1 // SPDX-License-Identifier: GPL-2.0 2 /* 3 * Driver for KeyStream wireless LAN cards. 4 * 5 * Copyright (C) 2005-2008 KeyStream Corp. 6 * Copyright (C) 2009 Renesas Technology Corp. 7 */ 8 9 #include <crypto/hash.h> 10 #include <linux/circ_buf.h> 11 #include <linux/if_arp.h> 12 #include <net/iw_handler.h> 13 #include <uapi/linux/llc.h> 14 #include "eap_packet.h" 15 #include "ks_wlan.h" 16 #include "ks_hostif.h" 17 18 #define MICHAEL_MIC_KEY_LEN 8 19 #define MICHAEL_MIC_LEN 8 20 21 static inline void inc_smeqhead(struct ks_wlan_private *priv) 22 { 23 priv->sme_i.qhead = (priv->sme_i.qhead + 1) % SME_EVENT_BUFF_SIZE; 24 } 25 26 static inline void inc_smeqtail(struct ks_wlan_private *priv) 27 { 28 priv->sme_i.qtail = (priv->sme_i.qtail + 1) % SME_EVENT_BUFF_SIZE; 29 } 30 31 static inline unsigned int cnt_smeqbody(struct ks_wlan_private *priv) 32 { 33 return CIRC_CNT_TO_END(priv->sme_i.qhead, priv->sme_i.qtail, 34 SME_EVENT_BUFF_SIZE); 35 } 36 37 static inline u8 get_byte(struct ks_wlan_private *priv) 38 { 39 u8 data; 40 41 data = *priv->rxp++; 42 /* length check in advance ! */ 43 --(priv->rx_size); 44 return data; 45 } 46 47 static inline u16 get_word(struct ks_wlan_private *priv) 48 { 49 u16 data; 50 51 data = (get_byte(priv) & 0xff); 52 data |= ((get_byte(priv) << 8) & 0xff00); 53 return data; 54 } 55 56 static inline u32 get_dword(struct ks_wlan_private *priv) 57 { 58 u32 data; 59 60 data = (get_byte(priv) & 0xff); 61 data |= ((get_byte(priv) << 8) & 0x0000ff00); 62 data |= ((get_byte(priv) << 16) & 0x00ff0000); 63 data |= ((get_byte(priv) << 24) & 0xff000000); 64 return data; 65 } 66 67 static void ks_wlan_hw_wakeup_task(struct work_struct *work) 68 { 69 struct ks_wlan_private *priv; 70 int ps_status; 71 long time_left; 72 73 priv = container_of(work, struct ks_wlan_private, wakeup_work); 74 ps_status = atomic_read(&priv->psstatus.status); 75 76 if (ps_status == PS_SNOOZE) { 77 ks_wlan_hw_wakeup_request(priv); 78 time_left = wait_for_completion_interruptible_timeout( 79 &priv->psstatus.wakeup_wait, 80 msecs_to_jiffies(20)); 81 if (time_left <= 0) { 82 netdev_dbg(priv->net_dev, "wake up timeout or interrupted !!!\n"); 83 schedule_work(&priv->wakeup_work); 84 return; 85 } 86 } 87 } 88 89 static void ks_wlan_do_power_save(struct ks_wlan_private *priv) 90 { 91 if (is_connect_status(priv->connect_status)) 92 hostif_sme_enqueue(priv, SME_POW_MNGMT_REQUEST); 93 else 94 priv->dev_state = DEVICE_STATE_READY; 95 } 96 97 static 98 int get_current_ap(struct ks_wlan_private *priv, struct link_ap_info *ap_info) 99 { 100 struct local_ap *ap; 101 union iwreq_data wrqu; 102 struct net_device *netdev = priv->net_dev; 103 u8 size; 104 105 ap = &priv->current_ap; 106 107 if (is_disconnect_status(priv->connect_status)) { 108 memset(ap, 0, sizeof(struct local_ap)); 109 return -EPERM; 110 } 111 112 ether_addr_copy(ap->bssid, ap_info->bssid); 113 memcpy(ap->ssid.body, priv->reg.ssid.body, 114 priv->reg.ssid.size); 115 ap->ssid.size = priv->reg.ssid.size; 116 memcpy(ap->rate_set.body, ap_info->rate_set.body, 117 ap_info->rate_set.size); 118 ap->rate_set.size = ap_info->rate_set.size; 119 if (ap_info->ext_rate_set.size != 0) { 120 memcpy(&ap->rate_set.body[ap->rate_set.size], 121 ap_info->ext_rate_set.body, 122 ap_info->ext_rate_set.size); 123 ap->rate_set.size += ap_info->ext_rate_set.size; 124 } 125 ap->channel = ap_info->ds_parameter.channel; 126 ap->rssi = ap_info->rssi; 127 ap->sq = ap_info->sq; 128 ap->noise = ap_info->noise; 129 ap->capability = le16_to_cpu(ap_info->capability); 130 size = (ap_info->rsn.size <= RSN_IE_BODY_MAX) ? 131 ap_info->rsn.size : RSN_IE_BODY_MAX; 132 if ((ap_info->rsn_mode & RSN_MODE_WPA2) && 133 (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2)) { 134 ap->rsn_ie.id = RSN_INFO_ELEM_ID; 135 ap->rsn_ie.size = size; 136 memcpy(ap->rsn_ie.body, ap_info->rsn.body, size); 137 } else if ((ap_info->rsn_mode & RSN_MODE_WPA) && 138 (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA)) { 139 ap->wpa_ie.id = WPA_INFO_ELEM_ID; 140 ap->wpa_ie.size = size; 141 memcpy(ap->wpa_ie.body, ap_info->rsn.body, size); 142 } else { 143 ap->rsn_ie.id = 0; 144 ap->rsn_ie.size = 0; 145 ap->wpa_ie.id = 0; 146 ap->wpa_ie.size = 0; 147 } 148 149 wrqu.data.length = 0; 150 wrqu.data.flags = 0; 151 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 152 if (is_connect_status(priv->connect_status)) { 153 ether_addr_copy(wrqu.ap_addr.sa_data, priv->current_ap.bssid); 154 netdev_dbg(priv->net_dev, 155 "IWEVENT: connect bssid=%pM\n", 156 wrqu.ap_addr.sa_data); 157 wireless_send_event(netdev, SIOCGIWAP, &wrqu, NULL); 158 } 159 netdev_dbg(priv->net_dev, "Link AP\n" 160 "- bssid=%pM\n" 161 "- essid=%s\n" 162 "- rate_set=%02X,%02X,%02X,%02X,%02X,%02X,%02X,%02X\n" 163 "- channel=%d\n" 164 "- rssi=%d\n" 165 "- sq=%d\n" 166 "- capability=%04X\n" 167 "- rsn.mode=%d\n" 168 "- rsn.size=%d\n" 169 "- ext_rate_set_size=%d\n" 170 "- rate_set_size=%d\n", 171 ap->bssid, 172 &ap->ssid.body[0], 173 ap->rate_set.body[0], ap->rate_set.body[1], 174 ap->rate_set.body[2], ap->rate_set.body[3], 175 ap->rate_set.body[4], ap->rate_set.body[5], 176 ap->rate_set.body[6], ap->rate_set.body[7], 177 ap->channel, ap->rssi, ap->sq, ap->capability, 178 ap_info->rsn_mode, ap_info->rsn.size, 179 ap_info->ext_rate_set.size, ap_info->rate_set.size); 180 181 return 0; 182 } 183 184 static u8 read_ie(unsigned char *bp, u8 max, u8 *body) 185 { 186 u8 size = (*(bp + 1) <= max) ? *(bp + 1) : max; 187 188 memcpy(body, bp + 2, size); 189 return size; 190 } 191 192 static int 193 michael_mic(u8 *key, u8 *data, unsigned int len, u8 priority, u8 *result) 194 { 195 u8 pad_data[4] = { priority, 0, 0, 0 }; 196 struct crypto_shash *tfm = NULL; 197 struct shash_desc *desc = NULL; 198 int ret; 199 200 tfm = crypto_alloc_shash("michael_mic", 0, 0); 201 if (IS_ERR(tfm)) { 202 ret = PTR_ERR(tfm); 203 goto err; 204 } 205 206 ret = crypto_shash_setkey(tfm, key, MICHAEL_MIC_KEY_LEN); 207 if (ret < 0) 208 goto err_free_tfm; 209 210 desc = kmalloc(sizeof(*desc) + crypto_shash_descsize(tfm), GFP_KERNEL); 211 if (!desc) { 212 ret = -ENOMEM; 213 goto err_free_tfm; 214 } 215 216 desc->tfm = tfm; 217 218 ret = crypto_shash_init(desc); 219 if (ret < 0) 220 goto err_free_desc; 221 222 // Compute the MIC value 223 /* 224 * IEEE802.11i page 47 225 * Figure 43g TKIP MIC processing format 226 * +--+--+--------+--+----+--+--+--+--+--+--+--+--+ 227 * |6 |6 |1 |3 |M |1 |1 |1 |1 |1 |1 |1 |1 | Octet 228 * +--+--+--------+--+----+--+--+--+--+--+--+--+--+ 229 * |DA|SA|Priority|0 |Data|M0|M1|M2|M3|M4|M5|M6|M7| 230 * +--+--+--------+--+----+--+--+--+--+--+--+--+--+ 231 */ 232 233 ret = crypto_shash_update(desc, data, 12); 234 if (ret < 0) 235 goto err_free_desc; 236 237 ret = crypto_shash_update(desc, pad_data, 4); 238 if (ret < 0) 239 goto err_free_desc; 240 241 ret = crypto_shash_finup(desc, data + 12, len - 12, result); 242 243 err_free_desc: 244 kfree_sensitive(desc); 245 246 err_free_tfm: 247 crypto_free_shash(tfm); 248 249 err: 250 return ret; 251 } 252 253 static 254 int get_ap_information(struct ks_wlan_private *priv, struct ap_info *ap_info, 255 struct local_ap *ap) 256 { 257 unsigned char *bp; 258 int bsize, offset; 259 260 memset(ap, 0, sizeof(struct local_ap)); 261 262 ether_addr_copy(ap->bssid, ap_info->bssid); 263 ap->rssi = ap_info->rssi; 264 ap->sq = ap_info->sq; 265 ap->noise = ap_info->noise; 266 ap->capability = le16_to_cpu(ap_info->capability); 267 ap->channel = ap_info->ch_info; 268 269 bp = ap_info->body; 270 bsize = le16_to_cpu(ap_info->body_size); 271 offset = 0; 272 273 while (bsize > offset) { 274 switch (*bp) { /* Information Element ID */ 275 case WLAN_EID_SSID: 276 ap->ssid.size = read_ie(bp, IEEE80211_MAX_SSID_LEN, 277 ap->ssid.body); 278 break; 279 case WLAN_EID_SUPP_RATES: 280 case WLAN_EID_EXT_SUPP_RATES: 281 if ((*(bp + 1) + ap->rate_set.size) <= 282 RATE_SET_MAX_SIZE) { 283 memcpy(&ap->rate_set.body[ap->rate_set.size], 284 bp + 2, *(bp + 1)); 285 ap->rate_set.size += *(bp + 1); 286 } else { 287 memcpy(&ap->rate_set.body[ap->rate_set.size], 288 bp + 2, 289 RATE_SET_MAX_SIZE - ap->rate_set.size); 290 ap->rate_set.size += 291 (RATE_SET_MAX_SIZE - ap->rate_set.size); 292 } 293 break; 294 case WLAN_EID_RSN: 295 ap->rsn_ie.id = *bp; 296 ap->rsn_ie.size = read_ie(bp, RSN_IE_BODY_MAX, 297 ap->rsn_ie.body); 298 break; 299 case WLAN_EID_VENDOR_SPECIFIC: /* WPA */ 300 /* WPA OUI check */ 301 if (memcmp(bp + 2, CIPHER_ID_WPA_WEP40, 4) == 0) { 302 ap->wpa_ie.id = *bp; 303 ap->wpa_ie.size = read_ie(bp, RSN_IE_BODY_MAX, 304 ap->wpa_ie.body); 305 } 306 break; 307 case