483 void (*on_close) (struct inode *, struct file *);
4484 };
4485
4486 #ifndef SETPROC_OPS
4487 #define SETPROC_OPS(entry, ops) (entry)->proc_fops = &(ops)
4488 #endif
4489
4490 static int setup_proc_entry( struct net_device *dev,
4491 struct airo_info *apriv ) {
4492 struct proc_dir_entry *entry;
4493 /* First setup the device directory */
4494 strcpy(apriv->proc_name,dev->name);
4495 apriv->proc_entry = create_proc_entry(apriv->proc_name,
4496 S_IFDIR|airo_perm,
4497 airo_entry);
4498 apriv->proc_entry->uid = proc_uid;
4499 apriv->proc_entry->gid = proc_gid;
4500 apriv->proc_entry->owner = THIS_MODULE;
4501
4502 /* Setup the StatsDelta */
4503 entry = create_proc_entry("StatsDelta",
4504 S_IFREG | (S_IRUGO&proc_perm),
4505 apriv->proc_entry);
4506 entry->uid = proc_uid;
4507 entry->gid = proc_gid;
4508 entry->data = dev;
4509 entry->owner = THIS_MODULE;
4510 SETPROC_OPS(entry, proc_statsdelta_ops);
4511
4512 /* Setup the Stats */
4513 entry = create_proc_entry("Stats",
4514 S_IFREG | (S_IRUGO&proc_perm),
4515 apriv->proc_entry);
4516 entry->uid = proc_uid;
4517 entry->gid = proc_gid;
4518 entry->data = dev;
4519 entry->owner = THIS_MODULE;
4520 SETPROC_OPS(entry, proc_stats_ops);
4521
4522 /* Setup the Status */
4523 entry = create_proc_entry("Status",
4524 S_IFREG | (S_IRUGO&proc_perm),
4525 apriv->proc_entry);
4526 entry->uid = proc_uid;
4527 entry->gid = proc_gid;
4528 entry->data = dev;
4529 entry->owner = THIS_MODULE;
4530 SETPROC_OPS(entry, proc_status_ops);
4531
4532 /* Setup the Config */
4533 entry = create_proc_entry("Config",
4534 S_IFREG | proc_perm,
4535 apriv->proc_entry);
4536 entry->uid = proc_uid;
4537 entry->gid = proc_gid;
4538 entry->data = dev;
4539 entry->owner = THIS_MODULE;
4540 SETPROC_OPS(entry, proc_config_ops);
4541
4542 /* Setup the SSID */
4543 entry = create_proc_entry("SSID",
4544 S_IFREG | proc_perm,
4545 apriv->proc_entry);
4546 entry->uid = proc_uid;
4547 entry->gid = proc_gid;
4548 entry->data = dev;
4549 entry->owner = THIS_MODULE;
4550 SETPROC_OPS(entry, proc_SSID_ops);
4551
4552 /* Setup the APList */
4553 entry = create_proc_entry("APList",
4554 S_IFREG | proc_perm,
4555 apriv->proc_entry);
4556 entry->uid = proc_uid;
4557 entry->gid = proc_gid;
4558 entry->data = dev;
4559 entry->owner = THIS_MODULE;
4560 SETPROC_OPS(entry, proc_APList_ops);
4561
4562 /* Setup the BSSList */
4563 entry = create_proc_entry("BSSList",
4564 S_IFREG | proc_perm,
4565 apriv->proc_entry);
4566 entry->uid = proc_uid;
4567 entry->gid = proc_gid;
4568 entry->data = dev;
4569 entry->owner = THIS_MODULE;
4570 SETPROC_OPS(entry, proc_BSSList_ops);
4571
4572 /* Setup the WepKey */
4573 entry = create_proc_entry("WepKey",
4574 S_IFREG | proc_perm,
4575 apriv->proc_entry);
4576 entry->uid = proc_uid;
4577 entry->gid = proc_gid;
4578 entry->data = dev;
4579 entry->owner = THIS_MODULE;
4580 SETPROC_OPS(entry, proc_wepkey_ops);
4581
4582 return 0;
4583 }
4584
4585 static int takedown_proc_entry( struct net_device *dev,
4586 struct airo_info *apriv ) {
4587 if ( !apriv->proc_entry->namelen ) return 0;
4588 remove_proc_entry("Stats",apriv->proc_entry);
4589 remove_proc_entry("StatsDelta",apriv->proc_entry);
4590 remove_proc_entry("Status",apriv->proc_entry);
4591 remove_proc_entry("Config",apriv->proc_entry);
4592 remove_proc_entry("SSID",apriv->proc_entry);
4593 remove_proc_entry("APList",apriv->proc_entry);
4594 remove_proc_entry("BSSList",apriv->proc_entry);
4595 remove_proc_entry("WepKey",apriv->proc_entry);
4596 remove_proc_entry(apriv->proc_name,airo_entry);
4597 return 0;
4598 }
4599
4600 /*
4601 * What we want from the proc_fs is to be able to efficiently read
4602 * and write the configuration. To do this, we want to read the
4603 * configuration when the file is opened and write it when the file is
4604 * closed. So basically we allocate a read buffer at open and fill it
4605 * with data, and allocate a write buffer and read it at close.
4606 */
4607
4608 /*
4609 * The read routine is generic, it relies on the preallocated rbuffer
4610 * to supply the data.
4611 */
4612 static ssize_t proc_read( struct file *file,
4613 char __user *buffer,
4614 size_t len,
4615 loff_t *offset )
4616 {
4617 loff_t pos = *offset;
4618 struct proc_data *priv = (struct proc_data*)file->private_data;
4619
4620 if (!priv->rbuffer)
4621 return -EINVAL;
4622
4623 if (pos < 0)
4624 return -EINVAL;
4625 if (pos >= priv->readlen)
4626 return 0;
4627 if (len > priv->readlen - pos)
4628 len = priv->readlen - pos;
4629 if (copy_to_user(buffer, priv->rbuffer + pos, len))
4630 return -EFAULT;
4631 *offset = pos + len;
4632 return len;
4633 }
4634
4635 /*
4636 * The write routine is generic, it fills in a preallocated rbuffer
4637 * to supply the data.
4638 */
4639 static ssize_t proc_write( struct file *file,
4640 const char __user *buffer,
4641 size_t len,
4642 loff_t *offset )
4643 {
4644 loff_t pos = *offset;
4645 struct proc_data *priv = (struct proc_data*)file->private_data;
4646
4647 if (!priv->wbuffer)
4648 return -EINVAL;
4649
4650 if (pos < 0)
4651 return -EINVAL;
4652 if (pos >= priv->maxwritelen)
4653 return 0;
4654 if (len > priv->maxwritelen - pos)
4655 len = priv->maxwritelen - pos;
4656 if (copy_from_user(priv->wbuffer + pos, buffer, len))
4657 return -EFAULT;
4658 if ( pos + len > priv->writelen )
4659 priv->writelen = len + file->f_pos;
4660 *offset = pos + len;
4661 return len;
4662 }
4663
4664 static int proc_status_open( struct inode *inode, struct file *file ) {
4665 struct proc_data *data;
4666 struct proc_dir_entry *dp = PDE(inode);
4667 struct net_device *dev = dp->data;
4668 struct airo_info *apriv = dev->priv;
4669 CapabilityRid cap_rid;
4670 StatusRid status_rid;
4671 int i;
4672
4673 if ((file->private_data = kzalloc(sizeof(struct proc_data ), GFP_KERNEL)) == NULL)
4674 return -ENOMEM;
4675 data = (struct proc_data *)file->private_data;
4676 if ((data->rbuffer = kmalloc( 2048, GFP_KERNEL )) == NULL) {
4677 kfree (file->private_data);
4678 return -ENOMEM;
4679 }
4680
4681 readStatusRid(apriv, &status_rid, 1);
4682 readCapabilityRid(apriv, &cap_rid, 1);
4683
4684 i = sprintf(data->rbuffer, "Status: %s%s%s%s%s%s%s%s%s\n",
4685 status_rid.mode & 1 ? "CFG ": "",
4686 status_rid.mode & 2 ? "ACT ": "",
4687 status_rid.mode & 0x10 ? "SYN ": "",
4688 status_rid.mode & 0x20 ? "LNK ": "",
4689 status_rid.mode & 0x40 ? "LEAP ": "",
4690 status_rid.mode & 0x80 ? "PRIV ": "",
4691 status_rid.mode & 0x100 ? "KEY ": "",
4692 status_rid.mode & 0x200 ? "WEP ": "",
4693 status_rid.mode & 0x8000 ? "ERR ": "");
4694 sprintf( data->rbuffer+i, "Mode: %x\n"
4695 "Signal Strength: %d\n"
4696 "Signal Quality: %d\n"
4697 "SSID: %-.*s\n"
4698 "AP: %-.16s\n"
4699 "Freq: %d\n"
4700 "BitRate: %dmbs\n"
4701 "Driver Version: %s\n"
4702 "Device: %s\nManufacturer: %s\nFirmware Version: %s\n"
4703 "Radio type: %x\nCountry: %x\nHardware Version: %x\n"
4704 "Software Version: %x\nSoftware Subversion: %x\n"
4705 "Boot block version: %x\n",
4706 (int)status_rid.mode,
4707 (int)status_rid.normalizedSignalStrength,
4708 (int)status_rid.signalQuality,
4709 (int)status_rid.SSIDlen,
4710 status_rid.SSID,
4711 status_rid.apName,
4712 (int)status_rid.channel,
4713 (int)status_rid.currentXmitRate/2,
4714 version,
4715 cap_rid.prodName,
4716 cap_rid.manName,
4717 cap_rid.prodVer,
4718 cap_rid.radioType,
4719 cap_rid.country,
4720 cap_rid.hardVer,
4721 (int)cap_rid.softVer,
4722 (int)cap_rid.softSubVer,
4723 (int)cap_rid.bootBlockVer );
4724 data->readlen = strlen( data->rbuffer );
4725 return 0;
4726 }
4727
4728 static int proc_stats_rid_open(struct inode*, struct file*, u16);
4729 static int proc_statsdelta_open( struct inode *inode,
4730 struct file *file ) {
4731 if (file->f_mode&FMODE_WRITE) {
4732 return proc_stats_rid_open(inode, file, RID_STATSDELTACLEAR);
4733 }
4734 return proc_stats_rid_open(inode, file, RID_STATSDELTA);
4735 }
4736
4737 static int proc_stats_open( struct inode *inode, struct file *file ) {
4738 return proc_stats_rid_open(inode, file, RID_STATS);
4739 }
4740
4741 static int proc_stats_rid_open( struct inode *inode,
4742 struct file *file,
4743 u16 rid ) {
4744 struct proc_data *data;
4745 struct proc_dir_entry *dp = PDE(inode);
4746 struct net_device *dev = dp->data;
4747 struct airo_info *apriv = dev->priv;
4748 StatsRid stats;
4749 int i, j;
4750 u32 *vals = stats.vals;
4751
4752 if ((file->private_data = kzalloc(sizeof(struct proc_data ), GFP_KERNEL)) == NULL)
4753 return -ENOMEM;
4754 data = (struct proc_data *)file->private_data;
4755 if ((data->rbuffer = kmalloc( 4096, GFP_KERNEL )) == NULL) {
4756 kfree (file->private_data);
4757 return -ENOMEM;
4758 }
4759
4760 readStatsRid(apriv, &stats, rid, 1);
4761
4762 j = 0;
4763 for(i=0; statsLabels[i]!=(char *)-1 &&
4764 i*4<stats.len; i++){
4765 if (!statsLabels[i]) continue;
4766 if (j+strlen(statsLabels[i])+16>4096) {
4767 airo_print_warn(apriv->dev->name,
4768 "Potentially disasterous buffer overflow averted!");
4769 break;
4770 }
4771 j+=sprintf(data->rbuffer+j, "%s: %u\n", statsLabels[i], vals[i]);
4772 }
4773 if (i*4>=stats.len){
4774 airo_print_warn(apriv->dev->name, "Got a short rid");
4775 }
4776 data->readlen = j;
4777 return 0;
4778 }
4779
4780 static int get_dec_u16( char *buffer, int *start, int limit ) {
4781 u16 value;
4782 int valid = 0;
4783 for( value = 0; buffer[*start] >= '0' &&
4784 buffer[*start] <= '9' &&
4785 *start < limit; (*start)++ ) {
4786 valid = 1;
4787 value *= 10;
4788 value += buffer[*start] - '0';
4789 }
4790 if ( !valid ) return -1;
4791 return value;
4792 }
4793
4794 static int airo_config_commit(struct net_device *dev,
4795 struct iw_request_info *info, void *zwrq,
4796 char *extra);
4797
4798 static void proc_config_on_close( struct inode *inode, struct file *file ) {
4799 struct proc_data *data = file->private_data;
4800 struct proc_dir_entry *dp = PDE(inode);
4801 struct net_device *dev = dp->data;
4802 struct airo_info *ai = dev->priv;
4803 char *line;
4804
4805 if ( !data->writelen ) return;
4806
4807 readConfigRid(ai, 1);
4808 set_bit (FLAG_COMMIT, &ai->flags);
4809
4810 line = data->wbuffer;
4811 while( line[0] ) {
4812 /*** Mode processing */
4813 if ( !strncmp( line, "Mode: ", 6 ) ) {
4814 line += 6;
4815 if ((ai->config.rmode & 0xff) >= RXMODE_RFMON)
4816 set_bit (FLAG_RESET, &ai->flags);
4817 ai->config.rmode &= 0xfe00;
4818 clear_bit (FLAG_802_11, &ai->flags);
4819 ai->config.opmode &= 0xFF00;
4820 ai->config.scanMode = SCANMODE_ACTIVE;
4821 if ( line[0] == 'a' ) {
4822 ai->config.opmode |= 0;
4823 } else {
4824 ai->config.opmode |= 1;
4825 if ( line[0] == 'r' ) {
4826 ai->config.rmode |= RXMODE_RFMON | RXMODE_DISABLE_802_3_HEADER;
4827 ai->config.scanMode = SCANMODE_PASSIVE;
4828 set_bit (FLAG_802_11, &ai->flags);
4829 } else if ( line[0] == 'y' ) {
4830 ai->config.rmode |= RXMODE_RFMON_ANYBSS | RXMODE_DISABLE_802_3_HEADER;
4831 ai->config.scanMode = SCANMODE_PASSIVE;
4832 set_bit (FLAG_802_11, &ai->flags);
4833 } else if ( line[0] == 'l' )
4834 ai->config.rmode |= RXMODE_LANMON;
4835 }
4836 set_bit (FLAG_COMMIT, &ai->flags);
4837 }
4838
4839 /*** Radio status */
4840 else if (!strncmp(line,"Radio: ", 7)) {
4841 line += 7;
4842 if (!strncmp(line,"off",3)) {
4843 set_bit (FLAG_RADIO_OFF, &ai->flags);
4844 } else {
4845 clear_bit (FLAG_RADIO_OFF, &ai->flags);
4846 }
4847 }
4848 /*** NodeName processing */
4849 else if ( !strncmp( line, "NodeName: ", 10 ) ) {
4850 int j;
4851
4852 line += 10;
4853 memset( ai->config.nodeName, 0, 16 );
4854 /* Do the name, assume a space between the mode and node name */
4855 for( j = 0; j < 16 && line[j] != '\n'; j++ ) {
4856 ai->config.nodeName[j] = line[j];
4857 }
4858 set_bit (FLAG_COMMIT, &ai->flags);
4859 }
4860
4861 /*** PowerMode processing */
4862 else if ( !strncmp( line, "PowerMode: ", 11 ) ) {
4863 line += 11;
4864 if ( !strncmp( line, "PSPCAM", 6 ) ) {
4865 ai->config.powerSaveMode = POWERSAVE_PSPCAM;
4866 set_bit (FLAG_COMMIT, &ai->flags);
4867 } else if ( !strncmp( line, "PSP", 3 ) ) {
4868 ai->config.powerSaveMode = POWERSAVE_PSP;
4869 set_bit (FLAG_COMMIT, &ai->flags);
4870 } else {
4871 ai->config.powerSaveMode = POWERSAVE_CAM;
4872 set_bit (FLAG_COMMIT, &ai->flags);
4873 }
4874 } else if ( !strncmp( line, "DataRates: ", 11 ) ) {
4875 int v, i = 0, k = 0; /* i is index into line,
4876 k is index to rates */
4877
4878 line += 11;
4879 while((v = get_dec_u16(line, &i, 3))!=-1) {
4880 ai->config.rates[k++] = (u8)v;
4881 line += i + 1;
4882 i = 0;
4883 }
4884 set_bit (FLAG_COMMIT, &ai->flags);
4885 } else if ( !strncmp( line, "Channel: ", 9 ) ) {
4886 int v, i = 0;
4887 line += 9;
4888 v = get_dec_u16(line, &i, i+3);
4889 if ( v != -1 ) {
4890 ai->config.channelSet = (u16)v;
4891 set_bit (FLAG_COMMIT, &ai->flags);
4892 }
4893 } else if ( !strncmp( line, "XmitPower: ", 11 ) ) {
4894 int v, i = 0;
4895 line += 11;
4896 v = get_dec_u16(line, &i, i+3);
4897 if ( v != -1 ) {
4898 ai->config.txPower = (u16)v;
4899 set_bit (FLAG_COMMIT, &ai->flags);
4900 }
4901 } else if ( !strncmp( line, "WEP: ", 5 ) ) {
4902 line += 5;
4903 switch( line[0] ) {
4904 case 's':
4905 ai->config.authType = (u16)AUTH_SHAREDKEY;
4906 break;
4907 case 'e':
4908 ai->config.authType = (u16)AUTH_ENCRYPT;
4909 break;
4910 default:
4911 ai->config.authType = (u16)AUTH_OPEN;
4912 break;
4913 }
4914 set_bit (FLAG_COMMIT, &ai->flags);
4915 } else if ( !strncmp( line, "LongRetryLimit: ", 16 ) ) {
4916 int v, i = 0;
4917
4918 line += 16;
4919 v = get_dec_u16(line, &i, 3);
4920 v = (v<0) ? 0 : ((v>255) ? 255 : v);
4921 ai->config.longRetryLimit = (u16)v;
4922 set_bit (FLAG_COMMIT, &ai->flags);
4923 } else if ( !strncmp( line, "ShortRetryLimit: ", 17 ) ) {
4924 int v, i = 0;
4925
4926 line += 17;
4927 v = get_dec_u16(line, &i, 3);
4928 v = (v<0) ? 0 : ((v>255) ? 255 : v);
4929 ai->config.shortRetryLimit = (u16)v;
4930 set_bit (FLAG_COMMIT, &ai->flags);
4931 } else if ( !strncmp( line, "RTSThreshold: ", 14 ) ) {
4932 int v, i = 0;
4933
4934 line += 14;
4935 v = get_dec_u16(line, &i, 4);
4936 v = (v<0) ? 0 : ((v>AIRO_DEF_MTU) ? AIRO_DEF_MTU : v);
4937 ai->config.rtsThres = (u16)v;
4938 set_bit (FLAG_COMMIT, &ai->flags);
4939 } else if ( !strncmp( line, "TXMSDULifetime: ", 16 ) ) {
4940 int v, i = 0;
4941
4942 line += 16;
4943 v = get_dec_u16(line, &i, 5);
4944 v = (v<0) ? 0 : v;
4945 ai->config.txLifetime = (u16)v;
4946 set_bit (FLAG_COMMIT, &ai->flags);
4947 } else if ( !strncmp( line, "RXMSDULifetime: ", 16 ) ) {
4948 int v, i = 0;
4949
4950 line += 16;
4951 v = get_dec_u16(line, &i, 5);
4952 v = (v<0) ? 0 : v;
4953 ai->config.rxLifetime = (u16)v;
4954 set_bit (FLAG_COMMIT, &ai->flags);
4955 } else if ( !strncmp( line, "TXDiversity: ", 13 ) ) {
4956 ai->config.txDiversity =
4957 (line[13]=='l') ? 1 :
4958 ((line[13]=='r')? 2: 3);
4959 set_bit (FLAG_COMMIT, &ai->flags);
4960 } else if ( !strncmp( line, "RXDiversity: ", 13 ) ) {
4961 ai->config.rxDiversity =
4962 (line[13]=='l') ? 1 :
4963 ((line[13]=='r')? 2: 3);
4964 set_bit (FLAG_COMMIT, &ai->flags);
4965 } else if ( !strncmp( line, "FragThreshold: ", 15 ) ) {
4966 int v, i = 0;
4967
4968 line += 15;
4969 v = get_dec_u16(line, &i, 4);
