1 /******************************************************************************
2  *
3  * Copyright(c) 2003 - 2014 Intel Corporation. All rights reserved.
4  *
5  * Portions of this file are derived from the ipw3945 project, as well
6  * as portions of the ieee80211 subsystem header files.
7  *
8  * This program is free software; you can redistribute it and/or modify it
9  * under the terms of version 2 of the GNU General Public License as
10  * published by the Free Software Foundation.
11  *
12  * This program is distributed in the hope that it will be useful, but WITHOUT
13  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
14  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
15  * more details.
16  *
17  * You should have received a copy of the GNU General Public License along with
18  * this program; if not, write to the Free Software Foundation, Inc.,
19  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
20  *
21  * The full GNU General Public License is included in this distribution in the
22  * file called LICENSE.
23  *
24  * Contact Information:
25  *  Intel Linux Wireless <linuxwifi@intel.com>
26  * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
27  *
28  *****************************************************************************/
29 #include <linux/kernel.h>
30 #include <linux/module.h>
31 #include <linux/slab.h>
32 #include <linux/dma-mapping.h>
33 #include <linux/delay.h>
34 #include <linux/sched.h>
35 #include <linux/skbuff.h>
36 #include <linux/netdevice.h>
37 #include <linux/etherdevice.h>
38 #include <linux/if_arp.h>
39 
40 #include <net/ieee80211_radiotap.h>
41 #include <net/mac80211.h>
42 
43 #include <asm/div64.h>
44 
45 #include "iwl-io.h"
46 #include "iwl-trans.h"
47 #include "iwl-op-mode.h"
48 #include "iwl-modparams.h"
49 
50 #include "dev.h"
51 #include "calib.h"
52 #include "agn.h"
53 
54 /*****************************************************************************
55  *
56  * mac80211 entry point functions
57  *
58  *****************************************************************************/
59 
60 static const struct ieee80211_iface_limit iwlagn_sta_ap_limits[] = {
61 	{
62 		.max = 1,
63 		.types = BIT(NL80211_IFTYPE_STATION),
64 	},
65 	{
66 		.max = 1,
67 		.types = BIT(NL80211_IFTYPE_AP),
68 	},
69 };
70 
71 static const struct ieee80211_iface_limit iwlagn_2sta_limits[] = {
72 	{
73 		.max = 2,
74 		.types = BIT(NL80211_IFTYPE_STATION),
75 	},
76 };
77 
78 static const struct ieee80211_iface_combination
79 iwlagn_iface_combinations_dualmode[] = {
80 	{ .num_different_channels = 1,
81 	  .max_interfaces = 2,
82 	  .beacon_int_infra_match = true,
83 	  .limits = iwlagn_sta_ap_limits,
84 	  .n_limits = ARRAY_SIZE(iwlagn_sta_ap_limits),
85 	},
86 	{ .num_different_channels = 1,
87 	  .max_interfaces = 2,
88 	  .limits = iwlagn_2sta_limits,
89 	  .n_limits = ARRAY_SIZE(iwlagn_2sta_limits),
90 	},
91 };
92 
93 /*
94  * Not a mac80211 entry point function, but it fits in with all the
95  * other mac80211 functions grouped here.
96  */
97 int iwlagn_mac_setup_register(struct iwl_priv *priv,
98 			      const struct iwl_ucode_capabilities *capa)
99 {
100 	int ret;
101 	struct ieee80211_hw *hw = priv->hw;
102 	struct iwl_rxon_context *ctx;
103 
104 	hw->rate_control_algorithm = "iwl-agn-rs";
105 
106 	/* Tell mac80211 our characteristics */
107 	ieee80211_hw_set(hw, SIGNAL_DBM);
108 	ieee80211_hw_set(hw, AMPDU_AGGREGATION);
109 	ieee80211_hw_set(hw, NEED_DTIM_BEFORE_ASSOC);
110 	ieee80211_hw_set(hw, SPECTRUM_MGMT);
111 	ieee80211_hw_set(hw, REPORTS_TX_ACK_STATUS);
112 	ieee80211_hw_set(hw, QUEUE_CONTROL);
113 	ieee80211_hw_set(hw, SUPPORTS_PS);
114 	ieee80211_hw_set(hw, SUPPORTS_DYNAMIC_PS);
115 	ieee80211_hw_set(hw, SUPPORT_FAST_XMIT);
116 	ieee80211_hw_set(hw, WANT_MONITOR_VIF);
117 
118 	if (priv->trans->max_skb_frags)
119 		hw->netdev_features = NETIF_F_HIGHDMA | NETIF_F_SG;
120 
121 	hw->offchannel_tx_hw_queue = IWL_AUX_QUEUE;
122 	hw->radiotap_mcs_details |= IEEE80211_RADIOTAP_MCS_HAVE_FMT;
123 
124 	/*
125 	 * Including the following line will crash some AP's.  This
126 	 * workaround removes the stimulus which causes the crash until
127 	 * the AP software can be fixed.
128 	hw->max_tx_aggregation_subframes = LINK_QUAL_AGG_FRAME_LIMIT_DEF;
129 	 */
130 
131 	if (priv->nvm_data->sku_cap_11n_enable)
132 		hw->wiphy->features |= NL80211_FEATURE_DYNAMIC_SMPS |
133 				       NL80211_FEATURE_STATIC_SMPS;
134 
135 	/*
136 	 * Enable 11w if advertised by firmware and software crypto
137 	 * is not enabled (as the firmware will interpret some mgmt
138 	 * packets, so enabling it with software crypto isn't safe)
139 	 */
140 	if (priv->fw->ucode_capa.flags & IWL_UCODE_TLV_FLAGS_MFP &&
141 	    !iwlwifi_mod_params.swcrypto)
142 		ieee80211_hw_set(hw, MFP_CAPABLE);
143 
144 	hw->sta_data_size = sizeof(struct iwl_station_priv);
145 	hw->vif_data_size = sizeof(struct iwl_vif_priv);
146 
147 	for_each_context(priv, ctx) {
148 		hw->wiphy->interface_modes |= ctx->interface_modes;
149 		hw->wiphy->interface_modes |= ctx->exclusive_interface_modes;
150 	}
151 
152 	BUILD_BUG_ON(NUM_IWL_RXON_CTX != 2);
153 
154 	if (hw->wiphy->interface_modes & BIT(NL80211_IFTYPE_AP)) {
155 		hw->wiphy->iface_combinations =
156 			iwlagn_iface_combinations_dualmode;
157 		hw->wiphy->n_iface_combinations =
158 			ARRAY_SIZE(iwlagn_iface_combinations_dualmode);
159 	}
160 
161 	hw->wiphy->flags |= WIPHY_FLAG_IBSS_RSN;
162 	hw->wiphy->regulatory_flags |= REGULATORY_CUSTOM_REG |
163 				       REGULATORY_DISABLE_BEACON_HINTS;
164 
165 #ifdef CONFIG_PM_SLEEP
166 	if (priv->fw->img[IWL_UCODE_WOWLAN].num_sec &&
167 	    priv->trans->ops->d3_suspend &&
168 	    priv->trans->ops->d3_resume &&
169 	    device_can_wakeup(priv->trans->dev)) {
170 		priv->wowlan_support.flags = WIPHY_WOWLAN_MAGIC_PKT |
171 					     WIPHY_WOWLAN_DISCONNECT |
172 					     WIPHY_WOWLAN_EAP_IDENTITY_REQ |
173 					     WIPHY_WOWLAN_RFKILL_RELEASE;
174 		if (!iwlwifi_mod_params.swcrypto)
175 			priv->wowlan_support.flags |=
176 				WIPHY_WOWLAN_SUPPORTS_GTK_REKEY |
177 				WIPHY_WOWLAN_GTK_REKEY_FAILURE;
178 
179 		priv->wowlan_support.n_patterns = IWLAGN_WOWLAN_MAX_PATTERNS;
180 		priv->wowlan_support.pattern_min_len =
181 					IWLAGN_WOWLAN_MIN_PATTERN_LEN;
182 		priv->wowlan_support.pattern_max_len =
183 					IWLAGN_WOWLAN_MAX_PATTERN_LEN;
184 		hw->wiphy->wowlan = &priv->wowlan_support;
185 	}
186 #endif
187 
188 	if (iwlwifi_mod_params.power_save)
189 		hw->wiphy->flags |= WIPHY_FLAG_PS_ON_BY_DEFAULT;
190 	else
191 		hw->wiphy->flags &= ~WIPHY_FLAG_PS_ON_BY_DEFAULT;
192 
193 	hw->wiphy->max_scan_ssids = PROBE_OPTION_MAX;
194 	/* we create the 802.11 header and a max-length SSID element */
195 	hw->wiphy->max_scan_ie_len = capa->max_probe_length - 24 - 34;
196 
197 	/*
198 	 * We don't use all queues: 4 and 9 are unused and any
199 	 * aggregation queue gets mapped down to the AC queue.
