1 /*
2  * EEPROM parser code for mac80211 Prism54 drivers
3  *
4  * Copyright (c) 2006, Michael Wu <flamingice@sourmilk.net>
5  * Copyright (c) 2007-2009, Christian Lamparter <chunkeey@web.de>
6  * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
7  *
8  * Based on:
9  * - the islsm (softmac prism54) driver, which is:
10  *   Copyright 2004-2006 Jean-Baptiste Note <jbnote@gmail.com>, et al.
11  * - stlc45xx driver
12  *   Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies).
13  *
14  * This program is free software; you can redistribute it and/or modify
15  * it under the terms of the GNU General Public License version 2 as
16  * published by the Free Software Foundation.
17  */
18 
19 #include <linux/firmware.h>
20 #include <linux/etherdevice.h>
21 #include <linux/sort.h>
22 #include <linux/slab.h>
23 
24 #include <net/mac80211.h>
25 #include <linux/crc-ccitt.h>
26 #include <linux/export.h>
27 
28 #include "p54.h"
29 #include "eeprom.h"
30 #include "lmac.h"
31 
32 static struct ieee80211_rate p54_bgrates[] = {
33 	{ .bitrate = 10, .hw_value = 0, },
34 	{ .bitrate = 20, .hw_value = 1, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
35 	{ .bitrate = 55, .hw_value = 2, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
36 	{ .bitrate = 110, .hw_value = 3, .flags = IEEE80211_RATE_SHORT_PREAMBLE },
37 	{ .bitrate = 60, .hw_value = 4, },
38 	{ .bitrate = 90, .hw_value = 5, },
39 	{ .bitrate = 120, .hw_value = 6, },
40 	{ .bitrate = 180, .hw_value = 7, },
41 	{ .bitrate = 240, .hw_value = 8, },
42 	{ .bitrate = 360, .hw_value = 9, },
43 	{ .bitrate = 480, .hw_value = 10, },
44 	{ .bitrate = 540, .hw_value = 11, },
45 };
46 
47 static struct ieee80211_rate p54_arates[] = {
48 	{ .bitrate = 60, .hw_value = 4, },
49 	{ .bitrate = 90, .hw_value = 5, },
50 	{ .bitrate = 120, .hw_value = 6, },
51 	{ .bitrate = 180, .hw_value = 7, },
52 	{ .bitrate = 240, .hw_value = 8, },
53 	{ .bitrate = 360, .hw_value = 9, },
54 	{ .bitrate = 480, .hw_value = 10, },
55 	{ .bitrate = 540, .hw_value = 11, },
56 };
57 
58 static struct p54_rssi_db_entry p54_rssi_default = {
59 	/*
60 	 * The defaults are taken from usb-logs of the
61 	 * vendor driver. So, they should be safe to
62 	 * use in case we can't get a match from the
63 	 * rssi <-> dBm conversion database.
64 	 */
65 	.mul = 130,
66 	.add = -398,
67 };
68 
69 #define CHAN_HAS_CAL		BIT(0)
70 #define CHAN_HAS_LIMIT		BIT(1)
71 #define CHAN_HAS_CURVE		BIT(2)
72 #define CHAN_HAS_ALL		(CHAN_HAS_CAL | CHAN_HAS_LIMIT | CHAN_HAS_CURVE)
73 
74 struct p54_channel_entry {
75 	u16 freq;
76 	u16 data;
77 	int index;
78 	int max_power;
79 	enum nl80211_band band;
80 };
81 
82 struct p54_channel_list {
83 	struct p54_channel_entry *channels;
84 	size_t entries;
85 	size_t max_entries;
86 	size_t band_channel_num[NUM_NL80211_BANDS];
87 };
88 
89 static int p54_get_band_from_freq(u16 freq)
90 {
91 	/* FIXME: sync these values with the 802.11 spec */
92 
93 	if ((freq >= 2412) && (freq <= 2484))
94 		return NL80211_BAND_2GHZ;
95 
96 	if ((freq >= 4920) && (freq <= 5825))
97 		return NL80211_BAND_5GHZ;
98 
99 	return -1;
100 }
101 
102 static int same_band(u16 freq, u16 freq2)
103 {
104 	return p54_get_band_from_freq(freq) == p54_get_band_from_freq(freq2);
105 }
106 
107 static int p54_compare_channels(const void *_a,
108 				const void *_b)
109 {
110 	const struct p54_channel_entry *a = _a;
111 	const struct p54_channel_entry *b = _b;
112 
113 	return a->freq - b->freq;
114 }
115 
116 static int p54_compare_rssichan(const void *_a,
117 				const void *_b)
118 {
119 	const struct p54_rssi_db_entry *a = _a;
120 	const struct p54_rssi_db_entry *b = _b;
121 
122 	return a->freq - b->freq;
123 }
124 
125 static int p54_fill_band_bitrates(struct ieee80211_hw *dev,
