1 /*
2  *	Driver for ZyDAS zd1201 based wireless USB devices.
3  *
4  *	Copyright (c) 2004, 2005 Jeroen Vreeken (pe1rxq@amsat.org)
5  *
6  *	This program is free software; you can redistribute it and/or
7  *	modify it under the terms of the GNU General Public License
8  *	version 2 as published by the Free Software Foundation.
9  *
10  *	Parts of this driver have been derived from a wlan-ng version
11  *	modified by ZyDAS. They also made documentation available, thanks!
12  *	Copyright (C) 1999 AbsoluteValue Systems, Inc.  All Rights Reserved.
13  */
14 
15 #include <linux/module.h>
16 #include <linux/usb.h>
17 #include <linux/slab.h>
18 #include <linux/netdevice.h>
19 #include <linux/etherdevice.h>
20 #include <linux/wireless.h>
21 #include <net/cfg80211.h>
22 #include <net/iw_handler.h>
23 #include <linux/string.h>
24 #include <linux/if_arp.h>
25 #include <linux/firmware.h>
26 #include "zd1201.h"
27 
28 static const struct usb_device_id zd1201_table[] = {
29 	{USB_DEVICE(0x0586, 0x3400)}, /* Peabird Wireless USB Adapter */
30 	{USB_DEVICE(0x0ace, 0x1201)}, /* ZyDAS ZD1201 Wireless USB Adapter */
31 	{USB_DEVICE(0x050d, 0x6051)}, /* Belkin F5D6051 usb  adapter */
32 	{USB_DEVICE(0x0db0, 0x6823)}, /* MSI UB11B usb  adapter */
33 	{USB_DEVICE(0x1044, 0x8004)}, /* Gigabyte GN-WLBZ101 */
34 	{USB_DEVICE(0x1044, 0x8005)}, /* GIGABYTE GN-WLBZ201 usb adapter */
35 	{}
36 };
37 
38 static int ap;	/* Are we an AP or a normal station? */
39 
40 #define ZD1201_VERSION	"0.15"
41 
42 MODULE_AUTHOR("Jeroen Vreeken <pe1rxq@amsat.org>");
43 MODULE_DESCRIPTION("Driver for ZyDAS ZD1201 based USB Wireless adapters");
44 MODULE_VERSION(ZD1201_VERSION);
45 MODULE_LICENSE("GPL");
46 module_param(ap, int, 0);
47 MODULE_PARM_DESC(ap, "If non-zero Access Point firmware will be loaded");
48 MODULE_DEVICE_TABLE(usb, zd1201_table);
49 
50 
51 static int zd1201_fw_upload(struct usb_device *dev, int apfw)
52 {
53 	const struct firmware *fw_entry;
54 	const char *data;
55 	unsigned long len;
56 	int err;
57 	unsigned char ret;
58 	char *buf;
59 	char *fwfile;
60 
61 	if (apfw)
62 		fwfile = "zd1201-ap.fw";
63 	else
64 		fwfile = "zd1201.fw";
65 
66 	err = request_firmware(&fw_entry, fwfile, &dev->dev);
67 	if (err) {
68 		dev_err(&dev->dev, "Failed to load %s firmware file!\n", fwfile);
69 		dev_err(&dev->dev, "Make sure the hotplug firmware loader is installed.\n");
70 		dev_err(&dev->dev, "Goto http://linux-lc100020.sourceforge.net for more info.\n");
71 		return err;
72 	}
73 
74 	data = fw_entry->data;
75         len = fw_entry->size;
76 
77 	buf = kmalloc(1024, GFP_ATOMIC);
78 	if (!buf) {
79 		err = -ENOMEM;
80 		goto exit;
81 	}
82 
83 	while (len > 0) {
84 		int translen = (len > 1024) ? 1024 : len;
85 		memcpy(buf, data, translen);
86 
87 		err = usb_control_msg(dev, usb_sndctrlpipe(dev, 0), 0,
88 		    USB_DIR_OUT | 0x40, 0, 0, buf, translen,
89 		    ZD1201_FW_TIMEOUT);
90 		if (err < 0)
91 			goto exit;
92 
93 		len -= translen;
94 		data += translen;
95 	}
96 
97 	err = usb_control_msg(dev, usb_sndctrlpipe(dev, 0), 0x2,
98 	    USB_DIR_OUT | 0x40, 0, 0, NULL, 0, ZD1201_FW_TIMEOUT);
99 	if (err < 0)
100 		goto exit;
101 
102 	err = usb_control_msg(dev, usb_rcvctrlpipe(dev, 0), 0x4,
103 	    USB_DIR_IN | 0x40, 0, 0, buf, sizeof(ret), ZD1201_FW_TIMEOUT);
104 	if (err < 0)
105 		goto exit;
106 
107 	memcpy(&ret, buf, sizeof(ret));
108 
109 	if (ret & 0x80) {
110 		err = -EIO;
111 		goto exit;
112 	}
113 
114 	err = 0;
115 exit:
116 	kfree(buf);
117 	release_firmware(fw_entry);
118 	return err;
119 }
120 
121 MODULE_FIRMWARE("zd1201-ap.fw");
122 MODULE_FIRMWARE("zd1201.fw");
123 
124 static void zd1201_usbfree(struct urb *urb)
125 {
126 	struct zd1201 *zd = urb->context;
127 
128 	switch(urb->status) {
129 		case -EILSEQ:
130 		case -ENODEV:
131 		case -ETIME:
132 		case -ENOENT:
133 		case -EPIPE:
134 		case -EOVERFLOW:
135 		case -ESHUTDOWN:
136 			dev_warn(&zd->usb->dev, "%s: urb failed: %d\n",
137 			    zd->dev->name, urb->status);
138 	}
139 
140 	kfree(urb->transfer_buffer);
141 	usb_free_urb(urb);
142 }
143 
144 /* cmdreq message:
145 	u32 type
146 	u16 cmd
147 	u16 parm0
148 	u16 parm1
149 	u16 parm2
150 	u8  pad[4]
151 
152 	total: 4 + 2 + 2 + 2 + 2 + 4 = 16
153 */
154 static int zd1201_docmd(struct zd1201 *zd, int cmd, int parm0,
155 			int parm1, int parm2)
156 {
157 	unsigned char *command;
158 	int ret;
159 	struct urb *urb;
160 
161 	command = kmalloc(16, GFP_ATOMIC);
162 	if (!command)
163 		return -ENOMEM;
164 
165 	*((__le32*)command) = cpu_to_le32(ZD1201_USB_CMDREQ);
166 	*((__le16*)&command[4]) = cpu_to_le16(cmd);
167 	*((__le16*)&command[6]) = cpu_to_le16(parm0);
168 	*((__le16*)&command[8]) = cpu_to_le16(parm1);
169 	*((__le16*)&command[10])= cpu_to_le16(parm2);
170 
171 	urb = usb_alloc_urb(0, GFP_ATOMIC);
172 	if (!urb) {
173 		kfree(command);
174 		return -ENOMEM;
175 	}
176 	usb_fill_bulk_urb(urb, zd->usb, usb_sndbulkpipe(zd->usb, zd->endp_out2),
177 			  command, 16, zd1201_usbfree, zd);
178 	ret = usb_submit_urb(urb, GFP_ATOMIC);
179 	if (ret) {
180 		kfree(command);
181 		usb_free_urb(urb);
182 	}
183 
184 	return ret;
185 }
186 
187 /* Callback after sending out a packet */
188 static void zd1201_usbtx(struct urb *urb)
189 {
190 	struct zd1201 *zd = urb->context;
191 	netif_wake_queue(zd->dev);
192 }
193 
194 /* Incoming data */
195 static void zd1201_usbrx(struct urb *urb)
196 {
197 	struct zd1201 *zd = urb->context;
198 	int free = 0;
199 	unsigned char *data = urb->transfer_buffer;
200 	struct sk_buff *skb;
201 	unsigned char type;
202 
203 	if (!zd)
204 		return;
205 
206 	switch(urb->status) {
207 		case -EILSEQ:
208 		case -ENODEV:
209 		case -ETIME:
210 		case -ENOENT:
211 		case -EPIPE:
212 		case -EOVERFLOW:
213 		case -ESHUTDOWN:
214 			dev_warn(&zd->usb->dev, "%s: rx urb failed: %d\n",
215 			    zd->dev->name, urb->status);
216 			free = 1;
217 			goto exit;
218 	}
219 
220 	if (urb->status != 0 || urb->actual_length == 0)
221 		goto resubmit;
222 
223 	type = data[0];
224 	if (type == ZD1201_PACKET_EVENTSTAT || type == ZD1201_PACKET_RESOURCE) {
225 		memcpy(zd->rxdata, data, urb->actual_length);
226 		zd->rxlen = urb->actual_length;
227 		zd->rxdatas = 1;
228 		wake_up(&zd->rxdataq);
229 	}
230 	/* Info frame */
231 	if (type == ZD1201_PACKET_INQUIRE) {
232 		int i = 0;
233 		unsigned short infotype, copylen;
234 		infotype = le16_to_cpu(*(__le16*)&data[6]);
235 
236 		if (infotype == ZD1201_INF_LINKSTATUS) {
237 			short linkstatus;
238 
239 			linkstatus = le16_to_cpu(*(__le16*)&data[8]);
240 			switch(linkstatus) {
241 				case 1:
242 					netif_carrier_on(zd->dev);
243 					break;
244 				case 2:
245 					netif_carrier_off(zd->dev);
246 					break;
247 				case 3:
248 					netif_carrier_off(zd->dev);
249 					break;
250 				case 4:
251 					netif_carrier_on(zd->dev);
252 					break;
253 				default:
254 					netif_carrier_off(zd->dev);
255 			}
256 			goto resubmit;
257 		}
258 		if (infotype == ZD1201_INF_ASSOCSTATUS) {
259 			short status = le16_to_cpu(*(__le16*)(data+8));
260 			int event;
261 			union iwreq_data wrqu;
262 
263 			switch (status) {
264 				case ZD1201_ASSOCSTATUS_STAASSOC:
265 				case ZD1201_ASSOCSTATUS_REASSOC:
266 					event = IWEVREGISTERED;
267 					break;
268 				case ZD1201_ASSOCSTATUS_DISASSOC:
269 				case ZD1201_ASSOCSTATUS_ASSOCFAIL:
270 				case ZD1201_ASSOCSTATUS_AUTHFAIL:
271 				default:
272 					event = IWEVEXPIRED;
273 			}
274 			memcpy(wrqu.addr.sa_data, data+10, ETH_ALEN);
275 			wrqu.addr.sa_family = ARPHRD_ETHER;
276 
277 			/* Send event to user space */
278 			wireless_send_event(zd->dev, event, &wrqu, NULL);
279 
280 			goto resubmit;
281 		}
282 		if (infotype == ZD1201_INF_AUTHREQ) {
283 			union iwreq_data wrqu;
284 
285 			memcpy(wrqu.addr.sa_data, data+8, ETH_ALEN);
286 			wrqu.addr.sa_family = ARPHRD_ETHER;
287 			/* There isn't a event that trully fits this request.