4970 v = (v<256) ? 256 : ((v>AIRO_DEF_MTU) ? AIRO_DEF_MTU : v);
4971 v = v & 0xfffe; /* Make sure its even */
4972 ai->config.fragThresh = (u16)v;
4973 set_bit (FLAG_COMMIT, &ai->flags);
4974 } else if (!strncmp(line, "Modulation: ", 12)) {
4975 line += 12;
4976 switch(*line) {
4977 case 'd': ai->config.modulation=MOD_DEFAULT; set_bit(FLAG_COMMIT, &ai->flags); break;
4978 case 'c': ai->config.modulation=MOD_CCK; set_bit(FLAG_COMMIT, &ai->flags); break;
4979 case 'm': ai->config.modulation=MOD_MOK; set_bit(FLAG_COMMIT, &ai->flags); break;
4980 default: airo_print_warn(ai->dev->name, "Unknown modulation");
4981 }
4982 } else if (!strncmp(line, "Preamble: ", 10)) {
4983 line += 10;
4984 switch(*line) {
4985 case 'a': ai->config.preamble=PREAMBLE_AUTO; set_bit(FLAG_COMMIT, &ai->flags); break;
4986 case 'l': ai->config.preamble=PREAMBLE_LONG; set_bit(FLAG_COMMIT, &ai->flags); break;
4987 case 's': ai->config.preamble=PREAMBLE_SHORT; set_bit(FLAG_COMMIT, &ai->flags); break;
4988 default: airo_print_warn(ai->dev->name, "Unknown preamble");
4989 }
4990 } else {
4991 airo_print_warn(ai->dev->name, "Couldn't figure out %s", line);
4992 }
4993 while( line[0] && line[0] != '\n' ) line++;
4994 if ( line[0] ) line++;
4995 }
4996 airo_config_commit(dev, NULL, NULL, NULL);
4997 }
4998
4999 static char *get_rmode(u16 mode) {
5000 switch(mode&0xff) {
5001 case RXMODE_RFMON: return "rfmon";
5002 case RXMODE_RFMON_ANYBSS: return "yna (any) bss rfmon";
5003 case RXMODE_LANMON: return "lanmon";
5004 }
5005 return "ESS";
5006 }
5007
5008 static int proc_config_open( struct inode *inode, struct file *file ) {
5009 struct proc_data *data;
5010 struct proc_dir_entry *dp = PDE(inode);
5011 struct net_device *dev = dp->data;
5012 struct airo_info *ai = dev->priv;
5013 int i;
5014
5015 if ((file->private_data = kzalloc(sizeof(struct proc_data ), GFP_KERNEL)) == NULL)
5016 return -ENOMEM;
5017 data = (struct proc_data *)file->private_data;
5018 if ((data->rbuffer = kmalloc( 2048, GFP_KERNEL )) == NULL) {
5019 kfree (file->private_data);
5020 return -ENOMEM;
5021 }
5022 if ((data->wbuffer = kzalloc( 2048, GFP_KERNEL )) == NULL) {
5023 kfree (data->rbuffer);
5024 kfree (file->private_data);
5025 return -ENOMEM;
5026 }
5027 data->maxwritelen = 2048;
5028 data->on_close = proc_config_on_close;
5029
5030 readConfigRid(ai, 1);
5031
5032 i = sprintf( data->rbuffer,
5033 "Mode: %s\n"
5034 "Radio: %s\n"
5035 "NodeName: %-16s\n"
5036 "PowerMode: %s\n"
5037 "DataRates: %d %d %d %d %d %d %d %d\n"
5038 "Channel: %d\n"
5039 "XmitPower: %d\n",
5040 (ai->config.opmode & 0xFF) == 0 ? "adhoc" :
5041 (ai->config.opmode & 0xFF) == 1 ? get_rmode(ai->config.rmode):
5042 (ai->config.opmode & 0xFF) == 2 ? "AP" :
5043 (ai->config.opmode & 0xFF) == 3 ? "AP RPTR" : "Error",
5044 test_bit(FLAG_RADIO_OFF, &ai->flags) ? "off" : "on",
5045 ai->config.nodeName,
5046 ai->config.powerSaveMode == 0 ? "CAM" :
5047 ai->config.powerSaveMode == 1 ? "PSP" :
5048 ai->config.powerSaveMode == 2 ? "PSPCAM" : "Error",
5049 (int)ai->config.rates[0],
5050 (int)ai->config.rates[1],
5051 (int)ai->config.rates[2],
5052 (int)ai->config.rates[3],
5053 (int)ai->config.rates[4],
5054 (int)ai->config.rates[5],
5055 (int)ai->config.rates[6],
5056 (int)ai->config.rates[7],
5057 (int)ai->config.channelSet,
5058 (int)ai->config.txPower
5059 );
5060 sprintf( data->rbuffer + i,
5061 "LongRetryLimit: %d\n"
5062 "ShortRetryLimit: %d\n"
5063 "RTSThreshold: %d\n"
5064 "TXMSDULifetime: %d\n"
5065 "RXMSDULifetime: %d\n"
5066 "TXDiversity: %s\n"
5067 "RXDiversity: %s\n"
5068 "FragThreshold: %d\n"
5069 "WEP: %s\n"
5070 "Modulation: %s\n"
5071 "Preamble: %s\n",
5072 (int)ai->config.longRetryLimit,
5073 (int)ai->config.shortRetryLimit,
5074 (int)ai->config.rtsThres,
5075 (int)ai->config.txLifetime,
5076 (int)ai->config.rxLifetime,
5077 ai->config.txDiversity == 1 ? "left" :
5078 ai->config.txDiversity == 2 ? "right" : "both",
5079 ai->config.rxDiversity == 1 ? "left" :
5080 ai->config.rxDiversity == 2 ? "right" : "both",
5081 (int)ai->config.fragThresh,
5082 ai->config.authType == AUTH_ENCRYPT ? "encrypt" :
5083 ai->config.authType == AUTH_SHAREDKEY ? "shared" : "open",
5084 ai->config.modulation == 0 ? "default" :
5085 ai->config.modulation == MOD_CCK ? "cck" :
5086 ai->config.modulation == MOD_MOK ? "mok" : "error",
5087 ai->config.preamble == PREAMBLE_AUTO ? "auto" :
5088 ai->config.preamble == PREAMBLE_LONG ? "long" :
5089 ai->config.preamble == PREAMBLE_SHORT ? "short" : "error"
5090 );
5091 data->readlen = strlen( data->rbuffer );
5092 return 0;
5093 }
5094
5095 static void proc_SSID_on_close( struct inode *inode, struct file *file ) {
5096 struct proc_data *data = (struct proc_data *)file->private_data;
5097 struct proc_dir_entry *dp = PDE(inode);
5098 struct net_device *dev = dp->data;
5099 struct airo_info *ai = dev->priv;
5100 SsidRid SSID_rid;
5101 Resp rsp;
5102 int i;
5103 int offset = 0;
5104
5105 if ( !data->writelen ) return;
5106
5107 memset( &SSID_rid, 0, sizeof( SSID_rid ) );
5108
5109 for( i = 0; i < 3; i++ ) {
5110 int j;
5111 for( j = 0; j+offset < data->writelen && j < 32 &&
5112 data->wbuffer[offset+j] != '\n'; j++ ) {
5113 SSID_rid.ssids[i].ssid[j] = data->wbuffer[offset+j];
5114 }
5115 if ( j == 0 ) break;
5116 SSID_rid.ssids[i].len = j;
5117 offset += j;
5118 while( data->wbuffer[offset] != '\n' &&
5119 offset < data->writelen ) offset++;
5120 offset++;
5121 }
5122 if (i)
5123 SSID_rid.len = sizeof(SSID_rid);
5124 disable_MAC(ai, 1);
5125 writeSsidRid(ai, &SSID_rid, 1);
5126 enable_MAC(ai, &rsp, 1);
5127 }
5128
5129 static inline u8 hexVal(char c) {
5130 if (c>='0' && c<='9') return c -= '0';
5131 if (c>='a' && c<='f') return c -= 'a'-10;
5132 if (c>='A' && c<='F') return c -= 'A'-10;
5133 return 0;
5134 }
5135
5136 static void proc_APList_on_close( struct inode *inode, struct file *file ) {
5137 struct proc_data *data = (struct proc_data *)file->private_data;
5138 struct proc_dir_entry *dp = PDE(inode);
5139 struct net_device *dev = dp->data;
5140 struct airo_info *ai = dev->priv;
5141 APListRid APList_rid;
5142 Resp rsp;
5143 int i;
5144
5145 if ( !data->writelen ) return;
5146
5147 memset( &APList_rid, 0, sizeof(APList_rid) );
5148 APList_rid.len = sizeof(APList_rid);
5149
5150 for( i = 0; i < 4 && data->writelen >= (i+1)*6*3; i++ ) {
5151 int j;
5152 for( j = 0; j < 6*3 && data->wbuffer[j+i*6*3]; j++ ) {
5153 switch(j%3) {
5154 case 0:
5155 APList_rid.ap[i][j/3]=
5156 hexVal(data->wbuffer[j+i*6*3])<<4;
5157 break;
5158 case 1:
5159 APList_rid.ap[i][j/3]|=
5160 hexVal(data->wbuffer[j+i*6*3]);
5161 break;
5162 }
5163 }
5164 }
5165 disable_MAC(ai, 1);
5166 writeAPListRid(ai, &APList_rid, 1);
5167 enable_MAC(ai, &rsp, 1);
5168 }
5169
5170 /* This function wraps PC4500_writerid with a MAC disable */
5171 static int do_writerid( struct airo_info *ai, u16 rid, const void *rid_data,
5172 int len, int dummy ) {
5173 int rc;
5174 Resp rsp;
5175
5176 disable_MAC(ai, 1);
5177 rc = PC4500_writerid(ai, rid, rid_data, len, 1);
5178 enable_MAC(ai, &rsp, 1);
5179 return rc;
5180 }
5181
5182 /* Returns the length of the key at the index. If index == 0xffff
5183 * the index of the transmit key is returned. If the key doesn't exist,
5184 * -1 will be returned.
5185 */
5186 static int get_wep_key(struct airo_info *ai, u16 index) {
5187 WepKeyRid wkr;
5188 int rc;
5189 u16 lastindex;
5190
5191 rc = readWepKeyRid(ai, &wkr, 1, 1);
5192 if (rc == SUCCESS) do {
5193 lastindex = wkr.kindex;
5194 if (wkr.kindex == index) {
5195 if (index == 0xffff) {
5196 return wkr.mac[0];
5197 }
5198 return wkr.klen;
5199 }
5200 readWepKeyRid(ai, &wkr, 0, 1);
5201 } while(lastindex != wkr.kindex);
5202 return -1;
5203 }
5204
5205 static int set_wep_key(struct airo_info *ai, u16 index,
5206 const char *key, u16 keylen, int perm, int lock ) {
5207 static const unsigned char macaddr[ETH_ALEN] = { 0x01, 0, 0, 0, 0, 0 };
5208 WepKeyRid wkr;
5209 Resp rsp;
5210
5211 memset(&wkr, 0, sizeof(wkr));
5212 if (keylen == 0) {
5213 // We are selecting which key to use
5214 wkr.len = sizeof(wkr);
5215 wkr.kindex = 0xffff;
5216 wkr.mac[0] = (char)index;
5217 if (perm) ai->defindex = (char)index;
5218 } else {
5219 // We are actually setting the key
5220 wkr.len = sizeof(wkr);
5221 wkr.kindex = index;
5222 wkr.klen = keylen;
5223 memcpy( wkr.key, key, keylen );
5224 memcpy( wkr.mac, macaddr, ETH_ALEN );
5225 }
5226
5227 if (perm) disable_MAC(ai, lock);
5228 writeWepKeyRid(ai, &wkr, perm, lock);
5229 if (perm) enable_MAC(ai, &rsp, lock);
5230 return 0;
5231 }
5232
5233 static void proc_wepkey_on_close( struct inode *inode, struct file *file ) {
5234 struct proc_data *data;
5235 struct proc_dir_entry *dp = PDE(inode);
5236 struct net_device *dev = dp->data;
5237 struct airo_info *ai = dev->priv;
5238 int i;
5239 char key[16];
5240 u16 index = 0;
5241 int j = 0;
5242
5243 memset(key, 0, sizeof(key));
5244
5245 data = (struct proc_data *)file->private_data;
5246 if ( !data->writelen ) return;
5247
5248 if (data->wbuffer[0] >= '0' && data->wbuffer[0] <= '3' &&
5249 (data->wbuffer[1] == ' ' || data->wbuffer[1] == '\n')) {
5250 index = data->wbuffer[0] - '0';
5251 if (data->wbuffer[1] == '\n') {
5252 set_wep_key(ai, index, NULL, 0, 1, 1);
5253 return;
5254 }
5255 j = 2;
5256 } else {
5257 airo_print_err(ai->dev->name, "WepKey passed invalid key index");
5258 return;
5259 }
5260
5261 for( i = 0; i < 16*3 && data->wbuffer[i+j]; i++ ) {
5262 switch(i%3) {
5263 case 0:
5264 key[i/3] = hexVal(data->wbuffer[i+j])<<4;
5265 break;
5266 case 1:
5267 key[i/3] |= hexVal(data->wbuffer[i+j]);
5268 break;
5269 }
5270 }
5271 set_wep_key(ai, index, key, i/3, 1, 1);
5272 }
5273
5274 static int proc_wepkey_open( struct inode *inode, struct file *file ) {
5275 struct proc_data *data;
5276 struct proc_dir_entry *dp = PDE(inode);
5277 struct net_device *dev = dp->data;
5278 struct airo_info *ai = dev->priv;
5279 char *ptr;
5280 WepKeyRid wkr;
5281 u16 lastindex;
5282 int j=0;
5283 int rc;
5284
5285 if ((file->private_data = kzalloc(sizeof(struct proc_data ), GFP_KERNEL)) == NULL)
5286 return -ENOMEM;
5287 memset(&wkr, 0, sizeof(wkr));
5288 data = (struct proc_data *)file->private_data;
5289 if ((data->rbuffer = kzalloc( 180, GFP_KERNEL )) == NULL) {
5290 kfree (file->private_data);
5291 return -ENOMEM;
5292 }
5293 data->writelen = 0;
5294 data->maxwritelen = 80;
5295 if ((data->wbuffer = kzalloc( 80, GFP_KERNEL )) == NULL) {
5296 kfree (data->rbuffer);
5297 kfree (file->private_data);
5298 return -ENOMEM;
5299 }
5300 data->on_close = proc_wepkey_on_close;
5301
5302 ptr = data->rbuffer;
5303 strcpy(ptr, "No wep keys\n");
5304 rc = readWepKeyRid(ai, &wkr, 1, 1);
5305 if (rc == SUCCESS) do {
5306 lastindex = wkr.kindex;
5307 if (wkr.kindex == 0xffff) {
5308 j += sprintf(ptr+j, "Tx key = %d\n",
5309 (int)wkr.mac[0]);
5310 } else {
5311 j += sprintf(ptr+j, "Key %d set with length = %d\n",
5312 (int)wkr.kindex, (int)wkr.klen);
5313 }
5314 readWepKeyRid(ai, &wkr, 0, 1);
5315 } while((lastindex != wkr.kindex) && (j < 180-30));
5316
5317 data->readlen = strlen( data->rbuffer );
5318 return 0;
5319 }
5320
5321 static int proc_SSID_open( struct inode *inode, struct file *file ) {
5322 struct proc_data *data;
5323 struct proc_dir_entry *dp = PDE(inode);
5324 struct net_device *dev = dp->data;
5325 struct airo_info *ai = dev->priv;
5326 int i;
5327 char *ptr;
5328 SsidRid SSID_rid;
5329
5330 if ((file->private_data = kzalloc(sizeof(struct proc_data ), GFP_KERNEL)) == NULL)
5331 return -ENOMEM;
5332 data = (struct proc_data *)file->private_data;
5333 if ((data->rbuffer = kmalloc( 104, GFP_KERNEL )) == NULL) {
5334 kfree (file->private_data);
5335 return -ENOMEM;
5336 }
5337 data->writelen = 0;
5338 data->maxwritelen = 33*3;
5339 if ((data->wbuffer = kzalloc( 33*3, GFP_KERNEL )) == NULL) {
5340 kfree (data->rbuffer);
5341 kfree (file->private_data);
5342 return -ENOMEM;
5343 }
5344 data->on_close = proc_SSID_on_close;
5345
5346 readSsidRid(ai, &SSID_rid);
5347 ptr = data->rbuffer;
5348 for( i = 0; i < 3; i++ ) {
5349 int j;
5350 if ( !SSID_rid.ssids[i].len ) break;
5351 for( j = 0; j < 32 &&
5352 j < SSID_rid.ssids[i].len &&
5353 SSID_rid.ssids[i].ssid[j]; j++ ) {
5354 *ptr++ = SSID_rid.ssids[i].ssid[j];
5355 }
5356 *ptr++ = '\n';
5357 }
5358 *ptr = '\0';
5359 data->readlen = strlen( data->rbuffer );
5360 return 0;
5361 }
5362
5363 static int proc_APList_open( struct inode *inode, struct file *file ) {
5364 struct proc_data *data;
5365 struct proc_dir_entry *dp = PDE(inode);
5366 struct net_device *dev = dp->data;
5367 struct airo_info *ai = dev->priv;
5368 int i;
5369 char *ptr;
5370 APListRid APList_rid;
5371
5372 if ((file->private_data = kzalloc(sizeof(struct proc_data ), GFP_KERNEL)) == NULL)
5373 return -ENOMEM;
5374 data = (struct proc_data *)file->private_data;
5375 if ((data->rbuffer = kmalloc( 104, GFP_KERNEL )) == NULL) {
5376 kfree (file->private_data);
5377 return -ENOMEM;
5378 }
5379 data->writelen = 0;
5380 data->maxwritelen = 4*6*3;
5381 if ((data->wbuffer = kzalloc( data->maxwritelen, GFP_KERNEL )) == NULL) {
5382 kfree (data->rbuffer);
5383 kfree (file->private_data);
5384 return -ENOMEM;
5385 }
5386 data->on_close = proc_APList_on_close;
5387
5388 readAPListRid(ai, &APList_rid);
5389 ptr = data->rbuffer;
5390 for( i = 0; i < 4; i++ ) {
5391 // We end when we find a zero MAC
5392 if ( !*(int*)APList_rid.ap[i] &&
5393 !*(int*)&APList_rid.ap[i][2]) break;
5394 ptr += sprintf(ptr, "%02x:%02x:%02x:%02x:%02x:%02x\n",
5395 (int)APList_rid.ap[i][0],
5396 (int)APList_rid.ap[i][1],
5397 (int)APList_rid.ap[i][2],
5398 (int)APList_rid.ap[i][3],
5399 (int)APList_rid.ap[i][4],
5400 (int)APList_rid.ap[i][5]);
5401 }
5402 if (i==0) ptr += sprintf(ptr, "Not using specific APs\n");
5403
5404 *ptr = '\0';
5405 data->readlen = strlen( data->rbuffer );
5406 return 0;
5407 }
5408
5409 static int proc_BSSList_open( struct inode *inode, struct file *file ) {
5410 struct proc_data *data;
5411 struct proc_dir_entry *dp = PDE(inode);
5412 struct net_device *dev = dp->data;
5413 struct airo_info *ai = dev->priv;
5414 char *ptr;
5415 BSSListRid BSSList_rid;
5416 int rc;
5417 /* If doLoseSync is not 1, we won't do a Lose Sync */
5418 int doLoseSync = -1;
5419
5420 if ((file->private_data = kzalloc(sizeof(struct proc_data ), GFP_KERNEL)) == NULL)
5421 return -ENOMEM;
5422 data = (struct proc_data *)file->private_data;
5423 if ((data->rbuffer = kmalloc( 1024, GFP_KERNEL )) == NULL) {
5424 kfree (file->private_data);
5425 return -ENOMEM;
5426 }
5427 data->writelen = 0;
5428 data->maxwritelen = 0;
5429 data->wbuffer = NULL;
5430 data->on_close = NULL;
5431
5432 if (file->f_mode & FMODE_WRITE) {
5433 if (!(file->f_mode & FMODE_READ)) {
5434 Cmd cmd;
5435 Resp rsp;
5436
5437 if (ai->flags & FLAG_RADIO_MASK) return -ENETDOWN;
5438 memset(&cmd, 0, sizeof(cmd));
5439 cmd.cmd=CMD_LISTBSS;
5440 if (down_interruptible(&ai->sem))
5441 return -ERESTARTSYS;
5442 issuecommand(ai, &cmd, &rsp);
5443 up(&ai->sem);
5444 data->readlen = 0;
5445 return 0;
5446 }
5447 doLoseSync = 1;
5448 }
5449 ptr = data->rbuffer;
5450 /* There is a race condition here if there are concurrent opens.
