xref: /openbmc/linux/drivers/net/wireless/st/cw1200/scan.c (revision 560424e9a979a7b460055bda497bb4522ba5cc87)
1*560424e9SKalle Valo /*
2*560424e9SKalle Valo  * Scan implementation for ST-Ericsson CW1200 mac80211 drivers
3*560424e9SKalle Valo  *
4*560424e9SKalle Valo  * Copyright (c) 2010, ST-Ericsson
5*560424e9SKalle Valo  * Author: Dmitry Tarnyagin <dmitry.tarnyagin@lockless.no>
6*560424e9SKalle Valo  *
7*560424e9SKalle Valo  * This program is free software; you can redistribute it and/or modify
8*560424e9SKalle Valo  * it under the terms of the GNU General Public License version 2 as
9*560424e9SKalle Valo  * published by the Free Software Foundation.
10*560424e9SKalle Valo  */
11*560424e9SKalle Valo 
12*560424e9SKalle Valo #include <linux/sched.h>
13*560424e9SKalle Valo #include "cw1200.h"
14*560424e9SKalle Valo #include "scan.h"
15*560424e9SKalle Valo #include "sta.h"
16*560424e9SKalle Valo #include "pm.h"
17*560424e9SKalle Valo 
18*560424e9SKalle Valo static void cw1200_scan_restart_delayed(struct cw1200_common *priv);
19*560424e9SKalle Valo 
20*560424e9SKalle Valo static int cw1200_scan_start(struct cw1200_common *priv, struct wsm_scan *scan)
21*560424e9SKalle Valo {
22*560424e9SKalle Valo 	int ret, i;
23*560424e9SKalle Valo 	int tmo = 2000;
24*560424e9SKalle Valo 
25*560424e9SKalle Valo 	switch (priv->join_status) {
26*560424e9SKalle Valo 	case CW1200_JOIN_STATUS_PRE_STA:
27*560424e9SKalle Valo 	case CW1200_JOIN_STATUS_JOINING:
28*560424e9SKalle Valo 		return -EBUSY;
29*560424e9SKalle Valo 	default:
30*560424e9SKalle Valo 		break;
31*560424e9SKalle Valo 	}
32*560424e9SKalle Valo 
33*560424e9SKalle Valo 	wiphy_dbg(priv->hw->wiphy, "[SCAN] hw req, type %d, %d channels, flags: 0x%x.\n",
34*560424e9SKalle Valo 		  scan->type, scan->num_channels, scan->flags);
35*560424e9SKalle Valo 
36*560424e9SKalle Valo 	for (i = 0; i < scan->num_channels; ++i)
37*560424e9SKalle Valo 		tmo += scan->ch[i].max_chan_time + 10;
38*560424e9SKalle Valo 
39*560424e9SKalle Valo 	cancel_delayed_work_sync(&priv->clear_recent_scan_work);
40*560424e9SKalle Valo 	atomic_set(&priv->scan.in_progress, 1);
41*560424e9SKalle Valo 	atomic_set(&priv->recent_scan, 1);
42*560424e9SKalle Valo 	cw1200_pm_stay_awake(&priv->pm_state, msecs_to_jiffies(tmo));
43*560424e9SKalle Valo 	queue_delayed_work(priv->workqueue, &priv->scan.timeout,
44*560424e9SKalle Valo 			   msecs_to_jiffies(tmo));
45*560424e9SKalle Valo 	ret = wsm_scan(priv, scan);
46*560424e9SKalle Valo 	if (ret) {
47*560424e9SKalle Valo 		atomic_set(&priv->scan.in_progress, 0);
48*560424e9SKalle Valo 		cancel_delayed_work_sync(&priv->scan.timeout);
49*560424e9SKalle Valo 		cw1200_scan_restart_delayed(priv);
50*560424e9SKalle Valo 	}
51*560424e9SKalle Valo 	return ret;
52*560424e9SKalle Valo }
53*560424e9SKalle Valo 
54*560424e9SKalle Valo int cw1200_hw_scan(struct ieee80211_hw *hw,
55*560424e9SKalle Valo 		   struct ieee80211_vif *vif,
