1 /*
2  * Copyright (c) 2004-2011 Atheros Communications Inc.
3  * Copyright (c) 2011-2012 Qualcomm Atheros, Inc.
4  *
5  * Permission to use, copy, modify, and/or distribute this software for any
6  * purpose with or without fee is hereby granted, provided that the above
7  * copyright notice and this permission notice appear in all copies.
8  *
9  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16  */
17 
18 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
19 
20 #include <linux/moduleparam.h>
21 #include <linux/inetdevice.h>
22 #include <linux/export.h>
23 
24 #include "core.h"
25 #include "cfg80211.h"
26 #include "debug.h"
27 #include "hif-ops.h"
28 #include "testmode.h"
29 
30 #define RATETAB_ENT(_rate, _rateid, _flags) {   \
31 	.bitrate    = (_rate),                  \
32 	.flags      = (_flags),                 \
33 	.hw_value   = (_rateid),                \
34 }
35 
36 #define CHAN2G(_channel, _freq, _flags) {   \
37 	.band           = IEEE80211_BAND_2GHZ,  \
38 	.hw_value       = (_channel),           \
39 	.center_freq    = (_freq),              \
40 	.flags          = (_flags),             \
41 	.max_antenna_gain   = 0,                \
42 	.max_power      = 30,                   \
43 }
44 
45 #define CHAN5G(_channel, _flags) {		    \
46 	.band           = IEEE80211_BAND_5GHZ,      \
47 	.hw_value       = (_channel),               \
48 	.center_freq    = 5000 + (5 * (_channel)),  \
49 	.flags          = (_flags),                 \
50 	.max_antenna_gain   = 0,                    \
51 	.max_power      = 30,                       \
52 }
53 
54 #define DEFAULT_BG_SCAN_PERIOD 60
55 
56 struct ath6kl_cfg80211_match_probe_ssid {
57 	struct cfg80211_ssid ssid;
58 	u8 flag;
59 };
60 
61 static struct ieee80211_rate ath6kl_rates[] = {
62 	RATETAB_ENT(10, 0x1, 0),
63 	RATETAB_ENT(20, 0x2, 0),
64 	RATETAB_ENT(55, 0x4, 0),
65 	RATETAB_ENT(110, 0x8, 0),
66 	RATETAB_ENT(60, 0x10, 0),
67 	RATETAB_ENT(90, 0x20, 0),
68 	RATETAB_ENT(120, 0x40, 0),
69 	RATETAB_ENT(180, 0x80, 0),
70 	RATETAB_ENT(240, 0x100, 0),
71 	RATETAB_ENT(360, 0x200, 0),
72 	RATETAB_ENT(480, 0x400, 0),
73 	RATETAB_ENT(540, 0x800, 0),
74 };
75 
76 #define ath6kl_a_rates     (ath6kl_rates + 4)
77 #define ath6kl_a_rates_size    8
78 #define ath6kl_g_rates     (ath6kl_rates + 0)
79 #define ath6kl_g_rates_size    12
80 
81 #define ath6kl_g_htcap IEEE80211_HT_CAP_SGI_20
82 #define ath6kl_a_htcap (IEEE80211_HT_CAP_SUP_WIDTH_20_40 | \
83 			IEEE80211_HT_CAP_SGI_20		 | \
84 			IEEE80211_HT_CAP_SGI_40)
85 
86 static struct ieee80211_channel ath6kl_2ghz_channels[] = {
87 	CHAN2G(1, 2412, 0),
88 	CHAN2G(2, 2417, 0),
89 	CHAN2G(3, 2422, 0),
90 	CHAN2G(4, 2427, 0),
91 	CHAN2G(5, 2432, 0),
92 	CHAN2G(6, 2437, 0),
93 	CHAN2G(7, 2442, 0),
94 	CHAN2G(8, 2447, 0),
95 	CHAN2G(9, 2452, 0),
96 	CHAN2G(10, 2457, 0),
97 	CHAN2G(11, 2462, 0),
98 	CHAN2G(12, 2467, 0),
99 	CHAN2G(13, 2472, 0),
100 	CHAN2G(14, 2484, 0),
101 };
102 
103 static struct ieee80211_channel ath6kl_5ghz_a_channels[] = {
104 	CHAN5G(34, 0), CHAN5G(36, 0),
105 	CHAN5G(38, 0), CHAN5G(40, 0),
106 	CHAN5G(42, 0), CHAN5G(44, 0),
107 	CHAN5G(46, 0), CHAN5G(48, 0),
108 	CHAN5G(52, 0), CHAN5G(56, 0),
109 	CHAN5G(60, 0), CHAN5G(64, 0),
110 	CHAN5G(100, 0), CHAN5G(104, 0),
111 	CHAN5G(108, 0), CHAN5G(112, 0),
112 	CHAN5G(116, 0), CHAN5G(120, 0),
113 	CHAN5G(124, 0), CHAN5G(128, 0),
114 	CHAN5G(132, 0), CHAN5G(136, 0),
115 	CHAN5G(140, 0), CHAN5G(149, 0),
116 	CHAN5G(153, 0), CHAN5G(157, 0),
117 	CHAN5G(161, 0), CHAN5G(165, 0),
118 	CHAN5G(184, 0), CHAN5G(188, 0),
119 	CHAN5G(192, 0), CHAN5G(196, 0),
120 	CHAN5G(200, 0), CHAN5G(204, 0),
121 	CHAN5G(208, 0), CHAN5G(212, 0),
122 	CHAN5G(216, 0),
123 };
124 
125 static struct ieee80211_supported_band ath6kl_band_2ghz = {
126 	.n_channels = ARRAY_SIZE(ath6kl_2ghz_channels),
127 	.channels = ath6kl_2ghz_channels,
128 	.n_bitrates = ath6kl_g_rates_size,
129 	.bitrates = ath6kl_g_rates,
130 	.ht_cap.cap = ath6kl_g_htcap,
131 	.ht_cap.ht_supported = true,
132 };
133 
134 static struct ieee80211_supported_band ath6kl_band_5ghz = {
135 	.n_channels = ARRAY_SIZE(ath6kl_5ghz_a_channels),
136 	.channels = ath6kl_5ghz_a_channels,
137 	.n_bitrates = ath6kl_a_rates_size,
138 	.bitrates = ath6kl_a_rates,
139 	.ht_cap.cap = ath6kl_a_htcap,
140 	.ht_cap.ht_supported = true,
141 };
142 
143 #define CCKM_KRK_CIPHER_SUITE 0x004096ff /* use for KRK */
144 
145 /* returns true if scheduled scan was stopped */
146 static bool __ath6kl_cfg80211_sscan_stop(struct ath6kl_vif *vif)
147 {
148 	struct ath6kl *ar = vif->ar;
149 
150 	if (!test_and_clear_bit(SCHED_SCANNING, &vif->flags))
151 		return false;
152 
153 	del_timer_sync(&vif->sched_scan_timer);
154 
155 	if (ar->state == ATH6KL_STATE_RECOVERY)
156 		return true;
157 
158 	ath6kl_wmi_enable_sched_scan_cmd(ar->wmi, vif->fw_vif_idx, false);
159 
160 	return true;
161 }
162 
163 static void ath6kl_cfg80211_sscan_disable(struct ath6kl_vif *vif)
164 {
165 	struct ath6kl *ar = vif->ar;
166 	bool stopped;
167 
168 	stopped = __ath6kl_cfg80211_sscan_stop(vif);
169 
170 	if (!stopped)
171 		return;
172 
173 	cfg80211_sched_scan_stopped(ar->wiphy);
174 }
175 
176 static int ath6kl_set_wpa_version(struct ath6kl_vif *vif,
177 				  enum nl80211_wpa_versions wpa_version)
178 {
179 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: %u\n", __func__, wpa_version);
180 
181 	if (!wpa_version) {
182 		vif->auth_mode = NONE_AUTH;
183 	} else if (wpa_version & NL80211_WPA_VERSION_2) {
184 		vif->auth_mode = WPA2_AUTH;
185 	} else if (wpa_version & NL80211_WPA_VERSION_1) {
186 		vif->auth_mode = WPA_AUTH;
187 	} else {
188 		ath6kl_err("%s: %u not supported\n", __func__, wpa_version);
189 		return -ENOTSUPP;
190 	}
191 
192 	return 0;
193 }
194 
195 static int ath6kl_set_auth_type(struct ath6kl_vif *vif,
196 				enum nl80211_auth_type auth_type)
197 {
198 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: 0x%x\n", __func__, auth_type);
199 
200 	switch (auth_type) {
201 	case NL80211_AUTHTYPE_OPEN_SYSTEM:
202 		vif->dot11_auth_mode = OPEN_AUTH;
203 		break;
204 	case NL80211_AUTHTYPE_SHARED_KEY:
205 		vif->dot11_auth_mode = SHARED_AUTH;
206 		break;
207 	case NL80211_AUTHTYPE_NETWORK_EAP:
208 		vif->dot11_auth_mode = LEAP_AUTH;
209 		break;
210 
211 	case NL80211_AUTHTYPE_AUTOMATIC:
212 		vif->dot11_auth_mode = OPEN_AUTH | SHARED_AUTH;
213 		break;
214 
215 	default:
216 		ath6kl_err("%s: 0x%x not supported\n", __func__, auth_type);
217 		return -ENOTSUPP;
218 	}
219 
220 	return 0;
221 }
222 
223 static int ath6kl_set_cipher(struct ath6kl_vif *vif, u32 cipher, bool ucast)
224 {
225 	u8 *ar_cipher = ucast ? &vif->prwise_crypto : &vif->grp_crypto;
226 	u8 *ar_cipher_len = ucast ? &vif->prwise_crypto_len :
227 		&vif->grp_crypto_len;
228 
229 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: cipher 0x%x, ucast %u\n",
230 		   __func__, cipher, ucast);
231 
232 	switch (cipher) {
233 	case 0:
234 		/* our own hack to use value 0 as no crypto used */
235 		*ar_cipher = NONE_CRYPT;
236 		*ar_cipher_len = 0;
237 		break;
238 	case WLAN_CIPHER_SUITE_WEP40:
239 		*ar_cipher = WEP_CRYPT;
240 		*ar_cipher_len = 5;
241 		break;
242 	case WLAN_CIPHER_SUITE_WEP104:
243 		*ar_cipher = WEP_CRYPT;
244 		*ar_cipher_len = 13;
245 		break;
246 	case WLAN_CIPHER_SUITE_TKIP:
247 		*ar_cipher = TKIP_CRYPT;
248 		*ar_cipher_len = 0;
249 		break;
250 	case WLAN_CIPHER_SUITE_CCMP:
251 		*ar_cipher = AES_CRYPT;
252 		*ar_cipher_len = 0;
253 		break;
254 	case WLAN_CIPHER_SUITE_SMS4:
255 		*ar_cipher = WAPI_CRYPT;
256 		*ar_cipher_len = 0;
257 		break;
258 	default:
259 		ath6kl_err("cipher 0x%x not supported\n", cipher);
260 		return -ENOTSUPP;
261 	}
262 
263 	return 0;
264 }
265 
266 static void ath6kl_set_key_mgmt(struct ath6kl_vif *vif, u32 key_mgmt)
267 {
268 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: 0x%x\n", __func__, key_mgmt);
269 
270 	if (key_mgmt == WLAN_AKM_SUITE_PSK) {
271 		if (vif->auth_mode == WPA_AUTH)
272 			vif->auth_mode = WPA_PSK_AUTH;
273 		else if (vif->auth_mode == WPA2_AUTH)
274 			vif->auth_mode = WPA2_PSK_AUTH;
275 	} else if (key_mgmt == 0x00409600) {
276 		if (vif->auth_mode == WPA_AUTH)
277 			vif->auth_mode = WPA_AUTH_CCKM;
278 		else if (vif->auth_mode == WPA2_AUTH)
279 			vif->auth_mode = WPA2_AUTH_CCKM;
280 	} else if (key_mgmt != WLAN_AKM_SUITE_8021X) {
281 		vif->auth_mode = NONE_AUTH;
282 	}
283 }
284 
285 static bool ath6kl_cfg80211_ready(struct ath6kl_vif *vif)
286 {
287 	struct ath6kl *ar = vif->ar;
288 
289 	if (!test_bit(WMI_READY, &ar->flag)) {
290 		ath6kl_err("wmi is not ready\n");
291 		return false;
292 	}
293 
294 	if (!test_bit(WLAN_ENABLED, &vif->flags)) {
295 		ath6kl_err("wlan disabled\n");
296 		return false;
297 	}
298 
299 	return true;
300 }
301 
302 static bool ath6kl_is_wpa_ie(const u8 *pos)
303 {
304 	return pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 &&
305 		pos[2] == 0x00 && pos[3] == 0x50 &&
306 		pos[4] == 0xf2 && pos[5] == 0x01;
307 }
308 
309 static bool ath6kl_is_rsn_ie(const u8 *pos)
310 {
311 	return pos[0] == WLAN_EID_RSN;
312 }
313 
314 static bool ath6kl_is_wps_ie(const u8 *pos)
315 {
316 	return (pos[0] == WLAN_EID_VENDOR_SPECIFIC &&
317 		pos[1] >= 4 &&
318 		pos[2] == 0x00 && pos[3] == 0x50 && pos[4] == 0xf2 &&
319 		pos[5] == 0x04);
320 }
321 
322 static int ath6kl_set_assoc_req_ies(struct ath6kl_vif *vif, const u8 *ies,
323 				    size_t ies_len)
324 {
325 	struct ath6kl *ar = vif->ar;
326 	const u8 *pos;
327 	u8 *buf = NULL;
328 	size_t len = 0;
329 	int ret;
330 
331 	/*
332 	 * Clear previously set flag
333 	 */
334 
335 	ar->connect_ctrl_flags &= ~CONNECT_WPS_FLAG;
336 
337 	/*
338 	 * Filter out RSN/WPA IE(s)
339 	 */
340 
341 	if (ies && ies_len) {
342 		buf = kmalloc(ies_len, GFP_KERNEL);
343 		if (buf == NULL)
344 			return -ENOMEM;
345 		pos = ies;
346 
347 		while (pos + 1 < ies + ies_len) {
348 			if (pos + 2 + pos[1] > ies + ies_len)
349 				break;
350 			if (!(ath6kl_is_wpa_ie(pos) || ath6kl_is_rsn_ie(pos))) {
351 				memcpy(buf + len, pos, 2 + pos[1]);
352 				len += 2 + pos[1];
353 			}
354 
355 			if (ath6kl_is_wps_ie(pos))
356 				ar->connect_ctrl_flags |= CONNECT_WPS_FLAG;
357 
358 			pos += 2 + pos[1];
359 		}
360 	}
361 
362 	ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
363 				       WMI_FRAME_ASSOC_REQ, buf, len);
364 	kfree(buf);
365 	return ret;
366 }
367 
368 static int ath6kl_nliftype_to_drv_iftype(enum nl80211_iftype type, u8 *nw_type)
369 {
370 	switch (type) {
371 	case NL80211_IFTYPE_STATION:
372 	case NL80211_IFTYPE_P2P_CLIENT:
373 		*nw_type = INFRA_NETWORK;
374 		break;
375 	case NL80211_IFTYPE_ADHOC:
376 		*nw_type = ADHOC_NETWORK;
377 		break;
378 	case NL80211_IFTYPE_AP:
379 	case NL80211_IFTYPE_P2P_GO:
380 		*nw_type = AP_NETWORK;
381 		break;
382 	default:
383 		ath6kl_err("invalid interface type %u\n", type);
384 		return -ENOTSUPP;
385 	}
386 
387 	return 0;
388 }
389 
390 static bool ath6kl_is_valid_iftype(struct ath6kl *ar, enum nl80211_iftype type,
391 				   u8 *if_idx, u8 *nw_type)
392 {
393 	int i;
394 
395 	if (ath6kl_nliftype_to_drv_iftype(type, nw_type))
396 		return false;
397 
398 	if (ar->ibss_if_active || ((type == NL80211_IFTYPE_ADHOC) &&
399 				   ar->num_vif))
400 		return false;
401 
402 	if (type == NL80211_IFTYPE_STATION ||
403 	    type == NL80211_IFTYPE_AP || type == NL80211_IFTYPE_ADHOC) {
404 		for (i = 0; i < ar->vif_max; i++) {
405 			if ((ar->avail_idx_map >> i) & BIT(0)) {
406 				*if_idx = i;
407 				return true;
408 			}
409 		}
410 	}
411 
412 	if (type == NL80211_IFTYPE_P2P_CLIENT ||
413 	    type == NL80211_IFTYPE_P2P_GO) {
414 		for (i = ar->max_norm_iface; i < ar->vif_max; i++) {
415 			if ((ar->avail_idx_map >> i) & BIT(0)) {
416 				*if_idx = i;
417 				return true;
418 			}
419 		}
420 	}
421 
422 	return false;
423 }
424 
425 static bool ath6kl_is_tx_pending(struct ath6kl *ar)
426 {
427 	return ar->tx_pending[ath6kl_wmi_get_control_ep(ar->wmi)] == 0;
428 }
429 
430 static void ath6kl_cfg80211_sta_bmiss_enhance(struct ath6kl_vif *vif,
431 					      bool enable)
432 {
433 	int err;
434 
435 	if (WARN_ON(!test_bit(WMI_READY, &vif->ar->flag)))
436 		return;
437 
438 	if (vif->nw_type != INFRA_NETWORK)
439 		return;
440 
441 	if (!test_bit(ATH6KL_FW_CAPABILITY_BMISS_ENHANCE,
442 		      vif->ar->fw_capabilities))
443 		return;
444 
445 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s fw bmiss enhance\n",
446 		   enable ? "enable" : "disable");
447 
448 	err = ath6kl_wmi_sta_bmiss_enhance_cmd(vif->ar->wmi,
449 					       vif->fw_vif_idx, enable);
450 	if (err)
451 		ath6kl_err("failed to %s enhanced bmiss detection: %d\n",
452 			   enable ? "enable" : "disable", err);
453 }
454 
455 static int ath6kl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
456 				   struct cfg80211_connect_params *sme)
457 {
458 	struct ath6kl *ar = ath6kl_priv(dev);
459 	struct ath6kl_vif *vif = netdev_priv(dev);
460 	int status;
461 	u8 nw_subtype = (ar->p2p) ? SUBTYPE_P2PDEV : SUBTYPE_NONE;
462 	u16 interval;
463 
464 	ath6kl_cfg80211_sscan_disable(vif);
465 
466 	vif->sme_state = SME_CONNECTING;
467 
468 	if (!ath6kl_cfg80211_ready(vif))
469 		return -EIO;
470 
471 	if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
472 		ath6kl_err("destroy in progress\n");
473 		return -EBUSY;
474 	}
475 
476 	if (test_bit(SKIP_SCAN, &ar->flag) &&
477 	    ((sme->channel && sme->channel->center_freq == 0) ||
478 	     (sme->bssid && is_zero_ether_addr(sme->bssid)))) {
479 		ath6kl_err("SkipScan: channel or bssid invalid\n");
480 		return -EINVAL;
481 	}
482 
