]> git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/blame - drivers/net/wireless/ipw2200.c
wireless: escape_ssid should handle non-printables
[mirror_ubuntu-artful-kernel.git] / drivers / net / wireless / ipw2200.c
CommitLineData
43f66a6c 1/******************************************************************************
bf79451e 2
171e7b2f 3 Copyright(c) 2003 - 2006 Intel Corporation. All rights reserved.
43f66a6c
JK
4
5 802.11 status code portion of this file from ethereal-0.10.6:
6 Copyright 2000, Axis Communications AB
7 Ethereal - Network traffic analyzer
8 By Gerald Combs <gerald@ethereal.com>
9 Copyright 1998 Gerald Combs
10
bf79451e
JG
11 This program is free software; you can redistribute it and/or modify it
12 under the terms of version 2 of the GNU General Public License as
43f66a6c 13 published by the Free Software Foundation.
bf79451e
JG
14
15 This program is distributed in the hope that it will be useful, but WITHOUT
16 ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
17 FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
43f66a6c 18 more details.
bf79451e 19
43f66a6c 20 You should have received a copy of the GNU General Public License along with
bf79451e 21 this program; if not, write to the Free Software Foundation, Inc., 59
43f66a6c 22 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
bf79451e 23
43f66a6c
JK
24 The full GNU General Public License is included in this distribution in the
25 file called LICENSE.
bf79451e 26
43f66a6c
JK
27 Contact Information:
28 James P. Ketrenos <ipw2100-admin@linux.intel.com>
29 Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
30
31******************************************************************************/
32
33#include "ipw2200.h"
34
ae4af61f
ZY
35
36#ifndef KBUILD_EXTMOD
37#define VK "k"
38#else
39#define VK
40#endif
41
42#ifdef CONFIG_IPW2200_DEBUG
43#define VD "d"
44#else
45#define VD
46#endif
47
48#ifdef CONFIG_IPW2200_MONITOR
49#define VM "m"
50#else
51#define VM
52#endif
53
54#ifdef CONFIG_IPW2200_PROMISCUOUS
55#define VP "p"
56#else
57#define VP
58#endif
59
459d4087 60#ifdef CONFIG_IPW2200_RADIOTAP
ae4af61f
ZY
61#define VR "r"
62#else
63#define VR
64#endif
65
66#ifdef CONFIG_IPW2200_QOS
67#define VQ "q"
68#else
69#define VQ
70#endif
71
ee2c4add 72#define IPW2200_VERSION "1.2.2" VK VD VM VP VR VQ
43f66a6c 73#define DRV_DESCRIPTION "Intel(R) PRO/Wireless 2200/2915 Network Driver"
171e7b2f 74#define DRV_COPYRIGHT "Copyright(c) 2003-2006 Intel Corporation"
43f66a6c
JK
75#define DRV_VERSION IPW2200_VERSION
76
b095c381
JK
77#define ETH_P_80211_STATS (ETH_P_80211_RAW + 1)
78
43f66a6c
JK
79MODULE_DESCRIPTION(DRV_DESCRIPTION);
80MODULE_VERSION(DRV_VERSION);
81MODULE_AUTHOR(DRV_COPYRIGHT);
82MODULE_LICENSE("GPL");
83
f6c5cb7c 84static int cmdlog = 0;
43f66a6c
JK
85static int debug = 0;
86static int channel = 0;
43f66a6c
JK
87static int mode = 0;
88
89static u32 ipw_debug_level;
5c7f9b73 90static int associate;
43f66a6c 91static int auto_create = 1;
a613bffd 92static int led = 0;
43f66a6c 93static int disable = 0;
810dabd4 94static int bt_coexist = 0;
bde37d03 95static int hwcrypto = 0;
4bfdb91d 96static int roaming = 1;
43f66a6c
JK
97static const char ipw_modes[] = {
98 'a', 'b', 'g', '?'
99};
d2b83e12 100static int antenna = CFG_SYS_ANTENNA_BOTH;
43f66a6c 101
d685b8c2
ZY
102#ifdef CONFIG_IPW2200_PROMISCUOUS
103static int rtap_iface = 0; /* def: 0 -- do not create rtap interface */
104#endif
105
106
e43e3c1e 107#ifdef CONFIG_IPW2200_QOS
b095c381
JK
108static int qos_enable = 0;
109static int qos_burst_enable = 0;
110static int qos_no_ack_mask = 0;
111static int burst_duration_CCK = 0;
112static int burst_duration_OFDM = 0;
113
114static struct ieee80211_qos_parameters def_qos_parameters_OFDM = {
115 {QOS_TX0_CW_MIN_OFDM, QOS_TX1_CW_MIN_OFDM, QOS_TX2_CW_MIN_OFDM,
116 QOS_TX3_CW_MIN_OFDM},
117 {QOS_TX0_CW_MAX_OFDM, QOS_TX1_CW_MAX_OFDM, QOS_TX2_CW_MAX_OFDM,
118 QOS_TX3_CW_MAX_OFDM},
119 {QOS_TX0_AIFS, QOS_TX1_AIFS, QOS_TX2_AIFS, QOS_TX3_AIFS},
120 {QOS_TX0_ACM, QOS_TX1_ACM, QOS_TX2_ACM, QOS_TX3_ACM},
121 {QOS_TX0_TXOP_LIMIT_OFDM, QOS_TX1_TXOP_LIMIT_OFDM,
122 QOS_TX2_TXOP_LIMIT_OFDM, QOS_TX3_TXOP_LIMIT_OFDM}
123};
124
125static struct ieee80211_qos_parameters def_qos_parameters_CCK = {
126 {QOS_TX0_CW_MIN_CCK, QOS_TX1_CW_MIN_CCK, QOS_TX2_CW_MIN_CCK,
127 QOS_TX3_CW_MIN_CCK},
128 {QOS_TX0_CW_MAX_CCK, QOS_TX1_CW_MAX_CCK, QOS_TX2_CW_MAX_CCK,
129 QOS_TX3_CW_MAX_CCK},
130 {QOS_TX0_AIFS, QOS_TX1_AIFS, QOS_TX2_AIFS, QOS_TX3_AIFS},
131 {QOS_TX0_ACM, QOS_TX1_ACM, QOS_TX2_ACM, QOS_TX3_ACM},
132 {QOS_TX0_TXOP_LIMIT_CCK, QOS_TX1_TXOP_LIMIT_CCK, QOS_TX2_TXOP_LIMIT_CCK,
133 QOS_TX3_TXOP_LIMIT_CCK}
134};
135
136static struct ieee80211_qos_parameters def_parameters_OFDM = {
137 {DEF_TX0_CW_MIN_OFDM, DEF_TX1_CW_MIN_OFDM, DEF_TX2_CW_MIN_OFDM,
138 DEF_TX3_CW_MIN_OFDM},
139 {DEF_TX0_CW_MAX_OFDM, DEF_TX1_CW_MAX_OFDM, DEF_TX2_CW_MAX_OFDM,
140 DEF_TX3_CW_MAX_OFDM},
141 {DEF_TX0_AIFS, DEF_TX1_AIFS, DEF_TX2_AIFS, DEF_TX3_AIFS},
142 {DEF_TX0_ACM, DEF_TX1_ACM, DEF_TX2_ACM, DEF_TX3_ACM},
143 {DEF_TX0_TXOP_LIMIT_OFDM, DEF_TX1_TXOP_LIMIT_OFDM,
144 DEF_TX2_TXOP_LIMIT_OFDM, DEF_TX3_TXOP_LIMIT_OFDM}
145};
146
147static struct ieee80211_qos_parameters def_parameters_CCK = {
148 {DEF_TX0_CW_MIN_CCK, DEF_TX1_CW_MIN_CCK, DEF_TX2_CW_MIN_CCK,
149 DEF_TX3_CW_MIN_CCK},
150 {DEF_TX0_CW_MAX_CCK, DEF_TX1_CW_MAX_CCK, DEF_TX2_CW_MAX_CCK,
151 DEF_TX3_CW_MAX_CCK},
152 {DEF_TX0_AIFS, DEF_TX1_AIFS, DEF_TX2_AIFS, DEF_TX3_AIFS},
153 {DEF_TX0_ACM, DEF_TX1_ACM, DEF_TX2_ACM, DEF_TX3_ACM},
154 {DEF_TX0_TXOP_LIMIT_CCK, DEF_TX1_TXOP_LIMIT_CCK, DEF_TX2_TXOP_LIMIT_CCK,
155 DEF_TX3_TXOP_LIMIT_CCK}
156};
157
158static u8 qos_oui[QOS_OUI_LEN] = { 0x00, 0x50, 0xF2 };
159
160static int from_priority_to_tx_queue[] = {
161 IPW_TX_QUEUE_1, IPW_TX_QUEUE_2, IPW_TX_QUEUE_2, IPW_TX_QUEUE_1,
162 IPW_TX_QUEUE_3, IPW_TX_QUEUE_3, IPW_TX_QUEUE_4, IPW_TX_QUEUE_4
163};
164
165static u32 ipw_qos_get_burst_duration(struct ipw_priv *priv);
166
167static int ipw_send_qos_params_command(struct ipw_priv *priv, struct ieee80211_qos_parameters
168 *qos_param);
169static int ipw_send_qos_info_command(struct ipw_priv *priv, struct ieee80211_qos_information_element
170 *qos_param);
e43e3c1e 171#endif /* CONFIG_IPW2200_QOS */
b095c381 172
97a78ca9 173static struct iw_statistics *ipw_get_wireless_stats(struct net_device *dev);
b095c381 174static void ipw_remove_current_network(struct ipw_priv *priv);
43f66a6c 175static void ipw_rx(struct ipw_priv *priv);
bf79451e 176static int ipw_queue_tx_reclaim(struct ipw_priv *priv,
43f66a6c
JK
177 struct clx2_tx_queue *txq, int qindex);
178static int ipw_queue_reset(struct ipw_priv *priv);
179
180static int ipw_queue_tx_hcmd(struct ipw_priv *priv, int hcmd, void *buf,
181 int len, int sync);
182
183static void ipw_tx_queue_free(struct ipw_priv *);
184
185static struct ipw_rx_queue *ipw_rx_queue_alloc(struct ipw_priv *);
186static void ipw_rx_queue_free(struct ipw_priv *, struct ipw_rx_queue *);
187static void ipw_rx_queue_replenish(void *);
43f66a6c 188static int ipw_up(struct ipw_priv *);
c4028958 189static void ipw_bg_up(struct work_struct *work);
43f66a6c 190static void ipw_down(struct ipw_priv *);
c4028958 191static void ipw_bg_down(struct work_struct *work);
43f66a6c 192static int ipw_config(struct ipw_priv *);
0edd5b44
JG
193static int init_supported_rates(struct ipw_priv *priv,
194 struct ipw_supported_rates *prates);
b095c381
JK
195static void ipw_set_hwcrypto_keys(struct ipw_priv *);
196static void ipw_send_wep_keys(struct ipw_priv *, int);
43f66a6c 197
f6c5cb7c
JK
198static int snprint_line(char *buf, size_t count,
199 const u8 * data, u32 len, u32 ofs)
43f66a6c
JK
200{
201 int out, i, j, l;
202 char c;
bf79451e 203
43f66a6c
JK
204 out = snprintf(buf, count, "%08X", ofs);
205
206 for (l = 0, i = 0; i < 2; i++) {
207 out += snprintf(buf + out, count - out, " ");
bf79451e
JG
208 for (j = 0; j < 8 && l < len; j++, l++)
209 out += snprintf(buf + out, count - out, "%02X ",
43f66a6c
JK
210 data[(i * 8 + j)]);
211 for (; j < 8; j++)
212 out += snprintf(buf + out, count - out, " ");
213 }
bf79451e 214
43f66a6c
JK
215 out += snprintf(buf + out, count - out, " ");
216 for (l = 0, i = 0; i < 2; i++) {
217 out += snprintf(buf + out, count - out, " ");
218 for (j = 0; j < 8 && l < len; j++, l++) {
219 c = data[(i * 8 + j)];
220 if (!isascii(c) || !isprint(c))
221 c = '.';
bf79451e 222
43f66a6c
JK
223 out += snprintf(buf + out, count - out, "%c", c);
224 }
225
226 for (; j < 8; j++)
227 out += snprintf(buf + out, count - out, " ");
228 }
bf79451e 229
f6c5cb7c 230 return out;
43f66a6c
JK
231}
232
0edd5b44 233static void printk_buf(int level, const u8 * data, u32 len)
43f66a6c
JK
234{
235 char line[81];
236 u32 ofs = 0;
237 if (!(ipw_debug_level & level))
238 return;
239
240 while (len) {
f6c5cb7c
JK
241 snprint_line(line, sizeof(line), &data[ofs],
242 min(len, 16U), ofs);
243 printk(KERN_DEBUG "%s\n", line);
43f66a6c
JK
244 ofs += 16;
245 len -= min(len, 16U);
246 }
247}
248
f6c5cb7c
JK
249static int snprintk_buf(u8 * output, size_t size, const u8 * data, size_t len)
250{
251 size_t out = size;
252 u32 ofs = 0;
253 int total = 0;
254
255 while (size && len) {
256 out = snprint_line(output, size, &data[ofs],
257 min_t(size_t, len, 16U), ofs);
258
259 ofs += 16;
260 output += out;
261 size -= out;
262 len -= min_t(size_t, len, 16U);
263 total += out;
264 }
265 return total;
266}
267
c8fe6679 268/* alias for 32-bit indirect read (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK
269static u32 _ipw_read_reg32(struct ipw_priv *priv, u32 reg);
270#define ipw_read_reg32(a, b) _ipw_read_reg32(a, b)
271
c8fe6679 272/* alias for 8-bit indirect read (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK
273static u8 _ipw_read_reg8(struct ipw_priv *ipw, u32 reg);
274#define ipw_read_reg8(a, b) _ipw_read_reg8(a, b)
275
c8fe6679 276/* 8-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK
277static void _ipw_write_reg8(struct ipw_priv *priv, u32 reg, u8 value);
278static inline void ipw_write_reg8(struct ipw_priv *a, u32 b, u8 c)
279{
0edd5b44
JG
280 IPW_DEBUG_IO("%s %d: write_indirect8(0x%08X, 0x%08X)\n", __FILE__,
281 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK
282 _ipw_write_reg8(a, b, c);
283}
284
c8fe6679 285/* 16-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK
286static void _ipw_write_reg16(struct ipw_priv *priv, u32 reg, u16 value);
287static inline void ipw_write_reg16(struct ipw_priv *a, u32 b, u16 c)
288{
0edd5b44
JG
289 IPW_DEBUG_IO("%s %d: write_indirect16(0x%08X, 0x%08X)\n", __FILE__,
290 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK
291 _ipw_write_reg16(a, b, c);
292}
293
c8fe6679 294/* 32-bit indirect write (for SRAM/reg above 4K), with debug wrapper */
43f66a6c
JK
295static void _ipw_write_reg32(struct ipw_priv *priv, u32 reg, u32 value);
296static inline void ipw_write_reg32(struct ipw_priv *a, u32 b, u32 c)
297{
0edd5b44
JG
298 IPW_DEBUG_IO("%s %d: write_indirect32(0x%08X, 0x%08X)\n", __FILE__,
299 __LINE__, (u32) (b), (u32) (c));
43f66a6c
JK
300 _ipw_write_reg32(a, b, c);
301}
302
c8fe6679 303/* 8-bit direct write (low 4K) */
43f66a6c 304#define _ipw_write8(ipw, ofs, val) writeb((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY
305
306/* 8-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
fb55d887 307#define ipw_write8(ipw, ofs, val) do { \
43f66a6c 308 IPW_DEBUG_IO("%s %d: write_direct8(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
fb55d887
TI
309 _ipw_write8(ipw, ofs, val); \
310 } while (0)
43f66a6c 311
c8fe6679 312/* 16-bit direct write (low 4K) */
43f66a6c 313#define _ipw_write16(ipw, ofs, val) writew((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY
314
315/* 16-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK
316#define ipw_write16(ipw, ofs, val) \
317 IPW_DEBUG_IO("%s %d: write_direct16(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
318 _ipw_write16(ipw, ofs, val)
319
c8fe6679 320/* 32-bit direct write (low 4K) */
43f66a6c 321#define _ipw_write32(ipw, ofs, val) writel((val), (ipw)->hw_base + (ofs))
c8fe6679
ZY
322
323/* 32-bit direct write (for low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK
324#define ipw_write32(ipw, ofs, val) \
325 IPW_DEBUG_IO("%s %d: write_direct32(0x%08X, 0x%08X)\n", __FILE__, __LINE__, (u32)(ofs), (u32)(val)); \
326 _ipw_write32(ipw, ofs, val)
327
c8fe6679 328/* 8-bit direct read (low 4K) */
43f66a6c 329#define _ipw_read8(ipw, ofs) readb((ipw)->hw_base + (ofs))
c8fe6679
ZY
330
331/* 8-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG
332static inline u8 __ipw_read8(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
333{
334 IPW_DEBUG_IO("%s %d: read_direct8(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK
335 return _ipw_read8(ipw, ofs);
336}
0edd5b44 337
c8fe6679 338/* alias to 8-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK
339#define ipw_read8(ipw, ofs) __ipw_read8(__FILE__, __LINE__, ipw, ofs)
340
c8fe6679 341/* 16-bit direct read (low 4K) */
43f66a6c 342#define _ipw_read16(ipw, ofs) readw((ipw)->hw_base + (ofs))
c8fe6679
ZY
343
344/* 16-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG
345static inline u16 __ipw_read16(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
346{
347 IPW_DEBUG_IO("%s %d: read_direct16(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK
348 return _ipw_read16(ipw, ofs);
349}
0edd5b44 350
c8fe6679 351/* alias to 16-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK
352#define ipw_read16(ipw, ofs) __ipw_read16(__FILE__, __LINE__, ipw, ofs)
353
c8fe6679 354/* 32-bit direct read (low 4K) */
43f66a6c 355#define _ipw_read32(ipw, ofs) readl((ipw)->hw_base + (ofs))
c8fe6679
ZY
356
357/* 32-bit direct read (low 4K), with debug wrapper */
0edd5b44
JG
358static inline u32 __ipw_read32(char *f, u32 l, struct ipw_priv *ipw, u32 ofs)
359{
360 IPW_DEBUG_IO("%s %d: read_direct32(0x%08X)\n", f, l, (u32) (ofs));
43f66a6c
JK
361 return _ipw_read32(ipw, ofs);
362}
0edd5b44 363
c8fe6679 364/* alias to 32-bit direct read (low 4K of SRAM/regs), with debug wrapper */
43f66a6c
JK
365#define ipw_read32(ipw, ofs) __ipw_read32(__FILE__, __LINE__, ipw, ofs)
366
c8fe6679 367/* multi-byte read (above 4K), with debug wrapper */
43f66a6c 368static void _ipw_read_indirect(struct ipw_priv *, u32, u8 *, int);
f6c5cb7c
JK
369static inline void __ipw_read_indirect(const char *f, int l,
370 struct ipw_priv *a, u32 b, u8 * c, int d)
371{
372 IPW_DEBUG_IO("%s %d: read_indirect(0x%08X) %d bytes\n", f, l, (u32) (b),
373 d);
374 _ipw_read_indirect(a, b, c, d);
375}
376
c8fe6679 377/* alias to multi-byte read (SRAM/regs above 4K), with debug wrapper */
f6c5cb7c 378#define ipw_read_indirect(a, b, c, d) __ipw_read_indirect(__FILE__, __LINE__, a, b, c, d)
43f66a6c 379
c8fe6679 380/* alias to multi-byte read (SRAM/regs above 4K), with debug wrapper */
0edd5b44
JG
381static void _ipw_write_indirect(struct ipw_priv *priv, u32 addr, u8 * data,
382 int num);
43f66a6c
JK
383#define ipw_write_indirect(a, b, c, d) \
384 IPW_DEBUG_IO("%s %d: write_indirect(0x%08X) %d bytes\n", __FILE__, __LINE__, (u32)(b), d); \
afbf30a2 385 _ipw_write_indirect(a, b, c, d)
43f66a6c 386
c8fe6679 387/* 32-bit indirect write (above 4K) */
0edd5b44 388static void _ipw_write_reg32(struct ipw_priv *priv, u32 reg, u32 value)
43f66a6c 389{
0edd5b44 390 IPW_DEBUG_IO(" %p : reg = 0x%8X : value = 0x%8X\n", priv, reg, value);
b095c381
JK
391 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg);
392 _ipw_write32(priv, IPW_INDIRECT_DATA, value);
43f66a6c
JK
393}
394
c8fe6679 395/* 8-bit indirect write (above 4K) */
43f66a6c
JK
396static void _ipw_write_reg8(struct ipw_priv *priv, u32 reg, u8 value)
397{
2638bc39 398 u32 aligned_addr = reg & IPW_INDIRECT_ADDR_MASK; /* dword align */
c8fe6679
ZY
399 u32 dif_len = reg - aligned_addr;
400
43f66a6c 401 IPW_DEBUG_IO(" reg = 0x%8X : value = 0x%8X\n", reg, value);
c8fe6679
ZY
402 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
403 _ipw_write8(priv, IPW_INDIRECT_DATA + dif_len, value);
43f66a6c
JK
404}
405
c8fe6679 406/* 16-bit indirect write (above 4K) */
0edd5b44 407static void _ipw_write_reg16(struct ipw_priv *priv, u32 reg, u16 value)
43f66a6c 408{
2638bc39 409 u32 aligned_addr = reg & IPW_INDIRECT_ADDR_MASK; /* dword align */
c8fe6679
ZY
410 u32 dif_len = (reg - aligned_addr) & (~0x1ul);
411
43f66a6c 412 IPW_DEBUG_IO(" reg = 0x%8X : value = 0x%8X\n", reg, value);
c8fe6679
ZY
413 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
414 _ipw_write16(priv, IPW_INDIRECT_DATA + dif_len, value);
43f66a6c
JK
415}
416
c8fe6679 417/* 8-bit indirect read (above 4K) */
43f66a6c
JK
418static u8 _ipw_read_reg8(struct ipw_priv *priv, u32 reg)
419{
420 u32 word;
b095c381 421 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg & IPW_INDIRECT_ADDR_MASK);
43f66a6c 422 IPW_DEBUG_IO(" reg = 0x%8X : \n", reg);
b095c381 423 word = _ipw_read32(priv, IPW_INDIRECT_DATA);
0edd5b44 424 return (word >> ((reg & 0x3) * 8)) & 0xff;
43f66a6c
JK
425}
426
c8fe6679 427/* 32-bit indirect read (above 4K) */
43f66a6c
JK
428static u32 _ipw_read_reg32(struct ipw_priv *priv, u32 reg)
429{
430 u32 value;
431
432 IPW_DEBUG_IO("%p : reg = 0x%08x\n", priv, reg);
433
b095c381
JK
434 _ipw_write32(priv, IPW_INDIRECT_ADDR, reg);
435 value = _ipw_read32(priv, IPW_INDIRECT_DATA);
43f66a6c
JK
436 IPW_DEBUG_IO(" reg = 0x%4X : value = 0x%4x \n", reg, value);
437 return value;
438}
439
c8fe6679
ZY
440/* General purpose, no alignment requirement, iterative (multi-byte) read, */
441/* for area above 1st 4K of SRAM/reg space */
43f66a6c
JK
442static void _ipw_read_indirect(struct ipw_priv *priv, u32 addr, u8 * buf,
443 int num)
444{
2638bc39 445 u32 aligned_addr = addr & IPW_INDIRECT_ADDR_MASK; /* dword align */
43f66a6c 446 u32 dif_len = addr - aligned_addr;
43f66a6c 447 u32 i;
bf79451e 448
43f66a6c
JK
449 IPW_DEBUG_IO("addr = %i, buf = %p, num = %i\n", addr, buf, num);
450
ea2b26e0
JK
451 if (num <= 0) {
452 return;
453 }
454
c8fe6679 455 /* Read the first dword (or portion) byte by byte */
43f66a6c 456 if (unlikely(dif_len)) {
b095c381 457 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
43f66a6c 458 /* Start reading at aligned_addr + dif_len */
ea2b26e0 459 for (i = dif_len; ((i < 4) && (num > 0)); i++, num--)
b095c381 460 *buf++ = _ipw_read8(priv, IPW_INDIRECT_DATA + i);
43f66a6c
JK
461 aligned_addr += 4;
462 }
463
c8fe6679 464 /* Read all of the middle dwords as dwords, with auto-increment */
b095c381 465 _ipw_write32(priv, IPW_AUTOINC_ADDR, aligned_addr);
ea2b26e0 466 for (; num >= 4; buf += 4, aligned_addr += 4, num -= 4)
b095c381 467 *(u32 *) buf = _ipw_read32(priv, IPW_AUTOINC_DATA);
bf79451e 468
c8fe6679 469 /* Read the last dword (or portion) byte by byte */
ea2b26e0 470 if (unlikely(num)) {
b095c381 471 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
ea2b26e0 472 for (i = 0; num > 0; i++, num--)
b095c381 473 *buf++ = ipw_read8(priv, IPW_INDIRECT_DATA + i);
ea2b26e0 474 }
43f66a6c
JK
475}
476
c8fe6679
ZY
477/* General purpose, no alignment requirement, iterative (multi-byte) write, */
478/* for area above 1st 4K of SRAM/reg space */
0edd5b44 479static void _ipw_write_indirect(struct ipw_priv *priv, u32 addr, u8 * buf,
43f66a6c
JK
480 int num)
481{
2638bc39 482 u32 aligned_addr = addr & IPW_INDIRECT_ADDR_MASK; /* dword align */
43f66a6c 483 u32 dif_len = addr - aligned_addr;
43f66a6c 484 u32 i;
bf79451e 485
43f66a6c 486 IPW_DEBUG_IO("addr = %i, buf = %p, num = %i\n", addr, buf, num);
bf79451e 487
ea2b26e0
JK
488 if (num <= 0) {
489 return;
490 }
491
c8fe6679 492 /* Write the first dword (or portion) byte by byte */
43f66a6c 493 if (unlikely(dif_len)) {
b095c381 494 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
c8fe6679 495 /* Start writing at aligned_addr + dif_len */
ea2b26e0 496 for (i = dif_len; ((i < 4) && (num > 0)); i++, num--, buf++)
b095c381 497 _ipw_write8(priv, IPW_INDIRECT_DATA + i, *buf);
43f66a6c
JK
498 aligned_addr += 4;
499 }
bf79451e 500
c8fe6679 501 /* Write all of the middle dwords as dwords, with auto-increment */
b095c381 502 _ipw_write32(priv, IPW_AUTOINC_ADDR, aligned_addr);
ea2b26e0 503 for (; num >= 4; buf += 4, aligned_addr += 4, num -= 4)
b095c381 504 _ipw_write32(priv, IPW_AUTOINC_DATA, *(u32 *) buf);
bf79451e 505
c8fe6679 506 /* Write the last dword (or portion) byte by byte */
ea2b26e0 507 if (unlikely(num)) {
b095c381 508 _ipw_write32(priv, IPW_INDIRECT_ADDR, aligned_addr);
ea2b26e0 509 for (i = 0; num > 0; i++, num--, buf++)
b095c381 510 _ipw_write8(priv, IPW_INDIRECT_DATA + i, *buf);
ea2b26e0 511 }
43f66a6c
JK
512}
513
c8fe6679
ZY
514/* General purpose, no alignment requirement, iterative (multi-byte) write, */
515/* for 1st 4K of SRAM/regs space */
bf79451e 516static void ipw_write_direct(struct ipw_priv *priv, u32 addr, void *buf,
43f66a6c
JK
517 int num)
518{
519 memcpy_toio((priv->hw_base + addr), buf, num);
520}
521
c8fe6679 522/* Set bit(s) in low 4K of SRAM/regs */
43f66a6c
JK
523static inline void ipw_set_bit(struct ipw_priv *priv, u32 reg, u32 mask)
524{
525 ipw_write32(priv, reg, ipw_read32(priv, reg) | mask);
526}
527
c8fe6679 528/* Clear bit(s) in low 4K of SRAM/regs */
43f66a6c
JK
529static inline void ipw_clear_bit(struct ipw_priv *priv, u32 reg, u32 mask)
530{
531 ipw_write32(priv, reg, ipw_read32(priv, reg) & ~mask);
532}
533
89c318ed 534static inline void __ipw_enable_interrupts(struct ipw_priv *priv)
43f66a6c
JK
535{
536 if (priv->status & STATUS_INT_ENABLED)
537 return;
538 priv->status |= STATUS_INT_ENABLED;
b095c381 539 ipw_write32(priv, IPW_INTA_MASK_R, IPW_INTA_MASK_ALL);
43f66a6c
JK
540}
541
89c318ed 542static inline void __ipw_disable_interrupts(struct ipw_priv *priv)
43f66a6c
JK
543{
544 if (!(priv->status & STATUS_INT_ENABLED))
545 return;
546 priv->status &= ~STATUS_INT_ENABLED;
b095c381 547 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
43f66a6c
JK
548}
549
89c318ed
ZY
550static inline void ipw_enable_interrupts(struct ipw_priv *priv)
551{
552 unsigned long flags;
553
554 spin_lock_irqsave(&priv->irq_lock, flags);
555 __ipw_enable_interrupts(priv);
556 spin_unlock_irqrestore(&priv->irq_lock, flags);
557}
558
559static inline void ipw_disable_interrupts(struct ipw_priv *priv)
560{
561 unsigned long flags;
562
563 spin_lock_irqsave(&priv->irq_lock, flags);
564 __ipw_disable_interrupts(priv);
565 spin_unlock_irqrestore(&priv->irq_lock, flags);
566}
567
43f66a6c
JK
568static char *ipw_error_desc(u32 val)
569{
570 switch (val) {
bf79451e 571 case IPW_FW_ERROR_OK:
43f66a6c 572 return "ERROR_OK";
bf79451e 573 case IPW_FW_ERROR_FAIL:
43f66a6c 574 return "ERROR_FAIL";
bf79451e 575 case IPW_FW_ERROR_MEMORY_UNDERFLOW:
43f66a6c 576 return "MEMORY_UNDERFLOW";
bf79451e 577 case IPW_FW_ERROR_MEMORY_OVERFLOW:
43f66a6c 578 return "MEMORY_OVERFLOW";
bf79451e 579 case IPW_FW_ERROR_BAD_PARAM:
b095c381 580 return "BAD_PARAM";
bf79451e 581 case IPW_FW_ERROR_BAD_CHECKSUM:
b095c381 582 return "BAD_CHECKSUM";
bf79451e 583 case IPW_FW_ERROR_NMI_INTERRUPT:
b095c381 584 return "NMI_INTERRUPT";
bf79451e 585 case IPW_FW_ERROR_BAD_DATABASE:
b095c381 586 return "BAD_DATABASE";
bf79451e 587 case IPW_FW_ERROR_ALLOC_FAIL:
b095c381 588 return "ALLOC_FAIL";
bf79451e 589 case IPW_FW_ERROR_DMA_UNDERRUN:
b095c381 590 return "DMA_UNDERRUN";
bf79451e 591 case IPW_FW_ERROR_DMA_STATUS:
b095c381
JK
592 return "DMA_STATUS";
593 case IPW_FW_ERROR_DINO_ERROR:
594 return "DINO_ERROR";
595 case IPW_FW_ERROR_EEPROM_ERROR:
596 return "EEPROM_ERROR";
bf79451e 597 case IPW_FW_ERROR_SYSASSERT:
b095c381 598 return "SYSASSERT";
bf79451e 599 case IPW_FW_ERROR_FATAL_ERROR:
b095c381 600 return "FATAL_ERROR";
bf79451e 601 default:
b095c381 602 return "UNKNOWN_ERROR";
43f66a6c
JK
603 }
604}
605
b39860c6
JK
606static void ipw_dump_error_log(struct ipw_priv *priv,
607 struct ipw_fw_error *error)
43f66a6c 608{
b39860c6 609 u32 i;
bf79451e 610
b39860c6
JK
611 if (!error) {
612 IPW_ERROR("Error allocating and capturing error log. "
613 "Nothing to dump.\n");
614 return;
43f66a6c
JK
615 }
616
b39860c6
JK
617 IPW_ERROR("Start IPW Error Log Dump:\n");
618 IPW_ERROR("Status: 0x%08X, Config: %08X\n",
619 error->status, error->config);
43f66a6c 620
b39860c6 621 for (i = 0; i < error->elem_len; i++)
0edd5b44 622 IPW_ERROR("%s %i 0x%08x 0x%08x 0x%08x 0x%08x 0x%08x\n",
b39860c6
JK
623 ipw_error_desc(error->elem[i].desc),
624 error->elem[i].time,
625 error->elem[i].blink1,
626 error->elem[i].blink2,
627 error->elem[i].link1,
628 error->elem[i].link2, error->elem[i].data);
629 for (i = 0; i < error->log_len; i++)
630 IPW_ERROR("%i\t0x%08x\t%i\n",
631 error->log[i].time,
286568ab 632 error->log[i].data, error->log[i].event);
43f66a6c
JK
633}
634
c848d0af 635static inline int ipw_is_init(struct ipw_priv *priv)
43f66a6c 636{
c848d0af 637 return (priv->status & STATUS_INIT) ? 1 : 0;
43f66a6c
JK
638}
639
0edd5b44 640static int ipw_get_ordinal(struct ipw_priv *priv, u32 ord, void *val, u32 * len)
43f66a6c
JK
641{
642 u32 addr, field_info, field_len, field_count, total_len;
643
644 IPW_DEBUG_ORD("ordinal = %i\n", ord);
645
646 if (!priv || !val || !len) {
647 IPW_DEBUG_ORD("Invalid argument\n");
648 return -EINVAL;
649 }
bf79451e 650
43f66a6c
JK
651 /* verify device ordinal tables have been initialized */
652 if (!priv->table0_addr || !priv->table1_addr || !priv->table2_addr) {
653 IPW_DEBUG_ORD("Access ordinals before initialization\n");
654 return -EINVAL;
655 }
656
657 switch (IPW_ORD_TABLE_ID_MASK & ord) {
658 case IPW_ORD_TABLE_0_MASK:
659 /*
660 * TABLE 0: Direct access to a table of 32 bit values
661 *
bf79451e 662 * This is a very simple table with the data directly
43f66a6c
JK
663 * read from the table
664 */
665
666 /* remove the table id from the ordinal */
667 ord &= IPW_ORD_TABLE_VALUE_MASK;
668
669 /* boundary check */
670 if (ord > priv->table0_len) {
671 IPW_DEBUG_ORD("ordinal value (%i) longer then "
672 "max (%i)\n", ord, priv->table0_len);
673 return -EINVAL;
674 }
675
676 /* verify we have enough room to store the value */
677 if (*len < sizeof(u32)) {
678 IPW_DEBUG_ORD("ordinal buffer length too small, "
aaa4d308 679 "need %zd\n", sizeof(u32));
43f66a6c
JK
680 return -EINVAL;
681 }
682
683 IPW_DEBUG_ORD("Reading TABLE0[%i] from offset 0x%08x\n",
0edd5b44 684 ord, priv->table0_addr + (ord << 2));
43f66a6c
JK
685
686 *len = sizeof(u32);
687 ord <<= 2;
0edd5b44 688 *((u32 *) val) = ipw_read32(priv, priv->table0_addr + ord);
43f66a6c
JK
689 break;
690
691 case IPW_ORD_TABLE_1_MASK:
692 /*
693 * TABLE 1: Indirect access to a table of 32 bit values
bf79451e
JG
694 *
695 * This is a fairly large table of u32 values each
43f66a6c
JK
696 * representing starting addr for the data (which is
697 * also a u32)
698 */
699
700 /* remove the table id from the ordinal */
701 ord &= IPW_ORD_TABLE_VALUE_MASK;
bf79451e 702
43f66a6c
JK
703 /* boundary check */
704 if (ord > priv->table1_len) {
705 IPW_DEBUG_ORD("ordinal value too long\n");
