xref: /openbmc/linux/drivers/net/wireless/ti/wl1251/main.c (revision 96de2506)
1 /*
2  * This file is part of wl1251
3  *
4  * Copyright (C) 2008-2009 Nokia Corporation
5  *
6  * This program is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU General Public License
8  * version 2 as published by the Free Software Foundation.
9  *
10  * This program is distributed in the hope that it will be useful, but
11  * WITHOUT ANY WARRANTY; without even the implied warranty of
12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
13  * General Public License for more details.
14  *
15  * You should have received a copy of the GNU General Public License
16  * along with this program; if not, write to the Free Software
17  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
18  * 02110-1301 USA
19  *
20  */
21 
22 #include <linux/module.h>
23 #include <linux/interrupt.h>
24 #include <linux/firmware.h>
25 #include <linux/delay.h>
26 #include <linux/irq.h>
27 #include <linux/crc32.h>
28 #include <linux/etherdevice.h>
29 #include <linux/vmalloc.h>
30 #include <linux/slab.h>
31 #include <linux/netdevice.h>
32 
33 #include "wl1251.h"
34 #include "wl12xx_80211.h"
35 #include "reg.h"
36 #include "io.h"
37 #include "cmd.h"
38 #include "event.h"
39 #include "tx.h"
40 #include "rx.h"
41 #include "ps.h"
42 #include "init.h"
43 #include "debugfs.h"
44 #include "boot.h"
45 
46 void wl1251_enable_interrupts(struct wl1251 *wl)
47 {
48 	wl->if_ops->enable_irq(wl);
49 }
50 
51 void wl1251_disable_interrupts(struct wl1251 *wl)
52 {
53 	wl->if_ops->disable_irq(wl);
54 }
55 
56 static int wl1251_power_off(struct wl1251 *wl)
57 {
58 	return wl->if_ops->power(wl, false);
59 }
60 
61 static int wl1251_power_on(struct wl1251 *wl)
62 {
63 	return wl->if_ops->power(wl, true);
64 }
65 
66 static int wl1251_fetch_firmware(struct wl1251 *wl)
67 {
68 	const struct firmware *fw;
69 	struct device *dev = wiphy_dev(wl->hw->wiphy);
70 	int ret;
71 
72 	ret = request_firmware(&fw, WL1251_FW_NAME, dev);
73 
74 	if (ret < 0) {
75 		wl1251_error("could not get firmware: %d", ret);
76 		return ret;
77 	}
78 
79 	if (fw->size % 4) {
80 		wl1251_error("firmware size is not multiple of 32 bits: %zu",
81 			     fw->size);
82 		ret = -EILSEQ;
83 		goto out;
84 	}
85 
86 	wl->fw_len = fw->size;
87 	wl->fw = vmalloc(wl->fw_len);
88 
89 	if (!wl->fw) {
90 		wl1251_error("could not allocate memory for the firmware");
91 		ret = -ENOMEM;
92 		goto out;
93 	}
94 
95 	memcpy(wl->fw, fw->data, wl->fw_len);
96 
97 	ret = 0;
98 
99 out:
100 	release_firmware(fw);
101 
102 	return ret;
103 }
104 
105 static int wl1251_fetch_nvs(struct wl1251 *wl)
106 {
107 	const struct firmware *fw;
108 	struct device *dev = wiphy_dev(wl->hw->wiphy);
109 	int ret;
110 
111 	ret = request_firmware(&fw, WL1251_NVS_NAME, dev);
112 
113 	if (ret < 0) {
114 		wl1251_error("could not get nvs file: %d", ret);
115 		return ret;
116 	}
117 
118 	if (fw->size % 4) {
119 		wl1251_error("nvs size is not multiple of 32 bits: %zu",
120 			     fw->size);
121 		ret = -EILSEQ;
122 		goto out;
123 	}
124 
125 	wl->nvs = kmemdup(fw->data, fw->size, GFP_KERNEL);
126 
127 	if (!wl->nvs) {
128 		wl1251_error("could not allocate memory for the nvs file");
129 		ret = -ENOMEM;
130 		goto out;
131 	}
132 
133 	wl->nvs_len = fw->size;
134 
135 	ret = 0;
136 
137 out:
138 	release_firmware(fw);
139 
140 	return ret;
141 }
142 
143 static void wl1251_fw_wakeup(struct wl1251 *wl)
144 {
145 	u32 elp_reg;
146 
147 	elp_reg = ELPCTRL_WAKE_UP;
148 	wl1251_write_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR, elp_reg);
149 	elp_reg = wl1251_read_elp(wl, HW_ACCESS_ELP_CTRL_REG_ADDR);
150 
151 	if (!(elp_reg & ELPCTRL_WLAN_READY))
152 		wl1251_warning("WLAN not ready");
153 }
154 
155 static int wl1251_chip_wakeup(struct wl1251 *wl)
156 {
157 	int ret;
158 
159 	ret = wl1251_power_on(wl);
160 	if (ret < 0)
161 		return ret;
162 
163 	msleep(WL1251_POWER_ON_SLEEP);
164 	wl->if_ops->reset(wl);
165 
166 	/* We don't need a real memory partition here, because we only want
167 	 * to use the registers at this point. */
168 	wl1251_set_partition(wl,
169 			     0x00000000,
170 			     0x00000000,
171 			     REGISTERS_BASE,
172 			     REGISTERS_DOWN_SIZE);
173 
174 	/* ELP module wake up */
175 	wl1251_fw_wakeup(wl);
176 
177 	/* whal_FwCtrl_BootSm() */
178 
179 	/* 0. read chip id from CHIP_ID */
180 	wl->chip_id = wl1251_reg_read32(wl, CHIP_ID_B);
181 
182 	/* 1. check if chip id is valid */
183 
184 	switch (wl->chip_id) {
185 	case CHIP_ID_1251_PG12:
186 		wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG12)",
187 			     wl->chip_id);
188 		break;
189 	case CHIP_ID_1251_PG11:
190 		wl1251_debug(DEBUG_BOOT, "chip id 0x%x (1251 PG11)",
191 			     wl->chip_id);
192 		break;
193 	case CHIP_ID_1251_PG10:
194 	default:
195 		wl1251_error("unsupported chip id: 0x%x", wl->chip_id);
196 		ret = -ENODEV;
197 		goto out;
198 	}
199 
200 	if (wl->fw == NULL) {
201 		ret = wl1251_fetch_firmware(wl);
202 		if (ret < 0)
203 			goto out;
204 	}
205 
206 out:
207 	return ret;
208 }
209 
210 #define WL1251_IRQ_LOOP_COUNT 10
211 static void wl1251_irq_work(struct work_struct *work)
212 {
213 	u32 intr, ctr = WL1251_IRQ_LOOP_COUNT;
214 	struct wl1251 *wl =
215 		container_of(work, struct wl1251, irq_work);
216 	int ret;
217 
218 	mutex_lock(&wl->mutex);
219 
220 	wl1251_debug(DEBUG_IRQ, "IRQ work");
221 
222 	if (wl->state == WL1251_STATE_OFF)
223 		goto out;
224 
225 	ret = wl1251_ps_elp_wakeup(wl);
226 	if (ret < 0)
227 		goto out;
228 
229 	wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, WL1251_ACX_INTR_ALL);
230 
231 	intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
232 	wl1251_debug(DEBUG_IRQ, "intr: 0x%x", intr);
233 
234 	do {
235 		if (wl->data_path) {
236 			wl->rx_counter = wl1251_mem_read32(
237 				wl, wl->data_path->rx_control_addr);
238 