483 	if (down_interruptible(&ar->sem)) {
484 		ath6kl_err("busy, couldn't get access\n");
485 		return -ERESTARTSYS;
486 	}
487 
488 	if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
489 		ath6kl_err("busy, destroy in progress\n");
490 		up(&ar->sem);
491 		return -EBUSY;
492 	}
493 
494 	if (ar->tx_pending[ath6kl_wmi_get_control_ep(ar->wmi)]) {
495 		/*
496 		 * sleep until the command queue drains
497 		 */
498 		wait_event_interruptible_timeout(ar->event_wq,
499 						 ath6kl_is_tx_pending(ar),
500 						 WMI_TIMEOUT);
501 		if (signal_pending(current)) {
502 			ath6kl_err("cmd queue drain timeout\n");
503 			up(&ar->sem);
504 			return -EINTR;
505 		}
506 	}
507 
508 	status = ath6kl_set_assoc_req_ies(vif, sme->ie, sme->ie_len);
509 	if (status) {
510 		up(&ar->sem);
511 		return status;
512 	}
513 
514 	if (sme->ie == NULL || sme->ie_len == 0)
515 		ar->connect_ctrl_flags &= ~CONNECT_WPS_FLAG;
516 
517 	if (test_bit(CONNECTED, &vif->flags) &&
518 	    vif->ssid_len == sme->ssid_len &&
519 	    !memcmp(vif->ssid, sme->ssid, vif->ssid_len)) {
520 		vif->reconnect_flag = true;
521 		status = ath6kl_wmi_reconnect_cmd(ar->wmi, vif->fw_vif_idx,
522 						  vif->req_bssid,
523 						  vif->ch_hint);
524 
525 		up(&ar->sem);
526 		if (status) {
527 			ath6kl_err("wmi_reconnect_cmd failed\n");
528 			return -EIO;
529 		}
530 		return 0;
531 	} else if (vif->ssid_len == sme->ssid_len &&
532 		   !memcmp(vif->ssid, sme->ssid, vif->ssid_len)) {
533 		ath6kl_disconnect(vif);
534 	}
535 
536 	memset(vif->ssid, 0, sizeof(vif->ssid));
537 	vif->ssid_len = sme->ssid_len;
538 	memcpy(vif->ssid, sme->ssid, sme->ssid_len);
539 
540 	if (sme->channel)
541 		vif->ch_hint = sme->channel->center_freq;
542 
543 	memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
544 	if (sme->bssid && !is_broadcast_ether_addr(sme->bssid))
545 		memcpy(vif->req_bssid, sme->bssid, sizeof(vif->req_bssid));
546 
547 	ath6kl_set_wpa_version(vif, sme->crypto.wpa_versions);
548 
549 	status = ath6kl_set_auth_type(vif, sme->auth_type);
550 	if (status) {
551 		up(&ar->sem);
552 		return status;
553 	}
554 
555 	if (sme->crypto.n_ciphers_pairwise)
556 		ath6kl_set_cipher(vif, sme->crypto.ciphers_pairwise[0], true);
557 	else
558 		ath6kl_set_cipher(vif, 0, true);
559 
560 	ath6kl_set_cipher(vif, sme->crypto.cipher_group, false);
561 
562 	if (sme->crypto.n_akm_suites)
563 		ath6kl_set_key_mgmt(vif, sme->crypto.akm_suites[0]);
564 
565 	if ((sme->key_len) &&
566 	    (vif->auth_mode == NONE_AUTH) &&
567 	    (vif->prwise_crypto == WEP_CRYPT)) {
568 		struct ath6kl_key *key = NULL;
569 
570 		if (sme->key_idx > WMI_MAX_KEY_INDEX) {
571 			ath6kl_err("key index %d out of bounds\n",
572 				   sme->key_idx);
573 			up(&ar->sem);
574 			return -ENOENT;
575 		}
576 
577 		key = &vif->keys[sme->key_idx];
578 		key->key_len = sme->key_len;
579 		memcpy(key->key, sme->key, key->key_len);
580 		key->cipher = vif->prwise_crypto;
581 		vif->def_txkey_index = sme->key_idx;
582 
583 		ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx, sme->key_idx,
584 				      vif->prwise_crypto,
585 				      GROUP_USAGE | TX_USAGE,
586 				      key->key_len,
587 				      NULL, 0,
588 				      key->key, KEY_OP_INIT_VAL, NULL,
589 				      NO_SYNC_WMIFLAG);
590 	}
591 
592 	if (!ar->usr_bss_filter) {
593 		clear_bit(CLEAR_BSSFILTER_ON_BEACON, &vif->flags);
594 		if (ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
595 					     ALL_BSS_FILTER, 0) != 0) {
596 			ath6kl_err("couldn't set bss filtering\n");
597 			up(&ar->sem);
598 			return -EIO;
599 		}
600 	}
601 
602 	vif->nw_type = vif->next_mode;
603 
604 	/* enable enhanced bmiss detection if applicable */
605 	ath6kl_cfg80211_sta_bmiss_enhance(vif, true);
606 
607 	if (vif->wdev.iftype == NL80211_IFTYPE_P2P_CLIENT)
608 		nw_subtype = SUBTYPE_P2PCLIENT;
609 
610 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
611 		   "%s: connect called with authmode %d dot11 auth %d"
612 		   " PW crypto %d PW crypto len %d GRP crypto %d"
613 		   " GRP crypto len %d channel hint %u\n",
614 		   __func__,
615 		   vif->auth_mode, vif->dot11_auth_mode, vif->prwise_crypto,
616 		   vif->prwise_crypto_len, vif->grp_crypto,
617 		   vif->grp_crypto_len, vif->ch_hint);
618 
619 	vif->reconnect_flag = 0;
620 
621 	if (vif->nw_type == INFRA_NETWORK) {
622 		interval = max_t(u16, vif->listen_intvl_t,
623 				 ATH6KL_MAX_WOW_LISTEN_INTL);
624 		status = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
625 						       interval,
626 						       0);
627 		if (status) {
628 			ath6kl_err("couldn't set listen intervel\n");
629 			up(&ar->sem);
630 			return status;
631 		}
632 	}
633 
634 	status = ath6kl_wmi_connect_cmd(ar->wmi, vif->fw_vif_idx, vif->nw_type,
635 					vif->dot11_auth_mode, vif->auth_mode,
636 					vif->prwise_crypto,
637 					vif->prwise_crypto_len,
638 					vif->grp_crypto, vif->grp_crypto_len,
639 					vif->ssid_len, vif->ssid,
640 					vif->req_bssid, vif->ch_hint,
641 					ar->connect_ctrl_flags, nw_subtype);
642 
643 	if (sme->bg_scan_period == 0) {
644 		/* disable background scan if period is 0 */
645 		sme->bg_scan_period = 0xffff;
646 	} else if (sme->bg_scan_period == -1) {
647 		/* configure default value if not specified */
648 		sme->bg_scan_period = DEFAULT_BG_SCAN_PERIOD;
649 	}
650 
651 	ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx, 0, 0,
652 				  sme->bg_scan_period, 0, 0, 0, 3, 0, 0, 0);
653 
654 	up(&ar->sem);
655 
656 	if (status == -EINVAL) {
657 		memset(vif->ssid, 0, sizeof(vif->ssid));
658 		vif->ssid_len = 0;
659 		ath6kl_err("invalid request\n");
660 		return -ENOENT;
661 	} else if (status) {
662 		ath6kl_err("ath6kl_wmi_connect_cmd failed\n");
663 		return -EIO;
664 	}
665 
666 	if ((!(ar->connect_ctrl_flags & CONNECT_DO_WPA_OFFLOAD)) &&
667 	    ((vif->auth_mode == WPA_PSK_AUTH) ||
668 	     (vif->auth_mode == WPA2_PSK_AUTH))) {
669 		mod_timer(&vif->disconnect_timer,
670 			  jiffies + msecs_to_jiffies(DISCON_TIMER_INTVAL));
671 	}
672 
673 	ar->connect_ctrl_flags &= ~CONNECT_DO_WPA_OFFLOAD;
674 	set_bit(CONNECT_PEND, &vif->flags);
675 
676 	return 0;
677 }
678 
679 static struct cfg80211_bss *
680 ath6kl_add_bss_if_needed(struct ath6kl_vif *vif,
681 			 enum network_type nw_type,
682 			 const u8 *bssid,
683 			 struct ieee80211_channel *chan,
684 			 const u8 *beacon_ie,
685 			 size_t beacon_ie_len)
686 {
687 	struct ath6kl *ar = vif->ar;
688 	struct cfg80211_bss *bss;
689 	u16 cap_mask, cap_val;
690 	u8 *ie;
691 
692 	if (nw_type & ADHOC_NETWORK) {
693 		cap_mask = WLAN_CAPABILITY_IBSS;
694 		cap_val = WLAN_CAPABILITY_IBSS;
695 	} else {
696 		cap_mask = WLAN_CAPABILITY_ESS;
697 		cap_val = WLAN_CAPABILITY_ESS;
698 	}
699 
700 	bss = cfg80211_get_bss(ar->wiphy, chan, bssid,
701 			       vif->ssid, vif->ssid_len,
702 			       cap_mask, cap_val);
703 	if (bss == NULL) {
704 		/*
705 		 * Since cfg80211 may not yet know about the BSS,
706 		 * generate a partial entry until the first BSS info
707 		 * event becomes available.
708 		 *
709 		 * Prepend SSID element since it is not included in the Beacon
710 		 * IEs from the target.
711 		 */
712 		ie = kmalloc(2 + vif->ssid_len + beacon_ie_len, GFP_KERNEL);
713 		if (ie == NULL)
714 			return NULL;
715 		ie[0] = WLAN_EID_SSID;
716 		ie[1] = vif->ssid_len;
717 		memcpy(ie + 2, vif->ssid, vif->ssid_len);
718 		memcpy(ie + 2 + vif->ssid_len, beacon_ie, beacon_ie_len);
719 		bss = cfg80211_inform_bss(ar->wiphy, chan,
720 					  bssid, 0, cap_val, 100,
721 					  ie, 2 + vif->ssid_len + beacon_ie_len,
722 					  0, GFP_KERNEL);
723 		if (bss)
724 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
725 				   "added bss %pM to cfg80211\n", bssid);
726 		kfree(ie);
727 	} else
728 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "cfg80211 already has a bss\n");
729 
730 	return bss;
731 }
732 
733 void ath6kl_cfg80211_connect_event(struct ath6kl_vif *vif, u16 channel,
734 				   u8 *bssid, u16 listen_intvl,
735 				   u16 beacon_intvl,
736 				   enum network_type nw_type,
737 				   u8 beacon_ie_len, u8 assoc_req_len,
738 				   u8 assoc_resp_len, u8 *assoc_info)
739 {
740 	struct ieee80211_channel *chan;
741 	struct ath6kl *ar = vif->ar;
742 	struct cfg80211_bss *bss;
743 
744 	/* capinfo + listen interval */
745 	u8 assoc_req_ie_offset = sizeof(u16) + sizeof(u16);
746 
747 	/* capinfo + status code +  associd */
748 	u8 assoc_resp_ie_offset = sizeof(u16) + sizeof(u16) + sizeof(u16);
749 
750 	u8 *assoc_req_ie = assoc_info + beacon_ie_len + assoc_req_ie_offset;
751 	u8 *assoc_resp_ie = assoc_info + beacon_ie_len + assoc_req_len +
752 	    assoc_resp_ie_offset;
753 
754 	assoc_req_len -= assoc_req_ie_offset;
755 	assoc_resp_len -= assoc_resp_ie_offset;
756 
757 	/*
758 	 * Store Beacon interval here; DTIM period will be available only once
759 	 * a Beacon frame from the AP is seen.
760 	 */
761 	vif->assoc_bss_beacon_int = beacon_intvl;
762 	clear_bit(DTIM_PERIOD_AVAIL, &vif->flags);
763 
764 	if (nw_type & ADHOC_NETWORK) {
765 		if (vif->wdev.iftype != NL80211_IFTYPE_ADHOC) {
766 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
767 				   "%s: ath6k not in ibss mode\n", __func__);
768 			return;
769 		}
770 	}
771 
772 	if (nw_type & INFRA_NETWORK) {
773 		if (vif->wdev.iftype != NL80211_IFTYPE_STATION &&
774 		    vif->wdev.iftype != NL80211_IFTYPE_P2P_CLIENT) {
775 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
776 				   "%s: ath6k not in station mode\n", __func__);
777 			return;
778 		}
779 	}
780 
781 	chan = ieee80211_get_channel(ar->wiphy, (int) channel);
782 
783 	bss = ath6kl_add_bss_if_needed(vif, nw_type, bssid, chan,
784 				       assoc_info, beacon_ie_len);
785 	if (!bss) {
786 		ath6kl_err("could not add cfg80211 bss entry\n");
787 		return;
788 	}
789 
790 	if (nw_type & ADHOC_NETWORK) {
791 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "ad-hoc %s selected\n",
792 			   nw_type & ADHOC_CREATOR ? "creator" : "joiner");
793 		cfg80211_ibss_joined(vif->ndev, bssid, GFP_KERNEL);
794 		cfg80211_put_bss(ar->wiphy, bss);
795 		return;
796 	}
797 
798 	if (vif->sme_state == SME_CONNECTING) {
799 		/* inform connect result to cfg80211 */
800 		vif->sme_state = SME_CONNECTED;
801 		cfg80211_connect_result(vif->ndev, bssid,
802 					assoc_req_ie, assoc_req_len,
803 					assoc_resp_ie, assoc_resp_len,
804 					WLAN_STATUS_SUCCESS, GFP_KERNEL);
805 		cfg80211_put_bss(ar->wiphy, bss);
806 	} else if (vif->sme_state == SME_CONNECTED) {
807 		/* inform roam event to cfg80211 */
808 		cfg80211_roamed_bss(vif->ndev, bss, assoc_req_ie, assoc_req_len,
809 				    assoc_resp_ie, assoc_resp_len, GFP_KERNEL);
810 	}
811 }
812 
813 static int ath6kl_cfg80211_disconnect(struct wiphy *wiphy,
814 				      struct net_device *dev, u16 reason_code)
815 {
816 	struct ath6kl *ar = ath6kl_priv(dev);
817 	struct ath6kl_vif *vif = netdev_priv(dev);
818 
819 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: reason=%u\n", __func__,
820 		   reason_code);
821 
822 	ath6kl_cfg80211_sscan_disable(vif);
823 
824 	if (!ath6kl_cfg80211_ready(vif))
825 		return -EIO;
826 
827 	if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
828 		ath6kl_err("busy, destroy in progress\n");
829 		return -EBUSY;
830 	}
831 
832 	if (down_interruptible(&ar->sem)) {
833 		ath6kl_err("busy, couldn't get access\n");
834 		return -ERESTARTSYS;
835 	}
836 
837 	vif->reconnect_flag = 0;
838 	ath6kl_disconnect(vif);
839 	memset(vif->ssid, 0, sizeof(vif->ssid));
840 	vif->ssid_len = 0;
841 
842 	if (!test_bit(SKIP_SCAN, &ar->flag))
843 		memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
844 
845 	up(&ar->sem);
846 
847 	vif->sme_state = SME_DISCONNECTED;
848 
849 	return 0;
850 }
851 
852 void ath6kl_cfg80211_disconnect_event(struct ath6kl_vif *vif, u8 reason,
853 				      u8 *bssid, u8 assoc_resp_len,
854 				      u8 *assoc_info, u16 proto_reason)
855 {
856 	struct ath6kl *ar = vif->ar;
857 
858 	if (vif->scan_req) {
859 		cfg80211_scan_done(vif->scan_req, true);
860 		vif->scan_req = NULL;
861 	}
862 
863 	if (vif->nw_type & ADHOC_NETWORK) {
864 		if (vif->wdev.iftype != NL80211_IFTYPE_ADHOC) {
865 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
866 				   "%s: ath6k not in ibss mode\n", __func__);
867 			return;
868 		}
869 		memset(bssid, 0, ETH_ALEN);
870 		cfg80211_ibss_joined(vif->ndev, bssid, GFP_KERNEL);
871 		return;
872 	}
873 
874 	if (vif->nw_type & INFRA_NETWORK) {
875 		if (vif->wdev.iftype != NL80211_IFTYPE_STATION &&
876 		    vif->wdev.iftype != NL80211_IFTYPE_P2P_CLIENT) {
877 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
878 				   "%s: ath6k not in station mode\n", __func__);
879 			return;
880 		}
881 	}
882 
883 	clear_bit(CONNECT_PEND, &vif->flags);
884 
885 	if (vif->sme_state == SME_CONNECTING) {
886 		cfg80211_connect_result(vif->ndev,
887 					bssid, NULL, 0,
888 					NULL, 0,
889 					WLAN_STATUS_UNSPECIFIED_FAILURE,
890 					GFP_KERNEL);
891 	} else if (vif->sme_state == SME_CONNECTED) {
892 		cfg80211_disconnected(vif->ndev, proto_reason,
893 				      NULL, 0, GFP_KERNEL);
894 	}
895 
896 	vif->sme_state = SME_DISCONNECTED;
897 
898 	/*
899 	 * Send a disconnect command to target when a disconnect event is
900 	 * received with reason code other than 3 (DISCONNECT_CMD - disconnect
901 	 * request from host) to make the firmware stop trying to connect even
902 	 * after giving disconnect event. There will be one more disconnect
903 	 * event for this disconnect command with reason code DISCONNECT_CMD
904 	 * which won't be notified to cfg80211.