5451 Since it is a rare condition, we'll just live with it, otherwise
5452 we have to add a spin lock... */
5453 rc = readBSSListRid(ai, doLoseSync, &BSSList_rid);
5454 while(rc == 0 && BSSList_rid.index != 0xffff) {
5455 ptr += sprintf(ptr, "%02x:%02x:%02x:%02x:%02x:%02x %*s rssi = %d",
5456 (int)BSSList_rid.bssid[0],
5457 (int)BSSList_rid.bssid[1],
5458 (int)BSSList_rid.bssid[2],
5459 (int)BSSList_rid.bssid[3],
5460 (int)BSSList_rid.bssid[4],
5461 (int)BSSList_rid.bssid[5],
5462 (int)BSSList_rid.ssidLen,
5463 BSSList_rid.ssid,
5464 (int)BSSList_rid.dBm);
5465 ptr += sprintf(ptr, " channel = %d %s %s %s %s\n",
5466 (int)BSSList_rid.dsChannel,
5467 BSSList_rid.cap & CAP_ESS ? "ESS" : "",
5468 BSSList_rid.cap & CAP_IBSS ? "adhoc" : "",
5469 BSSList_rid.cap & CAP_PRIVACY ? "wep" : "",
5470 BSSList_rid.cap & CAP_SHORTHDR ? "shorthdr" : "");
5471 rc = readBSSListRid(ai, 0, &BSSList_rid);
5472 }
5473 *ptr = '\0';
5474 data->readlen = strlen( data->rbuffer );
5475 return 0;
5476 }
5477
5478 static int proc_close( struct inode *inode, struct file *file )
5479 {
5480 struct proc_data *data = file->private_data;
5481
5482 if (data->on_close != NULL)
5483 data->on_close(inode, file);
5484 kfree(data->rbuffer);
5485 kfree(data->wbuffer);
5486 kfree(data);
5487 return 0;
5488 }
5489
5490 static struct net_device_list {
5491 struct net_device *dev;
5492 struct net_device_list *next;
5493 } *airo_devices;
5494
5495 /* Since the card doesn't automatically switch to the right WEP mode,
5496 we will make it do it. If the card isn't associated, every secs we
5497 will switch WEP modes to see if that will help. If the card is
5498 associated we will check every minute to see if anything has
5499 changed. */
5500 static void timer_func( struct net_device *dev ) {
5501 struct airo_info *apriv = dev->priv;
5502 Resp rsp;
5503
5504 /* We don't have a link so try changing the authtype */
5505 readConfigRid(apriv, 0);
5506 disable_MAC(apriv, 0);
5507 switch(apriv->config.authType) {
5508 case AUTH_ENCRYPT:
5509 /* So drop to OPEN */
5510 apriv->config.authType = AUTH_OPEN;
5511 break;
5512 case AUTH_SHAREDKEY:
5513 if (apriv->keyindex < auto_wep) {
5514 set_wep_key(apriv, apriv->keyindex, NULL, 0, 0, 0);
5515 apriv->config.authType = AUTH_SHAREDKEY;
5516 apriv->keyindex++;
5517 } else {
5518 /* Drop to ENCRYPT */
5519 apriv->keyindex = 0;
5520 set_wep_key(apriv, apriv->defindex, NULL, 0, 0, 0);
5521 apriv->config.authType = AUTH_ENCRYPT;
5522 }
5523 break;
5524 default: /* We'll escalate to SHAREDKEY */
5525 apriv->config.authType = AUTH_SHAREDKEY;
5526 }
5527 set_bit (FLAG_COMMIT, &apriv->flags);
5528 writeConfigRid(apriv, 0);
5529 enable_MAC(apriv, &rsp, 0);
5530 up(&apriv->sem);
5531
5532 /* Schedule check to see if the change worked */
5533 clear_bit(JOB_AUTOWEP, &apriv->jobs);
5534 apriv->expires = RUN_AT(HZ*3);
5535 }
5536
5537 static int add_airo_dev( struct net_device *dev ) {
5538 struct net_device_list *node = kmalloc( sizeof( *node ), GFP_KERNEL );
5539 if ( !node )
5540 return -ENOMEM;
5541
5542 node->dev = dev;
5543 node->next = airo_devices;
5544 airo_devices = node;
5545
5546 return 0;
5547 }
5548
5549 static void del_airo_dev( struct net_device *dev ) {
5550 struct net_device_list **p = &airo_devices;
5551 while( *p && ( (*p)->dev != dev ) )
5552 p = &(*p)->next;
5553 if ( *p && (*p)->dev == dev )
5554 *p = (*p)->next;
5555 }
5556
5557 #ifdef CONFIG_PCI
5558 static int __devinit airo_pci_probe(struct pci_dev *pdev,
5559 const struct pci_device_id *pent)
5560 {
5561 struct net_device *dev;
5562
5563 if (pci_enable_device(pdev))
5564 return -ENODEV;
5565 pci_set_master(pdev);
5566
5567 if (pdev->device == 0x5000 || pdev->device == 0xa504)
5568 dev = _init_airo_card(pdev->irq, pdev->resource[0].start, 0, pdev, &pdev->dev);
5569 else
5570 dev = _init_airo_card(pdev->irq, pdev->resource[2].start, 0, pdev, &pdev->dev);
5571 if (!dev)
5572 return -ENODEV;
5573
5574 pci_set_drvdata(pdev, dev);
5575 return 0;
5576 }
5577
5578 static void __devexit airo_pci_remove(struct pci_dev *pdev)
5579 {
5580 }
5581
5582 static int airo_pci_suspend(struct pci_dev *pdev, pm_message_t state)
5583 {
5584 struct net_device *dev = pci_get_drvdata(pdev);
5585 struct airo_info *ai = dev->priv;
5586 Cmd cmd;
5587 Resp rsp;
5588
5589 if ((ai->APList == NULL) &&
5590 (ai->APList = kmalloc(sizeof(APListRid), GFP_KERNEL)) == NULL)
5591 return -ENOMEM;
5592 if ((ai->SSID == NULL) &&
5593 (ai->SSID = kmalloc(sizeof(SsidRid), GFP_KERNEL)) == NULL)
5594 return -ENOMEM;
5595 readAPListRid(ai, ai->APList);
5596 readSsidRid(ai, ai->SSID);
5597 memset(&cmd, 0, sizeof(cmd));
5598 /* the lock will be released at the end of the resume callback */
5599 if (down_interruptible(&ai->sem))
5600 return -EAGAIN;
5601 disable_MAC(ai, 0);
5602 netif_device_detach(dev);
5603 ai->power = state;
5604 cmd.cmd=HOSTSLEEP;
5605 issuecommand(ai, &cmd, &rsp);
5606
5607 pci_enable_wake(pdev, pci_choose_state(pdev, state), 1);
5608 pci_save_state(pdev);
5609 return pci_set_power_state(pdev, pci_choose_state(pdev, state));
5610 }
5611
5612 static int airo_pci_resume(struct pci_dev *pdev)
5613 {
5614 struct net_device *dev = pci_get_drvdata(pdev);
5615 struct airo_info *ai = dev->priv;
5616 Resp rsp;
5617 pci_power_t prev_state = pdev->current_state;
5618
5619 pci_set_power_state(pdev, PCI_D0);
5620 pci_restore_state(pdev);
5621 pci_enable_wake(pdev, PCI_D0, 0);
5622
5623 if (prev_state != PCI_D1) {
5624 reset_card(dev, 0);
5625 mpi_init_descriptors(ai);
5626 setup_card(ai, dev->dev_addr, 0);
5627 clear_bit(FLAG_RADIO_OFF, &ai->flags);
5628 clear_bit(FLAG_PENDING_XMIT, &ai->flags);
5629 } else {
5630 OUT4500(ai, EVACK, EV_AWAKEN);
5631 OUT4500(ai, EVACK, EV_AWAKEN);
5632 msleep(100);
5633 }
5634
5635 set_bit (FLAG_COMMIT, &ai->flags);
5636 disable_MAC(ai, 0);
5637 msleep(200);
5638 if (ai->SSID) {
5639 writeSsidRid(ai, ai->SSID, 0);
5640 kfree(ai->SSID);
5641 ai->SSID = NULL;
5642 }
5643 if (ai->APList) {
5644 writeAPListRid(ai, ai->APList, 0);
5645 kfree(ai->APList);
5646 ai->APList = NULL;
5647 }
5648 writeConfigRid(ai, 0);
5649 enable_MAC(ai, &rsp, 0);
5650 ai->power = PMSG_ON;
5651 netif_device_attach(dev);
5652 netif_wake_queue(dev);
5653 enable_interrupts(ai);
5654 up(&ai->sem);
5655 return 0;
5656 }
5657 #endif
5658
5659 static int __init airo_init_module( void )
5660 {
5661 int i;
5662 #if 0
5663 int have_isa_dev = 0;
5664 #endif
5665
5666 airo_entry = create_proc_entry("aironet",
5667 S_IFDIR | airo_perm,
5668 proc_root_driver);
5669
5670 if (airo_entry) {
5671 airo_entry->uid = proc_uid;
5672 airo_entry->gid = proc_gid;
5673 }
5674
5675 for( i = 0; i < 4 && io[i] && irq[i]; i++ ) {
5676 airo_print_info("", "Trying to configure ISA adapter at irq=%d "
5677 "io=0x%x", irq[i], io[i] );
5678 if (init_airo_card( irq[i], io[i], 0, NULL ))
5679 #if 0
5680 have_isa_dev = 1;
5681 #else
5682 /* do nothing */ ;
5683 #endif
5684 }
5685
5686 #ifdef CONFIG_PCI
5687 airo_print_info("", "Probing for PCI adapters");
5688 i = pci_register_driver(&airo_driver);
5689 airo_print_info("", "Finished probing for PCI adapters");
5690
5691 if (i) {
5692 remove_proc_entry("aironet", proc_root_driver);
5693 return i;
5694 }
5695 #endif
5696
5697 /* Always exit with success, as we are a library module
5698 * as well as a driver module
5699 */
5700 return 0;
5701 }
5702
5703 static void __exit airo_cleanup_module( void )
5704 {
5705 while( airo_devices ) {
5706 airo_print_info(airo_devices->dev->name, "Unregistering...\n");
5707 stop_airo_card( airo_devices->dev, 1 );
5708 }
5709 #ifdef CONFIG_PCI
5710 pci_unregister_driver(&airo_driver);
5711 #endif
5712 remove_proc_entry("aironet", proc_root_driver);
5713 }
5714
5715 /*
5716 * Initial Wireless Extension code for Aironet driver by :
5717 * Jean Tourrilhes <jt@hpl.hp.com> - HPL - 17 November 00
5718 * Conversion to new driver API by :
5719 * Jean Tourrilhes <jt@hpl.hp.com> - HPL - 26 March 02
5720 * Javier also did a good amount of work here, adding some new extensions
5721 * and fixing my code. Let's just say that without him this code just
5722 * would not work at all... - Jean II
5723 */
5724
5725 static u8 airo_rssi_to_dbm (tdsRssiEntry *rssi_rid, u8 rssi)
5726 {
5727 if( !rssi_rid )
5728 return 0;
5729
5730 return (0x100 - rssi_rid[rssi].rssidBm);
5731 }
5732
5733 static u8 airo_dbm_to_pct (tdsRssiEntry *rssi_rid, u8 dbm)
5734 {
5735 int i;
5736
5737 if( !rssi_rid )
5738 return 0;
5739
5740 for( i = 0; i < 256; i++ )
5741 if (rssi_rid[i].rssidBm == dbm)
5742 return rssi_rid[i].rssipct;
5743
5744 return 0;
5745 }
5746
5747
5748 static int airo_get_quality (StatusRid *status_rid, CapabilityRid *cap_rid)
5749 {
5750 int quality = 0;
5751
5752 if ((status_rid->mode & 0x3f) == 0x3f && (cap_rid->hardCap & 8)) {
5753 if (memcmp(cap_rid->prodName, "350", 3))
5754 if (status_rid->signalQuality > 0x20)
5755 quality = 0;
5756 else
5757 quality = 0x20 - status_rid->signalQuality;
5758 else
5759 if (status_rid->signalQuality > 0xb0)
5760 quality = 0;
5761 else if (status_rid->signalQuality < 0x10)
5762 quality = 0xa0;
5763 else
5764 quality = 0xb0 - status_rid->signalQuality;
5765 }
5766 return quality;
5767 }
5768
5769 #define airo_get_max_quality(cap_rid) (memcmp((cap_rid)->prodName, "350", 3) ? 0x20 : 0xa0)
5770 #define airo_get_avg_quality(cap_rid) (memcmp((cap_rid)->prodName, "350", 3) ? 0x10 : 0x50);
5771
5772 /*------------------------------------------------------------------*/
5773 /*
5774 * Wireless Handler : get protocol name
5775 */
5776 static int airo_get_name(struct net_device *dev,
5777 struct iw_request_info *info,
5778 char *cwrq,
5779 char *extra)
5780 {
5781 strcpy(cwrq, "IEEE 802.11-DS");
5782 return 0;
5783 }
5784
5785 /*------------------------------------------------------------------*/
5786 /*
5787 * Wireless Handler : set frequency
5788 */
5789 static int airo_set_freq(struct net_device *dev,
5790 struct iw_request_info *info,
5791 struct iw_freq *fwrq,
5792 char *extra)
5793 {
5794 struct airo_info *local = dev->priv;
5795 int rc = -EINPROGRESS; /* Call commit handler */
5796
5797 /* If setting by frequency, convert to a channel */
5798 if((fwrq->e == 1) &&
5799 (fwrq->m >= (int) 2.412e8) &&
5800 (fwrq->m <= (int) 2.487e8)) {
5801 int f = fwrq->m / 100000;
5802 int c = 0;
5803 while((c < 14) && (f != frequency_list[c]))
5804 c++;
5805 /* Hack to fall through... */
5806 fwrq->e = 0;
5807 fwrq->m = c + 1;
5808 }
5809 /* Setting by channel number */
5810 if((fwrq->m > 1000) || (fwrq->e > 0))
5811 rc = -EOPNOTSUPP;
5812 else {
5813 int channel = fwrq->m;
5814 /* We should do a better check than that,
5815 * based on the card capability !!! */
5816 if((channel < 1) || (channel > 14)) {
5817 airo_print_dbg(dev->name, "New channel value of %d is invalid!",
5818 fwrq->m);
5819 rc = -EINVAL;
5820 } else {
5821 readConfigRid(local, 1);
5822 /* Yes ! We can set it !!! */
5823 local->config.channelSet = (u16) channel;
5824 set_bit (FLAG_COMMIT, &local->flags);
5825 }
5826 }
5827 return rc;
5828 }
5829
5830 /*------------------------------------------------------------------*/
5831 /*
5832 * Wireless Handler : get frequency
5833 */
5834 static int airo_get_freq(struct net_device *dev,
5835 struct iw_request_info *info,
5836 struct iw_freq *fwrq,
5837 char *extra)
5838 {
5839 struct airo_info *local = dev->priv;
5840 StatusRid status_rid; /* Card status info */
5841 int ch;
5842
5843 readConfigRid(local, 1);
5844 if ((local->config.opmode & 0xFF) == MODE_STA_ESS)
5845 status_rid.channel = local->config.channelSet;
5846 else
5847 readStatusRid(local, &status_rid, 1);
5848
5849 ch = (int)status_rid.channel;
5850 if((ch > 0) && (ch < 15)) {
5851 fwrq->m = frequency_list[ch - 1] * 100000;
5852 fwrq->e = 1;
5853 } else {
5854 fwrq->m = ch;
5855 fwrq->e = 0;
5856 }
5857
5858 return 0;
5859 }
5860
5861 /*------------------------------------------------------------------*/
5862 /*
5863 * Wireless Handler : set ESSID
5864 */
5865 static int airo_set_essid(struct net_device *dev,
5866 struct iw_request_info *info,
5867 struct iw_point *dwrq,
5868 char *extra)
5869 {
5870 struct airo_info *local = dev->priv;
5871 Resp rsp;
5872 SsidRid SSID_rid; /* SSIDs */
5873
5874 /* Reload the list of current SSID */
5875 readSsidRid(local, &SSID_rid);
5876
5877 /* Check if we asked for `any' */
5878 if(dwrq->flags == 0) {
5879 /* Just send an empty SSID list */
5880 memset(&SSID_rid, 0, sizeof(SSID_rid));
5881 } else {
5882 int index = (dwrq->flags & IW_ENCODE_INDEX) - 1;
5883
5884 /* Check the size of the string */
5885 if(dwrq->length > IW_ESSID_MAX_SIZE) {
5886 return -E2BIG ;
5887 }
5888 /* Check if index is valid */
