1 /*
2  * Copyright (c) 2004-2011 Atheros Communications Inc.
3  * Copyright (c) 2011-2012 Qualcomm Atheros, Inc.
4  *
5  * Permission to use, copy, modify, and/or distribute this software for any
6  * purpose with or without fee is hereby granted, provided that the above
7  * copyright notice and this permission notice appear in all copies.
8  *
9  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
10  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
11  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
12  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
13  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
14  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
15  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
16  */
17 
18 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
19 
20 #include <linux/moduleparam.h>
21 #include <linux/inetdevice.h>
22 #include <linux/export.h>
23 
24 #include "core.h"
25 #include "cfg80211.h"
26 #include "debug.h"
27 #include "hif-ops.h"
28 #include "testmode.h"
29 
30 #define RATETAB_ENT(_rate, _rateid, _flags) {   \
31 	.bitrate    = (_rate),                  \
32 	.flags      = (_flags),                 \
33 	.hw_value   = (_rateid),                \
34 }
35 
36 #define CHAN2G(_channel, _freq, _flags) {   \
37 	.band           = IEEE80211_BAND_2GHZ,  \
38 	.hw_value       = (_channel),           \
39 	.center_freq    = (_freq),              \
40 	.flags          = (_flags),             \
41 	.max_antenna_gain   = 0,                \
42 	.max_power      = 30,                   \
43 }
44 
45 #define CHAN5G(_channel, _flags) {		    \
46 	.band           = IEEE80211_BAND_5GHZ,      \
47 	.hw_value       = (_channel),               \
48 	.center_freq    = 5000 + (5 * (_channel)),  \
49 	.flags          = (_flags),                 \
50 	.max_antenna_gain   = 0,                    \
51 	.max_power      = 30,                       \
52 }
53 
54 #define DEFAULT_BG_SCAN_PERIOD 60
55 
56 struct ath6kl_cfg80211_match_probe_ssid {
57 	struct cfg80211_ssid ssid;
58 	u8 flag;
59 };
60 
61 static struct ieee80211_rate ath6kl_rates[] = {
62 	RATETAB_ENT(10, 0x1, 0),
63 	RATETAB_ENT(20, 0x2, 0),
64 	RATETAB_ENT(55, 0x4, 0),
65 	RATETAB_ENT(110, 0x8, 0),
66 	RATETAB_ENT(60, 0x10, 0),
67 	RATETAB_ENT(90, 0x20, 0),
68 	RATETAB_ENT(120, 0x40, 0),
69 	RATETAB_ENT(180, 0x80, 0),
70 	RATETAB_ENT(240, 0x100, 0),
71 	RATETAB_ENT(360, 0x200, 0),
72 	RATETAB_ENT(480, 0x400, 0),
73 	RATETAB_ENT(540, 0x800, 0),
74 };
75 
76 #define ath6kl_a_rates     (ath6kl_rates + 4)
77 #define ath6kl_a_rates_size    8
78 #define ath6kl_g_rates     (ath6kl_rates + 0)
79 #define ath6kl_g_rates_size    12
80 
81 #define ath6kl_g_htcap IEEE80211_HT_CAP_SGI_20
82 #define ath6kl_a_htcap (IEEE80211_HT_CAP_SUP_WIDTH_20_40 | \
83 			IEEE80211_HT_CAP_SGI_20		 | \
84 			IEEE80211_HT_CAP_SGI_40)
85 
86 static struct ieee80211_channel ath6kl_2ghz_channels[] = {
87 	CHAN2G(1, 2412, 0),
88 	CHAN2G(2, 2417, 0),
89 	CHAN2G(3, 2422, 0),
90 	CHAN2G(4, 2427, 0),
91 	CHAN2G(5, 2432, 0),
92 	CHAN2G(6, 2437, 0),
93 	CHAN2G(7, 2442, 0),
94 	CHAN2G(8, 2447, 0),
95 	CHAN2G(9, 2452, 0),
96 	CHAN2G(10, 2457, 0),
97 	CHAN2G(11, 2462, 0),
98 	CHAN2G(12, 2467, 0),
99 	CHAN2G(13, 2472, 0),
100 	CHAN2G(14, 2484, 0),
101 };
102 
103 static struct ieee80211_channel ath6kl_5ghz_a_channels[] = {
104 	CHAN5G(34, 0), CHAN5G(36, 0),
105 	CHAN5G(38, 0), CHAN5G(40, 0),
106 	CHAN5G(42, 0), CHAN5G(44, 0),
107 	CHAN5G(46, 0), CHAN5G(48, 0),
108 	CHAN5G(52, 0), CHAN5G(56, 0),
109 	CHAN5G(60, 0), CHAN5G(64, 0),
110 	CHAN5G(100, 0), CHAN5G(104, 0),
111 	CHAN5G(108, 0), CHAN5G(112, 0),
112 	CHAN5G(116, 0), CHAN5G(120, 0),
113 	CHAN5G(124, 0), CHAN5G(128, 0),
114 	CHAN5G(132, 0), CHAN5G(136, 0),
115 	CHAN5G(140, 0), CHAN5G(149, 0),
116 	CHAN5G(153, 0), CHAN5G(157, 0),
117 	CHAN5G(161, 0), CHAN5G(165, 0),
118 	CHAN5G(184, 0), CHAN5G(188, 0),
119 	CHAN5G(192, 0), CHAN5G(196, 0),
120 	CHAN5G(200, 0), CHAN5G(204, 0),
121 	CHAN5G(208, 0), CHAN5G(212, 0),
122 	CHAN5G(216, 0),
123 };
124 
125 static struct ieee80211_supported_band ath6kl_band_2ghz = {
126 	.n_channels = ARRAY_SIZE(ath6kl_2ghz_channels),
127 	.channels = ath6kl_2ghz_channels,
128 	.n_bitrates = ath6kl_g_rates_size,
129 	.bitrates = ath6kl_g_rates,
130 	.ht_cap.cap = ath6kl_g_htcap,
131 	.ht_cap.ht_supported = true,
132 };
133 
134 static struct ieee80211_supported_band ath6kl_band_5ghz = {
135 	.n_channels = ARRAY_SIZE(ath6kl_5ghz_a_channels),
136 	.channels = ath6kl_5ghz_a_channels,
137 	.n_bitrates = ath6kl_a_rates_size,
138 	.bitrates = ath6kl_a_rates,
139 	.ht_cap.cap = ath6kl_a_htcap,
140 	.ht_cap.ht_supported = true,
141 };
142 
143 #define CCKM_KRK_CIPHER_SUITE 0x004096ff /* use for KRK */
144 
145 /* returns true if scheduled scan was stopped */
146 static bool __ath6kl_cfg80211_sscan_stop(struct ath6kl_vif *vif)
147 {
148 	struct ath6kl *ar = vif->ar;
149 
150 	if (!test_and_clear_bit(SCHED_SCANNING, &vif->flags))
151 		return false;
152 
153 	del_timer_sync(&vif->sched_scan_timer);
154 
155 	if (ar->state == ATH6KL_STATE_RECOVERY)
156 		return true;
157 
158 	ath6kl_wmi_enable_sched_scan_cmd(ar->wmi, vif->fw_vif_idx, false);
159 
160 	return true;
161 }
162 
163 static void ath6kl_cfg80211_sscan_disable(struct ath6kl_vif *vif)
164 {
165 	struct ath6kl *ar = vif->ar;
166 	bool stopped;
167 
168 	stopped = __ath6kl_cfg80211_sscan_stop(vif);
169 
170 	if (!stopped)
171 		return;
172 
173 	cfg80211_sched_scan_stopped(ar->wiphy);
174 }
175 
176 static int ath6kl_set_wpa_version(struct ath6kl_vif *vif,
177 				  enum nl80211_wpa_versions wpa_version)
178 {
179 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: %u\n", __func__, wpa_version);
180 
181 	if (!wpa_version) {
182 		vif->auth_mode = NONE_AUTH;
183 	} else if (wpa_version & NL80211_WPA_VERSION_2) {
184 		vif->auth_mode = WPA2_AUTH;
185 	} else if (wpa_version & NL80211_WPA_VERSION_1) {
186 		vif->auth_mode = WPA_AUTH;
187 	} else {
188 		ath6kl_err("%s: %u not supported\n", __func__, wpa_version);
189 		return -ENOTSUPP;
190 	}
191 
192 	return 0;
193 }
194 
195 static int ath6kl_set_auth_type(struct ath6kl_vif *vif,
196 				enum nl80211_auth_type auth_type)
197 {
198 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: 0x%x\n", __func__, auth_type);
199 
200 	switch (auth_type) {
201 	case NL80211_AUTHTYPE_OPEN_SYSTEM:
202 		vif->dot11_auth_mode = OPEN_AUTH;
203 		break;
204 	case NL80211_AUTHTYPE_SHARED_KEY:
205 		vif->dot11_auth_mode = SHARED_AUTH;
206 		break;
207 	case NL80211_AUTHTYPE_NETWORK_EAP:
208 		vif->dot11_auth_mode = LEAP_AUTH;
209 		break;
210 
211 	case NL80211_AUTHTYPE_AUTOMATIC:
212 		vif->dot11_auth_mode = OPEN_AUTH | SHARED_AUTH;
213 		break;
214 
215 	default:
216 		ath6kl_err("%s: 0x%x not supported\n", __func__, auth_type);
217 		return -ENOTSUPP;
218 	}
219 
220 	return 0;
221 }
222 
223 static int ath6kl_set_cipher(struct ath6kl_vif *vif, u32 cipher, bool ucast)
224 {
225 	u8 *ar_cipher = ucast ? &vif->prwise_crypto : &vif->grp_crypto;
226 	u8 *ar_cipher_len = ucast ? &vif->prwise_crypto_len :
227 		&vif->grp_crypto_len;
228 
229 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: cipher 0x%x, ucast %u\n",
230 		   __func__, cipher, ucast);
231 
232 	switch (cipher) {
233 	case 0:
234 		/* our own hack to use value 0 as no crypto used */
235 		*ar_cipher = NONE_CRYPT;
236 		*ar_cipher_len = 0;
237 		break;
238 	case WLAN_CIPHER_SUITE_WEP40:
239 		*ar_cipher = WEP_CRYPT;
240 		*ar_cipher_len = 5;
241 		break;
242 	case WLAN_CIPHER_SUITE_WEP104:
243 		*ar_cipher = WEP_CRYPT;
244 		*ar_cipher_len = 13;
245 		break;
246 	case WLAN_CIPHER_SUITE_TKIP:
247 		*ar_cipher = TKIP_CRYPT;
248 		*ar_cipher_len = 0;
249 		break;
250 	case WLAN_CIPHER_SUITE_CCMP:
251 		*ar_cipher = AES_CRYPT;
252 		*ar_cipher_len = 0;
253 		break;
254 	case WLAN_CIPHER_SUITE_SMS4:
255 		*ar_cipher = WAPI_CRYPT;
256 		*ar_cipher_len = 0;
257 		break;
258 	default:
259 		ath6kl_err("cipher 0x%x not supported\n", cipher);
260 		return -ENOTSUPP;
261 	}
262 
263 	return 0;
264 }
265 
266 static void ath6kl_set_key_mgmt(struct ath6kl_vif *vif, u32 key_mgmt)
267 {
268 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: 0x%x\n", __func__, key_mgmt);
269 
270 	if (key_mgmt == WLAN_AKM_SUITE_PSK) {
271 		if (vif->auth_mode == WPA_AUTH)
272 			vif->auth_mode = WPA_PSK_AUTH;
273 		else if (vif->auth_mode == WPA2_AUTH)
274 			vif->auth_mode = WPA2_PSK_AUTH;
275 	} else if (key_mgmt == 0x00409600) {
276 		if (vif->auth_mode == WPA_AUTH)
277 			vif->auth_mode = WPA_AUTH_CCKM;
278 		else if (vif->auth_mode == WPA2_AUTH)
279 			vif->auth_mode = WPA2_AUTH_CCKM;
280 	} else if (key_mgmt != WLAN_AKM_SUITE_8021X) {
281 		vif->auth_mode = NONE_AUTH;
282 	}
283 }
284 
285 static bool ath6kl_cfg80211_ready(struct ath6kl_vif *vif)
286 {
287 	struct ath6kl *ar = vif->ar;
288 
289 	if (!test_bit(WMI_READY, &ar->flag)) {
290 		ath6kl_err("wmi is not ready\n");
291 		return false;
292 	}
293 
294 	if (!test_bit(WLAN_ENABLED, &vif->flags)) {
295 		ath6kl_err("wlan disabled\n");
296 		return false;
297 	}
298 
299 	return true;
300 }
301 
302 static bool ath6kl_is_wpa_ie(const u8 *pos)
303 {
304 	return pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 &&
305 		pos[2] == 0x00 && pos[3] == 0x50 &&
306 		pos[4] == 0xf2 && pos[5] == 0x01;
307 }
308 
309 static bool ath6kl_is_rsn_ie(const u8 *pos)
310 {
311 	return pos[0] == WLAN_EID_RSN;
312 }
313 
314 static bool ath6kl_is_wps_ie(const u8 *pos)
315 {
316 	return (pos[0] == WLAN_EID_VENDOR_SPECIFIC &&
317 		pos[1] >= 4 &&
318 		pos[2] == 0x00 && pos[3] == 0x50 && pos[4] == 0xf2 &&
319 		pos[5] == 0x04);
320 }
321 
322 static int ath6kl_set_assoc_req_ies(struct ath6kl_vif *vif, const u8 *ies,
323 				    size_t ies_len)
324 {
325 	struct ath6kl *ar = vif->ar;
326 	const u8 *pos;
327 	u8 *buf = NULL;
328 	size_t len = 0;
329 	int ret;
330 
331 	/*
332 	 * Clear previously set flag
333 	 */
334 
335 	ar->connect_ctrl_flags &= ~CONNECT_WPS_FLAG;
336 
337 	/*
338 	 * Filter out RSN/WPA IE(s)
339 	 */
340 
341 	if (ies && ies_len) {
342 		buf = kmalloc(ies_len, GFP_KERNEL);
343 		if (buf == NULL)
344 			return -ENOMEM;
345 		pos = ies;
346 
347 		while (pos + 1 < ies + ies_len) {
348 			if (pos + 2 + pos[1] > ies + ies_len)
349 				break;
350 			if (!(ath6kl_is_wpa_ie(pos) || ath6kl_is_rsn_ie(pos))) {
351 				memcpy(buf + len, pos, 2 + pos[1]);
352 				len += 2 + pos[1];
353 			}
354 
355 			if (ath6kl_is_wps_ie(pos))
356 				ar->connect_ctrl_flags |= CONNECT_WPS_FLAG;
357 
358 			pos += 2 + pos[1];
359 		}
360 	}
361 
362 	ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
363 				       WMI_FRAME_ASSOC_REQ, buf, len);
364 	kfree(buf);
365 	return ret;
366 }
367 
368 static int ath6kl_nliftype_to_drv_iftype(enum nl80211_iftype type, u8 *nw_type)
369 {
370 	switch (type) {
371 	case NL80211_IFTYPE_STATION:
372 	case NL80211_IFTYPE_P2P_CLIENT:
373 		*nw_type = INFRA_NETWORK;
374 		break;
375 	case NL80211_IFTYPE_ADHOC:
376 		*nw_type = ADHOC_NETWORK;
377 		break;
378 	case NL80211_IFTYPE_AP:
379 	case NL80211_IFTYPE_P2P_GO:
380 		*nw_type = AP_NETWORK;
381 		break;
382 	default:
383 		ath6kl_err("invalid interface type %u\n", type);
384 		return -ENOTSUPP;
385 	}
386 
387 	return 0;
388 }
389 
390 static bool ath6kl_is_valid_iftype(struct ath6kl *ar, enum nl80211_iftype type,
391 				   u8 *if_idx, u8 *nw_type)
392 {
393 	int i;
394 
395 	if (ath6kl_nliftype_to_drv_iftype(type, nw_type))
396 		return false;
397 
398 	if (ar->ibss_if_active || ((type == NL80211_IFTYPE_ADHOC) &&
399 				   ar->num_vif))
400 		return false;
401 
402 	if (type == NL80211_IFTYPE_STATION ||
403 	    type == NL80211_IFTYPE_AP || type == NL80211_IFTYPE_ADHOC) {
404 		for (i = 0; i < ar->vif_max; i++) {
405 			if ((ar->avail_idx_map) & BIT(i)) {
406 				*if_idx = i;
407 				return true;
408 			}
409 		}
410 	}
411 
412 	if (type == NL80211_IFTYPE_P2P_CLIENT ||
413 	    type == NL80211_IFTYPE_P2P_GO) {
414 		for (i = ar->max_norm_iface; i < ar->vif_max; i++) {
415 			if ((ar->avail_idx_map) & BIT(i)) {
416 				*if_idx = i;
417 				return true;
418 			}
419 		}
420 	}
421 
422 	return false;
423 }
424 
425 static bool ath6kl_is_tx_pending(struct ath6kl *ar)
426 {
427 	return ar->tx_pending[ath6kl_wmi_get_control_ep(ar->wmi)] == 0;
428 }
429 
430 static void ath6kl_cfg80211_sta_bmiss_enhance(struct ath6kl_vif *vif,
431 					      bool enable)
432 {
433 	int err;
434 
435 	if (WARN_ON(!test_bit(WMI_READY, &vif->ar->flag)))
436 		return;
437 
438 	if (vif->nw_type != INFRA_NETWORK)
439 		return;
440 
441 	if (!test_bit(ATH6KL_FW_CAPABILITY_BMISS_ENHANCE,
442 		      vif->ar->fw_capabilities))
443 		return;
444 
445 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s fw bmiss enhance\n",
446 		   enable ? "enable" : "disable");
447 
448 	err = ath6kl_wmi_sta_bmiss_enhance_cmd(vif->ar->wmi,
449 					       vif->fw_vif_idx, enable);
450 	if (err)
451 		ath6kl_err("failed to %s enhanced bmiss detection: %d\n",
452 			   enable ? "enable" : "disable", err);
453 }
454 
455 static int ath6kl_cfg80211_connect(struct wiphy *wiphy, struct net_device *dev,
456 				   struct cfg80211_connect_params *sme)
457 {
458 	struct ath6kl *ar = ath6kl_priv(dev);
459 	struct ath6kl_vif *vif = netdev_priv(dev);
460 	int status;
461 	u8 nw_subtype = (ar->p2p) ? SUBTYPE_P2PDEV : SUBTYPE_NONE;
462 	u16 interval;
463 
464 	ath6kl_cfg80211_sscan_disable(vif);
465 
466 	vif->sme_state = SME_CONNECTING;
467 
468 	if (!ath6kl_cfg80211_ready(vif))
469 		return -EIO;
470 
471 	if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
472 		ath6kl_err("destroy in progress\n");
473 		return -EBUSY;
474 	}
475 
476 	if (test_bit(SKIP_SCAN, &ar->flag) &&
477 	    ((sme->channel && sme->channel->center_freq == 0) ||
478 	     (sme->bssid && is_zero_ether_addr(sme->bssid)))) {
479 		ath6kl_err("SkipScan: channel or bssid invalid\n");
480 		return -EINVAL;
481 	}
482 
483 	if (down_interruptible(&ar->sem)) {
484 		ath6kl_err("busy, couldn't get access\n");
485 		return -ERESTARTSYS;
486 	}
487 
488 	if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
489 		ath6kl_err("busy, destroy in progress\n");
490 		up(&ar->sem);
491 		return -EBUSY;
492 	}
493 
494 	if (ar->tx_pending[ath6kl_wmi_get_control_ep(ar->wmi)]) {
495 		/*
496 		 * sleep until the command queue drains
497 		 */
498 		wait_event_interruptible_timeout(ar->event_wq,
499 						 ath6kl_is_tx_pending(ar),
500 						 WMI_TIMEOUT);
501 		if (signal_pending(current)) {
502 			ath6kl_err("cmd queue drain timeout\n");
503 			up(&ar->sem);
504 			return -EINTR;
505 		}
506 	}
507 
508 	status = ath6kl_set_assoc_req_ies(vif, sme->ie, sme->ie_len);
509 	if (status) {
510 		up(&ar->sem);
511 		return status;
512 	}
513 
514 	if (sme->ie == NULL || sme->ie_len == 0)
515 		ar->connect_ctrl_flags &= ~CONNECT_WPS_FLAG;
516 
517 	if (test_bit(CONNECTED, &vif->flags) &&
518 	    vif->ssid_len == sme->ssid_len &&
519 	    !memcmp(vif->ssid, sme->ssid, vif->ssid_len)) {
520 		vif->reconnect_flag = true;
521 		status = ath6kl_wmi_reconnect_cmd(ar->wmi, vif->fw_vif_idx,
522 						  vif->req_bssid,
523 						  vif->ch_hint);
524 
525 		up(&ar->sem);
526 		if (status) {
527 			ath6kl_err("wmi_reconnect_cmd failed\n");
528 			return -EIO;
529 		}
530 		return 0;
531 	} else if (vif->ssid_len == sme->ssid_len &&
532 		   !memcmp(vif->ssid, sme->ssid, vif->ssid_len)) {
533 		ath6kl_disconnect(vif);
534 	}
535 
536 	memset(vif->ssid, 0, sizeof(vif->ssid));
537 	vif->ssid_len = sme->ssid_len;
538 	memcpy(vif->ssid, sme->ssid, sme->ssid_len);
539 
540 	if (sme->channel)