WLAN_EID_DS_PARAMS: 308 case WLAN_EID_FH_PARAMS: 309 case WLAN_EID_CF_PARAMS: 310 case WLAN_EID_TIM: 311 case WLAN_EID_IBSS_PARAMS: 312 case WLAN_EID_COUNTRY: 313 case WLAN_EID_ERP_INFO: 314 break; 315 default: 316 netdev_err(priv->net_dev, 317 "unknown Element ID=%d\n", *bp); 318 break; 319 } 320 321 offset += 2; /* id & size field */ 322 offset += *(bp + 1); /* +size offset */ 323 bp += (*(bp + 1) + 2); /* pointer update */ 324 } 325 326 return 0; 327 } 328 329 static 330 int hostif_data_indication_wpa(struct ks_wlan_private *priv, 331 unsigned short auth_type) 332 { 333 struct ether_hdr *eth_hdr; 334 unsigned short eth_proto; 335 unsigned char recv_mic[MICHAEL_MIC_LEN]; 336 char buf[128]; 337 unsigned long now; 338 struct mic_failure *mic_failure; 339 u8 mic[MICHAEL_MIC_LEN]; 340 union iwreq_data wrqu; 341 unsigned int key_index = auth_type - 1; 342 struct wpa_key *key = &priv->wpa.key[key_index]; 343 344 eth_hdr = (struct ether_hdr *)(priv->rxp); 345 eth_proto = ntohs(eth_hdr->h_proto); 346 347 if (eth_hdr->h_dest_snap != eth_hdr->h_source_snap) { 348 netdev_err(priv->net_dev, "invalid data format\n"); 349 priv->nstats.rx_errors++; 350 return -EINVAL; 351 } 352 if (((auth_type == TYPE_PMK1 && 353 priv->wpa.pairwise_suite == IW_AUTH_CIPHER_TKIP) || 354 (auth_type == TYPE_GMK1 && 355 priv->wpa.group_suite == IW_AUTH_CIPHER_TKIP) || 356 (auth_type == TYPE_GMK2 && 357 priv->wpa.group_suite == IW_AUTH_CIPHER_TKIP)) && 358 key->key_len) { 359 int ret; 360 361 netdev_dbg(priv->net_dev, "TKIP: protocol=%04X: size=%u\n", 362 eth_proto, priv->rx_size); 363 /* MIC save */ 364 memcpy(&recv_mic[0], 365 (priv->rxp) + ((priv->rx_size) - sizeof(recv_mic)), 366 sizeof(recv_mic)); 367 priv->rx_size = priv->rx_size - sizeof(recv_mic); 368 369 ret = michael_mic(key->rx_mic_key, priv->rxp, priv->rx_size, 370 0, mic); 371 if (ret < 0) 372 return ret; 373 if (memcmp(mic, recv_mic, sizeof(mic)) != 0) { 374 now = jiffies; 375 mic_failure = &priv->wpa.mic_failure; 376 /* MIC FAILURE */ 377 if (mic_failure->last_failure_time && 378 (now - mic_failure->last_failure_time) / HZ >= 60) { 379 mic_failure->failure = 0; 380 } 381 netdev_err(priv->net_dev, "MIC FAILURE\n"); 382 if (mic_failure->failure == 0) { 383 mic_failure->failure = 1; 384 mic_failure->counter = 0; 385 } else if (mic_failure->failure == 1) { 386 mic_failure->failure = 2; 387 mic_failure->counter = 388 (u16)((now - mic_failure->last_failure_time) / HZ); 389 /* range 1-60 */ 390 if (!mic_failure->counter) 391 mic_failure->counter = 1; 392 } 393 priv->wpa.mic_failure.last_failure_time = now; 394 395 /* needed parameters: count, keyid, key type, TSC */ 396 sprintf(buf, 397 "MLME-MICHAELMICFAILURE.indication(keyid=%d %scast addr=%pM)", 398 key_index, 399 eth_hdr->h_dest[0] & 0x01 ? "broad" : "uni", 400 eth_hdr->h_source); 401 memset(&wrqu, 0, sizeof(wrqu)); 402 wrqu.data.length = strlen(buf); 403 wireless_send_event(priv->net_dev, IWEVCUSTOM, &wrqu, 404 buf); 405 return -EINVAL; 406 } 407 } 408 return 0; 409 } 410 411 static 412 void hostif_data_indication(struct ks_wlan_private *priv) 413 { 414 unsigned int rx_ind_size; /* indicate data size */ 415 struct sk_buff *skb; 416 u16 auth_type; 417 unsigned char temp[256]; 418 struct ether_hdr *eth_hdr; 419 struct ieee802_1x_hdr *aa1x_hdr; 420 size_t size; 421 int ret; 422 423 /* min length check */ 424 if (priv->rx_size <= ETH_HLEN) { 425 priv->nstats.rx_errors++; 426 return; 427 } 428 429 auth_type = get_word(priv); /* AuthType */ 430 get_word(priv); /* Reserve Area */ 431 432 eth_hdr = (struct ether_hdr *)(priv->rxp); 433 434 /* source address check */ 435 if (ether_addr_equal(&priv->eth_addr[0], eth_hdr->h_source)) { 436 netdev_err(priv->net_dev, "invalid : source is own mac address !!\n"); 437 netdev_err(priv->net_dev, "eth_hdrernet->h_dest=%pM\n", eth_hdr->h_source); 438 priv->nstats.rx_errors++; 439 return; 440 } 441 442 /* for WPA */ 443 if (auth_type != TYPE_DATA && priv->wpa.rsn_enabled) { 444 ret = hostif_data_indication_wpa(priv, auth_type); 445 if (ret) 446 return; 447 } 448 449 if ((priv->connect_status & FORCE_DISCONNECT) || 450 priv->wpa.mic_failure.failure == 2) { 451 return; 452 } 453 454 /* check 13th byte at rx data */ 455 switch (*(priv->rxp + 12)) { 456 case LLC_SAP_SNAP: 457 rx_ind_size = priv->rx_size - 6; 458 skb = dev_alloc_skb(rx_ind_size); 459 if (!skb) { 460 priv->nstats.rx_dropped++; 461 return; 462 } 463 netdev_dbg(priv->net_dev, "SNAP, rx_ind_size = %d\n", 464 rx_ind_size); 465 466 size = ETH_ALEN * 2; 467 skb_put_data(skb, priv->rxp, size); 468 469 /* (SNAP+UI..) skip */ 470 471 size = rx_ind_size - (ETH_ALEN * 2); 472 skb_put_data(skb, ð_hdr->h_proto, size); 473 474 aa1x_hdr = (struct ieee802_1x_hdr *)(priv->rxp + ETHER_HDR_SIZE); 475 break; 476 case LLC_SAP_NETBEUI: 477 rx_ind_size = (priv->rx_size + 2); 478 skb = dev_alloc_skb(rx_ind_size); 479 if (!skb) { 480 priv->nstats.rx_dropped++; 481 return; 482 } 483 netdev_dbg(priv->net_dev, "NETBEUI/NetBIOS rx_ind_size=%d\n", 484 rx_ind_size); 485 486 /* 8802/FDDI MAC copy */ 487 skb_put_data(skb, priv->rxp, 12); 488 489 /* NETBEUI size add */ 490 temp[0] = (((rx_ind_size - 12) >> 8) & 0xff); 491 temp[1] = ((rx_ind_size - 12) & 0xff); 492 skb_put_data(skb, temp, 2); 493 494 /* copy after Type */ 495 skb_put_data(skb, priv->rxp + 12, rx_ind_size - 14); 496 497 aa1x_hdr = (struct ieee802_1x_hdr *)(priv->rxp + 14); 498 break; 499 default: /* other rx data */ 500 netdev_err(priv->net_dev, "invalid data format\n"); 501 priv->nstats.rx_errors++; 502 return; 503 } 504 505 if (aa1x_hdr->type == IEEE802_1X_TYPE_EAPOL_KEY && 506 priv->wpa.rsn_enabled) 507 atomic_set(&priv->psstatus.snooze_guard, 1); 508 509 /* rx indication */ 510 skb->dev = priv->net_dev; 511 skb->protocol = eth_type_trans(skb, skb->dev); 512 priv->nstats.rx_packets++; 513 priv->nstats.rx_bytes += rx_ind_size; 514 netif_rx(skb); 515 } 516 517 static 518 void hostif_mib_get_confirm(struct ks_wlan_private *priv) 519 { 520 struct net_device *dev = priv->net_dev; 521 u32 mib_status; 522 u32 mib_attribute; 523 524 mib_status = get_dword(priv); 525 mib_attribute = get_dword(priv); 526 get_word(priv); /* mib_val_size */ 527 get_word(priv); /* mib_val_type */ 528 529 if (mib_status) { 530 netdev_err(priv->net_dev, "attribute=%08X, status=%08X\n", 531 mib_attribute, mib_status); 532 return; 533 } 534 535 switch (mib_attribute) { 536 case DOT11_MAC_ADDRESS: 537 hostif_sme_enqueue(priv, SME_GET_MAC_ADDRESS); 538 ether_addr_copy(priv->eth_addr, priv->rxp); 539 priv->mac_address_valid = true; 540 eth_hw_addr_set(dev, priv->eth_addr); 541 netdev_info(dev, "MAC ADDRESS = %pM\n", priv->eth_addr); 542 break; 543 case DOT11_PRODUCT_VERSION: 544 priv->version_size = priv->rx_size; 545 memcpy(priv->firmware_version, priv->rxp, priv->rx_size); 546 priv->firmware_version[priv->rx_size] = '\0'; 547 netdev_info(dev, "firmware ver. = %s\n", 548 priv->firmware_version); 549 hostif_sme_enqueue(priv, SME_GET_PRODUCT_VERSION); 550 /* wake_up_interruptible_all(&priv->confirm_wait); */ 551 complete(&priv->confirm_wait); 552 break; 553 case LOCAL_GAIN: 554 memcpy(&priv->gain, priv->rxp, sizeof(priv->gain)); 555 netdev_dbg(priv->net_dev, "tx_mode=%d, rx_mode=%d, tx_gain=%d, rx_gain=%d\n", 556 priv->gain.tx_mode, priv->gain.rx_mode, 557 priv->gain.tx_gain, priv->gain.rx_gain); 558 break; 559 case LOCAL_EEPROM_SUM: 560 memcpy(&priv->eeprom_sum, priv->rxp, sizeof(priv->eeprom_sum)); 561 if (priv->eeprom_sum.type != 0 && 562 priv->eeprom_sum.type != 1) { 563 netdev_err(dev, "LOCAL_EEPROM_SUM error!\n"); 564 return; 565 } 566 priv->eeprom_checksum = (priv->eeprom_sum.type == 0) ? 567 EEPROM_CHECKSUM_NONE : 568 (priv->eeprom_sum.result == 0) ? 