200 	 */
201 	hw->queues = IWLAGN_FIRST_AMPDU_QUEUE;
202 
203 	hw->max_listen_interval = IWL_CONN_MAX_LISTEN_INTERVAL;
204 
205 	if (priv->nvm_data->bands[NL80211_BAND_2GHZ].n_channels)
206 		priv->hw->wiphy->bands[NL80211_BAND_2GHZ] =
207 			&priv->nvm_data->bands[NL80211_BAND_2GHZ];
208 	if (priv->nvm_data->bands[NL80211_BAND_5GHZ].n_channels)
209 		priv->hw->wiphy->bands[NL80211_BAND_5GHZ] =
210 			&priv->nvm_data->bands[NL80211_BAND_5GHZ];
211 
212 	hw->wiphy->hw_version = priv->trans->hw_id;
213 
214 	iwl_leds_init(priv);
215 
216 	wiphy_ext_feature_set(hw->wiphy, NL80211_EXT_FEATURE_CQM_RSSI_LIST);
217 
218 	ret = ieee80211_register_hw(priv->hw);
219 	if (ret) {
220 		IWL_ERR(priv, "Failed to register hw (error %d)\n", ret);
221 		iwl_leds_exit(priv);
222 		return ret;
223 	}
224 	priv->mac80211_registered = 1;
225 
226 	return 0;
227 }
228 
229 void iwlagn_mac_unregister(struct iwl_priv *priv)
230 {
231 	if (!priv->mac80211_registered)
232 		return;
233 	iwl_leds_exit(priv);
234 	ieee80211_unregister_hw(priv->hw);
235 	priv->mac80211_registered = 0;
236 }
237 
238 static int __iwl_up(struct iwl_priv *priv)
239 {
240 	struct iwl_rxon_context *ctx;
241 	int ret;
242 
243 	lockdep_assert_held(&priv->mutex);
244 
245 	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
246 		IWL_WARN(priv, "Exit pending; will not bring the NIC up\n");
247 		return -EIO;
248 	}
249 
250 	for_each_context(priv, ctx) {
251 		ret = iwlagn_alloc_bcast_station(priv, ctx);
252 		if (ret) {
253 			iwl_dealloc_bcast_stations(priv);
254 			return ret;
255 		}
256 	}
257 
258 	ret = iwl_trans_start_hw(priv->trans);
259 	if (ret) {
260 		IWL_ERR(priv, "Failed to start HW: %d\n", ret);
261 		goto error;
262 	}
263 
264 	ret = iwl_run_init_ucode(priv);
265 	if (ret) {
266 		IWL_ERR(priv, "Failed to run INIT ucode: %d\n", ret);
267 		goto error;
268 	}
269 
270 	ret = iwl_trans_start_hw(priv->trans);
271 	if (ret) {
272 		IWL_ERR(priv, "Failed to start HW: %d\n", ret);
273 		goto error;
274 	}
275 
276 	ret = iwl_load_ucode_wait_alive(priv, IWL_UCODE_REGULAR);
277 	if (ret) {
278 		IWL_ERR(priv, "Failed to start RT ucode: %d\n", ret);
279 		goto error;
280 	}
281 
282 	ret = iwl_alive_start(priv);
283 	if (ret)
284 		goto error;
285 	return 0;
286 
287  error:
288 	set_bit(STATUS_EXIT_PENDING, &priv->status);
289 	iwl_down(priv);
290 	clear_bit(STATUS_EXIT_PENDING, &priv->status);
291 
292 	IWL_ERR(priv, "Unable to initialize device.\n");
293 	return ret;
294 }
295 
296 static int iwlagn_mac_start(struct ieee80211_hw *hw)
297 {
298 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
299 	int ret;
300 
301 	IWL_DEBUG_MAC80211(priv, "enter\n");
302 
303 	/* we should be verifying the device is ready to be opened */
304 	mutex_lock(&priv->mutex);
305 	ret = __iwl_up(priv);
306 	mutex_unlock(&priv->mutex);
307 	if (ret)
308 		return ret;
309 
310 	IWL_DEBUG_INFO(priv, "Start UP work done.\n");
311 
312 	/* Now we should be done, and the READY bit should be set. */
313 	if (WARN_ON(!test_bit(STATUS_READY, &priv->status)))
314 		ret = -EIO;
315 
316 	iwlagn_led_enable(priv);
317 
318 	priv->is_open = 1;
319 	IWL_DEBUG_MAC80211(priv, "leave\n");
320 	return 0;
321 }
322 
323 static void iwlagn_mac_stop(struct ieee80211_hw *hw)
324 {
325 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
326 
327 	IWL_DEBUG_MAC80211(priv, "enter\n");
328 
329 	if (!priv->is_open)
330 		return;
331 
332 	priv->is_open = 0;
333 
334 	mutex_lock(&priv->mutex);
335 	iwl_down(priv);
336 	mutex_unlock(&priv->mutex);
337 
338 	iwl_cancel_deferred_work(priv);
339 
340 	flush_workqueue(priv->workqueue);
341 
342 	IWL_DEBUG_MAC80211(priv, "leave\n");
343 }
344 
345 static void iwlagn_mac_set_rekey_data(struct ieee80211_hw *hw,
346 				      struct ieee80211_vif *vif,
347 				      struct cfg80211_gtk_rekey_data *data)
348 {
349 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
350 
351 	if (iwlwifi_mod_params.swcrypto)
352 		return;
353 
354 	IWL_DEBUG_MAC80211(priv, "enter\n");
355 	mutex_lock(&priv->mutex);
356 
357 	if (priv->contexts[IWL_RXON_CTX_BSS].vif != vif)
358 		goto out;
359 
360 	memcpy(priv->kek, data->kek, NL80211_KEK_LEN);
361 	memcpy(priv->kck, data->kck, NL80211_KCK_LEN);
362 	priv->replay_ctr =
363 		cpu_to_le64(be64_to_cpup((__be64 *)&data->replay_ctr));
364 	priv->have_rekey_data = true;
365 
366  out:
367 	mutex_unlock(&priv->mutex);
368 	IWL_DEBUG_MAC80211(priv, "leave\n");
369 }
370 
371 #ifdef CONFIG_PM_SLEEP
372 
373 static int iwlagn_mac_suspend(struct ieee80211_hw *hw,
374 			      struct cfg80211_wowlan *wowlan)
375 {
376 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
377 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
378 	int ret;
379 
380 	if (WARN_ON(!wowlan))
381 		return -EINVAL;
382 
383 	IWL_DEBUG_MAC80211(priv, "enter\n");
384 	mutex_lock(&priv->mutex);
385 
386 	/* Don't attempt WoWLAN when not associated, tear down instead. */
387 	if (!ctx->vif || ctx->vif->type != NL80211_IFTYPE_STATION ||
388 	    !iwl_is_associated_ctx(ctx)) {
389 		ret = 1;
390 		goto out;
391 	}
392 
393 	ret = iwlagn_suspend(priv, wowlan);
394 	if (ret)
395 		goto error;
396 
397 	/* let the ucode operate on its own */
398 	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_SET,
399 		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
400 
401 	iwl_trans_d3_suspend(priv->trans, false, true);
402 
403 	goto out;
404 
405  error:
406 	priv->wowlan = false;
407 	iwlagn_prepare_restart(priv);
408 	ieee80211_restart_hw(priv->hw);
409  out:
410 	mutex_unlock(&priv->mutex);
411 	IWL_DEBUG_MAC80211(priv, "leave\n");
412 
413 	return ret;
414 }
415 
416 struct iwl_resume_data {
417 	struct iwl_priv *priv;
418 	struct iwlagn_wowlan_status *cmd;
419 	bool valid;
420 };
421 
422 static bool iwl_resume_status_fn(struct iwl_notif_wait_data *notif_wait,
423 				 struct iwl_rx_packet *pkt, void *data)
424 {
425 	struct iwl_resume_data *resume_data = data;
426 	struct iwl_priv *priv = resume_data->priv;
427 
428 	if (iwl_rx_packet_payload_len(pkt) != sizeof(*resume_data->cmd)) {
429 		IWL_ERR(priv, "rx wrong size data\n");
430 		return true;
431 	}
432 	memcpy(resume_data->cmd, pkt->data, sizeof(*resume_data->cmd));
433 	resume_data->valid = true;
434 
435 	return true;
436 }
437 
438 static int iwlagn_mac_resume(struct ieee80211_hw *hw)
439 {
440 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
441 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
442 	struct ieee80211_vif *vif;
443 	u32 base;
444 	int ret;
445 	enum iwl_d3_status d3_status;