126 				  struct ieee80211_supported_band *band_entry,
127 				  enum nl80211_band band)
128 {
129 	/* TODO: generate rate array dynamically */
130 
131 	switch (band) {
132 	case NL80211_BAND_2GHZ:
133 		band_entry->bitrates = p54_bgrates;
134 		band_entry->n_bitrates = ARRAY_SIZE(p54_bgrates);
135 		break;
136 	case NL80211_BAND_5GHZ:
137 		band_entry->bitrates = p54_arates;
138 		band_entry->n_bitrates = ARRAY_SIZE(p54_arates);
139 		break;
140 	default:
141 		return -EINVAL;
142 	}
143 
144 	return 0;
145 }
146 
147 static int p54_generate_band(struct ieee80211_hw *dev,
148 			     struct p54_channel_list *list,
149 			     unsigned int *chan_num,
150 			     enum nl80211_band band)
151 {
152 	struct p54_common *priv = dev->priv;
153 	struct ieee80211_supported_band *tmp, *old;
154 	unsigned int i, j;
155 	int ret = -ENOMEM;
156 
157 	if ((!list->entries) || (!list->band_channel_num[band]))
158 		return -EINVAL;
159 
160 	tmp = kzalloc(sizeof(*tmp), GFP_KERNEL);
161 	if (!tmp)
162 		goto err_out;
163 
164 	tmp->channels = kcalloc(list->band_channel_num[band],
165 				sizeof(struct ieee80211_channel),
166 				GFP_KERNEL);
167 	if (!tmp->channels)
168 		goto err_out;
169 
170 	ret = p54_fill_band_bitrates(dev, tmp, band);
171 	if (ret)
172 		goto err_out;
173 
174 	for (i = 0, j = 0; (j < list->band_channel_num[band]) &&
175 			   (i < list->entries); i++) {
176 		struct p54_channel_entry *chan = &list->channels[i];
177 		struct ieee80211_channel *dest = &tmp->channels[j];
178 
179 		if (chan->band != band)
180 			continue;
181 
182 		if (chan->data != CHAN_HAS_ALL) {
183 			wiphy_err(dev->wiphy, "%s%s%s is/are missing for "
184 				  "channel:%d [%d MHz].\n",
185 				  (chan->data & CHAN_HAS_CAL ? "" :
186 				   " [iqauto calibration data]"),
187 				  (chan->data & CHAN_HAS_LIMIT ? "" :
188 				   " [output power limits]"),
189 				  (chan->data & CHAN_HAS_CURVE ? "" :
190 				   " [curve data]"),
191 				  chan->index, chan->freq);
192 			continue;
193 		}
194 
195 		dest->band = chan->band;
196 		dest->center_freq = chan->freq;
197 		dest->max_power = chan->max_power;
198 		priv->survey[*chan_num].channel = &tmp->channels[j];
199 		priv->survey[*chan_num].filled = SURVEY_INFO_NOISE_DBM |
200 			SURVEY_INFO_TIME |
201 			SURVEY_INFO_TIME_BUSY |
202 			SURVEY_INFO_TIME_TX;
203 		dest->hw_value = (*chan_num);
204 		j++;
205 		(*chan_num)++;
206 	}
207 
208 	if (j == 0) {
209 		wiphy_err(dev->wiphy, "Disabling totally damaged %d GHz band\n",
210 			  (band == NL80211_BAND_2GHZ) ? 2 : 5);
211 
212 		ret = -ENODATA;
213 		goto err_out;
214 	}
215 
216 	tmp->n_channels = j;
217 	old = priv->band_table[band];
218 	priv->band_table[band] = tmp;
219 	if (old) {
220 		kfree(old->channels);
221 		kfree(old);
222 	}
223 
224 	return 0;
225 
226 err_out:
227 	if (tmp) {
228 		kfree(tmp->channels);
229 		kfree(tmp);
230 	}
231 
232 	return ret;
233 }
234 
235 static struct p54_channel_entry *p54_update_channel_param(struct p54_channel_list *list,
236 							  u16 freq, u16 data)
237 {
238 	int i;
239 	struct p54_channel_entry *entry = NULL;
240 
241 	/*
242 	 * usually all lists in the eeprom are mostly sorted.
243 	 * so it's very likely that the entry we are looking for
244 	 * is right at the end of the list
245 	 */
246 	for (i = list->entries; i >= 0; i--) {
247 		if (freq == list->channels[i].freq) {
248 			entry = &list->channels[i];
249 			break;
250 		}
251 	}
252 
253 	if ((i < 0) && (list->entries < list->max_entries)) {
254 		/* entry does not exist yet. Initialize a new one. */
255 		int band = p54_get_band_from_freq(freq);
256 
257 		/*
258 		 * filter out frequencies which don't belong into
259 		 * any supported band.