288 			   We assume that userspace will be smart enough to
289 			   see a new station being expired and sends back a
290 			   authstation ioctl to authorize it. */
291 			wireless_send_event(zd->dev, IWEVEXPIRED, &wrqu, NULL);
292 			goto resubmit;
293 		}
294 		/* Other infotypes are handled outside this handler */
295 		zd->rxlen = 0;
296 		while (i < urb->actual_length) {
297 			copylen = le16_to_cpu(*(__le16*)&data[i+2]);
298 			/* Sanity check, sometimes we get junk */
299 			if (copylen+zd->rxlen > sizeof(zd->rxdata))
300 				break;
301 			memcpy(zd->rxdata+zd->rxlen, data+i+4, copylen);
302 			zd->rxlen += copylen;
303 			i += 64;
304 		}
305 		if (i >= urb->actual_length) {
306 			zd->rxdatas = 1;
307 			wake_up(&zd->rxdataq);
308 		}
309 		goto  resubmit;
310 	}
311 	/* Actual data */
312 	if (data[urb->actual_length-1] == ZD1201_PACKET_RXDATA) {
313 		int datalen = urb->actual_length-1;
314 		unsigned short len, fc, seq;
315 
316 		len = ntohs(*(__be16 *)&data[datalen-2]);
317 		if (len>datalen)
318 			len=datalen;
319 		fc = le16_to_cpu(*(__le16 *)&data[datalen-16]);
320 		seq = le16_to_cpu(*(__le16 *)&data[datalen-24]);
321 
322 		if (zd->monitor) {
323 			if (datalen < 24)
324 				goto resubmit;
325 			if (!(skb = dev_alloc_skb(datalen+24)))
326 				goto resubmit;
327 
328 			skb_put_data(skb, &data[datalen - 16], 2);
329 			skb_put_data(skb, &data[datalen - 2], 2);
330 			skb_put_data(skb, &data[datalen - 14], 6);
331 			skb_put_data(skb, &data[datalen - 22], 6);
332 			skb_put_data(skb, &data[datalen - 8], 6);
333 			skb_put_data(skb, &data[datalen - 24], 2);
334 			skb_put_data(skb, data, len);
335 			skb->protocol = eth_type_trans(skb, zd->dev);
336 			zd->dev->stats.rx_packets++;
337 			zd->dev->stats.rx_bytes += skb->len;
338 			netif_rx(skb);
339 			goto resubmit;
340 		}
341 
342 		if ((seq & IEEE80211_SCTL_FRAG) ||
343 		    (fc & IEEE80211_FCTL_MOREFRAGS)) {
344 			struct zd1201_frag *frag = NULL;
345 			char *ptr;
346 
347 			if (datalen<14)
348 				goto resubmit;
349 			if ((seq & IEEE80211_SCTL_FRAG) == 0) {
350 				frag = kmalloc(sizeof(*frag), GFP_ATOMIC);
351 				if (!frag)
352 					goto resubmit;
353 				skb = dev_alloc_skb(IEEE80211_MAX_DATA_LEN +14+2);
354 				if (!skb) {
355 					kfree(frag);
356 					goto resubmit;
357 				}
358 				frag->skb = skb;
359 				frag->seq = seq & IEEE80211_SCTL_SEQ;
360 				skb_reserve(skb, 2);
361 				skb_put_data(skb, &data[datalen - 14], 12);
362 				skb_put_data(skb, &data[6], 2);
363 				skb_put_data(skb, data + 8, len);
364 				hlist_add_head(&frag->fnode, &zd->fraglist);
365 				goto resubmit;
366 			}
367 			hlist_for_each_entry(frag, &zd->fraglist, fnode)
368 				if (frag->seq == (seq&IEEE80211_SCTL_SEQ))
369 					break;
370 			if (!frag)
371 				goto resubmit;
372 			skb = frag->skb;
373 			ptr = skb_put(skb, len);
374 			if (ptr)
375 				memcpy(ptr, data+8, len);
376 			if (fc & IEEE80211_FCTL_MOREFRAGS)
377 				goto resubmit;
378 			hlist_del_init(&frag->fnode);
379 			kfree(frag);
380 		} else {
381 			if (datalen<14)
382 				goto resubmit;
383 			skb = dev_alloc_skb(len + 14 + 2);
384 			if (!skb)
385 				goto resubmit;
386 			skb_reserve(skb, 2);
387 			skb_put_data(skb, &data[datalen - 14], 12);
388 			skb_put_data(skb, &data[6], 2);
389 			skb_put_data(skb, data + 8, len);
390 		}
391 		skb->protocol = eth_type_trans(skb, zd->dev);
392 		zd->dev->stats.rx_packets++;
393 		zd->dev->stats.rx_bytes += skb->len;
394 		netif_rx(skb);
395 	}
396 resubmit:
397 	memset(data, 0, ZD1201_RXSIZE);
398 
399 	urb->status = 0;
400 	urb->dev = zd->usb;
401 	if(usb_submit_urb(urb, GFP_ATOMIC))
402 		free = 1;
403 
404 exit:
405 	if (free) {
406 		zd->rxlen = 0;
407 		zd->rxdatas = 1;
408 		wake_up(&zd->rxdataq);
409 		kfree(urb->transfer_buffer);
410 	}
411 }
412 
413 static int zd1201_getconfig(struct zd1201 *zd, int rid, void *riddata,
414 	unsigned int riddatalen)
415 {
416 	int err;
417 	int i = 0;
418 	int code;
419 	int rid_fid;
420 	int length;
421 	unsigned char *pdata;
422 
423 	zd->rxdatas = 0;
424 	err = zd1201_docmd(zd, ZD1201_CMDCODE_ACCESS, rid, 0, 0);
425 	if (err)
426 		return err;
427 
428 	wait_event_interruptible(zd->rxdataq, zd->rxdatas);
429 	if (!zd->rxlen)
430 		return -EIO;
431 
432 	code = le16_to_cpu(*(__le16*)(&zd->rxdata[4]));
433 	rid_fid = le16_to_cpu(*(__le16*)(&zd->rxdata[6]));
434 	length = le16_to_cpu(*(__le16*)(&zd->rxdata[8]));
435 	if (length > zd->rxlen)
436 		length = zd->rxlen-6;
437 
438 	/* If access bit is not on, then error */
439 	if ((code & ZD1201_ACCESSBIT) != ZD1201_ACCESSBIT || rid_fid != rid )
440 		return -EINVAL;
441 
442 	/* Not enough buffer for allocating data */
443 	if (riddatalen != (length - 4)) {
444 		dev_dbg(&zd->usb->dev, "riddatalen mismatches, expected=%u, (packet=%u) length=%u, rid=0x%04X, rid_fid=0x%04X\n",
445 		    riddatalen, zd->rxlen, length, rid, rid_fid);
446 		return -ENODATA;
447 	}
448 
449 	zd->rxdatas = 0;
450 	/* Issue SetRxRid commnd */
451 	err = zd1201_docmd(zd, ZD1201_CMDCODE_SETRXRID, rid, 0, length);
452 	if (err)
453 		return err;
454 
455 	/* Receive RID record from resource packets */
456 	wait_event_interruptible(zd->rxdataq, zd->rxdatas);
457 	if (!zd->rxlen)
458 		return -EIO;
459 
460 	if (zd->rxdata[zd->rxlen - 1] != ZD1201_PACKET_RESOURCE) {
461 		dev_dbg(&zd->usb->dev, "Packet type mismatch: 0x%x not 0x3\n",
462 		    zd->rxdata[zd->rxlen-1]);
463 		return -EINVAL;
464 	}
465 
466 	/* Set the data pointer and received data length */
467 	pdata = zd->rxdata;
468 	length = zd->rxlen;
469 
470 	do {
471 		int actual_length;
472 
473 		actual_length = (length > 64) ? 64 : length;
474 
475 		if (pdata[0] != 0x3) {
476 			dev_dbg(&zd->usb->dev, "Rx Resource packet type error: %02X\n",
477 			    pdata[0]);
478 			return -EINVAL;
479 		}
480 
481 		if (actual_length != 64) {
482 			/* Trim the last packet type byte */
483 			actual_length--;
484 		}
485 
486 		/* Skip the 4 bytes header (RID length and RID) */
487 		if (i == 0) {
488 			pdata += 8;
489 			actual_length -= 8;
490 		} else {
491 			pdata += 4;
492 			actual_length -= 4;
493 		}
494 
495 		memcpy(riddata, pdata, actual_length);
496 		riddata += actual_length;
497 		pdata += actual_length;
498 		length -= 64;
499 		i++;
500 	} while (length > 0);
501 
502 	return 0;
503 }
504 
505 /*
506  *	resreq:
507  *		byte	type
508  *		byte	sequence
509  *		u16	reserved
510  *		byte	data[12]
511  *	total: 16
512  */
513 static int zd1201_setconfig(struct zd1201 *zd, int rid, void *buf, int len, int wait)
514 {
515 	int err;
516 	unsigned char *request;
517 	int reqlen;
518 	char seq=0;
