1 /*
2  * NXP Wireless LAN device driver: station command handling
3  *
4  * Copyright 2011-2020 NXP
5  *
6  * This software file (the "File") is distributed by NXP
7  * under the terms of the GNU General Public License Version 2, June 1991
8  * (the "License").  You may use, redistribute and/or modify this File in
9  * accordance with the terms and conditions of the License, a copy of which
10  * is available by writing to the Free Software Foundation, Inc.,
11  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the
12  * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt.
13  *
14  * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE
15  * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE
16  * ARE EXPRESSLY DISCLAIMED.  The License provides additional details about
17  * this warranty disclaimer.
18  */
19 
20 #include "decl.h"
21 #include "ioctl.h"
22 #include "util.h"
23 #include "fw.h"
24 #include "main.h"
25 #include "wmm.h"
26 #include "11n.h"
27 #include "11ac.h"
28 
29 static bool drcs;
30 module_param(drcs, bool, 0644);
31 MODULE_PARM_DESC(drcs, "multi-channel operation:1, single-channel operation:0");
32 
33 static bool disable_auto_ds;
34 module_param(disable_auto_ds, bool, 0);
35 MODULE_PARM_DESC(disable_auto_ds,
36 		 "deepsleep enabled=0(default), deepsleep disabled=1");
37 /*
38  * This function prepares command to set/get RSSI information.
39  *
40  * Preparation includes -
41  *      - Setting command ID, action and proper size
42  *      - Setting data/beacon average factors
43  *      - Resetting SNR/NF/RSSI values in private structure
44  *      - Ensuring correct endian-ness
45  */
46 static int
47 mwifiex_cmd_802_11_rssi_info(struct mwifiex_private *priv,
48 			     struct host_cmd_ds_command *cmd, u16 cmd_action)
49 {
50 	cmd->command = cpu_to_le16(HostCmd_CMD_RSSI_INFO);
51 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_802_11_rssi_info) +
52 				S_DS_GEN);
53 	cmd->params.rssi_info.action = cpu_to_le16(cmd_action);
54 	cmd->params.rssi_info.ndata = cpu_to_le16(priv->data_avg_factor);
55 	cmd->params.rssi_info.nbcn = cpu_to_le16(priv->bcn_avg_factor);
56 
57 	/* Reset SNR/NF/RSSI values in private structure */
58 	priv->data_rssi_last = 0;
59 	priv->data_nf_last = 0;
60 	priv->data_rssi_avg = 0;
61 	priv->data_nf_avg = 0;
62 	priv->bcn_rssi_last = 0;
63 	priv->bcn_nf_last = 0;
64 	priv->bcn_rssi_avg = 0;
65 	priv->bcn_nf_avg = 0;
66 
67 	return 0;
68 }
69 
70 /*
71  * This function prepares command to set MAC control.
72  *
73  * Preparation includes -
74  *      - Setting command ID, action and proper size
75  *      - Ensuring correct endian-ness
76  */
77 static int mwifiex_cmd_mac_control(struct mwifiex_private *priv,
78 				   struct host_cmd_ds_command *cmd,
79 				   u16 cmd_action, u32 *action)
80 {
81 	struct host_cmd_ds_mac_control *mac_ctrl = &cmd->params.mac_ctrl;
82 
83 	if (cmd_action != HostCmd_ACT_GEN_SET) {
84 		mwifiex_dbg(priv->adapter, ERROR,
85 			    "mac_control: only support set cmd\n");
86 		return -1;
87 	}
88 
89 	cmd->command = cpu_to_le16(HostCmd_CMD_MAC_CONTROL);
90 	cmd->size =
91 		cpu_to_le16(sizeof(struct host_cmd_ds_mac_control) + S_DS_GEN);
92 	mac_ctrl->action = cpu_to_le32(*action);
93 
94 	return 0;
95 }
96 
97 /*
98  * This function prepares command to set/get SNMP MIB.
99  *
100  * Preparation includes -
101  *      - Setting command ID, action and proper size
102  *      - Setting SNMP MIB OID number and value
103  *        (as required)
104  *      - Ensuring correct endian-ness
105  *
106  * The following SNMP MIB OIDs are supported -
107  *      - FRAG_THRESH_I     : Fragmentation threshold
108  *      - RTS_THRESH_I      : RTS threshold
109  *      - SHORT_RETRY_LIM_I : Short retry limit
110  *      - DOT11D_I          : 11d support
111  */
112 static int mwifiex_cmd_802_11_snmp_mib(struct mwifiex_private *priv,
113 				       struct host_cmd_ds_command *cmd,
114 				       u16 cmd_action, u32 cmd_oid,
115 				       u16 *ul_temp)
116 {
117 	struct host_cmd_ds_802_11_snmp_mib *snmp_mib = &cmd->params.smib;
118 
119 	mwifiex_dbg(priv->adapter, CMD,
120 		    "cmd: SNMP_CMD: cmd_oid = 0x%x\n", cmd_oid);
121 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_SNMP_MIB);
122 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_802_11_snmp_mib)
123 				- 1 + S_DS_GEN);
124 
125 	snmp_mib->oid = cpu_to_le16((u16)cmd_oid);
126 	if (cmd_action == HostCmd_ACT_GEN_GET) {
127 		snmp_mib->query_type = cpu_to_le16(HostCmd_ACT_GEN_GET);
128 		snmp_mib->buf_size = cpu_to_le16(MAX_SNMP_BUF_SIZE);
129 		le16_unaligned_add_cpu(&cmd->size, MAX_SNMP_BUF_SIZE);
130 	} else if (cmd_action == HostCmd_ACT_GEN_SET) {
131 		snmp_mib->query_type = cpu_to_le16(HostCmd_ACT_GEN_SET);
132 		snmp_mib->buf_size = cpu_to_le16(sizeof(u16));
133 		put_unaligned_le16(*ul_temp, snmp_mib->value);
134 		le16_unaligned_add_cpu(&cmd->size, sizeof(u16));
135 	}
136 
137 	mwifiex_dbg(priv->adapter, CMD,
138 		    "cmd: SNMP_CMD: Action=0x%x, OID=0x%x,\t"
139 		    "OIDSize=0x%x, Value=0x%x\n",
140 		    cmd_action, cmd_oid, le16_to_cpu(snmp_mib->buf_size),
141 		    get_unaligned_le16(snmp_mib->value));
142 	return 0;
143 }
144 
145 /*
146  * This function prepares command to get log.
147  *
148  * Preparation includes -
149  *      - Setting command ID and proper size
150  *      - Ensuring correct endian-ness
151  */
152 static int
153 mwifiex_cmd_802_11_get_log(struct host_cmd_ds_command *cmd)
154 {
155 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_GET_LOG);
156 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_802_11_get_log) +
157 				S_DS_GEN);
158 	return 0;
159 }
160 
161 /*
162  * This function prepares command to set/get Tx data rate configuration.
163  *
164  * Preparation includes -
165  *      - Setting command ID, action and proper size
166  *      - Setting configuration index, rate scope and rate drop pattern
167  *        parameters (as required)
168  *      - Ensuring correct endian-ness
169  */
170 static int mwifiex_cmd_tx_rate_cfg(struct mwifiex_private *priv,
171 				   struct host_cmd_ds_command *cmd,
172 				   u16 cmd_action, u16 *pbitmap_rates)
173 {
174 	struct host_cmd_ds_tx_rate_cfg *rate_cfg = &cmd->params.tx_rate_cfg;
175 	struct mwifiex_rate_scope *rate_scope;
176 	struct mwifiex_rate_drop_pattern *rate_drop;
177 	u32 i;
178 
179 	cmd->command = cpu_to_le16(HostCmd_CMD_TX_RATE_CFG);
180 
181 	rate_cfg->action = cpu_to_le16(cmd_action);
182 	rate_cfg->cfg_index = 0;
183 
184 	rate_scope = (struct mwifiex_rate_scope *) ((u8 *) rate_cfg +
185 		      sizeof(struct host_cmd_ds_tx_rate_cfg));
186 	rate_scope->type = cpu_to_le16(TLV_TYPE_RATE_SCOPE);
187 	rate_scope->length = cpu_to_le16
188 		(sizeof(*rate_scope) - sizeof(struct mwifiex_ie_types_header));
189 	if (pbitmap_rates != NULL) {
190 		rate_scope->hr_dsss_rate_bitmap = cpu_to_le16(pbitmap_rates[0]);
191 		rate_scope->ofdm_rate_bitmap = cpu_to_le16(pbitmap_rates[1]);
192 		for (i = 0; i < ARRAY_SIZE(rate_scope->ht_mcs_rate_bitmap); i++)
193 			rate_scope->ht_mcs_rate_bitmap[i] =
194 				cpu_to_le16(pbitmap_rates[2 + i]);
195 		if (priv->adapter->fw_api_ver == MWIFIEX_FW_V15) {
196 			for (i = 0;
197 			     i < ARRAY_SIZE(rate_scope->vht_mcs_rate_bitmap);
198 			     i++)
199 				rate_scope->vht_mcs_rate_bitmap[i] =
200 					cpu_to_le16(pbitmap_rates[10 + i]);
201 		}
202 	} else {
203 		rate_scope->hr_dsss_rate_bitmap =
204 			cpu_to_le16(priv->bitmap_rates[0]);
205 		rate_scope->ofdm_rate_bitmap =
206 			cpu_to_le16(priv->bitmap_rates[1]);
207 		for (i = 0; i < ARRAY_SIZE(rate_scope->ht_mcs_rate_bitmap); i++)
208 			rate_scope->ht_mcs_rate_bitmap[i] =
209 				cpu_to_le16(priv->bitmap_rates[2 + i]);
210 		if (priv->adapter->fw_api_ver == MWIFIEX_FW_V15) {
211 			for (i = 0;
212 			     i < ARRAY_SIZE(rate_scope->vht_mcs_rate_bitmap);
213 			     i++)
214 				rate_scope->vht_mcs_rate_bitmap[i] =
215 					cpu_to_le16(priv->bitmap_rates[10 + i]);
216 		}
217 	}
218 
219 	rate_drop = (struct mwifiex_rate_drop_pattern *) ((u8 *) rate_scope +
220 					     sizeof(struct mwifiex_rate_scope));
221 	rate_drop->type = cpu_to_le16(TLV_TYPE_RATE_DROP_CONTROL);
222 	rate_drop->length = cpu_to_le16(sizeof(rate_drop->rate_drop_mode));
223 	rate_drop->rate_drop_mode = 0;
224 
225 	cmd->size =
226 		cpu_to_le16(S_DS_GEN + sizeof(struct host_cmd_ds_tx_rate_cfg) +
227 			    sizeof(struct mwifiex_rate_scope) +
228 			    sizeof(struct mwifiex_rate_drop_pattern));
229 
230 	return 0;
231 }
232 
233 /*
234  * This function prepares command to set/get Tx power configuration.
235  *
236  * Preparation includes -
237  *      - Setting command ID, action and proper size
238  *      - Setting Tx power mode, power group TLV
239  *        (as required)
240  *      - Ensuring correct endian-ness
241  */
242 static int mwifiex_cmd_tx_power_cfg(struct host_cmd_ds_command *cmd,
243 				    u16 cmd_action,
244 				    struct host_cmd_ds_txpwr_cfg *txp)
245 {
246 	struct mwifiex_types_power_group *pg_tlv;
247 	struct host_cmd_ds_txpwr_cfg *cmd_txp_cfg = &cmd->params.txp_cfg;
248 
249 	cmd->command = cpu_to_le16(HostCmd_CMD_TXPWR_CFG);
250 	cmd->size =
251 		cpu_to_le16(S_DS_GEN + sizeof(struct host_cmd_ds_txpwr_cfg));
252 	switch (cmd_action) {
253 	case HostCmd_ACT_GEN_SET:
254 		if (txp->mode) {
255 			pg_tlv = (struct mwifiex_types_power_group
256 				  *) ((unsigned long) txp +
257 				     sizeof(struct host_cmd_ds_txpwr_cfg));
258 			memmove(cmd_txp_cfg, txp,
259 				sizeof(struct host_cmd_ds_txpwr_cfg) +
260 				sizeof(struct mwifiex_types_power_group) +
261 				le16_to_cpu(pg_tlv->length));
262 
263 			pg_tlv = (struct mwifiex_types_power_group *) ((u8 *)
264 				  cmd_txp_cfg +
265 				  sizeof(struct host_cmd_ds_txpwr_cfg));
266 			cmd->size = cpu_to_le16(le16_to_cpu(cmd->size) +
267 				  sizeof(struct mwifiex_types_power_group) +
268 				  le16_to_cpu(pg_tlv->length));
269 		} else {
270 			memmove(cmd_txp_cfg, txp, sizeof(*txp));
271 		}
272 		cmd_txp_cfg->action = cpu_to_le16(cmd_action);
273 		break;
274 	case HostCmd_ACT_GEN_GET:
275 		cmd_txp_cfg->action = cpu_to_le16(cmd_action);
276 		break;
277 	}
278 
279 	return 0;
280 }
281 
282 /*
283  * This function prepares command to get RF Tx power.
284  */
285 static int mwifiex_cmd_rf_tx_power(struct mwifiex_private *priv,
286 				   struct host_cmd_ds_command *cmd,
287 				   u16 cmd_action, void *data_buf)
288 {
289 	struct host_cmd_ds_rf_tx_pwr *txp = &cmd->params.txp;
290 
291 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_rf_tx_pwr)
292 				+ S_DS_GEN);
293 	cmd->command = cpu_to_le16(HostCmd_CMD_RF_TX_PWR);
294 	txp->action = cpu_to_le16(cmd_action);
295 
296 	return 0;
297 }
298 
299 /*
300  * This function prepares command to set rf antenna.