56*560424e9SKalle Valo 		   struct ieee80211_scan_request *hw_req)
57*560424e9SKalle Valo {
58*560424e9SKalle Valo 	struct cw1200_common *priv = hw->priv;
59*560424e9SKalle Valo 	struct cfg80211_scan_request *req = &hw_req->req;
60*560424e9SKalle Valo 	struct wsm_template_frame frame = {
61*560424e9SKalle Valo 		.frame_type = WSM_FRAME_TYPE_PROBE_REQUEST,
62*560424e9SKalle Valo 	};
63*560424e9SKalle Valo 	int i, ret;
64*560424e9SKalle Valo 
65*560424e9SKalle Valo 	if (!priv->vif)
66*560424e9SKalle Valo 		return -EINVAL;
67*560424e9SKalle Valo 
68*560424e9SKalle Valo 	/* Scan when P2P_GO corrupt firmware MiniAP mode */
69*560424e9SKalle Valo 	if (priv->join_status == CW1200_JOIN_STATUS_AP)
70*560424e9SKalle Valo 		return -EOPNOTSUPP;
71*560424e9SKalle Valo 
72*560424e9SKalle Valo 	if (req->n_ssids == 1 && !req->ssids[0].ssid_len)
73*560424e9SKalle Valo 		req->n_ssids = 0;
74*560424e9SKalle Valo 
75*560424e9SKalle Valo 	wiphy_dbg(hw->wiphy, "[SCAN] Scan request for %d SSIDs.\n",
76*560424e9SKalle Valo 		  req->n_ssids);
77*560424e9SKalle Valo 
78*560424e9SKalle Valo 	if (req->n_ssids > WSM_SCAN_MAX_NUM_OF_SSIDS)
79*560424e9SKalle Valo 		return -EINVAL;
80*560424e9SKalle Valo 
81*560424e9SKalle Valo 	frame.skb = ieee80211_probereq_get(hw, priv->vif->addr, NULL, 0,
82*560424e9SKalle Valo 		req->ie_len);
83*560424e9SKalle Valo 	if (!frame.skb)
84*560424e9SKalle Valo 		return -ENOMEM;
85*560424e9SKalle Valo 
86*560424e9SKalle Valo 	if (req->ie_len)
87*560424e9SKalle Valo 		memcpy(skb_put(frame.skb, req->ie_len), req->ie, req->ie_len);
88*560424e9SKalle Valo 
89*560424e9SKalle Valo 	/* will be unlocked in cw1200_scan_work() */
90*560424e9SKalle Valo 	down(&priv->scan.lock);
91*560424e9SKalle Valo 	mutex_lock(&priv->conf_mutex);
92*560424e9SKalle Valo 
93*560424e9SKalle Valo 	ret = wsm_set_template_frame(priv, &frame);
94*560424e9SKalle Valo 	if (!ret) {
95*560424e9SKalle Valo 		/* Host want to be the probe responder. */
96*560424e9SKalle Valo 		ret = wsm_set_probe_responder(priv, true);
97*560424e9SKalle Valo 	}
98*560424e9SKalle Valo 	if (ret) {
99*560424e9SKalle Valo 		mutex_unlock(&priv->conf_mutex);
100*560424e9SKalle Valo 		up(&priv->scan.lock);
101*560424e9SKalle Valo 		dev_kfree_skb(frame.skb);
102*560424e9SKalle Valo 		return ret;
103*560424e9SKalle Valo 	}
104*560424e9SKalle Valo 
105*560424e9SKalle Valo 	wsm_lock_tx(priv);
106*560424e9SKalle Valo 
107*560424e9SKalle Valo 	BUG_ON(priv->scan.req);
108*560424e9SKalle Valo 	priv->scan.req = req;
109*560424e9SKalle Valo 	priv->scan.n_ssids = 0;
110*560424e9SKalle Valo 	priv->scan.status = 0;
111*560424e9SKalle Valo 	priv->scan.begin = &req->channels[0];
112*560424e9SKalle Valo 	priv->scan.curr = priv->scan.begin;
113*560424e9SKalle Valo 	priv->scan.end = &req->channels[req->n_channels];
114*560424e9SKalle Valo 	priv->scan.output_power = priv->output_power;
115*560424e9SKalle Valo 
