drivers/net/wireless/ti/wl1251/main.c

   1 // SPDX-License-Identifier: GPL-2.0-only
   2 /*
   3  * This file is part of wl1251
   4  *
   5  * Copyright (C) 2008-2009 Nokia Corporation
   6  */
   7
   8 #include <linux/module.h>
   9 #include <linux/interrupt.h>
  10 #include <linux/firmware.h>
  11 #include <linux/delay.h>
  12 #include <linux/irq.h>
  13 #include <linux/crc32.h>
  14 #include <linux/etherdevice.h>
  15 #include <linux/vmalloc.h>
  16 #include <linux/slab.h>
  17 #include <linux/netdevice.h>
  18
  19 #include "wl1251.h"
  20 #include "wl12xx_80211.h"
  21 #include "reg.h"
  22 #include "io.h"
  23 #include "cmd.h"
  24 #include "event.h"
  25 #include "tx.h"
  26 #include "rx.h"
  27 #include "ps.h"
  28 #include "init.h"
  29 #include "debugfs.h"
  30 #include "boot.h"
  31
  32 void wl1251_enable_interrupts(struct wl1251 *wl)
  33 {
  34         wl->if_ops->enable_irq(wl);
  35 }
  36
  37 void wl1251_disable_interrupts(struct wl1251 *wl)
  38 {
  39         wl->if_ops->disable_irq(wl);
  40 }
  41
  42 static int wl1251_power_off(struct wl1251 *wl)
  43 {
  44         return wl->if_ops->power(wl, false);
  45 }
  46
  47 static int wl1251_power_on(struct wl1251 *wl)
  48 {
  49         return wl->if_ops->power(wl, true);
  50 }
  51
  52 static int wl1251_fetch_firmware(struct wl1251 *wl)
  53 {
  54         const struct firmware *fw;
  55         struct device *dev = wiphy_dev(wl->hw->wiphy);
  56         int ret;
  57
  58         ret = request_firmware(&fw, WL1251_FW_NAME, dev);
  59
  60         if (ret < 0) {
  61                 wl1251_error("could not get firmware: %d", ret);
  62                 return ret;
  63         }
  64
  65         if (fw->size % 4) {
  66                 wl1251_error("firmware size is not multiple of 32 bits: %zu",
  67                              fw->size);
  68                 ret = -EILSEQ;
  69                 goto out;
  70         }
  71
  72         wl->fw_len = fw->size;
  73         wl->fw = vmalloc(wl->fw_len);
  74
  75         if (!wl->fw) {
  76                 wl1251_error("could not allocate memory for the firmware");
  77                 ret = -ENOMEM;
  78                 goto out;
  79         }
  80
  81         memcpy(wl->fw, fw->data, wl->fw_len);
  82
  83         ret = 0;
  84
  85 out:
  86         release_firmware(fw);
  87
  88         return ret;
  89 }
  90
  91 static int wl1251_fetch_nvs(struct wl1251 *wl)
  92 {
  93         const struct firmware *fw;
  94         struct device *dev = wiphy_dev(wl->hw->wiphy);
  95         int ret;
  96
  97         ret = request_firmware(&fw, WL1251_NVS_NAME, dev);
  98
  99         if (ret < 0) {
 100                 wl1251_error("could not get nvs file: %d", ret);
 101                 return ret;
 102         }
 103
 104         if (fw->size % 4) {
 105                 wl1251_error("nvs size is not multiple of 32 bits: %zu",
 106                              fw->size);
 107                 ret = -EILSEQ;
 108                 goto out;
 109         }
 110
 111         wl->nvs = kmemdup(fw->data, fw->size, GFP_KERNEL);
 112
 113         if (!wl->nvs) {
 114                 wl1251_error("could not allocate memory for the nvs file");
 115                 ret = -ENOMEM;
 116                 goto out;
 117         }
 118
 119         wl->nvs_len = fw->size;
 120
 121         ret = 0;
 122
 123 out:
 124         release_firmware(fw);
 125
 126         return ret;
 127 }
 128
 129 static void wl1251_fw_wakeup(struct wl1251 *wl)
 130 {
 131         u32 elp_reg;
 132
 133         elp_reg = ELPCTRL_WAKE_UP;
 134         wl1251_write_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, elp_reg);
 135         elp_reg = wl1251_read_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
 136
 137         if (!(elp_reg & ELPCTRL_WLAN_READY))
 138                 wl1251_warning("WLAN not ready");
 139 }
 140
 141 static int wl1251_chip_wakeup(struct wl1251 *wl)
 142 {
 143         int ret;
 144
 145         ret = wl1251_power_on(wl);
 146         if (ret < 0)
 147                 return ret;
 148
 149         msleep(WL1251_POWER_ON_SLEEP);
 150         wl->if_ops->reset(wl);
 151
 152         /* We don't need a real memory partition here, because we only want
 153          * to use the registers at this point. */
 154         wl1251_set_partition(wl,
 155                              0x00000000,
 156                              0x00000000,
 157                              REGISTERS_BASE,
 158                              REGISTERS_DOWN_SIZE);
 159
 160         /* ELP module wake up */
 161         wl1251_fw_wakeup(wl);
 162
 163         /* whal_FwCtrl_BootSm() */
 164
 165         /* 0. read chip id from CHIP_ID */
 166         wl->chip_id = wl1251_reg_read32(wl, CHIP_ID_B);
 167
 168         /* 1. check if chip id is valid */
 169
 170         switch (wl->chip_id) {
 171         case CHIP_ID_1251_PG12:
 172                 wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG12)",
 173                              wl->chip_id);
 174                 break;
 175         case CHIP_ID_1251_PG11:
 176                 wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG11)",
 177                              wl->chip_id);
 178                 break;
 179         case CHIP_ID_1251_PG10:
 180         default:
 181                 wl1251_error("unsupported chip id: 0x%x", wl->chip_id);
 182                 ret = -ENODEV;
 183                 goto out;
 184         }
 185
 186         if (wl->fw == NULL) {
 187                 ret = wl1251_fetch_firmware(wl);
 188                 if (ret < 0)
 189                         goto out;
 190         }
 191
 192 out:
 193         return ret;
 194 }
 195
 196 #define WL1251_IRQ_LOOP_COUNT 10
 197 static void wl1251_irq_work(struct work_struct *work)
 198 {
 199         u32 intr, ctr = WL1251_IRQ_LOOP_COUNT;
 200         struct wl1251 *wl =
 201                 container_of(work, struct wl1251, irq_work);
 202         int ret;
 203
 204         mutex_lock(&wl->mutex);
 205
 206         wl1251_debug(DEBUG_IRQ, "IRQ work");
 207
 208         if (wl->state == WL1251_STATE_OFF)
 209                 goto out;
 210
 211         ret = wl1251_ps_elp_wakeup(wl);
 212         if (ret < 0)
 213                 goto out;
 214
 215         wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, WL1251_ACX_INTR_ALL);
 216
 217         intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
 218         wl1251_debug(DEBUG_IRQ, "intr: 0x%x", intr);
 219
 220         do {
 221                 if (wl->data_path) {
 222                         wl->rx_counter = wl1251_mem_read32(
 223                                 wl, wl->data_path->rx_control_addr);
 224
 225                         /* We handle a frmware bug here */
 226                         switch ((wl->rx_counter - wl->rx_handled) & 0xf) {
 227                         case 0:
 228                                 wl1251_debug(DEBUG_IRQ,
 229                                              "RX: FW and host in sync");
 230                                 intr &= ~WL1251_ACX_INTR_RX0_DATA;
 231                                 intr &= ~WL1251_ACX_INTR_RX1_DATA;
 232                                 break;
 233                         case 1:
 234                                 wl1251_debug(DEBUG_IRQ, "RX: FW +1");
 235                                 intr |= WL1251_ACX_INTR_RX0_DATA;
 236                                 intr &= ~WL1251_ACX_INTR_RX1_DATA;
 237                                 break;
 238                         case 2:
 239                                 wl1251_debug(DEBUG_IRQ, "RX: FW +2");