446 	struct error_table_start {
447 		/* cf. struct iwl_error_event_table */
448 		u32 valid;
449 		u32 error_id;
450 	} err_info;
451 	struct iwl_notification_wait status_wait;
452 	static const u16 status_cmd[] = {
453 		REPLY_WOWLAN_GET_STATUS,
454 	};
455 	struct iwlagn_wowlan_status status_data = {};
456 	struct iwl_resume_data resume_data = {
457 		.priv = priv,
458 		.cmd = &status_data,
459 		.valid = false,
460 	};
461 	struct cfg80211_wowlan_wakeup wakeup = {
462 		.pattern_idx = -1,
463 	};
464 #ifdef CONFIG_IWLWIFI_DEBUGFS
465 	const struct fw_img *img;
466 #endif
467 
468 	IWL_DEBUG_MAC80211(priv, "enter\n");
469 	mutex_lock(&priv->mutex);
470 
471 	/* we'll clear ctx->vif during iwlagn_prepare_restart() */
472 	vif = ctx->vif;
473 
474 	ret = iwl_trans_d3_resume(priv->trans, &d3_status, false, true);
475 	if (ret)
476 		goto out_unlock;
477 
478 	if (d3_status != IWL_D3_STATUS_ALIVE) {
479 		IWL_INFO(priv, "Device was reset during suspend\n");
480 		goto out_unlock;
481 	}
482 
483 	/* uCode is no longer operating by itself */
484 	iwl_write32(priv->trans, CSR_UCODE_DRV_GP1_CLR,
485 		    CSR_UCODE_DRV_GP1_BIT_D3_CFG_COMPLETE);
486 
487 	base = priv->device_pointers.error_event_table;
488 	if (!iwlagn_hw_valid_rtc_data_addr(base)) {
489 		IWL_WARN(priv, "Invalid error table during resume!\n");
490 		goto out_unlock;
491 	}
492 
493 	iwl_trans_read_mem_bytes(priv->trans, base,
494 				 &err_info, sizeof(err_info));
495 
496 	if (err_info.valid) {
497 		IWL_INFO(priv, "error table is valid (%d, 0x%x)\n",
498 			 err_info.valid, err_info.error_id);
499 		if (err_info.error_id == RF_KILL_INDICATOR_FOR_WOWLAN) {
500 			wakeup.rfkill_release = true;
501 			ieee80211_report_wowlan_wakeup(vif, &wakeup,
502 						       GFP_KERNEL);
503 		}
504 		goto out_unlock;
505 	}
506 
507 #ifdef CONFIG_IWLWIFI_DEBUGFS
508 	img = &priv->fw->img[IWL_UCODE_WOWLAN];
509 	if (!priv->wowlan_sram)
510 		priv->wowlan_sram =
511 			kzalloc(img->sec[IWL_UCODE_SECTION_DATA].len,
512 				GFP_KERNEL);
513 
514 	if (priv->wowlan_sram)
515 		iwl_trans_read_mem(priv->trans, 0x800000,
516 				   priv->wowlan_sram,
517 				   img->sec[IWL_UCODE_SECTION_DATA].len / 4);
518 #endif
519 
520 	/*
521 	 * This is very strange. The GET_STATUS command is sent but the device
522 	 * doesn't reply properly, it seems it doesn't close the RBD so one is
523 	 * always left open ... As a result, we need to send another command
524 	 * and have to reset the driver afterwards. As we need to switch to
525 	 * runtime firmware again that'll happen.
526 	 */
527 
528 	iwl_init_notification_wait(&priv->notif_wait, &status_wait, status_cmd,
529 				   ARRAY_SIZE(status_cmd), iwl_resume_status_fn,
530 				   &resume_data);
531 
532 	iwl_dvm_send_cmd_pdu(priv, REPLY_WOWLAN_GET_STATUS, CMD_ASYNC, 0, NULL);
533 	iwl_dvm_send_cmd_pdu(priv, REPLY_ECHO, CMD_ASYNC, 0, NULL);
534 	/* an RBD is left open in the firmware now! */
535 
536 	ret = iwl_wait_notification(&priv->notif_wait, &status_wait, HZ/5);
537 	if (ret)
538 		goto out_unlock;
539 
540 	if (resume_data.valid && priv->contexts[IWL_RXON_CTX_BSS].vif) {
541 		u32 reasons = le32_to_cpu(status_data.wakeup_reason);
542 		struct cfg80211_wowlan_wakeup *wakeup_report;
543 
544 		IWL_INFO(priv, "WoWLAN wakeup reason(s): 0x%.8x\n", reasons);
545 
546 		if (reasons) {
547 			if (reasons & IWLAGN_WOWLAN_WAKEUP_MAGIC_PACKET)
548 				wakeup.magic_pkt = true;
549 			if (reasons & IWLAGN_WOWLAN_WAKEUP_PATTERN_MATCH)
550 				wakeup.pattern_idx = status_data.pattern_number;
551 			if (reasons & (IWLAGN_WOWLAN_WAKEUP_BEACON_MISS |
552 				       IWLAGN_WOWLAN_WAKEUP_LINK_CHANGE))
553 				wakeup.disconnect = true;
554 			if (reasons & IWLAGN_WOWLAN_WAKEUP_GTK_REKEY_FAIL)
555 				wakeup.gtk_rekey_failure = true;
556 			if (reasons & IWLAGN_WOWLAN_WAKEUP_EAP_IDENT_REQ)
557 				wakeup.eap_identity_req = true;
558 			if (reasons & IWLAGN_WOWLAN_WAKEUP_4WAY_HANDSHAKE)
559 				wakeup.four_way_handshake = true;
560 			wakeup_report = &wakeup;
561 		} else {
562 			wakeup_report = NULL;
563 		}
564 
565 		ieee80211_report_wowlan_wakeup(vif, wakeup_report, GFP_KERNEL);
566 	}
567 
568 	priv->wowlan = false;
569 
570 	iwlagn_prepare_restart(priv);
571 
572 	memset((void *)&ctx->active, 0, sizeof(ctx->active));
573 	iwl_connection_init_rx_config(priv, ctx);
574 	iwlagn_set_rxon_chain(priv, ctx);
575 
576  out_unlock:
577 	mutex_unlock(&priv->mutex);
578 	IWL_DEBUG_MAC80211(priv, "leave\n");
579 
580 	ieee80211_resume_disconnect(vif);
581 
582 	return 1;
583 }
584 
585 static void iwlagn_mac_set_wakeup(struct ieee80211_hw *hw, bool enabled)
586 {
587 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
588 
589 	device_set_wakeup_enable(priv->trans->dev, enabled);
590 }
591 #endif
592 
593 static void iwlagn_mac_tx(struct ieee80211_hw *hw,
594 			  struct ieee80211_tx_control *control,
595 			  struct sk_buff *skb)
596 {
597 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
598 
599 	if (iwlagn_tx_skb(priv, control->sta, skb))
600 		ieee80211_free_txskb(hw, skb);
601 }
602 
603 static void iwlagn_mac_update_tkip_key(struct ieee80211_hw *hw,
604 				       struct ieee80211_vif *vif,
605 				       struct ieee80211_key_conf *keyconf,
606 				       struct ieee80211_sta *sta,
607 				       u32 iv32, u16 *phase1key)
608 {
609 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
610 
611 	iwl_update_tkip_key(priv, vif, keyconf, sta, iv32, phase1key);
612 }
613 
614 static int iwlagn_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
615 			      struct ieee80211_vif *vif,
616 			      struct ieee80211_sta *sta,
617 			      struct ieee80211_key_conf *key)
618 {
619 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
620 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
621 	struct iwl_rxon_context *ctx = vif_priv->ctx;
622 	int ret;
623 	bool is_default_wep_key = false;
624 
625 	IWL_DEBUG_MAC80211(priv, "enter\n");
626 
627 	if (iwlwifi_mod_params.swcrypto) {
628 		IWL_DEBUG_MAC80211(priv, "leave - hwcrypto disabled\n");
629 		return -EOPNOTSUPP;
630 	}
631 
632 	switch (key->cipher) {
633 	case WLAN_CIPHER_SUITE_TKIP:
634 		key->flags |= IEEE80211_KEY_FLAG_GENERATE_MMIC;
635 		/* fall through */
636 	case WLAN_CIPHER_SUITE_CCMP:
637 		key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
638 		break;
639 	default:
640 		break;
641 	}
642 
643 	/*
644 	 * We could program these keys into the hardware as well, but we
645 	 * don't expect much multicast traffic in IBSS and having keys
646 	 * for more stations is probably more useful.