706 return -EINVAL;
707 }
708
709 /* verify we have enough room to store the value */
710 if (*len < sizeof(u32)) {
711 IPW_DEBUG_ORD("ordinal buffer length too small, "
aaa4d308 712 "need %zd\n", sizeof(u32));
43f66a6c
JK
713 return -EINVAL;
714 }
715
0edd5b44
JG
716 *((u32 *) val) =
717 ipw_read_reg32(priv, (priv->table1_addr + (ord << 2)));
43f66a6c
JK
718 *len = sizeof(u32);
719 break;
720
721 case IPW_ORD_TABLE_2_MASK:
722 /*
723 * TABLE 2: Indirect access to a table of variable sized values
724 *
725 * This table consist of six values, each containing
726 * - dword containing the starting offset of the data
727 * - dword containing the lengh in the first 16bits
728 * and the count in the second 16bits
729 */
730
731 /* remove the table id from the ordinal */
732 ord &= IPW_ORD_TABLE_VALUE_MASK;
733
734 /* boundary check */
735 if (ord > priv->table2_len) {
736 IPW_DEBUG_ORD("ordinal value too long\n");
737 return -EINVAL;
738 }
739
740 /* get the address of statistic */
741 addr = ipw_read_reg32(priv, priv->table2_addr + (ord << 3));
bf79451e
JG
742
743 /* get the second DW of statistics ;
43f66a6c 744 * two 16-bit words - first is length, second is count */
0edd5b44
JG
745 field_info =
746 ipw_read_reg32(priv,
747 priv->table2_addr + (ord << 3) +
748 sizeof(u32));
bf79451e 749
43f66a6c 750 /* get each entry length */
0edd5b44 751 field_len = *((u16 *) & field_info);
bf79451e 752
43f66a6c 753 /* get number of entries */
0edd5b44 754 field_count = *(((u16 *) & field_info) + 1);
bf79451e 755
43f66a6c
JK
756 /* abort if not enought memory */
757 total_len = field_len * field_count;
758 if (total_len > *len) {
759 *len = total_len;
760 return -EINVAL;
761 }
bf79451e 762
43f66a6c
JK
763 *len = total_len;
764 if (!total_len)
765 return 0;
766
767 IPW_DEBUG_ORD("addr = 0x%08x, total_len = %i, "
bf79451e 768 "field_info = 0x%08x\n",
43f66a6c
JK
769 addr, total_len, field_info);
770 ipw_read_indirect(priv, addr, val, total_len);
771 break;
772
773 default:
774 IPW_DEBUG_ORD("Invalid ordinal!\n");
775 return -EINVAL;
776
777 }
778
43f66a6c
JK
779 return 0;
780}
781
782static void ipw_init_ordinals(struct ipw_priv *priv)
783{
784 priv->table0_addr = IPW_ORDINALS_TABLE_LOWER;
bf79451e 785 priv->table0_len = ipw_read32(priv, priv->table0_addr);
43f66a6c
JK
786
787 IPW_DEBUG_ORD("table 0 offset at 0x%08x, len = %i\n",
788 priv->table0_addr, priv->table0_len);
789
790 priv->table1_addr = ipw_read32(priv, IPW_ORDINALS_TABLE_1);
791 priv->table1_len = ipw_read_reg32(priv, priv->table1_addr);
792
793 IPW_DEBUG_ORD("table 1 offset at 0x%08x, len = %i\n",
794 priv->table1_addr, priv->table1_len);
795
796 priv->table2_addr = ipw_read32(priv, IPW_ORDINALS_TABLE_2);
797 priv->table2_len = ipw_read_reg32(priv, priv->table2_addr);
0edd5b44 798 priv->table2_len &= 0x0000ffff; /* use first two bytes */
43f66a6c
JK
799
800 IPW_DEBUG_ORD("table 2 offset at 0x%08x, len = %i\n",
801 priv->table2_addr, priv->table2_len);
802
803}
804
a73e22b2 805static u32 ipw_register_toggle(u32 reg)
a613bffd 806{
b095c381
JK
807 reg &= ~IPW_START_STANDBY;
808 if (reg & IPW_GATE_ODMA)
809 reg &= ~IPW_GATE_ODMA;
810 if (reg & IPW_GATE_IDMA)
811 reg &= ~IPW_GATE_IDMA;
812 if (reg & IPW_GATE_ADMA)
813 reg &= ~IPW_GATE_ADMA;
a613bffd
JK
814 return reg;
815}
816
817/*
818 * LED behavior:
819 * - On radio ON, turn on any LEDs that require to be on during start
820 * - On initialization, start unassociated blink
821 * - On association, disable unassociated blink
822 * - On disassociation, start unassociated blink
823 * - On radio OFF, turn off any LEDs started during radio on
824 *
825 */
ede6111c
ZY
826#define LD_TIME_LINK_ON msecs_to_jiffies(300)
827#define LD_TIME_LINK_OFF msecs_to_jiffies(2700)
828#define LD_TIME_ACT_ON msecs_to_jiffies(250)
a613bffd 829
a73e22b2 830static void ipw_led_link_on(struct ipw_priv *priv)
a613bffd
JK
831{
832 unsigned long flags;
833 u32 led;
834
835 /* If configured to not use LEDs, or nic_type is 1,
836 * then we don't toggle a LINK led */
837 if (priv->config & CFG_NO_LED || priv->nic_type == EEPROM_NIC_TYPE_1)
838 return;
839
840 spin_lock_irqsave(&priv->lock, flags);
841
842 if (!(priv->status & STATUS_RF_KILL_MASK) &&
843 !(priv->status & STATUS_LED_LINK_ON)) {
844 IPW_DEBUG_LED("Link LED On\n");
b095c381 845 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK
846 led |= priv->led_association_on;
847
848 led = ipw_register_toggle(led);
849
850 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 851 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK
852
853 priv->status |= STATUS_LED_LINK_ON;
854
855 /* If we aren't associated, schedule turning the LED off */
856 if (!(priv->status & STATUS_ASSOCIATED))
857 queue_delayed_work(priv->workqueue,
858 &priv->led_link_off,
859 LD_TIME_LINK_ON);
860 }
861
862 spin_unlock_irqrestore(&priv->lock, flags);
863}
864
c4028958 865static void ipw_bg_led_link_on(struct work_struct *work)
c848d0af 866{
c4028958
DH
867 struct ipw_priv *priv =
868 container_of(work, struct ipw_priv, led_link_on.work);
4644151b 869 mutex_lock(&priv->mutex);
c4028958 870 ipw_led_link_on(priv);
4644151b 871 mutex_unlock(&priv->mutex);
c848d0af
JK
872}
873
a73e22b2 874static void ipw_led_link_off(struct ipw_priv *priv)
a613bffd
JK
875{
876 unsigned long flags;
877 u32 led;
878
879 /* If configured not to use LEDs, or nic type is 1,
880 * then we don't goggle the LINK led. */
881 if (priv->config & CFG_NO_LED || priv->nic_type == EEPROM_NIC_TYPE_1)
882 return;
883
884 spin_lock_irqsave(&priv->lock, flags);
885
886 if (priv->status & STATUS_LED_LINK_ON) {
b095c381 887 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK
888 led &= priv->led_association_off;
889 led = ipw_register_toggle(led);
890
891 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 892 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK
893
894 IPW_DEBUG_LED("Link LED Off\n");
895
896 priv->status &= ~STATUS_LED_LINK_ON;
897
898 /* If we aren't associated and the radio is on, schedule
899 * turning the LED on (blink while unassociated) */
900 if (!(priv->status & STATUS_RF_KILL_MASK) &&
901 !(priv->status & STATUS_ASSOCIATED))
902 queue_delayed_work(priv->workqueue, &priv->led_link_on,
903 LD_TIME_LINK_OFF);
904
905 }
906
907 spin_unlock_irqrestore(&priv->lock, flags);
908}
909
c4028958 910static void ipw_bg_led_link_off(struct work_struct *work)
c848d0af 911{
c4028958
DH
912 struct ipw_priv *priv =
913 container_of(work, struct ipw_priv, led_link_off.work);
4644151b 914 mutex_lock(&priv->mutex);
c4028958 915 ipw_led_link_off(priv);
4644151b 916 mutex_unlock(&priv->mutex);
c848d0af
JK
917}
918
858119e1 919static void __ipw_led_activity_on(struct ipw_priv *priv)
a613bffd 920{
a613bffd
JK
921 u32 led;
922
923 if (priv->config & CFG_NO_LED)
924 return;
925
b095c381 926 if (priv->status & STATUS_RF_KILL_MASK)
a613bffd 927 return;
a613bffd
JK
928
929 if (!(priv->status & STATUS_LED_ACT_ON)) {
b095c381 930 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK
931 led |= priv->led_activity_on;
932
933 led = ipw_register_toggle(led);
934
935 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 936 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK
937
938 IPW_DEBUG_LED("Activity LED On\n");
939
940 priv->status |= STATUS_LED_ACT_ON;
941
c848d0af 942 cancel_delayed_work(&priv->led_act_off);
a613bffd
JK
943 queue_delayed_work(priv->workqueue, &priv->led_act_off,
944 LD_TIME_ACT_ON);
945 } else {
946 /* Reschedule LED off for full time period */
947 cancel_delayed_work(&priv->led_act_off);
948 queue_delayed_work(priv->workqueue, &priv->led_act_off,
949 LD_TIME_ACT_ON);
950 }
b095c381 951}
a613bffd 952
a73e22b2 953#if 0
b095c381
JK
954void ipw_led_activity_on(struct ipw_priv *priv)
955{
956 unsigned long flags;
957 spin_lock_irqsave(&priv->lock, flags);
958 __ipw_led_activity_on(priv);
a613bffd
JK
959 spin_unlock_irqrestore(&priv->lock, flags);
960}
a73e22b2 961#endif /* 0 */
a613bffd 962
a73e22b2 963static void ipw_led_activity_off(struct ipw_priv *priv)
a613bffd
JK
964{
965 unsigned long flags;
966 u32 led;
967
968 if (priv->config & CFG_NO_LED)
969 return;
970
971 spin_lock_irqsave(&priv->lock, flags);
972
973 if (priv->status & STATUS_LED_ACT_ON) {
b095c381 974 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK
975 led &= priv->led_activity_off;
976
977 led = ipw_register_toggle(led);
978
979 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 980 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK
981
982 IPW_DEBUG_LED("Activity LED Off\n");
983
984 priv->status &= ~STATUS_LED_ACT_ON;
985 }
986
987 spin_unlock_irqrestore(&priv->lock, flags);
988}
989
c4028958 990static void ipw_bg_led_activity_off(struct work_struct *work)
c848d0af 991{
c4028958
DH
992 struct ipw_priv *priv =
993 container_of(work, struct ipw_priv, led_act_off.work);
4644151b 994 mutex_lock(&priv->mutex);
c4028958 995 ipw_led_activity_off(priv);
4644151b 996 mutex_unlock(&priv->mutex);
c848d0af
JK
997}
998
a73e22b2 999static void ipw_led_band_on(struct ipw_priv *priv)
a613bffd
JK
1000{
1001 unsigned long flags;
1002 u32 led;
1003
1004 /* Only nic type 1 supports mode LEDs */
c848d0af
JK
1005 if (priv->config & CFG_NO_LED ||
1006 priv->nic_type != EEPROM_NIC_TYPE_1 || !priv->assoc_network)
a613bffd
JK
1007 return;
1008
1009 spin_lock_irqsave(&priv->lock, flags);
1010
b095c381 1011 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK
1012 if (priv->assoc_network->mode == IEEE_A) {
1013 led |= priv->led_ofdm_on;
1014 led &= priv->led_association_off;
1015 IPW_DEBUG_LED("Mode LED On: 802.11a\n");
1016 } else if (priv->assoc_network->mode == IEEE_G) {
1017 led |= priv->led_ofdm_on;
1018 led |= priv->led_association_on;
1019 IPW_DEBUG_LED("Mode LED On: 802.11g\n");
1020 } else {
1021 led &= priv->led_ofdm_off;
1022 led |= priv->led_association_on;
1023 IPW_DEBUG_LED("Mode LED On: 802.11b\n");
1024 }
1025
1026 led = ipw_register_toggle(led);
1027
1028 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 1029 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK
1030
1031 spin_unlock_irqrestore(&priv->lock, flags);
1032}
1033
a73e22b2 1034static void ipw_led_band_off(struct ipw_priv *priv)
a613bffd
JK
1035{
1036 unsigned long flags;
1037 u32 led;
1038
1039 /* Only nic type 1 supports mode LEDs */
1040 if (priv->config & CFG_NO_LED || priv->nic_type != EEPROM_NIC_TYPE_1)
1041 return;
1042
1043 spin_lock_irqsave(&priv->lock, flags);
1044
b095c381 1045 led = ipw_read_reg32(priv, IPW_EVENT_REG);
a613bffd
JK
1046 led &= priv->led_ofdm_off;
1047 led &= priv->led_association_off;
1048
1049 led = ipw_register_toggle(led);
1050
1051 IPW_DEBUG_LED("Reg: 0x%08X\n", led);
b095c381 1052 ipw_write_reg32(priv, IPW_EVENT_REG, led);
a613bffd
JK
1053
1054 spin_unlock_irqrestore(&priv->lock, flags);
1055}
1056
a73e22b2 1057static void ipw_led_radio_on(struct ipw_priv *priv)
a613bffd
JK
1058{
1059 ipw_led_link_on(priv);
1060}
1061
a73e22b2 1062static void ipw_led_radio_off(struct ipw_priv *priv)
a613bffd
JK
1063{
1064 ipw_led_activity_off(priv);
1065 ipw_led_link_off(priv);
1066}
1067
a73e22b2 1068static void ipw_led_link_up(struct ipw_priv *priv)
a613bffd
JK
1069{
1070 /* Set the Link Led on for all nic types */
1071 ipw_led_link_on(priv);
1072}
1073
a73e22b2 1074static void ipw_led_link_down(struct ipw_priv *priv)
a613bffd
JK
1075{
1076 ipw_led_activity_off(priv);
1077 ipw_led_link_off(priv);
1078
1079 if (priv->status & STATUS_RF_KILL_MASK)
1080 ipw_led_radio_off(priv);
1081}
1082
a73e22b2 1083static void ipw_led_init(struct ipw_priv *priv)
a613bffd
JK
1084{
1085 priv->nic_type = priv->eeprom[EEPROM_NIC_TYPE];
1086
1087 /* Set the default PINs for the link and activity leds */
b095c381
JK
1088 priv->led_activity_on = IPW_ACTIVITY_LED;
1089 priv->led_activity_off = ~(IPW_ACTIVITY_LED);
a613bffd 1090
b095c381
JK
1091 priv->led_association_on = IPW_ASSOCIATED_LED;
1092 priv->led_association_off = ~(IPW_ASSOCIATED_LED);
a613bffd
JK
1093
1094 /* Set the default PINs for the OFDM leds */
b095c381
JK
1095 priv->led_ofdm_on = IPW_OFDM_LED;
1096 priv->led_ofdm_off = ~(IPW_OFDM_LED);
a613bffd
JK
1097
1098 switch (priv->nic_type) {
1099 case EEPROM_NIC_TYPE_1:
1100 /* In this NIC type, the LEDs are reversed.... */
b095c381
JK
1101 priv->led_activity_on = IPW_ASSOCIATED_LED;
1102 priv->led_activity_off = ~(IPW_ASSOCIATED_LED);
1103 priv->led_association_on = IPW_ACTIVITY_LED;
1104 priv->led_association_off = ~(IPW_ACTIVITY_LED);
a613bffd
JK
1105
1106 if (!(priv->config & CFG_NO_LED))
1107 ipw_led_band_on(priv);
1108
1109 /* And we don't blink link LEDs for this nic, so
1110 * just return here */
1111 return;
1112
1113 case EEPROM_NIC_TYPE_3:
1114 case EEPROM_NIC_TYPE_2:
1115 case EEPROM_NIC_TYPE_4:
1116 case EEPROM_NIC_TYPE_0:
1117 break;
1118
1119 default:
1120 IPW_DEBUG_INFO("Unknown NIC type from EEPROM: %d\n",
1121 priv->nic_type);
1122 priv->nic_type = EEPROM_NIC_TYPE_0;
1123 break;
1124 }
1125
1126 if (!(priv->config & CFG_NO_LED)) {
1127 if (priv->status & STATUS_ASSOCIATED)
1128 ipw_led_link_on(priv);
1129 else
1130 ipw_led_link_off(priv);
1131 }
1132}
1133
a73e22b2 1134static void ipw_led_shutdown(struct ipw_priv *priv)
a613bffd 1135{
a613bffd
JK
1136 ipw_led_activity_off(priv);
1137 ipw_led_link_off(priv);
1138 ipw_led_band_off(priv);
afbf30a2
JK
1139 cancel_delayed_work(&priv->led_link_on);
1140 cancel_delayed_work(&priv->led_link_off);
1141 cancel_delayed_work(&priv->led_act_off);
a613bffd
JK
1142}
1143
43f66a6c
JK
1144/*
1145 * The following adds a new attribute to the sysfs representation
1146 * of this device driver (i.e. a new file in /sys/bus/pci/drivers/ipw/)
1147 * used for controling the debug level.
bf79451e 1148 *
43f66a6c
JK
1149 * See the level definitions in ipw for details.
1150 */
1151static ssize_t show_debug_level(struct device_driver *d, char *buf)
1152{
1153 return sprintf(buf, "0x%08X\n", ipw_debug_level);
1154}
a613bffd
JK
1155
1156static ssize_t store_debug_level(struct device_driver *d, const char *buf,
1157 size_t count)
43f66a6c
JK
1158{
1159 char *p = (char *)buf;
1160 u32 val;
1161
1162 if (p[1] == 'x' || p[1] == 'X' || p[0] == 'x' || p[0] == 'X') {
1163 p++;
1164 if (p[0] == 'x' || p[0] == 'X')
1165 p++;
1166 val = simple_strtoul(p, &p, 16);
1167 } else
1168 val = simple_strtoul(p, &p, 10);
bf79451e
JG
1169 if (p == buf)
1170 printk(KERN_INFO DRV_NAME
43f66a6c
JK
1171 ": %s is not in hex or decimal form.\n", buf);
1172 else
1173 ipw_debug_level = val;
1174
1175 return strnlen(buf, count);
1176}
1177
bf79451e 1178static DRIVER_ATTR(debug_level, S_IWUSR | S_IRUGO,
43f66a6c
JK
1179 show_debug_level, store_debug_level);
1180
b39860c6 1181static inline u32 ipw_get_event_log_len(struct ipw_priv *priv)
43f66a6c 1182{
c8fe6679 1183 /* length = 1st dword in log */
b39860c6 1184 return ipw_read_reg32(priv, ipw_read32(priv, IPW_EVENT_LOG));
43f66a6c 1185}
0edd5b44 1186
b39860c6
JK
1187static void ipw_capture_event_log(struct ipw_priv *priv,
1188 u32 log_len, struct ipw_event *log)
43f66a6c 1189{
b39860c6 1190 u32 base;
0edd5b44 1191
b39860c6
JK
1192 if (log_len) {
1193 base = ipw_read32(priv, IPW_EVENT_LOG);
1194 ipw_read_indirect(priv, base + sizeof(base) + sizeof(u32),
1195 (u8 *) log, sizeof(*log) * log_len);
1196 }
1197}
43f66a6c 1198
b39860c6 1199static struct ipw_fw_error *ipw_alloc_error_log(struct ipw_priv *priv)
43f66a6c 1200{
b39860c6
JK
1201 struct ipw_fw_error *error;
1202 u32 log_len = ipw_get_event_log_len(priv);
1203 u32 base = ipw_read32(priv, IPW_ERROR_LOG);
1204 u32 elem_len = ipw_read_reg32(priv, base);
43f66a6c 1205
b39860c6
JK
1206 error = kmalloc(sizeof(*error) +
1207 sizeof(*error->elem) * elem_len +
1208 sizeof(*error->log) * log_len, GFP_ATOMIC);
1209 if (!error) {
1210 IPW_ERROR("Memory allocation for firmware error log "
1211 "failed.\n");
1212 return NULL;
43f66a6c 1213 }
f6c5cb7c 1214 error->jiffies = jiffies;
b39860c6
JK
1215 error->status = priv->status;
1216 error->config = priv->config;
1217 error->elem_len = elem_len;
1218 error->log_len = log_len;
1219 error->elem = (struct ipw_error_elem *)error->payload;
3b26b110 1220 error->log = (struct ipw_event *)(error->elem + elem_len);
b39860c6
JK
1221
1222 ipw_capture_event_log(priv, log_len, error->log);
bf79451e 1223
b39860c6
JK
1224 if (elem_len)
1225 ipw_read_indirect(priv, base + sizeof(base), (u8 *) error->elem,
1226 sizeof(*error->elem) * elem_len);
1227
1228 return error;
43f66a6c 1229}
0edd5b44 1230
b39860c6
JK
1231static ssize_t show_event_log(struct device *d,
1232 struct device_attribute *attr, char *buf)
43f66a6c 1233{
b39860c6
JK
1234 struct ipw_priv *priv = dev_get_drvdata(d);
1235 u32 log_len = ipw_get_event_log_len(priv);
412e9e78
RC
1236 u32 log_size;
1237 struct ipw_event *log;
b39860c6 1238 u32 len = 0, i;
43f66a6c 1239
412e9e78
RC
1240 /* not using min() because of its strict type checking */
1241 log_size = PAGE_SIZE / sizeof(*log) > log_len ?
1242 sizeof(*log) * log_len : PAGE_SIZE;
1243 log = kzalloc(log_size, GFP_KERNEL);
1244 if (!log) {
1245 IPW_ERROR("Unable to allocate memory for log\n");
1246 return 0;
1247 }
1248 log_len = log_size / sizeof(*log);
b39860c6 1249 ipw_capture_event_log(priv, log_len, log);
43f66a6c 1250
b39860c6
JK
1251 len += snprintf(buf + len, PAGE_SIZE - len, "%08X", log_len);
1252 for (i = 0; i < log_len; i++)
1253 len += snprintf(buf + len, PAGE_SIZE - len,
1254 "\n%08X%08X%08X",
1255 log[i].time, log[i].event, log[i].data);
1256 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
412e9e78 1257 kfree(log);
b39860c6 1258 return len;
43f66a6c 1259}
0edd5b44 1260
b39860c6 1261static DEVICE_ATTR(event_log, S_IRUGO, show_event_log, NULL);
43f66a6c 1262
b39860c6
JK
1263static ssize_t show_error(struct device *d,
1264 struct device_attribute *attr, char *buf)
43f66a6c 1265{
b39860c6
JK
1266 struct ipw_priv *priv = dev_get_drvdata(d);
1267 u32 len = 0, i;
1268 if (!priv->error)
1269 return 0;
1270 len += snprintf(buf + len, PAGE_SIZE - len,
f6c5cb7c
JK
1271 "%08lX%08X%08X%08X",
1272 priv->error->jiffies,
b39860c6
JK
1273 priv->error->status,
1274 priv->error->config, priv->error->elem_len);
1275 for (i = 0; i < priv->error->elem_len; i++)
1276 len += snprintf(buf + len, PAGE_SIZE - len,
1277 "\n%08X%08X%08X%08X%08X%08X%08X",
1278 priv->error->elem[i].time,
1279 priv->error->elem[i].desc,
1280 priv->error->elem[i].blink1,
1281 priv->error->elem[i].blink2,
1282 priv->error->elem[i].link1,
1283 priv->error->elem[i].link2,
1284 priv->error->elem[i].data);
1285
1286 len += snprintf(buf + len, PAGE_SIZE - len,
1287 "\n%08X", priv->error->log_len);
1288 for (i = 0; i < priv->error->log_len; i++)
1289 len += snprintf(buf + len, PAGE_SIZE - len,
1290 "\n%08X%08X%08X",
1291 priv->error->log[i].time,
1292 priv->error->log[i].event,
1293 priv->error->log[i].data);
1294 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1295 return len;
1296}
1297
1298static ssize_t clear_error(struct device *d,
1299 struct device_attribute *attr,
1300 const char *buf, size_t count)
1301{
1302 struct ipw_priv *priv = dev_get_drvdata(d);
8f760780
JJ
1303
1304 kfree(priv->error);
1305 priv->error = NULL;
b39860c6
JK
1306 return count;
1307}
43f66a6c 1308
b39860c6 1309static DEVICE_ATTR(error, S_IRUGO | S_IWUSR, show_error, clear_error);
43f66a6c 1310
f6c5cb7c
JK
1311static ssize_t show_cmd_log(struct device *d,
1312 struct device_attribute *attr, char *buf)
1313{
1314 struct ipw_priv *priv = dev_get_drvdata(d);
1315 u32 len = 0, i;
1316 if (!priv->cmdlog)
1317 return 0;
1318 for (i = (priv->cmdlog_pos + 1) % priv->cmdlog_len;
1319 (i != priv->cmdlog_pos) && (PAGE_SIZE - len);
1320 i = (i + 1) % priv->cmdlog_len) {
1321 len +=
1322 snprintf(buf + len, PAGE_SIZE - len,
1323 "\n%08lX%08X%08X%08X\n", priv->cmdlog[i].jiffies,
1324 priv->cmdlog[i].retcode, priv->cmdlog[i].cmd.cmd,
1325 priv->cmdlog[i].cmd.len);
1326 len +=
1327 snprintk_buf(buf + len, PAGE_SIZE - len,
1328 (u8 *) priv->cmdlog[i].cmd.param,
1329 priv->cmdlog[i].cmd.len);
1330 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1331 }
1332 len += snprintf(buf + len, PAGE_SIZE - len, "\n");
1333 return len;
43f66a6c 1334}
0edd5b44 1335
f6c5cb7c 1336static DEVICE_ATTR(cmd_log, S_IRUGO, show_cmd_log, NULL);
43f66a6c 1337
d685b8c2
ZY
1338#ifdef CONFIG_IPW2200_PROMISCUOUS
1339static void ipw_prom_free(struct ipw_priv *priv);
1340static int ipw_prom_alloc(struct ipw_priv *priv);
1341static ssize_t store_rtap_iface(struct device *d,
1342 struct device_attribute *attr,
1343 const char *buf, size_t count)
1344{
1345 struct ipw_priv *priv = dev_get_drvdata(d);
1346 int rc = 0;
1347
1348 if (count < 1)
1349 return -EINVAL;
1350
1351 switch (buf[0]) {
1352 case '0':
1353 if (!rtap_iface)
1354 return count;
1355
1356 if (netif_running(priv->prom_net_dev)) {
1357 IPW_WARNING("Interface is up. Cannot unregister.\n");
1358 return count;
1359 }
1360
1361 ipw_prom_free(priv);
1362 rtap_iface = 0;
1363 break;
1364
1365 case '1':
1366 if (rtap_iface)
1367 return count;
1368
1369 rc = ipw_prom_alloc(priv);
1370 if (!rc)
1371 rtap_iface = 1;
1372 break;
1373
1374 default:
1375 return -EINVAL;
1376 }
1377
1378 if (rc) {
1379 IPW_ERROR("Failed to register promiscuous network "
1380 "device (error %d).\n", rc);
1381 }
1382
1383 return count;
1384}
1385
1386static ssize_t show_rtap_iface(struct device *d,
1387 struct device_attribute *attr,
1388 char *buf)
1389{
1390 struct ipw_priv *priv = dev_get_drvdata(d);
1391 if (rtap_iface)
1392 return sprintf(buf, "%s", priv->prom_net_dev->name);
1393 else {
1394 buf[0] = '-';
1395 buf[1] = '1';
1396 buf[2] = '\0';
1397 return 3;
1398 }
1399}
1400
1401static DEVICE_ATTR(rtap_iface, S_IWUSR | S_IRUSR, show_rtap_iface,
1402 store_rtap_iface);
1403
1404static ssize_t store_rtap_filter(struct device *d,
1405 struct device_attribute *attr,
1406 const char *buf, size_t count)
1407{
1408 struct ipw_priv *priv = dev_get_drvdata(d);
1409
1410 if (!priv->prom_priv) {
1411 IPW_ERROR("Attempting to set filter without "
1412 "rtap_iface enabled.\n");
1413 return -EPERM;
1414 }
1415
1416 priv->prom_priv->filter = simple_strtol(buf, NULL, 0);
1417
1418 IPW_DEBUG_INFO("Setting rtap filter to " BIT_FMT16 "\n",
1419 BIT_ARG16(priv->prom_priv->filter));
1420
1421 return count;
1422}
1423
1424static ssize_t show_rtap_filter(struct device *d,
1425 struct device_attribute *attr,
1426 char *buf)
1427{
1428 struct ipw_priv *priv = dev_get_drvdata(d);
1429 return sprintf(buf, "0x%04X",
1430 priv->prom_priv ? priv->prom_priv->filter : 0);
1431}
1432
1433static DEVICE_ATTR(rtap_filter, S_IWUSR | S_IRUSR, show_rtap_filter,
1434 store_rtap_filter);
1435#endif
1436
a613bffd
JK
1437static ssize_t show_scan_age(struct device *d, struct device_attribute *attr,
1438 char *buf)
43f66a6c 1439{
a613bffd
JK
1440 struct ipw_priv *priv = dev_get_drvdata(d);
1441 return sprintf(buf, "%d\n", priv->ieee->scan_age);
1442}
1443
1444static ssize_t store_scan_age(struct device *d, struct device_attribute *attr,
1445 const char *buf, size_t count)
1446{
1447 struct ipw_priv *priv = dev_get_drvdata(d);
1448 struct net_device *dev = priv->net_dev;
1449 char buffer[] = "00000000";
1450 unsigned long len =
1451 (sizeof(buffer) - 1) > count ? count : sizeof(buffer) - 1;
1452 unsigned long val;
1453 char *p = buffer;
1454
1455 IPW_DEBUG_INFO("enter\n");
1456
1457 strncpy(buffer, buf, len);
1458 buffer[len] = 0;
1459
1460 if (p[1] == 'x' || p[1] == 'X' || p[0] == 'x' || p[0] == 'X') {
1461 p++;
1462 if (p[0] == 'x' || p[0] == 'X')
1463 p++;
1464 val = simple_strtoul(p, &p, 16);
1465 } else
1466 val = simple_strtoul(p, &p, 10);
1467 if (p == buffer) {
1468 IPW_DEBUG_INFO("%s: user supplied invalid value.\n", dev->name);
1469 } else {
1470 priv->ieee->scan_age = val;
1471 IPW_DEBUG_INFO("set scan_age = %u\n", priv->ieee->scan_age);
1472 }
1473
1474 IPW_DEBUG_INFO("exit\n");
1475 return len;
1476}
1477
1478static DEVICE_ATTR(scan_age, S_IWUSR | S_IRUGO, show_scan_age, store_scan_age);
1479
1480static ssize_t show_led(struct device *d, struct device_attribute *attr,
1481 char *buf)
1482{
1483 struct ipw_priv *priv = dev_get_drvdata(d);
1484 return sprintf(buf, "%d\n", (priv->config & CFG_NO_LED) ? 0 : 1);
1485}
1486
1487static ssize_t store_led(struct device *d, struct device_attribute *attr,
1488 const char *buf, size_t count)
1489{
1490 struct ipw_priv *priv = dev_get_drvdata(d);
1491
1492 IPW_DEBUG_INFO("enter\n");
1493
1494 if (count == 0)
1495 return 0;
1496
1497 if (*buf == 0) {
1498 IPW_DEBUG_LED("Disabling LED control.\n");
1499 priv->config |= CFG_NO_LED;
1500 ipw_led_shutdown(priv);
1501 } else {
1502 IPW_DEBUG_LED("Enabling LED control.\n");
1503 priv->config &= ~CFG_NO_LED;
1504 ipw_led_init(priv);
1505 }
1506
1507 IPW_DEBUG_INFO("exit\n");
1508 return count;
1509}
1510
1511static DEVICE_ATTR(led, S_IWUSR | S_IRUGO, show_led, store_led);
1512
ad3fee56 1513static ssize_t show_status(struct device *d,
0edd5b44 1514 struct device_attribute *attr, char *buf)
43f66a6c 1515{
ad3fee56 1516 struct ipw_priv *p = d->driver_data;
43f66a6c
JK
1517 return sprintf(buf, "0x%08x\n", (int)p->status);
1518}
0edd5b44 1519
43f66a6c
JK
1520static DEVICE_ATTR(status, S_IRUGO, show_status, NULL);
1521
ad3fee56
AM
1522static ssize_t show_cfg(struct device *d, struct device_attribute *attr,
1523 char *buf)
43f66a6c 1524{
ad3fee56 1525 struct ipw_priv *p = d->driver_data;
43f66a6c
JK
1526 return sprintf(buf, "0x%08x\n", (int)p->config);
1527}
0edd5b44 1528
43f66a6c
JK
1529static DEVICE_ATTR(cfg, S_IRUGO, show_cfg, NULL);
1530
ad3fee56 1531static ssize_t show_nic_type(struct device *d,
0edd5b44 1532 struct device_attribute *attr, char *buf)
43f66a6c 1533{
a613bffd
JK
1534 struct ipw_priv *priv = d->driver_data;
1535 return sprintf(buf, "TYPE: %d\n", priv->nic_type);
43f66a6c 1536}
0edd5b44 1537
43f66a6c
JK
1538static DEVICE_ATTR(nic_type, S_IRUGO, show_nic_type, NULL);
1539
ad3fee56 1540static ssize_t show_ucode_version(struct device *d,
0edd5b44 1541 struct device_attribute *attr, char *buf)
43f66a6c
JK
1542{
1543 u32 len = sizeof(u32), tmp = 0;
ad3fee56 1544 struct ipw_priv *p = d->driver_data;
43f66a6c 1545
0edd5b44 1546 if (ipw_get_ordinal(p, IPW_ORD_STAT_UCODE_VERSION, &tmp, &len))
43f66a6c
JK
1547 return 0;
1548
1549 return sprintf(buf, "0x%08x\n", tmp);
1550}
0edd5b44
JG
1551
1552static DEVICE_ATTR(ucode_version, S_IWUSR | S_IRUGO, show_ucode_version, NULL);
43f66a6c 1553
ad3fee56
AM
1554static ssize_t show_rtc(struct device *d, struct device_attribute *attr,
1555 char *buf)
43f66a6c
JK
1556{
1557 u32 len = sizeof(u32), tmp = 0;
ad3fee56 1558 struct ipw_priv *p = d->driver_data;
43f66a6c 1559
0edd5b44 1560 if (ipw_get_ordinal(p, IPW_ORD_STAT_RTC, &tmp, &len))
43f66a6c
JK
1561 return 0;
1562
1563 return sprintf(buf, "0x%08x\n", tmp);
1564}
0edd5b44
JG
1565
1566static DEVICE_ATTR(rtc, S_IWUSR | S_IRUGO, show_rtc, NULL);
43f66a6c
JK
1567
1568/*
1569 * Add a device attribute to view/control the delay between eeprom
1570 * operations.