569 EEPROM_NG : EEPROM_OK; 570 break; 571 default: 572 netdev_err(priv->net_dev, "mib_attribute=%08x\n", 573 (unsigned int)mib_attribute); 574 break; 575 } 576 } 577 578 static 579 void hostif_mib_set_confirm(struct ks_wlan_private *priv) 580 { 581 u32 mib_status; 582 u32 mib_attribute; 583 584 mib_status = get_dword(priv); 585 mib_attribute = get_dword(priv); 586 587 if (mib_status) { 588 /* in case of error */ 589 netdev_err(priv->net_dev, "error :: attribute=%08X, status=%08X\n", 590 mib_attribute, mib_status); 591 } 592 593 switch (mib_attribute) { 594 case DOT11_RTS_THRESHOLD: 595 hostif_sme_enqueue(priv, SME_RTS_THRESHOLD_CONFIRM); 596 break; 597 case DOT11_FRAGMENTATION_THRESHOLD: 598 hostif_sme_enqueue(priv, SME_FRAGMENTATION_THRESHOLD_CONFIRM); 599 break; 600 case DOT11_WEP_DEFAULT_KEY_ID: 601 if (!priv->wpa.wpa_enabled) 602 hostif_sme_enqueue(priv, SME_WEP_INDEX_CONFIRM); 603 break; 604 case DOT11_WEP_DEFAULT_KEY_VALUE1: 605 if (priv->wpa.rsn_enabled) 606 hostif_sme_enqueue(priv, SME_SET_PMK_TSC); 607 else 608 hostif_sme_enqueue(priv, SME_WEP_KEY1_CONFIRM); 609 break; 610 case DOT11_WEP_DEFAULT_KEY_VALUE2: 611 if (priv->wpa.rsn_enabled) 612 hostif_sme_enqueue(priv, SME_SET_GMK1_TSC); 613 else 614 hostif_sme_enqueue(priv, SME_WEP_KEY2_CONFIRM); 615 break; 616 case DOT11_WEP_DEFAULT_KEY_VALUE3: 617 if (priv->wpa.rsn_enabled) 618 hostif_sme_enqueue(priv, SME_SET_GMK2_TSC); 619 else 620 hostif_sme_enqueue(priv, SME_WEP_KEY3_CONFIRM); 621 break; 622 case DOT11_WEP_DEFAULT_KEY_VALUE4: 623 if (!priv->wpa.rsn_enabled) 624 hostif_sme_enqueue(priv, SME_WEP_KEY4_CONFIRM); 625 break; 626 case DOT11_PRIVACY_INVOKED: 627 if (!priv->wpa.rsn_enabled) 628 hostif_sme_enqueue(priv, SME_WEP_FLAG_CONFIRM); 629 break; 630 case DOT11_RSN_ENABLED: 631 hostif_sme_enqueue(priv, SME_RSN_ENABLED_CONFIRM); 632 break; 633 case LOCAL_RSN_MODE: 634 hostif_sme_enqueue(priv, SME_RSN_MODE_CONFIRM); 635 break; 636 case LOCAL_MULTICAST_ADDRESS: 637 hostif_sme_enqueue(priv, SME_MULTICAST_REQUEST); 638 break; 639 case LOCAL_MULTICAST_FILTER: 640 hostif_sme_enqueue(priv, SME_MULTICAST_CONFIRM); 641 break; 642 case LOCAL_CURRENTADDRESS: 643 priv->mac_address_valid = true; 644 break; 645 case DOT11_RSN_CONFIG_MULTICAST_CIPHER: 646 hostif_sme_enqueue(priv, SME_RSN_MCAST_CONFIRM); 647 break; 648 case DOT11_RSN_CONFIG_UNICAST_CIPHER: 649 hostif_sme_enqueue(priv, SME_RSN_UCAST_CONFIRM); 650 break; 651 case DOT11_RSN_CONFIG_AUTH_SUITE: 652 hostif_sme_enqueue(priv, SME_RSN_AUTH_CONFIRM); 653 break; 654 case DOT11_GMK1_TSC: 655 if (atomic_read(&priv->psstatus.snooze_guard)) 656 atomic_set(&priv->psstatus.snooze_guard, 0); 657 break; 658 case DOT11_GMK2_TSC: 659 if (atomic_read(&priv->psstatus.snooze_guard)) 660 atomic_set(&priv->psstatus.snooze_guard, 0); 661 break; 662 case DOT11_PMK_TSC: 663 case LOCAL_PMK: 664 case LOCAL_GAIN: 665 case LOCAL_WPS_ENABLE: 666 case LOCAL_WPS_PROBE_REQ: 667 case LOCAL_REGION: 668 default: 669 break; 670 } 671 } 672 673 static 674 void hostif_power_mgmt_confirm(struct ks_wlan_private *priv) 675 { 676 if (priv->reg.power_mgmt > POWER_MGMT_ACTIVE && 677 priv->reg.operation_mode == MODE_INFRASTRUCTURE) { 678 atomic_set(&priv->psstatus.confirm_wait, 0); 679 priv->dev_state = DEVICE_STATE_SLEEP; 680 ks_wlan_hw_power_save(priv); 681 } else { 682 priv->dev_state = DEVICE_STATE_READY; 683 } 684 } 685 686 static 687 void hostif_sleep_confirm(struct ks_wlan_private *priv) 688 { 689 atomic_set(&priv->sleepstatus.doze_request, 1); 690 queue_delayed_work(priv->wq, &priv->rw_dwork, 1); 691 } 692 693 static 694 void hostif_start_confirm(struct ks_wlan_private *priv) 695 { 696 union iwreq_data wrqu; 697 698 wrqu.data.length = 0; 699 wrqu.data.flags = 0; 700 wrqu.ap_addr.sa_family = ARPHRD_ETHER; 701 if (is_connect_status(priv->connect_status)) { 702 eth_zero_addr(wrqu.ap_addr.sa_data); 703 wireless_send_event(priv->net_dev, SIOCGIWAP, &wrqu, NULL); 704 } 705 netdev_dbg(priv->net_dev, " scan_ind_count=%d\n", priv->scan_ind_count); 706 hostif_sme_enqueue(priv, SME_START_CONFIRM); 707 } 708 709 static 710 void hostif_connect_indication(struct ks_wlan_private *priv) 711 { 712 u16 connect_code; 713 unsigned int tmp = 0; 714 unsigned int old_status = priv->connect_status; 715 struct net_device *netdev = priv->net_dev; 716 union iwreq_data wrqu0; 717 718 connect_code = get_word(priv); 719 720 switch (connect_code) { 721 case RESULT_CONNECT: 722 if (!(priv->connect_status & FORCE_DISCONNECT)) 723 netif_carrier_on(netdev); 724 tmp = FORCE_DISCONNECT & priv->connect_status; 725 priv->connect_status = tmp + CONNECT_STATUS; 726 break; 727 case RESULT_DISCONNECT: 728 netif_carrier_off(netdev); 729 tmp = FORCE_DISCONNECT & priv->connect_status; 730 priv->connect_status = tmp + DISCONNECT_STATUS; 731 break; 732 default: 733 netdev_dbg(priv->net_dev, "unknown connect_code=%d :: scan_ind_count=%d\n", 734 connect_code, priv->scan_ind_count); 735 netif_carrier_off(netdev); 736 tmp = FORCE_DISCONNECT & priv->connect_status; 737 priv->connect_status = tmp + DISCONNECT_STATUS; 738 break; 739 } 740 741 get_current_ap(priv, (struct link_ap_info *)priv->rxp); 742 if (is_connect_status(priv->connect_status) && 743 is_disconnect_status(old_status)) { 744 /* for power save */ 745 atomic_set(&priv->psstatus.snooze_guard, 0); 746 atomic_set(&priv->psstatus.confirm_wait, 0); 747 } 748 ks_wlan_do_power_save(priv); 749 750 wrqu0.data.length = 0; 751 wrqu0.data.flags = 0; 752 wrqu0.ap_addr.sa_family = ARPHRD_ETHER; 753 if (is_disconnect_status(priv->connect_status) && 754 is_connect_status(old_status)) { 755 eth_zero_addr(wrqu0.ap_addr.sa_data); 756 netdev_dbg(priv->net_dev, "disconnect :: scan_ind_count=%d\n", 757 priv->scan_ind_count); 758 wireless_send_event(netdev, SIOCGIWAP, &wrqu0, NULL); 759 } 760 priv->scan_ind_count = 0; 761 } 762 763 static 764 void hostif_scan_indication(struct ks_wlan_private *priv) 765 { 766 int i; 767 struct ap_info *ap_info; 768 769 netdev_dbg(priv->net_dev, 770 "scan_ind_count = %d\n", priv->scan_ind_count); 771 ap_info = (struct ap_info *)(priv->rxp); 772 773 if (priv->scan_ind_count) { 774 /* bssid check */ 775 for (i = 0; i < priv->aplist.size; i++) { 776 u8 *bssid = priv->aplist.ap[i].bssid; 777 778 if (ether_addr_equal(ap_info->bssid, bssid)) 779 continue; 780 781 if (ap_info->frame_type == IEEE80211_STYPE_PROBE_RESP) 782 get_ap_information(priv, ap_info, 783 &priv->aplist.ap[i]); 784 return; 785 } 786 } 787 priv->scan_ind_count++; 788 if (priv->scan_ind_count < LOCAL_APLIST_MAX + 1) { 789 netdev_dbg(priv->net_dev, " scan_ind_count=%d :: aplist.size=%d\n", 790 priv->scan_ind_count, priv->aplist.size); 791 get_ap_information(priv, (struct ap_info *)(priv->rxp), 792 &priv->aplist.ap[priv->scan_ind_count - 1]); 793 priv->aplist.size = priv->scan_ind_count; 794 } else { 795 netdev_dbg(priv->net_dev, " count over :: scan_ind_count=%d\n", 796 priv->scan_ind_count); 797 } 798 } 799 800 static 801 void hostif_stop_confirm(struct ks_wlan_private *priv) 802 { 803 unsigned int tmp = 0; 804 unsigned int old_status = priv->connect_status; 805 struct net_device *netdev = priv->net_dev; 806 union iwreq_data wrqu0; 807 808 if (priv->dev_state == DEVICE_STATE_SLEEP) 809 priv->dev_state = DEVICE_STATE_READY; 810 811 /* disconnect indication */ 812 if (is_connect_status(priv->connect_status)) { 813 netif_carrier_off(netdev); 814 tmp = FORCE_DISCONNECT & priv->connect_status; 815 priv->connect_status = tmp | DISCONNECT_STATUS; 816 netdev_info(netdev, "IWEVENT: disconnect\n"); 817 818 wrqu0.data.length = 0; 819 wrqu0.data.flags = 0; 820 wrqu0.ap_addr.sa_family = ARPHRD_ETHER; 821 if (is_disconnect_status(priv->connect_status) && 822 is_connect_status(old_status)) { 823 eth_zero_addr(wrqu0.ap_addr.sa_data); 824 netdev_info(netdev, "IWEVENT: disconnect\n"); 825 wireless_send_event(netdev, SIOCGIWAP, &wrqu0, NULL); 826 } 827 priv->scan_ind_count = 0; 828 } 829 830 hostif_sme_enqueue(priv, SME_STOP_CONFIRM); 831 } 832 833 static 834 void hostif_ps_adhoc_set_confirm(struct ks_wlan_private *priv) 835 { 836 priv->infra_status = 0; /* infrastructure mode cancel */ 837 hostif_sme_enqueue(priv, SME_MODE_SET_CONFIRM); 838 } 839 840 static 841 void hostif_infrastructure_set_confirm(struct ks_wlan_private *priv) 842 { 843 get_word(priv); /* result_code */ 844 priv->infra_status = 1; /* infrastructure mode set */ 845 hostif_sme_enqueue(priv, SME_MODE_SET_CONFIRM); 846 } 847 848 static 849 void hostif_adhoc_set_confirm(struct ks_wlan_private *priv) 850 { 851 priv->infra_status = 1; /* infrastructure mode set */ 852 hostif_sme_enqueue(priv, SME_MODE_SET_CONFIRM); 853 } 854 855 static 856 void hostif_associate_indication(struct ks_wlan_private *priv) 857 { 858 struct association_request *assoc_req; 859 struct association_response *assoc_resp; 860 unsigned char *pb; 861 union iwreq_data wrqu; 862 char buf[IW_CUSTOM_MAX]; 863 char *pbuf = &buf[0]; 864 int i; 865 866 static const char associnfo_leader0[] = "ASSOCINFO(ReqIEs="; 867 static const char associnfo_leader1[] = " RespIEs="; 868 869 assoc_req = (struct association_request *)(priv->rxp); 870 assoc_resp = (struct association_response *)(assoc_req + 1); 871 pb = (unsigned char *)(assoc_resp + 1); 872 873 memset(&wrqu, 0, sizeof(wrqu)); 874 memcpy(pbuf, associnfo_leader0, sizeof(associnfo_leader0) - 1); 875 wrqu.data.length += sizeof(associnfo_leader0) - 1; 876 pbuf += sizeof(associnfo_leader0) - 1; 877 878 for (i = 0; i < le16_to_cpu(assoc_req->req_ies_size); i++) 