1 /* 2 * Marvell Wireless LAN device driver: functions for station ioctl 3 * 4 * Copyright (C) 2011-2014, Marvell International Ltd. 5 * 6 * This software file (the "File") is distributed by Marvell International 7 * Ltd. under the terms of the GNU General Public License Version 2, June 1991 8 * (the "License"). You may use, redistribute and/or modify this File in 9 * accordance with the terms and conditions of the License, a copy of which 10 * is available by writing to the Free Software Foundation, Inc., 11 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA or on the 12 * worldwide web at http://www.gnu.org/licenses/old-licenses/gpl-2.0.txt. 13 * 14 * THE FILE IS DISTRIBUTED AS-IS, WITHOUT WARRANTY OF ANY KIND, AND THE 15 * IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE 16 * ARE EXPRESSLY DISCLAIMED. The License provides additional details about 17 * this warranty disclaimer. 18 */ 19 20 #include "decl.h" 21 #include "ioctl.h" 22 #include "util.h" 23 #include "fw.h" 24 #include "main.h" 25 #include "wmm.h" 26 #include "11n.h" 27 #include "cfg80211.h" 28 29 static int disconnect_on_suspend; 30 module_param(disconnect_on_suspend, int, 0644); 31 32 /* 33 * Copies the multicast address list from device to driver. 34 * 35 * This function does not validate the destination memory for 36 * size, and the calling function must ensure enough memory is 37 * available. 38 */ 39 int mwifiex_copy_mcast_addr(struct mwifiex_multicast_list *mlist, 40 struct net_device *dev) 41 { 42 int i = 0; 43 struct netdev_hw_addr *ha; 44 45 netdev_for_each_mc_addr(ha, dev) 46 memcpy(&mlist->mac_list[i++], ha->addr, ETH_ALEN); 47 48 return i; 49 } 50 51 /* 52 * Wait queue completion handler. 53 * 54 * This function waits on a cmd wait queue. It also cancels the pending 55 * request after waking up, in case of errors. 56 */ 57 int mwifiex_wait_queue_complete(struct mwifiex_adapter *adapter, 58 struct cmd_ctrl_node *cmd_queued) 59 { 60 int status; 61 62 /* Wait for completion */ 63 status = wait_event_interruptible_timeout(adapter->cmd_wait_q.wait, 64 *(cmd_queued->condition), 65 (12 * HZ)); 66 if (status <= 0) { 67 if (status == 0) 68 status = -ETIMEDOUT; 69 mwifiex_dbg(adapter, ERROR, "cmd_wait_q terminated: %d\n", 70 status); 71 mwifiex_cancel_all_pending_cmd(adapter); 72 return status; 73 } 74 75 status = adapter->cmd_wait_q.status; 76 adapter->cmd_wait_q.status = 0; 77 78 return status; 79 } 80 81 /* 82 * This function prepares the correct firmware command and 83 * issues it to set the multicast list. 84 * 85 * This function can be used to enable promiscuous mode, or enable all 86 * multicast packets, or to enable selective multicast. 87 */ 88 int mwifiex_request_set_multicast_list(struct mwifiex_private *priv, 89 struct mwifiex_multicast_list *mcast_list) 90 { 91 int ret = 0; 92 u16 old_pkt_filter; 93 94 old_pkt_filter = priv->curr_pkt_filter; 95 96 if (mcast_list->mode == MWIFIEX_PROMISC_MODE) { 97 mwifiex_dbg(priv->adapter, INFO, 98 "info: Enable Promiscuous mode\n"); 99 priv->curr_pkt_filter |= HostCmd_ACT_MAC_PROMISCUOUS_ENABLE; 100 priv->curr_pkt_filter &= 101 ~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE; 102 } else { 103 /* Multicast */ 104 priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_PROMISCUOUS_ENABLE; 105 if (mcast_list->mode == MWIFIEX_ALL_MULTI_MODE) { 106 mwifiex_dbg(priv->adapter, INFO, 107 "info: Enabling All Multicast!\n"); 108 priv->curr_pkt_filter |= 109 HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE; 110 } else { 111 priv->curr_pkt_filter &= 112 ~HostCmd_ACT_MAC_ALL_MULTICAST_ENABLE; 113 mwifiex_dbg(priv->adapter, INFO, 114 "info: Set multicast list=%d\n", 115 mcast_list->num_multicast_addr); 116 /* Send multicast addresses to firmware */ 117 ret = mwifiex_send_cmd(priv, 118 HostCmd_CMD_MAC_MULTICAST_ADR, 119 HostCmd_ACT_GEN_SET, 0, 120 mcast_list, false); 121 } 122 } 123 mwifiex_dbg(priv->adapter, INFO, 124 "info: old_pkt_filter=%#x, curr_pkt_filter=%#x\n", 125 old_pkt_filter, priv->curr_pkt_filter); 126 if (old_pkt_filter != priv->curr_pkt_filter) { 127 ret = mwifiex_send_cmd(priv, HostCmd_CMD_MAC_CONTROL, 128 HostCmd_ACT_GEN_SET, 129 0, &priv->curr_pkt_filter, false); 130 } 131 132 return ret; 133 } 134 135 /* 136 * This function fills bss descriptor structure using provided 137 * information. 138 * beacon_ie buffer is allocated in this function. It is caller's 139 * responsibility to free the memory. 140 */ 141 int mwifiex_fill_new_bss_desc(struct mwifiex_private *priv, 142 struct cfg80211_bss *bss, 143 struct mwifiex_bssdescriptor *bss_desc) 144 { 145 u8 *beacon_ie; 146 size_t beacon_ie_len; 147 struct mwifiex_bss_priv *bss_priv = (void *)bss->priv; 148 const struct cfg80211_bss_ies *ies; 149 150 rcu_read_lock(); 151 ies = rcu_dereference(bss->ies); 152 beacon_ie = kmemdup(ies->data, ies->len, GFP_ATOMIC); 153 beacon_ie_len = ies->len; 154 bss_desc->timestamp = ies->tsf; 155 rcu_read_unlock(); 156 157 if (!beacon_ie) { 158 mwifiex_dbg(priv->adapter, ERROR, 159 " failed to alloc beacon_ie\n"); 160 return -ENOMEM; 161 } 162 163 memcpy(bss_desc->mac_address, bss->bssid, ETH_ALEN); 164 bss_desc->rssi = bss->signal; 165 /* The caller of this function will free beacon_ie */ 166 bss_desc->beacon_buf = beacon_ie; 167 bss_desc->beacon_buf_size = beacon_ie_len; 168 bss_desc->beacon_period = bss->beacon_interval; 169 bss_desc->cap_info_bitmap = bss->capability; 170 bss_desc->bss_band = bss_priv->band; 171 bss_desc->fw_tsf = bss_priv->fw_tsf; 172 if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_PRIVACY) { 173 mwifiex_dbg(priv->adapter, INFO, 174 "info: InterpretIE: AP WEP enabled\n"); 175 bss_desc->privacy = MWIFIEX_802_11_PRIV_FILTER_8021X_WEP; 176 } else { 177 bss_desc->privacy = MWIFIEX_802_11_PRIV_FILTER_ACCEPT_ALL; 178 } 179 if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_IBSS) 180 bss_desc->bss_mode = NL80211_IFTYPE_ADHOC; 181 else 182 bss_desc->bss_mode = NL80211_IFTYPE_STATION; 183 184 /* Disable 11ac by default. Enable it only where there 185 * exist VHT_CAP IE in AP beacon 186 */ 187 bss_desc->disable_11ac = true; 188 189 if (bss_desc->cap_info_bitmap & WLAN_CAPABILITY_SPECTRUM_MGMT) 190 bss_desc->sensed_11h = true; 191 192 return mwifiex_update_bss_desc_with_ie(priv->adapter, bss_desc); 193 } 194 195 void mwifiex_dnld_txpwr_table(struct mwifiex_private *priv) 196 { 197 if (priv->adapter->dt_node) { 198 char txpwr[] = {"marvell,00_txpwrlimit"}; 199 200 memcpy(&txpwr[8], priv->adapter->country_code, 2); 201 mwifiex_dnld_dt_cfgdata(priv, priv->adapter->dt_node, txpwr); 202 } 203 } 204 205 static int mwifiex_process_country_ie(struct mwifiex_private *priv, 206 struct cfg80211_bss *bss) 207 { 208 const u8 *country_ie; 209 u8 country_ie_len; 210 struct mwifiex_802_11d_domain_reg *domain_info = 211 &priv->adapter->domain_reg; 212 213 rcu_read_lock(); 214 country_ie = ieee80211_bss_get_ie(bss, WLAN_EID_COUNTRY); 215 if (!country_ie) { 216 rcu_read_unlock(); 217 return 0; 218 } 219 220 country_ie_len = country_ie[1]; 221 if (country_ie_len < IEEE80211_COUNTRY_IE_MIN_LEN) { 222 rcu_read_unlock(); 223 return 0; 224 } 225 226 if (!strncmp(priv->adapter->country_code, &country_ie[2], 2)) { 227 rcu_read_unlock(); 228 mwifiex_dbg(priv->adapter, INFO, 229 "11D: skip setting domain info in FW\n"); 230 return 0; 231 } 232 memcpy(priv->adapter->country_code, &country_ie[2], 2); 233 234 domain_info->country_code[0] = country_ie[2]; 235 domain_info->country_code[1] = country_ie[3]; 236 domain_info->country_code[2] = ' '; 237 238 country_ie_len -= IEEE80211_COUNTRY_STRING_LEN; 239 240 domain_info->no_of_triplet = 241 country_ie_len / sizeof(struct ieee80211_country_ie_triplet); 242 243 memcpy((u8 *)domain_info->triplet, 244 &country_ie[2] + IEEE80211_COUNTRY_STRING_LEN, country_ie_len); 245 246 rcu_read_unlock(); 247 248 if (mwifiex_send_cmd(priv, HostCmd_CMD_802_11D_DOMAIN_INFO, 249 HostCmd_ACT_GEN_SET, 0, NULL, false)) { 250 mwifiex_dbg(priv->adapter, ERROR, 251 "11D: setting domain info in FW fail\n"); 252 return -1; 253 } 254 255 mwifiex_dnld_txpwr_table(priv); 256 257 return 0; 258 } 259 260 /* 261 * In Ad-Hoc mode, the IBSS is created if not found in scan list. 262 * In both Ad-Hoc and infra mode, an deauthentication is performed 263 * first. 264 */ 265 int mwifiex_bss_start(struct mwifiex_private *priv, struct cfg80211_bss *bss, 266 struct cfg80211_ssid *req_ssid) 267 { 268 int ret; 269 struct mwifiex_adapter *adapter = priv->adapter; 270 struct mwifiex_bssdescriptor *bss_desc = NULL; 271 272 priv->scan_block = false; 273 274 if (bss) { 275 if (adapter->region_code == 0x00) 276 mwifiex_process_country_ie(priv, bss); 277 278 /* Allocate and fill new bss descriptor */ 279 bss_desc = kzalloc(sizeof(struct mwifiex_bssdescriptor), 280 GFP_KERNEL); 281 if (!bss_desc) 282 return -ENOMEM; 283 284 ret = mwifiex_fill_new_bss_desc(priv, bss, bss_desc); 285 if (ret) 286 goto done; 287 } 288 289 if (priv->bss_mode == NL80211_IFTYPE_STATION || 290 priv->bss_mode == NL80211_IFTYPE_P2P_CLIENT) { 291 u8 config_bands; 292 293 if (!bss_desc) 294 return -1; 295 296 if (mwifiex_band_to_radio_type(bss_desc->bss_band) == 297 HostCmd_SCAN_RADIO_TYPE_BG) { 298 config_bands = BAND_B | BAND_G | BAND_GN; 299 } else { 300 config_bands = BAND_A | BAND_AN; 301 if (adapter->fw_bands & BAND_AAC) 302 config_bands |= BAND_AAC; 303 } 304 305 if (!((config_bands | adapter->fw_bands) & ~adapter->fw_bands)) 306 adapter->config_bands = config_bands; 307 308 ret = mwifiex_check_network_compatibility(priv, bss_desc); 309 if (ret) 310 goto done; 311 312 if (mwifiex_11h_get_csa_closed_channel(priv) == 313 (u8)bss_desc->channel) { 314 mwifiex_dbg(adapter, ERROR, 315 "Attempt to reconnect on csa closed chan(%d)\n", 316 bss_desc->channel); 317 goto done; 318 } 319 320 mwifiex_dbg(adapter, INFO, 321 "info: SSID found in scan list ...\t" 322 "associating...\n"); 323 324 mwifiex_stop_net_dev_queue(priv->netdev, adapter); 325 if (netif_carrier_ok(priv->netdev)) 326 netif_carrier_off(priv->netdev); 327 328 /* Clear any past association response stored for 329 * application retrieval */ 330 priv->assoc_rsp_size = 0; 331 ret = mwifiex_associate(priv, bss_desc); 332 333 /* If auth type is auto and association fails using open mode, 334 * try to connect using shared mode */ 335 if (ret == WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG && 336 priv->sec_info.is_authtype_auto && 337 priv->sec_info.wep_enabled) { 338 priv->sec_info.authentication_mode = 339 NL80211_AUTHTYPE_SHARED_KEY; 340 ret = mwifiex_associate(priv, bss_desc); 341 } 342 343 if (bss) 344 cfg80211_put_bss(priv->adapter->wiphy, bss); 345 } else { 346 /* Adhoc mode */ 347 /* If the requested SSID matches current SSID, return */ 348 if (bss_desc && bss_desc->ssid.ssid_len && 349 (!mwifiex_ssid_cmp(&priv->curr_bss_params.bss_descriptor. 