116*560424e9SKalle Valo 	for (i = 0; i < req->n_ssids; ++i) {
117*560424e9SKalle Valo 		struct wsm_ssid *dst = &priv->scan.ssids[priv->scan.n_ssids];
118*560424e9SKalle Valo 		memcpy(&dst->ssid[0], req->ssids[i].ssid, sizeof(dst->ssid));
119*560424e9SKalle Valo 		dst->length = req->ssids[i].ssid_len;
120*560424e9SKalle Valo 		++priv->scan.n_ssids;
121*560424e9SKalle Valo 	}
122*560424e9SKalle Valo 
123*560424e9SKalle Valo 	mutex_unlock(&priv->conf_mutex);
124*560424e9SKalle Valo 
125*560424e9SKalle Valo 	if (frame.skb)
126*560424e9SKalle Valo 		dev_kfree_skb(frame.skb);
127*560424e9SKalle Valo 	queue_work(priv->workqueue, &priv->scan.work);
128*560424e9SKalle Valo 	return 0;
129*560424e9SKalle Valo }
130*560424e9SKalle Valo 
131*560424e9SKalle Valo void cw1200_scan_work(struct work_struct *work)
132*560424e9SKalle Valo {
133*560424e9SKalle Valo 	struct cw1200_common *priv = container_of(work, struct cw1200_common,
134*560424e9SKalle Valo 							scan.work);
135*560424e9SKalle Valo 	struct ieee80211_channel **it;
136*560424e9SKalle Valo 	struct wsm_scan scan = {
137*560424e9SKalle Valo 		.type = WSM_SCAN_TYPE_FOREGROUND,
138*560424e9SKalle Valo 		.flags = WSM_SCAN_FLAG_SPLIT_METHOD,
139*560424e9SKalle Valo 	};
140*560424e9SKalle Valo 	bool first_run = (priv->scan.begin == priv->scan.curr &&
141*560424e9SKalle Valo 			  priv->scan.begin != priv->scan.end);
142*560424e9SKalle Valo 	int i;
143*560424e9SKalle Valo 
144*560424e9SKalle Valo 	if (first_run) {
145*560424e9SKalle Valo 		/* Firmware gets crazy if scan request is sent
146*560424e9SKalle Valo 		 * when STA is joined but not yet associated.
147*560424e9SKalle Valo 		 * Force unjoin in this case.
148*560424e9SKalle Valo 		 */
149*560424e9SKalle Valo 		if (cancel_delayed_work_sync(&priv->join_timeout) > 0)
150*560424e9SKalle Valo 			cw1200_join_timeout(&priv->join_timeout.work);
151*560424e9SKalle Valo 	}
152*560424e9SKalle Valo 
153*560424e9SKalle Valo 	mutex_lock(&priv->conf_mutex);
154*560424e9SKalle Valo 
155*560424e9SKalle Valo 	if (first_run) {
156*560424e9SKalle Valo 		if (priv->join_status == CW1200_JOIN_STATUS_STA &&
157*560424e9SKalle Valo 		    !(priv->powersave_mode.mode & WSM_PSM_PS)) {
158*560424e9SKalle Valo 			struct wsm_set_pm pm = priv->powersave_mode;
159*560424e9SKalle Valo 			pm.mode = WSM_PSM_PS;
160*560424e9SKalle Valo 			cw1200_set_pm(priv, &pm);
161*560424e9SKalle Valo 		} else if (priv->join_status == CW1200_JOIN_STATUS_MONITOR) {
162*560424e9SKalle Valo 			/* FW bug: driver has to restart p2p-dev mode
163*560424e9SKalle Valo 			 * after scan
164*560424e9SKalle Valo 			 */
165*560424e9SKalle Valo 			cw1200_disable_listening(priv);
166*560424e9SKalle Valo 		}
167*560424e9SKalle Valo 	}
168*560424e9SKalle Valo 
169*560424e9SKalle Valo 	if (!priv->scan.req || (priv->scan.curr == priv->scan.end)) {
170*560424e9SKalle Valo 		if (priv->scan.output_power != priv->output_power)