879 pbuf += sprintf(pbuf, "%02x", *(pb + i)); 880 wrqu.data.length += (le16_to_cpu(assoc_req->req_ies_size)) * 2; 881 882 memcpy(pbuf, associnfo_leader1, sizeof(associnfo_leader1) - 1); 883 wrqu.data.length += sizeof(associnfo_leader1) - 1; 884 pbuf += sizeof(associnfo_leader1) - 1; 885 886 pb += le16_to_cpu(assoc_req->req_ies_size); 887 for (i = 0; i < le16_to_cpu(assoc_resp->resp_ies_size); i++) 888 pbuf += sprintf(pbuf, "%02x", *(pb + i)); 889 wrqu.data.length += (le16_to_cpu(assoc_resp->resp_ies_size)) * 2; 890 891 pbuf += sprintf(pbuf, ")"); 892 wrqu.data.length += 1; 893 894 wireless_send_event(priv->net_dev, IWEVCUSTOM, &wrqu, buf); 895 } 896 897 static 898 void hostif_bss_scan_confirm(struct ks_wlan_private *priv) 899 { 900 u32 result_code; 901 struct net_device *dev = priv->net_dev; 902 union iwreq_data wrqu; 903 904 result_code = get_dword(priv); 905 netdev_dbg(priv->net_dev, "result=%d :: scan_ind_count=%d\n", 906 result_code, priv->scan_ind_count); 907 908 priv->sme_i.sme_flag &= ~SME_AP_SCAN; 909 hostif_sme_enqueue(priv, SME_BSS_SCAN_CONFIRM); 910 911 wrqu.data.length = 0; 912 wrqu.data.flags = 0; 913 wireless_send_event(dev, SIOCGIWSCAN, &wrqu, NULL); 914 priv->scan_ind_count = 0; 915 } 916 917 static 918 void hostif_phy_information_confirm(struct ks_wlan_private *priv) 919 { 920 struct iw_statistics *wstats = &priv->wstats; 921 u8 rssi, signal; 922 u8 link_speed; 923 u32 transmitted_frame_count, received_fragment_count; 924 u32 failed_count, fcs_error_count; 925 926 rssi = get_byte(priv); 927 signal = get_byte(priv); 928 get_byte(priv); /* noise */ 929 link_speed = get_byte(priv); 930 transmitted_frame_count = get_dword(priv); 931 received_fragment_count = get_dword(priv); 932 failed_count = get_dword(priv); 933 fcs_error_count = get_dword(priv); 934 935 netdev_dbg(priv->net_dev, "phyinfo confirm rssi=%d signal=%d\n", 936 rssi, signal); 937 priv->current_rate = (link_speed & RATE_MASK); 938 wstats->qual.qual = signal; 939 wstats->qual.level = 256 - rssi; 940 wstats->qual.noise = 0; /* invalid noise value */ 941 wstats->qual.updated = IW_QUAL_ALL_UPDATED | IW_QUAL_DBM; 942 943 netdev_dbg(priv->net_dev, "\n rssi=%u\n" 944 " signal=%u\n" 945 " link_speed=%ux500Kbps\n" 946 " transmitted_frame_count=%u\n" 947 " received_fragment_count=%u\n" 948 " failed_count=%u\n" 949 " fcs_error_count=%u\n", 950 rssi, signal, link_speed, transmitted_frame_count, 951 received_fragment_count, failed_count, fcs_error_count); 952 /* wake_up_interruptible_all(&priv->confirm_wait); */ 953 complete(&priv->confirm_wait); 954 } 955 956 static 957 void hostif_mic_failure_confirm(struct ks_wlan_private *priv) 958 { 959 netdev_dbg(priv->net_dev, "mic_failure=%u\n", 960 priv->wpa.mic_failure.failure); 961 hostif_sme_enqueue(priv, SME_MIC_FAILURE_CONFIRM); 962 } 963 964 static 965 void hostif_event_check(struct ks_wlan_private *priv) 966 { 967 u16 event; 968 969 event = get_word(priv); 970 switch (event) { 971 case HIF_DATA_IND: 972 hostif_data_indication(priv); 973 break; 974 case HIF_MIB_GET_CONF: 975 hostif_mib_get_confirm(priv); 976 break; 977 case HIF_MIB_SET_CONF: 978 hostif_mib_set_confirm(priv); 979 break; 980 case HIF_POWER_MGMT_CONF: 981 hostif_power_mgmt_confirm(priv); 982 break; 983 case HIF_SLEEP_CONF: 984 hostif_sleep_confirm(priv); 985 break; 986 case HIF_START_CONF: 987 hostif_start_confirm(priv); 988 break; 989 case HIF_CONNECT_IND: 990 hostif_connect_indication(priv); 991 break; 992 case HIF_STOP_CONF: 993 hostif_stop_confirm(priv); 994 break; 995 case HIF_PS_ADH_SET_CONF: 996 hostif_ps_adhoc_set_confirm(priv); 997 break; 998 case HIF_INFRA_SET_CONF: 999 case HIF_INFRA_SET2_CONF: 1000 hostif_infrastructure_set_confirm(priv); 1001 break; 1002 case HIF_ADH_SET_CONF: 1003 case HIF_ADH_SET2_CONF: 1004 hostif_adhoc_set_confirm(priv); 1005 break; 1006 case HIF_ASSOC_INFO_IND: 1007 hostif_associate_indication(priv); 1008 break; 1009 case HIF_MIC_FAILURE_CONF: 1010 hostif_mic_failure_confirm(priv); 1011 break; 1012 case HIF_SCAN_CONF: 1013 hostif_bss_scan_confirm(priv); 1014 break; 1015 case HIF_PHY_INFO_CONF: 1016 case HIF_PHY_INFO_IND: 1017 hostif_phy_information_confirm(priv); 1018 break; 1019 case HIF_SCAN_IND: 1020 hostif_scan_indication(priv); 1021 break; 1022 case HIF_AP_SET_CONF: 1023 default: 1024 netdev_err(priv->net_dev, "undefined event[%04X]\n", event); 1025 /* wake_up_all(&priv->confirm_wait); */ 1026 complete(&priv->confirm_wait); 1027 break; 1028 } 1029 1030 /* add event to hostt buffer */ 1031 priv->hostt.buff[priv->hostt.qtail] = event; 1032 priv->hostt.qtail = (priv->hostt.qtail + 1) % SME_EVENT_BUFF_SIZE; 1033 } 1034 1035 /* allocate size bytes, set header size and event */ 1036 static void *hostif_generic_request(size_t size, int event) 1037 { 1038 struct hostif_hdr *p; 1039 1040 p = kzalloc(hif_align_size(size), GFP_ATOMIC); 1041 if (!p) 1042 return NULL; 1043 1044 p->size = cpu_to_le16(size - sizeof(p->size)); 1045 p->event = cpu_to_le16(event); 1046 1047 return p; 1048 } 1049 1050 int hostif_data_request(struct ks_wlan_private *priv, struct sk_buff *skb) 1051 { 1052 unsigned int skb_len = 0; 1053 unsigned char *buffer = NULL; 1054 unsigned int length = 0; 1055 struct hostif_data_request *pp; 1056 unsigned char *p; 1057 unsigned short eth_proto; 1058 struct ether_hdr *eth_hdr; 1059 unsigned short keyinfo = 0; 1060 struct ieee802_1x_hdr *aa1x_hdr; 1061 struct wpa_eapol_key *eap_key; 1062 struct ethhdr *eth; 1063 size_t size; 1064 int ret; 1065 1066 skb_len = skb->len; 1067 if (skb_len > ETH_FRAME_LEN) { 1068 netdev_err(priv->net_dev, "bad length skb_len=%d\n", skb_len); 1069 ret = -EOVERFLOW; 1070 goto err_kfree_skb; 1071 } 1072 1073 if (is_disconnect_status(priv->connect_status) || 1074 (priv->connect_status & FORCE_DISCONNECT) || 1075 priv->wpa.mic_failure.stop) { 1076 if (netif_queue_stopped(priv->net_dev)) 1077 netif_wake_queue(priv->net_dev); 1078 1079 dev_kfree_skb(skb); 1080 1081 return 0; 1082 } 1083 1084 /* power save wakeup */ 1085 if (atomic_read(&priv->psstatus.status) == PS_SNOOZE) { 1086 if (!netif_queue_stopped(priv->net_dev)) 1087 netif_stop_queue(priv->net_dev); 1088 } 1089 1090 size = sizeof(*pp) + 6 + skb_len + 8; 1091 pp = kmalloc(hif_align_size(size), GFP_ATOMIC); 1092 if (!pp) { 1093 ret = -ENOMEM; 1094 goto err_kfree_skb; 1095 } 1096 1097 p = (unsigned char *)pp->data; 1098 1099 buffer = skb->data; 1100 length = skb->len; 1101 1102 /* skb check */ 1103 eth = (struct ethhdr *)skb->data; 1104 if (!ether_addr_equal(&priv->eth_addr[0], eth->h_source)) { 1105 netdev_err(priv->net_dev, 1106 "Invalid mac address: ethernet->h_source=%pM\n", 1107 eth->h_source); 1108 ret = -ENXIO; 1109 goto err_kfree; 1110 } 1111 1112 /* dest and src MAC address copy */ 1113 size = ETH_ALEN * 2; 1114 memcpy(p, buffer, size); 1115 p += size; 1116 buffer += size; 1117 length -= size; 1118 1119 /* EtherType/Length check */ 1120 if (*(buffer + 1) + (*buffer << 8) > 1500) { 1121 /* ProtocolEAP = *(buffer+1) + (*buffer << 8); */ 1122 /* SAP/CTL/OUI(6 byte) add */ 1123 *p++ = 0xAA; /* DSAP */ 1124 *p++ = 0xAA; /* SSAP */ 1125 *p++ = 0x03; /* CTL */ 1126 *p++ = 0x00; /* OUI ("000000") */ 1127 *p++ = 0x00; /* OUI ("000000") */ 1128 *p++ = 0x00; /* OUI ("000000") */ 1129 skb_len += 6; 1130 } else { 1131 /* Length(2 byte) delete */ 1132 buffer += 2; 1133 length -= 2; 1134 skb_len -= 2; 1135 } 1136 1137 /* pp->data copy */ 1138 memcpy(p, buffer, length); 1139 1140 p += length; 1141 1142 /* for WPA */ 1143 eth_hdr = (struct ether_hdr *)&pp->data[0]; 1144 eth_proto = ntohs(eth_hdr->h_proto); 1145 1146 /* for MIC FAILURE REPORT check */ 1147 if (eth_proto == ETH_P_PAE && 1148 priv->wpa.mic_failure.failure > 0) { 1149 aa1x_hdr = (struct ieee802_1x_hdr *)(eth_hdr + 1); 1150 if (aa1x_hdr->type == IEEE802_1X_TYPE_EAPOL_KEY) { 1151 eap_key = (struct wpa_eapol_key *)(aa1x_hdr + 1); 1152 keyinfo = ntohs(eap_key->key_info); 1153 } 1154 } 1155 1156 if (priv->wpa.rsn_enabled && priv->wpa.key[0].key_len) { 1157 /* no encryption */ 1158 if (eth_proto == ETH_P_PAE && 1159 priv->wpa.key[1].key_len == 0 && 1160 priv->wpa.key[2].key_len == 0 && 1161 priv->wpa.key[3].key_len == 0) { 1162 pp->auth_type = cpu_to_le16(TYPE_AUTH); 1163 } else { 1164 if (priv->wpa.pairwise_suite == IW_AUTH_CIPHER_TKIP) { 1165 u8 mic[MICHAEL_MIC_LEN]; 1166 1167 ret = michael_mic(priv->wpa.key[0].tx_mic_key, 1168 &pp->data[0], skb_len, 1169 0, mic); 1170 if (ret < 0) 1171 goto err_kfree; 1172 1173 memcpy(p, mic, sizeof(mic)); 1174 length += sizeof(mic); 1175 skb_len += sizeof(mic); 1176 p += sizeof(mic); 1177 pp->auth_type = 1178 