 240                                 intr |= WL1251_ACX_INTR_RX0_DATA;
 241                                 intr |= WL1251_ACX_INTR_RX1_DATA;
 242                                 break;
 243                         default:
 244                                 wl1251_warning(
 245                                         "RX: FW and host out of sync: %d",
 246                                         wl->rx_counter - wl->rx_handled);
 247                                 break;
 248                         }
 249
 250                         wl->rx_handled = wl->rx_counter;
 251
 252                         wl1251_debug(DEBUG_IRQ, "RX counter: %d",
 253                                      wl->rx_counter);
 254                 }
 255
 256                 intr &= wl->intr_mask;
 257
 258                 if (intr == 0) {
 259                         wl1251_debug(DEBUG_IRQ, "INTR is 0");
 260                         goto out_sleep;
 261                 }
 262
 263                 if (intr & WL1251_ACX_INTR_RX0_DATA) {
 264                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX0_DATA");
 265                         wl1251_rx(wl);
 266                 }
 267
 268                 if (intr & WL1251_ACX_INTR_RX1_DATA) {
 269                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX1_DATA");
 270                         wl1251_rx(wl);
 271                 }
 272
 273                 if (intr & WL1251_ACX_INTR_TX_RESULT) {
 274                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_TX_RESULT");
 275                         wl1251_tx_complete(wl);
 276                 }
 277
 278                 if (intr & WL1251_ACX_INTR_EVENT_A) {
 279                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_A");
 280                         wl1251_event_handle(wl, 0);
 281                 }
 282
 283                 if (intr & WL1251_ACX_INTR_EVENT_B) {
 284                         wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_B");
 285                         wl1251_event_handle(wl, 1);
 286                 }
 287
 288                 if (intr & WL1251_ACX_INTR_INIT_COMPLETE)
 289                         wl1251_debug(DEBUG_IRQ,
 290                                      "WL1251_ACX_INTR_INIT_COMPLETE");
 291
 292                 if (--ctr == 0)
 293                         break;
 294
 295                 intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
 296         } while (intr);
 297
 298 out_sleep:
 299         wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, ~(wl->intr_mask));
 300         wl1251_ps_elp_sleep(wl);
 301
 302 out:
 303         mutex_unlock(&wl->mutex);
 304 }
 305
 306 static int wl1251_join(struct wl1251 *wl, u8 bss_type, u8 channel,
 307                        u16 beacon_interval, u8 dtim_period)
 308 {
 309         int ret;
 310
 311         ret = wl1251_acx_frame_rates(wl, DEFAULT_HW_GEN_TX_RATE,
 312                                      DEFAULT_HW_GEN_MODULATION_TYPE,
 313                                      wl->tx_mgmt_frm_rate,
 314                                      wl->tx_mgmt_frm_mod);
 315         if (ret < 0)
 316                 goto out;
 317
 318         /*
 319          * Join command applies filters, and if we are not associated,
 320          * BSSID filter must be disabled for association to work.
 321          */
 322         if (is_zero_ether_addr(wl->bssid))
 323                 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
 324
 325         ret = wl1251_cmd_join(wl, bss_type, channel, beacon_interval,
 326                               dtim_period);
 327         if (ret < 0)
 328                 goto out;
 329
 330         ret = wl1251_event_wait(wl, JOIN_EVENT_COMPLETE_ID, 100);
 331         if (ret < 0)
 332                 wl1251_warning("join timeout");
 333
 334 out:
 335         return ret;
 336 }
 337
 338 static void wl1251_op_tx(struct ieee80211_hw *hw,
 339                          struct ieee80211_tx_control *control,
 340                          struct sk_buff *skb)
 341 {
 342         struct wl1251 *wl = hw->priv;
 343         unsigned long flags;
 344
 345         skb_queue_tail(&wl->tx_queue, skb);
 346
 347         /*
 348          * The chip specific setup must run before the first TX packet -
 349          * before that, the tx_work will not be initialized!
 350          */
 351
 352         ieee80211_queue_work(wl->hw, &wl->tx_work);
 353
 354         /*
 355          * The workqueue is slow to process the tx_queue and we need stop
 356          * the queue here, otherwise the queue will get too long.
 357          */
 358         if (skb_queue_len(&wl->tx_queue) >= WL1251_TX_QUEUE_HIGH_WATERMARK) {
 359                 wl1251_debug(DEBUG_TX, "op_tx: tx_queue full, stop queues");
 360
 361                 spin_lock_irqsave(&wl->wl_lock, flags);
 362                 ieee80211_stop_queues(wl->hw);
 363                 wl->tx_queue_stopped = true;
 364                 spin_unlock_irqrestore(&wl->wl_lock, flags);
 365         }
 366 }
 367
 368 static int wl1251_op_start(struct ieee80211_hw *hw)
 369 {
 370         struct wl1251 *wl = hw->priv;
 371         struct wiphy *wiphy = hw->wiphy;
 372         int ret = 0;
 373
 374         wl1251_debug(DEBUG_MAC80211, "mac80211 start");
 375
 376         mutex_lock(&wl->mutex);
 377
 378         if (wl->state != WL1251_STATE_OFF) {
 379                 wl1251_error("cannot start because not in off state: %d",
 380                              wl->state);
 381                 ret = -EBUSY;
 382                 goto out;
 383         }
 384
 385         ret = wl1251_chip_wakeup(wl);
 386         if (ret < 0)
 387                 goto out;
 388
 389         ret = wl1251_boot(wl);
 390         if (ret < 0)
 391                 goto out;
 392
 393         ret = wl1251_hw_init(wl);
 394         if (ret < 0)
 395                 goto out;
 396
 397         ret = wl1251_acx_station_id(wl);
 398         if (ret < 0)
 399                 goto out;
 400
 401         wl->state = WL1251_STATE_ON;
 402
 403         wl1251_info("firmware booted (%s)", wl->fw_ver);
 404
 405         /* update hw/fw version info in wiphy struct */
 406         wiphy->hw_version = wl->chip_id;
 407         strncpy(wiphy->fw_version, wl->fw_ver, sizeof(wiphy->fw_version));
 408
 409 out:
 410         if (ret < 0)
 411                 wl1251_power_off(wl);
 412
 413         mutex_unlock(&wl->mutex);
 414
 415         return ret;
 416 }
 417
 418 static void wl1251_op_stop(struct ieee80211_hw *hw)
 419 {
 420         struct wl1251 *wl = hw->priv;
 421
 422         wl1251_info("down");
 423
 424         wl1251_debug(DEBUG_MAC80211, "mac80211 stop");
 425
 426         mutex_lock(&wl->mutex);
 427
 428         WARN_ON(wl->state != WL1251_STATE_ON);
 429
 430         if (wl->scanning) {
 431                 struct cfg80211_scan_info info = {
 432                         .aborted = true,
 433                 };
 434
 435                 ieee80211_scan_completed(wl->hw, &info);
 436                 wl->scanning = false;
 437         }
 438
 439         wl->state = WL1251_STATE_OFF;
 440
 441         wl1251_disable_interrupts(wl);
 442
 443         mutex_unlock(&wl->mutex);
 444
 445         cancel_work_sync(&wl->irq_work);
 446         cancel_work_sync(&wl->tx_work);
 447         cancel_delayed_work_sync(&wl->elp_work);
 448
 449         mutex_lock(&wl->mutex);
 450
 451         /* let's notify MAC80211 about the remaining pending TX frames */
 452         wl1251_tx_flush(wl);
 453         wl1251_power_off(wl);
 454
 455         eth_zero_addr(wl->bssid);