541 		vif->ch_hint = sme->channel->center_freq;
542 
543 	memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
544 	if (sme->bssid && !is_broadcast_ether_addr(sme->bssid))
545 		memcpy(vif->req_bssid, sme->bssid, sizeof(vif->req_bssid));
546 
547 	ath6kl_set_wpa_version(vif, sme->crypto.wpa_versions);
548 
549 	status = ath6kl_set_auth_type(vif, sme->auth_type);
550 	if (status) {
551 		up(&ar->sem);
552 		return status;
553 	}
554 
555 	if (sme->crypto.n_ciphers_pairwise)
556 		ath6kl_set_cipher(vif, sme->crypto.ciphers_pairwise[0], true);
557 	else
558 		ath6kl_set_cipher(vif, 0, true);
559 
560 	ath6kl_set_cipher(vif, sme->crypto.cipher_group, false);
561 
562 	if (sme->crypto.n_akm_suites)
563 		ath6kl_set_key_mgmt(vif, sme->crypto.akm_suites[0]);
564 
565 	if ((sme->key_len) &&
566 	    (vif->auth_mode == NONE_AUTH) &&
567 	    (vif->prwise_crypto == WEP_CRYPT)) {
568 		struct ath6kl_key *key = NULL;
569 
570 		if (sme->key_idx > WMI_MAX_KEY_INDEX) {
571 			ath6kl_err("key index %d out of bounds\n",
572 				   sme->key_idx);
573 			up(&ar->sem);
574 			return -ENOENT;
575 		}
576 
577 		key = &vif->keys[sme->key_idx];
578 		key->key_len = sme->key_len;
579 		memcpy(key->key, sme->key, key->key_len);
580 		key->cipher = vif->prwise_crypto;
581 		vif->def_txkey_index = sme->key_idx;
582 
583 		ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx, sme->key_idx,
584 				      vif->prwise_crypto,
585 				      GROUP_USAGE | TX_USAGE,
586 				      key->key_len,
587 				      NULL, 0,
588 				      key->key, KEY_OP_INIT_VAL, NULL,
589 				      NO_SYNC_WMIFLAG);
590 	}
591 
592 	if (!ar->usr_bss_filter) {
593 		clear_bit(CLEAR_BSSFILTER_ON_BEACON, &vif->flags);
594 		if (ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
595 					     ALL_BSS_FILTER, 0) != 0) {
596 			ath6kl_err("couldn't set bss filtering\n");
597 			up(&ar->sem);
598 			return -EIO;
599 		}
600 	}
601 
602 	vif->nw_type = vif->next_mode;
603 
604 	/* enable enhanced bmiss detection if applicable */
605 	ath6kl_cfg80211_sta_bmiss_enhance(vif, true);
606 
607 	if (vif->wdev.iftype == NL80211_IFTYPE_P2P_CLIENT)
608 		nw_subtype = SUBTYPE_P2PCLIENT;
609 
610 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
611 		   "%s: connect called with authmode %d dot11 auth %d"
612 		   " PW crypto %d PW crypto len %d GRP crypto %d"
613 		   " GRP crypto len %d channel hint %u\n",
614 		   __func__,
615 		   vif->auth_mode, vif->dot11_auth_mode, vif->prwise_crypto,
616 		   vif->prwise_crypto_len, vif->grp_crypto,
617 		   vif->grp_crypto_len, vif->ch_hint);
618 
619 	vif->reconnect_flag = 0;
620 
621 	if (vif->nw_type == INFRA_NETWORK) {
622 		interval = max_t(u16, vif->listen_intvl_t,
623 				 ATH6KL_MAX_WOW_LISTEN_INTL);
624 		status = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
625 						       interval,
626 						       0);
627 		if (status) {
628 			ath6kl_err("couldn't set listen intervel\n");
629 			up(&ar->sem);
630 			return status;
631 		}
632 	}
633 
634 	status = ath6kl_wmi_connect_cmd(ar->wmi, vif->fw_vif_idx, vif->nw_type,
635 					vif->dot11_auth_mode, vif->auth_mode,
636 					vif->prwise_crypto,
637 					vif->prwise_crypto_len,
638 					vif->grp_crypto, vif->grp_crypto_len,
639 					vif->ssid_len, vif->ssid,
640 					vif->req_bssid, vif->ch_hint,
641 					ar->connect_ctrl_flags, nw_subtype);
642 
643 	if (sme->bg_scan_period == 0) {
644 		/* disable background scan if period is 0 */
645 		sme->bg_scan_period = 0xffff;
646 	} else if (sme->bg_scan_period == -1) {
647 		/* configure default value if not specified */
648 		sme->bg_scan_period = DEFAULT_BG_SCAN_PERIOD;
649 	}
650 
651 	ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx, 0, 0,
652 				  sme->bg_scan_period, 0, 0, 0, 3, 0, 0, 0);
653 
654 	up(&ar->sem);
655 
656 	if (status == -EINVAL) {
657 		memset(vif->ssid, 0, sizeof(vif->ssid));
658 		vif->ssid_len = 0;
659 		ath6kl_err("invalid request\n");
660 		return -ENOENT;
661 	} else if (status) {
662 		ath6kl_err("ath6kl_wmi_connect_cmd failed\n");
663 		return -EIO;
664 	}
665 
666 	if ((!(ar->connect_ctrl_flags & CONNECT_DO_WPA_OFFLOAD)) &&
667 	    ((vif->auth_mode == WPA_PSK_AUTH) ||
668 	     (vif->auth_mode == WPA2_PSK_AUTH))) {
669 		mod_timer(&vif->disconnect_timer,
670 			  jiffies + msecs_to_jiffies(DISCON_TIMER_INTVAL));
671 	}
672 
673 	ar->connect_ctrl_flags &= ~CONNECT_DO_WPA_OFFLOAD;
674 	set_bit(CONNECT_PEND, &vif->flags);
675 
676 	return 0;
677 }
678 
679 static struct cfg80211_bss *
680 ath6kl_add_bss_if_needed(struct ath6kl_vif *vif,
681 			 enum network_type nw_type,
682 			 const u8 *bssid,
683 			 struct ieee80211_channel *chan,
684 			 const u8 *beacon_ie,
685 			 size_t beacon_ie_len)
686 {
687 	struct ath6kl *ar = vif->ar;
688 	struct cfg80211_bss *bss;
689 	u16 cap_mask, cap_val;
690 	u8 *ie;
691 
692 	if (nw_type & ADHOC_NETWORK) {
693 		cap_mask = WLAN_CAPABILITY_IBSS;
694 		cap_val = WLAN_CAPABILITY_IBSS;
695 	} else {
696 		cap_mask = WLAN_CAPABILITY_ESS;
697 		cap_val = WLAN_CAPABILITY_ESS;
698 	}
699 
700 	bss = cfg80211_get_bss(ar->wiphy, chan, bssid,
701 			       vif->ssid, vif->ssid_len,
702 			       cap_mask, cap_val);
703 	if (bss == NULL) {
704 		/*
705 		 * Since cfg80211 may not yet know about the BSS,
706 		 * generate a partial entry until the first BSS info
707 		 * event becomes available.
708 		 *
709 		 * Prepend SSID element since it is not included in the Beacon
710 		 * IEs from the target.
711 		 */
712 		ie = kmalloc(2 + vif->ssid_len + beacon_ie_len, GFP_KERNEL);
713 		if (ie == NULL)
714 			return NULL;
715 		ie[0] = WLAN_EID_SSID;
716 		ie[1] = vif->ssid_len;
717 		memcpy(ie + 2, vif->ssid, vif->ssid_len);
718 		memcpy(ie + 2 + vif->ssid_len, beacon_ie, beacon_ie_len);
719 		bss = cfg80211_inform_bss(ar->wiphy, chan,
720 					  bssid, 0, cap_val, 100,
721 					  ie, 2 + vif->ssid_len + beacon_ie_len,
722 					  0, GFP_KERNEL);
723 		if (bss)
724 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
725 				   "added bss %pM to cfg80211\n", bssid);
726 		kfree(ie);
727 	} else
728 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "cfg80211 already has a bss\n");
729 
730 	return bss;
731 }
732 
733 void ath6kl_cfg80211_connect_event(struct ath6kl_vif *vif, u16 channel,
734 				   u8 *bssid, u16 listen_intvl,
735 				   u16 beacon_intvl,
736 				   enum network_type nw_type,
737 				   u8 beacon_ie_len, u8 assoc_req_len,
738 				   u8 assoc_resp_len, u8 *assoc_info)
739 {
740 	struct ieee80211_channel *chan;
741 	struct ath6kl *ar = vif->ar;
742 	struct cfg80211_bss *bss;
743 
744 	/* capinfo + listen interval */
745 	u8 assoc_req_ie_offset = sizeof(u16) + sizeof(u16);
746 
747 	/* capinfo + status code +  associd */
748 	u8 assoc_resp_ie_offset = sizeof(u16) + sizeof(u16) + sizeof(u16);
749 
750 	u8 *assoc_req_ie = assoc_info + beacon_ie_len + assoc_req_ie_offset;
751 	u8 *assoc_resp_ie = assoc_info + beacon_ie_len + assoc_req_len +
752 	    assoc_resp_ie_offset;
753 
754 	assoc_req_len -= assoc_req_ie_offset;
755 	assoc_resp_len -= assoc_resp_ie_offset;
756 
757 	/*
758 	 * Store Beacon interval here; DTIM period will be available only once
759 	 * a Beacon frame from the AP is seen.
760 	 */
761 	vif->assoc_bss_beacon_int = beacon_intvl;
762 	clear_bit(DTIM_PERIOD_AVAIL, &vif->flags);
763 
764 	if (nw_type & ADHOC_NETWORK) {
765 		if (vif->wdev.iftype != NL80211_IFTYPE_ADHOC) {
766 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
767 				   "%s: ath6k not in ibss mode\n", __func__);
768 			return;
769 		}
770 	}
771 
772 	if (nw_type & INFRA_NETWORK) {
773 		if (vif->wdev.iftype != NL80211_IFTYPE_STATION &&
774 		    vif->wdev.iftype != NL80211_IFTYPE_P2P_CLIENT) {
775 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
776 				   "%s: ath6k not in station mode\n", __func__);
777 			return;
778 		}
779 	}
780 
781 	chan = ieee80211_get_channel(ar->wiphy, (int) channel);
782 
783 	bss = ath6kl_add_bss_if_needed(vif, nw_type, bssid, chan,
784 				       assoc_info, beacon_ie_len);
785 	if (!bss) {
786 		ath6kl_err("could not add cfg80211 bss entry\n");
787 		return;
788 	}
789 
790 	if (nw_type & ADHOC_NETWORK) {
791 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "ad-hoc %s selected\n",
792 			   nw_type & ADHOC_CREATOR ? "creator" : "joiner");
793 		cfg80211_ibss_joined(vif->ndev, bssid, chan, GFP_KERNEL);
794 		cfg80211_put_bss(ar->wiphy, bss);
795 		return;
796 	}
797 
798 	if (vif->sme_state == SME_CONNECTING) {
799 		/* inform connect result to cfg80211 */
800 		vif->sme_state = SME_CONNECTED;
801 		cfg80211_connect_result(vif->ndev, bssid,
802 					assoc_req_ie, assoc_req_len,
803 					assoc_resp_ie, assoc_resp_len,
804 					WLAN_STATUS_SUCCESS, GFP_KERNEL);
805 		cfg80211_put_bss(ar->wiphy, bss);
806 	} else if (vif->sme_state == SME_CONNECTED) {
807 		/* inform roam event to cfg80211 */
808 		cfg80211_roamed_bss(vif->ndev, bss, assoc_req_ie, assoc_req_len,
809 				    assoc_resp_ie, assoc_resp_len, GFP_KERNEL);
810 	}
811 }
812 
813 static int ath6kl_cfg80211_disconnect(struct wiphy *wiphy,
814 				      struct net_device *dev, u16 reason_code)
815 {
816 	struct ath6kl *ar = ath6kl_priv(dev);
817 	struct ath6kl_vif *vif = netdev_priv(dev);
818 
819 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: reason=%u\n", __func__,
820 		   reason_code);
821 
822 	ath6kl_cfg80211_sscan_disable(vif);
823 
824 	if (!ath6kl_cfg80211_ready(vif))
825 		return -EIO;
826 
827 	if (test_bit(DESTROY_IN_PROGRESS, &ar->flag)) {
828 		ath6kl_err("busy, destroy in progress\n");
829 		return -EBUSY;
830 	}
831 
832 	if (down_interruptible(&ar->sem)) {
833 		ath6kl_err("busy, couldn't get access\n");
834 		return -ERESTARTSYS;
835 	}
836 
837 	vif->reconnect_flag = 0;
838 	ath6kl_disconnect(vif);
839 	memset(vif->ssid, 0, sizeof(vif->ssid));
840 	vif->ssid_len = 0;
841 
842 	if (!test_bit(SKIP_SCAN, &ar->flag))
843 		memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
844 
845 	up(&ar->sem);
846 
847 	vif->sme_state = SME_DISCONNECTED;
848 
849 	return 0;
850 }
851 
852 void ath6kl_cfg80211_disconnect_event(struct ath6kl_vif *vif, u8 reason,
853 				      u8 *bssid, u8 assoc_resp_len,
854 				      u8 *assoc_info, u16 proto_reason)
855 {
856 	struct ath6kl *ar = vif->ar;
857 
858 	if (vif->scan_req) {
859 		cfg80211_scan_done(vif->scan_req, true);
860 		vif->scan_req = NULL;
861 	}
862 
863 	if (vif->nw_type & ADHOC_NETWORK) {
864 		if (vif->wdev.iftype != NL80211_IFTYPE_ADHOC)
865 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
866 				   "%s: ath6k not in ibss mode\n", __func__);
867 		return;
868 	}
869 
870 	if (vif->nw_type & INFRA_NETWORK) {
871 		if (vif->wdev.iftype != NL80211_IFTYPE_STATION &&
872 		    vif->wdev.iftype != NL80211_IFTYPE_P2P_CLIENT) {
873 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
874 				   "%s: ath6k not in station mode\n", __func__);
875 			return;
876 		}
877 	}
878 
879 	clear_bit(CONNECT_PEND, &vif->flags);
880 
881 	if (vif->sme_state == SME_CONNECTING) {
882 		cfg80211_connect_result(vif->ndev,
883 					bssid, NULL, 0,
884 					NULL, 0,
885 					WLAN_STATUS_UNSPECIFIED_FAILURE,
886 					GFP_KERNEL);
887 	} else if (vif->sme_state == SME_CONNECTED) {
888 		cfg80211_disconnected(vif->ndev, proto_reason,
889 				      NULL, 0, GFP_KERNEL);
890 	}
891 
892 	vif->sme_state = SME_DISCONNECTED;
893 
894 	/*
895 	 * Send a disconnect command to target when a disconnect event is
896 	 * received with reason code other than 3 (DISCONNECT_CMD - disconnect
897 	 * request from host) to make the firmware stop trying to connect even
898 	 * after giving disconnect event. There will be one more disconnect
899 	 * event for this disconnect command with reason code DISCONNECT_CMD
900 	 * which won't be notified to cfg80211.
901 	 */
902 	if (reason != DISCONNECT_CMD)
903 		ath6kl_wmi_disconnect_cmd(ar->wmi, vif->fw_vif_idx);
904 }
905 
906 static int ath6kl_set_probed_ssids(struct ath6kl *ar,
907 				   struct ath6kl_vif *vif,
908 				   struct cfg80211_ssid *ssids, int n_ssids,
909 				   struct cfg80211_match_set *match_set,
910 				   int n_match_ssid)
911 {
912 	u8 i, j, index_to_add, ssid_found = false;
913 	struct ath6kl_cfg80211_match_probe_ssid ssid_list[MAX_PROBED_SSIDS];
914 
915 	memset(ssid_list, 0, sizeof(ssid_list));
916 
917 	if (n_ssids > MAX_PROBED_SSIDS ||
918 	    n_match_ssid > MAX_PROBED_SSIDS)
919 		return -EINVAL;
920 
921 	for (i = 0; i < n_ssids; i++) {
922 		memcpy(ssid_list[i].ssid.ssid,
923 		       ssids[i].ssid,
924 		       ssids[i].ssid_len);
925 		ssid_list[i].ssid.ssid_len = ssids[i].ssid_len;
926 
927 		if (ssids[i].ssid_len)
928 			ssid_list[i].flag = SPECIFIC_SSID_FLAG;
929 		else
930 			ssid_list[i].flag = ANY_SSID_FLAG;
931 
932 		if (n_match_ssid == 0)
933 			ssid_list[i].flag |= MATCH_SSID_FLAG;
934 	}
935 
936 	index_to_add = i;
937 
938 	for (i = 0; i < n_match_ssid; i++) {
939 		ssid_found = false;
940 
941 		for (j = 0; j < n_ssids; j++) {
942 			if ((match_set[i].ssid.ssid_len ==
943 			     ssid_list[j].ssid.ssid_len) &&
944 			    (!memcmp(ssid_list[j].ssid.ssid,
945 				     match_set[i].ssid.ssid,
946 				     match_set[i].ssid.ssid_len))) {
947 				ssid_list[j].flag |= MATCH_SSID_FLAG;
948 				ssid_found = true;
949 				break;
950 			}
951 		}
952 
953 		if (ssid_found)
954 			continue;
955 
956 		if (index_to_add >= MAX_PROBED_SSIDS)
957 			continue;
958 
959 		ssid_list[index_to_add].ssid.ssid_len =
960 			match_set[i].ssid.ssid_len;
961 		memcpy(ssid_list[index_to_add].ssid.ssid,
962 		       match_set[i].ssid.ssid,
963 		       match_set[i].ssid.ssid_len);
964 		ssid_list[index_to_add].flag |= MATCH_SSID_FLAG;
965 		index_to_add++;
966 	}
967 
968 	for (i = 0; i < index_to_add; i++) {
969 		ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx, i,
970 					  ssid_list[i].flag,
971 					  ssid_list[i].ssid.ssid_len,
972 					  ssid_list[i].ssid.ssid);
973 
974 	}
975 
976 	/* Make sure no old entries are left behind */
977 	for (i = index_to_add; i < MAX_PROBED_SSIDS; i++) {
978 		ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx, i,
979 					  DISABLE_SSID_FLAG, 0, NULL);
980 	}
981 
982 	return 0;
983 }
984 
985 static int ath6kl_cfg80211_scan(struct wiphy *wiphy,
986 				struct cfg80211_scan_request *request)
987 {
988 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(request->wdev);
989 	struct ath6kl *ar = ath6kl_priv(vif->ndev);
990 	s8 n_channels = 0;
991 	u16 *channels = NULL;
992 	int ret = 0;
993 	u32 force_fg_scan = 0;
994 
995 	if (!ath6kl_cfg80211_ready(vif))
996 		return -EIO;
997 
998 	ath6kl_cfg80211_sscan_disable(vif);
999 
1000 	if (!ar->usr_bss_filter) {
1001 		clear_bit(CLEAR_BSSFILTER_ON_BEACON, &vif->flags);
1002 		ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
1003 					       ALL_BSS_FILTER, 0);
1004 		if (ret) {
1005 			ath6kl_err("couldn't set bss filtering\n");
1006 			return ret;
1007 		}
1008 	}
1009 
1010 	ret = ath6kl_set_probed_ssids(ar, vif, request->ssids,
1011 				      request->n_ssids, NULL, 0);
1012 	if (ret < 0)
1013 		return ret;
1014 
1015 	/* this also clears IE in fw if it's not set */
1016 	ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
1017 				       WMI_FRAME_PROBE_REQ,
1018 				       request->ie, request->ie_len);
1019 	if (ret) {
1020 		ath6kl_err("failed to set Probe Request appie for scan\n");
1021 		return ret;
1022 	}
1023 
1024 	/*
1025 	 * Scan only the requested channels if the request specifies a set of
1026 	 * channels. If the list is longer than the target supports, do not
1027 	 * configure the list and instead, scan all available channels.