cpu_to_le16(TYPE_DATA); 1179 } else if (priv->wpa.pairwise_suite == 1180 IW_AUTH_CIPHER_CCMP) { 1181 pp->auth_type = 1182 cpu_to_le16(TYPE_DATA); 1183 } 1184 } 1185 } else { 1186 if (eth_proto == ETH_P_PAE) 1187 pp->auth_type = cpu_to_le16(TYPE_AUTH); 1188 else 1189 pp->auth_type = cpu_to_le16(TYPE_DATA); 1190 } 1191 1192 /* header value set */ 1193 pp->header.size = 1194 cpu_to_le16((sizeof(*pp) - sizeof(pp->header.size) + skb_len)); 1195 pp->header.event = cpu_to_le16(HIF_DATA_REQ); 1196 1197 /* tx request */ 1198 ret = ks_wlan_hw_tx(priv, pp, hif_align_size(sizeof(*pp) + skb_len), 1199 send_packet_complete, skb); 1200 1201 /* MIC FAILURE REPORT check */ 1202 if (eth_proto == ETH_P_PAE && 1203 priv->wpa.mic_failure.failure > 0) { 1204 if (keyinfo & WPA_KEY_INFO_ERROR && 1205 keyinfo & WPA_KEY_INFO_REQUEST) { 1206 netdev_err(priv->net_dev, 1207 "MIC ERROR Report SET : %04X\n", keyinfo); 1208 hostif_sme_enqueue(priv, SME_MIC_FAILURE_REQUEST); 1209 } 1210 if (priv->wpa.mic_failure.failure == 2) 1211 priv->wpa.mic_failure.stop = 1; 1212 } 1213 1214 return ret; 1215 1216 err_kfree: 1217 kfree(pp); 1218 err_kfree_skb: 1219 dev_kfree_skb(skb); 1220 1221 return ret; 1222 } 1223 1224 static inline void ps_confirm_wait_inc(struct ks_wlan_private *priv) 1225 { 1226 if (atomic_read(&priv->psstatus.status) > PS_ACTIVE_SET) 1227 atomic_inc(&priv->psstatus.confirm_wait); 1228 } 1229 1230 static inline void send_request_to_device(struct ks_wlan_private *priv, 1231 void *data, size_t size) 1232 { 1233 ps_confirm_wait_inc(priv); 1234 ks_wlan_hw_tx(priv, data, size, NULL, NULL); 1235 } 1236 1237 static void hostif_mib_get_request(struct ks_wlan_private *priv, 1238 u32 mib_attribute) 1239 { 1240 struct hostif_mib_get_request *pp; 1241 1242 pp = hostif_generic_request(sizeof(*pp), HIF_MIB_GET_REQ); 1243 if (!pp) 1244 return; 1245 1246 pp->mib_attribute = cpu_to_le32(mib_attribute); 1247 1248 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1249 } 1250 1251 static void hostif_mib_set_request(struct ks_wlan_private *priv, 1252 enum mib_attribute attr, 1253 enum mib_data_type type, 1254 void *data, size_t size) 1255 { 1256 struct hostif_mib_set_request_t *pp; 1257 1258 if (priv->dev_state < DEVICE_STATE_BOOT) 1259 return; 1260 1261 pp = hostif_generic_request(sizeof(*pp), HIF_MIB_SET_REQ); 1262 if (!pp) 1263 return; 1264 1265 pp->mib_attribute = cpu_to_le32(attr); 1266 pp->mib_value.size = cpu_to_le16(size); 1267 pp->mib_value.type = cpu_to_le16(type); 1268 memcpy(&pp->mib_value.body, data, size); 1269 1270 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp) + size)); 1271 } 1272 1273 static inline void hostif_mib_set_request_int(struct ks_wlan_private *priv, 1274 enum mib_attribute attr, int val) 1275 { 1276 __le32 v = cpu_to_le32(val); 1277 size_t size = sizeof(v); 1278 1279 hostif_mib_set_request(priv, attr, MIB_VALUE_TYPE_INT, &v, size); 1280 } 1281 1282 static inline void hostif_mib_set_request_bool(struct ks_wlan_private *priv, 1283 enum mib_attribute attr, 1284 bool val) 1285 { 1286 __le32 v = cpu_to_le32(val); 1287 size_t size = sizeof(v); 1288 1289 hostif_mib_set_request(priv, attr, MIB_VALUE_TYPE_BOOL, &v, size); 1290 } 1291 1292 static inline void hostif_mib_set_request_ostring(struct ks_wlan_private *priv, 1293 enum mib_attribute attr, 1294 void *data, size_t size) 1295 { 1296 hostif_mib_set_request(priv, attr, MIB_VALUE_TYPE_OSTRING, data, size); 1297 } 1298 1299 static 1300 void hostif_start_request(struct ks_wlan_private *priv, unsigned char mode) 1301 { 1302 struct hostif_start_request *pp; 1303 1304 pp = hostif_generic_request(sizeof(*pp), HIF_START_REQ); 1305 if (!pp) 1306 return; 1307 1308 pp->mode = cpu_to_le16(mode); 1309 1310 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1311 1312 priv->aplist.size = 0; 1313 priv->scan_ind_count = 0; 1314 } 1315 1316 static __le16 ks_wlan_cap(struct ks_wlan_private *priv) 1317 { 1318 u16 capability = 0x0000; 1319 1320 if (priv->reg.preamble == SHORT_PREAMBLE) 1321 capability |= WLAN_CAPABILITY_SHORT_PREAMBLE; 1322 1323 capability &= ~(WLAN_CAPABILITY_PBCC); /* pbcc not support */ 1324 1325 if (priv->reg.phy_type != D_11B_ONLY_MODE) { 1326 capability |= WLAN_CAPABILITY_SHORT_SLOT_TIME; 1327 capability &= ~(WLAN_CAPABILITY_DSSS_OFDM); 1328 } 1329 1330 return cpu_to_le16(capability); 1331 } 1332 1333 static void init_request(struct ks_wlan_private *priv, 1334 struct hostif_request *req) 1335 { 1336 req->phy_type = cpu_to_le16(priv->reg.phy_type); 1337 req->cts_mode = cpu_to_le16(priv->reg.cts_mode); 1338 req->scan_type = cpu_to_le16(priv->reg.scan_type); 1339 req->rate_set.size = priv->reg.rate_set.size; 1340 req->capability = ks_wlan_cap(priv); 1341 memcpy(&req->rate_set.body[0], &priv->reg.rate_set.body[0], 1342 priv->reg.rate_set.size); 1343 } 1344 1345 static 1346 void hostif_ps_adhoc_set_request(struct ks_wlan_private *priv) 1347 { 1348 struct hostif_ps_adhoc_set_request *pp; 1349 1350 pp = hostif_generic_request(sizeof(*pp), HIF_PS_ADH_SET_REQ); 1351 if (!pp) 1352 return; 1353 1354 init_request(priv, &pp->request); 1355 pp->channel = cpu_to_le16(priv->reg.channel); 1356 1357 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1358 } 1359 1360 static 1361 void hostif_infrastructure_set_request(struct ks_wlan_private *priv, int event) 1362 { 1363 struct hostif_infrastructure_set_request *pp; 1364 1365 pp = hostif_generic_request(sizeof(*pp), event); 1366 if (!pp) 1367 return; 1368 1369 init_request(priv, &pp->request); 1370 pp->ssid.size = priv->reg.ssid.size; 1371 memcpy(&pp->ssid.body[0], &priv->reg.ssid.body[0], priv->reg.ssid.size); 1372 pp->beacon_lost_count = 1373 cpu_to_le16(priv->reg.beacon_lost_count); 1374 pp->auth_type = cpu_to_le16(priv->reg.authenticate_type); 1375 1376 pp->channel_list.body[0] = 1; 1377 pp->channel_list.body[1] = 8; 1378 pp->channel_list.body[2] = 2; 1379 pp->channel_list.body[3] = 9; 1380 pp->channel_list.body[4] = 3; 1381 pp->channel_list.body[5] = 10; 1382 pp->channel_list.body[6] = 4; 1383 pp->channel_list.body[7] = 11; 1384 pp->channel_list.body[8] = 5; 1385 pp->channel_list.body[9] = 12; 1386 pp->channel_list.body[10] = 6; 1387 pp->channel_list.body[11] = 13; 1388 pp->channel_list.body[12] = 7; 1389 if (priv->reg.phy_type == D_11G_ONLY_MODE) { 1390 pp->channel_list.size = 13; 1391 } else { 1392 pp->channel_list.body[13] = 14; 1393 pp->channel_list.size = 14; 1394 } 1395 1396 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1397 } 1398 1399 static 1400 void hostif_adhoc_set_request(struct ks_wlan_private *priv) 1401 { 1402 struct hostif_adhoc_set_request *pp; 1403 1404 pp = hostif_generic_request(sizeof(*pp), HIF_ADH_SET_REQ); 1405 if (!pp) 1406 return; 1407 1408 init_request(priv, &pp->request); 1409 pp->channel = cpu_to_le16(priv->reg.channel); 1410 pp->ssid.size = priv->reg.ssid.size; 1411 memcpy(&pp->ssid.body[0], &priv->reg.ssid.body[0], priv->reg.ssid.size); 1412 1413 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1414 } 1415 1416 static 1417 void hostif_adhoc_set2_request(struct ks_wlan_private *priv) 1418 { 1419 struct hostif_adhoc_set2_request *pp; 1420 1421 pp = hostif_generic_request(sizeof(*pp), HIF_ADH_SET_REQ); 1422 if (!pp) 1423 return; 1424 1425 init_request(priv, &pp->request); 1426 pp->ssid.size = priv->reg.ssid.size; 1427 memcpy(&pp->ssid.body[0], &priv->reg.ssid.body[0], priv->reg.ssid.size); 1428 1429 pp->channel_list.body[0] = priv->reg.channel; 1430 pp->channel_list.size = 1; 1431 memcpy(pp->bssid, priv->reg.bssid, ETH_ALEN); 1432 1433 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1434 } 1435 1436 static 1437 void hostif_stop_request(struct ks_wlan_private *priv) 1438 { 1439 struct hostif_stop_request *pp; 1440 1441 pp = hostif_generic_request(sizeof(*pp), HIF_STOP_REQ); 1442 if (!pp) 1443 return; 1444 1445 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1446 } 1447 1448 static 1449 void hostif_phy_information_request(struct ks_wlan_private *priv) 1450 { 1451 struct hostif_phy_information_request *pp; 1452 1453 pp = hostif_generic_request(sizeof(*pp), HIF_PHY_INFO_REQ); 1454 if (!pp) 1455 return; 1456 1457 if (priv->reg.phy_info_timer) { 1458 pp->type = cpu_to_le16(TIME_TYPE); 1459 pp->time = cpu_to_le16(priv->reg.phy_info_timer); 1460 } else { 1461 pp->type = cpu_to_le16(NORMAL_TYPE); 1462 pp->time = cpu_to_le16(0); 1463 } 1464 1465 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1466 } 1467 1468 static 1469 void hostif_power_mgmt_request(struct ks_wlan_private *priv, 1470 u32 mode, u32 wake_up, u32 receive_dtims) 1471 { 1472 struct hostif_power_mgmt_request *pp; 1473 1474 pp = hostif_generic_request(sizeof(*pp), HIF_POWER_MGMT_REQ); 1475 if (!pp) 1476 return; 1477 1478 pp->mode = cpu_to_le32(mode); 1479 pp->wake_up = cpu_to_le32(wake_up); 1480 pp->receive_dtims = cpu_to_le32(receive_dtims); 1481 1482 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1483 } 1484 1485 static 1486 void hostif_sleep_request(struct ks_wlan_private *priv, 1487 enum sleep_mode_type mode) 1488 { 1489 struct hostif_sleep_request *pp; 1490 1491 if (mode == SLP_SLEEP) { 1492 pp = hostif_generic_request(sizeof(*pp), HIF_SLEEP_REQ); 1493 if (!pp) 1494 return; 1495 1496 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1497 } else if (mode == SLP_ACTIVE) { 1498 atomic_set(&priv->sleepstatus.wakeup_request, 1); 1499 queue_delayed_work(priv->wq, &priv->rw_dwork, 1); 1500 } else { 1501 netdev_err(priv->net_dev, "invalid mode %ld\n", (long)mode); 1502 return; 1503 } 1504 } 1505 1506 static 1507 void hostif_bss_scan_request(struct ks_wlan_private *priv, 1508 unsigned long scan_type, u8 *scan_ssid, 1509 u8 scan_ssid_len) 1510 { 1511 struct hostif_bss_scan_request *pp; 1512 1513 pp = hostif_generic_request(sizeof(*pp), HIF_SCAN_REQ); 1514 if (!pp) 1515 return; 1516 1517 pp->scan_type = scan_type; 1518 1519 pp->ch_time_min = cpu_to_le32(110); /* default value */ 1520 pp->ch_time_max = cpu_to_le32(130); /* default value */ 1521 pp->channel_list.body[0] = 1; 1522 pp->channel_list.body[1] = 8; 1523 pp->channel_list.body[2] = 2; 1524 pp->channel_list.body[3] = 9; 1525 pp->channel_list.body[4] = 3; 1526 pp->channel_list.body[5] = 10; 1527 pp->channel_list.body[6] = 4; 1528 pp->channel_list.body[7] = 11; 1529 pp->channel_list.body[8] = 5; 1530 pp->channel_list.body[9] = 12; 1531 pp->channel_list.body[10] = 6; 1532 pp->channel_list.body[11] = 13; 1533 pp->channel_list.body[12] = 7; 1534 if (priv->reg.phy_type == D_11G_ONLY_MODE) { 1535 pp->channel_list.size = 13; 1536 } else { 1537 pp->channel_list.body[13] = 14; 1538 pp->channel_list.size = 14; 1539 } 1540 pp->ssid.size = 0; 1541 1542 /* specified SSID SCAN */ 1543 if (scan_ssid_len > 0 && scan_ssid_len <= 32) { 1544 pp->ssid.size = scan_ssid_len; 1545 memcpy(&pp->ssid.body[0], scan_ssid, scan_ssid_len); 1546 } 1547 1548 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1549 1550 priv->aplist.size = 0; 1551 priv->scan_ind_count = 0; 1552 } 1553 1554 static 1555 void hostif_mic_failure_request(struct ks_wlan_private *priv, 1556 u16 failure_count, u16 timer) 1557 { 1558 struct hostif_mic_failure_request *pp; 1559 1560 pp = hostif_generic_request(sizeof(*pp), HIF_MIC_FAILURE_REQ); 1561 if (!pp) 1562 return; 1563 1564 pp->failure_count = cpu_to_le16(failure_count); 1565 pp->timer = cpu_to_le16(timer); 1566 1567 send_request_to_device(priv, pp, hif_align_size(sizeof(*pp))); 1568 } 1569 1570 /* Device I/O Receive indicate */ 1571 static void devio_rec_ind(struct ks_wlan_private *priv, unsigned char *p, 1572 unsigned int size) 1573 { 1574 if (!priv->is_device_open) 1575 return; 1576 1577 spin_lock(&priv->dev_read_lock); 1578 priv->dev_data[atomic_read(&priv->rec_count)] = p; 1579 priv->dev_size[atomic_read(&priv->rec_count)] = size; 1580 1581 if (atomic_read(&priv->event_count) != DEVICE_STOCK_COUNT) { 1582 /* rx event count inc */ 1583 atomic_inc(&priv->event_count); 1584 } 1585 atomic_inc(&priv->rec_count); 1586 if (atomic_read(&priv->rec_count) == DEVICE_STOCK_COUNT) 1587 atomic_set(&priv->rec_count, 0); 1588 1589 wake_up_interruptible_all(&priv->devread_wait); 1590 1591 spin_unlock(&priv->dev_read_lock); 1592 } 1593 1594 void hostif_receive(struct ks_wlan_private *priv, unsigned char *p, 1595 unsigned int size) 1596 { 1597 devio_rec_ind(priv, p, size); 1598 1599 priv->rxp = p; 1600 priv->rx_size = size; 1601 1602 if (get_word(priv) == priv->rx_size) 1603 hostif_event_check(priv); 1604 } 1605 1606 static void hostif_sme_set_wep(struct ks_wlan_private *priv, int type) 1607 { 1608 switch (type) { 1609 case SME_WEP_INDEX_REQUEST: 1610 hostif_mib_set_request_int(priv, DOT11_WEP_DEFAULT_KEY_ID, 1611 priv->reg.wep_index); 1612 break; 1613 case SME_WEP_KEY1_REQUEST: 1614 if (priv->wpa.wpa_enabled) 1615 return; 1616 hostif_mib_set_request_ostring(priv, 1617 DOT11_WEP_DEFAULT_KEY_VALUE1, 1618 &priv->reg.wep_key[0].val[0], 1619 priv->reg.wep_key[0].size); 1620 break; 1621 case SME_WEP_KEY2_REQUEST: 1622 if (priv->wpa.wpa_enabled) 1623 return; 1624 hostif_mib_set_request_ostring(priv, 1625 DOT11_WEP_DEFAULT_KEY_VALUE2, 1626 &priv->reg.wep_key[1].val[0], 1627 priv->reg.wep_key[1].size); 1628 break; 1629 case SME_WEP_KEY3_REQUEST: 1630 if (priv->wpa.wpa_enabled) 1631 return; 1632 hostif_mib_set_request_ostring(priv, 1633 DOT11_WEP_DEFAULT_KEY_VALUE3, 1634 &priv->reg.wep_key[2].val[0], 1635 priv->reg.wep_key[2].size); 1636 break; 1637 case SME_WEP_KEY4_REQUEST: 1638 if (priv->wpa.wpa_enabled) 1639 return; 1640 hostif_mib_set_request_ostring(priv, 1641 DOT11_WEP_DEFAULT_KEY_VALUE4, 1642 &priv->reg.wep_key[3].val[0], 1643 priv->reg.wep_key[3].size); 1644 break; 1645 case SME_WEP_FLAG_REQUEST: 1646 hostif_mib_set_request_bool(priv, DOT11_PRIVACY_INVOKED, 1647 priv->reg.privacy_invoked); 1648 break; 1649 } 1650 } 1651 1652 struct wpa_suite { 1653 __le16 size; 1654 unsigned char suite[4][CIPHER_ID_LEN]; 1655 } __packed; 1656 1657 struct rsn_mode { 1658 __le32 rsn_mode; 1659 __le16 rsn_capability; 1660 } __packed; 1661 1662 static void hostif_sme_set_rsn(struct ks_wlan_private *priv, int type) 1663 { 1664 struct wpa_suite wpa_suite; 1665 struct rsn_mode rsn_mode; 1666 size_t size; 1667 u32 mode; 1668 const u8 *buf = NULL; 1669 1670 memset(&wpa_suite, 0, sizeof(wpa_suite)); 1671 1672 switch (type) { 1673 case SME_RSN_UCAST_REQUEST: 1674 wpa_suite.size = cpu_to_le16(1); 1675 switch (priv->wpa.pairwise_suite) { 1676 case IW_AUTH_CIPHER_NONE: 1677 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1678 CIPHER_ID_WPA2_NONE : CIPHER_ID_WPA_NONE; 1679 break; 1680 case IW_AUTH_CIPHER_WEP40: 1681 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1682 CIPHER_ID_WPA2_WEP40 : CIPHER_ID_WPA_WEP40; 1683 break; 1684 case IW_AUTH_CIPHER_TKIP: 1685 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1686 CIPHER_ID_WPA2_TKIP : CIPHER_ID_WPA_TKIP; 1687 break; 1688 case IW_AUTH_CIPHER_CCMP: 1689 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1690 CIPHER_ID_WPA2_CCMP : CIPHER_ID_WPA_CCMP; 1691 break; 1692 case IW_AUTH_CIPHER_WEP104: 1693 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1694 CIPHER_ID_WPA2_WEP104 : CIPHER_ID_WPA_WEP104; 1695 break; 1696 } 1697 1698 if (buf) 1699 memcpy(&wpa_suite.suite[0][0], buf, CIPHER_ID_LEN); 1700 size = sizeof(wpa_suite.size) + 1701 (CIPHER_ID_LEN * le16_to_cpu(wpa_suite.size)); 1702 hostif_mib_set_request_ostring(priv, 1703 DOT11_RSN_CONFIG_UNICAST_CIPHER, 1704 &wpa_suite, size); 1705 break; 1706 case SME_RSN_MCAST_REQUEST: 1707 switch (priv->wpa.group_suite) { 1708 case IW_AUTH_CIPHER_NONE: 1709 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1710 CIPHER_ID_WPA2_NONE : CIPHER_ID_WPA_NONE; 1711 break; 1712 case IW_AUTH_CIPHER_WEP40: 1713 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1714 CIPHER_ID_WPA2_WEP40 : CIPHER_ID_WPA_WEP40; 1715 break; 1716 case IW_AUTH_CIPHER_TKIP: 1717 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1718 CIPHER_ID_WPA2_TKIP : CIPHER_ID_WPA_TKIP; 1719 break; 1720 case IW_AUTH_CIPHER_CCMP: 1721 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1722 CIPHER_ID_WPA2_CCMP : CIPHER_ID_WPA_CCMP; 1723 break; 1724 case IW_AUTH_CIPHER_WEP104: 1725 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1726 CIPHER_ID_WPA2_WEP104 : CIPHER_ID_WPA_WEP104; 1727 break; 1728 } 1729 if (buf) 1730 memcpy(&wpa_suite.suite[0][0], buf, CIPHER_ID_LEN); 1731 hostif_mib_set_request_ostring(priv, 1732 DOT11_RSN_CONFIG_MULTICAST_CIPHER, 1733 &wpa_suite.suite[0][0], 1734 CIPHER_ID_LEN); 1735 break; 1736 case SME_RSN_AUTH_REQUEST: 1737 wpa_suite.size = cpu_to_le16(1); 1738 switch (priv->wpa.key_mgmt_suite) { 1739 case IW_AUTH_KEY_MGMT_802_1X: 1740 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1741 KEY_MGMT_ID_WPA2_1X : KEY_MGMT_ID_WPA_1X; 1742 break; 1743 case IW_AUTH_KEY_MGMT_PSK: 1744 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1745 KEY_MGMT_ID_WPA2_PSK : KEY_MGMT_ID_WPA_PSK; 1746 break; 1747 case 0: 1748 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1749 KEY_MGMT_ID_WPA2_NONE : KEY_MGMT_ID_WPA_NONE; 1750 break; 1751 case 4: 1752 buf = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1753 KEY_MGMT_ID_WPA2_WPANONE : 1754 KEY_MGMT_ID_WPA_WPANONE; 1755 break; 1756 } 1757 1758 if (buf) 1759 memcpy(&wpa_suite.suite[0][0], buf, KEY_MGMT_ID_LEN); 1760 size = sizeof(wpa_suite.size) + 1761 (KEY_MGMT_ID_LEN * le16_to_cpu(wpa_suite.size)); 1762 hostif_mib_set_request_ostring(priv, 1763 DOT11_RSN_CONFIG_AUTH_SUITE, 1764 &wpa_suite, size); 1765 break; 1766 case SME_RSN_ENABLED_REQUEST: 1767 hostif_mib_set_request_bool(priv, DOT11_RSN_ENABLED, 1768 priv->wpa.rsn_enabled); 1769 break; 1770 case SME_RSN_MODE_REQUEST: 1771 mode = (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA2) ? 