519 	struct urb *urb;
520 	gfp_t gfp_mask = wait ? GFP_NOIO : GFP_ATOMIC;
521 
522 	len += 4;			/* first 4 are for header */
523 
524 	zd->rxdatas = 0;
525 	zd->rxlen = 0;
526 	for (seq=0; len > 0; seq++) {
527 		request = kmalloc(16, gfp_mask);
528 		if (!request)
529 			return -ENOMEM;
530 		urb = usb_alloc_urb(0, gfp_mask);
531 		if (!urb) {
532 			kfree(request);
533 			return -ENOMEM;
534 		}
535 		memset(request, 0, 16);
536 		reqlen = len>12 ? 12 : len;
537 		request[0] = ZD1201_USB_RESREQ;
538 		request[1] = seq;
539 		request[2] = 0;
540 		request[3] = 0;
541 		if (request[1] == 0) {
542 			/* add header */
543 			*(__le16*)&request[4] = cpu_to_le16((len-2+1)/2);
544 			*(__le16*)&request[6] = cpu_to_le16(rid);
545 			memcpy(request+8, buf, reqlen-4);
546 			buf += reqlen-4;
547 		} else {
548 			memcpy(request+4, buf, reqlen);
549 			buf += reqlen;
550 		}
551 
552 		len -= reqlen;
553 
554 		usb_fill_bulk_urb(urb, zd->usb, usb_sndbulkpipe(zd->usb,
555 		    zd->endp_out2), request, 16, zd1201_usbfree, zd);
556 		err = usb_submit_urb(urb, gfp_mask);
557 		if (err)
558 			goto err;
559 	}
560 
561 	request = kmalloc(16, gfp_mask);
562 	if (!request)
563 		return -ENOMEM;
564 	urb = usb_alloc_urb(0, gfp_mask);
565 	if (!urb) {
566 		kfree(request);
567 		return -ENOMEM;
568 	}
569 	*((__le32*)request) = cpu_to_le32(ZD1201_USB_CMDREQ);
570 	*((__le16*)&request[4]) =
571 	    cpu_to_le16(ZD1201_CMDCODE_ACCESS|ZD1201_ACCESSBIT);
572 	*((__le16*)&request[6]) = cpu_to_le16(rid);
573 	*((__le16*)&request[8]) = cpu_to_le16(0);
574 	*((__le16*)&request[10]) = cpu_to_le16(0);
575 	usb_fill_bulk_urb(urb, zd->usb, usb_sndbulkpipe(zd->usb, zd->endp_out2),
576 	     request, 16, zd1201_usbfree, zd);
577 	err = usb_submit_urb(urb, gfp_mask);
578 	if (err)
579 		goto err;
580 
581 	if (wait) {
582 		wait_event_interruptible(zd->rxdataq, zd->rxdatas);
583 		if (!zd->rxlen || le16_to_cpu(*(__le16*)&zd->rxdata[6]) != rid) {
584 			dev_dbg(&zd->usb->dev, "wrong or no RID received\n");
585 		}
586 	}
587 
588 	return 0;
589 err:
590 	kfree(request);
591 	usb_free_urb(urb);
592 	return err;
593 }
594 
595 static inline int zd1201_getconfig16(struct zd1201 *zd, int rid, short *val)
596 {
597 	int err;
598 	__le16 zdval;
599 
600 	err = zd1201_getconfig(zd, rid, &zdval, sizeof(__le16));
601 	if (err)
602 		return err;
603 	*val = le16_to_cpu(zdval);
604 	return 0;
605 }
606 
607 static inline int zd1201_setconfig16(struct zd1201 *zd, int rid, short val)
608 {
609 	__le16 zdval = cpu_to_le16(val);
610 	return (zd1201_setconfig(zd, rid, &zdval, sizeof(__le16), 1));
611 }
612 
613 static int zd1201_drvr_start(struct zd1201 *zd)
614 {
615 	int err, i;
616 	short max;
617 	__le16 zdmax;
618 	unsigned char *buffer;
619 
620 	buffer = kzalloc(ZD1201_RXSIZE, GFP_KERNEL);
621 	if (!buffer)
622 		return -ENOMEM;
623 
624 	usb_fill_bulk_urb(zd->rx_urb, zd->usb,
625 	    usb_rcvbulkpipe(zd->usb, zd->endp_in), buffer, ZD1201_RXSIZE,
626 	    zd1201_usbrx, zd);
627 
628 	err = usb_submit_urb(zd->rx_urb, GFP_KERNEL);
629 	if (err)
630 		goto err_buffer;
631 
632 	err = zd1201_docmd(zd, ZD1201_CMDCODE_INIT, 0, 0, 0);
633 	if (err)
634 		goto err_urb;
635 
636 	err = zd1201_getconfig(zd, ZD1201_RID_CNFMAXTXBUFFERNUMBER, &zdmax,
637 	    sizeof(__le16));
638 	if (err)
639 		goto err_urb;
640 
641 	max = le16_to_cpu(zdmax);
642 	for (i=0; i<max; i++) {
643 		err = zd1201_docmd(zd, ZD1201_CMDCODE_ALLOC, 1514, 0, 0);
644 		if (err)
645 			goto err_urb;
646 	}
647 
648 	return 0;
649 
650 err_urb:
651 	usb_kill_urb(zd->rx_urb);
652 	return err;
653 err_buffer:
654 	kfree(buffer);
655 	return err;
656 }
657 
658 /*	Magic alert: The firmware doesn't seem to like the MAC state being
659  *	toggled in promisc (aka monitor) mode.
660  *	(It works a number of times, but will halt eventually)
661  *	So we turn it of before disabling and on after enabling if needed.
662  */
663 static int zd1201_enable(struct zd1201 *zd)
664 {
665 	int err;
666 
667 	if (zd->mac_enabled)
668 		return 0;
669 
670 	err = zd1201_docmd(zd, ZD1201_CMDCODE_ENABLE, 0, 0, 0);
671 	if (!err)
672 		zd->mac_enabled = 1;
673 
674 	if (zd->monitor)
675 		err = zd1201_setconfig16(zd, ZD1201_RID_PROMISCUOUSMODE, 1);
676 
677 	return err;
678 }
679 
680 static int zd1201_disable(struct zd1201 *zd)
681 {
682 	int err;
683 
684 	if (!zd->mac_enabled)
685 		return 0;
686 	if (zd->monitor) {
687 		err = zd1201_setconfig16(zd, ZD1201_RID_PROMISCUOUSMODE, 0);
688 		if (err)
689 			return err;
690 	}
691 
692 	err = zd1201_docmd(zd, ZD1201_CMDCODE_DISABLE, 0, 0, 0);
693 	if (!err)
694 		zd->mac_enabled = 0;
695 	return err;
696 }
697 
698 static int zd1201_mac_reset(struct zd1201 *zd)
699 {
700 	if (!zd->mac_enabled)
701 		return 0;
702 	zd1201_disable(zd);
703 	return zd1201_enable(zd);
704 }
705 
706 static int zd1201_join(struct zd1201 *zd, char *essid, int essidlen)
707 {
708 	int err, val;
709 	char buf[IW_ESSID_MAX_SIZE+2];
710 
711 	err = zd1201_disable(zd);
712 	if (err)
713 		return err;
714 
715 	val = ZD1201_CNFAUTHENTICATION_OPENSYSTEM;
716 	val |= ZD1201_CNFAUTHENTICATION_SHAREDKEY;
717 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFAUTHENTICATION, val);
718 	if (err)
719 		return err;
720 
721 	*(__le16 *)buf = cpu_to_le16(essidlen);
722 	memcpy(buf+2, essid, essidlen);
723 	if (!zd->ap) {	/* Normal station */
724 		err = zd1201_setconfig(zd, ZD1201_RID_CNFDESIREDSSID, buf,
725 		    IW_ESSID_MAX_SIZE+2, 1);
726 		if (err)
727 			return err;
728 	} else {	/* AP */
729 		err = zd1201_setconfig(zd, ZD1201_RID_CNFOWNSSID, buf,
730 		    IW_ESSID_MAX_SIZE+2, 1);
731 		if (err)
732 			return err;
733 	}
734 
735 	err = zd1201_setconfig(zd, ZD1201_RID_CNFOWNMACADDR,
736 	    zd->dev->dev_addr, zd->dev->addr_len, 1);
737 	if (err)
738 		return err;
739 
740 	err = zd1201_enable(zd);
741 	if (err)
742 		return err;
743 
744 	msleep(100);
745 	return 0;
746 }
747 
748 static int zd1201_net_open(struct net_device *dev)
749 {
750 	struct zd1201 *zd = netdev_priv(dev);
751 
752 	/* Start MAC with wildcard if no essid set */
753 	if (!zd->mac_enabled)
754 		zd1201_join(zd, zd->essid, zd->essidlen);
755 	netif_start_queue(dev);
756 
757 	return 0;
758 }
759 
760 static int zd1201_net_stop(struct net_device *dev)
761 {
762 	netif_stop_queue(dev);
763 	return 0;
764 }
765 
766 /*
767 	RFC 1042 encapsulates Ethernet frames in 802.11 frames
768 	by prefixing them with 0xaa, 0xaa, 0x03) followed by a SNAP OID of 0
769 	(0x00, 0x00, 0x00). Zd requires an additional padding, copy
770 	of ethernet addresses, length of the standard RFC 1042 packet
771 	and a command byte (which is nul for tx).