 456         wl->listen_int = 1;
 457         wl->bss_type = MAX_BSS_TYPE;
 458
 459         wl->data_in_count = 0;
 460         wl->rx_counter = 0;
 461         wl->rx_handled = 0;
 462         wl->rx_current_buffer = 0;
 463         wl->rx_last_id = 0;
 464         wl->next_tx_complete = 0;
 465         wl->elp = false;
 466         wl->station_mode = STATION_ACTIVE_MODE;
 467         wl->psm_entry_retry = 0;
 468         wl->tx_queue_stopped = false;
 469         wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
 470         wl->rssi_thold = 0;
 471         wl->channel = WL1251_DEFAULT_CHANNEL;
 472         wl->monitor_present = false;
 473         wl->joined = false;
 474
 475         wl1251_debugfs_reset(wl);
 476
 477         mutex_unlock(&wl->mutex);
 478 }
 479
 480 static int wl1251_op_add_interface(struct ieee80211_hw *hw,
 481                                    struct ieee80211_vif *vif)
 482 {
 483         struct wl1251 *wl = hw->priv;
 484         int ret = 0;
 485
 486         vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER |
 487                              IEEE80211_VIF_SUPPORTS_UAPSD |
 488                              IEEE80211_VIF_SUPPORTS_CQM_RSSI;
 489
 490         wl1251_debug(DEBUG_MAC80211, "mac80211 add interface type %d mac %pM",
 491                      vif->type, vif->addr);
 492
 493         mutex_lock(&wl->mutex);
 494         if (wl->vif) {
 495                 ret = -EBUSY;
 496                 goto out;
 497         }
 498
 499         wl->vif = vif;
 500
 501         switch (vif->type) {
 502         case NL80211_IFTYPE_STATION:
 503                 wl->bss_type = BSS_TYPE_STA_BSS;
 504                 break;
 505         case NL80211_IFTYPE_ADHOC:
 506                 wl->bss_type = BSS_TYPE_IBSS;
 507                 break;
 508         default:
 509                 ret = -EOPNOTSUPP;
 510                 goto out;
 511         }
 512
 513         if (!ether_addr_equal_unaligned(wl->mac_addr, vif->addr)) {
 514                 memcpy(wl->mac_addr, vif->addr, ETH_ALEN);
 515                 SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
 516                 ret = wl1251_acx_station_id(wl);
 517                 if (ret < 0)
 518                         goto out;
 519         }
 520
 521 out:
 522         mutex_unlock(&wl->mutex);
 523         return ret;
 524 }
 525
 526 static void wl1251_op_remove_interface(struct ieee80211_hw *hw,
 527                                          struct ieee80211_vif *vif)
 528 {
 529         struct wl1251 *wl = hw->priv;
 530
 531         mutex_lock(&wl->mutex);
 532         wl1251_debug(DEBUG_MAC80211, "mac80211 remove interface");
 533         wl->vif = NULL;
 534         eth_zero_addr(wl->bssid);
 535         mutex_unlock(&wl->mutex);
 536 }
 537
 538 static int wl1251_build_null_data(struct wl1251 *wl)
 539 {
 540         struct sk_buff *skb = NULL;
 541         int size;
 542         void *ptr;
 543         int ret = -ENOMEM;
 544
 545         if (wl->bss_type == BSS_TYPE_IBSS) {
 546                 size = sizeof(struct wl12xx_null_data_template);
 547                 ptr = NULL;
 548         } else {
 549                 skb = ieee80211_nullfunc_get(wl->hw, wl->vif, false);
 550                 if (!skb)
 551                         goto out;
 552                 size = skb->len;
 553                 ptr = skb->data;
 554         }
 555
 556         ret = wl1251_cmd_template_set(wl, CMD_NULL_DATA, ptr, size);
 557
 558 out:
 559         dev_kfree_skb(skb);
 560         if (ret)
 561                 wl1251_warning("cmd build null data failed: %d", ret);
 562
 563         return ret;
 564 }
 565
 566 static int wl1251_build_qos_null_data(struct wl1251 *wl)
 567 {
 568         struct ieee80211_qos_hdr template;
 569
 570         memset(&template, 0, sizeof(template));
 571
 572         memcpy(template.addr1, wl->bssid, ETH_ALEN);
 573         memcpy(template.addr2, wl->mac_addr, ETH_ALEN);
 574         memcpy(template.addr3, wl->bssid, ETH_ALEN);
 575
 576         template.frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
 577                                              IEEE80211_STYPE_QOS_NULLFUNC |
 578                                              IEEE80211_FCTL_TODS);
 579
 580         /* FIXME: not sure what priority to use here */
 581         template.qos_ctrl = cpu_to_le16(0);
 582
 583         return wl1251_cmd_template_set(wl, CMD_QOS_NULL_DATA, &template,
 584                                        sizeof(template));
 585 }
 586
 587 static bool wl1251_can_do_pm(struct ieee80211_conf *conf, struct wl1251 *wl)
 588 {
 589         return (conf->flags & IEEE80211_CONF_PS) && !wl->monitor_present;
 590 }
 591
 592 static int wl1251_op_config(struct ieee80211_hw *hw, u32 changed)
 593 {
 594         struct wl1251 *wl = hw->priv;
 595         struct ieee80211_conf *conf = &hw->conf;
 596         int channel, ret = 0;
 597
 598         channel = ieee80211_frequency_to_channel(
 599                         conf->chandef.chan->center_freq);
 600
 601         wl1251_debug(DEBUG_MAC80211,
 602                      "mac80211 config ch %d monitor %s psm %s power %d",
 603                      channel,
 604                      conf->flags & IEEE80211_CONF_MONITOR ? "on" : "off",
 605                      conf->flags & IEEE80211_CONF_PS ? "on" : "off",
 606                      conf->power_level);
 607
 608         mutex_lock(&wl->mutex);
 609
 610         ret = wl1251_ps_elp_wakeup(wl);
 611         if (ret < 0)
 612                 goto out;
 613
 614         if (changed & IEEE80211_CONF_CHANGE_MONITOR) {
 615                 u32 mode;
 616
 617                 if (conf->flags & IEEE80211_CONF_MONITOR) {
 618                         wl->monitor_present = true;
 619                         mode = DF_SNIFF_MODE_ENABLE | DF_ENCRYPTION_DISABLE;
 620                 } else {
 621                         wl->monitor_present = false;
 622                         mode = 0;
 623                 }
 624
 625                 ret = wl1251_acx_feature_cfg(wl, mode);
 626                 if (ret < 0)
 627                         goto out_sleep;
 628         }
 629
 630         if (channel != wl->channel) {
 631                 wl->channel = channel;
 632
 633                 /*
 634                  * Use ENABLE_RX command for channel switching when no
 635                  * interface is present (monitor mode only).
 636                  * This leaves the tx path disabled in firmware, whereas
 637                  * the usual JOIN command seems to transmit some frames
 638                  * at firmware level.
 639                  */
 640                 if (wl->vif == NULL) {
 641                         wl->joined = false;
 642                         ret = wl1251_cmd_data_path_rx(wl, wl->channel, 1);
 643                 } else {
 644                         ret = wl1251_join(wl, wl->bss_type, wl->channel,
 645                                           wl->beacon_int, wl->dtim_period);
 646                 }
 647                 if (ret < 0)
 648                         goto out_sleep;
 649         }
 650
 651         if (wl1251_can_do_pm(conf, wl) && !wl->psm_requested) {
 652                 wl1251_debug(DEBUG_PSM, "psm enabled");
 653
 654                 wl->psm_requested = true;
 655
 656                 wl->dtim_period = conf->ps_dtim_period;
 657
 658                 ret = wl1251_acx_wr_tbtt_and_dtim(wl, wl->beacon_int,
 659                                                   wl->dtim_period);
 660
 661                 /*
 662                  * mac80211 enables PSM only if we're already associated.