5889 if((index < 0) || (index >= 4)) {
5890 return -EINVAL;
5891 }
5892
5893 /* Set the SSID */
5894 memset(SSID_rid.ssids[index].ssid, 0,
5895 sizeof(SSID_rid.ssids[index].ssid));
5896 memcpy(SSID_rid.ssids[index].ssid, extra, dwrq->length);
5897 SSID_rid.ssids[index].len = dwrq->length;
5898 }
5899 SSID_rid.len = sizeof(SSID_rid);
5900 /* Write it to the card */
5901 disable_MAC(local, 1);
5902 writeSsidRid(local, &SSID_rid, 1);
5903 enable_MAC(local, &rsp, 1);
5904
5905 return 0;
5906 }
5907
5908 /*------------------------------------------------------------------*/
5909 /*
5910 * Wireless Handler : get ESSID
5911 */
5912 static int airo_get_essid(struct net_device *dev,
5913 struct iw_request_info *info,
5914 struct iw_point *dwrq,
5915 char *extra)
5916 {
5917 struct airo_info *local = dev->priv;
5918 StatusRid status_rid; /* Card status info */
5919
5920 readStatusRid(local, &status_rid, 1);
5921
5922 /* Note : if dwrq->flags != 0, we should
5923 * get the relevant SSID from the SSID list... */
5924
5925 /* Get the current SSID */
5926 memcpy(extra, status_rid.SSID, status_rid.SSIDlen);
5927 extra[status_rid.SSIDlen] = '\0';
5928 /* If none, we may want to get the one that was set */
5929
5930 /* Push it out ! */
5931 dwrq->length = status_rid.SSIDlen;
5932 dwrq->flags = 1; /* active */
5933
5934 return 0;
5935 }
5936
5937 /*------------------------------------------------------------------*/
5938 /*
5939 * Wireless Handler : set AP address
5940 */
5941 static int airo_set_wap(struct net_device *dev,
5942 struct iw_request_info *info,
5943 struct sockaddr *awrq,
5944 char *extra)
5945 {
5946 struct airo_info *local = dev->priv;
5947 Cmd cmd;
5948 Resp rsp;
5949 APListRid APList_rid;
5950 static const u8 any[ETH_ALEN] = { 0xFF, 0xFF, 0xFF, 0xFF, 0xFF, 0xFF };
5951 static const u8 off[ETH_ALEN] = { 0x00, 0x00, 0x00, 0x00, 0x00, 0x00 };
5952
5953 if (awrq->sa_family != ARPHRD_ETHER)
5954 return -EINVAL;
5955 else if (!memcmp(any, awrq->sa_data, ETH_ALEN) ||
5956 !memcmp(off, awrq->sa_data, ETH_ALEN)) {
5957 memset(&cmd, 0, sizeof(cmd));
5958 cmd.cmd=CMD_LOSE_SYNC;
5959 if (down_interruptible(&local->sem))
5960 return -ERESTARTSYS;
5961 issuecommand(local, &cmd, &rsp);
5962 up(&local->sem);
5963 } else {
5964 memset(&APList_rid, 0, sizeof(APList_rid));
5965 APList_rid.len = sizeof(APList_rid);
5966 memcpy(APList_rid.ap[0], awrq->sa_data, ETH_ALEN);
5967 disable_MAC(local, 1);
5968 writeAPListRid(local, &APList_rid, 1);
5969 enable_MAC(local, &rsp, 1);
5970 }
5971 return 0;
5972 }
5973
5974 /*------------------------------------------------------------------*/
5975 /*
5976 * Wireless Handler : get AP address
5977 */
5978 static int airo_get_wap(struct net_device *dev,
5979 struct iw_request_info *info,
5980 struct sockaddr *awrq,
5981 char *extra)
5982 {
5983 struct airo_info *local = dev->priv;
5984 StatusRid status_rid; /* Card status info */
5985
5986 readStatusRid(local, &status_rid, 1);
5987
5988 /* Tentative. This seems to work, wow, I'm lucky !!! */
5989 memcpy(awrq->sa_data, status_rid.bssid[0], ETH_ALEN);
5990 awrq->sa_family = ARPHRD_ETHER;
5991
5992 return 0;
5993 }
5994
5995 /*------------------------------------------------------------------*/
5996 /*
5997 * Wireless Handler : set Nickname
5998 */
5999 static int airo_set_nick(struct net_device *dev,
6000 struct iw_request_info *info,
6001 struct iw_point *dwrq,
6002 char *extra)
6003 {
6004 struct airo_info *local = dev->priv;
6005
6006 /* Check the size of the string */
6007 if(dwrq->length > 16) {
6008 return -E2BIG;
6009 }
6010 readConfigRid(local, 1);
6011 memset(local->config.nodeName, 0, sizeof(local->config.nodeName));
6012 memcpy(local->config.nodeName, extra, dwrq->length);
6013 set_bit (FLAG_COMMIT, &local->flags);
6014
6015 return -EINPROGRESS; /* Call commit handler */
6016 }
6017
6018 /*------------------------------------------------------------------*/
6019 /*
6020 * Wireless Handler : get Nickname
6021 */
6022 static int airo_get_nick(struct net_device *dev,
6023 struct iw_request_info *info,
6024 struct iw_point *dwrq,
6025 char *extra)
6026 {
6027 struct airo_info *local = dev->priv;
6028
6029 readConfigRid(local, 1);
6030 strncpy(extra, local->config.nodeName, 16);
6031 extra[16] = '\0';
6032 dwrq->length = strlen(extra);
6033
6034 return 0;
6035 }
6036
6037 /*------------------------------------------------------------------*/
6038 /*
6039 * Wireless Handler : set Bit-Rate
6040 */
6041 static int airo_set_rate(struct net_device *dev,
6042 struct iw_request_info *info,
6043 struct iw_param *vwrq,
6044 char *extra)
6045 {
6046 struct airo_info *local = dev->priv;
6047 CapabilityRid cap_rid; /* Card capability info */
6048 u8 brate = 0;
6049 int i;
6050
6051 /* First : get a valid bit rate value */
6052 readCapabilityRid(local, &cap_rid, 1);
6053
6054 /* Which type of value ? */
6055 if((vwrq->value < 8) && (vwrq->value >= 0)) {
6056 /* Setting by rate index */
6057 /* Find value in the magic rate table */
6058 brate = cap_rid.supportedRates[vwrq->value];
6059 } else {
6060 /* Setting by frequency value */
6061 u8 normvalue = (u8) (vwrq->value/500000);
6062
6063 /* Check if rate is valid */
6064 for(i = 0 ; i < 8 ; i++) {
6065 if(normvalue == cap_rid.supportedRates[i]) {
6066 brate = normvalue;
6067 break;
6068 }
6069 }
6070 }
6071 /* -1 designed the max rate (mostly auto mode) */
6072 if(vwrq->value == -1) {
6073 /* Get the highest available rate */
6074 for(i = 0 ; i < 8 ; i++) {
6075 if(cap_rid.supportedRates[i] == 0)
6076 break;
6077 }
6078 if(i != 0)
6079 brate = cap_rid.supportedRates[i - 1];
6080 }
6081 /* Check that it is valid */
6082 if(brate == 0) {
6083 return -EINVAL;
6084 }
6085
6086 readConfigRid(local, 1);
6087 /* Now, check if we want a fixed or auto value */
6088 if(vwrq->fixed == 0) {
6089 /* Fill all the rates up to this max rate */
6090 memset(local->config.rates, 0, 8);
6091 for(i = 0 ; i < 8 ; i++) {
6092 local->config.rates[i] = cap_rid.supportedRates[i];
6093 if(local->config.rates[i] == brate)
6094 break;
6095 }
6096 } else {
6097 /* Fixed mode */
6098 /* One rate, fixed */
6099 memset(local->config.rates, 0, 8);
6100 local->config.rates[0] = brate;
6101 }
6102 set_bit (FLAG_COMMIT, &local->flags);
6103
6104 return -EINPROGRESS; /* Call commit handler */
6105 }
6106
6107 /*------------------------------------------------------------------*/
6108 /*
6109 * Wireless Handler : get Bit-Rate
6110 */
6111 static int airo_get_rate(struct net_device *dev,
6112 struct iw_request_info *info,
6113 struct iw_param *vwrq,
6114 char *extra)
6115 {
6116 struct airo_info *local = dev->priv;
6117 StatusRid status_rid; /* Card status info */
6118
6119 readStatusRid(local, &status_rid, 1);
6120
6121 vwrq->value = status_rid.currentXmitRate * 500000;
6122 /* If more than one rate, set auto */
6123 readConfigRid(local, 1);
6124 vwrq->fixed = (local->config.rates[1] == 0);
6125
6126 return 0;
6127 }
6128
6129 /*------------------------------------------------------------------*/
6130 /*
6131 * Wireless Handler : set RTS threshold
6132 */
6133 static int airo_set_rts(struct net_device *dev,
6134 struct iw_request_info *info,
6135 struct iw_param *vwrq,
6136 char *extra)
6137 {
6138 struct airo_info *local = dev->priv;
6139 int rthr = vwrq->value;
6140
6141 if(vwrq->disabled)
6142 rthr = AIRO_DEF_MTU;
6143 if((rthr < 0) || (rthr > AIRO_DEF_MTU)) {
6144 return -EINVAL;
6145 }
6146 readConfigRid(local, 1);
6147 local->config.rtsThres = rthr;
6148 set_bit (FLAG_COMMIT, &local->flags);
6149
6150 return -EINPROGRESS; /* Call commit handler */
6151 }
6152
6153 /*------------------------------------------------------------------*/
6154 /*
6155 * Wireless Handler : get RTS threshold
6156 */
6157 static int airo_get_rts(struct net_device *dev,
6158 struct iw_request_info *info,
6159 struct iw_param *vwrq,
6160 char *extra)
6161 {
6162 struct airo_info *local = dev->priv;
6163
6164 readConfigRid(local, 1);
6165 vwrq->value = local->config.rtsThres;
6166 vwrq->disabled = (vwrq->value >= AIRO_DEF_MTU);
6167 vwrq->fixed = 1;
6168
6169 return 0;
6170 }
6171
6172 /*------------------------------------------------------------------*/
6173 /*
6174 * Wireless Handler : set Fragmentation threshold
6175 */
6176 static int airo_set_frag(struct net_device *dev,
6177 struct iw_request_info *info,
6178 struct iw_param *vwrq,
6179 char *extra)
6180 {
6181 struct airo_info *local = dev->priv;
6182 int fthr = vwrq->value;
6183
6184 if(vwrq->disabled)
6185 fthr = AIRO_DEF_MTU;
6186 if((fthr < 256) || (fthr > AIRO_DEF_MTU)) {
6187 return -EINVAL;
6188 }
6189 fthr &= ~0x1; /* Get an even value - is it really needed ??? */
6190 readConfigRid(local, 1);
6191 local->config.fragThresh = (u16)fthr;
6192 set_bit (FLAG_COMMIT, &local->flags);
6193
6194 return -EINPROGRESS; /* Call commit handler */
6195 }
6196
6197 /*------------------------------------------------------------------*/
6198 /*
6199 * Wireless Handler : get Fragmentation threshold
6200 */
6201 static int airo_get_frag(struct net_device *dev,
6202 struct iw_request_info *info,
6203 struct iw_param *vwrq,
6204 char *extra)
6205 {
6206 struct airo_info *local = dev->priv;
6207
6208 readConfigRid(local, 1);
6209 vwrq->value = local->config.fragThresh;
6210 vwrq->disabled = (vwrq->value >= AIRO_DEF_MTU);
6211 vwrq->fixed = 1;
6212
6213 return 0;
6214 }
6215
6216 /*------------------------------------------------------------------*/
6217 /*
6218 * Wireless Handler : set Mode of Operation
6219 */
6220 static int airo_set_mode(struct net_device *dev,
6221 struct iw_request_info *info,
6222 __u32 *uwrq,
6223 char *extra)
6224 {
6225 struct airo_info *local = dev->priv;
6226 int reset = 0;
6227
6228 readConfigRid(local, 1);
6229 if ((local->config.rmode & 0xff) >= RXMODE_RFMON)
6230 reset = 1;
6231
6232 switch(*uwrq) {
6233 case IW_MODE_ADHOC:
6234 local->config.opmode &= 0xFF00;
6235 local->config.opmode |= MODE_STA_IBSS;
6236 local->config.rmode &= 0xfe00;
6237 local->config.scanMode = SCANMODE_ACTIVE;
6238 clear_bit (FLAG_802_11, &local->flags);
6239 break;
6240 case IW_MODE_INFRA:
6241 local->config.opmode &= 0xFF00;
6242 local->config.opmode |= MODE_STA_ESS;
6243 local->config.rmode &= 0xfe00;
6244 local->config.scanMode = SCANMODE_ACTIVE;
6245 clear_bit (FLAG_802_11, &local->flags);
6246 break;
6247 case IW_MODE_MASTER:
6248 local->config.opmode &= 0xFF00;
6249 local->config.opmode |= MODE_AP;
6250 local->config.rmode &= 0xfe00;
6251 local->config.scanMode = SCANMODE_ACTIVE;
6252 clear_bit (FLAG_802_11, &local->flags);
6253 break;
6254 case IW_MODE_REPEAT:
6255 local->config.opmode &= 0xFF00;
6256 local->config.opmode |= MODE_AP_RPTR;
6257 local->config.rmode &= 0xfe00;
6258 local->config.scanMode = SCANMODE_ACTIVE;
6259 clear_bit (FLAG_802_11, &local->flags);
6260 break;
6261 case IW_MODE_MONITOR:
6262 local->config.opmode &= 0xFF00;
6263 local->config.opmode |= MODE_STA_ESS;
6264 local->config.rmode &= 0xfe00;
6265 local->config.rmode |= RXMODE_RFMON | RXMODE_DISABLE_802_3_HEADER;
6266 local->config.scanMode = SCANMODE_PASSIVE;
6267 set_bit (FLAG_802_11, &local->flags);
6268 break;
6269 default:
6270 return -EINVAL;
6271 }
6272 if (reset)
6273 set_bit (FLAG_RESET, &local->flags);
6274 set_bit (FLAG_COMMIT, &local->flags);
6275
6276 return -EINPROGRESS; /* Call commit handler */
6277 }
6278
6279 /*------------------------------------------------------------------*/
6280 /*
6281 * Wireless Handler : get Mode of Operation
6282 */
6283 static int airo_get_mode(struct net_device *dev,
6284 struct iw_request_info *info,
6285 __u32 *uwrq,
6286 char *extra)
6287 {
6288 struct airo_info *local = dev->priv;
6289
6290 readConfigRid(local, 1);
6291 /* If not managed, assume it's ad-hoc */
6292 switch (local->config.opmode & 0xFF) {
6293 case MODE_STA_ESS:
6294 *uwrq = IW_MODE_INFRA;
6295 break;
6296 case MODE_AP:
6297 *uwrq = IW_MODE_MASTER;
6298 break;
6299 case MODE_AP_RPTR:
6300 *uwrq = IW_MODE_REPEAT;
6301 break;
6302 default:
6303 *uwrq = IW_MODE_ADHOC;
6304 }
6305
6306 return 0;
6307 }
6308
6309 /*------------------------------------------------------------------*/
6310 /*
6311 * Wireless Handler : set Encryption Key
6312 */
6313 static int airo_set_encode(struct net_device *dev,
6314 struct iw_request_info *info,
6315 struct iw_point *dwrq,
6316 char *extra)
6317 {
6318 struct airo_info *local = dev->priv;
6319 CapabilityRid cap_rid; /* Card capability info */
6320 int perm = ( dwrq->flags & IW_ENCODE_TEMP ? 0 : 1 );
6321 u16 currentAuthType = local->config.authType;
6322
6323 /* Is WEP supported ? */
6324 readCapabilityRid(local, &cap_rid, 1);
6325 /* Older firmware doesn't support this...
