1 /*
2  * This file is part of wl1271
3  *
4  * Copyright (C) 2008-2009 Nokia Corporation
5  *
6  * Contact: Luciano Coelho <luciano.coelho@nokia.com>
7  *
8  * This program is free software; you can redistribute it and/or
9  * modify it under the terms of the GNU General Public License
10  * version 2 as published by the Free Software Foundation.
11  *
12  * This program is distributed in the hope that it will be useful, but
13  * WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * General Public License for more details.
16  *
17  * You should have received a copy of the GNU General Public License
18  * along with this program; if not, write to the Free Software
19  * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
20  * 02110-1301 USA
21  *
22  */
23 
24 #include "wlcore.h"
25 #include "debug.h"
26 #include "io.h"
27 #include "event.h"
28 #include "ps.h"
29 #include "scan.h"
30 #include "wl12xx_80211.h"
31 
32 static void wl1271_event_rssi_trigger(struct wl1271 *wl,
33 				      struct wl12xx_vif *wlvif,
34 				      struct event_mailbox *mbox)
35 {
36 	struct ieee80211_vif *vif = wl12xx_wlvif_to_vif(wlvif);
37 	enum nl80211_cqm_rssi_threshold_event event;
38 	s8 metric = mbox->rssi_snr_trigger_metric[0];
39 
40 	wl1271_debug(DEBUG_EVENT, "RSSI trigger metric: %d", metric);
41 
42 	if (metric <= wlvif->rssi_thold)
43 		event = NL80211_CQM_RSSI_THRESHOLD_EVENT_LOW;
44 	else
45 		event = NL80211_CQM_RSSI_THRESHOLD_EVENT_HIGH;
46 
47 	if (event != wlvif->last_rssi_event)
48 		ieee80211_cqm_rssi_notify(vif, event, GFP_KERNEL);
49 	wlvif->last_rssi_event = event;
50 }
51 
52 static void wl1271_stop_ba_event(struct wl1271 *wl, struct wl12xx_vif *wlvif)
53 {
54 	struct ieee80211_vif *vif = wl12xx_wlvif_to_vif(wlvif);
55 
56 	if (wlvif->bss_type != BSS_TYPE_AP_BSS) {
57 		if (!wlvif->sta.ba_rx_bitmap)
58 			return;
59 		ieee80211_stop_rx_ba_session(vif, wlvif->sta.ba_rx_bitmap,
60 					     vif->bss_conf.bssid);
61 	} else {
62 		u8 hlid;
63 		struct wl1271_link *lnk;
64 		for_each_set_bit(hlid, wlvif->ap.sta_hlid_map,
65 				 WL12XX_MAX_LINKS) {
66 			lnk = &wl->links[hlid];
67 			if (!lnk->ba_bitmap)
68 				continue;
69 
70 			ieee80211_stop_rx_ba_session(vif,
71 						     lnk->ba_bitmap,
72 						     lnk->addr);
73 		}
74 	}
75 }
76 
77 static void wl12xx_event_soft_gemini_sense(struct wl1271 *wl,
78 					       u8 enable)
79 {
80 	struct wl12xx_vif *wlvif;
81 
82 	if (enable) {
83 		set_bit(WL1271_FLAG_SOFT_GEMINI, &wl->flags);
84 	} else {
85 		clear_bit(WL1271_FLAG_SOFT_GEMINI, &wl->flags);
86 		wl12xx_for_each_wlvif_sta(wl, wlvif) {
87 			wl1271_recalc_rx_streaming(wl, wlvif);
88 		}
89 	}
90 
91 }
92 
93 static void wl1271_event_mbox_dump(struct event_mailbox *mbox)
94 {
95 	wl1271_debug(DEBUG_EVENT, "MBOX DUMP:");
96 	wl1271_debug(DEBUG_EVENT, "\tvector: 0x%x", mbox->events_vector);
97 	wl1271_debug(DEBUG_EVENT, "\tmask: 0x%x", mbox->events_mask);
98 }
99 
100 static int wl1271_event_process(struct wl1271 *wl)
101 {
102 	struct event_mailbox *mbox = wl->mbox;
103 	struct ieee80211_vif *vif;
104 	struct wl12xx_vif *wlvif;
105 	u32 vector;
106 	bool disconnect_sta = false;
107 	unsigned long sta_bitmap = 0;