350 ssid, &bss_desc->ssid))) { 351 ret = 0; 352 goto done; 353 } 354 355 priv->adhoc_is_link_sensed = false; 356 357 ret = mwifiex_check_network_compatibility(priv, bss_desc); 358 359 mwifiex_stop_net_dev_queue(priv->netdev, adapter); 360 if (netif_carrier_ok(priv->netdev)) 361 netif_carrier_off(priv->netdev); 362 363 if (!ret) { 364 mwifiex_dbg(adapter, INFO, 365 "info: network found in scan\t" 366 " list. Joining...\n"); 367 ret = mwifiex_adhoc_join(priv, bss_desc); 368 if (bss) 369 cfg80211_put_bss(priv->adapter->wiphy, bss); 370 } else { 371 mwifiex_dbg(adapter, INFO, 372 "info: Network not found in\t" 373 "the list, creating adhoc with ssid = %s\n", 374 req_ssid->ssid); 375 ret = mwifiex_adhoc_start(priv, req_ssid); 376 } 377 } 378 379 done: 380 /* beacon_ie buffer was allocated in function 381 * mwifiex_fill_new_bss_desc(). Free it now. 382 */ 383 if (bss_desc) 384 kfree(bss_desc->beacon_buf); 385 kfree(bss_desc); 386 return ret; 387 } 388 389 /* 390 * IOCTL request handler to set host sleep configuration. 391 * 392 * This function prepares the correct firmware command and 393 * issues it. 394 */ 395 int mwifiex_set_hs_params(struct mwifiex_private *priv, u16 action, 396 int cmd_type, struct mwifiex_ds_hs_cfg *hs_cfg) 397 398 { 399 struct mwifiex_adapter *adapter = priv->adapter; 400 int status = 0; 401 u32 prev_cond = 0; 402 403 if (!hs_cfg) 404 return -ENOMEM; 405 406 switch (action) { 407 case HostCmd_ACT_GEN_SET: 408 if (adapter->pps_uapsd_mode) { 409 mwifiex_dbg(adapter, INFO, 410 "info: Host Sleep IOCTL\t" 411 "is blocked in UAPSD/PPS mode\n"); 412 status = -1; 413 break; 414 } 415 if (hs_cfg->is_invoke_hostcmd) { 416 if (hs_cfg->conditions == HS_CFG_CANCEL) { 417 if (!adapter->is_hs_configured) 418 /* Already cancelled */ 419 break; 420 /* Save previous condition */ 421 prev_cond = le32_to_cpu(adapter->hs_cfg 422 .conditions); 423 adapter->hs_cfg.conditions = 424 cpu_to_le32(hs_cfg->conditions); 425 } else if (hs_cfg->conditions) { 426 adapter->hs_cfg.conditions = 427 cpu_to_le32(hs_cfg->conditions); 428 adapter->hs_cfg.gpio = (u8)hs_cfg->gpio; 429 if (hs_cfg->gap) 430 adapter->hs_cfg.gap = (u8)hs_cfg->gap; 431 } else if (adapter->hs_cfg.conditions == 432 cpu_to_le32(HS_CFG_CANCEL)) { 433 /* Return failure if no parameters for HS 434 enable */ 435 status = -1; 436 break; 437 } 438 439 status = mwifiex_send_cmd(priv, 440 HostCmd_CMD_802_11_HS_CFG_ENH, 441 HostCmd_ACT_GEN_SET, 0, 442 &adapter->hs_cfg, 443 cmd_type == MWIFIEX_SYNC_CMD); 444 445 if (hs_cfg->conditions == HS_CFG_CANCEL) 446 /* Restore previous condition */ 447 adapter->hs_cfg.conditions = 448 cpu_to_le32(prev_cond); 449 } else { 450 adapter->hs_cfg.conditions = 451 cpu_to_le32(hs_cfg->conditions); 452 adapter->hs_cfg.gpio = (u8)hs_cfg->gpio; 453 adapter->hs_cfg.gap = (u8)hs_cfg->gap; 454 } 455 break; 456 case HostCmd_ACT_GEN_GET: 457 hs_cfg->conditions = le32_to_cpu(adapter->hs_cfg.conditions); 458 hs_cfg->gpio = adapter->hs_cfg.gpio; 459 hs_cfg->gap = adapter->hs_cfg.gap; 460 break; 461 default: 462 status = -1; 463 break; 464 } 465 466 return status; 467 } 468 469 /* 470 * Sends IOCTL request to cancel the existing Host Sleep configuration. 471 * 472 * This function allocates the IOCTL request buffer, fills it 473 * with requisite parameters and calls the IOCTL handler. 474 */ 475 int mwifiex_cancel_hs(struct mwifiex_private *priv, int cmd_type) 476 { 477 struct mwifiex_ds_hs_cfg hscfg; 478 479 hscfg.conditions = HS_CFG_CANCEL; 480 hscfg.is_invoke_hostcmd = true; 481 482 return mwifiex_set_hs_params(priv, HostCmd_ACT_GEN_SET, 483 cmd_type, &hscfg); 484 } 485 EXPORT_SYMBOL_GPL(mwifiex_cancel_hs); 486 487 /* 488 * Sends IOCTL request to cancel the existing Host Sleep configuration. 489 * 490 * This function allocates the IOCTL request buffer, fills it 491 * with requisite parameters and calls the IOCTL handler. 492 */ 493 int mwifiex_enable_hs(struct mwifiex_adapter *adapter) 494 { 495 struct mwifiex_ds_hs_cfg hscfg; 496 struct mwifiex_private *priv; 497 int i; 498 499 if (disconnect_on_suspend) { 500 for (i = 0; i < adapter->priv_num; i++) { 501 priv = adapter->priv[i]; 502 if (priv) 503 mwifiex_deauthenticate(priv, NULL); 504 } 505 } 506 507 if (adapter->hs_activated) { 508 mwifiex_dbg(adapter, CMD, 509 "cmd: HS Already activated\n"); 510 return true; 511 } 512 513 adapter->hs_activate_wait_q_woken = false; 514 515 memset(&hscfg, 0, sizeof(struct mwifiex_ds_hs_cfg)); 516 hscfg.is_invoke_hostcmd = true; 517 518 adapter->hs_enabling = true; 519 mwifiex_cancel_all_pending_cmd(adapter); 520 521 if (mwifiex_set_hs_params(mwifiex_get_priv(adapter, 522 MWIFIEX_BSS_ROLE_STA), 523 HostCmd_ACT_GEN_SET, MWIFIEX_SYNC_CMD, 524 &hscfg)) { 525 mwifiex_dbg(adapter, ERROR, 526 "IOCTL request HS enable failed\n"); 527 return false; 528 } 529 530 if (wait_event_interruptible_timeout(adapter->hs_activate_wait_q, 531 adapter->hs_activate_wait_q_woken, 532 (10 * HZ)) <= 0) { 533 mwifiex_dbg(adapter, ERROR, 534 "hs_activate_wait_q terminated\n"); 535 return false; 536 } 537 538 return true; 539 } 540 EXPORT_SYMBOL_GPL(mwifiex_enable_hs); 541 542 /* 543 * IOCTL request handler to get BSS information. 