905 	 */
906 	if (reason != DISCONNECT_CMD)
907 		ath6kl_wmi_disconnect_cmd(ar->wmi, vif->fw_vif_idx);
908 }
909 
910 static int ath6kl_set_probed_ssids(struct ath6kl *ar,
911 				   struct ath6kl_vif *vif,
912 				   struct cfg80211_ssid *ssids, int n_ssids,
913 				   struct cfg80211_match_set *match_set,
914 				   int n_match_ssid)
915 {
916 	u8 i, j, index_to_add, ssid_found = false;
917 	struct ath6kl_cfg80211_match_probe_ssid ssid_list[MAX_PROBED_SSIDS];
918 
919 	memset(ssid_list, 0, sizeof(ssid_list));
920 
921 	if (n_ssids > MAX_PROBED_SSIDS ||
922 	    n_match_ssid > MAX_PROBED_SSIDS)
923 		return -EINVAL;
924 
925 	for (i = 0; i < n_ssids; i++) {
926 		memcpy(ssid_list[i].ssid.ssid,
927 		       ssids[i].ssid,
928 		       ssids[i].ssid_len);
929 		ssid_list[i].ssid.ssid_len = ssids[i].ssid_len;
930 
931 		if (ssids[i].ssid_len)
932 			ssid_list[i].flag = SPECIFIC_SSID_FLAG;
933 		else
934 			ssid_list[i].flag = ANY_SSID_FLAG;
935 
936 		if (n_match_ssid == 0)
937 			ssid_list[i].flag |= MATCH_SSID_FLAG;
938 	}
939 
940 	index_to_add = i;
941 
942 	for (i = 0; i < n_match_ssid; i++) {
943 		ssid_found = false;
944 
945 		for (j = 0; j < n_ssids; j++) {
946 			if ((match_set[i].ssid.ssid_len ==
947 			     ssid_list[j].ssid.ssid_len) &&
948 			    (!memcmp(ssid_list[j].ssid.ssid,
949 				     match_set[i].ssid.ssid,
950 				     match_set[i].ssid.ssid_len))) {
951 				ssid_list[j].flag |= MATCH_SSID_FLAG;
952 				ssid_found = true;
953 				break;
954 			}
955 		}
956 
957 		if (ssid_found)
958 			continue;
959 
960 		if (index_to_add >= MAX_PROBED_SSIDS)
961 			continue;
962 
963 		ssid_list[index_to_add].ssid.ssid_len =
964 			match_set[i].ssid.ssid_len;
965 		memcpy(ssid_list[index_to_add].ssid.ssid,
966 		       match_set[i].ssid.ssid,
967 		       match_set[i].ssid.ssid_len);
968 		ssid_list[index_to_add].flag |= MATCH_SSID_FLAG;
969 		index_to_add++;
970 	}
971 
972 	for (i = 0; i < index_to_add; i++) {
973 		ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx, i,
974 					  ssid_list[i].flag,
975 					  ssid_list[i].ssid.ssid_len,
976 					  ssid_list[i].ssid.ssid);
977 
978 	}
979 
980 	/* Make sure no old entries are left behind */
981 	for (i = index_to_add; i < MAX_PROBED_SSIDS; i++) {
982 		ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx, i,
983 					  DISABLE_SSID_FLAG, 0, NULL);
984 	}
985 
986 	return 0;
987 }
988 
989 static int ath6kl_cfg80211_scan(struct wiphy *wiphy,
990 				struct cfg80211_scan_request *request)
991 {
992 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(request->wdev);
993 	struct ath6kl *ar = ath6kl_priv(vif->ndev);
994 	s8 n_channels = 0;
995 	u16 *channels = NULL;
996 	int ret = 0;
997 	u32 force_fg_scan = 0;
998 
999 	if (!ath6kl_cfg80211_ready(vif))
1000 		return -EIO;
1001 
1002 	ath6kl_cfg80211_sscan_disable(vif);
1003 
1004 	if (!ar->usr_bss_filter) {
1005 		clear_bit(CLEAR_BSSFILTER_ON_BEACON, &vif->flags);
1006 		ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
1007 					       ALL_BSS_FILTER, 0);
1008 		if (ret) {
1009 			ath6kl_err("couldn't set bss filtering\n");
1010 			return ret;
1011 		}
1012 	}
1013 
1014 	ret = ath6kl_set_probed_ssids(ar, vif, request->ssids,
1015 				      request->n_ssids, NULL, 0);
1016 	if (ret < 0)
1017 		return ret;
1018 
1019 	/* this also clears IE in fw if it's not set */
1020 	ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
1021 				       WMI_FRAME_PROBE_REQ,
1022 				       request->ie, request->ie_len);
1023 	if (ret) {
1024 		ath6kl_err("failed to set Probe Request appie for scan\n");
1025 		return ret;
1026 	}
1027 
1028 	/*
1029 	 * Scan only the requested channels if the request specifies a set of
1030 	 * channels. If the list is longer than the target supports, do not
1031 	 * configure the list and instead, scan all available channels.
1032 	 */
1033 	if (request->n_channels > 0 &&
1034 	    request->n_channels <= WMI_MAX_CHANNELS) {
1035 		u8 i;
1036 
1037 		n_channels = request->n_channels;
1038 
1039 		channels = kzalloc(n_channels * sizeof(u16), GFP_KERNEL);
1040 		if (channels == NULL) {
1041 			ath6kl_warn("failed to set scan channels, scan all channels");
1042 			n_channels = 0;
1043 		}
1044 
1045 		for (i = 0; i < n_channels; i++)
1046 			channels[i] = request->channels[i]->center_freq;
1047 	}
1048 
1049 	if (test_bit(CONNECTED, &vif->flags))
1050 		force_fg_scan = 1;
1051 
1052 	vif->scan_req = request;
1053 
1054 	ret = ath6kl_wmi_beginscan_cmd(ar->wmi, vif->fw_vif_idx,
1055 				       WMI_LONG_SCAN, force_fg_scan,
1056 				       false, 0,
1057 				       ATH6KL_FG_SCAN_INTERVAL,
1058 				       n_channels, channels,
1059 				       request->no_cck,
1060 				       request->rates);
1061 	if (ret) {
1062 		ath6kl_err("failed to start scan: %d\n", ret);
1063 		vif->scan_req = NULL;
1064 	}
1065 
1066 	kfree(channels);
1067 
1068 	return ret;
1069 }
1070 
1071 void ath6kl_cfg80211_scan_complete_event(struct ath6kl_vif *vif, bool aborted)
1072 {
1073 	struct ath6kl *ar = vif->ar;
1074 	int i;
1075 
1076 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: status%s\n", __func__,
1077 		   aborted ? " aborted" : "");
1078 
1079 	if (!vif->scan_req)
1080 		return;
1081 
1082 	if (aborted)
1083 		goto out;
1084 
1085 	if (vif->scan_req->n_ssids && vif->scan_req->ssids[0].ssid_len) {
1086 		for (i = 0; i < vif->scan_req->n_ssids; i++) {
1087 			ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx,
1088 						  i + 1, DISABLE_SSID_FLAG,
1089 						  0, NULL);
1090 		}
1091 	}
1092 
1093 out:
1094 	cfg80211_scan_done(vif->scan_req, aborted);
1095 	vif->scan_req = NULL;
1096 }
1097 
1098 void ath6kl_cfg80211_ch_switch_notify(struct ath6kl_vif *vif, int freq,
1099 				      enum wmi_phy_mode mode)
1100 {
1101 	struct cfg80211_chan_def chandef;
1102 
1103 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1104 		   "channel switch notify nw_type %d freq %d mode %d\n",
1105 		   vif->nw_type, freq, mode);
1106 
1107 	cfg80211_chandef_create(&chandef,
1108 				ieee80211_get_channel(vif->ar->wiphy, freq),
1109 				(mode == WMI_11G_HT20) ?
1110 					NL80211_CHAN_HT20 : NL80211_CHAN_NO_HT);
1111 
1112 	cfg80211_ch_switch_notify(vif->ndev, &chandef);
1113 }
1114 
1115 static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
1116 				   u8 key_index, bool pairwise,
1117 				   const u8 *mac_addr,
1118 				   struct key_params *params)
1119 {
1120 	struct ath6kl *ar = ath6kl_priv(ndev);
1121 	struct ath6kl_vif *vif = netdev_priv(ndev);
1122 	struct ath6kl_key *key = NULL;
1123 	int seq_len;
1124 	u8 key_usage;
1125 	u8 key_type;
1126 
1127 	if (!ath6kl_cfg80211_ready(vif))
1128 		return -EIO;
1129 
1130 	if (params->cipher == CCKM_KRK_CIPHER_SUITE) {
1131 		if (params->key_len != WMI_KRK_LEN)
1132 			return -EINVAL;
1133 		return ath6kl_wmi_add_krk_cmd(ar->wmi, vif->fw_vif_idx,
1134 					      params->key);
1135 	}
1136 
1137 	if (key_index > WMI_MAX_KEY_INDEX) {
1138 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1139 			   "%s: key index %d out of bounds\n", __func__,
1140 			   key_index);
1141 		return -ENOENT;
1142 	}
1143 
1144 	key = &vif->keys[key_index];
1145 	memset(key, 0, sizeof(struct ath6kl_key));
1146 
1147 	if (pairwise)
1148 		key_usage = PAIRWISE_USAGE;
1149 	else
1150 		key_usage = GROUP_USAGE;
1151 
1152 	seq_len = params->seq_len;
1153 	if (params->cipher == WLAN_CIPHER_SUITE_SMS4 &&
1154 	    seq_len > ATH6KL_KEY_SEQ_LEN) {
1155 		/* Only first half of the WPI PN is configured */
1156 		seq_len = ATH6KL_KEY_SEQ_LEN;
1157 	}
1158 	if (params->key_len > WLAN_MAX_KEY_LEN ||
1159 	    seq_len > sizeof(key->seq))
1160 		return -EINVAL;
1161 
1162 	key->key_len = params->key_len;
1163 	memcpy(key->key, params->key, key->key_len);
1164 	key->seq_len = seq_len;
1165 	memcpy(key->seq, params->seq, key->seq_len);
1166 	key->cipher = params->cipher;
1167 
1168 	switch (key->cipher) {
1169 	case WLAN_CIPHER_SUITE_WEP40:
1170 	case WLAN_CIPHER_SUITE_WEP104:
1171 		key_type = WEP_CRYPT;
1172 		break;
1173 
1174 	case WLAN_CIPHER_SUITE_TKIP:
1175 		key_type = TKIP_CRYPT;
1176 		break;
1177 
1178 	case WLAN_CIPHER_SUITE_CCMP:
1179 		key_type = AES_CRYPT;
1180 		break;
1181 	case WLAN_CIPHER_SUITE_SMS4:
1182 		key_type = WAPI_CRYPT;
1183 		break;
1184 
1185 	default:
1186 		return -ENOTSUPP;
1187 	}
1188 
1189 	if (((vif->auth_mode == WPA_PSK_AUTH) ||
1190 	     (vif->auth_mode == WPA2_PSK_AUTH)) &&
1191 	    (key_usage & GROUP_USAGE))
1192 		del_timer(&vif->disconnect_timer);
1193 
1194 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1195 		   "%s: index %d, key_len %d, key_type 0x%x, key_usage 0x%x, seq_len %d\n",
1196 		   __func__, key_index, key->key_len, key_type,
1197 		   key_usage, key->seq_len);
1198 
1199 	if (vif->nw_type == AP_NETWORK && !pairwise &&
1200 	    (key_type == TKIP_CRYPT || key_type == AES_CRYPT ||
1201 	     key_type == WAPI_CRYPT)) {
1202 		ar->ap_mode_bkey.valid = true;
1203 		ar->ap_mode_bkey.key_index = key_index;
1204 		ar->ap_mode_bkey.key_type = key_type;
1205 		ar->ap_mode_bkey.key_len = key->key_len;
1206 		memcpy(ar->ap_mode_bkey.key, key->key, key->key_len);
1207 		if (!test_bit(CONNECTED, &vif->flags)) {
1208 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1209 				   "Delay initial group key configuration until AP mode has been started\n");
1210 			/*
1211 			 * The key will be set in ath6kl_connect_ap_mode() once
1212 			 * the connected event is received from the target.
1213 			 */
1214 			return 0;
1215 		}
1216 	}
1217 
1218 	if (vif->next_mode == AP_NETWORK && key_type == WEP_CRYPT &&
1219 	    !test_bit(CONNECTED, &vif->flags)) {
1220 		/*
1221 		 * Store the key locally so that it can be re-configured after
1222 		 * the AP mode has properly started
1223 		 * (ath6kl_install_statioc_wep_keys).
1224 		 */
1225 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1226 			   "Delay WEP key configuration until AP mode has been started\n");
1227 		vif->wep_key_list[key_index].key_len = key->key_len;
1228 		memcpy(vif->wep_key_list[key_index].key, key->key,
1229 		       key->key_len);
1230 		return 0;
1231 	}
1232 
1233 	return ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx, key_index,
1234 				     key_type, key_usage, key->key_len,
1235 				     key->seq, key->seq_len, key->key,
1236 				     KEY_OP_INIT_VAL,
1237 				     (u8 *) mac_addr, SYNC_BOTH_WMIFLAG);
1238 }
1239 
1240 static int ath6kl_cfg80211_del_key(struct wiphy *wiphy, struct net_device *ndev,
1241 				   u8 key_index, bool pairwise,
1242 				   const u8 *mac_addr)
1243 {
1244 	struct ath6kl *ar = ath6kl_priv(ndev);
1245 	struct ath6kl_vif *vif = netdev_priv(ndev);
1246 
1247 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1248 
1249 	if (!ath6kl_cfg80211_ready(vif))
1250 		return -EIO;
1251 
1252 	if (key_index > WMI_MAX_KEY_INDEX) {
1253 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1254 			   "%s: key index %d out of bounds\n", __func__,
1255 			   key_index);
1256 		return -ENOENT;
1257 	}
1258 
1259 	if (!vif->keys[key_index].key_len) {
1260 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1261 			   "%s: index %d is empty\n", __func__, key_index);
1262 		return 0;
1263 	}
1264 
1265 	vif->keys[key_index].key_len = 0;
1266 
1267 	return ath6kl_wmi_deletekey_cmd(ar->wmi, vif->fw_vif_idx, key_index);
1268 }
1269 
1270 static int ath6kl_cfg80211_get_key(struct wiphy *wiphy, struct net_device *ndev,
1271 				   u8 key_index, bool pairwise,
1272 				   const u8 *mac_addr, void *cookie,
1273 				   void (*callback) (void *cookie,
1274 						     struct key_params *))
1275 {
1276 	struct ath6kl_vif *vif = netdev_priv(ndev);
1277 	struct ath6kl_key *key = NULL;
1278 	struct key_params params;
1279 
1280 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1281 
1282 	if (!ath6kl_cfg80211_ready(vif))
1283 		return -EIO;
1284 
1285 	if (key_index > WMI_MAX_KEY_INDEX) {
1286 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1287 			   "%s: key index %d out of bounds\n", __func__,
1288 			   key_index);
1289 		return -ENOENT;
1290 	}
1291 
1292 	key = &vif->keys[key_index];
1293 	memset(&params, 0, sizeof(params));
1294 	params.cipher = key->cipher;
1295 	params.key_len = key->key_len;
1296 	params.seq_len = key->seq_len;
1297 	params.seq = key->seq;
1298 	params.key = key->key;
1299 
1300 	callback(cookie, &params);
1301 
1302 	return key->key_len ? 0 : -ENOENT;
1303 }
1304 
1305 static int ath6kl_cfg80211_set_default_key(struct wiphy *wiphy,
1306 					   struct net_device *ndev,
1307 					   u8 key_index, bool unicast,
1308 					   bool multicast)
1309 {
1310 	struct ath6kl *ar = ath6kl_priv(ndev);
1311 	struct ath6kl_vif *vif = netdev_priv(ndev);
1312 	struct ath6kl_key *key = NULL;
1313 	u8 key_usage;
1314 	enum crypto_type key_type = NONE_CRYPT;
1315 
1316 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1317 
1318 	if (!ath6kl_cfg80211_ready(vif))
1319 		return -EIO;
1320 
1321 	if (key_index > WMI_MAX_KEY_INDEX) {
1322 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1323 			   "%s: key index %d out of bounds\n",
1324 			   __func__, key_index);
1325 		return -ENOENT;
1326 	}
1327 
1328 	if (!vif->keys[key_index].key_len) {
1329 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: invalid key index %d\n",
1330 			   __func__, key_index);
1331 		return -EINVAL;
1332 	}
1333 
1334 	vif->def_txkey_index = key_index;
1335 	key = &vif->keys[vif->def_txkey_index];
1336 	key_usage = GROUP_USAGE;
1337 	if (vif->prwise_crypto == WEP_CRYPT)
1338 		key_usage |= TX_USAGE;
1339 	if (unicast)
1340 		key_type = vif->prwise_crypto;
1341 	if (multicast)
1342 		key_type = vif->grp_crypto;
1343 
1344 	if (vif->next_mode == AP_NETWORK && !test_bit(CONNECTED, &vif->flags))
1345 		return 0; /* Delay until AP mode has been started */
1346 
1347 	return ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx,
1348 				     vif->def_txkey_index,
1349 				     key_type, key_usage,
1350 				     key->key_len, key->seq, key->seq_len,
1351 				     key->key,
1352 				     KEY_OP_INIT_VAL, NULL,
1353 				     SYNC_BOTH_WMIFLAG);
1354 }
1355 
1356 void ath6kl_cfg80211_tkip_micerr_event(struct ath6kl_vif *vif, u8 keyid,
1357 				       bool ismcast)
1358 {
1359 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1360 		   "%s: keyid %d, ismcast %d\n", __func__, keyid, ismcast);
1361 
1362 	cfg80211_michael_mic_failure(vif->ndev, vif->bssid,
1363 				     (ismcast ? NL80211_KEYTYPE_GROUP :
1364 				      NL80211_KEYTYPE_PAIRWISE), keyid, NULL,
1365 				     GFP_KERNEL);
1366 }
1367 
1368 static int ath6kl_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
1369 {
1370 	struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1371 	struct ath6kl_vif *vif;
1372 	int ret;
1373 
1374 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: changed 0x%x\n", __func__,
1375 		   changed);
1376 
1377 	vif = ath6kl_vif_first(ar);
1378 	if (!vif)
1379 		return -EIO;
1380 
1381 	if (!ath6kl_cfg80211_ready(vif))
1382 		return -EIO;
1383 
1384 	if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
1385 		ret = ath6kl_wmi_set_rts_cmd(ar->wmi, wiphy->rts_threshold);
1386 		if (ret != 0) {
1387 			ath6kl_err("ath6kl_wmi_set_rts_cmd failed\n");
1388 			return -EIO;
1389 		}
1390 	}
1391 
1392 	return 0;
1393 }
1394 
1395 static int ath6kl_cfg80211_set_txpower(struct wiphy *wiphy,
1396 				       struct wireless_dev *wdev,
1397 				       enum nl80211_tx_power_setting type,
1398 				       int mbm)
1399 {
1400 	struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1401 	struct ath6kl_vif *vif;
1402 	int dbm = MBM_TO_DBM(mbm);
1403 
1404 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type 0x%x, dbm %d\n", __func__,
1405 		   type, dbm);
1406 
1407 	vif = ath6kl_vif_first(ar);
1408 	if (!vif)
1409 		return -EIO;
1410 
1411 	if (!ath6kl_cfg80211_ready(vif))
1412 		return -EIO;
1413 
1414 	switch (type) {
1415 	case NL80211_TX_POWER_AUTOMATIC:
1416 		return 0;
1417 	case NL80211_TX_POWER_LIMITED:
1418 		ar->tx_pwr = dbm;
1419 		break;
1420 	default:
1421 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type 0x%x not supported\n",
1422 			   __func__, type);
1423 		return -EOPNOTSUPP;
1424 	}
1425 
1426 	ath6kl_wmi_set_tx_pwr_cmd(ar->wmi, vif->fw_vif_idx, dbm);
1427 
1428 	return 0;
1429 }
1430 
1431 static int ath6kl_cfg80211_get_txpower(struct wiphy *wiphy,
1432 				       struct wireless_dev *wdev,
1433 				       int *dbm)
1434 {
1435 	struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1436 	struct ath6kl_vif *vif;
1437 
1438 	vif = ath6kl_vif_first(ar);
1439 	if (!vif)
1440 		return -EIO;
1441 
1442 	if (!ath6kl_cfg80211_ready(vif))
1443 		return -EIO;
1444 
1445 	if (test_bit(CONNECTED, &vif->flags)) {
1446 		ar->tx_pwr = 0;
1447 
1448 		if (ath6kl_wmi_get_tx_pwr_cmd(ar->wmi, vif->fw_vif_idx) != 0) {
1449 			ath6kl_err("ath6kl_wmi_get_tx_pwr_cmd failed\n");
1450 			return -EIO;
1451 		}
1452 
1453 		wait_event_interruptible_timeout(ar->event_wq, ar->tx_pwr != 0,
1454 						 5 * HZ);
1455 
1456 		if (signal_pending(current)) {
1457 			ath6kl_err("target did not respond\n");
1458 			return -EINTR;
1459 		}
1460 	}
1461 
1462 	*dbm = ar->tx_pwr;
1463 	return 0;
1464 }
1465 
1466 static int ath6kl_cfg80211_set_power_mgmt(struct wiphy *wiphy,
1467 					  struct net_device *dev,
1468 					  bool pmgmt, int timeout)
1469 {
1470 	struct ath6kl *ar = ath6kl_priv(dev);
1471 	struct wmi_power_mode_cmd mode;
1472 	struct ath6kl_vif *vif = netdev_priv(dev);
1473 
1474 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: pmgmt %d, timeout %d\n",
1475 		   __func__, pmgmt, timeout);
1476 
1477 	if (!ath6kl_cfg80211_ready(vif))
1478 		return -EIO;
1479 
1480 	if (pmgmt) {
1481 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: rec power\n", __func__);
1482 		mode.pwr_mode = REC_POWER;
1483 	} else {
1484 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: max perf\n", __func__);
1485 		mode.pwr_mode = MAX_PERF_POWER;
1486 	}
1487 
1488 	if (ath6kl_wmi_powermode_cmd(ar->wmi, vif->fw_vif_idx,
1489 				     mode.pwr_mode) != 0) {
1490 		ath6kl_err("wmi_powermode_cmd failed\n");
1491 		return -EIO;
1492 	}
1493 
1494 	return 0;
1495 }
1496 
1497 static struct wireless_dev *ath6kl_cfg80211_add_iface(struct wiphy *wiphy,
1498 						      const char *name,
1499 						      enum nl80211_iftype type,
1500 						      u32 *flags,
1501 						      struct vif_params *params)
1502 {
1503 	struct ath6kl *ar = wiphy_priv(wiphy);
1504 	struct wireless_dev *wdev;
1505 	u8 if_idx, nw_type;
1506 
1507 	if (ar->num_vif == ar->vif_max) {
1508 		ath6kl_err("Reached maximum number of supported vif\n");
1509 		return ERR_PTR(-EINVAL);
1510 	}
1511 
1512 	if (!ath6kl_is_valid_iftype(ar, type, &if_idx, &nw_type)) {
1513 		ath6kl_err("Not a supported interface type\n");
1514 		return ERR_PTR(-EINVAL);
1515 	}
1516 
1517 	wdev = ath6kl_interface_add(ar, name, type, if_idx, nw_type);
1518 	if (!wdev)
1519 		return ERR_PTR(-ENOMEM);
1520 
1521 	ar->num_vif++;
1522 
1523 	return wdev;
1524 }
1525 
1526 static int ath6kl_cfg80211_del_iface(struct wiphy *wiphy,
1527 				     struct wireless_dev *wdev)
1528 {
1529 	struct ath6kl *ar = wiphy_priv(wiphy);
1530 	struct ath6kl_vif *vif = netdev_priv(wdev->netdev);
1531 
1532 	spin_lock_bh(&ar->list_lock);
1533 	list_del(&vif->list);
1534 	spin_unlock_bh(&ar->list_lock);
1535 
1536 	ath6kl_cfg80211_vif_stop(vif, test_bit(WMI_READY, &ar->flag));
1537 
1538 	ath6kl_cfg80211_vif_cleanup(vif);
1539 
1540 	return 0;
1541 }
1542 
1543 static int ath6kl_cfg80211_change_iface(struct wiphy *wiphy,
1544 					struct net_device *ndev,
1545 					enum nl80211_iftype type, u32 *flags,
1546 					struct vif_params *params)
1547 {
1548 	struct ath6kl_vif *vif = netdev_priv(ndev);
1549 	int i;
1550 
1551 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type %u\n", __func__, type);
1552 
1553 	/*
1554 	 * Don't bring up p2p on an interface which is not initialized
1555 	 * for p2p operation where fw does not have capability to switch
1556 	 * dynamically between non-p2p and p2p type interface.