1571 */
ad3fee56 1572static ssize_t show_eeprom_delay(struct device *d,
0edd5b44 1573 struct device_attribute *attr, char *buf)
43f66a6c 1574{
0edd5b44 1575 int n = ((struct ipw_priv *)d->driver_data)->eeprom_delay;
43f66a6c
JK
1576 return sprintf(buf, "%i\n", n);
1577}
ad3fee56 1578static ssize_t store_eeprom_delay(struct device *d,
0edd5b44
JG
1579 struct device_attribute *attr,
1580 const char *buf, size_t count)
43f66a6c 1581{
ad3fee56 1582 struct ipw_priv *p = d->driver_data;
43f66a6c
JK
1583 sscanf(buf, "%i", &p->eeprom_delay);
1584 return strnlen(buf, count);
1585}
0edd5b44
JG
1586
1587static DEVICE_ATTR(eeprom_delay, S_IWUSR | S_IRUGO,
1588 show_eeprom_delay, store_eeprom_delay);
43f66a6c 1589
ad3fee56 1590static ssize_t show_command_event_reg(struct device *d,
0edd5b44 1591 struct device_attribute *attr, char *buf)
43f66a6c
JK
1592{
1593 u32 reg = 0;
ad3fee56 1594 struct ipw_priv *p = d->driver_data;
43f66a6c 1595
b095c381 1596 reg = ipw_read_reg32(p, IPW_INTERNAL_CMD_EVENT);
43f66a6c
JK
1597 return sprintf(buf, "0x%08x\n", reg);
1598}
ad3fee56 1599static ssize_t store_command_event_reg(struct device *d,
0edd5b44
JG
1600 struct device_attribute *attr,
1601 const char *buf, size_t count)
43f66a6c
JK
1602{
1603 u32 reg;
ad3fee56 1604 struct ipw_priv *p = d->driver_data;
43f66a6c
JK
1605
1606 sscanf(buf, "%x", &reg);
b095c381 1607 ipw_write_reg32(p, IPW_INTERNAL_CMD_EVENT, reg);
43f66a6c
JK
1608 return strnlen(buf, count);
1609}
0edd5b44
JG
1610
1611static DEVICE_ATTR(command_event_reg, S_IWUSR | S_IRUGO,
1612 show_command_event_reg, store_command_event_reg);
43f66a6c 1613
ad3fee56 1614static ssize_t show_mem_gpio_reg(struct device *d,
0edd5b44 1615 struct device_attribute *attr, char *buf)
43f66a6c
JK
1616{
1617 u32 reg = 0;
ad3fee56 1618 struct ipw_priv *p = d->driver_data;
43f66a6c
JK
1619
1620 reg = ipw_read_reg32(p, 0x301100);
1621 return sprintf(buf, "0x%08x\n", reg);
1622}
ad3fee56 1623static ssize_t store_mem_gpio_reg(struct device *d,
0edd5b44
JG
1624 struct device_attribute *attr,
1625 const char *buf, size_t count)
43f66a6c
JK
1626{
1627 u32 reg;
ad3fee56 1628 struct ipw_priv *p = d->driver_data;
43f66a6c
JK
1629
1630 sscanf(buf, "%x", &reg);
1631 ipw_write_reg32(p, 0x301100, reg);
1632 return strnlen(buf, count);
1633}
0edd5b44
JG
1634
1635static DEVICE_ATTR(mem_gpio_reg, S_IWUSR | S_IRUGO,
1636 show_mem_gpio_reg, store_mem_gpio_reg);
43f66a6c 1637
ad3fee56 1638static ssize_t show_indirect_dword(struct device *d,
0edd5b44 1639 struct device_attribute *attr, char *buf)
43f66a6c
JK
1640{
1641 u32 reg = 0;
ad3fee56 1642 struct ipw_priv *priv = d->driver_data;
afbf30a2 1643
bf79451e 1644 if (priv->status & STATUS_INDIRECT_DWORD)
43f66a6c 1645 reg = ipw_read_reg32(priv, priv->indirect_dword);
bf79451e 1646 else
43f66a6c 1647 reg = 0;
bf79451e 1648
43f66a6c
JK
1649 return sprintf(buf, "0x%08x\n", reg);
1650}
ad3fee56 1651static ssize_t store_indirect_dword(struct device *d,
0edd5b44
JG
1652 struct device_attribute *attr,
1653 const char *buf, size_t count)
43f66a6c 1654{
ad3fee56 1655 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK
1656
1657 sscanf(buf, "%x", &priv->indirect_dword);
1658 priv->status |= STATUS_INDIRECT_DWORD;
1659 return strnlen(buf, count);
1660}
0edd5b44
JG
1661
1662static DEVICE_ATTR(indirect_dword, S_IWUSR | S_IRUGO,
1663 show_indirect_dword, store_indirect_dword);
43f66a6c 1664
ad3fee56 1665static ssize_t show_indirect_byte(struct device *d,
0edd5b44 1666 struct device_attribute *attr, char *buf)
43f66a6c
JK
1667{
1668 u8 reg = 0;
ad3fee56 1669 struct ipw_priv *priv = d->driver_data;
afbf30a2 1670
bf79451e 1671 if (priv->status & STATUS_INDIRECT_BYTE)
43f66a6c 1672 reg = ipw_read_reg8(priv, priv->indirect_byte);
bf79451e 1673 else
43f66a6c
JK
1674 reg = 0;
1675
1676 return sprintf(buf, "0x%02x\n", reg);
1677}
ad3fee56 1678static ssize_t store_indirect_byte(struct device *d,
0edd5b44
JG
1679 struct device_attribute *attr,
1680 const char *buf, size_t count)
43f66a6c 1681{
ad3fee56 1682 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK
1683
1684 sscanf(buf, "%x", &priv->indirect_byte);
1685 priv->status |= STATUS_INDIRECT_BYTE;
1686 return strnlen(buf, count);
1687}
0edd5b44
JG
1688
1689static DEVICE_ATTR(indirect_byte, S_IWUSR | S_IRUGO,
43f66a6c
JK
1690 show_indirect_byte, store_indirect_byte);
1691
ad3fee56 1692static ssize_t show_direct_dword(struct device *d,
0edd5b44 1693 struct device_attribute *attr, char *buf)
43f66a6c
JK
1694{
1695 u32 reg = 0;
ad3fee56 1696 struct ipw_priv *priv = d->driver_data;
43f66a6c 1697
bf79451e 1698 if (priv->status & STATUS_DIRECT_DWORD)
43f66a6c 1699 reg = ipw_read32(priv, priv->direct_dword);
bf79451e 1700 else
43f66a6c
JK
1701 reg = 0;
1702
1703 return sprintf(buf, "0x%08x\n", reg);
1704}
ad3fee56 1705static ssize_t store_direct_dword(struct device *d,
0edd5b44
JG
1706 struct device_attribute *attr,
1707 const char *buf, size_t count)
43f66a6c 1708{
ad3fee56 1709 struct ipw_priv *priv = d->driver_data;
43f66a6c
JK
1710
1711 sscanf(buf, "%x", &priv->direct_dword);
1712 priv->status |= STATUS_DIRECT_DWORD;
1713 return strnlen(buf, count);
1714}
43f66a6c 1715
0edd5b44
JG
1716static DEVICE_ATTR(direct_dword, S_IWUSR | S_IRUGO,
1717 show_direct_dword, store_direct_dword);
43f66a6c 1718
858119e1 1719static int rf_kill_active(struct ipw_priv *priv)
43f66a6c
JK
1720{
1721 if (0 == (ipw_read32(priv, 0x30) & 0x10000))
1722 priv->status |= STATUS_RF_KILL_HW;
1723 else
1724 priv->status &= ~STATUS_RF_KILL_HW;
1725
1726 return (priv->status & STATUS_RF_KILL_HW) ? 1 : 0;
1727}
1728
ad3fee56 1729static ssize_t show_rf_kill(struct device *d, struct device_attribute *attr,
0edd5b44 1730 char *buf)
43f66a6c
JK
1731{
1732 /* 0 - RF kill not enabled
bf79451e 1733 1 - SW based RF kill active (sysfs)
43f66a6c
JK
1734 2 - HW based RF kill active
1735 3 - Both HW and SW baed RF kill active */
ad3fee56 1736 struct ipw_priv *priv = d->driver_data;
43f66a6c 1737 int val = ((priv->status & STATUS_RF_KILL_SW) ? 0x1 : 0x0) |
0edd5b44 1738 (rf_kill_active(priv) ? 0x2 : 0x0);
43f66a6c
JK
1739 return sprintf(buf, "%i\n", val);
1740}
1741
1742static int ipw_radio_kill_sw(struct ipw_priv *priv, int disable_radio)
1743{
bf79451e 1744 if ((disable_radio ? 1 : 0) ==
ea2b26e0 1745 ((priv->status & STATUS_RF_KILL_SW) ? 1 : 0))
0edd5b44 1746 return 0;
43f66a6c
JK
1747
1748 IPW_DEBUG_RF_KILL("Manual SW RF Kill set to: RADIO %s\n",
1749 disable_radio ? "OFF" : "ON");
1750
1751 if (disable_radio) {
1752 priv->status |= STATUS_RF_KILL_SW;
1753
0b531676 1754 if (priv->workqueue) {
43f66a6c 1755 cancel_delayed_work(&priv->request_scan);
ea177305
DW
1756 cancel_delayed_work(&priv->request_direct_scan);
1757 cancel_delayed_work(&priv->request_passive_scan);
0b531676
DW
1758 cancel_delayed_work(&priv->scan_event);
1759 }
43f66a6c
JK
1760 queue_work(priv->workqueue, &priv->down);
1761 } else {
1762 priv->status &= ~STATUS_RF_KILL_SW;
1763 if (rf_kill_active(priv)) {
1764 IPW_DEBUG_RF_KILL("Can not turn radio back on - "
1765 "disabled by HW switch\n");
1766 /* Make sure the RF_KILL check timer is running */
1767 cancel_delayed_work(&priv->rf_kill);
bf79451e 1768 queue_delayed_work(priv->workqueue, &priv->rf_kill,
be84e3d6 1769 round_jiffies_relative(2 * HZ));
bf79451e 1770 } else
43f66a6c
JK
1771 queue_work(priv->workqueue, &priv->up);
1772 }
1773
1774 return 1;
1775}
1776
0edd5b44
JG
1777static ssize_t store_rf_kill(struct device *d, struct device_attribute *attr,
1778 const char *buf, size_t count)
43f66a6c 1779{
ad3fee56 1780 struct ipw_priv *priv = d->driver_data;
bf79451e 1781
43f66a6c
JK
1782 ipw_radio_kill_sw(priv, buf[0] == '1');
1783
1784 return count;
1785}
0edd5b44
JG
1786
1787static DEVICE_ATTR(rf_kill, S_IWUSR | S_IRUGO, show_rf_kill, store_rf_kill);
43f66a6c 1788
b095c381
JK
1789static ssize_t show_speed_scan(struct device *d, struct device_attribute *attr,
1790 char *buf)
1791{
1792 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1793 int pos = 0, len = 0;
1794 if (priv->config & CFG_SPEED_SCAN) {
1795 while (priv->speed_scan[pos] != 0)
1796 len += sprintf(&buf[len], "%d ",
1797 priv->speed_scan[pos++]);
1798 return len + sprintf(&buf[len], "\n");
1799 }
1800
1801 return sprintf(buf, "0\n");
1802}
1803
1804static ssize_t store_speed_scan(struct device *d, struct device_attribute *attr,
1805 const char *buf, size_t count)
1806{
1807 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1808 int channel, pos = 0;
1809 const char *p = buf;
1810
1811 /* list of space separated channels to scan, optionally ending with 0 */
1812 while ((channel = simple_strtol(p, NULL, 0))) {
1813 if (pos == MAX_SPEED_SCAN - 1) {
1814 priv->speed_scan[pos] = 0;
1815 break;
1816 }
1817
1867b117 1818 if (ieee80211_is_valid_channel(priv->ieee, channel))
b095c381
JK
1819 priv->speed_scan[pos++] = channel;
1820 else
1821 IPW_WARNING("Skipping invalid channel request: %d\n",
1822 channel);
1823 p = strchr(p, ' ');
1824 if (!p)
1825 break;
1826 while (*p == ' ' || *p == '\t')
1827 p++;
1828 }
1829
1830 if (pos == 0)
1831 priv->config &= ~CFG_SPEED_SCAN;
1832 else {
1833 priv->speed_scan_pos = 0;
1834 priv->config |= CFG_SPEED_SCAN;
1835 }
1836
1837 return count;
1838}
1839
1840static DEVICE_ATTR(speed_scan, S_IWUSR | S_IRUGO, show_speed_scan,
1841 store_speed_scan);
1842
1843static ssize_t show_net_stats(struct device *d, struct device_attribute *attr,
1844 char *buf)
1845{
1846 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1847 return sprintf(buf, "%c\n", (priv->config & CFG_NET_STATS) ? '1' : '0');
1848}
1849
1850static ssize_t store_net_stats(struct device *d, struct device_attribute *attr,
1851 const char *buf, size_t count)
1852{
1853 struct ipw_priv *priv = (struct ipw_priv *)d->driver_data;
1854 if (buf[0] == '1')
1855 priv->config |= CFG_NET_STATS;
1856 else
1857 priv->config &= ~CFG_NET_STATS;
1858
1859 return count;
1860}
1861
afbf30a2
JK
1862static DEVICE_ATTR(net_stats, S_IWUSR | S_IRUGO,
1863 show_net_stats, store_net_stats);
b095c381 1864
375dd244
ZY
1865static ssize_t show_channels(struct device *d,
1866 struct device_attribute *attr,
1867 char *buf)
1868{
1869 struct ipw_priv *priv = dev_get_drvdata(d);
742e9910 1870 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
375dd244
ZY
1871 int len = 0, i;
1872
1873 len = sprintf(&buf[len],
1874 "Displaying %d channels in 2.4Ghz band "
1875 "(802.11bg):\n", geo->bg_channels);
1876
1877 for (i = 0; i < geo->bg_channels; i++) {
1878 len += sprintf(&buf[len], "%d: BSS%s%s, %s, Band %s.\n",
1879 geo->bg[i].channel,
1880 geo->bg[i].flags & IEEE80211_CH_RADAR_DETECT ?
1881 " (radar spectrum)" : "",
1882 ((geo->bg[i].flags & IEEE80211_CH_NO_IBSS) ||
1883 (geo->bg[i].flags & IEEE80211_CH_RADAR_DETECT))
1884 ? "" : ", IBSS",
1885 geo->bg[i].flags & IEEE80211_CH_PASSIVE_ONLY ?
1886 "passive only" : "active/passive",
1887 geo->bg[i].flags & IEEE80211_CH_B_ONLY ?
1888 "B" : "B/G");
1889 }
1890
1891 len += sprintf(&buf[len],
1892 "Displaying %d channels in 5.2Ghz band "
1893 "(802.11a):\n", geo->a_channels);
1894 for (i = 0; i < geo->a_channels; i++) {
1895 len += sprintf(&buf[len], "%d: BSS%s%s, %s.\n",
1896 geo->a[i].channel,
1897 geo->a[i].flags & IEEE80211_CH_RADAR_DETECT ?
1898 " (radar spectrum)" : "",
1899 ((geo->a[i].flags & IEEE80211_CH_NO_IBSS) ||
1900 (geo->a[i].flags & IEEE80211_CH_RADAR_DETECT))
1901 ? "" : ", IBSS",
1902 geo->a[i].flags & IEEE80211_CH_PASSIVE_ONLY ?
1903 "passive only" : "active/passive");
1904 }
1905
1906 return len;
1907}
1908
1909static DEVICE_ATTR(channels, S_IRUSR, show_channels, NULL);
1910
ea2b26e0
JK
1911static void notify_wx_assoc_event(struct ipw_priv *priv)
1912{
1913 union iwreq_data wrqu;
1914 wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1915 if (priv->status & STATUS_ASSOCIATED)
1916 memcpy(wrqu.ap_addr.sa_data, priv->bssid, ETH_ALEN);
1917 else
1918 memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
1919 wireless_send_event(priv->net_dev, SIOCGIWAP, &wrqu, NULL);
1920}
1921
43f66a6c
JK
1922static void ipw_irq_tasklet(struct ipw_priv *priv)
1923{
1924 u32 inta, inta_mask, handled = 0;
1925 unsigned long flags;
1926 int rc = 0;
1927
89c318ed 1928 spin_lock_irqsave(&priv->irq_lock, flags);
43f66a6c 1929
b095c381
JK
1930 inta = ipw_read32(priv, IPW_INTA_RW);
1931 inta_mask = ipw_read32(priv, IPW_INTA_MASK_R);
1932 inta &= (IPW_INTA_MASK_ALL & inta_mask);
43f66a6c
JK
1933
1934 /* Add any cached INTA values that need to be handled */
1935 inta |= priv->isr_inta;
1936
89c318ed
ZY
1937 spin_unlock_irqrestore(&priv->irq_lock, flags);
1938
1939 spin_lock_irqsave(&priv->lock, flags);
1940
43f66a6c 1941 /* handle all the justifications for the interrupt */
b095c381 1942 if (inta & IPW_INTA_BIT_RX_TRANSFER) {
43f66a6c 1943 ipw_rx(priv);
b095c381 1944 handled |= IPW_INTA_BIT_RX_TRANSFER;
43f66a6c
JK
1945 }
1946
b095c381 1947 if (inta & IPW_INTA_BIT_TX_CMD_QUEUE) {
43f66a6c 1948 IPW_DEBUG_HC("Command completed.\n");
0edd5b44 1949 rc = ipw_queue_tx_reclaim(priv, &priv->txq_cmd, -1);
43f66a6c
JK
1950 priv->status &= ~STATUS_HCMD_ACTIVE;
1951 wake_up_interruptible(&priv->wait_command_queue);
b095c381 1952 handled |= IPW_INTA_BIT_TX_CMD_QUEUE;
43f66a6c
JK
1953 }
1954
b095c381 1955 if (inta & IPW_INTA_BIT_TX_QUEUE_1) {
43f66a6c 1956 IPW_DEBUG_TX("TX_QUEUE_1\n");
0edd5b44 1957 rc = ipw_queue_tx_reclaim(priv, &priv->txq[0], 0);
b095c381 1958 handled |= IPW_INTA_BIT_TX_QUEUE_1;
43f66a6c
JK
1959 }
1960
b095c381 1961 if (inta & IPW_INTA_BIT_TX_QUEUE_2) {
43f66a6c 1962 IPW_DEBUG_TX("TX_QUEUE_2\n");
0edd5b44 1963 rc = ipw_queue_tx_reclaim(priv, &priv->txq[1], 1);
b095c381 1964 handled |= IPW_INTA_BIT_TX_QUEUE_2;
43f66a6c
JK
1965 }
1966
b095c381 1967 if (inta & IPW_INTA_BIT_TX_QUEUE_3) {
43f66a6c 1968 IPW_DEBUG_TX("TX_QUEUE_3\n");
0edd5b44 1969 rc = ipw_queue_tx_reclaim(priv, &priv->txq[2], 2);
b095c381 1970 handled |= IPW_INTA_BIT_TX_QUEUE_3;
43f66a6c
JK
1971 }
1972
b095c381 1973 if (inta & IPW_INTA_BIT_TX_QUEUE_4) {
43f66a6c 1974 IPW_DEBUG_TX("TX_QUEUE_4\n");
0edd5b44 1975 rc = ipw_queue_tx_reclaim(priv, &priv->txq[3], 3);
b095c381 1976 handled |= IPW_INTA_BIT_TX_QUEUE_4;
43f66a6c
JK
1977 }
1978
b095c381 1979 if (inta & IPW_INTA_BIT_STATUS_CHANGE) {
43f66a6c 1980 IPW_WARNING("STATUS_CHANGE\n");
b095c381 1981 handled |= IPW_INTA_BIT_STATUS_CHANGE;
43f66a6c
JK
1982 }
1983
b095c381 1984 if (inta & IPW_INTA_BIT_BEACON_PERIOD_EXPIRED) {
43f66a6c 1985 IPW_WARNING("TX_PERIOD_EXPIRED\n");
b095c381 1986 handled |= IPW_INTA_BIT_BEACON_PERIOD_EXPIRED;
43f66a6c
JK
1987 }
1988
b095c381 1989 if (inta & IPW_INTA_BIT_SLAVE_MODE_HOST_CMD_DONE) {
43f66a6c 1990 IPW_WARNING("HOST_CMD_DONE\n");
b095c381 1991 handled |= IPW_INTA_BIT_SLAVE_MODE_HOST_CMD_DONE;
43f66a6c
JK
1992 }
1993
b095c381 1994 if (inta & IPW_INTA_BIT_FW_INITIALIZATION_DONE) {
43f66a6c 1995 IPW_WARNING("FW_INITIALIZATION_DONE\n");
b095c381 1996 handled |= IPW_INTA_BIT_FW_INITIALIZATION_DONE;
43f66a6c
JK
1997 }
1998
b095c381 1999 if (inta & IPW_INTA_BIT_FW_CARD_DISABLE_PHY_OFF_DONE) {
43f66a6c 2000 IPW_WARNING("PHY_OFF_DONE\n");
b095c381 2001 handled |= IPW_INTA_BIT_FW_CARD_DISABLE_PHY_OFF_DONE;
43f66a6c
JK
2002 }
2003
b095c381 2004 if (inta & IPW_INTA_BIT_RF_KILL_DONE) {
43f66a6c
JK
2005 IPW_DEBUG_RF_KILL("RF_KILL_DONE\n");
2006 priv->status |= STATUS_RF_KILL_HW;
2007 wake_up_interruptible(&priv->wait_command_queue);
ea2b26e0 2008 priv->status &= ~(STATUS_ASSOCIATED | STATUS_ASSOCIATING);
43f66a6c 2009 cancel_delayed_work(&priv->request_scan);
ea177305
DW
2010 cancel_delayed_work(&priv->request_direct_scan);
2011 cancel_delayed_work(&priv->request_passive_scan);
0b531676 2012 cancel_delayed_work(&priv->scan_event);
a613bffd 2013 schedule_work(&priv->link_down);
43f66a6c 2014 queue_delayed_work(priv->workqueue, &priv->rf_kill, 2 * HZ);
b095c381 2015 handled |= IPW_INTA_BIT_RF_KILL_DONE;
43f66a6c 2016 }
bf79451e 2017
b095c381 2018 if (inta & IPW_INTA_BIT_FATAL_ERROR) {
1d1b09eb 2019 IPW_WARNING("Firmware error detected. Restarting.\n");
b39860c6 2020 if (priv->error) {
1d1b09eb 2021 IPW_DEBUG_FW("Sysfs 'error' log already exists.\n");
b39860c6
JK
2022 if (ipw_debug_level & IPW_DL_FW_ERRORS) {
2023 struct ipw_fw_error *error =
2024 ipw_alloc_error_log(priv);
2025 ipw_dump_error_log(priv, error);
8f760780 2026 kfree(error);
b39860c6 2027 }
b39860c6
JK
2028 } else {
2029 priv->error = ipw_alloc_error_log(priv);
2030 if (priv->error)
1d1b09eb 2031 IPW_DEBUG_FW("Sysfs 'error' log captured.\n");
b39860c6 2032 else
1d1b09eb
ZY
2033 IPW_DEBUG_FW("Error allocating sysfs 'error' "
2034 "log.\n");
b39860c6
JK
2035 if (ipw_debug_level & IPW_DL_FW_ERRORS)
2036 ipw_dump_error_log(priv, priv->error);
b39860c6
JK
2037 }
2038
b095c381
JK
2039 /* XXX: If hardware encryption is for WPA/WPA2,
2040 * we have to notify the supplicant. */
2041 if (priv->ieee->sec.encrypt) {
2042 priv->status &= ~STATUS_ASSOCIATED;
2043 notify_wx_assoc_event(priv);
2044 }
2045
2046 /* Keep the restart process from trying to send host
2047 * commands by clearing the INIT status bit */
2048 priv->status &= ~STATUS_INIT;
afbf30a2
JK
2049
2050 /* Cancel currently queued command. */
2051 priv->status &= ~STATUS_HCMD_ACTIVE;
2052 wake_up_interruptible(&priv->wait_command_queue);
2053
43f66a6c 2054 queue_work(priv->workqueue, &priv->adapter_restart);
b095c381 2055 handled |= IPW_INTA_BIT_FATAL_ERROR;
43f66a6c
JK
2056 }
2057
b095c381 2058 if (inta & IPW_INTA_BIT_PARITY_ERROR) {
43f66a6c 2059 IPW_ERROR("Parity error\n");
b095c381 2060 handled |= IPW_INTA_BIT_PARITY_ERROR;
43f66a6c
JK
2061 }
2062
2063 if (handled != inta) {
0edd5b44 2064 IPW_ERROR("Unhandled INTA bits 0x%08x\n", inta & ~handled);
43f66a6c
JK
2065 }
2066
89c318ed
ZY
2067 spin_unlock_irqrestore(&priv->lock, flags);
2068
43f66a6c
JK
2069 /* enable all interrupts */
2070 ipw_enable_interrupts(priv);
43f66a6c 2071}
bf79451e 2072
43f66a6c
JK
2073#define IPW_CMD(x) case IPW_CMD_ ## x : return #x
2074static char *get_cmd_string(u8 cmd)
2075{
2076 switch (cmd) {
2077 IPW_CMD(HOST_COMPLETE);
bf79451e
JG
2078 IPW_CMD(POWER_DOWN);
2079 IPW_CMD(SYSTEM_CONFIG);
2080 IPW_CMD(MULTICAST_ADDRESS);
2081 IPW_CMD(SSID);
2082 IPW_CMD(ADAPTER_ADDRESS);
2083 IPW_CMD(PORT_TYPE);
2084 IPW_CMD(RTS_THRESHOLD);
2085 IPW_CMD(FRAG_THRESHOLD);
2086 IPW_CMD(POWER_MODE);
2087 IPW_CMD(WEP_KEY);
2088 IPW_CMD(TGI_TX_KEY);
2089 IPW_CMD(SCAN_REQUEST);
2090 IPW_CMD(SCAN_REQUEST_EXT);
2091 IPW_CMD(ASSOCIATE);
2092 IPW_CMD(SUPPORTED_RATES);
2093 IPW_CMD(SCAN_ABORT);
2094 IPW_CMD(TX_FLUSH);
2095 IPW_CMD(QOS_PARAMETERS);
2096 IPW_CMD(DINO_CONFIG);
2097 IPW_CMD(RSN_CAPABILITIES);
2098 IPW_CMD(RX_KEY);
2099 IPW_CMD(CARD_DISABLE);
2100 IPW_CMD(SEED_NUMBER);
2101 IPW_CMD(TX_POWER);
2102 IPW_CMD(COUNTRY_INFO);
2103 IPW_CMD(AIRONET_INFO);
2104 IPW_CMD(AP_TX_POWER);
2105 IPW_CMD(CCKM_INFO);
2106 IPW_CMD(CCX_VER_INFO);
2107 IPW_CMD(SET_CALIBRATION);
2108 IPW_CMD(SENSITIVITY_CALIB);
2109 IPW_CMD(RETRY_LIMIT);
2110 IPW_CMD(IPW_PRE_POWER_DOWN);
2111 IPW_CMD(VAP_BEACON_TEMPLATE);
2112 IPW_CMD(VAP_DTIM_PERIOD);
2113 IPW_CMD(EXT_SUPPORTED_RATES);
2114 IPW_CMD(VAP_LOCAL_TX_PWR_CONSTRAINT);
2115 IPW_CMD(VAP_QUIET_INTERVALS);
2116 IPW_CMD(VAP_CHANNEL_SWITCH);
2117 IPW_CMD(VAP_MANDATORY_CHANNELS);
2118 IPW_CMD(VAP_CELL_PWR_LIMIT);
2119 IPW_CMD(VAP_CF_PARAM_SET);
2120 IPW_CMD(VAP_SET_BEACONING_STATE);
2121 IPW_CMD(MEASUREMENT);
2122 IPW_CMD(POWER_CAPABILITY);
2123 IPW_CMD(SUPPORTED_CHANNELS);
2124 IPW_CMD(TPC_REPORT);
2125 IPW_CMD(WME_INFO);
2126 IPW_CMD(PRODUCTION_COMMAND);
2127 default:
43f66a6c
JK
2128 return "UNKNOWN";
2129 }
2130}
43f66a6c
JK
2131
2132#define HOST_COMPLETE_TIMEOUT HZ
0a7bcf26
ZY
2133
2134static int __ipw_send_cmd(struct ipw_priv *priv, struct host_cmd *cmd)
43f66a6c
JK
2135{
2136 int rc = 0;
a613bffd 2137 unsigned long flags;
43f66a6c 2138
a613bffd 2139 spin_lock_irqsave(&priv->lock, flags);
43f66a6c 2140 if (priv->status & STATUS_HCMD_ACTIVE) {
9ddf84f6
JK
2141 IPW_ERROR("Failed to send %s: Already sending a command.\n",
2142 get_cmd_string(cmd->cmd));
a613bffd 2143 spin_unlock_irqrestore(&priv->lock, flags);
9ddf84f6 2144 return -EAGAIN;
43f66a6c
JK
2145 }
2146
2147 priv->status |= STATUS_HCMD_ACTIVE;
bf79451e 2148
f6c5cb7c
JK
2149 if (priv->cmdlog) {
2150 priv->cmdlog[priv->cmdlog_pos].jiffies = jiffies;
2151 priv->cmdlog[priv->cmdlog_pos].cmd.cmd = cmd->cmd;
2152 priv->cmdlog[priv->cmdlog_pos].cmd.len = cmd->len;
2153 memcpy(priv->cmdlog[priv->cmdlog_pos].cmd.param, cmd->param,
2154 cmd->len);
2155 priv->cmdlog[priv->cmdlog_pos].retcode = -1;
2156 }
2157
b095c381
JK
2158 IPW_DEBUG_HC("%s command (#%d) %d bytes: 0x%08X\n",
2159 get_cmd_string(cmd->cmd), cmd->cmd, cmd->len,
2160 priv->status);
f516dbcd
ZY
2161
2162#ifndef DEBUG_CMD_WEP_KEY
2163 if (cmd->cmd == IPW_CMD_WEP_KEY)
2164 IPW_DEBUG_HC("WEP_KEY command masked out for secure.\n");
2165 else
2166#endif
2167 printk_buf(IPW_DL_HOST_COMMAND, (u8 *) cmd->param, cmd->len);
2168
0a7bcf26 2169 rc = ipw_queue_tx_hcmd(priv, cmd->cmd, cmd->param, cmd->len, 0);
a613bffd
JK
2170 if (rc) {
2171 priv->status &= ~STATUS_HCMD_ACTIVE;
9ddf84f6
JK
2172 IPW_ERROR("Failed to send %s: Reason %d\n",
2173 get_cmd_string(cmd->cmd), rc);
a613bffd 2174 spin_unlock_irqrestore(&priv->lock, flags);
f6c5cb7c 2175 goto exit;
a613bffd
JK
2176 }
2177 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c 2178
0edd5b44
JG
2179 rc = wait_event_interruptible_timeout(priv->wait_command_queue,
2180 !(priv->
2181 status & STATUS_HCMD_ACTIVE),
2182 HOST_COMPLETE_TIMEOUT);
43f66a6c 2183 if (rc == 0) {
a613bffd
JK
2184 spin_lock_irqsave(&priv->lock, flags);
2185 if (priv->status & STATUS_HCMD_ACTIVE) {
9ddf84f6
JK
2186 IPW_ERROR("Failed to send %s: Command timed out.\n",
2187 get_cmd_string(cmd->cmd));
a613bffd
JK
2188 priv->status &= ~STATUS_HCMD_ACTIVE;
2189 spin_unlock_irqrestore(&priv->lock, flags);
f6c5cb7c
JK
2190 rc = -EIO;
2191 goto exit;
a613bffd
JK
2192 }
2193 spin_unlock_irqrestore(&priv->lock, flags);
3b9990cb
JK
2194 } else
2195 rc = 0;
a613bffd 2196
b095c381 2197 if (priv->status & STATUS_RF_KILL_HW) {
9ddf84f6
JK
2198 IPW_ERROR("Failed to send %s: Aborted due to RF kill switch.\n",
2199 get_cmd_string(cmd->cmd));
f6c5cb7c
JK
2200 rc = -EIO;
2201 goto exit;
43f66a6c
JK
2202 }
2203
2638bc39 2204 exit:
f6c5cb7c
JK
2205 if (priv->cmdlog) {
2206 priv->cmdlog[priv->cmdlog_pos++].retcode = rc;
2207 priv->cmdlog_pos %= priv->cmdlog_len;
2208 }
2209 return rc;
43f66a6c
JK
2210}
2211
0a7bcf26
ZY
2212static int ipw_send_cmd_simple(struct ipw_priv *priv, u8 command)
2213{
2214 struct host_cmd cmd = {
2215 .cmd = command,
2216 };
2217
2218 return __ipw_send_cmd(priv, &cmd);
2219}
2220
2221static int ipw_send_cmd_pdu(struct ipw_priv *priv, u8 command, u8 len,
2222 void *data)
43f66a6c
JK
2223{
2224 struct host_cmd cmd = {
0a7bcf26
ZY
2225 .cmd = command,
2226 .len = len,
2227 .param = data,
43f66a6c
JK
2228 };
2229
0a7bcf26
ZY
2230 return __ipw_send_cmd(priv, &cmd);
2231}
2232
2233static int ipw_send_host_complete(struct ipw_priv *priv)
2234{
43f66a6c
JK
2235 if (!priv) {
2236 IPW_ERROR("Invalid args\n");
2237 return -1;
2238 }
2239
0a7bcf26 2240 return ipw_send_cmd_simple(priv, IPW_CMD_HOST_COMPLETE);
43f66a6c
JK
2241}
2242
d685b8c2 2243static int ipw_send_system_config(struct ipw_priv *priv)
43f66a6c 2244{
d685b8c2
ZY
2245 return ipw_send_cmd_pdu(priv, IPW_CMD_SYSTEM_CONFIG,
2246 sizeof(priv->sys_config),
2247 &priv->sys_config);
43f66a6c
JK
2248}
2249
0edd5b44 2250static int ipw_send_ssid(struct ipw_priv *priv, u8 * ssid, int len)
43f66a6c 2251{
43f66a6c
JK
2252 if (!priv || !ssid) {
2253 IPW_ERROR("Invalid args\n");
2254 return -1;
2255 }
2256
0a7bcf26 2257 return ipw_send_cmd_pdu(priv, IPW_CMD_SSID, min(len, IW_ESSID_MAX_SIZE),
2638bc39 2258 ssid);
43f66a6c
JK
2259}
2260
0edd5b44 2261static int ipw_send_adapter_address(struct ipw_priv *priv, u8 * mac)
43f66a6c 2262{
43f66a6c
JK
2263 if (!priv || !mac) {
2264 IPW_ERROR("Invalid args\n");
2265 return -1;
2266 }
2267
e174961c
JB
2268 IPW_DEBUG_INFO("%s: Setting MAC to %pM\n",
2269 priv->net_dev->name, mac);
43f66a6c 2270
2638bc39 2271 return ipw_send_cmd_pdu(priv, IPW_CMD_ADAPTER_ADDRESS, ETH_ALEN, mac);
43f66a6c
JK
2272}
2273
a613bffd
JK
2274/*
2275 * NOTE: This must be executed from our workqueue as it results in udelay
2276 * being called which may corrupt the keyboard if executed on default
2277 * workqueue
2278 */
43f66a6c
JK
2279static void ipw_adapter_restart(void *adapter)
2280{
2281 struct ipw_priv *priv = adapter;
2282
2283 if (priv->status & STATUS_RF_KILL_MASK)
2284 return;
2285
2286 ipw_down(priv);
b095c381
JK
2287
2288 if (priv->assoc_network &&
2289 (priv->assoc_network->capability & WLAN_CAPABILITY_IBSS))
2290 ipw_remove_current_network(priv);
2291
43f66a6c
JK
2292 if (ipw_up(priv)) {
2293 IPW_ERROR("Failed to up device\n");
2294 return;
2295 }
2296}
2297
c4028958 2298static void ipw_bg_adapter_restart(struct work_struct *work)
c848d0af 2299{
c4028958
DH
2300 struct ipw_priv *priv =
2301 container_of(work, struct ipw_priv, adapter_restart);
4644151b 2302 mutex_lock(&priv->mutex);
c4028958 2303 ipw_adapter_restart(priv);
4644151b 2304 mutex_unlock(&priv->mutex);
c848d0af
JK
2305}
2306
43f66a6c
JK
2307#define IPW_SCAN_CHECK_WATCHDOG (5 * HZ)
2308
2309static void ipw_scan_check(void *data)
2310{
2311 struct ipw_priv *priv = data;
2312 if (priv->status & (STATUS_SCANNING | STATUS_SCAN_ABORTING)) {
2313 IPW_DEBUG_SCAN("Scan completion watchdog resetting "
c7b6a674
ZY
2314 "adapter after (%dms).\n",
2315 jiffies_to_msecs(IPW_SCAN_CHECK_WATCHDOG));
a613bffd 2316 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c
JK
2317 }
2318}
2319
c4028958 2320static void ipw_bg_scan_check(struct work_struct *work)
c848d0af 2321{
c4028958
DH
2322 struct ipw_priv *priv =
2323 container_of(work, struct ipw_priv, scan_check.work);
4644151b 2324 mutex_lock(&priv->mutex);
c4028958 2325 ipw_scan_check(priv);
4644151b 2326 mutex_unlock(&priv->mutex);
c848d0af
JK
2327}
2328
43f66a6c
JK
2329static int ipw_send_scan_request_ext(struct ipw_priv *priv,
2330 struct ipw_scan_request_ext *request)
2331{
0a7bcf26 2332 return ipw_send_cmd_pdu(priv, IPW_CMD_SCAN_REQUEST_EXT,
2638bc39 2333 sizeof(*request), request);
43f66a6c
JK
2334}
2335
2336static int ipw_send_scan_abort(struct ipw_priv *priv)
2337{
43f66a6c
JK
2338 if (!priv) {
2339 IPW_ERROR("Invalid args\n");
2340 return -1;
2341 }
2342
0a7bcf26 2343 return ipw_send_cmd_simple(priv, IPW_CMD_SCAN_ABORT);
43f66a6c
JK
2344}
2345
2346static int ipw_set_sensitivity(struct ipw_priv *priv, u16 sens)
2347{
0a7bcf26 2348 struct ipw_sensitivity_calib calib = {
851ca268 2349 .beacon_rssi_raw = cpu_to_le16(sens),
43f66a6c 2350 };
0a7bcf26
ZY
2351
2352 return ipw_send_cmd_pdu(priv, IPW_CMD_SENSITIVITY_CALIB, sizeof(calib),
2638bc39 2353 &calib);
43f66a6c
JK
2354}
2355
2356static int ipw_send_associate(struct ipw_priv *priv,
2357 struct ipw_associate *associate)
2358{
0a7bcf26
ZY
2359 if (!priv || !associate) {
2360 IPW_ERROR("Invalid args\n");
2361 return -1;
2362 }
2363
5b5e807f
AV
2364 return ipw_send_cmd_pdu(priv, IPW_CMD_ASSOCIATE, sizeof(*associate),
2365 associate);
43f66a6c
JK
2366}
2367
2368static int ipw_send_supported_rates(struct ipw_priv *priv,
2369 struct ipw_supported_rates *rates)
2370{
43f66a6c
JK
2371 if (!priv || !rates) {
2372 IPW_ERROR("Invalid args\n");
2373 return -1;
2374 }
2375
0a7bcf26 2376 return ipw_send_cmd_pdu(priv, IPW_CMD_SUPPORTED_RATES, sizeof(*rates),
2638bc39 2377 rates);
43f66a6c
JK
2378}
2379
2380static int ipw_set_random_seed(struct ipw_priv *priv)
2381{
0a7bcf26 2382 u32 val;
43f66a6c
JK
2383
2384 if (!priv) {
2385 IPW_ERROR("Invalid args\n");
2386 return -1;
2387 }
2388
0a7bcf26 2389 get_random_bytes(&val, sizeof(val));
43f66a6c 2390
0a7bcf26 2391 return ipw_send_cmd_pdu(priv, IPW_CMD_SEED_NUMBER, sizeof(val), &val);
43f66a6c
JK
2392}
2393
43f66a6c
JK
2394static int ipw_send_card_disable(struct ipw_priv *priv, u32 phy_off)
2395{
e62e1ee0 2396 __le32 v = cpu_to_le32(phy_off);
43f66a6c
JK
2397 if (!priv) {
2398 IPW_ERROR("Invalid args\n");
2399 return -1;
2400 }
2401
e62e1ee0 2402 return ipw_send_cmd_pdu(priv, IPW_CMD_CARD_DISABLE, sizeof(v), &v);
43f66a6c 2403}
43f66a6c 2404
0edd5b44 2405static int ipw_send_tx_power(struct ipw_priv *priv, struct ipw_tx_power *power)
43f66a6c 2406{
43f66a6c
JK
2407 if (!priv || !power) {
2408 IPW_ERROR("Invalid args\n");
2409 return -1;
2410 }
2411
2638bc39 2412 return ipw_send_cmd_pdu(priv, IPW_CMD_TX_POWER, sizeof(*power), power);
43f66a6c
JK
2413}
2414
6de9f7f2
ZY
2415static int ipw_set_tx_power(struct ipw_priv *priv)
2416{
1867b117 2417 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
6de9f7f2
ZY
2418 struct ipw_tx_power tx_power;
2419 s8 max_power;
2420 int i;
2421
2422 memset(&tx_power, 0, sizeof(tx_power));
2423
2424 /* configure device for 'G' band */
2425 tx_power.ieee_mode = IPW_G_MODE;
2426 tx_power.num_channels = geo->bg_channels;
2427 for (i = 0; i < geo->bg_channels; i++) {
2428 max_power = geo->bg[i].max_power;
2429 tx_power.channels_tx_power[i].channel_number =
2430 geo->bg[i].channel;
2431 tx_power.channels_tx_power[i].tx_power = max_power ?