301  */
302 static int mwifiex_cmd_rf_antenna(struct mwifiex_private *priv,
303 				  struct host_cmd_ds_command *cmd,
304 				  u16 cmd_action,
305 				  struct mwifiex_ds_ant_cfg *ant_cfg)
306 {
307 	struct host_cmd_ds_rf_ant_mimo *ant_mimo = &cmd->params.ant_mimo;
308 	struct host_cmd_ds_rf_ant_siso *ant_siso = &cmd->params.ant_siso;
309 
310 	cmd->command = cpu_to_le16(HostCmd_CMD_RF_ANTENNA);
311 
312 	switch (cmd_action) {
313 	case HostCmd_ACT_GEN_SET:
314 		if (priv->adapter->hw_dev_mcs_support == HT_STREAM_2X2) {
315 			cmd->size = cpu_to_le16(sizeof(struct
316 						host_cmd_ds_rf_ant_mimo)
317 						+ S_DS_GEN);
318 			ant_mimo->action_tx = cpu_to_le16(HostCmd_ACT_SET_TX);
319 			ant_mimo->tx_ant_mode = cpu_to_le16((u16)ant_cfg->
320 							    tx_ant);
321 			ant_mimo->action_rx = cpu_to_le16(HostCmd_ACT_SET_RX);
322 			ant_mimo->rx_ant_mode = cpu_to_le16((u16)ant_cfg->
323 							    rx_ant);
324 		} else {
325 			cmd->size = cpu_to_le16(sizeof(struct
326 						host_cmd_ds_rf_ant_siso) +
327 						S_DS_GEN);
328 			ant_siso->action = cpu_to_le16(HostCmd_ACT_SET_BOTH);
329 			ant_siso->ant_mode = cpu_to_le16((u16)ant_cfg->tx_ant);
330 		}
331 		break;
332 	case HostCmd_ACT_GEN_GET:
333 		if (priv->adapter->hw_dev_mcs_support == HT_STREAM_2X2) {
334 			cmd->size = cpu_to_le16(sizeof(struct
335 						host_cmd_ds_rf_ant_mimo) +
336 						S_DS_GEN);
337 			ant_mimo->action_tx = cpu_to_le16(HostCmd_ACT_GET_TX);
338 			ant_mimo->action_rx = cpu_to_le16(HostCmd_ACT_GET_RX);
339 		} else {
340 			cmd->size = cpu_to_le16(sizeof(struct
341 						host_cmd_ds_rf_ant_siso) +
342 						S_DS_GEN);
343 			ant_siso->action = cpu_to_le16(HostCmd_ACT_GET_BOTH);
344 		}
345 		break;
346 	}
347 	return 0;
348 }
349 
350 /*
351  * This function prepares command to set Host Sleep configuration.
352  *
353  * Preparation includes -
354  *      - Setting command ID and proper size
355  *      - Setting Host Sleep action, conditions, ARP filters
356  *        (as required)
357  *      - Ensuring correct endian-ness
358  */
359 static int
360 mwifiex_cmd_802_11_hs_cfg(struct mwifiex_private *priv,
361 			  struct host_cmd_ds_command *cmd,
362 			  u16 cmd_action,
363 			  struct mwifiex_hs_config_param *hscfg_param)
364 {
365 	struct mwifiex_adapter *adapter = priv->adapter;
366 	struct host_cmd_ds_802_11_hs_cfg_enh *hs_cfg = &cmd->params.opt_hs_cfg;
367 	u8 *tlv = (u8 *)hs_cfg + sizeof(struct host_cmd_ds_802_11_hs_cfg_enh);
368 	struct mwifiex_ps_param_in_hs *psparam_tlv = NULL;
369 	bool hs_activate = false;
370 	u16 size;
371 
372 	if (!hscfg_param)
373 		/* New Activate command */
374 		hs_activate = true;
375 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_HS_CFG_ENH);
376 
377 	if (!hs_activate &&
378 	    (hscfg_param->conditions != cpu_to_le32(HS_CFG_CANCEL)) &&
379 	    ((adapter->arp_filter_size > 0) &&
380 	     (adapter->arp_filter_size <= ARP_FILTER_MAX_BUF_SIZE))) {
381 		mwifiex_dbg(adapter, CMD,
382 			    "cmd: Attach %d bytes ArpFilter to HSCfg cmd\n",
383 			    adapter->arp_filter_size);
384 		memcpy(((u8 *) hs_cfg) +
385 		       sizeof(struct host_cmd_ds_802_11_hs_cfg_enh),
386 		       adapter->arp_filter, adapter->arp_filter_size);
387 		size = adapter->arp_filter_size +
388 			sizeof(struct host_cmd_ds_802_11_hs_cfg_enh)
389 			+ S_DS_GEN;
390 		tlv = (u8 *)hs_cfg
391 			+ sizeof(struct host_cmd_ds_802_11_hs_cfg_enh)
392 			+ adapter->arp_filter_size;
393 	} else {
394 		size = S_DS_GEN + sizeof(struct host_cmd_ds_802_11_hs_cfg_enh);
395 	}
396 	if (hs_activate) {
397 		hs_cfg->action = cpu_to_le16(HS_ACTIVATE);
398 		hs_cfg->params.hs_activate.resp_ctrl = cpu_to_le16(RESP_NEEDED);
399 	} else {
400 		hs_cfg->action = cpu_to_le16(HS_CONFIGURE);
401 		hs_cfg->params.hs_config.conditions = hscfg_param->conditions;
402 		hs_cfg->params.hs_config.gpio = hscfg_param->gpio;
403 		hs_cfg->params.hs_config.gap = hscfg_param->gap;
404 
405 		size += sizeof(struct mwifiex_ps_param_in_hs);
406 		psparam_tlv = (struct mwifiex_ps_param_in_hs *)tlv;
407 		psparam_tlv->header.type =
408 			cpu_to_le16(TLV_TYPE_PS_PARAMS_IN_HS);
409 		psparam_tlv->header.len =
410 			cpu_to_le16(sizeof(struct mwifiex_ps_param_in_hs)
411 				- sizeof(struct mwifiex_ie_types_header));
412 		psparam_tlv->hs_wake_int = cpu_to_le32(HS_DEF_WAKE_INTERVAL);
413 		psparam_tlv->hs_inact_timeout =
414 			cpu_to_le32(HS_DEF_INACTIVITY_TIMEOUT);
415 
416 		mwifiex_dbg(adapter, CMD,
417 			    "cmd: HS_CFG_CMD: condition:0x%x gpio:0x%x gap:0x%x\n",
418 			    hs_cfg->params.hs_config.conditions,
419 			    hs_cfg->params.hs_config.gpio,
420 			    hs_cfg->params.hs_config.gap);
421 	}
422 	cmd->size = cpu_to_le16(size);
423 
424 	return 0;
425 }
426 
427 /*
428  * This function prepares command to set/get MAC address.
429  *
430  * Preparation includes -
431  *      - Setting command ID, action and proper size
432  *      - Setting MAC address (for SET only)
433  *      - Ensuring correct endian-ness
434  */
435 static int mwifiex_cmd_802_11_mac_address(struct mwifiex_private *priv,
436 					  struct host_cmd_ds_command *cmd,
437 					  u16 cmd_action)
438 {
439 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_MAC_ADDRESS);
440 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_802_11_mac_address) +
441 				S_DS_GEN);
442 	cmd->result = 0;
443 
444 	cmd->params.mac_addr.action = cpu_to_le16(cmd_action);
445 
446 	if (cmd_action == HostCmd_ACT_GEN_SET)
447 		memcpy(cmd->params.mac_addr.mac_addr, priv->curr_addr,
448 		       ETH_ALEN);
449 	return 0;
450 }
451 
452 /*
453  * This function prepares command to set MAC multicast address.
454  *
455  * Preparation includes -
456  *      - Setting command ID, action and proper size
457  *      - Setting MAC multicast address
458  *      - Ensuring correct endian-ness
459  */
460 static int
461 mwifiex_cmd_mac_multicast_adr(struct host_cmd_ds_command *cmd,
462 			      u16 cmd_action,
463 			      struct mwifiex_multicast_list *mcast_list)
464 {
465 	struct host_cmd_ds_mac_multicast_adr *mcast_addr = &cmd->params.mc_addr;
466 
467 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_mac_multicast_adr) +
468 				S_DS_GEN);
469 	cmd->command = cpu_to_le16(HostCmd_CMD_MAC_MULTICAST_ADR);
470 
471 	mcast_addr->action = cpu_to_le16(cmd_action);
472 	mcast_addr->num_of_adrs =
473 		cpu_to_le16((u16) mcast_list->num_multicast_addr);
474 	memcpy(mcast_addr->mac_list, mcast_list->mac_list,
475 	       mcast_list->num_multicast_addr * ETH_ALEN);
476 
477 	return 0;
478 }
479 
480 /*
481  * This function prepares command to deauthenticate.
482  *
483  * Preparation includes -
484  *      - Setting command ID and proper size
485  *      - Setting AP MAC address and reason code
486  *      - Ensuring correct endian-ness
487  */
488 static int mwifiex_cmd_802_11_deauthenticate(struct mwifiex_private *priv,
489 					     struct host_cmd_ds_command *cmd,
490 					     u8 *mac)
491 {
492 	struct host_cmd_ds_802_11_deauthenticate *deauth = &cmd->params.deauth;
493 
494 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_DEAUTHENTICATE);
495 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_802_11_deauthenticate)
496 				+ S_DS_GEN);
497 
498 	/* Set AP MAC address */
499 	memcpy(deauth->mac_addr, mac, ETH_ALEN);
500 
501 	mwifiex_dbg(priv->adapter, CMD, "cmd: Deauth: %pM\n", deauth->mac_addr);
502 
503 	deauth->reason_code = cpu_to_le16(WLAN_REASON_DEAUTH_LEAVING);
504 
505 	return 0;
506 }
507 
508 /*
509  * This function prepares command to stop Ad-Hoc network.
510  *
511  * Preparation includes -
512  *      - Setting command ID and proper size
513  *      - Ensuring correct endian-ness
514  */
515 static int mwifiex_cmd_802_11_ad_hoc_stop(struct host_cmd_ds_command *cmd)
516 {
517 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_AD_HOC_STOP);
518 	cmd->size = cpu_to_le16(S_DS_GEN);
519 	return 0;
520 }
521 
522 /*
523  * This function sets WEP key(s) to key parameter TLV(s).
524  *
525  * Multi-key parameter TLVs are supported, so we can send multiple
526  * WEP keys in a single buffer.
527  */
528 static int
529 mwifiex_set_keyparamset_wep(struct mwifiex_private *priv,
530 			    struct mwifiex_ie_type_key_param_set *key_param_set,
531 			    u16 *key_param_len)
532 {
533 	int cur_key_param_len;
534 	u8 i;
535 
536 	/* Multi-key_param_set TLV is supported */
537 	for (i = 0; i < NUM_WEP_KEYS; i++) {
538 		if ((priv->wep_key[i].key_length == WLAN_KEY_LEN_WEP40) ||
539 		    (priv->wep_key[i].key_length == WLAN_KEY_LEN_WEP104)) {
540 			key_param_set->type =
541 				cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
542 /* Key_param_set WEP fixed length */
543 #define KEYPARAMSET_WEP_FIXED_LEN 8
544 			key_param_set->length = cpu_to_le16((u16)
545 					(priv->wep_key[i].
546 					 key_length +
547 					 KEYPARAMSET_WEP_FIXED_LEN));
548 			key_param_set->key_type_id =
549 				cpu_to_le16(KEY_TYPE_ID_WEP);
550 			key_param_set->key_info =
551 				cpu_to_le16(KEY_ENABLED | KEY_UNICAST |
552 					    KEY_MCAST);
553 			key_param_set->key_len =
554 				cpu_to_le16(priv->wep_key[i].key_length);
555 			/* Set WEP key index */
556 			key_param_set->key[0] = i;
557 			/* Set default Tx key flag */
558 			if (i ==
559 			    (priv->
560 			     wep_key_curr_index & HostCmd_WEP_KEY_INDEX_MASK))
561 				key_param_set->key[1] = 1;
562 			else
563 				key_param_set->key[1] = 0;
564 			memmove(&key_param_set->key[2],
565 				priv->wep_key[i].key_material,
566 				priv->wep_key[i].key_length);
567 
568 			cur_key_param_len = priv->wep_key[i].key_length +
569 				KEYPARAMSET_WEP_FIXED_LEN +
570 				sizeof(struct mwifiex_ie_types_header);
571 			*key_param_len += (u16) cur_key_param_len;
572 			key_param_set =
573 				(struct mwifiex_ie_type_key_param_set *)
574 						((u8 *)key_param_set +
575 						 cur_key_param_len);
576 		} else if (!priv->wep_key[i].key_length) {
577 			continue;
578 		} else {
579 			mwifiex_dbg(priv->adapter, ERROR,
580 				    "key%d Length = %d is incorrect\n",
581 				    (i + 1), priv->wep_key[i].key_length);
582 			return -1;
583 		}
584 	}
585 
586 	return 0;
587 }
588 
589 /* This function populates key material v2 command
590  * to set network key for AES & CMAC AES.
591  */
592 static int mwifiex_set_aes_key_v2(struct mwifiex_private *priv,
593 				  struct host_cmd_ds_command *cmd,
594 				  struct mwifiex_ds_encrypt_key *enc_key,
595 				  struct host_cmd_ds_802_11_key_material_v2 *km)
596 {
597 	struct mwifiex_adapter *adapter = priv->adapter;
598 	u16 size, len = KEY_PARAMS_FIXED_LEN;
599 
600 	if (enc_key->is_igtk_key) {
601 		mwifiex_dbg(adapter, INFO,
602 			    "%s: Set CMAC AES Key\n", __func__);
603 		if (enc_key->is_rx_seq_valid)
604 			memcpy(km->key_param_set.key_params.cmac_aes.ipn,
605 			       enc_key->pn, enc_key->pn_len);
606 		km->key_param_set.key_info &= cpu_to_le16(~KEY_MCAST);
607 		km->key_param_set.key_info |= cpu_to_le16(KEY_IGTK);
608 		km->key_param_set.key_type = KEY_TYPE_ID_AES_CMAC;
609 		km->key_param_set.key_params.cmac_aes.key_len =
610 					  cpu_to_le16(enc_key->key_len);
611 		memcpy(km->key_param_set.key_params.cmac_aes.key,
612 		       enc_key->key_material, enc_key->key_len);
613 		len += sizeof(struct mwifiex_cmac_aes_param);
614 	} else if (enc_key->is_igtk_def_key) {
615 		mwifiex_dbg(adapter, INFO,
616 			    "%s: Set CMAC default Key index\n", __func__);
617 		km->key_param_set.key_type = KEY_TYPE_ID_AES_CMAC_DEF;
618 		km->key_param_set.key_idx = enc_key->key_index & KEY_INDEX_MASK;
619 	} else {
620 		mwifiex_dbg(adapter, INFO,
621 			    "%s: Set AES Key\n", __func__);
622 		if (enc_key->is_rx_seq_valid)
623 			memcpy(km->key_param_set.key_params.aes.pn,
624 			       enc_key->pn, enc_key->pn_len);
625 		km->key_param_set.key_type = KEY_TYPE_ID_AES;
626 		km->key_param_set.key_params.aes.key_len =
627 					  cpu_to_le16(enc_key->key_len);
628 		memcpy(km->key_param_set.key_params.aes.key,
629 		       enc_key->key_material, enc_key->key_len);
630 		len += sizeof(struct mwifiex_aes_param);
631 	}
632 
633 	km->key_param_set.len = cpu_to_le16(len);
634 	size = len + sizeof(struct mwifiex_ie_types_header) +
635 	       sizeof(km->action) + S_DS_GEN;
636 	cmd->size = cpu_to_le16(size);
637 
638 	return 0;
639 }
640 
641 /* This function prepares command to set/get/reset network key(s).
642  * This function prepares key material command for V2 format.