544 * 545 * This function collates the information from different driver structures 546 * to send to the user. 547 */ 548 int mwifiex_get_bss_info(struct mwifiex_private *priv, 549 struct mwifiex_bss_info *info) 550 { 551 struct mwifiex_adapter *adapter = priv->adapter; 552 struct mwifiex_bssdescriptor *bss_desc; 553 554 if (!info) 555 return -1; 556 557 bss_desc = &priv->curr_bss_params.bss_descriptor; 558 559 info->bss_mode = priv->bss_mode; 560 561 memcpy(&info->ssid, &bss_desc->ssid, sizeof(struct cfg80211_ssid)); 562 563 memcpy(&info->bssid, &bss_desc->mac_address, ETH_ALEN); 564 565 info->bss_chan = bss_desc->channel; 566 567 memcpy(info->country_code, adapter->country_code, 568 IEEE80211_COUNTRY_STRING_LEN); 569 570 info->media_connected = priv->media_connected; 571 572 info->max_power_level = priv->max_tx_power_level; 573 info->min_power_level = priv->min_tx_power_level; 574 575 info->adhoc_state = priv->adhoc_state; 576 577 info->bcn_nf_last = priv->bcn_nf_last; 578 579 if (priv->sec_info.wep_enabled) 580 info->wep_status = true; 581 else 582 info->wep_status = false; 583 584 info->is_hs_configured = adapter->is_hs_configured; 585 info->is_deep_sleep = adapter->is_deep_sleep; 586 587 return 0; 588 } 589 590 /* 591 * The function disables auto deep sleep mode. 592 */ 593 int mwifiex_disable_auto_ds(struct mwifiex_private *priv) 594 { 595 struct mwifiex_ds_auto_ds auto_ds; 596 597 auto_ds.auto_ds = DEEP_SLEEP_OFF; 598 599 return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_PS_MODE_ENH, 600 DIS_AUTO_PS, BITMAP_AUTO_DS, &auto_ds, true); 601 } 602 EXPORT_SYMBOL_GPL(mwifiex_disable_auto_ds); 603 604 /* 605 * Sends IOCTL request to get the data rate. 606 * 607 * This function allocates the IOCTL request buffer, fills it 608 * with requisite parameters and calls the IOCTL handler. 609 */ 610 int mwifiex_drv_get_data_rate(struct mwifiex_private *priv, u32 *rate) 611 { 612 int ret; 613 614 ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_TX_RATE_QUERY, 615 HostCmd_ACT_GEN_GET, 0, NULL, true); 616 617 if (!ret) { 618 if (priv->is_data_rate_auto) 619 *rate = mwifiex_index_to_data_rate(priv, priv->tx_rate, 620 priv->tx_htinfo); 621 else 622 *rate = priv->data_rate; 623 } 624 625 return ret; 626 } 627 628 /* 629 * IOCTL request handler to set tx power configuration. 630 * 631 * This function prepares the correct firmware command and 632 * issues it. 633 * 634 * For non-auto power mode, all the following power groups are set - 635 * - Modulation class HR/DSSS 636 * - Modulation class OFDM 637 * - Modulation class HTBW20 638 * - Modulation class HTBW40 639 */ 640 int mwifiex_set_tx_power(struct mwifiex_private *priv, 641 struct mwifiex_power_cfg *power_cfg) 642 { 643 int ret; 644 struct host_cmd_ds_txpwr_cfg *txp_cfg; 645 struct mwifiex_types_power_group *pg_tlv; 646 struct mwifiex_power_group *pg; 647 u8 *buf; 648 u16 dbm = 0; 649 650 if (!power_cfg->is_power_auto) { 651 dbm = (u16) power_cfg->power_level; 652 if ((dbm < priv->min_tx_power_level) || 653 (dbm > priv->max_tx_power_level)) { 654 mwifiex_dbg(priv->adapter, ERROR, 655 "txpower value %d dBm\t" 656 "is out of range (%d dBm-%d dBm)\n", 657 dbm, priv->min_tx_power_level, 658 priv->max_tx_power_level); 659 return -1; 660 } 661 } 662 buf = kzalloc(MWIFIEX_SIZE_OF_CMD_BUFFER, GFP_KERNEL); 663 if (!buf) 664 return -ENOMEM; 665 666 txp_cfg = (struct host_cmd_ds_txpwr_cfg *) buf; 667 txp_cfg->action = cpu_to_le16(HostCmd_ACT_GEN_SET); 668 if (!power_cfg->is_power_auto) { 669 txp_cfg->mode = cpu_to_le32(1); 670 pg_tlv = (struct mwifiex_types_power_group *) 671 (buf + sizeof(struct host_cmd_ds_txpwr_cfg)); 672 pg_tlv->type = cpu_to_le16(TLV_TYPE_POWER_GROUP); 673 pg_tlv->length = 674 cpu_to_le16(4 * sizeof(struct mwifiex_power_group)); 675 pg = (struct mwifiex_power_group *) 676 (buf + sizeof(struct host_cmd_ds_txpwr_cfg) 677 + sizeof(struct mwifiex_types_power_group)); 678 /* Power group for modulation class HR/DSSS */ 679 pg->first_rate_code = 0x00; 680 pg->last_rate_code = 0x03; 681 pg->modulation_class = MOD_CLASS_HR_DSSS; 682 pg->power_step = 0; 683 pg->power_min = (s8) dbm; 684 pg->power_max = (s8) dbm; 685 pg++; 686 /* Power group for modulation class OFDM */ 687 pg->first_rate_code = 0x00; 688 pg->last_rate_code = 0x07; 689 pg->modulation_class = MOD_CLASS_OFDM; 690 pg->power_step = 0; 691 pg->power_min = (s8) dbm; 692 pg->power_max = (s8) dbm; 693 pg++; 694 /* Power group for modulation class HTBW20 */ 695 pg->first_rate_code = 0x00; 696 pg->last_rate_code = 0x20; 697 pg->modulation_class = MOD_CLASS_HT; 698 pg->power_step = 0; 699 pg->power_min = (s8) dbm; 700 pg->power_max = (s8) dbm; 701 pg->ht_bandwidth = HT_BW_20; 702 pg++; 703 /* Power group for modulation class HTBW40 */ 704 pg->first_rate_code = 0x00; 705 pg->last_rate_code = 0x20; 706 pg->modulation_class = MOD_CLASS_HT; 707 pg->power_step = 0; 708 pg->power_min = (s8) dbm; 709 pg->power_max = (s8) dbm; 710 pg->ht_bandwidth = HT_BW_40; 711 } 712 ret = mwifiex_send_cmd(priv, HostCmd_CMD_TXPWR_CFG, 713 HostCmd_ACT_GEN_SET, 0, buf, true); 714 715 kfree(buf); 716 return ret; 717 } 718 719 /* 720 * IOCTL request handler to get power save mode. 721 * 722 * This function prepares the correct firmware command and 723 * issues it. 724 */ 725 int mwifiex_drv_set_power(struct mwifiex_private *priv, u32 *ps_mode) 726 { 727 int ret; 728 struct mwifiex_adapter *adapter = priv->adapter; 729 u16 sub_cmd; 730 731 if (*ps_mode) 732 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_PSP; 733 else 734 adapter->ps_mode = MWIFIEX_802_11_POWER_MODE_CAM; 735 sub_cmd = (*ps_mode) ? EN_AUTO_PS : DIS_AUTO_PS; 736 ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_PS_MODE_ENH, 737 sub_cmd, BITMAP_STA_PS, NULL, true); 738 if ((!ret) && (sub_cmd == DIS_AUTO_PS)) 739 ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_PS_MODE_ENH, 740 GET_PS, 0, NULL, false); 741 742 return ret; 743 } 744 745 /* 746 * IOCTL request handler to set/reset WPA IE. 747 * 748 * The supplied WPA IE is treated as a opaque buffer. Only the first field 749 * is checked to determine WPA version. If buffer length is zero, the existing 750 * WPA IE is reset. 