1557 	 */
1558 	if (!test_bit(ATH6KL_FW_CAPABILITY_STA_P2PDEV_DUPLEX,
1559 		      vif->ar->fw_capabilities) &&
1560 	    (type == NL80211_IFTYPE_P2P_CLIENT ||
1561 	     type == NL80211_IFTYPE_P2P_GO)) {
1562 		if (vif->ar->vif_max == 1) {
1563 			if (vif->fw_vif_idx != 0)
1564 				return -EINVAL;
1565 			else
1566 				goto set_iface_type;
1567 		}
1568 
1569 		for (i = vif->ar->max_norm_iface; i < vif->ar->vif_max; i++) {
1570 			if (i == vif->fw_vif_idx)
1571 				break;
1572 		}
1573 
1574 		if (i == vif->ar->vif_max) {
1575 			ath6kl_err("Invalid interface to bring up P2P\n");
1576 			return -EINVAL;
1577 		}
1578 	}
1579 
1580 	/* need to clean up enhanced bmiss detection fw state */
1581 	ath6kl_cfg80211_sta_bmiss_enhance(vif, false);
1582 
1583 set_iface_type:
1584 	switch (type) {
1585 	case NL80211_IFTYPE_STATION:
1586 	case NL80211_IFTYPE_P2P_CLIENT:
1587 		vif->next_mode = INFRA_NETWORK;
1588 		break;
1589 	case NL80211_IFTYPE_ADHOC:
1590 		vif->next_mode = ADHOC_NETWORK;
1591 		break;
1592 	case NL80211_IFTYPE_AP:
1593 	case NL80211_IFTYPE_P2P_GO:
1594 		vif->next_mode = AP_NETWORK;
1595 		break;
1596 	default:
1597 		ath6kl_err("invalid interface type %u\n", type);
1598 		return -EOPNOTSUPP;
1599 	}
1600 
1601 	vif->wdev.iftype = type;
1602 
1603 	return 0;
1604 }
1605 
1606 static int ath6kl_cfg80211_join_ibss(struct wiphy *wiphy,
1607 				     struct net_device *dev,
1608 				     struct cfg80211_ibss_params *ibss_param)
1609 {
1610 	struct ath6kl *ar = ath6kl_priv(dev);
1611 	struct ath6kl_vif *vif = netdev_priv(dev);
1612 	int status;
1613 
1614 	if (!ath6kl_cfg80211_ready(vif))
1615 		return -EIO;
1616 
1617 	vif->ssid_len = ibss_param->ssid_len;
1618 	memcpy(vif->ssid, ibss_param->ssid, vif->ssid_len);
1619 
1620 	if (ibss_param->chandef.chan)
1621 		vif->ch_hint = ibss_param->chandef.chan->center_freq;
1622 
1623 	if (ibss_param->channel_fixed) {
1624 		/*
1625 		 * TODO: channel_fixed: The channel should be fixed, do not
1626 		 * search for IBSSs to join on other channels. Target
1627 		 * firmware does not support this feature, needs to be
1628 		 * updated.
1629 		 */
1630 		return -EOPNOTSUPP;
1631 	}
1632 
1633 	memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
1634 	if (ibss_param->bssid && !is_broadcast_ether_addr(ibss_param->bssid))
1635 		memcpy(vif->req_bssid, ibss_param->bssid,
1636 		       sizeof(vif->req_bssid));
1637 
1638 	ath6kl_set_wpa_version(vif, 0);
1639 
1640 	status = ath6kl_set_auth_type(vif, NL80211_AUTHTYPE_OPEN_SYSTEM);
1641 	if (status)
1642 		return status;
1643 
1644 	if (ibss_param->privacy) {
1645 		ath6kl_set_cipher(vif, WLAN_CIPHER_SUITE_WEP40, true);
1646 		ath6kl_set_cipher(vif, WLAN_CIPHER_SUITE_WEP40, false);
1647 	} else {
1648 		ath6kl_set_cipher(vif, 0, true);
1649 		ath6kl_set_cipher(vif, 0, false);
1650 	}
1651 
1652 	vif->nw_type = vif->next_mode;
1653 
1654 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1655 		   "%s: connect called with authmode %d dot11 auth %d"
1656 		   " PW crypto %d PW crypto len %d GRP crypto %d"
1657 		   " GRP crypto len %d channel hint %u\n",
1658 		   __func__,
1659 		   vif->auth_mode, vif->dot11_auth_mode, vif->prwise_crypto,
1660 		   vif->prwise_crypto_len, vif->grp_crypto,
1661 		   vif->grp_crypto_len, vif->ch_hint);
1662 
1663 	status = ath6kl_wmi_connect_cmd(ar->wmi, vif->fw_vif_idx, vif->nw_type,
1664 					vif->dot11_auth_mode, vif->auth_mode,
1665 					vif->prwise_crypto,
1666 					vif->prwise_crypto_len,
1667 					vif->grp_crypto, vif->grp_crypto_len,
1668 					vif->ssid_len, vif->ssid,
1669 					vif->req_bssid, vif->ch_hint,
1670 					ar->connect_ctrl_flags, SUBTYPE_NONE);
1671 	set_bit(CONNECT_PEND, &vif->flags);
1672 
1673 	return 0;
1674 }
1675 
1676 static int ath6kl_cfg80211_leave_ibss(struct wiphy *wiphy,
1677 				      struct net_device *dev)
1678 {
1679 	struct ath6kl_vif *vif = netdev_priv(dev);
1680 
1681 	if (!ath6kl_cfg80211_ready(vif))
1682 		return -EIO;
1683 
1684 	ath6kl_disconnect(vif);
1685 	memset(vif->ssid, 0, sizeof(vif->ssid));
1686 	vif->ssid_len = 0;
1687 
1688 	return 0;
1689 }
1690 
1691 static const u32 cipher_suites[] = {
1692 	WLAN_CIPHER_SUITE_WEP40,
1693 	WLAN_CIPHER_SUITE_WEP104,
1694 	WLAN_CIPHER_SUITE_TKIP,
1695 	WLAN_CIPHER_SUITE_CCMP,
1696 	CCKM_KRK_CIPHER_SUITE,
1697 	WLAN_CIPHER_SUITE_SMS4,
1698 };
1699 
1700 static bool is_rate_legacy(s32 rate)
1701 {
1702 	static const s32 legacy[] = { 1000, 2000, 5500, 11000,
1703 		6000, 9000, 12000, 18000, 24000,
1704 		36000, 48000, 54000
1705 	};
1706 	u8 i;
1707 
1708 	for (i = 0; i < ARRAY_SIZE(legacy); i++)
1709 		if (rate == legacy[i])
1710 			return true;
1711 
1712 	return false;
1713 }
1714 
1715 static bool is_rate_ht20(s32 rate, u8 *mcs, bool *sgi)
1716 {
1717 	static const s32 ht20[] = { 6500, 13000, 19500, 26000, 39000,
1718 		52000, 58500, 65000, 72200
1719 	};
1720 	u8 i;
1721 
1722 	for (i = 0; i < ARRAY_SIZE(ht20); i++) {
1723 		if (rate == ht20[i]) {
1724 			if (i == ARRAY_SIZE(ht20) - 1)
1725 				/* last rate uses sgi */
1726 				*sgi = true;
1727 			else
1728 				*sgi = false;
1729 
1730 			*mcs = i;
1731 			return true;
1732 		}
1733 	}
1734 	return false;
1735 }
1736 
1737 static bool is_rate_ht40(s32 rate, u8 *mcs, bool *sgi)
1738 {
1739 	static const s32 ht40[] = { 13500, 27000, 40500, 54000,
1740 		81000, 108000, 121500, 135000,
1741 		150000
1742 	};
1743 	u8 i;
1744 
1745 	for (i = 0; i < ARRAY_SIZE(ht40); i++) {
1746 		if (rate == ht40[i]) {
1747 			if (i == ARRAY_SIZE(ht40) - 1)
1748 				/* last rate uses sgi */
1749 				*sgi = true;
1750 			else
1751 				*sgi = false;
1752 
1753 			*mcs = i;
1754 			return true;
1755 		}
1756 	}
1757 
1758 	return false;
1759 }
1760 
1761 static int ath6kl_get_station(struct wiphy *wiphy, struct net_device *dev,
1762 			      u8 *mac, struct station_info *sinfo)
1763 {
1764 	struct ath6kl *ar = ath6kl_priv(dev);
1765 	struct ath6kl_vif *vif = netdev_priv(dev);
1766 	long left;
1767 	bool sgi;
1768 	s32 rate;
1769 	int ret;
1770 	u8 mcs;
1771 
1772 	if (memcmp(mac, vif->bssid, ETH_ALEN) != 0)
1773 		return -ENOENT;
1774 
1775 	if (down_interruptible(&ar->sem))
1776 		return -EBUSY;
1777 
1778 	set_bit(STATS_UPDATE_PEND, &vif->flags);
1779 
1780 	ret = ath6kl_wmi_get_stats_cmd(ar->wmi, vif->fw_vif_idx);
1781 
1782 	if (ret != 0) {
1783 		up(&ar->sem);
1784 		return -EIO;
1785 	}
1786 
1787 	left = wait_event_interruptible_timeout(ar->event_wq,
1788 						!test_bit(STATS_UPDATE_PEND,
1789 							  &vif->flags),
1790 						WMI_TIMEOUT);
1791 
1792 	up(&ar->sem);
1793 
1794 	if (left == 0)
1795 		return -ETIMEDOUT;
1796 	else if (left < 0)
1797 		return left;
1798 
1799 	if (vif->target_stats.rx_byte) {
1800 		sinfo->rx_bytes = vif->target_stats.rx_byte;
1801 		sinfo->filled |= STATION_INFO_RX_BYTES64;
1802 		sinfo->rx_packets = vif->target_stats.rx_pkt;
1803 		sinfo->filled |= STATION_INFO_RX_PACKETS;
1804 	}
1805 
1806 	if (vif->target_stats.tx_byte) {
1807 		sinfo->tx_bytes = vif->target_stats.tx_byte;
1808 		sinfo->filled |= STATION_INFO_TX_BYTES64;
1809 		sinfo->tx_packets = vif->target_stats.tx_pkt;
1810 		sinfo->filled |= STATION_INFO_TX_PACKETS;
1811 	}
1812 
1813 	sinfo->signal = vif->target_stats.cs_rssi;
1814 	sinfo->filled |= STATION_INFO_SIGNAL;
1815 
1816 	rate = vif->target_stats.tx_ucast_rate;
1817 
1818 	if (is_rate_legacy(rate)) {
1819 		sinfo->txrate.legacy = rate / 100;
1820 	} else if (is_rate_ht20(rate, &mcs, &sgi)) {
1821 		if (sgi) {
1822 			sinfo->txrate.flags |= RATE_INFO_FLAGS_SHORT_GI;
1823 			sinfo->txrate.mcs = mcs - 1;
1824 		} else {
1825 			sinfo->txrate.mcs = mcs;
1826 		}
1827 
1828 		sinfo->txrate.flags |= RATE_INFO_FLAGS_MCS;
1829 	} else if (is_rate_ht40(rate, &mcs, &sgi)) {
1830 		if (sgi) {
1831 			sinfo->txrate.flags |= RATE_INFO_FLAGS_SHORT_GI;
1832 			sinfo->txrate.mcs = mcs - 1;
1833 		} else {
1834 			sinfo->txrate.mcs = mcs;
1835 		}
1836 
1837 		sinfo->txrate.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
1838 		sinfo->txrate.flags |= RATE_INFO_FLAGS_MCS;
1839 	} else {
1840 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1841 			   "invalid rate from stats: %d\n", rate);
1842 		ath6kl_debug_war(ar, ATH6KL_WAR_INVALID_RATE);
1843 		return 0;
1844 	}
1845 
1846 	sinfo->filled |= STATION_INFO_TX_BITRATE;
1847 
1848 	if (test_bit(CONNECTED, &vif->flags) &&
1849 	    test_bit(DTIM_PERIOD_AVAIL, &vif->flags) &&
1850 	    vif->nw_type == INFRA_NETWORK) {
1851 		sinfo->filled |= STATION_INFO_BSS_PARAM;
1852 		sinfo->bss_param.flags = 0;
1853 		sinfo->bss_param.dtim_period = vif->assoc_bss_dtim_period;
1854 		sinfo->bss_param.beacon_interval = vif->assoc_bss_beacon_int;
1855 	}
1856 
1857 	return 0;
1858 }
1859 
1860 static int ath6kl_set_pmksa(struct wiphy *wiphy, struct net_device *netdev,
1861 			    struct cfg80211_pmksa *pmksa)
1862 {
1863 	struct ath6kl *ar = ath6kl_priv(netdev);
1864 	struct ath6kl_vif *vif = netdev_priv(netdev);
1865 
1866 	return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx, pmksa->bssid,
1867 				       pmksa->pmkid, true);
1868 }
1869 
1870 static int ath6kl_del_pmksa(struct wiphy *wiphy, struct net_device *netdev,
1871 			    struct cfg80211_pmksa *pmksa)
1872 {
1873 	struct ath6kl *ar = ath6kl_priv(netdev);
1874 	struct ath6kl_vif *vif = netdev_priv(netdev);
1875 
1876 	return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx, pmksa->bssid,
1877 				       pmksa->pmkid, false);
1878 }
1879 
1880 static int ath6kl_flush_pmksa(struct wiphy *wiphy, struct net_device *netdev)
1881 {
1882 	struct ath6kl *ar = ath6kl_priv(netdev);
1883 	struct ath6kl_vif *vif = netdev_priv(netdev);
1884 
1885 	if (test_bit(CONNECTED, &vif->flags))
1886 		return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx,
1887 					       vif->bssid, NULL, false);
1888 	return 0;
1889 }
1890 
1891 static int ath6kl_wow_usr(struct ath6kl *ar, struct ath6kl_vif *vif,
1892 			  struct cfg80211_wowlan *wow, u32 *filter)
1893 {
1894 	int ret, pos;
1895 	u8 mask[WOW_PATTERN_SIZE];
1896 	u16 i;
1897 
1898 	/* Configure the patterns that we received from the user. */
1899 	for (i = 0; i < wow->n_patterns; i++) {
1900 
1901 		/*
1902 		 * Convert given nl80211 specific mask value to equivalent
1903 		 * driver specific mask value and send it to the chip along
1904 		 * with patterns. For example, If the mask value defined in
1905 		 * struct cfg80211_wowlan is 0xA (equivalent binary is 1010),
1906 		 * then equivalent driver specific mask value is
1907 		 * "0xFF 0x00 0xFF 0x00".
1908 		 */
1909 		memset(&mask, 0, sizeof(mask));
1910 		for (pos = 0; pos < wow->patterns[i].pattern_len; pos++) {
1911 			if (wow->patterns[i].mask[pos / 8] & (0x1 << (pos % 8)))
1912 				mask[pos] = 0xFF;
1913 		}
1914 		/*
1915 		 * Note: Pattern's offset is not passed as part of wowlan
1916 		 * parameter from CFG layer. So it's always passed as ZERO
1917 		 * to the firmware. It means, given WOW patterns are always
1918 		 * matched from the first byte of received pkt in the firmware.