2432 min(max_power, priv->tx_power) : priv->tx_power;
43f66a6c 2433 }
6de9f7f2
ZY
2434 if (ipw_send_tx_power(priv, &tx_power))
2435 return -EIO;
2436
2437 /* configure device to also handle 'B' band */
2438 tx_power.ieee_mode = IPW_B_MODE;
2439 if (ipw_send_tx_power(priv, &tx_power))
2440 return -EIO;
bf79451e 2441
6de9f7f2
ZY
2442 /* configure device to also handle 'A' band */
2443 if (priv->ieee->abg_true) {
2444 tx_power.ieee_mode = IPW_A_MODE;
2445 tx_power.num_channels = geo->a_channels;
2446 for (i = 0; i < tx_power.num_channels; i++) {
2447 max_power = geo->a[i].max_power;
2448 tx_power.channels_tx_power[i].channel_number =
2449 geo->a[i].channel;
2450 tx_power.channels_tx_power[i].tx_power = max_power ?
2451 min(max_power, priv->tx_power) : priv->tx_power;
2452 }
2453 if (ipw_send_tx_power(priv, &tx_power))
2454 return -EIO;
2455 }
43f66a6c
JK
2456 return 0;
2457}
2458
2459static int ipw_send_rts_threshold(struct ipw_priv *priv, u16 rts)
2460{
2461 struct ipw_rts_threshold rts_threshold = {
851ca268 2462 .rts_threshold = cpu_to_le16(rts),
43f66a6c 2463 };
43f66a6c
JK
2464
2465 if (!priv) {
2466 IPW_ERROR("Invalid args\n");
2467 return -1;
2468 }
2469
0a7bcf26
ZY
2470 return ipw_send_cmd_pdu(priv, IPW_CMD_RTS_THRESHOLD,
2471 sizeof(rts_threshold), &rts_threshold);
43f66a6c
JK
2472}
2473
2474static int ipw_send_frag_threshold(struct ipw_priv *priv, u16 frag)
2475{
2476 struct ipw_frag_threshold frag_threshold = {
851ca268 2477 .frag_threshold = cpu_to_le16(frag),
43f66a6c 2478 };
43f66a6c
JK
2479
2480 if (!priv) {
2481 IPW_ERROR("Invalid args\n");
2482 return -1;
2483 }
2484
0a7bcf26
ZY
2485 return ipw_send_cmd_pdu(priv, IPW_CMD_FRAG_THRESHOLD,
2486 sizeof(frag_threshold), &frag_threshold);
43f66a6c
JK
2487}
2488
2489static int ipw_send_power_mode(struct ipw_priv *priv, u32 mode)
2490{
e62e1ee0 2491 __le32 param;
43f66a6c
JK
2492
2493 if (!priv) {
2494 IPW_ERROR("Invalid args\n");
2495 return -1;
2496 }
bf79451e 2497
43f66a6c
JK
2498 /* If on battery, set to 3, if AC set to CAM, else user
2499 * level */
2500 switch (mode) {
2501 case IPW_POWER_BATTERY:
e62e1ee0 2502 param = cpu_to_le32(IPW_POWER_INDEX_3);
43f66a6c
JK
2503 break;
2504 case IPW_POWER_AC:
e62e1ee0 2505 param = cpu_to_le32(IPW_POWER_MODE_CAM);
43f66a6c
JK
2506 break;
2507 default:
e62e1ee0 2508 param = cpu_to_le32(mode);
43f66a6c
JK
2509 break;
2510 }
2511
0a7bcf26 2512 return ipw_send_cmd_pdu(priv, IPW_CMD_POWER_MODE, sizeof(param),
2638bc39 2513 &param);
43f66a6c
JK
2514}
2515
afbf30a2
JK
2516static int ipw_send_retry_limit(struct ipw_priv *priv, u8 slimit, u8 llimit)
2517{
2518 struct ipw_retry_limit retry_limit = {
2519 .short_retry_limit = slimit,
2520 .long_retry_limit = llimit
2521 };
afbf30a2
JK
2522
2523 if (!priv) {
2524 IPW_ERROR("Invalid args\n");
2525 return -1;
2526 }
2527
0a7bcf26 2528 return ipw_send_cmd_pdu(priv, IPW_CMD_RETRY_LIMIT, sizeof(retry_limit),
2638bc39 2529 &retry_limit);
afbf30a2
JK
2530}
2531
43f66a6c
JK
2532/*
2533 * The IPW device contains a Microwire compatible EEPROM that stores
2534 * various data like the MAC address. Usually the firmware has exclusive
2535 * access to the eeprom, but during device initialization (before the
2536 * device driver has sent the HostComplete command to the firmware) the
2537 * device driver has read access to the EEPROM by way of indirect addressing
2538 * through a couple of memory mapped registers.
2539 *
2540 * The following is a simplified implementation for pulling data out of the
2541 * the eeprom, along with some helper functions to find information in
2542 * the per device private data's copy of the eeprom.
2543 *
2544 * NOTE: To better understand how these functions work (i.e what is a chip
2545 * select and why do have to keep driving the eeprom clock?), read
2546 * just about any data sheet for a Microwire compatible EEPROM.
2547 */
2548
2549/* write a 32 bit value into the indirect accessor register */
2550static inline void eeprom_write_reg(struct ipw_priv *p, u32 data)
2551{
2552 ipw_write_reg32(p, FW_MEM_REG_EEPROM_ACCESS, data);
bf79451e 2553
43f66a6c
JK
2554 /* the eeprom requires some time to complete the operation */
2555 udelay(p->eeprom_delay);
2556
2557 return;
2558}
2559
2560/* perform a chip select operation */
858119e1 2561static void eeprom_cs(struct ipw_priv *priv)
43f66a6c 2562{
0edd5b44
JG
2563 eeprom_write_reg(priv, 0);
2564 eeprom_write_reg(priv, EEPROM_BIT_CS);
2565 eeprom_write_reg(priv, EEPROM_BIT_CS | EEPROM_BIT_SK);
2566 eeprom_write_reg(priv, EEPROM_BIT_CS);
43f66a6c
JK
2567}
2568
2569/* perform a chip select operation */
858119e1 2570static void eeprom_disable_cs(struct ipw_priv *priv)
43f66a6c 2571{
0edd5b44
JG
2572 eeprom_write_reg(priv, EEPROM_BIT_CS);
2573 eeprom_write_reg(priv, 0);
2574 eeprom_write_reg(priv, EEPROM_BIT_SK);
43f66a6c
JK
2575}
2576
2577/* push a single bit down to the eeprom */
0edd5b44 2578static inline void eeprom_write_bit(struct ipw_priv *p, u8 bit)
43f66a6c 2579{
0edd5b44
JG
2580 int d = (bit ? EEPROM_BIT_DI : 0);
2581 eeprom_write_reg(p, EEPROM_BIT_CS | d);
2582 eeprom_write_reg(p, EEPROM_BIT_CS | d | EEPROM_BIT_SK);
43f66a6c
JK
2583}
2584
2585/* push an opcode followed by an address down to the eeprom */
0edd5b44 2586static void eeprom_op(struct ipw_priv *priv, u8 op, u8 addr)
43f66a6c
JK
2587{
2588 int i;
2589
2590 eeprom_cs(priv);
0edd5b44
JG
2591 eeprom_write_bit(priv, 1);
2592 eeprom_write_bit(priv, op & 2);
2593 eeprom_write_bit(priv, op & 1);
2594 for (i = 7; i >= 0; i--) {
2595 eeprom_write_bit(priv, addr & (1 << i));
43f66a6c
JK
2596 }
2597}
2598
2599/* pull 16 bits off the eeprom, one bit at a time */
0edd5b44 2600static u16 eeprom_read_u16(struct ipw_priv *priv, u8 addr)
43f66a6c
JK
2601{
2602 int i;
0edd5b44 2603 u16 r = 0;
bf79451e 2604
43f66a6c 2605 /* Send READ Opcode */
0edd5b44 2606 eeprom_op(priv, EEPROM_CMD_READ, addr);
43f66a6c
JK
2607
2608 /* Send dummy bit */
0edd5b44 2609 eeprom_write_reg(priv, EEPROM_BIT_CS);
43f66a6c
JK
2610
2611 /* Read the byte off the eeprom one bit at a time */
0edd5b44 2612 for (i = 0; i < 16; i++) {
43f66a6c 2613 u32 data = 0;
0edd5b44
JG
2614 eeprom_write_reg(priv, EEPROM_BIT_CS | EEPROM_BIT_SK);
2615 eeprom_write_reg(priv, EEPROM_BIT_CS);
2616 data = ipw_read_reg32(priv, FW_MEM_REG_EEPROM_ACCESS);
2617 r = (r << 1) | ((data & EEPROM_BIT_DO) ? 1 : 0);
43f66a6c 2618 }
bf79451e 2619
43f66a6c 2620 /* Send another dummy bit */
0edd5b44 2621 eeprom_write_reg(priv, 0);
43f66a6c 2622 eeprom_disable_cs(priv);
bf79451e 2623
43f66a6c
JK
2624 return r;
2625}
2626
2627/* helper function for pulling the mac address out of the private */
2628/* data's copy of the eeprom data */
0edd5b44 2629static void eeprom_parse_mac(struct ipw_priv *priv, u8 * mac)
43f66a6c 2630{
afbf30a2 2631 memcpy(mac, &priv->eeprom[EEPROM_MAC_ADDRESS], 6);
43f66a6c
JK
2632}
2633
2634/*
2635 * Either the device driver (i.e. the host) or the firmware can
2636 * load eeprom data into the designated region in SRAM. If neither
2637 * happens then the FW will shutdown with a fatal error.
2638 *
2639 * In order to signal the FW to load the EEPROM, the EEPROM_LOAD_DISABLE
2640 * bit needs region of shared SRAM needs to be non-zero.
2641 */
2642static void ipw_eeprom_init_sram(struct ipw_priv *priv)
2643{
2644 int i;
e62e1ee0 2645 __le16 *eeprom = (__le16 *) priv->eeprom;
bf79451e 2646
43f66a6c
JK
2647 IPW_DEBUG_TRACE(">>\n");
2648
2649 /* read entire contents of eeprom into private buffer */
0edd5b44 2650 for (i = 0; i < 128; i++)
e62e1ee0 2651 eeprom[i] = cpu_to_le16(eeprom_read_u16(priv, (u8) i));
43f66a6c 2652
bf79451e
JG
2653 /*
2654 If the data looks correct, then copy it to our private
43f66a6c 2655 copy. Otherwise let the firmware know to perform the operation
c7b6a674 2656 on its own.
0edd5b44 2657 */
386093ef 2658 if (priv->eeprom[EEPROM_VERSION] != 0) {
43f66a6c
JK
2659 IPW_DEBUG_INFO("Writing EEPROM data into SRAM\n");
2660
2661 /* write the eeprom data to sram */
b095c381 2662 for (i = 0; i < IPW_EEPROM_IMAGE_SIZE; i++)
0edd5b44 2663 ipw_write8(priv, IPW_EEPROM_DATA + i, priv->eeprom[i]);
43f66a6c
JK
2664
2665 /* Do not load eeprom data on fatal error or suspend */
2666 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 0);
2667 } else {
2668 IPW_DEBUG_INFO("Enabling FW initializationg of SRAM\n");
2669
2670 /* Load eeprom data on fatal error or suspend */
2671 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 1);
2672 }
2673
2674 IPW_DEBUG_TRACE("<<\n");
2675}
2676
858119e1 2677static void ipw_zero_memory(struct ipw_priv *priv, u32 start, u32 count)
43f66a6c
JK
2678{
2679 count >>= 2;
0edd5b44
JG
2680 if (!count)
2681 return;
b095c381 2682 _ipw_write32(priv, IPW_AUTOINC_ADDR, start);
bf79451e 2683 while (count--)
b095c381 2684 _ipw_write32(priv, IPW_AUTOINC_DATA, 0);
43f66a6c
JK
2685}
2686
2687static inline void ipw_fw_dma_reset_command_blocks(struct ipw_priv *priv)
2688{
b095c381 2689 ipw_zero_memory(priv, IPW_SHARED_SRAM_DMA_CONTROL,
bf79451e 2690 CB_NUMBER_OF_ELEMENTS_SMALL *
43f66a6c
JK
2691 sizeof(struct command_block));
2692}
2693
2694static int ipw_fw_dma_enable(struct ipw_priv *priv)
0edd5b44 2695{ /* start dma engine but no transfers yet */
43f66a6c
JK
2696
2697 IPW_DEBUG_FW(">> : \n");
bf79451e 2698
43f66a6c
JK
2699 /* Start the dma */
2700 ipw_fw_dma_reset_command_blocks(priv);
bf79451e 2701
43f66a6c 2702 /* Write CB base address */
b095c381 2703 ipw_write_reg32(priv, IPW_DMA_I_CB_BASE, IPW_SHARED_SRAM_DMA_CONTROL);
43f66a6c
JK
2704
2705 IPW_DEBUG_FW("<< : \n");
2706 return 0;
2707}
2708
2709static void ipw_fw_dma_abort(struct ipw_priv *priv)
2710{
2711 u32 control = 0;
2712
2713 IPW_DEBUG_FW(">> :\n");
bf79451e 2714
67fd6b45 2715 /* set the Stop and Abort bit */
43f66a6c 2716 control = DMA_CONTROL_SMALL_CB_CONST_VALUE | DMA_CB_STOP_AND_ABORT;
b095c381 2717 ipw_write_reg32(priv, IPW_DMA_I_DMA_CONTROL, control);
43f66a6c 2718 priv->sram_desc.last_cb_index = 0;
bf79451e 2719
43f66a6c
JK
2720 IPW_DEBUG_FW("<< \n");
2721}
2722
0edd5b44
JG
2723static int ipw_fw_dma_write_command_block(struct ipw_priv *priv, int index,
2724 struct command_block *cb)
43f66a6c 2725{
0edd5b44 2726 u32 address =
b095c381 2727 IPW_SHARED_SRAM_DMA_CONTROL +
0edd5b44 2728 (sizeof(struct command_block) * index);
43f66a6c
JK
2729 IPW_DEBUG_FW(">> :\n");
2730
0edd5b44
JG
2731 ipw_write_indirect(priv, address, (u8 *) cb,
2732 (int)sizeof(struct command_block));
43f66a6c
JK
2733
2734 IPW_DEBUG_FW("<< :\n");
2735 return 0;
2736
2737}
2738
2739static int ipw_fw_dma_kick(struct ipw_priv *priv)
2740{
2741 u32 control = 0;
0edd5b44 2742 u32 index = 0;
43f66a6c
JK
2743
2744 IPW_DEBUG_FW(">> :\n");
bf79451e 2745
43f66a6c 2746 for (index = 0; index < priv->sram_desc.last_cb_index; index++)
0edd5b44
JG
2747 ipw_fw_dma_write_command_block(priv, index,
2748 &priv->sram_desc.cb_list[index]);
43f66a6c
JK
2749
2750 /* Enable the DMA in the CSR register */
b095c381
JK
2751 ipw_clear_bit(priv, IPW_RESET_REG,
2752 IPW_RESET_REG_MASTER_DISABLED |
2753 IPW_RESET_REG_STOP_MASTER);
bf79451e 2754
0edd5b44 2755 /* Set the Start bit. */
43f66a6c 2756 control = DMA_CONTROL_SMALL_CB_CONST_VALUE | DMA_CB_START;
b095c381 2757 ipw_write_reg32(priv, IPW_DMA_I_DMA_CONTROL, control);
43f66a6c
JK
2758
2759 IPW_DEBUG_FW("<< :\n");
2760 return 0;
2761}
2762
2763static void ipw_fw_dma_dump_command_block(struct ipw_priv *priv)
2764{
2765 u32 address;
0edd5b44
JG
2766 u32 register_value = 0;
2767 u32 cb_fields_address = 0;
43f66a6c
JK
2768
2769 IPW_DEBUG_FW(">> :\n");
b095c381 2770 address = ipw_read_reg32(priv, IPW_DMA_I_CURRENT_CB);
0edd5b44 2771 IPW_DEBUG_FW_INFO("Current CB is 0x%x \n", address);
43f66a6c
JK
2772
2773 /* Read the DMA Controlor register */
b095c381
JK
2774 register_value = ipw_read_reg32(priv, IPW_DMA_I_DMA_CONTROL);
2775 IPW_DEBUG_FW_INFO("IPW_DMA_I_DMA_CONTROL is 0x%x \n", register_value);
43f66a6c 2776
0edd5b44 2777 /* Print the CB values */
43f66a6c
JK
2778 cb_fields_address = address;
2779 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2780 IPW_DEBUG_FW_INFO("Current CB ControlField is 0x%x \n", register_value);
43f66a6c
JK
2781
2782 cb_fields_address += sizeof(u32);
2783 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2784 IPW_DEBUG_FW_INFO("Current CB Source Field is 0x%x \n", register_value);
43f66a6c
JK
2785
2786 cb_fields_address += sizeof(u32);
2787 register_value = ipw_read_reg32(priv, cb_fields_address);
2788 IPW_DEBUG_FW_INFO("Current CB Destination Field is 0x%x \n",
2789 register_value);
2790
2791 cb_fields_address += sizeof(u32);
2792 register_value = ipw_read_reg32(priv, cb_fields_address);
0edd5b44 2793 IPW_DEBUG_FW_INFO("Current CB Status Field is 0x%x \n", register_value);
43f66a6c
JK
2794
2795 IPW_DEBUG_FW(">> :\n");
2796}
2797
2798static int ipw_fw_dma_command_block_index(struct ipw_priv *priv)
2799{
2800 u32 current_cb_address = 0;
2801 u32 current_cb_index = 0;
2802
2803 IPW_DEBUG_FW("<< :\n");
b095c381 2804 current_cb_address = ipw_read_reg32(priv, IPW_DMA_I_CURRENT_CB);
bf79451e 2805
b095c381 2806 current_cb_index = (current_cb_address - IPW_SHARED_SRAM_DMA_CONTROL) /
0edd5b44 2807 sizeof(struct command_block);
bf79451e 2808
43f66a6c 2809 IPW_DEBUG_FW_INFO("Current CB index 0x%x address = 0x%X \n",
0edd5b44 2810 current_cb_index, current_cb_address);
43f66a6c
JK
2811
2812 IPW_DEBUG_FW(">> :\n");
2813 return current_cb_index;
2814
2815}
2816
2817static int ipw_fw_dma_add_command_block(struct ipw_priv *priv,
2818 u32 src_address,
2819 u32 dest_address,
2820 u32 length,
0edd5b44 2821 int interrupt_enabled, int is_last)
43f66a6c
JK
2822{
2823
bf79451e 2824 u32 control = CB_VALID | CB_SRC_LE | CB_DEST_LE | CB_SRC_AUTOINC |
0edd5b44
JG
2825 CB_SRC_IO_GATED | CB_DEST_AUTOINC | CB_SRC_SIZE_LONG |
2826 CB_DEST_SIZE_LONG;
43f66a6c 2827 struct command_block *cb;
0edd5b44 2828 u32 last_cb_element = 0;
43f66a6c
JK
2829
2830 IPW_DEBUG_FW_INFO("src_address=0x%x dest_address=0x%x length=0x%x\n",
2831 src_address, dest_address, length);
2832
2833 if (priv->sram_desc.last_cb_index >= CB_NUMBER_OF_ELEMENTS_SMALL)
2834 return -1;
2835
2836 last_cb_element = priv->sram_desc.last_cb_index;
2837 cb = &priv->sram_desc.cb_list[last_cb_element];
2838 priv->sram_desc.last_cb_index++;
2839
2840 /* Calculate the new CB control word */
0edd5b44 2841 if (interrupt_enabled)
43f66a6c
JK
2842 control |= CB_INT_ENABLED;
2843
2844 if (is_last)
2845 control |= CB_LAST_VALID;
bf79451e 2846
43f66a6c
JK
2847 control |= length;
2848
2849 /* Calculate the CB Element's checksum value */
0edd5b44 2850 cb->status = control ^ src_address ^ dest_address;
43f66a6c
JK
2851
2852 /* Copy the Source and Destination addresses */
2853 cb->dest_addr = dest_address;
2854 cb->source_addr = src_address;
2855
2856 /* Copy the Control Word last */
2857 cb->control = control;
2858
2859 return 0;
2860}
2861
2862static int ipw_fw_dma_add_buffer(struct ipw_priv *priv,
0edd5b44 2863 u32 src_phys, u32 dest_address, u32 length)
43f66a6c
JK
2864{
2865 u32 bytes_left = length;
0edd5b44
JG
2866 u32 src_offset = 0;
2867 u32 dest_offset = 0;
43f66a6c
JK
2868 int status = 0;
2869 IPW_DEBUG_FW(">> \n");
2870 IPW_DEBUG_FW_INFO("src_phys=0x%x dest_address=0x%x length=0x%x\n",
2871 src_phys, dest_address, length);
2872 while (bytes_left > CB_MAX_LENGTH) {
0edd5b44
JG
2873 status = ipw_fw_dma_add_command_block(priv,
2874 src_phys + src_offset,
2875 dest_address +
2876 dest_offset,
2877 CB_MAX_LENGTH, 0, 0);
43f66a6c
JK
2878 if (status) {
2879 IPW_DEBUG_FW_INFO(": Failed\n");
2880 return -1;
bf79451e 2881 } else
43f66a6c
JK
2882 IPW_DEBUG_FW_INFO(": Added new cb\n");
2883
2884 src_offset += CB_MAX_LENGTH;
2885 dest_offset += CB_MAX_LENGTH;
2886 bytes_left -= CB_MAX_LENGTH;
2887 }
2888
2889 /* add the buffer tail */
2890 if (bytes_left > 0) {
0edd5b44
JG
2891 status =
2892 ipw_fw_dma_add_command_block(priv, src_phys + src_offset,
2893 dest_address + dest_offset,
2894 bytes_left, 0, 0);
43f66a6c
JK
2895 if (status) {
2896 IPW_DEBUG_FW_INFO(": Failed on the buffer tail\n");
2897 return -1;
bf79451e 2898 } else
0edd5b44
JG
2899 IPW_DEBUG_FW_INFO
2900 (": Adding new cb - the buffer tail\n");
43f66a6c 2901 }
bf79451e 2902
43f66a6c
JK
2903 IPW_DEBUG_FW("<< \n");
2904 return 0;
2905}
2906
2907static int ipw_fw_dma_wait(struct ipw_priv *priv)
2908{
397ae121 2909 u32 current_index = 0, previous_index;
43f66a6c
JK
2910 u32 watchdog = 0;
2911
2912 IPW_DEBUG_FW(">> : \n");
2913
2914 current_index = ipw_fw_dma_command_block_index(priv);
397ae121 2915 IPW_DEBUG_FW_INFO("sram_desc.last_cb_index:0x%08X\n",
0edd5b44 2916 (int)priv->sram_desc.last_cb_index);
43f66a6c
JK
2917
2918 while (current_index < priv->sram_desc.last_cb_index) {
2919 udelay(50);
397ae121 2920 previous_index = current_index;
43f66a6c
JK
2921 current_index = ipw_fw_dma_command_block_index(priv);
2922
397ae121
ZY
2923 if (previous_index < current_index) {
2924 watchdog = 0;
2925 continue;
2926 }
2927 if (++watchdog > 400) {
43f66a6c
JK
2928 IPW_DEBUG_FW_INFO("Timeout\n");
2929 ipw_fw_dma_dump_command_block(priv);
2930 ipw_fw_dma_abort(priv);
2931 return -1;
2932 }
2933 }
2934
2935 ipw_fw_dma_abort(priv);
2936
0edd5b44 2937 /*Disable the DMA in the CSR register */
b095c381
JK
2938 ipw_set_bit(priv, IPW_RESET_REG,
2939 IPW_RESET_REG_MASTER_DISABLED | IPW_RESET_REG_STOP_MASTER);
43f66a6c
JK
2940
2941 IPW_DEBUG_FW("<< dmaWaitSync \n");
2942 return 0;
2943}
2944
bf79451e 2945static void ipw_remove_current_network(struct ipw_priv *priv)
43f66a6c
JK
2946{
2947 struct list_head *element, *safe;
bf79451e 2948 struct ieee80211_network *network = NULL;
a613bffd
JK
2949 unsigned long flags;
2950
2951 spin_lock_irqsave(&priv->ieee->lock, flags);
43f66a6c
JK
2952 list_for_each_safe(element, safe, &priv->ieee->network_list) {
2953 network = list_entry(element, struct ieee80211_network, list);
2954 if (!memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
2955 list_del(element);
bf79451e 2956 list_add_tail(&network->list,
43f66a6c
JK
2957 &priv->ieee->network_free_list);
2958 }
2959 }
a613bffd 2960 spin_unlock_irqrestore(&priv->ieee->lock, flags);
43f66a6c
JK
2961}
2962
2963/**
bf79451e 2964 * Check that card is still alive.
43f66a6c
JK
2965 * Reads debug register from domain0.
2966 * If card is present, pre-defined value should
2967 * be found there.
bf79451e 2968 *
43f66a6c
JK
2969 * @param priv
2970 * @return 1 if card is present, 0 otherwise
2971 */
2972static inline int ipw_alive(struct ipw_priv *priv)
2973{
2974 return ipw_read32(priv, 0x90) == 0xd55555d5;
2975}
2976
c7b6a674 2977/* timeout in msec, attempted in 10-msec quanta */
858119e1 2978static int ipw_poll_bit(struct ipw_priv *priv, u32 addr, u32 mask,
43f66a6c
JK
2979 int timeout)
2980{
2981 int i = 0;
2982
2983 do {
bf79451e 2984 if ((ipw_read32(priv, addr) & mask) == mask)
43f66a6c
JK
2985 return i;
2986 mdelay(10);
2987 i += 10;
2988 } while (i < timeout);
bf79451e 2989
43f66a6c
JK
2990 return -ETIME;
2991}
2992
bf79451e 2993/* These functions load the firmware and micro code for the operation of
43f66a6c
JK
2994 * the ipw hardware. It assumes the buffer has all the bits for the
2995 * image and the caller is handling the memory allocation and clean up.
2996 */
2997
0edd5b44 2998static int ipw_stop_master(struct ipw_priv *priv)
43f66a6c
JK
2999{
3000 int rc;
bf79451e 3001
43f66a6c
JK
3002 IPW_DEBUG_TRACE(">> \n");
3003 /* stop master. typical delay - 0 */
b095c381 3004 ipw_set_bit(priv, IPW_RESET_REG, IPW_RESET_REG_STOP_MASTER);
43f66a6c 3005
c7b6a674 3006 /* timeout is in msec, polled in 10-msec quanta */
b095c381
JK
3007 rc = ipw_poll_bit(priv, IPW_RESET_REG,
3008 IPW_RESET_REG_MASTER_DISABLED, 100);
43f66a6c 3009 if (rc < 0) {
c7b6a674 3010 IPW_ERROR("wait for stop master failed after 100ms\n");
43f66a6c
JK
3011 return -1;
3012 }
3013
3014 IPW_DEBUG_INFO("stop master %dms\n", rc);
3015
3016 return rc;
3017}
3018
3019static void ipw_arc_release(struct ipw_priv *priv)
3020{
3021 IPW_DEBUG_TRACE(">> \n");
3022 mdelay(5);
3023
b095c381 3024 ipw_clear_bit(priv, IPW_RESET_REG, CBD_RESET_REG_PRINCETON_RESET);
43f66a6c
JK
3025
3026 /* no one knows timing, for safety add some delay */
3027 mdelay(5);
3028}
3029
43f66a6c 3030struct fw_chunk {
e62e1ee0
AV
3031 __le32 address;
3032 __le32 length;
43f66a6c
JK
3033};
3034
0edd5b44 3035static int ipw_load_ucode(struct ipw_priv *priv, u8 * data, size_t len)
43f66a6c
JK
3036{
3037 int rc = 0, i, addr;
3038 u8 cr = 0;
e62e1ee0 3039 __le16 *image;
43f66a6c 3040
e62e1ee0 3041 image = (__le16 *) data;
bf79451e 3042
43f66a6c
JK
3043 IPW_DEBUG_TRACE(">> \n");
3044
3045 rc = ipw_stop_master(priv);
3046
3047 if (rc < 0)
3048 return rc;
bf79451e 3049
b095c381
JK
3050 for (addr = IPW_SHARED_LOWER_BOUND;
3051 addr < IPW_REGISTER_DOMAIN1_END; addr += 4) {
43f66a6c
JK
3052 ipw_write32(priv, addr, 0);
3053 }
3054
3055 /* no ucode (yet) */
3056 memset(&priv->dino_alive, 0, sizeof(priv->dino_alive));
3057 /* destroy DMA queues */
3058 /* reset sequence */
3059
b095c381 3060 ipw_write_reg32(priv, IPW_MEM_HALT_AND_RESET, IPW_BIT_HALT_RESET_ON);
43f66a6c 3061 ipw_arc_release(priv);
b095c381 3062 ipw_write_reg32(priv, IPW_MEM_HALT_AND_RESET, IPW_BIT_HALT_RESET_OFF);
43f66a6c
JK
3063 mdelay(1);
3064
3065 /* reset PHY */
b095c381 3066 ipw_write_reg32(priv, IPW_INTERNAL_CMD_EVENT, IPW_BASEBAND_POWER_DOWN);
43f66a6c 3067 mdelay(1);
bf79451e 3068
b095c381 3069 ipw_write_reg32(priv, IPW_INTERNAL_CMD_EVENT, 0);
43f66a6c 3070 mdelay(1);
bf79451e 3071
43f66a6c 3072 /* enable ucode store */
c8fe6679
ZY
3073 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0x0);
3074 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, DINO_ENABLE_CS);
43f66a6c
JK
3075 mdelay(1);
3076
3077 /* write ucode */
3078 /**
3079 * @bug
3080 * Do NOT set indirect address register once and then
3081 * store data to indirect data register in the loop.
3082 * It seems very reasonable, but in this case DINO do not
3083 * accept ucode. It is essential to set address each time.
3084 */
3085 /* load new ipw uCode */
3086 for (i = 0; i < len / 2; i++)
b095c381 3087 ipw_write_reg16(priv, IPW_BASEBAND_CONTROL_STORE,
e62e1ee0 3088 le16_to_cpu(image[i]));
43f66a6c 3089
43f66a6c 3090 /* enable DINO */
b095c381
JK
3091 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0);
3092 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, DINO_ENABLE_SYSTEM);
43f66a6c 3093
0edd5b44 3094 /* this is where the igx / win driver deveates from the VAP driver. */
43f66a6c
JK
3095
3096 /* wait for alive response */
3097 for (i = 0; i < 100; i++) {
3098 /* poll for incoming data */
b095c381 3099 cr = ipw_read_reg8(priv, IPW_BASEBAND_CONTROL_STATUS);
43f66a6c
JK
3100 if (cr & DINO_RXFIFO_DATA)
3101 break;
3102 mdelay(1);
3103 }
3104
3105 if (cr & DINO_RXFIFO_DATA) {
3106 /* alive_command_responce size is NOT multiple of 4 */
e62e1ee0 3107 __le32 response_buffer[(sizeof(priv->dino_alive) + 3) / 4];
bf79451e
JG
3108
3109 for (i = 0; i < ARRAY_SIZE(response_buffer); i++)
43f66a6c 3110 response_buffer[i] =
e62e1ee0 3111 cpu_to_le32(ipw_read_reg32(priv,
b095c381 3112 IPW_BASEBAND_RX_FIFO_READ));
43f66a6c
JK
3113 memcpy(&priv->dino_alive, response_buffer,
3114 sizeof(priv->dino_alive));
3115 if (priv->dino_alive.alive_command == 1
3116 && priv->dino_alive.ucode_valid == 1) {
3117 rc = 0;
0edd5b44
JG
3118 IPW_DEBUG_INFO
3119 ("Microcode OK, rev. %d (0x%x) dev. %d (0x%x) "
3120 "of %02d/%02d/%02d %02d:%02d\n",
3121 priv->dino_alive.software_revision,
3122 priv->dino_alive.software_revision,
3123 priv->dino_alive.device_identifier,
3124 priv->dino_alive.device_identifier,
3125 priv->dino_alive.time_stamp[0],
3126 priv->dino_alive.time_stamp[1],
3127 priv->dino_alive.time_stamp[2],
3128 priv->dino_alive.time_stamp[3],
3129 priv->dino_alive.time_stamp[4]);
43f66a6c
JK
3130 } else {
3131 IPW_DEBUG_INFO("Microcode is not alive\n");
3132 rc = -EINVAL;
3133 }
3134 } else {
3135 IPW_DEBUG_INFO("No alive response from DINO\n");
3136 rc = -ETIME;
3137 }
3138
3139 /* disable DINO, otherwise for some reason
3140 firmware have problem getting alive resp. */
b095c381 3141 ipw_write_reg8(priv, IPW_BASEBAND_CONTROL_STATUS, 0);
43f66a6c 3142
43f66a6c
JK
3143 return rc;
3144}
3145
0edd5b44 3146static int ipw_load_firmware(struct ipw_priv *priv, u8 * data, size_t len)
43f66a6c
JK
3147{
3148 int rc = -1;
3149 int offset = 0;
3150 struct fw_chunk *chunk;
3151 dma_addr_t shared_phys;
3152 u8 *shared_virt;
3153
3154 IPW_DEBUG_TRACE("<< : \n");
3155 shared_virt = pci_alloc_consistent(priv->pci_dev, len, &shared_phys);
3156
3157 if (!shared_virt)
3158 return -ENOMEM;
3159
3160 memmove(shared_virt, data, len);
3161
3162 /* Start the Dma */
3163 rc = ipw_fw_dma_enable(priv);
3164
3165 if (priv->sram_desc.last_cb_index > 0) {
3166 /* the DMA is already ready this would be a bug. */
3167 BUG();
3168 goto out;
3169 }
3170
3171 do {
3172 chunk = (struct fw_chunk *)(data + offset);
3173 offset += sizeof(struct fw_chunk);
3174 /* build DMA packet and queue up for sending */
bf79451e 3175 /* dma to chunk->address, the chunk->length bytes from data +
43f66a6c
JK
3176 * offeset*/
3177 /* Dma loading */
3178 rc = ipw_fw_dma_add_buffer(priv, shared_phys + offset,
a613bffd
JK
3179 le32_to_cpu(chunk->address),
3180 le32_to_cpu(chunk->length));
43f66a6c
JK
3181 if (rc) {
3182 IPW_DEBUG_INFO("dmaAddBuffer Failed\n");
3183 goto out;
3184 }
bf79451e 3185
a613bffd 3186 offset += le32_to_cpu(chunk->length);
43f66a6c
JK
3187 } while (offset < len);
3188
0edd5b44 3189 /* Run the DMA and wait for the answer */
43f66a6c
JK
3190 rc = ipw_fw_dma_kick(priv);
3191 if (rc) {
3192 IPW_ERROR("dmaKick Failed\n");
3193 goto out;
3194 }
3195
3196 rc = ipw_fw_dma_wait(priv);
3197 if (rc) {
3198 IPW_ERROR("dmaWaitSync Failed\n");
3199 goto out;
3200 }
0edd5b44
JG
3201 out:
3202 pci_free_consistent(priv->pci_dev, len, shared_virt, shared_phys);
43f66a6c
JK
3203 return rc;
3204}
3205
3206/* stop nic */
3207static int ipw_stop_nic(struct ipw_priv *priv)
3208{
3209 int rc = 0;
3210
0edd5b44 3211 /* stop */
b095c381 3212 ipw_write32(priv, IPW_RESET_REG, IPW_RESET_REG_STOP_MASTER);
bf79451e 3213
b095c381
JK
3214 rc = ipw_poll_bit(priv, IPW_RESET_REG,
3215 IPW_RESET_REG_MASTER_DISABLED, 500);
43f66a6c 3216 if (rc < 0) {
c7b6a674 3217 IPW_ERROR("wait for reg master disabled failed after 500ms\n");
43f66a6c 3218 return rc;
bf79451e 3219 }
43f66a6c 3220
b095c381 3221 ipw_set_bit(priv, IPW_RESET_REG, CBD_RESET_REG_PRINCETON_RESET);
bf79451e 3222
43f66a6c
JK
3223 return rc;
3224}
3225
3226static void ipw_start_nic(struct ipw_priv *priv)
3227{
3228 IPW_DEBUG_TRACE(">>\n");
3229
0edd5b44 3230 /* prvHwStartNic release ARC */
b095c381
JK
3231 ipw_clear_bit(priv, IPW_RESET_REG,
3232 IPW_RESET_REG_MASTER_DISABLED |
3233 IPW_RESET_REG_STOP_MASTER |
43f66a6c 3234 CBD_RESET_REG_PRINCETON_RESET);
bf79451e 3235
43f66a6c 3236 /* enable power management */
b095c381
JK
3237 ipw_set_bit(priv, IPW_GP_CNTRL_RW,
3238 IPW_GP_CNTRL_BIT_HOST_ALLOWS_STANDBY);
43f66a6c
JK
3239
3240 IPW_DEBUG_TRACE("<<\n");
3241}
bf79451e 3242
43f66a6c
JK
3243static int ipw_init_nic(struct ipw_priv *priv)
3244{
3245 int rc;
3246
3247 IPW_DEBUG_TRACE(">>\n");
bf79451e 3248 /* reset */
43f66a6c
JK
3249 /*prvHwInitNic */
3250 /* set "initialization complete" bit to move adapter to D0 state */
b095c381 3251 ipw_set_bit(priv, IPW_GP_CNTRL_RW, IPW_GP_CNTRL_BIT_INIT_DONE);
43f66a6c
JK
3252
3253 /* low-level PLL activation */
b095c381
JK
3254 ipw_write32(priv, IPW_READ_INT_REGISTER,
3255 IPW_BIT_INT_HOST_SRAM_READ_INT_REGISTER);
43f66a6c
JK
3256
3257 /* wait for clock stabilization */
b095c381
JK
3258 rc = ipw_poll_bit(priv, IPW_GP_CNTRL_RW,
3259 IPW_GP_CNTRL_BIT_CLOCK_READY, 250);
0edd5b44 3260 if (rc < 0)
43f66a6c
JK
3261 IPW_DEBUG_INFO("FAILED wait for clock stablization\n");
3262
3263 /* assert SW reset */
b095c381 3264 ipw_set_bit(priv, IPW_RESET_REG, IPW_RESET_REG_SW_RESET);
43f66a6c
JK
3265
3266 udelay(10);
3267
3268 /* set "initialization complete" bit to move adapter to D0 state */
b095c381 3269 ipw_set_bit(priv, IPW_GP_CNTRL_RW, IPW_GP_CNTRL_BIT_INIT_DONE);
43f66a6c
JK
3270
3271 IPW_DEBUG_TRACE(">>\n");
3272 return 0;
3273}
3274
bf79451e 3275/* Call this function from process context, it will sleep in request_firmware.