643  * Preparation includes -
644  *      - Setting command ID, action and proper size
645  *      - Setting WEP keys, WAPI keys or WPA keys along with required
646  *        encryption (TKIP, AES) (as required)
647  *      - Ensuring correct endian-ness
648  */
649 static int
650 mwifiex_cmd_802_11_key_material_v2(struct mwifiex_private *priv,
651 				   struct host_cmd_ds_command *cmd,
652 				   u16 cmd_action, u32 cmd_oid,
653 				   struct mwifiex_ds_encrypt_key *enc_key)
654 {
655 	struct mwifiex_adapter *adapter = priv->adapter;
656 	u8 *mac = enc_key->mac_addr;
657 	u16 key_info, len = KEY_PARAMS_FIXED_LEN;
658 	struct host_cmd_ds_802_11_key_material_v2 *km =
659 						&cmd->params.key_material_v2;
660 
661 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_KEY_MATERIAL);
662 	km->action = cpu_to_le16(cmd_action);
663 
664 	if (cmd_action == HostCmd_ACT_GEN_GET) {
665 		mwifiex_dbg(adapter, INFO, "%s: Get key\n", __func__);
666 		km->key_param_set.key_idx =
667 					enc_key->key_index & KEY_INDEX_MASK;
668 		km->key_param_set.type = cpu_to_le16(TLV_TYPE_KEY_PARAM_V2);
669 		km->key_param_set.len = cpu_to_le16(KEY_PARAMS_FIXED_LEN);
670 		memcpy(km->key_param_set.mac_addr, mac, ETH_ALEN);
671 
672 		if (enc_key->key_index & MWIFIEX_KEY_INDEX_UNICAST)
673 			key_info = KEY_UNICAST;
674 		else
675 			key_info = KEY_MCAST;
676 
677 		if (enc_key->is_igtk_key)
678 			key_info |= KEY_IGTK;
679 
680 		km->key_param_set.key_info = cpu_to_le16(key_info);
681 
682 		cmd->size = cpu_to_le16(sizeof(struct mwifiex_ie_types_header) +
683 					S_DS_GEN + KEY_PARAMS_FIXED_LEN +
684 					sizeof(km->action));
685 		return 0;
686 	}
687 
688 	memset(&km->key_param_set, 0,
689 	       sizeof(struct mwifiex_ie_type_key_param_set_v2));
690 
691 	if (enc_key->key_disable) {
692 		mwifiex_dbg(adapter, INFO, "%s: Remove key\n", __func__);
693 		km->action = cpu_to_le16(HostCmd_ACT_GEN_REMOVE);
694 		km->key_param_set.type = cpu_to_le16(TLV_TYPE_KEY_PARAM_V2);
695 		km->key_param_set.len = cpu_to_le16(KEY_PARAMS_FIXED_LEN);
696 		km->key_param_set.key_idx = enc_key->key_index & KEY_INDEX_MASK;
697 		key_info = KEY_MCAST | KEY_UNICAST;
698 		km->key_param_set.key_info = cpu_to_le16(key_info);
699 		memcpy(km->key_param_set.mac_addr, mac, ETH_ALEN);
700 		cmd->size = cpu_to_le16(sizeof(struct mwifiex_ie_types_header) +
701 					S_DS_GEN + KEY_PARAMS_FIXED_LEN +
702 					sizeof(km->action));
703 		return 0;
704 	}
705 
706 	km->action = cpu_to_le16(HostCmd_ACT_GEN_SET);
707 	km->key_param_set.key_idx = enc_key->key_index & KEY_INDEX_MASK;
708 	km->key_param_set.type = cpu_to_le16(TLV_TYPE_KEY_PARAM_V2);
709 	key_info = KEY_ENABLED;
710 	memcpy(km->key_param_set.mac_addr, mac, ETH_ALEN);
711 
712 	if (enc_key->key_len <= WLAN_KEY_LEN_WEP104) {
713 		mwifiex_dbg(adapter, INFO, "%s: Set WEP Key\n", __func__);
714 		len += sizeof(struct mwifiex_wep_param);
715 		km->key_param_set.len = cpu_to_le16(len);
716 		km->key_param_set.key_type = KEY_TYPE_ID_WEP;
717 
718 		if (GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) {
719 				key_info |= KEY_MCAST | KEY_UNICAST;
720 		} else {
721 			if (enc_key->is_current_wep_key) {
722 				key_info |= KEY_MCAST | KEY_UNICAST;
723 				if (km->key_param_set.key_idx ==
724 				    (priv->wep_key_curr_index & KEY_INDEX_MASK))
725 					key_info |= KEY_DEFAULT;
726 			} else {
727 				if (is_broadcast_ether_addr(mac))
728 					key_info |= KEY_MCAST;
729 				else
730 					key_info |= KEY_UNICAST | KEY_DEFAULT;
731 			}
732 		}
733 		km->key_param_set.key_info = cpu_to_le16(key_info);
734 
735 		km->key_param_set.key_params.wep.key_len =
736 						  cpu_to_le16(enc_key->key_len);
737 		memcpy(km->key_param_set.key_params.wep.key,
738 		       enc_key->key_material, enc_key->key_len);
739 
740 		cmd->size = cpu_to_le16(sizeof(struct mwifiex_ie_types_header) +
741 					len + sizeof(km->action) + S_DS_GEN);
742 		return 0;
743 	}
744 
745 	if (is_broadcast_ether_addr(mac))
746 		key_info |= KEY_MCAST | KEY_RX_KEY;
747 	else
748 		key_info |= KEY_UNICAST | KEY_TX_KEY | KEY_RX_KEY;
749 
750 	if (enc_key->is_wapi_key) {
751 		mwifiex_dbg(adapter, INFO, "%s: Set WAPI Key\n", __func__);
752 		km->key_param_set.key_type = KEY_TYPE_ID_WAPI;
753 		memcpy(km->key_param_set.key_params.wapi.pn, enc_key->pn,
754 		       PN_LEN);
755 		km->key_param_set.key_params.wapi.key_len =
756 						cpu_to_le16(enc_key->key_len);
757 		memcpy(km->key_param_set.key_params.wapi.key,
758 		       enc_key->key_material, enc_key->key_len);
759 		if (is_broadcast_ether_addr(mac))
760 			priv->sec_info.wapi_key_on = true;
761 
762 		if (!priv->sec_info.wapi_key_on)
763 			key_info |= KEY_DEFAULT;
764 		km->key_param_set.key_info = cpu_to_le16(key_info);
765 
766 		len += sizeof(struct mwifiex_wapi_param);
767 		km->key_param_set.len = cpu_to_le16(len);
768 		cmd->size = cpu_to_le16(sizeof(struct mwifiex_ie_types_header) +
769 					len + sizeof(km->action) + S_DS_GEN);
770 		return 0;
771 	}
772 
773 	if (priv->bss_mode == NL80211_IFTYPE_ADHOC) {
774 		key_info |= KEY_DEFAULT;
775 		/* Enable unicast bit for WPA-NONE/ADHOC_AES */
776 		if (!priv->sec_info.wpa2_enabled &&
777 		    !is_broadcast_ether_addr(mac))
778 			key_info |= KEY_UNICAST;
779 	} else {
780 		/* Enable default key for WPA/WPA2 */
781 		if (!priv->wpa_is_gtk_set)
782 			key_info |= KEY_DEFAULT;
783 	}
784 
785 	km->key_param_set.key_info = cpu_to_le16(key_info);
786 
787 	if (enc_key->key_len == WLAN_KEY_LEN_CCMP)
788 		return mwifiex_set_aes_key_v2(priv, cmd, enc_key, km);
789 
790 	if (enc_key->key_len == WLAN_KEY_LEN_TKIP) {
791 		mwifiex_dbg(adapter, INFO,
792 			    "%s: Set TKIP Key\n", __func__);
793 		if (enc_key->is_rx_seq_valid)
794 			memcpy(km->key_param_set.key_params.tkip.pn,
795 			       enc_key->pn, enc_key->pn_len);
796 		km->key_param_set.key_type = KEY_TYPE_ID_TKIP;
797 		km->key_param_set.key_params.tkip.key_len =
798 						cpu_to_le16(enc_key->key_len);
799 		memcpy(km->key_param_set.key_params.tkip.key,
800 		       enc_key->key_material, enc_key->key_len);
801 
802 		len += sizeof(struct mwifiex_tkip_param);
803 		km->key_param_set.len = cpu_to_le16(len);
804 		cmd->size = cpu_to_le16(sizeof(struct mwifiex_ie_types_header) +
805 					len + sizeof(km->action) + S_DS_GEN);
806 	}
807 
808 	return 0;
809 }
810 
811 /*
812  * This function prepares command to set/get/reset network key(s).
813  * This function prepares key material command for V1 format.
814  *
815  * Preparation includes -
816  *      - Setting command ID, action and proper size
817  *      - Setting WEP keys, WAPI keys or WPA keys along with required
818  *        encryption (TKIP, AES) (as required)
819  *      - Ensuring correct endian-ness
820  */
821 static int
822 mwifiex_cmd_802_11_key_material_v1(struct mwifiex_private *priv,
823 				   struct host_cmd_ds_command *cmd,
824 				   u16 cmd_action, u32 cmd_oid,
825 				   struct mwifiex_ds_encrypt_key *enc_key)
826 {
827 	struct host_cmd_ds_802_11_key_material *key_material =
828 		&cmd->params.key_material;
829 	struct host_cmd_tlv_mac_addr *tlv_mac;
830 	u16 key_param_len = 0, cmd_size;
831 	int ret = 0;
832 
833 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_KEY_MATERIAL);
834 	key_material->action = cpu_to_le16(cmd_action);
835 
836 	if (cmd_action == HostCmd_ACT_GEN_GET) {
837 		cmd->size =
838 			cpu_to_le16(sizeof(key_material->action) + S_DS_GEN);
839 		return ret;
840 	}
841 
842 	if (!enc_key) {
843 		memset(&key_material->key_param_set, 0,
844 		       (NUM_WEP_KEYS *
845 			sizeof(struct mwifiex_ie_type_key_param_set)));
846 		ret = mwifiex_set_keyparamset_wep(priv,
847 						  &key_material->key_param_set,
848 						  &key_param_len);
849 		cmd->size = cpu_to_le16(key_param_len +
850 				    sizeof(key_material->action) + S_DS_GEN);
851 		return ret;
852 	} else
853 		memset(&key_material->key_param_set, 0,
854 		       sizeof(struct mwifiex_ie_type_key_param_set));
855 	if (enc_key->is_wapi_key) {
856 		mwifiex_dbg(priv->adapter, INFO, "info: Set WAPI Key\n");
857 		key_material->key_param_set.key_type_id =
858 						cpu_to_le16(KEY_TYPE_ID_WAPI);
859 		if (cmd_oid == KEY_INFO_ENABLED)
860 			key_material->key_param_set.key_info =
861 						cpu_to_le16(KEY_ENABLED);
862 		else
863 			key_material->key_param_set.key_info =
864 						cpu_to_le16(!KEY_ENABLED);
865 
866 		key_material->key_param_set.key[0] = enc_key->key_index;
867 		if (!priv->sec_info.wapi_key_on)
868 			key_material->key_param_set.key[1] = 1;
869 		else
870 			/* set 0 when re-key */
871 			key_material->key_param_set.key[1] = 0;
872 
873 		if (!is_broadcast_ether_addr(enc_key->mac_addr)) {
874 			/* WAPI pairwise key: unicast */
875 			key_material->key_param_set.key_info |=
876 				cpu_to_le16(KEY_UNICAST);
877 		} else {	/* WAPI group key: multicast */
878 			key_material->key_param_set.key_info |=
879 				cpu_to_le16(KEY_MCAST);
880 			priv->sec_info.wapi_key_on = true;
881 		}
882 
883 		key_material->key_param_set.type =
884 					cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
885 		key_material->key_param_set.key_len =
886 						cpu_to_le16(WAPI_KEY_LEN);
887 		memcpy(&key_material->key_param_set.key[2],
888 		       enc_key->key_material, enc_key->key_len);
889 		memcpy(&key_material->key_param_set.key[2 + enc_key->key_len],
890 		       enc_key->pn, PN_LEN);
891 		key_material->key_param_set.length =
892 			cpu_to_le16(WAPI_KEY_LEN + KEYPARAMSET_FIXED_LEN);
893 
894 		key_param_len = (WAPI_KEY_LEN + KEYPARAMSET_FIXED_LEN) +
895 				 sizeof(struct mwifiex_ie_types_header);
896 		cmd->size = cpu_to_le16(sizeof(key_material->action)
897 					+ S_DS_GEN +  key_param_len);
898 		return ret;
899 	}
900 	if (enc_key->key_len == WLAN_KEY_LEN_CCMP) {
901 		if (enc_key->is_igtk_key) {
902 			mwifiex_dbg(priv->adapter, CMD, "cmd: CMAC_AES\n");
903 			key_material->key_param_set.key_type_id =
904 					cpu_to_le16(KEY_TYPE_ID_AES_CMAC);
905 			if (cmd_oid == KEY_INFO_ENABLED)
906 				key_material->key_param_set.key_info =
907 						cpu_to_le16(KEY_ENABLED);
908 			else
909 				key_material->key_param_set.key_info =
910 						cpu_to_le16(!KEY_ENABLED);
911 
912 			key_material->key_param_set.key_info |=
913 							cpu_to_le16(KEY_IGTK);
914 		} else {
915 			mwifiex_dbg(priv->adapter, CMD, "cmd: WPA_AES\n");
916 			key_material->key_param_set.key_type_id =
917 						cpu_to_le16(KEY_TYPE_ID_AES);
918 			if (cmd_oid == KEY_INFO_ENABLED)
919 				key_material->key_param_set.key_info =
920 						cpu_to_le16(KEY_ENABLED);
921 			else
922 				key_material->key_param_set.key_info =
923 						cpu_to_le16(!KEY_ENABLED);
924 
925 			if (enc_key->key_index & MWIFIEX_KEY_INDEX_UNICAST)
926 				/* AES pairwise key: unicast */
927 				key_material->key_param_set.key_info |=
928 						cpu_to_le16(KEY_UNICAST);
929 			else	/* AES group key: multicast */
930 				key_material->key_param_set.key_info |=
931 							cpu_to_le16(KEY_MCAST);
932 		}
933 	} else if (enc_key->key_len == WLAN_KEY_LEN_TKIP) {
934 		mwifiex_dbg(priv->adapter, CMD, "cmd: WPA_TKIP\n");
935 		key_material->key_param_set.key_type_id =
936 						cpu_to_le16(KEY_TYPE_ID_TKIP);
937 		key_material->key_param_set.key_info =
938 						cpu_to_le16(KEY_ENABLED);
939 
940 		if (enc_key->key_index & MWIFIEX_KEY_INDEX_UNICAST)
941 				/* TKIP pairwise key: unicast */
942 			key_material->key_param_set.key_info |=
943 						cpu_to_le16(KEY_UNICAST);
944 		else		/* TKIP group key: multicast */
945 			key_material->key_param_set.key_info |=
946 							cpu_to_le16(KEY_MCAST);
947 	}
948 
949 	if (key_material->key_param_set.key_type_id) {
950 		key_material->key_param_set.type =
951 					cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
952 		key_material->key_param_set.key_len =
953 					cpu_to_le16((u16) enc_key->key_len);
954 		memcpy(key_material->key_param_set.key, enc_key->key_material,
955 		       enc_key->key_len);
956 		key_material->key_param_set.length =
957 			cpu_to_le16((u16) enc_key->key_len +
958 				    KEYPARAMSET_FIXED_LEN);
959 
960 		key_param_len = (u16)(enc_key->key_len + KEYPARAMSET_FIXED_LEN)
961 				+ sizeof(struct mwifiex_ie_types_header);
962 
963 		if (le16_to_cpu(key_material->key_param_set.key_type_id) ==
964 							KEY_TYPE_ID_AES_CMAC) {
965 			struct mwifiex_cmac_param *param =
966 					(void *)key_material->key_param_set.key;
967 
968 			memcpy(param->ipn, enc_key->pn, IGTK_PN_LEN);
969 			memcpy(param->key, enc_key->key_material,
970 			       WLAN_KEY_LEN_AES_CMAC);
971 
972 			key_param_len = sizeof(struct mwifiex_cmac_param);
973 			key_material->key_param_set.key_len =
974 						cpu_to_le16(key_param_len);
975 			key_param_len += KEYPARAMSET_FIXED_LEN;
976 			key_material->key_param_set.length =
977 						cpu_to_le16(key_param_len);
978 			key_param_len += sizeof(struct mwifiex_ie_types_header);
979 		}
980 
981 		cmd->size = cpu_to_le16(sizeof(key_material->action) + S_DS_GEN
982 					+ key_param_len);
983 
984 		if (GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) {
985 			tlv_mac = (void *)((u8 *)&key_material->key_param_set +
986 					   key_param_len);
987 			tlv_mac->header.type =
988 					cpu_to_le16(TLV_TYPE_STA_MAC_ADDR);
989 			tlv_mac->header.len = cpu_to_le16(ETH_ALEN);
990 			memcpy(tlv_mac->mac_addr, enc_key->mac_addr, ETH_ALEN);
991 			cmd_size = key_param_len + S_DS_GEN +
992 				   sizeof(key_material->action) +
993 				   sizeof(struct host_cmd_tlv_mac_addr);
994 		} else {
995 			cmd_size = key_param_len + S_DS_GEN +
996 				   sizeof(key_material->action);
997 		}
998 		cmd->size = cpu_to_le16(cmd_size);
999 	}
1000 
1001 	return ret;
1002 }
1003 
1004 /* Wrapper function for setting network key depending upon FW KEY API version */
1005 static int
1006 mwifiex_cmd_802_11_key_material(struct mwifiex_private *priv,
1007 				struct host_cmd_ds_command *cmd,
1008 				u16 cmd_action, u32 cmd_oid,
1009 				struct mwifiex_ds_encrypt_key *enc_key)
1010 {
1011 	if (priv->adapter->key_api_major_ver == KEY_API_VER_MAJOR_V2)
1012 		return mwifiex_cmd_802_11_key_material_v2(priv, cmd,
1013 							  cmd_action, cmd_oid,
1014 							  enc_key);
1015 
1016 	else
1017 		return mwifiex_cmd_802_11_key_material_v1(priv, cmd,
1018 							  cmd_action, cmd_oid,
1019 							  enc_key);
1020 }
1021 
1022 /*
1023  * This function prepares command to set/get 11d domain information.