1919 		 */
1920 		ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1921 				vif->fw_vif_idx, WOW_LIST_ID,
1922 				wow->patterns[i].pattern_len,
1923 				0 /* pattern offset */,
1924 				wow->patterns[i].pattern, mask);
1925 		if (ret)
1926 			return ret;
1927 	}
1928 
1929 	if (wow->disconnect)
1930 		*filter |= WOW_FILTER_OPTION_NWK_DISASSOC;
1931 
1932 	if (wow->magic_pkt)
1933 		*filter |= WOW_FILTER_OPTION_MAGIC_PACKET;
1934 
1935 	if (wow->gtk_rekey_failure)
1936 		*filter |= WOW_FILTER_OPTION_GTK_ERROR;
1937 
1938 	if (wow->eap_identity_req)
1939 		*filter |= WOW_FILTER_OPTION_EAP_REQ;
1940 
1941 	if (wow->four_way_handshake)
1942 		*filter |= WOW_FILTER_OPTION_8021X_4WAYHS;
1943 
1944 	return 0;
1945 }
1946 
1947 static int ath6kl_wow_ap(struct ath6kl *ar, struct ath6kl_vif *vif)
1948 {
1949 	static const u8 unicst_pattern[] = { 0x00, 0x00, 0x00,
1950 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1951 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1952 		0x00, 0x08 };
1953 	static const u8 unicst_mask[] = { 0x01, 0x00, 0x00,
1954 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1955 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1956 		0x00, 0x7f };
1957 	u8 unicst_offset = 0;
1958 	static const u8 arp_pattern[] = { 0x08, 0x06 };
1959 	static const u8 arp_mask[] = { 0xff, 0xff };
1960 	u8 arp_offset = 20;
1961 	static const u8 discvr_pattern[] = { 0xe0, 0x00, 0x00, 0xf8 };
1962 	static const u8 discvr_mask[] = { 0xf0, 0x00, 0x00, 0xf8 };
1963 	u8 discvr_offset = 38;
1964 	static const u8 dhcp_pattern[] = { 0xff, 0xff, 0xff, 0xff,
1965 		0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1966 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00,
1967 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1968 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1969 		0x00, 0x00, 0x00, 0x00, 0x00, 0x43 /* port 67 */ };
1970 	static const u8 dhcp_mask[] = { 0xff, 0xff, 0xff, 0xff,
1971 		0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1972 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xff, 0xff,
1973 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1974 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1975 		0x00, 0x00, 0x00, 0x00, 0xff, 0xff /* port 67 */ };
1976 	u8 dhcp_offset = 0;
1977 	int ret;
1978 
1979 	/* Setup unicast IP, EAPOL-like and ARP pkt pattern */
1980 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1981 			vif->fw_vif_idx, WOW_LIST_ID,
1982 			sizeof(unicst_pattern), unicst_offset,
1983 			unicst_pattern, unicst_mask);
1984 	if (ret) {
1985 		ath6kl_err("failed to add WOW unicast IP pattern\n");
1986 		return ret;
1987 	}
1988 
1989 	/* Setup all ARP pkt pattern */
1990 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1991 			vif->fw_vif_idx, WOW_LIST_ID,
1992 			sizeof(arp_pattern), arp_offset,
1993 			arp_pattern, arp_mask);
1994 	if (ret) {
1995 		ath6kl_err("failed to add WOW ARP pattern\n");
1996 		return ret;
1997 	}
1998 
1999 	/*
2000 	 * Setup multicast pattern for mDNS 224.0.0.251,
2001 	 * SSDP 239.255.255.250 and LLMNR  224.0.0.252
2002 	 */
2003 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2004 			vif->fw_vif_idx, WOW_LIST_ID,
2005 			sizeof(discvr_pattern), discvr_offset,
2006 			discvr_pattern, discvr_mask);
2007 	if (ret) {
2008 		ath6kl_err("failed to add WOW mDNS/SSDP/LLMNR pattern\n");
2009 		return ret;
2010 	}
2011 
2012 	/* Setup all DHCP broadcast pkt pattern */
2013 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2014 			vif->fw_vif_idx, WOW_LIST_ID,
2015 			sizeof(dhcp_pattern), dhcp_offset,
2016 			dhcp_pattern, dhcp_mask);
2017 	if (ret) {
2018 		ath6kl_err("failed to add WOW DHCP broadcast pattern\n");
2019 		return ret;
2020 	}
2021 
2022 	return 0;
2023 }
2024 
2025 static int ath6kl_wow_sta(struct ath6kl *ar, struct ath6kl_vif *vif)
2026 {
2027 	struct net_device *ndev = vif->ndev;
2028 	static const u8 discvr_pattern[] = { 0xe0, 0x00, 0x00, 0xf8 };
2029 	static const u8 discvr_mask[] = { 0xf0, 0x00, 0x00, 0xf8 };
2030 	u8 discvr_offset = 38;
2031 	u8 mac_mask[ETH_ALEN];
2032 	int ret;
2033 
2034 	/* Setup unicast pkt pattern */
2035 	memset(mac_mask, 0xff, ETH_ALEN);
2036 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2037 				vif->fw_vif_idx, WOW_LIST_ID,
2038 				ETH_ALEN, 0, ndev->dev_addr,
2039 				mac_mask);
2040 	if (ret) {
2041 		ath6kl_err("failed to add WOW unicast pattern\n");
2042 		return ret;
2043 	}
2044 
2045 	/*
2046 	 * Setup multicast pattern for mDNS 224.0.0.251,
2047 	 * SSDP 239.255.255.250 and LLMNR 224.0.0.252
2048 	 */
2049 	if ((ndev->flags & IFF_ALLMULTI) ||
2050 	    (ndev->flags & IFF_MULTICAST && netdev_mc_count(ndev) > 0)) {
2051 		ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2052 				vif->fw_vif_idx, WOW_LIST_ID,
2053 				sizeof(discvr_pattern), discvr_offset,
2054 				discvr_pattern, discvr_mask);
2055 		if (ret) {
2056 			ath6kl_err("failed to add WOW mDNS/SSDP/LLMNR pattern\n");
2057 			return ret;
2058 		}
2059 	}
2060 
2061 	return 0;
2062 }
2063 
2064 static int is_hsleep_mode_procsed(struct ath6kl_vif *vif)
2065 {
2066 	return test_bit(HOST_SLEEP_MODE_CMD_PROCESSED, &vif->flags);
2067 }
2068 
2069 static bool is_ctrl_ep_empty(struct ath6kl *ar)
2070 {
2071 	return !ar->tx_pending[ar->ctrl_ep];
2072 }
2073 
2074 static int ath6kl_cfg80211_host_sleep(struct ath6kl *ar, struct ath6kl_vif *vif)
2075 {
2076 	int ret, left;
2077 
2078 	clear_bit(HOST_SLEEP_MODE_CMD_PROCESSED, &vif->flags);
2079 
2080 	ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2081 						 ATH6KL_HOST_MODE_ASLEEP);
2082 	if (ret)
2083 		return ret;
2084 
2085 	left = wait_event_interruptible_timeout(ar->event_wq,
2086 						is_hsleep_mode_procsed(vif),
2087 						WMI_TIMEOUT);
2088 	if (left == 0) {
2089 		ath6kl_warn("timeout, didn't get host sleep cmd processed event\n");
2090 		ret = -ETIMEDOUT;
2091 	} else if (left < 0) {
2092 		ath6kl_warn("error while waiting for host sleep cmd processed event %d\n",
2093 			    left);
2094 		ret = left;
2095 	}
2096 
2097 	if (ar->tx_pending[ar->ctrl_ep]) {
2098 		left = wait_event_interruptible_timeout(ar->event_wq,
2099 							is_ctrl_ep_empty(ar),
2100 							WMI_TIMEOUT);
2101 		if (left == 0) {
2102 			ath6kl_warn("clear wmi ctrl data timeout\n");
2103 			ret = -ETIMEDOUT;
2104 		} else if (left < 0) {
2105 			ath6kl_warn("clear wmi ctrl data failed: %d\n", left);
2106 			ret = left;
2107 		}
2108 	}
2109 
2110 	return ret;
2111 }
2112 
2113 static int ath6kl_wow_suspend_vif(struct ath6kl_vif *vif,
2114 				  struct cfg80211_wowlan *wow, u32 *filter)
2115 {
2116 	struct ath6kl *ar = vif->ar;
2117 	struct in_device *in_dev;
2118 	struct in_ifaddr *ifa;
2119 	int ret;
2120 	u16 i, bmiss_time;
2121 	__be32 ips[MAX_IP_ADDRS];
2122 	u8 index = 0;
2123 
2124 	if (!test_bit(NETDEV_MCAST_ALL_ON, &vif->flags) &&
2125 	    test_bit(ATH6KL_FW_CAPABILITY_WOW_MULTICAST_FILTER,
2126 		     ar->fw_capabilities)) {
2127 		ret = ath6kl_wmi_mcast_filter_cmd(vif->ar->wmi,
2128 						vif->fw_vif_idx, false);
2129 		if (ret)
2130 			return ret;
2131 	}
2132 
2133 	/* Clear existing WOW patterns */
2134 	for (i = 0; i < WOW_MAX_FILTERS_PER_LIST; i++)
2135 		ath6kl_wmi_del_wow_pattern_cmd(ar->wmi, vif->fw_vif_idx,
2136 					       WOW_LIST_ID, i);
2137 
2138 	/*
2139 	 * Skip the default WOW pattern configuration
2140 	 * if the driver receives any WOW patterns from
2141 	 * the user.
2142 	 */
2143 	if (wow)
2144 		ret = ath6kl_wow_usr(ar, vif, wow, filter);
2145 	else if (vif->nw_type == AP_NETWORK)
2146 		ret = ath6kl_wow_ap(ar, vif);
2147 	else
2148 		ret = ath6kl_wow_sta(ar, vif);
2149 
2150 	if (ret)
2151 		return ret;
2152 
2153 	netif_stop_queue(vif->ndev);
2154 
2155 	if (vif->nw_type != AP_NETWORK) {
2156 		ret = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
2157 						    ATH6KL_MAX_WOW_LISTEN_INTL,
2158 						    0);
2159 		if (ret)
2160 			return ret;
2161 
2162 		/* Set listen interval x 15 times as bmiss time */
2163 		bmiss_time = ATH6KL_MAX_WOW_LISTEN_INTL * 15;
2164 		if (bmiss_time > ATH6KL_MAX_BMISS_TIME)
2165 			bmiss_time = ATH6KL_MAX_BMISS_TIME;
2166 
2167 		ret = ath6kl_wmi_bmisstime_cmd(ar->wmi, vif->fw_vif_idx,
2168 					       bmiss_time, 0);
2169 		if (ret)
2170 			return ret;
2171 
2172 		ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2173 						0xFFFF, 0, 0xFFFF, 0, 0, 0,
2174 						0, 0, 0, 0);
2175 		if (ret)
2176 			return ret;
2177 	}
2178 
2179 	/* Setup own IP addr for ARP agent. */
2180 	in_dev = __in_dev_get_rtnl(vif->ndev);
2181 	if (!in_dev)
2182 		return 0;
2183 
2184 	ifa = in_dev->ifa_list;
2185 	memset(&ips, 0, sizeof(ips));
2186 
2187 	/* Configure IP addr only if IP address count < MAX_IP_ADDRS */
2188 	while (index < MAX_IP_ADDRS && ifa) {
2189 		ips[index] = ifa->ifa_local;
2190 		ifa = ifa->ifa_next;
2191 		index++;
2192 	}
2193 
2194 	if (ifa) {
2195 		ath6kl_err("total IP addr count is exceeding fw limit\n");
2196 		return -EINVAL;
2197 	}
2198 
2199 	ret = ath6kl_wmi_set_ip_cmd(ar->wmi, vif->fw_vif_idx, ips[0], ips[1]);
2200 	if (ret) {
2201 		ath6kl_err("fail to setup ip for arp agent\n");
2202 		return ret;
2203 	}
2204 
2205 	return ret;
2206 }
2207 
2208 static int ath6kl_wow_suspend(struct ath6kl *ar, struct cfg80211_wowlan *wow)
2209 {
2210 	struct ath6kl_vif *first_vif, *vif;
2211 	int ret = 0;
2212 	u32 filter = 0;
2213 	bool connected = false;
2214 
2215 	/* enter / leave wow suspend on first vif always */
2216 	first_vif = ath6kl_vif_first(ar);
2217 	if (WARN_ON(unlikely(!first_vif)) ||
2218 	    !ath6kl_cfg80211_ready(first_vif))
2219 		return -EIO;
2220 
2221 	if (wow && (wow->n_patterns > WOW_MAX_FILTERS_PER_LIST))
2222 		return -EINVAL;
2223 
2224 	/* install filters for each connected vif */
2225 	spin_lock_bh(&ar->list_lock);
2226 	list_for_each_entry(vif, &ar->vif_list, list) {
2227 		if (!test_bit(CONNECTED, &vif->flags) ||
2228 		    !ath6kl_cfg80211_ready(vif))
2229 			continue;
2230 		connected = true;
2231 
2232 		ret = ath6kl_wow_suspend_vif(vif, wow, &filter);
2233 		if (ret)
2234 			break;
2235 	}
2236 	spin_unlock_bh(&ar->list_lock);
2237 
2238 	if (!connected)
2239 		return -ENOTCONN;
2240 	else if (ret)
2241 		return ret;
2242 
2243 	ar->state = ATH6KL_STATE_SUSPENDING;
2244 
2245 	ret = ath6kl_wmi_set_wow_mode_cmd(ar->wmi, first_vif->fw_vif_idx,
2246 					  ATH6KL_WOW_MODE_ENABLE,
2247 					  filter,
2248 					  WOW_HOST_REQ_DELAY);
2249 	if (ret)
2250 		return ret;
2251 
2252 	return ath6kl_cfg80211_host_sleep(ar, first_vif);
2253 }
2254 
2255 static int ath6kl_wow_resume_vif(struct ath6kl_vif *vif)
2256 {
2257 	struct ath6kl *ar = vif->ar;
2258 	int ret;
2259 
2260 	if (vif->nw_type != AP_NETWORK) {
2261 		ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2262 						0, 0, 0, 0, 0, 0, 3, 0, 0, 0);
2263 		if (ret)
2264 			return ret;
2265 
2266 		ret = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
2267 						    vif->listen_intvl_t, 0);
2268 		if (ret)
2269 			return ret;
2270 
2271 		ret = ath6kl_wmi_bmisstime_cmd(ar->wmi, vif->fw_vif_idx,
2272 					       vif->bmiss_time_t, 0);
2273 		if (ret)
2274 			return ret;
2275 	}
2276 
2277 	if (!test_bit(NETDEV_MCAST_ALL_OFF, &vif->flags) &&
2278 	    test_bit(ATH6KL_FW_CAPABILITY_WOW_MULTICAST_FILTER,
2279 		     ar->fw_capabilities)) {
2280 		ret = ath6kl_wmi_mcast_filter_cmd(vif->ar->wmi,
2281 						  vif->fw_vif_idx, true);
2282 		if (ret)
2283 			return ret;
2284 	}
2285 
2286 	netif_wake_queue(vif->ndev);
2287 
2288 	return 0;
2289 }
2290 
2291 static int ath6kl_wow_resume(struct ath6kl *ar)
2292 {
2293 	struct ath6kl_vif *vif;
2294 	int ret;
2295 
2296 	vif = ath6kl_vif_first(ar);
2297 	if (WARN_ON(unlikely(!vif)) ||
2298 	    !ath6kl_cfg80211_ready(vif))
2299 		return -EIO;
2300 
2301 	ar->state = ATH6KL_STATE_RESUMING;
2302 
2303 	ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2304 						 ATH6KL_HOST_MODE_AWAKE);
2305 	if (ret) {
2306 		ath6kl_warn("Failed to configure host sleep mode for wow resume: %d\n",
2307 			    ret);
2308 		goto cleanup;
2309 	}
2310 
2311 	spin_lock_bh(&ar->list_lock);
2312 	list_for_each_entry(vif, &ar->vif_list, list) {
2313 		if (!test_bit(CONNECTED, &vif->flags) ||
2314 		    !ath6kl_cfg80211_ready(vif))
2315 			continue;
2316 		ret = ath6kl_wow_resume_vif(vif);
2317 		if (ret)
2318 			break;
2319 	}
2320 	spin_unlock_bh(&ar->list_lock);
2321 
2322 	if (ret)
2323 		goto cleanup;
2324 
2325 	ar->state = ATH6KL_STATE_ON;
2326 	return 0;
2327 
2328 cleanup:
2329 	ar->state = ATH6KL_STATE_WOW;
2330 	return ret;
2331 }
2332 
2333 static int ath6kl_cfg80211_deepsleep_suspend(struct ath6kl *ar)
2334 {
2335 	struct ath6kl_vif *vif;
2336 	int ret;
2337 
2338 	vif = ath6kl_vif_first(ar);
2339 	if (!vif)
2340 		return -EIO;
2341 
2342 	if (!test_bit(WMI_READY, &ar->flag)) {
2343 		ath6kl_err("deepsleep failed as wmi is not ready\n");
2344 		return -EIO;
2345 	}
2346 
2347 	ath6kl_cfg80211_stop_all(ar);
2348 
2349 	/* Save the current power mode before enabling power save */
2350 	ar->wmi->saved_pwr_mode = ar->wmi->pwr_mode;
2351 
2352 	ret = ath6kl_wmi_powermode_cmd(ar->wmi, 0, REC_POWER);
2353 	if (ret)
2354 		return ret;
2355 
2356 	/* Disable WOW mode */
2357 	ret = ath6kl_wmi_set_wow_mode_cmd(ar->wmi, vif->fw_vif_idx,
2358 					  ATH6KL_WOW_MODE_DISABLE,
2359 					  0, 0);
2360 	if (ret)
2361 		return ret;
2362 
2363 	/* Flush all non control pkts in TX path */
2364 	ath6kl_tx_data_cleanup(ar);
2365 
2366 	ret = ath6kl_cfg80211_host_sleep(ar, vif);
2367 	if (ret)
2368 		return ret;
2369 
2370 	return 0;
2371 }
2372 
2373 static int ath6kl_cfg80211_deepsleep_resume(struct ath6kl *ar)
2374 {
2375 	struct ath6kl_vif *vif;
2376 	int ret;
2377 
2378 	vif = ath6kl_vif_first(ar);
2379 
2380 	if (!vif)
2381 		return -EIO;
2382 
2383 	if (ar->wmi->pwr_mode != ar->wmi->saved_pwr_mode) {
2384 		ret = ath6kl_wmi_powermode_cmd(ar->wmi, 0,
2385 					       ar->wmi->saved_pwr_mode);
2386 		if (ret)
2387 			return ret;
2388 	}
2389 
2390 	ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2391 						 ATH6KL_HOST_MODE_AWAKE);
2392 	if (ret)
2393 		return ret;
2394 
2395 	ar->state = ATH6KL_STATE_ON;
2396 
2397 	/* Reset scan parameter to default values */
2398 	ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2399 					0, 0, 0, 0, 0, 0, 3, 0, 0, 0);
2400 	if (ret)
2401 		return ret;
2402 
2403 	return 0;
2404 }
2405 
2406 int ath6kl_cfg80211_suspend(struct ath6kl *ar,
2407 			    enum ath6kl_cfg_suspend_mode mode,
2408 			    struct cfg80211_wowlan *wow)
2409 {
2410 	struct ath6kl_vif *vif;
2411 	enum ath6kl_state prev_state;
2412 	int ret;
2413 
2414 	switch (mode) {
2415 	case ATH6KL_CFG_SUSPEND_WOW:
2416 
2417 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "wow mode suspend\n");
2418 
2419 		/* Flush all non control pkts in TX path */
2420 		ath6kl_tx_data_cleanup(ar);
2421 
2422 		prev_state = ar->state;
2423 
2424 		ret = ath6kl_wow_suspend(ar, wow);
2425 		if (ret) {
2426 			ar->state = prev_state;
2427 			return ret;
2428 		}
2429 
2430 		ar->state = ATH6KL_STATE_WOW;
2431 		break;
2432 
2433 	case ATH6KL_CFG_SUSPEND_DEEPSLEEP:
2434 
2435 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "deep sleep suspend\n");
2436 
2437 		ret = ath6kl_cfg80211_deepsleep_suspend(ar);
2438 		if (ret) {
2439 			ath6kl_err("deepsleep suspend failed: %d\n", ret);
2440 			return ret;
2441 		}
2442 
2443 		ar->state = ATH6KL_STATE_DEEPSLEEP;
2444 
2445 		break;
2446 
2447 	case ATH6KL_CFG_SUSPEND_CUTPOWER:
2448 
2449 		ath6kl_cfg80211_stop_all(ar);
2450 
2451 		if (ar->state == ATH6KL_STATE_OFF) {
2452 			ath6kl_dbg(ATH6KL_DBG_SUSPEND,
2453 				   "suspend hw off, no action for cutpower\n");
2454 			break;
2455 		}
2456 
2457 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "suspend cutting power\n");
2458 
2459 		ret = ath6kl_init_hw_stop(ar);
2460 		if (ret) {
2461 			ath6kl_warn("failed to stop hw during suspend: %d\n",
2462 				    ret);
2463 		}
2464 
2465 		ar->state = ATH6KL_STATE_CUTPOWER;
2466 
2467 		break;
2468 
2469 	default:
2470 		break;
2471 	}
2472 
2473 	list_for_each_entry(vif, &ar->vif_list, list)
2474 		ath6kl_cfg80211_scan_complete_event(vif, true);
2475 
2476 	return 0;
2477 }
2478 EXPORT_SYMBOL(ath6kl_cfg80211_suspend);
2479 
2480 int ath6kl_cfg80211_resume(struct ath6kl *ar)
2481 {
2482 	int ret;
2483 
2484 	switch (ar->state) {
2485 	case  ATH6KL_STATE_WOW:
2486 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "wow mode resume\n");
2487 
2488 		ret = ath6kl_wow_resume(ar);
2489 		if (ret) {
2490 			ath6kl_warn("wow mode resume failed: %d\n", ret);
2491 			return ret;
2492 		}
2493 
2494 		break;
2495 
2496 	case ATH6KL_STATE_DEEPSLEEP:
2497 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "deep sleep resume\n");
2498 
2499 		ret = ath6kl_cfg80211_deepsleep_resume(ar);
2500 		if (ret) {
2501 			ath6kl_warn("deep sleep resume failed: %d\n", ret);
2502 			return ret;
2503 		}
2504 		break;
2505 
2506 	case ATH6KL_STATE_CUTPOWER:
2507 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "resume restoring power\n");
2508 
2509 		ret = ath6kl_init_hw_start(ar);
2510 		if (ret) {
2511 			ath6kl_warn("Failed to boot hw in resume: %d\n", ret);
2512 			return ret;
2513 		}
2514 		break;
2515 
2516 	default:
2517 		break;
2518 	}
2519 
2520 	return 0;
2521 }
2522 EXPORT_SYMBOL(ath6kl_cfg80211_resume);
2523 
2524 #ifdef CONFIG_PM
2525 
2526 /* hif layer decides what suspend mode to use */
2527 static int __ath6kl_cfg80211_suspend(struct wiphy *wiphy,
2528 				 struct cfg80211_wowlan *wow)
2529 {
2530 	struct ath6kl *ar = wiphy_priv(wiphy);
2531 
2532 	ath6kl_recovery_suspend(ar);
2533 
2534 	return ath6kl_hif_suspend(ar, wow);
2535 }
2536 
2537 static int __ath6kl_cfg80211_resume(struct wiphy *wiphy)
2538 {
2539 	struct ath6kl *ar = wiphy_priv(wiphy);
2540 	int err;
2541 
2542 	err = ath6kl_hif_resume(ar);
2543 	if (err)
2544 		return err;
2545 
2546 	ath6kl_recovery_resume(ar);
2547 
2548 	return 0;
2549 }
2550 
2551 /*
2552  * FIXME: WOW suspend mode is selected if the host sdio controller supports
2553  * both sdio irq wake up and keep power. The target pulls sdio data line to
2554  * wake up the host when WOW pattern matches. This causes sdio irq handler
2555  * is being called in the host side which internally hits ath6kl's RX path.
