1 /*
2  * Copyright (c) 2013 Eugene Krasnikov <k.eugene.e@gmail.com>
3  *
4  * Permission to use, copy, modify, and/or distribute this software for any
5  * purpose with or without fee is hereby granted, provided that the above
6  * copyright notice and this permission notice appear in all copies.
7  *
8  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
9  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
10  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
11  * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
12  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
13  * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
14  * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
15  */
16 
17 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
18 
19 #include <linux/etherdevice.h>
20 #include <linux/firmware.h>
21 #include <linux/bitops.h>
22 #include <linux/rpmsg.h>
23 #include "smd.h"
24 
25 struct wcn36xx_cfg_val {
26 	u32 cfg_id;
27 	u32 value;
28 };
29 
30 #define WCN36XX_CFG_VAL(id, val) \
31 { \
32 	.cfg_id = WCN36XX_HAL_CFG_ ## id, \
33 	.value = val \
34 }
35 
36 static struct wcn36xx_cfg_val wcn36xx_cfg_vals[] = {
37 	WCN36XX_CFG_VAL(CURRENT_TX_ANTENNA, 1),
38 	WCN36XX_CFG_VAL(CURRENT_RX_ANTENNA, 1),
39 	WCN36XX_CFG_VAL(LOW_GAIN_OVERRIDE, 0),
40 	WCN36XX_CFG_VAL(POWER_STATE_PER_CHAIN, 785),
41 	WCN36XX_CFG_VAL(CAL_PERIOD, 5),
42 	WCN36XX_CFG_VAL(CAL_CONTROL, 1),
43 	WCN36XX_CFG_VAL(PROXIMITY, 0),
44 	WCN36XX_CFG_VAL(NETWORK_DENSITY, 3),
45 	WCN36XX_CFG_VAL(MAX_MEDIUM_TIME, 6000),
46 	WCN36XX_CFG_VAL(MAX_MPDUS_IN_AMPDU, 64),
47 	WCN36XX_CFG_VAL(RTS_THRESHOLD, 2347),
48 	WCN36XX_CFG_VAL(SHORT_RETRY_LIMIT, 6),
49 	WCN36XX_CFG_VAL(LONG_RETRY_LIMIT, 6),
50 	WCN36XX_CFG_VAL(FRAGMENTATION_THRESHOLD, 8000),
51 	WCN36XX_CFG_VAL(DYNAMIC_THRESHOLD_ZERO, 5),
52 	WCN36XX_CFG_VAL(DYNAMIC_THRESHOLD_ONE, 10),
53 	WCN36XX_CFG_VAL(DYNAMIC_THRESHOLD_TWO, 15),
54 	WCN36XX_CFG_VAL(FIXED_RATE, 0),
55 	WCN36XX_CFG_VAL(RETRYRATE_POLICY, 4),
56 	WCN36XX_CFG_VAL(RETRYRATE_SECONDARY, 0),
57 	WCN36XX_CFG_VAL(RETRYRATE_TERTIARY, 0),
58 	WCN36XX_CFG_VAL(FORCE_POLICY_PROTECTION, 5),
59 	WCN36XX_CFG_VAL(FIXED_RATE_MULTICAST_24GHZ, 1),
60 	WCN36XX_CFG_VAL(FIXED_RATE_MULTICAST_5GHZ, 5),
61 	WCN36XX_CFG_VAL(DEFAULT_RATE_INDEX_5GHZ, 5),
62 	WCN36XX_CFG_VAL(MAX_BA_SESSIONS, 40),
63 	WCN36XX_CFG_VAL(PS_DATA_INACTIVITY_TIMEOUT, 200),
64 	WCN36XX_CFG_VAL(PS_ENABLE_BCN_FILTER, 1),
65 	WCN36XX_CFG_VAL(PS_ENABLE_RSSI_MONITOR, 1),
66 	WCN36XX_CFG_VAL(NUM_BEACON_PER_RSSI_AVERAGE, 20),
67 	WCN36XX_CFG_VAL(STATS_PERIOD, 10),
68 	WCN36XX_CFG_VAL(CFP_MAX_DURATION, 30000),
69 	WCN36XX_CFG_VAL(FRAME_TRANS_ENABLED, 0),
70 	WCN36XX_CFG_VAL(BA_THRESHOLD_HIGH, 128),
71 	WCN36XX_CFG_VAL(MAX_BA_BUFFERS, 2560),
72 	WCN36XX_CFG_VAL(DYNAMIC_PS_POLL_VALUE, 0),
73 	WCN36XX_CFG_VAL(TX_PWR_CTRL_ENABLE, 1),
74 	WCN36XX_CFG_VAL(ENABLE_CLOSE_LOOP, 1),
75 	WCN36XX_CFG_VAL(ENABLE_LPWR_IMG_TRANSITION, 0),
76 	WCN36XX_CFG_VAL(BTC_STATIC_LEN_LE_BT, 120000),
77 	WCN36XX_CFG_VAL(BTC_STATIC_LEN_LE_WLAN, 30000),
78 	WCN36XX_CFG_VAL(MAX_ASSOC_LIMIT, 10),
79 	WCN36XX_CFG_VAL(ENABLE_MCC_ADAPTIVE_SCHEDULER, 0),
80 };
81 
82 static int put_cfg_tlv_u32(struct wcn36xx *wcn, size_t *len, u32 id, u32 value)
83 {
84 	struct wcn36xx_hal_cfg *entry;
85 	u32 *val;
86 
87 	if (*len + sizeof(*entry) + sizeof(u32) >= WCN36XX_HAL_BUF_SIZE) {
88 		wcn36xx_err("Not enough room for TLV entry\n");
89 		return -ENOMEM;
90 	}
91 
92 	entry = (struct wcn36xx_hal_cfg *) (wcn->hal_buf + *len);
93 	entry->id = id;
94 	entry->len = sizeof(u32);
95 	entry->pad_bytes = 0;
96 	entry->reserve = 0;
97 
98 	val = (u32 *) (entry + 1);
99 	*val = value;
100 
101 	*len += sizeof(*entry) + sizeof(u32);
102 
103 	return 0;
104 }
105 
106 static void wcn36xx_smd_set_bss_nw_type(struct wcn36xx *wcn,
107 		struct ieee80211_sta *sta,
108 		struct wcn36xx_hal_config_bss_params *bss_params)
109 {
110 	if (NL80211_BAND_5GHZ == WCN36XX_BAND(wcn))
111 		bss_params->nw_type = WCN36XX_HAL_11A_NW_TYPE;
112 	else if (sta && sta->ht_cap.ht_supported)
113 		bss_params->nw_type = WCN36XX_HAL_11N_NW_TYPE;
114 	else if (sta && (sta->supp_rates[NL80211_BAND_2GHZ] & 0x7f))
115 		bss_params->nw_type = WCN36XX_HAL_11G_NW_TYPE;
116 	else
117 		bss_params->nw_type = WCN36XX_HAL_11B_NW_TYPE;
118 }
119 
120 static inline u8 is_cap_supported(unsigned long caps, unsigned long flag)
121 {
122 	return caps & flag ? 1 : 0;
123 }
124 static void wcn36xx_smd_set_bss_ht_params(struct ieee80211_vif *vif,
125 		struct ieee80211_sta *sta,
126 		struct wcn36xx_hal_config_bss_params *bss_params)
127 {
128 	if (sta && sta->ht_cap.ht_supported) {
129 		unsigned long caps = sta->ht_cap.cap;
130 		bss_params->ht = sta->ht_cap.ht_supported;
131 		bss_params->tx_channel_width_set = is_cap_supported(caps,
132 			IEEE80211_HT_CAP_SUP_WIDTH_20_40);
133 		bss_params->lsig_tx_op_protection_full_support =
134 			is_cap_supported(caps,
135 					 IEEE80211_HT_CAP_LSIG_TXOP_PROT);
136 
137 		bss_params->ht_oper_mode = vif->bss_conf.ht_operation_mode;
138 		bss_params->lln_non_gf_coexist =
139 			!!(vif->bss_conf.ht_operation_mode &
140 			   IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT);
141 		/* IEEE80211_HT_STBC_PARAM_DUAL_CTS_PROT */
142 		bss_params->dual_cts_protection = 0;
143 		/* IEEE80211_HT_OP_MODE_PROTECTION_20MHZ */
144 		bss_params->ht20_coexist = 0;
145 	}
146 }
147 
148 static void wcn36xx_smd_set_sta_ht_params(struct ieee80211_sta *sta,
149 		struct wcn36xx_hal_config_sta_params *sta_params)
150 {
151 	if (sta->ht_cap.ht_supported) {
152 		unsigned long caps = sta->ht_cap.cap;
153 		sta_params->ht_capable = sta->ht_cap.ht_supported;
154 		sta_params->tx_channel_width_set = is_cap_supported(caps,
155 			IEEE80211_HT_CAP_SUP_WIDTH_20_40);
156 		sta_params->lsig_txop_protection = is_cap_supported(caps,
157 			IEEE80211_HT_CAP_LSIG_TXOP_PROT);
158 
159 		sta_params->max_ampdu_size = sta->ht_cap.ampdu_factor;
160 		sta_params->max_ampdu_density = sta->ht_cap.ampdu_density;
161 		sta_params->max_amsdu_size = is_cap_supported(caps,
162 			IEEE80211_HT_CAP_MAX_AMSDU);
163 		sta_params->sgi_20Mhz = is_cap_supported(caps,
164 			IEEE80211_HT_CAP_SGI_20);
165 		sta_params->sgi_40mhz =	is_cap_supported(caps,
166 			IEEE80211_HT_CAP_SGI_40);
167 		sta_params->green_field_capable = is_cap_supported(caps,
168 			IEEE80211_HT_CAP_GRN_FLD);
169 		sta_params->delayed_ba_support = is_cap_supported(caps,
170 			IEEE80211_HT_CAP_DELAY_BA);
171 		sta_params->dsss_cck_mode_40mhz = is_cap_supported(caps,
172 			IEEE80211_HT_CAP_DSSSCCK40);
173 	}
174 }
175 
176 static void wcn36xx_smd_set_sta_default_ht_params(
177 		struct wcn36xx_hal_config_sta_params *sta_params)
178 {
179 	sta_params->ht_capable = 1;
180 	sta_params->tx_channel_width_set = 1;
181 	sta_params->lsig_txop_protection = 1;
182 	sta_params->max_ampdu_size = 3;
183 	sta_params->max_ampdu_density = 5;
184 	sta_params->max_amsdu_size = 0;
185 	sta_params->sgi_20Mhz = 1;
186 	sta_params->sgi_40mhz = 1;
187 	sta_params->green_field_capable = 1;
188 	sta_params->delayed_ba_support = 0;
189 	sta_params->dsss_cck_mode_40mhz = 1;
190 }
191 
192 static void wcn36xx_smd_set_sta_params(struct wcn36xx *wcn,
193 		struct ieee80211_vif *vif,
194 		struct ieee80211_sta *sta,
195 		struct wcn36xx_hal_config_sta_params *sta_params)
196 {
197 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
198 	struct wcn36xx_sta *sta_priv = NULL;
199 	if (vif->type == NL80211_IFTYPE_ADHOC ||
200 	    vif->type == NL80211_IFTYPE_AP ||
201 	    vif->type == NL80211_IFTYPE_MESH_POINT) {
202 		sta_params->type = 1;
203 		sta_params->sta_index = WCN36XX_HAL_STA_INVALID_IDX;
204 	} else {
205 		sta_params->type = 0;
206 		sta_params->sta_index = vif_priv->self_sta_index;
207 	}
208 
209 	sta_params->listen_interval = WCN36XX_LISTEN_INTERVAL(wcn);
210 
211 	/*
212 	 * In STA mode ieee80211_sta contains bssid and ieee80211_vif
213 	 * contains our mac address. In  AP mode we are bssid so vif
214 	 * contains bssid and ieee80211_sta contains mac.