1028 	 */
1029 	if (request->n_channels > 0 &&
1030 	    request->n_channels <= WMI_MAX_CHANNELS) {
1031 		u8 i;
1032 
1033 		n_channels = request->n_channels;
1034 
1035 		channels = kzalloc(n_channels * sizeof(u16), GFP_KERNEL);
1036 		if (channels == NULL) {
1037 			ath6kl_warn("failed to set scan channels, scan all channels");
1038 			n_channels = 0;
1039 		}
1040 
1041 		for (i = 0; i < n_channels; i++)
1042 			channels[i] = request->channels[i]->center_freq;
1043 	}
1044 
1045 	if (test_bit(CONNECTED, &vif->flags))
1046 		force_fg_scan = 1;
1047 
1048 	vif->scan_req = request;
1049 
1050 	ret = ath6kl_wmi_beginscan_cmd(ar->wmi, vif->fw_vif_idx,
1051 				       WMI_LONG_SCAN, force_fg_scan,
1052 				       false, 0,
1053 				       ATH6KL_FG_SCAN_INTERVAL,
1054 				       n_channels, channels,
1055 				       request->no_cck,
1056 				       request->rates);
1057 	if (ret) {
1058 		ath6kl_err("failed to start scan: %d\n", ret);
1059 		vif->scan_req = NULL;
1060 	}
1061 
1062 	kfree(channels);
1063 
1064 	return ret;
1065 }
1066 
1067 void ath6kl_cfg80211_scan_complete_event(struct ath6kl_vif *vif, bool aborted)
1068 {
1069 	struct ath6kl *ar = vif->ar;
1070 	int i;
1071 
1072 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: status%s\n", __func__,
1073 		   aborted ? " aborted" : "");
1074 
1075 	if (!vif->scan_req)
1076 		return;
1077 
1078 	if (aborted)
1079 		goto out;
1080 
1081 	if (vif->scan_req->n_ssids && vif->scan_req->ssids[0].ssid_len) {
1082 		for (i = 0; i < vif->scan_req->n_ssids; i++) {
1083 			ath6kl_wmi_probedssid_cmd(ar->wmi, vif->fw_vif_idx,
1084 						  i + 1, DISABLE_SSID_FLAG,
1085 						  0, NULL);
1086 		}
1087 	}
1088 
1089 out:
1090 	cfg80211_scan_done(vif->scan_req, aborted);
1091 	vif->scan_req = NULL;
1092 }
1093 
1094 void ath6kl_cfg80211_ch_switch_notify(struct ath6kl_vif *vif, int freq,
1095 				      enum wmi_phy_mode mode)
1096 {
1097 	struct cfg80211_chan_def chandef;
1098 
1099 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1100 		   "channel switch notify nw_type %d freq %d mode %d\n",
1101 		   vif->nw_type, freq, mode);
1102 
1103 	cfg80211_chandef_create(&chandef,
1104 				ieee80211_get_channel(vif->ar->wiphy, freq),
1105 				(mode == WMI_11G_HT20) ?
1106 					NL80211_CHAN_HT20 : NL80211_CHAN_NO_HT);
1107 
1108 	mutex_lock(&vif->wdev.mtx);
1109 	cfg80211_ch_switch_notify(vif->ndev, &chandef);
1110 	mutex_unlock(&vif->wdev.mtx);
1111 }
1112 
1113 static int ath6kl_cfg80211_add_key(struct wiphy *wiphy, struct net_device *ndev,
1114 				   u8 key_index, bool pairwise,
1115 				   const u8 *mac_addr,
1116 				   struct key_params *params)
1117 {
1118 	struct ath6kl *ar = ath6kl_priv(ndev);
1119 	struct ath6kl_vif *vif = netdev_priv(ndev);
1120 	struct ath6kl_key *key = NULL;
1121 	int seq_len;
1122 	u8 key_usage;
1123 	u8 key_type;
1124 
1125 	if (!ath6kl_cfg80211_ready(vif))
1126 		return -EIO;
1127 
1128 	if (params->cipher == CCKM_KRK_CIPHER_SUITE) {
1129 		if (params->key_len != WMI_KRK_LEN)
1130 			return -EINVAL;
1131 		return ath6kl_wmi_add_krk_cmd(ar->wmi, vif->fw_vif_idx,
1132 					      params->key);
1133 	}
1134 
1135 	if (key_index > WMI_MAX_KEY_INDEX) {
1136 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1137 			   "%s: key index %d out of bounds\n", __func__,
1138 			   key_index);
1139 		return -ENOENT;
1140 	}
1141 
1142 	key = &vif->keys[key_index];
1143 	memset(key, 0, sizeof(struct ath6kl_key));
1144 
1145 	if (pairwise)
1146 		key_usage = PAIRWISE_USAGE;
1147 	else
1148 		key_usage = GROUP_USAGE;
1149 
1150 	seq_len = params->seq_len;
1151 	if (params->cipher == WLAN_CIPHER_SUITE_SMS4 &&
1152 	    seq_len > ATH6KL_KEY_SEQ_LEN) {
1153 		/* Only first half of the WPI PN is configured */
1154 		seq_len = ATH6KL_KEY_SEQ_LEN;
1155 	}
1156 	if (params->key_len > WLAN_MAX_KEY_LEN ||
1157 	    seq_len > sizeof(key->seq))
1158 		return -EINVAL;
1159 
1160 	key->key_len = params->key_len;
1161 	memcpy(key->key, params->key, key->key_len);
1162 	key->seq_len = seq_len;
1163 	memcpy(key->seq, params->seq, key->seq_len);
1164 	key->cipher = params->cipher;
1165 
1166 	switch (key->cipher) {
1167 	case WLAN_CIPHER_SUITE_WEP40:
1168 	case WLAN_CIPHER_SUITE_WEP104:
1169 		key_type = WEP_CRYPT;
1170 		break;
1171 
1172 	case WLAN_CIPHER_SUITE_TKIP:
1173 		key_type = TKIP_CRYPT;
1174 		break;
1175 
1176 	case WLAN_CIPHER_SUITE_CCMP:
1177 		key_type = AES_CRYPT;
1178 		break;
1179 	case WLAN_CIPHER_SUITE_SMS4:
1180 		key_type = WAPI_CRYPT;
1181 		break;
1182 
1183 	default:
1184 		return -ENOTSUPP;
1185 	}
1186 
1187 	if (((vif->auth_mode == WPA_PSK_AUTH) ||
1188 	     (vif->auth_mode == WPA2_PSK_AUTH)) &&
1189 	    (key_usage & GROUP_USAGE))
1190 		del_timer(&vif->disconnect_timer);
1191 
1192 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1193 		   "%s: index %d, key_len %d, key_type 0x%x, key_usage 0x%x, seq_len %d\n",
1194 		   __func__, key_index, key->key_len, key_type,
1195 		   key_usage, key->seq_len);
1196 
1197 	if (vif->nw_type == AP_NETWORK && !pairwise &&
1198 	    (key_type == TKIP_CRYPT || key_type == AES_CRYPT ||
1199 	     key_type == WAPI_CRYPT)) {
1200 		ar->ap_mode_bkey.valid = true;
1201 		ar->ap_mode_bkey.key_index = key_index;
1202 		ar->ap_mode_bkey.key_type = key_type;
1203 		ar->ap_mode_bkey.key_len = key->key_len;
1204 		memcpy(ar->ap_mode_bkey.key, key->key, key->key_len);
1205 		if (!test_bit(CONNECTED, &vif->flags)) {
1206 			ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1207 				   "Delay initial group key configuration until AP mode has been started\n");
1208 			/*
1209 			 * The key will be set in ath6kl_connect_ap_mode() once
1210 			 * the connected event is received from the target.
1211 			 */
1212 			return 0;
1213 		}
1214 	}
1215 
1216 	if (vif->next_mode == AP_NETWORK && key_type == WEP_CRYPT &&
1217 	    !test_bit(CONNECTED, &vif->flags)) {
1218 		/*
1219 		 * Store the key locally so that it can be re-configured after
1220 		 * the AP mode has properly started
1221 		 * (ath6kl_install_statioc_wep_keys).
1222 		 */
1223 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1224 			   "Delay WEP key configuration until AP mode has been started\n");
1225 		vif->wep_key_list[key_index].key_len = key->key_len;
1226 		memcpy(vif->wep_key_list[key_index].key, key->key,
1227 		       key->key_len);
1228 		return 0;
1229 	}
1230 
1231 	return ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx, key_index,
1232 				     key_type, key_usage, key->key_len,
1233 				     key->seq, key->seq_len, key->key,
1234 				     KEY_OP_INIT_VAL,
1235 				     (u8 *) mac_addr, SYNC_BOTH_WMIFLAG);
1236 }
1237 
1238 static int ath6kl_cfg80211_del_key(struct wiphy *wiphy, struct net_device *ndev,
1239 				   u8 key_index, bool pairwise,
1240 				   const u8 *mac_addr)
1241 {
1242 	struct ath6kl *ar = ath6kl_priv(ndev);
1243 	struct ath6kl_vif *vif = netdev_priv(ndev);
1244 
1245 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1246 
1247 	if (!ath6kl_cfg80211_ready(vif))
1248 		return -EIO;
1249 
1250 	if (key_index > WMI_MAX_KEY_INDEX) {
1251 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1252 			   "%s: key index %d out of bounds\n", __func__,
1253 			   key_index);
1254 		return -ENOENT;
1255 	}
1256 
1257 	if (!vif->keys[key_index].key_len) {
1258 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1259 			   "%s: index %d is empty\n", __func__, key_index);
1260 		return 0;
1261 	}
1262 
1263 	vif->keys[key_index].key_len = 0;
1264 
1265 	return ath6kl_wmi_deletekey_cmd(ar->wmi, vif->fw_vif_idx, key_index);
1266 }
1267 
1268 static int ath6kl_cfg80211_get_key(struct wiphy *wiphy, struct net_device *ndev,
1269 				   u8 key_index, bool pairwise,
1270 				   const u8 *mac_addr, void *cookie,
1271 				   void (*callback) (void *cookie,
1272 						     struct key_params *))
1273 {
1274 	struct ath6kl_vif *vif = netdev_priv(ndev);
1275 	struct ath6kl_key *key = NULL;
1276 	struct key_params params;
1277 
1278 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1279 
1280 	if (!ath6kl_cfg80211_ready(vif))
1281 		return -EIO;
1282 
1283 	if (key_index > WMI_MAX_KEY_INDEX) {
1284 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1285 			   "%s: key index %d out of bounds\n", __func__,
1286 			   key_index);
1287 		return -ENOENT;
1288 	}
1289 
1290 	key = &vif->keys[key_index];
1291 	memset(&params, 0, sizeof(params));
1292 	params.cipher = key->cipher;
1293 	params.key_len = key->key_len;
1294 	params.seq_len = key->seq_len;
1295 	params.seq = key->seq;
1296 	params.key = key->key;
1297 
1298 	callback(cookie, &params);
1299 
1300 	return key->key_len ? 0 : -ENOENT;
1301 }
1302 
1303 static int ath6kl_cfg80211_set_default_key(struct wiphy *wiphy,
1304 					   struct net_device *ndev,
1305 					   u8 key_index, bool unicast,
1306 					   bool multicast)
1307 {
1308 	struct ath6kl *ar = ath6kl_priv(ndev);
1309 	struct ath6kl_vif *vif = netdev_priv(ndev);
1310 	struct ath6kl_key *key = NULL;
1311 	u8 key_usage;
1312 	enum crypto_type key_type = NONE_CRYPT;
1313 
1314 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: index %d\n", __func__, key_index);
1315 
1316 	if (!ath6kl_cfg80211_ready(vif))
1317 		return -EIO;
1318 
1319 	if (key_index > WMI_MAX_KEY_INDEX) {
1320 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1321 			   "%s: key index %d out of bounds\n",
1322 			   __func__, key_index);
1323 		return -ENOENT;
1324 	}
1325 
1326 	if (!vif->keys[key_index].key_len) {
1327 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: invalid key index %d\n",
1328 			   __func__, key_index);
1329 		return -EINVAL;
1330 	}
1331 
1332 	vif->def_txkey_index = key_index;
1333 	key = &vif->keys[vif->def_txkey_index];
1334 	key_usage = GROUP_USAGE;
1335 	if (vif->prwise_crypto == WEP_CRYPT)
1336 		key_usage |= TX_USAGE;
1337 	if (unicast)
1338 		key_type = vif->prwise_crypto;
1339 	if (multicast)
1340 		key_type = vif->grp_crypto;
1341 
1342 	if (vif->next_mode == AP_NETWORK && !test_bit(CONNECTED, &vif->flags))
1343 		return 0; /* Delay until AP mode has been started */
1344 
1345 	return ath6kl_wmi_addkey_cmd(ar->wmi, vif->fw_vif_idx,
1346 				     vif->def_txkey_index,
1347 				     key_type, key_usage,
1348 				     key->key_len, key->seq, key->seq_len,
1349 				     key->key,
1350 				     KEY_OP_INIT_VAL, NULL,
1351 				     SYNC_BOTH_WMIFLAG);
1352 }
1353 
1354 void ath6kl_cfg80211_tkip_micerr_event(struct ath6kl_vif *vif, u8 keyid,
1355 				       bool ismcast)
1356 {
1357 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1358 		   "%s: keyid %d, ismcast %d\n", __func__, keyid, ismcast);
1359 
1360 	cfg80211_michael_mic_failure(vif->ndev, vif->bssid,
1361 				     (ismcast ? NL80211_KEYTYPE_GROUP :
1362 				      NL80211_KEYTYPE_PAIRWISE), keyid, NULL,
1363 				     GFP_KERNEL);
1364 }
1365 
1366 static int ath6kl_cfg80211_set_wiphy_params(struct wiphy *wiphy, u32 changed)
1367 {
1368 	struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1369 	struct ath6kl_vif *vif;
1370 	int ret;
1371 
1372 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: changed 0x%x\n", __func__,
1373 		   changed);
1374 
1375 	vif = ath6kl_vif_first(ar);
1376 	if (!vif)
1377 		return -EIO;
1378 
1379 	if (!ath6kl_cfg80211_ready(vif))
1380 		return -EIO;
1381 
1382 	if (changed & WIPHY_PARAM_RTS_THRESHOLD) {
1383 		ret = ath6kl_wmi_set_rts_cmd(ar->wmi, wiphy->rts_threshold);
1384 		if (ret != 0) {
1385 			ath6kl_err("ath6kl_wmi_set_rts_cmd failed\n");
1386 			return -EIO;
1387 		}
1388 	}
1389 
1390 	return 0;
1391 }
1392 
1393 static int ath6kl_cfg80211_set_txpower(struct wiphy *wiphy,
1394 				       struct wireless_dev *wdev,
1395 				       enum nl80211_tx_power_setting type,
1396 				       int mbm)
1397 {
1398 	struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1399 	struct ath6kl_vif *vif;
1400 	int dbm = MBM_TO_DBM(mbm);
1401 
1402 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type 0x%x, dbm %d\n", __func__,
1403 		   type, dbm);
1404 
1405 	vif = ath6kl_vif_first(ar);
1406 	if (!vif)
1407 		return -EIO;
1408 
1409 	if (!ath6kl_cfg80211_ready(vif))
1410 		return -EIO;
1411 
1412 	switch (type) {
1413 	case NL80211_TX_POWER_AUTOMATIC:
1414 		return 0;
1415 	case NL80211_TX_POWER_LIMITED:
1416 		ar->tx_pwr = dbm;
1417 		break;
1418 	default:
1419 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type 0x%x not supported\n",
1420 			   __func__, type);
1421 		return -EOPNOTSUPP;
1422 	}
1423 
1424 	ath6kl_wmi_set_tx_pwr_cmd(ar->wmi, vif->fw_vif_idx, dbm);
1425 
1426 	return 0;
1427 }
1428 
1429 static int ath6kl_cfg80211_get_txpower(struct wiphy *wiphy,
1430 				       struct wireless_dev *wdev,
1431 				       int *dbm)
1432 {
1433 	struct ath6kl *ar = (struct ath6kl *)wiphy_priv(wiphy);
1434 	struct ath6kl_vif *vif;
1435 
1436 	vif = ath6kl_vif_first(ar);
1437 	if (!vif)
1438 		return -EIO;
1439 
1440 	if (!ath6kl_cfg80211_ready(vif))
1441 		return -EIO;
1442 
1443 	if (test_bit(CONNECTED, &vif->flags)) {
1444 		ar->tx_pwr = 0;
1445 
1446 		if (ath6kl_wmi_get_tx_pwr_cmd(ar->wmi, vif->fw_vif_idx) != 0) {
1447 			ath6kl_err("ath6kl_wmi_get_tx_pwr_cmd failed\n");
1448 			return -EIO;
1449 		}
1450 
1451 		wait_event_interruptible_timeout(ar->event_wq, ar->tx_pwr != 0,
1452 						 5 * HZ);
1453 
1454 		if (signal_pending(current)) {
1455 			ath6kl_err("target did not respond\n");
1456 			return -EINTR;
1457 		}
1458 	}
1459 
1460 	*dbm = ar->tx_pwr;
1461 	return 0;
1462 }
1463 
1464 static int ath6kl_cfg80211_set_power_mgmt(struct wiphy *wiphy,
1465 					  struct net_device *dev,
1466 					  bool pmgmt, int timeout)
1467 {
1468 	struct ath6kl *ar = ath6kl_priv(dev);
1469 	struct wmi_power_mode_cmd mode;
1470 	struct ath6kl_vif *vif = netdev_priv(dev);
1471 
1472 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: pmgmt %d, timeout %d\n",
1473 		   __func__, pmgmt, timeout);
1474 
1475 	if (!ath6kl_cfg80211_ready(vif))
1476 		return -EIO;
1477 
1478 	if (pmgmt) {
1479 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: rec power\n", __func__);
1480 		mode.pwr_mode = REC_POWER;
1481 	} else {
1482 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: max perf\n", __func__);
1483 		mode.pwr_mode = MAX_PERF_POWER;
1484 	}
1485 
1486 	if (ath6kl_wmi_powermode_cmd(ar->wmi, vif->fw_vif_idx,
1487 				     mode.pwr_mode) != 0) {
1488 		ath6kl_err("wmi_powermode_cmd failed\n");
1489 		return -EIO;
1490 	}
1491 
1492 	return 0;
1493 }
1494 
1495 static struct wireless_dev *ath6kl_cfg80211_add_iface(struct wiphy *wiphy,
1496 						      const char *name,
1497 						      enum nl80211_iftype type,
1498 						      u32 *flags,
1499 						      struct vif_params *params)
1500 {
1501 	struct ath6kl *ar = wiphy_priv(wiphy);
1502 	struct wireless_dev *wdev;
1503 	u8 if_idx, nw_type;
1504 
1505 	if (ar->num_vif == ar->vif_max) {
1506 		ath6kl_err("Reached maximum number of supported vif\n");
1507 		return ERR_PTR(-EINVAL);
1508 	}
1509 
1510 	if (!ath6kl_is_valid_iftype(ar, type, &if_idx, &nw_type)) {
1511 		ath6kl_err("Not a supported interface type\n");
1512 		return ERR_PTR(-EINVAL);
1513 	}
1514 
1515 	wdev = ath6kl_interface_add(ar, name, type, if_idx, nw_type);
1516 	if (!wdev)
1517 		return ERR_PTR(-ENOMEM);
1518 
1519 	ar->num_vif++;
1520 
1521 	return wdev;
1522 }
1523 
1524 static int ath6kl_cfg80211_del_iface(struct wiphy *wiphy,
1525 				     struct wireless_dev *wdev)
1526 {
1527 	struct ath6kl *ar = wiphy_priv(wiphy);
1528 	struct ath6kl_vif *vif = netdev_priv(wdev->netdev);
1529 
1530 	spin_lock_bh(&ar->list_lock);
1531 	list_del(&vif->list);
1532 	spin_unlock_bh(&ar->list_lock);
1533 
1534 	ath6kl_cfg80211_vif_stop(vif, test_bit(WMI_READY, &ar->flag));
1535 
1536 	rtnl_lock();
1537 	ath6kl_cfg80211_vif_cleanup(vif);
1538 	rtnl_unlock();
1539 
1540 	return 0;
1541 }
1542 
1543 static int ath6kl_cfg80211_change_iface(struct wiphy *wiphy,
1544 					struct net_device *ndev,
1545 					enum nl80211_iftype type, u32 *flags,
1546 					struct vif_params *params)
1547 {
1548 	struct ath6kl_vif *vif = netdev_priv(ndev);
1549 	int i;
1550 
1551 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: type %u\n", __func__, type);
1552 
1553 	/*
1554 	 * Don't bring up p2p on an interface which is not initialized
1555 	 * for p2p operation where fw does not have capability to switch
1556 	 * dynamically between non-p2p and p2p type interface.