2556  *
2557  * Since sdio interrupt is not disabled, RX path executes even before
2558  * the host executes the actual resume operation from PM module.
2559  *
2560  * In the current scenario, WOW resume should happen before start processing
2561  * any data from the target. So It's required to perform WOW resume in RX path.
2562  * Ideally we should perform WOW resume only in the actual platform
2563  * resume path. This area needs bit rework to avoid WOW resume in RX path.
2564  *
2565  * ath6kl_check_wow_status() is called from ath6kl_rx().
2566  */
2567 void ath6kl_check_wow_status(struct ath6kl *ar)
2568 {
2569 	if (ar->state == ATH6KL_STATE_SUSPENDING)
2570 		return;
2571 
2572 	if (ar->state == ATH6KL_STATE_WOW)
2573 		ath6kl_cfg80211_resume(ar);
2574 }
2575 
2576 #else
2577 
2578 void ath6kl_check_wow_status(struct ath6kl *ar)
2579 {
2580 }
2581 #endif
2582 
2583 static int ath6kl_set_htcap(struct ath6kl_vif *vif, enum ieee80211_band band,
2584 			    bool ht_enable)
2585 {
2586 	struct ath6kl_htcap *htcap = &vif->htcap[band];
2587 
2588 	if (htcap->ht_enable == ht_enable)
2589 		return 0;
2590 
2591 	if (ht_enable) {
2592 		/* Set default ht capabilities */
2593 		htcap->ht_enable = true;
2594 		htcap->cap_info = (band == IEEE80211_BAND_2GHZ) ?
2595 				   ath6kl_g_htcap : ath6kl_a_htcap;
2596 		htcap->ampdu_factor = IEEE80211_HT_MAX_AMPDU_16K;
2597 	} else /* Disable ht */
2598 		memset(htcap, 0, sizeof(*htcap));
2599 
2600 	return ath6kl_wmi_set_htcap_cmd(vif->ar->wmi, vif->fw_vif_idx,
2601 					band, htcap);
2602 }
2603 
2604 static int ath6kl_restore_htcap(struct ath6kl_vif *vif)
2605 {
2606 	struct wiphy *wiphy = vif->ar->wiphy;
2607 	int band, ret = 0;
2608 
2609 	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
2610 		if (!wiphy->bands[band])
2611 			continue;
2612 
2613 		ret = ath6kl_set_htcap(vif, band,
2614 				wiphy->bands[band]->ht_cap.ht_supported);
2615 		if (ret)
2616 			return ret;
2617 	}
2618 
2619 	return ret;
2620 }
2621 
2622 static bool ath6kl_is_p2p_ie(const u8 *pos)
2623 {
2624 	return pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 &&
2625 		pos[2] == 0x50 && pos[3] == 0x6f &&
2626 		pos[4] == 0x9a && pos[5] == 0x09;
2627 }
2628 
2629 static int ath6kl_set_ap_probe_resp_ies(struct ath6kl_vif *vif,
2630 					const u8 *ies, size_t ies_len)
2631 {
2632 	struct ath6kl *ar = vif->ar;
2633 	const u8 *pos;
2634 	u8 *buf = NULL;
2635 	size_t len = 0;
2636 	int ret;
2637 
2638 	/*
2639 	 * Filter out P2P IE(s) since they will be included depending on
2640 	 * the Probe Request frame in ath6kl_send_go_probe_resp().
2641 	 */
2642 
2643 	if (ies && ies_len) {
2644 		buf = kmalloc(ies_len, GFP_KERNEL);
2645 		if (buf == NULL)
2646 			return -ENOMEM;
2647 		pos = ies;
2648 		while (pos + 1 < ies + ies_len) {
2649 			if (pos + 2 + pos[1] > ies + ies_len)
2650 				break;
2651 			if (!ath6kl_is_p2p_ie(pos)) {
2652 				memcpy(buf + len, pos, 2 + pos[1]);
2653 				len += 2 + pos[1];
2654 			}
2655 			pos += 2 + pos[1];
2656 		}
2657 	}
2658 
2659 	ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2660 				       WMI_FRAME_PROBE_RESP, buf, len);
2661 	kfree(buf);
2662 	return ret;
2663 }
2664 
2665 static int ath6kl_set_ies(struct ath6kl_vif *vif,
2666 			  struct cfg80211_beacon_data *info)
2667 {
2668 	struct ath6kl *ar = vif->ar;
2669 	int res;
2670 
2671 	/* this also clears IE in fw if it's not set */
2672 	res = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2673 				       WMI_FRAME_BEACON,
2674 				       info->beacon_ies,
2675 				       info->beacon_ies_len);
2676 	if (res)
2677 		return res;
2678 
2679 	/* this also clears IE in fw if it's not set */
2680 	res = ath6kl_set_ap_probe_resp_ies(vif, info->proberesp_ies,
2681 					   info->proberesp_ies_len);
2682 	if (res)
2683 		return res;
2684 
2685 	/* this also clears IE in fw if it's not set */
2686 	res = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2687 				       WMI_FRAME_ASSOC_RESP,
2688 				       info->assocresp_ies,
2689 				       info->assocresp_ies_len);
2690 	if (res)
2691 		return res;
2692 
2693 	return 0;
2694 }
2695 
2696 static int ath6kl_get_rsn_capab(struct cfg80211_beacon_data *beacon,
2697 				u8 *rsn_capab)
2698 {
2699 	const u8 *rsn_ie;
2700 	size_t rsn_ie_len;
2701 	u16 cnt;
2702 
2703 	if (!beacon->tail)
2704 		return -EINVAL;
2705 
2706 	rsn_ie = cfg80211_find_ie(WLAN_EID_RSN, beacon->tail, beacon->tail_len);
2707 	if (!rsn_ie)
2708 		return -EINVAL;
2709 
2710 	rsn_ie_len = *(rsn_ie + 1);
2711 	/* skip element id and length */
2712 	rsn_ie += 2;
2713 
2714 	/* skip version */
2715 	if (rsn_ie_len < 2)
2716 		return -EINVAL;
2717 	rsn_ie +=  2;
2718 	rsn_ie_len -= 2;
2719 
2720 	/* skip group cipher suite */
2721 	if (rsn_ie_len < 4)
2722 		return 0;
2723 	rsn_ie +=  4;
2724 	rsn_ie_len -= 4;
2725 
2726 	/* skip pairwise cipher suite */
2727 	if (rsn_ie_len < 2)
2728 		return 0;
2729 	cnt = get_unaligned_le16(rsn_ie);
2730 	rsn_ie += (2 + cnt * 4);
2731 	rsn_ie_len -= (2 + cnt * 4);
2732 
2733 	/* skip akm suite */
2734 	if (rsn_ie_len < 2)
2735 		return 0;
2736 	cnt = get_unaligned_le16(rsn_ie);
2737 	rsn_ie += (2 + cnt * 4);
2738 	rsn_ie_len -= (2 + cnt * 4);
2739 
2740 	if (rsn_ie_len < 2)
2741 		return 0;
2742 
2743 	memcpy(rsn_capab, rsn_ie, 2);
2744 
2745 	return 0;
2746 }
2747 
2748 static int ath6kl_start_ap(struct wiphy *wiphy, struct net_device *dev,
2749 			   struct cfg80211_ap_settings *info)
2750 {
2751 	struct ath6kl *ar = ath6kl_priv(dev);
2752 	struct ath6kl_vif *vif = netdev_priv(dev);
2753 	struct ieee80211_mgmt *mgmt;
2754 	bool hidden = false;
2755 	u8 *ies;
2756 	int ies_len;
2757 	struct wmi_connect_cmd p;
2758 	int res;
2759 	int i, ret;
2760 	u16 rsn_capab = 0;
2761 	int inactivity_timeout = 0;
2762 
2763 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s:\n", __func__);
2764 
2765 	if (!ath6kl_cfg80211_ready(vif))
2766 		return -EIO;
2767 
2768 	if (vif->next_mode != AP_NETWORK)
2769 		return -EOPNOTSUPP;
2770 
2771 	res = ath6kl_set_ies(vif, &info->beacon);
2772 
2773 	ar->ap_mode_bkey.valid = false;
2774 
2775 	ret = ath6kl_wmi_ap_set_beacon_intvl_cmd(ar->wmi, vif->fw_vif_idx,
2776 						 info->beacon_interval);
2777 
2778 	if (ret)
2779 		ath6kl_warn("Failed to set beacon interval: %d\n", ret);
2780 
2781 	ret = ath6kl_wmi_ap_set_dtim_cmd(ar->wmi, vif->fw_vif_idx,
2782 					 info->dtim_period);
2783 
2784 	/* ignore error, just print a warning and continue normally */
2785 	if (ret)
2786 		ath6kl_warn("Failed to set dtim_period in beacon: %d\n", ret);
2787 
2788 	if (info->beacon.head == NULL)
2789 		return -EINVAL;
2790 	mgmt = (struct ieee80211_mgmt *) info->beacon.head;
2791 	ies = mgmt->u.beacon.variable;
2792 	if (ies > info->beacon.head + info->beacon.head_len)
2793 		return -EINVAL;
2794 	ies_len = info->beacon.head + info->beacon.head_len - ies;
2795 
2796 	if (info->ssid == NULL)
2797 		return -EINVAL;
2798 	memcpy(vif->ssid, info->ssid, info->ssid_len);
2799 	vif->ssid_len = info->ssid_len;
2800 	if (info->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE)
2801 		hidden = true;
2802 
2803 	res = ath6kl_wmi_ap_hidden_ssid(ar->wmi, vif->fw_vif_idx, hidden);
2804 	if (res)
2805 		return res;
2806 
2807 	ret = ath6kl_set_auth_type(vif, info->auth_type);
2808 	if (ret)
2809 		return ret;
2810 
2811 	memset(&p, 0, sizeof(p));
2812 
2813 	for (i = 0; i < info->crypto.n_akm_suites; i++) {
2814 		switch (info->crypto.akm_suites[i]) {
2815 		case WLAN_AKM_SUITE_8021X:
2816 			if (info->crypto.wpa_versions & NL80211_WPA_VERSION_1)
2817 				p.auth_mode |= WPA_AUTH;
2818 			if (info->crypto.wpa_versions & NL80211_WPA_VERSION_2)
2819 				p.auth_mode |= WPA2_AUTH;
2820 			break;
2821 		case WLAN_AKM_SUITE_PSK:
2822 			if (info->crypto.wpa_versions & NL80211_WPA_VERSION_1)
2823 				p.auth_mode |= WPA_PSK_AUTH;
2824 			if (info->crypto.wpa_versions & NL80211_WPA_VERSION_2)
2825 				p.auth_mode |= WPA2_PSK_AUTH;
2826 			break;
2827 		}
2828 	}
2829 	if (p.auth_mode == 0)
2830 		p.auth_mode = NONE_AUTH;
2831 	vif->auth_mode = p.auth_mode;
2832 
2833 	for (i = 0; i < info->crypto.n_ciphers_pairwise; i++) {
2834 		switch (info->crypto.ciphers_pairwise[i]) {
2835 		case WLAN_CIPHER_SUITE_WEP40:
2836 		case WLAN_CIPHER_SUITE_WEP104:
2837 			p.prwise_crypto_type |= WEP_CRYPT;
2838 			break;
2839 		case WLAN_CIPHER_SUITE_TKIP:
2840 			p.prwise_crypto_type |= TKIP_CRYPT;
2841 			break;
2842 		case WLAN_CIPHER_SUITE_CCMP:
2843 			p.prwise_crypto_type |= AES_CRYPT;
2844 			break;
2845 		case WLAN_CIPHER_SUITE_SMS4:
2846 			p.prwise_crypto_type |= WAPI_CRYPT;
2847 			break;
2848 		}
2849 	}
2850 	if (p.prwise_crypto_type == 0) {
2851 		p.prwise_crypto_type = NONE_CRYPT;
2852 		ath6kl_set_cipher(vif, 0, true);
2853 	} else if (info->crypto.n_ciphers_pairwise == 1)
2854 		ath6kl_set_cipher(vif, info->crypto.ciphers_pairwise[0], true);
2855 
2856 	switch (info->crypto.cipher_group) {
2857 	case WLAN_CIPHER_SUITE_WEP40:
2858 	case WLAN_CIPHER_SUITE_WEP104:
2859 		p.grp_crypto_type = WEP_CRYPT;
2860 		break;
2861 	case WLAN_CIPHER_SUITE_TKIP:
2862 		p.grp_crypto_type = TKIP_CRYPT;
2863 		break;
2864 	case WLAN_CIPHER_SUITE_CCMP:
2865 		p.grp_crypto_type = AES_CRYPT;
2866 		break;
2867 	case WLAN_CIPHER_SUITE_SMS4:
2868 		p.grp_crypto_type = WAPI_CRYPT;
2869 		break;
2870 	default:
2871 		p.grp_crypto_type = NONE_CRYPT;
2872 		break;
2873 	}
2874 	ath6kl_set_cipher(vif, info->crypto.cipher_group, false);
2875 
2876 	p.nw_type = AP_NETWORK;
2877 	vif->nw_type = vif->next_mode;
2878 
2879 	p.ssid_len = vif->ssid_len;
2880 	memcpy(p.ssid, vif->ssid, vif->ssid_len);
2881 	p.dot11_auth_mode = vif->dot11_auth_mode;
2882 	p.ch = cpu_to_le16(info->chandef.chan->center_freq);
2883 
2884 	/* Enable uAPSD support by default */
2885 	res = ath6kl_wmi_ap_set_apsd(ar->wmi, vif->fw_vif_idx, true);
2886 	if (res < 0)
2887 		return res;
2888 
2889 	if (vif->wdev.iftype == NL80211_IFTYPE_P2P_GO) {
2890 		p.nw_subtype = SUBTYPE_P2PGO;
2891 	} else {
2892 		/*
2893 		 * Due to firmware limitation, it is not possible to
2894 		 * do P2P mgmt operations in AP mode
2895 		 */
2896 		p.nw_subtype = SUBTYPE_NONE;
2897 	}
2898 
2899 	if (info->inactivity_timeout) {
2900 
2901 		inactivity_timeout = info->inactivity_timeout;
2902 
2903 		if (ar->hw.flags & ATH6KL_HW_AP_INACTIVITY_MINS)
2904 			inactivity_timeout = DIV_ROUND_UP(inactivity_timeout,
2905 							  60);
2906 
2907 		res = ath6kl_wmi_set_inact_period(ar->wmi, vif->fw_vif_idx,
2908 						  inactivity_timeout);
2909 		if (res < 0)
2910 			return res;
2911 	}
2912 
2913 	if (ath6kl_set_htcap(vif, info->chandef.chan->band,
2914 			     cfg80211_get_chandef_type(&info->chandef)
2915 					!= NL80211_CHAN_NO_HT))
2916 		return -EIO;
2917 
2918 	/*
2919 	 * Get the PTKSA replay counter in the RSN IE. Supplicant
2920 	 * will use the RSN IE in M3 message and firmware has to
2921 	 * advertise the same in beacon/probe response. Send
2922 	 * the complete RSN IE capability field to firmware
2923 	 */
2924 	if (!ath6kl_get_rsn_capab(&info->beacon, (u8 *) &rsn_capab) &&
2925 	    test_bit(ATH6KL_FW_CAPABILITY_RSN_CAP_OVERRIDE,
2926 		     ar->fw_capabilities)) {
2927 		res = ath6kl_wmi_set_ie_cmd(ar->wmi, vif->fw_vif_idx,
2928 					    WLAN_EID_RSN, WMI_RSN_IE_CAPB,
2929 					    (const u8 *) &rsn_capab,
2930 					    sizeof(rsn_capab));
2931 		vif->rsn_capab = rsn_capab;
2932 		if (res < 0)
2933 			return res;
2934 	}
2935 
2936 	memcpy(&vif->profile, &p, sizeof(p));
2937 	res = ath6kl_wmi_ap_profile_commit(ar->wmi, vif->fw_vif_idx, &p);
2938 	if (res < 0)
2939 		return res;
2940 
2941 	return 0;
2942 }
2943 
2944 static int ath6kl_change_beacon(struct wiphy *wiphy, struct net_device *dev,
2945 				struct cfg80211_beacon_data *beacon)
2946 {
2947 	struct ath6kl_vif *vif = netdev_priv(dev);
2948 
2949 	if (!ath6kl_cfg80211_ready(vif))
2950 		return -EIO;
2951 
2952 	if (vif->next_mode != AP_NETWORK)
2953 		return -EOPNOTSUPP;
2954 
2955 	return ath6kl_set_ies(vif, beacon);
2956 }
2957 
2958 static int ath6kl_stop_ap(struct wiphy *wiphy, struct net_device *dev)
2959 {
2960 	struct ath6kl *ar = ath6kl_priv(dev);
2961 	struct ath6kl_vif *vif = netdev_priv(dev);
2962 
2963 	if (vif->nw_type != AP_NETWORK)
2964 		return -EOPNOTSUPP;
2965 	if (!test_bit(CONNECTED, &vif->flags))
2966 		return -ENOTCONN;
2967 
2968 	ath6kl_wmi_disconnect_cmd(ar->wmi, vif->fw_vif_idx);
2969 	clear_bit(CONNECTED, &vif->flags);
2970 
2971 	/* Restore ht setting in firmware */
2972 	return ath6kl_restore_htcap(vif);
2973 }
2974 
2975 static const u8 bcast_addr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
2976 
2977 static int ath6kl_del_station(struct wiphy *wiphy, struct net_device *dev,
2978 			      u8 *mac)
2979 {
2980 	struct ath6kl *ar = ath6kl_priv(dev);
2981 	struct ath6kl_vif *vif = netdev_priv(dev);
2982 	const u8 *addr = mac ? mac : bcast_addr;
2983 
2984 	return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx, WMI_AP_DEAUTH,
2985 				      addr, WLAN_REASON_PREV_AUTH_NOT_VALID);
2986 }
2987 
2988 static int ath6kl_change_station(struct wiphy *wiphy, struct net_device *dev,
2989 				 u8 *mac, struct station_parameters *params)
2990 {
2991 	struct ath6kl *ar = ath6kl_priv(dev);
2992 	struct ath6kl_vif *vif = netdev_priv(dev);
2993 
2994 	if (vif->nw_type != AP_NETWORK)
2995 		return -EOPNOTSUPP;
2996 
2997 	/* Use this only for authorizing/unauthorizing a station */
2998 	if (!(params->sta_flags_mask & BIT(NL80211_STA_FLAG_AUTHORIZED)))
2999 		return -EOPNOTSUPP;
3000 
3001 	if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED))
3002 		return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx,
3003 					      WMI_AP_MLME_AUTHORIZE, mac, 0);
3004 	return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx,
3005 				      WMI_AP_MLME_UNAUTHORIZE, mac, 0);
3006 }
3007 
3008 static int ath6kl_remain_on_channel(struct wiphy *wiphy,
3009 				    struct wireless_dev *wdev,
3010 				    struct ieee80211_channel *chan,
3011 				    unsigned int duration,
3012 				    u64 *cookie)
3013 {
3014 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3015 	struct ath6kl *ar = ath6kl_priv(vif->ndev);
3016 	u32 id;
3017 
3018 	/* TODO: if already pending or ongoing remain-on-channel,
3019 	 * return -EBUSY */
3020 	id = ++vif->last_roc_id;
3021 	if (id == 0) {
3022 		/* Do not use 0 as the cookie value */
3023 		id = ++vif->last_roc_id;
3024 	}
3025 	*cookie = id;
3026 
3027 	return ath6kl_wmi_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx,
3028 					     chan->center_freq, duration);
3029 }
3030 
3031 static int ath6kl_cancel_remain_on_channel(struct wiphy *wiphy,
3032 					   struct wireless_dev *wdev,
3033 					   u64 cookie)
3034 {
3035 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3036 	struct ath6kl *ar = ath6kl_priv(vif->ndev);
3037 
3038 	if (cookie != vif->last_roc_id)
3039 		return -ENOENT;