6326 if(!(cap_rid.softCap & 2)) {
6327 return -EOPNOTSUPP;
6328 } */
6329 readConfigRid(local, 1);
6330
6331 /* Basic checking: do we have a key to set ?
6332 * Note : with the new API, it's impossible to get a NULL pointer.
6333 * Therefore, we need to check a key size == 0 instead.
6334 * New version of iwconfig properly set the IW_ENCODE_NOKEY flag
6335 * when no key is present (only change flags), but older versions
6336 * don't do it. - Jean II */
6337 if (dwrq->length > 0) {
6338 wep_key_t key;
6339 int index = (dwrq->flags & IW_ENCODE_INDEX) - 1;
6340 int current_index = get_wep_key(local, 0xffff);
6341 /* Check the size of the key */
6342 if (dwrq->length > MAX_KEY_SIZE) {
6343 return -EINVAL;
6344 }
6345 /* Check the index (none -> use current) */
6346 if ((index < 0) || (index >= ((cap_rid.softCap & 0x80) ? 4:1)))
6347 index = current_index;
6348 /* Set the length */
6349 if (dwrq->length > MIN_KEY_SIZE)
6350 key.len = MAX_KEY_SIZE;
6351 else
6352 if (dwrq->length > 0)
6353 key.len = MIN_KEY_SIZE;
6354 else
6355 /* Disable the key */
6356 key.len = 0;
6357 /* Check if the key is not marked as invalid */
6358 if(!(dwrq->flags & IW_ENCODE_NOKEY)) {
6359 /* Cleanup */
6360 memset(key.key, 0, MAX_KEY_SIZE);
6361 /* Copy the key in the driver */
6362 memcpy(key.key, extra, dwrq->length);
6363 /* Send the key to the card */
6364 set_wep_key(local, index, key.key, key.len, perm, 1);
6365 }
6366 /* WE specify that if a valid key is set, encryption
6367 * should be enabled (user may turn it off later)
6368 * This is also how "iwconfig ethX key on" works */
6369 if((index == current_index) && (key.len > 0) &&
6370 (local->config.authType == AUTH_OPEN)) {
6371 local->config.authType = AUTH_ENCRYPT;
6372 }
6373 } else {
6374 /* Do we want to just set the transmit key index ? */
6375 int index = (dwrq->flags & IW_ENCODE_INDEX) - 1;
6376 if ((index >= 0) && (index < ((cap_rid.softCap & 0x80)?4:1))) {
6377 set_wep_key(local, index, NULL, 0, perm, 1);
6378 } else
6379 /* Don't complain if only change the mode */
6380 if(!dwrq->flags & IW_ENCODE_MODE) {
6381 return -EINVAL;
6382 }
6383 }
6384 /* Read the flags */
6385 if(dwrq->flags & IW_ENCODE_DISABLED)
6386 local->config.authType = AUTH_OPEN; // disable encryption
6387 if(dwrq->flags & IW_ENCODE_RESTRICTED)
6388 local->config.authType = AUTH_SHAREDKEY; // Only Both
6389 if(dwrq->flags & IW_ENCODE_OPEN)
6390 local->config.authType = AUTH_ENCRYPT; // Only Wep
6391 /* Commit the changes to flags if needed */
6392 if (local->config.authType != currentAuthType)
6393 set_bit (FLAG_COMMIT, &local->flags);
6394 return -EINPROGRESS; /* Call commit handler */
6395 }
6396
6397 /*------------------------------------------------------------------*/
6398 /*
6399 * Wireless Handler : get Encryption Key
6400 */
6401 static int airo_get_encode(struct net_device *dev,
6402 struct iw_request_info *info,
6403 struct iw_point *dwrq,
6404 char *extra)
6405 {
6406 struct airo_info *local = dev->priv;
6407 int index = (dwrq->flags & IW_ENCODE_INDEX) - 1;
6408 CapabilityRid cap_rid; /* Card capability info */
6409
6410 /* Is it supported ? */
6411 readCapabilityRid(local, &cap_rid, 1);
6412 if(!(cap_rid.softCap & 2)) {
6413 return -EOPNOTSUPP;
6414 }
6415 readConfigRid(local, 1);
6416 /* Check encryption mode */
6417 switch(local->config.authType) {
6418 case AUTH_ENCRYPT:
6419 dwrq->flags = IW_ENCODE_OPEN;
6420 break;
6421 case AUTH_SHAREDKEY:
6422 dwrq->flags = IW_ENCODE_RESTRICTED;
6423 break;
6424 default:
6425 case AUTH_OPEN:
6426 dwrq->flags = IW_ENCODE_DISABLED;
6427 break;
6428 }
6429 /* We can't return the key, so set the proper flag and return zero */
6430 dwrq->flags |= IW_ENCODE_NOKEY;
6431 memset(extra, 0, 16);
6432
6433 /* Which key do we want ? -1 -> tx index */
6434 if ((index < 0) || (index >= ((cap_rid.softCap & 0x80) ? 4 : 1)))
6435 index = get_wep_key(local, 0xffff);
6436 dwrq->flags |= index + 1;
6437 /* Copy the key to the user buffer */
6438 dwrq->length = get_wep_key(local, index);
6439 if (dwrq->length > 16) {
6440 dwrq->length=0;
6441 }
6442 return 0;
6443 }
6444
6445 /*------------------------------------------------------------------*/
6446 /*
6447 * Wireless Handler : set extended Encryption parameters
6448 */
6449 static int airo_set_encodeext(struct net_device *dev,
6450 struct iw_request_info *info,
6451 union iwreq_data *wrqu,
6452 char *extra)
6453 {
6454 struct airo_info *local = dev->priv;
6455 struct iw_point *encoding = &wrqu->encoding;
6456 struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
6457 CapabilityRid cap_rid; /* Card capability info */
6458 int perm = ( encoding->flags & IW_ENCODE_TEMP ? 0 : 1 );
6459 u16 currentAuthType = local->config.authType;
6460 int idx, key_len, alg = ext->alg, set_key = 1;
6461 wep_key_t key;
6462
6463 /* Is WEP supported ? */
6464 readCapabilityRid(local, &cap_rid, 1);
6465 /* Older firmware doesn't support this...
6466 if(!(cap_rid.softCap & 2)) {
6467 return -EOPNOTSUPP;
6468 } */
6469 readConfigRid(local, 1);
6470
6471 /* Determine and validate the key index */
6472 idx = encoding->flags & IW_ENCODE_INDEX;
6473 if (idx) {
6474 if (idx < 1 || idx > ((cap_rid.softCap & 0x80) ? 4:1))
6475 return -EINVAL;
6476 idx--;
6477 } else
6478 idx = get_wep_key(local, 0xffff);
6479
6480 if (encoding->flags & IW_ENCODE_DISABLED)
6481 alg = IW_ENCODE_ALG_NONE;
6482
6483 if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY) {
6484 /* Only set transmit key index here, actual
6485 * key is set below if needed.
6486 */
6487 set_wep_key(local, idx, NULL, 0, perm, 1);
6488 set_key = ext->key_len > 0 ? 1 : 0;
6489 }
6490
6491 if (set_key) {
6492 /* Set the requested key first */
6493 memset(key.key, 0, MAX_KEY_SIZE);
6494 switch (alg) {
6495 case IW_ENCODE_ALG_NONE:
6496 key.len = 0;
6497 break;
6498 case IW_ENCODE_ALG_WEP:
6499 if (ext->key_len > MIN_KEY_SIZE) {
6500 key.len = MAX_KEY_SIZE;
6501 } else if (ext->key_len > 0) {
6502 key.len = MIN_KEY_SIZE;
6503 } else {
6504 return -EINVAL;
6505 }
6506 key_len = min (ext->key_len, key.len);
6507 memcpy(key.key, ext->key, key_len);
6508 break;
6509 default:
6510 return -EINVAL;
6511 }
6512 /* Send the key to the card */
6513 set_wep_key(local, idx, key.key, key.len, perm, 1);
6514 }
6515
6516 /* Read the flags */
6517 if(encoding->flags & IW_ENCODE_DISABLED)
6518 local->config.authType = AUTH_OPEN; // disable encryption
6519 if(encoding->flags & IW_ENCODE_RESTRICTED)
6520 local->config.authType = AUTH_SHAREDKEY; // Only Both
6521 if(encoding->flags & IW_ENCODE_OPEN)
6522 local->config.authType = AUTH_ENCRYPT; // Only Wep
6523 /* Commit the changes to flags if needed */
6524 if (local->config.authType != currentAuthType)
6525 set_bit (FLAG_COMMIT, &local->flags);
6526
6527 return -EINPROGRESS;
6528 }
6529
6530
6531 /*------------------------------------------------------------------*/
6532 /*
6533 * Wireless Handler : get extended Encryption parameters
6534 */
6535 static int airo_get_encodeext(struct net_device *dev,
6536 struct iw_request_info *info,
6537 union iwreq_data *wrqu,
6538 char *extra)
6539 {
6540 struct airo_info *local = dev->priv;
6541 struct iw_point *encoding = &wrqu->encoding;
6542 struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
6543 CapabilityRid cap_rid; /* Card capability info */
6544 int idx, max_key_len;
6545
6546 /* Is it supported ? */
6547 readCapabilityRid(local, &cap_rid, 1);
6548 if(!(cap_rid.softCap & 2)) {
6549 return -EOPNOTSUPP;
6550 }
6551 readConfigRid(local, 1);
6552
6553 max_key_len = encoding->length - sizeof(*ext);
6554 if (max_key_len < 0)
6555 return -EINVAL;
6556
6557 idx = encoding->flags & IW_ENCODE_INDEX;
6558 if (idx) {
6559 if (idx < 1 || idx > ((cap_rid.softCap & 0x80) ? 4:1))
6560 return -EINVAL;
6561 idx--;
6562 } else
6563 idx = get_wep_key(local, 0xffff);
6564
6565 encoding->flags = idx + 1;
6566 memset(ext, 0, sizeof(*ext));
6567
6568 /* Check encryption mode */
6569 switch(local->config.authType) {
6570 case AUTH_ENCRYPT:
6571 encoding->flags = IW_ENCODE_ALG_WEP | IW_ENCODE_ENABLED;
6572 break;
6573 case AUTH_SHAREDKEY:
6574 encoding->flags = IW_ENCODE_ALG_WEP | IW_ENCODE_ENABLED;
6575 break;
6576 default:
6577 case AUTH_OPEN:
6578 encoding->flags = IW_ENCODE_ALG_NONE | IW_ENCODE_DISABLED;
6579 break;
6580 }
6581 /* We can't return the key, so set the proper flag and return zero */
6582 encoding->flags |= IW_ENCODE_NOKEY;
6583 memset(extra, 0, 16);
6584
6585 /* Copy the key to the user buffer */
6586 ext->key_len = get_wep_key(local, idx);
6587 if (ext->key_len > 16) {
6588 ext->key_len=0;
6589 }
6590
6591 return 0;
6592 }
6593
6594
6595 /*------------------------------------------------------------------*/
6596 /*
6597 * Wireless Handler : set extended authentication parameters
6598 */
6599 static int airo_set_auth(struct net_device *dev,
6600 struct iw_request_info *info,
6601 union iwreq_data *wrqu, char *extra)
6602 {
6603 struct airo_info *local = dev->priv;
6604 struct iw_param *param = &wrqu->param;
6605 u16 currentAuthType = local->config.authType;
6606
6607 switch (param->flags & IW_AUTH_INDEX) {
6608 case IW_AUTH_WPA_VERSION:
6609 case IW_AUTH_CIPHER_PAIRWISE:
6610 case IW_AUTH_CIPHER_GROUP:
6611 case IW_AUTH_KEY_MGMT:
6612 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6613 case IW_AUTH_PRIVACY_INVOKED:
6614 /*
6615 * airo does not use these parameters
6616 */
6617 break;
6618
6619 case IW_AUTH_DROP_UNENCRYPTED:
6620 if (param->value) {
6621 /* Only change auth type if unencrypted */
6622 if (currentAuthType == AUTH_OPEN)
6623 local->config.authType = AUTH_ENCRYPT;
6624 } else {
6625 local->config.authType = AUTH_OPEN;
6626 }
6627
6628 /* Commit the changes to flags if needed */
6629 if (local->config.authType != currentAuthType)
6630 set_bit (FLAG_COMMIT, &local->flags);
6631 break;
6632
6633 case IW_AUTH_80211_AUTH_ALG: {
6634 /* FIXME: What about AUTH_OPEN? This API seems to
6635 * disallow setting our auth to AUTH_OPEN.
6636 */
6637 if (param->value & IW_AUTH_ALG_SHARED_KEY) {
6638 local->config.authType = AUTH_SHAREDKEY;
6639 } else if (param->value & IW_AUTH_ALG_OPEN_SYSTEM) {
6640 local->config.authType = AUTH_ENCRYPT;
6641 } else
6642 return -EINVAL;
6643 break;
6644
6645 /* Commit the changes to flags if needed */
6646 if (local->config.authType != currentAuthType)
6647 set_bit (FLAG_COMMIT, &local->flags);
6648 }
6649
6650 case IW_AUTH_WPA_ENABLED:
6651 /* Silently accept disable of WPA */
6652 if (param->value > 0)
6653 return -EOPNOTSUPP;
6654 break;
6655
6656 default:
6657 return -EOPNOTSUPP;
6658 }
6659 return -EINPROGRESS;
6660 }
6661
6662
6663 /*------------------------------------------------------------------*/
6664 /*
6665 * Wireless Handler : get extended authentication parameters
6666 */
6667 static int airo_get_auth(struct net_device *dev,
6668 struct iw_request_info *info,
6669 union iwreq_data *wrqu, char *extra)
6670 {
6671 struct airo_info *local = dev->priv;
6672 struct iw_param *param = &wrqu->param;
6673 u16 currentAuthType = local->config.authType;
6674
6675 switch (param->flags & IW_AUTH_INDEX) {
6676 case IW_AUTH_DROP_UNENCRYPTED:
6677 switch (currentAuthType) {
6678 case AUTH_SHAREDKEY:
6679 case AUTH_ENCRYPT:
6680 param->value = 1;
6681 break;
6682 default:
6683 param->value = 0;
6684 break;
6685 }
6686 break;
6687
6688 case IW_AUTH_80211_AUTH_ALG:
6689 switch (currentAuthType) {
6690 case AUTH_SHAREDKEY:
6691 param->value = IW_AUTH_ALG_SHARED_KEY;
6692 break;
6693 case AUTH_ENCRYPT:
6694 default:
6695 param->value = IW_AUTH_ALG_OPEN_SYSTEM;
6696 break;
6697 }
6698 break;
6699
6700 case IW_AUTH_WPA_ENABLED:
6701 param->value = 0;
6702 break;
6703
6704 default:
6705 return -EOPNOTSUPP;
6706 }
6707 return 0;
6708 }
6709
6710
6711 /*------------------------------------------------------------------*/
6712 /*
6713 * Wireless Handler : set Tx-Power
6714 */
6715 static int airo_set_txpow(struct net_device *dev,
6716 struct iw_request_info *info,
6717 struct iw_param *vwrq,
6718 char *extra)
6719 {
6720 struct airo_info *local = dev->priv;
6721 CapabilityRid cap_rid; /* Card capability info */
6722 int i;
6723 int rc = -EINVAL;
6724
6725 readCapabilityRid(local, &cap_rid, 1);
6726
6727 if (vwrq->disabled) {
6728 set_bit (FLAG_RADIO_OFF, &local->flags);
6729 set_bit (FLAG_COMMIT, &local->flags);
6730 return -EINPROGRESS; /* Call commit handler */
6731 }
6732 if (vwrq->flags != IW_TXPOW_MWATT) {
6733 return -EINVAL;
6734 }
6735 clear_bit (FLAG_RADIO_OFF, &local->flags);
6736 for (i = 0; cap_rid.txPowerLevels[i] && (i < 8); i++)
6737 if ((vwrq->value==cap_rid.txPowerLevels[i])) {
6738 readConfigRid(local, 1);
6739 local->config.txPower = vwrq->value;
6740 set_bit (FLAG_COMMIT, &local->flags);
6741 rc = -EINPROGRESS; /* Call commit handler */
6742 break;
6743 }
6744 return rc;
6745 }
6746
6747 /*------------------------------------------------------------------*/
6748 /*
6749 * Wireless Handler : get Tx-Power
6750 */
6751 static int airo_get_txpow(struct net_device *dev,
6752 struct iw_request_info *info,
6753 struct iw_param *vwrq,
6754 char *extra)
6755 {
6756 struct airo_info *local = dev->priv;
6757
6758 readConfigRid(local, 1);
6759 vwrq->value = local->config.txPower;
6760 vwrq->fixed = 1; /* No power control */
6761 vwrq->disabled = test_bit(FLAG_RADIO_OFF, &local->flags);
6762 vwrq->flags = IW_TXPOW_MWATT;
6763
6764 return 0;
6765 }
6766
6767 /*------------------------------------------------------------------*/
6768 /*
6769 * Wireless Handler : set Retry limits
6770 */
6771 static int airo_set_retry(struct net_device *dev,
6772 struct iw_request_info *info,
6773 struct iw_param *vwrq,
6774 char *extra)
6775 {
6776 struct airo_info *local = dev->priv;
6777 int rc = -EINVAL;
6778
6779 if(vwrq->disabled) {
6780 return -EINVAL;
6781 }
6782 readConfigRid(local, 1);
6783 if(vwrq->flags & IW_RETRY_LIMIT) {
6784 if(vwrq->flags & IW_RETRY_LONG)
6785 local->config.longRetryLimit = vwrq->value;
6786 else if (vwrq->flags & IW_RETRY_SHORT)
6787 local->config.shortRetryLimit = vwrq->value;
6788 else {
6789 /* No modifier : set both */
6790 local->config.longRetryLimit = vwrq->value;
6791 local->config.shortRetryLimit = vwrq->value;
6792 }
6793 set_bit (FLAG_COMMIT, &local->flags);
6794 rc = -EINPROGRESS; /* Call commit handler */
6795 }
6796 if(vwrq->flags & IW_RETRY_LIFETIME) {
6797 local->config.txLifetime = vwrq->value / 1024;
6798 set_bit (FLAG_COMMIT, &local->flags);
6799 rc = -EINPROGRESS; /* Call commit handler */
6800 }
6801 return rc;
6802 }
6803
6804 /*------------------------------------------------------------------*/
6805 /*
6806 * Wireless Handler : get Retry limits
6807 */
6808 static int airo_get_retry(struct net_device *dev,
6809 struct iw_request_info *info,
6810 struct iw_param *vwrq,
6811 char *extra)
6812 {
6813 struct airo_info *local = dev->priv;
6814
6815 vwrq->disabled = 0; /* Can't be disabled */
6816
6817 readConfigRid(local, 1);
6818 /* Note : by default, display the min retry number */
6819 if((vwrq->flags & IW_RETRY_TYPE) == IW_RETRY_LIFETIME) {
6820 vwrq->flags = IW_RETRY_LIFETIME;
6821 vwrq->value = (int)local->config.txLifetime * 1024;
6822 } else if((vwrq->flags & IW_RETRY_LONG)) {
6823 vwrq->flags = IW_RETRY_LIMIT | IW_RETRY_LONG;
6824 vwrq->value = (int)local->config.longRetryLimit;
6825 } else {
6826 vwrq->flags = IW_RETRY_LIMIT;
6827 vwrq->value = (int)local->config.shortRetryLimit;
6828 if((int)local->config.shortRetryLimit != (int)local->config.longRetryLimit)
6829 vwrq->flags |= IW_RETRY_SHORT;
6830 }
6831
6832 return 0;
6833 }
6834
6835 /*------------------------------------------------------------------*/
6836 /*
6837 * Wireless Handler : get range info
6838 */
6839 static int airo_get_range(struct net_device *dev,
6840 struct iw_request_info *info,
6841 struct iw_point *dwrq,
6842 char *extra)
6843 {
6844 struct airo_info *local = dev->priv;
6845 struct iw_range *range = (struct iw_range *) extra;
6846 CapabilityRid cap_rid; /* Card capability info */
6847 int i;
6848 int k;
6849
6850 readCapabilityRid(local, &cap_rid, 1);
6851
6852 dwrq->length = sizeof(struct iw_range);
6853 memset(range, 0, sizeof(*range));
6854 range->min_nwid = 0x0000;
6855 range->max_nwid = 0x0000;
6856 range->num_channels = 14;
6857 /* Should be based on cap_rid.country to give only
6858 * what the current card support */
6859 k = 0;
6860 for(i = 0; i < 14; i++) {
6861 range->freq[k].i = i + 1; /* List index */
6862 range->freq[k].m = frequency_list[i] * 100000;
6863 range->freq[k++].e = 1; /* Values in table in MHz -> * 10^5 * 10 */
6864 }
6865 range->num_frequency = k;
6866
6867 range->sensitivity = 65535;
6868
6869 /* Hum... Should put the right values there */
6870 if (local->rssi)
6871 range->max_qual.qual = 100; /* % */
6872 else
6873 range->max_qual.qual = airo_get_max_quality(&cap_rid);
6874 range->max_qual.level = 0x100 - 120; /* -120 dBm */
6875 range->max_qual.noise = 0x100 - 120; /* -120 dBm */
6876
6877 /* Experimental measurements - boundary 11/5.5 Mb/s */
6878 /* Note : with or without the (local->rssi), results
6879 * are somewhat different. - Jean II */
6880 if (local->rssi) {
6881 range->avg_qual.qual = 50; /* % */
6882 range->avg_qual.level = 0x100 - 70; /* -70 dBm */
6883 } else {
6884 range->avg_qual.qual = airo_get_avg_quality(&cap_rid);
6885 range->avg_qual.level = 0x100 - 80; /* -80 dBm */
6886 }
6887 range->avg_qual.noise = 0x100 - 85; /* -85 dBm */
6888
6889 for(i = 0 ; i < 8 ; i++) {
6890 range->bitrate[i] = cap_rid.supportedRates[i] * 500000;
6891 if(range->bitrate[i] == 0)
6892 break;
6893 }
6894 range->num_bitrates = i;
6895
6896 /* Set an indication of the max TCP throughput
6897 * in bit/s that we can expect using this interface.