43f66a6c
JK
3276 * Probe is an ok place to call this from.
3277 */
3278static int ipw_reset_nic(struct ipw_priv *priv)
3279{
3280 int rc = 0;
a613bffd 3281 unsigned long flags;
43f66a6c
JK
3282
3283 IPW_DEBUG_TRACE(">>\n");
bf79451e 3284
43f66a6c 3285 rc = ipw_init_nic(priv);
bf79451e 3286
a613bffd 3287 spin_lock_irqsave(&priv->lock, flags);
43f66a6c
JK
3288 /* Clear the 'host command active' bit... */
3289 priv->status &= ~STATUS_HCMD_ACTIVE;
3290 wake_up_interruptible(&priv->wait_command_queue);
afbf30a2
JK
3291 priv->status &= ~(STATUS_SCANNING | STATUS_SCAN_ABORTING);
3292 wake_up_interruptible(&priv->wait_state);
a613bffd 3293 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c
JK
3294
3295 IPW_DEBUG_TRACE("<<\n");
3296 return rc;
bf79451e 3297}
43f66a6c 3298
9006ea75
JK
3299
3300struct ipw_fw {
0070f8c7
ZY
3301 __le32 ver;
3302 __le32 boot_size;
3303 __le32 ucode_size;
3304 __le32 fw_size;
9006ea75
JK
3305 u8 data[0];
3306};
3307
bf79451e 3308static int ipw_get_fw(struct ipw_priv *priv,
9006ea75 3309 const struct firmware **raw, const char *name)
43f66a6c 3310{
9006ea75 3311 struct ipw_fw *fw;
43f66a6c
JK
3312 int rc;
3313
3314 /* ask firmware_class module to get the boot firmware off disk */
9006ea75 3315 rc = request_firmware(raw, name, &priv->pci_dev->dev);
43f66a6c 3316 if (rc < 0) {
9006ea75 3317 IPW_ERROR("%s request_firmware failed: Reason %d\n", name, rc);
43f66a6c 3318 return rc;
bf79451e 3319 }
43f66a6c 3320
9006ea75
JK
3321 if ((*raw)->size < sizeof(*fw)) {
3322 IPW_ERROR("%s is too small (%zd)\n", name, (*raw)->size);
3323 return -EINVAL;
3324 }
3325
3326 fw = (void *)(*raw)->data;
3327
0070f8c7
ZY
3328 if ((*raw)->size < sizeof(*fw) + le32_to_cpu(fw->boot_size) +
3329 le32_to_cpu(fw->ucode_size) + le32_to_cpu(fw->fw_size)) {
9006ea75
JK
3330 IPW_ERROR("%s is too small or corrupt (%zd)\n",
3331 name, (*raw)->size);
43f66a6c
JK
3332 return -EINVAL;
3333 }
3334
9006ea75 3335 IPW_DEBUG_INFO("Read firmware '%s' image v%d.%d (%zd bytes)\n",
43f66a6c 3336 name,
9006ea75
JK
3337 le32_to_cpu(fw->ver) >> 16,
3338 le32_to_cpu(fw->ver) & 0xff,
3339 (*raw)->size - sizeof(*fw));
43f66a6c
JK
3340 return 0;
3341}
3342
b095c381 3343#define IPW_RX_BUF_SIZE (3000)
43f66a6c 3344
858119e1 3345static void ipw_rx_queue_reset(struct ipw_priv *priv,
43f66a6c
JK
3346 struct ipw_rx_queue *rxq)
3347{
3348 unsigned long flags;
3349 int i;
3350
3351 spin_lock_irqsave(&rxq->lock, flags);
3352
3353 INIT_LIST_HEAD(&rxq->rx_free);
3354 INIT_LIST_HEAD(&rxq->rx_used);
3355
3356 /* Fill the rx_used queue with _all_ of the Rx buffers */
3357 for (i = 0; i < RX_FREE_BUFFERS + RX_QUEUE_SIZE; i++) {
3358 /* In the reset function, these buffers may have been allocated
3359 * to an SKB, so we need to unmap and free potential storage */
3360 if (rxq->pool[i].skb != NULL) {
3361 pci_unmap_single(priv->pci_dev, rxq->pool[i].dma_addr,
b095c381 3362 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c 3363 dev_kfree_skb(rxq->pool[i].skb);
a613bffd 3364 rxq->pool[i].skb = NULL;
43f66a6c
JK
3365 }
3366 list_add_tail(&rxq->pool[i].list, &rxq->rx_used);
3367 }
bf79451e 3368
43f66a6c
JK
3369 /* Set us so that we have processed and used all buffers, but have
3370 * not restocked the Rx queue with fresh buffers */
3371 rxq->read = rxq->write = 0;
43f66a6c
JK
3372 rxq->free_count = 0;
3373 spin_unlock_irqrestore(&rxq->lock, flags);
3374}
3375
3376#ifdef CONFIG_PM
3377static int fw_loaded = 0;
9006ea75 3378static const struct firmware *raw = NULL;
afbf30a2
JK
3379
3380static void free_firmware(void)
3381{
3382 if (fw_loaded) {
9006ea75
JK
3383 release_firmware(raw);
3384 raw = NULL;
afbf30a2
JK
3385 fw_loaded = 0;
3386 }
3387}
3388#else
3389#define free_firmware() do {} while (0)
43f66a6c
JK
3390#endif
3391
3392static int ipw_load(struct ipw_priv *priv)
3393{
3394#ifndef CONFIG_PM
9006ea75 3395 const struct firmware *raw = NULL;
43f66a6c 3396#endif
9006ea75
JK
3397 struct ipw_fw *fw;
3398 u8 *boot_img, *ucode_img, *fw_img;
3399 u8 *name = NULL;
43f66a6c
JK
3400 int rc = 0, retries = 3;
3401
397ae121
ZY
3402 switch (priv->ieee->iw_mode) {
3403 case IW_MODE_ADHOC:
9006ea75 3404 name = "ipw2200-ibss.fw";
397ae121 3405 break;
b095c381 3406#ifdef CONFIG_IPW2200_MONITOR
397ae121 3407 case IW_MODE_MONITOR:
9006ea75 3408 name = "ipw2200-sniffer.fw";
397ae121 3409 break;
43f66a6c 3410#endif
397ae121 3411 case IW_MODE_INFRA:
9006ea75 3412 name = "ipw2200-bss.fw";
397ae121 3413 break;
9006ea75
JK
3414 }
3415
3416 if (!name) {
397ae121 3417 rc = -EINVAL;
9006ea75
JK
3418 goto error;
3419 }
3420
3421#ifdef CONFIG_PM
3422 if (!fw_loaded) {
3423#endif
3424 rc = ipw_get_fw(priv, &raw, name);
3425 if (rc < 0)
3426 goto error;
3427#ifdef CONFIG_PM
43f66a6c 3428 }
9006ea75
JK
3429#endif
3430
3431 fw = (void *)raw->data;
3432 boot_img = &fw->data[0];
0070f8c7
ZY
3433 ucode_img = &fw->data[le32_to_cpu(fw->boot_size)];
3434 fw_img = &fw->data[le32_to_cpu(fw->boot_size) +
3435 le32_to_cpu(fw->ucode_size)];
397ae121
ZY
3436
3437 if (rc < 0)
3438 goto error;
43f66a6c
JK
3439
3440 if (!priv->rxq)
3441 priv->rxq = ipw_rx_queue_alloc(priv);
3442 else
3443 ipw_rx_queue_reset(priv, priv->rxq);
3444 if (!priv->rxq) {
3445 IPW_ERROR("Unable to initialize Rx queue\n");
3446 goto error;
3447 }
3448
0edd5b44 3449 retry:
43f66a6c 3450 /* Ensure interrupts are disabled */
b095c381 3451 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
43f66a6c
JK
3452 priv->status &= ~STATUS_INT_ENABLED;
3453
3454 /* ack pending interrupts */
b095c381 3455 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
bf79451e 3456
43f66a6c
JK
3457 ipw_stop_nic(priv);
3458
3459 rc = ipw_reset_nic(priv);
397ae121 3460 if (rc < 0) {
43f66a6c
JK
3461 IPW_ERROR("Unable to reset NIC\n");
3462 goto error;
3463 }
3464
b095c381
JK
3465 ipw_zero_memory(priv, IPW_NIC_SRAM_LOWER_BOUND,
3466 IPW_NIC_SRAM_UPPER_BOUND - IPW_NIC_SRAM_LOWER_BOUND);
43f66a6c
JK
3467
3468 /* DMA the initial boot firmware into the device */
0070f8c7 3469 rc = ipw_load_firmware(priv, boot_img, le32_to_cpu(fw->boot_size));
43f66a6c 3470 if (rc < 0) {
a4f6bbb3 3471 IPW_ERROR("Unable to load boot firmware: %d\n", rc);
43f66a6c
JK
3472 goto error;
3473 }
3474
3475 /* kick start the device */
3476 ipw_start_nic(priv);
3477
c7b6a674 3478 /* wait for the device to finish its initial startup sequence */
b095c381
JK
3479 rc = ipw_poll_bit(priv, IPW_INTA_RW,
3480 IPW_INTA_BIT_FW_INITIALIZATION_DONE, 500);
43f66a6c
JK
3481 if (rc < 0) {
3482 IPW_ERROR("device failed to boot initial fw image\n");
3483 goto error;
3484 }
3485 IPW_DEBUG_INFO("initial device response after %dms\n", rc);
3486
bf79451e 3487 /* ack fw init done interrupt */
b095c381 3488 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_BIT_FW_INITIALIZATION_DONE);
43f66a6c
JK
3489
3490 /* DMA the ucode into the device */
0070f8c7 3491 rc = ipw_load_ucode(priv, ucode_img, le32_to_cpu(fw->ucode_size));
43f66a6c 3492 if (rc < 0) {
a4f6bbb3 3493 IPW_ERROR("Unable to load ucode: %d\n", rc);
43f66a6c
JK
3494 goto error;
3495 }
bf79451e 3496
43f66a6c
JK
3497 /* stop nic */
3498 ipw_stop_nic(priv);
3499
3500 /* DMA bss firmware into the device */
0070f8c7 3501 rc = ipw_load_firmware(priv, fw_img, le32_to_cpu(fw->fw_size));
0edd5b44 3502 if (rc < 0) {
a4f6bbb3 3503 IPW_ERROR("Unable to load firmware: %d\n", rc);
43f66a6c
JK
3504 goto error;
3505 }
397ae121
ZY
3506#ifdef CONFIG_PM
3507 fw_loaded = 1;
3508#endif
3509
43f66a6c
JK
3510 ipw_write32(priv, IPW_EEPROM_LOAD_DISABLE, 0);
3511
3512 rc = ipw_queue_reset(priv);
397ae121 3513 if (rc < 0) {
43f66a6c
JK
3514 IPW_ERROR("Unable to initialize queues\n");
3515 goto error;
3516 }
3517
3518 /* Ensure interrupts are disabled */
b095c381 3519 ipw_write32(priv, IPW_INTA_MASK_R, ~IPW_INTA_MASK_ALL);
c848d0af 3520 /* ack pending interrupts */
b095c381 3521 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
bf79451e 3522
43f66a6c
JK
3523 /* kick start the device */
3524 ipw_start_nic(priv);
3525
b095c381 3526 if (ipw_read32(priv, IPW_INTA_RW) & IPW_INTA_BIT_PARITY_ERROR) {
43f66a6c
JK
3527 if (retries > 0) {
3528 IPW_WARNING("Parity error. Retrying init.\n");
3529 retries--;
3530 goto retry;
3531 }
3532
3533 IPW_ERROR("TODO: Handle parity error -- schedule restart?\n");
3534 rc = -EIO;
3535 goto error;
3536 }
3537
3538 /* wait for the device */
b095c381
JK
3539 rc = ipw_poll_bit(priv, IPW_INTA_RW,
3540 IPW_INTA_BIT_FW_INITIALIZATION_DONE, 500);
43f66a6c 3541 if (rc < 0) {
c7b6a674 3542 IPW_ERROR("device failed to start within 500ms\n");
43f66a6c
JK
3543 goto error;
3544 }
3545 IPW_DEBUG_INFO("device response after %dms\n", rc);
3546
3547 /* ack fw init done interrupt */
b095c381 3548 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_BIT_FW_INITIALIZATION_DONE);
43f66a6c
JK
3549
3550 /* read eeprom data and initialize the eeprom region of sram */
3551 priv->eeprom_delay = 1;
bf79451e 3552 ipw_eeprom_init_sram(priv);
43f66a6c
JK
3553
3554 /* enable interrupts */
3555 ipw_enable_interrupts(priv);
3556
3557 /* Ensure our queue has valid packets */
3558 ipw_rx_queue_replenish(priv);
3559
b095c381 3560 ipw_write32(priv, IPW_RX_READ_INDEX, priv->rxq->read);
43f66a6c
JK
3561
3562 /* ack pending interrupts */
b095c381 3563 ipw_write32(priv, IPW_INTA_RW, IPW_INTA_MASK_ALL);
43f66a6c
JK
3564
3565#ifndef CONFIG_PM
9006ea75 3566 release_firmware(raw);
43f66a6c
JK
3567#endif
3568 return 0;
3569
0edd5b44 3570 error:
43f66a6c
JK
3571 if (priv->rxq) {
3572 ipw_rx_queue_free(priv, priv->rxq);
3573 priv->rxq = NULL;
3574 }
3575 ipw_tx_queue_free(priv);
9006ea75
JK
3576 if (raw)
3577 release_firmware(raw);
43f66a6c
JK
3578#ifdef CONFIG_PM
3579 fw_loaded = 0;
9006ea75 3580 raw = NULL;
43f66a6c
JK
3581#endif
3582
3583 return rc;
3584}
3585
bf79451e 3586/**
43f66a6c
JK
3587 * DMA services
3588 *
3589 * Theory of operation
3590 *
3591 * A queue is a circular buffers with 'Read' and 'Write' pointers.
3592 * 2 empty entries always kept in the buffer to protect from overflow.
3593 *
3594 * For Tx queue, there are low mark and high mark limits. If, after queuing
bf79451e
JG
3595 * the packet for Tx, free space become < low mark, Tx queue stopped. When
3596 * reclaiming packets (on 'tx done IRQ), if free space become > high mark,
43f66a6c
JK
3597 * Tx queue resumed.
3598 *
3599 * The IPW operates with six queues, one receive queue in the device's
3600 * sram, one transmit queue for sending commands to the device firmware,
bf79451e 3601 * and four transmit queues for data.
43f66a6c 3602 *
bf79451e 3603 * The four transmit queues allow for performing quality of service (qos)
43f66a6c 3604 * transmissions as per the 802.11 protocol. Currently Linux does not
bf79451e 3605 * provide a mechanism to the user for utilizing prioritized queues, so
43f66a6c
JK
3606 * we only utilize the first data transmit queue (queue1).
3607 */
3608
3609/**
3610 * Driver allocates buffers of this size for Rx
3611 */
3612
943dbef4
DW
3613/**
3614 * ipw_rx_queue_space - Return number of free slots available in queue.
3615 */
3616static int ipw_rx_queue_space(const struct ipw_rx_queue *q)
3617{
3618 int s = q->read - q->write;
3619 if (s <= 0)
3620 s += RX_QUEUE_SIZE;
3621 /* keep some buffer to not confuse full and empty queue */
3622 s -= 2;
3623 if (s < 0)
3624 s = 0;
3625 return s;
3626}
3627
3628static inline int ipw_tx_queue_space(const struct clx2_queue *q)
43f66a6c
JK
3629{
3630 int s = q->last_used - q->first_empty;
3631 if (s <= 0)
3632 s += q->n_bd;
3633 s -= 2; /* keep some reserve to not confuse empty and full situations */
3634 if (s < 0)
3635 s = 0;
3636 return s;
3637}
3638
3639static inline int ipw_queue_inc_wrap(int index, int n_bd)
3640{
3641 return (++index == n_bd) ? 0 : index;
3642}
3643
3644/**
3645 * Initialize common DMA queue structure
bf79451e 3646 *
43f66a6c
JK
3647 * @param q queue to init
3648 * @param count Number of BD's to allocate. Should be power of 2
3649 * @param read_register Address for 'read' register
3650 * (not offset within BAR, full address)
3651 * @param write_register Address for 'write' register
3652 * (not offset within BAR, full address)
3653 * @param base_register Address for 'base' register
3654 * (not offset within BAR, full address)
3655 * @param size Address for 'size' register
3656 * (not offset within BAR, full address)
3657 */
bf79451e 3658static void ipw_queue_init(struct ipw_priv *priv, struct clx2_queue *q,
0edd5b44 3659 int count, u32 read, u32 write, u32 base, u32 size)
43f66a6c
JK
3660{
3661 q->n_bd = count;
3662
3663 q->low_mark = q->n_bd / 4;
3664 if (q->low_mark < 4)
3665 q->low_mark = 4;
3666
3667 q->high_mark = q->n_bd / 8;
3668 if (q->high_mark < 2)
3669 q->high_mark = 2;
3670
3671 q->first_empty = q->last_used = 0;
3672 q->reg_r = read;
3673 q->reg_w = write;
3674
3675 ipw_write32(priv, base, q->dma_addr);
3676 ipw_write32(priv, size, count);
3677 ipw_write32(priv, read, 0);
3678 ipw_write32(priv, write, 0);
3679
3680 _ipw_read32(priv, 0x90);
3681}
3682
bf79451e 3683static int ipw_queue_tx_init(struct ipw_priv *priv,
43f66a6c 3684 struct clx2_tx_queue *q,
0edd5b44 3685 int count, u32 read, u32 write, u32 base, u32 size)
43f66a6c
JK
3686{
3687 struct pci_dev *dev = priv->pci_dev;
3688
3689 q->txb = kmalloc(sizeof(q->txb[0]) * count, GFP_KERNEL);
3690 if (!q->txb) {
3691 IPW_ERROR("vmalloc for auxilary BD structures failed\n");
3692 return -ENOMEM;
3693 }
3694
0edd5b44
JG
3695 q->bd =
3696 pci_alloc_consistent(dev, sizeof(q->bd[0]) * count, &q->q.dma_addr);
43f66a6c 3697 if (!q->bd) {
aaa4d308 3698 IPW_ERROR("pci_alloc_consistent(%zd) failed\n",
0edd5b44 3699 sizeof(q->bd[0]) * count);
43f66a6c
JK
3700 kfree(q->txb);
3701 q->txb = NULL;
3702 return -ENOMEM;
3703 }
3704
3705 ipw_queue_init(priv, &q->q, count, read, write, base, size);
3706 return 0;
3707}
3708
3709/**
3710 * Free one TFD, those at index [txq->q.last_used].
3711 * Do NOT advance any indexes
bf79451e 3712 *
43f66a6c
JK
3713 * @param dev
3714 * @param txq
3715 */
3716static void ipw_queue_tx_free_tfd(struct ipw_priv *priv,
3717 struct clx2_tx_queue *txq)
3718{
3719 struct tfd_frame *bd = &txq->bd[txq->q.last_used];
3720 struct pci_dev *dev = priv->pci_dev;
3721 int i;
bf79451e 3722
43f66a6c
JK
3723 /* classify bd */
3724 if (bd->control_flags.message_type == TX_HOST_COMMAND_TYPE)
3725 /* nothing to cleanup after for host commands */
3726 return;
3727
3728 /* sanity check */
a613bffd
JK
3729 if (le32_to_cpu(bd->u.data.num_chunks) > NUM_TFD_CHUNKS) {
3730 IPW_ERROR("Too many chunks: %i\n",
3731 le32_to_cpu(bd->u.data.num_chunks));
43f66a6c
JK
3732 /** @todo issue fatal error, it is quite serious situation */
3733 return;
3734 }
3735
3736 /* unmap chunks if any */
a613bffd
JK
3737 for (i = 0; i < le32_to_cpu(bd->u.data.num_chunks); i++) {
3738 pci_unmap_single(dev, le32_to_cpu(bd->u.data.chunk_ptr[i]),
3739 le16_to_cpu(bd->u.data.chunk_len[i]),
3740 PCI_DMA_TODEVICE);
43f66a6c
JK
3741 if (txq->txb[txq->q.last_used]) {
3742 ieee80211_txb_free(txq->txb[txq->q.last_used]);
3743 txq->txb[txq->q.last_used] = NULL;
3744 }
3745 }
3746}
3747
3748/**
3749 * Deallocate DMA queue.
bf79451e 3750 *
43f66a6c
JK
3751 * Empty queue by removing and destroying all BD's.
3752 * Free all buffers.
bf79451e 3753 *
43f66a6c
JK
3754 * @param dev
3755 * @param q
3756 */
0edd5b44 3757static void ipw_queue_tx_free(struct ipw_priv *priv, struct clx2_tx_queue *txq)
43f66a6c
JK
3758{
3759 struct clx2_queue *q = &txq->q;
3760 struct pci_dev *dev = priv->pci_dev;
3761
bf79451e
JG
3762 if (q->n_bd == 0)
3763 return;
43f66a6c
JK
3764
3765 /* first, empty all BD's */
3766 for (; q->first_empty != q->last_used;
3767 q->last_used = ipw_queue_inc_wrap(q->last_used, q->n_bd)) {
3768 ipw_queue_tx_free_tfd(priv, txq);
3769 }
bf79451e 3770
43f66a6c 3771 /* free buffers belonging to queue itself */
0edd5b44 3772 pci_free_consistent(dev, sizeof(txq->bd[0]) * q->n_bd, txq->bd,
43f66a6c
JK
3773 q->dma_addr);
3774 kfree(txq->txb);
3775
3776 /* 0 fill whole structure */
3777 memset(txq, 0, sizeof(*txq));
3778}
3779
43f66a6c
JK
3780/**
3781 * Destroy all DMA queues and structures
bf79451e 3782 *
43f66a6c
JK
3783 * @param priv
3784 */
3785static void ipw_tx_queue_free(struct ipw_priv *priv)
3786{
3787 /* Tx CMD queue */
3788 ipw_queue_tx_free(priv, &priv->txq_cmd);
3789
3790 /* Tx queues */
3791 ipw_queue_tx_free(priv, &priv->txq[0]);
3792 ipw_queue_tx_free(priv, &priv->txq[1]);
3793 ipw_queue_tx_free(priv, &priv->txq[2]);
3794 ipw_queue_tx_free(priv, &priv->txq[3]);
3795}
3796
858119e1 3797static void ipw_create_bssid(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK
3798{
3799 /* First 3 bytes are manufacturer */
3800 bssid[0] = priv->mac_addr[0];
3801 bssid[1] = priv->mac_addr[1];
3802 bssid[2] = priv->mac_addr[2];
3803
3804 /* Last bytes are random */
0edd5b44 3805 get_random_bytes(&bssid[3], ETH_ALEN - 3);
43f66a6c 3806
0edd5b44
JG
3807 bssid[0] &= 0xfe; /* clear multicast bit */
3808 bssid[0] |= 0x02; /* set local assignment bit (IEEE802) */
43f66a6c
JK
3809}
3810
858119e1 3811static u8 ipw_add_station(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK
3812{
3813 struct ipw_station_entry entry;
3814 int i;
3815
3816 for (i = 0; i < priv->num_stations; i++) {
3817 if (!memcmp(priv->stations[i], bssid, ETH_ALEN)) {
3818 /* Another node is active in network */
3819 priv->missed_adhoc_beacons = 0;
3820 if (!(priv->config & CFG_STATIC_CHANNEL))
3821 /* when other nodes drop out, we drop out */
3822 priv->config &= ~CFG_ADHOC_PERSIST;
3823
3824 return i;
3825 }
3826 }
3827
3828 if (i == MAX_STATIONS)
3829 return IPW_INVALID_STATION;
3830
e174961c 3831 IPW_DEBUG_SCAN("Adding AdHoc station: %pM\n", bssid);
43f66a6c
JK
3832
3833 entry.reserved = 0;
3834 entry.support_mode = 0;
3835 memcpy(entry.mac_addr, bssid, ETH_ALEN);
3836 memcpy(priv->stations[i], bssid, ETH_ALEN);
3837 ipw_write_direct(priv, IPW_STATION_TABLE_LOWER + i * sizeof(entry),
0edd5b44 3838 &entry, sizeof(entry));
43f66a6c
JK
3839 priv->num_stations++;
3840
3841 return i;
3842}
3843
858119e1 3844static u8 ipw_find_station(struct ipw_priv *priv, u8 * bssid)
43f66a6c
JK
3845{
3846 int i;
3847
bf79451e
JG
3848 for (i = 0; i < priv->num_stations; i++)
3849 if (!memcmp(priv->stations[i], bssid, ETH_ALEN))
43f66a6c
JK
3850 return i;
3851
3852 return IPW_INVALID_STATION;
3853}
3854
3855static void ipw_send_disassociate(struct ipw_priv *priv, int quiet)
3856{
3857 int err;
3858
7b99659f
HL
3859 if (priv->status & STATUS_ASSOCIATING) {
3860 IPW_DEBUG_ASSOC("Disassociating while associating.\n");
3861 queue_work(priv->workqueue, &priv->disassociate);
3862 return;
3863 }
3864
3865 if (!(priv->status & STATUS_ASSOCIATED)) {
43f66a6c
JK
3866 IPW_DEBUG_ASSOC("Disassociating while not associated.\n");
3867 return;
3868 }
3869
e174961c 3870 IPW_DEBUG_ASSOC("Disassocation attempt from %pM "
43f66a6c 3871 "on channel %d.\n",
e174961c 3872 priv->assoc_request.bssid,
43f66a6c
JK
3873 priv->assoc_request.channel);
3874
3875 priv->status &= ~(STATUS_ASSOCIATING | STATUS_ASSOCIATED);
3876 priv->status |= STATUS_DISASSOCIATING;
3877
3878 if (quiet)
3879 priv->assoc_request.assoc_type = HC_DISASSOC_QUIET;
3880 else
3881 priv->assoc_request.assoc_type = HC_DISASSOCIATE;
e6324726 3882
43f66a6c
JK
3883 err = ipw_send_associate(priv, &priv->assoc_request);
3884 if (err) {
3885 IPW_DEBUG_HC("Attempt to send [dis]associate command "
3886 "failed.\n");
3887 return;
3888 }
3889
3890}
3891
c848d0af 3892static int ipw_disassociate(void *data)
43f66a6c 3893{
c848d0af
JK
3894 struct ipw_priv *priv = data;
3895 if (!(priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)))
3896 return 0;
43f66a6c 3897 ipw_send_disassociate(data, 0);
c848d0af 3898 return 1;
43f66a6c
JK
3899}
3900
c4028958 3901static void ipw_bg_disassociate(struct work_struct *work)
43f66a6c 3902{
c4028958
DH
3903 struct ipw_priv *priv =
3904 container_of(work, struct ipw_priv, disassociate);
4644151b 3905 mutex_lock(&priv->mutex);
c4028958 3906 ipw_disassociate(priv);
4644151b 3907 mutex_unlock(&priv->mutex);
43f66a6c
JK
3908}
3909
c4028958 3910static void ipw_system_config(struct work_struct *work)
d8bad6df 3911{
c4028958
DH
3912 struct ipw_priv *priv =
3913 container_of(work, struct ipw_priv, system_config);
d685b8c2
ZY
3914
3915#ifdef CONFIG_IPW2200_PROMISCUOUS
3916 if (priv->prom_net_dev && netif_running(priv->prom_net_dev)) {
3917 priv->sys_config.accept_all_data_frames = 1;
3918 priv->sys_config.accept_non_directed_frames = 1;
3919 priv->sys_config.accept_all_mgmt_bcpr = 1;
3920 priv->sys_config.accept_all_mgmt_frames = 1;
3921 }
3922#endif
3923
3924 ipw_send_system_config(priv);
43f66a6c
JK
3925}
3926
3927struct ipw_status_code {
3928 u16 status;
3929 const char *reason;
3930};
3931
3932static const struct ipw_status_code ipw_status_codes[] = {
3933 {0x00, "Successful"},
3934 {0x01, "Unspecified failure"},
3935 {0x0A, "Cannot support all requested capabilities in the "
3936 "Capability information field"},
3937 {0x0B, "Reassociation denied due to inability to confirm that "
3938 "association exists"},
3939 {0x0C, "Association denied due to reason outside the scope of this "
3940 "standard"},
0edd5b44
JG
3941 {0x0D,
3942 "Responding station does not support the specified authentication "
43f66a6c 3943 "algorithm"},
0edd5b44
JG
3944 {0x0E,
3945 "Received an Authentication frame with authentication sequence "
43f66a6c
JK
3946 "transaction sequence number out of expected sequence"},
3947 {0x0F, "Authentication rejected because of challenge failure"},
3948 {0x10, "Authentication rejected due to timeout waiting for next "
3949 "frame in sequence"},
3950 {0x11, "Association denied because AP is unable to handle additional "
3951 "associated stations"},
0edd5b44
JG
3952 {0x12,
3953 "Association denied due to requesting station not supporting all "
43f66a6c 3954 "of the datarates in the BSSBasicServiceSet Parameter"},
0edd5b44
JG
3955 {0x13,
3956 "Association denied due to requesting station not supporting "
43f66a6c 3957 "short preamble operation"},
0edd5b44
JG
3958 {0x14,
3959 "Association denied due to requesting station not supporting "
43f66a6c 3960 "PBCC encoding"},
0edd5b44
JG
3961 {0x15,
3962 "Association denied due to requesting station not supporting "
43f66a6c 3963 "channel agility"},
0edd5b44
JG
3964 {0x19,
3965 "Association denied due to requesting station not supporting "
43f66a6c 3966 "short slot operation"},
0edd5b44
JG
3967 {0x1A,
3968 "Association denied due to requesting station not supporting "
43f66a6c
JK
3969 "DSSS-OFDM operation"},
3970 {0x28, "Invalid Information Element"},
3971 {0x29, "Group Cipher is not valid"},
3972 {0x2A, "Pairwise Cipher is not valid"},
3973 {0x2B, "AKMP is not valid"},
3974 {0x2C, "Unsupported RSN IE version"},
3975 {0x2D, "Invalid RSN IE Capabilities"},
3976 {0x2E, "Cipher suite is rejected per security policy"},
3977};
3978
bf79451e 3979static const char *ipw_get_status_code(u16 status)
43f66a6c
JK
3980{
3981 int i;
bf79451e 3982 for (i = 0; i < ARRAY_SIZE(ipw_status_codes); i++)
ea2b26e0 3983 if (ipw_status_codes[i].status == (status & 0xff))
43f66a6c
JK
3984 return ipw_status_codes[i].reason;
3985 return "Unknown status value.";
3986}
43f66a6c
JK
3987
3988static void inline average_init(struct average *avg)
3989{
3990 memset(avg, 0, sizeof(*avg));
3991}
3992
00d21de5
ZY
3993#define DEPTH_RSSI 8
3994#define DEPTH_NOISE 16
3995static s16 exponential_average(s16 prev_avg, s16 val, u8 depth)
3996{
3997 return ((depth-1)*prev_avg + val)/depth;
3998}
3999
858119e1 4000static void average_add(struct average *avg, s16 val)
43f66a6c
JK
4001{
4002 avg->sum -= avg->entries[avg->pos];
4003 avg->sum += val;
4004 avg->entries[avg->pos++] = val;
4005 if (unlikely(avg->pos == AVG_ENTRIES)) {
4006 avg->init = 1;
4007 avg->pos = 0;
4008 }
4009}
4010
858119e1 4011static s16 average_value(struct average *avg)
43f66a6c
JK
4012{
4013 if (!unlikely(avg->init)) {
4014 if (avg->pos)
4015 return avg->sum / avg->pos;
4016 return 0;
4017 }
4018
4019 return avg->sum / AVG_ENTRIES;
4020}
4021
4022static void ipw_reset_stats(struct ipw_priv *priv)
4023{
4024 u32 len = sizeof(u32);
4025
4026 priv->quality = 0;
4027
4028 average_init(&priv->average_missed_beacons);
00d21de5
ZY
4029 priv->exp_avg_rssi = -60;
4030 priv->exp_avg_noise = -85 + 0x100;
43f66a6c
JK
4031
4032 priv->last_rate = 0;
4033 priv->last_missed_beacons = 0;
4034 priv->last_rx_packets = 0;
4035 priv->last_tx_packets = 0;
4036 priv->last_tx_failures = 0;
bf79451e 4037
43f66a6c
JK
4038 /* Firmware managed, reset only when NIC is restarted, so we have to
4039 * normalize on the current value */
bf79451e 4040 ipw_get_ordinal(priv, IPW_ORD_STAT_RX_ERR_CRC,
43f66a6c 4041 &priv->last_rx_err, &len);
bf79451e 4042 ipw_get_ordinal(priv, IPW_ORD_STAT_TX_FAILURE,
43f66a6c
JK
4043 &priv->last_tx_failures, &len);
4044
4045 /* Driver managed, reset with each association */
4046 priv->missed_adhoc_beacons = 0;
4047 priv->missed_beacons = 0;
4048 priv->tx_packets = 0;
4049 priv->rx_packets = 0;
4050
4051}
4052
858119e1 4053static u32 ipw_get_max_rate(struct ipw_priv *priv)
43f66a6c
JK
4054{
4055 u32 i = 0x80000000;
4056 u32 mask = priv->rates_mask;
4057 /* If currently associated in B mode, restrict the maximum
4058 * rate match to B rates */
4059 if (priv->assoc_request.ieee_mode == IPW_B_MODE)
4060 mask &= IEEE80211_CCK_RATES_MASK;
4061
4062 /* TODO: Verify that the rate is supported by the current rates
4063 * list. */
4064
0edd5b44
JG
4065 while (i && !(mask & i))
4066 i >>= 1;
43f66a6c 4067 switch (i) {
ea2b26e0
JK
4068 case IEEE80211_CCK_RATE_1MB_MASK:
4069 return 1000000;
4070 case IEEE80211_CCK_RATE_2MB_MASK:
4071 return 2000000;
4072 case IEEE80211_CCK_RATE_5MB_MASK:
4073 return 5500000;
4074 case IEEE80211_OFDM_RATE_6MB_MASK:
4075 return 6000000;
4076 case IEEE80211_OFDM_RATE_9MB_MASK:
4077 return 9000000;
4078 case IEEE80211_CCK_RATE_11MB_MASK:
4079 return 11000000;
4080 case IEEE80211_OFDM_RATE_12MB_MASK:
4081 return 12000000;
4082 case IEEE80211_OFDM_RATE_18MB_MASK:
4083 return 18000000;
4084 case IEEE80211_OFDM_RATE_24MB_MASK:
4085 return 24000000;
4086 case IEEE80211_OFDM_RATE_36MB_MASK:
4087 return 36000000;
4088 case IEEE80211_OFDM_RATE_48MB_MASK:
4089 return 48000000;
4090 case IEEE80211_OFDM_RATE_54MB_MASK:
4091 return 54000000;
43f66a6c
JK
4092 }
4093
bf79451e 4094 if (priv->ieee->mode == IEEE_B)
43f66a6c
JK
4095 return 11000000;
4096 else
4097 return 54000000;
4098}
4099
4100static u32 ipw_get_current_rate(struct ipw_priv *priv)
4101{
4102 u32 rate, len = sizeof(rate);
4103 int err;
4104
bf79451e 4105 if (!(priv->status & STATUS_ASSOCIATED))
43f66a6c
JK
4106 return 0;
4107
4108 if (priv->tx_packets > IPW_REAL_RATE_RX_PACKET_THRESHOLD) {
bf79451e 4109 err = ipw_get_ordinal(priv, IPW_ORD_STAT_TX_CURR_RATE, &rate,
43f66a6c
JK
4110 &len);
4111 if (err) {
4112 IPW_DEBUG_INFO("failed querying ordinals.\n");
4113 return 0;
4114 }
bf79451e 4115 } else
43f66a6c
JK
4116 return ipw_get_max_rate(priv);
4117
4118 switch (rate) {
ea2b26e0
JK
4119 case IPW_TX_RATE_1MB:
4120 return 1000000;
4121 case IPW_TX_RATE_2MB:
4122 return 2000000;
4123 case IPW_TX_RATE_5MB:
4124 return 5500000;
4125 case IPW_TX_RATE_6MB:
4126 return 6000000;
4127 case IPW_TX_RATE_9MB:
4128 return 9000000;
4129 case IPW_TX_RATE_11MB:
4130 return 11000000;
4131 case IPW_TX_RATE_12MB:
4132 return 12000000;
4133 case IPW_TX_RATE_18MB:
4134 return 18000000;
4135 case IPW_TX_RATE_24MB:
4136 return 24000000;
4137 case IPW_TX_RATE_36MB:
4138 return 36000000;
4139 case IPW_TX_RATE_48MB:
4140 return 48000000;
4141 case IPW_TX_RATE_54MB:
4142 return 54000000;
43f66a6c
JK
4143 }
4144
4145 return 0;
4146}
4147
43f66a6c
JK
4148#define IPW_STATS_INTERVAL (2 * HZ)
4149static void ipw_gather_stats(struct ipw_priv *priv)
4150{
4151 u32 rx_err, rx_err_delta, rx_packets_delta;
4152 u32 tx_failures, tx_failures_delta, tx_packets_delta;
4153 u32 missed_beacons_percent, missed_beacons_delta;
4154 u32 quality = 0;
4155 u32 len = sizeof(u32);
4156 s16 rssi;
bf79451e 4157 u32 beacon_quality, signal_quality, tx_quality, rx_quality,
0edd5b44 4158 rate_quality;
ea2b26e0 4159 u32 max_rate;
43f66a6c
JK
4160
4161 if (!(priv->status & STATUS_ASSOCIATED)) {
4162 priv->quality = 0;
4163 return;
4164 }
4165
4166 /* Update the statistics */
bf79451e 4167 ipw_get_ordinal(priv, IPW_ORD_STAT_MISSED_BEACONS,
43f66a6c 4168 &priv->missed_beacons, &len);
0edd5b44 4169 missed_beacons_delta = priv->missed_beacons - priv->last_missed_beacons;
43f66a6c
JK
4170 priv->last_missed_beacons = priv->missed_beacons;
4171 if (priv->assoc_request.beacon_interval) {
4172 missed_beacons_percent = missed_beacons_delta *
5b5e807f 4173 (HZ * le16_to_cpu(priv->assoc_request.beacon_interval)) /
0edd5b44 4174 (IPW_STATS_INTERVAL * 10);
43f66a6c
JK
4175 } else {
4176 missed_beacons_percent = 0;
4177 }
4178 average_add(&priv->average_missed_beacons, missed_beacons_percent);
4179
4180 ipw_get_ordinal(priv, IPW_ORD_STAT_RX_ERR_CRC, &rx_err, &len);
4181 rx_err_delta = rx_err - priv->last_rx_err;
4182 priv->last_rx_err = rx_err;
4183
4184 ipw_get_ordinal(priv, IPW_ORD_STAT_TX_FAILURE, &tx_failures, &len);
4185 tx_failures_delta = tx_failures - priv->last_tx_failures;
4186 priv->last_tx_failures = tx_failures;
4187
4188 rx_packets_delta = priv->rx_packets - priv->last_rx_packets;
4189 priv->last_rx_packets = priv->rx_packets;
4190
4191 tx_packets_delta = priv->tx_packets - priv->last_tx_packets;
4192 priv->last_tx_packets = priv->tx_packets;
4193
4194 /* Calculate quality based on the following:
bf79451e 4195 *
43f66a6c
JK
4196 * Missed beacon: 100% = 0, 0% = 70% missed
4197 * Rate: 60% = 1Mbs, 100% = Max
4198 * Rx and Tx errors represent a straight % of total Rx/Tx
4199 * RSSI: 100% = > -50, 0% = < -80
4200 * Rx errors: 100% = 0, 0% = 50% missed
bf79451e 4201 *
43f66a6c
JK
4202 * The lowest computed quality is used.