215 	 */
216 	if (NL80211_IFTYPE_STATION == vif->type)
217 		memcpy(&sta_params->mac, vif->addr, ETH_ALEN);
218 	else
219 		memcpy(&sta_params->bssid, vif->addr, ETH_ALEN);
220 
221 	sta_params->encrypt_type = vif_priv->encrypt_type;
222 	sta_params->short_preamble_supported = true;
223 
224 	sta_params->rifs_mode = 0;
225 	sta_params->rmf = 0;
226 	sta_params->action = 0;
227 	sta_params->uapsd = 0;
228 	sta_params->mimo_ps = WCN36XX_HAL_HT_MIMO_PS_STATIC;
229 	sta_params->max_ampdu_duration = 0;
230 	sta_params->bssid_index = vif_priv->bss_index;
231 	sta_params->p2p = 0;
232 
233 	if (sta) {
234 		sta_priv = wcn36xx_sta_to_priv(sta);
235 		if (NL80211_IFTYPE_STATION == vif->type)
236 			memcpy(&sta_params->bssid, sta->addr, ETH_ALEN);
237 		else
238 			memcpy(&sta_params->mac, sta->addr, ETH_ALEN);
239 		sta_params->wmm_enabled = sta->wme;
240 		sta_params->max_sp_len = sta->max_sp;
241 		sta_params->aid = sta_priv->aid;
242 		wcn36xx_smd_set_sta_ht_params(sta, sta_params);
243 		memcpy(&sta_params->supported_rates, &sta_priv->supported_rates,
244 			sizeof(sta_priv->supported_rates));
245 	} else {
246 		wcn36xx_set_default_rates(&sta_params->supported_rates);
247 		wcn36xx_smd_set_sta_default_ht_params(sta_params);
248 	}
249 }
250 
251 static int wcn36xx_smd_send_and_wait(struct wcn36xx *wcn, size_t len)
252 {
253 	int ret = 0;
254 	unsigned long start;
255 	wcn36xx_dbg_dump(WCN36XX_DBG_SMD_DUMP, "HAL >>> ", wcn->hal_buf, len);
256 
257 	init_completion(&wcn->hal_rsp_compl);
258 	start = jiffies;
259 	ret = rpmsg_send(wcn->smd_channel, wcn->hal_buf, len);
260 	if (ret) {
261 		wcn36xx_err("HAL TX failed\n");
262 		goto out;
263 	}
264 	if (wait_for_completion_timeout(&wcn->hal_rsp_compl,
265 		msecs_to_jiffies(HAL_MSG_TIMEOUT)) <= 0) {
266 		wcn36xx_err("Timeout! No SMD response in %dms\n",
267 			    HAL_MSG_TIMEOUT);
268 		ret = -ETIME;
269 		goto out;
270 	}
271 	wcn36xx_dbg(WCN36XX_DBG_SMD, "SMD command completed in %dms",
272 		    jiffies_to_msecs(jiffies - start));
273 out:
274 	return ret;
275 }
276 
277 static void init_hal_msg(struct wcn36xx_hal_msg_header *hdr,
278 			 enum wcn36xx_hal_host_msg_type msg_type,
279 			 size_t msg_size)
280 {
281 	memset(hdr, 0, msg_size + sizeof(*hdr));
282 	hdr->msg_type = msg_type;
283 	hdr->msg_version = WCN36XX_HAL_MSG_VERSION0;
284 	hdr->len = msg_size + sizeof(*hdr);
285 }
286 
287 #define INIT_HAL_MSG(msg_body, type) \
288 	do {								\
289 		memset(&msg_body, 0, sizeof(msg_body));			\
290 		msg_body.header.msg_type = type;			\
291 		msg_body.header.msg_version = WCN36XX_HAL_MSG_VERSION0; \
292 		msg_body.header.len = sizeof(msg_body);			\
293 	} while (0)							\
294 
295 #define PREPARE_HAL_BUF(send_buf, msg_body) \
296 	do {							\
297 		memset(send_buf, 0, msg_body.header.len);	\
298 		memcpy(send_buf, &msg_body, sizeof(msg_body));	\
299 	} while (0)						\
300 
301 static int wcn36xx_smd_rsp_status_check(void *buf, size_t len)
302 {
303 	struct wcn36xx_fw_msg_status_rsp *rsp;
304 
305 	if (len < sizeof(struct wcn36xx_hal_msg_header) +
306 	    sizeof(struct wcn36xx_fw_msg_status_rsp))
307 		return -EIO;
308 
309 	rsp = (struct wcn36xx_fw_msg_status_rsp *)
310 		(buf + sizeof(struct wcn36xx_hal_msg_header));
311 
312 	if (WCN36XX_FW_MSG_RESULT_SUCCESS != rsp->status)
313 		return rsp->status;
314 
315 	return 0;
316 }
317 
318 int wcn36xx_smd_load_nv(struct wcn36xx *wcn)
319 {
320 	struct nv_data *nv_d;
321 	struct wcn36xx_hal_nv_img_download_req_msg msg_body;
322 	int fw_bytes_left;
323 	int ret;
324 	u16 fm_offset = 0;
325 
326 	if (!wcn->nv) {
327 		ret = request_firmware(&wcn->nv, WLAN_NV_FILE, wcn->dev);
328 		if (ret) {
329 			wcn36xx_err("Failed to load nv file %s: %d\n",
330 				      WLAN_NV_FILE, ret);
331 			goto out;
332 		}
333 	}
334 
335 	nv_d = (struct nv_data *)wcn->nv->data;
336 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_DOWNLOAD_NV_REQ);
337 
338 	msg_body.header.len += WCN36XX_NV_FRAGMENT_SIZE;
339 
340 	msg_body.frag_number = 0;
341 	/* hal_buf must be protected with  mutex */
342 	mutex_lock(&wcn->hal_mutex);
343 
344 	do {
345 		fw_bytes_left = wcn->nv->size - fm_offset - 4;
346 		if (fw_bytes_left > WCN36XX_NV_FRAGMENT_SIZE) {
347 			msg_body.last_fragment = 0;
348 			msg_body.nv_img_buffer_size = WCN36XX_NV_FRAGMENT_SIZE;
349 		} else {
350 			msg_body.last_fragment = 1;
351 			msg_body.nv_img_buffer_size = fw_bytes_left;
352 
353 			/* Do not forget update general message len */
354 			msg_body.header.len = sizeof(msg_body) + fw_bytes_left;
355 
356 		}
357 
358 		/* Add load NV request message header */
359 		memcpy(wcn->hal_buf, &msg_body,	sizeof(msg_body));
360 
361 		/* Add NV body itself */
362 		memcpy(wcn->hal_buf + sizeof(msg_body),
363 		       &nv_d->table + fm_offset,
364 		       msg_body.nv_img_buffer_size);
365 
366 		ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
367 		if (ret)
368 			goto out_unlock;
369 		ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf,
370 						   wcn->hal_rsp_len);
371 		if (ret) {
372 			wcn36xx_err("hal_load_nv response failed err=%d\n",
373 				    ret);
374 			goto out_unlock;
375 		}
376 		msg_body.frag_number++;
377 		fm_offset += WCN36XX_NV_FRAGMENT_SIZE;
378 
379 	} while (msg_body.last_fragment != 1);
380 
381 out_unlock:
382 	mutex_unlock(&wcn->hal_mutex);
383 out:	return ret;
384 }
385 
386 static int wcn36xx_smd_start_rsp(struct wcn36xx *wcn, void *buf, size_t len)
387 {
388 	struct wcn36xx_hal_mac_start_rsp_msg *rsp;
389 
390 	if (len < sizeof(*rsp))
391 		return -EIO;
392 
393 	rsp = (struct wcn36xx_hal_mac_start_rsp_msg *)buf;
394 
395 	if (WCN36XX_FW_MSG_RESULT_SUCCESS != rsp->start_rsp_params.status)
396 		return -EIO;
397 
398 	memcpy(wcn->crm_version, rsp->start_rsp_params.crm_version,
399 	       WCN36XX_HAL_VERSION_LENGTH);
400 	memcpy(wcn->wlan_version, rsp->start_rsp_params.wlan_version,
401 	       WCN36XX_HAL_VERSION_LENGTH);
402 
403 	/* null terminate the strings, just in case */
404 	wcn->crm_version[WCN36XX_HAL_VERSION_LENGTH] = '\0';
405 	wcn->wlan_version[WCN36XX_HAL_VERSION_LENGTH] = '\0';
406 
407 	wcn->fw_revision = rsp->start_rsp_params.version.revision;
408 	wcn->fw_version = rsp->start_rsp_params.version.version;
409 	wcn->fw_minor = rsp->start_rsp_params.version.minor;
410 	wcn->fw_major = rsp->start_rsp_params.version.major;
411 
412 	if (wcn->first_boot) {
413 		wcn->first_boot = false;
414 		wcn36xx_info("firmware WLAN version '%s' and CRM version '%s'\n",
415 			     wcn->wlan_version, wcn->crm_version);
416 
417 		wcn36xx_info("firmware API %u.%u.%u.%u, %u stations, %u bssids\n",
418 			     wcn->fw_major, wcn->fw_minor,
419 			     wcn->fw_version, wcn->fw_revision,
420 			     rsp->start_rsp_params.stations,
421 			     rsp->start_rsp_params.bssids);
422 	}
423 	return 0;
424 }
425 
426 int wcn36xx_smd_start(struct wcn36xx *wcn)
427 {
428 	struct wcn36xx_hal_mac_start_req_msg msg_body, *body;
429 	int ret = 0;
430 	int i;
431 	size_t len;
432 
433 	mutex_lock(&wcn->hal_mutex);
434 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_START_REQ);
435 
436 	msg_body.params.type = DRIVER_TYPE_PRODUCTION;
437 	msg_body.params.len = 0;
438 
439 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
440 
441 	body = (struct wcn36xx_hal_mac_start_req_msg *)wcn->hal_buf;
442 	len = body->header.len;
443 
444 	for (i = 0; i < ARRAY_SIZE(wcn36xx_cfg_vals); i++) {
445 		ret = put_cfg_tlv_u32(wcn, &len, wcn36xx_cfg_vals[i].cfg_id,
446 				      wcn36xx_cfg_vals[i].value);
447 		if (ret)
448 			goto out;
449 	}
450 	body->header.len = len;
451 	body->params.len = len - sizeof(*body);
452 
453 	wcn36xx_dbg(WCN36XX_DBG_HAL, "hal start type %d\n",
454 		    msg_body.params.type);
455 
456 	ret = wcn36xx_smd_send_and_wait(wcn, body->header.len);
457 	if (ret) {
458 		wcn36xx_err("Sending hal_start failed\n");
459 		goto out;
460 	}
461 
462 	ret = wcn36xx_smd_start_rsp(wcn, wcn->hal_buf, wcn->hal_rsp_len);
463 	if (ret) {
464 		wcn36xx_err("hal_start response failed err=%d\n", ret);
465 		goto out;
466 	}
467 
468 out:
469 	mutex_unlock(&wcn->hal_mutex);
470 	return ret;
471 }
472 
473 int wcn36xx_smd_stop(struct wcn36xx *wcn)
474 {
475 	struct wcn36xx_hal_mac_stop_req_msg msg_body;
476 	int ret = 0;
477 
478 	mutex_lock(&wcn->hal_mutex);
479 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_STOP_REQ);
480 
481 	msg_body.stop_req_params.reason = HAL_STOP_TYPE_RF_KILL;
482 
483 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
484 
485 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
486 	if (ret) {
487 		wcn36xx_err("Sending hal_stop failed\n");
488 		goto out;
489 	}
490 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
491 	if (ret) {
492 		wcn36xx_err("hal_stop response failed err=%d\n", ret);
493 		goto out;
494 	}
495 out:
496 	mutex_unlock(&wcn->hal_mutex);
497 	return ret;
498 }
499 
500 int wcn36xx_smd_init_scan(struct wcn36xx *wcn, enum wcn36xx_hal_sys_mode mode)
501 {
502 	struct wcn36xx_hal_init_scan_req_msg msg_body;
503 	int ret = 0;
504 
505 	mutex_lock(&wcn->hal_mutex);
506 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_INIT_SCAN_REQ);
507 
508 	msg_body.mode = mode;
509 
510 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
511 
512 	wcn36xx_dbg(WCN36XX_DBG_HAL, "hal init scan mode %d\n", msg_body.mode);
513 
514 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
515 	if (ret) {
516 		wcn36xx_err("Sending hal_init_scan failed\n");
517 		goto out;
518 	}
519 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
520 	if (ret) {
521 		wcn36xx_err("hal_init_scan response failed err=%d\n", ret);
522 		goto out;
523 	}
524 out:
525 	mutex_unlock(&wcn->hal_mutex);
526 	return ret;
527 }
528 
529 int wcn36xx_smd_start_scan(struct wcn36xx *wcn, u8 scan_channel)
530 {
531 	struct wcn36xx_hal_start_scan_req_msg msg_body;
532 	int ret = 0;
533 
534 	mutex_lock(&wcn->hal_mutex);
535 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_START_SCAN_REQ);
536 
537 	msg_body.scan_channel = scan_channel;
538 
539 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
540 
541 	wcn36xx_dbg(WCN36XX_DBG_HAL, "hal start scan channel %d\n",
542 		    msg_body.scan_channel);
543 
544 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
545 	if (ret) {
546 		wcn36xx_err("Sending hal_start_scan failed\n");
547 		goto out;
548 	}
549 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
550 	if (ret) {
551 		wcn36xx_err("hal_start_scan response failed err=%d\n", ret);
552 		goto out;
553 	}
554 out:
555 	mutex_unlock(&wcn->hal_mutex);
556 	return ret;
557 }
558 
559 int wcn36xx_smd_end_scan(struct wcn36xx *wcn, u8 scan_channel)
560 {
561 	struct wcn36xx_hal_end_scan_req_msg msg_body;
562 	int ret = 0;
563 
564 	mutex_lock(&wcn->hal_mutex);
565 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_END_SCAN_REQ);
566 
567 	msg_body.scan_channel = scan_channel;
568 