6898 * May be use for QoS stuff... Jean II */
6899 if(i > 2)
6900 range->throughput = 5000 * 1000;
6901 else
6902 range->throughput = 1500 * 1000;
6903
6904 range->min_rts = 0;
6905 range->max_rts = AIRO_DEF_MTU;
6906 range->min_frag = 256;
6907 range->max_frag = AIRO_DEF_MTU;
6908
6909 if(cap_rid.softCap & 2) {
6910 // WEP: RC4 40 bits
6911 range->encoding_size[0] = 5;
6912 // RC4 ~128 bits
6913 if (cap_rid.softCap & 0x100) {
6914 range->encoding_size[1] = 13;
6915 range->num_encoding_sizes = 2;
6916 } else
6917 range->num_encoding_sizes = 1;
6918 range->max_encoding_tokens = (cap_rid.softCap & 0x80) ? 4 : 1;
6919 } else {
6920 range->num_encoding_sizes = 0;
6921 range->max_encoding_tokens = 0;
6922 }
6923 range->min_pmp = 0;
6924 range->max_pmp = 5000000; /* 5 secs */
6925 range->min_pmt = 0;
6926 range->max_pmt = 65535 * 1024; /* ??? */
6927 range->pmp_flags = IW_POWER_PERIOD;
6928 range->pmt_flags = IW_POWER_TIMEOUT;
6929 range->pm_capa = IW_POWER_PERIOD | IW_POWER_TIMEOUT | IW_POWER_ALL_R;
6930
6931 /* Transmit Power - values are in mW */
6932 for(i = 0 ; i < 8 ; i++) {
6933 range->txpower[i] = cap_rid.txPowerLevels[i];
6934 if(range->txpower[i] == 0)
6935 break;
6936 }
6937 range->num_txpower = i;
6938 range->txpower_capa = IW_TXPOW_MWATT;
6939 range->we_version_source = 19;
6940 range->we_version_compiled = WIRELESS_EXT;
6941 range->retry_capa = IW_RETRY_LIMIT | IW_RETRY_LIFETIME;
6942 range->retry_flags = IW_RETRY_LIMIT;
6943 range->r_time_flags = IW_RETRY_LIFETIME;
6944 range->min_retry = 1;
6945 range->max_retry = 65535;
6946 range->min_r_time = 1024;
6947 range->max_r_time = 65535 * 1024;
6948
6949 /* Event capability (kernel + driver) */
6950 range->event_capa[0] = (IW_EVENT_CAPA_K_0 |
6951 IW_EVENT_CAPA_MASK(SIOCGIWTHRSPY) |
6952 IW_EVENT_CAPA_MASK(SIOCGIWAP) |
6953 IW_EVENT_CAPA_MASK(SIOCGIWSCAN));
6954 range->event_capa[1] = IW_EVENT_CAPA_K_1;
6955 range->event_capa[4] = IW_EVENT_CAPA_MASK(IWEVTXDROP);
6956 return 0;
6957 }
6958
6959 /*------------------------------------------------------------------*/
6960 /*
6961 * Wireless Handler : set Power Management
6962 */
6963 static int airo_set_power(struct net_device *dev,
6964 struct iw_request_info *info,
6965 struct iw_param *vwrq,
6966 char *extra)
6967 {
6968 struct airo_info *local = dev->priv;
6969
6970 readConfigRid(local, 1);
6971 if (vwrq->disabled) {
6972 if ((local->config.rmode & 0xFF) >= RXMODE_RFMON) {
6973 return -EINVAL;
6974 }
6975 local->config.powerSaveMode = POWERSAVE_CAM;
6976 local->config.rmode &= 0xFF00;
6977 local->config.rmode |= RXMODE_BC_MC_ADDR;
6978 set_bit (FLAG_COMMIT, &local->flags);
6979 return -EINPROGRESS; /* Call commit handler */
6980 }
6981 if ((vwrq->flags & IW_POWER_TYPE) == IW_POWER_TIMEOUT) {
6982 local->config.fastListenDelay = (vwrq->value + 500) / 1024;
6983 local->config.powerSaveMode = POWERSAVE_PSPCAM;
6984 set_bit (FLAG_COMMIT, &local->flags);
6985 } else if ((vwrq->flags & IW_POWER_TYPE) == IW_POWER_PERIOD) {
6986 local->config.fastListenInterval = local->config.listenInterval = (vwrq->value + 500) / 1024;
6987 local->config.powerSaveMode = POWERSAVE_PSPCAM;
6988 set_bit (FLAG_COMMIT, &local->flags);
6989 }
6990 switch (vwrq->flags & IW_POWER_MODE) {
6991 case IW_POWER_UNICAST_R:
6992 if ((local->config.rmode & 0xFF) >= RXMODE_RFMON) {
6993 return -EINVAL;
6994 }
6995 local->config.rmode &= 0xFF00;
6996 local->config.rmode |= RXMODE_ADDR;
6997 set_bit (FLAG_COMMIT, &local->flags);
6998 break;
6999 case IW_POWER_ALL_R:
7000 if ((local->config.rmode & 0xFF) >= RXMODE_RFMON) {
7001 return -EINVAL;
7002 }
7003 local->config.rmode &= 0xFF00;
7004 local->config.rmode |= RXMODE_BC_MC_ADDR;
7005 set_bit (FLAG_COMMIT, &local->flags);
7006 case IW_POWER_ON:
7007 /* This is broken, fixme ;-) */
7008 break;
7009 default:
7010 return -EINVAL;
7011 }
7012 // Note : we may want to factor local->need_commit here
7013 // Note2 : may also want to factor RXMODE_RFMON test
7014 return -EINPROGRESS; /* Call commit handler */
7015 }
7016
7017 /*------------------------------------------------------------------*/
7018 /*
7019 * Wireless Handler : get Power Management
7020 */
7021 static int airo_get_power(struct net_device *dev,
7022 struct iw_request_info *info,
7023 struct iw_param *vwrq,
7024 char *extra)
7025 {
7026 struct airo_info *local = dev->priv;
7027 int mode;
7028
7029 readConfigRid(local, 1);
7030 mode = local->config.powerSaveMode;
7031 if ((vwrq->disabled = (mode == POWERSAVE_CAM)))
7032 return 0;
7033 if ((vwrq->flags & IW_POWER_TYPE) == IW_POWER_TIMEOUT) {
7034 vwrq->value = (int)local->config.fastListenDelay * 1024;
7035 vwrq->flags = IW_POWER_TIMEOUT;
7036 } else {
7037 vwrq->value = (int)local->config.fastListenInterval * 1024;
7038 vwrq->flags = IW_POWER_PERIOD;
7039 }
7040 if ((local->config.rmode & 0xFF) == RXMODE_ADDR)
7041 vwrq->flags |= IW_POWER_UNICAST_R;
7042 else
7043 vwrq->flags |= IW_POWER_ALL_R;
7044
7045 return 0;
7046 }
7047
7048 /*------------------------------------------------------------------*/
7049 /*
7050 * Wireless Handler : set Sensitivity
7051 */
7052 static int airo_set_sens(struct net_device *dev,
7053 struct iw_request_info *info,
7054 struct iw_param *vwrq,
7055 char *extra)
7056 {
7057 struct airo_info *local = dev->priv;
7058
7059 readConfigRid(local, 1);
7060 local->config.rssiThreshold = vwrq->disabled ? RSSI_DEFAULT : vwrq->value;
7061 set_bit (FLAG_COMMIT, &local->flags);
7062
7063 return -EINPROGRESS; /* Call commit handler */
7064 }
7065
7066 /*------------------------------------------------------------------*/
7067 /*
7068 * Wireless Handler : get Sensitivity
7069 */
7070 static int airo_get_sens(struct net_device *dev,
7071 struct iw_request_info *info,
7072 struct iw_param *vwrq,
7073 char *extra)
7074 {
7075 struct airo_info *local = dev->priv;
7076
7077 readConfigRid(local, 1);
7078 vwrq->value = local->config.rssiThreshold;
7079 vwrq->disabled = (vwrq->value == 0);
7080 vwrq->fixed = 1;
7081
7082 return 0;
7083 }
7084
7085 /*------------------------------------------------------------------*/
7086 /*
7087 * Wireless Handler : get AP List
7088 * Note : this is deprecated in favor of IWSCAN
7089 */
7090 static int airo_get_aplist(struct net_device *dev,
7091 struct iw_request_info *info,
7092 struct iw_point *dwrq,
7093 char *extra)
7094 {
7095 struct airo_info *local = dev->priv;
7096 struct sockaddr *address = (struct sockaddr *) extra;
7097 struct iw_quality qual[IW_MAX_AP];
7098 BSSListRid BSSList;
7099 int i;
7100 int loseSync = capable(CAP_NET_ADMIN) ? 1: -1;
7101
7102 for (i = 0; i < IW_MAX_AP; i++) {
7103 if (readBSSListRid(local, loseSync, &BSSList))
7104 break;
7105 loseSync = 0;
7106 memcpy(address[i].sa_data, BSSList.bssid, ETH_ALEN);
7107 address[i].sa_family = ARPHRD_ETHER;
7108 if (local->rssi) {
7109 qual[i].level = 0x100 - BSSList.dBm;
7110 qual[i].qual = airo_dbm_to_pct( local->rssi, BSSList.dBm );
7111 qual[i].updated = IW_QUAL_QUAL_UPDATED
7112 | IW_QUAL_LEVEL_UPDATED
7113 | IW_QUAL_DBM;
7114 } else {
7115 qual[i].level = (BSSList.dBm + 321) / 2;
7116 qual[i].qual = 0;
7117 qual[i].updated = IW_QUAL_QUAL_INVALID
7118 | IW_QUAL_LEVEL_UPDATED
7119 | IW_QUAL_DBM;
7120 }
7121 qual[i].noise = local->wstats.qual.noise;
7122 if (BSSList.index == 0xffff)
7123 break;
7124 }
7125 if (!i) {
7126 StatusRid status_rid; /* Card status info */
7127 readStatusRid(local, &status_rid, 1);
7128 for (i = 0;
7129 i < min(IW_MAX_AP, 4) &&
7130 (status_rid.bssid[i][0]
7131 & status_rid.bssid[i][1]
7132 & status_rid.bssid[i][2]
7133 & status_rid.bssid[i][3]
7134 & status_rid.bssid[i][4]
7135 & status_rid.bssid[i][5])!=0xff &&
7136 (status_rid.bssid[i][0]
7137 | status_rid.bssid[i][1]
7138 | status_rid.bssid[i][2]
7139 | status_rid.bssid[i][3]
7140 | status_rid.bssid[i][4]
7141 | status_rid.bssid[i][5]);
7142 i++) {
7143 memcpy(address[i].sa_data,
7144 status_rid.bssid[i], ETH_ALEN);
7145 address[i].sa_family = ARPHRD_ETHER;
7146 }
7147 } else {
7148 dwrq->flags = 1; /* Should be define'd */
7149 memcpy(extra + sizeof(struct sockaddr)*i,
7150 &qual, sizeof(struct iw_quality)*i);
7151 }
7152 dwrq->length = i;
7153
7154 return 0;
7155 }
7156
7157 /*------------------------------------------------------------------*/
7158 /*
7159 * Wireless Handler : Initiate Scan
7160 */
7161 static int airo_set_scan(struct net_device *dev,
7162 struct iw_request_info *info,
7163 struct iw_param *vwrq,
7164 char *extra)
7165 {
7166 struct airo_info *ai = dev->priv;
7167 Cmd cmd;
7168 Resp rsp;
7169 int wake = 0;
7170
7171 /* Note : you may have realised that, as this is a SET operation,
7172 * this is privileged and therefore a normal user can't
7173 * perform scanning.
7174 * This is not an error, while the device perform scanning,
7175 * traffic doesn't flow, so it's a perfect DoS...
7176 * Jean II */
7177 if (ai->flags & FLAG_RADIO_MASK) return -ENETDOWN;
7178
7179 if (down_interruptible(&ai->sem))
7180 return -ERESTARTSYS;
7181
7182 /* If there's already a scan in progress, don't
7183 * trigger another one. */
7184 if (ai->scan_timeout > 0)
7185 goto out;
7186
7187 /* Initiate a scan command */
7188 ai->scan_timeout = RUN_AT(3*HZ);
7189 memset(&cmd, 0, sizeof(cmd));
7190 cmd.cmd=CMD_LISTBSS;
7191 issuecommand(ai, &cmd, &rsp);
7192 wake = 1;
7193
7194 out:
7195 up(&ai->sem);
7196 if (wake)
7197 wake_up_interruptible(&ai->thr_wait);
7198 return 0;
7199 }
7200
7201 /*------------------------------------------------------------------*/
7202 /*
7203 * Translate scan data returned from the card to a card independent
7204 * format that the Wireless Tools will understand - Jean II
7205 */
7206 static inline char *airo_translate_scan(struct net_device *dev,
7207 char *current_ev,
7208 char *end_buf,
7209 BSSListRid *bss)
7210 {
7211 struct airo_info *ai = dev->priv;
7212 struct iw_event iwe; /* Temporary buffer */
7213 u16 capabilities;
7214 char * current_val; /* For rates */
7215 int i;
7216 char * buf;
7217
7218 /* First entry *MUST* be the AP MAC address */
7219 iwe.cmd = SIOCGIWAP;
7220 iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
7221 memcpy(iwe.u.ap_addr.sa_data, bss->bssid, ETH_ALEN);
7222 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, IW_EV_ADDR_LEN);
7223
7224 /* Other entries will be displayed in the order we give them */
7225
7226 /* Add the ESSID */
7227 iwe.u.data.length = bss->ssidLen;
7228 if(iwe.u.data.length > 32)
7229 iwe.u.data.length = 32;
7230 iwe.cmd = SIOCGIWESSID;
7231 iwe.u.data.flags = 1;
7232 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, bss->ssid);
7233
7234 /* Add mode */
7235 iwe.cmd = SIOCGIWMODE;
7236 capabilities = le16_to_cpu(bss->cap);
7237 if(capabilities & (CAP_ESS | CAP_IBSS)) {
7238 if(capabilities & CAP_ESS)
7239 iwe.u.mode = IW_MODE_MASTER;
7240 else
7241 iwe.u.mode = IW_MODE_ADHOC;
7242 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, IW_EV_UINT_LEN);
7243 }
7244
7245 /* Add frequency */
7246 iwe.cmd = SIOCGIWFREQ;
7247 iwe.u.freq.m = le16_to_cpu(bss->dsChannel);
7248 /* iwe.u.freq.m containt the channel (starting 1), our
7249 * frequency_list array start at index 0...