171*560424e9SKalle Valo 			wsm_set_output_power(priv, priv->output_power * 10);
172*560424e9SKalle Valo 		if (priv->join_status == CW1200_JOIN_STATUS_STA &&
173*560424e9SKalle Valo 		    !(priv->powersave_mode.mode & WSM_PSM_PS))
174*560424e9SKalle Valo 			cw1200_set_pm(priv, &priv->powersave_mode);
175*560424e9SKalle Valo 
176*560424e9SKalle Valo 		if (priv->scan.status < 0)
177*560424e9SKalle Valo 			wiphy_warn(priv->hw->wiphy,
178*560424e9SKalle Valo 				   "[SCAN] Scan failed (%d).\n",
179*560424e9SKalle Valo 				   priv->scan.status);
180*560424e9SKalle Valo 		else if (priv->scan.req)
181*560424e9SKalle Valo 			wiphy_dbg(priv->hw->wiphy,
182*560424e9SKalle Valo 				  "[SCAN] Scan completed.\n");
183*560424e9SKalle Valo 		else
184*560424e9SKalle Valo 			wiphy_dbg(priv->hw->wiphy,
185*560424e9SKalle Valo 				  "[SCAN] Scan canceled.\n");
186*560424e9SKalle Valo 
187*560424e9SKalle Valo 		priv->scan.req = NULL;
188*560424e9SKalle Valo 		cw1200_scan_restart_delayed(priv);
189*560424e9SKalle Valo 		wsm_unlock_tx(priv);
190*560424e9SKalle Valo 		mutex_unlock(&priv->conf_mutex);
191*560424e9SKalle Valo 		ieee80211_scan_completed(priv->hw, priv->scan.status ? 1 : 0);
192*560424e9SKalle Valo 		up(&priv->scan.lock);
193*560424e9SKalle Valo 		return;
194*560424e9SKalle Valo 	} else {
195*560424e9SKalle Valo 		struct ieee80211_channel *first = *priv->scan.curr;
196*560424e9SKalle Valo 		for (it = priv->scan.curr + 1, i = 1;
197*560424e9SKalle Valo 		     it != priv->scan.end && i < WSM_SCAN_MAX_NUM_OF_CHANNELS;
198*560424e9SKalle Valo 		     ++it, ++i) {
199*560424e9SKalle Valo 			if ((*it)->band != first->band)
200*560424e9SKalle Valo 				break;
201*560424e9SKalle Valo 			if (((*it)->flags ^ first->flags) &
202*560424e9SKalle Valo 					IEEE80211_CHAN_NO_IR)
203*560424e9SKalle Valo 				break;
204*560424e9SKalle Valo 			if (!(first->flags & IEEE80211_CHAN_NO_IR) &&
205*560424e9SKalle Valo 			    (*it)->max_power != first->max_power)
206*560424e9SKalle Valo 				break;
207*560424e9SKalle Valo 		}
208*560424e9SKalle Valo 		scan.band = first->band;
209*560424e9SKalle Valo 
210*560424e9SKalle Valo 		if (priv->scan.req->no_cck)
211*560424e9SKalle Valo 			scan.max_tx_rate = WSM_TRANSMIT_RATE_6;
212*560424e9SKalle Valo 		else
213*560424e9SKalle Valo 			scan.max_tx_rate = WSM_TRANSMIT_RATE_1;
214*560424e9SKalle Valo 		scan.num_probes =
215*560424e9SKalle Valo 			(first->flags & IEEE80211_CHAN_NO_IR) ? 0 : 2;
216*560424e9SKalle Valo 		scan.num_ssids = priv->scan.n_ssids;
217*560424e9SKalle Valo 		scan.ssids = &priv->scan.ssids[0];
218*560424e9SKalle Valo 		scan.num_channels = it - priv->scan.curr;
219*560424e9SKalle Valo 		/* TODO: Is it optimal? */
220*560424e9SKalle Valo 		scan.probe_delay = 100;
221*560424e9SKalle Valo 		/* It is not stated in WSM specification, however
222*560424e9SKalle Valo 		 * FW team says that driver may not use FG scan
223*560424e9SKalle Valo 		 * when joined.