 663                  */
 664                 ret = wl1251_ps_set_mode(wl, STATION_POWER_SAVE_MODE);
 665                 if (ret < 0)
 666                         goto out_sleep;
 667         } else if (!wl1251_can_do_pm(conf, wl) && wl->psm_requested) {
 668                 wl1251_debug(DEBUG_PSM, "psm disabled");
 669
 670                 wl->psm_requested = false;
 671
 672                 if (wl->station_mode != STATION_ACTIVE_MODE) {
 673                         ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
 674                         if (ret < 0)
 675                                 goto out_sleep;
 676                 }
 677         }
 678
 679         if (changed & IEEE80211_CONF_CHANGE_IDLE && !wl->scanning) {
 680                 if (conf->flags & IEEE80211_CONF_IDLE) {
 681                         ret = wl1251_ps_set_mode(wl, STATION_IDLE);
 682                         if (ret < 0)
 683                                 goto out_sleep;
 684                 } else {
 685                         ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
 686                         if (ret < 0)
 687                                 goto out_sleep;
 688                         ret = wl1251_join(wl, wl->bss_type, wl->channel,
 689                                           wl->beacon_int, wl->dtim_period);
 690                         if (ret < 0)
 691                                 goto out_sleep;
 692                 }
 693         }
 694
 695         if (conf->power_level != wl->power_level) {
 696                 ret = wl1251_acx_tx_power(wl, conf->power_level);
 697                 if (ret < 0)
 698                         goto out_sleep;
 699
 700                 wl->power_level = conf->power_level;
 701         }
 702
 703 out_sleep:
 704         wl1251_ps_elp_sleep(wl);
 705
 706 out:
 707         mutex_unlock(&wl->mutex);
 708
 709         return ret;
 710 }
 711
 712 struct wl1251_filter_params {
 713         bool enabled;
 714         int mc_list_length;
 715         u8 mc_list[ACX_MC_ADDRESS_GROUP_MAX][ETH_ALEN];
 716 };
 717
 718 static u64 wl1251_op_prepare_multicast(struct ieee80211_hw *hw,
 719                                        struct netdev_hw_addr_list *mc_list)
 720 {
 721         struct wl1251_filter_params *fp;
 722         struct netdev_hw_addr *ha;
 723         struct wl1251 *wl = hw->priv;
 724
 725         if (unlikely(wl->state == WL1251_STATE_OFF))
 726                 return 0;
 727
 728         fp = kzalloc(sizeof(*fp), GFP_ATOMIC);
 729         if (!fp) {
 730                 wl1251_error("Out of memory setting filters.");
 731                 return 0;
 732         }
 733
 734         /* update multicast filtering parameters */
 735         fp->mc_list_length = 0;
 736         if (netdev_hw_addr_list_count(mc_list) > ACX_MC_ADDRESS_GROUP_MAX) {
 737                 fp->enabled = false;
 738         } else {
 739                 fp->enabled = true;
 740                 netdev_hw_addr_list_for_each(ha, mc_list) {
 741                         memcpy(fp->mc_list[fp->mc_list_length],
 742                                         ha->addr, ETH_ALEN);
 743                         fp->mc_list_length++;
 744                 }
 745         }
 746
 747         return (u64)(unsigned long)fp;
 748 }
 749
 750 #define WL1251_SUPPORTED_FILTERS (FIF_ALLMULTI | \
 751                                   FIF_FCSFAIL | \
 752                                   FIF_BCN_PRBRESP_PROMISC | \
 753                                   FIF_CONTROL | \
 754                                   FIF_OTHER_BSS | \
 755                                   FIF_PROBE_REQ)
 756
 757 static void wl1251_op_configure_filter(struct ieee80211_hw *hw,
 758                                        unsigned int changed,
 759                                        unsigned int *total, u64 multicast)
 760 {
 761         struct wl1251_filter_params *fp = (void *)(unsigned long)multicast;
 762         struct wl1251 *wl = hw->priv;
 763         int ret;
 764
 765         wl1251_debug(DEBUG_MAC80211, "mac80211 configure filter");
 766
 767         *total &= WL1251_SUPPORTED_FILTERS;
 768         changed &= WL1251_SUPPORTED_FILTERS;
 769
 770         if (changed == 0) {
 771                 /* no filters which we support changed */
 772                 kfree(fp);
 773                 return;
 774         }
 775
 776         mutex_lock(&wl->mutex);
 777
 778         wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
 779         wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
 780
 781         if (*total & FIF_ALLMULTI)
 782                 /*
 783                  * CFG_MC_FILTER_EN in rx_config needs to be 0 to receive
 784                  * all multicast frames
 785                  */
 786                 wl->rx_config &= ~CFG_MC_FILTER_EN;
 787         if (*total & FIF_FCSFAIL)
 788                 wl->rx_filter |= CFG_RX_FCS_ERROR;
 789         if (*total & FIF_BCN_PRBRESP_PROMISC) {
 790                 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
 791                 wl->rx_config &= ~CFG_SSID_FILTER_EN;
 792         }
 793         if (*total & FIF_CONTROL)
 794                 wl->rx_filter |= CFG_RX_CTL_EN;
 795         if (*total & FIF_OTHER_BSS || is_zero_ether_addr(wl->bssid))
 796                 wl->rx_config &= ~CFG_BSSID_FILTER_EN;
 797         if (*total & FIF_PROBE_REQ)
 798                 wl->rx_filter |= CFG_RX_PREQ_EN;
 799
 800         if (wl->state == WL1251_STATE_OFF)
 801                 goto out;
 802
 803         ret = wl1251_ps_elp_wakeup(wl);
 804         if (ret < 0)
 805                 goto out;
 806
 807         if (*total & FIF_ALLMULTI)
 808                 ret = wl1251_acx_group_address_tbl(wl, false, NULL, 0);
 809         else if (fp)
 810                 ret = wl1251_acx_group_address_tbl(wl, fp->enabled,
 811                                                    fp->mc_list,
 812                                                    fp->mc_list_length);
 813         if (ret < 0)
 814                 goto out;
 815
 816         /* send filters to firmware */
 817         wl1251_acx_rx_config(wl, wl->rx_config, wl->rx_filter);
 818
 819         wl1251_ps_elp_sleep(wl);
 820
 821 out:
 822         mutex_unlock(&wl->mutex);
 823         kfree(fp);
 824 }
 825
 826 /* HW encryption */
 827 static int wl1251_set_key_type(struct wl1251 *wl,
 828                                struct wl1251_cmd_set_keys *key,
 829                                enum set_key_cmd cmd,
 830                                struct ieee80211_key_conf *mac80211_key,
 831                                const u8 *addr)
 832 {
 833         switch (mac80211_key->cipher) {
 834         case WLAN_CIPHER_SUITE_WEP40:
 835         case WLAN_CIPHER_SUITE_WEP104:
 836                 if (is_broadcast_ether_addr(addr))
 837                         key->key_type = KEY_WEP_DEFAULT;
 838                 else
 839                         key->key_type = KEY_WEP_ADDR;
 840
 841                 mac80211_key->hw_key_idx = mac80211_key->keyidx;
 842                 break;
 843         case WLAN_CIPHER_SUITE_TKIP:
 844                 if (is_broadcast_ether_addr(addr))
 845                         key->key_type = KEY_TKIP_MIC_GROUP;
 846                 else
 847                         key->key_type = KEY_TKIP_MIC_PAIRWISE;
 848