647 	 *
648 	 * Mark key TX-only and return 0.
649 	 */
650 	if (vif->type == NL80211_IFTYPE_ADHOC &&
651 	    !(key->flags & IEEE80211_KEY_FLAG_PAIRWISE)) {
652 		key->hw_key_idx = WEP_INVALID_OFFSET;
653 		return 0;
654 	}
655 
656 	/* If they key was TX-only, accept deletion */
657 	if (cmd == DISABLE_KEY && key->hw_key_idx == WEP_INVALID_OFFSET)
658 		return 0;
659 
660 	mutex_lock(&priv->mutex);
661 	iwl_scan_cancel_timeout(priv, 100);
662 
663 	BUILD_BUG_ON(WEP_INVALID_OFFSET == IWLAGN_HW_KEY_DEFAULT);
664 
665 	/*
666 	 * If we are getting WEP group key and we didn't receive any key mapping
667 	 * so far, we are in legacy wep mode (group key only), otherwise we are
668 	 * in 1X mode.
669 	 * In legacy wep mode, we use another host command to the uCode.
670 	 */
671 	if ((key->cipher == WLAN_CIPHER_SUITE_WEP40 ||
672 	     key->cipher == WLAN_CIPHER_SUITE_WEP104) && !sta) {
673 		if (cmd == SET_KEY)
674 			is_default_wep_key = !ctx->key_mapping_keys;
675 		else
676 			is_default_wep_key =
677 				key->hw_key_idx == IWLAGN_HW_KEY_DEFAULT;
678 	}
679 
680 
681 	switch (cmd) {
682 	case SET_KEY:
683 		if (is_default_wep_key) {
684 			ret = iwl_set_default_wep_key(priv, vif_priv->ctx, key);
685 			break;
686 		}
687 		ret = iwl_set_dynamic_key(priv, vif_priv->ctx, key, sta);
688 		if (ret) {
689 			/*
690 			 * can't add key for RX, but we don't need it
691 			 * in the device for TX so still return 0
692 			 */
693 			ret = 0;
694 			key->hw_key_idx = WEP_INVALID_OFFSET;
695 		}
696 
697 		IWL_DEBUG_MAC80211(priv, "enable hwcrypto key\n");
698 		break;
699 	case DISABLE_KEY:
700 		if (is_default_wep_key)
701 			ret = iwl_remove_default_wep_key(priv, ctx, key);
702 		else
703 			ret = iwl_remove_dynamic_key(priv, ctx, key, sta);
704 
705 		IWL_DEBUG_MAC80211(priv, "disable hwcrypto key\n");
706 		break;
707 	default:
708 		ret = -EINVAL;
709 	}
710 
711 	mutex_unlock(&priv->mutex);
712 	IWL_DEBUG_MAC80211(priv, "leave\n");
713 
714 	return ret;
715 }
716 
717 static inline bool iwl_enable_rx_ampdu(const struct iwl_cfg *cfg)
718 {
719 	if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_RXAGG)
720 		return false;
721 	return true;
722 }
723 
724 static inline bool iwl_enable_tx_ampdu(const struct iwl_cfg *cfg)
725 {
726 	if (iwlwifi_mod_params.disable_11n & IWL_DISABLE_HT_TXAGG)
727 		return false;
728 	if (iwlwifi_mod_params.disable_11n & IWL_ENABLE_HT_TXAGG)
729 		return true;
730 
731 	/* disabled by default */
732 	return false;
733 }
734 
735 static int iwlagn_mac_ampdu_action(struct ieee80211_hw *hw,
736 				   struct ieee80211_vif *vif,
737 				   struct ieee80211_ampdu_params *params)
738 {
739 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
740 	int ret = -EINVAL;
741 	struct ieee80211_sta *sta = params->sta;
742 	enum ieee80211_ampdu_mlme_action action = params->action;
743 	u16 tid = params->tid;
744 	u16 *ssn = &params->ssn;
745 	u8 buf_size = params->buf_size;
746 	struct iwl_station_priv *sta_priv = (void *) sta->drv_priv;
747 
748 	IWL_DEBUG_HT(priv, "A-MPDU action on addr %pM tid %d\n",
749 		     sta->addr, tid);
750 
751 	if (!(priv->nvm_data->sku_cap_11n_enable))
752 		return -EACCES;
753 
754 	IWL_DEBUG_MAC80211(priv, "enter\n");
755 	mutex_lock(&priv->mutex);
756 
757 	switch (action) {
758 	case IEEE80211_AMPDU_RX_START:
759 		if (!iwl_enable_rx_ampdu(priv->cfg))
760 			break;
761 		IWL_DEBUG_HT(priv, "start Rx\n");
762 		ret = iwl_sta_rx_agg_start(priv, sta, tid, *ssn);
763 		break;
764 	case IEEE80211_AMPDU_RX_STOP:
765 		IWL_DEBUG_HT(priv, "stop Rx\n");
766 		ret = iwl_sta_rx_agg_stop(priv, sta, tid);
767 		break;
768 	case IEEE80211_AMPDU_TX_START:
769 		if (!priv->trans->ops->txq_enable)
770 			break;
771 		if (!iwl_enable_tx_ampdu(priv->cfg))
772 			break;
773 		IWL_DEBUG_HT(priv, "start Tx\n");
774 		ret = iwlagn_tx_agg_start(priv, vif, sta, tid, ssn);
775 		break;
776 	case IEEE80211_AMPDU_TX_STOP_FLUSH:
777 	case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT:
778 		IWL_DEBUG_HT(priv, "Flush Tx\n");
779 		ret = iwlagn_tx_agg_flush(priv, vif, sta, tid);
780 		break;
781 	case IEEE80211_AMPDU_TX_STOP_CONT:
782 		IWL_DEBUG_HT(priv, "stop Tx\n");
783 		ret = iwlagn_tx_agg_stop(priv, vif, sta, tid);
784 		if ((ret == 0) && (priv->agg_tids_count > 0)) {
785 			priv->agg_tids_count--;
786 			IWL_DEBUG_HT(priv, "priv->agg_tids_count = %u\n",
787 				     priv->agg_tids_count);
788 		}
789 		if (!priv->agg_tids_count &&
790 		    priv->hw_params.use_rts_for_aggregation) {
791 			/*
792 			 * switch off RTS/CTS if it was previously enabled
793 			 */
794 			sta_priv->lq_sta.lq.general_params.flags &=
795 				~LINK_QUAL_FLAGS_SET_STA_TLC_RTS_MSK;
796 			iwl_send_lq_cmd(priv, iwl_rxon_ctx_from_vif(vif),
797 					&sta_priv->lq_sta.lq, CMD_ASYNC, false);
798 		}
799 		break;
800 	case IEEE80211_AMPDU_TX_OPERATIONAL:
801 		ret = iwlagn_tx_agg_oper(priv, vif, sta, tid, buf_size);
802 		break;
803 	}
804 	mutex_unlock(&priv->mutex);
805 	IWL_DEBUG_MAC80211(priv, "leave\n");
806 	return ret;
807 }
808 
809 static int iwlagn_mac_sta_add(struct ieee80211_hw *hw,
810 			      struct ieee80211_vif *vif,
811 			      struct ieee80211_sta *sta)
812 {
813 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
814 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
815 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
816 	bool is_ap = vif->type == NL80211_IFTYPE_STATION;
817 	int ret;
818 	u8 sta_id;
819 
820 	IWL_DEBUG_INFO(priv, "proceeding to add station %pM\n",
821 			sta->addr);
822 	sta_priv->sta_id = IWL_INVALID_STATION;
823 
824 	atomic_set(&sta_priv->pending_frames, 0);
825 	if (vif->type == NL80211_IFTYPE_AP)
826 		sta_priv->client = true;
827 
828 	ret = iwl_add_station_common(priv, vif_priv->ctx, sta->addr,
829 				     is_ap, sta, &sta_id);
830 	if (ret) {
831 		IWL_ERR(priv, "Unable to add station %pM (%d)\n",
832 			sta->addr, ret);
833 		/* Should we return success if return code is EEXIST ? */
834 		return ret;
835 	}
836 
837 	sta_priv->sta_id = sta_id;
838 
839 	return 0;
840 }
841 
842 static int iwlagn_mac_sta_remove(struct ieee80211_hw *hw,
843 				 struct ieee80211_vif *vif,
844 				 struct ieee80211_sta *sta)
845 {
846 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
847 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
848 	int ret;
849 
850 	IWL_DEBUG_INFO(priv, "proceeding to remove station %pM\n", sta->addr);
851 
852 	if (vif->type == NL80211_IFTYPE_STATION) {
853 		/*
854 		 * Station will be removed from device when the RXON
855 		 * is set to unassociated -- just deactivate it here
856 		 * to avoid re-programming it.