1772 RSN_MODE_WPA2 : 1773 (priv->wpa.version == IW_AUTH_WPA_VERSION_WPA) ? 1774 RSN_MODE_WPA : RSN_MODE_NONE; 1775 rsn_mode.rsn_mode = cpu_to_le32(mode); 1776 rsn_mode.rsn_capability = cpu_to_le16(0); 1777 hostif_mib_set_request_ostring(priv, LOCAL_RSN_MODE, 1778 &rsn_mode, sizeof(rsn_mode)); 1779 break; 1780 } 1781 } 1782 1783 static 1784 void hostif_sme_mode_setup(struct ks_wlan_private *priv) 1785 { 1786 unsigned char rate_size; 1787 unsigned char rate_octet[RATE_SET_MAX_SIZE]; 1788 int i = 0; 1789 1790 /* rate setting if rate segging is auto for changing phy_type (#94) */ 1791 if (priv->reg.tx_rate == TX_RATE_FULL_AUTO) { 1792 if (priv->reg.phy_type == D_11B_ONLY_MODE) { 1793 priv->reg.rate_set.body[3] = TX_RATE_11M; 1794 priv->reg.rate_set.body[2] = TX_RATE_5M; 1795 priv->reg.rate_set.body[1] = TX_RATE_2M | BASIC_RATE; 1796 priv->reg.rate_set.body[0] = TX_RATE_1M | BASIC_RATE; 1797 priv->reg.rate_set.size = 4; 1798 } else { /* D_11G_ONLY_MODE or D_11BG_COMPATIBLE_MODE */ 1799 priv->reg.rate_set.body[11] = TX_RATE_54M; 1800 priv->reg.rate_set.body[10] = TX_RATE_48M; 1801 priv->reg.rate_set.body[9] = TX_RATE_36M; 1802 priv->reg.rate_set.body[8] = TX_RATE_18M; 1803 priv->reg.rate_set.body[7] = TX_RATE_9M; 1804 priv->reg.rate_set.body[6] = TX_RATE_24M | BASIC_RATE; 1805 priv->reg.rate_set.body[5] = TX_RATE_12M | BASIC_RATE; 1806 priv->reg.rate_set.body[4] = TX_RATE_6M | BASIC_RATE; 1807 priv->reg.rate_set.body[3] = TX_RATE_11M | BASIC_RATE; 1808 priv->reg.rate_set.body[2] = TX_RATE_5M | BASIC_RATE; 1809 priv->reg.rate_set.body[1] = TX_RATE_2M | BASIC_RATE; 1810 priv->reg.rate_set.body[0] = TX_RATE_1M | BASIC_RATE; 1811 priv->reg.rate_set.size = 12; 1812 } 1813 } 1814 1815 /* rate mask by phy setting */ 1816 if (priv->reg.phy_type == D_11B_ONLY_MODE) { 1817 for (i = 0; i < priv->reg.rate_set.size; i++) { 1818 if (!is_11b_rate(priv->reg.rate_set.body[i])) 1819 break; 1820 1821 if ((priv->reg.rate_set.body[i] & RATE_MASK) >= TX_RATE_5M) { 1822 rate_octet[i] = priv->reg.rate_set.body[i] & 1823 RATE_MASK; 1824 } else { 1825 rate_octet[i] = priv->reg.rate_set.body[i]; 1826 } 1827 } 1828 1829 } else { /* D_11G_ONLY_MODE or D_11BG_COMPATIBLE_MODE */ 1830 for (i = 0; i < priv->reg.rate_set.size; i++) { 1831 if (!is_11bg_rate(priv->reg.rate_set.body[i])) 1832 break; 1833 1834 if (is_ofdm_ext_rate(priv->reg.rate_set.body[i])) { 1835 rate_octet[i] = priv->reg.rate_set.body[i] & 1836 RATE_MASK; 1837 } else { 1838 rate_octet[i] = priv->reg.rate_set.body[i]; 1839 } 1840 } 1841 } 1842 rate_size = i; 1843 if (rate_size == 0) { 1844 if (priv->reg.phy_type == D_11G_ONLY_MODE) 1845 rate_octet[0] = TX_RATE_6M | BASIC_RATE; 1846 else 1847 rate_octet[0] = TX_RATE_2M | BASIC_RATE; 1848 rate_size = 1; 1849 } 1850 1851 /* rate set update */ 1852 priv->reg.rate_set.size = rate_size; 1853 memcpy(&priv->reg.rate_set.body[0], &rate_octet[0], rate_size); 1854 1855 switch (priv->reg.operation_mode) { 1856 case MODE_PSEUDO_ADHOC: 1857 hostif_ps_adhoc_set_request(priv); 1858 break; 1859 case MODE_INFRASTRUCTURE: 1860 if (!is_valid_ether_addr((u8 *)priv->reg.bssid)) { 1861 hostif_infrastructure_set_request(priv, 1862 HIF_INFRA_SET_REQ); 1863 } else { 1864 hostif_infrastructure_set_request(priv, 1865 HIF_INFRA_SET2_REQ); 1866 netdev_dbg(priv->net_dev, 1867 "Infra bssid = %pM\n", priv->reg.bssid); 1868 } 1869 break; 1870 case MODE_ADHOC: 1871 if (!is_valid_ether_addr((u8 *)priv->reg.bssid)) { 1872 hostif_adhoc_set_request(priv); 1873 } else { 1874 hostif_adhoc_set2_request(priv); 1875 netdev_dbg(priv->net_dev, 1876 "Adhoc bssid = %pM\n", priv->reg.bssid); 1877 } 1878 break; 1879 default: 1880 break; 1881 } 1882 } 1883 1884 static 1885 void hostif_sme_multicast_set(struct ks_wlan_private *priv) 1886 { 1887 struct net_device *dev = priv->net_dev; 1888 int mc_count; 1889 struct netdev_hw_addr *ha; 1890 char set_address[NIC_MAX_MCAST_LIST * ETH_ALEN]; 1891 int i = 0; 1892 1893 spin_lock(&priv->multicast_spin); 1894 1895 memset(set_address, 0, NIC_MAX_MCAST_LIST * ETH_ALEN); 1896 1897 if (dev->flags & IFF_PROMISC) { 1898 hostif_mib_set_request_int(priv, LOCAL_MULTICAST_FILTER, 1899 MCAST_FILTER_PROMISC); 1900 goto spin_unlock; 1901 } 1902 1903 if ((netdev_mc_count(dev) > NIC_MAX_MCAST_LIST) || 1904 (dev->flags & IFF_ALLMULTI)) { 1905 hostif_mib_set_request_int(priv, LOCAL_MULTICAST_FILTER, 1906 MCAST_FILTER_MCASTALL); 1907 goto spin_unlock; 1908 } 1909 1910 if (priv->sme_i.sme_flag & SME_MULTICAST) { 1911 mc_count = netdev_mc_count(dev); 1912 netdev_for_each_mc_addr(ha, dev) { 1913 ether_addr_copy(&set_address[i * ETH_ALEN], ha->addr); 1914 i++; 1915 } 1916 priv->sme_i.sme_flag &= ~SME_MULTICAST; 1917 hostif_mib_set_request_ostring(priv, LOCAL_MULTICAST_ADDRESS, 1918 &set_address[0], 1919 ETH_ALEN * mc_count); 1920 } else { 1921 priv->sme_i.sme_flag |= SME_MULTICAST; 1922 hostif_mib_set_request_int(priv, LOCAL_MULTICAST_FILTER, 1923 MCAST_FILTER_MCAST); 1924 } 1925 1926 spin_unlock: 1927 spin_unlock(&priv->multicast_spin); 1928 } 1929 1930 static void hostif_sme_power_mgmt_set(struct ks_wlan_private *priv) 1931 { 1932 u32 mode, wake_up, receive_dtims; 1933 1934 if (priv->reg.power_mgmt != POWER_MGMT_SAVE1 && 1935 priv->reg.power_mgmt != POWER_MGMT_SAVE2) { 1936 mode = POWER_ACTIVE; 1937 wake_up = 0; 1938 receive_dtims = 0; 1939 } else { 1940 mode = (priv->reg.operation_mode == MODE_INFRASTRUCTURE) ? 1941 POWER_SAVE : POWER_ACTIVE; 1942 wake_up = 0; 1943 receive_dtims = (priv->reg.operation_mode == MODE_INFRASTRUCTURE && 1944 priv->reg.power_mgmt == POWER_MGMT_SAVE2); 1945 } 1946 1947 hostif_power_mgmt_request(priv, mode, wake_up, receive_dtims); 1948 } 1949 1950 static void hostif_sme_sleep_set(struct ks_wlan_private *priv) 1951 { 1952 if (priv->sleep_mode != SLP_SLEEP && 1953 priv->sleep_mode != SLP_ACTIVE) 1954 return; 1955 1956 hostif_sleep_request(priv, priv->sleep_mode); 1957 } 1958 1959 static 1960 void hostif_sme_set_key(struct ks_wlan_private *priv, int type) 1961 { 1962 switch (type) { 1963 case SME_SET_FLAG: 1964 hostif_mib_set_request_bool(priv, DOT11_PRIVACY_INVOKED, 1965 priv->reg.privacy_invoked); 1966 break; 1967 case SME_SET_TXKEY: 1968 hostif_mib_set_request_int(priv, DOT11_WEP_DEFAULT_KEY_ID, 1969 priv->wpa.txkey); 1970 break; 1971 case SME_SET_KEY1: 1972 hostif_mib_set_request_ostring(priv, 1973 DOT11_WEP_DEFAULT_KEY_VALUE1, 1974 &priv->wpa.key[0].key_val[0], 1975 priv->wpa.key[0].key_len); 1976 break; 1977 case SME_SET_KEY2: 1978 hostif_mib_set_request_ostring(priv, 1979 DOT11_WEP_DEFAULT_KEY_VALUE2, 1980 &priv->wpa.key[1].key_val[0], 1981 priv->wpa.key[1].key_len); 1982 break; 1983 case SME_SET_KEY3: 1984 hostif_mib_set_request_ostring(priv, 1985 DOT11_WEP_DEFAULT_KEY_VALUE3, 1986 &priv->wpa.key[2].key_val[0], 1987 priv->wpa.key[2].key_len); 1988 break; 1989 case SME_SET_KEY4: 1990 hostif_mib_set_request_ostring(priv, 1991 DOT11_WEP_DEFAULT_KEY_VALUE4, 1992 &priv->wpa.key[3].key_val[0], 1993 priv->wpa.key[3].key_len); 1994 break; 1995 case SME_SET_PMK_TSC: 1996 hostif_mib_set_request_ostring(priv, DOT11_PMK_TSC, 1997 &priv->wpa.key[0].rx_seq[0], 1998 WPA_RX_SEQ_LEN); 1999 break; 2000 case SME_SET_GMK1_TSC: 2001 hostif_mib_set_request_ostring(priv, DOT11_GMK1_TSC, 2002 &priv->wpa.key[1].rx_seq[0], 2003 WPA_RX_SEQ_LEN); 2004 break; 2005 case SME_SET_GMK2_TSC: 2006 hostif_mib_set_request_ostring(priv, DOT11_GMK2_TSC, 2007 &priv->wpa.key[2].rx_seq[0], 2008 WPA_RX_SEQ_LEN); 2009 break; 2010 } 2011 } 2012 2013 static 2014 void hostif_sme_set_pmksa(struct ks_wlan_private *priv) 2015 { 2016 struct pmk_cache { 2017 __le16 size; 2018 struct { 2019 u8 bssid[ETH_ALEN]; 2020 u8 pmkid[IW_PMKID_LEN]; 2021 } __packed list[PMK_LIST_MAX]; 2022 } __packed pmkcache; 2023 struct pmk *pmk; 2024 size_t size; 2025 int i = 0; 2026 2027 list_for_each_entry(pmk, &priv->pmklist.head, list) { 2028 if (i >= PMK_LIST_MAX) 2029 break; 2030 ether_addr_copy(pmkcache.list[i].bssid, pmk->bssid); 2031 memcpy(pmkcache.list[i].pmkid, pmk->pmkid, IW_PMKID_LEN); 2032 i++; 2033 } 2034 pmkcache.size = cpu_to_le16(priv->pmklist.size); 2035 size = sizeof(priv->pmklist.size) + 2036 ((ETH_ALEN + IW_PMKID_LEN) * priv->pmklist.size); 2037 hostif_mib_set_request_ostring(priv, LOCAL_PMK, &pmkcache, size); 2038 } 2039 2040 /* execute sme */ 2041 static void hostif_sme_execute(struct ks_wlan_private *priv, int event) 2042 { 2043 u16 failure; 2044 2045 switch (event) { 2046 case SME_START: 2047 if (priv->dev_state == DEVICE_STATE_BOOT) 2048 hostif_mib_get_request(priv, DOT11_MAC_ADDRESS); 2049 break; 2050 case SME_MULTICAST_REQUEST: 2051 hostif_sme_multicast_set(priv); 2052 break; 2053 case SME_MACADDRESS_SET_REQUEST: 2054 hostif_mib_set_request_ostring(priv, LOCAL_CURRENTADDRESS, 2055 &priv->eth_addr[0], ETH_ALEN); 2056 break; 2057 case SME_BSS_SCAN_REQUEST: 2058 hostif_bss_scan_request(priv, priv->reg.scan_type, 2059 priv->scan_ssid, priv->scan_ssid_len); 2060 break; 2061 case SME_POW_MNGMT_REQUEST: 2062 hostif_sme_power_mgmt_set(priv); 2063 break; 2064 case SME_PHY_INFO_REQUEST: 2065 hostif_phy_information_request(priv); 2066 break; 2067 case SME_MIC_FAILURE_REQUEST: 2068 failure = priv->wpa.mic_failure.failure; 2069 if (failure != 1 && failure != 2) { 2070 netdev_err(priv->net_dev, 2071 "SME_MIC_FAILURE_REQUEST: failure count=%u error?