772 
773 	tx frame (from Wlan NG):
774 	RFC 1042:
775 		llc		0xAA 0xAA 0x03 (802.2 LLC)
776 		snap		0x00 0x00 0x00 (Ethernet encapsulated)
777 		type		2 bytes, Ethernet type field
778 		payload		(minus eth header)
779 	Zydas specific:
780 		padding		1B if (skb->len+8+1)%64==0
781 		Eth MAC addr	12 bytes, Ethernet MAC addresses
782 		length		2 bytes, RFC 1042 packet length
783 				(llc+snap+type+payload)
784 		zd		1 null byte, zd1201 packet type
785  */
786 static netdev_tx_t zd1201_hard_start_xmit(struct sk_buff *skb,
787 						struct net_device *dev)
788 {
789 	struct zd1201 *zd = netdev_priv(dev);
790 	unsigned char *txbuf = zd->txdata;
791 	int txbuflen, pad = 0, err;
792 	struct urb *urb = zd->tx_urb;
793 
794 	if (!zd->mac_enabled || zd->monitor) {
795 		dev->stats.tx_dropped++;
796 		kfree_skb(skb);
797 		return NETDEV_TX_OK;
798 	}
799 	netif_stop_queue(dev);
800 
801 	txbuflen = skb->len + 8 + 1;
802 	if (txbuflen%64 == 0) {
803 		pad = 1;
804 		txbuflen++;
805 	}
806 	txbuf[0] = 0xAA;
807 	txbuf[1] = 0xAA;
808 	txbuf[2] = 0x03;
809 	txbuf[3] = 0x00;	/* rfc1042 */
810 	txbuf[4] = 0x00;
811 	txbuf[5] = 0x00;
812 
813 	skb_copy_from_linear_data_offset(skb, 12, txbuf + 6, skb->len - 12);
814 	if (pad)
815 		txbuf[skb->len-12+6]=0;
816 	skb_copy_from_linear_data(skb, txbuf + skb->len - 12 + 6 + pad, 12);
817 	*(__be16*)&txbuf[skb->len+6+pad] = htons(skb->len-12+6);
818 	txbuf[txbuflen-1] = 0;
819 
820 	usb_fill_bulk_urb(urb, zd->usb, usb_sndbulkpipe(zd->usb, zd->endp_out),
821 	    txbuf, txbuflen, zd1201_usbtx, zd);
822 
823 	err = usb_submit_urb(zd->tx_urb, GFP_ATOMIC);
824 	if (err) {
825 		dev->stats.tx_errors++;
826 		netif_start_queue(dev);
827 	} else {
828 		dev->stats.tx_packets++;
829 		dev->stats.tx_bytes += skb->len;
830 	}
831 	kfree_skb(skb);
832 
833 	return NETDEV_TX_OK;
834 }
835 
836 static void zd1201_tx_timeout(struct net_device *dev)
837 {
838 	struct zd1201 *zd = netdev_priv(dev);
839 
840 	if (!zd)
841 		return;
842 	dev_warn(&zd->usb->dev, "%s: TX timeout, shooting down urb\n",
843 	    dev->name);
844 	usb_unlink_urb(zd->tx_urb);
845 	dev->stats.tx_errors++;
846 	/* Restart the timeout to quiet the watchdog: */
847 	netif_trans_update(dev); /* prevent tx timeout */
848 }
849 
850 static int zd1201_set_mac_address(struct net_device *dev, void *p)
851 {
852 	struct sockaddr *addr = p;
853 	struct zd1201 *zd = netdev_priv(dev);
854 	int err;
855 
856 	if (!zd)
857 		return -ENODEV;
858 
859 	err = zd1201_setconfig(zd, ZD1201_RID_CNFOWNMACADDR,
860 	    addr->sa_data, dev->addr_len, 1);
861 	if (err)
862 		return err;
863 	memcpy(dev->dev_addr, addr->sa_data, dev->addr_len);
864 
865 	return zd1201_mac_reset(zd);
866 }
867 
868 static struct iw_statistics *zd1201_get_wireless_stats(struct net_device *dev)
869 {
870 	struct zd1201 *zd = netdev_priv(dev);
871 
872 	return &zd->iwstats;
873 }
874 
875 static void zd1201_set_multicast(struct net_device *dev)
876 {
877 	struct zd1201 *zd = netdev_priv(dev);
878 	struct netdev_hw_addr *ha;
879 	unsigned char reqbuf[ETH_ALEN*ZD1201_MAXMULTI];
880 	int i;
881 
882 	if (netdev_mc_count(dev) > ZD1201_MAXMULTI)
883 		return;
884 
885 	i = 0;
886 	netdev_for_each_mc_addr(ha, dev)
887 		memcpy(reqbuf + i++ * ETH_ALEN, ha->addr, ETH_ALEN);
888 	zd1201_setconfig(zd, ZD1201_RID_CNFGROUPADDRESS, reqbuf,
889 			 netdev_mc_count(dev) * ETH_ALEN, 0);
890 }
891 
892 static int zd1201_config_commit(struct net_device *dev,
893     struct iw_request_info *info, struct iw_point *data, char *essid)
894 {
895 	struct zd1201 *zd = netdev_priv(dev);
896 
897 	return zd1201_mac_reset(zd);
898 }
899 
900 static int zd1201_get_name(struct net_device *dev,
901     struct iw_request_info *info, char *name, char *extra)
902 {
903 	strcpy(name, "IEEE 802.11b");
904 	return 0;
905 }
906 
907 static int zd1201_set_freq(struct net_device *dev,
908     struct iw_request_info *info, struct iw_freq *freq, char *extra)
909 {
910 	struct zd1201 *zd = netdev_priv(dev);
911 	short channel = 0;
912 	int err;
913 
914 	if (freq->e == 0)
915 		channel = freq->m;
916 	else
917 		channel = ieee80211_frequency_to_channel(freq->m);
918 
919 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFOWNCHANNEL, channel);
920 	if (err)
921 		return err;
922 
923 	zd1201_mac_reset(zd);
924 
925 	return 0;
926 }
927 
928 static int zd1201_get_freq(struct net_device *dev,
929     struct iw_request_info *info, struct iw_freq *freq, char *extra)
930 {
931 	struct zd1201 *zd = netdev_priv(dev);
932 	short channel;
933 	int err;
934 
935 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFOWNCHANNEL, &channel);
936 	if (err)
937 		return err;
938 	freq->e = 0;
939 	freq->m = channel;
940 
941 	return 0;
942 }
943 
944 static int zd1201_set_mode(struct net_device *dev,
945     struct iw_request_info *info, __u32 *mode, char *extra)
946 {
947 	struct zd1201 *zd = netdev_priv(dev);
948 	short porttype, monitor = 0;
949 	unsigned char buffer[IW_ESSID_MAX_SIZE+2];
950 	int err;
951 
952 	if (zd->ap) {
953 		if (*mode != IW_MODE_MASTER)
954 			return -EINVAL;
955 		return 0;
956 	}
957 
958 	err = zd1201_setconfig16(zd, ZD1201_RID_PROMISCUOUSMODE, 0);
959 	if (err)
960 		return err;
961 	zd->dev->type = ARPHRD_ETHER;
962 	switch(*mode) {
963 		case IW_MODE_MONITOR:
964 			monitor = 1;
965 			zd->dev->type = ARPHRD_IEEE80211;
966 			/* Make sure we are no longer associated with by
967 			   setting an 'impossible' essid.
968 			   (otherwise we mess up firmware)
969 			 */
970 			zd1201_join(zd, "\0-*#\0", 5);
971 			/* Put port in pIBSS */
972 			/* Fall through */
973 		case 8: /* No pseudo-IBSS in wireless extensions (yet) */
974 			porttype = ZD1201_PORTTYPE_PSEUDOIBSS;
975 			break;
976 		case IW_MODE_ADHOC:
977 			porttype = ZD1201_PORTTYPE_IBSS;
978 			break;
979 		case IW_MODE_INFRA:
980 			porttype = ZD1201_PORTTYPE_BSS;
981 			break;
982 		default:
983 			return -EINVAL;
984 	}
985 
986 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFPORTTYPE, porttype);
987 	if (err)
988 		return err;
989 	if (zd->monitor && !monitor) {
990 			zd1201_disable(zd);
991 			*(__le16 *)buffer = cpu_to_le16(zd->essidlen);
992 			memcpy(buffer+2, zd->essid, zd->essidlen);
993 			err = zd1201_setconfig(zd, ZD1201_RID_CNFDESIREDSSID,
994 			    buffer, IW_ESSID_MAX_SIZE+2, 1);
995 			if (err)
996 				return err;
997 	}
998 	zd->monitor = monitor;
999 	/* If monitor mode is set we don't actually turn it on here since it
1000 	 * is done during mac reset anyway (see zd1201_mac_enable).