751 */ 752 static int mwifiex_set_wpa_ie_helper(struct mwifiex_private *priv, 753 u8 *ie_data_ptr, u16 ie_len) 754 { 755 if (ie_len) { 756 if (ie_len > sizeof(priv->wpa_ie)) { 757 mwifiex_dbg(priv->adapter, ERROR, 758 "failed to copy WPA IE, too big\n"); 759 return -1; 760 } 761 memcpy(priv->wpa_ie, ie_data_ptr, ie_len); 762 priv->wpa_ie_len = ie_len; 763 mwifiex_dbg(priv->adapter, CMD, 764 "cmd: Set Wpa_ie_len=%d IE=%#x\n", 765 priv->wpa_ie_len, priv->wpa_ie[0]); 766 767 if (priv->wpa_ie[0] == WLAN_EID_VENDOR_SPECIFIC) { 768 priv->sec_info.wpa_enabled = true; 769 } else if (priv->wpa_ie[0] == WLAN_EID_RSN) { 770 priv->sec_info.wpa2_enabled = true; 771 } else { 772 priv->sec_info.wpa_enabled = false; 773 priv->sec_info.wpa2_enabled = false; 774 } 775 } else { 776 memset(priv->wpa_ie, 0, sizeof(priv->wpa_ie)); 777 priv->wpa_ie_len = 0; 778 mwifiex_dbg(priv->adapter, INFO, 779 "info: reset wpa_ie_len=%d IE=%#x\n", 780 priv->wpa_ie_len, priv->wpa_ie[0]); 781 priv->sec_info.wpa_enabled = false; 782 priv->sec_info.wpa2_enabled = false; 783 } 784 785 return 0; 786 } 787 788 /* 789 * IOCTL request handler to set/reset WAPI IE. 790 * 791 * The supplied WAPI IE is treated as a opaque buffer. Only the first field 792 * is checked to internally enable WAPI. If buffer length is zero, the existing 793 * WAPI IE is reset. 794 */ 795 static int mwifiex_set_wapi_ie(struct mwifiex_private *priv, 796 u8 *ie_data_ptr, u16 ie_len) 797 { 798 if (ie_len) { 799 if (ie_len > sizeof(priv->wapi_ie)) { 800 mwifiex_dbg(priv->adapter, ERROR, 801 "info: failed to copy WAPI IE, too big\n"); 802 return -1; 803 } 804 memcpy(priv->wapi_ie, ie_data_ptr, ie_len); 805 priv->wapi_ie_len = ie_len; 806 mwifiex_dbg(priv->adapter, CMD, 807 "cmd: Set wapi_ie_len=%d IE=%#x\n", 808 priv->wapi_ie_len, priv->wapi_ie[0]); 809 810 if (priv->wapi_ie[0] == WLAN_EID_BSS_AC_ACCESS_DELAY) 811 priv->sec_info.wapi_enabled = true; 812 } else { 813 memset(priv->wapi_ie, 0, sizeof(priv->wapi_ie)); 814 priv->wapi_ie_len = ie_len; 815 mwifiex_dbg(priv->adapter, INFO, 816 "info: Reset wapi_ie_len=%d IE=%#x\n", 817 priv->wapi_ie_len, priv->wapi_ie[0]); 818 priv->sec_info.wapi_enabled = false; 819 } 820 return 0; 821 } 822 823 /* 824 * IOCTL request handler to set/reset WPS IE. 825 * 826 * The supplied WPS IE is treated as a opaque buffer. Only the first field 827 * is checked to internally enable WPS. If buffer length is zero, the existing 828 * WPS IE is reset. 829 */ 830 static int mwifiex_set_wps_ie(struct mwifiex_private *priv, 831 u8 *ie_data_ptr, u16 ie_len) 832 { 833 if (ie_len) { 834 if (ie_len > MWIFIEX_MAX_VSIE_LEN) { 835 mwifiex_dbg(priv->adapter, ERROR, 836 "info: failed to copy WPS IE, too big\n"); 837 return -1; 838 } 839 840 priv->wps_ie = kzalloc(MWIFIEX_MAX_VSIE_LEN, GFP_KERNEL); 841 if (!priv->wps_ie) 842 return -ENOMEM; 843 844 memcpy(priv->wps_ie, ie_data_ptr, ie_len); 845 priv->wps_ie_len = ie_len; 846 mwifiex_dbg(priv->adapter, CMD, 847 "cmd: Set wps_ie_len=%d IE=%#x\n", 848 priv->wps_ie_len, priv->wps_ie[0]); 849 } else { 850 kfree(priv->wps_ie); 851 priv->wps_ie_len = ie_len; 852 mwifiex_dbg(priv->adapter, INFO, 853 "info: Reset wps_ie_len=%d\n", priv->wps_ie_len); 854 } 855 return 0; 856 } 857 858 /* 859 * IOCTL request handler to set WAPI key. 860 * 861 * This function prepares the correct firmware command and 862 * issues it. 863 */ 864 static int mwifiex_sec_ioctl_set_wapi_key(struct mwifiex_private *priv, 865 struct mwifiex_ds_encrypt_key *encrypt_key) 866 { 867 868 return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL, 869 HostCmd_ACT_GEN_SET, KEY_INFO_ENABLED, 870 encrypt_key, true); 871 } 872 873 /* 874 * IOCTL request handler to set WEP network key. 875 * 876 * This function prepares the correct firmware command and 877 * issues it, after validation checks. 