1557 	 */
1558 	if (!test_bit(ATH6KL_FW_CAPABILITY_STA_P2PDEV_DUPLEX,
1559 		      vif->ar->fw_capabilities) &&
1560 	    (type == NL80211_IFTYPE_P2P_CLIENT ||
1561 	     type == NL80211_IFTYPE_P2P_GO)) {
1562 		if (vif->ar->vif_max == 1) {
1563 			if (vif->fw_vif_idx != 0)
1564 				return -EINVAL;
1565 			else
1566 				goto set_iface_type;
1567 		}
1568 
1569 		for (i = vif->ar->max_norm_iface; i < vif->ar->vif_max; i++) {
1570 			if (i == vif->fw_vif_idx)
1571 				break;
1572 		}
1573 
1574 		if (i == vif->ar->vif_max) {
1575 			ath6kl_err("Invalid interface to bring up P2P\n");
1576 			return -EINVAL;
1577 		}
1578 	}
1579 
1580 	/* need to clean up enhanced bmiss detection fw state */
1581 	ath6kl_cfg80211_sta_bmiss_enhance(vif, false);
1582 
1583 set_iface_type:
1584 	switch (type) {
1585 	case NL80211_IFTYPE_STATION:
1586 	case NL80211_IFTYPE_P2P_CLIENT:
1587 		vif->next_mode = INFRA_NETWORK;
1588 		break;
1589 	case NL80211_IFTYPE_ADHOC:
1590 		vif->next_mode = ADHOC_NETWORK;
1591 		break;
1592 	case NL80211_IFTYPE_AP:
1593 	case NL80211_IFTYPE_P2P_GO:
1594 		vif->next_mode = AP_NETWORK;
1595 		break;
1596 	default:
1597 		ath6kl_err("invalid interface type %u\n", type);
1598 		return -EOPNOTSUPP;
1599 	}
1600 
1601 	vif->wdev.iftype = type;
1602 
1603 	return 0;
1604 }
1605 
1606 static int ath6kl_cfg80211_join_ibss(struct wiphy *wiphy,
1607 				     struct net_device *dev,
1608 				     struct cfg80211_ibss_params *ibss_param)
1609 {
1610 	struct ath6kl *ar = ath6kl_priv(dev);
1611 	struct ath6kl_vif *vif = netdev_priv(dev);
1612 	int status;
1613 
1614 	if (!ath6kl_cfg80211_ready(vif))
1615 		return -EIO;
1616 
1617 	vif->ssid_len = ibss_param->ssid_len;
1618 	memcpy(vif->ssid, ibss_param->ssid, vif->ssid_len);
1619 
1620 	if (ibss_param->chandef.chan)
1621 		vif->ch_hint = ibss_param->chandef.chan->center_freq;
1622 
1623 	if (ibss_param->channel_fixed) {
1624 		/*
1625 		 * TODO: channel_fixed: The channel should be fixed, do not
1626 		 * search for IBSSs to join on other channels. Target
1627 		 * firmware does not support this feature, needs to be
1628 		 * updated.
1629 		 */
1630 		return -EOPNOTSUPP;
1631 	}
1632 
1633 	memset(vif->req_bssid, 0, sizeof(vif->req_bssid));
1634 	if (ibss_param->bssid && !is_broadcast_ether_addr(ibss_param->bssid))
1635 		memcpy(vif->req_bssid, ibss_param->bssid,
1636 		       sizeof(vif->req_bssid));
1637 
1638 	ath6kl_set_wpa_version(vif, 0);
1639 
1640 	status = ath6kl_set_auth_type(vif, NL80211_AUTHTYPE_OPEN_SYSTEM);
1641 	if (status)
1642 		return status;
1643 
1644 	if (ibss_param->privacy) {
1645 		ath6kl_set_cipher(vif, WLAN_CIPHER_SUITE_WEP40, true);
1646 		ath6kl_set_cipher(vif, WLAN_CIPHER_SUITE_WEP40, false);
1647 	} else {
1648 		ath6kl_set_cipher(vif, 0, true);
1649 		ath6kl_set_cipher(vif, 0, false);
1650 	}
1651 
1652 	vif->nw_type = vif->next_mode;
1653 
1654 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1655 		   "%s: connect called with authmode %d dot11 auth %d"
1656 		   " PW crypto %d PW crypto len %d GRP crypto %d"
1657 		   " GRP crypto len %d channel hint %u\n",
1658 		   __func__,
1659 		   vif->auth_mode, vif->dot11_auth_mode, vif->prwise_crypto,
1660 		   vif->prwise_crypto_len, vif->grp_crypto,
1661 		   vif->grp_crypto_len, vif->ch_hint);
1662 
1663 	status = ath6kl_wmi_connect_cmd(ar->wmi, vif->fw_vif_idx, vif->nw_type,
1664 					vif->dot11_auth_mode, vif->auth_mode,
1665 					vif->prwise_crypto,
1666 					vif->prwise_crypto_len,
1667 					vif->grp_crypto, vif->grp_crypto_len,
1668 					vif->ssid_len, vif->ssid,
1669 					vif->req_bssid, vif->ch_hint,
1670 					ar->connect_ctrl_flags, SUBTYPE_NONE);
1671 	set_bit(CONNECT_PEND, &vif->flags);
1672 
1673 	return 0;
1674 }
1675 
1676 static int ath6kl_cfg80211_leave_ibss(struct wiphy *wiphy,
1677 				      struct net_device *dev)
1678 {
1679 	struct ath6kl_vif *vif = netdev_priv(dev);
1680 
1681 	if (!ath6kl_cfg80211_ready(vif))
1682 		return -EIO;
1683 
1684 	ath6kl_disconnect(vif);
1685 	memset(vif->ssid, 0, sizeof(vif->ssid));
1686 	vif->ssid_len = 0;
1687 
1688 	return 0;
1689 }
1690 
1691 static const u32 cipher_suites[] = {
1692 	WLAN_CIPHER_SUITE_WEP40,
1693 	WLAN_CIPHER_SUITE_WEP104,
1694 	WLAN_CIPHER_SUITE_TKIP,
1695 	WLAN_CIPHER_SUITE_CCMP,
1696 	CCKM_KRK_CIPHER_SUITE,
1697 	WLAN_CIPHER_SUITE_SMS4,
1698 };
1699 
1700 static bool is_rate_legacy(s32 rate)
1701 {
1702 	static const s32 legacy[] = { 1000, 2000, 5500, 11000,
1703 		6000, 9000, 12000, 18000, 24000,
1704 		36000, 48000, 54000
1705 	};
1706 	u8 i;
1707 
1708 	for (i = 0; i < ARRAY_SIZE(legacy); i++)
1709 		if (rate == legacy[i])
1710 			return true;
1711 
1712 	return false;
1713 }
1714 
1715 static bool is_rate_ht20(s32 rate, u8 *mcs, bool *sgi)
1716 {
1717 	static const s32 ht20[] = { 6500, 13000, 19500, 26000, 39000,
1718 		52000, 58500, 65000, 72200
1719 	};
1720 	u8 i;
1721 
1722 	for (i = 0; i < ARRAY_SIZE(ht20); i++) {
1723 		if (rate == ht20[i]) {
1724 			if (i == ARRAY_SIZE(ht20) - 1)
1725 				/* last rate uses sgi */
1726 				*sgi = true;
1727 			else
1728 				*sgi = false;
1729 
1730 			*mcs = i;
1731 			return true;
1732 		}
1733 	}
1734 	return false;
1735 }
1736 
1737 static bool is_rate_ht40(s32 rate, u8 *mcs, bool *sgi)
1738 {
1739 	static const s32 ht40[] = { 13500, 27000, 40500, 54000,
1740 		81000, 108000, 121500, 135000,
1741 		150000
1742 	};
1743 	u8 i;
1744 
1745 	for (i = 0; i < ARRAY_SIZE(ht40); i++) {
1746 		if (rate == ht40[i]) {
1747 			if (i == ARRAY_SIZE(ht40) - 1)
1748 				/* last rate uses sgi */
1749 				*sgi = true;
1750 			else
1751 				*sgi = false;
1752 
1753 			*mcs = i;
1754 			return true;
1755 		}
1756 	}
1757 
1758 	return false;
1759 }
1760 
1761 static int ath6kl_get_station(struct wiphy *wiphy, struct net_device *dev,
1762 			      u8 *mac, struct station_info *sinfo)
1763 {
1764 	struct ath6kl *ar = ath6kl_priv(dev);
1765 	struct ath6kl_vif *vif = netdev_priv(dev);
1766 	long left;
1767 	bool sgi;
1768 	s32 rate;
1769 	int ret;
1770 	u8 mcs;
1771 
1772 	if (memcmp(mac, vif->bssid, ETH_ALEN) != 0)
1773 		return -ENOENT;
1774 
1775 	if (down_interruptible(&ar->sem))
1776 		return -EBUSY;
1777 
1778 	set_bit(STATS_UPDATE_PEND, &vif->flags);
1779 
1780 	ret = ath6kl_wmi_get_stats_cmd(ar->wmi, vif->fw_vif_idx);
1781 
1782 	if (ret != 0) {
1783 		up(&ar->sem);
1784 		return -EIO;
1785 	}
1786 
1787 	left = wait_event_interruptible_timeout(ar->event_wq,
1788 						!test_bit(STATS_UPDATE_PEND,
1789 							  &vif->flags),
1790 						WMI_TIMEOUT);
1791 
1792 	up(&ar->sem);
1793 
1794 	if (left == 0)
1795 		return -ETIMEDOUT;
1796 	else if (left < 0)
1797 		return left;
1798 
1799 	if (vif->target_stats.rx_byte) {
1800 		sinfo->rx_bytes = vif->target_stats.rx_byte;
1801 		sinfo->filled |= STATION_INFO_RX_BYTES64;
1802 		sinfo->rx_packets = vif->target_stats.rx_pkt;
1803 		sinfo->filled |= STATION_INFO_RX_PACKETS;
1804 	}
1805 
1806 	if (vif->target_stats.tx_byte) {
1807 		sinfo->tx_bytes = vif->target_stats.tx_byte;
1808 		sinfo->filled |= STATION_INFO_TX_BYTES64;
1809 		sinfo->tx_packets = vif->target_stats.tx_pkt;
1810 		sinfo->filled |= STATION_INFO_TX_PACKETS;
1811 	}
1812 
1813 	sinfo->signal = vif->target_stats.cs_rssi;
1814 	sinfo->filled |= STATION_INFO_SIGNAL;
1815 
1816 	rate = vif->target_stats.tx_ucast_rate;
1817 
1818 	if (is_rate_legacy(rate)) {
1819 		sinfo->txrate.legacy = rate / 100;
1820 	} else if (is_rate_ht20(rate, &mcs, &sgi)) {
1821 		if (sgi) {
1822 			sinfo->txrate.flags |= RATE_INFO_FLAGS_SHORT_GI;
1823 			sinfo->txrate.mcs = mcs - 1;
1824 		} else {
1825 			sinfo->txrate.mcs = mcs;
1826 		}
1827 
1828 		sinfo->txrate.flags |= RATE_INFO_FLAGS_MCS;
1829 	} else if (is_rate_ht40(rate, &mcs, &sgi)) {
1830 		if (sgi) {
1831 			sinfo->txrate.flags |= RATE_INFO_FLAGS_SHORT_GI;
1832 			sinfo->txrate.mcs = mcs - 1;
1833 		} else {
1834 			sinfo->txrate.mcs = mcs;
1835 		}
1836 
1837 		sinfo->txrate.flags |= RATE_INFO_FLAGS_40_MHZ_WIDTH;
1838 		sinfo->txrate.flags |= RATE_INFO_FLAGS_MCS;
1839 	} else {
1840 		ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
1841 			   "invalid rate from stats: %d\n", rate);
1842 		ath6kl_debug_war(ar, ATH6KL_WAR_INVALID_RATE);
1843 		return 0;
1844 	}
1845 
1846 	sinfo->filled |= STATION_INFO_TX_BITRATE;
1847 
1848 	if (test_bit(CONNECTED, &vif->flags) &&
1849 	    test_bit(DTIM_PERIOD_AVAIL, &vif->flags) &&
1850 	    vif->nw_type == INFRA_NETWORK) {
1851 		sinfo->filled |= STATION_INFO_BSS_PARAM;
1852 		sinfo->bss_param.flags = 0;
1853 		sinfo->bss_param.dtim_period = vif->assoc_bss_dtim_period;
1854 		sinfo->bss_param.beacon_interval = vif->assoc_bss_beacon_int;
1855 	}
1856 
1857 	return 0;
1858 }
1859 
1860 static int ath6kl_set_pmksa(struct wiphy *wiphy, struct net_device *netdev,
1861 			    struct cfg80211_pmksa *pmksa)
1862 {
1863 	struct ath6kl *ar = ath6kl_priv(netdev);
1864 	struct ath6kl_vif *vif = netdev_priv(netdev);
1865 
1866 	return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx, pmksa->bssid,
1867 				       pmksa->pmkid, true);
1868 }
1869 
1870 static int ath6kl_del_pmksa(struct wiphy *wiphy, struct net_device *netdev,
1871 			    struct cfg80211_pmksa *pmksa)
1872 {
1873 	struct ath6kl *ar = ath6kl_priv(netdev);
1874 	struct ath6kl_vif *vif = netdev_priv(netdev);
1875 
1876 	return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx, pmksa->bssid,
1877 				       pmksa->pmkid, false);
1878 }
1879 
1880 static int ath6kl_flush_pmksa(struct wiphy *wiphy, struct net_device *netdev)
1881 {
1882 	struct ath6kl *ar = ath6kl_priv(netdev);
1883 	struct ath6kl_vif *vif = netdev_priv(netdev);
1884 
1885 	if (test_bit(CONNECTED, &vif->flags))
1886 		return ath6kl_wmi_setpmkid_cmd(ar->wmi, vif->fw_vif_idx,
1887 					       vif->bssid, NULL, false);
1888 	return 0;
1889 }
1890 
1891 static int ath6kl_wow_usr(struct ath6kl *ar, struct ath6kl_vif *vif,
1892 			  struct cfg80211_wowlan *wow, u32 *filter)
1893 {
1894 	int ret, pos;
1895 	u8 mask[WOW_PATTERN_SIZE];
1896 	u16 i;
1897 
1898 	/* Configure the patterns that we received from the user. */
1899 	for (i = 0; i < wow->n_patterns; i++) {
1900 
1901 		/*
1902 		 * Convert given nl80211 specific mask value to equivalent
1903 		 * driver specific mask value and send it to the chip along
1904 		 * with patterns. For example, If the mask value defined in
1905 		 * struct cfg80211_wowlan is 0xA (equivalent binary is 1010),
1906 		 * then equivalent driver specific mask value is
1907 		 * "0xFF 0x00 0xFF 0x00".
1908 		 */
1909 		memset(&mask, 0, sizeof(mask));
1910 		for (pos = 0; pos < wow->patterns[i].pattern_len; pos++) {
1911 			if (wow->patterns[i].mask[pos / 8] & (0x1 << (pos % 8)))
1912 				mask[pos] = 0xFF;
1913 		}
1914 		/*
1915 		 * Note: Pattern's offset is not passed as part of wowlan
1916 		 * parameter from CFG layer. So it's always passed as ZERO
1917 		 * to the firmware. It means, given WOW patterns are always
1918 		 * matched from the first byte of received pkt in the firmware.