1001 	 */
1002 	zd1201_mac_reset(zd);
1003 
1004 	return 0;
1005 }
1006 
1007 static int zd1201_get_mode(struct net_device *dev,
1008     struct iw_request_info *info, __u32 *mode, char *extra)
1009 {
1010 	struct zd1201 *zd = netdev_priv(dev);
1011 	short porttype;
1012 	int err;
1013 
1014 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFPORTTYPE, &porttype);
1015 	if (err)
1016 		return err;
1017 	switch(porttype) {
1018 		case ZD1201_PORTTYPE_IBSS:
1019 			*mode = IW_MODE_ADHOC;
1020 			break;
1021 		case ZD1201_PORTTYPE_BSS:
1022 			*mode = IW_MODE_INFRA;
1023 			break;
1024 		case ZD1201_PORTTYPE_WDS:
1025 			*mode = IW_MODE_REPEAT;
1026 			break;
1027 		case ZD1201_PORTTYPE_PSEUDOIBSS:
1028 			*mode = 8;/* No Pseudo-IBSS... */
1029 			break;
1030 		case ZD1201_PORTTYPE_AP:
1031 			*mode = IW_MODE_MASTER;
1032 			break;
1033 		default:
1034 			dev_dbg(&zd->usb->dev, "Unknown porttype: %d\n",
1035 			    porttype);
1036 			*mode = IW_MODE_AUTO;
1037 	}
1038 	if (zd->monitor)
1039 		*mode = IW_MODE_MONITOR;
1040 
1041 	return 0;
1042 }
1043 
1044 static int zd1201_get_range(struct net_device *dev,
1045     struct iw_request_info *info, struct iw_point *wrq, char *extra)
1046 {
1047 	struct iw_range *range = (struct iw_range *)extra;
1048 
1049 	wrq->length = sizeof(struct iw_range);
1050 	memset(range, 0, sizeof(struct iw_range));
1051 	range->we_version_compiled = WIRELESS_EXT;
1052 	range->we_version_source = WIRELESS_EXT;
1053 
1054 	range->max_qual.qual = 128;
1055 	range->max_qual.level = 128;
1056 	range->max_qual.noise = 128;
1057 	range->max_qual.updated = 7;
1058 
1059 	range->encoding_size[0] = 5;
1060 	range->encoding_size[1] = 13;
1061 	range->num_encoding_sizes = 2;
1062 	range->max_encoding_tokens = ZD1201_NUMKEYS;
1063 
1064 	range->num_bitrates = 4;
1065 	range->bitrate[0] = 1000000;
1066 	range->bitrate[1] = 2000000;
1067 	range->bitrate[2] = 5500000;
1068 	range->bitrate[3] = 11000000;
1069 
1070 	range->min_rts = 0;
1071 	range->min_frag = ZD1201_FRAGMIN;
1072 	range->max_rts = ZD1201_RTSMAX;
1073 	range->min_frag = ZD1201_FRAGMAX;
1074 
1075 	return 0;
1076 }
1077 
1078 /*	Little bit of magic here: we only get the quality if we poll
1079  *	for it, and we never get an actual request to trigger such
1080  *	a poll. Therefore we 'assume' that the user will soon ask for
1081  *	the stats after asking the bssid.
1082  */
1083 static int zd1201_get_wap(struct net_device *dev,
1084     struct iw_request_info *info, struct sockaddr *ap_addr, char *extra)
1085 {
1086 	struct zd1201 *zd = netdev_priv(dev);
1087 	unsigned char buffer[6];
1088 
1089 	if (!zd1201_getconfig(zd, ZD1201_RID_COMMSQUALITY, buffer, 6)) {
1090 		/* Unfortunately the quality and noise reported is useless.
1091 		   they seem to be accumulators that increase until you
1092 		   read them, unless we poll on a fixed interval we can't
1093 		   use them
1094 		 */
1095 		/*zd->iwstats.qual.qual = le16_to_cpu(((__le16 *)buffer)[0]);*/
1096 		zd->iwstats.qual.level = le16_to_cpu(((__le16 *)buffer)[1]);
1097 		/*zd->iwstats.qual.noise = le16_to_cpu(((__le16 *)buffer)[2]);*/
1098 		zd->iwstats.qual.updated = 2;
1099 	}
1100 
1101 	return zd1201_getconfig(zd, ZD1201_RID_CURRENTBSSID, ap_addr->sa_data, 6);
1102 }
1103 
1104 static int zd1201_set_scan(struct net_device *dev,
1105     struct iw_request_info *info, struct iw_point *srq, char *extra)
1106 {
1107 	/* We do everything in get_scan */
1108 	return 0;
1109 }
1110 
1111 static int zd1201_get_scan(struct net_device *dev,
1112     struct iw_request_info *info, struct iw_point *srq, char *extra)
1113 {
1114 	struct zd1201 *zd = netdev_priv(dev);
1115 	int err, i, j, enabled_save;
1116 	struct iw_event iwe;
1117 	char *cev = extra;
1118 	char *end_buf = extra + IW_SCAN_MAX_DATA;
1119 
1120 	/* No scanning in AP mode */
1121 	if (zd->ap)
1122 		return -EOPNOTSUPP;
1123 
1124 	/* Scan doesn't seem to work if disabled */
1125 	enabled_save = zd->mac_enabled;
1126 	zd1201_enable(zd);
1127 
1128 	zd->rxdatas = 0;
1129 	err = zd1201_docmd(zd, ZD1201_CMDCODE_INQUIRE,
1130 	     ZD1201_INQ_SCANRESULTS, 0, 0);
1131 	if (err)
1132 		return err;
1133 
1134 	wait_event_interruptible(zd->rxdataq, zd->rxdatas);
1135 	if (!zd->rxlen)
1136 		return -EIO;
1137 
1138 	if (le16_to_cpu(*(__le16*)&zd->rxdata[2]) != ZD1201_INQ_SCANRESULTS)
1139 		return -EIO;
1140 
1141 	for(i=8; i<zd->rxlen; i+=62) {
1142 		iwe.cmd = SIOCGIWAP;
1143 		iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
1144 		memcpy(iwe.u.ap_addr.sa_data, zd->rxdata+i+6, 6);
1145 		cev = iwe_stream_add_event(info, cev, end_buf,
1146 					   &iwe, IW_EV_ADDR_LEN);
1147 
1148 		iwe.cmd = SIOCGIWESSID;
1149 		iwe.u.data.length = zd->rxdata[i+16];
1150 		iwe.u.data.flags = 1;
1151 		cev = iwe_stream_add_point(info, cev, end_buf,
1152 					   &iwe, zd->rxdata+i+18);
1153 
1154 		iwe.cmd = SIOCGIWMODE;
1155 		if (zd->rxdata[i+14]&0x01)
1156 			iwe.u.mode = IW_MODE_MASTER;
1157 		else
1158 			iwe.u.mode = IW_MODE_ADHOC;
1159 		cev = iwe_stream_add_event(info, cev, end_buf,
1160 					   &iwe, IW_EV_UINT_LEN);
1161 
1162 		iwe.cmd = SIOCGIWFREQ;
1163 		iwe.u.freq.m = zd->rxdata[i+0];
1164 		iwe.u.freq.e = 0;
1165 		cev = iwe_stream_add_event(info, cev, end_buf,
1166 					   &iwe, IW_EV_FREQ_LEN);
1167 
1168 		iwe.cmd = SIOCGIWRATE;
1169 		iwe.u.bitrate.fixed = 0;
1170 		iwe.u.bitrate.disabled = 0;
1171 		for (j=0; j<10; j++) if (zd->rxdata[i+50+j]) {
1172 			iwe.u.bitrate.value = (zd->rxdata[i+50+j]&0x7f)*500000;
1173 			cev = iwe_stream_add_event(info, cev, end_buf,
1174 						   &iwe, IW_EV_PARAM_LEN);
1175 		}
1176 
1177 		iwe.cmd = SIOCGIWENCODE;
1178 		iwe.u.data.length = 0;
1179 		if (zd->rxdata[i+14]&0x10)
1180 			iwe.u.data.flags = IW_ENCODE_ENABLED;
1181 		else
1182 			iwe.u.data.flags = IW_ENCODE_DISABLED;
1183 		cev = iwe_stream_add_point(info, cev, end_buf, &iwe, NULL);
1184 
1185 		iwe.cmd = IWEVQUAL;
1186 		iwe.u.qual.qual = zd->rxdata[i+4];
1187 		iwe.u.qual.noise= zd->rxdata[i+2]/10-100;
1188 		iwe.u.qual.level = (256+zd->rxdata[i+4]*100)/255-100;
1189 		iwe.u.qual.updated = 7;
1190 		cev = iwe_stream_add_event(info, cev, end_buf,
1191 					   &iwe, IW_EV_QUAL_LEN);
1192 	}
1193 
1194 	if (!enabled_save)
1195 		zd1201_disable(zd);
1196 
1197 	srq->length = cev - extra;
1198 	srq->flags = 0;
1199 
1200 	return 0;
1201 }
1202 
1203 static int zd1201_set_essid(struct net_device *dev,
1204     struct iw_request_info *info, struct iw_point *data, char *essid)
1205 {
1206 	struct zd1201 *zd = netdev_priv(dev);
1207 
1208 	if (data->length > IW_ESSID_MAX_SIZE)
1209 		return -EINVAL;
1210 	if (data->length < 1)
1211 		data->length = 1;
1212 	zd->essidlen = data->length;
1213 	memset(zd->essid, 0, IW_ESSID_MAX_SIZE+1);
1214 	memcpy(zd->essid, essid, data->length);
1215 	return zd1201_join(zd, zd->essid, zd->essidlen);
1216 }
1217 
1218 static int zd1201_get_essid(struct net_device *dev,