 849                 mac80211_key->hw_key_idx = mac80211_key->keyidx;
 850                 break;
 851         case WLAN_CIPHER_SUITE_CCMP:
 852                 if (is_broadcast_ether_addr(addr))
 853                         key->key_type = KEY_AES_GROUP;
 854                 else
 855                         key->key_type = KEY_AES_PAIRWISE;
 856                 mac80211_key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
 857                 break;
 858         default:
 859                 wl1251_error("Unknown key cipher 0x%x", mac80211_key->cipher);
 860                 return -EOPNOTSUPP;
 861         }
 862
 863         return 0;
 864 }
 865
 866 static int wl1251_op_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
 867                              struct ieee80211_vif *vif,
 868                              struct ieee80211_sta *sta,
 869                              struct ieee80211_key_conf *key)
 870 {
 871         struct wl1251 *wl = hw->priv;
 872         struct wl1251_cmd_set_keys *wl_cmd;
 873         const u8 *addr;
 874         int ret;
 875
 876         static const u8 bcast_addr[ETH_ALEN] =
 877                 { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
 878
 879         wl1251_debug(DEBUG_MAC80211, "mac80211 set key");
 880
 881         wl_cmd = kzalloc(sizeof(*wl_cmd), GFP_KERNEL);
 882         if (!wl_cmd) {
 883                 ret = -ENOMEM;
 884                 goto out;
 885         }
 886
 887         addr = sta ? sta->addr : bcast_addr;
 888
 889         wl1251_debug(DEBUG_CRYPT, "CMD: 0x%x", cmd);
 890         wl1251_dump(DEBUG_CRYPT, "ADDR: ", addr, ETH_ALEN);
 891         wl1251_debug(DEBUG_CRYPT, "Key: algo:0x%x, id:%d, len:%d flags 0x%x",
 892                      key->cipher, key->keyidx, key->keylen, key->flags);
 893         wl1251_dump(DEBUG_CRYPT, "KEY: ", key->key, key->keylen);
 894
 895         if (is_zero_ether_addr(addr)) {
 896                 /* We dont support TX only encryption */
 897                 ret = -EOPNOTSUPP;
 898                 goto out;
 899         }
 900
 901         mutex_lock(&wl->mutex);
 902
 903         switch (cmd) {
 904         case SET_KEY:
 905                 if (wl->monitor_present) {
 906                         ret = -EOPNOTSUPP;
 907                         goto out_unlock;
 908                 }
 909                 wl_cmd->key_action = KEY_ADD_OR_REPLACE;
 910                 break;
 911         case DISABLE_KEY:
 912                 wl_cmd->key_action = KEY_REMOVE;
 913                 break;
 914         default:
 915                 wl1251_error("Unsupported key cmd 0x%x", cmd);
 916                 break;
 917         }
 918
 919         ret = wl1251_ps_elp_wakeup(wl);
 920         if (ret < 0)
 921                 goto out_unlock;
 922
 923         ret = wl1251_set_key_type(wl, wl_cmd, cmd, key, addr);
 924         if (ret < 0) {
 925                 wl1251_error("Set KEY type failed");
 926                 goto out_sleep;
 927         }
 928
 929         if (wl_cmd->key_type != KEY_WEP_DEFAULT)
 930                 memcpy(wl_cmd->addr, addr, ETH_ALEN);
 931
 932         if ((wl_cmd->key_type == KEY_TKIP_MIC_GROUP) ||
 933             (wl_cmd->key_type == KEY_TKIP_MIC_PAIRWISE)) {
 934                 /*
 935                  * We get the key in the following form:
 936                  * TKIP (16 bytes) - TX MIC (8 bytes) - RX MIC (8 bytes)
 937                  * but the target is expecting:
 938                  * TKIP - RX MIC - TX MIC
 939                  */
 940                 memcpy(wl_cmd->key, key->key, 16);
 941                 memcpy(wl_cmd->key + 16, key->key + 24, 8);
 942                 memcpy(wl_cmd->key + 24, key->key + 16, 8);
 943
 944         } else {
 945                 memcpy(wl_cmd->key, key->key, key->keylen);
 946         }
 947         wl_cmd->key_size = key->keylen;
 948
 949         wl_cmd->id = key->keyidx;
 950         wl_cmd->ssid_profile = 0;
 951
 952         wl1251_dump(DEBUG_CRYPT, "TARGET KEY: ", wl_cmd, sizeof(*wl_cmd));
 953
 954         ret = wl1251_cmd_send(wl, CMD_SET_KEYS, wl_cmd, sizeof(*wl_cmd));
 955         if (ret < 0) {
 956                 wl1251_warning("could not set keys");
 957                 goto out_sleep;
 958         }
 959
 960 out_sleep:
 961         wl1251_ps_elp_sleep(wl);
 962
 963 out_unlock:
 964         mutex_unlock(&wl->mutex);
 965
 966 out:
 967         kfree(wl_cmd);
 968
 969         return ret;
 970 }
 971
 972 static int wl1251_op_hw_scan(struct ieee80211_hw *hw,
 973                              struct ieee80211_vif *vif,
 974                              struct ieee80211_scan_request *hw_req)
 975 {
 976         struct cfg80211_scan_request *req = &hw_req->req;
 977         struct wl1251 *wl = hw->priv;
 978         struct sk_buff *skb;
 979         size_t ssid_len = 0;
 980         u8 *ssid = NULL;
 981         int ret;
 982
 983         wl1251_debug(DEBUG_MAC80211, "mac80211 hw scan");
 984
 985         if (req->n_ssids) {
 986                 ssid = req->ssids[0].ssid;
 987                 ssid_len = req->ssids[0].ssid_len;
 988         }
 989
 990         mutex_lock(&wl->mutex);
 991
 992         if (wl->scanning) {
 993                 wl1251_debug(DEBUG_SCAN, "scan already in progress");
 994                 ret = -EINVAL;
 995                 goto out;
 996         }
 997
 998         ret = wl1251_ps_elp_wakeup(wl);
 999         if (ret < 0)
1000                 goto out;
1001
1002         if (hw->conf.flags & IEEE80211_CONF_IDLE) {
1003                 ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
1004                 if (ret < 0)
1005                         goto out_sleep;
1006                 ret = wl1251_join(wl, wl->bss_type, wl->channel,
1007                                   wl->beacon_int, wl->dtim_period);
1008                 if (ret < 0)
1009                         goto out_sleep;
1010         }
1011
1012         skb = ieee80211_probereq_get(wl->hw, wl->vif->addr, ssid, ssid_len,
1013                                      req->ie_len);
1014         if (!skb) {
1015                 ret = -ENOMEM;
1016                 goto out_idle;
1017         }
1018         if (req->ie_len)
1019                 skb_put_data(skb, req->ie, req->ie_len);
1020
1021         ret = wl1251_cmd_template_set(wl, CMD_PROBE_REQ, skb->data,
1022                                       skb->len);
1023         dev_kfree_skb(skb);
1024         if (ret < 0)
1025                 goto out_idle;
1026
1027         ret = wl1251_cmd_trigger_scan_to(wl, 0);
1028         if (ret < 0)
1029                 goto out_idle;
1030
1031         wl->scanning = true;
1032
1033         ret = wl1251_cmd_scan(wl, ssid, ssid_len, req->channels,
1034                               req->n_channels, WL1251_SCAN_NUM_PROBES);
1035         if (ret < 0) {
1036                 wl1251_debug(DEBUG_SCAN, "scan failed %d", ret);
1037                 wl->scanning = false;
1038                 goto out_idle;
1039         }
1040         goto out_sleep;
1041
1042 out_idle:
1043         if (hw->conf.flags & IEEE80211_CONF_IDLE)
1044                 ret = wl1251_ps_set_mode(wl, STATION_IDLE);
1045 out_sleep:
1046         wl1251_ps_elp_sleep(wl);
1047
1048 out:
1049         mutex_unlock(&wl->mutex);
1050
1051         return ret;
1052 }
1053
1054 static int wl1251_op_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1055 {
1056         struct wl1251 *wl = hw->priv;