224*560424e9SKalle Valo 		 */
225*560424e9SKalle Valo 		if (priv->join_status == CW1200_JOIN_STATUS_STA) {
226*560424e9SKalle Valo 			scan.type = WSM_SCAN_TYPE_BACKGROUND;
227*560424e9SKalle Valo 			scan.flags = WSM_SCAN_FLAG_FORCE_BACKGROUND;
228*560424e9SKalle Valo 		}
229*560424e9SKalle Valo 		scan.ch = kzalloc(
230*560424e9SKalle Valo 			sizeof(struct wsm_scan_ch) * (it - priv->scan.curr),
231*560424e9SKalle Valo 			GFP_KERNEL);
232*560424e9SKalle Valo 		if (!scan.ch) {
233*560424e9SKalle Valo 			priv->scan.status = -ENOMEM;
234*560424e9SKalle Valo 			goto fail;
235*560424e9SKalle Valo 		}
236*560424e9SKalle Valo 		for (i = 0; i < scan.num_channels; ++i) {
237*560424e9SKalle Valo 			scan.ch[i].number = priv->scan.curr[i]->hw_value;
238*560424e9SKalle Valo 			if (priv->scan.curr[i]->flags & IEEE80211_CHAN_NO_IR) {
239*560424e9SKalle Valo 				scan.ch[i].min_chan_time = 50;
240*560424e9SKalle Valo 				scan.ch[i].max_chan_time = 100;
241*560424e9SKalle Valo 			} else {
242*560424e9SKalle Valo 				scan.ch[i].min_chan_time = 10;
243*560424e9SKalle Valo 				scan.ch[i].max_chan_time = 25;
244*560424e9SKalle Valo 			}
245*560424e9SKalle Valo 		}
246*560424e9SKalle Valo 		if (!(first->flags & IEEE80211_CHAN_NO_IR) &&
247*560424e9SKalle Valo 		    priv->scan.output_power != first->max_power) {
248*560424e9SKalle Valo 			priv->scan.output_power = first->max_power;
249*560424e9SKalle Valo 			wsm_set_output_power(priv,
250*560424e9SKalle Valo 					     priv->scan.output_power * 10);
251*560424e9SKalle Valo 		}
252*560424e9SKalle Valo 		priv->scan.status = cw1200_scan_start(priv, &scan);
253*560424e9SKalle Valo 		kfree(scan.ch);
254*560424e9SKalle Valo 		if (priv->scan.status)
255*560424e9SKalle Valo 			goto fail;
256*560424e9SKalle Valo 		priv->scan.curr = it;
257*560424e9SKalle Valo 	}
258*560424e9SKalle Valo 	mutex_unlock(&priv->conf_mutex);
259*560424e9SKalle Valo 	return;
260*560424e9SKalle Valo 
261*560424e9SKalle Valo fail:
262*560424e9SKalle Valo 	priv->scan.curr = priv->scan.end;
263*560424e9SKalle Valo 	mutex_unlock(&priv->conf_mutex);
264*560424e9SKalle Valo 	queue_work(priv->workqueue, &priv->scan.work);
265*560424e9SKalle Valo 	return;
266*560424e9SKalle Valo }
267*560424e9SKalle Valo 
268*560424e9SKalle Valo static void cw1200_scan_restart_delayed(struct cw1200_common *priv)
269*560424e9SKalle Valo {
270*560424e9SKalle Valo 	/* FW bug: driver has to restart p2p-dev mode after scan. */
271*560424e9SKalle Valo 	if (priv->join_status == CW1200_JOIN_STATUS_MONITOR) {
272*560424e9SKalle Valo 		cw1200_enable_listening(priv);
273*560424e9SKalle Valo 		cw1200_update_filtering(priv);
274*560424e9SKalle Valo 	}
275*560424e9SKalle Valo 
276*560424e9SKalle Valo 	if (priv->delayed_unjoin) {
277*560424e9SKalle Valo 		priv->delayed_unjoin = false;
278*560424e9SKalle Valo 		if (queue_work(priv->workqueue, &priv->unjoin_work) <= 0)
279*560424e9SKalle Valo 			wsm_unlock_tx(priv);
280*560424e9SKalle Valo 	} else if (priv->delayed_link_loss) {
281*560424e9SKalle Valo 			wiphy_dbg(priv->hw->wiphy, "[CQM] Requeue BSS loss.\n");
282*560424e9SKalle Valo 			priv->delayed_link_loss = 0;