1219     struct iw_request_info *info, struct iw_point *data, char *essid)
1220 {
1221 	struct zd1201 *zd = netdev_priv(dev);
1222 
1223 	memcpy(essid, zd->essid, zd->essidlen);
1224 	data->flags = 1;
1225 	data->length = zd->essidlen;
1226 
1227 	return 0;
1228 }
1229 
1230 static int zd1201_get_nick(struct net_device *dev, struct iw_request_info *info,
1231     struct iw_point *data, char *nick)
1232 {
1233 	strcpy(nick, "zd1201");
1234 	data->flags = 1;
1235 	data->length = strlen(nick);
1236 	return 0;
1237 }
1238 
1239 static int zd1201_set_rate(struct net_device *dev,
1240     struct iw_request_info *info, struct iw_param *rrq, char *extra)
1241 {
1242 	struct zd1201 *zd = netdev_priv(dev);
1243 	short rate;
1244 	int err;
1245 
1246 	switch (rrq->value) {
1247 		case 1000000:
1248 			rate = ZD1201_RATEB1;
1249 			break;
1250 		case 2000000:
1251 			rate = ZD1201_RATEB2;
1252 			break;
1253 		case 5500000:
1254 			rate = ZD1201_RATEB5;
1255 			break;
1256 		case 11000000:
1257 		default:
1258 			rate = ZD1201_RATEB11;
1259 			break;
1260 	}
1261 	if (!rrq->fixed) { /* Also enable all lower bitrates */
1262 		rate |= rate-1;
1263 	}
1264 
1265 	err = zd1201_setconfig16(zd, ZD1201_RID_TXRATECNTL, rate);
1266 	if (err)
1267 		return err;
1268 
1269 	return zd1201_mac_reset(zd);
1270 }
1271 
1272 static int zd1201_get_rate(struct net_device *dev,
1273     struct iw_request_info *info, struct iw_param *rrq, char *extra)
1274 {
1275 	struct zd1201 *zd = netdev_priv(dev);
1276 	short rate;
1277 	int err;
1278 
1279 	err = zd1201_getconfig16(zd, ZD1201_RID_CURRENTTXRATE, &rate);
1280 	if (err)
1281 		return err;
1282 
1283 	switch(rate) {
1284 		case 1:
1285 			rrq->value = 1000000;
1286 			break;
1287 		case 2:
1288 			rrq->value = 2000000;
1289 			break;
1290 		case 5:
1291 			rrq->value = 5500000;
1292 			break;
1293 		case 11:
1294 			rrq->value = 11000000;
1295 			break;
1296 		default:
1297 			rrq->value = 0;
1298 	}
1299 	rrq->fixed = 0;
1300 	rrq->disabled = 0;
1301 
1302 	return 0;
1303 }
1304 
1305 static int zd1201_set_rts(struct net_device *dev, struct iw_request_info *info,
1306     struct iw_param *rts, char *extra)
1307 {
1308 	struct zd1201 *zd = netdev_priv(dev);
1309 	int err;
1310 	short val = rts->value;
1311 
1312 	if (rts->disabled || !rts->fixed)
1313 		val = ZD1201_RTSMAX;
1314 	if (val > ZD1201_RTSMAX)
1315 		return -EINVAL;
1316 	if (val < 0)
1317 		return -EINVAL;
1318 
1319 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFRTSTHRESHOLD, val);
1320 	if (err)
1321 		return err;
1322 	return zd1201_mac_reset(zd);
1323 }
1324 
1325 static int zd1201_get_rts(struct net_device *dev, struct iw_request_info *info,
1326     struct iw_param *rts, char *extra)
1327 {
1328 	struct zd1201 *zd = netdev_priv(dev);
1329 	short rtst;
1330 	int err;
1331 
1332 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFRTSTHRESHOLD, &rtst);
1333 	if (err)
1334 		return err;
1335 	rts->value = rtst;
1336 	rts->disabled = (rts->value == ZD1201_RTSMAX);
1337 	rts->fixed = 1;
1338 
1339 	return 0;
1340 }
1341 
1342 static int zd1201_set_frag(struct net_device *dev, struct iw_request_info *info,
1343     struct iw_param *frag, char *extra)
1344 {
1345 	struct zd1201 *zd = netdev_priv(dev);
1346 	int err;
1347 	short val = frag->value;
1348 
1349 	if (frag->disabled || !frag->fixed)
1350 		val = ZD1201_FRAGMAX;
1351 	if (val > ZD1201_FRAGMAX)
1352 		return -EINVAL;
1353 	if (val < ZD1201_FRAGMIN)
1354 		return -EINVAL;
1355 	if (val & 1)
1356 		return -EINVAL;
1357 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFFRAGTHRESHOLD, val);
1358 	if (err)
1359 		return err;
1360 	return zd1201_mac_reset(zd);
1361 }
1362 
1363 static int zd1201_get_frag(struct net_device *dev, struct iw_request_info *info,
1364     struct iw_param *frag, char *extra)
1365 {
1366 	struct zd1201 *zd = netdev_priv(dev);
1367 	short fragt;
1368 	int err;
1369 
1370 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFFRAGTHRESHOLD, &fragt);
1371 	if (err)
1372 		return err;
1373 	frag->value = fragt;
1374 	frag->disabled = (frag->value == ZD1201_FRAGMAX);
1375 	frag->fixed = 1;
1376 
1377 	return 0;
1378 }
1379 
1380 static int zd1201_set_retry(struct net_device *dev,
1381     struct iw_request_info *info, struct iw_param *rrq, char *extra)
1382 {
1383 	return 0;
1384 }
1385 
1386 static int zd1201_get_retry(struct net_device *dev,
1387     struct iw_request_info *info, struct iw_param *rrq, char *extra)
1388 {
1389 	return 0;
1390 }
1391 
1392 static int zd1201_set_encode(struct net_device *dev,
1393     struct iw_request_info *info, struct iw_point *erq, char *key)
1394 {
1395 	struct zd1201 *zd = netdev_priv(dev);
1396 	short i;
1397 	int err, rid;
1398 
1399 	if (erq->length > ZD1201_MAXKEYLEN)
1400 		return -EINVAL;
1401 
1402 	i = (erq->flags & IW_ENCODE_INDEX)-1;
1403 	if (i == -1) {
1404 		err = zd1201_getconfig16(zd,ZD1201_RID_CNFDEFAULTKEYID,&i);
1405 		if (err)
1406 			return err;
1407 	} else {
1408 		err = zd1201_setconfig16(zd, ZD1201_RID_CNFDEFAULTKEYID, i);
1409 		if (err)
1410 			return err;
1411 	}
1412 
1413 	if (i < 0 || i >= ZD1201_NUMKEYS)
1414 		return -EINVAL;
1415 
1416 	rid = ZD1201_RID_CNFDEFAULTKEY0 + i;
1417 	err = zd1201_setconfig(zd, rid, key, erq->length, 1);
1418 	if (err)
1419 		return err;
1420 	zd->encode_keylen[i] = erq->length;
1421 	memcpy(zd->encode_keys[i], key, erq->length);
1422 
1423 	i=0;
1424 	if (!(erq->flags & IW_ENCODE_DISABLED & IW_ENCODE_MODE)) {
1425 		i |= 0x01;
1426 		zd->encode_enabled = 1;
1427 	} else
1428 		zd->encode_enabled = 0;
1429 	if (erq->flags & IW_ENCODE_RESTRICTED & IW_ENCODE_MODE) {
1430 		i |= 0x02;
1431 		zd->encode_restricted = 1;
1432 	} else
1433 		zd->encode_restricted = 0;
1434 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFWEBFLAGS, i);
1435 	if (err)
1436 		return err;
1437 
1438 	if (zd->encode_enabled)
1439 		i = ZD1201_CNFAUTHENTICATION_SHAREDKEY;
1440 	else
1441 		i = ZD1201_CNFAUTHENTICATION_OPENSYSTEM;
1442 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFAUTHENTICATION, i);
1443 	if (err)
1444 		return err;
1445 
1446 	return zd1201_mac_reset(zd);
1447 }
1448 
1449 static int zd1201_get_encode(struct net_device *dev,
1450     struct iw_request_info *info, struct iw_point *erq, char *key)
1451 {
1452 	struct zd1201 *zd = netdev_priv(dev);
1453 	short i;
1454 	int err;
1455 
1456 	if (zd->encode_enabled)
1457 		erq->flags = IW_ENCODE_ENABLED;
1458 	else
1459 		erq->flags = IW_ENCODE_DISABLED;
1460 	if (zd->encode_restricted)
1461 		erq->flags |= IW_ENCODE_RESTRICTED;
1462 	else
1463 		erq->flags |= IW_ENCODE_OPEN;
1464 
1465 	i = (erq->flags & IW_ENCODE_INDEX) -1;
1466 	if (i == -1) {
1467 		err = zd1201_getconfig16(zd, ZD1201_RID_CNFDEFAULTKEYID, &i);
1468 		if (err)
1469 			return err;
1470 	}
1471 	if (i<0 || i>= ZD1201_NUMKEYS)
1472 		return -EINVAL;
1473 
1474 	erq->flags |= i+1;
1475 