260 		 */
261 		if (band >= 0) {
262 			i = list->entries++;
263 			list->band_channel_num[band]++;
264 
265 			entry = &list->channels[i];
266 			entry->freq = freq;
267 			entry->band = band;
268 			entry->index = ieee80211_frequency_to_channel(freq);
269 			entry->max_power = 0;
270 			entry->data = 0;
271 		}
272 	}
273 
274 	if (entry)
275 		entry->data |= data;
276 
277 	return entry;
278 }
279 
280 static int p54_get_maxpower(struct p54_common *priv, void *data)
281 {
282 	switch (priv->rxhw & PDR_SYNTH_FRONTEND_MASK) {
283 	case PDR_SYNTH_FRONTEND_LONGBOW: {
284 		struct pda_channel_output_limit_longbow *pda = data;
285 		int j;
286 		u16 rawpower = 0;
287 		pda = data;
288 		for (j = 0; j < ARRAY_SIZE(pda->point); j++) {
289 			struct pda_channel_output_limit_point_longbow *point =
290 				&pda->point[j];
291 			rawpower = max_t(u16,
292 				rawpower, le16_to_cpu(point->val_qpsk));
293 			rawpower = max_t(u16,
294 				rawpower, le16_to_cpu(point->val_bpsk));
295 			rawpower = max_t(u16,
296 				rawpower, le16_to_cpu(point->val_16qam));
297 			rawpower = max_t(u16,
298 				rawpower, le16_to_cpu(point->val_64qam));
299 		}
300 		/* longbow seems to use 1/16 dBm units */
301 		return rawpower / 16;
302 		}
303 
304 	case PDR_SYNTH_FRONTEND_DUETTE3:
305 	case PDR_SYNTH_FRONTEND_DUETTE2:
306 	case PDR_SYNTH_FRONTEND_FRISBEE:
307 	case PDR_SYNTH_FRONTEND_XBOW: {
308 		struct pda_channel_output_limit *pda = data;
309 		u8 rawpower = 0;
310 		rawpower = max(rawpower, pda->val_qpsk);
311 		rawpower = max(rawpower, pda->val_bpsk);
312 		rawpower = max(rawpower, pda->val_16qam);
313 		rawpower = max(rawpower, pda->val_64qam);
314 		/* raw values are in 1/4 dBm units */
315 		return rawpower / 4;
316 		}
317 
318 	default:
319 		return 20;
320 	}
321 }
322 
323 static int p54_generate_channel_lists(struct ieee80211_hw *dev)
324 {
325 	struct p54_common *priv = dev->priv;
326 	struct p54_channel_list *list;
327 	unsigned int i, j, k, max_channel_num;
328 	int ret = 0;
329 	u16 freq;
330 
331 	if ((priv->iq_autocal_len != priv->curve_data->entries) ||
332 	    (priv->iq_autocal_len != priv->output_limit->entries))
333 		wiphy_err(dev->wiphy,
334 			  "Unsupported or damaged EEPROM detected. "
335 			  "You may not be able to use all channels.\n");
336 
337 	max_channel_num = max_t(unsigned int, priv->output_limit->entries,
338 				priv->iq_autocal_len);
339 	max_channel_num = max_t(unsigned int, max_channel_num,
340 				priv->curve_data->entries);
341 
342 	list = kzalloc(sizeof(*list), GFP_KERNEL);
343 	if (!list) {
344 		ret = -ENOMEM;
345 		goto free;
346 	}
347 	priv->chan_num = max_channel_num;
348 	priv->survey = kcalloc(max_channel_num, sizeof(struct survey_info),
349 			       GFP_KERNEL);
350 	if (!priv->survey) {
351 		ret = -ENOMEM;
352 		goto free;
353 	}
354 
355 	list->max_entries = max_channel_num;
356 	list->channels = kcalloc(max_channel_num,
357 				 sizeof(struct p54_channel_entry),
358 				 GFP_KERNEL);
359 	if (!list->channels) {
360 		ret = -ENOMEM;
361 		goto free;
362 	}
363 
364 	for (i = 0; i < max_channel_num; i++) {
365 		if (i < priv->iq_autocal_len) {
366 			freq = le16_to_cpu(priv->iq_autocal[i].freq);
367 			p54_update_channel_param(list, freq, CHAN_HAS_CAL);
368 		}
369 
370 		if (i < priv->output_limit->entries) {
371 			struct p54_channel_entry *tmp;
372 
373 			void *data = (void *) ((unsigned long) i *
374 				priv->output_limit->entry_size +
375 				priv->output_limit->offset +
376 				priv->output_limit->data);
377 
378 			freq = le16_to_cpup((__le16 *) data);
379 			tmp = p54_update_channel_param(list, freq,
380 						       CHAN_HAS_LIMIT);