239 			/* We handle a frmware bug here */
240 			switch ((wl->rx_counter - wl->rx_handled) & 0xf) {
241 			case 0:
242 				wl1251_debug(DEBUG_IRQ,
243 					     "RX: FW and host in sync");
244 				intr &= ~WL1251_ACX_INTR_RX0_DATA;
245 				intr &= ~WL1251_ACX_INTR_RX1_DATA;
246 				break;
247 			case 1:
248 				wl1251_debug(DEBUG_IRQ, "RX: FW +1");
249 				intr |= WL1251_ACX_INTR_RX0_DATA;
250 				intr &= ~WL1251_ACX_INTR_RX1_DATA;
251 				break;
252 			case 2:
253 				wl1251_debug(DEBUG_IRQ, "RX: FW +2");
254 				intr |= WL1251_ACX_INTR_RX0_DATA;
255 				intr |= WL1251_ACX_INTR_RX1_DATA;
256 				break;
257 			default:
258 				wl1251_warning(
259 					"RX: FW and host out of sync: %d",
260 					wl->rx_counter - wl->rx_handled);
261 				break;
262 			}
263 
264 			wl->rx_handled = wl->rx_counter;
265 
266 			wl1251_debug(DEBUG_IRQ, "RX counter: %d",
267 				     wl->rx_counter);
268 		}
269 
270 		intr &= wl->intr_mask;
271 
272 		if (intr == 0) {
273 			wl1251_debug(DEBUG_IRQ, "INTR is 0");
274 			goto out_sleep;
275 		}
276 
277 		if (intr & WL1251_ACX_INTR_RX0_DATA) {
278 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX0_DATA");
279 			wl1251_rx(wl);
280 		}
281 
282 		if (intr & WL1251_ACX_INTR_RX1_DATA) {
283 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_RX1_DATA");
284 			wl1251_rx(wl);
285 		}
286 
287 		if (intr & WL1251_ACX_INTR_TX_RESULT) {
288 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_TX_RESULT");
289 			wl1251_tx_complete(wl);
290 		}
291 
292 		if (intr & WL1251_ACX_INTR_EVENT_A) {
293 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_A");
294 			wl1251_event_handle(wl, 0);
295 		}
296 
297 		if (intr & WL1251_ACX_INTR_EVENT_B) {
298 			wl1251_debug(DEBUG_IRQ, "WL1251_ACX_INTR_EVENT_B");
299 			wl1251_event_handle(wl, 1);
300 		}
301 
302 		if (intr & WL1251_ACX_INTR_INIT_COMPLETE)
303 			wl1251_debug(DEBUG_IRQ,
304 				     "WL1251_ACX_INTR_INIT_COMPLETE");
305 
306 		if (--ctr == 0)
307 			break;
308 
309 		intr = wl1251_reg_read32(wl, ACX_REG_INTERRUPT_CLEAR);
310 	} while (intr);
311 
312 out_sleep:
313 	wl1251_reg_write32(wl, ACX_REG_INTERRUPT_MASK, ~(wl->intr_mask));
314 	wl1251_ps_elp_sleep(wl);
315 
316 out:
317 	mutex_unlock(&wl->mutex);
318 }
319 
320 static int wl1251_join(struct wl1251 *wl, u8 bss_type, u8 channel,
321 		       u16 beacon_interval, u8 dtim_period)
322 {
323 	int ret;
324 
325 	ret = wl1251_acx_frame_rates(wl, DEFAULT_HW_GEN_TX_RATE,
326 				     DEFAULT_HW_GEN_MODULATION_TYPE,
327 				     wl->tx_mgmt_frm_rate,
328 				     wl->tx_mgmt_frm_mod);
329 	if (ret < 0)
330 		goto out;
331 
332 	/*
333 	 * Join command applies filters, and if we are not associated,
334 	 * BSSID filter must be disabled for association to work.
335 	 */
336 	if (is_zero_ether_addr(wl->bssid))
337 		wl->rx_config &= ~CFG_BSSID_FILTER_EN;
338 
339 	ret = wl1251_cmd_join(wl, bss_type, channel, beacon_interval,
340 			      dtim_period);
341 	if (ret < 0)
342 		goto out;
343 
344 	ret = wl1251_event_wait(wl, JOIN_EVENT_COMPLETE_ID, 100);
345 	if (ret < 0)
346 		wl1251_warning("join timeout");
347 
348 out:
349 	return ret;
350 }
351 
352 static void wl1251_op_tx(struct ieee80211_hw *hw,
353 			 struct ieee80211_tx_control *control,
354 			 struct sk_buff *skb)
355 {
356 	struct wl1251 *wl = hw->priv;
357 	unsigned long flags;
358 
359 	skb_queue_tail(&wl->tx_queue, skb);
360 
361 	/*
362 	 * The chip specific setup must run before the first TX packet -
363 	 * before that, the tx_work will not be initialized!
364 	 */
365 
366 	ieee80211_queue_work(wl->hw, &wl->tx_work);
367 
368 	/*
369 	 * The workqueue is slow to process the tx_queue and we need stop
370 	 * the queue here, otherwise the queue will get too long.
371 	 */
372 	if (skb_queue_len(&wl->tx_queue) >= WL1251_TX_QUEUE_HIGH_WATERMARK) {
373 		wl1251_debug(DEBUG_TX, "op_tx: tx_queue full, stop queues");
374 
375 		spin_lock_irqsave(&wl->wl_lock, flags);
376 		ieee80211_stop_queues(wl->hw);
377 		wl->tx_queue_stopped = true;
378 		spin_unlock_irqrestore(&wl->wl_lock, flags);
379 	}
380 }
381 
382 static int wl1251_op_start(struct ieee80211_hw *hw)
383 {
384 	struct wl1251 *wl = hw->priv;
385 	struct wiphy *wiphy = hw->wiphy;
386 	int ret = 0;
387 
388 	wl1251_debug(DEBUG_MAC80211, "mac80211 start");
389 
390 	mutex_lock(&wl->mutex);
391 
392 	if (wl->state != WL1251_STATE_OFF) {
393 		wl1251_error("cannot start because not in off state: %d",
394 			     wl->state);
395 		ret = -EBUSY;
396 		goto out;
397 	}
398 
399 	ret = wl1251_chip_wakeup(wl);
400 	if (ret < 0)
401 		goto out;
402 
403 	ret = wl1251_boot(wl);
404 	if (ret < 0)
405 		goto out;
406 
407 	ret = wl1251_hw_init(wl);
408 	if (ret < 0)
409 		goto out;
410 
411 	ret = wl1251_acx_station_id(wl);
412 	if (ret < 0)
413 		goto out;
414 
415 	wl->state = WL1251_STATE_ON;
416 
417 	wl1251_info("firmware booted (%s)", wl->fw_ver);
418 
419 	/* update hw/fw version info in wiphy struct */
420 	wiphy->hw_version = wl->chip_id;
421 	strncpy(wiphy->fw_version, wl->fw_ver, sizeof(wiphy->fw_version));
422 
423 out:
424 	if (ret < 0)
425 		wl1251_power_off(wl);
426 
427 	mutex_unlock(&wl->mutex);
428 
429 	return ret;
430 }
431 
432 static void wl1251_op_stop(struct ieee80211_hw *hw)
433 {
434 	struct wl1251 *wl = hw->priv;
435 
436 	wl1251_info("down");
437 
438 	wl1251_debug(DEBUG_MAC80211, "mac80211 stop");
439 
440 	mutex_lock(&wl->mutex);
441 
442 	WARN_ON(wl->state != WL1251_STATE_ON);
443 
444 	if (wl->scanning) {
445 		struct cfg80211_scan_info info = {
446 			.aborted = true,
447 		};
448 
449 		ieee80211_scan_completed(wl->hw, &info);
450 		wl->scanning = false;
451 	}
452 
453 	wl->state = WL1251_STATE_OFF;
454 
455 	wl1251_disable_interrupts(wl);
456 
457 	mutex_unlock(&wl->mutex);
458 
459 	cancel_work_sync(&wl->irq_work);
460 	cancel_work_sync(&wl->tx_work);
461 	cancel_delayed_work_sync(&wl->elp_work);
462 