4203 *
4204 */
4205#define BEACON_THRESHOLD 5
4206 beacon_quality = 100 - missed_beacons_percent;
4207 if (beacon_quality < BEACON_THRESHOLD)
4208 beacon_quality = 0;
4209 else
bf79451e 4210 beacon_quality = (beacon_quality - BEACON_THRESHOLD) * 100 /
0edd5b44 4211 (100 - BEACON_THRESHOLD);
bf79451e 4212 IPW_DEBUG_STATS("Missed beacon: %3d%% (%d%%)\n",
43f66a6c 4213 beacon_quality, missed_beacons_percent);
bf79451e 4214
43f66a6c 4215 priv->last_rate = ipw_get_current_rate(priv);
ea2b26e0
JK
4216 max_rate = ipw_get_max_rate(priv);
4217 rate_quality = priv->last_rate * 40 / max_rate + 60;
43f66a6c
JK
4218 IPW_DEBUG_STATS("Rate quality : %3d%% (%dMbs)\n",
4219 rate_quality, priv->last_rate / 1000000);
bf79451e 4220
0edd5b44 4221 if (rx_packets_delta > 100 && rx_packets_delta + rx_err_delta)
bf79451e 4222 rx_quality = 100 - (rx_err_delta * 100) /
0edd5b44 4223 (rx_packets_delta + rx_err_delta);
43f66a6c
JK
4224 else
4225 rx_quality = 100;
4226 IPW_DEBUG_STATS("Rx quality : %3d%% (%u errors, %u packets)\n",
4227 rx_quality, rx_err_delta, rx_packets_delta);
bf79451e 4228
0edd5b44 4229 if (tx_packets_delta > 100 && tx_packets_delta + tx_failures_delta)
bf79451e 4230 tx_quality = 100 - (tx_failures_delta * 100) /
0edd5b44 4231 (tx_packets_delta + tx_failures_delta);
43f66a6c
JK
4232 else
4233 tx_quality = 100;
4234 IPW_DEBUG_STATS("Tx quality : %3d%% (%u errors, %u packets)\n",
4235 tx_quality, tx_failures_delta, tx_packets_delta);
bf79451e 4236
00d21de5 4237 rssi = priv->exp_avg_rssi;
c848d0af
JK
4238 signal_quality =
4239 (100 *
4240 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) *
4241 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) -
4242 (priv->ieee->perfect_rssi - rssi) *
4243 (15 * (priv->ieee->perfect_rssi - priv->ieee->worst_rssi) +
4244 62 * (priv->ieee->perfect_rssi - rssi))) /
4245 ((priv->ieee->perfect_rssi - priv->ieee->worst_rssi) *
4246 (priv->ieee->perfect_rssi - priv->ieee->worst_rssi));
4247 if (signal_quality > 100)
43f66a6c 4248 signal_quality = 100;
c848d0af 4249 else if (signal_quality < 1)
43f66a6c 4250 signal_quality = 0;
ea2b26e0 4251
61fb9ed9 4252 IPW_DEBUG_STATS("Signal level : %3d%% (%d dBm)\n",
43f66a6c 4253 signal_quality, rssi);
bf79451e
JG
4254
4255 quality = min(beacon_quality,
43f66a6c
JK
4256 min(rate_quality,
4257 min(tx_quality, min(rx_quality, signal_quality))));
4258 if (quality == beacon_quality)
0edd5b44
JG
4259 IPW_DEBUG_STATS("Quality (%d%%): Clamped to missed beacons.\n",
4260 quality);
43f66a6c 4261 if (quality == rate_quality)
0edd5b44
JG
4262 IPW_DEBUG_STATS("Quality (%d%%): Clamped to rate quality.\n",
4263 quality);
43f66a6c 4264 if (quality == tx_quality)
0edd5b44
JG
4265 IPW_DEBUG_STATS("Quality (%d%%): Clamped to Tx quality.\n",
4266 quality);
43f66a6c 4267 if (quality == rx_quality)
0edd5b44
JG
4268 IPW_DEBUG_STATS("Quality (%d%%): Clamped to Rx quality.\n",
4269 quality);
43f66a6c 4270 if (quality == signal_quality)
0edd5b44
JG
4271 IPW_DEBUG_STATS("Quality (%d%%): Clamped to signal quality.\n",
4272 quality);
43f66a6c
JK
4273
4274 priv->quality = quality;
bf79451e
JG
4275
4276 queue_delayed_work(priv->workqueue, &priv->gather_stats,
43f66a6c
JK
4277 IPW_STATS_INTERVAL);
4278}
4279
c4028958 4280static void ipw_bg_gather_stats(struct work_struct *work)
c848d0af 4281{
c4028958
DH
4282 struct ipw_priv *priv =
4283 container_of(work, struct ipw_priv, gather_stats.work);
4644151b 4284 mutex_lock(&priv->mutex);
c4028958 4285 ipw_gather_stats(priv);
4644151b 4286 mutex_unlock(&priv->mutex);
c848d0af
JK
4287}
4288
e7582561
BC
4289/* Missed beacon behavior:
4290 * 1st missed -> roaming_threshold, just wait, don't do any scan/roam.
4291 * roaming_threshold -> disassociate_threshold, scan and roam for better signal.
4292 * Above disassociate threshold, give up and stop scanning.
4293 * Roaming is disabled if disassociate_threshold <= roaming_threshold */
858119e1 4294static void ipw_handle_missed_beacon(struct ipw_priv *priv,
ea2b26e0
JK
4295 int missed_count)
4296{
4297 priv->notif_missed_beacons = missed_count;
4298
afbf30a2 4299 if (missed_count > priv->disassociate_threshold &&
ea2b26e0
JK
4300 priv->status & STATUS_ASSOCIATED) {
4301 /* If associated and we've hit the missed
4302 * beacon threshold, disassociate, turn
4303 * off roaming, and abort any active scans */
4304 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
afbf30a2 4305 IPW_DL_STATE | IPW_DL_ASSOC,
ea2b26e0
JK
4306 "Missed beacon: %d - disassociate\n", missed_count);
4307 priv->status &= ~STATUS_ROAMING;
a613bffd
JK
4308 if (priv->status & STATUS_SCANNING) {
4309 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
4310 IPW_DL_STATE,
4311 "Aborting scan with missed beacon.\n");
ea2b26e0 4312 queue_work(priv->workqueue, &priv->abort_scan);
a613bffd
JK
4313 }
4314
ea2b26e0
JK
4315 queue_work(priv->workqueue, &priv->disassociate);
4316 return;
4317 }
4318
4319 if (priv->status & STATUS_ROAMING) {
4320 /* If we are currently roaming, then just
4321 * print a debug statement... */
4322 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4323 "Missed beacon: %d - roam in progress\n",
4324 missed_count);
4325 return;
4326 }
4327
4bfdb91d
ZY
4328 if (roaming &&
4329 (missed_count > priv->roaming_threshold &&
4330 missed_count <= priv->disassociate_threshold)) {
ea2b26e0 4331 /* If we are not already roaming, set the ROAM
e7582561
BC
4332 * bit in the status and kick off a scan.
4333 * This can happen several times before we reach
4334 * disassociate_threshold. */
ea2b26e0
JK
4335 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
4336 "Missed beacon: %d - initiate "
4337 "roaming\n", missed_count);
4338 if (!(priv->status & STATUS_ROAMING)) {
4339 priv->status |= STATUS_ROAMING;
4340 if (!(priv->status & STATUS_SCANNING))
c4028958
DH
4341 queue_delayed_work(priv->workqueue,
4342 &priv->request_scan, 0);
ea2b26e0
JK
4343 }
4344 return;
4345 }
4346
4347 if (priv->status & STATUS_SCANNING) {
4348 /* Stop scan to keep fw from getting
4349 * stuck (only if we aren't roaming --
4350 * otherwise we'll never scan more than 2 or 3
4351 * channels..) */
b095c381
JK
4352 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF | IPW_DL_STATE,
4353 "Aborting scan with missed beacon.\n");
ea2b26e0
JK
4354 queue_work(priv->workqueue, &priv->abort_scan);
4355 }
4356
4357 IPW_DEBUG_NOTIF("Missed beacon: %d\n", missed_count);
ea2b26e0
JK
4358}
4359
0b531676
DW
4360static void ipw_scan_event(struct work_struct *work)
4361{
4362 union iwreq_data wrqu;
4363
4364 struct ipw_priv *priv =
4365 container_of(work, struct ipw_priv, scan_event.work);
4366
4367 wrqu.data.length = 0;
4368 wrqu.data.flags = 0;
4369 wireless_send_event(priv->net_dev, SIOCGIWSCAN, &wrqu, NULL);
4370}
4371
4372static void handle_scan_event(struct ipw_priv *priv)
4373{
4374 /* Only userspace-requested scan completion events go out immediately */
4375 if (!priv->user_requested_scan) {
4376 if (!delayed_work_pending(&priv->scan_event))
4377 queue_delayed_work(priv->workqueue, &priv->scan_event,
be84e3d6 4378 round_jiffies_relative(msecs_to_jiffies(4000)));
0b531676
DW
4379 } else {
4380 union iwreq_data wrqu;
4381
4382 priv->user_requested_scan = 0;
4383 cancel_delayed_work(&priv->scan_event);
4384
4385 wrqu.data.length = 0;
4386 wrqu.data.flags = 0;
4387 wireless_send_event(priv->net_dev, SIOCGIWSCAN, &wrqu, NULL);
4388 }
4389}
4390
43f66a6c
JK
4391/**
4392 * Handle host notification packet.
4393 * Called from interrupt routine
4394 */
858119e1 4395static void ipw_rx_notification(struct ipw_priv *priv,
43f66a6c
JK
4396 struct ipw_rx_notification *notif)
4397{
e62e1ee0 4398 u16 size = le16_to_cpu(notif->size);
a613bffd
JK
4399 notif->size = le16_to_cpu(notif->size);
4400
e62e1ee0 4401 IPW_DEBUG_NOTIF("type = %i (%d bytes)\n", notif->subtype, size);
bf79451e 4402
43f66a6c 4403 switch (notif->subtype) {
0edd5b44
JG
4404 case HOST_NOTIFICATION_STATUS_ASSOCIATED:{
4405 struct notif_association *assoc = &notif->u.assoc;
4406
4407 switch (assoc->state) {
4408 case CMAS_ASSOCIATED:{
4409 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4410 IPW_DL_ASSOC,
e174961c 4411 "associated: '%s' %pM \n",
7e272fcf
JL
4412 escape_ssid(priv->essid,
4413 priv->essid_len),
e174961c 4414 priv->bssid);
0edd5b44
JG
4415
4416 switch (priv->ieee->iw_mode) {
4417 case IW_MODE_INFRA:
4418 memcpy(priv->ieee->bssid,
4419 priv->bssid, ETH_ALEN);
4420 break;
4421
4422 case IW_MODE_ADHOC:
4423 memcpy(priv->ieee->bssid,
4424 priv->bssid, ETH_ALEN);
4425
4426 /* clear out the station table */
4427 priv->num_stations = 0;
4428
4429 IPW_DEBUG_ASSOC
4430 ("queueing adhoc check\n");
4431 queue_delayed_work(priv->
4432 workqueue,
4433 &priv->
4434 adhoc_check,
5b5e807f 4435 le16_to_cpu(priv->
0edd5b44 4436 assoc_request.
5b5e807f 4437 beacon_interval));
0edd5b44
JG
4438 break;
4439 }
4440
4441 priv->status &= ~STATUS_ASSOCIATING;
4442 priv->status |= STATUS_ASSOCIATED;
d8bad6df
ZY
4443 queue_work(priv->workqueue,
4444 &priv->system_config);
0edd5b44 4445
e43e3c1e 4446#ifdef CONFIG_IPW2200_QOS
afbf30a2
JK
4447#define IPW_GET_PACKET_STYPE(x) WLAN_FC_GET_STYPE( \
4448 le16_to_cpu(((struct ieee80211_hdr *)(x))->frame_ctl))
4449 if ((priv->status & STATUS_AUTH) &&
4450 (IPW_GET_PACKET_STYPE(&notif->u.raw)
4451 == IEEE80211_STYPE_ASSOC_RESP)) {
b095c381
JK
4452 if ((sizeof
4453 (struct
2b184d5b 4454 ieee80211_assoc_response)
e62e1ee0
AV
4455 <= size)
4456 && (size <= 2314)) {
b095c381
JK
4457 struct
4458 ieee80211_rx_stats
4459 stats = {
e62e1ee0 4460 .len = size - 1,
b095c381
JK
4461 };
4462
4463 IPW_DEBUG_QOS
4464 ("QoS Associate "
e62e1ee0 4465 "size %d\n", size);
b095c381
JK
4466 ieee80211_rx_mgt(priv->
4467 ieee,
4468 (struct
2b184d5b 4469 ieee80211_hdr_4addr
b095c381
JK
4470 *)
4471 &notif->u.raw, &stats);
4472 }
0edd5b44 4473 }
b095c381 4474#endif
0edd5b44 4475
a613bffd 4476 schedule_work(&priv->link_up);
43f66a6c 4477
0edd5b44
JG
4478 break;
4479 }
bf79451e 4480
0edd5b44
JG
4481 case CMAS_AUTHENTICATED:{
4482 if (priv->
4483 status & (STATUS_ASSOCIATED |
4484 STATUS_AUTH)) {
0edd5b44
JG
4485 struct notif_authenticate *auth
4486 = &notif->u.auth;
4487 IPW_DEBUG(IPW_DL_NOTIF |
4488 IPW_DL_STATE |
4489 IPW_DL_ASSOC,
4490 "deauthenticated: '%s' "
e174961c 4491 "%pM"
0edd5b44 4492 ": (0x%04X) - %s \n",
7e272fcf
JL
4493 escape_ssid(priv->
4494 essid,
4495 priv->
4496 essid_len),
e174961c 4497 priv->bssid,
83f7d57c 4498 le16_to_cpu(auth->status),
0edd5b44 4499 ipw_get_status_code
83f7d57c 4500 (le16_to_cpu
0edd5b44 4501 (auth->status)));
43f66a6c 4502
0edd5b44
JG
4503 priv->status &=
4504 ~(STATUS_ASSOCIATING |
4505 STATUS_AUTH |
4506 STATUS_ASSOCIATED);
4507
a613bffd 4508 schedule_work(&priv->link_down);
0edd5b44
JG
4509 break;
4510 }
4511
4512 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4513 IPW_DL_ASSOC,
e174961c 4514 "authenticated: '%s' %pM\n",
7e272fcf 4515 escape_ssid(priv->essid,
0edd5b44 4516 priv->essid_len),
e174961c 4517 priv->bssid);
0edd5b44
JG
4518 break;
4519 }
4520
4521 case CMAS_INIT:{
ea2b26e0
JK
4522 if (priv->status & STATUS_AUTH) {
4523 struct
4524 ieee80211_assoc_response
4525 *resp;
4526 resp =
4527 (struct
4528 ieee80211_assoc_response
4529 *)&notif->u.raw;
4530 IPW_DEBUG(IPW_DL_NOTIF |
4531 IPW_DL_STATE |
4532 IPW_DL_ASSOC,
4533 "association failed (0x%04X): %s\n",
83f7d57c 4534 le16_to_cpu(resp->status),
ea2b26e0 4535 ipw_get_status_code
83f7d57c 4536 (le16_to_cpu
ea2b26e0
JK
4537 (resp->status)));
4538 }
4539
0edd5b44
JG
4540 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4541 IPW_DL_ASSOC,
e174961c 4542 "disassociated: '%s' %pM \n",
7e272fcf 4543 escape_ssid(priv->essid,
0edd5b44 4544 priv->essid_len),
e174961c 4545 priv->bssid);
0edd5b44
JG
4546
4547 priv->status &=
4548 ~(STATUS_DISASSOCIATING |
4549 STATUS_ASSOCIATING |
4550 STATUS_ASSOCIATED | STATUS_AUTH);
b095c381
JK
4551 if (priv->assoc_network
4552 && (priv->assoc_network->
4553 capability &
4554 WLAN_CAPABILITY_IBSS))
4555 ipw_remove_current_network
4556 (priv);
0edd5b44 4557
a613bffd 4558 schedule_work(&priv->link_down);
0edd5b44 4559
0edd5b44
JG
4560 break;
4561 }
43f66a6c 4562
b095c381
JK
4563 case CMAS_RX_ASSOC_RESP:
4564 break;
4565
0edd5b44
JG
4566 default:
4567 IPW_ERROR("assoc: unknown (%d)\n",
4568 assoc->state);
43f66a6c 4569 break;
bf79451e 4570 }
43f66a6c 4571
43f66a6c
JK
4572 break;
4573 }
bf79451e 4574
0edd5b44
JG
4575 case HOST_NOTIFICATION_STATUS_AUTHENTICATE:{
4576 struct notif_authenticate *auth = &notif->u.auth;
4577 switch (auth->state) {
4578 case CMAS_AUTHENTICATED:
4579 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
e174961c 4580 "authenticated: '%s' %pM \n",
7e272fcf 4581 escape_ssid(priv->essid,
0edd5b44 4582 priv->essid_len),
e174961c 4583 priv->bssid);
0edd5b44
JG
4584 priv->status |= STATUS_AUTH;
4585 break;
43f66a6c 4586
0edd5b44
JG
4587 case CMAS_INIT:
4588 if (priv->status & STATUS_AUTH) {
4589 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4590 IPW_DL_ASSOC,
4591 "authentication failed (0x%04X): %s\n",
83f7d57c
AV
4592 le16_to_cpu(auth->status),
4593 ipw_get_status_code(le16_to_cpu
0edd5b44
JG
4594 (auth->
4595 status)));
4596 }
4597 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4598 IPW_DL_ASSOC,
e174961c 4599 "deauthenticated: '%s' %pM\n",
7e272fcf
JL
4600 escape_ssid(priv->essid,
4601 priv->essid_len),
e174961c 4602 priv->bssid);
bf79451e 4603
0edd5b44
JG
4604 priv->status &= ~(STATUS_ASSOCIATING |
4605 STATUS_AUTH |
4606 STATUS_ASSOCIATED);
43f66a6c 4607
a613bffd 4608 schedule_work(&priv->link_down);
0edd5b44 4609 break;
43f66a6c 4610
0edd5b44
JG
4611 case CMAS_TX_AUTH_SEQ_1:
4612 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4613 IPW_DL_ASSOC, "AUTH_SEQ_1\n");
4614 break;
4615 case CMAS_RX_AUTH_SEQ_2:
4616 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4617 IPW_DL_ASSOC, "AUTH_SEQ_2\n");
4618 break;
4619 case CMAS_AUTH_SEQ_1_PASS:
4620 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4621 IPW_DL_ASSOC, "AUTH_SEQ_1_PASS\n");
4622 break;
4623 case CMAS_AUTH_SEQ_1_FAIL:
4624 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4625 IPW_DL_ASSOC, "AUTH_SEQ_1_FAIL\n");
4626 break;
4627 case CMAS_TX_AUTH_SEQ_3:
4628 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4629 IPW_DL_ASSOC, "AUTH_SEQ_3\n");
4630 break;
4631 case CMAS_RX_AUTH_SEQ_4:
4632 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4633 IPW_DL_ASSOC, "RX_AUTH_SEQ_4\n");
4634 break;
4635 case CMAS_AUTH_SEQ_2_PASS:
4636 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4637 IPW_DL_ASSOC, "AUTH_SEQ_2_PASS\n");
4638 break;
4639 case CMAS_AUTH_SEQ_2_FAIL:
4640 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4641 IPW_DL_ASSOC, "AUT_SEQ_2_FAIL\n");
4642 break;
4643 case CMAS_TX_ASSOC:
4644 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4645 IPW_DL_ASSOC, "TX_ASSOC\n");
4646 break;
4647 case CMAS_RX_ASSOC_RESP:
4648 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4649 IPW_DL_ASSOC, "RX_ASSOC_RESP\n");
b095c381 4650
0edd5b44
JG
4651 break;
4652 case CMAS_ASSOCIATED:
4653 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE |
4654 IPW_DL_ASSOC, "ASSOCIATED\n");
4655 break;
4656 default:
4657 IPW_DEBUG_NOTIF("auth: failure - %d\n",
4658 auth->state);
4659 break;
43f66a6c 4660 }
43f66a6c
JK
4661 break;
4662 }
4663
0edd5b44
JG
4664 case HOST_NOTIFICATION_STATUS_SCAN_CHANNEL_RESULT:{
4665 struct notif_channel_result *x =
4666 &notif->u.channel_result;
43f66a6c 4667
e62e1ee0 4668 if (size == sizeof(*x)) {
0edd5b44
JG
4669 IPW_DEBUG_SCAN("Scan result for channel %d\n",
4670 x->channel_num);
4671 } else {
4672 IPW_DEBUG_SCAN("Scan result of wrong size %d "
4673 "(should be %zd)\n",
e62e1ee0 4674 size, sizeof(*x));
bf79451e 4675 }
43f66a6c
JK
4676 break;
4677 }
43f66a6c 4678
0edd5b44
JG
4679 case HOST_NOTIFICATION_STATUS_SCAN_COMPLETED:{
4680 struct notif_scan_complete *x = &notif->u.scan_complete;
e62e1ee0 4681 if (size == sizeof(*x)) {
0edd5b44
JG
4682 IPW_DEBUG_SCAN
4683 ("Scan completed: type %d, %d channels, "
4684 "%d status\n", x->scan_type,
4685 x->num_channels, x->status);
4686 } else {
4687 IPW_ERROR("Scan completed of wrong size %d "
4688 "(should be %zd)\n",
e62e1ee0 4689 size, sizeof(*x));
0edd5b44 4690 }
43f66a6c 4691
0edd5b44
JG
4692 priv->status &=
4693 ~(STATUS_SCANNING | STATUS_SCAN_ABORTING);
4694
a0e04ab3 4695 wake_up_interruptible(&priv->wait_state);
0edd5b44
JG
4696 cancel_delayed_work(&priv->scan_check);
4697
b095c381
JK
4698 if (priv->status & STATUS_EXIT_PENDING)
4699 break;
4700
4701 priv->ieee->scans++;
4702
4703#ifdef CONFIG_IPW2200_MONITOR
4704 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 4705 priv->status |= STATUS_SCAN_FORCED;
c4028958
DH
4706 queue_delayed_work(priv->workqueue,
4707 &priv->request_scan, 0);
b095c381
JK
4708 break;
4709 }
afbf30a2 4710 priv->status &= ~STATUS_SCAN_FORCED;
b095c381
JK
4711#endif /* CONFIG_IPW2200_MONITOR */
4712
ea177305
DW
4713 /* Do queued direct scans first */
4714 if (priv->status & STATUS_DIRECT_SCAN_PENDING) {
4715 queue_delayed_work(priv->workqueue,
4716 &priv->request_direct_scan, 0);
4717 }
4718
0edd5b44
JG
4719 if (!(priv->status & (STATUS_ASSOCIATED |
4720 STATUS_ASSOCIATING |
4721 STATUS_ROAMING |
4722 STATUS_DISASSOCIATING)))
4723 queue_work(priv->workqueue, &priv->associate);
4724 else if (priv->status & STATUS_ROAMING) {
e7582561
BC
4725 if (x->status == SCAN_COMPLETED_STATUS_COMPLETE)
4726 /* If a scan completed and we are in roam mode, then
4727 * the scan that completed was the one requested as a
4728 * result of entering roam... so, schedule the
4729 * roam work */
4730 queue_work(priv->workqueue,
4731 &priv->roam);
4732 else
4733 /* Don't schedule if we aborted the scan */
4734 priv->status &= ~STATUS_ROAMING;
0edd5b44 4735 } else if (priv->status & STATUS_SCAN_PENDING)
c4028958
DH
4736 queue_delayed_work(priv->workqueue,
4737 &priv->request_scan, 0);
a613bffd
JK
4738 else if (priv->config & CFG_BACKGROUND_SCAN
4739 && priv->status & STATUS_ASSOCIATED)
4740 queue_delayed_work(priv->workqueue,
1c9d5e41 4741 &priv->request_scan,
be84e3d6 4742 round_jiffies_relative(HZ));
07f02e46
ZY
4743
4744 /* Send an empty event to user space.
4745 * We don't send the received data on the event because
4746 * it would require us to do complex transcoding, and
4747 * we want to minimise the work done in the irq handler
4748 * Use a request to extract the data.
4749 * Also, we generate this even for any scan, regardless
4750 * on how the scan was initiated. User space can just
4751 * sync on periodic scan to get fresh data...
4752 * Jean II */
0b531676
DW
4753 if (x->status == SCAN_COMPLETED_STATUS_COMPLETE)
4754 handle_scan_event(priv);
0edd5b44 4755 break;
43f66a6c 4756 }
43f66a6c 4757
0edd5b44
JG
4758 case HOST_NOTIFICATION_STATUS_FRAG_LENGTH:{
4759 struct notif_frag_length *x = &notif->u.frag_len;
43f66a6c 4760
e62e1ee0 4761 if (size == sizeof(*x))
a613bffd
JK
4762 IPW_ERROR("Frag length: %d\n",
4763 le16_to_cpu(x->frag_length));
4764 else
0edd5b44
JG
4765 IPW_ERROR("Frag length of wrong size %d "
4766 "(should be %zd)\n",
e62e1ee0 4767 size, sizeof(*x));
0edd5b44 4768 break;
43f66a6c 4769 }
43f66a6c 4770
0edd5b44
JG
4771 case HOST_NOTIFICATION_STATUS_LINK_DETERIORATION:{
4772 struct notif_link_deterioration *x =
4773 &notif->u.link_deterioration;
afbf30a2 4774
e62e1ee0 4775 if (size == sizeof(*x)) {
0edd5b44 4776 IPW_DEBUG(IPW_DL_NOTIF | IPW_DL_STATE,
12977154
BC
4777 "link deterioration: type %d, cnt %d\n",
4778 x->silence_notification_type,
4779 x->silence_count);
0edd5b44
JG
4780 memcpy(&priv->last_link_deterioration, x,
4781 sizeof(*x));
4782 } else {
4783 IPW_ERROR("Link Deterioration of wrong size %d "
4784 "(should be %zd)\n",
e62e1ee0 4785 size, sizeof(*x));
0edd5b44 4786 }
43f66a6c
JK
4787 break;
4788 }
4789
0edd5b44
JG
4790 case HOST_NOTIFICATION_DINO_CONFIG_RESPONSE:{
4791 IPW_ERROR("Dino config\n");
4792 if (priv->hcmd
a613bffd 4793 && priv->hcmd->cmd != HOST_CMD_DINO_CONFIG)
0edd5b44 4794 IPW_ERROR("Unexpected DINO_CONFIG_RESPONSE\n");
a613bffd 4795
0edd5b44
JG
4796 break;
4797 }
43f66a6c 4798
0edd5b44
JG
4799 case HOST_NOTIFICATION_STATUS_BEACON_STATE:{
4800 struct notif_beacon_state *x = &notif->u.beacon_state;
e62e1ee0 4801 if (size != sizeof(*x)) {
0edd5b44
JG
4802 IPW_ERROR
4803 ("Beacon state of wrong size %d (should "
e62e1ee0 4804 "be %zd)\n", size, sizeof(*x));
0edd5b44 4805 break;
43f66a6c
JK
4806 }
4807
a613bffd
JK
4808 if (le32_to_cpu(x->state) ==
4809 HOST_NOTIFICATION_STATUS_BEACON_MISSING)
4810 ipw_handle_missed_beacon(priv,
4811 le32_to_cpu(x->
4812 number));
43f66a6c 4813
0edd5b44
JG
4814 break;
4815 }
43f66a6c 4816
0edd5b44
JG
4817 case HOST_NOTIFICATION_STATUS_TGI_TX_KEY:{
4818 struct notif_tgi_tx_key *x = &notif->u.tgi_tx_key;
e62e1ee0 4819 if (size == sizeof(*x)) {
0edd5b44
JG
4820 IPW_ERROR("TGi Tx Key: state 0x%02x sec type "
4821 "0x%02x station %d\n",
4822 x->key_state, x->security_type,
4823 x->station_index);
4824 break;
4825 }
43f66a6c 4826
0edd5b44
JG
4827 IPW_ERROR
4828 ("TGi Tx Key of wrong size %d (should be %zd)\n",
e62e1ee0 4829 size, sizeof(*x));
43f66a6c 4830 break;
bf79451e 4831 }
43f66a6c 4832
0edd5b44
JG
4833 case HOST_NOTIFICATION_CALIB_KEEP_RESULTS:{
4834 struct notif_calibration *x = &notif->u.calibration;
43f66a6c 4835
e62e1ee0 4836 if (size == sizeof(*x)) {
0edd5b44
JG
4837 memcpy(&priv->calib, x, sizeof(*x));
4838 IPW_DEBUG_INFO("TODO: Calibration\n");
4839 break;
4840 }
43f66a6c 4841
0edd5b44
JG
4842 IPW_ERROR
4843 ("Calibration of wrong size %d (should be %zd)\n",
e62e1ee0 4844 size, sizeof(*x));
43f66a6c 4845 break;
bf79451e
JG
4846 }
4847
0edd5b44 4848 case HOST_NOTIFICATION_NOISE_STATS:{
e62e1ee0 4849 if (size == sizeof(u32)) {
00d21de5
ZY
4850 priv->exp_avg_noise =
4851 exponential_average(priv->exp_avg_noise,
4852 (u8) (le32_to_cpu(notif->u.noise.value) & 0xff),
4853 DEPTH_NOISE);
0edd5b44
JG
4854 break;
4855 }
43f66a6c 4856
0edd5b44
JG
4857 IPW_ERROR
4858 ("Noise stat is wrong size %d (should be %zd)\n",
e62e1ee0 4859 size, sizeof(u32));
43f66a6c
JK
4860 break;
4861 }
4862
43f66a6c 4863 default:
1dd31b6c
ZY
4864 IPW_DEBUG_NOTIF("Unknown notification: "
4865 "subtype=%d,flags=0x%2x,size=%d\n",
e62e1ee0 4866 notif->subtype, notif->flags, size);
43f66a6c
JK
4867 }
4868}
4869
4870/**
4871 * Destroys all DMA structures and initialise them again
bf79451e 4872 *
43f66a6c
JK
4873 * @param priv
4874 * @return error code
4875 */
4876static int ipw_queue_reset(struct ipw_priv *priv)
4877{
4878 int rc = 0;
4879 /** @todo customize queue sizes */
4880 int nTx = 64, nTxCmd = 8;
4881 ipw_tx_queue_free(priv);
4882 /* Tx CMD queue */
4883 rc = ipw_queue_tx_init(priv, &priv->txq_cmd, nTxCmd,
b095c381
JK
4884 IPW_TX_CMD_QUEUE_READ_INDEX,
4885 IPW_TX_CMD_QUEUE_WRITE_INDEX,
4886 IPW_TX_CMD_QUEUE_BD_BASE,
4887 IPW_TX_CMD_QUEUE_BD_SIZE);
43f66a6c
JK
4888 if (rc) {
4889 IPW_ERROR("Tx Cmd queue init failed\n");
4890 goto error;
4891 }
4892 /* Tx queue(s) */
4893 rc = ipw_queue_tx_init(priv, &priv->txq[0], nTx,
b095c381
JK
4894 IPW_TX_QUEUE_0_READ_INDEX,
4895 IPW_TX_QUEUE_0_WRITE_INDEX,
4896 IPW_TX_QUEUE_0_BD_BASE, IPW_TX_QUEUE_0_BD_SIZE);
43f66a6c
JK
4897 if (rc) {
4898 IPW_ERROR("Tx 0 queue init failed\n");
4899 goto error;
4900 }
4901 rc = ipw_queue_tx_init(priv, &priv->txq[1], nTx,
b095c381
JK
4902 IPW_TX_QUEUE_1_READ_INDEX,
4903 IPW_TX_QUEUE_1_WRITE_INDEX,
4904 IPW_TX_QUEUE_1_BD_BASE, IPW_TX_QUEUE_1_BD_SIZE);
43f66a6c
JK
4905 if (rc) {
4906 IPW_ERROR("Tx 1 queue init failed\n");
4907 goto error;
4908 }
4909 rc = ipw_queue_tx_init(priv, &priv->txq[2], nTx,
b095c381
JK
4910 IPW_TX_QUEUE_2_READ_INDEX,
4911 IPW_TX_QUEUE_2_WRITE_INDEX,
4912 IPW_TX_QUEUE_2_BD_BASE, IPW_TX_QUEUE_2_BD_SIZE);
43f66a6c
JK
4913 if (rc) {
4914 IPW_ERROR("Tx 2 queue init failed\n");
4915 goto error;
4916 }
4917 rc = ipw_queue_tx_init(priv, &priv->txq[3], nTx,
b095c381
JK
4918 IPW_TX_QUEUE_3_READ_INDEX,
4919 IPW_TX_QUEUE_3_WRITE_INDEX,
4920 IPW_TX_QUEUE_3_BD_BASE, IPW_TX_QUEUE_3_BD_SIZE);
43f66a6c
JK
4921 if (rc) {
4922 IPW_ERROR("Tx 3 queue init failed\n");
4923 goto error;
4924 }
4925 /* statistics */
4926 priv->rx_bufs_min = 0;
4927 priv->rx_pend_max = 0;
4928 return rc;
4929
0edd5b44 4930 error:
43f66a6c
JK
4931 ipw_tx_queue_free(priv);
4932 return rc;
4933}
4934
4935/**
4936 * Reclaim Tx queue entries no more used by NIC.
bf79451e 4937 *
8ff9d21e 4938 * When FW advances 'R' index, all entries between old and
43f66a6c
JK
4939 * new 'R' index need to be reclaimed. As result, some free space
4940 * forms. If there is enough free space (> low mark), wake Tx queue.
bf79451e 4941 *
43f66a6c
JK
4942 * @note Need to protect against garbage in 'R' index
4943 * @param priv
4944 * @param txq
4945 * @param qindex
4946 * @return Number of used entries remains in the queue
4947 */
bf79451e 4948static int ipw_queue_tx_reclaim(struct ipw_priv *priv,
43f66a6c
JK
4949 struct clx2_tx_queue *txq, int qindex)
4950{
4951 u32 hw_tail;
4952 int used;
4953 struct clx2_queue *q = &txq->q;
4954
4955 hw_tail = ipw_read32(priv, q->reg_r);
4956 if (hw_tail >= q->n_bd) {
4957 IPW_ERROR
0edd5b44
JG
4958 ("Read index for DMA queue (%d) is out of range [0-%d)\n",
4959 hw_tail, q->n_bd);
43f66a6c
JK
4960 goto done;
4961 }
4962 for (; q->last_used != hw_tail;
4963 q->last_used = ipw_queue_inc_wrap(q->last_used, q->n_bd)) {
4964 ipw_queue_tx_free_tfd(priv, txq);
4965 priv->tx_packets++;
4966 }
0edd5b44 4967 done:
943dbef4 4968 if ((ipw_tx_queue_space(q) > q->low_mark) &&
521c4d96 4969 (qindex >= 0))
9ddf84f6 4970 netif_wake_queue(priv->net_dev);
43f66a6c
JK
4971 used = q->first_empty - q->last_used;
4972 if (used < 0)
4973 used += q->n_bd;
4974
4975 return used;
4976}
4977
4978static int ipw_queue_tx_hcmd(struct ipw_priv *priv, int hcmd, void *buf,
4979 int len, int sync)
4980{
4981 struct clx2_tx_queue *txq = &priv->txq_cmd;
4982 struct clx2_queue *q = &txq->q;
4983 struct tfd_frame *tfd;
4984
943dbef4 4985 if (ipw_tx_queue_space(q) < (sync ? 1 : 2)) {
43f66a6c
JK
4986 IPW_ERROR("No space for Tx\n");
4987 return -EBUSY;
4988 }
4989
4990 tfd = &txq->bd[q->first_empty];
4991 txq->txb[q->first_empty] = NULL;
4992
4993 memset(tfd, 0, sizeof(*tfd));
4994 tfd->control_flags.message_type = TX_HOST_COMMAND_TYPE;
4995 tfd->control_flags.control_bits = TFD_NEED_IRQ_MASK;
4996 priv->hcmd_seq++;
4997 tfd->u.cmd.index = hcmd;
4998 tfd->u.cmd.length = len;
4999 memcpy(tfd->u.cmd.payload, buf, len);
5000 q->first_empty = ipw_queue_inc_wrap(q->first_empty, q->n_bd);
5001 ipw_write32(priv, q->reg_w, q->first_empty);
5002 _ipw_read32(priv, 0x90);
5003
5004 return 0;
5005}
5006
bf79451e 5007/*
43f66a6c
JK
5008 * Rx theory of operation
5009 *
5010 * The host allocates 32 DMA target addresses and passes the host address
b095c381 5011 * to the firmware at register IPW_RFDS_TABLE_LOWER + N * RFD_SIZE where N is
43f66a6c
JK
5012 * 0 to 31
5013 *
5014 * Rx Queue Indexes
5015 * The host/firmware share two index registers for managing the Rx buffers.