381 			if (tmp) {
382 				tmp->max_power = p54_get_maxpower(priv, data);
383 			}
384 		}
385 
386 		if (i < priv->curve_data->entries) {
387 			freq = le16_to_cpup((__le16 *) (i *
388 					    priv->curve_data->entry_size +
389 					    priv->curve_data->offset +
390 					    priv->curve_data->data));
391 
392 			p54_update_channel_param(list, freq, CHAN_HAS_CURVE);
393 		}
394 	}
395 
396 	/* sort the channel list by frequency */
397 	sort(list->channels, list->entries, sizeof(struct p54_channel_entry),
398 	     p54_compare_channels, NULL);
399 
400 	k = 0;
401 	for (i = 0, j = 0; i < NUM_NL80211_BANDS; i++) {
402 		if (p54_generate_band(dev, list, &k, i) == 0)
403 			j++;
404 	}
405 	if (j == 0) {
406 		/* no useable band available. */
407 		ret = -EINVAL;
408 	}
409 
410 free:
411 	if (list) {
412 		kfree(list->channels);
413 		kfree(list);
414 	}
415 	if (ret) {
416 		kfree(priv->survey);
417 		priv->survey = NULL;
418 	}
419 
420 	return ret;
421 }
422 
423 static int p54_convert_rev0(struct ieee80211_hw *dev,
424 			    struct pda_pa_curve_data *curve_data)
425 {
426 	struct p54_common *priv = dev->priv;
427 	struct p54_pa_curve_data_sample *dst;
428 	struct pda_pa_curve_data_sample_rev0 *src;
429 	size_t cd_len = sizeof(*curve_data) +
430 		(curve_data->points_per_channel*sizeof(*dst) + 2) *
431 		 curve_data->channels;
432 	unsigned int i, j;
433 	void *source, *target;
434 
435 	priv->curve_data = kmalloc(sizeof(*priv->curve_data) + cd_len,
436 				   GFP_KERNEL);
437 	if (!priv->curve_data)
438 		return -ENOMEM;
439 
440 	priv->curve_data->entries = curve_data->channels;
441 	priv->curve_data->entry_size = sizeof(__le16) +
442 		sizeof(*dst) * curve_data->points_per_channel;
443 	priv->curve_data->offset = offsetof(struct pda_pa_curve_data, data);
444 	priv->curve_data->len = cd_len;
445 	memcpy(priv->curve_data->data, curve_data, sizeof(*curve_data));
446 	source = curve_data->data;
447 	target = ((struct pda_pa_curve_data *) priv->curve_data->data)->data;
448 	for (i = 0; i < curve_data->channels; i++) {
449 		__le16 *freq = source;
450 		source += sizeof(__le16);
451 		*((__le16 *)target) = *freq;
452 		target += sizeof(__le16);
453 		for (j = 0; j < curve_data->points_per_channel; j++) {
454 			dst = target;
455 			src = source;
456 
457 			dst->rf_power = src->rf_power;
458 			dst->pa_detector = src->pa_detector;
459 			dst->data_64qam = src->pcv;
460 			/* "invent" the points for the other modulations */
461 #define SUB(x, y) (u8)(((x) - (y)) > (x) ? 0 : (x) - (y))
462 			dst->data_16qam = SUB(src->pcv, 12);
463 			dst->data_qpsk = SUB(dst->data_16qam, 12);
464 			dst->data_bpsk = SUB(dst->data_qpsk, 12);
465 			dst->data_barker = SUB(dst->data_bpsk, 14);
466 #undef SUB
467 			target += sizeof(*dst);
468 			source += sizeof(*src);
469 		}
470 	}
471 
472 	return 0;
473 }
474 
475 static int p54_convert_rev1(struct ieee80211_hw *dev,
476 			    struct pda_pa_curve_data *curve_data)
477 {
478 	struct p54_common *priv = dev->priv;
479 	struct p54_pa_curve_data_sample *dst;
480 	struct pda_pa_curve_data_sample_rev1 *src;
481 	size_t cd_len = sizeof(*curve_data) +
482 		(curve_data->points_per_channel*sizeof(*dst) + 2) *
483 		 curve_data->channels;
484 	unsigned int i, j;
485 	void *source, *target;
486 
487 	priv->curve_data = kzalloc(cd_len + sizeof(*priv->curve_data),
488 				   GFP_KERNEL);
489 	if (!priv->curve_data)
490 		return -ENOMEM;
491 
492 	priv->curve_data->entries = curve_data->channels;
493 	priv->curve_data->entry_size = sizeof(__le16) +
494 		sizeof(*dst) * curve_data->points_per_channel;