1057         int ret;
1058
1059         mutex_lock(&wl->mutex);
1060
1061         ret = wl1251_ps_elp_wakeup(wl);
1062         if (ret < 0)
1063                 goto out;
1064
1065         ret = wl1251_acx_rts_threshold(wl, (u16) value);
1066         if (ret < 0)
1067                 wl1251_warning("wl1251_op_set_rts_threshold failed: %d", ret);
1068
1069         wl1251_ps_elp_sleep(wl);
1070
1071 out:
1072         mutex_unlock(&wl->mutex);
1073
1074         return ret;
1075 }
1076
1077 static void wl1251_op_bss_info_changed(struct ieee80211_hw *hw,
1078                                        struct ieee80211_vif *vif,
1079                                        struct ieee80211_bss_conf *bss_conf,
1080                                        u64 changed)
1081 {
1082         struct wl1251 *wl = hw->priv;
1083         struct sk_buff *beacon, *skb;
1084         bool enable;
1085         int ret;
1086
1087         wl1251_debug(DEBUG_MAC80211, "mac80211 bss info changed");
1088
1089         mutex_lock(&wl->mutex);
1090
1091         ret = wl1251_ps_elp_wakeup(wl);
1092         if (ret < 0)
1093                 goto out;
1094
1095         if (changed & BSS_CHANGED_CQM) {
1096                 ret = wl1251_acx_low_rssi(wl, bss_conf->cqm_rssi_thold,
1097                                           WL1251_DEFAULT_LOW_RSSI_WEIGHT,
1098                                           WL1251_DEFAULT_LOW_RSSI_DEPTH,
1099                                           WL1251_ACX_LOW_RSSI_TYPE_EDGE);
1100                 if (ret < 0)
1101                         goto out;
1102                 wl->rssi_thold = bss_conf->cqm_rssi_thold;
1103         }
1104
1105         if ((changed & BSS_CHANGED_BSSID) &&
1106             memcmp(wl->bssid, bss_conf->bssid, ETH_ALEN)) {
1107                 memcpy(wl->bssid, bss_conf->bssid, ETH_ALEN);
1108
1109                 if (!is_zero_ether_addr(wl->bssid)) {
1110                         ret = wl1251_build_null_data(wl);
1111                         if (ret < 0)
1112                                 goto out_sleep;
1113
1114                         ret = wl1251_build_qos_null_data(wl);
1115                         if (ret < 0)
1116                                 goto out_sleep;
1117
1118                         ret = wl1251_join(wl, wl->bss_type, wl->channel,
1119                                           wl->beacon_int, wl->dtim_period);
1120                         if (ret < 0)
1121                                 goto out_sleep;
1122                 }
1123         }
1124
1125         if (changed & BSS_CHANGED_ASSOC) {
1126                 if (vif->cfg.assoc) {
1127                         wl->beacon_int = bss_conf->beacon_int;
1128
1129                         skb = ieee80211_pspoll_get(wl->hw, wl->vif);
1130                         if (!skb)
1131                                 goto out_sleep;
1132
1133                         ret = wl1251_cmd_template_set(wl, CMD_PS_POLL,
1134                                                       skb->data,
1135                                                       skb->len);
1136                         dev_kfree_skb(skb);
1137                         if (ret < 0)
1138                                 goto out_sleep;
1139
1140                         ret = wl1251_acx_aid(wl, vif->cfg.aid);
1141                         if (ret < 0)
1142                                 goto out_sleep;
1143                 } else {
1144                         /* use defaults when not associated */
1145                         wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1146                         wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1147                 }
1148         }
1149         if (changed & BSS_CHANGED_ERP_SLOT) {
1150                 if (bss_conf->use_short_slot)
1151                         ret = wl1251_acx_slot(wl, SLOT_TIME_SHORT);
1152                 else
1153                         ret = wl1251_acx_slot(wl, SLOT_TIME_LONG);
1154                 if (ret < 0) {
1155                         wl1251_warning("Set slot time failed %d", ret);
1156                         goto out_sleep;
1157                 }
1158         }
1159
1160         if (changed & BSS_CHANGED_ERP_PREAMBLE) {
1161                 if (bss_conf->use_short_preamble)
1162                         wl1251_acx_set_preamble(wl, ACX_PREAMBLE_SHORT);
1163                 else
1164                         wl1251_acx_set_preamble(wl, ACX_PREAMBLE_LONG);
1165         }
1166
1167         if (changed & BSS_CHANGED_ERP_CTS_PROT) {
1168                 if (bss_conf->use_cts_prot)
1169                         ret = wl1251_acx_cts_protect(wl, CTSPROTECT_ENABLE);
1170                 else
1171                         ret = wl1251_acx_cts_protect(wl, CTSPROTECT_DISABLE);
1172                 if (ret < 0) {
1173                         wl1251_warning("Set ctsprotect failed %d", ret);
1174                         goto out_sleep;
1175                 }
1176         }
1177
1178         if (changed & BSS_CHANGED_ARP_FILTER) {
1179                 __be32 addr = vif->cfg.arp_addr_list[0];
1180                 WARN_ON(wl->bss_type != BSS_TYPE_STA_BSS);
1181
1182                 enable = vif->cfg.arp_addr_cnt == 1 && vif->cfg.assoc;
1183                 ret = wl1251_acx_arp_ip_filter(wl, enable, addr);
1184                 if (ret < 0)
1185                         goto out_sleep;
1186         }
1187
1188         if (changed & BSS_CHANGED_BEACON) {
1189                 beacon = ieee80211_beacon_get(hw, vif, 0);
1190                 if (!beacon)
1191                         goto out_sleep;
1192
1193                 ret = wl1251_cmd_template_set(wl, CMD_BEACON, beacon->data,
1194                                               beacon->len);
1195
1196                 if (ret < 0) {
1197                         dev_kfree_skb(beacon);
1198                         goto out_sleep;
1199                 }
1200
1201                 ret = wl1251_cmd_template_set(wl, CMD_PROBE_RESP, beacon->data,
1202                                               beacon->len);
1203
1204                 dev_kfree_skb(beacon);
1205
1206                 if (ret < 0)
1207                         goto out_sleep;
1208
1209                 ret = wl1251_join(wl, wl->bss_type, wl->channel,
1210                                   wl->beacon_int, wl->dtim_period);
1211
1212                 if (ret < 0)
1213                         goto out_sleep;
1214         }
1215
1216 out_sleep:
1217         wl1251_ps_elp_sleep(wl);
1218
1219 out:
1220         mutex_unlock(&wl->mutex);
1221 }
1222
1223
1224 /* can't be const, mac80211 writes to this */
1225 static struct ieee80211_rate wl1251_rates[] = {
1226         { .bitrate = 10,
1227           .hw_value = 0x1,
1228           .hw_value_short = 0x1, },
1229         { .bitrate = 20,
1230           .hw_value = 0x2,
1231           .hw_value_short = 0x2,
1232           .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1233         { .bitrate = 55,
1234           .hw_value = 0x4,
1235           .hw_value_short = 0x4,
1236           .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1237         { .bitrate = 110,
1238           .hw_value = 0x20,
1239           .hw_value_short = 0x20,
1240           .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1241         { .bitrate = 60,
1242           .hw_value = 0x8,