878 */ 879 static int mwifiex_sec_ioctl_set_wep_key(struct mwifiex_private *priv, 880 struct mwifiex_ds_encrypt_key *encrypt_key) 881 { 882 struct mwifiex_adapter *adapter = priv->adapter; 883 int ret; 884 struct mwifiex_wep_key *wep_key; 885 int index; 886 887 if (priv->wep_key_curr_index >= NUM_WEP_KEYS) 888 priv->wep_key_curr_index = 0; 889 wep_key = &priv->wep_key[priv->wep_key_curr_index]; 890 index = encrypt_key->key_index; 891 if (encrypt_key->key_disable) { 892 priv->sec_info.wep_enabled = 0; 893 } else if (!encrypt_key->key_len) { 894 /* Copy the required key as the current key */ 895 wep_key = &priv->wep_key[index]; 896 if (!wep_key->key_length) { 897 mwifiex_dbg(adapter, ERROR, 898 "key not set, so cannot enable it\n"); 899 return -1; 900 } 901 902 if (adapter->key_api_major_ver == KEY_API_VER_MAJOR_V2) { 903 memcpy(encrypt_key->key_material, 904 wep_key->key_material, wep_key->key_length); 905 encrypt_key->key_len = wep_key->key_length; 906 } 907 908 priv->wep_key_curr_index = (u16) index; 909 priv->sec_info.wep_enabled = 1; 910 } else { 911 wep_key = &priv->wep_key[index]; 912 memset(wep_key, 0, sizeof(struct mwifiex_wep_key)); 913 /* Copy the key in the driver */ 914 memcpy(wep_key->key_material, 915 encrypt_key->key_material, 916 encrypt_key->key_len); 917 wep_key->key_index = index; 918 wep_key->key_length = encrypt_key->key_len; 919 priv->sec_info.wep_enabled = 1; 920 } 921 if (wep_key->key_length) { 922 void *enc_key; 923 924 if (encrypt_key->key_disable) { 925 memset(&priv->wep_key[index], 0, 926 sizeof(struct mwifiex_wep_key)); 927 goto done; 928 } 929 930 if (adapter->key_api_major_ver == KEY_API_VER_MAJOR_V2) 931 enc_key = encrypt_key; 932 else 933 enc_key = NULL; 934 935 /* Send request to firmware */ 936 ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL, 937 HostCmd_ACT_GEN_SET, 0, enc_key, false); 938 if (ret) 939 return ret; 940 } 941 942 done: 943 if (priv->sec_info.wep_enabled) 944 priv->curr_pkt_filter |= HostCmd_ACT_MAC_WEP_ENABLE; 945 else 946 priv->curr_pkt_filter &= ~HostCmd_ACT_MAC_WEP_ENABLE; 947 948 ret = mwifiex_send_cmd(priv, HostCmd_CMD_MAC_CONTROL, 949 HostCmd_ACT_GEN_SET, 0, 950 &priv->curr_pkt_filter, true); 951 952 return ret; 953 } 954 955 /* 956 * IOCTL request handler to set WPA key. 957 * 958 * This function prepares the correct firmware command and 959 * issues it, after validation checks. 960 * 961 * Current driver only supports key length of up to 32 bytes. 962 * 963 * This function can also be used to disable a currently set key. 964 */ 965 static int mwifiex_sec_ioctl_set_wpa_key(struct mwifiex_private *priv, 966 struct mwifiex_ds_encrypt_key *encrypt_key) 967 { 968 int ret; 969 u8 remove_key = false; 970 struct host_cmd_ds_802_11_key_material *ibss_key; 971 972 /* Current driver only supports key length of up to 32 bytes */ 973 if (encrypt_key->key_len > WLAN_MAX_KEY_LEN) { 974 mwifiex_dbg(priv->adapter, ERROR, 975 "key length too long\n"); 976 return -1; 977 } 978 979 if (priv->bss_mode == NL80211_IFTYPE_ADHOC) { 980 /* 981 * IBSS/WPA-None uses only one key (Group) for both receiving 982 * and sending unicast and multicast packets. 983 */ 984 /* Send the key as PTK to firmware */ 985 encrypt_key->key_index = MWIFIEX_KEY_INDEX_UNICAST; 986 ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL, 987 HostCmd_ACT_GEN_SET, 988 KEY_INFO_ENABLED, encrypt_key, false); 989 if (ret) 990 return ret; 991 992 ibss_key = &priv->aes_key; 993 memset(ibss_key, 0, 994 sizeof(struct host_cmd_ds_802_11_key_material)); 995 /* Copy the key in the driver */ 996 memcpy(ibss_key->key_param_set.key, encrypt_key->key_material, 997 encrypt_key->key_len); 998 memcpy(&ibss_key->key_param_set.key_len, &encrypt_key->key_len, 999 sizeof(ibss_key->key_param_set.key_len)); 1000 ibss_key->key_param_set.key_type_id 1001 = cpu_to_le16(KEY_TYPE_ID_TKIP); 1002 ibss_key->key_param_set.key_info = cpu_to_le16(KEY_ENABLED); 1003 1004 /* Send the key as GTK to firmware */ 1005 encrypt_key->key_index = ~MWIFIEX_KEY_INDEX_UNICAST; 1006 } 1007 1008 if (!encrypt_key->key_index) 1009 encrypt_key->key_index = MWIFIEX_KEY_INDEX_UNICAST; 1010 1011 if (remove_key) 1012 ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL, 1013 HostCmd_ACT_GEN_SET, 1014 !KEY_INFO_ENABLED, encrypt_key, true); 1015 else 1016 ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_KEY_MATERIAL, 1017 HostCmd_ACT_GEN_SET, 1018 KEY_INFO_ENABLED, encrypt_key, true); 1019 1020 return ret; 1021 } 1022 1023 /* 1024 * IOCTL request handler to set/get network keys. 1025 * 1026 * This is a generic key handling function which supports WEP, WPA 1027 * and WAPI. 1028 */ 1029 static int 1030 mwifiex_sec_ioctl_encrypt_key(struct mwifiex_private *priv, 1031 struct mwifiex_ds_encrypt_key *encrypt_key) 1032 { 1033 int status; 1034 1035 if (encrypt_key->is_wapi_key) 1036 status = mwifiex_sec_ioctl_set_wapi_key(priv, encrypt_key); 1037 else if (encrypt_key->key_len > WLAN_KEY_LEN_WEP104) 1038 status = mwifiex_sec_ioctl_set_wpa_key(priv, encrypt_key); 1039 else 1040 status = mwifiex_sec_ioctl_set_wep_key(priv, encrypt_key); 1041 return status; 1042 } 1043 1044 /* 1045 * This function returns the driver version. 1046 */ 1047 int 1048 mwifiex_drv_get_driver_version(struct mwifiex_adapter *adapter, char *version, 1049 int max_len) 1050 { 1051 union { 1052 __le32 l; 1053 u8 c[4]; 1054 } ver; 1055 char fw_ver[32]; 1056 1057 ver.l = cpu_to_le32(adapter->fw_release_number); 1058 sprintf(fw_ver, "%u.%u.%u.p%u", ver.c[2], ver.c[1], ver.c[0], ver.c[3]); 1059 1060 snprintf(version, max_len, driver_version, fw_ver); 1061 1062 mwifiex_dbg(adapter, MSG, "info: MWIFIEX VERSION: %s\n", version); 1063 1064 return 0; 1065 } 1066 1067 /* 1068 * Sends IOCTL request to set encoding parameters. 1069 * 1070 * This function allocates the IOCTL request buffer, fills it 1071 * with requisite parameters and calls the IOCTL handler. 