495 	priv->curve_data->offset = offsetof(struct pda_pa_curve_data, data);
496 	priv->curve_data->len = cd_len;
497 	memcpy(priv->curve_data->data, curve_data, sizeof(*curve_data));
498 	source = curve_data->data;
499 	target = ((struct pda_pa_curve_data *) priv->curve_data->data)->data;
500 	for (i = 0; i < curve_data->channels; i++) {
501 		__le16 *freq = source;
502 		source += sizeof(__le16);
503 		*((__le16 *)target) = *freq;
504 		target += sizeof(__le16);
505 		for (j = 0; j < curve_data->points_per_channel; j++) {
506 			memcpy(target, source, sizeof(*src));
507 
508 			target += sizeof(*dst);
509 			source += sizeof(*src);
510 		}
511 		source++;
512 	}
513 
514 	return 0;
515 }
516 
517 static const char *p54_rf_chips[] = { "INVALID-0", "Duette3", "Duette2",
518 	"Frisbee", "Xbow", "Longbow", "INVALID-6", "INVALID-7" };
519 
520 static int p54_parse_rssical(struct ieee80211_hw *dev,
521 			     u8 *data, int len, u16 type)
522 {
523 	struct p54_common *priv = dev->priv;
524 	struct p54_rssi_db_entry *entry;
525 	size_t db_len, entries;
526 	int offset = 0, i;
527 
528 	if (type != PDR_RSSI_LINEAR_APPROXIMATION_EXTENDED) {
529 		entries = (type == PDR_RSSI_LINEAR_APPROXIMATION) ? 1 : 2;
530 		if (len != sizeof(struct pda_rssi_cal_entry) * entries) {
531 			wiphy_err(dev->wiphy, "rssical size mismatch.\n");
532 			goto err_data;
533 		}
534 	} else {
535 		/*
536 		 * Some devices (Dell 1450 USB, Xbow 5GHz card, etc...)
537 		 * have an empty two byte header.
538 		 */
539 		if (*((__le16 *)&data[offset]) == cpu_to_le16(0))
540 			offset += 2;
541 
542 		entries = (len - offset) /
543 			sizeof(struct pda_rssi_cal_ext_entry);
544 
545 		if (len < offset ||
546 		    (len - offset) % sizeof(struct pda_rssi_cal_ext_entry) ||
547 		    entries == 0) {
548 			wiphy_err(dev->wiphy, "invalid rssi database.\n");
549 			goto err_data;
550 		}
551 	}
552 
553 	db_len = sizeof(*entry) * entries;
554 	priv->rssi_db = kzalloc(db_len + sizeof(*priv->rssi_db), GFP_KERNEL);
555 	if (!priv->rssi_db)
556 		return -ENOMEM;
557 
558 	priv->rssi_db->offset = 0;
559 	priv->rssi_db->entries = entries;
560 	priv->rssi_db->entry_size = sizeof(*entry);
561 	priv->rssi_db->len = db_len;
562 
563 	entry = (void *)((unsigned long)priv->rssi_db->data + priv->rssi_db->offset);
564 	if (type == PDR_RSSI_LINEAR_APPROXIMATION_EXTENDED) {
565 		struct pda_rssi_cal_ext_entry *cal = (void *) &data[offset];
566 
567 		for (i = 0; i < entries; i++) {
568 			entry[i].freq = le16_to_cpu(cal[i].freq);
569 			entry[i].mul = (s16) le16_to_cpu(cal[i].mul);
570 			entry[i].add = (s16) le16_to_cpu(cal[i].add);
571 		}
572 	} else {
573 		struct pda_rssi_cal_entry *cal = (void *) &data[offset];
574 
575 		for (i = 0; i < entries; i++) {
576 			u16 freq = 0;
577 			switch (i) {
578 			case NL80211_BAND_2GHZ:
579 				freq = 2437;
580 				break;
581 			case NL80211_BAND_5GHZ:
582 				freq = 5240;
583 				break;
584 			}
585 
586 			entry[i].freq = freq;
587 			entry[i].mul = (s16) le16_to_cpu(cal[i].mul);
588 			entry[i].add = (s16) le16_to_cpu(cal[i].add);
589 		}
590 	}
591 
592 	/* sort the list by channel frequency */
593 	sort(entry, entries, sizeof(*entry), p54_compare_rssichan, NULL);
594 	return 0;
595 
596 err_data:
597 	wiphy_err(dev->wiphy,
598 		  "rssi calibration data packing type:(%x) len:%d.\n",
599 		  type, len);
600 
601 	print_hex_dump_bytes("rssical:", DUMP_PREFIX_NONE, data, len);
602 
603 	wiphy_err(dev->wiphy, "please report this issue.\n");
604 	return -EINVAL;
605 }
606 
607 struct p54_rssi_db_entry *p54_rssi_find(struct p54_common *priv, const u16 freq)
608 {
609 	struct p54_rssi_db_entry *entry;