1476 	erq->length = zd->encode_keylen[i];
1477 	memcpy(key, zd->encode_keys[i], erq->length);
1478 
1479 	return 0;
1480 }
1481 
1482 static int zd1201_set_power(struct net_device *dev,
1483     struct iw_request_info *info, struct iw_param *vwrq, char *extra)
1484 {
1485 	struct zd1201 *zd = netdev_priv(dev);
1486 	short enabled, duration, level;
1487 	int err;
1488 
1489 	enabled = vwrq->disabled ? 0 : 1;
1490 	if (enabled) {
1491 		if (vwrq->flags & IW_POWER_PERIOD) {
1492 			duration = vwrq->value;
1493 			err = zd1201_setconfig16(zd,
1494 			    ZD1201_RID_CNFMAXSLEEPDURATION, duration);
1495 			if (err)
1496 				return err;
1497 			goto out;
1498 		}
1499 		if (vwrq->flags & IW_POWER_TIMEOUT) {
1500 			err = zd1201_getconfig16(zd,
1501 			    ZD1201_RID_CNFMAXSLEEPDURATION, &duration);
1502 			if (err)
1503 				return err;
1504 			level = vwrq->value * 4 / duration;
1505 			if (level > 4)
1506 				level = 4;
1507 			if (level < 0)
1508 				level = 0;
1509 			err = zd1201_setconfig16(zd, ZD1201_RID_CNFPMEPS,
1510 			    level);
1511 			if (err)
1512 				return err;
1513 			goto out;
1514 		}
1515 		return -EINVAL;
1516 	}
1517 out:
1518 	return zd1201_setconfig16(zd, ZD1201_RID_CNFPMENABLED, enabled);
1519 }
1520 
1521 static int zd1201_get_power(struct net_device *dev,
1522     struct iw_request_info *info, struct iw_param *vwrq, char *extra)
1523 {
1524 	struct zd1201 *zd = netdev_priv(dev);
1525 	short enabled, level, duration;
1526 	int err;
1527 
1528 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFPMENABLED, &enabled);
1529 	if (err)
1530 		return err;
1531 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFPMEPS, &level);
1532 	if (err)
1533 		return err;
1534 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFMAXSLEEPDURATION, &duration);
1535 	if (err)
1536 		return err;
1537 	vwrq->disabled = enabled ? 0 : 1;
1538 	if (vwrq->flags & IW_POWER_TYPE) {
1539 		if (vwrq->flags & IW_POWER_PERIOD) {
1540 			vwrq->value = duration;
1541 			vwrq->flags = IW_POWER_PERIOD;
1542 		} else {
1543 			vwrq->value = duration * level / 4;
1544 			vwrq->flags = IW_POWER_TIMEOUT;
1545 		}
1546 	}
1547 	if (vwrq->flags & IW_POWER_MODE) {
1548 		if (enabled && level)
1549 			vwrq->flags = IW_POWER_UNICAST_R;
1550 		else
1551 			vwrq->flags = IW_POWER_ALL_R;
1552 	}
1553 
1554 	return 0;
1555 }
1556 
1557 
1558 static const iw_handler zd1201_iw_handler[] =
1559 {
1560 	(iw_handler) zd1201_config_commit,	/* SIOCSIWCOMMIT */
1561 	(iw_handler) zd1201_get_name,    	/* SIOCGIWNAME */
1562 	(iw_handler) NULL,			/* SIOCSIWNWID */
1563 	(iw_handler) NULL,			/* SIOCGIWNWID */
1564 	(iw_handler) zd1201_set_freq,		/* SIOCSIWFREQ */
1565 	(iw_handler) zd1201_get_freq,		/* SIOCGIWFREQ */
1566 	(iw_handler) zd1201_set_mode,		/* SIOCSIWMODE */
1567 	(iw_handler) zd1201_get_mode,		/* SIOCGIWMODE */
1568 	(iw_handler) NULL,                  	/* SIOCSIWSENS */
1569 	(iw_handler) NULL,           		/* SIOCGIWSENS */
1570 	(iw_handler) NULL,			/* SIOCSIWRANGE */
1571 	(iw_handler) zd1201_get_range,           /* SIOCGIWRANGE */
1572 	(iw_handler) NULL,			/* SIOCSIWPRIV */
1573 	(iw_handler) NULL,			/* SIOCGIWPRIV */
1574 	(iw_handler) NULL,			/* SIOCSIWSTATS */
1575 	(iw_handler) NULL,			/* SIOCGIWSTATS */
1576 	(iw_handler) NULL,			/* SIOCSIWSPY */
1577 	(iw_handler) NULL,			/* SIOCGIWSPY */
1578 	(iw_handler) NULL,			/* -- hole -- */
1579 	(iw_handler) NULL,			/* -- hole -- */
1580 	(iw_handler) NULL/*zd1201_set_wap*/,		/* SIOCSIWAP */
1581 	(iw_handler) zd1201_get_wap,		/* SIOCGIWAP */
1582 	(iw_handler) NULL,			/* -- hole -- */
1583 	(iw_handler) NULL,       		/* SIOCGIWAPLIST */
1584 	(iw_handler) zd1201_set_scan,		/* SIOCSIWSCAN */
1585 	(iw_handler) zd1201_get_scan,		/* SIOCGIWSCAN */
1586 	(iw_handler) zd1201_set_essid,		/* SIOCSIWESSID */
1587 	(iw_handler) zd1201_get_essid,		/* SIOCGIWESSID */
1588 	(iw_handler) NULL,         		/* SIOCSIWNICKN */
1589 	(iw_handler) zd1201_get_nick, 		/* SIOCGIWNICKN */
1590 	(iw_handler) NULL,			/* -- hole -- */
1591 	(iw_handler) NULL,			/* -- hole -- */
1592 	(iw_handler) zd1201_set_rate,		/* SIOCSIWRATE */
1593 	(iw_handler) zd1201_get_rate,		/* SIOCGIWRATE */
1594 	(iw_handler) zd1201_set_rts,		/* SIOCSIWRTS */
1595 	(iw_handler) zd1201_get_rts,		/* SIOCGIWRTS */
1596 	(iw_handler) zd1201_set_frag,		/* SIOCSIWFRAG */
1597 	(iw_handler) zd1201_get_frag,		/* SIOCGIWFRAG */
1598 	(iw_handler) NULL,         		/* SIOCSIWTXPOW */
1599 	(iw_handler) NULL,          		/* SIOCGIWTXPOW */
1600 	(iw_handler) zd1201_set_retry,		/* SIOCSIWRETRY */
1601 	(iw_handler) zd1201_get_retry,		/* SIOCGIWRETRY */
1602 	(iw_handler) zd1201_set_encode,		/* SIOCSIWENCODE */
1603 	(iw_handler) zd1201_get_encode,		/* SIOCGIWENCODE */
1604 	(iw_handler) zd1201_set_power,		/* SIOCSIWPOWER */
1605 	(iw_handler) zd1201_get_power,		/* SIOCGIWPOWER */
1606 };
1607 
1608 static int zd1201_set_hostauth(struct net_device *dev,
1609     struct iw_request_info *info, struct iw_param *rrq, char *extra)
1610 {
1611 	struct zd1201 *zd = netdev_priv(dev);
1612 
1613 	if (!zd->ap)
1614 		return -EOPNOTSUPP;
1615 
1616 	return zd1201_setconfig16(zd, ZD1201_RID_CNFHOSTAUTH, rrq->value);
1617 }
1618 
1619 static int zd1201_get_hostauth(struct net_device *dev,
1620     struct iw_request_info *info, struct iw_param *rrq, char *extra)
1621 {
1622 	struct zd1201 *zd = netdev_priv(dev);
1623 	short hostauth;
1624 	int err;
1625 
1626 	if (!zd->ap)
1627 		return -EOPNOTSUPP;
1628 
1629 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFHOSTAUTH, &hostauth);
1630 	if (err)
1631 		return err;
1632 	rrq->value = hostauth;
1633 	rrq->fixed = 1;
1634 
1635 	return 0;
1636 }
1637 
1638 static int zd1201_auth_sta(struct net_device *dev,
1639     struct iw_request_info *info, struct sockaddr *sta, char *extra)
1640 {
1641 	struct zd1201 *zd = netdev_priv(dev);
1642 	unsigned char buffer[10];
1643 
1644 	if (!zd->ap)
1645 		return -EOPNOTSUPP;
1646 
1647 	memcpy(buffer, sta->sa_data, ETH_ALEN);
1648 	*(short*)(buffer+6) = 0;	/* 0==success, 1==failure */
1649 	*(short*)(buffer+8) = 0;
1650 
1651 	return zd1201_setconfig(zd, ZD1201_RID_AUTHENTICATESTA, buffer, 10, 1);
1652 }
1653 
1654 static int zd1201_set_maxassoc(struct net_device *dev,
1655     struct iw_request_info *info, struct iw_param *rrq, char *extra)
1656 {
1657 	struct zd1201 *zd = netdev_priv(dev);
1658 	int err;
1659 
1660 	if (!zd->ap)
1661 		return -EOPNOTSUPP;
1662 
1663 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFMAXASSOCSTATIONS, rrq->value);
1664 	if (err)
1665 		return err;
1666 	return 0;
1667 }
1668 
1669 static int zd1201_get_maxassoc(struct net_device *dev,
1670     struct iw_request_info *info, struct iw_param *rrq, char *extra)
1671 {
1672 	struct zd1201 *zd = netdev_priv(dev);
1673 	short maxassoc;
1674 	int err;
1675 
1676 	if (!zd->ap)
1677 		return -EOPNOTSUPP;
1678 
1679 	err = zd1201_getconfig16(zd, ZD1201_RID_CNFMAXASSOCSTATIONS, &maxassoc);