569 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
570 
571 	wcn36xx_dbg(WCN36XX_DBG_HAL, "hal end scan channel %d\n",
572 		    msg_body.scan_channel);
573 
574 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
575 	if (ret) {
576 		wcn36xx_err("Sending hal_end_scan failed\n");
577 		goto out;
578 	}
579 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
580 	if (ret) {
581 		wcn36xx_err("hal_end_scan response failed err=%d\n", ret);
582 		goto out;
583 	}
584 out:
585 	mutex_unlock(&wcn->hal_mutex);
586 	return ret;
587 }
588 
589 int wcn36xx_smd_finish_scan(struct wcn36xx *wcn,
590 			    enum wcn36xx_hal_sys_mode mode)
591 {
592 	struct wcn36xx_hal_finish_scan_req_msg msg_body;
593 	int ret = 0;
594 
595 	mutex_lock(&wcn->hal_mutex);
596 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_FINISH_SCAN_REQ);
597 
598 	msg_body.mode = mode;
599 
600 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
601 
602 	wcn36xx_dbg(WCN36XX_DBG_HAL, "hal finish scan mode %d\n",
603 		    msg_body.mode);
604 
605 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
606 	if (ret) {
607 		wcn36xx_err("Sending hal_finish_scan failed\n");
608 		goto out;
609 	}
610 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
611 	if (ret) {
612 		wcn36xx_err("hal_finish_scan response failed err=%d\n", ret);
613 		goto out;
614 	}
615 out:
616 	mutex_unlock(&wcn->hal_mutex);
617 	return ret;
618 }
619 
620 int wcn36xx_smd_start_hw_scan(struct wcn36xx *wcn, struct ieee80211_vif *vif,
621 			      struct cfg80211_scan_request *req)
622 {
623 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
624 	struct wcn36xx_hal_start_scan_offload_req_msg msg_body;
625 	int ret, i;
626 
627 	if (req->ie_len > WCN36XX_MAX_SCAN_IE_LEN)
628 		return -EINVAL;
629 
630 	mutex_lock(&wcn->hal_mutex);
631 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_START_SCAN_OFFLOAD_REQ);
632 
633 	msg_body.scan_type = WCN36XX_HAL_SCAN_TYPE_ACTIVE;
634 	msg_body.min_ch_time = 30;
635 	msg_body.max_ch_time = 100;
636 	msg_body.scan_hidden = 1;
637 	memcpy(msg_body.mac, vif->addr, ETH_ALEN);
638 	msg_body.bss_type = vif_priv->bss_type;
639 	msg_body.p2p_search = vif->p2p;
640 
641 	msg_body.num_ssid = min_t(u8, req->n_ssids, ARRAY_SIZE(msg_body.ssids));
642 	for (i = 0; i < msg_body.num_ssid; i++) {
643 		msg_body.ssids[i].length = min_t(u8, req->ssids[i].ssid_len,
644 						sizeof(msg_body.ssids[i].ssid));
645 		memcpy(msg_body.ssids[i].ssid, req->ssids[i].ssid,
646 		       msg_body.ssids[i].length);
647 	}
648 
649 	msg_body.num_channel = min_t(u8, req->n_channels,
650 				     sizeof(msg_body.channels));
651 	for (i = 0; i < msg_body.num_channel; i++)
652 		msg_body.channels[i] = req->channels[i]->hw_value;
653 
654 	msg_body.header.len -= WCN36XX_MAX_SCAN_IE_LEN;
655 
656 	if (req->ie_len > 0) {
657 		msg_body.ie_len = req->ie_len;
658 		msg_body.header.len += req->ie_len;
659 		memcpy(msg_body.ie, req->ie, req->ie_len);
660 	}
661 
662 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
663 
664 	wcn36xx_dbg(WCN36XX_DBG_HAL,
665 		    "hal start hw-scan (channels: %u; ssids: %u; p2p: %s)\n",
666 		    msg_body.num_channel, msg_body.num_ssid,
667 		    msg_body.p2p_search ? "yes" : "no");
668 
669 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
670 	if (ret) {
671 		wcn36xx_err("Sending hal_start_scan_offload failed\n");
672 		goto out;
673 	}
674 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
675 	if (ret) {
676 		wcn36xx_err("hal_start_scan_offload response failed err=%d\n",
677 			    ret);
678 		goto out;
679 	}
680 out:
681 	mutex_unlock(&wcn->hal_mutex);
682 	return ret;
683 }
684 
685 int wcn36xx_smd_stop_hw_scan(struct wcn36xx *wcn)
686 {
687 	struct wcn36xx_hal_stop_scan_offload_req_msg msg_body;
688 	int ret;
689 
690 	mutex_lock(&wcn->hal_mutex);
691 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_STOP_SCAN_OFFLOAD_REQ);
692 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
693 
694 	wcn36xx_dbg(WCN36XX_DBG_HAL, "hal stop hw-scan\n");
695 
696 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
697 	if (ret) {
698 		wcn36xx_err("Sending hal_stop_scan_offload failed\n");
699 		goto out;
700 	}
701 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
702 	if (ret) {
703 		wcn36xx_err("hal_stop_scan_offload response failed err=%d\n",
704 			    ret);
705 		goto out;
706 	}
707 out:
708 	mutex_unlock(&wcn->hal_mutex);
709 	return ret;
710 }
711 
712 static int wcn36xx_smd_switch_channel_rsp(void *buf, size_t len)
713 {
714 	struct wcn36xx_hal_switch_channel_rsp_msg *rsp;
715 	int ret = 0;
716 
717 	ret = wcn36xx_smd_rsp_status_check(buf, len);
718 	if (ret)
719 		return ret;
720 	rsp = (struct wcn36xx_hal_switch_channel_rsp_msg *)buf;
721 	wcn36xx_dbg(WCN36XX_DBG_HAL, "channel switched to: %d, status: %d\n",
722 		    rsp->channel_number, rsp->status);
723 	return ret;
724 }
725 
726 int wcn36xx_smd_switch_channel(struct wcn36xx *wcn,
727 			       struct ieee80211_vif *vif, int ch)
728 {
729 	struct wcn36xx_hal_switch_channel_req_msg msg_body;
730 	int ret = 0;
731 
732 	mutex_lock(&wcn->hal_mutex);
733 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_CH_SWITCH_REQ);
734 
735 	msg_body.channel_number = (u8)ch;
736 	msg_body.tx_mgmt_power = 0xbf;
737 	msg_body.max_tx_power = 0xbf;
738 	memcpy(msg_body.self_sta_mac_addr, vif->addr, ETH_ALEN);
739 
740 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
741 
742 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
743 	if (ret) {
744 		wcn36xx_err("Sending hal_switch_channel failed\n");
745 		goto out;
746 	}
747 	ret = wcn36xx_smd_switch_channel_rsp(wcn->hal_buf, wcn->hal_rsp_len);
748 	if (ret) {
749 		wcn36xx_err("hal_switch_channel response failed err=%d\n", ret);
750 		goto out;
751 	}
752 out:
753 	mutex_unlock(&wcn->hal_mutex);
754 	return ret;
755 }
756 
757 static int wcn36xx_smd_update_scan_params_rsp(void *buf, size_t len)
758 {
759 	struct wcn36xx_hal_update_scan_params_resp *rsp;
760 
761 	rsp = (struct wcn36xx_hal_update_scan_params_resp *)buf;
762 
763 	/* Remove the PNO version bit */
764 	rsp->status &= (~(WCN36XX_FW_MSG_PNO_VERSION_MASK));
765 
766 	if (WCN36XX_FW_MSG_RESULT_SUCCESS != rsp->status) {
767 		wcn36xx_warn("error response from update scan\n");
768 		return rsp->status;
769 	}
770 
771 	return 0;
772 }
773 
774 int wcn36xx_smd_update_scan_params(struct wcn36xx *wcn,
775 				   u8 *channels, size_t channel_count)
776 {
777 	struct wcn36xx_hal_update_scan_params_req_ex msg_body;
778 	int ret = 0;
779 
780 	mutex_lock(&wcn->hal_mutex);
781 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_UPDATE_SCAN_PARAM_REQ);
782 
783 	msg_body.dot11d_enabled	= false;
784 	msg_body.dot11d_resolved = true;
785 
786 	msg_body.channel_count = channel_count;
787 	memcpy(msg_body.channels, channels, channel_count);
788 	msg_body.active_min_ch_time = 60;
789 	msg_body.active_max_ch_time = 120;
790 	msg_body.passive_min_ch_time = 60;
791 	msg_body.passive_max_ch_time = 110;
792 	msg_body.state = PHY_SINGLE_CHANNEL_CENTERED;
793 
794 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
795 
796 	wcn36xx_dbg(WCN36XX_DBG_HAL,
797 		    "hal update scan params channel_count %d\n",
798 		    msg_body.channel_count);
799 
800 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
801 	if (ret) {
802 		wcn36xx_err("Sending hal_update_scan_params failed\n");
803 		goto out;
804 	}
805 	ret = wcn36xx_smd_update_scan_params_rsp(wcn->hal_buf,
806 						 wcn->hal_rsp_len);
807 	if (ret) {
808 		wcn36xx_err("hal_update_scan_params response failed err=%d\n",
809 			    ret);
810 		goto out;
811 	}
812 out:
813 	mutex_unlock(&wcn->hal_mutex);
814 	return ret;
815 }
816 
817 static int wcn36xx_smd_add_sta_self_rsp(struct wcn36xx *wcn,
818 					struct ieee80211_vif *vif,
819 					void *buf,
820 					size_t len)
821 {
822 	struct wcn36xx_hal_add_sta_self_rsp_msg *rsp;
823 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
824 
825 	if (len < sizeof(*rsp))
826 		return -EINVAL;
827 
828 	rsp = (struct wcn36xx_hal_add_sta_self_rsp_msg *)buf;
829 
830 	if (rsp->status != WCN36XX_FW_MSG_RESULT_SUCCESS) {
831 		wcn36xx_warn("hal add sta self failure: %d\n",
832 			     rsp->status);
833 		return rsp->status;
834 	}
835 
836 	wcn36xx_dbg(WCN36XX_DBG_HAL,
837 		    "hal add sta self status %d self_sta_index %d dpu_index %d\n",
838 		    rsp->status, rsp->self_sta_index, rsp->dpu_index);
839 
840 	vif_priv->self_sta_index = rsp->self_sta_index;
841 	vif_priv->self_dpu_desc_index = rsp->dpu_index;
842 
843 	return 0;
844 }
845 
846 int wcn36xx_smd_add_sta_self(struct wcn36xx *wcn, struct ieee80211_vif *vif)
847 {
848 	struct wcn36xx_hal_add_sta_self_req msg_body;
849 	int ret = 0;
850 
851 	mutex_lock(&wcn->hal_mutex);
852 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_ADD_STA_SELF_REQ);
853 
854 	memcpy(&msg_body.self_addr, vif->addr, ETH_ALEN);
855 
856 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
857 
858 	wcn36xx_dbg(WCN36XX_DBG_HAL,
859 		    "hal add sta self self_addr %pM status %d\n",
860 		    msg_body.self_addr, msg_body.status);
861 
862 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
863 	if (ret) {
864 		wcn36xx_err("Sending hal_add_sta_self failed\n");
865 		goto out;
866 	}
867 	ret = wcn36xx_smd_add_sta_self_rsp(wcn,
868 					   vif,
869 					   wcn->hal_buf,
870 					   wcn->hal_rsp_len);
871 	if (ret) {
872 		wcn36xx_err("hal_add_sta_self response failed err=%d\n", ret);
873 		goto out;
874 	}
875 out:
876 	mutex_unlock(&wcn->hal_mutex);
877 	return ret;
878 }
879 
880 int wcn36xx_smd_delete_sta_self(struct wcn36xx *wcn, u8 *addr)
881 {
882 	struct wcn36xx_hal_del_sta_self_req_msg msg_body;
883 	int ret = 0;
884 
885 	mutex_lock(&wcn->hal_mutex);
886 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_DEL_STA_SELF_REQ);
887 
888 	memcpy(&msg_body.self_addr, addr, ETH_ALEN);
889 
890 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
891 
892 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
893 	if (ret) {
894 		wcn36xx_err("Sending hal_delete_sta_self failed\n");
895 		goto out;
896 	}
897 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
898 	if (ret) {
899 		wcn36xx_err("hal_delete_sta_self response failed err=%d\n",
900 			    ret);
901 		goto out;
902 	}
903 out:
904 	mutex_unlock(&wcn->hal_mutex);
905 	return ret;
906 }
907 
908 int wcn36xx_smd_delete_sta(struct wcn36xx *wcn, u8 sta_index)
909 {
910 	struct wcn36xx_hal_delete_sta_req_msg msg_body;
911 	int ret = 0;
912 
913 	mutex_lock(&wcn->hal_mutex);
914 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_DELETE_STA_REQ);
915 
916 	msg_body.sta_index = sta_index;
917 
918 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
919 
920 	wcn36xx_dbg(WCN36XX_DBG_HAL,
921 		    "hal delete sta sta_index %d\n",
922 		    msg_body.sta_index);
923 
924 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
925 	if (ret) {
926 		wcn36xx_err("Sending hal_delete_sta failed\n");