1919 		 */
1920 		ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1921 				vif->fw_vif_idx, WOW_LIST_ID,
1922 				wow->patterns[i].pattern_len,
1923 				0 /* pattern offset */,
1924 				wow->patterns[i].pattern, mask);
1925 		if (ret)
1926 			return ret;
1927 	}
1928 
1929 	if (wow->disconnect)
1930 		*filter |= WOW_FILTER_OPTION_NWK_DISASSOC;
1931 
1932 	if (wow->magic_pkt)
1933 		*filter |= WOW_FILTER_OPTION_MAGIC_PACKET;
1934 
1935 	if (wow->gtk_rekey_failure)
1936 		*filter |= WOW_FILTER_OPTION_GTK_ERROR;
1937 
1938 	if (wow->eap_identity_req)
1939 		*filter |= WOW_FILTER_OPTION_EAP_REQ;
1940 
1941 	if (wow->four_way_handshake)
1942 		*filter |= WOW_FILTER_OPTION_8021X_4WAYHS;
1943 
1944 	return 0;
1945 }
1946 
1947 static int ath6kl_wow_ap(struct ath6kl *ar, struct ath6kl_vif *vif)
1948 {
1949 	static const u8 unicst_pattern[] = { 0x00, 0x00, 0x00,
1950 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1951 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1952 		0x00, 0x08 };
1953 	static const u8 unicst_mask[] = { 0x01, 0x00, 0x00,
1954 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1955 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1956 		0x00, 0x7f };
1957 	u8 unicst_offset = 0;
1958 	static const u8 arp_pattern[] = { 0x08, 0x06 };
1959 	static const u8 arp_mask[] = { 0xff, 0xff };
1960 	u8 arp_offset = 20;
1961 	static const u8 discvr_pattern[] = { 0xe0, 0x00, 0x00, 0xf8 };
1962 	static const u8 discvr_mask[] = { 0xf0, 0x00, 0x00, 0xf8 };
1963 	u8 discvr_offset = 38;
1964 	static const u8 dhcp_pattern[] = { 0xff, 0xff, 0xff, 0xff,
1965 		0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1966 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x08, 0x00,
1967 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1968 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1969 		0x00, 0x00, 0x00, 0x00, 0x00, 0x43 /* port 67 */ };
1970 	static const u8 dhcp_mask[] = { 0xff, 0xff, 0xff, 0xff,
1971 		0xff, 0xff, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1972 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xff, 0xff,
1973 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1974 		0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
1975 		0x00, 0x00, 0x00, 0x00, 0xff, 0xff /* port 67 */ };
1976 	u8 dhcp_offset = 0;
1977 	int ret;
1978 
1979 	/* Setup unicast IP, EAPOL-like and ARP pkt pattern */
1980 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1981 			vif->fw_vif_idx, WOW_LIST_ID,
1982 			sizeof(unicst_pattern), unicst_offset,
1983 			unicst_pattern, unicst_mask);
1984 	if (ret) {
1985 		ath6kl_err("failed to add WOW unicast IP pattern\n");
1986 		return ret;
1987 	}
1988 
1989 	/* Setup all ARP pkt pattern */
1990 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
1991 			vif->fw_vif_idx, WOW_LIST_ID,
1992 			sizeof(arp_pattern), arp_offset,
1993 			arp_pattern, arp_mask);
1994 	if (ret) {
1995 		ath6kl_err("failed to add WOW ARP pattern\n");
1996 		return ret;
1997 	}
1998 
1999 	/*
2000 	 * Setup multicast pattern for mDNS 224.0.0.251,
2001 	 * SSDP 239.255.255.250 and LLMNR  224.0.0.252
2002 	 */
2003 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2004 			vif->fw_vif_idx, WOW_LIST_ID,
2005 			sizeof(discvr_pattern), discvr_offset,
2006 			discvr_pattern, discvr_mask);
2007 	if (ret) {
2008 		ath6kl_err("failed to add WOW mDNS/SSDP/LLMNR pattern\n");
2009 		return ret;
2010 	}
2011 
2012 	/* Setup all DHCP broadcast pkt pattern */
2013 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2014 			vif->fw_vif_idx, WOW_LIST_ID,
2015 			sizeof(dhcp_pattern), dhcp_offset,
2016 			dhcp_pattern, dhcp_mask);
2017 	if (ret) {
2018 		ath6kl_err("failed to add WOW DHCP broadcast pattern\n");
2019 		return ret;
2020 	}
2021 
2022 	return 0;
2023 }
2024 
2025 static int ath6kl_wow_sta(struct ath6kl *ar, struct ath6kl_vif *vif)
2026 {
2027 	struct net_device *ndev = vif->ndev;
2028 	static const u8 discvr_pattern[] = { 0xe0, 0x00, 0x00, 0xf8 };
2029 	static const u8 discvr_mask[] = { 0xf0, 0x00, 0x00, 0xf8 };
2030 	u8 discvr_offset = 38;
2031 	u8 mac_mask[ETH_ALEN];
2032 	int ret;
2033 
2034 	/* Setup unicast pkt pattern */
2035 	memset(mac_mask, 0xff, ETH_ALEN);
2036 	ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2037 				vif->fw_vif_idx, WOW_LIST_ID,
2038 				ETH_ALEN, 0, ndev->dev_addr,
2039 				mac_mask);
2040 	if (ret) {
2041 		ath6kl_err("failed to add WOW unicast pattern\n");
2042 		return ret;
2043 	}
2044 
2045 	/*
2046 	 * Setup multicast pattern for mDNS 224.0.0.251,
2047 	 * SSDP 239.255.255.250 and LLMNR 224.0.0.252
2048 	 */
2049 	if ((ndev->flags & IFF_ALLMULTI) ||
2050 	    (ndev->flags & IFF_MULTICAST && netdev_mc_count(ndev) > 0)) {
2051 		ret = ath6kl_wmi_add_wow_pattern_cmd(ar->wmi,
2052 				vif->fw_vif_idx, WOW_LIST_ID,
2053 				sizeof(discvr_pattern), discvr_offset,
2054 				discvr_pattern, discvr_mask);
2055 		if (ret) {
2056 			ath6kl_err("failed to add WOW mDNS/SSDP/LLMNR pattern\n");
2057 			return ret;
2058 		}
2059 	}
2060 
2061 	return 0;
2062 }
2063 
2064 static int is_hsleep_mode_procsed(struct ath6kl_vif *vif)
2065 {
2066 	return test_bit(HOST_SLEEP_MODE_CMD_PROCESSED, &vif->flags);
2067 }
2068 
2069 static bool is_ctrl_ep_empty(struct ath6kl *ar)
2070 {
2071 	return !ar->tx_pending[ar->ctrl_ep];
2072 }
2073 
2074 static int ath6kl_cfg80211_host_sleep(struct ath6kl *ar, struct ath6kl_vif *vif)
2075 {
2076 	int ret, left;
2077 
2078 	clear_bit(HOST_SLEEP_MODE_CMD_PROCESSED, &vif->flags);
2079 
2080 	ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2081 						 ATH6KL_HOST_MODE_ASLEEP);
2082 	if (ret)
2083 		return ret;
2084 
2085 	left = wait_event_interruptible_timeout(ar->event_wq,
2086 						is_hsleep_mode_procsed(vif),
2087 						WMI_TIMEOUT);
2088 	if (left == 0) {
2089 		ath6kl_warn("timeout, didn't get host sleep cmd processed event\n");
2090 		ret = -ETIMEDOUT;
2091 	} else if (left < 0) {
2092 		ath6kl_warn("error while waiting for host sleep cmd processed event %d\n",
2093 			    left);
2094 		ret = left;
2095 	}
2096 
2097 	if (ar->tx_pending[ar->ctrl_ep]) {
2098 		left = wait_event_interruptible_timeout(ar->event_wq,
2099 							is_ctrl_ep_empty(ar),
2100 							WMI_TIMEOUT);
2101 		if (left == 0) {
2102 			ath6kl_warn("clear wmi ctrl data timeout\n");
2103 			ret = -ETIMEDOUT;
2104 		} else if (left < 0) {
2105 			ath6kl_warn("clear wmi ctrl data failed: %d\n", left);
2106 			ret = left;
2107 		}
2108 	}
2109 
2110 	return ret;
2111 }
2112 
2113 static int ath6kl_wow_suspend_vif(struct ath6kl_vif *vif,
2114 				  struct cfg80211_wowlan *wow, u32 *filter)
2115 {
2116 	struct ath6kl *ar = vif->ar;
2117 	struct in_device *in_dev;
2118 	struct in_ifaddr *ifa;
2119 	int ret;
2120 	u16 i, bmiss_time;
2121 	__be32 ips[MAX_IP_ADDRS];
2122 	u8 index = 0;
2123 
2124 	if (!test_bit(NETDEV_MCAST_ALL_ON, &vif->flags) &&
2125 	    test_bit(ATH6KL_FW_CAPABILITY_WOW_MULTICAST_FILTER,
2126 		     ar->fw_capabilities)) {
2127 		ret = ath6kl_wmi_mcast_filter_cmd(vif->ar->wmi,
2128 						vif->fw_vif_idx, false);
2129 		if (ret)
2130 			return ret;
2131 	}
2132 
2133 	/* Clear existing WOW patterns */
2134 	for (i = 0; i < WOW_MAX_FILTERS_PER_LIST; i++)
2135 		ath6kl_wmi_del_wow_pattern_cmd(ar->wmi, vif->fw_vif_idx,
2136 					       WOW_LIST_ID, i);
2137 
2138 	/*
2139 	 * Skip the default WOW pattern configuration
2140 	 * if the driver receives any WOW patterns from
2141 	 * the user.
2142 	 */
2143 	if (wow)
2144 		ret = ath6kl_wow_usr(ar, vif, wow, filter);
2145 	else if (vif->nw_type == AP_NETWORK)
2146 		ret = ath6kl_wow_ap(ar, vif);
2147 	else
2148 		ret = ath6kl_wow_sta(ar, vif);
2149 
2150 	if (ret)
2151 		return ret;
2152 
2153 	netif_stop_queue(vif->ndev);
2154 
2155 	if (vif->nw_type != AP_NETWORK) {
2156 		ret = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
2157 						    ATH6KL_MAX_WOW_LISTEN_INTL,
2158 						    0);
2159 		if (ret)
2160 			return ret;
2161 
2162 		/* Set listen interval x 15 times as bmiss time */
2163 		bmiss_time = ATH6KL_MAX_WOW_LISTEN_INTL * 15;
2164 		if (bmiss_time > ATH6KL_MAX_BMISS_TIME)
2165 			bmiss_time = ATH6KL_MAX_BMISS_TIME;
2166 
2167 		ret = ath6kl_wmi_bmisstime_cmd(ar->wmi, vif->fw_vif_idx,
2168 					       bmiss_time, 0);
2169 		if (ret)
2170 			return ret;
2171 
2172 		ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2173 						0xFFFF, 0, 0xFFFF, 0, 0, 0,
2174 						0, 0, 0, 0);
2175 		if (ret)
2176 			return ret;
2177 	}
2178 
2179 	/* Setup own IP addr for ARP agent. */
2180 	in_dev = __in_dev_get_rtnl(vif->ndev);
2181 	if (!in_dev)
2182 		return 0;
2183 
2184 	ifa = in_dev->ifa_list;
2185 	memset(&ips, 0, sizeof(ips));
2186 
2187 	/* Configure IP addr only if IP address count < MAX_IP_ADDRS */
2188 	while (index < MAX_IP_ADDRS && ifa) {
2189 		ips[index] = ifa->ifa_local;
2190 		ifa = ifa->ifa_next;
2191 		index++;
2192 	}
2193 
2194 	if (ifa) {
2195 		ath6kl_err("total IP addr count is exceeding fw limit\n");
2196 		return -EINVAL;
2197 	}
2198 
2199 	ret = ath6kl_wmi_set_ip_cmd(ar->wmi, vif->fw_vif_idx, ips[0], ips[1]);
2200 	if (ret) {
2201 		ath6kl_err("fail to setup ip for arp agent\n");
2202 		return ret;
2203 	}
2204 
2205 	return ret;
2206 }
2207 
2208 static int ath6kl_wow_suspend(struct ath6kl *ar, struct cfg80211_wowlan *wow)
2209 {
2210 	struct ath6kl_vif *first_vif, *vif;
2211 	int ret = 0;
2212 	u32 filter = 0;
2213 	bool connected = false;
2214 
2215 	/* enter / leave wow suspend on first vif always */
2216 	first_vif = ath6kl_vif_first(ar);
2217 	if (WARN_ON(unlikely(!first_vif)) ||
2218 	    !ath6kl_cfg80211_ready(first_vif))
2219 		return -EIO;
2220 
2221 	if (wow && (wow->n_patterns > WOW_MAX_FILTERS_PER_LIST))
2222 		return -EINVAL;
2223 
2224 	/* install filters for each connected vif */
2225 	spin_lock_bh(&ar->list_lock);
2226 	list_for_each_entry(vif, &ar->vif_list, list) {
2227 		if (!test_bit(CONNECTED, &vif->flags) ||
2228 		    !ath6kl_cfg80211_ready(vif))
2229 			continue;
2230 		connected = true;
2231 
2232 		ret = ath6kl_wow_suspend_vif(vif, wow, &filter);
2233 		if (ret)
2234 			break;
2235 	}
2236 	spin_unlock_bh(&ar->list_lock);
2237 
2238 	if (!connected)
2239 		return -ENOTCONN;
2240 	else if (ret)
2241 		return ret;
2242 
2243 	ar->state = ATH6KL_STATE_SUSPENDING;
2244 
2245 	ret = ath6kl_wmi_set_wow_mode_cmd(ar->wmi, first_vif->fw_vif_idx,
2246 					  ATH6KL_WOW_MODE_ENABLE,
2247 					  filter,
2248 					  WOW_HOST_REQ_DELAY);
2249 	if (ret)
2250 		return ret;
2251 
2252 	return ath6kl_cfg80211_host_sleep(ar, first_vif);
2253 }
2254 
2255 static int ath6kl_wow_resume_vif(struct ath6kl_vif *vif)
2256 {
2257 	struct ath6kl *ar = vif->ar;
2258 	int ret;
2259 
2260 	if (vif->nw_type != AP_NETWORK) {
2261 		ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2262 						0, 0, 0, 0, 0, 0, 3, 0, 0, 0);
2263 		if (ret)
2264 			return ret;
2265 
2266 		ret = ath6kl_wmi_listeninterval_cmd(ar->wmi, vif->fw_vif_idx,
2267 						    vif->listen_intvl_t, 0);
2268 		if (ret)
2269 			return ret;
2270 
2271 		ret = ath6kl_wmi_bmisstime_cmd(ar->wmi, vif->fw_vif_idx,
2272 					       vif->bmiss_time_t, 0);
2273 		if (ret)
2274 			return ret;
2275 	}
2276 
2277 	if (!test_bit(NETDEV_MCAST_ALL_OFF, &vif->flags) &&
2278 	    test_bit(ATH6KL_FW_CAPABILITY_WOW_MULTICAST_FILTER,
2279 		     ar->fw_capabilities)) {
2280 		ret = ath6kl_wmi_mcast_filter_cmd(vif->ar->wmi,
2281 						  vif->fw_vif_idx, true);
2282 		if (ret)
2283 			return ret;
2284 	}
2285 
2286 	netif_wake_queue(vif->ndev);
2287 
2288 	return 0;
2289 }
2290 
2291 static int ath6kl_wow_resume(struct ath6kl *ar)
2292 {
2293 	struct ath6kl_vif *vif;
2294 	int ret;
2295 
2296 	vif = ath6kl_vif_first(ar);
2297 	if (WARN_ON(unlikely(!vif)) ||
2298 	    !ath6kl_cfg80211_ready(vif))
2299 		return -EIO;
2300 
2301 	ar->state = ATH6KL_STATE_RESUMING;
2302 
2303 	ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2304 						 ATH6KL_HOST_MODE_AWAKE);
2305 	if (ret) {
2306 		ath6kl_warn("Failed to configure host sleep mode for wow resume: %d\n",
2307 			    ret);
2308 		goto cleanup;
2309 	}
2310 
2311 	spin_lock_bh(&ar->list_lock);
2312 	list_for_each_entry(vif, &ar->vif_list, list) {
2313 		if (!test_bit(CONNECTED, &vif->flags) ||
2314 		    !ath6kl_cfg80211_ready(vif))
2315 			continue;
2316 		ret = ath6kl_wow_resume_vif(vif);
2317 		if (ret)
2318 			break;
2319 	}
2320 	spin_unlock_bh(&ar->list_lock);
2321 
2322 	if (ret)
2323 		goto cleanup;
2324 
2325 	ar->state = ATH6KL_STATE_ON;
2326 	return 0;
2327 
2328 cleanup:
2329 	ar->state = ATH6KL_STATE_WOW;
2330 	return ret;
2331 }
2332 
2333 static int ath6kl_cfg80211_deepsleep_suspend(struct ath6kl *ar)
2334 {
2335 	struct ath6kl_vif *vif;
2336 	int ret;
2337 
2338 	vif = ath6kl_vif_first(ar);
2339 	if (!vif)
2340 		return -EIO;
2341 
2342 	if (!test_bit(WMI_READY, &ar->flag)) {
2343 		ath6kl_err("deepsleep failed as wmi is not ready\n");
2344 		return -EIO;
2345 	}
2346 
2347 	ath6kl_cfg80211_stop_all(ar);
2348 
2349 	/* Save the current power mode before enabling power save */
2350 	ar->wmi->saved_pwr_mode = ar->wmi->pwr_mode;
2351 
2352 	ret = ath6kl_wmi_powermode_cmd(ar->wmi, 0, REC_POWER);
2353 	if (ret)
2354 		return ret;
2355 
2356 	/* Disable WOW mode */
2357 	ret = ath6kl_wmi_set_wow_mode_cmd(ar->wmi, vif->fw_vif_idx,
2358 					  ATH6KL_WOW_MODE_DISABLE,
2359 					  0, 0);
2360 	if (ret)
2361 		return ret;
2362 
2363 	/* Flush all non control pkts in TX path */
2364 	ath6kl_tx_data_cleanup(ar);
2365 
2366 	ret = ath6kl_cfg80211_host_sleep(ar, vif);
2367 	if (ret)
2368 		return ret;
2369 
2370 	return 0;
2371 }
2372 
2373 static int ath6kl_cfg80211_deepsleep_resume(struct ath6kl *ar)
2374 {
2375 	struct ath6kl_vif *vif;
2376 	int ret;
2377 
2378 	vif = ath6kl_vif_first(ar);
2379 
2380 	if (!vif)
2381 		return -EIO;
2382 
2383 	if (ar->wmi->pwr_mode != ar->wmi->saved_pwr_mode) {
2384 		ret = ath6kl_wmi_powermode_cmd(ar->wmi, 0,
2385 					       ar->wmi->saved_pwr_mode);
2386 		if (ret)
2387 			return ret;
2388 	}
2389 
2390 	ret = ath6kl_wmi_set_host_sleep_mode_cmd(ar->wmi, vif->fw_vif_idx,
2391 						 ATH6KL_HOST_MODE_AWAKE);
2392 	if (ret)
2393 		return ret;
2394 
2395 	ar->state = ATH6KL_STATE_ON;
2396 
2397 	/* Reset scan parameter to default values */
2398 	ret = ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
2399 					0, 0, 0, 0, 0, 0, 3, 0, 0, 0);
2400 	if (ret)
2401 		return ret;
2402 
2403 	return 0;
2404 }
2405 
2406 int ath6kl_cfg80211_suspend(struct ath6kl *ar,
2407 			    enum ath6kl_cfg_suspend_mode mode,
2408 			    struct cfg80211_wowlan *wow)
2409 {
2410 	struct ath6kl_vif *vif;
2411 	enum ath6kl_state prev_state;
2412 	int ret;
2413 
2414 	switch (mode) {
2415 	case ATH6KL_CFG_SUSPEND_WOW:
2416 
2417 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "wow mode suspend\n");
2418 
2419 		/* Flush all non control pkts in TX path */
2420 		ath6kl_tx_data_cleanup(ar);
2421 
2422 		prev_state = ar->state;
2423 
2424 		ret = ath6kl_wow_suspend(ar, wow);
2425 		if (ret) {
2426 			ar->state = prev_state;
2427 			return ret;
2428 		}
2429 
2430 		ar->state = ATH6KL_STATE_WOW;
2431 		break;
2432 
2433 	case ATH6KL_CFG_SUSPEND_DEEPSLEEP:
2434 
2435 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "deep sleep suspend\n");
2436 
2437 		ret = ath6kl_cfg80211_deepsleep_suspend(ar);
2438 		if (ret) {
2439 			ath6kl_err("deepsleep suspend failed: %d\n", ret);
2440 			return ret;
2441 		}
2442 
2443 		ar->state = ATH6KL_STATE_DEEPSLEEP;
2444 
2445 		break;
2446 
2447 	case ATH6KL_CFG_SUSPEND_CUTPOWER:
2448 
2449 		ath6kl_cfg80211_stop_all(ar);
2450 
2451 		if (ar->state == ATH6KL_STATE_OFF) {
2452 			ath6kl_dbg(ATH6KL_DBG_SUSPEND,
2453 				   "suspend hw off, no action for cutpower\n");
2454 			break;
2455 		}
2456 
2457 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "suspend cutting power\n");
2458 
2459 		ret = ath6kl_init_hw_stop(ar);
2460 		if (ret) {
2461 			ath6kl_warn("failed to stop hw during suspend: %d\n",
2462 				    ret);
2463 		}
2464 
2465 		ar->state = ATH6KL_STATE_CUTPOWER;
2466 
2467 		break;
2468 
2469 	default:
2470 		break;
2471 	}
2472 
2473 	list_for_each_entry(vif, &ar->vif_list, list)
2474 		ath6kl_cfg80211_scan_complete_event(vif, true);
2475 
2476 	return 0;
2477 }
2478 EXPORT_SYMBOL(ath6kl_cfg80211_suspend);
2479 
2480 int ath6kl_cfg80211_resume(struct ath6kl *ar)
2481 {
2482 	int ret;
2483 
2484 	switch (ar->state) {
2485 	case  ATH6KL_STATE_WOW:
2486 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "wow mode resume\n");
2487 
2488 		ret = ath6kl_wow_resume(ar);
2489 		if (ret) {
2490 			ath6kl_warn("wow mode resume failed: %d\n", ret);
2491 			return ret;
2492 		}
2493 
2494 		break;
2495 
2496 	case ATH6KL_STATE_DEEPSLEEP:
2497 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "deep sleep resume\n");
2498 
2499 		ret = ath6kl_cfg80211_deepsleep_resume(ar);
2500 		if (ret) {
2501 			ath6kl_warn("deep sleep resume failed: %d\n", ret);
2502 			return ret;
2503 		}
2504 		break;
2505 
2506 	case ATH6KL_STATE_CUTPOWER:
2507 		ath6kl_dbg(ATH6KL_DBG_SUSPEND, "resume restoring power\n");
2508 
2509 		ret = ath6kl_init_hw_start(ar);
2510 		if (ret) {
2511 			ath6kl_warn("Failed to boot hw in resume: %d\n", ret);
2512 			return ret;
2513 		}
2514 		break;
2515 
2516 	default:
2517 		break;
2518 	}
2519 
2520 	return 0;
2521 }
2522 EXPORT_SYMBOL(ath6kl_cfg80211_resume);
2523 
2524 #ifdef CONFIG_PM
2525 
2526 /* hif layer decides what suspend mode to use */
2527 static int __ath6kl_cfg80211_suspend(struct wiphy *wiphy,
2528 				 struct cfg80211_wowlan *wow)
2529 {
2530 	struct ath6kl *ar = wiphy_priv(wiphy);
2531 
2532 	ath6kl_recovery_suspend(ar);
2533 
2534 	return ath6kl_hif_suspend(ar, wow);
2535 }
2536 
2537 static int __ath6kl_cfg80211_resume(struct wiphy *wiphy)
2538 {
2539 	struct ath6kl *ar = wiphy_priv(wiphy);
2540 	int err;
2541 
2542 	err = ath6kl_hif_resume(ar);
2543 	if (err)
2544 		return err;
2545 
2546 	ath6kl_recovery_resume(ar);
2547 
2548 	return 0;
2549 }
2550 
2551 /*
2552  * FIXME: WOW suspend mode is selected if the host sdio controller supports
2553  * both sdio irq wake up and keep power. The target pulls sdio data line to
2554  * wake up the host when WOW pattern matches. This causes sdio irq handler
2555  * is being called in the host side which internally hits ath6kl's RX path.