1680 	if (err)
1681 		return err;
1682 	rrq->value = maxassoc;
1683 	rrq->fixed = 1;
1684 
1685 	return 0;
1686 }
1687 
1688 static const iw_handler zd1201_private_handler[] = {
1689 	(iw_handler) zd1201_set_hostauth,	/* ZD1201SIWHOSTAUTH */
1690 	(iw_handler) zd1201_get_hostauth,	/* ZD1201GIWHOSTAUTH */
1691 	(iw_handler) zd1201_auth_sta,		/* ZD1201SIWAUTHSTA */
1692 	(iw_handler) NULL,			/* nothing to get */
1693 	(iw_handler) zd1201_set_maxassoc,	/* ZD1201SIMAXASSOC */
1694 	(iw_handler) zd1201_get_maxassoc,	/* ZD1201GIMAXASSOC */
1695 };
1696 
1697 static const struct iw_priv_args zd1201_private_args[] = {
1698 	{ ZD1201SIWHOSTAUTH, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
1699 	    IW_PRIV_TYPE_NONE, "sethostauth" },
1700 	{ ZD1201GIWHOSTAUTH, IW_PRIV_TYPE_NONE,
1701 	    IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "gethostauth" },
1702 	{ ZD1201SIWAUTHSTA, IW_PRIV_TYPE_ADDR | IW_PRIV_SIZE_FIXED | 1,
1703 	    IW_PRIV_TYPE_NONE, "authstation" },
1704 	{ ZD1201SIWMAXASSOC, IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
1705 	    IW_PRIV_TYPE_NONE, "setmaxassoc" },
1706 	{ ZD1201GIWMAXASSOC, IW_PRIV_TYPE_NONE,
1707 	    IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, "getmaxassoc" },
1708 };
1709 
1710 static const struct iw_handler_def zd1201_iw_handlers = {
1711 	.num_standard 		= ARRAY_SIZE(zd1201_iw_handler),
1712 	.num_private 		= ARRAY_SIZE(zd1201_private_handler),
1713 	.num_private_args 	= ARRAY_SIZE(zd1201_private_args),
1714 	.standard 		= (iw_handler *)zd1201_iw_handler,
1715 	.private 		= (iw_handler *)zd1201_private_handler,
1716 	.private_args 		= (struct iw_priv_args *) zd1201_private_args,
1717 	.get_wireless_stats	= zd1201_get_wireless_stats,
1718 };
1719 
1720 static const struct net_device_ops zd1201_netdev_ops = {
1721 	.ndo_open		= zd1201_net_open,
1722 	.ndo_stop		= zd1201_net_stop,
1723 	.ndo_start_xmit		= zd1201_hard_start_xmit,
1724 	.ndo_tx_timeout		= zd1201_tx_timeout,
1725 	.ndo_set_rx_mode	= zd1201_set_multicast,
1726 	.ndo_set_mac_address	= zd1201_set_mac_address,
1727 	.ndo_validate_addr	= eth_validate_addr,
1728 };
1729 
1730 static int zd1201_probe(struct usb_interface *interface,
1731 			const struct usb_device_id *id)
1732 {
1733 	struct zd1201 *zd;
1734 	struct net_device *dev;
1735 	struct usb_device *usb;
1736 	int err;
1737 	short porttype;
1738 	char buf[IW_ESSID_MAX_SIZE+2];
1739 
1740 	usb = interface_to_usbdev(interface);
1741 
1742 	dev = alloc_etherdev(sizeof(*zd));
1743 	if (!dev)
1744 		return -ENOMEM;
1745 	zd = netdev_priv(dev);
1746 	zd->dev = dev;
1747 
1748 	zd->ap = ap;
1749 	zd->usb = usb;
1750 	zd->removed = 0;
1751 	init_waitqueue_head(&zd->rxdataq);
1752 	INIT_HLIST_HEAD(&zd->fraglist);
1753 
1754 	err = zd1201_fw_upload(usb, zd->ap);
1755 	if (err) {
1756 		dev_err(&usb->dev, "zd1201 firmware upload failed: %d\n", err);
1757 		goto err_zd;
1758 	}
1759 
1760 	zd->endp_in = 1;
1761 	zd->endp_out = 1;
1762 	zd->endp_out2 = 2;
1763 	zd->rx_urb = usb_alloc_urb(0, GFP_KERNEL);
1764 	zd->tx_urb = usb_alloc_urb(0, GFP_KERNEL);
1765 	if (!zd->rx_urb || !zd->tx_urb) {
1766 		err = -ENOMEM;
1767 		goto err_zd;
1768 	}
1769 
1770 	mdelay(100);
1771 	err = zd1201_drvr_start(zd);
1772 	if (err)
1773 		goto err_zd;
1774 
1775 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFMAXDATALEN, 2312);
1776 	if (err)
1777 		goto err_start;
1778 
1779 	err = zd1201_setconfig16(zd, ZD1201_RID_TXRATECNTL,
1780 	    ZD1201_RATEB1 | ZD1201_RATEB2 | ZD1201_RATEB5 | ZD1201_RATEB11);
1781 	if (err)
1782 		goto err_start;
1783 
1784 	dev->netdev_ops = &zd1201_netdev_ops;
1785 	dev->wireless_handlers = &zd1201_iw_handlers;
1786 	dev->watchdog_timeo = ZD1201_TX_TIMEOUT;
1787 	strcpy(dev->name, "wlan%d");
1788 
1789 	err = zd1201_getconfig(zd, ZD1201_RID_CNFOWNMACADDR,
1790 	    dev->dev_addr, dev->addr_len);
1791 	if (err)
1792 		goto err_start;
1793 
1794 	/* Set wildcard essid to match zd->essid */
1795 	*(__le16 *)buf = cpu_to_le16(0);
1796 	err = zd1201_setconfig(zd, ZD1201_RID_CNFDESIREDSSID, buf,
1797 	    IW_ESSID_MAX_SIZE+2, 1);
1798 	if (err)
1799 		goto err_start;
1800 
1801 	if (zd->ap)
1802 		porttype = ZD1201_PORTTYPE_AP;
1803 	else
1804 		porttype = ZD1201_PORTTYPE_BSS;
1805 	err = zd1201_setconfig16(zd, ZD1201_RID_CNFPORTTYPE, porttype);
1806 	if (err)
1807 		goto err_start;
1808 
1809 	SET_NETDEV_DEV(dev, &usb->dev);
1810 
1811 	err = register_netdev(dev);
1812 	if (err)
1813 		goto err_start;
1814 	dev_info(&usb->dev, "%s: ZD1201 USB Wireless interface\n",
1815 	    dev->name);
1816 
1817 	usb_set_intfdata(interface, zd);
1818 	zd1201_enable(zd);	/* zd1201 likes to startup enabled, */
1819 	zd1201_disable(zd);	/* interfering with all the wifis in range */
1820 	return 0;
1821 
1822 err_start:
1823 	/* Leave the device in reset state */
1824 	zd1201_docmd(zd, ZD1201_CMDCODE_INIT, 0, 0, 0);
1825 err_zd:
1826 	usb_free_urb(zd->tx_urb);
1827 	usb_free_urb(zd->rx_urb);
1828 	free_netdev(dev);
1829 	return err;
1830 }
1831 
1832 static void zd1201_disconnect(struct usb_interface *interface)
1833 {
1834 	struct zd1201 *zd = usb_get_intfdata(interface);
1835 	struct hlist_node *node2;
1836 	struct zd1201_frag *frag;
1837 
1838 	if (!zd)
1839 		return;
1840 	usb_set_intfdata(interface, NULL);
1841 
1842 	hlist_for_each_entry_safe(frag, node2, &zd->fraglist, fnode) {
1843 		hlist_del_init(&frag->fnode);
1844 		kfree_skb(frag->skb);
1845 		kfree(frag);
1846 	}
1847 
1848 	if (zd->tx_urb) {
1849 		usb_kill_urb(zd->tx_urb);
1850 		usb_free_urb(zd->tx_urb);
1851 	}
1852 	if (zd->rx_urb) {
1853 		usb_kill_urb(zd->rx_urb);
1854 		usb_free_urb(zd->rx_urb);
1855 	}
1856 
1857 	if (zd->dev) {
1858 		unregister_netdev(zd->dev);
1859 		free_netdev(zd->dev);
1860 	}
1861 }
1862 
1863 #ifdef CONFIG_PM
1864 
1865 static int zd1201_suspend(struct usb_interface *interface,
1866 			   pm_message_t message)
1867 {
1868 	struct zd1201 *zd = usb_get_intfdata(interface);
1869 
1870 	netif_device_detach(zd->dev);
1871 
1872 	zd->was_enabled = zd->mac_enabled;
1873 
1874 	if (zd->was_enabled)
1875 		return zd1201_disable(zd);
1876 	else
1877 		return 0;
1878 }
1879 
1880 static int zd1201_resume(struct usb_interface *interface)
1881 {
1882 	struct zd1201 *zd = usb_get_intfdata(interface);
1883 
1884 	if (!zd || !zd->dev)
1885 		return -ENODEV;
1886 
1887 	netif_device_attach(zd->dev);
1888 
1889 	if (zd->was_enabled)
1890 		return zd1201_enable(zd);
1891 	else
1892 		return 0;
1893 }
1894 
1895 #else
1896 
1897 #define zd1201_suspend NULL
1898 #define zd1201_resume  NULL
1899 
1900 #endif
1901 
1902 static struct usb_driver zd1201_usb = {
1903 	.name = "zd1201",
1904 	.probe = zd1201_probe,
1905 	.disconnect = zd1201_disconnect,
1906 	.id_table = zd1201_table,
1907 	.suspend = zd1201_suspend,
1908 	.resume = zd1201_resume,
1909 	.disable_hub_initiated_lpm = 1,
1910 };
1911 
1912 module_usb_driver(zd1201_usb);
1913