1024  *
1025  * Preparation includes -
1026  *      - Setting command ID, action and proper size
1027  *      - Setting domain information fields (for SET only)
1028  *      - Ensuring correct endian-ness
1029  */
1030 static int mwifiex_cmd_802_11d_domain_info(struct mwifiex_private *priv,
1031 					   struct host_cmd_ds_command *cmd,
1032 					   u16 cmd_action)
1033 {
1034 	struct mwifiex_adapter *adapter = priv->adapter;
1035 	struct host_cmd_ds_802_11d_domain_info *domain_info =
1036 		&cmd->params.domain_info;
1037 	struct mwifiex_ietypes_domain_param_set *domain =
1038 		&domain_info->domain;
1039 	u8 no_of_triplet = adapter->domain_reg.no_of_triplet;
1040 
1041 	mwifiex_dbg(adapter, INFO,
1042 		    "info: 11D: no_of_triplet=0x%x\n", no_of_triplet);
1043 
1044 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11D_DOMAIN_INFO);
1045 	domain_info->action = cpu_to_le16(cmd_action);
1046 	if (cmd_action == HostCmd_ACT_GEN_GET) {
1047 		cmd->size = cpu_to_le16(sizeof(domain_info->action) + S_DS_GEN);
1048 		return 0;
1049 	}
1050 
1051 	/* Set domain info fields */
1052 	domain->header.type = cpu_to_le16(WLAN_EID_COUNTRY);
1053 	memcpy(domain->country_code, adapter->domain_reg.country_code,
1054 	       sizeof(domain->country_code));
1055 
1056 	domain->header.len =
1057 		cpu_to_le16((no_of_triplet *
1058 			     sizeof(struct ieee80211_country_ie_triplet))
1059 			    + sizeof(domain->country_code));
1060 
1061 	if (no_of_triplet) {
1062 		memcpy(domain->triplet, adapter->domain_reg.triplet,
1063 		       no_of_triplet * sizeof(struct
1064 					      ieee80211_country_ie_triplet));
1065 
1066 		cmd->size = cpu_to_le16(sizeof(domain_info->action) +
1067 					le16_to_cpu(domain->header.len) +
1068 					sizeof(struct mwifiex_ie_types_header)
1069 					+ S_DS_GEN);
1070 	} else {
1071 		cmd->size = cpu_to_le16(sizeof(domain_info->action) + S_DS_GEN);
1072 	}
1073 
1074 	return 0;
1075 }
1076 
1077 /*
1078  * This function prepares command to set/get IBSS coalescing status.
1079  *
1080  * Preparation includes -
1081  *      - Setting command ID, action and proper size
1082  *      - Setting status to enable or disable (for SET only)
1083  *      - Ensuring correct endian-ness
1084  */
1085 static int mwifiex_cmd_ibss_coalescing_status(struct host_cmd_ds_command *cmd,
1086 					      u16 cmd_action, u16 *enable)
1087 {
1088 	struct host_cmd_ds_802_11_ibss_status *ibss_coal =
1089 		&(cmd->params.ibss_coalescing);
1090 
1091 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_IBSS_COALESCING_STATUS);
1092 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_802_11_ibss_status) +
1093 				S_DS_GEN);
1094 	cmd->result = 0;
1095 	ibss_coal->action = cpu_to_le16(cmd_action);
1096 
1097 	switch (cmd_action) {
1098 	case HostCmd_ACT_GEN_SET:
1099 		if (enable)
1100 			ibss_coal->enable = cpu_to_le16(*enable);
1101 		else
1102 			ibss_coal->enable = 0;
1103 		break;
1104 
1105 		/* In other case.. Nothing to do */
1106 	case HostCmd_ACT_GEN_GET:
1107 	default:
1108 		break;
1109 	}
1110 
1111 	return 0;
1112 }
1113 
1114 /* This function prepares command buffer to get/set memory location value.
1115  */
1116 static int
1117 mwifiex_cmd_mem_access(struct host_cmd_ds_command *cmd, u16 cmd_action,
1118 		       void *pdata_buf)
1119 {
1120 	struct mwifiex_ds_mem_rw *mem_rw = (void *)pdata_buf;
1121 	struct host_cmd_ds_mem_access *mem_access = (void *)&cmd->params.mem;
1122 
1123 	cmd->command = cpu_to_le16(HostCmd_CMD_MEM_ACCESS);
1124 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_mem_access) +
1125 				S_DS_GEN);
1126 
1127 	mem_access->action = cpu_to_le16(cmd_action);
1128 	mem_access->addr = cpu_to_le32(mem_rw->addr);
1129 	mem_access->value = cpu_to_le32(mem_rw->value);
1130 
1131 	return 0;
1132 }
1133 
1134 /*
1135  * This function prepares command to set/get register value.
1136  *
1137  * Preparation includes -
1138  *      - Setting command ID, action and proper size
1139  *      - Setting register offset (for both GET and SET) and
1140  *        register value (for SET only)
1141  *      - Ensuring correct endian-ness
1142  *
1143  * The following type of registers can be accessed with this function -
1144  *      - MAC register
1145  *      - BBP register
1146  *      - RF register
1147  *      - PMIC register
1148  *      - CAU register
1149  *      - EEPROM
1150  */
1151 static int mwifiex_cmd_reg_access(struct host_cmd_ds_command *cmd,
1152 				  u16 cmd_action, void *data_buf)
1153 {
1154 	struct mwifiex_ds_reg_rw *reg_rw = data_buf;
1155 
1156 	switch (le16_to_cpu(cmd->command)) {
1157 	case HostCmd_CMD_MAC_REG_ACCESS:
1158 	{
1159 		struct host_cmd_ds_mac_reg_access *mac_reg;
1160 
1161 		cmd->size = cpu_to_le16(sizeof(*mac_reg) + S_DS_GEN);
1162 		mac_reg = &cmd->params.mac_reg;
1163 		mac_reg->action = cpu_to_le16(cmd_action);
1164 		mac_reg->offset = cpu_to_le16((u16) reg_rw->offset);
1165 		mac_reg->value = cpu_to_le32(reg_rw->value);
1166 		break;
1167 	}
1168 	case HostCmd_CMD_BBP_REG_ACCESS:
1169 	{
1170 		struct host_cmd_ds_bbp_reg_access *bbp_reg;
1171 
1172 		cmd->size = cpu_to_le16(sizeof(*bbp_reg) + S_DS_GEN);
1173 		bbp_reg = &cmd->params.bbp_reg;
1174 		bbp_reg->action = cpu_to_le16(cmd_action);
1175 		bbp_reg->offset = cpu_to_le16((u16) reg_rw->offset);
1176 		bbp_reg->value = (u8) reg_rw->value;
1177 		break;
1178 	}
1179 	case HostCmd_CMD_RF_REG_ACCESS:
1180 	{
1181 		struct host_cmd_ds_rf_reg_access *rf_reg;
1182 
1183 		cmd->size = cpu_to_le16(sizeof(*rf_reg) + S_DS_GEN);
1184 		rf_reg = &cmd->params.rf_reg;
1185 		rf_reg->action = cpu_to_le16(cmd_action);
1186 		rf_reg->offset = cpu_to_le16((u16) reg_rw->offset);
1187 		rf_reg->value = (u8) reg_rw->value;
1188 		break;
1189 	}
1190 	case HostCmd_CMD_PMIC_REG_ACCESS:
1191 	{
1192 		struct host_cmd_ds_pmic_reg_access *pmic_reg;
1193 
1194 		cmd->size = cpu_to_le16(sizeof(*pmic_reg) + S_DS_GEN);
1195 		pmic_reg = &cmd->params.pmic_reg;
1196 		pmic_reg->action = cpu_to_le16(cmd_action);
1197 		pmic_reg->offset = cpu_to_le16((u16) reg_rw->offset);
1198 		pmic_reg->value = (u8) reg_rw->value;
1199 		break;
1200 	}
1201 	case HostCmd_CMD_CAU_REG_ACCESS:
1202 	{
1203 		struct host_cmd_ds_rf_reg_access *cau_reg;
1204 
1205 		cmd->size = cpu_to_le16(sizeof(*cau_reg) + S_DS_GEN);
1206 		cau_reg = &cmd->params.rf_reg;
1207 		cau_reg->action = cpu_to_le16(cmd_action);
1208 		cau_reg->offset = cpu_to_le16((u16) reg_rw->offset);
1209 		cau_reg->value = (u8) reg_rw->value;
1210 		break;
1211 	}
1212 	case HostCmd_CMD_802_11_EEPROM_ACCESS:
1213 	{
1214 		struct mwifiex_ds_read_eeprom *rd_eeprom = data_buf;
1215 		struct host_cmd_ds_802_11_eeprom_access *cmd_eeprom =
1216 			&cmd->params.eeprom;
1217 
1218 		cmd->size = cpu_to_le16(sizeof(*cmd_eeprom) + S_DS_GEN);
1219 		cmd_eeprom->action = cpu_to_le16(cmd_action);
1220 		cmd_eeprom->offset = cpu_to_le16(rd_eeprom->offset);
1221 		cmd_eeprom->byte_count = cpu_to_le16(rd_eeprom->byte_count);
1222 		cmd_eeprom->value = 0;
1223 		break;
1224 	}
1225 	default:
1226 		return -1;
1227 	}
1228 
1229 	return 0;
1230 }
1231 
1232 /*
1233  * This function prepares command to set PCI-Express
1234  * host buffer configuration
1235  *
1236  * Preparation includes -
1237  *      - Setting command ID, action and proper size
1238  *      - Setting host buffer configuration
1239  *      - Ensuring correct endian-ness
1240  */
1241 static int
1242 mwifiex_cmd_pcie_host_spec(struct mwifiex_private *priv,
1243 			   struct host_cmd_ds_command *cmd, u16 action)
1244 {
1245 	struct host_cmd_ds_pcie_details *host_spec =
1246 					&cmd->params.pcie_host_spec;
1247 	struct pcie_service_card *card = priv->adapter->card;
1248 
1249 	cmd->command = cpu_to_le16(HostCmd_CMD_PCIE_DESC_DETAILS);
1250 	cmd->size = cpu_to_le16(sizeof(struct
1251 					host_cmd_ds_pcie_details) + S_DS_GEN);
1252 	cmd->result = 0;
1253 
1254 	memset(host_spec, 0, sizeof(struct host_cmd_ds_pcie_details));
1255 
1256 	if (action != HostCmd_ACT_GEN_SET)
1257 		return 0;
1258 
1259 	/* Send the ring base addresses and count to firmware */
1260 	host_spec->txbd_addr_lo = cpu_to_le32((u32)(card->txbd_ring_pbase));
1261 	host_spec->txbd_addr_hi =
1262 			cpu_to_le32((u32)(((u64)card->txbd_ring_pbase) >> 32));
1263 	host_spec->txbd_count = cpu_to_le32(MWIFIEX_MAX_TXRX_BD);
1264 	host_spec->rxbd_addr_lo = cpu_to_le32((u32)(card->rxbd_ring_pbase));
1265 	host_spec->rxbd_addr_hi =
1266 			cpu_to_le32((u32)(((u64)card->rxbd_ring_pbase) >> 32));
1267 	host_spec->rxbd_count = cpu_to_le32(MWIFIEX_MAX_TXRX_BD);
1268 	host_spec->evtbd_addr_lo = cpu_to_le32((u32)(card->evtbd_ring_pbase));
1269 	host_spec->evtbd_addr_hi =
1270 			cpu_to_le32((u32)(((u64)card->evtbd_ring_pbase) >> 32));
1271 	host_spec->evtbd_count = cpu_to_le32(MWIFIEX_MAX_EVT_BD);
1272 	if (card->sleep_cookie_vbase) {
1273 		host_spec->sleep_cookie_addr_lo =
1274 				cpu_to_le32((u32)(card->sleep_cookie_pbase));
1275 		host_spec->sleep_cookie_addr_hi = cpu_to_le32((u32)(((u64)
1276 					(card->sleep_cookie_pbase)) >> 32));
1277 		mwifiex_dbg(priv->adapter, INFO,
1278 			    "sleep_cook_lo phy addr: 0x%x\n",
1279 			    host_spec->sleep_cookie_addr_lo);
1280 	}
1281 
1282 	return 0;
1283 }
1284 
1285 /*
1286  * This function prepares command for event subscription, configuration
1287  * and query. Events can be subscribed or unsubscribed. Current subscribed
1288  * events can be queried. Also, current subscribed events are reported in
1289  * every FW response.