463 	mutex_lock(&wl->mutex);
464 
465 	/* let's notify MAC80211 about the remaining pending TX frames */
466 	wl1251_tx_flush(wl);
467 	wl1251_power_off(wl);
468 
469 	eth_zero_addr(wl->bssid);
470 	wl->listen_int = 1;
471 	wl->bss_type = MAX_BSS_TYPE;
472 
473 	wl->data_in_count = 0;
474 	wl->rx_counter = 0;
475 	wl->rx_handled = 0;
476 	wl->rx_current_buffer = 0;
477 	wl->rx_last_id = 0;
478 	wl->next_tx_complete = 0;
479 	wl->elp = false;
480 	wl->station_mode = STATION_ACTIVE_MODE;
481 	wl->psm_entry_retry = 0;
482 	wl->tx_queue_stopped = false;
483 	wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
484 	wl->rssi_thold = 0;
485 	wl->channel = WL1251_DEFAULT_CHANNEL;
486 	wl->monitor_present = false;
487 	wl->joined = false;
488 
489 	wl1251_debugfs_reset(wl);
490 
491 	mutex_unlock(&wl->mutex);
492 }
493 
494 static int wl1251_op_add_interface(struct ieee80211_hw *hw,
495 				   struct ieee80211_vif *vif)
496 {
497 	struct wl1251 *wl = hw->priv;
498 	int ret = 0;
499 
500 	vif->driver_flags |= IEEE80211_VIF_BEACON_FILTER |
501 			     IEEE80211_VIF_SUPPORTS_UAPSD |
502 			     IEEE80211_VIF_SUPPORTS_CQM_RSSI;
503 
504 	wl1251_debug(DEBUG_MAC80211, "mac80211 add interface type %d mac %pM",
505 		     vif->type, vif->addr);
506 
507 	mutex_lock(&wl->mutex);
508 	if (wl->vif) {
509 		ret = -EBUSY;
510 		goto out;
511 	}
512 
513 	wl->vif = vif;
514 
515 	switch (vif->type) {
516 	case NL80211_IFTYPE_STATION:
517 		wl->bss_type = BSS_TYPE_STA_BSS;
518 		break;
519 	case NL80211_IFTYPE_ADHOC:
520 		wl->bss_type = BSS_TYPE_IBSS;
521 		break;
522 	default:
523 		ret = -EOPNOTSUPP;
524 		goto out;
525 	}
526 
527 	if (!ether_addr_equal_unaligned(wl->mac_addr, vif->addr)) {
528 		memcpy(wl->mac_addr, vif->addr, ETH_ALEN);
529 		SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
530 		ret = wl1251_acx_station_id(wl);
531 		if (ret < 0)
532 			goto out;
533 	}
534 
535 out:
536 	mutex_unlock(&wl->mutex);
537 	return ret;
538 }
539 
540 static void wl1251_op_remove_interface(struct ieee80211_hw *hw,
541 					 struct ieee80211_vif *vif)
542 {
543 	struct wl1251 *wl = hw->priv;
544 
545 	mutex_lock(&wl->mutex);
546 	wl1251_debug(DEBUG_MAC80211, "mac80211 remove interface");
547 	wl->vif = NULL;
548 	eth_zero_addr(wl->bssid);
549 	mutex_unlock(&wl->mutex);
550 }
551 
552 static int wl1251_build_null_data(struct wl1251 *wl)
553 {
554 	struct sk_buff *skb = NULL;
555 	int size;
556 	void *ptr;
557 	int ret = -ENOMEM;
558 
559 	if (wl->bss_type == BSS_TYPE_IBSS) {
560 		size = sizeof(struct wl12xx_null_data_template);
561 		ptr = NULL;
562 	} else {
563 		skb = ieee80211_nullfunc_get(wl->hw, wl->vif, false);
564 		if (!skb)
565 			goto out;
566 		size = skb->len;
567 		ptr = skb->data;
568 	}
569 
570 	ret = wl1251_cmd_template_set(wl, CMD_NULL_DATA, ptr, size);
571 
572 out:
573 	dev_kfree_skb(skb);
574 	if (ret)
575 		wl1251_warning("cmd buld null data failed: %d", ret);
576 
577 	return ret;
578 }
579 
580 static int wl1251_build_qos_null_data(struct wl1251 *wl)
581 {
582 	struct ieee80211_qos_hdr template;
583 
584 	memset(&template, 0, sizeof(template));
585 
586 	memcpy(template.addr1, wl->bssid, ETH_ALEN);
587 	memcpy(template.addr2, wl->mac_addr, ETH_ALEN);
588 	memcpy(template.addr3, wl->bssid, ETH_ALEN);
589 
590 	template.frame_control = cpu_to_le16(IEEE80211_FTYPE_DATA |
591 					     IEEE80211_STYPE_QOS_NULLFUNC |
592 					     IEEE80211_FCTL_TODS);
593 
594 	/* FIXME: not sure what priority to use here */
595 	template.qos_ctrl = cpu_to_le16(0);
596 
597 	return wl1251_cmd_template_set(wl, CMD_QOS_NULL_DATA, &template,
598 				       sizeof(template));
599 }
600 
601 static bool wl1251_can_do_pm(struct ieee80211_conf *conf, struct wl1251 *wl)
602 {
603 	return (conf->flags & IEEE80211_CONF_PS) && !wl->monitor_present;
604 }
605 
606 static int wl1251_op_config(struct ieee80211_hw *hw, u32 changed)
607 {
608 	struct wl1251 *wl = hw->priv;
609 	struct ieee80211_conf *conf = &hw->conf;
610 	int channel, ret = 0;
611 
612 	channel = ieee80211_frequency_to_channel(
613 			conf->chandef.chan->center_freq);
614 
615 	wl1251_debug(DEBUG_MAC80211,
616 		     "mac80211 config ch %d monitor %s psm %s power %d",
617 		     channel,
618 		     conf->flags & IEEE80211_CONF_MONITOR ? "on" : "off",
619 		     conf->flags & IEEE80211_CONF_PS ? "on" : "off",
620 		     conf->power_level);
621 
622 	mutex_lock(&wl->mutex);
623 
624 	ret = wl1251_ps_elp_wakeup(wl);
625 	if (ret < 0)
626 		goto out;
627 
628 	if (changed & IEEE80211_CONF_CHANGE_MONITOR) {
629 		u32 mode;
630 
631 		if (conf->flags & IEEE80211_CONF_MONITOR) {
632 			wl->monitor_present = true;
633 			mode = DF_SNIFF_MODE_ENABLE | DF_ENCRYPTION_DISABLE;
634 		} else {
635 			wl->monitor_present = false;
636 			mode = 0;
637 		}
638 
639 		ret = wl1251_acx_feature_cfg(wl, mode);
640 		if (ret < 0)
641 			goto out_sleep;
642 	}
643 
644 	if (channel != wl->channel) {
645 		wl->channel = channel;
646 
647 		/*
648 		 * Use ENABLE_RX command for channel switching when no
649 		 * interface is present (monitor mode only).
650 		 * This leaves the tx path disabled in firmware, whereas
651 		 * the usual JOIN command seems to transmit some frames
652 		 * at firmware level.
653 		 */
654 		if (wl->vif == NULL) {
655 			wl->joined = false;
656 			ret = wl1251_cmd_data_path_rx(wl, wl->channel, 1);
657 		} else {
658 			ret = wl1251_join(wl, wl->bss_type, wl->channel,
659 					  wl->beacon_int, wl->dtim_period);
660 		}
661 		if (ret < 0)
662 			goto out_sleep;
663 	}
664 
665 	if (wl1251_can_do_pm(conf, wl) && !wl->psm_requested) {
666 		wl1251_debug(DEBUG_PSM, "psm enabled");
667 
668 		wl->psm_requested = true;
669 
670 		wl->dtim_period = conf->ps_dtim_period;
671 
672 		ret = wl1251_acx_wr_tbtt_and_dtim(wl, wl->beacon_int,
673 						  wl->dtim_period);
674 
675 		/*
676 		 * mac80211 enables PSM only if we're already associated.