108 	int ret;
109 
110 	wl1271_event_mbox_dump(mbox);
111 
112 	vector = le32_to_cpu(mbox->events_vector);
113 	vector &= ~(le32_to_cpu(mbox->events_mask));
114 	wl1271_debug(DEBUG_EVENT, "vector: 0x%x", vector);
115 
116 	if (vector & SCAN_COMPLETE_EVENT_ID) {
117 		wl1271_debug(DEBUG_EVENT, "status: 0x%x",
118 			     mbox->scheduled_scan_status);
119 
120 		wl1271_scan_stm(wl, wl->scan_vif);
121 	}
122 
123 	if (vector & PERIODIC_SCAN_REPORT_EVENT_ID) {
124 		wl1271_debug(DEBUG_EVENT, "PERIODIC_SCAN_REPORT_EVENT "
125 			     "(status 0x%0x)", mbox->scheduled_scan_status);
126 
127 		wl1271_scan_sched_scan_results(wl);
128 	}
129 
130 	if (vector & PERIODIC_SCAN_COMPLETE_EVENT_ID) {
131 		wl1271_debug(DEBUG_EVENT, "PERIODIC_SCAN_COMPLETE_EVENT "
132 			     "(status 0x%0x)", mbox->scheduled_scan_status);
133 		if (wl->sched_scanning) {
134 			ieee80211_sched_scan_stopped(wl->hw);
135 			wl->sched_scanning = false;
136 		}
137 	}
138 
139 	if (vector & SOFT_GEMINI_SENSE_EVENT_ID)
140 		wl12xx_event_soft_gemini_sense(wl,
141 					       mbox->soft_gemini_sense_info);
142 
143 	/*
144 	 * We are HW_MONITOR device. On beacon loss - queue
145 	 * connection loss work. Cancel it on REGAINED event.
146 	 */
147 	if (vector & BSS_LOSE_EVENT_ID) {
148 		/* TODO: check for multi-role */
149 		int delay = wl->conf.conn.synch_fail_thold *
150 					wl->conf.conn.bss_lose_timeout;
151 		wl1271_info("Beacon loss detected.");
152 
153 		/*
154 		 * if the work is already queued, it should take place. We
155 		 * don't want to delay the connection loss indication
156 		 * any more.
157 		 */
158 		ieee80211_queue_delayed_work(wl->hw, &wl->connection_loss_work,
159 					     msecs_to_jiffies(delay));
160 
161 		wl12xx_for_each_wlvif_sta(wl, wlvif) {
162 			vif = wl12xx_wlvif_to_vif(wlvif);
163 
164 			ieee80211_cqm_rssi_notify(
165 					vif,
166 					NL80211_CQM_RSSI_BEACON_LOSS_EVENT,
167 					GFP_KERNEL);
168 		}
169 	}
170 
171 	if (vector & REGAINED_BSS_EVENT_ID) {
172 		/* TODO: check for multi-role */
173 		wl1271_info("Beacon regained.");
174 		cancel_delayed_work(&wl->connection_loss_work);
175 
176 		/* sanity check - we can't lose and gain the beacon together */
177 		WARN(vector & BSS_LOSE_EVENT_ID,
178 		     "Concurrent beacon loss and gain from FW");
179 	}
180 
181 	if (vector & RSSI_SNR_TRIGGER_0_EVENT_ID) {
182 		/* TODO: check actual multi-role support */
183 		wl1271_debug(DEBUG_EVENT, "RSSI_SNR_TRIGGER_0_EVENT");
184 		wl12xx_for_each_wlvif_sta(wl, wlvif) {
185 			wl1271_event_rssi_trigger(wl, wlvif, mbox);
186 		}
187 	}
188 
189 	if (vector & BA_SESSION_RX_CONSTRAINT_EVENT_ID) {
190 		u8 role_id = mbox->role_id;
191 		wl1271_debug(DEBUG_EVENT, "BA_SESSION_RX_CONSTRAINT_EVENT_ID. "
192 			     "ba_allowed = 0x%x, role_id=%d",
193 			     mbox->rx_ba_allowed, role_id);
194 
195 		wl12xx_for_each_wlvif(wl, wlvif) {
196 			if (role_id != 0xff && role_id != wlvif->role_id)
197 				continue;
198 
199 			wlvif->ba_allowed = !!mbox->rx_ba_allowed;
200 			if (!wlvif->ba_allowed)
201 				wl1271_stop_ba_event(wl, wlvif);
202 		}
203 	}
204 
205 	if (vector & CHANNEL_SWITCH_COMPLETE_EVENT_ID) {