610 	int i, found = -1;
611 
612 	if (!priv->rssi_db)
613 		return &p54_rssi_default;
614 
615 	entry = (void *)(priv->rssi_db->data + priv->rssi_db->offset);
616 	for (i = 0; i < priv->rssi_db->entries; i++) {
617 		if (!same_band(freq, entry[i].freq))
618 			continue;
619 
620 		if (found == -1) {
621 			found = i;
622 			continue;
623 		}
624 
625 		/* nearest match */
626 		if (abs(freq - entry[i].freq) <
627 		    abs(freq - entry[found].freq)) {
628 			found = i;
629 			continue;
630 		} else {
631 			break;
632 		}
633 	}
634 
635 	return found < 0 ? &p54_rssi_default : &entry[found];
636 }
637 
638 static void p54_parse_default_country(struct ieee80211_hw *dev,
639 				      void *data, int len)
640 {
641 	struct pda_country *country;
642 
643 	if (len != sizeof(*country)) {
644 		wiphy_err(dev->wiphy,
645 			  "found possible invalid default country eeprom entry. (entry size: %d)\n",
646 			  len);
647 
648 		print_hex_dump_bytes("country:", DUMP_PREFIX_NONE,
649 				     data, len);
650 
651 		wiphy_err(dev->wiphy, "please report this issue.\n");
652 		return;
653 	}
654 
655 	country = (struct pda_country *) data;
656 	if (country->flags == PDR_COUNTRY_CERT_CODE_PSEUDO)
657 		regulatory_hint(dev->wiphy, country->alpha2);
658 	else {
659 		/* TODO:
660 		 * write a shared/common function that converts
661 		 * "Regulatory domain codes" (802.11-2007 14.8.2.2)
662 		 * into ISO/IEC 3166-1 alpha2 for regulatory_hint.
663 		 */
664 	}
665 }
666 
667 static int p54_convert_output_limits(struct ieee80211_hw *dev,
668 				     u8 *data, size_t len)
669 {
670 	struct p54_common *priv = dev->priv;
671 
672 	if (len < 2)
673 		return -EINVAL;
674 
675 	if (data[0] != 0) {
676 		wiphy_err(dev->wiphy, "unknown output power db revision:%x\n",
677 			  data[0]);
678 		return -EINVAL;
679 	}
680 
681 	if (2 + data[1] * sizeof(struct pda_channel_output_limit) > len)
682 		return -EINVAL;
683 
684 	priv->output_limit = kmalloc(data[1] *
685 		sizeof(struct pda_channel_output_limit) +
686 		sizeof(*priv->output_limit), GFP_KERNEL);
687 
688 	if (!priv->output_limit)
689 		return -ENOMEM;
690 
691 	priv->output_limit->offset = 0;
692 	priv->output_limit->entries = data[1];
693 	priv->output_limit->entry_size =
694 		sizeof(struct pda_channel_output_limit);
695 	priv->output_limit->len = priv->output_limit->entry_size *
696 				  priv->output_limit->entries +
697 				  priv->output_limit->offset;
698 
699 	memcpy(priv->output_limit->data, &data[2],
700 	       data[1] * sizeof(struct pda_channel_output_limit));
701 
702 	return 0;
703 }
704 
705 static struct p54_cal_database *p54_convert_db(struct pda_custom_wrapper *src,
706 					       size_t total_len)
707 {
708 	struct p54_cal_database *dst;
709 	size_t payload_len, entries, entry_size, offset;
710 
711 	payload_len = le16_to_cpu(src->len);
712 	entries = le16_to_cpu(src->entries);
713 	entry_size = le16_to_cpu(src->entry_size);
714 	offset = le16_to_cpu(src->offset);
715 	if (((entries * entry_size + offset) != payload_len) ||
716 	     (payload_len + sizeof(*src) != total_len))
717 		return NULL;
718 
719 	dst = kmalloc(sizeof(*dst) + payload_len, GFP_KERNEL);
720 	if (!dst)
721 		return NULL;
722 
723 	dst->entries = entries;
724 	dst->entry_size = entry_size;
725 	dst->offset = offset;
726 	dst->len = payload_len;
727 
728 	memcpy(dst->data, src->data, payload_len);
729 	return dst;
730 }
731 
732 int p54_parse_eeprom(struct ieee80211_hw *dev, void *eeprom, int len)
733 {
734 	struct p54_common *priv = dev->priv;
735 	struct eeprom_pda_wrap *wrap;
736 	struct pda_entry *entry;
737 	unsigned int data_len, entry_len;