677 		 */
678 		ret = wl1251_ps_set_mode(wl, STATION_POWER_SAVE_MODE);
679 		if (ret < 0)
680 			goto out_sleep;
681 	} else if (!wl1251_can_do_pm(conf, wl) && wl->psm_requested) {
682 		wl1251_debug(DEBUG_PSM, "psm disabled");
683 
684 		wl->psm_requested = false;
685 
686 		if (wl->station_mode != STATION_ACTIVE_MODE) {
687 			ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
688 			if (ret < 0)
689 				goto out_sleep;
690 		}
691 	}
692 
693 	if (changed & IEEE80211_CONF_CHANGE_IDLE && !wl->scanning) {
694 		if (conf->flags & IEEE80211_CONF_IDLE) {
695 			ret = wl1251_ps_set_mode(wl, STATION_IDLE);
696 			if (ret < 0)
697 				goto out_sleep;
698 		} else {
699 			ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
700 			if (ret < 0)
701 				goto out_sleep;
702 			ret = wl1251_join(wl, wl->bss_type, wl->channel,
703 					  wl->beacon_int, wl->dtim_period);
704 			if (ret < 0)
705 				goto out_sleep;
706 		}
707 	}
708 
709 	if (conf->power_level != wl->power_level) {
710 		ret = wl1251_acx_tx_power(wl, conf->power_level);
711 		if (ret < 0)
712 			goto out_sleep;
713 
714 		wl->power_level = conf->power_level;
715 	}
716 
717 out_sleep:
718 	wl1251_ps_elp_sleep(wl);
719 
720 out:
721 	mutex_unlock(&wl->mutex);
722 
723 	return ret;
724 }
725 
726 struct wl1251_filter_params {
727 	bool enabled;
728 	int mc_list_length;
729 	u8 mc_list[ACX_MC_ADDRESS_GROUP_MAX][ETH_ALEN];
730 };
731 
732 static u64 wl1251_op_prepare_multicast(struct ieee80211_hw *hw,
733 				       struct netdev_hw_addr_list *mc_list)
734 {
735 	struct wl1251_filter_params *fp;
736 	struct netdev_hw_addr *ha;
737 	struct wl1251 *wl = hw->priv;
738 
739 	if (unlikely(wl->state == WL1251_STATE_OFF))
740 		return 0;
741 
742 	fp = kzalloc(sizeof(*fp), GFP_ATOMIC);
743 	if (!fp) {
744 		wl1251_error("Out of memory setting filters.");
745 		return 0;
746 	}
747 
748 	/* update multicast filtering parameters */
749 	fp->mc_list_length = 0;
750 	if (netdev_hw_addr_list_count(mc_list) > ACX_MC_ADDRESS_GROUP_MAX) {
751 		fp->enabled = false;
752 	} else {
753 		fp->enabled = true;
754 		netdev_hw_addr_list_for_each(ha, mc_list) {
755 			memcpy(fp->mc_list[fp->mc_list_length],
756 					ha->addr, ETH_ALEN);
757 			fp->mc_list_length++;
758 		}
759 	}
760 
761 	return (u64)(unsigned long)fp;
762 }
763 
764 #define WL1251_SUPPORTED_FILTERS (FIF_ALLMULTI | \
765 				  FIF_FCSFAIL | \
766 				  FIF_BCN_PRBRESP_PROMISC | \
767 				  FIF_CONTROL | \
768 				  FIF_OTHER_BSS | \
769 				  FIF_PROBE_REQ)
770 
771 static void wl1251_op_configure_filter(struct ieee80211_hw *hw,
772 				       unsigned int changed,
773 				       unsigned int *total, u64 multicast)
774 {
775 	struct wl1251_filter_params *fp = (void *)(unsigned long)multicast;
776 	struct wl1251 *wl = hw->priv;
777 	int ret;
778 
779 	wl1251_debug(DEBUG_MAC80211, "mac80211 configure filter");
780 
781 	*total &= WL1251_SUPPORTED_FILTERS;
782 	changed &= WL1251_SUPPORTED_FILTERS;
783 
784 	if (changed == 0) {
785 		/* no filters which we support changed */
786 		kfree(fp);
787 		return;
788 	}
789 
790 	mutex_lock(&wl->mutex);
791 
792 	wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
793 	wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
794 
795 	if (*total & FIF_ALLMULTI)
796 		/*
797 		 * CFG_MC_FILTER_EN in rx_config needs to be 0 to receive
798 		 * all multicast frames
799 		 */
800 		wl->rx_config &= ~CFG_MC_FILTER_EN;
801 	if (*total & FIF_FCSFAIL)
802 		wl->rx_filter |= CFG_RX_FCS_ERROR;
803 	if (*total & FIF_BCN_PRBRESP_PROMISC) {
804 		wl->rx_config &= ~CFG_BSSID_FILTER_EN;
805 		wl->rx_config &= ~CFG_SSID_FILTER_EN;
806 	}
807 	if (*total & FIF_CONTROL)
808 		wl->rx_filter |= CFG_RX_CTL_EN;
809 	if (*total & FIF_OTHER_BSS || is_zero_ether_addr(wl->bssid))
810 		wl->rx_config &= ~CFG_BSSID_FILTER_EN;
811 	if (*total & FIF_PROBE_REQ)
812 		wl->rx_filter |= CFG_RX_PREQ_EN;
813 
814 	if (wl->state == WL1251_STATE_OFF)
815 		goto out;
816 
817 	ret = wl1251_ps_elp_wakeup(wl);
818 	if (ret < 0)
819 		goto out;
820 
821 	if (*total & FIF_ALLMULTI)
822 		ret = wl1251_acx_group_address_tbl(wl, false, NULL, 0);
823 	else if (fp)
824 		ret = wl1251_acx_group_address_tbl(wl, fp->enabled,
825 						   fp->mc_list,
826 						   fp->mc_list_length);
827 	if (ret < 0)
828 		goto out;
829 
830 	/* send filters to firmware */
831 	wl1251_acx_rx_config(wl, wl->rx_config, wl->rx_filter);
832 
833 	wl1251_ps_elp_sleep(wl);
834 
835 out:
836 	mutex_unlock(&wl->mutex);
837 	kfree(fp);
838 }
839 
840 /* HW encryption */
841 static int wl1251_set_key_type(struct wl1251 *wl,
842 			       struct wl1251_cmd_set_keys *key,
843 			       enum set_key_cmd cmd,
844 			       struct ieee80211_key_conf *mac80211_key,
845 			       const u8 *addr)
846 {
847 	switch (mac80211_key->cipher) {
848 	case WLAN_CIPHER_SUITE_WEP40:
849 	case WLAN_CIPHER_SUITE_WEP104:
850 		if (is_broadcast_ether_addr(addr))
851 			key->key_type = KEY_WEP_DEFAULT;
852 		else
853 			key->key_type = KEY_WEP_ADDR;
854 
855 		mac80211_key->hw_key_idx = mac80211_key->keyidx;
856 		break;
857 	case WLAN_CIPHER_SUITE_TKIP:
858 		if (is_broadcast_ether_addr(addr))
859 			key->key_type = KEY_TKIP_MIC_GROUP;
860 		else
861 			key->key_type = KEY_TKIP_MIC_PAIRWISE;
862 
863 		mac80211_key->hw_key_idx = mac80211_key->keyidx;
864 		break;
865 	case WLAN_CIPHER_SUITE_CCMP:
866 		if (is_broadcast_ether_addr(addr))
867 			key->key_type = KEY_AES_GROUP;
868 		else
869 			key->key_type = KEY_AES_PAIRWISE;
870 		mac80211_key->flags |= IEEE80211_KEY_FLAG_GENERATE_IV;
871 		break;
872 	default:
873 		wl1251_error("Unknown key cipher 0x%x", mac80211_key->cipher);