7250 */
7251 iwe.u.freq.m = frequency_list[iwe.u.freq.m - 1] * 100000;
7252 iwe.u.freq.e = 1;
7253 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, IW_EV_FREQ_LEN);
7254
7255 /* Add quality statistics */
7256 iwe.cmd = IWEVQUAL;
7257 if (ai->rssi) {
7258 iwe.u.qual.level = 0x100 - bss->dBm;
7259 iwe.u.qual.qual = airo_dbm_to_pct( ai->rssi, bss->dBm );
7260 iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED
7261 | IW_QUAL_LEVEL_UPDATED
7262 | IW_QUAL_DBM;
7263 } else {
7264 iwe.u.qual.level = (bss->dBm + 321) / 2;
7265 iwe.u.qual.qual = 0;
7266 iwe.u.qual.updated = IW_QUAL_QUAL_INVALID
7267 | IW_QUAL_LEVEL_UPDATED
7268 | IW_QUAL_DBM;
7269 }
7270 iwe.u.qual.noise = ai->wstats.qual.noise;
7271 current_ev = iwe_stream_add_event(current_ev, end_buf, &iwe, IW_EV_QUAL_LEN);
7272
7273 /* Add encryption capability */
7274 iwe.cmd = SIOCGIWENCODE;
7275 if(capabilities & CAP_PRIVACY)
7276 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
7277 else
7278 iwe.u.data.flags = IW_ENCODE_DISABLED;
7279 iwe.u.data.length = 0;
7280 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, bss->ssid);
7281
7282 /* Rate : stuffing multiple values in a single event require a bit
7283 * more of magic - Jean II */
7284 current_val = current_ev + IW_EV_LCP_LEN;
7285
7286 iwe.cmd = SIOCGIWRATE;
7287 /* Those two flags are ignored... */
7288 iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
7289 /* Max 8 values */
7290 for(i = 0 ; i < 8 ; i++) {
7291 /* NULL terminated */
7292 if(bss->rates[i] == 0)
7293 break;
7294 /* Bit rate given in 500 kb/s units (+ 0x80) */
7295 iwe.u.bitrate.value = ((bss->rates[i] & 0x7f) * 500000);
7296 /* Add new value to event */
7297 current_val = iwe_stream_add_value(current_ev, current_val, end_buf, &iwe, IW_EV_PARAM_LEN);
7298 }
7299 /* Check if we added any event */
7300 if((current_val - current_ev) > IW_EV_LCP_LEN)
7301 current_ev = current_val;
7302
7303 /* Beacon interval */
7304 buf = kmalloc(30, GFP_KERNEL);
7305 if (buf) {
7306 iwe.cmd = IWEVCUSTOM;
7307 sprintf(buf, "bcn_int=%d", bss->beaconInterval);
7308 iwe.u.data.length = strlen(buf);
7309 current_ev = iwe_stream_add_point(current_ev, end_buf, &iwe, buf);
7310 kfree(buf);
7311 }
7312
7313 /* Put WPA/RSN Information Elements into the event stream */
7314 if (test_bit(FLAG_WPA_CAPABLE, &ai->flags)) {
7315 unsigned int num_null_ies = 0;
7316 u16 length = sizeof (bss->extra.iep);
7317 struct ieee80211_info_element *info_element =
7318 (struct ieee80211_info_element *) &bss->extra.iep;
7319
7320 while ((length >= sizeof(*info_element)) && (num_null_ies < 2)) {
7321 if (sizeof(*info_element) + info_element->len > length) {
7322 /* Invalid element, don't continue parsing IE */
7323 break;
7324 }
7325
7326 switch (info_element->id) {
7327 case MFIE_TYPE_SSID:
7328 /* Two zero-length SSID elements
7329 * mean we're done parsing elements */
7330 if (!info_element->len)
7331 num_null_ies++;
7332 break;
7333
7334 case MFIE_TYPE_GENERIC:
7335 if (info_element->len >= 4 &&
7336 info_element->data[0] == 0x00 &&
7337 info_element->data[1] == 0x50 &&
7338 info_element->data[2] == 0xf2 &&
7339 info_element->data[3] == 0x01) {
7340 iwe.cmd = IWEVGENIE;
7341 iwe.u.data.length = min(info_element->len + 2,
7342 MAX_WPA_IE_LEN);
7343 current_ev = iwe_stream_add_point(current_ev, end_buf,
7344 &iwe, (char *) info_element);
7345 }
7346 break;
7347
7348 case MFIE_TYPE_RSN:
7349 iwe.cmd = IWEVGENIE;
7350 iwe.u.data.length = min(info_element->len + 2,
7351 MAX_WPA_IE_LEN);
7352 current_ev = iwe_stream_add_point(current_ev, end_buf,
7353 &iwe, (char *) info_element);
7354 break;
7355
7356 default:
7357 break;
7358 }
7359
7360 length -= sizeof(*info_element) + info_element->len;
7361 info_element =
7362 (struct ieee80211_info_element *)&info_element->
7363 data[info_element->len];
7364 }
7365 }
7366 return current_ev;
7367 }
7368
7369 /*------------------------------------------------------------------*/
7370 /*
7371 * Wireless Handler : Read Scan Results
7372 */
7373 static int airo_get_scan(struct net_device *dev,
7374 struct iw_request_info *info,
7375 struct iw_point *dwrq,
7376 char *extra)
7377 {
7378 struct airo_info *ai = dev->priv;
7379 BSSListElement *net;
7380 int err = 0;
7381 char *current_ev = extra;
7382
7383 /* If a scan is in-progress, return -EAGAIN */
7384 if (ai->scan_timeout > 0)
7385 return -EAGAIN;
7386
7387 if (down_interruptible(&ai->sem))
7388 return -EAGAIN;
7389
7390 list_for_each_entry (net, &ai->network_list, list) {
7391 /* Translate to WE format this entry */
7392 current_ev = airo_translate_scan(dev, current_ev,
7393 extra + dwrq->length,
7394 &net->bss);
7395
7396 /* Check if there is space for one more entry */
7397 if((extra + dwrq->length - current_ev) <= IW_EV_ADDR_LEN) {
7398 /* Ask user space to try again with a bigger buffer */
7399 err = -E2BIG;
7400 goto out;
7401 }
7402 }
7403
7404 /* Length of data */
7405 dwrq->length = (current_ev - extra);
7406 dwrq->flags = 0; /* todo */
7407
7408 out:
7409 up(&ai->sem);
7410 return err;
7411 }
7412
7413 /*------------------------------------------------------------------*/
7414 /*
7415 * Commit handler : called after a bunch of SET operations
7416 */
7417 static int airo_config_commit(struct net_device *dev,
7418 struct iw_request_info *info, /* NULL */
7419 void *zwrq, /* NULL */
7420 char *extra) /* NULL */
7421 {
7422 struct airo_info *local = dev->priv;
7423 Resp rsp;
7424
7425 if (!test_bit (FLAG_COMMIT, &local->flags))
7426 return 0;
7427
7428 /* Some of the "SET" function may have modified some of the
7429 * parameters. It's now time to commit them in the card */
7430 disable_MAC(local, 1);
7431 if (test_bit (FLAG_RESET, &local->flags)) {
7432 APListRid APList_rid;
7433 SsidRid SSID_rid;
7434
7435 readAPListRid(local, &APList_rid);
7436 readSsidRid(local, &SSID_rid);
7437 if (test_bit(FLAG_MPI,&local->flags))
7438 setup_card(local, dev->dev_addr, 1 );
7439 else
7440 reset_airo_card(dev);
7441 disable_MAC(local, 1);
7442 writeSsidRid(local, &SSID_rid, 1);
7443 writeAPListRid(local, &APList_rid, 1);
7444 }
7445 if (down_interruptible(&local->sem))
7446 return -ERESTARTSYS;
7447 writeConfigRid(local, 0);
7448 enable_MAC(local, &rsp, 0);
7449 if (test_bit (FLAG_RESET, &local->flags))
7450 airo_set_promisc(local);
7451 else
7452 up(&local->sem);
7453
7454 return 0;
7455 }
7456
7457 /*------------------------------------------------------------------*/
7458 /*
7459 * Structures to export the Wireless Handlers
7460 */
7461
7462 static const struct iw_priv_args airo_private_args[] = {
7463 /*{ cmd, set_args, get_args, name } */
7464 { AIROIOCTL, IW_PRIV_TYPE_BYTE | IW_PRIV_SIZE_FIXED | sizeof (aironet_ioctl),
7465 IW_PRIV_TYPE_BYTE | 2047, "airoioctl" },
7466 { AIROIDIFC, IW_PRIV_TYPE_BYTE | IW_PRIV_SIZE_FIXED | sizeof (aironet_ioctl),
7467 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "airoidifc" },
7468 };
7469
7470 static const iw_handler airo_handler[] =
7471 {
7472 (iw_handler) airo_config_commit, /* SIOCSIWCOMMIT */
7473 (iw_handler) airo_get_name, /* SIOCGIWNAME */
7474 (iw_handler) NULL, /* SIOCSIWNWID */
7475 (iw_handler) NULL, /* SIOCGIWNWID */
7476 (iw_handler) airo_set_freq, /* SIOCSIWFREQ */
7477 (iw_handler) airo_get_freq, /* SIOCGIWFREQ */
7478 (iw_handler) airo_set_mode, /* SIOCSIWMODE */
7479 (iw_handler) airo_get_mode, /* SIOCGIWMODE */
7480 (iw_handler) airo_set_sens, /* SIOCSIWSENS */
7481 (iw_handler) airo_get_sens, /* SIOCGIWSENS */
7482 (iw_handler) NULL, /* SIOCSIWRANGE */
7483 (iw_handler) airo_get_range, /* SIOCGIWRANGE */
7484 (iw_handler) NULL, /* SIOCSIWPRIV */
7485 (iw_handler) NULL, /* SIOCGIWPRIV */
7486 (iw_handler) NULL, /* SIOCSIWSTATS */
7487 (iw_handler) NULL, /* SIOCGIWSTATS */
7488 iw_handler_set_spy, /* SIOCSIWSPY */
7489 iw_handler_get_spy, /* SIOCGIWSPY */
7490 iw_handler_set_thrspy, /* SIOCSIWTHRSPY */
7491 iw_handler_get_thrspy, /* SIOCGIWTHRSPY */
7492 (iw_handler) airo_set_wap, /* SIOCSIWAP */
7493 (iw_handler) airo_get_wap, /* SIOCGIWAP */
7494 (iw_handler) NULL, /* -- hole -- */
7495 (iw_handler) airo_get_aplist, /* SIOCGIWAPLIST */
7496 (iw_handler) airo_set_scan, /* SIOCSIWSCAN */
7497 (iw_handler) airo_get_scan, /* SIOCGIWSCAN */
7498 (iw_handler) airo_set_essid, /* SIOCSIWESSID */
7499 (iw_handler) airo_get_essid, /* SIOCGIWESSID */
7500 (iw_handler) airo_set_nick, /* SIOCSIWNICKN */
7501 (iw_handler) airo_get_nick, /* SIOCGIWNICKN */
7502 (iw_handler) NULL, /* -- hole -- */
7503 (iw_handler) NULL, /* -- hole -- */
7504 (iw_handler) airo_set_rate, /* SIOCSIWRATE */
7505 (iw_handler) airo_get_rate, /* SIOCGIWRATE */
7506 (iw_handler) airo_set_rts, /* SIOCSIWRTS */
7507 (iw_handler) airo_get_rts, /* SIOCGIWRTS */
7508 (iw_handler) airo_set_frag, /* SIOCSIWFRAG */
7509 (iw_handler) airo_get_frag, /* SIOCGIWFRAG */
7510 (iw_handler) airo_set_txpow, /* SIOCSIWTXPOW */
7511 (iw_handler) airo_get_txpow, /* SIOCGIWTXPOW */
7512 (iw_handler) airo_set_retry, /* SIOCSIWRETRY */
7513 (iw_handler) airo_get_retry, /* SIOCGIWRETRY */
7514 (iw_handler) airo_set_encode, /* SIOCSIWENCODE */
7515 (iw_handler) airo_get_encode, /* SIOCGIWENCODE */
7516 (iw_handler) airo_set_power, /* SIOCSIWPOWER */
7517 (iw_handler) airo_get_power, /* SIOCGIWPOWER */
7518 (iw_handler) NULL, /* -- hole -- */
7519 (iw_handler) NULL, /* -- hole -- */
7520 (iw_handler) NULL, /* SIOCSIWGENIE */
7521 (iw_handler) NULL, /* SIOCGIWGENIE */
7522 (iw_handler) airo_set_auth, /* SIOCSIWAUTH */
7523 (iw_handler) airo_get_auth, /* SIOCGIWAUTH */
7524 (iw_handler) airo_set_encodeext, /* SIOCSIWENCODEEXT */
7525 (iw_handler) airo_get_encodeext, /* SIOCGIWENCODEEXT */
7526 (iw_handler) NULL, /* SIOCSIWPMKSA */
7527 };
7528
7529 /* Note : don't describe AIROIDIFC and AIROOLDIDIFC in here.
7530 * We want to force the use of the ioctl code, because those can't be
7531 * won't work the iw_handler code (because they simultaneously read
7532 * and write data and iw_handler can't do that).
7533 * Note that it's perfectly legal to read/write on a single ioctl command,
7534 * you just can't use iwpriv and need to force it via the ioctl handler.
7535 * Jean II */
7536 static const iw_handler airo_private_handler[] =
7537 {
7538 NULL, /* SIOCIWFIRSTPRIV */
7539 };
7540
7541 static const struct iw_handler_def airo_handler_def =
7542 {
7543 .num_standard = sizeof(airo_handler)/sizeof(iw_handler),
7544 .num_private = sizeof(airo_private_handler)/sizeof(iw_handler),
7545 .num_private_args = sizeof(airo_private_args)/sizeof(struct iw_priv_args),
7546 .standard = airo_handler,
7547 .private = airo_private_handler,
7548 .private_args = airo_private_args,
7549 .get_wireless_stats = airo_get_wireless_stats,
7550 };
7551
7552 /*
7553 * This defines the configuration part of the Wireless Extensions
7554 * Note : irq and spinlock protection will occur in the subroutines
7555 *
7556 * TODO :
7557 * o Check input value more carefully and fill correct values in range
7558 * o Test and shakeout the bugs (if any)
7559 *
7560 * Jean II
7561 *
7562 * Javier Achirica did a great job of merging code from the unnamed CISCO
7563 * developer that added support for flashing the card.