1290  */
1291 static int
1292 mwifiex_cmd_802_11_subsc_evt(struct mwifiex_private *priv,
1293 			     struct host_cmd_ds_command *cmd,
1294 			     struct mwifiex_ds_misc_subsc_evt *subsc_evt_cfg)
1295 {
1296 	struct host_cmd_ds_802_11_subsc_evt *subsc_evt = &cmd->params.subsc_evt;
1297 	struct mwifiex_ie_types_rssi_threshold *rssi_tlv;
1298 	u16 event_bitmap;
1299 	u8 *pos;
1300 
1301 	cmd->command = cpu_to_le16(HostCmd_CMD_802_11_SUBSCRIBE_EVENT);
1302 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_802_11_subsc_evt) +
1303 				S_DS_GEN);
1304 
1305 	subsc_evt->action = cpu_to_le16(subsc_evt_cfg->action);
1306 	mwifiex_dbg(priv->adapter, CMD,
1307 		    "cmd: action: %d\n", subsc_evt_cfg->action);
1308 
1309 	/*For query requests, no configuration TLV structures are to be added.*/
1310 	if (subsc_evt_cfg->action == HostCmd_ACT_GEN_GET)
1311 		return 0;
1312 
1313 	subsc_evt->events = cpu_to_le16(subsc_evt_cfg->events);
1314 
1315 	event_bitmap = subsc_evt_cfg->events;
1316 	mwifiex_dbg(priv->adapter, CMD, "cmd: event bitmap : %16x\n",
1317 		    event_bitmap);
1318 
1319 	if (((subsc_evt_cfg->action == HostCmd_ACT_BITWISE_CLR) ||
1320 	     (subsc_evt_cfg->action == HostCmd_ACT_BITWISE_SET)) &&
1321 	    (event_bitmap == 0)) {
1322 		mwifiex_dbg(priv->adapter, ERROR,
1323 			    "Error: No event specified\t"
1324 			    "for bitwise action type\n");
1325 		return -EINVAL;
1326 	}
1327 
1328 	/*
1329 	 * Append TLV structures for each of the specified events for
1330 	 * subscribing or re-configuring. This is not required for
1331 	 * bitwise unsubscribing request.
1332 	 */
1333 	if (subsc_evt_cfg->action == HostCmd_ACT_BITWISE_CLR)
1334 		return 0;
1335 
1336 	pos = ((u8 *)subsc_evt) +
1337 			sizeof(struct host_cmd_ds_802_11_subsc_evt);
1338 
1339 	if (event_bitmap & BITMASK_BCN_RSSI_LOW) {
1340 		rssi_tlv = (struct mwifiex_ie_types_rssi_threshold *) pos;
1341 
1342 		rssi_tlv->header.type = cpu_to_le16(TLV_TYPE_RSSI_LOW);
1343 		rssi_tlv->header.len =
1344 		    cpu_to_le16(sizeof(struct mwifiex_ie_types_rssi_threshold) -
1345 				sizeof(struct mwifiex_ie_types_header));
1346 		rssi_tlv->abs_value = subsc_evt_cfg->bcn_l_rssi_cfg.abs_value;
1347 		rssi_tlv->evt_freq = subsc_evt_cfg->bcn_l_rssi_cfg.evt_freq;
1348 
1349 		mwifiex_dbg(priv->adapter, EVENT,
1350 			    "Cfg Beacon Low Rssi event,\t"
1351 			    "RSSI:-%d dBm, Freq:%d\n",
1352 			    subsc_evt_cfg->bcn_l_rssi_cfg.abs_value,
1353 			    subsc_evt_cfg->bcn_l_rssi_cfg.evt_freq);
1354 
1355 		pos += sizeof(struct mwifiex_ie_types_rssi_threshold);
1356 		le16_unaligned_add_cpu(&cmd->size,
1357 				       sizeof(
1358 				       struct mwifiex_ie_types_rssi_threshold));
1359 	}
1360 
1361 	if (event_bitmap & BITMASK_BCN_RSSI_HIGH) {
1362 		rssi_tlv = (struct mwifiex_ie_types_rssi_threshold *) pos;
1363 
1364 		rssi_tlv->header.type = cpu_to_le16(TLV_TYPE_RSSI_HIGH);
1365 		rssi_tlv->header.len =
1366 		    cpu_to_le16(sizeof(struct mwifiex_ie_types_rssi_threshold) -
1367 				sizeof(struct mwifiex_ie_types_header));
1368 		rssi_tlv->abs_value = subsc_evt_cfg->bcn_h_rssi_cfg.abs_value;
1369 		rssi_tlv->evt_freq = subsc_evt_cfg->bcn_h_rssi_cfg.evt_freq;
1370 
1371 		mwifiex_dbg(priv->adapter, EVENT,
1372 			    "Cfg Beacon High Rssi event,\t"
1373 			    "RSSI:-%d dBm, Freq:%d\n",
1374 			    subsc_evt_cfg->bcn_h_rssi_cfg.abs_value,
1375 			    subsc_evt_cfg->bcn_h_rssi_cfg.evt_freq);
1376 
1377 		pos += sizeof(struct mwifiex_ie_types_rssi_threshold);
1378 		le16_unaligned_add_cpu(&cmd->size,
1379 				       sizeof(
1380 				       struct mwifiex_ie_types_rssi_threshold));
1381 	}
1382 
1383 	return 0;
1384 }
1385 
1386 static int
1387 mwifiex_cmd_append_rpn_expression(struct mwifiex_private *priv,
1388 				  struct mwifiex_mef_entry *mef_entry,
1389 				  u8 **buffer)
1390 {
1391 	struct mwifiex_mef_filter *filter = mef_entry->filter;
1392 	int i, byte_len;
1393 	u8 *stack_ptr = *buffer;
1394 
1395 	for (i = 0; i < MWIFIEX_MEF_MAX_FILTERS; i++) {
1396 		filter = &mef_entry->filter[i];
1397 		if (!filter->filt_type)
1398 			break;
1399 		put_unaligned_le32((u32)filter->repeat, stack_ptr);
1400 		stack_ptr += 4;
1401 		*stack_ptr = TYPE_DNUM;
1402 		stack_ptr += 1;
1403 
1404 		byte_len = filter->byte_seq[MWIFIEX_MEF_MAX_BYTESEQ];
1405 		memcpy(stack_ptr, filter->byte_seq, byte_len);
1406 		stack_ptr += byte_len;
1407 		*stack_ptr = byte_len;
1408 		stack_ptr += 1;
1409 		*stack_ptr = TYPE_BYTESEQ;
1410 		stack_ptr += 1;
1411 		put_unaligned_le32((u32)filter->offset, stack_ptr);
1412 		stack_ptr += 4;
1413 		*stack_ptr = TYPE_DNUM;
1414 		stack_ptr += 1;
1415 
1416 		*stack_ptr = filter->filt_type;
1417 		stack_ptr += 1;
1418 
1419 		if (filter->filt_action) {
1420 			*stack_ptr = filter->filt_action;
1421 			stack_ptr += 1;
1422 		}
1423 
1424 		if (stack_ptr - *buffer > STACK_NBYTES)
1425 			return -1;
1426 	}
1427 
1428 	*buffer = stack_ptr;
1429 	return 0;
1430 }
1431 
1432 static int
1433 mwifiex_cmd_mef_cfg(struct mwifiex_private *priv,
1434 		    struct host_cmd_ds_command *cmd,
1435 		    struct mwifiex_ds_mef_cfg *mef)
1436 {
1437 	struct host_cmd_ds_mef_cfg *mef_cfg = &cmd->params.mef_cfg;
1438 	struct mwifiex_fw_mef_entry *mef_entry = NULL;
1439 	u8 *pos = (u8 *)mef_cfg;
1440 	u16 i;
1441 
1442 	cmd->command = cpu_to_le16(HostCmd_CMD_MEF_CFG);
1443 
1444 	mef_cfg->criteria = cpu_to_le32(mef->criteria);
1445 	mef_cfg->num_entries = cpu_to_le16(mef->num_entries);
1446 	pos += sizeof(*mef_cfg);
1447 
1448 	for (i = 0; i < mef->num_entries; i++) {
1449 		mef_entry = (struct mwifiex_fw_mef_entry *)pos;
1450 		mef_entry->mode = mef->mef_entry[i].mode;
1451 		mef_entry->action = mef->mef_entry[i].action;
1452 		pos += sizeof(*mef_cfg->mef_entry);
1453 
1454 		if (mwifiex_cmd_append_rpn_expression(priv,
1455 						      &mef->mef_entry[i], &pos))
1456 			return -1;
1457 
1458 		mef_entry->exprsize =
1459 			cpu_to_le16(pos - mef_entry->expr);
1460 	}
1461 	cmd->size = cpu_to_le16((u16) (pos - (u8 *)mef_cfg) + S_DS_GEN);
1462 
1463 	return 0;
1464 }
1465 
1466 /* This function parse cal data from ASCII to hex */
1467 static u32 mwifiex_parse_cal_cfg(u8 *src, size_t len, u8 *dst)
1468 {
1469 	u8 *s = src, *d = dst;
1470 
1471 	while (s - src < len) {
1472 		if (*s && (isspace(*s) || *s == '\t')) {
1473 			s++;
1474 			continue;
1475 		}
1476 		if (isxdigit(*s)) {
1477 			*d++ = simple_strtol(s, NULL, 16);
1478 			s += 2;
1479 		} else {
1480 			s++;
1481 		}
1482 	}
1483 
1484 	return d - dst;
1485 }
1486 
1487 int mwifiex_dnld_dt_cfgdata(struct mwifiex_private *priv,
1488 			    struct device_node *node, const char *prefix)
1489 {
1490 #ifdef CONFIG_OF
1491 	struct property *prop;
1492 	size_t len = strlen(prefix);
1493 	int ret;
1494 
1495 	/* look for all matching property names */
1496 	for_each_property_of_node(node, prop) {
1497 		if (len > strlen(prop->name) ||
1498 		    strncmp(prop->name, prefix, len))
1499 			continue;
1500 
1501 		/* property header is 6 bytes, data must fit in cmd buffer */
1502 		if (prop->value && prop->length > 6 &&
1503 		    prop->length <= MWIFIEX_SIZE_OF_CMD_BUFFER - S_DS_GEN) {
1504 			ret = mwifiex_send_cmd(priv, HostCmd_CMD_CFG_DATA,
1505 					       HostCmd_ACT_GEN_SET, 0,
1506 					       prop, true);
1507 			if (ret)
1508 				return ret;
1509 		}
1510 	}
1511 #endif
1512 	return 0;
1513 }
1514 
1515 /* This function prepares command of set_cfg_data. */
1516 static int mwifiex_cmd_cfg_data(struct mwifiex_private *priv,
1517 				struct host_cmd_ds_command *cmd, void *data_buf)
1518 {
1519 	struct mwifiex_adapter *adapter = priv->adapter;
1520 	struct property *prop = data_buf;
1521 	u32 len;
1522 	u8 *data = (u8 *)cmd + S_DS_GEN;
1523 	int ret;
1524 
1525 	if (prop) {
1526 		len = prop->length;
1527 		ret = of_property_read_u8_array(adapter->dt_node, prop->name,
1528 						data, len);
1529 		if (ret)
1530 			return ret;
1531 		mwifiex_dbg(adapter, INFO,
1532 			    "download cfg_data from device tree: %s\n",
1533 			    prop->name);
1534 	} else if (adapter->cal_data->data && adapter->cal_data->size > 0) {
1535 		len = mwifiex_parse_cal_cfg((u8 *)adapter->cal_data->data,
1536 					    adapter->cal_data->size, data);
1537 		mwifiex_dbg(adapter, INFO,
1538 			    "download cfg_data from config file\n");
1539 	} else {
1540 		return -1;
1541 	}
1542 
1543 	cmd->command = cpu_to_le16(HostCmd_CMD_CFG_DATA);
1544 	cmd->size = cpu_to_le16(S_DS_GEN + len);
1545 
1546 	return 0;
1547 }
1548 
1549 static int
1550 mwifiex_cmd_set_mc_policy(struct mwifiex_private *priv,
1551 			  struct host_cmd_ds_command *cmd,
1552 			  u16 cmd_action, void *data_buf)
1553 {
1554 	struct host_cmd_ds_multi_chan_policy *mc_pol = &cmd->params.mc_policy;
1555 	const u16 *drcs_info = data_buf;
1556 
1557 	mc_pol->action = cpu_to_le16(cmd_action);
1558 	mc_pol->policy = cpu_to_le16(*drcs_info);
1559 	cmd->command = cpu_to_le16(HostCmd_CMD_MC_POLICY);
1560 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_multi_chan_policy) +
1561 				S_DS_GEN);
1562 	return 0;
1563 }
1564 
1565 static int mwifiex_cmd_robust_coex(struct mwifiex_private *priv,
1566 				   struct host_cmd_ds_command *cmd,
1567 				   u16 cmd_action, bool *is_timeshare)
1568 {
1569 	struct host_cmd_ds_robust_coex *coex = &cmd->params.coex;
1570 	struct mwifiex_ie_types_robust_coex *coex_tlv;
1571 
1572 	cmd->command = cpu_to_le16(HostCmd_CMD_ROBUST_COEX);
1573 	cmd->size = cpu_to_le16(sizeof(*coex) + sizeof(*coex_tlv) + S_DS_GEN);
1574 
1575 	coex->action = cpu_to_le16(cmd_action);
1576 	coex_tlv = (struct mwifiex_ie_types_robust_coex *)
1577 				((u8 *)coex + sizeof(*coex));
1578 	coex_tlv->header.type = cpu_to_le16(TLV_TYPE_ROBUST_COEX);
1579 	coex_tlv->header.len = cpu_to_le16(sizeof(coex_tlv->mode));
1580 
1581 	if (coex->action == HostCmd_ACT_GEN_GET)
1582 		return 0;
1583 
1584 	if (*is_timeshare)
1585 		coex_tlv->mode = cpu_to_le32(MWIFIEX_COEX_MODE_TIMESHARE);
1586 	else
1587 		coex_tlv->mode = cpu_to_le32(MWIFIEX_COEX_MODE_SPATIAL);
1588 
1589 	return 0;
1590 }
1591 
1592 static int mwifiex_cmd_gtk_rekey_offload(struct mwifiex_private *priv,
1593 					 struct host_cmd_ds_command *cmd,
1594 					 u16 cmd_action,
1595 					 struct cfg80211_gtk_rekey_data *data)
1596 {
1597 	struct host_cmd_ds_gtk_rekey_params *rekey = &cmd->params.rekey;
1598 	u64 rekey_ctr;
1599 
1600 	cmd->command = cpu_to_le16(HostCmd_CMD_GTK_REKEY_OFFLOAD_CFG);