874 		return -EOPNOTSUPP;
875 	}
876 
877 	return 0;
878 }
879 
880 static int wl1251_op_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
881 			     struct ieee80211_vif *vif,
882 			     struct ieee80211_sta *sta,
883 			     struct ieee80211_key_conf *key)
884 {
885 	struct wl1251 *wl = hw->priv;
886 	struct wl1251_cmd_set_keys *wl_cmd;
887 	const u8 *addr;
888 	int ret;
889 
890 	static const u8 bcast_addr[ETH_ALEN] =
891 		{ 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };
892 
893 	wl1251_debug(DEBUG_MAC80211, "mac80211 set key");
894 
895 	wl_cmd = kzalloc(sizeof(*wl_cmd), GFP_KERNEL);
896 	if (!wl_cmd) {
897 		ret = -ENOMEM;
898 		goto out;
899 	}
900 
901 	addr = sta ? sta->addr : bcast_addr;
902 
903 	wl1251_debug(DEBUG_CRYPT, "CMD: 0x%x", cmd);
904 	wl1251_dump(DEBUG_CRYPT, "ADDR: ", addr, ETH_ALEN);
905 	wl1251_debug(DEBUG_CRYPT, "Key: algo:0x%x, id:%d, len:%d flags 0x%x",
906 		     key->cipher, key->keyidx, key->keylen, key->flags);
907 	wl1251_dump(DEBUG_CRYPT, "KEY: ", key->key, key->keylen);
908 
909 	if (is_zero_ether_addr(addr)) {
910 		/* We dont support TX only encryption */
911 		ret = -EOPNOTSUPP;
912 		goto out;
913 	}
914 
915 	mutex_lock(&wl->mutex);
916 
917 	switch (cmd) {
918 	case SET_KEY:
919 		if (wl->monitor_present) {
920 			ret = -EOPNOTSUPP;
921 			goto out_unlock;
922 		}
923 		wl_cmd->key_action = KEY_ADD_OR_REPLACE;
924 		break;
925 	case DISABLE_KEY:
926 		wl_cmd->key_action = KEY_REMOVE;
927 		break;
928 	default:
929 		wl1251_error("Unsupported key cmd 0x%x", cmd);
930 		break;
931 	}
932 
933 	ret = wl1251_ps_elp_wakeup(wl);
934 	if (ret < 0)
935 		goto out_unlock;
936 
937 	ret = wl1251_set_key_type(wl, wl_cmd, cmd, key, addr);
938 	if (ret < 0) {
939 		wl1251_error("Set KEY type failed");
940 		goto out_sleep;
941 	}
942 
943 	if (wl_cmd->key_type != KEY_WEP_DEFAULT)
944 		memcpy(wl_cmd->addr, addr, ETH_ALEN);
945 
946 	if ((wl_cmd->key_type == KEY_TKIP_MIC_GROUP) ||
947 	    (wl_cmd->key_type == KEY_TKIP_MIC_PAIRWISE)) {
948 		/*
949 		 * We get the key in the following form:
950 		 * TKIP (16 bytes) - TX MIC (8 bytes) - RX MIC (8 bytes)
951 		 * but the target is expecting:
952 		 * TKIP - RX MIC - TX MIC
953 		 */
954 		memcpy(wl_cmd->key, key->key, 16);
955 		memcpy(wl_cmd->key + 16, key->key + 24, 8);
956 		memcpy(wl_cmd->key + 24, key->key + 16, 8);
957 
958 	} else {
959 		memcpy(wl_cmd->key, key->key, key->keylen);
960 	}
961 	wl_cmd->key_size = key->keylen;
962 
963 	wl_cmd->id = key->keyidx;
964 	wl_cmd->ssid_profile = 0;
965 
966 	wl1251_dump(DEBUG_CRYPT, "TARGET KEY: ", wl_cmd, sizeof(*wl_cmd));
967 
968 	ret = wl1251_cmd_send(wl, CMD_SET_KEYS, wl_cmd, sizeof(*wl_cmd));
969 	if (ret < 0) {
970 		wl1251_warning("could not set keys");
971 		goto out_sleep;
972 	}
973 
974 out_sleep:
975 	wl1251_ps_elp_sleep(wl);
976 
977 out_unlock:
978 	mutex_unlock(&wl->mutex);
979 
980 out:
981 	kfree(wl_cmd);
982 
983 	return ret;
984 }
985 
986 static int wl1251_op_hw_scan(struct ieee80211_hw *hw,
987 			     struct ieee80211_vif *vif,
988 			     struct ieee80211_scan_request *hw_req)
989 {
990 	struct cfg80211_scan_request *req = &hw_req->req;
991 	struct wl1251 *wl = hw->priv;
992 	struct sk_buff *skb;
993 	size_t ssid_len = 0;
994 	u8 *ssid = NULL;
995 	int ret;
996 
997 	wl1251_debug(DEBUG_MAC80211, "mac80211 hw scan");
998 
999 	if (req->n_ssids) {
1000 		ssid = req->ssids[0].ssid;
1001 		ssid_len = req->ssids[0].ssid_len;
1002 	}
1003 
1004 	mutex_lock(&wl->mutex);
1005 
1006 	if (wl->scanning) {
1007 		wl1251_debug(DEBUG_SCAN, "scan already in progress");
1008 		ret = -EINVAL;
1009 		goto out;
1010 	}
1011 
1012 	ret = wl1251_ps_elp_wakeup(wl);
1013 	if (ret < 0)
1014 		goto out;
1015 
1016 	if (hw->conf.flags & IEEE80211_CONF_IDLE) {
1017 		ret = wl1251_ps_set_mode(wl, STATION_ACTIVE_MODE);
1018 		if (ret < 0)
1019 			goto out_sleep;
1020 		ret = wl1251_join(wl, wl->bss_type, wl->channel,
1021 				  wl->beacon_int, wl->dtim_period);
1022 		if (ret < 0)
1023 			goto out_sleep;
1024 	}
1025 
1026 	skb = ieee80211_probereq_get(wl->hw, wl->vif->addr, ssid, ssid_len,
1027 				     req->ie_len);
1028 	if (!skb) {
1029 		ret = -ENOMEM;
1030 		goto out_idle;
1031 	}
1032 	if (req->ie_len)
1033 		skb_put_data(skb, req->ie, req->ie_len);
1034 
1035 	ret = wl1251_cmd_template_set(wl, CMD_PROBE_REQ, skb->data,
1036 				      skb->len);
1037 	dev_kfree_skb(skb);
1038 	if (ret < 0)
1039 		goto out_idle;
1040 
1041 	ret = wl1251_cmd_trigger_scan_to(wl, 0);
1042 	if (ret < 0)
1043 		goto out_idle;
1044 
1045 	wl->scanning = true;
1046 
1047 	ret = wl1251_cmd_scan(wl, ssid, ssid_len, req->channels,
1048 			      req->n_channels, WL1251_SCAN_NUM_PROBES);
1049 	if (ret < 0) {
1050 		wl1251_debug(DEBUG_SCAN, "scan failed %d", ret);
1051 		wl->scanning = false;
1052 		goto out_idle;
1053 	}
1054 	goto out_sleep;
1055 
1056 out_idle:
1057 	if (hw->conf.flags & IEEE80211_CONF_IDLE)
1058 		ret = wl1251_ps_set_mode(wl, STATION_IDLE);
1059 out_sleep:
1060 	wl1251_ps_elp_sleep(wl);
1061 
1062 out:
1063 	mutex_unlock(&wl->mutex);
1064 
1065 	return ret;
1066 }
1067 
1068 static int wl1251_op_set_rts_threshold(struct ieee80211_hw *hw, u32 value)
1069 {
1070 	struct wl1251 *wl = hw->priv;
1071 	int ret;
1072 
1073 	mutex_lock(&wl->mutex);
1074 
1075 	ret = wl1251_ps_elp_wakeup(wl);
1076 	if (ret < 0)
1077 		goto out;
1078 
1079 	ret = wl1251_acx_rts_threshold(wl, (u16) value);
1080 	if (ret < 0)
1081 		wl1251_warning("wl1251_op_set_rts_threshold failed: %d", ret);
1082 
1083 	wl1251_ps_elp_sleep(wl);
1084 
1085 out:
1086 	mutex_unlock(&wl->mutex);