927 		goto out;
928 	}
929 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
930 	if (ret) {
931 		wcn36xx_err("hal_delete_sta response failed err=%d\n", ret);
932 		goto out;
933 	}
934 out:
935 	mutex_unlock(&wcn->hal_mutex);
936 	return ret;
937 }
938 
939 static int wcn36xx_smd_join_rsp(void *buf, size_t len)
940 {
941 	struct wcn36xx_hal_join_rsp_msg *rsp;
942 
943 	if (wcn36xx_smd_rsp_status_check(buf, len))
944 		return -EIO;
945 
946 	rsp = (struct wcn36xx_hal_join_rsp_msg *)buf;
947 
948 	wcn36xx_dbg(WCN36XX_DBG_HAL,
949 		    "hal rsp join status %d tx_mgmt_power %d\n",
950 		    rsp->status, rsp->tx_mgmt_power);
951 
952 	return 0;
953 }
954 
955 int wcn36xx_smd_join(struct wcn36xx *wcn, const u8 *bssid, u8 *vif, u8 ch)
956 {
957 	struct wcn36xx_hal_join_req_msg msg_body;
958 	int ret = 0;
959 
960 	mutex_lock(&wcn->hal_mutex);
961 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_JOIN_REQ);
962 
963 	memcpy(&msg_body.bssid, bssid, ETH_ALEN);
964 	memcpy(&msg_body.self_sta_mac_addr, vif, ETH_ALEN);
965 	msg_body.channel = ch;
966 
967 	if (conf_is_ht40_minus(&wcn->hw->conf))
968 		msg_body.secondary_channel_offset =
969 			PHY_DOUBLE_CHANNEL_HIGH_PRIMARY;
970 	else if (conf_is_ht40_plus(&wcn->hw->conf))
971 		msg_body.secondary_channel_offset =
972 			PHY_DOUBLE_CHANNEL_LOW_PRIMARY;
973 	else
974 		msg_body.secondary_channel_offset =
975 			PHY_SINGLE_CHANNEL_CENTERED;
976 
977 	msg_body.link_state = WCN36XX_HAL_LINK_PREASSOC_STATE;
978 
979 	msg_body.max_tx_power = 0xbf;
980 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
981 
982 	wcn36xx_dbg(WCN36XX_DBG_HAL,
983 		    "hal join req bssid %pM self_sta_mac_addr %pM channel %d link_state %d\n",
984 		    msg_body.bssid, msg_body.self_sta_mac_addr,
985 		    msg_body.channel, msg_body.link_state);
986 
987 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
988 	if (ret) {
989 		wcn36xx_err("Sending hal_join failed\n");
990 		goto out;
991 	}
992 	ret = wcn36xx_smd_join_rsp(wcn->hal_buf, wcn->hal_rsp_len);
993 	if (ret) {
994 		wcn36xx_err("hal_join response failed err=%d\n", ret);
995 		goto out;
996 	}
997 out:
998 	mutex_unlock(&wcn->hal_mutex);
999 	return ret;
1000 }
1001 
1002 int wcn36xx_smd_set_link_st(struct wcn36xx *wcn, const u8 *bssid,
1003 			    const u8 *sta_mac,
1004 			    enum wcn36xx_hal_link_state state)
1005 {
1006 	struct wcn36xx_hal_set_link_state_req_msg msg_body;
1007 	int ret = 0;
1008 
1009 	mutex_lock(&wcn->hal_mutex);
1010 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_SET_LINK_ST_REQ);
1011 
1012 	memcpy(&msg_body.bssid, bssid, ETH_ALEN);
1013 	memcpy(&msg_body.self_mac_addr, sta_mac, ETH_ALEN);
1014 	msg_body.state = state;
1015 
1016 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1017 
1018 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1019 		    "hal set link state bssid %pM self_mac_addr %pM state %d\n",
1020 		    msg_body.bssid, msg_body.self_mac_addr, msg_body.state);
1021 
1022 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1023 	if (ret) {
1024 		wcn36xx_err("Sending hal_set_link_st failed\n");
1025 		goto out;
1026 	}
1027 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1028 	if (ret) {
1029 		wcn36xx_err("hal_set_link_st response failed err=%d\n", ret);
1030 		goto out;
1031 	}
1032 out:
1033 	mutex_unlock(&wcn->hal_mutex);
1034 	return ret;
1035 }
1036 
1037 static void wcn36xx_smd_convert_sta_to_v1(struct wcn36xx *wcn,
1038 			const struct wcn36xx_hal_config_sta_params *orig,
1039 			struct wcn36xx_hal_config_sta_params_v1 *v1)
1040 {
1041 	/* convert orig to v1 format */
1042 	memcpy(&v1->bssid, orig->bssid, ETH_ALEN);
1043 	memcpy(&v1->mac, orig->mac, ETH_ALEN);
1044 	v1->aid = orig->aid;
1045 	v1->type = orig->type;
1046 	v1->short_preamble_supported = orig->short_preamble_supported;
1047 	v1->listen_interval = orig->listen_interval;
1048 	v1->wmm_enabled = orig->wmm_enabled;
1049 	v1->ht_capable = orig->ht_capable;
1050 	v1->tx_channel_width_set = orig->tx_channel_width_set;
1051 	v1->rifs_mode = orig->rifs_mode;
1052 	v1->lsig_txop_protection = orig->lsig_txop_protection;
1053 	v1->max_ampdu_size = orig->max_ampdu_size;
1054 	v1->max_ampdu_density = orig->max_ampdu_density;
1055 	v1->sgi_40mhz = orig->sgi_40mhz;
1056 	v1->sgi_20Mhz = orig->sgi_20Mhz;
1057 	v1->rmf = orig->rmf;
1058 	v1->encrypt_type = orig->encrypt_type;
1059 	v1->action = orig->action;
1060 	v1->uapsd = orig->uapsd;
1061 	v1->max_sp_len = orig->max_sp_len;
1062 	v1->green_field_capable = orig->green_field_capable;
1063 	v1->mimo_ps = orig->mimo_ps;
1064 	v1->delayed_ba_support = orig->delayed_ba_support;
1065 	v1->max_ampdu_duration = orig->max_ampdu_duration;
1066 	v1->dsss_cck_mode_40mhz = orig->dsss_cck_mode_40mhz;
1067 	memcpy(&v1->supported_rates, &orig->supported_rates,
1068 	       sizeof(orig->supported_rates));
1069 	v1->sta_index = orig->sta_index;
1070 	v1->bssid_index = orig->bssid_index;
1071 	v1->p2p = orig->p2p;
1072 }
1073 
1074 static int wcn36xx_smd_config_sta_rsp(struct wcn36xx *wcn,
1075 				      struct ieee80211_sta *sta,
1076 				      void *buf,
1077 				      size_t len)
1078 {
1079 	struct wcn36xx_hal_config_sta_rsp_msg *rsp;
1080 	struct config_sta_rsp_params *params;
1081 	struct wcn36xx_sta *sta_priv = wcn36xx_sta_to_priv(sta);
1082 
1083 	if (len < sizeof(*rsp))
1084 		return -EINVAL;
1085 
1086 	rsp = (struct wcn36xx_hal_config_sta_rsp_msg *)buf;
1087 	params = &rsp->params;
1088 
1089 	if (params->status != WCN36XX_FW_MSG_RESULT_SUCCESS) {
1090 		wcn36xx_warn("hal config sta response failure: %d\n",
1091 			     params->status);
1092 		return -EIO;
1093 	}
1094 
1095 	sta_priv->sta_index = params->sta_index;
1096 	sta_priv->dpu_desc_index = params->dpu_index;
1097 	sta_priv->ucast_dpu_sign = params->uc_ucast_sig;
1098 
1099 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1100 		    "hal config sta rsp status %d sta_index %d bssid_index %d uc_ucast_sig %d p2p %d\n",
1101 		    params->status, params->sta_index, params->bssid_index,
1102 		    params->uc_ucast_sig, params->p2p);
1103 
1104 	return 0;
1105 }
1106 
1107 static int wcn36xx_smd_config_sta_v1(struct wcn36xx *wcn,
1108 		     const struct wcn36xx_hal_config_sta_req_msg *orig)
1109 {
1110 	struct wcn36xx_hal_config_sta_req_msg_v1 msg_body;
1111 	struct wcn36xx_hal_config_sta_params_v1 *sta = &msg_body.sta_params;
1112 
1113 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_CONFIG_STA_REQ);
1114 
1115 	wcn36xx_smd_convert_sta_to_v1(wcn, &orig->sta_params,
1116 				      &msg_body.sta_params);
1117 
1118 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1119 
1120 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1121 		    "hal config sta v1 action %d sta_index %d bssid_index %d bssid %pM type %d mac %pM aid %d\n",
1122 		    sta->action, sta->sta_index, sta->bssid_index,
1123 		    sta->bssid, sta->type, sta->mac, sta->aid);
1124 
1125 	return wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1126 }
1127 
1128 int wcn36xx_smd_config_sta(struct wcn36xx *wcn, struct ieee80211_vif *vif,
1129 			   struct ieee80211_sta *sta)
1130 {
1131 	struct wcn36xx_hal_config_sta_req_msg msg;
1132 	struct wcn36xx_hal_config_sta_params *sta_params;
1133 	int ret = 0;
1134 
1135 	mutex_lock(&wcn->hal_mutex);
1136 	INIT_HAL_MSG(msg, WCN36XX_HAL_CONFIG_STA_REQ);
1137 
1138 	sta_params = &msg.sta_params;
1139 
1140 	wcn36xx_smd_set_sta_params(wcn, vif, sta, sta_params);
1141 
1142 	if (!wcn36xx_is_fw_version(wcn, 1, 2, 2, 24)) {
1143 		ret = wcn36xx_smd_config_sta_v1(wcn, &msg);
1144 	} else {
1145 		PREPARE_HAL_BUF(wcn->hal_buf, msg);
1146 
1147 		wcn36xx_dbg(WCN36XX_DBG_HAL,
1148 			    "hal config sta action %d sta_index %d bssid_index %d bssid %pM type %d mac %pM aid %d\n",
1149 			    sta_params->action, sta_params->sta_index,
1150 			    sta_params->bssid_index, sta_params->bssid,
1151 			    sta_params->type, sta_params->mac, sta_params->aid);
1152 
1153 		ret = wcn36xx_smd_send_and_wait(wcn, msg.header.len);
1154 	}
1155 	if (ret) {
1156 		wcn36xx_err("Sending hal_config_sta failed\n");
1157 		goto out;
1158 	}
1159 	ret = wcn36xx_smd_config_sta_rsp(wcn,
1160 					 sta,
1161 					 wcn->hal_buf,
1162 					 wcn->hal_rsp_len);
1163 	if (ret) {
1164 		wcn36xx_err("hal_config_sta response failed err=%d\n", ret);
1165 		goto out;
1166 	}
1167 out:
1168 	mutex_unlock(&wcn->hal_mutex);
1169 	return ret;
1170 }
1171 
1172 static int wcn36xx_smd_config_bss_v1(struct wcn36xx *wcn,
1173 			const struct wcn36xx_hal_config_bss_req_msg *orig)
1174 {
1175 	struct wcn36xx_hal_config_bss_req_msg_v1 msg_body;
1176 	struct wcn36xx_hal_config_bss_params_v1 *bss = &msg_body.bss_params;
1177 	struct wcn36xx_hal_config_sta_params_v1 *sta = &bss->sta;
1178 
1179 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_CONFIG_BSS_REQ);
1180 
1181 	/* convert orig to v1 */
1182 	memcpy(&msg_body.bss_params.bssid,
1183 	       &orig->bss_params.bssid, ETH_ALEN);
1184 	memcpy(&msg_body.bss_params.self_mac_addr,
1185 	       &orig->bss_params.self_mac_addr, ETH_ALEN);
1186 
1187 	msg_body.bss_params.bss_type = orig->bss_params.bss_type;
1188 	msg_body.bss_params.oper_mode = orig->bss_params.oper_mode;
1189 	msg_body.bss_params.nw_type = orig->bss_params.nw_type;
1190 
1191 	msg_body.bss_params.short_slot_time_supported =
1192 		orig->bss_params.short_slot_time_supported;
1193 	msg_body.bss_params.lla_coexist = orig->bss_params.lla_coexist;
1194 	msg_body.bss_params.llb_coexist = orig->bss_params.llb_coexist;
1195 	msg_body.bss_params.llg_coexist = orig->bss_params.llg_coexist;
1196 	msg_body.bss_params.ht20_coexist = orig->bss_params.ht20_coexist;
1197 	msg_body.bss_params.lln_non_gf_coexist =
1198 		orig->bss_params.lln_non_gf_coexist;
1199 
1200 	msg_body.bss_params.lsig_tx_op_protection_full_support =
1201 		orig->bss_params.lsig_tx_op_protection_full_support;
1202 	msg_body.bss_params.rifs_mode = orig->bss_params.rifs_mode;
1203 	msg_body.bss_params.beacon_interval = orig->bss_params.beacon_interval;
1204 	msg_body.bss_params.dtim_period = orig->bss_params.dtim_period;
1205 	msg_body.bss_params.tx_channel_width_set =
1206 		orig->bss_params.tx_channel_width_set;
1207 	msg_body.bss_params.oper_channel = orig->bss_params.oper_channel;
1208 	msg_body.bss_params.ext_channel = orig->bss_params.ext_channel;
1209 
1210 	msg_body.bss_params.reserved = orig->bss_params.reserved;
1211 
1212 	memcpy(&msg_body.bss_params.ssid,
1213 	       &orig->bss_params.ssid,
1214 	       sizeof(orig->bss_params.ssid));
1215 
1216 	msg_body.bss_params.action = orig->bss_params.action;
1217 	msg_body.bss_params.rateset = orig->bss_params.rateset;
1218 	msg_body.bss_params.ht = orig->bss_params.ht;
1219 	msg_body.bss_params.obss_prot_enabled =
1220 		orig->bss_params.obss_prot_enabled;
1221 	msg_body.bss_params.rmf = orig->bss_params.rmf;
1222 	msg_body.bss_params.ht_oper_mode = orig->bss_params.ht_oper_mode;