738 	void *tmp;
739 	int err;
740 	u8 *end = (u8 *)eeprom + len;
741 	u16 synth = 0;
742 	u16 crc16 = ~0;
743 
744 	wrap = (struct eeprom_pda_wrap *) eeprom;
745 	entry = (void *)wrap->data + le16_to_cpu(wrap->len);
746 
747 	/* verify that at least the entry length/code fits */
748 	while ((u8 *)entry <= end - sizeof(*entry)) {
749 		entry_len = le16_to_cpu(entry->len);
750 		data_len = ((entry_len - 1) << 1);
751 
752 		/* abort if entry exceeds whole structure */
753 		if ((u8 *)entry + sizeof(*entry) + data_len > end)
754 			break;
755 
756 		switch (le16_to_cpu(entry->code)) {
757 		case PDR_MAC_ADDRESS:
758 			if (data_len != ETH_ALEN)
759 				break;
760 			SET_IEEE80211_PERM_ADDR(dev, entry->data);
761 			break;
762 		case PDR_PRISM_PA_CAL_OUTPUT_POWER_LIMITS:
763 			if (priv->output_limit)
764 				break;
765 			err = p54_convert_output_limits(dev, entry->data,
766 							data_len);
767 			if (err)
768 				goto err;
769 			break;
770 		case PDR_PRISM_PA_CAL_CURVE_DATA: {
771 			struct pda_pa_curve_data *curve_data =
772 				(struct pda_pa_curve_data *)entry->data;
773 			if (data_len < sizeof(*curve_data)) {
774 				err = -EINVAL;
775 				goto err;
776 			}
777 
778 			switch (curve_data->cal_method_rev) {
779 			case 0:
780 				err = p54_convert_rev0(dev, curve_data);
781 				break;
782 			case 1:
783 				err = p54_convert_rev1(dev, curve_data);
784 				break;
785 			default:
786 				wiphy_err(dev->wiphy,
787 					  "unknown curve data revision %d\n",
788 					  curve_data->cal_method_rev);
789 				err = -ENODEV;
790 				break;
791 			}
792 			if (err)
793 				goto err;
794 			}
795 			break;
796 		case PDR_PRISM_ZIF_TX_IQ_CALIBRATION:
797 			priv->iq_autocal = kmemdup(entry->data, data_len,
798 						   GFP_KERNEL);
799 			if (!priv->iq_autocal) {
800 				err = -ENOMEM;
801 				goto err;
802 			}
803 
804 			priv->iq_autocal_len = data_len / sizeof(struct pda_iq_autocal_entry);
805 			break;
806 		case PDR_DEFAULT_COUNTRY:
807 			p54_parse_default_country(dev, entry->data, data_len);
808 			break;
809 		case PDR_INTERFACE_LIST:
810 			tmp = entry->data;
811 			while ((u8 *)tmp < entry->data + data_len) {
812 				struct exp_if *exp_if = tmp;
813 				if (exp_if->if_id == cpu_to_le16(IF_ID_ISL39000))
814 					synth = le16_to_cpu(exp_if->variant);
815 				tmp += sizeof(*exp_if);
816 			}
817 			break;
818 		case PDR_HARDWARE_PLATFORM_COMPONENT_ID:
819 			if (data_len < 2)
820 				break;
821 			priv->version = *(u8 *)(entry->data + 1);
822 			break;
823 		case PDR_RSSI_LINEAR_APPROXIMATION:
824 		case PDR_RSSI_LINEAR_APPROXIMATION_DUAL_BAND:
825 		case PDR_RSSI_LINEAR_APPROXIMATION_EXTENDED:
826 			err = p54_parse_rssical(dev, entry->data, data_len,
827 						le16_to_cpu(entry->code));
828 			if (err)
829 				goto err;
830 			break;
831 		case PDR_RSSI_LINEAR_APPROXIMATION_CUSTOMV2: {
832 			struct pda_custom_wrapper *pda = (void *) entry->data;
833 			__le16 *src;
834 			u16 *dst;
835 			int i;
836 
837 			if (priv->rssi_db || data_len < sizeof(*pda))
838 				break;
839 
840 			priv->rssi_db = p54_convert_db(pda, data_len);
841 			if (!priv->rssi_db)
842 				break;
843 
844 			src = (void *) priv->rssi_db->data;
845 			dst = (void *) priv->rssi_db->data;
846 
847 			for (i = 0; i < priv->rssi_db->entries; i++)
848 				*(dst++) = (s16) le16_to_cpu(*(src++));
849 
850 			}
851 			break;
852 		case PDR_PRISM_PA_CAL_OUTPUT_POWER_LIMITS_CUSTOM: {
853 			struct pda_custom_wrapper *pda = (void *) entry->data;
854 			if (priv->output_limit || data_len < sizeof(*pda))
855 				break;
856 			priv->output_limit = p54_convert_db(pda, data_len);
857 			}
858 			break;