1601 	cmd->size = cpu_to_le16(sizeof(*rekey) + S_DS_GEN);
1602 
1603 	rekey->action = cpu_to_le16(cmd_action);
1604 	if (cmd_action == HostCmd_ACT_GEN_SET) {
1605 		memcpy(rekey->kek, data->kek, NL80211_KEK_LEN);
1606 		memcpy(rekey->kck, data->kck, NL80211_KCK_LEN);
1607 		rekey_ctr = be64_to_cpup((__be64 *)data->replay_ctr);
1608 		rekey->replay_ctr_low = cpu_to_le32((u32)rekey_ctr);
1609 		rekey->replay_ctr_high =
1610 			cpu_to_le32((u32)((u64)rekey_ctr >> 32));
1611 	}
1612 
1613 	return 0;
1614 }
1615 
1616 static int mwifiex_cmd_chan_region_cfg(struct mwifiex_private *priv,
1617 				       struct host_cmd_ds_command *cmd,
1618 				       u16 cmd_action)
1619 {
1620 	struct host_cmd_ds_chan_region_cfg *reg = &cmd->params.reg_cfg;
1621 
1622 	cmd->command = cpu_to_le16(HostCmd_CMD_CHAN_REGION_CFG);
1623 	cmd->size = cpu_to_le16(sizeof(*reg) + S_DS_GEN);
1624 
1625 	if (cmd_action == HostCmd_ACT_GEN_GET)
1626 		reg->action = cpu_to_le16(cmd_action);
1627 
1628 	return 0;
1629 }
1630 
1631 static int
1632 mwifiex_cmd_coalesce_cfg(struct mwifiex_private *priv,
1633 			 struct host_cmd_ds_command *cmd,
1634 			 u16 cmd_action, void *data_buf)
1635 {
1636 	struct host_cmd_ds_coalesce_cfg *coalesce_cfg =
1637 						&cmd->params.coalesce_cfg;
1638 	struct mwifiex_ds_coalesce_cfg *cfg = data_buf;
1639 	struct coalesce_filt_field_param *param;
1640 	u16 cnt, idx, length;
1641 	struct coalesce_receive_filt_rule *rule;
1642 
1643 	cmd->command = cpu_to_le16(HostCmd_CMD_COALESCE_CFG);
1644 	cmd->size = cpu_to_le16(S_DS_GEN);
1645 
1646 	coalesce_cfg->action = cpu_to_le16(cmd_action);
1647 	coalesce_cfg->num_of_rules = cpu_to_le16(cfg->num_of_rules);
1648 	rule = coalesce_cfg->rule;
1649 
1650 	for (cnt = 0; cnt < cfg->num_of_rules; cnt++) {
1651 		rule->header.type = cpu_to_le16(TLV_TYPE_COALESCE_RULE);
1652 		rule->max_coalescing_delay =
1653 			cpu_to_le16(cfg->rule[cnt].max_coalescing_delay);
1654 		rule->pkt_type = cfg->rule[cnt].pkt_type;
1655 		rule->num_of_fields = cfg->rule[cnt].num_of_fields;
1656 
1657 		length = 0;
1658 
1659 		param = rule->params;
1660 		for (idx = 0; idx < cfg->rule[cnt].num_of_fields; idx++) {
1661 			param->operation = cfg->rule[cnt].params[idx].operation;
1662 			param->operand_len =
1663 					cfg->rule[cnt].params[idx].operand_len;
1664 			param->offset =
1665 				cpu_to_le16(cfg->rule[cnt].params[idx].offset);
1666 			memcpy(param->operand_byte_stream,
1667 			       cfg->rule[cnt].params[idx].operand_byte_stream,
1668 			       param->operand_len);
1669 
1670 			length += sizeof(struct coalesce_filt_field_param);
1671 
1672 			param++;
1673 		}
1674 
1675 		/* Total rule length is sizeof max_coalescing_delay(u16),
1676 		 * num_of_fields(u8), pkt_type(u8) and total length of the all
1677 		 * params
1678 		 */
1679 		rule->header.len = cpu_to_le16(length + sizeof(u16) +
1680 					       sizeof(u8) + sizeof(u8));
1681 
1682 		/* Add the rule length to the command size*/
1683 		le16_unaligned_add_cpu(&cmd->size,
1684 				       le16_to_cpu(rule->header.len) +
1685 				       sizeof(struct mwifiex_ie_types_header));
1686 
1687 		rule = (void *)((u8 *)rule->params + length);
1688 	}
1689 
1690 	/* Add sizeof action, num_of_rules to total command length */
1691 	le16_unaligned_add_cpu(&cmd->size, sizeof(u16) + sizeof(u16));
1692 
1693 	return 0;
1694 }
1695 
1696 static int
1697 mwifiex_cmd_tdls_config(struct mwifiex_private *priv,
1698 			struct host_cmd_ds_command *cmd,
1699 			u16 cmd_action, void *data_buf)
1700 {
1701 	struct host_cmd_ds_tdls_config *tdls_config = &cmd->params.tdls_config;
1702 	struct mwifiex_tdls_init_cs_params *config;
1703 	struct mwifiex_tdls_config *init_config;
1704 	u16 len;
1705 
1706 	cmd->command = cpu_to_le16(HostCmd_CMD_TDLS_CONFIG);
1707 	cmd->size = cpu_to_le16(S_DS_GEN);
1708 	tdls_config->tdls_action = cpu_to_le16(cmd_action);
1709 	le16_unaligned_add_cpu(&cmd->size, sizeof(tdls_config->tdls_action));
1710 
1711 	switch (cmd_action) {
1712 	case ACT_TDLS_CS_ENABLE_CONFIG:
1713 		init_config = data_buf;
1714 		len = sizeof(*init_config);
1715 		memcpy(tdls_config->tdls_data, init_config, len);
1716 		break;
1717 	case ACT_TDLS_CS_INIT:
1718 		config = data_buf;
1719 		len = sizeof(*config);
1720 		memcpy(tdls_config->tdls_data, config, len);
1721 		break;
1722 	case ACT_TDLS_CS_STOP:
1723 		len = sizeof(struct mwifiex_tdls_stop_cs_params);
1724 		memcpy(tdls_config->tdls_data, data_buf, len);
1725 		break;
1726 	case ACT_TDLS_CS_PARAMS:
1727 		len = sizeof(struct mwifiex_tdls_config_cs_params);
1728 		memcpy(tdls_config->tdls_data, data_buf, len);
1729 		break;
1730 	default:
1731 		mwifiex_dbg(priv->adapter, ERROR,
1732 			    "Unknown TDLS configuration\n");
1733 		return -ENOTSUPP;
1734 	}
1735 
1736 	le16_unaligned_add_cpu(&cmd->size, len);
1737 	return 0;
1738 }
1739 
1740 static int
1741 mwifiex_cmd_tdls_oper(struct mwifiex_private *priv,
1742 		      struct host_cmd_ds_command *cmd,
1743 		      void *data_buf)
1744 {
1745 	struct host_cmd_ds_tdls_oper *tdls_oper = &cmd->params.tdls_oper;
1746 	struct mwifiex_ds_tdls_oper *oper = data_buf;
1747 	struct host_cmd_tlv_rates *tlv_rates;
1748 	struct mwifiex_ie_types_htcap *ht_capab;
1749 	struct mwifiex_ie_types_qos_info *wmm_qos_info;
1750 	struct mwifiex_ie_types_extcap *extcap;
1751 	struct mwifiex_ie_types_vhtcap *vht_capab;
1752 	struct mwifiex_ie_types_aid *aid;
1753 	struct mwifiex_ie_types_tdls_idle_timeout *timeout;
1754 	u8 *pos;
1755 	u16 config_len = 0;
1756 	struct station_parameters *params = priv->sta_params;
1757 
1758 	cmd->command = cpu_to_le16(HostCmd_CMD_TDLS_OPER);
1759 	cmd->size = cpu_to_le16(S_DS_GEN);
1760 	le16_unaligned_add_cpu(&cmd->size,
1761 			       sizeof(struct host_cmd_ds_tdls_oper));
1762 
1763 	tdls_oper->reason = 0;
1764 	memcpy(tdls_oper->peer_mac, oper->peer_mac, ETH_ALEN);
1765 
1766 	pos = (u8 *)tdls_oper + sizeof(struct host_cmd_ds_tdls_oper);
1767 
1768 	switch (oper->tdls_action) {
1769 	case MWIFIEX_TDLS_DISABLE_LINK:
1770 		tdls_oper->tdls_action = cpu_to_le16(ACT_TDLS_DELETE);
1771 		break;
1772 	case MWIFIEX_TDLS_CREATE_LINK:
1773 		tdls_oper->tdls_action = cpu_to_le16(ACT_TDLS_CREATE);
1774 		break;
1775 	case MWIFIEX_TDLS_CONFIG_LINK:
1776 		tdls_oper->tdls_action = cpu_to_le16(ACT_TDLS_CONFIG);
1777 
1778 		if (!params) {
1779 			mwifiex_dbg(priv->adapter, ERROR,
1780 				    "TDLS config params not available for %pM\n",
1781 				    oper->peer_mac);
1782 			return -ENODATA;
1783 		}
1784 
1785 		put_unaligned_le16(params->capability, pos);
1786 		config_len += sizeof(params->capability);
1787 
1788 		wmm_qos_info = (void *)(pos + config_len);
1789 		wmm_qos_info->header.type = cpu_to_le16(WLAN_EID_QOS_CAPA);
1790 		wmm_qos_info->header.len =
1791 				cpu_to_le16(sizeof(wmm_qos_info->qos_info));
1792 		wmm_qos_info->qos_info = 0;
1793 		config_len += sizeof(struct mwifiex_ie_types_qos_info);
1794 
1795 		if (params->ht_capa) {
1796 			ht_capab = (struct mwifiex_ie_types_htcap *)(pos +
1797 								    config_len);
1798 			ht_capab->header.type =
1799 					    cpu_to_le16(WLAN_EID_HT_CAPABILITY);
1800 			ht_capab->header.len =
1801 				   cpu_to_le16(sizeof(struct ieee80211_ht_cap));
1802 			memcpy(&ht_capab->ht_cap, params->ht_capa,
1803 			       sizeof(struct ieee80211_ht_cap));
1804 			config_len += sizeof(struct mwifiex_ie_types_htcap);
1805 		}
1806 
1807 		if (params->supported_rates && params->supported_rates_len) {
1808 			tlv_rates = (struct host_cmd_tlv_rates *)(pos +
1809 								  config_len);
1810 			tlv_rates->header.type =
1811 					       cpu_to_le16(WLAN_EID_SUPP_RATES);
1812 			tlv_rates->header.len =
1813 				       cpu_to_le16(params->supported_rates_len);
1814 			memcpy(tlv_rates->rates, params->supported_rates,
1815 			       params->supported_rates_len);
1816 			config_len += sizeof(struct host_cmd_tlv_rates) +
1817 				      params->supported_rates_len;
1818 		}
1819 
1820 		if (params->ext_capab && params->ext_capab_len) {
1821 			extcap = (struct mwifiex_ie_types_extcap *)(pos +
1822 								    config_len);
1823 			extcap->header.type =
1824 					   cpu_to_le16(WLAN_EID_EXT_CAPABILITY);
1825 			extcap->header.len = cpu_to_le16(params->ext_capab_len);
1826 			memcpy(extcap->ext_capab, params->ext_capab,
1827 			       params->ext_capab_len);
1828 			config_len += sizeof(struct mwifiex_ie_types_extcap) +
1829 				      params->ext_capab_len;
1830 		}
1831 		if (params->vht_capa) {
1832 			vht_capab = (struct mwifiex_ie_types_vhtcap *)(pos +
1833 								    config_len);
1834 			vht_capab->header.type =
1835 					   cpu_to_le16(WLAN_EID_VHT_CAPABILITY);
1836 			vht_capab->header.len =
1837 				  cpu_to_le16(sizeof(struct ieee80211_vht_cap));
1838 			memcpy(&vht_capab->vht_cap, params->vht_capa,
1839 			       sizeof(struct ieee80211_vht_cap));
1840 			config_len += sizeof(struct mwifiex_ie_types_vhtcap);
1841 		}
1842 		if (params->aid) {
1843 			aid = (struct mwifiex_ie_types_aid *)(pos + config_len);
1844 			aid->header.type = cpu_to_le16(WLAN_EID_AID);
1845 			aid->header.len = cpu_to_le16(sizeof(params->aid));
1846 			aid->aid = cpu_to_le16(params->aid);
1847 			config_len += sizeof(struct mwifiex_ie_types_aid);
1848 		}
1849 
1850 		timeout = (void *)(pos + config_len);
1851 		timeout->header.type = cpu_to_le16(TLV_TYPE_TDLS_IDLE_TIMEOUT);
1852 		timeout->header.len = cpu_to_le16(sizeof(timeout->value));
1853 		timeout->value = cpu_to_le16(MWIFIEX_TDLS_IDLE_TIMEOUT_IN_SEC);
1854 		config_len += sizeof(struct mwifiex_ie_types_tdls_idle_timeout);
1855 
1856 		break;
1857 	default:
1858 		mwifiex_dbg(priv->adapter, ERROR, "Unknown TDLS operation\n");
1859 		return -ENOTSUPP;
1860 	}
1861 
1862 	le16_unaligned_add_cpu(&cmd->size, config_len);
1863 
1864 	return 0;
1865 }
1866 
1867 /* This function prepares command of sdio rx aggr info. */
1868 static int mwifiex_cmd_sdio_rx_aggr_cfg(struct host_cmd_ds_command *cmd,
1869 					u16 cmd_action, void *data_buf)
1870 {
1871 	struct host_cmd_sdio_sp_rx_aggr_cfg *cfg =
1872 					&cmd->params.sdio_rx_aggr_cfg;
1873 
1874 	cmd->command = cpu_to_le16(HostCmd_CMD_SDIO_SP_RX_AGGR_CFG);
1875 	cmd->size =
1876 		cpu_to_le16(sizeof(struct host_cmd_sdio_sp_rx_aggr_cfg) +
1877 			    S_DS_GEN);
1878 	cfg->action = cmd_action;
1879 	if (cmd_action == HostCmd_ACT_GEN_SET)
1880 		cfg->enable = *(u8 *)data_buf;
1881 
1882 	return 0;
1883 }
1884 
1885 /* This function prepares command to get HS wakeup reason.