1223 	msg_body.bss_params.dual_cts_protection =
1224 		orig->bss_params.dual_cts_protection;
1225 
1226 	msg_body.bss_params.max_probe_resp_retry_limit =
1227 		orig->bss_params.max_probe_resp_retry_limit;
1228 	msg_body.bss_params.hidden_ssid = orig->bss_params.hidden_ssid;
1229 	msg_body.bss_params.proxy_probe_resp =
1230 		orig->bss_params.proxy_probe_resp;
1231 	msg_body.bss_params.edca_params_valid =
1232 		orig->bss_params.edca_params_valid;
1233 
1234 	memcpy(&msg_body.bss_params.acbe,
1235 	       &orig->bss_params.acbe,
1236 	       sizeof(orig->bss_params.acbe));
1237 	memcpy(&msg_body.bss_params.acbk,
1238 	       &orig->bss_params.acbk,
1239 	       sizeof(orig->bss_params.acbk));
1240 	memcpy(&msg_body.bss_params.acvi,
1241 	       &orig->bss_params.acvi,
1242 	       sizeof(orig->bss_params.acvi));
1243 	memcpy(&msg_body.bss_params.acvo,
1244 	       &orig->bss_params.acvo,
1245 	       sizeof(orig->bss_params.acvo));
1246 
1247 	msg_body.bss_params.ext_set_sta_key_param_valid =
1248 		orig->bss_params.ext_set_sta_key_param_valid;
1249 
1250 	memcpy(&msg_body.bss_params.ext_set_sta_key_param,
1251 	       &orig->bss_params.ext_set_sta_key_param,
1252 	       sizeof(orig->bss_params.acvo));
1253 
1254 	msg_body.bss_params.wcn36xx_hal_persona =
1255 		orig->bss_params.wcn36xx_hal_persona;
1256 	msg_body.bss_params.spectrum_mgt_enable =
1257 		orig->bss_params.spectrum_mgt_enable;
1258 	msg_body.bss_params.tx_mgmt_power = orig->bss_params.tx_mgmt_power;
1259 	msg_body.bss_params.max_tx_power = orig->bss_params.max_tx_power;
1260 
1261 	wcn36xx_smd_convert_sta_to_v1(wcn, &orig->bss_params.sta,
1262 				      &msg_body.bss_params.sta);
1263 
1264 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1265 
1266 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1267 		    "hal config bss v1 bssid %pM self_mac_addr %pM bss_type %d oper_mode %d nw_type %d\n",
1268 		    bss->bssid, bss->self_mac_addr, bss->bss_type,
1269 		    bss->oper_mode, bss->nw_type);
1270 
1271 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1272 		    "- sta bssid %pM action %d sta_index %d bssid_index %d aid %d type %d mac %pM\n",
1273 		    sta->bssid, sta->action, sta->sta_index,
1274 		    sta->bssid_index, sta->aid, sta->type, sta->mac);
1275 
1276 	return wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1277 }
1278 
1279 
1280 static int wcn36xx_smd_config_bss_rsp(struct wcn36xx *wcn,
1281 				      struct ieee80211_vif *vif,
1282 				      struct ieee80211_sta *sta,
1283 				      void *buf,
1284 				      size_t len)
1285 {
1286 	struct wcn36xx_hal_config_bss_rsp_msg *rsp;
1287 	struct wcn36xx_hal_config_bss_rsp_params *params;
1288 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
1289 
1290 	if (len < sizeof(*rsp))
1291 		return -EINVAL;
1292 
1293 	rsp = (struct wcn36xx_hal_config_bss_rsp_msg *)buf;
1294 	params = &rsp->bss_rsp_params;
1295 
1296 	if (params->status != WCN36XX_FW_MSG_RESULT_SUCCESS) {
1297 		wcn36xx_warn("hal config bss response failure: %d\n",
1298 			     params->status);
1299 		return -EIO;
1300 	}
1301 
1302 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1303 		    "hal config bss rsp status %d bss_idx %d dpu_desc_index %d"
1304 		    " sta_idx %d self_idx %d bcast_idx %d mac %pM"
1305 		    " power %d ucast_dpu_signature %d\n",
1306 		    params->status, params->bss_index, params->dpu_desc_index,
1307 		    params->bss_sta_index, params->bss_self_sta_index,
1308 		    params->bss_bcast_sta_idx, params->mac,
1309 		    params->tx_mgmt_power, params->ucast_dpu_signature);
1310 
1311 	vif_priv->bss_index = params->bss_index;
1312 
1313 	if (sta) {
1314 		struct wcn36xx_sta *sta_priv = wcn36xx_sta_to_priv(sta);
1315 		sta_priv->bss_sta_index = params->bss_sta_index;
1316 		sta_priv->bss_dpu_desc_index = params->dpu_desc_index;
1317 	}
1318 
1319 	vif_priv->self_ucast_dpu_sign = params->ucast_dpu_signature;
1320 
1321 	return 0;
1322 }
1323 
1324 int wcn36xx_smd_config_bss(struct wcn36xx *wcn, struct ieee80211_vif *vif,
1325 			   struct ieee80211_sta *sta, const u8 *bssid,
1326 			   bool update)
1327 {
1328 	struct wcn36xx_hal_config_bss_req_msg msg;
1329 	struct wcn36xx_hal_config_bss_params *bss;
1330 	struct wcn36xx_hal_config_sta_params *sta_params;
1331 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
1332 	int ret = 0;
1333 
1334 	mutex_lock(&wcn->hal_mutex);
1335 	INIT_HAL_MSG(msg, WCN36XX_HAL_CONFIG_BSS_REQ);
1336 
1337 	bss = &msg.bss_params;
1338 	sta_params = &bss->sta;
1339 
1340 	WARN_ON(is_zero_ether_addr(bssid));
1341 
1342 	memcpy(&bss->bssid, bssid, ETH_ALEN);
1343 
1344 	memcpy(bss->self_mac_addr, vif->addr, ETH_ALEN);
1345 
1346 	if (vif->type == NL80211_IFTYPE_STATION) {
1347 		bss->bss_type = WCN36XX_HAL_INFRASTRUCTURE_MODE;
1348 
1349 		/* STA */
1350 		bss->oper_mode = 1;
1351 		bss->wcn36xx_hal_persona = WCN36XX_HAL_STA_MODE;
1352 	} else if (vif->type == NL80211_IFTYPE_AP ||
1353 		   vif->type == NL80211_IFTYPE_MESH_POINT) {
1354 		bss->bss_type = WCN36XX_HAL_INFRA_AP_MODE;
1355 
1356 		/* AP */
1357 		bss->oper_mode = 0;
1358 		bss->wcn36xx_hal_persona = WCN36XX_HAL_STA_SAP_MODE;
1359 	} else if (vif->type == NL80211_IFTYPE_ADHOC) {
1360 		bss->bss_type = WCN36XX_HAL_IBSS_MODE;
1361 
1362 		/* STA */
1363 		bss->oper_mode = 1;
1364 	} else {
1365 		wcn36xx_warn("Unknown type for bss config: %d\n", vif->type);
1366 	}
1367 
1368 	if (vif->type == NL80211_IFTYPE_STATION)
1369 		wcn36xx_smd_set_bss_nw_type(wcn, sta, bss);
1370 	else
1371 		bss->nw_type = WCN36XX_HAL_11N_NW_TYPE;
1372 
1373 	bss->short_slot_time_supported = vif->bss_conf.use_short_slot;
1374 	bss->lla_coexist = 0;
1375 	bss->llb_coexist = 0;
1376 	bss->llg_coexist = 0;
1377 	bss->rifs_mode = 0;
1378 	bss->beacon_interval = vif->bss_conf.beacon_int;
1379 	bss->dtim_period = vif_priv->dtim_period;
1380 
1381 	wcn36xx_smd_set_bss_ht_params(vif, sta, bss);
1382 
1383 	bss->oper_channel = WCN36XX_HW_CHANNEL(wcn);
1384 
1385 	if (conf_is_ht40_minus(&wcn->hw->conf))
1386 		bss->ext_channel = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1387 	else if (conf_is_ht40_plus(&wcn->hw->conf))
1388 		bss->ext_channel = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
1389 	else
1390 		bss->ext_channel = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1391 
1392 	bss->reserved = 0;
1393 	wcn36xx_smd_set_sta_params(wcn, vif, sta, sta_params);
1394 
1395 	/* wcn->ssid is only valid in AP and IBSS mode */
1396 	bss->ssid.length = vif_priv->ssid.length;
1397 	memcpy(bss->ssid.ssid, vif_priv->ssid.ssid, vif_priv->ssid.length);
1398 
1399 	bss->obss_prot_enabled = 0;
1400 	bss->rmf = 0;
1401 	bss->max_probe_resp_retry_limit = 0;
1402 	bss->hidden_ssid = vif->bss_conf.hidden_ssid;
1403 	bss->proxy_probe_resp = 0;
1404 	bss->edca_params_valid = 0;
1405 
1406 	/* FIXME: set acbe, acbk, acvi and acvo */
1407 
1408 	bss->ext_set_sta_key_param_valid = 0;
1409 
1410 	/* FIXME: set ext_set_sta_key_param */
1411 
1412 	bss->spectrum_mgt_enable = 0;
1413 	bss->tx_mgmt_power = 0;
1414 	bss->max_tx_power = WCN36XX_MAX_POWER(wcn);
1415 	bss->action = update;
1416 
1417 	vif_priv->bss_type = bss->bss_type;
1418 
1419 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1420 		    "hal config bss bssid %pM self_mac_addr %pM bss_type %d oper_mode %d nw_type %d\n",
1421 		    bss->bssid, bss->self_mac_addr, bss->bss_type,
1422 		    bss->oper_mode, bss->nw_type);
1423 
1424 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1425 		    "- sta bssid %pM action %d sta_index %d bssid_index %d aid %d type %d mac %pM\n",
1426 		    sta_params->bssid, sta_params->action,
1427 		    sta_params->sta_index, sta_params->bssid_index,
1428 		    sta_params->aid, sta_params->type,
1429 		    sta_params->mac);
1430 
1431 	if (!wcn36xx_is_fw_version(wcn, 1, 2, 2, 24)) {
1432 		ret = wcn36xx_smd_config_bss_v1(wcn, &msg);
1433 	} else {
1434 		PREPARE_HAL_BUF(wcn->hal_buf, msg);
1435 
1436 		ret = wcn36xx_smd_send_and_wait(wcn, msg.header.len);
1437 	}
1438 	if (ret) {
1439 		wcn36xx_err("Sending hal_config_bss failed\n");
1440 		goto out;
1441 	}
1442 	ret = wcn36xx_smd_config_bss_rsp(wcn,
1443 					 vif,
1444 					 sta,
1445 					 wcn->hal_buf,
1446 					 wcn->hal_rsp_len);
1447 	if (ret) {
1448 		wcn36xx_err("hal_config_bss response failed err=%d\n", ret);
1449 		goto out;
1450 	}
1451 out:
1452 	mutex_unlock(&wcn->hal_mutex);
1453 	return ret;
1454 }
1455 
1456 int wcn36xx_smd_delete_bss(struct wcn36xx *wcn, struct ieee80211_vif *vif)
1457 {
1458 	struct wcn36xx_hal_delete_bss_req_msg msg_body;
1459 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
1460 	int ret = 0;
1461 
1462 	mutex_lock(&wcn->hal_mutex);
1463 
1464 	if (vif_priv->bss_index == WCN36XX_HAL_BSS_INVALID_IDX)
1465 		goto out;
1466 
1467 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_DELETE_BSS_REQ);
1468 
1469 	msg_body.bss_index = vif_priv->bss_index;
1470 
1471 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1472 
1473 	wcn36xx_dbg(WCN36XX_DBG_HAL, "hal delete bss %d\n", msg_body.bss_index);
1474 
1475 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1476 	if (ret) {
1477 		wcn36xx_err("Sending hal_delete_bss failed\n");
1478 		goto out;
1479 	}
1480 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1481 	if (ret) {
1482 		wcn36xx_err("hal_delete_bss response failed err=%d\n", ret);
1483 		goto out;
1484 	}
1485 
1486 	vif_priv->bss_index = WCN36XX_HAL_BSS_INVALID_IDX;
1487 out:
1488 	mutex_unlock(&wcn->hal_mutex);
1489 	return ret;
1490 }
1491 
1492 int wcn36xx_smd_send_beacon(struct wcn36xx *wcn, struct ieee80211_vif *vif,
1493 			    struct sk_buff *skb_beacon, u16 tim_off,
1494 			    u16 p2p_off)
1495 {
1496 	struct wcn36xx_hal_send_beacon_req_msg msg_body;
1497 	int ret = 0, pad, pvm_len;
1498 
1499 	mutex_lock(&wcn->hal_mutex);
1500 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_SEND_BEACON_REQ);
1501 
1502 	pvm_len = skb_beacon->data[tim_off + 1] - 3;
1503 	pad = TIM_MIN_PVM_SIZE - pvm_len;
1504 
1505 	/* Padding is irrelevant to mesh mode since tim_off is always 0. */
1506 	if (vif->type == NL80211_IFTYPE_MESH_POINT)
1507 		pad = 0;
1508 
1509 	msg_body.beacon_length = skb_beacon->len + pad;
1510 	/* TODO need to find out why + 6 is needed */
1511 	msg_body.beacon_length6 = msg_body.beacon_length + 6;
1512 
1513 	if (msg_body.beacon_length > BEACON_TEMPLATE_SIZE) {
1514 		wcn36xx_err("Beacon is to big: beacon size=%d\n",
1515 			      msg_body.beacon_length);
1516 		ret = -ENOMEM;
1517 		goto out;
1518 	}
1519 	memcpy(msg_body.beacon, skb_beacon->data, skb_beacon->len);
1520 	memcpy(msg_body.bssid, vif->addr, ETH_ALEN);
1521 
1522 	if (pad > 0) {
1523 		/*
1524 		 * The wcn36xx FW has a fixed size for the PVM in the TIM. If
1525 		 * given the beacon template from mac80211 with a PVM shorter
1526 		 * than the FW expectes it will overwrite the data after the
1527 		 * TIM.