2556  *
2557  * Since sdio interrupt is not disabled, RX path executes even before
2558  * the host executes the actual resume operation from PM module.
2559  *
2560  * In the current scenario, WOW resume should happen before start processing
2561  * any data from the target. So It's required to perform WOW resume in RX path.
2562  * Ideally we should perform WOW resume only in the actual platform
2563  * resume path. This area needs bit rework to avoid WOW resume in RX path.
2564  *
2565  * ath6kl_check_wow_status() is called from ath6kl_rx().
2566  */
2567 void ath6kl_check_wow_status(struct ath6kl *ar)
2568 {
2569 	if (ar->state == ATH6KL_STATE_SUSPENDING)
2570 		return;
2571 
2572 	if (ar->state == ATH6KL_STATE_WOW)
2573 		ath6kl_cfg80211_resume(ar);
2574 }
2575 
2576 #else
2577 
2578 void ath6kl_check_wow_status(struct ath6kl *ar)
2579 {
2580 }
2581 #endif
2582 
2583 static int ath6kl_set_htcap(struct ath6kl_vif *vif, enum ieee80211_band band,
2584 			    bool ht_enable)
2585 {
2586 	struct ath6kl_htcap *htcap = &vif->htcap[band];
2587 
2588 	if (htcap->ht_enable == ht_enable)
2589 		return 0;
2590 
2591 	if (ht_enable) {
2592 		/* Set default ht capabilities */
2593 		htcap->ht_enable = true;
2594 		htcap->cap_info = (band == IEEE80211_BAND_2GHZ) ?
2595 				   ath6kl_g_htcap : ath6kl_a_htcap;
2596 		htcap->ampdu_factor = IEEE80211_HT_MAX_AMPDU_16K;
2597 	} else /* Disable ht */
2598 		memset(htcap, 0, sizeof(*htcap));
2599 
2600 	return ath6kl_wmi_set_htcap_cmd(vif->ar->wmi, vif->fw_vif_idx,
2601 					band, htcap);
2602 }
2603 
2604 static int ath6kl_restore_htcap(struct ath6kl_vif *vif)
2605 {
2606 	struct wiphy *wiphy = vif->ar->wiphy;
2607 	int band, ret = 0;
2608 
2609 	for (band = 0; band < IEEE80211_NUM_BANDS; band++) {
2610 		if (!wiphy->bands[band])
2611 			continue;
2612 
2613 		ret = ath6kl_set_htcap(vif, band,
2614 				wiphy->bands[band]->ht_cap.ht_supported);
2615 		if (ret)
2616 			return ret;
2617 	}
2618 
2619 	return ret;
2620 }
2621 
2622 static bool ath6kl_is_p2p_ie(const u8 *pos)
2623 {
2624 	return pos[0] == WLAN_EID_VENDOR_SPECIFIC && pos[1] >= 4 &&
2625 		pos[2] == 0x50 && pos[3] == 0x6f &&
2626 		pos[4] == 0x9a && pos[5] == 0x09;
2627 }
2628 
2629 static int ath6kl_set_ap_probe_resp_ies(struct ath6kl_vif *vif,
2630 					const u8 *ies, size_t ies_len)
2631 {
2632 	struct ath6kl *ar = vif->ar;
2633 	const u8 *pos;
2634 	u8 *buf = NULL;
2635 	size_t len = 0;
2636 	int ret;
2637 
2638 	/*
2639 	 * Filter out P2P IE(s) since they will be included depending on
2640 	 * the Probe Request frame in ath6kl_send_go_probe_resp().
2641 	 */
2642 
2643 	if (ies && ies_len) {
2644 		buf = kmalloc(ies_len, GFP_KERNEL);
2645 		if (buf == NULL)
2646 			return -ENOMEM;
2647 		pos = ies;
2648 		while (pos + 1 < ies + ies_len) {
2649 			if (pos + 2 + pos[1] > ies + ies_len)
2650 				break;
2651 			if (!ath6kl_is_p2p_ie(pos)) {
2652 				memcpy(buf + len, pos, 2 + pos[1]);
2653 				len += 2 + pos[1];
2654 			}
2655 			pos += 2 + pos[1];
2656 		}
2657 	}
2658 
2659 	ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2660 				       WMI_FRAME_PROBE_RESP, buf, len);
2661 	kfree(buf);
2662 	return ret;
2663 }
2664 
2665 static int ath6kl_set_ies(struct ath6kl_vif *vif,
2666 			  struct cfg80211_beacon_data *info)
2667 {
2668 	struct ath6kl *ar = vif->ar;
2669 	int res;
2670 
2671 	/* this also clears IE in fw if it's not set */
2672 	res = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2673 				       WMI_FRAME_BEACON,
2674 				       info->beacon_ies,
2675 				       info->beacon_ies_len);
2676 	if (res)
2677 		return res;
2678 
2679 	/* this also clears IE in fw if it's not set */
2680 	res = ath6kl_set_ap_probe_resp_ies(vif, info->proberesp_ies,
2681 					   info->proberesp_ies_len);
2682 	if (res)
2683 		return res;
2684 
2685 	/* this also clears IE in fw if it's not set */
2686 	res = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
2687 				       WMI_FRAME_ASSOC_RESP,
2688 				       info->assocresp_ies,
2689 				       info->assocresp_ies_len);
2690 	if (res)
2691 		return res;
2692 
2693 	return 0;
2694 }
2695 
2696 static int ath6kl_get_rsn_capab(struct cfg80211_beacon_data *beacon,
2697 				u8 *rsn_capab)
2698 {
2699 	const u8 *rsn_ie;
2700 	size_t rsn_ie_len;
2701 	u16 cnt;
2702 
2703 	if (!beacon->tail)
2704 		return -EINVAL;
2705 
2706 	rsn_ie = cfg80211_find_ie(WLAN_EID_RSN, beacon->tail, beacon->tail_len);
2707 	if (!rsn_ie)
2708 		return -EINVAL;
2709 
2710 	rsn_ie_len = *(rsn_ie + 1);
2711 	/* skip element id and length */
2712 	rsn_ie += 2;
2713 
2714 	/* skip version */
2715 	if (rsn_ie_len < 2)
2716 		return -EINVAL;
2717 	rsn_ie +=  2;
2718 	rsn_ie_len -= 2;
2719 
2720 	/* skip group cipher suite */
2721 	if (rsn_ie_len < 4)
2722 		return 0;
2723 	rsn_ie +=  4;
2724 	rsn_ie_len -= 4;
2725 
2726 	/* skip pairwise cipher suite */
2727 	if (rsn_ie_len < 2)
2728 		return 0;
2729 	cnt = get_unaligned_le16(rsn_ie);
2730 	rsn_ie += (2 + cnt * 4);
2731 	rsn_ie_len -= (2 + cnt * 4);
2732 
2733 	/* skip akm suite */
2734 	if (rsn_ie_len < 2)
2735 		return 0;
2736 	cnt = get_unaligned_le16(rsn_ie);
2737 	rsn_ie += (2 + cnt * 4);
2738 	rsn_ie_len -= (2 + cnt * 4);
2739 
2740 	if (rsn_ie_len < 2)
2741 		return 0;
2742 
2743 	memcpy(rsn_capab, rsn_ie, 2);
2744 
2745 	return 0;
2746 }
2747 
2748 static int ath6kl_start_ap(struct wiphy *wiphy, struct net_device *dev,
2749 			   struct cfg80211_ap_settings *info)
2750 {
2751 	struct ath6kl *ar = ath6kl_priv(dev);
2752 	struct ath6kl_vif *vif = netdev_priv(dev);
2753 	struct ieee80211_mgmt *mgmt;
2754 	bool hidden = false;
2755 	u8 *ies;
2756 	int ies_len;
2757 	struct wmi_connect_cmd p;
2758 	int res;
2759 	int i, ret;
2760 	u16 rsn_capab = 0;
2761 	int inactivity_timeout = 0;
2762 
2763 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s:\n", __func__);
2764 
2765 	if (!ath6kl_cfg80211_ready(vif))
2766 		return -EIO;
2767 
2768 	if (vif->next_mode != AP_NETWORK)
2769 		return -EOPNOTSUPP;
2770 
2771 	res = ath6kl_set_ies(vif, &info->beacon);
2772 
2773 	ar->ap_mode_bkey.valid = false;
2774 
2775 	ret = ath6kl_wmi_ap_set_beacon_intvl_cmd(ar->wmi, vif->fw_vif_idx,
2776 						 info->beacon_interval);
2777 
2778 	if (ret)
2779 		ath6kl_warn("Failed to set beacon interval: %d\n", ret);
2780 
2781 	ret = ath6kl_wmi_ap_set_dtim_cmd(ar->wmi, vif->fw_vif_idx,
2782 					 info->dtim_period);
2783 
2784 	/* ignore error, just print a warning and continue normally */
2785 	if (ret)
2786 		ath6kl_warn("Failed to set dtim_period in beacon: %d\n", ret);
2787 
2788 	if (info->beacon.head == NULL)
2789 		return -EINVAL;
2790 	mgmt = (struct ieee80211_mgmt *) info->beacon.head;
2791 	ies = mgmt->u.beacon.variable;
2792 	if (ies > info->beacon.head + info->beacon.head_len)
2793 		return -EINVAL;
2794 	ies_len = info->beacon.head + info->beacon.head_len - ies;
2795 
2796 	if (info->ssid == NULL)
2797 		return -EINVAL;
2798 	memcpy(vif->ssid, info->ssid, info->ssid_len);
2799 	vif->ssid_len = info->ssid_len;
2800 	if (info->hidden_ssid != NL80211_HIDDEN_SSID_NOT_IN_USE)
2801 		hidden = true;
2802 
2803 	res = ath6kl_wmi_ap_hidden_ssid(ar->wmi, vif->fw_vif_idx, hidden);
2804 	if (res)
2805 		return res;
2806 
2807 	ret = ath6kl_set_auth_type(vif, info->auth_type);
2808 	if (ret)
2809 		return ret;
2810 
2811 	memset(&p, 0, sizeof(p));
2812 
2813 	for (i = 0; i < info->crypto.n_akm_suites; i++) {
2814 		switch (info->crypto.akm_suites[i]) {
2815 		case WLAN_AKM_SUITE_8021X:
2816 			if (info->crypto.wpa_versions & NL80211_WPA_VERSION_1)
2817 				p.auth_mode |= WPA_AUTH;
2818 			if (info->crypto.wpa_versions & NL80211_WPA_VERSION_2)
2819 				p.auth_mode |= WPA2_AUTH;
2820 			break;
2821 		case WLAN_AKM_SUITE_PSK:
2822 			if (info->crypto.wpa_versions & NL80211_WPA_VERSION_1)
2823 				p.auth_mode |= WPA_PSK_AUTH;
2824 			if (info->crypto.wpa_versions & NL80211_WPA_VERSION_2)
2825 				p.auth_mode |= WPA2_PSK_AUTH;
2826 			break;
2827 		}
2828 	}
2829 	if (p.auth_mode == 0)
2830 		p.auth_mode = NONE_AUTH;
2831 	vif->auth_mode = p.auth_mode;
2832 
2833 	for (i = 0; i < info->crypto.n_ciphers_pairwise; i++) {
2834 		switch (info->crypto.ciphers_pairwise[i]) {
2835 		case WLAN_CIPHER_SUITE_WEP40:
2836 		case WLAN_CIPHER_SUITE_WEP104:
2837 			p.prwise_crypto_type |= WEP_CRYPT;
2838 			break;
2839 		case WLAN_CIPHER_SUITE_TKIP:
2840 			p.prwise_crypto_type |= TKIP_CRYPT;
2841 			break;
2842 		case WLAN_CIPHER_SUITE_CCMP:
2843 			p.prwise_crypto_type |= AES_CRYPT;
2844 			break;
2845 		case WLAN_CIPHER_SUITE_SMS4:
2846 			p.prwise_crypto_type |= WAPI_CRYPT;
2847 			break;
2848 		}
2849 	}
2850 	if (p.prwise_crypto_type == 0) {
2851 		p.prwise_crypto_type = NONE_CRYPT;
2852 		ath6kl_set_cipher(vif, 0, true);
2853 	} else if (info->crypto.n_ciphers_pairwise == 1)
2854 		ath6kl_set_cipher(vif, info->crypto.ciphers_pairwise[0], true);
2855 
2856 	switch (info->crypto.cipher_group) {
2857 	case WLAN_CIPHER_SUITE_WEP40:
2858 	case WLAN_CIPHER_SUITE_WEP104:
2859 		p.grp_crypto_type = WEP_CRYPT;
2860 		break;
2861 	case WLAN_CIPHER_SUITE_TKIP:
2862 		p.grp_crypto_type = TKIP_CRYPT;
2863 		break;
2864 	case WLAN_CIPHER_SUITE_CCMP:
2865 		p.grp_crypto_type = AES_CRYPT;
2866 		break;
2867 	case WLAN_CIPHER_SUITE_SMS4:
2868 		p.grp_crypto_type = WAPI_CRYPT;
2869 		break;
2870 	default:
2871 		p.grp_crypto_type = NONE_CRYPT;
2872 		break;
2873 	}
2874 	ath6kl_set_cipher(vif, info->crypto.cipher_group, false);
2875 
2876 	p.nw_type = AP_NETWORK;
2877 	vif->nw_type = vif->next_mode;
2878 
2879 	p.ssid_len = vif->ssid_len;
2880 	memcpy(p.ssid, vif->ssid, vif->ssid_len);
2881 	p.dot11_auth_mode = vif->dot11_auth_mode;
2882 	p.ch = cpu_to_le16(info->chandef.chan->center_freq);
2883 
2884 	/* Enable uAPSD support by default */
2885 	res = ath6kl_wmi_ap_set_apsd(ar->wmi, vif->fw_vif_idx, true);
2886 	if (res < 0)
2887 		return res;
2888 
2889 	if (vif->wdev.iftype == NL80211_IFTYPE_P2P_GO) {
2890 		p.nw_subtype = SUBTYPE_P2PGO;
2891 	} else {
2892 		/*
2893 		 * Due to firmware limitation, it is not possible to
2894 		 * do P2P mgmt operations in AP mode
2895 		 */
2896 		p.nw_subtype = SUBTYPE_NONE;
2897 	}
2898 
2899 	if (info->inactivity_timeout) {
2900 
2901 		inactivity_timeout = info->inactivity_timeout;
2902 
2903 		if (ar->hw.flags & ATH6KL_HW_AP_INACTIVITY_MINS)
2904 			inactivity_timeout = DIV_ROUND_UP(inactivity_timeout,
2905 							  60);
2906 
2907 		res = ath6kl_wmi_set_inact_period(ar->wmi, vif->fw_vif_idx,
2908 						  inactivity_timeout);
2909 		if (res < 0)
2910 			return res;
2911 	}
2912 
2913 	if (ath6kl_set_htcap(vif, info->chandef.chan->band,
2914 			     cfg80211_get_chandef_type(&info->chandef)
2915 					!= NL80211_CHAN_NO_HT))
2916 		return -EIO;
2917 
2918 	/*
2919 	 * Get the PTKSA replay counter in the RSN IE. Supplicant
2920 	 * will use the RSN IE in M3 message and firmware has to
2921 	 * advertise the same in beacon/probe response. Send
2922 	 * the complete RSN IE capability field to firmware
2923 	 */
2924 	if (!ath6kl_get_rsn_capab(&info->beacon, (u8 *) &rsn_capab) &&
2925 	    test_bit(ATH6KL_FW_CAPABILITY_RSN_CAP_OVERRIDE,
2926 		     ar->fw_capabilities)) {
2927 		res = ath6kl_wmi_set_ie_cmd(ar->wmi, vif->fw_vif_idx,
2928 					    WLAN_EID_RSN, WMI_RSN_IE_CAPB,
2929 					    (const u8 *) &rsn_capab,
2930 					    sizeof(rsn_capab));
2931 		vif->rsn_capab = rsn_capab;
2932 		if (res < 0)
2933 			return res;
2934 	}
2935 
2936 	memcpy(&vif->profile, &p, sizeof(p));
2937 	res = ath6kl_wmi_ap_profile_commit(ar->wmi, vif->fw_vif_idx, &p);
2938 	if (res < 0)
2939 		return res;
2940 
2941 	return 0;
2942 }
2943 
2944 static int ath6kl_change_beacon(struct wiphy *wiphy, struct net_device *dev,
2945 				struct cfg80211_beacon_data *beacon)
2946 {
2947 	struct ath6kl_vif *vif = netdev_priv(dev);
2948 
2949 	if (!ath6kl_cfg80211_ready(vif))
2950 		return -EIO;
2951 
2952 	if (vif->next_mode != AP_NETWORK)
2953 		return -EOPNOTSUPP;
2954 
2955 	return ath6kl_set_ies(vif, beacon);
2956 }
2957 
2958 static int ath6kl_stop_ap(struct wiphy *wiphy, struct net_device *dev)
2959 {
2960 	struct ath6kl *ar = ath6kl_priv(dev);
2961 	struct ath6kl_vif *vif = netdev_priv(dev);
2962 
2963 	if (vif->nw_type != AP_NETWORK)
2964 		return -EOPNOTSUPP;
2965 	if (!test_bit(CONNECTED, &vif->flags))
2966 		return -ENOTCONN;
2967 
2968 	ath6kl_wmi_disconnect_cmd(ar->wmi, vif->fw_vif_idx);
2969 	clear_bit(CONNECTED, &vif->flags);
2970 
2971 	/* Restore ht setting in firmware */
2972 	return ath6kl_restore_htcap(vif);
2973 }
2974 
2975 static const u8 bcast_addr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
2976 
2977 static int ath6kl_del_station(struct wiphy *wiphy, struct net_device *dev,
2978 			      u8 *mac)
2979 {
2980 	struct ath6kl *ar = ath6kl_priv(dev);
2981 	struct ath6kl_vif *vif = netdev_priv(dev);
2982 	const u8 *addr = mac ? mac : bcast_addr;
2983 
2984 	return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx, WMI_AP_DEAUTH,
2985 				      addr, WLAN_REASON_PREV_AUTH_NOT_VALID);
2986 }
2987 
2988 static int ath6kl_change_station(struct wiphy *wiphy, struct net_device *dev,
2989 				 u8 *mac, struct station_parameters *params)
2990 {
2991 	struct ath6kl *ar = ath6kl_priv(dev);
2992 	struct ath6kl_vif *vif = netdev_priv(dev);
2993 	int err;
2994 
2995 	if (vif->nw_type != AP_NETWORK)
2996 		return -EOPNOTSUPP;
2997 
2998 	err = cfg80211_check_station_change(wiphy, params,
2999 					    CFG80211_STA_AP_MLME_CLIENT);
3000 	if (err)
3001 		return err;
3002 
3003 	if (params->sta_flags_set & BIT(NL80211_STA_FLAG_AUTHORIZED))
3004 		return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx,
3005 					      WMI_AP_MLME_AUTHORIZE, mac, 0);
3006 	return ath6kl_wmi_ap_set_mlme(ar->wmi, vif->fw_vif_idx,
3007 				      WMI_AP_MLME_UNAUTHORIZE, mac, 0);
3008 }
3009 
3010 static int ath6kl_remain_on_channel(struct wiphy *wiphy,
3011 				    struct wireless_dev *wdev,
3012 				    struct ieee80211_channel *chan,
3013 				    unsigned int duration,
3014 				    u64 *cookie)
3015 {
3016 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3017 	struct ath6kl *ar = ath6kl_priv(vif->ndev);
3018 	u32 id;
3019 
3020 	/* TODO: if already pending or ongoing remain-on-channel,
3021 	 * return -EBUSY */
3022 	id = ++vif->last_roc_id;
3023 	if (id == 0) {
3024 		/* Do not use 0 as the cookie value */
3025 		id = ++vif->last_roc_id;
3026 	}
3027 	*cookie = id;
3028 
3029 	return ath6kl_wmi_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx,
3030 					     chan->center_freq, duration);
3031 }
3032 
3033 static int ath6kl_cancel_remain_on_channel(struct wiphy *wiphy,
3034 					   struct wireless_dev *wdev,
3035 					   u64 cookie)
3036 {
3037 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3038 	struct ath6kl *ar = ath6kl_priv(vif->ndev);
3039 
3040 	if (cookie != vif->last_roc_id)
3041 		return -ENOENT;
3042 	vif->last_cancel_roc_id = cookie;
3043 
3044 	return ath6kl_wmi_cancel_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx);
3045 }
3046 
3047 static int ath6kl_send_go_probe_resp(struct ath6kl_vif *vif,
3048 				     const u8 *buf, size_t len,
3049 				     unsigned int freq)
3050 {
3051 	struct ath6kl *ar = vif->ar;
3052 	const u8 *pos;
3053 	u8 *p2p;