1886  *
1887  * Preparation includes -
1888  *      - Setting command ID, action and proper size
1889  *      - Ensuring correct endian-ness
1890  */
1891 static int mwifiex_cmd_get_wakeup_reason(struct mwifiex_private *priv,
1892 					 struct host_cmd_ds_command *cmd)
1893 {
1894 	cmd->command = cpu_to_le16(HostCmd_CMD_HS_WAKEUP_REASON);
1895 	cmd->size = cpu_to_le16(sizeof(struct host_cmd_ds_wakeup_reason) +
1896 				S_DS_GEN);
1897 
1898 	return 0;
1899 }
1900 
1901 static int mwifiex_cmd_get_chan_info(struct host_cmd_ds_command *cmd,
1902 				     u16 cmd_action)
1903 {
1904 	struct host_cmd_ds_sta_configure *sta_cfg_cmd = &cmd->params.sta_cfg;
1905 	struct host_cmd_tlv_channel_band *tlv_band_channel =
1906 	(struct host_cmd_tlv_channel_band *)sta_cfg_cmd->tlv_buffer;
1907 
1908 	cmd->command = cpu_to_le16(HostCmd_CMD_STA_CONFIGURE);
1909 	cmd->size = cpu_to_le16(sizeof(*sta_cfg_cmd) +
1910 				sizeof(*tlv_band_channel) + S_DS_GEN);
1911 	sta_cfg_cmd->action = cpu_to_le16(cmd_action);
1912 	memset(tlv_band_channel, 0, sizeof(*tlv_band_channel));
1913 	tlv_band_channel->header.type = cpu_to_le16(TLV_TYPE_CHANNELBANDLIST);
1914 	tlv_band_channel->header.len  = cpu_to_le16(sizeof(*tlv_band_channel) -
1915 					sizeof(struct mwifiex_ie_types_header));
1916 
1917 	return 0;
1918 }
1919 
1920 /* This function check if the command is supported by firmware */
1921 static int mwifiex_is_cmd_supported(struct mwifiex_private *priv, u16 cmd_no)
1922 {
1923 	if (!ISSUPP_ADHOC_ENABLED(priv->adapter->fw_cap_info)) {
1924 		switch (cmd_no) {
1925 		case HostCmd_CMD_802_11_IBSS_COALESCING_STATUS:
1926 		case HostCmd_CMD_802_11_AD_HOC_START:
1927 		case HostCmd_CMD_802_11_AD_HOC_JOIN:
1928 		case HostCmd_CMD_802_11_AD_HOC_STOP:
1929 			return -EOPNOTSUPP;
1930 		default:
1931 			break;
1932 		}
1933 	}
1934 
1935 	return 0;
1936 }
1937 
1938 /*
1939  * This function prepares the commands before sending them to the firmware.
1940  *
1941  * This is a generic function which calls specific command preparation
1942  * routines based upon the command number.
1943  */
1944 int mwifiex_sta_prepare_cmd(struct mwifiex_private *priv, uint16_t cmd_no,
1945 			    u16 cmd_action, u32 cmd_oid,
1946 			    void *data_buf, void *cmd_buf)
1947 {
1948 	struct host_cmd_ds_command *cmd_ptr = cmd_buf;
1949 	int ret = 0;
1950 
1951 	if (mwifiex_is_cmd_supported(priv, cmd_no)) {
1952 		mwifiex_dbg(priv->adapter, ERROR,
1953 			    "0x%x command not supported by firmware\n",
1954 			    cmd_no);
1955 		return -EOPNOTSUPP;
1956 	}
1957 
1958 	/* Prepare command */
1959 	switch (cmd_no) {
1960 	case HostCmd_CMD_GET_HW_SPEC:
1961 		ret = mwifiex_cmd_get_hw_spec(priv, cmd_ptr);
1962 		break;
1963 	case HostCmd_CMD_CFG_DATA:
1964 		ret = mwifiex_cmd_cfg_data(priv, cmd_ptr, data_buf);
1965 		break;
1966 	case HostCmd_CMD_MAC_CONTROL:
1967 		ret = mwifiex_cmd_mac_control(priv, cmd_ptr, cmd_action,
1968 					      data_buf);
1969 		break;
1970 	case HostCmd_CMD_802_11_MAC_ADDRESS:
1971 		ret = mwifiex_cmd_802_11_mac_address(priv, cmd_ptr,
1972 						     cmd_action);
1973 		break;
1974 	case HostCmd_CMD_MAC_MULTICAST_ADR:
1975 		ret = mwifiex_cmd_mac_multicast_adr(cmd_ptr, cmd_action,
1976 						    data_buf);
1977 		break;
1978 	case HostCmd_CMD_TX_RATE_CFG:
1979 		ret = mwifiex_cmd_tx_rate_cfg(priv, cmd_ptr, cmd_action,
1980 					      data_buf);
1981 		break;
1982 	case HostCmd_CMD_TXPWR_CFG:
1983 		ret = mwifiex_cmd_tx_power_cfg(cmd_ptr, cmd_action,
1984 					       data_buf);
1985 		break;
1986 	case HostCmd_CMD_RF_TX_PWR:
1987 		ret = mwifiex_cmd_rf_tx_power(priv, cmd_ptr, cmd_action,
1988 					      data_buf);
1989 		break;
1990 	case HostCmd_CMD_RF_ANTENNA:
1991 		ret = mwifiex_cmd_rf_antenna(priv, cmd_ptr, cmd_action,
1992 					     data_buf);
1993 		break;
1994 	case HostCmd_CMD_802_11_PS_MODE_ENH:
1995 		ret = mwifiex_cmd_enh_power_mode(priv, cmd_ptr, cmd_action,
1996 						 (uint16_t)cmd_oid, data_buf);
1997 		break;
1998 	case HostCmd_CMD_802_11_HS_CFG_ENH:
1999 		ret = mwifiex_cmd_802_11_hs_cfg(priv, cmd_ptr, cmd_action,
2000 				(struct mwifiex_hs_config_param *) data_buf);
2001 		break;
2002 	case HostCmd_CMD_802_11_SCAN:
2003 		ret = mwifiex_cmd_802_11_scan(cmd_ptr, data_buf);
2004 		break;
2005 	case HostCmd_CMD_802_11_BG_SCAN_CONFIG:
2006 		ret = mwifiex_cmd_802_11_bg_scan_config(priv, cmd_ptr,
2007 							data_buf);
2008 		break;
2009 	case HostCmd_CMD_802_11_BG_SCAN_QUERY:
2010 		ret = mwifiex_cmd_802_11_bg_scan_query(cmd_ptr);
2011 		break;
2012 	case HostCmd_CMD_802_11_ASSOCIATE:
2013 		ret = mwifiex_cmd_802_11_associate(priv, cmd_ptr, data_buf);
2014 		break;
2015 	case HostCmd_CMD_802_11_DEAUTHENTICATE:
2016 		ret = mwifiex_cmd_802_11_deauthenticate(priv, cmd_ptr,
2017 							data_buf);
2018 		break;
2019 	case HostCmd_CMD_802_11_AD_HOC_START:
2020 		ret = mwifiex_cmd_802_11_ad_hoc_start(priv, cmd_ptr,
2021 						      data_buf);
2022 		break;
2023 	case HostCmd_CMD_802_11_GET_LOG:
2024 		ret = mwifiex_cmd_802_11_get_log(cmd_ptr);
2025 		break;
2026 	case HostCmd_CMD_802_11_AD_HOC_JOIN:
2027 		ret = mwifiex_cmd_802_11_ad_hoc_join(priv, cmd_ptr,
2028 						     data_buf);
2029 		break;
2030 	case HostCmd_CMD_802_11_AD_HOC_STOP:
2031 		ret = mwifiex_cmd_802_11_ad_hoc_stop(cmd_ptr);
2032 		break;
2033 	case HostCmd_CMD_RSSI_INFO:
2034 		ret = mwifiex_cmd_802_11_rssi_info(priv, cmd_ptr, cmd_action);
2035 		break;
2036 	case HostCmd_CMD_802_11_SNMP_MIB:
2037 		ret = mwifiex_cmd_802_11_snmp_mib(priv, cmd_ptr, cmd_action,
2038 						  cmd_oid, data_buf);
2039 		break;
2040 	case HostCmd_CMD_802_11_TX_RATE_QUERY:
2041 		cmd_ptr->command =
2042 			cpu_to_le16(HostCmd_CMD_802_11_TX_RATE_QUERY);
2043 		cmd_ptr->size =
2044 			cpu_to_le16(sizeof(struct host_cmd_ds_tx_rate_query) +
2045 				    S_DS_GEN);
2046 		priv->tx_rate = 0;
2047 		ret = 0;
2048 		break;
2049 	case HostCmd_CMD_VERSION_EXT:
2050 		cmd_ptr->command = cpu_to_le16(cmd_no);
2051 		cmd_ptr->params.verext.version_str_sel =
2052 			(u8)(get_unaligned((u32 *)data_buf));
2053 		memcpy(&cmd_ptr->params, data_buf,
2054 		       sizeof(struct host_cmd_ds_version_ext));
2055 		cmd_ptr->size =
2056 			cpu_to_le16(sizeof(struct host_cmd_ds_version_ext) +
2057 				    S_DS_GEN);
2058 		ret = 0;
2059 		break;
2060 	case HostCmd_CMD_MGMT_FRAME_REG:
2061 		cmd_ptr->command = cpu_to_le16(cmd_no);
2062 		cmd_ptr->params.reg_mask.action = cpu_to_le16(cmd_action);
2063 		cmd_ptr->params.reg_mask.mask = cpu_to_le32(
2064 						get_unaligned((u32 *)data_buf));
2065 		cmd_ptr->size =
2066 			cpu_to_le16(sizeof(struct host_cmd_ds_mgmt_frame_reg) +
2067 				    S_DS_GEN);
2068 		ret = 0;
2069 		break;
2070 	case HostCmd_CMD_REMAIN_ON_CHAN:
2071 		cmd_ptr->command = cpu_to_le16(cmd_no);
2072 		memcpy(&cmd_ptr->params, data_buf,
2073 		       sizeof(struct host_cmd_ds_remain_on_chan));
2074 		cmd_ptr->size =
2075 		      cpu_to_le16(sizeof(struct host_cmd_ds_remain_on_chan) +
2076 				  S_DS_GEN);
2077 		break;
2078 	case HostCmd_CMD_11AC_CFG:
2079 		ret = mwifiex_cmd_11ac_cfg(priv, cmd_ptr, cmd_action, data_buf);
2080 		break;
2081 	case HostCmd_CMD_PACKET_AGGR_CTRL:
2082 		cmd_ptr->command = cpu_to_le16(cmd_no);
2083 		cmd_ptr->params.pkt_aggr_ctrl.action = cpu_to_le16(cmd_action);
2084 		cmd_ptr->params.pkt_aggr_ctrl.enable =
2085 						cpu_to_le16(*(u16 *)data_buf);
2086 		cmd_ptr->size =
2087 			cpu_to_le16(sizeof(struct host_cmd_ds_pkt_aggr_ctrl) +
2088 				    S_DS_GEN);
2089 		break;
2090 	case HostCmd_CMD_P2P_MODE_CFG:
2091 		cmd_ptr->command = cpu_to_le16(cmd_no);
2092 		cmd_ptr->params.mode_cfg.action = cpu_to_le16(cmd_action);
2093 		cmd_ptr->params.mode_cfg.mode = cpu_to_le16(
2094 						get_unaligned((u16 *)data_buf));
2095 		cmd_ptr->size =
2096 			cpu_to_le16(sizeof(struct host_cmd_ds_p2p_mode_cfg) +
2097 				    S_DS_GEN);
2098 		break;
2099 	case HostCmd_CMD_FUNC_INIT:
2100 		if (priv->adapter->hw_status == MWIFIEX_HW_STATUS_RESET)
2101 			priv->adapter->hw_status = MWIFIEX_HW_STATUS_READY;
2102 		cmd_ptr->command = cpu_to_le16(cmd_no);
2103 		cmd_ptr->size = cpu_to_le16(S_DS_GEN);
2104 		break;
2105 	case HostCmd_CMD_FUNC_SHUTDOWN:
2106 		priv->adapter->hw_status = MWIFIEX_HW_STATUS_RESET;
2107 		cmd_ptr->command = cpu_to_le16(cmd_no);
2108 		cmd_ptr->size = cpu_to_le16(S_DS_GEN);
2109 		break;
2110 	case HostCmd_CMD_11N_ADDBA_REQ:
2111 		ret = mwifiex_cmd_11n_addba_req(cmd_ptr, data_buf);
2112 		break;
2113 	case HostCmd_CMD_11N_DELBA:
2114 		ret = mwifiex_cmd_11n_delba(cmd_ptr, data_buf);
2115 		break;
2116 	case HostCmd_CMD_11N_ADDBA_RSP:
2117 		ret = mwifiex_cmd_11n_addba_rsp_gen(priv, cmd_ptr, data_buf);
2118 		break;
2119 	case HostCmd_CMD_802_11_KEY_MATERIAL:
2120 		ret = mwifiex_cmd_802_11_key_material(priv, cmd_ptr,
2121 						      cmd_action, cmd_oid,
2122 						      data_buf);
2123 		break;
2124 	case HostCmd_CMD_802_11D_DOMAIN_INFO:
2125 		ret = mwifiex_cmd_802_11d_domain_info(priv, cmd_ptr,
2126 						      cmd_action);
2127 		break;
2128 	case HostCmd_CMD_RECONFIGURE_TX_BUFF:
2129 		ret = mwifiex_cmd_recfg_tx_buf(priv, cmd_ptr, cmd_action,
2130 					       data_buf);
2131 		break;
2132 	case HostCmd_CMD_AMSDU_AGGR_CTRL:
2133 		ret = mwifiex_cmd_amsdu_aggr_ctrl(cmd_ptr, cmd_action,
2134 						  data_buf);
2135 		break;
2136 	case HostCmd_CMD_11N_CFG:
2137 		ret = mwifiex_cmd_11n_cfg(priv, cmd_ptr, cmd_action, data_buf);
2138 		break;
2139 	case HostCmd_CMD_WMM_GET_STATUS:
2140 		mwifiex_dbg(priv->adapter, CMD,
2141 			    "cmd: WMM: WMM_GET_STATUS cmd sent\n");
2142 		cmd_ptr->command = cpu_to_le16(HostCmd_CMD_WMM_GET_STATUS);
2143 		cmd_ptr->size =
2144 			cpu_to_le16(sizeof(struct host_cmd_ds_wmm_get_status) +
2145 				    S_DS_GEN);
2146 		ret = 0;
2147 		break;
2148 	case HostCmd_CMD_802_11_IBSS_COALESCING_STATUS:
2149 		ret = mwifiex_cmd_ibss_coalescing_status(cmd_ptr, cmd_action,
2150 							 data_buf);
2151 		break;
2152 	case HostCmd_CMD_802_11_SCAN_EXT:
2153 		ret = mwifiex_cmd_802_11_scan_ext(priv, cmd_ptr, data_buf);
2154 		break;
2155 	case HostCmd_CMD_MEM_ACCESS:
2156 		ret = mwifiex_cmd_mem_access(cmd_ptr, cmd_action, data_buf);
2157 		break;
2158 	case HostCmd_CMD_MAC_REG_ACCESS:
2159 	case HostCmd_CMD_BBP_REG_ACCESS:
2160 	case HostCmd_CMD_RF_REG_ACCESS:
2161 	case HostCmd_CMD_PMIC_REG_ACCESS:
2162 	case HostCmd_CMD_CAU_REG_ACCESS:
2163 	case HostCmd_CMD_802_11_EEPROM_ACCESS:
2164 		ret = mwifiex_cmd_reg_access(cmd_ptr, cmd_action, data_buf);
2165 		break;
2166 	case HostCmd_CMD_SET_BSS_MODE:
2167 		cmd_ptr->command = cpu_to_le16(cmd_no);
2168 		if (priv->bss_mode == NL80211_IFTYPE_ADHOC)
2169 			cmd_ptr->params.bss_mode.con_type =
2170 				CONNECTION_TYPE_ADHOC;
2171 		else if (priv->bss_mode == NL80211_IFTYPE_STATION ||
2172 			 priv->bss_mode == NL80211_IFTYPE_P2P_CLIENT)
2173 			cmd_ptr->params.bss_mode.con_type =
2174 				CONNECTION_TYPE_INFRA;
2175 		else if (priv->bss_mode == NL80211_IFTYPE_AP ||
2176 			 priv->bss_mode == NL80211_IFTYPE_P2P_GO)
2177 			cmd_ptr->params.bss_mode.con_type = CONNECTION_TYPE_AP;
2178 		cmd_ptr->size = cpu_to_le16(sizeof(struct
2179 				host_cmd_ds_set_bss_mode) + S_DS_GEN);
2180 		ret = 0;
2181 		break;
2182 	case HostCmd_CMD_PCIE_DESC_DETAILS:
2183 		ret = mwifiex_cmd_pcie_host_spec(priv, cmd_ptr, cmd_action);
2184 		break;
2185 	case HostCmd_CMD_802_11_SUBSCRIBE_EVENT:
2186 		ret = mwifiex_cmd_802_11_subsc_evt(priv, cmd_ptr, data_buf);
2187 		break;
2188 	case HostCmd_CMD_MEF_CFG:
2189 		ret = mwifiex_cmd_mef_cfg(priv, cmd_ptr, data_buf);
2190 		break;
2191 	case HostCmd_CMD_COALESCE_CFG:
2192 		ret = mwifiex_cmd_coalesce_cfg(priv, cmd_ptr, cmd_action,
2193 					       data_buf);
2194 		break;
2195 	case HostCmd_CMD_TDLS_OPER:
2196 		ret = mwifiex_cmd_tdls_oper(priv, cmd_ptr, data_buf);
2197 		break;
2198 	case HostCmd_CMD_TDLS_CONFIG:
2199 		ret = mwifiex_cmd_tdls_config(priv, cmd_ptr, cmd_action,
2200 					      data_buf);
2201 		break;
2202 	case HostCmd_CMD_CHAN_REPORT_REQUEST:
2203 		ret = mwifiex_cmd_issue_chan_report_request(priv, cmd_ptr,
2204 							    data_buf);
2205 		break;
2206 	case HostCmd_CMD_SDIO_SP_RX_AGGR_CFG:
2207 		ret = mwifiex_cmd_sdio_rx_aggr_cfg(cmd_ptr, cmd_action,
2208 						   data_buf);
2209 		break;
2210 	case HostCmd_CMD_HS_WAKEUP_REASON:
2211 		ret = mwifiex_cmd_get_wakeup_reason(priv, cmd_ptr);
2212 		break;
2213 	case HostCmd_CMD_MC_POLICY:
2214 		ret = mwifiex_cmd_set_mc_policy(priv, cmd_ptr, cmd_action,
2215 						data_buf);
2216 		break;
2217 	case HostCmd_CMD_ROBUST_COEX:
2218 		ret = mwifiex_cmd_robust_coex(priv, cmd_ptr, cmd_action,
2219 					      data_buf);
2220 		break;
2221 	case HostCmd_CMD_GTK_REKEY_OFFLOAD_CFG:
2222 		ret = mwifiex_cmd_gtk_rekey_offload(priv, cmd_ptr, cmd_action,
2223 						    data_buf);
2224 		break;
2225 	case HostCmd_CMD_CHAN_REGION_CFG:
2226 		ret = mwifiex_cmd_chan_region_cfg(priv, cmd_ptr, cmd_action);
2227 		break;
2228 	case HostCmd_CMD_FW_DUMP_EVENT:
2229 		cmd_ptr->command = cpu_to_le16(cmd_no);
2230 		cmd_ptr->size = cpu_to_le16(S_DS_GEN);
2231 		break;
2232 	case HostCmd_CMD_STA_CONFIGURE:
2233 		ret = mwifiex_cmd_get_chan_info(cmd_ptr, cmd_action);
2234 		break;
2235 	default:
2236 		mwifiex_dbg(priv->adapter, ERROR,
2237 			    "PREP_CMD: unknown cmd- %#x\n", cmd_no);
2238 		ret = -1;
2239 		break;
2240 	}
2241 	return ret;
2242 }
2243 
2244 /*
2245  * This function issues commands to initialize firmware.
2246  *
2247  * This is called after firmware download to bring the card to
2248  * working state.
2249  * Function is also called during reinitialization of virtual
2250  * interfaces.
2251  *
2252  * The following commands are issued sequentially -
2253  *      - Set PCI-Express host buffer configuration (PCIE only)
2254  *      - Function init (for first interface only)
2255  *      - Read MAC address (for first interface only)
2256  *      - Reconfigure Tx buffer size (for first interface only)
2257  *      - Enable auto deep sleep (for first interface only)
2258  *      - Get Tx rate
2259  *      - Get Tx power
2260  *      - Set IBSS coalescing status
2261  *      - Set AMSDU aggregation control
2262  *      - Set 11d control
2263  *      - Set MAC control (this must be the last command to initialize firmware)
2264  */
2265 int mwifiex_sta_init_cmd(struct mwifiex_private *priv, u8 first_sta, bool init)
2266 {
2267 	struct mwifiex_adapter *adapter = priv->adapter;
2268 	int ret;
2269 	struct mwifiex_ds_11n_amsdu_aggr_ctrl amsdu_aggr_ctrl;
2270 	struct mwifiex_ds_auto_ds auto_ds;
2271 	enum state_11d_t state_11d;
2272 	struct mwifiex_ds_11n_tx_cfg tx_cfg;
2273 	u8 sdio_sp_rx_aggr_enable;
2274 	u16 packet_aggr_enable;
2275 	int data;
2276 
2277 	if (first_sta) {
2278 		if (priv->adapter->iface_type == MWIFIEX_PCIE) {
2279 			ret = mwifiex_send_cmd(priv,
2280 					       HostCmd_CMD_PCIE_DESC_DETAILS,
2281 					       HostCmd_ACT_GEN_SET, 0, NULL,
2282 					       true);
2283 			if (ret)
2284 				return -1;
2285 		}
2286 
2287 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_FUNC_INIT,
2288 				       HostCmd_ACT_GEN_SET, 0, NULL, true);
2289 		if (ret)
2290 			return -1;
2291 
2292 		/* Download calibration data to firmware.
2293 		 * The cal-data can be read from device tree and/or
2294 		 * a configuration file and downloaded to firmware.
2295 		 */
2296 		if (adapter->dt_node) {
2297 			if (of_property_read_u32(adapter->dt_node,
2298 						 "marvell,wakeup-pin",
2299 						 &data) == 0) {
2300 				pr_debug("Wakeup pin = 0x%x\n", data);
2301 				adapter->hs_cfg.gpio = data;
2302 			}
2303 
2304 			mwifiex_dnld_dt_cfgdata(priv, adapter->dt_node,
2305 						"marvell,caldata");
2306 		}
2307 
2308 		if (adapter->cal_data)
2309 			mwifiex_send_cmd(priv, HostCmd_CMD_CFG_DATA,
2310 					 HostCmd_ACT_GEN_SET, 0, NULL, true);
2311 
2312 		/* Read MAC address from HW */
2313 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_GET_HW_SPEC,
2314 				       HostCmd_ACT_GEN_GET, 0, NULL, true);
2315 		if (ret)
2316 			return -1;
2317 
2318 		/** Set SDIO Single Port RX Aggr Info */
2319 		if (priv->adapter->iface_type == MWIFIEX_SDIO &&
2320 		    ISSUPP_SDIO_SPA_ENABLED(priv->adapter->fw_cap_info) &&
2321 		    !priv->adapter->host_disable_sdio_rx_aggr) {
2322 			sdio_sp_rx_aggr_enable = true;
2323 			ret = mwifiex_send_cmd(priv,
2324 					       HostCmd_CMD_SDIO_SP_RX_AGGR_CFG,
2325 					       HostCmd_ACT_GEN_SET, 0,
2326 					       &sdio_sp_rx_aggr_enable,
2327 					       true);
2328 			if (ret) {
2329 				mwifiex_dbg(priv->adapter, ERROR,
2330 					    "error while enabling SP aggregation..disable it");
2331 				adapter->sdio_rx_aggr_enable = false;
2332 			}
2333 		}
2334 
2335 		/* Reconfigure tx buf size */
2336 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_RECONFIGURE_TX_BUFF,
2337 				       HostCmd_ACT_GEN_SET, 0,
2338 				       &priv->adapter->tx_buf_size, true);
2339 		if (ret)
2340 			return -1;
2341 
2342 		if (priv->bss_type != MWIFIEX_BSS_TYPE_UAP) {
2343 			/* Enable IEEE PS by default */
2344 			priv->adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP;
2345 			ret = mwifiex_send_cmd(priv,
2346 					       HostCmd_CMD_802_11_PS_MODE_ENH,
2347 					       EN_AUTO_PS, BITMAP_STA_PS, NULL,
2348 					       true);
2349 			if (ret)
2350 				return -1;
2351 		}
2352 
2353 		if (drcs) {
2354 			adapter->drcs_enabled = true;
2355 			if (ISSUPP_DRCS_ENABLED(adapter->fw_cap_info))
2356 				ret = mwifiex_send_cmd(priv,
2357 						       HostCmd_CMD_MC_POLICY,
2358 						       HostCmd_ACT_GEN_SET, 0,
2359 						       &adapter->drcs_enabled,
2360 						       true);
2361 			if (ret)
2362 				return -1;
2363 		}
2364 
2365 		mwifiex_send_cmd(priv, HostCmd_CMD_CHAN_REGION_CFG,
2366 				 HostCmd_ACT_GEN_GET, 0, NULL, true);
2367 	}
2368 
2369 	/* get tx rate */
2370 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_TX_RATE_CFG,
2371 			       HostCmd_ACT_GEN_GET, 0, NULL, true);
2372 	if (ret)
2373 		return -1;
2374 	priv->data_rate = 0;
2375 
2376 	/* get tx power */
2377 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_RF_TX_PWR,
2378 			       HostCmd_ACT_GEN_GET, 0, NULL, true);
2379 	if (ret)
2380 		return -1;
2381 
2382 	memset(&amsdu_aggr_ctrl, 0, sizeof(amsdu_aggr_ctrl));
2383 	amsdu_aggr_ctrl.enable = true;
2384 	/* Send request to firmware */
2385 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_AMSDU_AGGR_CTRL,
2386 			       HostCmd_ACT_GEN_SET, 0,
2387 			       &amsdu_aggr_ctrl, true);
2388 	if (ret)
2389 		return -1;
2390 	/* MAC Control must be the last command in init_fw */
2391 	/* set MAC Control */
2392 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_MAC_CONTROL,
2393 			       HostCmd_ACT_GEN_SET, 0,
2394 			       &priv->curr_pkt_filter, true);
2395 	if (ret)
2396 		return -1;
2397 
2398 	if (!disable_auto_ds && first_sta &&
2399 	    priv->bss_type != MWIFIEX_BSS_TYPE_UAP) {
2400 		/* Enable auto deep sleep */
2401 		auto_ds.auto_ds = DEEP_SLEEP_ON;
2402 		auto_ds.idle_time = DEEP_SLEEP_IDLE_TIME;
2403 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_PS_MODE_ENH,
2404 				       EN_AUTO_PS, BITMAP_AUTO_DS,
2405 				       &auto_ds, true);
2406 		if (ret)
2407 			return -1;
2408 	}
2409 
2410 	if (priv->bss_type != MWIFIEX_BSS_TYPE_UAP) {
2411 		/* Send cmd to FW to enable/disable 11D function */
2412 		state_11d = ENABLE_11D;
2413 		ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_SNMP_MIB,
2414 				       HostCmd_ACT_GEN_SET, DOT11D_I,
2415 				       &state_11d, true);
2416 		if (ret)
2417 			mwifiex_dbg(priv->adapter, ERROR,
2418 				    "11D: failed to enable 11D\n");
2419 	}
2420 
2421 	/* Pacekt aggregation handshake with firmware */
2422 	if (aggr_ctrl) {
2423 		packet_aggr_enable = true;
2424 		mwifiex_send_cmd(priv, HostCmd_CMD_PACKET_AGGR_CTRL,
2425 				 HostCmd_ACT_GEN_SET, 0,
2426 				 &packet_aggr_enable, true);
2427 	}
2428 
2429 	/* Send cmd to FW to configure 11n specific configuration
2430 	 * (Short GI, Channel BW, Green field support etc.) for transmit
2431 	 */
2432 	tx_cfg.tx_htcap = MWIFIEX_FW_DEF_HTTXCFG;
2433 	ret = mwifiex_send_cmd(priv, HostCmd_CMD_11N_CFG,
2434 			       HostCmd_ACT_GEN_SET, 0, &tx_cfg, true);
2435 
2436 	if (init) {
2437 		/* set last_init_cmd before sending the command */
2438 		priv->adapter->last_init_cmd = HostCmd_CMD_11N_CFG;
2439 		ret = -EINPROGRESS;
2440 	}
2441 
2442 	return ret;
2443 }
2444