1087 
1088 	return ret;
1089 }
1090 
1091 static void wl1251_op_bss_info_changed(struct ieee80211_hw *hw,
1092 				       struct ieee80211_vif *vif,
1093 				       struct ieee80211_bss_conf *bss_conf,
1094 				       u32 changed)
1095 {
1096 	struct wl1251 *wl = hw->priv;
1097 	struct sk_buff *beacon, *skb;
1098 	bool enable;
1099 	int ret;
1100 
1101 	wl1251_debug(DEBUG_MAC80211, "mac80211 bss info changed");
1102 
1103 	mutex_lock(&wl->mutex);
1104 
1105 	ret = wl1251_ps_elp_wakeup(wl);
1106 	if (ret < 0)
1107 		goto out;
1108 
1109 	if (changed & BSS_CHANGED_CQM) {
1110 		ret = wl1251_acx_low_rssi(wl, bss_conf->cqm_rssi_thold,
1111 					  WL1251_DEFAULT_LOW_RSSI_WEIGHT,
1112 					  WL1251_DEFAULT_LOW_RSSI_DEPTH,
1113 					  WL1251_ACX_LOW_RSSI_TYPE_EDGE);
1114 		if (ret < 0)
1115 			goto out;
1116 		wl->rssi_thold = bss_conf->cqm_rssi_thold;
1117 	}
1118 
1119 	if ((changed & BSS_CHANGED_BSSID) &&
1120 	    memcmp(wl->bssid, bss_conf->bssid, ETH_ALEN)) {
1121 		memcpy(wl->bssid, bss_conf->bssid, ETH_ALEN);
1122 
1123 		if (!is_zero_ether_addr(wl->bssid)) {
1124 			ret = wl1251_build_null_data(wl);
1125 			if (ret < 0)
1126 				goto out_sleep;
1127 
1128 			ret = wl1251_build_qos_null_data(wl);
1129 			if (ret < 0)
1130 				goto out_sleep;
1131 
1132 			ret = wl1251_join(wl, wl->bss_type, wl->channel,
1133 					  wl->beacon_int, wl->dtim_period);
1134 			if (ret < 0)
1135 				goto out_sleep;
1136 		}
1137 	}
1138 
1139 	if (changed & BSS_CHANGED_ASSOC) {
1140 		if (bss_conf->assoc) {
1141 			wl->beacon_int = bss_conf->beacon_int;
1142 
1143 			skb = ieee80211_pspoll_get(wl->hw, wl->vif);
1144 			if (!skb)
1145 				goto out_sleep;
1146 
1147 			ret = wl1251_cmd_template_set(wl, CMD_PS_POLL,
1148 						      skb->data,
1149 						      skb->len);
1150 			dev_kfree_skb(skb);
1151 			if (ret < 0)
1152 				goto out_sleep;
1153 
1154 			ret = wl1251_acx_aid(wl, bss_conf->aid);
1155 			if (ret < 0)
1156 				goto out_sleep;
1157 		} else {
1158 			/* use defaults when not associated */
1159 			wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1160 			wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1161 		}
1162 	}
1163 	if (changed & BSS_CHANGED_ERP_SLOT) {
1164 		if (bss_conf->use_short_slot)
1165 			ret = wl1251_acx_slot(wl, SLOT_TIME_SHORT);
1166 		else
1167 			ret = wl1251_acx_slot(wl, SLOT_TIME_LONG);
1168 		if (ret < 0) {
1169 			wl1251_warning("Set slot time failed %d", ret);
1170 			goto out_sleep;
1171 		}
1172 	}
1173 
1174 	if (changed & BSS_CHANGED_ERP_PREAMBLE) {
1175 		if (bss_conf->use_short_preamble)
1176 			wl1251_acx_set_preamble(wl, ACX_PREAMBLE_SHORT);
1177 		else
1178 			wl1251_acx_set_preamble(wl, ACX_PREAMBLE_LONG);
1179 	}
1180 
1181 	if (changed & BSS_CHANGED_ERP_CTS_PROT) {
1182 		if (bss_conf->use_cts_prot)
1183 			ret = wl1251_acx_cts_protect(wl, CTSPROTECT_ENABLE);
1184 		else
1185 			ret = wl1251_acx_cts_protect(wl, CTSPROTECT_DISABLE);
1186 		if (ret < 0) {
1187 			wl1251_warning("Set ctsprotect failed %d", ret);
1188 			goto out_sleep;
1189 		}
1190 	}
1191 
1192 	if (changed & BSS_CHANGED_ARP_FILTER) {
1193 		__be32 addr = bss_conf->arp_addr_list[0];
1194 		WARN_ON(wl->bss_type != BSS_TYPE_STA_BSS);
1195 
1196 		enable = bss_conf->arp_addr_cnt == 1 && bss_conf->assoc;
1197 		ret = wl1251_acx_arp_ip_filter(wl, enable, addr);
1198 		if (ret < 0)
1199 			goto out_sleep;
1200 	}
1201 
1202 	if (changed & BSS_CHANGED_BEACON) {
1203 		beacon = ieee80211_beacon_get(hw, vif);
1204 		if (!beacon)
1205 			goto out_sleep;
1206 
1207 		ret = wl1251_cmd_template_set(wl, CMD_BEACON, beacon->data,
1208 					      beacon->len);
1209 
1210 		if (ret < 0) {
1211 			dev_kfree_skb(beacon);
1212 			goto out_sleep;
1213 		}
1214 
1215 		ret = wl1251_cmd_template_set(wl, CMD_PROBE_RESP, beacon->data,
1216 					      beacon->len);
1217 
1218 		dev_kfree_skb(beacon);
1219 
1220 		if (ret < 0)
1221 			goto out_sleep;
1222 
1223 		ret = wl1251_join(wl, wl->bss_type, wl->channel,
1224 				  wl->beacon_int, wl->dtim_period);
1225 
1226 		if (ret < 0)
1227 			goto out_sleep;
1228 	}
1229 
1230 out_sleep:
1231 	wl1251_ps_elp_sleep(wl);
1232 
1233 out:
1234 	mutex_unlock(&wl->mutex);
1235 }
1236 
1237 
1238 /* can't be const, mac80211 writes to this */
1239 static struct ieee80211_rate wl1251_rates[] = {
1240 	{ .bitrate = 10,
1241 	  .hw_value = 0x1,
1242 	  .hw_value_short = 0x1, },
1243 	{ .bitrate = 20,
1244 	  .hw_value = 0x2,
1245 	  .hw_value_short = 0x2,
1246 	  .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1247 	{ .bitrate = 55,
1248 	  .hw_value = 0x4,
1249 	  .hw_value_short = 0x4,
1250 	  .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1251 	{ .bitrate = 110,
1252 	  .hw_value = 0x20,
1253 	  .hw_value_short = 0x20,
1254 	  .flags = IEEE80211_RATE_SHORT_PREAMBLE },
1255 	{ .bitrate = 60,
1256 	  .hw_value = 0x8,
1257 	  .hw_value_short = 0x8, },
1258 	{ .bitrate = 90,
1259 	  .hw_value = 0x10,
1260 	  .hw_value_short = 0x10, },
1261 	{ .bitrate = 120,
1262 	  .hw_value = 0x40,
1263 	  .hw_value_short = 0x40, },
1264 	{ .bitrate = 180,
1265 	  .hw_value = 0x80,
1266 	  .hw_value_short = 0x80, },
1267 	{ .bitrate = 240,
1268 	  .hw_value = 0x200,
1269 	  .hw_value_short = 0x200, },
1270 	{ .bitrate = 360,
1271 	 .hw_value = 0x400,
1272 	 .hw_value_short = 0x400, },
1273 	{ .bitrate = 480,
1274 	  .hw_value = 0x800,
1275 	  .hw_value_short = 0x800, },
1276 	{ .bitrate = 540,
1277 	  .hw_value = 0x1000,
1278 	  .hw_value_short = 0x1000, },
1279 };
1280 
1281 /* can't be const, mac80211 writes to this */
1282 static struct ieee80211_channel wl1251_channels[] = {