1528 		 */
1529 		wcn36xx_dbg(WCN36XX_DBG_HAL, "Pad TIM PVM. %d bytes at %d\n",
1530 			    pad, pvm_len);
1531 		memmove(&msg_body.beacon[tim_off + 5 + pvm_len + pad],
1532 			&msg_body.beacon[tim_off + 5 + pvm_len],
1533 			skb_beacon->len - (tim_off + 5 + pvm_len));
1534 		memset(&msg_body.beacon[tim_off + 5 + pvm_len], 0, pad);
1535 		msg_body.beacon[tim_off + 1] += pad;
1536 	}
1537 
1538 	/* TODO need to find out why this is needed? */
1539 	if (vif->type == NL80211_IFTYPE_MESH_POINT)
1540 		/* mesh beacon don't need this, so push further down */
1541 		msg_body.tim_ie_offset = 256;
1542 	else
1543 		msg_body.tim_ie_offset = tim_off+4;
1544 	msg_body.p2p_ie_offset = p2p_off;
1545 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1546 
1547 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1548 		    "hal send beacon beacon_length %d\n",
1549 		    msg_body.beacon_length);
1550 
1551 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1552 	if (ret) {
1553 		wcn36xx_err("Sending hal_send_beacon failed\n");
1554 		goto out;
1555 	}
1556 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1557 	if (ret) {
1558 		wcn36xx_err("hal_send_beacon response failed err=%d\n", ret);
1559 		goto out;
1560 	}
1561 out:
1562 	mutex_unlock(&wcn->hal_mutex);
1563 	return ret;
1564 }
1565 
1566 int wcn36xx_smd_update_proberesp_tmpl(struct wcn36xx *wcn,
1567 				      struct ieee80211_vif *vif,
1568 				      struct sk_buff *skb)
1569 {
1570 	struct wcn36xx_hal_send_probe_resp_req_msg msg;
1571 	int ret = 0;
1572 
1573 	mutex_lock(&wcn->hal_mutex);
1574 	INIT_HAL_MSG(msg, WCN36XX_HAL_UPDATE_PROBE_RSP_TEMPLATE_REQ);
1575 
1576 	if (skb->len > BEACON_TEMPLATE_SIZE) {
1577 		wcn36xx_warn("probe response template is too big: %d\n",
1578 			     skb->len);
1579 		ret = -E2BIG;
1580 		goto out;
1581 	}
1582 
1583 	msg.probe_resp_template_len = skb->len;
1584 	memcpy(&msg.probe_resp_template, skb->data, skb->len);
1585 
1586 	memcpy(msg.bssid, vif->addr, ETH_ALEN);
1587 
1588 	PREPARE_HAL_BUF(wcn->hal_buf, msg);
1589 
1590 	wcn36xx_dbg(WCN36XX_DBG_HAL,
1591 		    "hal update probe rsp len %d bssid %pM\n",
1592 		    msg.probe_resp_template_len, msg.bssid);
1593 
1594 	ret = wcn36xx_smd_send_and_wait(wcn, msg.header.len);
1595 	if (ret) {
1596 		wcn36xx_err("Sending hal_update_proberesp_tmpl failed\n");
1597 		goto out;
1598 	}
1599 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1600 	if (ret) {
1601 		wcn36xx_err("hal_update_proberesp_tmpl response failed err=%d\n",
1602 			    ret);
1603 		goto out;
1604 	}
1605 out:
1606 	mutex_unlock(&wcn->hal_mutex);
1607 	return ret;
1608 }
1609 
1610 int wcn36xx_smd_set_stakey(struct wcn36xx *wcn,
1611 			   enum ani_ed_type enc_type,
1612 			   u8 keyidx,
1613 			   u8 keylen,
1614 			   u8 *key,
1615 			   u8 sta_index)
1616 {
1617 	struct wcn36xx_hal_set_sta_key_req_msg msg_body;
1618 	int ret = 0;
1619 
1620 	mutex_lock(&wcn->hal_mutex);
1621 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_SET_STAKEY_REQ);
1622 
1623 	msg_body.set_sta_key_params.sta_index = sta_index;
1624 	msg_body.set_sta_key_params.enc_type = enc_type;
1625 
1626 	msg_body.set_sta_key_params.key[0].id = keyidx;
1627 	msg_body.set_sta_key_params.key[0].unicast = 1;
1628 	msg_body.set_sta_key_params.key[0].direction = WCN36XX_HAL_TX_RX;
1629 	msg_body.set_sta_key_params.key[0].pae_role = 0;
1630 	msg_body.set_sta_key_params.key[0].length = keylen;
1631 	memcpy(msg_body.set_sta_key_params.key[0].key, key, keylen);
1632 	msg_body.set_sta_key_params.single_tid_rc = 1;
1633 
1634 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1635 
1636 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1637 	if (ret) {
1638 		wcn36xx_err("Sending hal_set_stakey failed\n");
1639 		goto out;
1640 	}
1641 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1642 	if (ret) {
1643 		wcn36xx_err("hal_set_stakey response failed err=%d\n", ret);
1644 		goto out;
1645 	}
1646 out:
1647 	mutex_unlock(&wcn->hal_mutex);
1648 	return ret;
1649 }
1650 
1651 int wcn36xx_smd_set_bsskey(struct wcn36xx *wcn,
1652 			   enum ani_ed_type enc_type,
1653 			   u8 bssidx,
1654 			   u8 keyidx,
1655 			   u8 keylen,
1656 			   u8 *key)
1657 {
1658 	struct wcn36xx_hal_set_bss_key_req_msg msg_body;
1659 	int ret = 0;
1660 
1661 	mutex_lock(&wcn->hal_mutex);
1662 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_SET_BSSKEY_REQ);
1663 	msg_body.bss_idx = bssidx;
1664 	msg_body.enc_type = enc_type;
1665 	msg_body.num_keys = 1;
1666 	msg_body.keys[0].id = keyidx;
1667 	msg_body.keys[0].unicast = 0;
1668 	msg_body.keys[0].direction = WCN36XX_HAL_RX_ONLY;
1669 	msg_body.keys[0].pae_role = 0;
1670 	msg_body.keys[0].length = keylen;
1671 	memcpy(msg_body.keys[0].key, key, keylen);
1672 
1673 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1674 
1675 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1676 	if (ret) {
1677 		wcn36xx_err("Sending hal_set_bsskey failed\n");
1678 		goto out;
1679 	}
1680 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1681 	if (ret) {
1682 		wcn36xx_err("hal_set_bsskey response failed err=%d\n", ret);
1683 		goto out;
1684 	}
1685 out:
1686 	mutex_unlock(&wcn->hal_mutex);
1687 	return ret;
1688 }
1689 
1690 int wcn36xx_smd_remove_stakey(struct wcn36xx *wcn,
1691 			      enum ani_ed_type enc_type,
1692 			      u8 keyidx,
1693 			      u8 sta_index)
1694 {
1695 	struct wcn36xx_hal_remove_sta_key_req_msg msg_body;
1696 	int ret = 0;
1697 
1698 	mutex_lock(&wcn->hal_mutex);
1699 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_RMV_STAKEY_REQ);
1700 
1701 	msg_body.sta_idx = sta_index;
1702 	msg_body.enc_type = enc_type;
1703 	msg_body.key_id = keyidx;
1704 
1705 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1706 
1707 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1708 	if (ret) {
1709 		wcn36xx_err("Sending hal_remove_stakey failed\n");
1710 		goto out;
1711 	}
1712 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1713 	if (ret) {
1714 		wcn36xx_err("hal_remove_stakey response failed err=%d\n", ret);
1715 		goto out;
1716 	}
1717 out:
1718 	mutex_unlock(&wcn->hal_mutex);
1719 	return ret;
1720 }
1721 
1722 int wcn36xx_smd_remove_bsskey(struct wcn36xx *wcn,
1723 			      enum ani_ed_type enc_type,
1724 			      u8 bssidx,
1725 			      u8 keyidx)
1726 {
1727 	struct wcn36xx_hal_remove_bss_key_req_msg msg_body;
1728 	int ret = 0;
1729 
1730 	mutex_lock(&wcn->hal_mutex);
1731 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_RMV_BSSKEY_REQ);
1732 	msg_body.bss_idx = bssidx;
1733 	msg_body.enc_type = enc_type;
1734 	msg_body.key_id = keyidx;
1735 
1736 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1737 
1738 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1739 	if (ret) {
1740 		wcn36xx_err("Sending hal_remove_bsskey failed\n");
1741 		goto out;
1742 	}
1743 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1744 	if (ret) {
1745 		wcn36xx_err("hal_remove_bsskey response failed err=%d\n", ret);
1746 		goto out;
1747 	}
1748 out:
1749 	mutex_unlock(&wcn->hal_mutex);
1750 	return ret;
1751 }
1752 
1753 int wcn36xx_smd_enter_bmps(struct wcn36xx *wcn, struct ieee80211_vif *vif)
1754 {
1755 	struct wcn36xx_hal_enter_bmps_req_msg msg_body;
1756 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
1757 	int ret = 0;
1758 
1759 	mutex_lock(&wcn->hal_mutex);
1760 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_ENTER_BMPS_REQ);
1761 
1762 	msg_body.bss_index = vif_priv->bss_index;
1763 	msg_body.tbtt = vif->bss_conf.sync_tsf;
1764 	msg_body.dtim_period = vif_priv->dtim_period;
1765 
1766 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1767 
1768 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1769 	if (ret) {
1770 		wcn36xx_err("Sending hal_enter_bmps failed\n");
1771 		goto out;
1772 	}
1773 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1774 	if (ret) {
1775 		wcn36xx_err("hal_enter_bmps response failed err=%d\n", ret);
1776 		goto out;
1777 	}
1778 out:
1779 	mutex_unlock(&wcn->hal_mutex);
1780 	return ret;
1781 }
1782 
1783 int wcn36xx_smd_exit_bmps(struct wcn36xx *wcn, struct ieee80211_vif *vif)
1784 {
1785 	struct wcn36xx_hal_exit_bmps_req_msg msg_body;
1786 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
1787 	int ret = 0;
1788 
1789 	mutex_lock(&wcn->hal_mutex);
1790 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_EXIT_BMPS_REQ);
1791 
1792 	msg_body.bss_index = vif_priv->bss_index;
1793 
1794 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1795 
1796 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1797 	if (ret) {
1798 		wcn36xx_err("Sending hal_exit_bmps failed\n");
1799 		goto out;
1800 	}
1801 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1802 	if (ret) {
1803 		wcn36xx_err("hal_exit_bmps response failed err=%d\n", ret);
1804 		goto out;
1805 	}
1806 out:
1807 	mutex_unlock(&wcn->hal_mutex);
1808 	return ret;
1809 }
1810 int wcn36xx_smd_set_power_params(struct wcn36xx *wcn, bool ignore_dtim)
1811 {
1812 	struct wcn36xx_hal_set_power_params_req_msg msg_body;
1813 	int ret = 0;
1814 
1815 	mutex_lock(&wcn->hal_mutex);
1816 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_SET_POWER_PARAMS_REQ);
1817 
1818 	/*
1819 	 * When host is down ignore every second dtim
1820 	 */
1821 	if (ignore_dtim) {
1822 		msg_body.ignore_dtim = 1;
1823 		msg_body.dtim_period = 2;
1824 	}
1825 	msg_body.listen_interval = WCN36XX_LISTEN_INTERVAL(wcn);
1826 
1827 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1828 
1829 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1830 	if (ret) {
1831 		wcn36xx_err("Sending hal_set_power_params failed\n");
1832 		goto out;
1833 	}
1834 
1835 out:
1836 	mutex_unlock(&wcn->hal_mutex);
1837 	return ret;
1838 }
1839 /* Notice: This function should be called after associated, or else it
1840  * will be invalid
1841  */
1842 int wcn36xx_smd_keep_alive_req(struct wcn36xx *wcn,
1843 			       struct ieee80211_vif *vif,
1844 			       int packet_type)
1845 {
1846 	struct wcn36xx_hal_keep_alive_req_msg msg_body;
1847 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
1848 	int ret = 0;
1849 
1850 	mutex_lock(&wcn->hal_mutex);
1851 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_KEEP_ALIVE_REQ);
1852 