5016 *
bf79451e
JG
5017 * The READ index maps to the first position that the firmware may be writing
5018 * to -- the driver can read up to (but not including) this position and get
5019 * good data.
43f66a6c
JK
5020 * The READ index is managed by the firmware once the card is enabled.
5021 *
5022 * The WRITE index maps to the last position the driver has read from -- the
5023 * position preceding WRITE is the last slot the firmware can place a packet.
5024 *
5025 * The queue is empty (no good data) if WRITE = READ - 1, and is full if
bf79451e 5026 * WRITE = READ.
43f66a6c 5027 *
bf79451e 5028 * During initialization the host sets up the READ queue position to the first
43f66a6c
JK
5029 * INDEX position, and WRITE to the last (READ - 1 wrapped)
5030 *
5031 * When the firmware places a packet in a buffer it will advance the READ index
5032 * and fire the RX interrupt. The driver can then query the READ index and
5033 * process as many packets as possible, moving the WRITE index forward as it
5034 * resets the Rx queue buffers with new memory.
bf79451e 5035 *
43f66a6c 5036 * The management in the driver is as follows:
bf79451e 5037 * + A list of pre-allocated SKBs is stored in ipw->rxq->rx_free. When
43f66a6c 5038 * ipw->rxq->free_count drops to or below RX_LOW_WATERMARK, work is scheduled
bf79451e 5039 * to replensish the ipw->rxq->rx_free.
43f66a6c
JK
5040 * + In ipw_rx_queue_replenish (scheduled) if 'processed' != 'read' then the
5041 * ipw->rxq is replenished and the READ INDEX is updated (updating the
5042 * 'processed' and 'read' driver indexes as well)
5043 * + A received packet is processed and handed to the kernel network stack,
5044 * detached from the ipw->rxq. The driver 'processed' index is updated.
5045 * + The Host/Firmware ipw->rxq is replenished at tasklet time from the rx_free
bf79451e
JG
5046 * list. If there are no allocated buffers in ipw->rxq->rx_free, the READ
5047 * INDEX is not incremented and ipw->status(RX_STALLED) is set. If there
43f66a6c
JK
5048 * were enough free buffers and RX_STALLED is set it is cleared.
5049 *
5050 *
5051 * Driver sequence:
5052 *
bf79451e 5053 * ipw_rx_queue_alloc() Allocates rx_free
43f66a6c
JK
5054 * ipw_rx_queue_replenish() Replenishes rx_free list from rx_used, and calls
5055 * ipw_rx_queue_restock
5056 * ipw_rx_queue_restock() Moves available buffers from rx_free into Rx
5057 * queue, updates firmware pointers, and updates
5058 * the WRITE index. If insufficient rx_free buffers
5059 * are available, schedules ipw_rx_queue_replenish
5060 *
5061 * -- enable interrupts --
5062 * ISR - ipw_rx() Detach ipw_rx_mem_buffers from pool up to the
bf79451e 5063 * READ INDEX, detaching the SKB from the pool.
43f66a6c
JK
5064 * Moves the packet buffer from queue to rx_used.
5065 * Calls ipw_rx_queue_restock to refill any empty
5066 * slots.
5067 * ...
5068 *
5069 */
5070
bf79451e 5071/*
43f66a6c
JK
5072 * If there are slots in the RX queue that need to be restocked,
5073 * and we have free pre-allocated buffers, fill the ranks as much
5074 * as we can pulling from rx_free.
5075 *
5076 * This moves the 'write' index forward to catch up with 'processed', and
5077 * also updates the memory address in the firmware to reference the new
5078 * target buffer.
5079 */
5080static void ipw_rx_queue_restock(struct ipw_priv *priv)
5081{
5082 struct ipw_rx_queue *rxq = priv->rxq;
5083 struct list_head *element;
5084 struct ipw_rx_mem_buffer *rxb;
5085 unsigned long flags;
5086 int write;
5087
5088 spin_lock_irqsave(&rxq->lock, flags);
5089 write = rxq->write;
943dbef4 5090 while ((ipw_rx_queue_space(rxq) > 0) && (rxq->free_count)) {
43f66a6c
JK
5091 element = rxq->rx_free.next;
5092 rxb = list_entry(element, struct ipw_rx_mem_buffer, list);
5093 list_del(element);
5094
b095c381 5095 ipw_write32(priv, IPW_RFDS_TABLE_LOWER + rxq->write * RFD_SIZE,
43f66a6c
JK
5096 rxb->dma_addr);
5097 rxq->queue[rxq->write] = rxb;
5098 rxq->write = (rxq->write + 1) % RX_QUEUE_SIZE;
5099 rxq->free_count--;
5100 }
5101 spin_unlock_irqrestore(&rxq->lock, flags);
5102
bf79451e 5103 /* If the pre-allocated buffer pool is dropping low, schedule to
43f66a6c
JK
5104 * refill it */
5105 if (rxq->free_count <= RX_LOW_WATERMARK)
5106 queue_work(priv->workqueue, &priv->rx_replenish);
5107
5108 /* If we've added more space for the firmware to place data, tell it */
bf79451e 5109 if (write != rxq->write)
b095c381 5110 ipw_write32(priv, IPW_RX_WRITE_INDEX, rxq->write);
43f66a6c
JK
5111}
5112
5113/*
5114 * Move all used packet from rx_used to rx_free, allocating a new SKB for each.
bf79451e
JG
5115 * Also restock the Rx queue via ipw_rx_queue_restock.
5116 *
43f66a6c
JK
5117 * This is called as a scheduled work item (except for during intialization)
5118 */
5119static void ipw_rx_queue_replenish(void *data)
5120{
5121 struct ipw_priv *priv = data;
5122 struct ipw_rx_queue *rxq = priv->rxq;
5123 struct list_head *element;
5124 struct ipw_rx_mem_buffer *rxb;
5125 unsigned long flags;
5126
5127 spin_lock_irqsave(&rxq->lock, flags);
5128 while (!list_empty(&rxq->rx_used)) {
5129 element = rxq->rx_used.next;
5130 rxb = list_entry(element, struct ipw_rx_mem_buffer, list);
b095c381 5131 rxb->skb = alloc_skb(IPW_RX_BUF_SIZE, GFP_ATOMIC);
43f66a6c
JK
5132 if (!rxb->skb) {
5133 printk(KERN_CRIT "%s: Can not allocate SKB buffers.\n",
5134 priv->net_dev->name);
5135 /* We don't reschedule replenish work here -- we will
5136 * call the restock method and if it still needs
5137 * more buffers it will schedule replenish */
5138 break;
5139 }
5140 list_del(element);
bf79451e 5141
0edd5b44
JG
5142 rxb->dma_addr =
5143 pci_map_single(priv->pci_dev, rxb->skb->data,
b095c381 5144 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
bf79451e 5145
43f66a6c
JK
5146 list_add_tail(&rxb->list, &rxq->rx_free);
5147 rxq->free_count++;
5148 }
5149 spin_unlock_irqrestore(&rxq->lock, flags);
5150
5151 ipw_rx_queue_restock(priv);
5152}
5153
c4028958 5154static void ipw_bg_rx_queue_replenish(struct work_struct *work)
c848d0af 5155{
c4028958
DH
5156 struct ipw_priv *priv =
5157 container_of(work, struct ipw_priv, rx_replenish);
4644151b 5158 mutex_lock(&priv->mutex);
c4028958 5159 ipw_rx_queue_replenish(priv);
4644151b 5160 mutex_unlock(&priv->mutex);
c848d0af
JK
5161}
5162
43f66a6c 5163/* Assumes that the skb field of the buffers in 'pool' is kept accurate.
c7b6a674 5164 * If an SKB has been detached, the POOL needs to have its SKB set to NULL
bf79451e 5165 * This free routine walks the list of POOL entries and if SKB is set to
43f66a6c
JK
5166 * non NULL it is unmapped and freed
5167 */
0edd5b44 5168static void ipw_rx_queue_free(struct ipw_priv *priv, struct ipw_rx_queue *rxq)
43f66a6c
JK
5169{
5170 int i;
5171
5172 if (!rxq)
5173 return;
bf79451e 5174
43f66a6c
JK
5175 for (i = 0; i < RX_QUEUE_SIZE + RX_FREE_BUFFERS; i++) {
5176 if (rxq->pool[i].skb != NULL) {
5177 pci_unmap_single(priv->pci_dev, rxq->pool[i].dma_addr,
b095c381 5178 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c
JK
5179 dev_kfree_skb(rxq->pool[i].skb);
5180 }
5181 }
5182
5183 kfree(rxq);
5184}
5185
5186static struct ipw_rx_queue *ipw_rx_queue_alloc(struct ipw_priv *priv)
5187{
5188 struct ipw_rx_queue *rxq;
5189 int i;
5190
c75f4742 5191 rxq = kzalloc(sizeof(*rxq), GFP_KERNEL);
ad18b0ea
PI
5192 if (unlikely(!rxq)) {
5193 IPW_ERROR("memory allocation failed\n");
5194 return NULL;
5195 }
43f66a6c
JK
5196 spin_lock_init(&rxq->lock);
5197 INIT_LIST_HEAD(&rxq->rx_free);
5198 INIT_LIST_HEAD(&rxq->rx_used);
5199
5200 /* Fill the rx_used queue with _all_ of the Rx buffers */
bf79451e 5201 for (i = 0; i < RX_FREE_BUFFERS + RX_QUEUE_SIZE; i++)
43f66a6c
JK
5202 list_add_tail(&rxq->pool[i].list, &rxq->rx_used);
5203
5204 /* Set us so that we have processed and used all buffers, but have
5205 * not restocked the Rx queue with fresh buffers */
5206 rxq->read = rxq->write = 0;
43f66a6c
JK
5207 rxq->free_count = 0;
5208
5209 return rxq;
5210}
5211
5212static int ipw_is_rate_in_mask(struct ipw_priv *priv, int ieee_mode, u8 rate)
5213{
5214 rate &= ~IEEE80211_BASIC_RATE_MASK;
5215 if (ieee_mode == IEEE_A) {
5216 switch (rate) {
bf79451e
JG
5217 case IEEE80211_OFDM_RATE_6MB:
5218 return priv->rates_mask & IEEE80211_OFDM_RATE_6MB_MASK ?
0edd5b44 5219 1 : 0;
bf79451e
JG
5220 case IEEE80211_OFDM_RATE_9MB:
5221 return priv->rates_mask & IEEE80211_OFDM_RATE_9MB_MASK ?
0edd5b44 5222 1 : 0;
bf79451e 5223 case IEEE80211_OFDM_RATE_12MB:
0edd5b44
JG
5224 return priv->
5225 rates_mask & IEEE80211_OFDM_RATE_12MB_MASK ? 1 : 0;
bf79451e 5226 case IEEE80211_OFDM_RATE_18MB:
0edd5b44
JG
5227 return priv->
5228 rates_mask & IEEE80211_OFDM_RATE_18MB_MASK ? 1 : 0;
bf79451e 5229 case IEEE80211_OFDM_RATE_24MB:
0edd5b44
JG
5230 return priv->
5231 rates_mask & IEEE80211_OFDM_RATE_24MB_MASK ? 1 : 0;
bf79451e 5232 case IEEE80211_OFDM_RATE_36MB:
0edd5b44
JG
5233 return priv->
5234 rates_mask & IEEE80211_OFDM_RATE_36MB_MASK ? 1 : 0;
bf79451e 5235 case IEEE80211_OFDM_RATE_48MB:
0edd5b44
JG
5236 return priv->
5237 rates_mask & IEEE80211_OFDM_RATE_48MB_MASK ? 1 : 0;
bf79451e 5238 case IEEE80211_OFDM_RATE_54MB:
0edd5b44
JG
5239 return priv->
5240 rates_mask & IEEE80211_OFDM_RATE_54MB_MASK ? 1 : 0;
43f66a6c
JK
5241 default:
5242 return 0;
5243 }
5244 }
bf79451e 5245
43f66a6c
JK
5246 /* B and G mixed */
5247 switch (rate) {
bf79451e 5248 case IEEE80211_CCK_RATE_1MB:
43f66a6c 5249 return priv->rates_mask & IEEE80211_CCK_RATE_1MB_MASK ? 1 : 0;
bf79451e 5250 case IEEE80211_CCK_RATE_2MB:
43f66a6c 5251 return priv->rates_mask & IEEE80211_CCK_RATE_2MB_MASK ? 1 : 0;
bf79451e 5252 case IEEE80211_CCK_RATE_5MB:
43f66a6c 5253 return priv->rates_mask & IEEE80211_CCK_RATE_5MB_MASK ? 1 : 0;
bf79451e 5254 case IEEE80211_CCK_RATE_11MB:
43f66a6c
JK
5255 return priv->rates_mask & IEEE80211_CCK_RATE_11MB_MASK ? 1 : 0;
5256 }
5257
5258 /* If we are limited to B modulations, bail at this point */
5259 if (ieee_mode == IEEE_B)
5260 return 0;
5261
5262 /* G */
5263 switch (rate) {
bf79451e 5264 case IEEE80211_OFDM_RATE_6MB:
43f66a6c 5265 return priv->rates_mask & IEEE80211_OFDM_RATE_6MB_MASK ? 1 : 0;
bf79451e 5266 case IEEE80211_OFDM_RATE_9MB:
43f66a6c 5267 return priv->rates_mask & IEEE80211_OFDM_RATE_9MB_MASK ? 1 : 0;
bf79451e 5268 case IEEE80211_OFDM_RATE_12MB:
43f66a6c 5269 return priv->rates_mask & IEEE80211_OFDM_RATE_12MB_MASK ? 1 : 0;
bf79451e 5270 case IEEE80211_OFDM_RATE_18MB:
43f66a6c 5271 return priv->rates_mask & IEEE80211_OFDM_RATE_18MB_MASK ? 1 : 0;
bf79451e 5272 case IEEE80211_OFDM_RATE_24MB:
43f66a6c 5273 return priv->rates_mask & IEEE80211_OFDM_RATE_24MB_MASK ? 1 : 0;
bf79451e 5274 case IEEE80211_OFDM_RATE_36MB:
43f66a6c 5275 return priv->rates_mask & IEEE80211_OFDM_RATE_36MB_MASK ? 1 : 0;
bf79451e 5276 case IEEE80211_OFDM_RATE_48MB:
43f66a6c 5277 return priv->rates_mask & IEEE80211_OFDM_RATE_48MB_MASK ? 1 : 0;
bf79451e 5278 case IEEE80211_OFDM_RATE_54MB:
43f66a6c
JK
5279 return priv->rates_mask & IEEE80211_OFDM_RATE_54MB_MASK ? 1 : 0;
5280 }
5281
5282 return 0;
5283}
5284
bf79451e 5285static int ipw_compatible_rates(struct ipw_priv *priv,
43f66a6c
JK
5286 const struct ieee80211_network *network,
5287 struct ipw_supported_rates *rates)
5288{
5289 int num_rates, i;
5290
5291 memset(rates, 0, sizeof(*rates));
0edd5b44 5292 num_rates = min(network->rates_len, (u8) IPW_MAX_RATES);
43f66a6c
JK
5293 rates->num_rates = 0;
5294 for (i = 0; i < num_rates; i++) {
a613bffd
JK
5295 if (!ipw_is_rate_in_mask(priv, network->mode,
5296 network->rates[i])) {
5297
ea2b26e0 5298 if (network->rates[i] & IEEE80211_BASIC_RATE_MASK) {
a613bffd
JK
5299 IPW_DEBUG_SCAN("Adding masked mandatory "
5300 "rate %02X\n",
5301 network->rates[i]);
5302 rates->supported_rates[rates->num_rates++] =
5303 network->rates[i];
5304 continue;
ea2b26e0
JK
5305 }
5306
43f66a6c
JK
5307 IPW_DEBUG_SCAN("Rate %02X masked : 0x%08X\n",
5308 network->rates[i], priv->rates_mask);
5309 continue;
5310 }
bf79451e 5311
43f66a6c
JK
5312 rates->supported_rates[rates->num_rates++] = network->rates[i];
5313 }
5314
a613bffd
JK
5315 num_rates = min(network->rates_ex_len,
5316 (u8) (IPW_MAX_RATES - num_rates));
43f66a6c 5317 for (i = 0; i < num_rates; i++) {
a613bffd
JK
5318 if (!ipw_is_rate_in_mask(priv, network->mode,
5319 network->rates_ex[i])) {
ea2b26e0 5320 if (network->rates_ex[i] & IEEE80211_BASIC_RATE_MASK) {
a613bffd
JK
5321 IPW_DEBUG_SCAN("Adding masked mandatory "
5322 "rate %02X\n",
5323 network->rates_ex[i]);
5324 rates->supported_rates[rates->num_rates++] =
5325 network->rates[i];
5326 continue;
ea2b26e0
JK
5327 }
5328
43f66a6c
JK
5329 IPW_DEBUG_SCAN("Rate %02X masked : 0x%08X\n",
5330 network->rates_ex[i], priv->rates_mask);
5331 continue;
5332 }
bf79451e 5333
0edd5b44
JG
5334 rates->supported_rates[rates->num_rates++] =
5335 network->rates_ex[i];
43f66a6c
JK
5336 }
5337
ea2b26e0 5338 return 1;
43f66a6c
JK
5339}
5340
858119e1 5341static void ipw_copy_rates(struct ipw_supported_rates *dest,
43f66a6c
JK
5342 const struct ipw_supported_rates *src)
5343{
5344 u8 i;
5345 for (i = 0; i < src->num_rates; i++)
5346 dest->supported_rates[i] = src->supported_rates[i];
5347 dest->num_rates = src->num_rates;
5348}
5349
5350/* TODO: Look at sniffed packets in the air to determine if the basic rate
5351 * mask should ever be used -- right now all callers to add the scan rates are
5352 * set with the modulation = CCK, so BASIC_RATE_MASK is never set... */
5353static void ipw_add_cck_scan_rates(struct ipw_supported_rates *rates,
0edd5b44 5354 u8 modulation, u32 rate_mask)
43f66a6c 5355{
bf79451e 5356 u8 basic_mask = (IEEE80211_OFDM_MODULATION == modulation) ?
0edd5b44 5357 IEEE80211_BASIC_RATE_MASK : 0;
bf79451e 5358
43f66a6c 5359 if (rate_mask & IEEE80211_CCK_RATE_1MB_MASK)
bf79451e 5360 rates->supported_rates[rates->num_rates++] =
0edd5b44 5361 IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_1MB;
43f66a6c
JK
5362
5363 if (rate_mask & IEEE80211_CCK_RATE_2MB_MASK)
bf79451e 5364 rates->supported_rates[rates->num_rates++] =
0edd5b44 5365 IEEE80211_BASIC_RATE_MASK | IEEE80211_CCK_RATE_2MB;
43f66a6c
JK
5366
5367 if (rate_mask & IEEE80211_CCK_RATE_5MB_MASK)
bf79451e 5368 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5369 IEEE80211_CCK_RATE_5MB;
43f66a6c
JK
5370
5371 if (rate_mask & IEEE80211_CCK_RATE_11MB_MASK)
bf79451e 5372 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5373 IEEE80211_CCK_RATE_11MB;
43f66a6c
JK
5374}
5375
5376static void ipw_add_ofdm_scan_rates(struct ipw_supported_rates *rates,
0edd5b44 5377 u8 modulation, u32 rate_mask)
43f66a6c 5378{
bf79451e 5379 u8 basic_mask = (IEEE80211_OFDM_MODULATION == modulation) ?
0edd5b44 5380 IEEE80211_BASIC_RATE_MASK : 0;
43f66a6c
JK
5381
5382 if (rate_mask & IEEE80211_OFDM_RATE_6MB_MASK)
bf79451e 5383 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5384 IEEE80211_OFDM_RATE_6MB;
43f66a6c
JK
5385
5386 if (rate_mask & IEEE80211_OFDM_RATE_9MB_MASK)
bf79451e 5387 rates->supported_rates[rates->num_rates++] =
0edd5b44 5388 IEEE80211_OFDM_RATE_9MB;
43f66a6c
JK
5389
5390 if (rate_mask & IEEE80211_OFDM_RATE_12MB_MASK)
bf79451e 5391 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5392 IEEE80211_OFDM_RATE_12MB;
43f66a6c
JK
5393
5394 if (rate_mask & IEEE80211_OFDM_RATE_18MB_MASK)
bf79451e 5395 rates->supported_rates[rates->num_rates++] =
0edd5b44 5396 IEEE80211_OFDM_RATE_18MB;
43f66a6c
JK
5397
5398 if (rate_mask & IEEE80211_OFDM_RATE_24MB_MASK)
bf79451e 5399 rates->supported_rates[rates->num_rates++] = basic_mask |
0edd5b44 5400 IEEE80211_OFDM_RATE_24MB;
43f66a6c
JK
5401
5402 if (rate_mask & IEEE80211_OFDM_RATE_36MB_MASK)
bf79451e 5403 rates->supported_rates[rates->num_rates++] =
0edd5b44 5404 IEEE80211_OFDM_RATE_36MB;
43f66a6c
JK
5405
5406 if (rate_mask & IEEE80211_OFDM_RATE_48MB_MASK)
bf79451e 5407 rates->supported_rates[rates->num_rates++] =
0edd5b44 5408 IEEE80211_OFDM_RATE_48MB;
43f66a6c
JK
5409
5410 if (rate_mask & IEEE80211_OFDM_RATE_54MB_MASK)
bf79451e 5411 rates->supported_rates[rates->num_rates++] =
0edd5b44 5412 IEEE80211_OFDM_RATE_54MB;
43f66a6c
JK
5413}
5414
5415struct ipw_network_match {
5416 struct ieee80211_network *network;
5417 struct ipw_supported_rates rates;
5418};
5419
c848d0af
JK
5420static int ipw_find_adhoc_network(struct ipw_priv *priv,
5421 struct ipw_network_match *match,
5422 struct ieee80211_network *network,
5423 int roaming)
43f66a6c
JK
5424{
5425 struct ipw_supported_rates rates;
5426
5427 /* Verify that this network's capability is compatible with the
5428 * current mode (AdHoc or Infrastructure) */
c848d0af 5429 if ((priv->ieee->iw_mode == IW_MODE_ADHOC &&
43f66a6c 5430 !(network->capability & WLAN_CAPABILITY_IBSS))) {
e174961c 5431 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded due to "
bf79451e 5432 "capability mismatch.\n",
7e272fcf 5433 escape_ssid(network->ssid, network->ssid_len),
e174961c 5434 network->bssid);
43f66a6c
JK
5435 return 0;
5436 }
5437
43f66a6c
JK
5438 if (unlikely(roaming)) {
5439 /* If we are roaming, then ensure check if this is a valid
5440 * network to try and roam to */
5441 if ((network->ssid_len != match->network->ssid_len) ||
bf79451e 5442 memcmp(network->ssid, match->network->ssid,
43f66a6c 5443 network->ssid_len)) {
e174961c 5444 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c 5445 "because of non-network ESSID.\n",
7e272fcf
JL
5446 escape_ssid(network->ssid,
5447 network->ssid_len),
e174961c 5448 network->bssid);
43f66a6c
JK
5449 return 0;
5450 }
5451 } else {
bf79451e
JG
5452 /* If an ESSID has been configured then compare the broadcast
5453 * ESSID to ours */
5454 if ((priv->config & CFG_STATIC_ESSID) &&
43f66a6c 5455 ((network->ssid_len != priv->essid_len) ||
bf79451e 5456 memcmp(network->ssid, priv->essid,
43f66a6c
JK
5457 min(network->ssid_len, priv->essid_len)))) {
5458 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
afbf30a2 5459
0edd5b44 5460 strncpy(escaped,
7e272fcf 5461 escape_ssid(network->ssid, network->ssid_len),
43f66a6c 5462 sizeof(escaped));
e174961c 5463 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
bf79451e 5464 "because of ESSID mismatch: '%s'.\n",
e174961c 5465 escaped, network->bssid,
7e272fcf
JL
5466 escape_ssid(priv->essid,
5467 priv->essid_len));
43f66a6c
JK
5468 return 0;
5469 }
5470 }
5471
5472 /* If the old network rate is better than this one, don't bother
5473 * testing everything else. */
c848d0af
JK
5474
5475 if (network->time_stamp[0] < match->network->time_stamp[0]) {
afbf30a2
JK
5476 IPW_DEBUG_MERGE("Network '%s excluded because newer than "
5477 "current network.\n",
7e272fcf
JL
5478 escape_ssid(match->network->ssid,
5479 match->network->ssid_len));
43f66a6c 5480 return 0;
c848d0af 5481 } else if (network->time_stamp[1] < match->network->time_stamp[1]) {
afbf30a2
JK
5482 IPW_DEBUG_MERGE("Network '%s excluded because newer than "
5483 "current network.\n",
7e272fcf
JL
5484 escape_ssid(match->network->ssid,
5485 match->network->ssid_len));
43f66a6c
JK
5486 return 0;
5487 }
5488
5489 /* Now go through and see if the requested network is valid... */
bf79451e 5490 if (priv->ieee->scan_age != 0 &&
c848d0af 5491 time_after(jiffies, network->last_scanned + priv->ieee->scan_age)) {
e174961c 5492 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
c7b6a674 5493 "because of age: %ums.\n",
7e272fcf 5494 escape_ssid(network->ssid, network->ssid_len),
e174961c 5495 network->bssid,
2638bc39
ZY
5496 jiffies_to_msecs(jiffies -
5497 network->last_scanned));
43f66a6c 5498 return 0;
bf79451e 5499 }
43f66a6c 5500
bf79451e 5501 if ((priv->config & CFG_STATIC_CHANNEL) &&
43f66a6c 5502 (network->channel != priv->channel)) {
e174961c 5503 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c 5504 "because of channel mismatch: %d != %d.\n",
7e272fcf 5505 escape_ssid(network->ssid, network->ssid_len),
e174961c 5506 network->bssid,
43f66a6c
JK
5507 network->channel, priv->channel);
5508 return 0;
5509 }
bf79451e 5510
43f66a6c 5511 /* Verify privacy compatability */
bf79451e 5512 if (((priv->capability & CAP_PRIVACY_ON) ? 1 : 0) !=
43f66a6c 5513 ((network->capability & WLAN_CAPABILITY_PRIVACY) ? 1 : 0)) {
e174961c 5514 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c 5515 "because of privacy mismatch: %s != %s.\n",
7e272fcf 5516 escape_ssid(network->ssid, network->ssid_len),
e174961c 5517 network->bssid,
afbf30a2
JK
5518 priv->
5519 capability & CAP_PRIVACY_ON ? "on" : "off",
5520 network->
5521 capability & WLAN_CAPABILITY_PRIVACY ? "on" :
5522 "off");
43f66a6c
JK
5523 return 0;
5524 }
bf79451e 5525
c848d0af 5526 if (!memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
e174961c
JB
5527 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
5528 "because of the same BSSID match: %pM"
7e272fcf
JL
5529 ".\n", escape_ssid(network->ssid,
5530 network->ssid_len),
e174961c
JB
5531 network->bssid,
5532 priv->bssid);
43f66a6c
JK
5533 return 0;
5534 }
bf79451e 5535
43f66a6c
JK
5536 /* Filter out any incompatible freq / mode combinations */
5537 if (!ieee80211_is_valid_mode(priv->ieee, network->mode)) {
e174961c 5538 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c
JK
5539 "because of invalid frequency/mode "
5540 "combination.\n",
7e272fcf 5541 escape_ssid(network->ssid, network->ssid_len),
e174961c 5542 network->bssid);
43f66a6c
JK
5543 return 0;
5544 }
bf79451e 5545
c848d0af
JK
5546 /* Ensure that the rates supported by the driver are compatible with
5547 * this AP, including verification of basic rates (mandatory) */
5548 if (!ipw_compatible_rates(priv, network, &rates)) {
e174961c 5549 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
c848d0af
JK
5550 "because configured rate mask excludes "
5551 "AP mandatory rate.\n",
7e272fcf 5552 escape_ssid(network->ssid, network->ssid_len),
e174961c 5553 network->bssid);
c848d0af
JK
5554 return 0;
5555 }
5556
43f66a6c 5557 if (rates.num_rates == 0) {
e174961c 5558 IPW_DEBUG_MERGE("Network '%s (%pM)' excluded "
43f66a6c 5559 "because of no compatible rates.\n",
7e272fcf 5560 escape_ssid(network->ssid, network->ssid_len),
e174961c 5561 network->bssid);
43f66a6c
JK
5562 return 0;
5563 }
bf79451e 5564
43f66a6c
JK
5565 /* TODO: Perform any further minimal comparititive tests. We do not
5566 * want to put too much policy logic here; intelligent scan selection
5567 * should occur within a generic IEEE 802.11 user space tool. */
5568
5569 /* Set up 'new' AP to this network */
5570 ipw_copy_rates(&match->rates, &rates);
5571 match->network = network;
e174961c 5572 IPW_DEBUG_MERGE("Network '%s (%pM)' is a viable match.\n",
7e272fcf 5573 escape_ssid(network->ssid, network->ssid_len),
e174961c 5574 network->bssid);
43f66a6c
JK
5575
5576 return 1;
5577}
5578
c4028958 5579static void ipw_merge_adhoc_network(struct work_struct *work)
43f66a6c 5580{
c4028958
DH
5581 struct ipw_priv *priv =
5582 container_of(work, struct ipw_priv, merge_networks);
c848d0af
JK
5583 struct ieee80211_network *network = NULL;
5584 struct ipw_network_match match = {
5585 .network = priv->assoc_network
5586 };
5587
afbf30a2
JK
5588 if ((priv->status & STATUS_ASSOCIATED) &&
5589 (priv->ieee->iw_mode == IW_MODE_ADHOC)) {
c848d0af
JK
5590 /* First pass through ROAM process -- look for a better
5591 * network */
5592 unsigned long flags;
5593
5594 spin_lock_irqsave(&priv->ieee->lock, flags);
5595 list_for_each_entry(network, &priv->ieee->network_list, list) {
5596 if (network != priv->assoc_network)
5597 ipw_find_adhoc_network(priv, &match, network,
5598 1);
5599 }
5600 spin_unlock_irqrestore(&priv->ieee->lock, flags);
5601
5602 if (match.network == priv->assoc_network) {
5603 IPW_DEBUG_MERGE("No better ADHOC in this network to "
5604 "merge to.\n");
5605 return;
5606 }
5607
4644151b 5608 mutex_lock(&priv->mutex);
c848d0af
JK
5609 if ((priv->ieee->iw_mode == IW_MODE_ADHOC)) {
5610 IPW_DEBUG_MERGE("remove network %s\n",
7e272fcf
JL
5611 escape_ssid(priv->essid,
5612 priv->essid_len));
c848d0af 5613 ipw_remove_current_network(priv);
43f66a6c 5614 }
c848d0af
JK
5615
5616 ipw_disassociate(priv);
5617 priv->assoc_network = match.network;
4644151b 5618 mutex_unlock(&priv->mutex);
c848d0af 5619 return;
43f66a6c 5620 }
c848d0af 5621}
43f66a6c 5622
0edd5b44
JG
5623static int ipw_best_network(struct ipw_priv *priv,
5624 struct ipw_network_match *match,
5625 struct ieee80211_network *network, int roaming)
43f66a6c
JK
5626{
5627 struct ipw_supported_rates rates;
5628
5629 /* Verify that this network's capability is compatible with the
5630 * current mode (AdHoc or Infrastructure) */
5631 if ((priv->ieee->iw_mode == IW_MODE_INFRA &&
2474385e 5632 !(network->capability & WLAN_CAPABILITY_ESS)) ||
43f66a6c
JK
5633 (priv->ieee->iw_mode == IW_MODE_ADHOC &&
5634 !(network->capability & WLAN_CAPABILITY_IBSS))) {
e174961c 5635 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded due to "
bf79451e 5636 "capability mismatch.\n",
7e272fcf 5637 escape_ssid(network->ssid, network->ssid_len),
e174961c 5638 network->bssid);
43f66a6c
JK
5639 return 0;
5640 }
5641
43f66a6c
JK
5642 if (unlikely(roaming)) {
5643 /* If we are roaming, then ensure check if this is a valid
5644 * network to try and roam to */
5645 if ((network->ssid_len != match->network->ssid_len) ||
bf79451e 5646 memcmp(network->ssid, match->network->ssid,
43f66a6c 5647 network->ssid_len)) {
e174961c 5648 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c 5649 "because of non-network ESSID.\n",
7e272fcf 5650 escape_ssid(network->ssid,
43f66a6c 5651 network->ssid_len),
e174961c 5652 network->bssid);
43f66a6c
JK
5653 return 0;
5654 }
5655 } else {
bf79451e
JG
5656 /* If an ESSID has been configured then compare the broadcast
5657 * ESSID to ours */
5658 if ((priv->config & CFG_STATIC_ESSID) &&
43f66a6c 5659 ((network->ssid_len != priv->essid_len) ||
bf79451e 5660 memcmp(network->ssid, priv->essid,
43f66a6c
JK
5661 min(network->ssid_len, priv->essid_len)))) {
5662 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
0edd5b44 5663 strncpy(escaped,
7e272fcf 5664 escape_ssid(network->ssid, network->ssid_len),
43f66a6c 5665 sizeof(escaped));
e174961c 5666 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
bf79451e 5667 "because of ESSID mismatch: '%s'.\n",
e174961c 5668 escaped, network->bssid,
7e272fcf
JL
5669 escape_ssid(priv->essid,
5670 priv->essid_len));
43f66a6c
JK
5671 return 0;
5672 }
5673 }
5674
5675 /* If the old network rate is better than this one, don't bother
5676 * testing everything else. */
0edd5b44 5677 if (match->network && match->network->stats.rssi > network->stats.rssi) {
43f66a6c 5678 char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
bf79451e 5679 strncpy(escaped,
7e272fcf 5680 escape_ssid(network->ssid, network->ssid_len),
43f66a6c 5681 sizeof(escaped));
e174961c
JB
5682 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded because "
5683 "'%s (%pM)' has a stronger signal.\n",
5684 escaped, network->bssid,
7e272fcf
JL
5685 escape_ssid(match->network->ssid,
5686 match->network->ssid_len),
e174961c 5687 match->network->bssid);
43f66a6c
JK
5688 return 0;
5689 }
bf79451e 5690
43f66a6c
JK
5691 /* If this network has already had an association attempt within the
5692 * last 3 seconds, do not try and associate again... */
5693 if (network->last_associate &&
ea2b26e0 5694 time_after(network->last_associate + (HZ * 3UL), jiffies)) {
e174961c 5695 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
c7b6a674 5696 "because of storming (%ums since last "
43f66a6c 5697 "assoc attempt).\n",
7e272fcf 5698 escape_ssid(network->ssid, network->ssid_len),
e174961c 5699 network->bssid,
2638bc39
ZY
5700 jiffies_to_msecs(jiffies -
5701 network->last_associate));
43f66a6c
JK
5702 return 0;
5703 }
5704
5705 /* Now go through and see if the requested network is valid... */
bf79451e 5706 if (priv->ieee->scan_age != 0 &&
ea2b26e0 5707 time_after(jiffies, network->last_scanned + priv->ieee->scan_age)) {
e174961c 5708 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
c7b6a674 5709 "because of age: %ums.\n",
7e272fcf 5710 escape_ssid(network->ssid, network->ssid_len),
e174961c 5711 network->bssid,
2638bc39
ZY
5712 jiffies_to_msecs(jiffies -
5713 network->last_scanned));
43f66a6c 5714 return 0;
bf79451e 5715 }
43f66a6c 5716
bf79451e 5717 if ((priv->config & CFG_STATIC_CHANNEL) &&
43f66a6c 5718 (network->channel != priv->channel)) {
e174961c 5719 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c 5720 "because of channel mismatch: %d != %d.\n",
7e272fcf 5721 escape_ssid(network->ssid, network->ssid_len),
e174961c 5722 network->bssid,
43f66a6c
JK
5723 network->channel, priv->channel);
5724 return 0;
5725 }
bf79451e 5726
43f66a6c 5727 /* Verify privacy compatability */
bf79451e 5728 if (((priv->capability & CAP_PRIVACY_ON) ? 1 : 0) !=
43f66a6c 5729 ((network->capability & WLAN_CAPABILITY_PRIVACY) ? 1 : 0)) {
e174961c 5730 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c 5731 "because of privacy mismatch: %s != %s.\n",
7e272fcf 5732 escape_ssid(network->ssid, network->ssid_len),
e174961c 5733 network->bssid,
bf79451e 5734 priv->capability & CAP_PRIVACY_ON ? "on" :
43f66a6c 5735 "off",
bf79451e 5736 network->capability &
0edd5b44 5737 WLAN_CAPABILITY_PRIVACY ? "on" : "off");
43f66a6c
JK
5738 return 0;
5739 }
bf79451e
JG
5740
5741 if ((priv->config & CFG_STATIC_BSSID) &&
43f66a6c 5742 memcmp(network->bssid, priv->bssid, ETH_ALEN)) {
e174961c
JB
5743 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
5744 "because of BSSID mismatch: %pM.\n",
7e272fcf 5745 escape_ssid(network->ssid, network->ssid_len),
e174961c 5746 network->bssid, priv->bssid);
43f66a6c
JK
5747 return 0;
5748 }
bf79451e 5749
43f66a6c
JK
5750 /* Filter out any incompatible freq / mode combinations */
5751 if (!ieee80211_is_valid_mode(priv->ieee, network->mode)) {
e174961c 5752 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c
JK
5753 "because of invalid frequency/mode "
5754 "combination.\n",
7e272fcf 5755 escape_ssid(network->ssid, network->ssid_len),
e174961c 5756 network->bssid);
43f66a6c
JK
5757 return 0;
5758 }
bf79451e 5759
1fe0adb4 5760 /* Filter out invalid channel in current GEO */
1867b117 5761 if (!ieee80211_is_valid_channel(priv->ieee, network->channel)) {
e174961c 5762 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
1fe0adb4 5763 "because of invalid channel in current GEO\n",
7e272fcf 5764 escape_ssid(network->ssid, network->ssid_len),
e174961c 5765 network->bssid);
1fe0adb4
LH
5766 return 0;
5767 }
5768
ea2b26e0
JK
5769 /* Ensure that the rates supported by the driver are compatible with
5770 * this AP, including verification of basic rates (mandatory) */
5771 if (!ipw_compatible_rates(priv, network, &rates)) {
e174961c 5772 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
ea2b26e0
JK
5773 "because configured rate mask excludes "
5774 "AP mandatory rate.\n",
7e272fcf 5775 escape_ssid(network->ssid, network->ssid_len),
e174961c 5776 network->bssid);
ea2b26e0
JK
5777 return 0;
5778 }
5779
43f66a6c 5780 if (rates.num_rates == 0) {
e174961c 5781 IPW_DEBUG_ASSOC("Network '%s (%pM)' excluded "
43f66a6c 5782 "because of no compatible rates.\n",
7e272fcf 5783 escape_ssid(network->ssid, network->ssid_len),
e174961c 5784 network->bssid);
43f66a6c
JK
5785 return 0;
5786 }
bf79451e 5787
43f66a6c
JK
5788 /* TODO: Perform any further minimal comparititive tests. We do not
5789 * want to put too much policy logic here; intelligent scan selection
5790 * should occur within a generic IEEE 802.11 user space tool. */
5791
5792 /* Set up 'new' AP to this network */
5793 ipw_copy_rates(&match->rates, &rates);
5794 match->network = network;
5795
e174961c 5796 IPW_DEBUG_ASSOC("Network '%s (%pM)' is a viable match.\n",
7e272fcf 5797 escape_ssid(network->ssid, network->ssid_len),
e174961c 5798 network->bssid);
43f66a6c
JK
5799
5800 return 1;
5801}
5802
bf79451e 5803static void ipw_adhoc_create(struct ipw_priv *priv,
0edd5b44 5804 struct ieee80211_network *network)
43f66a6c 5805{
1867b117 5806 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
afbf30a2
JK
5807 int i;
5808
43f66a6c
JK
5809 /*
5810 * For the purposes of scanning, we can set our wireless mode
5811 * to trigger scans across combinations of bands, but when it
5812 * comes to creating a new ad-hoc network, we have tell the FW
5813 * exactly which band to use.