3054 	int p2p_len;
3055 	int ret;
3056 	const struct ieee80211_mgmt *mgmt;
3057 
3058 	mgmt = (const struct ieee80211_mgmt *) buf;
3059 
3060 	/* Include P2P IE(s) from the frame generated in user space. */
3061 
3062 	p2p = kmalloc(len, GFP_KERNEL);
3063 	if (p2p == NULL)
3064 		return -ENOMEM;
3065 	p2p_len = 0;
3066 
3067 	pos = mgmt->u.probe_resp.variable;
3068 	while (pos + 1 < buf + len) {
3069 		if (pos + 2 + pos[1] > buf + len)
3070 			break;
3071 		if (ath6kl_is_p2p_ie(pos)) {
3072 			memcpy(p2p + p2p_len, pos, 2 + pos[1]);
3073 			p2p_len += 2 + pos[1];
3074 		}
3075 		pos += 2 + pos[1];
3076 	}
3077 
3078 	ret = ath6kl_wmi_send_probe_response_cmd(ar->wmi, vif->fw_vif_idx, freq,
3079 						 mgmt->da, p2p, p2p_len);
3080 	kfree(p2p);
3081 	return ret;
3082 }
3083 
3084 static bool ath6kl_mgmt_powersave_ap(struct ath6kl_vif *vif,
3085 				     u32 id,
3086 				     u32 freq,
3087 				     u32 wait,
3088 				     const u8 *buf,
3089 				     size_t len,
3090 				     bool *more_data,
3091 				     bool no_cck)
3092 {
3093 	struct ieee80211_mgmt *mgmt;
3094 	struct ath6kl_sta *conn;
3095 	bool is_psq_empty = false;
3096 	struct ath6kl_mgmt_buff *mgmt_buf;
3097 	size_t mgmt_buf_size;
3098 	struct ath6kl *ar = vif->ar;
3099 
3100 	mgmt = (struct ieee80211_mgmt *) buf;
3101 	if (is_multicast_ether_addr(mgmt->da))
3102 		return false;
3103 
3104 	conn = ath6kl_find_sta(vif, mgmt->da);
3105 	if (!conn)
3106 		return false;
3107 
3108 	if (conn->sta_flags & STA_PS_SLEEP) {
3109 		if (!(conn->sta_flags & STA_PS_POLLED)) {
3110 			/* Queue the frames if the STA is sleeping */
3111 			mgmt_buf_size = len + sizeof(struct ath6kl_mgmt_buff);
3112 			mgmt_buf = kmalloc(mgmt_buf_size, GFP_KERNEL);
3113 			if (!mgmt_buf)
3114 				return false;
3115 
3116 			INIT_LIST_HEAD(&mgmt_buf->list);
3117 			mgmt_buf->id = id;
3118 			mgmt_buf->freq = freq;
3119 			mgmt_buf->wait = wait;
3120 			mgmt_buf->len = len;
3121 			mgmt_buf->no_cck = no_cck;
3122 			memcpy(mgmt_buf->buf, buf, len);
3123 			spin_lock_bh(&conn->psq_lock);
3124 			is_psq_empty = skb_queue_empty(&conn->psq) &&
3125 					(conn->mgmt_psq_len == 0);
3126 			list_add_tail(&mgmt_buf->list, &conn->mgmt_psq);
3127 			conn->mgmt_psq_len++;
3128 			spin_unlock_bh(&conn->psq_lock);
3129 
3130 			/*
3131 			 * If this is the first pkt getting queued
3132 			 * for this STA, update the PVB for this
3133 			 * STA.
3134 			 */
3135 			if (is_psq_empty)
3136 				ath6kl_wmi_set_pvb_cmd(ar->wmi, vif->fw_vif_idx,
3137 						       conn->aid, 1);
3138 			return true;
3139 		}
3140 
3141 		/*
3142 		 * This tx is because of a PsPoll.
3143 		 * Determine if MoreData bit has to be set.
3144 		 */
3145 		spin_lock_bh(&conn->psq_lock);
3146 		if (!skb_queue_empty(&conn->psq) || (conn->mgmt_psq_len != 0))
3147 			*more_data = true;
3148 		spin_unlock_bh(&conn->psq_lock);
3149 	}
3150 
3151 	return false;
3152 }
3153 
3154 /* Check if SSID length is greater than DIRECT- */
3155 static bool ath6kl_is_p2p_go_ssid(const u8 *buf, size_t len)
3156 {
3157 	const struct ieee80211_mgmt *mgmt;
3158 	mgmt = (const struct ieee80211_mgmt *) buf;
3159 
3160 	/* variable[1] contains the SSID tag length */
3161 	if (buf + len >= &mgmt->u.probe_resp.variable[1] &&
3162 	    (mgmt->u.probe_resp.variable[1] > P2P_WILDCARD_SSID_LEN)) {
3163 		return true;
3164 	}
3165 
3166 	return false;
3167 }
3168 
3169 static int ath6kl_mgmt_tx(struct wiphy *wiphy, struct wireless_dev *wdev,
3170 			  struct cfg80211_mgmt_tx_params *params, u64 *cookie)
3171 {
3172 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3173 	struct ath6kl *ar = ath6kl_priv(vif->ndev);
3174 	struct ieee80211_channel *chan = params->chan;
3175 	const u8 *buf = params->buf;
3176 	size_t len = params->len;
3177 	unsigned int wait = params->wait;
3178 	bool no_cck = params->no_cck;
3179 	u32 id, freq;
3180 	const struct ieee80211_mgmt *mgmt;
3181 	bool more_data, queued;
3182 
3183 	/* default to the current channel, but use the one specified as argument
3184 	 * if any
3185 	 */
3186 	freq = vif->ch_hint;
3187 	if (chan)
3188 		freq = chan->center_freq;
3189 
3190 	/* never send freq zero to the firmware */
3191 	if (WARN_ON(freq == 0))
3192 		return -EINVAL;
3193 
3194 	mgmt = (const struct ieee80211_mgmt *) buf;
3195 	if (vif->nw_type == AP_NETWORK && test_bit(CONNECTED, &vif->flags) &&
3196 	    ieee80211_is_probe_resp(mgmt->frame_control) &&
3197 	    ath6kl_is_p2p_go_ssid(buf, len)) {
3198 		/*
3199 		 * Send Probe Response frame in GO mode using a separate WMI
3200 		 * command to allow the target to fill in the generic IEs.
3201 		 */
3202 		*cookie = 0; /* TX status not supported */
3203 		return ath6kl_send_go_probe_resp(vif, buf, len, freq);
3204 	}
3205 
3206 	id = vif->send_action_id++;
3207 	if (id == 0) {
3208 		/*
3209 		 * 0 is a reserved value in the WMI command and shall not be
3210 		 * used for the command.
3211 		 */
3212 		id = vif->send_action_id++;
3213 	}
3214 
3215 	*cookie = id;
3216 
3217 	/* AP mode Power saving processing */
3218 	if (vif->nw_type == AP_NETWORK) {
3219 		queued = ath6kl_mgmt_powersave_ap(vif, id, freq, wait, buf, len,
3220 						  &more_data, no_cck);
3221 		if (queued)
3222 			return 0;
3223 	}
3224 
3225 	return ath6kl_wmi_send_mgmt_cmd(ar->wmi, vif->fw_vif_idx, id, freq,
3226 					wait, buf, len, no_cck);
3227 }
3228 
3229 static void ath6kl_mgmt_frame_register(struct wiphy *wiphy,
3230 				       struct wireless_dev *wdev,
3231 				       u16 frame_type, bool reg)
3232 {
3233 	struct ath6kl_vif *vif = ath6kl_vif_from_wdev(wdev);
3234 
3235 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG, "%s: frame_type=0x%x reg=%d\n",
3236 		   __func__, frame_type, reg);
3237 	if (frame_type == IEEE80211_STYPE_PROBE_REQ) {
3238 		/*
3239 		 * Note: This notification callback is not allowed to sleep, so
3240 		 * we cannot send WMI_PROBE_REQ_REPORT_CMD here. Instead, we
3241 		 * hardcode target to report Probe Request frames all the time.
3242 		 */
3243 		vif->probe_req_report = reg;
3244 	}
3245 }
3246 
3247 static int ath6kl_cfg80211_sscan_start(struct wiphy *wiphy,
3248 			struct net_device *dev,
3249 			struct cfg80211_sched_scan_request *request)
3250 {
3251 	struct ath6kl *ar = ath6kl_priv(dev);
3252 	struct ath6kl_vif *vif = netdev_priv(dev);
3253 	u16 interval;
3254 	int ret, rssi_thold;
3255 	int n_match_sets = request->n_match_sets;
3256 
3257 	/*
3258 	 * If there's a matchset w/o an SSID, then assume it's just for
3259 	 * the RSSI (nothing else is currently supported) and ignore it.
3260 	 * The device only supports a global RSSI filter that we set below.
3261 	 */
3262 	if (n_match_sets == 1 && !request->match_sets[0].ssid.ssid_len)
3263 		n_match_sets = 0;
3264 
3265 	if (ar->state != ATH6KL_STATE_ON)
3266 		return -EIO;
3267 
3268 	if (vif->sme_state != SME_DISCONNECTED)
3269 		return -EBUSY;
3270 
3271 	ath6kl_cfg80211_scan_complete_event(vif, true);
3272 
3273 	ret = ath6kl_set_probed_ssids(ar, vif, request->ssids,
3274 				      request->n_ssids,
3275 				      request->match_sets,
3276 				      n_match_sets);
3277 	if (ret < 0)
3278 		return ret;
3279 
3280 	if (!n_match_sets) {
3281 		ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
3282 					       ALL_BSS_FILTER, 0);
3283 		if (ret < 0)
3284 			return ret;
3285 	} else {
3286 		 ret = ath6kl_wmi_bssfilter_cmd(ar->wmi, vif->fw_vif_idx,
3287 						MATCHED_SSID_FILTER, 0);
3288 		if (ret < 0)
3289 			return ret;
3290 	}
3291 
3292 	if (test_bit(ATH6KL_FW_CAPABILITY_RSSI_SCAN_THOLD,
3293 		     ar->fw_capabilities)) {
3294 		if (request->min_rssi_thold <= NL80211_SCAN_RSSI_THOLD_OFF)
3295 			rssi_thold = 0;
3296 		else if (request->min_rssi_thold < -127)
3297 			rssi_thold = -127;
3298 		else
3299 			rssi_thold = request->min_rssi_thold;
3300 
3301 		ret = ath6kl_wmi_set_rssi_filter_cmd(ar->wmi, vif->fw_vif_idx,
3302 						     rssi_thold);
3303 		if (ret) {
3304 			ath6kl_err("failed to set RSSI threshold for scan\n");
3305 			return ret;
3306 		}
3307 	}
3308 
3309 	/* fw uses seconds, also make sure that it's >0 */
3310 	interval = max_t(u16, 1, request->interval / 1000);
3311 
3312 	ath6kl_wmi_scanparams_cmd(ar->wmi, vif->fw_vif_idx,
3313 				  interval, interval,
3314 				  vif->bg_scan_period, 0, 0, 0, 3, 0, 0, 0);
3315 
3316 	/* this also clears IE in fw if it's not set */
3317 	ret = ath6kl_wmi_set_appie_cmd(ar->wmi, vif->fw_vif_idx,
3318 				       WMI_FRAME_PROBE_REQ,
3319 				       request->ie, request->ie_len);
3320 	if (ret) {
3321 		ath6kl_warn("Failed to set probe request IE for scheduled scan: %d\n",
3322 			    ret);
3323 		return ret;
3324 	}
3325 
3326 	ret = ath6kl_wmi_enable_sched_scan_cmd(ar->wmi, vif->fw_vif_idx, true);
3327 	if (ret)
3328 		return ret;
3329 
3330 	set_bit(SCHED_SCANNING, &vif->flags);
3331 
3332 	return 0;
3333 }
3334 
3335 static int ath6kl_cfg80211_sscan_stop(struct wiphy *wiphy,
3336 				      struct net_device *dev)
3337 {
3338 	struct ath6kl_vif *vif = netdev_priv(dev);
3339 	bool stopped;
3340 
3341 	stopped = __ath6kl_cfg80211_sscan_stop(vif);
3342 
3343 	if (!stopped)
3344 		return -EIO;
3345 
3346 	return 0;
3347 }
3348 
3349 static int ath6kl_cfg80211_set_bitrate(struct wiphy *wiphy,
3350 				       struct net_device *dev,
3351 				       const u8 *addr,
3352 				       const struct cfg80211_bitrate_mask *mask)
3353 {
3354 	struct ath6kl *ar = ath6kl_priv(dev);
3355 	struct ath6kl_vif *vif = netdev_priv(dev);
3356 
3357 	return ath6kl_wmi_set_bitrate_mask(ar->wmi, vif->fw_vif_idx,
3358 					   mask);
3359 }
3360 
3361 static int ath6kl_cfg80211_set_txe_config(struct wiphy *wiphy,
3362 					  struct net_device *dev,
3363 					  u32 rate, u32 pkts, u32 intvl)
3364 {
3365 	struct ath6kl *ar = ath6kl_priv(dev);
3366 	struct ath6kl_vif *vif = netdev_priv(dev);
3367 
3368 	if (vif->nw_type != INFRA_NETWORK ||
3369 	    !test_bit(ATH6KL_FW_CAPABILITY_TX_ERR_NOTIFY, ar->fw_capabilities))
3370 		return -EOPNOTSUPP;
3371 
3372 	if (vif->sme_state != SME_CONNECTED)
3373 		return -ENOTCONN;
3374 
3375 	/* save this since the firmware won't report the interval */
3376 	vif->txe_intvl = intvl;
3377 
3378 	return ath6kl_wmi_set_txe_notify(ar->wmi, vif->fw_vif_idx,
3379 					 rate, pkts, intvl);
3380 }
3381 
3382 static const struct ieee80211_txrx_stypes
3383 ath6kl_mgmt_stypes[NUM_NL80211_IFTYPES] = {
3384 	[NL80211_IFTYPE_STATION] = {
3385 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3386 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3387 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3388 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3389 	},
3390 	[NL80211_IFTYPE_AP] = {
3391 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3392 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3393 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3394 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3395 	},
3396 	[NL80211_IFTYPE_P2P_CLIENT] = {
3397 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3398 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3399 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3400 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3401 	},
3402 	[NL80211_IFTYPE_P2P_GO] = {
3403 		.tx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3404 		BIT(IEEE80211_STYPE_PROBE_RESP >> 4),
3405 		.rx = BIT(IEEE80211_STYPE_ACTION >> 4) |
3406 		BIT(IEEE80211_STYPE_PROBE_REQ >> 4)
3407 	},
3408 };
3409 
3410 static struct cfg80211_ops ath6kl_cfg80211_ops = {
3411 	.add_virtual_intf = ath6kl_cfg80211_add_iface,
3412 	.del_virtual_intf = ath6kl_cfg80211_del_iface,
3413 	.change_virtual_intf = ath6kl_cfg80211_change_iface,
3414 	.scan = ath6kl_cfg80211_scan,
3415 	.connect = ath6kl_cfg80211_connect,
3416 	.disconnect = ath6kl_cfg80211_disconnect,
3417 	.add_key = ath6kl_cfg80211_add_key,
3418 	.get_key = ath6kl_cfg80211_get_key,
3419 	.del_key = ath6kl_cfg80211_del_key,
3420 	.set_default_key = ath6kl_cfg80211_set_default_key,
3421 	.set_wiphy_params = ath6kl_cfg80211_set_wiphy_params,
3422 	.set_tx_power = ath6kl_cfg80211_set_txpower,
3423 	.get_tx_power = ath6kl_cfg80211_get_txpower,
3424 	.set_power_mgmt = ath6kl_cfg80211_set_power_mgmt,
3425 	.join_ibss = ath6kl_cfg80211_join_ibss,
3426 	.leave_ibss = ath6kl_cfg80211_leave_ibss,
3427 	.get_station = ath6kl_get_station,
3428 	.set_pmksa = ath6kl_set_pmksa,
3429 	.del_pmksa = ath6kl_del_pmksa,
3430 	.flush_pmksa = ath6kl_flush_pmksa,
3431 	CFG80211_TESTMODE_CMD(ath6kl_tm_cmd)
3432 #ifdef CONFIG_PM
3433 	.suspend = __ath6kl_cfg80211_suspend,
3434 	.resume = __ath6kl_cfg80211_resume,
3435 #endif
3436 	.start_ap = ath6kl_start_ap,
3437 	.change_beacon = ath6kl_change_beacon,
3438 	.stop_ap = ath6kl_stop_ap,
3439 	.del_station = ath6kl_del_station,
3440 	.change_station = ath6kl_change_station,
3441 	.remain_on_channel = ath6kl_remain_on_channel,
3442 	.cancel_remain_on_channel = ath6kl_cancel_remain_on_channel,
3443 	.mgmt_tx = ath6kl_mgmt_tx,
3444 	.mgmt_frame_register = ath6kl_mgmt_frame_register,
3445 	.sched_scan_start = ath6kl_cfg80211_sscan_start,
3446 	.sched_scan_stop = ath6kl_cfg80211_sscan_stop,
3447 	.set_bitrate_mask = ath6kl_cfg80211_set_bitrate,
3448 	.set_cqm_txe_config = ath6kl_cfg80211_set_txe_config,
3449 };
3450 
3451 void ath6kl_cfg80211_stop(struct ath6kl_vif *vif)
3452 {
3453 	ath6kl_cfg80211_sscan_disable(vif);
3454 
3455 	switch (vif->sme_state) {
3456 	case SME_DISCONNECTED:
3457 		break;
3458 	case SME_CONNECTING:
3459 		cfg80211_connect_result(vif->ndev, vif->bssid, NULL, 0,
3460 					NULL, 0,
3461 					WLAN_STATUS_UNSPECIFIED_FAILURE,
3462 					GFP_KERNEL);
3463 		break;
3464 	case SME_CONNECTED:
3465 		cfg80211_disconnected(vif->ndev, 0, NULL, 0, GFP_KERNEL);
3466 		break;
3467 	}
3468 
3469 	if (vif->ar->state != ATH6KL_STATE_RECOVERY &&
3470 	    (test_bit(CONNECTED, &vif->flags) ||
3471 	    test_bit(CONNECT_PEND, &vif->flags)))
3472 		ath6kl_wmi_disconnect_cmd(vif->ar->wmi, vif->fw_vif_idx);
3473 
3474 	vif->sme_state = SME_DISCONNECTED;
3475 	clear_bit(CONNECTED, &vif->flags);
3476 	clear_bit(CONNECT_PEND, &vif->flags);
3477 
3478 	/* Stop netdev queues, needed during recovery */
3479 	netif_stop_queue(vif->ndev);
3480 	netif_carrier_off(vif->ndev);
3481 
3482 	/* disable scanning */
3483 	if (vif->ar->state != ATH6KL_STATE_RECOVERY &&
3484 	    ath6kl_wmi_scanparams_cmd(vif->ar->wmi, vif->fw_vif_idx, 0xFFFF,
3485 				      0, 0, 0, 0, 0, 0, 0, 0, 0) != 0)
3486 		ath6kl_warn("failed to disable scan during stop\n");
3487 
3488 	ath6kl_cfg80211_scan_complete_event(vif, true);
3489 }
3490 
3491 void ath6kl_cfg80211_stop_all(struct ath6kl *ar)
3492 {
3493 	struct ath6kl_vif *vif;
3494 
3495 	vif = ath6kl_vif_first(ar);
3496 	if (!vif && ar->state != ATH6KL_STATE_RECOVERY) {
3497 		/* save the current power mode before enabling power save */
3498 		ar->wmi->saved_pwr_mode = ar->wmi->pwr_mode;
3499 
3500 		if (ath6kl_wmi_powermode_cmd(ar->wmi, 0, REC_POWER) != 0)
3501 			ath6kl_warn("ath6kl_deep_sleep_enable: wmi_powermode_cmd failed\n");
3502 		return;
3503 	}
3504 
3505 	/*
3506 	 * FIXME: we should take ar->list_lock to protect changes in the
3507 	 * vif_list, but that's not trivial to do as ath6kl_cfg80211_stop()
3508 	 * sleeps.