1853 	if (packet_type == WCN36XX_HAL_KEEP_ALIVE_NULL_PKT) {
1854 		msg_body.bss_index = vif_priv->bss_index;
1855 		msg_body.packet_type = WCN36XX_HAL_KEEP_ALIVE_NULL_PKT;
1856 		msg_body.time_period = WCN36XX_KEEP_ALIVE_TIME_PERIOD;
1857 	} else if (packet_type == WCN36XX_HAL_KEEP_ALIVE_UNSOLICIT_ARP_RSP) {
1858 		/* TODO: it also support ARP response type */
1859 	} else {
1860 		wcn36xx_warn("unknown keep alive packet type %d\n", packet_type);
1861 		ret = -EINVAL;
1862 		goto out;
1863 	}
1864 
1865 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1866 
1867 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1868 	if (ret) {
1869 		wcn36xx_err("Sending hal_keep_alive failed\n");
1870 		goto out;
1871 	}
1872 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1873 	if (ret) {
1874 		wcn36xx_err("hal_keep_alive response failed err=%d\n", ret);
1875 		goto out;
1876 	}
1877 out:
1878 	mutex_unlock(&wcn->hal_mutex);
1879 	return ret;
1880 }
1881 
1882 int wcn36xx_smd_dump_cmd_req(struct wcn36xx *wcn, u32 arg1, u32 arg2,
1883 			     u32 arg3, u32 arg4, u32 arg5)
1884 {
1885 	struct wcn36xx_hal_dump_cmd_req_msg msg_body;
1886 	int ret = 0;
1887 
1888 	mutex_lock(&wcn->hal_mutex);
1889 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_DUMP_COMMAND_REQ);
1890 
1891 	msg_body.arg1 = arg1;
1892 	msg_body.arg2 = arg2;
1893 	msg_body.arg3 = arg3;
1894 	msg_body.arg4 = arg4;
1895 	msg_body.arg5 = arg5;
1896 
1897 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1898 
1899 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1900 	if (ret) {
1901 		wcn36xx_err("Sending hal_dump_cmd failed\n");
1902 		goto out;
1903 	}
1904 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
1905 	if (ret) {
1906 		wcn36xx_err("hal_dump_cmd response failed err=%d\n", ret);
1907 		goto out;
1908 	}
1909 out:
1910 	mutex_unlock(&wcn->hal_mutex);
1911 	return ret;
1912 }
1913 
1914 void set_feat_caps(u32 *bitmap, enum place_holder_in_cap_bitmap cap)
1915 {
1916 	int arr_idx, bit_idx;
1917 
1918 	if (cap < 0 || cap > 127) {
1919 		wcn36xx_warn("error cap idx %d\n", cap);
1920 		return;
1921 	}
1922 
1923 	arr_idx = cap / 32;
1924 	bit_idx = cap % 32;
1925 	bitmap[arr_idx] |= (1 << bit_idx);
1926 }
1927 
1928 int get_feat_caps(u32 *bitmap, enum place_holder_in_cap_bitmap cap)
1929 {
1930 	int arr_idx, bit_idx;
1931 	int ret = 0;
1932 
1933 	if (cap < 0 || cap > 127) {
1934 		wcn36xx_warn("error cap idx %d\n", cap);
1935 		return -EINVAL;
1936 	}
1937 
1938 	arr_idx = cap / 32;
1939 	bit_idx = cap % 32;
1940 	ret = (bitmap[arr_idx] & (1 << bit_idx)) ? 1 : 0;
1941 	return ret;
1942 }
1943 
1944 void clear_feat_caps(u32 *bitmap, enum place_holder_in_cap_bitmap cap)
1945 {
1946 	int arr_idx, bit_idx;
1947 
1948 	if (cap < 0 || cap > 127) {
1949 		wcn36xx_warn("error cap idx %d\n", cap);
1950 		return;
1951 	}
1952 
1953 	arr_idx = cap / 32;
1954 	bit_idx = cap % 32;
1955 	bitmap[arr_idx] &= ~(1 << bit_idx);
1956 }
1957 
1958 int wcn36xx_smd_feature_caps_exchange(struct wcn36xx *wcn)
1959 {
1960 	struct wcn36xx_hal_feat_caps_msg msg_body, *rsp;
1961 	int ret = 0, i;
1962 
1963 	mutex_lock(&wcn->hal_mutex);
1964 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_FEATURE_CAPS_EXCHANGE_REQ);
1965 
1966 	set_feat_caps(msg_body.feat_caps, STA_POWERSAVE);
1967 
1968 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
1969 
1970 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
1971 	if (ret) {
1972 		wcn36xx_err("Sending hal_feature_caps_exchange failed\n");
1973 		goto out;
1974 	}
1975 	if (wcn->hal_rsp_len != sizeof(*rsp)) {
1976 		wcn36xx_err("Invalid hal_feature_caps_exchange response");
1977 		goto out;
1978 	}
1979 
1980 	rsp = (struct wcn36xx_hal_feat_caps_msg *) wcn->hal_buf;
1981 
1982 	for (i = 0; i < WCN36XX_HAL_CAPS_SIZE; i++)
1983 		wcn->fw_feat_caps[i] = rsp->feat_caps[i];
1984 out:
1985 	mutex_unlock(&wcn->hal_mutex);
1986 	return ret;
1987 }
1988 
1989 int wcn36xx_smd_add_ba_session(struct wcn36xx *wcn,
1990 		struct ieee80211_sta *sta,
1991 		u16 tid,
1992 		u16 *ssn,
1993 		u8 direction,
1994 		u8 sta_index)
1995 {
1996 	struct wcn36xx_hal_add_ba_session_req_msg msg_body;
1997 	int ret = 0;
1998 
1999 	mutex_lock(&wcn->hal_mutex);
2000 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_ADD_BA_SESSION_REQ);
2001 
2002 	msg_body.sta_index = sta_index;
2003 	memcpy(&msg_body.mac_addr, sta->addr, ETH_ALEN);
2004 	msg_body.dialog_token = 0x10;
2005 	msg_body.tid = tid;
2006 
2007 	/* Immediate BA because Delayed BA is not supported */
2008 	msg_body.policy = 1;
2009 	msg_body.buffer_size = WCN36XX_AGGR_BUFFER_SIZE;
2010 	msg_body.timeout = 0;
2011 	if (ssn)
2012 		msg_body.ssn = *ssn;
2013 	msg_body.direction = direction;
2014 
2015 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
2016 
2017 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
2018 	if (ret) {
2019 		wcn36xx_err("Sending hal_add_ba_session failed\n");
2020 		goto out;
2021 	}
2022 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
2023 	if (ret) {
2024 		wcn36xx_err("hal_add_ba_session response failed err=%d\n", ret);
2025 		goto out;
2026 	}
2027 out:
2028 	mutex_unlock(&wcn->hal_mutex);
2029 	return ret;
2030 }
2031 
2032 int wcn36xx_smd_add_ba(struct wcn36xx *wcn)
2033 {
2034 	struct wcn36xx_hal_add_ba_req_msg msg_body;
2035 	int ret = 0;
2036 
2037 	mutex_lock(&wcn->hal_mutex);
2038 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_ADD_BA_REQ);
2039 
2040 	msg_body.session_id = 0;
2041 	msg_body.win_size = WCN36XX_AGGR_BUFFER_SIZE;
2042 
2043 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
2044 
2045 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
2046 	if (ret) {
2047 		wcn36xx_err("Sending hal_add_ba failed\n");
2048 		goto out;
2049 	}
2050 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
2051 	if (ret) {
2052 		wcn36xx_err("hal_add_ba response failed err=%d\n", ret);
2053 		goto out;
2054 	}
2055 out:
2056 	mutex_unlock(&wcn->hal_mutex);
2057 	return ret;
2058 }
2059 
2060 int wcn36xx_smd_del_ba(struct wcn36xx *wcn, u16 tid, u8 sta_index)
2061 {
2062 	struct wcn36xx_hal_del_ba_req_msg msg_body;
2063 	int ret = 0;
2064 
2065 	mutex_lock(&wcn->hal_mutex);
2066 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_DEL_BA_REQ);
2067 
2068 	msg_body.sta_index = sta_index;
2069 	msg_body.tid = tid;
2070 	msg_body.direction = 0;
2071 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
2072 
2073 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
2074 	if (ret) {
2075 		wcn36xx_err("Sending hal_del_ba failed\n");
2076 		goto out;
2077 	}
2078 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
2079 	if (ret) {
2080 		wcn36xx_err("hal_del_ba response failed err=%d\n", ret);
2081 		goto out;
2082 	}
2083 out:
2084 	mutex_unlock(&wcn->hal_mutex);
2085 	return ret;
2086 }
2087 
2088 static int wcn36xx_smd_trigger_ba_rsp(void *buf, int len)
2089 {
2090 	struct wcn36xx_hal_trigger_ba_rsp_msg *rsp;
2091 
2092 	if (len < sizeof(*rsp))
2093 		return -EINVAL;
2094 
2095 	rsp = (struct wcn36xx_hal_trigger_ba_rsp_msg *) buf;
2096 	return rsp->status;
2097 }
2098 
2099 int wcn36xx_smd_trigger_ba(struct wcn36xx *wcn, u8 sta_index)
2100 {
2101 	struct wcn36xx_hal_trigger_ba_req_msg msg_body;
2102 	struct wcn36xx_hal_trigger_ba_req_candidate *candidate;
2103 	int ret = 0;
2104 
2105 	mutex_lock(&wcn->hal_mutex);
2106 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_TRIGGER_BA_REQ);
2107 
2108 	msg_body.session_id = 0;
2109 	msg_body.candidate_cnt = 1;
2110 	msg_body.header.len += sizeof(*candidate);
2111 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
2112 
2113 	candidate = (struct wcn36xx_hal_trigger_ba_req_candidate *)
2114 		(wcn->hal_buf + sizeof(msg_body));
2115 	candidate->sta_index = sta_index;
2116 	candidate->tid_bitmap = 1;
2117 
2118 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body.header.len);
2119 	if (ret) {
2120 		wcn36xx_err("Sending hal_trigger_ba failed\n");
2121 		goto out;
2122 	}
2123 	ret = wcn36xx_smd_trigger_ba_rsp(wcn->hal_buf, wcn->hal_rsp_len);
2124 	if (ret) {
2125 		wcn36xx_err("hal_trigger_ba response failed err=%d\n", ret);
2126 		goto out;
2127 	}
2128 out:
2129 	mutex_unlock(&wcn->hal_mutex);
2130 	return ret;
2131 }
2132 
2133 static int wcn36xx_smd_tx_compl_ind(struct wcn36xx *wcn, void *buf, size_t len)
2134 {
2135 	struct wcn36xx_hal_tx_compl_ind_msg *rsp = buf;
2136 
2137 	if (len != sizeof(*rsp)) {
2138 		wcn36xx_warn("Bad TX complete indication\n");
2139 		return -EIO;
2140 	}
2141 
2142 	wcn36xx_dxe_tx_ack_ind(wcn, rsp->status);
2143 
2144 	return 0;
2145 }
2146 
2147 static int wcn36xx_smd_hw_scan_ind(struct wcn36xx *wcn, void *buf, size_t len)
2148 {
2149 	struct wcn36xx_hal_scan_offload_ind *rsp = buf;
2150 	struct cfg80211_scan_info scan_info = {};
2151 
2152 	if (len != sizeof(*rsp)) {
2153 		wcn36xx_warn("Corrupted delete scan indication\n");
2154 		return -EIO;
2155 	}
2156 
2157 	wcn36xx_dbg(WCN36XX_DBG_HAL, "scan indication (type %x)\n", rsp->type);
2158 
2159 	switch (rsp->type) {
2160 	case WCN36XX_HAL_SCAN_IND_FAILED:
2161 	case WCN36XX_HAL_SCAN_IND_DEQUEUED:
2162 		scan_info.aborted = true;
2163 		/* fall through */
2164 	case WCN36XX_HAL_SCAN_IND_COMPLETED:
2165 		mutex_lock(&wcn->scan_lock);
2166 		wcn->scan_req = NULL;
2167 		if (wcn->scan_aborted)
2168 			scan_info.aborted = true;
2169 		mutex_unlock(&wcn->scan_lock);
2170 		ieee80211_scan_completed(wcn->hw, &scan_info);
2171 		break;
2172 	case WCN36XX_HAL_SCAN_IND_STARTED:
2173 	case WCN36XX_HAL_SCAN_IND_FOREIGN_CHANNEL:
2174 	case WCN36XX_HAL_SCAN_IND_PREEMPTED:
2175 	case WCN36XX_HAL_SCAN_IND_RESTARTED:
2176 		break;
2177 	default:
2178 		wcn36xx_warn("Unknown scan indication type %x\n", rsp->type);
2179 	}
2180 
2181 	return 0;
2182 }
2183 
2184 static int wcn36xx_smd_missed_beacon_ind(struct wcn36xx *wcn,
2185 					 void *buf,
2186 					 size_t len)
2187 {
2188 	struct wcn36xx_hal_missed_beacon_ind_msg *rsp = buf;
2189 	struct ieee80211_vif *vif = NULL;
2190 	struct wcn36xx_vif *tmp;
2191 
2192 	/* Old FW does not have bss index */
2193 	if (wcn36xx_is_fw_version(wcn, 1, 2, 2, 24)) {
2194 		list_for_each_entry(tmp, &wcn->vif_list, list) {
2195 			wcn36xx_dbg(WCN36XX_DBG_HAL, "beacon missed bss_index %d\n",
2196 				    tmp->bss_index);