283*560424e9SKalle Valo 			cw1200_cqm_bssloss_sm(priv, 1, 0, 0);
284*560424e9SKalle Valo 	}
285*560424e9SKalle Valo }
286*560424e9SKalle Valo 
287*560424e9SKalle Valo static void cw1200_scan_complete(struct cw1200_common *priv)
288*560424e9SKalle Valo {
289*560424e9SKalle Valo 	queue_delayed_work(priv->workqueue, &priv->clear_recent_scan_work, HZ);
290*560424e9SKalle Valo 	if (priv->scan.direct_probe) {
291*560424e9SKalle Valo 		wiphy_dbg(priv->hw->wiphy, "[SCAN] Direct probe complete.\n");
292*560424e9SKalle Valo 		cw1200_scan_restart_delayed(priv);
293*560424e9SKalle Valo 		priv->scan.direct_probe = 0;
294*560424e9SKalle Valo 		up(&priv->scan.lock);
295*560424e9SKalle Valo 		wsm_unlock_tx(priv);
296*560424e9SKalle Valo 	} else {
297*560424e9SKalle Valo 		cw1200_scan_work(&priv->scan.work);
298*560424e9SKalle Valo 	}
299*560424e9SKalle Valo }
300*560424e9SKalle Valo 
301*560424e9SKalle Valo void cw1200_scan_failed_cb(struct cw1200_common *priv)
302*560424e9SKalle Valo {
303*560424e9SKalle Valo 	if (priv->mode == NL80211_IFTYPE_UNSPECIFIED)
304*560424e9SKalle Valo 		/* STA is stopped. */
305*560424e9SKalle Valo 		return;
306*560424e9SKalle Valo 
307*560424e9SKalle Valo 	if (cancel_delayed_work_sync(&priv->scan.timeout) > 0) {
308*560424e9SKalle Valo 		priv->scan.status = -EIO;
309*560424e9SKalle Valo 		queue_delayed_work(priv->workqueue, &priv->scan.timeout, 0);
310*560424e9SKalle Valo 	}
311*560424e9SKalle Valo }
312*560424e9SKalle Valo 
313*560424e9SKalle Valo 
314*560424e9SKalle Valo void cw1200_scan_complete_cb(struct cw1200_common *priv,
315*560424e9SKalle Valo 				struct wsm_scan_complete *arg)
316*560424e9SKalle Valo {
317*560424e9SKalle Valo 	if (priv->mode == NL80211_IFTYPE_UNSPECIFIED)
318*560424e9SKalle Valo 		/* STA is stopped. */
319*560424e9SKalle Valo 		return;
320*560424e9SKalle Valo 
321*560424e9SKalle Valo 	if (cancel_delayed_work_sync(&priv->scan.timeout) > 0) {
322*560424e9SKalle Valo 		priv->scan.status = 1;
323*560424e9SKalle Valo 		queue_delayed_work(priv->workqueue, &priv->scan.timeout, 0);
324*560424e9SKalle Valo 	}
325*560424e9SKalle Valo }
326*560424e9SKalle Valo 
327*560424e9SKalle Valo void cw1200_clear_recent_scan_work(struct work_struct *work)
328*560424e9SKalle Valo {
329*560424e9SKalle Valo 	struct cw1200_common *priv =
330*560424e9SKalle Valo 		container_of(work, struct cw1200_common,
331*560424e9SKalle Valo 			     clear_recent_scan_work.work);
332*560424e9SKalle Valo 	atomic_xchg(&priv->recent_scan, 0);
333*560424e9SKalle Valo }
334*560424e9SKalle Valo 
335*560424e9SKalle Valo void cw1200_scan_timeout(struct work_struct *work)
336*560424e9SKalle Valo {
337*560424e9SKalle Valo 	struct cw1200_common *priv =
338*560424e9SKalle Valo 		container_of(work, struct cw1200_common, scan.timeout.work);
339*560424e9SKalle Valo 	if (atomic_xchg(&priv->scan.in_progress, 0)) {
340*560424e9SKalle Valo 		if (priv->scan.status > 0) {
341*560424e9SKalle Valo 			priv->scan.status = 0;
342*560424e9SKalle Valo 		} else if (!priv->scan.status) {
343*560424e9SKalle Valo 			wiphy_warn(priv->hw->wiphy,