3040 	vif->last_cancel_roc_id = cookie;
3041 
3042 	return ath6kl_wmi_cancel_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx);
3043 }
3044 
3045 static int ath6kl_send_go_probe_resp(struct ath6kl_vif *vif,
3046 				     const u8 *buf, size_t len,
3047 				     unsigned int freq)
3048 {
3049 	struct ath6kl *ar = vif->ar;
3050 	const u8 *pos;
3051 	u8 *p2p;
3052 	int p2p_len;
3053 	int ret;
3054 	const struct ieee80211_mgmt *mgmt;
3055 
3056 	mgmt = (const struct ieee80211_mgmt *) buf;
3057 
3058 	/* Include P2P IE(s) from the frame generated in user space. */
3059 
3060 	p2p = kmalloc(len, GFP_KERNEL);
3061 	if (p2p == NULL)
3062 		return -ENOMEM;
3063 	p2p_len = 0;
3064 
3065 	pos = mgmt->u.probe_resp.variable;
3066 	while (pos + 1 < buf + len) {
3067 		if (pos + 2 + pos[1] > buf + len)
3068 			break;
3069 		if (ath6kl_is_p2p_ie(pos)) {
3070 			memcpy(p2p + p2p_len, pos, 2 + pos[1]);
3071 			p2p_len += 2 + pos[1];
3072 		}
3073 		pos += 2 + pos[1];
3074 	}
3075 
3076 	ret = ath6kl_wmi_send_probe_response_cmd(ar->wmi, vif->fw_vif_idx, freq,
3077 						 mgmt->da, p2p, p2p_len);
3078 	kfree(p2p);
3079 	return ret;
3080 }
3081 
3082 static bool ath6kl_mgmt_powersave_ap(struct ath6kl_vif *vif,
3083 				     u32 id,
3084 				     u32 freq,
3085 				     u32 wait,
3086 				     const u8 *buf,
3087 				     size_t len,
3088 				     bool *more_data,
3089 				     bool no_cck)
3090 {
3091 	struct ieee80211_mgmt *mgmt;
3092 	struct ath6kl_sta *conn;
3093 	bool is_psq_empty = false;
3094 	struct ath6kl_mgmt_buff *mgmt_buf;
3095 	size_t mgmt_buf_size;
3096 	struct ath6kl *ar = vif->ar;
3097 
3098 	mgmt = (struct ieee80211_mgmt *) buf;
3099 	if (is_multicast_ether_addr(mgmt->da))
3100 		return false;
3101 
3102 	conn = ath6kl_find_sta(vif, mgmt->da);
3103 	if (!conn)
3104 		return false;
3105 
3106 	if (conn->sta_flags & STA_PS_SLEEP) {
3107 		if (!(conn->sta_flags & STA_PS_POLLED)) {
3108 			/* Queue the frames if the STA is sleeping */
3109 			mgmt_buf_size = len + sizeof(struct ath6kl_mgmt_buff);
3110 			mgmt_buf = kmalloc(mgmt_buf_size, GFP_KERNEL);
3111 			if (!mgmt_buf)
3112 				return false;
3113 
3114 			INIT_LIST_HEAD(&mgmt_buf->list);
3115 			mgmt_buf->id = id;
3116 			mgmt_buf->freq = freq;
3117 			mgmt_buf->wait = wait;
3118 			mgmt_buf->len = len;
3119 			mgmt_buf->no_cck = no_cck;
3120 			memcpy(mgmt_buf->buf, buf, len);
3121 			spin_lock_bh(&conn->psq_lock);
3122 			is_psq_empty = skb_queue_empty(&conn->psq) &&
3123 					(conn->mgmt_psq_len == 0);
3124 			list_add_tail(&mgmt_buf->list, &conn->mgmt_psq);
3125 			conn->mgmt_psq_len++;
3126 			spin_unlock_bh(&conn->psq_lock);
3127 
3128 			/*
3129 			 * If this is the first pkt getting queued
3130 			 * for this STA, update the PVB for this
3131 			 * STA.
3132 			 */
3133 			if (is_psq_empty)
3134 				ath6kl_wmi_set_pvb_cmd(ar->wmi, vif->fw_vif_idx,
3135 						       conn->aid, 1);
3136 			return true;
3137 		}
3138 
3139 		/*
3140 		 * This tx is because of a PsPoll.
3141 		 * Determine if MoreData bit has to be set.
3142 		 */
3143 		spin_lock_bh(&conn->psq_lock);
3144 		if (!skb_queue_empty(&conn->psq) || (conn->mgmt_psq_len != 0))
3145 			*more_data = true;
3146 		spin_unlock_bh(&conn->psq_lock);
3147 	}
3148 
3149 	return false;
3150 }
3151 
3152 /* Check if SSID length is greater than DIRECT- */
3153 static bool ath6kl_is_p2p_go_ssid(const u8 *buf, size_t len)
3154 {
3155 	const struct ieee80211_mgmt *mgmt;
3156 	mgmt = (const struct ieee80211_mgmt *) buf;
3157 
3158 	/* variable[1] contains the SSID tag length */
3159 	if (buf + len >= &mgmt->u.probe_resp.variable[1] &&
3160 	    (mgmt->u.probe_resp.variable[1] > P2P_WILDCARD_SSID_LEN)) {
3161 		return true;
3162 	}
3163 
3164 	return false;
3165 }
3166 
3167 static int ath6kl_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
3168 			  struct ieee80211_channel *chan, bool offchan,
3169 			  unsigned int wait, const u8 *buf, size_t len,
3170 			  bool no_cck, bool dont_wait_for_ack, u64 *cookie)
3171 {
3172 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3173 	struct ath6kl *ar = ath6kl_priv(vif->ndev);
3174 	u32 id;
3175 	const struct ieee80211_mgmt *mgmt;
3176 	bool more_data, queued;
3177 
3178 	mgmt = (const struct ieee80211_mgmt *) buf;
3179 	if (vif->nw_type == AP_NETWORK && test_bit(CONNECTED, &vif->flags) &&
3180 	    ieee80211_is_probe_resp(mgmt->frame_control) &&
3181 	    ath6kl_is_p2p_go_ssid(buf, len)) {
3182 		/*
3183 		 * Send Probe Response frame in GO mode using a separate WMI
3184 		 * command to allow the target to fill in the generic IEs.
3185 		 */
3186 		*cookie = 0; /* TX status not supported */
3187 		return ath6kl_send_go_probe_resp(vif, buf, len,
3188 						 chan->center_freq);
3189 	}
3190 
3191 	id = vif->send_action_id++;
3192 	if (id == 0) {
3193 		/*
3194 		 * 0 is a reserved value in the WMI command and shall not be
3195 		 * used for the command.
3196 		 */
3197 		id = vif->send_action_id++;
3198 	}
3199 
3200 	*cookie = id;
3201 
3202 	/* AP mode Power saving processing */
3203 	if (vif->nw_type == AP_NETWORK) {
3204 		queued = ath6kl_mgmt_powersave_ap(vif,
3205 					id, chan->center_freq,
3206 					wait, buf,
3207 					len, &more_data, no_cck);
3208 		if (queued)
3209 			return 0;
3210 	}
3211 
3212 	return ath6kl_wmi_send_mgmt_cmd(ar->wmi, vif->fw_vif_idx, id,
3213 					chan->center_freq, wait,
3214 					buf, len, no_cck);
3215 }
3216 
3217 static void ath6kl_mgmt_frame_register(struct wiphy *wiphy,
3218 				       struct wireless_dev *wdev,
3219 				       u16 frame_type, bool reg)
3220 {
3221 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3222 
3223 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: frame_type=0x%x reg=%d\n",
3224 		   __func__, frame_type, reg);
3225 	if (frame_type == IEEE80211_STYPE_PROBE_REQ) {
3226 		/*
3227 		 * Note: This notification callback is not allowed to sleep, so
3228 		 * we cannot send WMI_PROBE_REQ_REPORT_CMD here. Instead, we
3229 		 * hardcode target to report Probe Request frames all the time.
3230 		 */
3231 		vif->probe_req_report = reg;
3232 	}
3233 }
3234 
3235 static int ath6kl_cfg80211_sscan_start(struct wiphy *wiphy,
3236 			struct net_device *dev,
3237 			struct cfg80211_sched_scan_request *request)
3238 {
3239 	struct ath6kl *ar = ath6kl_priv(dev);
3240 	struct ath6kl_vif *vif = netdev_priv(dev);
3241 	u16 interval;
3242 	int ret, rssi_thold;
3243 
3244 	if (ar->state != ATH6KL_STATE_ON)
3245 		return -EIO;
3246 
3247 	if (vif->sme_state != SME_DISCONNECTED)
3248 		return -EBUSY;
3249 
3250 	ath6kl_cfg80211_scan_complete_event(vif, true);
3251 
3252 	ret = ath6kl_set_probed_ssids(ar, vif, request->ssids,
3253 				      request->n_ssids,
3254 				      request->match_sets,
3255 				      request->n_match_sets);
3256 	if (ret < 0)
3257 		return ret;
3258 
3259 	if (!request->n_match_sets) {
3260 		ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
3261 					       ALL_BSS_FILTER, 0);
3262 		if (ret < 0)
3263 			return ret;
3264 	} else {
3265 		 ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
3266 						MATCHED_SSID_FILTER, 0);
3267 		if (ret < 0)
3268 			return ret;
3269 	}
3270 
3271 	if (test_bit(ATH6KL_FW_CAPABILITY_RSSI_SCAN_THOLD,
3272 		     ar->fw_capabilities)) {
3273 		if (request->rssi_thold <= NL80211_SCAN_RSSI_THOLD_OFF)
3274 			rssi_thold = 0;
3275 		else if (request->rssi_thold < -127)
3276 			rssi_thold = -127;
3277 		else
3278 			rssi_thold = request->rssi_thold;
3279 
3280 		ret = ath6kl_wmi_set_rssi_filter_cmd(ar->wmi, vif->fw_vif_idx,
3281 						     rssi_thold);
3282 		if (ret) {
3283 			ath6kl_err("failed to set RSSI threshold for scan\n");
3284 			return ret;
3285 		}
3286 	}
3287 
3288 	/* fw uses seconds, also make sure that it's >0 */
3289 	interval = max_t(u16, 1, request->interval / 1000);
3290 
3291 	ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
3292 				  interval, interval,
3293 				  vif->bg_scan_period, 0, 0, 0, 3, 0, 0, 0);
3294 
3295 	/* this also clears IE in fw if it's not set */
3296 	ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
3297 				       WMI_FRAME_PROBE_REQ,
3298 				       request->ie, request->ie_len);
3299 	if (ret) {
3300 		ath6kl_warn("Failed to set probe request IE for scheduled scan: %d\n",
3301 			    ret);
3302 		return ret;
3303 	}
3304 
3305 	ret = ath6kl_wmi_enable_sched_scan_cmd(ar->wmi, vif->fw_vif_idx, true);
3306 	if (ret)
3307 		return ret;
3308 
3309 	set_bit(SCHED_SCANNING, &vif->flags);
3310 
3311 	return 0;
3312 }
3313 
3314 static int ath6kl_cfg80211_sscan_stop(struct wiphy *wiphy,
3315 				      struct net_device *dev)
3316 {
3317 	struct ath6kl_vif *vif = netdev_priv(dev);
3318 	bool stopped;
3319 
3320 	stopped = __ath6kl_cfg80211_sscan_stop(vif);
3321 
3322 	if (!stopped)
3323 		return -EIO;
3324 
3325 	return 0;
3326 }
3327 
3328 static int ath6kl_cfg80211_set_bitrate(struct wiphy *wiphy,
3329 				       struct net_device *dev,
3330 				       const u8 *addr,
3331 				       const struct cfg80211_bitrate_mask *mask)
3332 {
3333 	struct ath6kl *ar = ath6kl_priv(dev);
3334 	struct ath6kl_vif *vif = netdev_priv(dev);
3335 
3336 	return ath6kl_wmi_set_bitrate_mask(ar->wmi, vif->fw_vif_idx,
3337 					   mask);
3338 }
3339 
3340 static int ath6kl_cfg80211_set_txe_config(struct wiphy *wiphy,
3341 					  struct net_device *dev,
3342 					  u32 rate, u32 pkts, u32 intvl)
3343 {
3344 	struct ath6kl *ar = ath6kl_priv(dev);
3345 	struct ath6kl_vif *vif = netdev_priv(dev);
3346 
3347 	if (vif->nw_type != INFRA_NETWORK ||
3348 	    !test_bit(ATH6KL_FW_CAPABILITY_TX_ERR_NOTIFY, ar->fw_capabilities))
3349 		return -EOPNOTSUPP;
3350 
3351 	if (vif->sme_state != SME_CONNECTED)
3352 		return -ENOTCONN;
3353 
3354 	/* save this since the firmware won't report the interval */
3355 	vif->txe_intvl = intvl;
3356 
3357 	return ath6kl_wmi_set_txe_notify(ar->wmi, vif->fw_vif_idx,
3358 					 rate, pkts, intvl);
3359 }
3360 
3361 static const struct ieee80211_txrx_stypes
3362 ath6kl_mgmt_stypes[NUM_NL80211_IFTYPES] = {
3363 	[NL80211_IFTYPE_STATION] = {
3364 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3365 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3366 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3367 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3368 	},
3369 	[NL80211_IFTYPE_AP] = {
3370 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3371 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3372 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3373 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3374 	},
3375 	[NL80211_IFTYPE_P2P_CLIENT] = {
3376 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3377 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3378 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3379 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3380 	},
3381 	[NL80211_IFTYPE_P2P_GO] = {
3382 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3383 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3384 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3385 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3386 	},
3387 };
3388 
3389 static struct cfg80211_ops ath6kl_cfg80211_ops = {
3390 	.add_virtual_intf = ath6kl_cfg80211_add_iface,
3391 	.del_virtual_intf = ath6kl_cfg80211_del_iface,
3392 	.change_virtual_intf = ath6kl_cfg80211_change_iface,
3393 	.scan = ath6kl_cfg80211_scan,
3394 	.connect = ath6kl_cfg80211_connect,
3395 	.disconnect = ath6kl_cfg80211_disconnect,
3396 	.add_key = ath6kl_cfg80211_add_key,
3397 	.get_key = ath6kl_cfg80211_get_key,
3398 	.del_key = ath6kl_cfg80211_del_key,
3399 	.set_default_key = ath6kl_cfg80211_set_default_key,
3400 	.set_wiphy_params = ath6kl_cfg80211_set_wiphy_params,
3401 	.set_tx_power = ath6kl_cfg80211_set_txpower,
3402 	.get_tx_power = ath6kl_cfg80211_get_txpower,
3403 	.set_power_mgmt = ath6kl_cfg80211_set_power_mgmt,
3404 	.join_ibss = ath6kl_cfg80211_join_ibss,
3405 	.leave_ibss = ath6kl_cfg80211_leave_ibss,
3406 	.get_station = ath6kl_get_station,
3407 	.set_pmksa = ath6kl_set_pmksa,
3408 	.del_pmksa = ath6kl_del_pmksa,
3409 	.flush_pmksa = ath6kl_flush_pmksa,
3410 	CFG80211_TESTMODE_CMD(ath6kl_tm_cmd)
3411 #ifdef CONFIG_PM
3412 	.suspend = __ath6kl_cfg80211_suspend,
3413 	.resume = __ath6kl_cfg80211_resume,
3414 #endif
3415 	.start_ap = ath6kl_start_ap,
3416 	.change_beacon = ath6kl_change_beacon,
3417 	.stop_ap = ath6kl_stop_ap,
3418 	.del_station = ath6kl_del_station,
3419 	.change_station = ath6kl_change_station,
3420 	.remain_on_channel = ath6kl_remain_on_channel,
3421 	.cancel_remain_on_channel = ath6kl_cancel_remain_on_channel,
3422 	.mgmt_tx = ath6kl_mgmt_tx,
3423 	.mgmt_frame_register = ath6kl_mgmt_frame_register,
3424 	.sched_scan_start = ath6kl_cfg80211_sscan_start,
3425 	.sched_scan_stop = ath6kl_cfg80211_sscan_stop,
3426 	.set_bitrate_mask = ath6kl_cfg80211_set_bitrate,
3427 	.set_cqm_txe_config = ath6kl_cfg80211_set_txe_config,
3428 };
3429 
3430 void ath6kl_cfg80211_stop(struct ath6kl_vif *vif)
3431 {
3432 	ath6kl_cfg80211_sscan_disable(vif);
3433 
3434 	switch (vif->sme_state) {
3435 	case SME_DISCONNECTED:
3436 		break;
3437 	case SME_CONNECTING:
3438 		cfg80211_connect_result(vif->ndev, vif->bssid, NULL, 0,
3439 					NULL, 0,
3440 					WLAN_STATUS_UNSPECIFIED_FAILURE,
3441 					GFP_KERNEL);
3442 		break;
3443 	case SME_CONNECTED:
3444 		cfg80211_disconnected(vif->ndev, 0, NULL, 0, GFP_KERNEL);
3445 		break;
3446 	}
3447 
3448 	if (vif->ar->state != ATH6KL_STATE_RECOVERY &&
3449 	    (test_bit(CONNECTED, &vif->flags) ||
3450 	    test_bit(CONNECT_PEND, &vif->flags)))
3451 		ath6kl_wmi_disconnect_cmd(vif->ar->wmi, vif->fw_vif_idx);
3452 
3453 	vif->sme_state = SME_DISCONNECTED;
3454 	clear_bit(CONNECTED, &vif->flags);
3455 	clear_bit(CONNECT_PEND, &vif->flags);
3456 
3457 	/* Stop netdev queues, needed during recovery */
3458 	netif_stop_queue(vif->ndev);
3459 	netif_carrier_off(vif->ndev);
3460 
3461 	/* disable scanning */
3462 	if (vif->ar->state != ATH6KL_STATE_RECOVERY &&
3463 	    ath6kl_wmi_scanparams_cmd(vif->ar->wmi, vif->fw_vif_idx, 0xFFFF,
3464 				      0, 0, 0, 0, 0, 0, 0, 0, 0) != 0)
3465 		ath6kl_warn("failed to disable scan during stop\n");
3466 
3467 	ath6kl_cfg80211_scan_complete_event(vif, true);
3468 }
3469 
3470 void ath6kl_cfg80211_stop_all(struct ath6kl *ar)
3471 {
3472 	struct ath6kl_vif *vif;
3473 
3474 	vif = ath6kl_vif_first(ar);
3475 	if (!vif && ar->state != ATH6KL_STATE_RECOVERY) {
3476 		/* save the current power mode before enabling power save */
3477 		ar->wmi->saved_pwr_mode = ar->wmi->pwr_mode;
3478 
3479 		if (ath6kl_wmi_powermode_cmd(ar->wmi, 0, REC_POWER) != 0)
3480 			ath6kl_warn("ath6kl_deep_sleep_enable: wmi_powermode_cmd failed\n");
3481 		return;
3482 	}
3483 
3484 	/*
3485 	 * FIXME: we should take ar->list_lock to protect changes in the
3486 	 * vif_list, but that's not trivial to do as ath6kl_cfg80211_stop()
3487 	 * sleeps.