206 		wl1271_debug(DEBUG_EVENT, "CHANNEL_SWITCH_COMPLETE_EVENT_ID. "
207 					  "status = 0x%x",
208 					  mbox->channel_switch_status);
209 		/*
210 		 * That event uses for two cases:
211 		 * 1) channel switch complete with status=0
212 		 * 2) channel switch failed status=1
213 		 */
214 
215 		/* TODO: configure only the relevant vif */
216 		wl12xx_for_each_wlvif_sta(wl, wlvif) {
217 			bool success;
218 
219 			if (!test_and_clear_bit(WLVIF_FLAG_CS_PROGRESS,
220 						&wlvif->flags))
221 				continue;
222 
223 			success = mbox->channel_switch_status ? false : true;
224 			vif = wl12xx_wlvif_to_vif(wlvif);
225 
226 			ieee80211_chswitch_done(vif, success);
227 		}
228 	}
229 
230 	if ((vector & DUMMY_PACKET_EVENT_ID)) {
231 		wl1271_debug(DEBUG_EVENT, "DUMMY_PACKET_ID_EVENT_ID");
232 		ret = wl1271_tx_dummy_packet(wl);
233 		if (ret < 0)
234 			return ret;
235 	}
236 
237 	/*
238 	 * "TX retries exceeded" has a different meaning according to mode.
239 	 * In AP mode the offending station is disconnected.
240 	 */
241 	if (vector & MAX_TX_RETRY_EVENT_ID) {
242 		wl1271_debug(DEBUG_EVENT, "MAX_TX_RETRY_EVENT_ID");
243 		sta_bitmap |= le16_to_cpu(mbox->sta_tx_retry_exceeded);
244 		disconnect_sta = true;
245 	}
246 
247 	if (vector & INACTIVE_STA_EVENT_ID) {
248 		wl1271_debug(DEBUG_EVENT, "INACTIVE_STA_EVENT_ID");
249 		sta_bitmap |= le16_to_cpu(mbox->sta_aging_status);
250 		disconnect_sta = true;
251 	}
252 
253 	if (disconnect_sta) {
254 		u32 num_packets = wl->conf.tx.max_tx_retries;
255 		struct ieee80211_sta *sta;
256 		const u8 *addr;
257 		int h;
258 
259 		for_each_set_bit(h, &sta_bitmap, WL12XX_MAX_LINKS) {
260 			bool found = false;
261 			/* find the ap vif connected to this sta */
262 			wl12xx_for_each_wlvif_ap(wl, wlvif) {
263 				if (!test_bit(h, wlvif->ap.sta_hlid_map))
264 					continue;
265 				found = true;
266 				break;
267 			}
268 			if (!found)
269 				continue;
270 
271 			vif = wl12xx_wlvif_to_vif(wlvif);
272 			addr = wl->links[h].addr;
273 
274 			rcu_read_lock();
275 			sta = ieee80211_find_sta(vif, addr);
276 			if (sta) {
277 				wl1271_debug(DEBUG_EVENT, "remove sta %d", h);
278 				ieee80211_report_low_ack(sta, num_packets);
279 			}
280 			rcu_read_unlock();
281 		}
282 	}
283 	return 0;
284 }
285 
286 int wl1271_event_unmask(struct wl1271 *wl)
287 {
288 	int ret;
289 
290 	ret = wl1271_acx_event_mbox_mask(wl, ~(wl->event_mask));
291 	if (ret < 0)
292 		return ret;
293 
294 	return 0;
295 }
296 
297 int wl1271_event_handle(struct wl1271 *wl, u8 mbox_num)
298 {
299 	int ret;
300 
301 	wl1271_debug(DEBUG_EVENT, "EVENT on mbox %d", mbox_num);
302 
303 	if (mbox_num > 1)
304 		return -EINVAL;
305 
306 	/* first we read the mbox descriptor */
307 	ret = wlcore_read(wl, wl->mbox_ptr[mbox_num], wl->mbox,
308 			  sizeof(*wl->mbox), false);
309 	if (ret < 0)
310 		return ret;
311 
312 	/* process the descriptor */
313 	ret = wl1271_event_process(wl);
314 	if (ret < 0)
315 		return ret;
316 
317 	/*
318 	 * TODO: we just need this because one bit is in a different
319 	 * place.  Is there any better way?
320 	 */
321 	ret = wl->ops->ack_event(wl);
322 
323 	return ret;
324 }
325