344*560424e9SKalle Valo 				   "Timeout waiting for scan complete notification.\n");
345*560424e9SKalle Valo 			priv->scan.status = -ETIMEDOUT;
346*560424e9SKalle Valo 			priv->scan.curr = priv->scan.end;
347*560424e9SKalle Valo 			wsm_stop_scan(priv);
348*560424e9SKalle Valo 		}
349*560424e9SKalle Valo 		cw1200_scan_complete(priv);
350*560424e9SKalle Valo 	}
351*560424e9SKalle Valo }
352*560424e9SKalle Valo 
353*560424e9SKalle Valo void cw1200_probe_work(struct work_struct *work)
354*560424e9SKalle Valo {
355*560424e9SKalle Valo 	struct cw1200_common *priv =
356*560424e9SKalle Valo 		container_of(work, struct cw1200_common, scan.probe_work.work);
357*560424e9SKalle Valo 	u8 queue_id = cw1200_queue_get_queue_id(priv->pending_frame_id);
358*560424e9SKalle Valo 	struct cw1200_queue *queue = &priv->tx_queue[queue_id];
359*560424e9SKalle Valo 	const struct cw1200_txpriv *txpriv;
360*560424e9SKalle Valo 	struct wsm_tx *wsm;
361*560424e9SKalle Valo 	struct wsm_template_frame frame = {
362*560424e9SKalle Valo 		.frame_type = WSM_FRAME_TYPE_PROBE_REQUEST,
363*560424e9SKalle Valo 	};
364*560424e9SKalle Valo 	struct wsm_ssid ssids[1] = {{
365*560424e9SKalle Valo 		.length = 0,
366*560424e9SKalle Valo 	} };
367*560424e9SKalle Valo 	struct wsm_scan_ch ch[1] = {{
368*560424e9SKalle Valo 		.min_chan_time = 0,
369*560424e9SKalle Valo 		.max_chan_time = 10,
370*560424e9SKalle Valo 	} };
371*560424e9SKalle Valo 	struct wsm_scan scan = {
372*560424e9SKalle Valo 		.type = WSM_SCAN_TYPE_FOREGROUND,
373*560424e9SKalle Valo 		.num_probes = 1,
374*560424e9SKalle Valo 		.probe_delay = 0,
375*560424e9SKalle Valo 		.num_channels = 1,
376*560424e9SKalle Valo 		.ssids = ssids,
377*560424e9SKalle Valo 		.ch = ch,
378*560424e9SKalle Valo 	};
379*560424e9SKalle Valo 	u8 *ies;
380*560424e9SKalle Valo 	size_t ies_len;
381*560424e9SKalle Valo 	int ret;
382*560424e9SKalle Valo 
383*560424e9SKalle Valo 	wiphy_dbg(priv->hw->wiphy, "[SCAN] Direct probe work.\n");
384*560424e9SKalle Valo 
385*560424e9SKalle Valo 	mutex_lock(&priv->conf_mutex);
386*560424e9SKalle Valo 	if (down_trylock(&priv->scan.lock)) {
387*560424e9SKalle Valo 		/* Scan is already in progress. Requeue self. */
388*560424e9SKalle Valo 		schedule();
389*560424e9SKalle Valo 		queue_delayed_work(priv->workqueue, &priv->scan.probe_work,
390*560424e9SKalle Valo 				   msecs_to_jiffies(100));
391*560424e9SKalle Valo 		mutex_unlock(&priv->conf_mutex);
392*560424e9SKalle Valo 		return;
393*560424e9SKalle Valo 	}
394*560424e9SKalle Valo 
395*560424e9SKalle Valo 	/* Make sure we still have a pending probe req */
396*560424e9SKalle Valo 	if (cw1200_queue_get_skb(queue,	priv->pending_frame_id,
397*560424e9SKalle Valo 				 &frame.skb, &txpriv)) {
398*560424e9SKalle Valo 		up(&priv->scan.lock);
399*560424e9SKalle Valo 		mutex_unlock(&priv->conf_mutex);
400*560424e9SKalle Valo 		wsm_unlock_tx(priv);
401*560424e9SKalle Valo 		return;
402*560424e9SKalle Valo 	}
403*560424e9SKalle Valo 	wsm = (struct wsm_tx *)frame.skb->data;
404*560424e9SKalle Valo 	scan.max_tx_rate = wsm->max_tx_rate;
405*560424e9SKalle Valo 	scan.band = (priv->channel->band == IEEE80211_BAND_5GHZ) ?