3488 	 */
3489 	list_for_each_entry(vif, &ar->vif_list, list)
3490 		ath6kl_cfg80211_stop(vif);
3491 }
3492 
3493 static void ath6kl_cfg80211_reg_notify(struct wiphy *wiphy,
3494 				       struct regulatory_request *request)
3495 {
3496 	struct ath6kl *ar = wiphy_priv(wiphy);
3497 	u32 rates[IEEE80211_NUM_BANDS];
3498 	int ret, i;
3499 
3500 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
3501 		   "cfg reg_notify %c%c%s%s initiator %d hint_type %d\n",
3502 		   request->alpha2[0], request->alpha2[1],
3503 		   request->intersect ? " intersect" : "",
3504 		   request->processed ? " processed" : "",
3505 		   request->initiator, request->user_reg_hint_type);
3506 
3507 	if (request->user_reg_hint_type != NL80211_USER_REG_HINT_CELL_BASE)
3508 		return;
3509 
3510 	ret = ath6kl_wmi_set_regdomain_cmd(ar->wmi, request->alpha2);
3511 	if (ret) {
3512 		ath6kl_err("failed to set regdomain: %d\n", ret);
3513 		return;
3514 	}
3515 
3516 	/*
3517 	 * Firmware will apply the regdomain change only after a scan is
3518 	 * issued and it will send a WMI_REGDOMAIN_EVENTID when it has been
3519 	 * changed.
3520 	 */
3521 
3522 	for (i = 0; i < IEEE80211_NUM_BANDS; i++)
3523 		if (wiphy->bands[i])
3524 			rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1;
3525 
3526 
3527 	ret = ath6kl_wmi_beginscan_cmd(ar->wmi, 0, WMI_LONG_SCAN, false,
3528 				       false, 0, ATH6KL_FG_SCAN_INTERVAL,
3529 				       0, NULL, false, rates);
3530 	if (ret) {
3531 		ath6kl_err("failed to start scan for a regdomain change: %d\n",
3532 			   ret);
3533 		return;
3534 	}
3535 }
3536 
3537 static int ath6kl_cfg80211_vif_init(struct ath6kl_vif *vif)
3538 {
3539 	vif->aggr_cntxt = aggr_init(vif);
3540 	if (!vif->aggr_cntxt) {
3541 		ath6kl_err("failed to initialize aggr\n");
3542 		return -ENOMEM;
3543 	}
3544 
3545 	setup_timer(&vif->disconnect_timer, disconnect_timer_handler,
3546 		    (unsigned long) vif->ndev);
3547 	setup_timer(&vif->sched_scan_timer, ath6kl_wmi_sscan_timer,
3548 		    (unsigned long) vif);
3549 
3550 	set_bit(WMM_ENABLED, &vif->flags);
3551 	spin_lock_init(&vif->if_lock);
3552 
3553 	INIT_LIST_HEAD(&vif->mc_filter);
3554 
3555 	return 0;
3556 }
3557 
3558 void ath6kl_cfg80211_vif_stop(struct ath6kl_vif *vif, bool wmi_ready)
3559 {
3560 	static u8 bcast_mac[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
3561 	bool discon_issued;
3562 
3563 	netif_stop_queue(vif->ndev);
3564 
3565 	clear_bit(WLAN_ENABLED, &vif->flags);
3566 
3567 	if (wmi_ready) {
3568 		discon_issued = test_bit(CONNECTED, &vif->flags) ||
3569 				test_bit(CONNECT_PEND, &vif->flags);
3570 		ath6kl_disconnect(vif);
3571 		del_timer(&vif->disconnect_timer);
3572 
3573 		if (discon_issued)
3574 			ath6kl_disconnect_event(vif, DISCONNECT_CMD,
3575 						(vif->nw_type & AP_NETWORK) ?
3576 						bcast_mac : vif->bssid,
3577 						0, NULL, 0);
3578 	}
3579 
3580 	if (vif->scan_req) {
3581 		cfg80211_scan_done(vif->scan_req, true);
3582 		vif->scan_req = NULL;
3583 	}
3584 
3585 	/* need to clean up enhanced bmiss detection fw state */
3586 	ath6kl_cfg80211_sta_bmiss_enhance(vif, false);
3587 }
3588 
3589 void ath6kl_cfg80211_vif_cleanup(struct ath6kl_vif *vif)
3590 {
3591 	struct ath6kl *ar = vif->ar;
3592 	struct ath6kl_mc_filter *mc_filter, *tmp;
3593 
3594 	aggr_module_destroy(vif->aggr_cntxt);
3595 
3596 	ar->avail_idx_map |= BIT(vif->fw_vif_idx);
3597 
3598 	if (vif->nw_type == ADHOC_NETWORK)
3599 		ar->ibss_if_active = false;
3600 
3601 	list_for_each_entry_safe(mc_filter, tmp, &vif->mc_filter, list) {
3602 		list_del(&mc_filter->list);
3603 		kfree(mc_filter);
3604 	}
3605 
3606 	unregister_netdevice(vif->ndev);
3607 
3608 	ar->num_vif--;
3609 }
3610 
3611 struct wireless_dev *ath6kl_interface_add(struct ath6kl *ar, const char *name,
3612 					  enum nl80211_iftype type,
3613 					  u8 fw_vif_idx, u8 nw_type)
3614 {
3615 	struct net_device *ndev;
3616 	struct ath6kl_vif *vif;
3617 
3618 	ndev = alloc_netdev(sizeof(*vif), name, ether_setup);
3619 	if (!ndev)
3620 		return NULL;
3621 
3622 	vif = netdev_priv(ndev);
3623 	ndev->ieee80211_ptr = &vif->wdev;
3624 	vif->wdev.wiphy = ar->wiphy;
3625 	vif->ar = ar;
3626 	vif->ndev = ndev;
3627 	SET_NETDEV_DEV(ndev, wiphy_dev(vif->wdev.wiphy));
3628 	vif->wdev.netdev = ndev;
3629 	vif->wdev.iftype = type;
3630 	vif->fw_vif_idx = fw_vif_idx;
3631 	vif->nw_type = nw_type;
3632 	vif->next_mode = nw_type;
3633 	vif->listen_intvl_t = ATH6KL_DEFAULT_LISTEN_INTVAL;
3634 	vif->bmiss_time_t = ATH6KL_DEFAULT_BMISS_TIME;
3635 	vif->bg_scan_period = 0;
3636 	vif->htcap[IEEE80211_BAND_2GHZ].ht_enable = true;
3637 	vif->htcap[IEEE80211_BAND_5GHZ].ht_enable = true;
3638 
3639 	memcpy(ndev->dev_addr, ar->mac_addr, ETH_ALEN);
3640 	if (fw_vif_idx != 0) {
3641 		ndev->dev_addr[0] = (ndev->dev_addr[0] ^ (1 << fw_vif_idx)) |
3642 				     0x2;
3643 		if (test_bit(ATH6KL_FW_CAPABILITY_CUSTOM_MAC_ADDR,
3644 			     ar->fw_capabilities))
3645 			ndev->dev_addr[4] ^= 0x80;
3646 	}
3647 
3648 	init_netdev(ndev);
3649 
3650 	ath6kl_init_control_info(vif);
3651 
3652 	if (ath6kl_cfg80211_vif_init(vif))
3653 		goto err;
3654 
3655 	if (register_netdevice(ndev))
3656 		goto err;
3657 
3658 	ar->avail_idx_map &= ~BIT(fw_vif_idx);
3659 	vif->sme_state = SME_DISCONNECTED;
3660 	set_bit(WLAN_ENABLED, &vif->flags);
3661 	ar->wlan_pwr_state = WLAN_POWER_STATE_ON;
3662 	set_bit(NETDEV_REGISTERED, &vif->flags);
3663 
3664 	if (type == NL80211_IFTYPE_ADHOC)
3665 		ar->ibss_if_active = true;
3666 
3667 	spin_lock_bh(&ar->list_lock);
3668 	list_add_tail(&vif->list, &ar->vif_list);
3669 	spin_unlock_bh(&ar->list_lock);
3670 
3671 	return &vif->wdev;
3672 
3673 err:
3674 	aggr_module_destroy(vif->aggr_cntxt);
3675 	free_netdev(ndev);
3676 	return NULL;
3677 }
3678 
3679 int ath6kl_cfg80211_init(struct ath6kl *ar)
3680 {
3681 	struct wiphy *wiphy = ar->wiphy;
3682 	bool band_2gig = false, band_5gig = false, ht = false;
3683 	int ret;
3684 
3685 	wiphy->mgmt_stypes = ath6kl_mgmt_stypes;
3686 
3687 	wiphy->max_remain_on_channel_duration = 5000;
3688 
3689 	/* set device pointer for wiphy */
3690 	set_wiphy_dev(wiphy, ar->dev);
3691 
3692 	wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
3693 				 BIT(NL80211_IFTYPE_ADHOC) |
3694 				 BIT(NL80211_IFTYPE_AP);
3695 	if (ar->p2p) {
3696 		wiphy->interface_modes |= BIT(NL80211_IFTYPE_P2P_GO) |
3697 					  BIT(NL80211_IFTYPE_P2P_CLIENT);
3698 	}
3699 
3700 	if (config_enabled(CONFIG_ATH6KL_REGDOMAIN) &&
3701 	    test_bit(ATH6KL_FW_CAPABILITY_REGDOMAIN, ar->fw_capabilities)) {
3702 		wiphy->reg_notifier = ath6kl_cfg80211_reg_notify;
3703 		ar->wiphy->features |= NL80211_FEATURE_CELL_BASE_REG_HINTS;
3704 	}
3705 
3706 	/* max num of ssids that can be probed during scanning */
3707 	wiphy->max_scan_ssids = MAX_PROBED_SSIDS;
3708 
3709 	/* max num of ssids that can be matched after scan */
3710 	if (test_bit(ATH6KL_FW_CAPABILITY_SCHED_SCAN_MATCH_LIST,
3711 		     ar->fw_capabilities))
3712 		wiphy->max_match_sets = MAX_PROBED_SSIDS;
3713 
3714 	wiphy->max_scan_ie_len = 1000; /* FIX: what is correct limit? */
3715 	switch (ar->hw.cap) {
3716 	case WMI_11AN_CAP:
3717 		ht = true;
3718 	case WMI_11A_CAP:
3719 		band_5gig = true;
3720 		break;
3721 	case WMI_11GN_CAP:
3722 		ht = true;
3723 	case WMI_11G_CAP:
3724 		band_2gig = true;
3725 		break;
3726 	case WMI_11AGN_CAP:
3727 		ht = true;
3728 	case WMI_11AG_CAP:
3729 		band_2gig = true;
3730 		band_5gig = true;
3731 		break;
3732 	default:
3733 		ath6kl_err("invalid phy capability!\n");
3734 		return -EINVAL;
3735 	}
3736 
3737 	/*
3738 	 * Even if the fw has HT support, advertise HT cap only when
3739 	 * the firmware has support to override RSN capability, otherwise
3740 	 * 4-way handshake would fail.
3741 	 */
3742 	if (!(ht &&
3743 	      test_bit(ATH6KL_FW_CAPABILITY_RSN_CAP_OVERRIDE,
3744 		       ar->fw_capabilities))) {
3745 		ath6kl_band_2ghz.ht_cap.cap = 0;
3746 		ath6kl_band_2ghz.ht_cap.ht_supported = false;
3747 		ath6kl_band_5ghz.ht_cap.cap = 0;
3748 		ath6kl_band_5ghz.ht_cap.ht_supported = false;
3749 	}
3750 
3751 	if (ar->hw.flags & ATH6KL_HW_64BIT_RATES) {
3752 		ath6kl_band_2ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3753 		ath6kl_band_5ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3754 		ath6kl_band_2ghz.ht_cap.mcs.rx_mask[1] = 0xff;
3755 		ath6kl_band_5ghz.ht_cap.mcs.rx_mask[1] = 0xff;
3756 	} else {
3757 		ath6kl_band_2ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3758 		ath6kl_band_5ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3759 	}
3760 
3761 	if (band_2gig)
3762 		wiphy->bands[IEEE80211_BAND_2GHZ] = &ath6kl_band_2ghz;
3763 	if (band_5gig)
3764 		wiphy->bands[IEEE80211_BAND_5GHZ] = &ath6kl_band_5ghz;
3765 
3766 	wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
3767 
3768 	wiphy->cipher_suites = cipher_suites;
3769 	wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
3770 
3771 #ifdef CONFIG_PM
3772 	wiphy->wowlan.flags = WIPHY_WOWLAN_MAGIC_PKT |
3773 			      WIPHY_WOWLAN_DISCONNECT |
3774 			      WIPHY_WOWLAN_GTK_REKEY_FAILURE  |
3775 			      WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
3776 			      WIPHY_WOWLAN_EAP_IDENTITY_REQ   |
3777 			      WIPHY_WOWLAN_4WAY_HANDSHAKE;
3778 	wiphy->wowlan.n_patterns = WOW_MAX_FILTERS_PER_LIST;
3779 	wiphy->wowlan.pattern_min_len = 1;
3780 	wiphy->wowlan.pattern_max_len = WOW_PATTERN_SIZE;
3781 #endif
3782 
3783 	wiphy->max_sched_scan_ssids = MAX_PROBED_SSIDS;
3784 
3785 	ar->wiphy->flags |= WIPHY_FLAG_SUPPORTS_FW_ROAM |
3786 			    WIPHY_FLAG_HAVE_AP_SME |
3787 			    WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL |
3788 			    WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD;
3789 
3790 	if (test_bit(ATH6KL_FW_CAPABILITY_SCHED_SCAN_V2, ar->fw_capabilities))
3791 		ar->wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
3792 
3793 	if (test_bit(ATH6KL_FW_CAPABILITY_INACTIVITY_TIMEOUT,
3794 		     ar->fw_capabilities))
3795 		ar->wiphy->features |= NL80211_FEATURE_INACTIVITY_TIMER;
3796 
3797 	ar->wiphy->probe_resp_offload =
3798 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_WPS |
3799 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_WPS2 |
3800 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_P2P;
3801 
3802 	ret = wiphy_register(wiphy);
3803 	if (ret < 0) {
3804 		ath6kl_err("couldn't register wiphy device\n");
3805 		return ret;
3806 	}
3807 
3808 	ar->wiphy_registered = true;
3809 
3810 	return 0;
3811 }
3812 
3813 void ath6kl_cfg80211_cleanup(struct ath6kl *ar)
3814 {
3815 	wiphy_unregister(ar->wiphy);
3816 
3817 	ar->wiphy_registered = false;
3818 }
3819 
3820 struct ath6kl *ath6kl_cfg80211_create(void)
3821 {
3822 	struct ath6kl *ar;
3823 	struct wiphy *wiphy;
3824 
3825 	/* create a new wiphy for use with cfg80211 */
3826 	wiphy = wiphy_new(&ath6kl_cfg80211_ops, sizeof(struct ath6kl));
3827 
3828 	if (!wiphy) {
3829 		ath6kl_err("couldn't allocate wiphy device\n");
3830 		return NULL;
3831 	}
3832 
3833 	ar = wiphy_priv(wiphy);
3834 	ar->wiphy = wiphy;
3835 
3836 	return ar;
3837 }
3838 
3839 /* Note: ar variable must not be accessed after calling this! */
3840 void ath6kl_cfg80211_destroy(struct ath6kl *ar)
3841 {
3842 	int i;
3843 
3844 	for (i = 0; i < AP_MAX_NUM_STA; i++)
3845 		kfree(ar->sta_list[i].aggr_conn);
3846 
3847 	wiphy_free(ar->wiphy);
3848 }
3849 
3850