857 		 */
858 		ret = 0;
859 		iwl_deactivate_station(priv, sta_priv->sta_id, sta->addr);
860 	} else {
861 		ret = iwl_remove_station(priv, sta_priv->sta_id, sta->addr);
862 		if (ret)
863 			IWL_DEBUG_QUIET_RFKILL(priv,
864 				"Error removing station %pM\n", sta->addr);
865 	}
866 	return ret;
867 }
868 
869 static int iwlagn_mac_sta_state(struct ieee80211_hw *hw,
870 				struct ieee80211_vif *vif,
871 				struct ieee80211_sta *sta,
872 				enum ieee80211_sta_state old_state,
873 				enum ieee80211_sta_state new_state)
874 {
875 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
876 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
877 	enum {
878 		NONE, ADD, REMOVE, HT_RATE_INIT, ADD_RATE_INIT,
879 	} op = NONE;
880 	int ret;
881 
882 	IWL_DEBUG_MAC80211(priv, "station %pM state change %d->%d\n",
883 			   sta->addr, old_state, new_state);
884 
885 	mutex_lock(&priv->mutex);
886 	if (vif->type == NL80211_IFTYPE_STATION) {
887 		if (old_state == IEEE80211_STA_NOTEXIST &&
888 		    new_state == IEEE80211_STA_NONE)
889 			op = ADD;
890 		else if (old_state == IEEE80211_STA_NONE &&
891 			 new_state == IEEE80211_STA_NOTEXIST)
892 			op = REMOVE;
893 		else if (old_state == IEEE80211_STA_AUTH &&
894 			 new_state == IEEE80211_STA_ASSOC)
895 			op = HT_RATE_INIT;
896 	} else {
897 		if (old_state == IEEE80211_STA_AUTH &&
898 		    new_state == IEEE80211_STA_ASSOC)
899 			op = ADD_RATE_INIT;
900 		else if (old_state == IEEE80211_STA_ASSOC &&
901 			 new_state == IEEE80211_STA_AUTH)
902 			op = REMOVE;
903 	}
904 
905 	switch (op) {
906 	case ADD:
907 		ret = iwlagn_mac_sta_add(hw, vif, sta);
908 		if (ret)
909 			break;
910 		/*
911 		 * Clear the in-progress flag, the AP station entry was added
912 		 * but we'll initialize LQ only when we've associated (which
913 		 * would also clear the in-progress flag). This is necessary
914 		 * in case we never initialize LQ because association fails.
915 		 */
916 		spin_lock_bh(&priv->sta_lock);
917 		priv->stations[iwl_sta_id(sta)].used &=
918 			~IWL_STA_UCODE_INPROGRESS;
919 		spin_unlock_bh(&priv->sta_lock);
920 		break;
921 	case REMOVE:
922 		ret = iwlagn_mac_sta_remove(hw, vif, sta);
923 		break;
924 	case ADD_RATE_INIT:
925 		ret = iwlagn_mac_sta_add(hw, vif, sta);
926 		if (ret)
927 			break;
928 		/* Initialize rate scaling */
929 		IWL_DEBUG_INFO(priv,
930 			       "Initializing rate scaling for station %pM\n",
931 			       sta->addr);
932 		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
933 		ret = 0;
934 		break;
935 	case HT_RATE_INIT:
936 		/* Initialize rate scaling */
937 		ret = iwl_sta_update_ht(priv, vif_priv->ctx, sta);
938 		if (ret)
939 			break;
940 		IWL_DEBUG_INFO(priv,
941 			       "Initializing rate scaling for station %pM\n",
942 			       sta->addr);
943 		iwl_rs_rate_init(priv, sta, iwl_sta_id(sta));
944 		ret = 0;
945 		break;
946 	default:
947 		ret = 0;
948 		break;
949 	}
950 
951 	/*
952 	 * mac80211 might WARN if we fail, but due the way we
953 	 * (badly) handle hard rfkill, we might fail here
954 	 */
955 	if (iwl_is_rfkill(priv))
956 		ret = 0;
957 
958 	mutex_unlock(&priv->mutex);
959 	IWL_DEBUG_MAC80211(priv, "leave\n");
960 
961 	return ret;
962 }
963 
964 static void iwlagn_mac_channel_switch(struct ieee80211_hw *hw,
965 				      struct ieee80211_vif *vif,
966 				      struct ieee80211_channel_switch *ch_switch)
967 {
968 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
969 	struct ieee80211_conf *conf = &hw->conf;
970 	struct ieee80211_channel *channel = ch_switch->chandef.chan;
971 	struct iwl_ht_config *ht_conf = &priv->current_ht_config;
972 	/*
973 	 * MULTI-FIXME
974 	 * When we add support for multiple interfaces, we need to
975 	 * revisit this. The channel switch command in the device
976 	 * only affects the BSS context, but what does that really
977 	 * mean? And what if we get a CSA on the second interface?
978 	 * This needs a lot of work.
979 	 */
980 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
981 	u16 ch;
982 
983 	IWL_DEBUG_MAC80211(priv, "enter\n");
984 
985 	mutex_lock(&priv->mutex);
986 
987 	if (iwl_is_rfkill(priv))
988 		goto out;
989 
990 	if (test_bit(STATUS_EXIT_PENDING, &priv->status) ||
991 	    test_bit(STATUS_SCANNING, &priv->status) ||
992 	    test_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
993 		goto out;
994 
995 	if (!iwl_is_associated_ctx(ctx))
996 		goto out;
997 
998 	if (!priv->lib->set_channel_switch)
999 		goto out;
1000 
1001 	ch = channel->hw_value;
1002 	if (le16_to_cpu(ctx->active.channel) == ch)
1003 		goto out;
1004 
1005 	priv->current_ht_config.smps = conf->smps_mode;
1006 
1007 	/* Configure HT40 channels */
1008 	switch (cfg80211_get_chandef_type(&ch_switch->chandef)) {
1009 	case NL80211_CHAN_NO_HT:
1010 	case NL80211_CHAN_HT20:
1011 		ctx->ht.is_40mhz = false;
1012 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_NONE;
1013 		break;
1014 	case NL80211_CHAN_HT40MINUS:
1015 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_BELOW;
1016 		ctx->ht.is_40mhz = true;
1017 		break;
1018 	case NL80211_CHAN_HT40PLUS:
1019 		ctx->ht.extension_chan_offset = IEEE80211_HT_PARAM_CHA_SEC_ABOVE;
1020 		ctx->ht.is_40mhz = true;
1021 		break;
1022 	}
1023 
1024 	if ((le16_to_cpu(ctx->staging.channel) != ch))
1025 		ctx->staging.flags = 0;
1026 
1027 	iwl_set_rxon_channel(priv, channel, ctx);
1028 	iwl_set_rxon_ht(priv, ht_conf);
1029 	iwl_set_flags_for_band(priv, ctx, channel->band, ctx->vif);
1030 
1031 	/*
1032 	 * at this point, staging_rxon has the
1033 	 * configuration for channel switch
1034 	 */
1035 	set_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1036 	priv->switch_channel = cpu_to_le16(ch);
1037 	if (priv->lib->set_channel_switch(priv, ch_switch)) {
1038 		clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status);
1039 		priv->switch_channel = 0;
1040 		ieee80211_chswitch_done(ctx->vif, false);
1041 	}
1042 
1043 out:
1044 	mutex_unlock(&priv->mutex);
1045 	IWL_DEBUG_MAC80211(priv, "leave\n");
1046 }
1047 
1048 void iwl_chswitch_done(struct iwl_priv *priv, bool is_success)
1049 {
1050 	/*
1051 	 * MULTI-FIXME
1052 	 * See iwlagn_mac_channel_switch.