3509 	 */
3510 	list_for_each_entry(vif, &ar->vif_list, list)
3511 		ath6kl_cfg80211_stop(vif);
3512 }
3513 
3514 static void ath6kl_cfg80211_reg_notify(struct wiphy *wiphy,
3515 				       struct regulatory_request *request)
3516 {
3517 	struct ath6kl *ar = wiphy_priv(wiphy);
3518 	u32 rates[IEEE80211_NUM_BANDS];
3519 	int ret, i;
3520 
3521 	ath6kl_dbg(ATH6KL_DBG_WLAN_CFG,
3522 		   "cfg reg_notify %c%c%s%s initiator %d hint_type %d\n",
3523 		   request->alpha2[0], request->alpha2[1],
3524 		   request->intersect ? " intersect" : "",
3525 		   request->processed ? " processed" : "",
3526 		   request->initiator, request->user_reg_hint_type);
3527 
3528 	if (request->user_reg_hint_type != NL80211_USER_REG_HINT_CELL_BASE)
3529 		return;
3530 
3531 	ret = ath6kl_wmi_set_regdomain_cmd(ar->wmi, request->alpha2);
3532 	if (ret) {
3533 		ath6kl_err("failed to set regdomain: %d\n", ret);
3534 		return;
3535 	}
3536 
3537 	/*
3538 	 * Firmware will apply the regdomain change only after a scan is
3539 	 * issued and it will send a WMI_REGDOMAIN_EVENTID when it has been
3540 	 * changed.
3541 	 */
3542 
3543 	for (i = 0; i < IEEE80211_NUM_BANDS; i++)
3544 		if (wiphy->bands[i])
3545 			rates[i] = (1 << wiphy->bands[i]->n_bitrates) - 1;
3546 
3547 
3548 	ret = ath6kl_wmi_beginscan_cmd(ar->wmi, 0, WMI_LONG_SCAN, false,
3549 				       false, 0, ATH6KL_FG_SCAN_INTERVAL,
3550 				       0, NULL, false, rates);
3551 	if (ret) {
3552 		ath6kl_err("failed to start scan for a regdomain change: %d\n",
3553 			   ret);
3554 		return;
3555 	}
3556 }
3557 
3558 static int ath6kl_cfg80211_vif_init(struct ath6kl_vif *vif)
3559 {
3560 	vif->aggr_cntxt = aggr_init(vif);
3561 	if (!vif->aggr_cntxt) {
3562 		ath6kl_err("failed to initialize aggr\n");
3563 		return -ENOMEM;
3564 	}
3565 
3566 	setup_timer(&vif->disconnect_timer, disconnect_timer_handler,
3567 		    (unsigned long) vif->ndev);
3568 	setup_timer(&vif->sched_scan_timer, ath6kl_wmi_sscan_timer,
3569 		    (unsigned long) vif);
3570 
3571 	set_bit(WMM_ENABLED, &vif->flags);
3572 	spin_lock_init(&vif->if_lock);
3573 
3574 	INIT_LIST_HEAD(&vif->mc_filter);
3575 
3576 	return 0;
3577 }
3578 
3579 void ath6kl_cfg80211_vif_stop(struct ath6kl_vif *vif, bool wmi_ready)
3580 {
3581 	static u8 bcast_mac[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
3582 	bool discon_issued;
3583 
3584 	netif_stop_queue(vif->ndev);
3585 
3586 	clear_bit(WLAN_ENABLED, &vif->flags);
3587 
3588 	if (wmi_ready) {
3589 		discon_issued = test_bit(CONNECTED, &vif->flags) ||
3590 				test_bit(CONNECT_PEND, &vif->flags);
3591 		ath6kl_disconnect(vif);
3592 		del_timer(&vif->disconnect_timer);
3593 
3594 		if (discon_issued)
3595 			ath6kl_disconnect_event(vif, DISCONNECT_CMD,
3596 						(vif->nw_type & AP_NETWORK) ?
3597 						bcast_mac : vif->bssid,
3598 						0, NULL, 0);
3599 	}
3600 
3601 	if (vif->scan_req) {
3602 		cfg80211_scan_done(vif->scan_req, true);
3603 		vif->scan_req = NULL;
3604 	}
3605 
3606 	/* need to clean up enhanced bmiss detection fw state */
3607 	ath6kl_cfg80211_sta_bmiss_enhance(vif, false);
3608 }
3609 
3610 void ath6kl_cfg80211_vif_cleanup(struct ath6kl_vif *vif)
3611 {
3612 	struct ath6kl *ar = vif->ar;
3613 	struct ath6kl_mc_filter *mc_filter, *tmp;
3614 
3615 	aggr_module_destroy(vif->aggr_cntxt);
3616 
3617 	ar->avail_idx_map |= BIT(vif->fw_vif_idx);
3618 
3619 	if (vif->nw_type == ADHOC_NETWORK)
3620 		ar->ibss_if_active = false;
3621 
3622 	list_for_each_entry_safe(mc_filter, tmp, &vif->mc_filter, list) {
3623 		list_del(&mc_filter->list);
3624 		kfree(mc_filter);
3625 	}
3626 
3627 	unregister_netdevice(vif->ndev);
3628 
3629 	ar->num_vif--;
3630 }
3631 
3632 struct wireless_dev *ath6kl_interface_add(struct ath6kl *ar, const char *name,
3633 					  enum nl80211_iftype type,
3634 					  u8 fw_vif_idx, u8 nw_type)
3635 {
3636 	struct net_device *ndev;
3637 	struct ath6kl_vif *vif;
3638 
3639 	ndev = alloc_netdev(sizeof(*vif), name, ether_setup);
3640 	if (!ndev)
3641 		return NULL;
3642 
3643 	vif = netdev_priv(ndev);
3644 	ndev->ieee80211_ptr = &vif->wdev;
3645 	vif->wdev.wiphy = ar->wiphy;
3646 	vif->ar = ar;
3647 	vif->ndev = ndev;
3648 	SET_NETDEV_DEV(ndev, wiphy_dev(vif->wdev.wiphy));
3649 	vif->wdev.netdev = ndev;
3650 	vif->wdev.iftype = type;
3651 	vif->fw_vif_idx = fw_vif_idx;
3652 	vif->nw_type = nw_type;
3653 	vif->next_mode = nw_type;
3654 	vif->listen_intvl_t = ATH6KL_DEFAULT_LISTEN_INTVAL;
3655 	vif->bmiss_time_t = ATH6KL_DEFAULT_BMISS_TIME;
3656 	vif->bg_scan_period = 0;
3657 	vif->htcap[IEEE80211_BAND_2GHZ].ht_enable = true;
3658 	vif->htcap[IEEE80211_BAND_5GHZ].ht_enable = true;
3659 
3660 	memcpy(ndev->dev_addr, ar->mac_addr, ETH_ALEN);
3661 	if (fw_vif_idx != 0) {
3662 		ndev->dev_addr[0] = (ndev->dev_addr[0] ^ (1 << fw_vif_idx)) |
3663 				     0x2;
3664 		if (test_bit(ATH6KL_FW_CAPABILITY_CUSTOM_MAC_ADDR,
3665 			     ar->fw_capabilities))
3666 			ndev->dev_addr[4] ^= 0x80;
3667 	}
3668 
3669 	init_netdev(ndev);
3670 
3671 	ath6kl_init_control_info(vif);
3672 
3673 	if (ath6kl_cfg80211_vif_init(vif))
3674 		goto err;
3675 
3676 	if (register_netdevice(ndev))
3677 		goto err;
3678 
3679 	ar->avail_idx_map &= ~BIT(fw_vif_idx);
3680 	vif->sme_state = SME_DISCONNECTED;
3681 	set_bit(WLAN_ENABLED, &vif->flags);
3682 	ar->wlan_pwr_state = WLAN_POWER_STATE_ON;
3683 
3684 	if (type == NL80211_IFTYPE_ADHOC)
3685 		ar->ibss_if_active = true;
3686 
3687 	spin_lock_bh(&ar->list_lock);
3688 	list_add_tail(&vif->list, &ar->vif_list);
3689 	spin_unlock_bh(&ar->list_lock);
3690 
3691 	return &vif->wdev;
3692 
3693 err:
3694 	aggr_module_destroy(vif->aggr_cntxt);
3695 	free_netdev(ndev);
3696 	return NULL;
3697 }
3698 
3699 #ifdef CONFIG_PM
3700 static const struct wiphy_wowlan_support ath6kl_wowlan_support = {
3701 	.flags = WIPHY_WOWLAN_MAGIC_PKT |
3702 		 WIPHY_WOWLAN_DISCONNECT |
3703 		 WIPHY_WOWLAN_GTK_REKEY_FAILURE  |
3704 		 WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
3705 		 WIPHY_WOWLAN_EAP_IDENTITY_REQ   |
3706 		 WIPHY_WOWLAN_4WAY_HANDSHAKE,
3707 	.n_patterns = WOW_MAX_FILTERS_PER_LIST,
3708 	.pattern_min_len = 1,
3709 	.pattern_max_len = WOW_PATTERN_SIZE,
3710 };
3711 #endif
3712 
3713 int ath6kl_cfg80211_init(struct ath6kl *ar)
3714 {
3715 	struct wiphy *wiphy = ar->wiphy;
3716 	bool band_2gig = false, band_5gig = false, ht = false;
3717 	int ret;
3718 
3719 	wiphy->mgmt_stypes = ath6kl_mgmt_stypes;
3720 
3721 	wiphy->max_remain_on_channel_duration = 5000;
3722 
3723 	/* set device pointer for wiphy */
3724 	set_wiphy_dev(wiphy, ar->dev);
3725 
3726 	wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
3727 				 BIT(NL80211_IFTYPE_ADHOC) |
3728 				 BIT(NL80211_IFTYPE_AP);
3729 	if (ar->p2p) {
3730 		wiphy->interface_modes |= BIT(NL80211_IFTYPE_P2P_GO) |
3731 					  BIT(NL80211_IFTYPE_P2P_CLIENT);
3732 	}
3733 
3734 	if (config_enabled(CONFIG_ATH6KL_REGDOMAIN) &&
3735 	    test_bit(ATH6KL_FW_CAPABILITY_REGDOMAIN, ar->fw_capabilities)) {
3736 		wiphy->reg_notifier = ath6kl_cfg80211_reg_notify;
3737 		ar->wiphy->features |= NL80211_FEATURE_CELL_BASE_REG_HINTS;
3738 	}
3739 
3740 	/* max num of ssids that can be probed during scanning */
3741 	wiphy->max_scan_ssids = MAX_PROBED_SSIDS;
3742 
3743 	/* max num of ssids that can be matched after scan */
3744 	if (test_bit(ATH6KL_FW_CAPABILITY_SCHED_SCAN_MATCH_LIST,
3745 		     ar->fw_capabilities))
3746 		wiphy->max_match_sets = MAX_PROBED_SSIDS;
3747 
3748 	wiphy->max_scan_ie_len = 1000; /* FIX: what is correct limit? */
3749 	switch (ar->hw.cap) {
3750 	case WMI_11AN_CAP:
3751 		ht = true;
3752 	case WMI_11A_CAP:
3753 		band_5gig = true;
3754 		break;
3755 	case WMI_11GN_CAP:
3756 		ht = true;
3757 	case WMI_11G_CAP:
3758 		band_2gig = true;
3759 		break;
3760 	case WMI_11AGN_CAP:
3761 		ht = true;
3762 	case WMI_11AG_CAP:
3763 		band_2gig = true;
3764 		band_5gig = true;
3765 		break;
3766 	default:
3767 		ath6kl_err("invalid phy capability!\n");
3768 		return -EINVAL;
3769 	}
3770 
3771 	/*
3772 	 * Even if the fw has HT support, advertise HT cap only when
3773 	 * the firmware has support to override RSN capability, otherwise
3774 	 * 4-way handshake would fail.
3775 	 */
3776 	if (!(ht &&
3777 	      test_bit(ATH6KL_FW_CAPABILITY_RSN_CAP_OVERRIDE,
3778 		       ar->fw_capabilities))) {
3779 		ath6kl_band_2ghz.ht_cap.cap = 0;
3780 		ath6kl_band_2ghz.ht_cap.ht_supported = false;
3781 		ath6kl_band_5ghz.ht_cap.cap = 0;
3782 		ath6kl_band_5ghz.ht_cap.ht_supported = false;
3783 	}
3784 
3785 	if (ar->hw.flags & ATH6KL_HW_64BIT_RATES) {
3786 		ath6kl_band_2ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3787 		ath6kl_band_5ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3788 		ath6kl_band_2ghz.ht_cap.mcs.rx_mask[1] = 0xff;
3789 		ath6kl_band_5ghz.ht_cap.mcs.rx_mask[1] = 0xff;
3790 	} else {
3791 		ath6kl_band_2ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3792 		ath6kl_band_5ghz.ht_cap.mcs.rx_mask[0] = 0xff;
3793 	}
3794 
3795 	if (band_2gig)
3796 		wiphy->bands[IEEE80211_BAND_2GHZ] = &ath6kl_band_2ghz;
3797 	if (band_5gig)
3798 		wiphy->bands[IEEE80211_BAND_5GHZ] = &ath6kl_band_5ghz;
3799 
3800 	wiphy->signal_type = CFG80211_SIGNAL_TYPE_MBM;
3801 
3802 	wiphy->cipher_suites = cipher_suites;
3803 	wiphy->n_cipher_suites = ARRAY_SIZE(cipher_suites);
3804 
3805 #ifdef CONFIG_PM
3806 	wiphy->wowlan = &ath6kl_wowlan_support;
3807 #endif
3808 
3809 	wiphy->max_sched_scan_ssids = MAX_PROBED_SSIDS;
3810 
3811 	ar->wiphy->flags |= WIPHY_FLAG_SUPPORTS_FW_ROAM |
3812 			    WIPHY_FLAG_HAVE_AP_SME |
3813 			    WIPHY_FLAG_HAS_REMAIN_ON_CHANNEL |
3814 			    WIPHY_FLAG_AP_PROBE_RESP_OFFLOAD;
3815 
3816 	if (test_bit(ATH6KL_FW_CAPABILITY_SCHED_SCAN_V2, ar->fw_capabilities))
3817 		ar->wiphy->flags |= WIPHY_FLAG_SUPPORTS_SCHED_SCAN;
3818 
3819 	if (test_bit(ATH6KL_FW_CAPABILITY_INACTIVITY_TIMEOUT,
3820 		     ar->fw_capabilities))
3821 		ar->wiphy->features |= NL80211_FEATURE_INACTIVITY_TIMER;
3822 
3823 	ar->wiphy->probe_resp_offload =
3824 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_WPS |
3825 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_WPS2 |
3826 		NL80211_PROBE_RESP_OFFLOAD_SUPPORT_P2P;
3827 
3828 	ret = wiphy_register(wiphy);
3829 	if (ret < 0) {
3830 		ath6kl_err("couldn't register wiphy device\n");
3831 		return ret;
3832 	}
3833 
3834 	ar->wiphy_registered = true;
3835 
3836 	return 0;
3837 }
3838 
3839 void ath6kl_cfg80211_cleanup(struct ath6kl *ar)
3840 {
3841 	wiphy_unregister(ar->wiphy);
3842 
3843 	ar->wiphy_registered = false;
3844 }
3845 
3846 struct ath6kl *ath6kl_cfg80211_create(void)
3847 {
3848 	struct ath6kl *ar;
3849 	struct wiphy *wiphy;
3850 
3851 	/* create a new wiphy for use with cfg80211 */
3852 	wiphy = wiphy_new(&ath6kl_cfg80211_ops, sizeof(struct ath6kl));
3853 
3854 	if (!wiphy) {
3855 		ath6kl_err("couldn't allocate wiphy device\n");
3856 		return NULL;
3857 	}
3858 
3859 	ar = wiphy_priv(wiphy);
3860 	ar->wiphy = wiphy;
3861 
3862 	return ar;
3863 }
3864 
3865 /* Note: ar variable must not be accessed after calling this! */
3866 void ath6kl_cfg80211_destroy(struct ath6kl *ar)
3867 {
3868 	int i;
3869 
3870 	for (i = 0; i < AP_MAX_NUM_STA; i++)
3871 		kfree(ar->sta_list[i].aggr_conn);
3872 
3873 	wiphy_free(ar->wiphy);
3874 }
3875 
3876