859 		case PDR_PRISM_PA_CAL_CURVE_DATA_CUSTOM: {
860 			struct pda_custom_wrapper *pda = (void *) entry->data;
861 			if (priv->curve_data || data_len < sizeof(*pda))
862 				break;
863 			priv->curve_data = p54_convert_db(pda, data_len);
864 			}
865 			break;
866 		case PDR_END:
867 			crc16 = ~crc_ccitt(crc16, (u8 *) entry, sizeof(*entry));
868 			if (crc16 != le16_to_cpup((__le16 *)entry->data)) {
869 				wiphy_err(dev->wiphy, "eeprom failed checksum "
870 					 "test!\n");
871 				err = -ENOMSG;
872 				goto err;
873 			} else {
874 				goto good_eeprom;
875 			}
876 			break;
877 		default:
878 			break;
879 		}
880 
881 		crc16 = crc_ccitt(crc16, (u8 *)entry, (entry_len + 1) * 2);
882 		entry = (void *)entry + (entry_len + 1) * 2;
883 	}
884 
885 	wiphy_err(dev->wiphy, "unexpected end of eeprom data.\n");
886 	err = -ENODATA;
887 	goto err;
888 
889 good_eeprom:
890 	if (!synth || !priv->iq_autocal || !priv->output_limit ||
891 	    !priv->curve_data) {
892 		wiphy_err(dev->wiphy,
893 			  "not all required entries found in eeprom!\n");
894 		err = -EINVAL;
895 		goto err;
896 	}
897 
898 	priv->rxhw = synth & PDR_SYNTH_FRONTEND_MASK;
899 
900 	err = p54_generate_channel_lists(dev);
901 	if (err)
902 		goto err;
903 
904 	if (priv->rxhw == PDR_SYNTH_FRONTEND_XBOW)
905 		p54_init_xbow_synth(priv);
906 	if (!(synth & PDR_SYNTH_24_GHZ_DISABLED))
907 		dev->wiphy->bands[NL80211_BAND_2GHZ] =
908 			priv->band_table[NL80211_BAND_2GHZ];
909 	if (!(synth & PDR_SYNTH_5_GHZ_DISABLED))
910 		dev->wiphy->bands[NL80211_BAND_5GHZ] =
911 			priv->band_table[NL80211_BAND_5GHZ];
912 	if ((synth & PDR_SYNTH_RX_DIV_MASK) == PDR_SYNTH_RX_DIV_SUPPORTED)
913 		priv->rx_diversity_mask = 3;
914 	if ((synth & PDR_SYNTH_TX_DIV_MASK) == PDR_SYNTH_TX_DIV_SUPPORTED)
915 		priv->tx_diversity_mask = 3;
916 
917 	if (!is_valid_ether_addr(dev->wiphy->perm_addr)) {
918 		u8 perm_addr[ETH_ALEN];
919 
920 		wiphy_warn(dev->wiphy,
921 			   "Invalid hwaddr! Using randomly generated MAC addr\n");
922 		eth_random_addr(perm_addr);
923 		SET_IEEE80211_PERM_ADDR(dev, perm_addr);
924 	}
925 
926 	priv->cur_rssi = &p54_rssi_default;
927 
928 	wiphy_info(dev->wiphy, "hwaddr %pM, MAC:isl38%02x RF:%s\n",
929 		   dev->wiphy->perm_addr, priv->version,
930 		   p54_rf_chips[priv->rxhw]);
931 
932 	return 0;
933 
934 err:
935 	kfree(priv->iq_autocal);
936 	kfree(priv->output_limit);
937 	kfree(priv->curve_data);
938 	kfree(priv->rssi_db);
939 	kfree(priv->survey);
940 	priv->iq_autocal = NULL;
941 	priv->output_limit = NULL;
942 	priv->curve_data = NULL;
943 	priv->rssi_db = NULL;
944 	priv->survey = NULL;
945 
946 	wiphy_err(dev->wiphy, "eeprom parse failed!\n");
947 	return err;
948 }
949 EXPORT_SYMBOL_GPL(p54_parse_eeprom);
950 
951 int p54_read_eeprom(struct ieee80211_hw *dev)
952 {
953 	struct p54_common *priv = dev->priv;
954 	size_t eeprom_size = 0x2020, offset = 0, blocksize, maxblocksize;
955 	int ret = -ENOMEM;
956 	void *eeprom;
957 
958 	maxblocksize = EEPROM_READBACK_LEN;
959 	if (priv->fw_var >= 0x509)
960 		maxblocksize -= 0xc;
961 	else
962 		maxblocksize -= 0x4;
963 
964 	eeprom = kzalloc(eeprom_size, GFP_KERNEL);
965 	if (unlikely(!eeprom))
966 		goto free;
967 
968 	while (eeprom_size) {
969 		blocksize = min(eeprom_size, maxblocksize);
970 		ret = p54_download_eeprom(priv, eeprom + offset,
971 					  offset, blocksize);
972 		if (unlikely(ret))
973 			goto free;
974 
975 		offset += blocksize;
976 		eeprom_size -= blocksize;
977 	}
978 
979 	ret = p54_parse_eeprom(dev, eeprom, offset);
980 free:
981 	kfree(eeprom);
982 	return ret;
983 }
984 EXPORT_SYMBOL_GPL(p54_read_eeprom);
985