1283 	{ .hw_value = 1, .center_freq = 2412},
1284 	{ .hw_value = 2, .center_freq = 2417},
1285 	{ .hw_value = 3, .center_freq = 2422},
1286 	{ .hw_value = 4, .center_freq = 2427},
1287 	{ .hw_value = 5, .center_freq = 2432},
1288 	{ .hw_value = 6, .center_freq = 2437},
1289 	{ .hw_value = 7, .center_freq = 2442},
1290 	{ .hw_value = 8, .center_freq = 2447},
1291 	{ .hw_value = 9, .center_freq = 2452},
1292 	{ .hw_value = 10, .center_freq = 2457},
1293 	{ .hw_value = 11, .center_freq = 2462},
1294 	{ .hw_value = 12, .center_freq = 2467},
1295 	{ .hw_value = 13, .center_freq = 2472},
1296 };
1297 
1298 static int wl1251_op_conf_tx(struct ieee80211_hw *hw,
1299 			     struct ieee80211_vif *vif, u16 queue,
1300 			     const struct ieee80211_tx_queue_params *params)
1301 {
1302 	enum wl1251_acx_ps_scheme ps_scheme;
1303 	struct wl1251 *wl = hw->priv;
1304 	int ret;
1305 
1306 	mutex_lock(&wl->mutex);
1307 
1308 	wl1251_debug(DEBUG_MAC80211, "mac80211 conf tx %d", queue);
1309 
1310 	ret = wl1251_ps_elp_wakeup(wl);
1311 	if (ret < 0)
1312 		goto out;
1313 
1314 	/* mac80211 uses units of 32 usec */
1315 	ret = wl1251_acx_ac_cfg(wl, wl1251_tx_get_queue(queue),
1316 				params->cw_min, params->cw_max,
1317 				params->aifs, params->txop * 32);
1318 	if (ret < 0)
1319 		goto out_sleep;
1320 
1321 	if (params->uapsd)
1322 		ps_scheme = WL1251_ACX_PS_SCHEME_UPSD_TRIGGER;
1323 	else
1324 		ps_scheme = WL1251_ACX_PS_SCHEME_LEGACY;
1325 
1326 	ret = wl1251_acx_tid_cfg(wl, wl1251_tx_get_queue(queue),
1327 				 CHANNEL_TYPE_EDCF,
1328 				 wl1251_tx_get_queue(queue), ps_scheme,
1329 				 WL1251_ACX_ACK_POLICY_LEGACY);
1330 	if (ret < 0)
1331 		goto out_sleep;
1332 
1333 out_sleep:
1334 	wl1251_ps_elp_sleep(wl);
1335 
1336 out:
1337 	mutex_unlock(&wl->mutex);
1338 
1339 	return ret;
1340 }
1341 
1342 static int wl1251_op_get_survey(struct ieee80211_hw *hw, int idx,
1343 				struct survey_info *survey)
1344 {
1345 	struct wl1251 *wl = hw->priv;
1346 	struct ieee80211_conf *conf = &hw->conf;
1347 
1348 	if (idx != 0)
1349 		return -ENOENT;
1350 
1351 	survey->channel = conf->chandef.chan;
1352 	survey->filled = SURVEY_INFO_NOISE_DBM;
1353 	survey->noise = wl->noise;
1354 
1355 	return 0;
1356 }
1357 
1358 /* can't be const, mac80211 writes to this */
1359 static struct ieee80211_supported_band wl1251_band_2ghz = {
1360 	.channels = wl1251_channels,
1361 	.n_channels = ARRAY_SIZE(wl1251_channels),
1362 	.bitrates = wl1251_rates,
1363 	.n_bitrates = ARRAY_SIZE(wl1251_rates),
1364 };
1365 
1366 static const struct ieee80211_ops wl1251_ops = {
1367 	.start = wl1251_op_start,
1368 	.stop = wl1251_op_stop,
1369 	.add_interface = wl1251_op_add_interface,
1370 	.remove_interface = wl1251_op_remove_interface,
1371 	.config = wl1251_op_config,
1372 	.prepare_multicast = wl1251_op_prepare_multicast,
1373 	.configure_filter = wl1251_op_configure_filter,
1374 	.tx = wl1251_op_tx,
1375 	.set_key = wl1251_op_set_key,
1376 	.hw_scan = wl1251_op_hw_scan,
1377 	.bss_info_changed = wl1251_op_bss_info_changed,
1378 	.set_rts_threshold = wl1251_op_set_rts_threshold,
1379 	.conf_tx = wl1251_op_conf_tx,
1380 	.get_survey = wl1251_op_get_survey,
1381 };
1382 
1383 static int wl1251_read_eeprom_byte(struct wl1251 *wl, off_t offset, u8 *data)
1384 {
1385 	unsigned long timeout;
1386 
1387 	wl1251_reg_write32(wl, EE_ADDR, offset);
1388 	wl1251_reg_write32(wl, EE_CTL, EE_CTL_READ);
1389 
1390 	/* EE_CTL_READ clears when data is ready */
1391 	timeout = jiffies + msecs_to_jiffies(100);
1392 	while (1) {
1393 		if (!(wl1251_reg_read32(wl, EE_CTL) & EE_CTL_READ))
1394 			break;
1395 
1396 		if (time_after(jiffies, timeout))
1397 			return -ETIMEDOUT;
1398 
1399 		msleep(1);
1400 	}
1401 
1402 	*data = wl1251_reg_read32(wl, EE_DATA);
1403 	return 0;
1404 }
1405 
1406 static int wl1251_read_eeprom(struct wl1251 *wl, off_t offset,
1407 			      u8 *data, size_t len)
1408 {
1409 	size_t i;
1410 	int ret;
1411 
1412 	wl1251_reg_write32(wl, EE_START, 0);
1413 
1414 	for (i = 0; i < len; i++) {
1415 		ret = wl1251_read_eeprom_byte(wl, offset + i, &data[i]);
1416 		if (ret < 0)
1417 			return ret;
1418 	}
1419 
1420 	return 0;
1421 }
1422 
1423 static int wl1251_read_eeprom_mac(struct wl1251 *wl)
1424 {
1425 	u8 mac[ETH_ALEN];
1426 	int i, ret;
1427 
1428 	wl1251_set_partition(wl, 0, 0, REGISTERS_BASE, REGISTERS_DOWN_SIZE);
1429 
1430 	ret = wl1251_read_eeprom(wl, 0x1c, mac, sizeof(mac));
1431 	if (ret < 0) {
1432 		wl1251_warning("failed to read MAC address from EEPROM");
1433 		return ret;
1434 	}
1435 
1436 	/* MAC is stored in reverse order */
1437 	for (i = 0; i < ETH_ALEN; i++)
1438 		wl->mac_addr[i] = mac[ETH_ALEN - i - 1];
1439 
1440 	return 0;
1441 }
1442 
1443 #define NVS_OFF_MAC_LEN 0x19
1444 #define NVS_OFF_MAC_ADDR_LO 0x1a
1445 #define NVS_OFF_MAC_ADDR_HI 0x1b
1446 #define NVS_OFF_MAC_DATA 0x1c
1447 
1448 static int wl1251_check_nvs_mac(struct wl1251 *wl)
1449 {
1450 	if (wl->nvs_len < 0x24)
1451 		return -ENODATA;
1452 
1453 	/* length is 2 and data address is 0x546c (ANDed with 0xfffe) */
1454 	if (wl->nvs[NVS_OFF_MAC_LEN] != 2 ||
1455 	    wl->nvs[NVS_OFF_MAC_ADDR_LO] != 0x6d ||
1456 	    wl->nvs[NVS_OFF_MAC_ADDR_HI] != 0x54)
1457 		return -EINVAL;
1458 
1459 	return 0;
1460 }
1461 
1462 static int wl1251_read_nvs_mac(struct wl1251 *wl)
1463 {
1464 	u8 mac[ETH_ALEN];
1465 	int i, ret;
1466 
1467 	ret = wl1251_check_nvs_mac(wl);
1468 	if (ret)
1469 		return ret;
1470 
1471 	/* MAC is stored in reverse order */
1472 	for (i = 0; i < ETH_ALEN; i++)
1473 		mac[i] = wl->nvs[NVS_OFF_MAC_DATA + ETH_ALEN - i - 1];
1474 