1072 */ 1073 int mwifiex_set_encode(struct mwifiex_private *priv, struct key_params *kp, 1074 const u8 *key, int key_len, u8 key_index, 1075 const u8 *mac_addr, int disable) 1076 { 1077 struct mwifiex_ds_encrypt_key encrypt_key; 1078 1079 memset(&encrypt_key, 0, sizeof(struct mwifiex_ds_encrypt_key)); 1080 encrypt_key.key_len = key_len; 1081 encrypt_key.key_index = key_index; 1082 1083 if (kp && kp->cipher == WLAN_CIPHER_SUITE_AES_CMAC) 1084 encrypt_key.is_igtk_key = true; 1085 1086 if (!disable) { 1087 if (key_len) 1088 memcpy(encrypt_key.key_material, key, key_len); 1089 else 1090 encrypt_key.is_current_wep_key = true; 1091 1092 if (mac_addr) 1093 memcpy(encrypt_key.mac_addr, mac_addr, ETH_ALEN); 1094 if (kp && kp->seq && kp->seq_len) { 1095 memcpy(encrypt_key.pn, kp->seq, kp->seq_len); 1096 encrypt_key.pn_len = kp->seq_len; 1097 encrypt_key.is_rx_seq_valid = true; 1098 } 1099 } else { 1100 if (GET_BSS_ROLE(priv) == MWIFIEX_BSS_ROLE_UAP) 1101 return 0; 1102 encrypt_key.key_disable = true; 1103 if (mac_addr) 1104 memcpy(encrypt_key.mac_addr, mac_addr, ETH_ALEN); 1105 } 1106 1107 return mwifiex_sec_ioctl_encrypt_key(priv, &encrypt_key); 1108 } 1109 1110 /* 1111 * Sends IOCTL request to get extended version. 1112 * 1113 * This function allocates the IOCTL request buffer, fills it 1114 * with requisite parameters and calls the IOCTL handler. 1115 */ 1116 int 1117 mwifiex_get_ver_ext(struct mwifiex_private *priv) 1118 { 1119 struct mwifiex_ver_ext ver_ext; 1120 1121 memset(&ver_ext, 0, sizeof(struct host_cmd_ds_version_ext)); 1122 if (mwifiex_send_cmd(priv, HostCmd_CMD_VERSION_EXT, 1123 HostCmd_ACT_GEN_GET, 0, &ver_ext, true)) 1124 return -1; 1125 1126 return 0; 1127 } 1128 1129 int 1130 mwifiex_remain_on_chan_cfg(struct mwifiex_private *priv, u16 action, 1131 struct ieee80211_channel *chan, 1132 unsigned int duration) 1133 { 1134 struct host_cmd_ds_remain_on_chan roc_cfg; 1135 u8 sc; 1136 1137 memset(&roc_cfg, 0, sizeof(roc_cfg)); 1138 roc_cfg.action = cpu_to_le16(action); 1139 if (action == HostCmd_ACT_GEN_SET) { 1140 roc_cfg.band_cfg = chan->band; 1141 sc = mwifiex_chan_type_to_sec_chan_offset(NL80211_CHAN_NO_HT); 1142 roc_cfg.band_cfg |= (sc << 2); 1143 1144 roc_cfg.channel = 1145 ieee80211_frequency_to_channel(chan->center_freq); 1146 roc_cfg.duration = cpu_to_le32(duration); 1147 } 1148 if (mwifiex_send_cmd(priv, HostCmd_CMD_REMAIN_ON_CHAN, 1149 action, 0, &roc_cfg, true)) { 1150 mwifiex_dbg(priv->adapter, ERROR, 1151 "failed to remain on channel\n"); 1152 return -1; 1153 } 1154 1155 return roc_cfg.status; 1156 } 1157 1158 /* 1159 * Sends IOCTL request to get statistics information. 1160 * 1161 * This function allocates the IOCTL request buffer, fills it 1162 * with requisite parameters and calls the IOCTL handler. 1163 */ 1164 int 1165 mwifiex_get_stats_info(struct mwifiex_private *priv, 1166 struct mwifiex_ds_get_stats *log) 1167 { 1168 return mwifiex_send_cmd(priv, HostCmd_CMD_802_11_GET_LOG, 1169 HostCmd_ACT_GEN_GET, 0, log, true); 1170 } 1171 1172 /* 1173 * IOCTL request handler to read/write register. 1174 * 1175 * This function prepares the correct firmware command and 1176 * issues it. 1177 * 1178 * Access to the following registers are supported - 1179 * - MAC 1180 * - BBP 1181 * - RF 1182 * - PMIC 1183 * - CAU 1184 */ 1185 static int mwifiex_reg_mem_ioctl_reg_rw(struct mwifiex_private *priv, 1186 struct mwifiex_ds_reg_rw *reg_rw, 1187 u16 action) 1188 { 1189 u16 cmd_no; 1190 1191 switch (le32_to_cpu(reg_rw->type)) { 1192 case MWIFIEX_REG_MAC: 1193 cmd_no = HostCmd_CMD_MAC_REG_ACCESS; 1194 break; 1195 case MWIFIEX_REG_BBP: 1196 cmd_no = HostCmd_CMD_BBP_REG_ACCESS; 1197 break; 1198 case MWIFIEX_REG_RF: 1199 cmd_no = HostCmd_CMD_RF_REG_ACCESS; 1200 break; 1201 case MWIFIEX_REG_PMIC: 1202 cmd_no = HostCmd_CMD_PMIC_REG_ACCESS; 1203 break; 1204 case MWIFIEX_REG_CAU: 1205 cmd_no = HostCmd_CMD_CAU_REG_ACCESS; 1206 break; 1207 default: 1208 return -1; 1209 } 1210 1211 return mwifiex_send_cmd(priv, cmd_no, action, 0, reg_rw, true); 1212 } 1213 1214 /* 1215 * Sends IOCTL request to write to a register. 1216 * 1217 * This function allocates the IOCTL request buffer, fills it 1218 * with requisite parameters and calls the IOCTL handler. 1219 */ 1220 int 1221 mwifiex_reg_write(struct mwifiex_private *priv, u32 reg_type, 1222 u32 reg_offset, u32 reg_value) 1223 { 1224 struct mwifiex_ds_reg_rw reg_rw; 1225 1226 reg_rw.type = cpu_to_le32(reg_type); 1227 reg_rw.offset = cpu_to_le32(reg_offset); 1228 reg_rw.value = cpu_to_le32(reg_value); 1229 1230 return mwifiex_reg_mem_ioctl_reg_rw(priv, ®_rw, HostCmd_ACT_GEN_SET); 1231 } 1232 1233 /* 1234 * Sends IOCTL request to read from a register. 1235 * 1236 * This function allocates the IOCTL request buffer, fills it 1237 * with requisite parameters and calls the IOCTL handler. 1238 */ 1239 int 1240 mwifiex_reg_read(struct mwifiex_private *priv, u32 reg_type, 1241 u32 reg_offset, u32 *value) 1242 { 1243 int ret; 1244 struct mwifiex_ds_reg_rw reg_rw; 1245 1246 reg_rw.type = cpu_to_le32(reg_type); 1247 reg_rw.offset = cpu_to_le32(reg_offset); 1248 ret = mwifiex_reg_mem_ioctl_reg_rw(priv, ®_rw, HostCmd_ACT_GEN_GET); 1249 1250 if (ret) 1251 goto done; 1252 1253 *value = le32_to_cpu(reg_rw.value); 1254 1255 done: 1256 return ret; 1257 } 1258 1259 /* 1260 * Sends IOCTL request to read from EEPROM. 1261 * 1262 * This function allocates the IOCTL request buffer, fills it 1263 * with requisite parameters and calls the IOCTL handler. 