1243           .hw_value_short = 0x8, },
1244         { .bitrate = 90,
1245           .hw_value = 0x10,
1246           .hw_value_short = 0x10, },
1247         { .bitrate = 120,
1248           .hw_value = 0x40,
1249           .hw_value_short = 0x40, },
1250         { .bitrate = 180,
1251           .hw_value = 0x80,
1252           .hw_value_short = 0x80, },
1253         { .bitrate = 240,
1254           .hw_value = 0x200,
1255           .hw_value_short = 0x200, },
1256         { .bitrate = 360,
1257          .hw_value = 0x400,
1258          .hw_value_short = 0x400, },
1259         { .bitrate = 480,
1260           .hw_value = 0x800,
1261           .hw_value_short = 0x800, },
1262         { .bitrate = 540,
1263           .hw_value = 0x1000,
1264           .hw_value_short = 0x1000, },
1265 };
1266
1267 /* can't be const, mac80211 writes to this */
1268 static struct ieee80211_channel wl1251_channels[] = {
1269         { .hw_value = 1, .center_freq = 2412},
1270         { .hw_value = 2, .center_freq = 2417},
1271         { .hw_value = 3, .center_freq = 2422},
1272         { .hw_value = 4, .center_freq = 2427},
1273         { .hw_value = 5, .center_freq = 2432},
1274         { .hw_value = 6, .center_freq = 2437},
1275         { .hw_value = 7, .center_freq = 2442},
1276         { .hw_value = 8, .center_freq = 2447},
1277         { .hw_value = 9, .center_freq = 2452},
1278         { .hw_value = 10, .center_freq = 2457},
1279         { .hw_value = 11, .center_freq = 2462},
1280         { .hw_value = 12, .center_freq = 2467},
1281         { .hw_value = 13, .center_freq = 2472},
1282 };
1283
1284 static int wl1251_op_conf_tx(struct ieee80211_hw *hw,
1285                              struct ieee80211_vif *vif,
1286                              unsigned int link_id, u16 queue,
1287                              const struct ieee80211_tx_queue_params *params)
1288 {
1289         enum wl1251_acx_ps_scheme ps_scheme;
1290         struct wl1251 *wl = hw->priv;
1291         int ret;
1292
1293         mutex_lock(&wl->mutex);
1294
1295         wl1251_debug(DEBUG_MAC80211, "mac80211 conf tx %d", queue);
1296
1297         ret = wl1251_ps_elp_wakeup(wl);
1298         if (ret < 0)
1299                 goto out;
1300
1301         /* mac80211 uses units of 32 usec */
1302         ret = wl1251_acx_ac_cfg(wl, wl1251_tx_get_queue(queue),
1303                                 params->cw_min, params->cw_max,
1304                                 params->aifs, params->txop * 32);
1305         if (ret < 0)
1306                 goto out_sleep;
1307
1308         if (params->uapsd)
1309                 ps_scheme = WL1251_ACX_PS_SCHEME_UPSD_TRIGGER;
1310         else
1311                 ps_scheme = WL1251_ACX_PS_SCHEME_LEGACY;
1312
1313         ret = wl1251_acx_tid_cfg(wl, wl1251_tx_get_queue(queue),
1314                                  CHANNEL_TYPE_EDCF,
1315                                  wl1251_tx_get_queue(queue), ps_scheme,
1316                                  WL1251_ACX_ACK_POLICY_LEGACY);
1317         if (ret < 0)
1318                 goto out_sleep;
1319
1320 out_sleep:
1321         wl1251_ps_elp_sleep(wl);
1322
1323 out:
1324         mutex_unlock(&wl->mutex);
1325
1326         return ret;
1327 }
1328
1329 static int wl1251_op_get_survey(struct ieee80211_hw *hw, int idx,
1330                                 struct survey_info *survey)
1331 {
1332         struct wl1251 *wl = hw->priv;
1333         struct ieee80211_conf *conf = &hw->conf;
1334
1335         if (idx != 0)
1336                 return -ENOENT;
1337
1338         survey->channel = conf->chandef.chan;
1339         survey->filled = SURVEY_INFO_NOISE_DBM;
1340         survey->noise = wl->noise;
1341
1342         return 0;
1343 }
1344
1345 /* can't be const, mac80211 writes to this */
1346 static struct ieee80211_supported_band wl1251_band_2ghz = {
1347         .channels = wl1251_channels,
1348         .n_channels = ARRAY_SIZE(wl1251_channels),
1349         .bitrates = wl1251_rates,
1350         .n_bitrates = ARRAY_SIZE(wl1251_rates),
1351 };
1352
1353 static const struct ieee80211_ops wl1251_ops = {
1354         .start = wl1251_op_start,
1355         .stop = wl1251_op_stop,
1356         .add_interface = wl1251_op_add_interface,
1357         .remove_interface = wl1251_op_remove_interface,
1358         .config = wl1251_op_config,
1359         .prepare_multicast = wl1251_op_prepare_multicast,
1360         .configure_filter = wl1251_op_configure_filter,
1361         .tx = wl1251_op_tx,
1362         .set_key = wl1251_op_set_key,
1363         .hw_scan = wl1251_op_hw_scan,
1364         .bss_info_changed = wl1251_op_bss_info_changed,
1365         .set_rts_threshold = wl1251_op_set_rts_threshold,
1366         .conf_tx = wl1251_op_conf_tx,
1367         .get_survey = wl1251_op_get_survey,
1368 };
1369
1370 static int wl1251_read_eeprom_byte(struct wl1251 *wl, off_t offset, u8 *data)
1371 {
1372         unsigned long timeout;
1373
1374         wl1251_reg_write32(wl, EE_ADDR, offset);
1375         wl1251_reg_write32(wl, EE_CTL, EE_CTL_READ);
1376
1377         /* EE_CTL_READ clears when data is ready */
1378         timeout = jiffies + msecs_to_jiffies(100);
1379         while (1) {
1380                 if (!(wl1251_reg_read32(wl, EE_CTL) & EE_CTL_READ))
1381                         break;
1382
1383                 if (time_after(jiffies, timeout))
1384                         return -ETIMEDOUT;
1385
1386                 msleep(1);
1387         }
1388
1389         *data = wl1251_reg_read32(wl, EE_DATA);
1390         return 0;
1391 }
1392
1393 static int wl1251_read_eeprom(struct wl1251 *wl, off_t offset,
1394                               u8 *data, size_t len)
1395 {
1396         size_t i;
1397         int ret;
1398
1399         wl1251_reg_write32(wl, EE_START, 0);
1400
1401         for (i = 0; i < len; i++) {
1402                 ret = wl1251_read_eeprom_byte(wl, offset + i, &data[i]);
1403                 if (ret < 0)
1404                         return ret;
1405         }
1406
1407         return 0;
1408 }
1409
1410 static int wl1251_read_eeprom_mac(struct wl1251 *wl)
1411 {
1412         u8 mac[ETH_ALEN];
1413         int i, ret;
1414
1415         wl1251_set_partition(wl, 0, 0, REGISTERS_BASE, REGISTERS_DOWN_SIZE);
1416
1417         ret = wl1251_read_eeprom(wl, 0x1c, mac, sizeof(mac));
1418         if (ret < 0) {
1419                 wl1251_warning("failed to read MAC address from EEPROM");
1420                 return ret;
1421         }
1422
1423         /* MAC is stored in reverse order */
1424         for (i = 0; i < ETH_ALEN; i++)
1425                 wl->mac_addr[i] = mac[ETH_ALEN - i - 1];
1426
1427         return 0;
1428 }
1429
1430 #define NVS_OFF_MAC_LEN 0x19
1431 #define NVS_OFF_MAC_ADDR_LO 0x1a
1432 #define NVS_OFF_MAC_ADDR_HI 0x1b
1433 #define NVS_OFF_MAC_DATA 0x1c
1434
1435 static int wl1251_check_nvs_mac(struct wl1251 *wl)
1436 {
1437         if (wl->nvs_len < 0x24)
1438                 return -ENODATA;
1439
1440         /* length is 2 and data address is 0x546c (ANDed with 0xfffe) */
1441         if (wl->nvs[NVS_OFF_MAC_LEN] != 2 ||
1442             wl->nvs[NVS_OFF_MAC_ADDR_LO] != 0x6d ||
1443             wl->nvs[NVS_OFF_MAC_ADDR_HI] != 0x54)
1444                 return -EINVAL;
1445
1446         return 0;
1447 }
1448
1449 static int wl1251_read_nvs_mac(struct wl1251 *wl)
1450 {
1451         u8 mac[ETH_ALEN];
1452         int i, ret;