1475 	/* 00:00:20:07:03:09 is in example file wl1251-nvs.bin, so invalid */
1476 	if (ether_addr_equal_unaligned(mac, "\x00\x00\x20\x07\x03\x09"))
1477 		return -EINVAL;
1478 
1479 	memcpy(wl->mac_addr, mac, ETH_ALEN);
1480 	return 0;
1481 }
1482 
1483 static int wl1251_write_nvs_mac(struct wl1251 *wl)
1484 {
1485 	int i, ret;
1486 
1487 	ret = wl1251_check_nvs_mac(wl);
1488 	if (ret)
1489 		return ret;
1490 
1491 	/* MAC is stored in reverse order */
1492 	for (i = 0; i < ETH_ALEN; i++)
1493 		wl->nvs[NVS_OFF_MAC_DATA + i] = wl->mac_addr[ETH_ALEN - i - 1];
1494 
1495 	return 0;
1496 }
1497 
1498 static int wl1251_register_hw(struct wl1251 *wl)
1499 {
1500 	int ret;
1501 
1502 	if (wl->mac80211_registered)
1503 		return 0;
1504 
1505 	SET_IEEE80211_PERM_ADDR(wl->hw, wl->mac_addr);
1506 
1507 	ret = ieee80211_register_hw(wl->hw);
1508 	if (ret < 0) {
1509 		wl1251_error("unable to register mac80211 hw: %d", ret);
1510 		return ret;
1511 	}
1512 
1513 	wl->mac80211_registered = true;
1514 
1515 	wl1251_notice("loaded");
1516 
1517 	return 0;
1518 }
1519 
1520 int wl1251_init_ieee80211(struct wl1251 *wl)
1521 {
1522 	int ret;
1523 
1524 	/* The tx descriptor buffer and the TKIP space */
1525 	wl->hw->extra_tx_headroom = sizeof(struct tx_double_buffer_desc)
1526 		+ WL1251_TKIP_IV_SPACE;
1527 
1528 	/* unit us */
1529 	/* FIXME: find a proper value */
1530 
1531 	ieee80211_hw_set(wl->hw, SIGNAL_DBM);
1532 	ieee80211_hw_set(wl->hw, SUPPORTS_PS);
1533 
1534 	wl->hw->wiphy->interface_modes = BIT(NL80211_IFTYPE_STATION) |
1535 					 BIT(NL80211_IFTYPE_ADHOC);
1536 	wl->hw->wiphy->max_scan_ssids = 1;
1537 	wl->hw->wiphy->bands[NL80211_BAND_2GHZ] = &wl1251_band_2ghz;
1538 
1539 	wl->hw->queues = 4;
1540 
1541 	if (wl->nvs == NULL && !wl->use_eeprom) {
1542 		ret = wl1251_fetch_nvs(wl);
1543 		if (ret < 0)
1544 			goto out;
1545 	}
1546 
1547 	if (wl->use_eeprom)
1548 		ret = wl1251_read_eeprom_mac(wl);
1549 	else
1550 		ret = wl1251_read_nvs_mac(wl);
1551 
1552 	if (ret == 0 && !is_valid_ether_addr(wl->mac_addr))
1553 		ret = -EINVAL;
1554 
1555 	if (ret < 0) {
1556 		/*
1557 		 * In case our MAC address is not correctly set,
1558 		 * we use a random but Nokia MAC.
1559 		 */
1560 		static const u8 nokia_oui[3] = {0x00, 0x1f, 0xdf};
1561 		memcpy(wl->mac_addr, nokia_oui, 3);
1562 		get_random_bytes(wl->mac_addr + 3, 3);
1563 		if (!wl->use_eeprom)
1564 			wl1251_write_nvs_mac(wl);
1565 		wl1251_warning("MAC address in eeprom or nvs data is not valid");
1566 		wl1251_warning("Setting random MAC address: %pM", wl->mac_addr);
1567 	}
1568 
1569 	ret = wl1251_register_hw(wl);
1570 	if (ret)
1571 		goto out;
1572 
1573 	wl1251_debugfs_init(wl);
1574 	wl1251_notice("initialized");
1575 
1576 	ret = 0;
1577 
1578 out:
1579 	return ret;
1580 }
1581 EXPORT_SYMBOL_GPL(wl1251_init_ieee80211);
1582 
1583 struct ieee80211_hw *wl1251_alloc_hw(void)
1584 {
1585 	struct ieee80211_hw *hw;
1586 	struct wl1251 *wl;
1587 	int i;
1588 
1589 	hw = ieee80211_alloc_hw(sizeof(*wl), &wl1251_ops);
1590 	if (!hw) {
1591 		wl1251_error("could not alloc ieee80211_hw");
1592 		return ERR_PTR(-ENOMEM);
1593 	}
1594 
1595 	wl = hw->priv;
1596 	memset(wl, 0, sizeof(*wl));
1597 
1598 	wl->hw = hw;
1599 
1600 	wl->data_in_count = 0;
1601 
1602 	skb_queue_head_init(&wl->tx_queue);
1603 
1604 	INIT_DELAYED_WORK(&wl->elp_work, wl1251_elp_work);
1605 	wl->channel = WL1251_DEFAULT_CHANNEL;
1606 	wl->monitor_present = false;
1607 	wl->joined = false;
1608 	wl->scanning = false;
1609 	wl->bss_type = MAX_BSS_TYPE;
1610 	wl->default_key = 0;
1611 	wl->listen_int = 1;
1612 	wl->rx_counter = 0;
1613 	wl->rx_handled = 0;
1614 	wl->rx_current_buffer = 0;
1615 	wl->rx_last_id = 0;
1616 	wl->rx_config = WL1251_DEFAULT_RX_CONFIG;
1617 	wl->rx_filter = WL1251_DEFAULT_RX_FILTER;
1618 	wl->elp = false;
1619 	wl->station_mode = STATION_ACTIVE_MODE;
1620 	wl->psm_requested = false;
1621 	wl->psm_entry_retry = 0;
1622 	wl->tx_queue_stopped = false;
1623 	wl->power_level = WL1251_DEFAULT_POWER_LEVEL;
1624 	wl->rssi_thold = 0;
1625 	wl->beacon_int = WL1251_DEFAULT_BEACON_INT;
1626 	wl->dtim_period = WL1251_DEFAULT_DTIM_PERIOD;
1627 	wl->vif = NULL;
1628 
1629 	for (i = 0; i < FW_TX_CMPLT_BLOCK_SIZE; i++)
1630 		wl->tx_frames[i] = NULL;
1631 
1632 	wl->next_tx_complete = 0;
1633 
1634 	INIT_WORK(&wl->irq_work, wl1251_irq_work);
1635 	INIT_WORK(&wl->tx_work, wl1251_tx_work);
1636 
1637 	wl->state = WL1251_STATE_OFF;
1638 	mutex_init(&wl->mutex);
1639 	spin_lock_init(&wl->wl_lock);
1640 
1641 	wl->tx_mgmt_frm_rate = DEFAULT_HW_GEN_TX_RATE;
1642 	wl->tx_mgmt_frm_mod = DEFAULT_HW_GEN_MODULATION_TYPE;
1643 
1644 	wl->rx_descriptor = kmalloc(sizeof(*wl->rx_descriptor), GFP_KERNEL);
1645 	if (!wl->rx_descriptor) {
1646 		wl1251_error("could not allocate memory for rx descriptor");
1647 		ieee80211_free_hw(hw);
1648 		return ERR_PTR(-ENOMEM);
1649 	}
1650 
1651 	return hw;
1652 }
1653 EXPORT_SYMBOL_GPL(wl1251_alloc_hw);
1654 
1655 int wl1251_free_hw(struct wl1251 *wl)
1656 {
1657 	ieee80211_unregister_hw(wl->hw);
1658 
1659 	wl1251_debugfs_exit(wl);
1660 
1661 	kfree(wl->target_mem_map);
1662 	kfree(wl->data_path);
1663 	vfree(wl->fw);
1664 	wl->fw = NULL;
1665 	kfree(wl->nvs);
1666 	wl->nvs = NULL;
1667 
1668 	kfree(wl->rx_descriptor);
1669 	wl->rx_descriptor = NULL;
1670 
1671 	ieee80211_free_hw(wl->hw);
1672 
1673 	return 0;
1674 }
1675 EXPORT_SYMBOL_GPL(wl1251_free_hw);
1676 
1677 MODULE_DESCRIPTION("TI wl1251 Wireless LAN Driver Core");
1678 MODULE_LICENSE("GPL");
1679 MODULE_AUTHOR("Kalle Valo <kvalo@adurom.com>");
1680 MODULE_FIRMWARE(WL1251_FW_NAME);
1681 MODULE_FIRMWARE(WL1251_NVS_NAME);
1682