1053 	 */
1054 	struct iwl_rxon_context *ctx = &priv->contexts[IWL_RXON_CTX_BSS];
1055 
1056 	if (test_bit(STATUS_EXIT_PENDING, &priv->status))
1057 		return;
1058 
1059 	if (!test_and_clear_bit(STATUS_CHANNEL_SWITCH_PENDING, &priv->status))
1060 		return;
1061 
1062 	if (ctx->vif)
1063 		ieee80211_chswitch_done(ctx->vif, is_success);
1064 }
1065 
1066 static void iwlagn_configure_filter(struct ieee80211_hw *hw,
1067 				    unsigned int changed_flags,
1068 				    unsigned int *total_flags,
1069 				    u64 multicast)
1070 {
1071 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1072 	__le32 filter_or = 0, filter_nand = 0;
1073 	struct iwl_rxon_context *ctx;
1074 
1075 #define CHK(test, flag)	do { \
1076 	if (*total_flags & (test))		\
1077 		filter_or |= (flag);		\
1078 	else					\
1079 		filter_nand |= (flag);		\
1080 	} while (0)
1081 
1082 	IWL_DEBUG_MAC80211(priv, "Enter: changed: 0x%x, total: 0x%x\n",
1083 			changed_flags, *total_flags);
1084 
1085 	CHK(FIF_OTHER_BSS, RXON_FILTER_PROMISC_MSK);
1086 	/* Setting _just_ RXON_FILTER_CTL2HOST_MSK causes FH errors */
1087 	CHK(FIF_CONTROL, RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_PROMISC_MSK);
1088 	CHK(FIF_BCN_PRBRESP_PROMISC, RXON_FILTER_BCON_AWARE_MSK);
1089 
1090 #undef CHK
1091 
1092 	mutex_lock(&priv->mutex);
1093 
1094 	for_each_context(priv, ctx) {
1095 		ctx->staging.filter_flags &= ~filter_nand;
1096 		ctx->staging.filter_flags |= filter_or;
1097 
1098 		/*
1099 		 * Not committing directly because hardware can perform a scan,
1100 		 * but we'll eventually commit the filter flags change anyway.
1101 		 */
1102 	}
1103 
1104 	mutex_unlock(&priv->mutex);
1105 
1106 	/*
1107 	 * Receiving all multicast frames is always enabled by the
1108 	 * default flags setup in iwl_connection_init_rx_config()
1109 	 * since we currently do not support programming multicast
1110 	 * filters into the device.
1111 	 */
1112 	*total_flags &= FIF_OTHER_BSS | FIF_ALLMULTI |
1113 			FIF_BCN_PRBRESP_PROMISC | FIF_CONTROL;
1114 }
1115 
1116 static void iwlagn_mac_flush(struct ieee80211_hw *hw, struct ieee80211_vif *vif,
1117 			     u32 queues, bool drop)
1118 {
1119 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1120 	u32 scd_queues;
1121 
1122 	mutex_lock(&priv->mutex);
1123 	IWL_DEBUG_MAC80211(priv, "enter\n");
1124 
1125 	if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
1126 		IWL_DEBUG_TX(priv, "Aborting flush due to device shutdown\n");
1127 		goto done;
1128 	}
1129 	if (iwl_is_rfkill(priv)) {
1130 		IWL_DEBUG_TX(priv, "Aborting flush due to RF Kill\n");
1131 		goto done;
1132 	}
1133 
1134 	scd_queues = BIT(priv->cfg->base_params->num_of_queues) - 1;
1135 	scd_queues &= ~(BIT(IWL_IPAN_CMD_QUEUE_NUM) |
1136 			BIT(IWL_DEFAULT_CMD_QUEUE_NUM));
1137 
1138 	if (drop) {
1139 		IWL_DEBUG_TX_QUEUES(priv, "Flushing SCD queues: 0x%x\n",
1140 				    scd_queues);
1141 		if (iwlagn_txfifo_flush(priv, scd_queues)) {
1142 			IWL_ERR(priv, "flush request fail\n");
1143 			goto done;
1144 		}
1145 	}
1146 
1147 	IWL_DEBUG_TX_QUEUES(priv, "wait transmit/flush all frames\n");
1148 	iwl_trans_wait_tx_queues_empty(priv->trans, scd_queues);
1149 done:
1150 	mutex_unlock(&priv->mutex);
1151 	IWL_DEBUG_MAC80211(priv, "leave\n");
1152 }
1153 
1154 static void iwlagn_mac_event_callback(struct ieee80211_hw *hw,
1155 				      struct ieee80211_vif *vif,
1156 				      const struct ieee80211_event *event)
1157 {
1158 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1159 
1160 	if (event->type != RSSI_EVENT)
1161 		return;
1162 
1163 	IWL_DEBUG_MAC80211(priv, "enter\n");
1164 
1165 	if (priv->lib->bt_params &&
1166 	    priv->lib->bt_params->advanced_bt_coexist) {
1167 		if (event->u.rssi.data == RSSI_EVENT_LOW)
1168 			priv->bt_enable_pspoll = true;
1169 		else if (event->u.rssi.data == RSSI_EVENT_HIGH)
1170 			priv->bt_enable_pspoll = false;
1171 
1172 		queue_work(priv->workqueue, &priv->bt_runtime_config);
1173 	} else {
1174 		IWL_DEBUG_MAC80211(priv, "Advanced BT coex disabled,"
1175 				"ignoring RSSI callback\n");
1176 	}
1177 
1178 	IWL_DEBUG_MAC80211(priv, "leave\n");
1179 }
1180 
1181 static int iwlagn_mac_set_tim(struct ieee80211_hw *hw,
1182 			      struct ieee80211_sta *sta, bool set)
1183 {
1184 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1185 
1186 	queue_work(priv->workqueue, &priv->beacon_update);
1187 
1188 	return 0;
1189 }
1190 
1191 static int iwlagn_mac_conf_tx(struct ieee80211_hw *hw,
1192 			      struct ieee80211_vif *vif, u16 queue,
1193 			      const struct ieee80211_tx_queue_params *params)
1194 {
1195 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1196 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1197 	struct iwl_rxon_context *ctx = vif_priv->ctx;
1198 	int q;
1199 
1200 	if (WARN_ON(!ctx))
1201 		return -EINVAL;
1202 
1203 	IWL_DEBUG_MAC80211(priv, "enter\n");
1204 
1205 	if (!iwl_is_ready_rf(priv)) {
1206 		IWL_DEBUG_MAC80211(priv, "leave - RF not ready\n");
1207 		return -EIO;
1208 	}
1209 
1210 	if (queue >= AC_NUM) {
1211 		IWL_DEBUG_MAC80211(priv, "leave - queue >= AC_NUM %d\n", queue);
1212 		return 0;
1213 	}
1214 
1215 	q = AC_NUM - 1 - queue;
1216 
1217 	mutex_lock(&priv->mutex);
1218 
1219 	ctx->qos_data.def_qos_parm.ac[q].cw_min =
1220 		cpu_to_le16(params->cw_min);
1221 	ctx->qos_data.def_qos_parm.ac[q].cw_max =
1222 		cpu_to_le16(params->cw_max);
1223 	ctx->qos_data.def_qos_parm.ac[q].aifsn = params->aifs;
1224 	ctx->qos_data.def_qos_parm.ac[q].edca_txop =
1225 			cpu_to_le16((params->txop * 32));
1226 
1227 	ctx->qos_data.def_qos_parm.ac[q].reserved1 = 0;
1228 
1229 	mutex_unlock(&priv->mutex);
1230 
1231 	IWL_DEBUG_MAC80211(priv, "leave\n");
1232 	return 0;
1233 }
1234 
1235 static int iwlagn_mac_tx_last_beacon(struct ieee80211_hw *hw)
1236 {
1237 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1238 
1239 	return priv->ibss_manager == IWL_IBSS_MANAGER;
1240 }
1241 
1242 static int iwl_set_mode(struct iwl_priv *priv, struct iwl_rxon_context *ctx)
1243 {
1244 	iwl_connection_init_rx_config(priv, ctx);
1245 
1246 	iwlagn_set_rxon_chain(priv, ctx);
1247 
1248 	return iwlagn_commit_rxon(priv, ctx);
1249 }
1250 
1251 static int iwl_setup_interface(struct iwl_priv *priv,
1252 			       struct iwl_rxon_context *ctx)
1253 {
1254 	struct ieee80211_vif *vif = ctx->vif;
1255 	int err, ac;
1256 
1257 	lockdep_assert_held(&priv->mutex);
1258 
1259 	/*
1260 	 * This variable will be correct only when there's just
1261 	 * a single context, but all code using it is for hardware
1262 	 * that supports only one context.