7564 */
7565 static int airo_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
7566 {
7567 int rc = 0;
7568 struct airo_info *ai = (struct airo_info *)dev->priv;
7569
7570 if (ai->power.event)
7571 return 0;
7572
7573 switch (cmd) {
7574 #ifdef CISCO_EXT
7575 case AIROIDIFC:
7576 #ifdef AIROOLDIDIFC
7577 case AIROOLDIDIFC:
7578 #endif
7579 {
7580 int val = AIROMAGIC;
7581 aironet_ioctl com;
7582 if (copy_from_user(&com,rq->ifr_data,sizeof(com)))
7583 rc = -EFAULT;
7584 else if (copy_to_user(com.data,(char *)&val,sizeof(val)))
7585 rc = -EFAULT;
7586 }
7587 break;
7588
7589 case AIROIOCTL:
7590 #ifdef AIROOLDIOCTL
7591 case AIROOLDIOCTL:
7592 #endif
7593 /* Get the command struct and hand it off for evaluation by
7594 * the proper subfunction
7595 */
7596 {
7597 aironet_ioctl com;
7598 if (copy_from_user(&com,rq->ifr_data,sizeof(com))) {
7599 rc = -EFAULT;
7600 break;
7601 }
7602
7603 /* Separate R/W functions bracket legality here
7604 */
7605 if ( com.command == AIRORSWVERSION ) {
7606 if (copy_to_user(com.data, swversion, sizeof(swversion)))
7607 rc = -EFAULT;
7608 else
7609 rc = 0;
7610 }
7611 else if ( com.command <= AIRORRID)
7612 rc = readrids(dev,&com);
7613 else if ( com.command >= AIROPCAP && com.command <= (AIROPLEAPUSR+2) )
7614 rc = writerids(dev,&com);
7615 else if ( com.command >= AIROFLSHRST && com.command <= AIRORESTART )
7616 rc = flashcard(dev,&com);
7617 else
7618 rc = -EINVAL; /* Bad command in ioctl */
7619 }
7620 break;
7621 #endif /* CISCO_EXT */
7622
7623 // All other calls are currently unsupported
7624 default:
7625 rc = -EOPNOTSUPP;
7626 }
7627 return rc;
7628 }
7629
7630 /*
7631 * Get the Wireless stats out of the driver
7632 * Note : irq and spinlock protection will occur in the subroutines
7633 *
7634 * TODO :
7635 * o Check if work in Ad-Hoc mode (otherwise, use SPY, as in wvlan_cs)
7636 *
7637 * Jean
7638 */
7639 static void airo_read_wireless_stats(struct airo_info *local)
7640 {
7641 StatusRid status_rid;
7642 StatsRid stats_rid;
7643 CapabilityRid cap_rid;
7644 u32 *vals = stats_rid.vals;
7645
7646 /* Get stats out of the card */
7647 clear_bit(JOB_WSTATS, &local->jobs);
7648 if (local->power.event) {
7649 up(&local->sem);
7650 return;
7651 }
7652 readCapabilityRid(local, &cap_rid, 0);
7653 readStatusRid(local, &status_rid, 0);
7654 readStatsRid(local, &stats_rid, RID_STATS, 0);
7655 up(&local->sem);
7656
7657 /* The status */
7658 local->wstats.status = status_rid.mode;
7659
7660 /* Signal quality and co */
7661 if (local->rssi) {
7662 local->wstats.qual.level = airo_rssi_to_dbm( local->rssi, status_rid.sigQuality );
7663 /* normalizedSignalStrength appears to be a percentage */
7664 local->wstats.qual.qual = status_rid.normalizedSignalStrength;
7665 } else {
7666 local->wstats.qual.level = (status_rid.normalizedSignalStrength + 321) / 2;
7667 local->wstats.qual.qual = airo_get_quality(&status_rid, &cap_rid);
7668 }
7669 if (status_rid.len >= 124) {
7670 local->wstats.qual.noise = 0x100 - status_rid.noisedBm;
7671 local->wstats.qual.updated = IW_QUAL_ALL_UPDATED | IW_QUAL_DBM;
7672 } else {
7673 local->wstats.qual.noise = 0;
7674 local->wstats.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED | IW_QUAL_NOISE_INVALID | IW_QUAL_DBM;
7675 }
7676
7677 /* Packets discarded in the wireless adapter due to wireless
7678 * specific problems */
7679 local->wstats.discard.nwid = vals[56] + vals[57] + vals[58];/* SSID Mismatch */
7680 local->wstats.discard.code = vals[6];/* RxWepErr */
7681 local->wstats.discard.fragment = vals[30];
7682 local->wstats.discard.retries = vals[10];
7683 local->wstats.discard.misc = vals[1] + vals[32];
7684 local->wstats.miss.beacon = vals[34];
7685 }
7686
7687 static struct iw_statistics *airo_get_wireless_stats(struct net_device *dev)
7688 {
7689 struct airo_info *local = dev->priv;
7690
7691 if (!test_bit(JOB_WSTATS, &local->jobs)) {
7692 /* Get stats out of the card if available */
7693 if (down_trylock(&local->sem) != 0) {
7694 set_bit(JOB_WSTATS, &local->jobs);
7695 wake_up_interruptible(&local->thr_wait);
7696 } else
7697 airo_read_wireless_stats(local);
7698 }
7699
7700 return &local->wstats;
7701 }
7702
7703 #ifdef CISCO_EXT
7704 /*
7705 * This just translates from driver IOCTL codes to the command codes to
7706 * feed to the radio's host interface. Things can be added/deleted
7707 * as needed. This represents the READ side of control I/O to
7708 * the card
7709 */
7710 static int readrids(struct net_device *dev, aironet_ioctl *comp) {
7711 unsigned short ridcode;
7712 unsigned char *iobuf;
7713 int len;
7714 struct airo_info *ai = dev->priv;
7715 Resp rsp;
7716
7717 if (test_bit(FLAG_FLASHING, &ai->flags))
7718 return -EIO;
7719
7720 switch(comp->command)
7721 {
7722 case AIROGCAP: ridcode = RID_CAPABILITIES; break;
7723 case AIROGCFG: ridcode = RID_CONFIG;
7724 if (test_bit(FLAG_COMMIT, &ai->flags)) {
7725 disable_MAC (ai, 1);
7726 writeConfigRid (ai, 1);
7727 enable_MAC (ai, &rsp, 1);
7728 }
7729 break;
7730 case AIROGSLIST: ridcode = RID_SSID; break;
7731 case AIROGVLIST: ridcode = RID_APLIST; break;
7732 case AIROGDRVNAM: ridcode = RID_DRVNAME; break;
7733 case AIROGEHTENC: ridcode = RID_ETHERENCAP; break;
7734 case AIROGWEPKTMP: ridcode = RID_WEP_TEMP;
7735 /* Only super-user can read WEP keys */
7736 if (!capable(CAP_NET_ADMIN))
7737 return -EPERM;
7738 break;
7739 case AIROGWEPKNV: ridcode = RID_WEP_PERM;
7740 /* Only super-user can read WEP keys */
7741 if (!capable(CAP_NET_ADMIN))
7742 return -EPERM;
7743 break;
7744 case AIROGSTAT: ridcode = RID_STATUS; break;
7745 case AIROGSTATSD32: ridcode = RID_STATSDELTA; break;
7746 case AIROGSTATSC32: ridcode = RID_STATS; break;
7747 case AIROGMICSTATS:
7748 if (copy_to_user(comp->data, &ai->micstats,
7749 min((int)comp->len,(int)sizeof(ai->micstats))))
7750 return -EFAULT;
7751 return 0;
7752 case AIRORRID: ridcode = comp->ridnum; break;
7753 default:
7754 return -EINVAL;
7755 break;
7756 }
7757
7758 if ((iobuf = kmalloc(RIDSIZE, GFP_KERNEL)) == NULL)
7759 return -ENOMEM;
7760
7761 PC4500_readrid(ai,ridcode,iobuf,RIDSIZE, 1);
7762 /* get the count of bytes in the rid docs say 1st 2 bytes is it.
7763 * then return it to the user
7764 * 9/22/2000 Honor user given length
7765 */
7766 len = comp->len;
7767
7768 if (copy_to_user(comp->data, iobuf, min(len, (int)RIDSIZE))) {
7769 kfree (iobuf);
7770 return -EFAULT;
7771 }
7772 kfree (iobuf);
7773 return 0;
7774 }
7775
7776 /*
7777 * Danger Will Robinson write the rids here
7778 */
7779
7780 static int writerids(struct net_device *dev, aironet_ioctl *comp) {
7781 struct airo_info *ai = dev->priv;
7782 int ridcode;
7783 int enabled;
7784 Resp rsp;
7785 static int (* writer)(struct airo_info *, u16 rid, const void *, int, int);
7786 unsigned char *iobuf;
7787
7788 /* Only super-user can write RIDs */
7789 if (!capable(CAP_NET_ADMIN))
7790 return -EPERM;
7791
7792 if (test_bit(FLAG_FLASHING, &ai->flags))
7793 return -EIO;
7794
7795 ridcode = 0;
7796 writer = do_writerid;
7797
7798 switch(comp->command)
7799 {
7800 case AIROPSIDS: ridcode = RID_SSID; break;
7801 case AIROPCAP: ridcode = RID_CAPABILITIES; break;
7802 case AIROPAPLIST: ridcode = RID_APLIST; break;
7803 case AIROPCFG: ai->config.len = 0;
7804 clear_bit(FLAG_COMMIT, &ai->flags);
7805 ridcode = RID_CONFIG; break;
7806 case AIROPWEPKEYNV: ridcode = RID_WEP_PERM; break;
7807 case AIROPLEAPUSR: ridcode = RID_LEAPUSERNAME; break;
7808 case AIROPLEAPPWD: ridcode = RID_LEAPPASSWORD; break;
7809 case AIROPWEPKEY: ridcode = RID_WEP_TEMP; writer = PC4500_writerid;
7810 break;
7811 case AIROPLEAPUSR+1: ridcode = 0xFF2A; break;
7812 case AIROPLEAPUSR+2: ridcode = 0xFF2B; break;
7813
7814 /* this is not really a rid but a command given to the card
7815 * same with MAC off
7816 */
7817 case AIROPMACON:
7818 if (enable_MAC(ai, &rsp, 1) != 0)
7819 return -EIO;
7820 return 0;
7821
7822 /*
7823 * Evidently this code in the airo driver does not get a symbol
7824 * as disable_MAC. it's probably so short the compiler does not gen one.
7825 */
7826 case AIROPMACOFF:
7827 disable_MAC(ai, 1);
7828 return 0;
7829
7830 /* This command merely clears the counts does not actually store any data
7831 * only reads rid. But as it changes the cards state, I put it in the
7832 * writerid routines.
7833 */
7834 case AIROPSTCLR:
7835 if ((iobuf = kmalloc(RIDSIZE, GFP_KERNEL)) == NULL)
7836 return -ENOMEM;
7837
7838 PC4500_readrid(ai,RID_STATSDELTACLEAR,iobuf,RIDSIZE, 1);
7839
7840 enabled = ai->micstats.enabled;
7841 memset(&ai->micstats,0,sizeof(ai->micstats));
7842 ai->micstats.enabled = enabled;
7843
7844 if (copy_to_user(comp->data, iobuf,
7845 min((int)comp->len, (int)RIDSIZE))) {
7846 kfree (iobuf);
7847 return -EFAULT;
7848 }
7849 kfree (iobuf);
7850 return 0;
7851
7852 default:
7853 return -EOPNOTSUPP; /* Blarg! */
7854 }
7855 if(comp->len > RIDSIZE)
7856 return -EINVAL;
7857
7858 if ((iobuf = kmalloc(RIDSIZE, GFP_KERNEL)) == NULL)
7859 return -ENOMEM;
7860
7861 if (copy_from_user(iobuf,comp->data,comp->len)) {
7862 kfree (iobuf);
7863 return -EFAULT;
7864 }
7865
7866 if (comp->command == AIROPCFG) {
7867 ConfigRid *cfg = (ConfigRid *)iobuf;
7868
7869 if (test_bit(FLAG_MIC_CAPABLE, &ai->flags))
7870 cfg->opmode |= MODE_MIC;
7871
7872 if ((cfg->opmode & 0xFF) == MODE_STA_IBSS)
7873 set_bit (FLAG_ADHOC, &ai->flags);
7874 else
7875 clear_bit (FLAG_ADHOC, &ai->flags);
7876 }
7877
7878 if((*writer)(ai, ridcode, iobuf,comp->len,1)) {
7879 kfree (iobuf);
7880 return -EIO;
7881 }
7882 kfree (iobuf);
7883 return 0;
7884 }
7885
7886 /*****************************************************************************
7887 * Ancillary flash / mod functions much black magic lurkes here *
7888 *****************************************************************************
7889 */
7890
7891 /*
7892 * Flash command switch table
7893 */
7894
7895 static int flashcard(struct net_device *dev, aironet_ioctl *comp) {
7896 int z;
7897
7898 /* Only super-user can modify flash */
7899 if (!capable(CAP_NET_ADMIN))
7900 return -EPERM;
7901
7902 switch(comp->command)
7903 {
7904 case AIROFLSHRST:
7905 return cmdreset((struct airo_info *)dev->priv);
7906
7907 case AIROFLSHSTFL:
7908 if (!((struct airo_info *)dev->priv)->flash &&
7909 (((struct airo_info *)dev->priv)->flash = kmalloc (FLASHSIZE, GFP_KERNEL)) == NULL)
7910 return -ENOMEM;
7911 return setflashmode((struct airo_info *)dev->priv);
7912
7913 case AIROFLSHGCHR: /* Get char from aux */
7914 if(comp->len != sizeof(int))
7915 return -EINVAL;
7916 if (copy_from_user(&z,comp->data,comp->len))
7917 return -EFAULT;
7918 return flashgchar((struct airo_info *)dev->priv,z,8000);
7919
7920 case AIROFLSHPCHR: /* Send char to card. */
7921 if(comp->len != sizeof(int))
7922 return -EINVAL;
7923 if (copy_from_user(&z,comp->data,comp->len))
7924 return -EFAULT;
7925 return flashpchar((struct airo_info *)dev->priv,z,8000);
7926
7927 case AIROFLPUTBUF: /* Send 32k to card */
7928 if (!((struct airo_info *)dev->priv)->flash)
7929 return -ENOMEM;
7930 if(comp->len > FLASHSIZE)
7931 return -EINVAL;
7932 if(copy_from_user(((struct airo_info *)dev->priv)->flash,comp->data,comp->len))
7933 return -EFAULT;
7934
7935 flashputbuf((struct airo_info *)dev->priv);
7936 return 0;
7937
7938 case AIRORESTART:
7939 if(flashrestart((struct airo_info *)dev->priv,dev))
7940 return -EIO;
7941 return 0;
7942 }
7943 return -EINVAL;
7944 }
7945
7946 #define FLASH_COMMAND 0x7e7e
7947
7948 /*
7949 * STEP 1)
7950 * Disable MAC and do soft reset on
7951 * card.
7952 */
7953
7954 static int cmdreset(struct airo_info *ai) {
7955 disable_MAC(ai, 1);
7956
7957 if(!waitbusy (ai)){
7958 airo_print_info(ai->dev->name, "Waitbusy hang before RESET");
7959 return -EBUSY;
7960 }
7961
7962 OUT4500(ai,COMMAND,CMD_SOFTRESET);
7963
7964 ssleep(1); /* WAS 600 12/7/00 */
7965
7966 if(!waitbusy (ai)){
7967 airo_print_info(ai->dev->name, "Waitbusy hang AFTER RESET");
7968 return -EBUSY;
7969 }
7970 return 0;
7971 }
7972
7973 /* STEP 2)
7974 * Put the card in legendary flash
7975 * mode
7976 */
7977
7978 static int setflashmode (struct airo_info *ai) {
7979 set_bit (FLAG_FLASHING, &ai->flags);
7980
7981 OUT4500(ai, SWS0, FLASH_COMMAND);
7982 OUT4500(ai, SWS1, FLASH_COMMAND);
7983 if (probe) {
7984 OUT4500(ai, SWS0, FLASH_COMMAND);
7985 OUT4500(ai, COMMAND,0x10);
7986 } else {
7987 OUT4500(ai, SWS2, FLASH_COMMAND);
7988 OUT4500(ai, SWS3, FLASH_COMMAND);
7989 OUT4500(ai, COMMAND,0);
7990 }
7991 msleep(500); /* 500ms delay */
7992
7993 if(!waitbusy(ai)) {
7994 clear_bit (FLAG_FLASHING, &ai->flags);
7995 airo_print_info(ai->dev->name, "Waitbusy hang after setflash mode");
7996 return -EIO;
7997 }
7998 return 0;
7999 }
8000
8001 /* Put character to SWS0 wait for dwelltime
8002 * x 50us for echo .
8003 */
8004
8005 static int flashpchar(struct airo_info *ai,int byte,int dwelltime) {
8006 int echo;
8007 int waittime;
8008
8009 byte |= 0x8000;
8010
8011 if(dwelltime == 0 )
8012 dwelltime = 200;
8013
8014 waittime=dwelltime;
8015
8016 /* Wait for busy bit d15 to go false indicating buffer empty */
8017 while ((IN4500 (ai, SWS0) & 0x8000) && waittime > 0) {
8018 udelay (50);
8019 waittime -= 50;
8020 }
8021
8022 /* timeout for busy clear wait */
8023 if(waittime <= 0 ){
8024 airo_print_info(ai->dev->name, "flash putchar busywait timeout!");
8025 return -EBUSY;
8026 }
8027
8028 /* Port is clear now write byte and wait for it to echo back */
8029 do {
8030 OUT4500(ai,SWS0,byte);
8031 udelay(50);
8032 dwelltime -= 50;
8033 echo = IN4500(ai,SWS1);
8034 } while (dwelltime >= 0 && echo != byte);
8035
8036 OUT4500(ai,SWS1,0);
8037
8038 return (echo == byte) ? 0 : -EIO;
8039 }
8040
8041 /*
8042 * Get a character from the card matching matchbyte
8043 * Step 3)
8044 */
8045 static int flashgchar(struct airo_info *ai,int matchbyte,int dwelltime){
8046 int rchar;
8047 unsigned char rbyte=0;
8048
8049 do {
8050 rchar = IN4500(ai,SWS1);
8051
8052 if(dwelltime && !(0x8000 & rchar)){
8053 dwelltime -= 10;
8054 mdelay(10);
8055 continue;
8056 }
8057 rbyte = 0xff & rchar;
8058
8059 if( (rbyte == matchbyte) && (0x8000 & rchar) ){
8060 OUT4500(ai,SWS1,0);
8061 return 0;
8062 }
8063 if( rbyte == 0x81 || rbyte == 0x82 || rbyte == 0x83 || rbyte == 0x1a || 0xffff == rchar)
8064 break;
8065 OUT4500(ai,SWS1,0);
8066
8067 }while(dwelltime > 0);
8068 return -EIO;
8069 }
8070
8071 /*
8072 * Transfer 32k of firmware data from user buffer to our buffer and
8073 * send to the card
8074 */
8075
8076 static int flashputbuf(struct airo_info *ai){
8077 int nwords;
8078
8079 /* Write stuff */
8080 if (test_bit(FLAG_MPI,&ai->flags))
8081 memcpy_toio(ai->pciaux + 0x8000, ai->flash, FLASHSIZE);
8082 else {
8083 OUT4500(ai,AUXPAGE,0x100);
8084 OUT4500(ai,AUXOFF,0);
8085
8086 for(nwords=0;nwords != FLASHSIZE / 2;nwords++){
8087 OUT4500(ai,AUXDATA,ai->flash[nwords] & 0xffff);
8088 }
8089 }
8090 OUT4500(ai,SWS0,0x8000);
8091
8092 return 0;
8093 }
8094
8095 /*
8096 *
8097 */
8098 static int flashrestart(struct airo_info *ai,struct net_device *dev){
8099 int i,status;
8100
8101 ssleep(1); /* Added 12/7/00 */
8102 clear_bit (FLAG_FLASHING, &ai->flags);
8103 if (test_bit(FLAG_MPI, &ai->flags)) {
8104 status = mpi_init_descriptors(ai);
8105 if (status != SUCCESS)
8106 return status;
8107 }
8108 status = setup_card(ai, dev->dev_addr, 1);
8109
8110 if (!test_bit(FLAG_MPI,&ai->flags))
8111 for( i = 0; i < MAX_FIDS; i++ ) {
8112 ai->fids[i] = transmit_allocate
8113 ( ai, AIRO_DEF_MTU, i >= MAX_FIDS / 2 );
8114 }
8115
8116 ssleep(1); /* Added 12/7/00 */
8117 return status;
8118 }
8119 #endif /* CISCO_EXT */
8120
8121 /*
8122 This program is free software; you can redistribute it and/or
8123 modify it under the terms of the GNU General Public License
8124 as published by the Free Software Foundation; either version 2
8125 of the License, or (at your option) any later version.
8126
8127 This program is distributed in the hope that it will be useful,
8128 but WITHOUT ANY WARRANTY; without even the implied warranty of
8129 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
8130 GNU General Public License for more details.
8131
8132 In addition:
8133
8134 Redistribution and use in source and binary forms, with or without
8135 modification, are permitted provided that the following conditions
8136 are met:
8137
8138 1. Redistributions of source code must retain the above copyright
8139 notice, this list of conditions and the following disclaimer.
8140 2. Redistributions in binary form must reproduce the above copyright
8141 notice, this list of conditions and the following disclaimer in the
8142 documentation and/or other materials provided with the distribution.
8143 3. The name of the author may not be used to endorse or promote
8144 products derived from this software without specific prior written
8145 permission.
8146
8147 THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
8148 IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
8149 WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
8150 ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT,
8151 INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
8152 (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
8153 SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
8154 HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
8155 STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
8156 IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
8157 POSSIBILITY OF SUCH DAMAGE.
8158 */
8159
8160 module_init(airo_init_module);
8161 module_exit(airo_cleanup_module);
kernel source for telekom puls (alcatel/mediatek)