406*560424e9SKalle Valo 		WSM_PHY_BAND_5G : WSM_PHY_BAND_2_4G;
407*560424e9SKalle Valo 	if (priv->join_status == CW1200_JOIN_STATUS_STA ||
408*560424e9SKalle Valo 	    priv->join_status == CW1200_JOIN_STATUS_IBSS) {
409*560424e9SKalle Valo 		scan.type = WSM_SCAN_TYPE_BACKGROUND;
410*560424e9SKalle Valo 		scan.flags = WSM_SCAN_FLAG_FORCE_BACKGROUND;
411*560424e9SKalle Valo 	}
412*560424e9SKalle Valo 	ch[0].number = priv->channel->hw_value;
413*560424e9SKalle Valo 
414*560424e9SKalle Valo 	skb_pull(frame.skb, txpriv->offset);
415*560424e9SKalle Valo 
416*560424e9SKalle Valo 	ies = &frame.skb->data[sizeof(struct ieee80211_hdr_3addr)];
417*560424e9SKalle Valo 	ies_len = frame.skb->len - sizeof(struct ieee80211_hdr_3addr);
418*560424e9SKalle Valo 
419*560424e9SKalle Valo 	if (ies_len) {
420*560424e9SKalle Valo 		u8 *ssidie =
421*560424e9SKalle Valo 			(u8 *)cfg80211_find_ie(WLAN_EID_SSID, ies, ies_len);
422*560424e9SKalle Valo 		if (ssidie && ssidie[1] && ssidie[1] <= sizeof(ssids[0].ssid)) {
423*560424e9SKalle Valo 			u8 *nextie = &ssidie[2 + ssidie[1]];
424*560424e9SKalle Valo 			/* Remove SSID from the IE list. It has to be provided
425*560424e9SKalle Valo 			 * as a separate argument in cw1200_scan_start call
426*560424e9SKalle Valo 			 */
427*560424e9SKalle Valo 
428*560424e9SKalle Valo 			/* Store SSID localy */
429*560424e9SKalle Valo 			ssids[0].length = ssidie[1];
430*560424e9SKalle Valo 			memcpy(ssids[0].ssid, &ssidie[2], ssids[0].length);
431*560424e9SKalle Valo 			scan.num_ssids = 1;
432*560424e9SKalle Valo 
433*560424e9SKalle Valo 			/* Remove SSID from IE list */
434*560424e9SKalle Valo 			ssidie[1] = 0;
435*560424e9SKalle Valo 			memmove(&ssidie[2], nextie, &ies[ies_len] - nextie);
436*560424e9SKalle Valo 			skb_trim(frame.skb, frame.skb->len - ssids[0].length);
437*560424e9SKalle Valo 		}
438*560424e9SKalle Valo 	}
439*560424e9SKalle Valo 
440*560424e9SKalle Valo 	/* FW bug: driver has to restart p2p-dev mode after scan */
441*560424e9SKalle Valo 	if (priv->join_status == CW1200_JOIN_STATUS_MONITOR)
442*560424e9SKalle Valo 		cw1200_disable_listening(priv);
443*560424e9SKalle Valo 	ret = wsm_set_template_frame(priv, &frame);
444*560424e9SKalle Valo 	priv->scan.direct_probe = 1;
445*560424e9SKalle Valo 	if (!ret) {
446*560424e9SKalle Valo 		wsm_flush_tx(priv);
447*560424e9SKalle Valo 		ret = cw1200_scan_start(priv, &scan);
448*560424e9SKalle Valo 	}
449*560424e9SKalle Valo 	mutex_unlock(&priv->conf_mutex);
450*560424e9SKalle Valo 
451*560424e9SKalle Valo 	skb_push(frame.skb, txpriv->offset);
452*560424e9SKalle Valo 	if (!ret)
453*560424e9SKalle Valo 		IEEE80211_SKB_CB(frame.skb)->flags |= IEEE80211_TX_STAT_ACK;
454*560424e9SKalle Valo 	BUG_ON(cw1200_queue_remove(queue, priv->pending_frame_id));
455*560424e9SKalle Valo 
456*560424e9SKalle Valo 	if (ret) {
457*560424e9SKalle Valo 		priv->scan.direct_probe = 0;
458*560424e9SKalle Valo 		up(&priv->scan.lock);
459*560424e9SKalle Valo 		wsm_unlock_tx(priv);
460*560424e9SKalle Valo 	}
461*560424e9SKalle Valo 
462*560424e9SKalle Valo 	return;
463*560424e9SKalle Valo }
464