1263 	 */
1264 	priv->iw_mode = vif->type;
1265 
1266 	ctx->is_active = true;
1267 
1268 	err = iwl_set_mode(priv, ctx);
1269 	if (err) {
1270 		if (!ctx->always_active)
1271 			ctx->is_active = false;
1272 		return err;
1273 	}
1274 
1275 	if (priv->lib->bt_params && priv->lib->bt_params->advanced_bt_coexist &&
1276 	    vif->type == NL80211_IFTYPE_ADHOC) {
1277 		/*
1278 		 * pretend to have high BT traffic as long as we
1279 		 * are operating in IBSS mode, as this will cause
1280 		 * the rate scaling etc. to behave as intended.
1281 		 */
1282 		priv->bt_traffic_load = IWL_BT_COEX_TRAFFIC_LOAD_HIGH;
1283 	}
1284 
1285 	/* set up queue mappings */
1286 	for (ac = 0; ac < IEEE80211_NUM_ACS; ac++)
1287 		vif->hw_queue[ac] = ctx->ac_to_queue[ac];
1288 
1289 	if (vif->type == NL80211_IFTYPE_AP)
1290 		vif->cab_queue = ctx->mcast_queue;
1291 	else
1292 		vif->cab_queue = IEEE80211_INVAL_HW_QUEUE;
1293 
1294 	return 0;
1295 }
1296 
1297 static int iwlagn_mac_add_interface(struct ieee80211_hw *hw,
1298 				    struct ieee80211_vif *vif)
1299 {
1300 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1301 	struct iwl_vif_priv *vif_priv = (void *)vif->drv_priv;
1302 	struct iwl_rxon_context *tmp, *ctx = NULL;
1303 	int err;
1304 	enum nl80211_iftype viftype = ieee80211_vif_type_p2p(vif);
1305 	bool reset = false;
1306 
1307 	IWL_DEBUG_MAC80211(priv, "enter: type %d, addr %pM\n",
1308 			   viftype, vif->addr);
1309 
1310 	mutex_lock(&priv->mutex);
1311 
1312 	if (!iwl_is_ready_rf(priv)) {
1313 		IWL_WARN(priv, "Try to add interface when device not ready\n");
1314 		err = -EINVAL;
1315 		goto out;
1316 	}
1317 
1318 	for_each_context(priv, tmp) {
1319 		u32 possible_modes =
1320 			tmp->interface_modes | tmp->exclusive_interface_modes;
1321 
1322 		if (tmp->vif) {
1323 			/* On reset we need to add the same interface again */
1324 			if (tmp->vif == vif) {
1325 				reset = true;
1326 				ctx = tmp;
1327 				break;
1328 			}
1329 
1330 			/* check if this busy context is exclusive */
1331 			if (tmp->exclusive_interface_modes &
1332 						BIT(tmp->vif->type)) {
1333 				err = -EINVAL;
1334 				goto out;
1335 			}
1336 			continue;
1337 		}
1338 
1339 		if (!(possible_modes & BIT(viftype)))
1340 			continue;
1341 
1342 		/* have maybe usable context w/o interface */
1343 		ctx = tmp;
1344 		break;
1345 	}
1346 
1347 	if (!ctx) {
1348 		err = -EOPNOTSUPP;
1349 		goto out;
1350 	}
1351 
1352 	vif_priv->ctx = ctx;
1353 	ctx->vif = vif;
1354 
1355 	/*
1356 	 * In SNIFFER device type, the firmware reports the FCS to
1357 	 * the host, rather than snipping it off. Unfortunately,
1358 	 * mac80211 doesn't (yet) provide a per-packet flag for
1359 	 * this, so that we have to set the hardware flag based
1360 	 * on the interfaces added. As the monitor interface can
1361 	 * only be present by itself, and will be removed before
1362 	 * other interfaces are added, this is safe.
1363 	 */
1364 	if (vif->type == NL80211_IFTYPE_MONITOR)
1365 		ieee80211_hw_set(priv->hw, RX_INCLUDES_FCS);
1366 	else
1367 		__clear_bit(IEEE80211_HW_RX_INCLUDES_FCS, priv->hw->flags);
1368 
1369 	err = iwl_setup_interface(priv, ctx);
1370 	if (!err || reset)
1371 		goto out;
1372 
1373 	ctx->vif = NULL;
1374 	priv->iw_mode = NL80211_IFTYPE_STATION;
1375  out:
1376 	mutex_unlock(&priv->mutex);
1377 
1378 	IWL_DEBUG_MAC80211(priv, "leave\n");
1379 	return err;
1380 }
1381 
1382 static void iwl_teardown_interface(struct iwl_priv *priv,
1383 				   struct ieee80211_vif *vif,
1384 				   bool mode_change)
1385 {
1386 	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1387 
1388 	lockdep_assert_held(&priv->mutex);
1389 
1390 	if (priv->scan_vif == vif) {
1391 		iwl_scan_cancel_timeout(priv, 200);
1392 		iwl_force_scan_end(priv);
1393 	}
1394 
1395 	if (!mode_change) {
1396 		iwl_set_mode(priv, ctx);
1397 		if (!ctx->always_active)
1398 			ctx->is_active = false;
1399 	}
1400 
1401 	/*
1402 	 * When removing the IBSS interface, overwrite the
1403 	 * BT traffic load with the stored one from the last
1404 	 * notification, if any. If this is a device that
1405 	 * doesn't implement this, this has no effect since
1406 	 * both values are the same and zero.
1407 	 */
1408 	if (vif->type == NL80211_IFTYPE_ADHOC)
1409 		priv->bt_traffic_load = priv->last_bt_traffic_load;
1410 }
1411 
1412 static void iwlagn_mac_remove_interface(struct ieee80211_hw *hw,
1413 			      struct ieee80211_vif *vif)
1414 {
1415 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1416 	struct iwl_rxon_context *ctx = iwl_rxon_ctx_from_vif(vif);
1417 
1418 	IWL_DEBUG_MAC80211(priv, "enter\n");
1419 
1420 	mutex_lock(&priv->mutex);
1421 
1422 	WARN_ON(ctx->vif != vif);
1423 	ctx->vif = NULL;
1424 
1425 	iwl_teardown_interface(priv, vif, false);
1426 
1427 	mutex_unlock(&priv->mutex);
1428 
1429 	IWL_DEBUG_MAC80211(priv, "leave\n");
1430 
1431 }
1432 
1433 static int iwlagn_mac_change_interface(struct ieee80211_hw *hw,
1434 				       struct ieee80211_vif *vif,
1435 				       enum nl80211_iftype newtype, bool newp2p)
1436 {
1437 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1438 	struct iwl_rxon_context *ctx, *tmp;
1439 	enum nl80211_iftype newviftype = newtype;
1440 	u32 interface_modes;
1441 	int err;
1442 
1443 	IWL_DEBUG_MAC80211(priv, "enter\n");
1444 
1445 	newtype = ieee80211_iftype_p2p(newtype, newp2p);
1446 
1447 	mutex_lock(&priv->mutex);
1448 
1449 	ctx = iwl_rxon_ctx_from_vif(vif);
1450 
1451 	/*
1452 	 * To simplify this code, only support changes on the
1453 	 * BSS context. The PAN context is usually reassigned
1454 	 * by creating/removing P2P interfaces anyway.