2197 			vif = wcn36xx_priv_to_vif(tmp);
2198 			ieee80211_connection_loss(vif);
2199 		}
2200 		return 0;
2201 	}
2202 
2203 	if (len != sizeof(*rsp)) {
2204 		wcn36xx_warn("Corrupted missed beacon indication\n");
2205 		return -EIO;
2206 	}
2207 
2208 	list_for_each_entry(tmp, &wcn->vif_list, list) {
2209 		if (tmp->bss_index == rsp->bss_index) {
2210 			wcn36xx_dbg(WCN36XX_DBG_HAL, "beacon missed bss_index %d\n",
2211 				    rsp->bss_index);
2212 			vif = wcn36xx_priv_to_vif(tmp);
2213 			ieee80211_connection_loss(vif);
2214 			return 0;
2215 		}
2216 	}
2217 
2218 	wcn36xx_warn("BSS index %d not found\n", rsp->bss_index);
2219 	return -ENOENT;
2220 }
2221 
2222 static int wcn36xx_smd_delete_sta_context_ind(struct wcn36xx *wcn,
2223 					      void *buf,
2224 					      size_t len)
2225 {
2226 	struct wcn36xx_hal_delete_sta_context_ind_msg *rsp = buf;
2227 	struct wcn36xx_vif *tmp;
2228 	struct ieee80211_sta *sta;
2229 
2230 	if (len != sizeof(*rsp)) {
2231 		wcn36xx_warn("Corrupted delete sta indication\n");
2232 		return -EIO;
2233 	}
2234 
2235 	wcn36xx_dbg(WCN36XX_DBG_HAL, "delete station indication %pM index %d\n",
2236 		    rsp->addr2, rsp->sta_id);
2237 
2238 	list_for_each_entry(tmp, &wcn->vif_list, list) {
2239 		rcu_read_lock();
2240 		sta = ieee80211_find_sta(wcn36xx_priv_to_vif(tmp), rsp->addr2);
2241 		if (sta)
2242 			ieee80211_report_low_ack(sta, 0);
2243 		rcu_read_unlock();
2244 		if (sta)
2245 			return 0;
2246 	}
2247 
2248 	wcn36xx_warn("STA with addr %pM and index %d not found\n",
2249 		     rsp->addr2,
2250 		     rsp->sta_id);
2251 	return -ENOENT;
2252 }
2253 
2254 static int wcn36xx_smd_print_reg_info_ind(struct wcn36xx *wcn,
2255 					  void *buf,
2256 					  size_t len)
2257 {
2258 	struct wcn36xx_hal_print_reg_info_ind *rsp = buf;
2259 	int i;
2260 
2261 	if (len < sizeof(*rsp)) {
2262 		wcn36xx_warn("Corrupted print reg info indication\n");
2263 		return -EIO;
2264 	}
2265 
2266 	wcn36xx_dbg(WCN36XX_DBG_HAL,
2267 		    "reginfo indication, scenario: 0x%x reason: 0x%x\n",
2268 		    rsp->scenario, rsp->reason);
2269 
2270 	for (i = 0; i < rsp->count; i++) {
2271 		wcn36xx_dbg(WCN36XX_DBG_HAL, "\t0x%x: 0x%x\n",
2272 			    rsp->regs[i].addr, rsp->regs[i].value);
2273 	}
2274 
2275 	return 0;
2276 }
2277 
2278 int wcn36xx_smd_update_cfg(struct wcn36xx *wcn, u32 cfg_id, u32 value)
2279 {
2280 	struct wcn36xx_hal_update_cfg_req_msg msg_body, *body;
2281 	size_t len;
2282 	int ret = 0;
2283 
2284 	mutex_lock(&wcn->hal_mutex);
2285 	INIT_HAL_MSG(msg_body, WCN36XX_HAL_UPDATE_CFG_REQ);
2286 
2287 	PREPARE_HAL_BUF(wcn->hal_buf, msg_body);
2288 
2289 	body = (struct wcn36xx_hal_update_cfg_req_msg *) wcn->hal_buf;
2290 	len = msg_body.header.len;
2291 
2292 	put_cfg_tlv_u32(wcn, &len, cfg_id, value);
2293 	body->header.len = len;
2294 	body->len = len - sizeof(*body);
2295 
2296 	ret = wcn36xx_smd_send_and_wait(wcn, body->header.len);
2297 	if (ret) {
2298 		wcn36xx_err("Sending hal_update_cfg failed\n");
2299 		goto out;
2300 	}
2301 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
2302 	if (ret) {
2303 		wcn36xx_err("hal_update_cfg response failed err=%d\n", ret);
2304 		goto out;
2305 	}
2306 out:
2307 	mutex_unlock(&wcn->hal_mutex);
2308 	return ret;
2309 }
2310 
2311 int wcn36xx_smd_set_mc_list(struct wcn36xx *wcn,
2312 			    struct ieee80211_vif *vif,
2313 			    struct wcn36xx_hal_rcv_flt_mc_addr_list_type *fp)
2314 {
2315 	struct wcn36xx_vif *vif_priv = wcn36xx_vif_to_priv(vif);
2316 	struct wcn36xx_hal_rcv_flt_pkt_set_mc_list_req_msg *msg_body = NULL;
2317 	int ret = 0;
2318 
2319 	mutex_lock(&wcn->hal_mutex);
2320 
2321 	msg_body = (struct wcn36xx_hal_rcv_flt_pkt_set_mc_list_req_msg *)
2322 		   wcn->hal_buf;
2323 	init_hal_msg(&msg_body->header, WCN36XX_HAL_8023_MULTICAST_LIST_REQ,
2324 		     sizeof(msg_body->mc_addr_list));
2325 
2326 	/* An empty list means all mc traffic will be received */
2327 	if (fp)
2328 		memcpy(&msg_body->mc_addr_list, fp,
2329 		       sizeof(msg_body->mc_addr_list));
2330 	else
2331 		msg_body->mc_addr_list.mc_addr_count = 0;
2332 
2333 	msg_body->mc_addr_list.bss_index = vif_priv->bss_index;
2334 
2335 	ret = wcn36xx_smd_send_and_wait(wcn, msg_body->header.len);
2336 	if (ret) {
2337 		wcn36xx_err("Sending HAL_8023_MULTICAST_LIST failed\n");
2338 		goto out;
2339 	}
2340 	ret = wcn36xx_smd_rsp_status_check(wcn->hal_buf, wcn->hal_rsp_len);
2341 	if (ret) {
2342 		wcn36xx_err("HAL_8023_MULTICAST_LIST rsp failed err=%d\n", ret);
2343 		goto out;
2344 	}
2345 out:
2346 	mutex_unlock(&wcn->hal_mutex);
2347 	return ret;
2348 }
2349 
2350 int wcn36xx_smd_rsp_process(struct rpmsg_device *rpdev,
2351 			    void *buf, int len, void *priv, u32 addr)
2352 {
2353 	const struct wcn36xx_hal_msg_header *msg_header = buf;
2354 	struct ieee80211_hw *hw = priv;
2355 	struct wcn36xx *wcn = hw->priv;
2356 	struct wcn36xx_hal_ind_msg *msg_ind;
2357 	wcn36xx_dbg_dump(WCN36XX_DBG_SMD_DUMP, "SMD <<< ", buf, len);
2358 
2359 	switch (msg_header->msg_type) {
2360 	case WCN36XX_HAL_START_RSP:
2361 	case WCN36XX_HAL_CONFIG_STA_RSP:
2362 	case WCN36XX_HAL_CONFIG_BSS_RSP:
2363 	case WCN36XX_HAL_ADD_STA_SELF_RSP:
2364 	case WCN36XX_HAL_STOP_RSP:
2365 	case WCN36XX_HAL_DEL_STA_SELF_RSP:
2366 	case WCN36XX_HAL_DELETE_STA_RSP:
2367 	case WCN36XX_HAL_INIT_SCAN_RSP:
2368 	case WCN36XX_HAL_START_SCAN_RSP:
2369 	case WCN36XX_HAL_END_SCAN_RSP:
2370 	case WCN36XX_HAL_FINISH_SCAN_RSP:
2371 	case WCN36XX_HAL_DOWNLOAD_NV_RSP:
2372 	case WCN36XX_HAL_DELETE_BSS_RSP:
2373 	case WCN36XX_HAL_SEND_BEACON_RSP:
2374 	case WCN36XX_HAL_SET_LINK_ST_RSP:
2375 	case WCN36XX_HAL_UPDATE_PROBE_RSP_TEMPLATE_RSP:
2376 	case WCN36XX_HAL_SET_BSSKEY_RSP:
2377 	case WCN36XX_HAL_SET_STAKEY_RSP:
2378 	case WCN36XX_HAL_RMV_STAKEY_RSP:
2379 	case WCN36XX_HAL_RMV_BSSKEY_RSP:
2380 	case WCN36XX_HAL_ENTER_BMPS_RSP:
2381 	case WCN36XX_HAL_SET_POWER_PARAMS_RSP:
2382 	case WCN36XX_HAL_EXIT_BMPS_RSP:
2383 	case WCN36XX_HAL_KEEP_ALIVE_RSP:
2384 	case WCN36XX_HAL_DUMP_COMMAND_RSP:
2385 	case WCN36XX_HAL_ADD_BA_SESSION_RSP:
2386 	case WCN36XX_HAL_ADD_BA_RSP:
2387 	case WCN36XX_HAL_DEL_BA_RSP:
2388 	case WCN36XX_HAL_TRIGGER_BA_RSP:
2389 	case WCN36XX_HAL_UPDATE_CFG_RSP:
2390 	case WCN36XX_HAL_JOIN_RSP:
2391 	case WCN36XX_HAL_UPDATE_SCAN_PARAM_RSP:
2392 	case WCN36XX_HAL_CH_SWITCH_RSP:
2393 	case WCN36XX_HAL_FEATURE_CAPS_EXCHANGE_RSP:
2394 	case WCN36XX_HAL_8023_MULTICAST_LIST_RSP:
2395 	case WCN36XX_HAL_START_SCAN_OFFLOAD_RSP:
2396 	case WCN36XX_HAL_STOP_SCAN_OFFLOAD_RSP:
2397 		memcpy(wcn->hal_buf, buf, len);
2398 		wcn->hal_rsp_len = len;
2399 		complete(&wcn->hal_rsp_compl);
2400 		break;
2401 
2402 	case WCN36XX_HAL_COEX_IND:
2403 	case WCN36XX_HAL_AVOID_FREQ_RANGE_IND:
2404 	case WCN36XX_HAL_DEL_BA_IND:
2405 	case WCN36XX_HAL_OTA_TX_COMPL_IND:
2406 	case WCN36XX_HAL_MISSED_BEACON_IND:
2407 	case WCN36XX_HAL_DELETE_STA_CONTEXT_IND:
2408 	case WCN36XX_HAL_PRINT_REG_INFO_IND:
2409 	case WCN36XX_HAL_SCAN_OFFLOAD_IND:
2410 		msg_ind = kmalloc(sizeof(*msg_ind) + len, GFP_ATOMIC);
2411 		if (!msg_ind) {
2412 			wcn36xx_err("Run out of memory while handling SMD_EVENT (%d)\n",
2413 				    msg_header->msg_type);
2414 			return -ENOMEM;
2415 		}
2416 
2417 		msg_ind->msg_len = len;
2418 		memcpy(msg_ind->msg, buf, len);
2419 
2420 		spin_lock(&wcn->hal_ind_lock);
2421 		list_add_tail(&msg_ind->list, &wcn->hal_ind_queue);
2422 		queue_work(wcn->hal_ind_wq, &wcn->hal_ind_work);
2423 		spin_unlock(&wcn->hal_ind_lock);
2424 		wcn36xx_dbg(WCN36XX_DBG_HAL, "indication arrived\n");
2425 		break;
2426 	default:
2427 		wcn36xx_err("SMD_EVENT (%d) not supported\n",
2428 			      msg_header->msg_type);
2429 	}
2430 
2431 	return 0;
2432 }
2433 static void wcn36xx_ind_smd_work(struct work_struct *work)
2434 {
2435 	struct wcn36xx *wcn =
2436 		container_of(work, struct wcn36xx, hal_ind_work);
2437 
2438 	for (;;) {
2439 		struct wcn36xx_hal_msg_header *msg_header;
2440 		struct wcn36xx_hal_ind_msg *hal_ind_msg;
2441 		unsigned long flags;
2442 
2443 		spin_lock_irqsave(&wcn->hal_ind_lock, flags);
2444 
2445 		if (list_empty(&wcn->hal_ind_queue)) {
2446 			spin_unlock_irqrestore(&wcn->hal_ind_lock, flags);
2447 			return;
2448 		}
2449 
2450 		hal_ind_msg = list_first_entry(&wcn->hal_ind_queue,
2451 					       struct wcn36xx_hal_ind_msg,
2452 					       list);
2453 		list_del(&hal_ind_msg->list);
2454 		spin_unlock_irqrestore(&wcn->hal_ind_lock, flags);
2455 
2456 		msg_header = (struct wcn36xx_hal_msg_header *)hal_ind_msg->msg;
2457 
2458 		switch (msg_header->msg_type) {
2459 		case WCN36XX_HAL_COEX_IND:
2460 		case WCN36XX_HAL_DEL_BA_IND:
2461 		case WCN36XX_HAL_AVOID_FREQ_RANGE_IND:
2462 			break;
2463 		case WCN36XX_HAL_OTA_TX_COMPL_IND:
2464 			wcn36xx_smd_tx_compl_ind(wcn,
2465 						 hal_ind_msg->msg,
2466 						 hal_ind_msg->msg_len);
2467 			break;
2468 		case WCN36XX_HAL_MISSED_BEACON_IND:
2469 			wcn36xx_smd_missed_beacon_ind(wcn,
2470 						      hal_ind_msg->msg,
2471 						      hal_ind_msg->msg_len);
2472 			break;
2473 		case WCN36XX_HAL_DELETE_STA_CONTEXT_IND:
2474 			wcn36xx_smd_delete_sta_context_ind(wcn,
2475 							   hal_ind_msg->msg,
2476 							   hal_ind_msg->msg_len);
2477 			break;
2478 		case WCN36XX_HAL_PRINT_REG_INFO_IND:
2479 			wcn36xx_smd_print_reg_info_ind(wcn,
2480 						       hal_ind_msg->msg,
2481 						       hal_ind_msg->msg_len);
2482 			break;
2483 		case WCN36XX_HAL_SCAN_OFFLOAD_IND:
2484 			wcn36xx_smd_hw_scan_ind(wcn, hal_ind_msg->msg,
2485 						hal_ind_msg->msg_len);
2486 			break;
2487 		default:
2488 			wcn36xx_err("SMD_EVENT (%d) not supported\n",
2489 				    msg_header->msg_type);
2490 		}
2491 
2492 		kfree(hal_ind_msg);
2493 	}
2494 }
2495 int wcn36xx_smd_open(struct wcn36xx *wcn)
2496 {
2497 	int ret = 0;
2498 	wcn->hal_ind_wq = create_freezable_workqueue("wcn36xx_smd_ind");
2499 	if (!wcn->hal_ind_wq) {
2500 		wcn36xx_err("failed to allocate wq\n");
2501 		ret = -ENOMEM;
2502 		goto out;
2503 	}
2504 	INIT_WORK(&wcn->hal_ind_work, wcn36xx_ind_smd_work);
2505 	INIT_LIST_HEAD(&wcn->hal_ind_queue);
2506 	spin_lock_init(&wcn->hal_ind_lock);
2507 
2508 	return 0;
2509 
2510 out:
2511 	return ret;
2512 }
2513 
2514 void wcn36xx_smd_close(struct wcn36xx *wcn)
2515 {
2516 	destroy_workqueue(wcn->hal_ind_wq);
2517 }
2518