1264 */ 1265 int 1266 mwifiex_eeprom_read(struct mwifiex_private *priv, u16 offset, u16 bytes, 1267 u8 *value) 1268 { 1269 int ret; 1270 struct mwifiex_ds_read_eeprom rd_eeprom; 1271 1272 rd_eeprom.offset = cpu_to_le16((u16) offset); 1273 rd_eeprom.byte_count = cpu_to_le16((u16) bytes); 1274 1275 /* Send request to firmware */ 1276 ret = mwifiex_send_cmd(priv, HostCmd_CMD_802_11_EEPROM_ACCESS, 1277 HostCmd_ACT_GEN_GET, 0, &rd_eeprom, true); 1278 1279 if (!ret) 1280 memcpy(value, rd_eeprom.value, MAX_EEPROM_DATA); 1281 return ret; 1282 } 1283 1284 /* 1285 * This function sets a generic IE. In addition to generic IE, it can 1286 * also handle WPA, WPA2 and WAPI IEs. 1287 */ 1288 static int 1289 mwifiex_set_gen_ie_helper(struct mwifiex_private *priv, u8 *ie_data_ptr, 1290 u16 ie_len) 1291 { 1292 int ret = 0; 1293 struct ieee_types_vendor_header *pvendor_ie; 1294 const u8 wpa_oui[] = { 0x00, 0x50, 0xf2, 0x01 }; 1295 const u8 wps_oui[] = { 0x00, 0x50, 0xf2, 0x04 }; 1296 u16 unparsed_len = ie_len; 1297 int find_wpa_ie = 0; 1298 1299 /* If the passed length is zero, reset the buffer */ 1300 if (!ie_len) { 1301 priv->gen_ie_buf_len = 0; 1302 priv->wps.session_enable = false; 1303 1304 return 0; 1305 } else if (!ie_data_ptr) { 1306 return -1; 1307 } 1308 pvendor_ie = (struct ieee_types_vendor_header *) ie_data_ptr; 1309 1310 while (pvendor_ie) { 1311 if (pvendor_ie->element_id == WLAN_EID_VENDOR_SPECIFIC) { 1312 /* Test to see if it is a WPA IE, if not, then it is a 1313 * gen IE 1314 */ 1315 if (!memcmp(pvendor_ie->oui, wpa_oui, 1316 sizeof(wpa_oui))) { 1317 find_wpa_ie = 1; 1318 break; 1319 } 1320 1321 /* Test to see if it is a WPS IE, if so, enable 1322 * wps session flag 1323 */ 1324 if (!memcmp(pvendor_ie->oui, wps_oui, 1325 sizeof(wps_oui))) { 1326 priv->wps.session_enable = true; 1327 mwifiex_dbg(priv->adapter, MSG, 1328 "info: WPS Session Enabled.\n"); 1329 ret = mwifiex_set_wps_ie(priv, 1330 (u8 *)pvendor_ie, 1331 unparsed_len); 1332 } 1333 } 1334 1335 if (pvendor_ie->element_id == WLAN_EID_RSN) { 1336 find_wpa_ie = 1; 1337 break; 1338 } 1339 1340 if (pvendor_ie->element_id == WLAN_EID_BSS_AC_ACCESS_DELAY) { 1341 /* IE is a WAPI IE so call set_wapi function */ 1342 ret = mwifiex_set_wapi_ie(priv, (u8 *)pvendor_ie, 1343 unparsed_len); 1344 return ret; 1345 } 1346 1347 unparsed_len -= (pvendor_ie->len + 1348 sizeof(struct ieee_types_header)); 1349 1350 if (unparsed_len <= sizeof(struct ieee_types_header)) 1351 pvendor_ie = NULL; 1352 else 1353 pvendor_ie = (struct ieee_types_vendor_header *) 1354 (((u8 *)pvendor_ie) + pvendor_ie->len + 1355 sizeof(struct ieee_types_header)); 1356 } 1357 1358 if (find_wpa_ie) { 1359 /* IE is a WPA/WPA2 IE so call set_wpa function */ 1360 ret = mwifiex_set_wpa_ie_helper(priv, (u8 *)pvendor_ie, 1361 unparsed_len); 1362 priv->wps.session_enable = false; 1363 return ret; 1364 } 1365 1366 /* 1367 * Verify that the passed length is not larger than the 1368 * available space remaining in the buffer 1369 */ 1370 if (ie_len < (sizeof(priv->gen_ie_buf) - priv->gen_ie_buf_len)) { 1371 1372 /* Append the passed data to the end of the 1373 genIeBuffer */ 1374 memcpy(priv->gen_ie_buf + priv->gen_ie_buf_len, ie_data_ptr, 1375 ie_len); 1376 /* Increment the stored buffer length by the 1377 size passed */ 1378 priv->gen_ie_buf_len += ie_len; 1379 } else { 1380 /* Passed data does not fit in the remaining 1381 buffer space */ 1382 ret = -1; 1383 } 1384 1385 /* Return 0, or -1 for error case */ 1386 return ret; 1387 } 1388 1389 /* 1390 * IOCTL request handler to set/get generic IE. 1391 * 1392 * In addition to various generic IEs, this function can also be 1393 * used to set the ARP filter. 1394 */ 1395 static int mwifiex_misc_ioctl_gen_ie(struct mwifiex_private *priv, 1396 struct mwifiex_ds_misc_gen_ie *gen_ie, 1397 u16 action) 1398 { 1399 struct mwifiex_adapter *adapter = priv->adapter; 1400 1401 switch (gen_ie->type) { 1402 case MWIFIEX_IE_TYPE_GEN_IE: 1403 if (action == HostCmd_ACT_GEN_GET) { 1404 gen_ie->len = priv->wpa_ie_len; 1405 memcpy(gen_ie->ie_data, priv->wpa_ie, gen_ie->len); 1406 } else { 1407 mwifiex_set_gen_ie_helper(priv, gen_ie->ie_data, 1408 (u16) gen_ie->len); 1409 } 1410 break; 1411 case MWIFIEX_IE_TYPE_ARP_FILTER: 1412 memset(adapter->arp_filter, 0, sizeof(adapter->arp_filter)); 1413 if (gen_ie->len > ARP_FILTER_MAX_BUF_SIZE) { 1414 adapter->arp_filter_size = 0; 1415 mwifiex_dbg(adapter, ERROR, 1416 "invalid ARP filter size\n"); 1417 return -1; 1418 } else { 1419 memcpy(adapter->arp_filter, gen_ie->ie_data, 1420 gen_ie->len); 1421 adapter->arp_filter_size = gen_ie->len; 1422 } 1423 break; 1424 default: 1425 mwifiex_dbg(adapter, ERROR, "invalid IE type\n"); 1426 return -1; 1427 } 1428 return 0; 1429 } 1430 1431 /* 1432 * Sends IOCTL request to set a generic IE. 1433 * 1434 * This function allocates the IOCTL request buffer, fills it 1435 * with requisite parameters and calls the IOCTL handler. 1436 */ 1437 int 1438 mwifiex_set_gen_ie(struct mwifiex_private *priv, const u8 *ie, int ie_len) 1439 { 1440 struct mwifiex_ds_misc_gen_ie gen_ie; 1441 1442 if (ie_len > IEEE_MAX_IE_SIZE) 1443 return -EFAULT; 1444 1445 gen_ie.type = MWIFIEX_IE_TYPE_GEN_IE; 1446 gen_ie.len = ie_len; 1447 memcpy(gen_ie.ie_data, ie, ie_len); 1448 if (mwifiex_misc_ioctl_gen_ie(priv, &gen_ie, HostCmd_ACT_GEN_SET)) 1449 return -EFAULT; 1450 1451 return 0; 1452 } 1453