1453
1454         ret = wl1251_check_nvs_mac(wl);
1455         if (ret)
1456                 return ret;
1457
1458         /* MAC is stored in reverse order */
1459         for (i = 0; i < ETH_ALEN; i++)
1460                 mac[i] = wl->nvs[NVS_OFF_MAC_DATA + ETH_ALEN - i - 1];
1461
1462         /* 00:00:20:07:03:09 is in example file wl1251-nvs.bin, so invalid */
1463         if (ether_addr_equal_unaligned(mac, "\x00\x00\x20\x07\x03\x09"))
1464                 return -EINVAL;
1465
1466         memcpy(wl->mac_addr, mac, ETH_ALEN);
1467         return 0;
1468 }
1469
1470 static int wl1251_write_nvs_mac(struct wl1251 *wl)
1471 {
1472         int i, ret;
1473
1474         ret = wl1251_check_nvs_mac(wl);
1475         if (ret)
1476                 return ret;
1477
1478         /* MAC is stored in reverse order */
1479         for (i = 0; i < ETH_ALEN; i++)
1480                 wl->nvs[NVS_OFF_MAC_DATA + i] = wl->mac_addr[ETH_ALEN - i - 1];
1481
1482         return 0;
1483 }
1484
1485 static int wl1251_register_hw(struct wl1251 *wl)
1486 {
1487         int ret;
1488
1489         if (wl->mac80211_registered)
1490                 return 0;
1491
1492         SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
1493
1494         ret = ieee80211_register_hw(wl->hw);
1495         if (ret < 0) {
1496                 wl1251_error("unable to register mac80211 hw: %d", ret);
1497                 return ret;
1498         }
1499
1500         wl->mac80211_registered = true;
1501
1502         wl1251_notice("loaded");
1503
1504         return 0;
1505 }
1506
1507 int wl1251_init_ieee80211(struct wl1251 *wl)
1508 {
1509         int ret;
1510
1511         /* The tx descriptor buffer and the TKIP space */
1512         wl->hw->extra_tx_headroom = sizeof(struct tx_double_buffer_desc)
1513                 + WL1251_TKIP_IV_SPACE;
1514
1515         /* unit us */
1516         /* FIXME: find a proper value */
1517
1518         ieee80211_hw_set(wl->hw, SIGNAL_DBM);
1519         ieee80211_hw_set(wl->hw, SUPPORTS_PS);
1520
1521         wl->hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
1522                                          BIT(NL80211_IFTYPE_ADHOC);
1523         wl->hw->wiphy->max_scan_ssids = 1;
1524
1525         /* We set max_scan_ie_len to a random value to make wpa_supplicant scans not
1526          * fail, as the driver will the ignore the extra passed IEs anyway
1527          */
1528         wl->hw->wiphy->max_scan_ie_len = 512;
1529
1530         wl->hw->wiphy->bands[NL80211_BAND_2GHZ] = &wl1251_band_2ghz;
1531
1532         wl->hw->queues = 4;
1533
1534         if (wl->nvs == NULL && !wl->use_eeprom) {
1535                 ret = wl1251_fetch_nvs(wl);
1536                 if (ret < 0)
1537                         goto out;
1538         }
1539
1540         if (wl->use_eeprom)
1541                 ret = wl1251_read_eeprom_mac(wl);
1542         else
1543                 ret = wl1251_read_nvs_mac(wl);
1544
1545         if (ret == 0 && !is_valid_ether_addr(wl->mac_addr))
1546                 ret = -EINVAL;
1547
1548         if (ret < 0) {
1549                 /*
1550                  * In case our MAC address is not correctly set,
1551                  * we use a random but Nokia MAC.
1552                  */
1553                 static const u8 nokia_oui[3] = {0x00, 0x1f, 0xdf};
1554                 memcpy(wl->mac_addr, nokia_oui, 3);
1555                 get_random_bytes(wl->mac_addr + 3, 3);
1556                 if (!wl->use_eeprom)
1557                         wl1251_write_nvs_mac(wl);
1558                 wl1251_warning("MAC address in eeprom or nvs data is not valid");
1559                 wl1251_warning("Setting random MAC address: %pM", wl->mac_addr);
1560         }
1561
1562         ret = wl1251_register_hw(wl);
1563         if (ret)
1564                 goto out;
1565
1566         wl1251_debugfs_init(wl);
1567         wl1251_notice("initialized");
1568
1569         ret = 0;
1570
1571 out:
1572         return ret;
1573 }
1574 EXPORT_SYMBOL_GPL(wl1251_init_ieee80211);
1575
1576 struct ieee80211_hw *wl1251_alloc_hw(void)
1577 {
1578         struct ieee80211_hw *hw;
1579         struct wl1251 *wl;
1580         int i;
1581
1582         hw = ieee80211_alloc_hw(sizeof(*wl), &wl1251_ops);
1583         if (!hw) {
1584                 wl1251_error("could not alloc ieee80211_hw");
1585                 return ERR_PTR(-ENOMEM);
1586         }
1587
1588         wl = hw->priv;
1589         memset(wl, 0, sizeof(*wl));
1590
1591         wl->hw = hw;
1592
1593         wl->data_in_count = 0;
1594
1595         skb_queue_head_init(&wl->tx_queue);
1596
1597         INIT_DELAYED_WORK(&wl->elp_work, wl1251_elp_work);
1598         wl->channel = WL1251_DEFAULT_CHANNEL;
1599         wl->monitor_present = false;
1600         wl->joined = false;
1601         wl->scanning = false;
1602         wl->bss_type = MAX_BSS_TYPE;
1603         wl->default_key = 0;
1604         wl->listen_int = 1;
1605         wl->rx_counter = 0;
1606         wl->rx_handled = 0;
1607         wl->rx_current_buffer = 0;
1608         wl->rx_last_id = 0;
1609         wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
1610         wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
1611         wl->elp = false;
1612         wl->station_mode = STATION_ACTIVE_MODE;
1613         wl->psm_requested = false;
1614         wl->psm_entry_retry = 0;
1615         wl->tx_queue_stopped = false;
1616         wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
1617         wl->rssi_thold = 0;
1618         wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1619         wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1620         wl->vif = NULL;
1621
1622         for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++)
1623                 wl->tx_frames[i] = NULL;
1624
1625         wl->next_tx_complete = 0;
1626
1627         INIT_WORK(&wl->irq_work, wl1251_irq_work);
1628         INIT_WORK(&wl->tx_work, wl1251_tx_work);
1629
1630         wl->state = WL1251_STATE_OFF;
1631         mutex_init(&wl->mutex);
1632         spin_lock_init(&wl->wl_lock);
1633
1634         wl->tx_mgmt_frm_rate = DEFAULT_HW_GEN_TX_RATE;
1635         wl->tx_mgmt_frm_mod = DEFAULT_HW_GEN_MODULATION_TYPE;
1636
1637         wl->rx_descriptor = kmalloc(sizeof(*wl->rx_descriptor), GFP_KERNEL);
1638         if (!wl->rx_descriptor) {
1639                 wl1251_error("could not allocate memory for rx descriptor");
1640                 ieee80211_free_hw(hw);
1641                 return ERR_PTR(-ENOMEM);
1642         }
1643
1644         return hw;
1645 }
1646 EXPORT_SYMBOL_GPL(wl1251_alloc_hw);
1647
1648 int wl1251_free_hw(struct wl1251 *wl)
1649 {
1650         ieee80211_unregister_hw(wl->hw);
1651
1652         wl1251_debugfs_exit(wl);
1653
1654         kfree(wl->target_mem_map);
1655         kfree(wl->data_path);
1656         vfree(wl->fw);
1657         wl->fw = NULL;
1658         kfree(wl->nvs);
1659         wl->nvs = NULL;
1660
1661         kfree(wl->rx_descriptor);
1662         wl->rx_descriptor = NULL;
1663
1664         ieee80211_free_hw(wl->hw);
1665
1666         return 0;
1667 }
1668 EXPORT_SYMBOL_GPL(wl1251_free_hw);
1669
1670 MODULE_DESCRIPTION("TI wl1251 Wireless LAN Driver Core");
1671 MODULE_LICENSE("GPL");
1672 MODULE_AUTHOR("Kalle Valo <kvalo@adurom.com>");
1673 MODULE_FIRMWARE(WL1251_FW_NAME);
1674 MODULE_FIRMWARE(WL1251_NVS_NAME);