1455 	 */
1456 	if (ctx->ctxid != IWL_RXON_CTX_BSS) {
1457 		err = -EBUSY;
1458 		goto out;
1459 	}
1460 
1461 	if (!ctx->vif || !iwl_is_ready_rf(priv)) {
1462 		/*
1463 		 * Huh? But wait ... this can maybe happen when
1464 		 * we're in the middle of a firmware restart!
1465 		 */
1466 		err = -EBUSY;
1467 		goto out;
1468 	}
1469 
1470 	/* Check if the switch is supported in the same context */
1471 	interface_modes = ctx->interface_modes | ctx->exclusive_interface_modes;
1472 	if (!(interface_modes & BIT(newtype))) {
1473 		err = -EBUSY;
1474 		goto out;
1475 	}
1476 
1477 	if (ctx->exclusive_interface_modes & BIT(newtype)) {
1478 		for_each_context(priv, tmp) {
1479 			if (ctx == tmp)
1480 				continue;
1481 
1482 			if (!tmp->is_active)
1483 				continue;
1484 
1485 			/*
1486 			 * The current mode switch would be exclusive, but
1487 			 * another context is active ... refuse the switch.
1488 			 */
1489 			err = -EBUSY;
1490 			goto out;
1491 		}
1492 	}
1493 
1494 	/* success */
1495 	iwl_teardown_interface(priv, vif, true);
1496 	vif->type = newviftype;
1497 	vif->p2p = newp2p;
1498 	err = iwl_setup_interface(priv, ctx);
1499 	WARN_ON(err);
1500 	/*
1501 	 * We've switched internally, but submitting to the
1502 	 * device may have failed for some reason. Mask this
1503 	 * error, because otherwise mac80211 will not switch
1504 	 * (and set the interface type back) and we'll be
1505 	 * out of sync with it.
1506 	 */
1507 	err = 0;
1508 
1509  out:
1510 	mutex_unlock(&priv->mutex);
1511 	IWL_DEBUG_MAC80211(priv, "leave\n");
1512 
1513 	return err;
1514 }
1515 
1516 static int iwlagn_mac_hw_scan(struct ieee80211_hw *hw,
1517 			      struct ieee80211_vif *vif,
1518 			      struct ieee80211_scan_request *hw_req)
1519 {
1520 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1521 	struct cfg80211_scan_request *req = &hw_req->req;
1522 	int ret;
1523 
1524 	IWL_DEBUG_MAC80211(priv, "enter\n");
1525 
1526 	if (req->n_channels == 0)
1527 		return -EINVAL;
1528 
1529 	mutex_lock(&priv->mutex);
1530 
1531 	/*
1532 	 * If an internal scan is in progress, just set
1533 	 * up the scan_request as per above.
1534 	 */
1535 	if (priv->scan_type != IWL_SCAN_NORMAL) {
1536 		IWL_DEBUG_SCAN(priv,
1537 			       "SCAN request during internal scan - defer\n");
1538 		priv->scan_request = req;
1539 		priv->scan_vif = vif;
1540 		ret = 0;
1541 	} else {
1542 		priv->scan_request = req;
1543 		priv->scan_vif = vif;
1544 		/*
1545 		 * mac80211 will only ask for one band at a time
1546 		 * so using channels[0] here is ok
1547 		 */
1548 		ret = iwl_scan_initiate(priv, vif, IWL_SCAN_NORMAL,
1549 					req->channels[0]->band);
1550 		if (ret) {
1551 			priv->scan_request = NULL;
1552 			priv->scan_vif = NULL;
1553 		}
1554 	}
1555 
1556 	IWL_DEBUG_MAC80211(priv, "leave\n");
1557 
1558 	mutex_unlock(&priv->mutex);
1559 
1560 	return ret;
1561 }
1562 
1563 static void iwl_sta_modify_ps_wake(struct iwl_priv *priv, int sta_id)
1564 {
1565 	struct iwl_addsta_cmd cmd = {
1566 		.mode = STA_CONTROL_MODIFY_MSK,
1567 		.station_flags_msk = STA_FLG_PWR_SAVE_MSK,
1568 		.sta.sta_id = sta_id,
1569 	};
1570 
1571 	iwl_send_add_sta(priv, &cmd, CMD_ASYNC);
1572 }
1573 
1574 static void iwlagn_mac_sta_notify(struct ieee80211_hw *hw,
1575 				  struct ieee80211_vif *vif,
1576 				  enum sta_notify_cmd cmd,
1577 				  struct ieee80211_sta *sta)
1578 {
1579 	struct iwl_priv *priv = IWL_MAC80211_GET_DVM(hw);
1580 	struct iwl_station_priv *sta_priv = (void *)sta->drv_priv;
1581 	int sta_id;
1582 
1583 	IWL_DEBUG_MAC80211(priv, "enter\n");
1584 
1585 	switch (cmd) {
1586 	case STA_NOTIFY_SLEEP:
1587 		WARN_ON(!sta_priv->client);
1588 		sta_priv->asleep = true;
1589 		if (atomic_read(&sta_priv->pending_frames) > 0)
1590 			ieee80211_sta_block_awake(hw, sta, true);
1591 		break;
1592 	case STA_NOTIFY_AWAKE:
1593 		WARN_ON(!sta_priv->client);
1594 		if (!sta_priv->asleep)
1595 			break;
1596 		sta_priv->asleep = false;
1597 		sta_id = iwl_sta_id(sta);
1598 		if (sta_id != IWL_INVALID_STATION)
1599 			iwl_sta_modify_ps_wake(priv, sta_id);
1600 		break;
1601 	default:
1602 		break;
1603 	}
1604 	IWL_DEBUG_MAC80211(priv, "leave\n");
1605 }
1606 
1607 const struct ieee80211_ops iwlagn_hw_ops = {
1608 	.tx = iwlagn_mac_tx,
1609 	.start = iwlagn_mac_start,
1610 	.stop = iwlagn_mac_stop,
1611 #ifdef CONFIG_PM_SLEEP
1612 	.suspend = iwlagn_mac_suspend,
1613 	.resume = iwlagn_mac_resume,
1614 	.set_wakeup = iwlagn_mac_set_wakeup,
1615 #endif
1616 	.add_interface = iwlagn_mac_add_interface,
1617 	.remove_interface = iwlagn_mac_remove_interface,
1618 	.change_interface = iwlagn_mac_change_interface,
1619 	.config = iwlagn_mac_config,
1620 	.configure_filter = iwlagn_configure_filter,
1621 	.set_key = iwlagn_mac_set_key,
1622 	.update_tkip_key = iwlagn_mac_update_tkip_key,
1623 	.set_rekey_data = iwlagn_mac_set_rekey_data,
1624 	.conf_tx = iwlagn_mac_conf_tx,
1625 	.bss_info_changed = iwlagn_bss_info_changed,
1626 	.ampdu_action = iwlagn_mac_ampdu_action,
1627 	.hw_scan = iwlagn_mac_hw_scan,
1628 	.sta_notify = iwlagn_mac_sta_notify,
1629 	.sta_state = iwlagn_mac_sta_state,
1630 	.channel_switch = iwlagn_mac_channel_switch,
1631 	.flush = iwlagn_mac_flush,
1632 	.tx_last_beacon = iwlagn_mac_tx_last_beacon,
1633 	.event_callback = iwlagn_mac_event_callback,
1634 	.set_tim = iwlagn_mac_set_tim,
1635 };
1636 
1637 /* This function both allocates and initializes hw and priv. */
1638 struct ieee80211_hw *iwl_alloc_all(void)
1639 {
1640 	struct iwl_priv *priv;
1641 	struct iwl_op_mode *op_mode;
1642 	/* mac80211 allocates memory for this device instance, including
1643 	 *   space for this driver's private structure */
1644 	struct ieee80211_hw *hw;
1645 
1646 	hw = ieee80211_alloc_hw(sizeof(struct iwl_priv) +
1647 				sizeof(struct iwl_op_mode), &iwlagn_hw_ops);
1648 	if (!hw)
1649 		goto out;
1650 
1651 	op_mode = hw->priv;
1652 	priv = IWL_OP_MODE_GET_DVM(op_mode);
1653 	priv->hw = hw;
1654 
1655 out:
1656 	return hw;
1657 }
1658