\n", 2072 failure); 2073 return; 2074 } 2075 hostif_mic_failure_request(priv, failure - 1, (failure == 1) ? 2076 0 : priv->wpa.mic_failure.counter); 2077 break; 2078 case SME_MIC_FAILURE_CONFIRM: 2079 if (priv->wpa.mic_failure.failure == 2) { 2080 if (priv->wpa.mic_failure.stop) 2081 priv->wpa.mic_failure.stop = 0; 2082 priv->wpa.mic_failure.failure = 0; 2083 hostif_start_request(priv, priv->reg.operation_mode); 2084 } 2085 break; 2086 case SME_GET_MAC_ADDRESS: 2087 if (priv->dev_state == DEVICE_STATE_BOOT) 2088 hostif_mib_get_request(priv, DOT11_PRODUCT_VERSION); 2089 break; 2090 case SME_GET_PRODUCT_VERSION: 2091 if (priv->dev_state == DEVICE_STATE_BOOT) 2092 priv->dev_state = DEVICE_STATE_PREINIT; 2093 break; 2094 case SME_STOP_REQUEST: 2095 hostif_stop_request(priv); 2096 break; 2097 case SME_RTS_THRESHOLD_REQUEST: 2098 hostif_mib_set_request_int(priv, DOT11_RTS_THRESHOLD, 2099 priv->reg.rts); 2100 break; 2101 case SME_FRAGMENTATION_THRESHOLD_REQUEST: 2102 hostif_mib_set_request_int(priv, DOT11_FRAGMENTATION_THRESHOLD, 2103 priv->reg.fragment); 2104 break; 2105 case SME_WEP_INDEX_REQUEST: 2106 case SME_WEP_KEY1_REQUEST: 2107 case SME_WEP_KEY2_REQUEST: 2108 case SME_WEP_KEY3_REQUEST: 2109 case SME_WEP_KEY4_REQUEST: 2110 case SME_WEP_FLAG_REQUEST: 2111 hostif_sme_set_wep(priv, event); 2112 break; 2113 case SME_RSN_UCAST_REQUEST: 2114 case SME_RSN_MCAST_REQUEST: 2115 case SME_RSN_AUTH_REQUEST: 2116 case SME_RSN_ENABLED_REQUEST: 2117 case SME_RSN_MODE_REQUEST: 2118 hostif_sme_set_rsn(priv, event); 2119 break; 2120 case SME_SET_FLAG: 2121 case SME_SET_TXKEY: 2122 case SME_SET_KEY1: 2123 case SME_SET_KEY2: 2124 case SME_SET_KEY3: 2125 case SME_SET_KEY4: 2126 case SME_SET_PMK_TSC: 2127 case SME_SET_GMK1_TSC: 2128 case SME_SET_GMK2_TSC: 2129 hostif_sme_set_key(priv, event); 2130 break; 2131 case SME_SET_PMKSA: 2132 hostif_sme_set_pmksa(priv); 2133 break; 2134 case SME_WPS_ENABLE_REQUEST: 2135 hostif_mib_set_request_int(priv, LOCAL_WPS_ENABLE, 2136 priv->wps.wps_enabled); 2137 break; 2138 case SME_WPS_PROBE_REQUEST: 2139 hostif_mib_set_request_ostring(priv, LOCAL_WPS_PROBE_REQ, 2140 priv->wps.ie, priv->wps.ielen); 2141 break; 2142 case SME_MODE_SET_REQUEST: 2143 hostif_sme_mode_setup(priv); 2144 break; 2145 case SME_SET_GAIN: 2146 hostif_mib_set_request_ostring(priv, LOCAL_GAIN, 2147 &priv->gain, sizeof(priv->gain)); 2148 break; 2149 case SME_GET_GAIN: 2150 hostif_mib_get_request(priv, LOCAL_GAIN); 2151 break; 2152 case SME_GET_EEPROM_CKSUM: 2153 priv->eeprom_checksum = EEPROM_FW_NOT_SUPPORT; /* initialize */ 2154 hostif_mib_get_request(priv, LOCAL_EEPROM_SUM); 2155 break; 2156 case SME_START_REQUEST: 2157 hostif_start_request(priv, priv->reg.operation_mode); 2158 break; 2159 case SME_START_CONFIRM: 2160 /* for power save */ 2161 atomic_set(&priv->psstatus.snooze_guard, 0); 2162 atomic_set(&priv->psstatus.confirm_wait, 0); 2163 if (priv->dev_state == DEVICE_STATE_PREINIT) 2164 priv->dev_state = DEVICE_STATE_INIT; 2165 /* wake_up_interruptible_all(&priv->confirm_wait); */ 2166 complete(&priv->confirm_wait); 2167 break; 2168 case SME_SLEEP_REQUEST: 2169 hostif_sme_sleep_set(priv); 2170 break; 2171 case SME_SET_REGION: 2172 hostif_mib_set_request_int(priv, LOCAL_REGION, priv->region); 2173 break; 2174 case SME_MULTICAST_CONFIRM: 2175 case SME_BSS_SCAN_CONFIRM: 2176 case SME_POW_MNGMT_CONFIRM: 2177 case SME_PHY_INFO_CONFIRM: 2178 case SME_STOP_CONFIRM: 2179 case SME_RTS_THRESHOLD_CONFIRM: 2180 case SME_FRAGMENTATION_THRESHOLD_CONFIRM: 2181 case SME_WEP_INDEX_CONFIRM: 2182 case SME_WEP_KEY1_CONFIRM: 2183 case SME_WEP_KEY2_CONFIRM: 2184 case SME_WEP_KEY3_CONFIRM: 2185 case SME_WEP_KEY4_CONFIRM: 2186 case SME_WEP_FLAG_CONFIRM: 2187 case SME_RSN_UCAST_CONFIRM: 2188 case SME_RSN_MCAST_CONFIRM: 2189 case SME_RSN_AUTH_CONFIRM: 2190 case SME_RSN_ENABLED_CONFIRM: 2191 case SME_RSN_MODE_CONFIRM: 2192 case SME_MODE_SET_CONFIRM: 2193 case SME_TERMINATE: 2194 default: 2195 break; 2196 } 2197 } 2198 2199 static void hostif_sme_work(struct work_struct *work) 2200 { 2201 struct ks_wlan_private *priv; 2202 2203 priv = container_of(work, struct ks_wlan_private, sme_work); 2204 2205 if (priv->dev_state < DEVICE_STATE_BOOT) 2206 return; 2207 2208 if (cnt_smeqbody(priv) <= 0) 2209 return; 2210 2211 hostif_sme_execute(priv, priv->sme_i.event_buff[priv->sme_i.qhead]); 2212 inc_smeqhead(priv); 2213 if (cnt_smeqbody(priv) > 0) 2214 schedule_work(&priv->sme_work); 2215 } 2216 2217 /* send to Station Management Entity module */ 2218 void hostif_sme_enqueue(struct ks_wlan_private *priv, u16 event) 2219 { 2220 /* enqueue sme event */ 2221 if (cnt_smeqbody(priv) < (SME_EVENT_BUFF_SIZE - 1)) { 2222 priv->sme_i.event_buff[priv->sme_i.qtail] = event; 2223 inc_smeqtail(priv); 2224 } else { 2225 /* in case of buffer overflow */ 2226 netdev_err(priv->net_dev, "sme queue buffer overflow\n"); 2227 } 2228 2229 schedule_work(&priv->sme_work); 2230 } 2231 2232 static inline void hostif_aplist_init(struct ks_wlan_private *priv) 2233 { 2234 size_t size = LOCAL_APLIST_MAX * sizeof(struct local_ap); 2235 2236 priv->aplist.size = 0; 2237 memset(&priv->aplist.ap[0], 0, size); 2238 } 2239 2240 static inline void hostif_status_init(struct ks_wlan_private *priv) 2241 { 2242 priv->infra_status = 0; 2243 priv->current_rate = 4; 2244 priv->connect_status = DISCONNECT_STATUS; 2245 } 2246 2247 static inline void hostif_sme_init(struct ks_wlan_private *priv) 2248 { 2249 priv->sme_i.sme_status = SME_IDLE; 2250 priv->sme_i.qhead = 0; 2251 priv->sme_i.qtail = 0; 2252 spin_lock_init(&priv->sme_i.sme_spin); 2253 priv->sme_i.sme_flag = 0; 2254 INIT_WORK(&priv->sme_work, hostif_sme_work); 2255 } 2256 2257 static inline void hostif_wpa_init(struct ks_wlan_private *priv) 2258 { 2259 memset(&priv->wpa, 0, sizeof(priv->wpa)); 2260 priv->wpa.rsn_enabled = false; 2261 priv->wpa.mic_failure.failure = 0; 2262 priv->wpa.mic_failure.last_failure_time = 0; 2263 priv->wpa.mic_failure.stop = 0; 2264 } 2265 2266 static inline void hostif_power_save_init(struct ks_wlan_private *priv) 2267 { 2268 atomic_set(&priv->psstatus.status, PS_NONE); 2269 atomic_set(&priv->psstatus.confirm_wait, 0); 2270 atomic_set(&priv->psstatus.snooze_guard, 0); 2271 init_completion(&priv->psstatus.wakeup_wait); 2272 INIT_WORK(&priv->wakeup_work, ks_wlan_hw_wakeup_task); 2273 } 2274 2275 static inline void hostif_pmklist_init(struct ks_wlan_private *priv) 2276 { 2277 int i; 2278 2279 memset(&priv->pmklist, 0, sizeof(priv->pmklist)); 2280 INIT_LIST_HEAD(&priv->pmklist.head); 2281 for (i = 0; i < PMK_LIST_MAX; i++) 2282 INIT_LIST_HEAD(&priv->pmklist.pmk[i].list); 2283 } 2284 2285 static inline void hostif_counters_init(struct ks_wlan_private *priv) 2286 { 2287 priv->dev_count = 0; 2288 atomic_set(&priv->event_count, 0); 2289 atomic_set(&priv->rec_count, 0); 2290 } 2291 2292 int hostif_init(struct ks_wlan_private *priv) 2293 { 2294 hostif_aplist_init(priv); 2295 hostif_status_init(priv); 2296 2297 spin_lock_init(&priv->multicast_spin); 2298 spin_lock_init(&priv->dev_read_lock); 2299 init_waitqueue_head(&priv->devread_wait); 2300 2301 hostif_counters_init(priv); 2302 hostif_power_save_init(priv); 2303 hostif_wpa_init(priv); 2304 hostif_pmklist_init(priv); 2305 hostif_sme_init(priv); 2306 2307 return 0; 2308 } 2309 2310 void hostif_exit(struct ks_wlan_private *priv) 2311 { 2312 cancel_work_sync(&priv->sme_work); 2313 } 2314