5814 *
bf79451e 5815 * We also have the possibility of an invalid channel for the
43f66a6c
JK
5816 * chossen band. Attempting to create a new ad-hoc network
5817 * with an invalid channel for wireless mode will trigger a
5818 * FW fatal error.
afbf30a2 5819 *
43f66a6c 5820 */
1867b117 5821 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
afbf30a2
JK
5822 case IEEE80211_52GHZ_BAND:
5823 network->mode = IEEE_A;
1867b117 5824 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
5d9428de 5825 BUG_ON(i == -1);
afbf30a2
JK
5826 if (geo->a[i].flags & IEEE80211_CH_PASSIVE_ONLY) {
5827 IPW_WARNING("Overriding invalid channel\n");
5828 priv->channel = geo->a[0].channel;
5829 }
5830 break;
5831
5832 case IEEE80211_24GHZ_BAND:
5833 if (priv->ieee->mode & IEEE_G)
5834 network->mode = IEEE_G;
5835 else
5836 network->mode = IEEE_B;
1867b117 5837 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
5d9428de 5838 BUG_ON(i == -1);
1fe0adb4
LH
5839 if (geo->bg[i].flags & IEEE80211_CH_PASSIVE_ONLY) {
5840 IPW_WARNING("Overriding invalid channel\n");
5841 priv->channel = geo->bg[0].channel;
5842 }
afbf30a2
JK
5843 break;
5844
5845 default:
43f66a6c
JK
5846 IPW_WARNING("Overriding invalid channel\n");
5847 if (priv->ieee->mode & IEEE_A) {
5848 network->mode = IEEE_A;
b095c381 5849 priv->channel = geo->a[0].channel;
43f66a6c
JK
5850 } else if (priv->ieee->mode & IEEE_G) {
5851 network->mode = IEEE_G;
b095c381 5852 priv->channel = geo->bg[0].channel;
43f66a6c
JK
5853 } else {
5854 network->mode = IEEE_B;
b095c381 5855 priv->channel = geo->bg[0].channel;
43f66a6c 5856 }
afbf30a2
JK
5857 break;
5858 }
43f66a6c
JK
5859
5860 network->channel = priv->channel;
5861 priv->config |= CFG_ADHOC_PERSIST;
5862 ipw_create_bssid(priv, network->bssid);
5863 network->ssid_len = priv->essid_len;
5864 memcpy(network->ssid, priv->essid, priv->essid_len);
5865 memset(&network->stats, 0, sizeof(network->stats));
5866 network->capability = WLAN_CAPABILITY_IBSS;
ea2b26e0
JK
5867 if (!(priv->config & CFG_PREAMBLE_LONG))
5868 network->capability |= WLAN_CAPABILITY_SHORT_PREAMBLE;
43f66a6c
JK
5869 if (priv->capability & CAP_PRIVACY_ON)
5870 network->capability |= WLAN_CAPABILITY_PRIVACY;
5871 network->rates_len = min(priv->rates.num_rates, MAX_RATES_LENGTH);
0edd5b44 5872 memcpy(network->rates, priv->rates.supported_rates, network->rates_len);
43f66a6c 5873 network->rates_ex_len = priv->rates.num_rates - network->rates_len;
bf79451e 5874 memcpy(network->rates_ex,
43f66a6c
JK
5875 &priv->rates.supported_rates[network->rates_len],
5876 network->rates_ex_len);
5877 network->last_scanned = 0;
5878 network->flags = 0;
5879 network->last_associate = 0;
5880 network->time_stamp[0] = 0;
5881 network->time_stamp[1] = 0;
0edd5b44
JG
5882 network->beacon_interval = 100; /* Default */
5883 network->listen_interval = 10; /* Default */
5884 network->atim_window = 0; /* Default */
43f66a6c
JK
5885 network->wpa_ie_len = 0;
5886 network->rsn_ie_len = 0;
43f66a6c
JK
5887}
5888
b095c381
JK
5889static void ipw_send_tgi_tx_key(struct ipw_priv *priv, int type, int index)
5890{
0a7bcf26 5891 struct ipw_tgi_tx_key key;
b095c381
JK
5892
5893 if (!(priv->ieee->sec.flags & (1 << index)))
5894 return;
5895
0a7bcf26
ZY
5896 key.key_id = index;
5897 memcpy(key.key, priv->ieee->sec.keys[index], SCM_TEMPORAL_KEY_LENGTH);
5898 key.security_type = type;
5899 key.station_index = 0; /* always 0 for BSS */
5900 key.flags = 0;
b095c381 5901 /* 0 for new key; previous value of counter (after fatal error) */
851ca268
ZY
5902 key.tx_counter[0] = cpu_to_le32(0);
5903 key.tx_counter[1] = cpu_to_le32(0);
b095c381 5904
0a7bcf26 5905 ipw_send_cmd_pdu(priv, IPW_CMD_TGI_TX_KEY, sizeof(key), &key);
b095c381
JK
5906}
5907
5908static void ipw_send_wep_keys(struct ipw_priv *priv, int type)
43f66a6c 5909{
0a7bcf26 5910 struct ipw_wep_key key;
43f66a6c 5911 int i;
43f66a6c 5912
0a7bcf26
ZY
5913 key.cmd_id = DINO_CMD_WEP_KEY;
5914 key.seq_num = 0;
43f66a6c 5915
b095c381
JK
5916 /* Note: AES keys cannot be set for multiple times.
5917 * Only set it at the first time. */
bf79451e 5918 for (i = 0; i < 4; i++) {
0a7bcf26 5919 key.key_index = i | type;
b095c381 5920 if (!(priv->ieee->sec.flags & (1 << i))) {
0a7bcf26 5921 key.key_size = 0;
b095c381 5922 continue;
43f66a6c
JK
5923 }
5924
0a7bcf26
ZY
5925 key.key_size = priv->ieee->sec.key_sizes[i];
5926 memcpy(key.key, priv->ieee->sec.keys[i], key.key_size);
b095c381 5927
0a7bcf26 5928 ipw_send_cmd_pdu(priv, IPW_CMD_WEP_KEY, sizeof(key), &key);
bf79451e 5929 }
43f66a6c
JK
5930}
5931
1fbfea54 5932static void ipw_set_hw_decrypt_unicast(struct ipw_priv *priv, int level)
43f66a6c 5933{
1fbfea54 5934 if (priv->ieee->host_encrypt)
43f66a6c 5935 return;
43f66a6c 5936
1fbfea54
ZY
5937 switch (level) {
5938 case SEC_LEVEL_3:
5939 priv->sys_config.disable_unicast_decryption = 0;
5940 priv->ieee->host_decrypt = 0;
5941 break;
5942 case SEC_LEVEL_2:
5943 priv->sys_config.disable_unicast_decryption = 1;
5944 priv->ieee->host_decrypt = 1;
5945 break;
5946 case SEC_LEVEL_1:
5947 priv->sys_config.disable_unicast_decryption = 0;
5948 priv->ieee->host_decrypt = 0;
5949 break;
5950 case SEC_LEVEL_0:
5951 priv->sys_config.disable_unicast_decryption = 1;
5952 break;
5953 default:
5954 break;
5955 }
5956}
5957
5958static void ipw_set_hw_decrypt_multicast(struct ipw_priv *priv, int level)
5959{
5960 if (priv->ieee->host_encrypt)
5961 return;
5962
5963 switch (level) {
5964 case SEC_LEVEL_3:
5965 priv->sys_config.disable_multicast_decryption = 0;
5966 break;
5967 case SEC_LEVEL_2:
5968 priv->sys_config.disable_multicast_decryption = 1;
5969 break;
5970 case SEC_LEVEL_1:
5971 priv->sys_config.disable_multicast_decryption = 0;
5972 break;
5973 case SEC_LEVEL_0:
5974 priv->sys_config.disable_multicast_decryption = 1;
5975 break;
5976 default:
5977 break;
5978 }
5979}
5980
b095c381
JK
5981static void ipw_set_hwcrypto_keys(struct ipw_priv *priv)
5982{
5983 switch (priv->ieee->sec.level) {
5984 case SEC_LEVEL_3:
d8bad6df
ZY
5985 if (priv->ieee->sec.flags & SEC_ACTIVE_KEY)
5986 ipw_send_tgi_tx_key(priv,
5987 DCT_FLAG_EXT_SECURITY_CCM,
5988 priv->ieee->sec.active_key);
afbf30a2 5989
567deaf6
HL
5990 if (!priv->ieee->host_mc_decrypt)
5991 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_CCM);
b095c381
JK
5992 break;
5993 case SEC_LEVEL_2:
d8bad6df
ZY
5994 if (priv->ieee->sec.flags & SEC_ACTIVE_KEY)
5995 ipw_send_tgi_tx_key(priv,
5996 DCT_FLAG_EXT_SECURITY_TKIP,
5997 priv->ieee->sec.active_key);
b095c381
JK
5998 break;
5999 case SEC_LEVEL_1:
6000 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_WEP);
29cb843e
HL
6001 ipw_set_hw_decrypt_unicast(priv, priv->ieee->sec.level);
6002 ipw_set_hw_decrypt_multicast(priv, priv->ieee->sec.level);
b095c381
JK
6003 break;
6004 case SEC_LEVEL_0:
6005 default:
6006 break;
6007 }
6008}
6009
43f66a6c
JK
6010static void ipw_adhoc_check(void *data)
6011{
6012 struct ipw_priv *priv = data;
bf79451e 6013
afbf30a2 6014 if (priv->missed_adhoc_beacons++ > priv->disassociate_threshold &&
43f66a6c 6015 !(priv->config & CFG_ADHOC_PERSIST)) {
afbf30a2
JK
6016 IPW_DEBUG(IPW_DL_INFO | IPW_DL_NOTIF |
6017 IPW_DL_STATE | IPW_DL_ASSOC,
6018 "Missed beacon: %d - disassociate\n",
6019 priv->missed_adhoc_beacons);
43f66a6c
JK
6020 ipw_remove_current_network(priv);
6021 ipw_disassociate(priv);
6022 return;
6023 }
6024
bf79451e 6025 queue_delayed_work(priv->workqueue, &priv->adhoc_check,
5b5e807f 6026 le16_to_cpu(priv->assoc_request.beacon_interval));
43f66a6c
JK
6027}
6028
c4028958 6029static void ipw_bg_adhoc_check(struct work_struct *work)
c848d0af 6030{
c4028958
DH
6031 struct ipw_priv *priv =
6032 container_of(work, struct ipw_priv, adhoc_check.work);
4644151b 6033 mutex_lock(&priv->mutex);
c4028958 6034 ipw_adhoc_check(priv);
4644151b 6035 mutex_unlock(&priv->mutex);
c848d0af
JK
6036}
6037
43f66a6c
JK
6038static void ipw_debug_config(struct ipw_priv *priv)
6039{
6040 IPW_DEBUG_INFO("Scan completed, no valid APs matched "
6041 "[CFG 0x%08X]\n", priv->config);
6042 if (priv->config & CFG_STATIC_CHANNEL)
0edd5b44 6043 IPW_DEBUG_INFO("Channel locked to %d\n", priv->channel);
43f66a6c
JK
6044 else
6045 IPW_DEBUG_INFO("Channel unlocked.\n");
6046 if (priv->config & CFG_STATIC_ESSID)
bf79451e 6047 IPW_DEBUG_INFO("ESSID locked to '%s'\n",
7e272fcf 6048 escape_ssid(priv->essid, priv->essid_len));
43f66a6c
JK
6049 else
6050 IPW_DEBUG_INFO("ESSID unlocked.\n");
6051 if (priv->config & CFG_STATIC_BSSID)
e174961c 6052 IPW_DEBUG_INFO("BSSID locked to %pM\n", priv->bssid);
43f66a6c
JK
6053 else
6054 IPW_DEBUG_INFO("BSSID unlocked.\n");
6055 if (priv->capability & CAP_PRIVACY_ON)
6056 IPW_DEBUG_INFO("PRIVACY on\n");
6057 else
6058 IPW_DEBUG_INFO("PRIVACY off\n");
6059 IPW_DEBUG_INFO("RATE MASK: 0x%08X\n", priv->rates_mask);
6060}
43f66a6c 6061
858119e1 6062static void ipw_set_fixed_rate(struct ipw_priv *priv, int mode)
43f66a6c
JK
6063{
6064 /* TODO: Verify that this works... */
6065 struct ipw_fixed_rate fr = {
6066 .tx_rates = priv->rates_mask
6067 };
6068 u32 reg;
6069 u16 mask = 0;
6070
bf79451e 6071 /* Identify 'current FW band' and match it with the fixed
43f66a6c 6072 * Tx rates */
bf79451e 6073
43f66a6c 6074 switch (priv->ieee->freq_band) {
0edd5b44 6075 case IEEE80211_52GHZ_BAND: /* A only */
43f66a6c
JK
6076 /* IEEE_A */
6077 if (priv->rates_mask & ~IEEE80211_OFDM_RATES_MASK) {
6078 /* Invalid fixed rate mask */
ea2b26e0
JK
6079 IPW_DEBUG_WX
6080 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK
6081 fr.tx_rates = 0;
6082 break;
6083 }
bf79451e 6084
43f66a6c
JK
6085 fr.tx_rates >>= IEEE80211_OFDM_SHIFT_MASK_A;
6086 break;
6087
0edd5b44 6088 default: /* 2.4Ghz or Mixed */
43f66a6c 6089 /* IEEE_B */
b095c381 6090 if (mode == IEEE_B) {
43f66a6c
JK
6091 if (fr.tx_rates & ~IEEE80211_CCK_RATES_MASK) {
6092 /* Invalid fixed rate mask */
ea2b26e0
JK
6093 IPW_DEBUG_WX
6094 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK
6095 fr.tx_rates = 0;
6096 }
6097 break;
bf79451e 6098 }
43f66a6c
JK
6099
6100 /* IEEE_G */
6101 if (fr.tx_rates & ~(IEEE80211_CCK_RATES_MASK |
6102 IEEE80211_OFDM_RATES_MASK)) {
6103 /* Invalid fixed rate mask */
ea2b26e0
JK
6104 IPW_DEBUG_WX
6105 ("invalid fixed rate mask in ipw_set_fixed_rate\n");
43f66a6c
JK
6106 fr.tx_rates = 0;
6107 break;
6108 }
bf79451e 6109
43f66a6c
JK
6110 if (IEEE80211_OFDM_RATE_6MB_MASK & fr.tx_rates) {
6111 mask |= (IEEE80211_OFDM_RATE_6MB_MASK >> 1);
6112 fr.tx_rates &= ~IEEE80211_OFDM_RATE_6MB_MASK;
6113 }
bf79451e 6114
43f66a6c
JK
6115 if (IEEE80211_OFDM_RATE_9MB_MASK & fr.tx_rates) {
6116 mask |= (IEEE80211_OFDM_RATE_9MB_MASK >> 1);
6117 fr.tx_rates &= ~IEEE80211_OFDM_RATE_9MB_MASK;
6118 }
bf79451e 6119
43f66a6c
JK
6120 if (IEEE80211_OFDM_RATE_12MB_MASK & fr.tx_rates) {
6121 mask |= (IEEE80211_OFDM_RATE_12MB_MASK >> 1);
6122 fr.tx_rates &= ~IEEE80211_OFDM_RATE_12MB_MASK;
6123 }
bf79451e 6124
43f66a6c
JK
6125 fr.tx_rates |= mask;
6126 break;
6127 }
6128
6129 reg = ipw_read32(priv, IPW_MEM_FIXED_OVERRIDE);
0edd5b44 6130 ipw_write_reg32(priv, reg, *(u32 *) & fr);
43f66a6c
JK
6131}
6132
ea2b26e0 6133static void ipw_abort_scan(struct ipw_priv *priv)
43f66a6c
JK
6134{
6135 int err;
6136
ea2b26e0
JK
6137 if (priv->status & STATUS_SCAN_ABORTING) {
6138 IPW_DEBUG_HC("Ignoring concurrent scan abort request.\n");
6139 return;
6140 }
6141 priv->status |= STATUS_SCAN_ABORTING;
43f66a6c 6142
ea2b26e0
JK
6143 err = ipw_send_scan_abort(priv);
6144 if (err)
6145 IPW_DEBUG_HC("Request to abort scan failed.\n");
6146}
6147
afbf30a2
JK
6148static void ipw_add_scan_channels(struct ipw_priv *priv,
6149 struct ipw_scan_request_ext *scan,
6150 int scan_type)
ea2b26e0 6151{
ea2b26e0 6152 int channel_index = 0;
b095c381 6153 const struct ieee80211_geo *geo;
afbf30a2 6154 int i;
b095c381 6155
1867b117 6156 geo = ieee80211_get_geo(priv->ieee);
43f66a6c 6157
afbf30a2
JK
6158 if (priv->ieee->freq_band & IEEE80211_52GHZ_BAND) {
6159 int start = channel_index;
6160 for (i = 0; i < geo->a_channels; i++) {
6161 if ((priv->status & STATUS_ASSOCIATED) &&
6162 geo->a[i].channel == priv->channel)
6163 continue;
6164 channel_index++;
6165 scan->channels_list[channel_index] = geo->a[i].channel;
1fe0adb4
LH
6166 ipw_set_scan_type(scan, channel_index,
6167 geo->a[i].
6168 flags & IEEE80211_CH_PASSIVE_ONLY ?
6169 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN :
6170 scan_type);
afbf30a2
JK
6171 }
6172
6173 if (start != channel_index) {
6174 scan->channels_list[start] = (u8) (IPW_A_MODE << 6) |
6175 (channel_index - start);
6176 channel_index++;
6177 }
6178 }
6179
6180 if (priv->ieee->freq_band & IEEE80211_24GHZ_BAND) {
6181 int start = channel_index;
6182 if (priv->config & CFG_SPEED_SCAN) {
1fe0adb4 6183 int index;
afbf30a2
JK
6184 u8 channels[IEEE80211_24GHZ_CHANNELS] = {
6185 /* nop out the list */
6186 [0] = 0
6187 };
6188
6189 u8 channel;
6190 while (channel_index < IPW_SCAN_CHANNELS) {
6191 channel =
6192 priv->speed_scan[priv->speed_scan_pos];
6193 if (channel == 0) {
6194 priv->speed_scan_pos = 0;
6195 channel = priv->speed_scan[0];
6196 }
6197 if ((priv->status & STATUS_ASSOCIATED) &&
6198 channel == priv->channel) {
6199 priv->speed_scan_pos++;
6200 continue;
6201 }
6202
6203 /* If this channel has already been
6204 * added in scan, break from loop
6205 * and this will be the first channel
6206 * in the next scan.
6207 */
6208 if (channels[channel - 1] != 0)
6209 break;
6210
6211 channels[channel - 1] = 1;
6212 priv->speed_scan_pos++;
6213 channel_index++;
6214 scan->channels_list[channel_index] = channel;
1fe0adb4 6215 index =
1867b117 6216 ieee80211_channel_to_index(priv->ieee, channel);
afbf30a2 6217 ipw_set_scan_type(scan, channel_index,
1fe0adb4
LH
6218 geo->bg[index].
6219 flags &
6220 IEEE80211_CH_PASSIVE_ONLY ?
6221 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN
6222 : scan_type);
afbf30a2
JK
6223 }
6224 } else {
6225 for (i = 0; i < geo->bg_channels; i++) {
6226 if ((priv->status & STATUS_ASSOCIATED) &&
6227 geo->bg[i].channel == priv->channel)
6228 continue;
6229 channel_index++;
6230 scan->channels_list[channel_index] =
6231 geo->bg[i].channel;
6232 ipw_set_scan_type(scan, channel_index,
1fe0adb4
LH
6233 geo->bg[i].
6234 flags &
6235 IEEE80211_CH_PASSIVE_ONLY ?
6236 IPW_SCAN_PASSIVE_FULL_DWELL_SCAN
6237 : scan_type);
afbf30a2
JK
6238 }
6239 }
6240
6241 if (start != channel_index) {
6242 scan->channels_list[start] = (u8) (IPW_B_MODE << 6) |
6243 (channel_index - start);
6244 }
6245 }
6246}
6247
ea177305 6248static int ipw_request_scan_helper(struct ipw_priv *priv, int type, int direct)
afbf30a2
JK
6249{
6250 struct ipw_scan_request_ext scan;
6251 int err = 0, scan_type;
6252
6253 if (!(priv->status & STATUS_INIT) ||
6254 (priv->status & STATUS_EXIT_PENDING))
6255 return 0;
6256
4644151b 6257 mutex_lock(&priv->mutex);
afbf30a2 6258
ea177305
DW
6259 if (direct && (priv->direct_scan_ssid_len == 0)) {
6260 IPW_DEBUG_HC("Direct scan requested but no SSID to scan for\n");
6261 priv->status &= ~STATUS_DIRECT_SCAN_PENDING;
6262 goto done;
6263 }
6264
ea2b26e0 6265 if (priv->status & STATUS_SCANNING) {
ea177305
DW
6266 IPW_DEBUG_HC("Concurrent scan requested. Queuing.\n");
6267 priv->status |= direct ? STATUS_DIRECT_SCAN_PENDING :
6268 STATUS_SCAN_PENDING;
b095c381 6269 goto done;
ea2b26e0 6270 }
43f66a6c 6271
afbf30a2
JK
6272 if (!(priv->status & STATUS_SCAN_FORCED) &&
6273 priv->status & STATUS_SCAN_ABORTING) {
ea2b26e0 6274 IPW_DEBUG_HC("Scan request while abort pending. Queuing.\n");
ea177305
DW
6275 priv->status |= direct ? STATUS_DIRECT_SCAN_PENDING :
6276 STATUS_SCAN_PENDING;
b095c381 6277 goto done;
43f66a6c
JK
6278 }
6279
ea2b26e0 6280 if (priv->status & STATUS_RF_KILL_MASK) {
ea177305
DW
6281 IPW_DEBUG_HC("Queuing scan due to RF Kill activation\n");
6282 priv->status |= direct ? STATUS_DIRECT_SCAN_PENDING :
6283 STATUS_SCAN_PENDING;
b095c381 6284 goto done;
ea2b26e0 6285 }
43f66a6c 6286
ea2b26e0 6287 memset(&scan, 0, sizeof(scan));
094c4d2d 6288 scan.full_scan_index = cpu_to_le32(ieee80211_get_scans(priv->ieee));
43f66a6c 6289
094c4d2d
ZY
6290 if (type == IW_SCAN_TYPE_PASSIVE) {
6291 IPW_DEBUG_WX("use passive scanning\n");
6292 scan_type = IPW_SCAN_PASSIVE_FULL_DWELL_SCAN;
6293 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] =
6294 cpu_to_le16(120);
6295 ipw_add_scan_channels(priv, &scan, scan_type);
6296 goto send_request;
6297 }
6298
6299 /* Use active scan by default. */
6300 if (priv->config & CFG_SPEED_SCAN)
b095c381 6301 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
094c4d2d 6302 cpu_to_le16(30);
b095c381
JK
6303 else
6304 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_SCAN] =
094c4d2d 6305 cpu_to_le16(20);
b095c381 6306
a613bffd 6307 scan.dwell_time[IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN] =
094c4d2d 6308 cpu_to_le16(20);
43f66a6c 6309
094c4d2d 6310 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] = cpu_to_le16(120);
ea177305 6311 scan.dwell_time[IPW_SCAN_ACTIVE_DIRECT_SCAN] = cpu_to_le16(20);
43f66a6c 6312
b095c381 6313#ifdef CONFIG_IPW2200_MONITOR
ea2b26e0 6314 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 6315 u8 channel;
b095c381 6316 u8 band = 0;
43f66a6c 6317
1867b117 6318 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
b095c381 6319 case IEEE80211_52GHZ_BAND:
ea2b26e0 6320 band = (u8) (IPW_A_MODE << 6) | 1;
b095c381
JK
6321 channel = priv->channel;
6322 break;
ea2b26e0 6323
b095c381 6324 case IEEE80211_24GHZ_BAND:
ea2b26e0 6325 band = (u8) (IPW_B_MODE << 6) | 1;
b095c381
JK
6326 channel = priv->channel;
6327 break;
ea2b26e0 6328
b095c381 6329 default:
ea2b26e0
JK
6330 band = (u8) (IPW_B_MODE << 6) | 1;
6331 channel = 9;
b095c381 6332 break;
ea2b26e0
JK
6333 }
6334
b095c381
JK
6335 scan.channels_list[0] = band;
6336 scan.channels_list[1] = channel;
6337 ipw_set_scan_type(&scan, 1, IPW_SCAN_PASSIVE_FULL_DWELL_SCAN);
ea2b26e0 6338
b095c381
JK
6339 /* NOTE: The card will sit on this channel for this time
6340 * period. Scan aborts are timing sensitive and frequently
6341 * result in firmware restarts. As such, it is best to
6342 * set a small dwell_time here and just keep re-issuing
6343 * scans. Otherwise fast channel hopping will not actually
6344 * hop channels.
6345 *
6346 * TODO: Move SPEED SCAN support to all modes and bands */
a613bffd 6347 scan.dwell_time[IPW_SCAN_PASSIVE_FULL_DWELL_SCAN] =
094c4d2d 6348 cpu_to_le16(2000);
43f66a6c 6349 } else {
b095c381 6350#endif /* CONFIG_IPW2200_MONITOR */
ea177305
DW
6351 /* Honor direct scans first, otherwise if we are roaming make
6352 * this a direct scan for the current network. Finally,
6353 * ensure that every other scan is a fast channel hop scan */
6354 if (direct) {
6355 err = ipw_send_ssid(priv, priv->direct_scan_ssid,
6356 priv->direct_scan_ssid_len);
6357 if (err) {
6358 IPW_DEBUG_HC("Attempt to send SSID command "
6359 "failed\n");
6360 goto done;
6361 }
6362
6363 scan_type = IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN;
6364 } else if ((priv->status & STATUS_ROAMING)
6365 || (!(priv->status & STATUS_ASSOCIATED)
6366 && (priv->config & CFG_STATIC_ESSID)
6367 && (le32_to_cpu(scan.full_scan_index) % 2))) {
ea2b26e0
JK
6368 err = ipw_send_ssid(priv, priv->essid, priv->essid_len);
6369 if (err) {
b095c381
JK
6370 IPW_DEBUG_HC("Attempt to send SSID command "
6371 "failed.\n");
6372 goto done;
ea2b26e0 6373 }
43f66a6c 6374
ea2b26e0 6375 scan_type = IPW_SCAN_ACTIVE_BROADCAST_AND_DIRECT_SCAN;
afbf30a2 6376 } else
ea2b26e0 6377 scan_type = IPW_SCAN_ACTIVE_BROADCAST_SCAN;
ea2b26e0 6378
afbf30a2 6379 ipw_add_scan_channels(priv, &scan, scan_type);
b095c381 6380#ifdef CONFIG_IPW2200_MONITOR
43f66a6c 6381 }
ea2b26e0 6382#endif
bf79451e 6383
094c4d2d 6384send_request:
ea2b26e0 6385 err = ipw_send_scan_request_ext(priv, &scan);
43f66a6c 6386 if (err) {
ea2b26e0 6387 IPW_DEBUG_HC("Sending scan command failed: %08X\n", err);
b095c381 6388 goto done;
43f66a6c
JK
6389 }
6390
ea2b26e0 6391 priv->status |= STATUS_SCANNING;
ea177305
DW
6392 if (direct) {
6393 priv->status &= ~STATUS_DIRECT_SCAN_PENDING;
6394 priv->direct_scan_ssid_len = 0;
6395 } else
6396 priv->status &= ~STATUS_SCAN_PENDING;
6397
afbf30a2
JK
6398 queue_delayed_work(priv->workqueue, &priv->scan_check,
6399 IPW_SCAN_CHECK_WATCHDOG);
094c4d2d 6400done:
4644151b 6401 mutex_unlock(&priv->mutex);
b095c381 6402 return err;
c848d0af
JK
6403}
6404
c4028958
DH
6405static void ipw_request_passive_scan(struct work_struct *work)
6406{
6407 struct ipw_priv *priv =
ea177305
DW
6408 container_of(work, struct ipw_priv, request_passive_scan.work);
6409 ipw_request_scan_helper(priv, IW_SCAN_TYPE_PASSIVE, 0);
094c4d2d
ZY
6410}
6411
c4028958
DH
6412static void ipw_request_scan(struct work_struct *work)
6413{
6414 struct ipw_priv *priv =
6415 container_of(work, struct ipw_priv, request_scan.work);
ea177305
DW
6416 ipw_request_scan_helper(priv, IW_SCAN_TYPE_ACTIVE, 0);
6417}
6418
6419static void ipw_request_direct_scan(struct work_struct *work)
6420{
6421 struct ipw_priv *priv =
6422 container_of(work, struct ipw_priv, request_direct_scan.work);
6423 ipw_request_scan_helper(priv, IW_SCAN_TYPE_ACTIVE, 1);
094c4d2d
ZY
6424}
6425
c4028958 6426static void ipw_bg_abort_scan(struct work_struct *work)
c848d0af 6427{
c4028958
DH
6428 struct ipw_priv *priv =
6429 container_of(work, struct ipw_priv, abort_scan);
4644151b 6430 mutex_lock(&priv->mutex);
c4028958 6431 ipw_abort_scan(priv);
4644151b 6432 mutex_unlock(&priv->mutex);
c848d0af
JK
6433}
6434
ea2b26e0
JK
6435static int ipw_wpa_enable(struct ipw_priv *priv, int value)
6436{
b095c381
JK
6437 /* This is called when wpa_supplicant loads and closes the driver
6438 * interface. */
cdd1fa1e 6439 priv->ieee->wpa_enabled = value;
b095c381 6440 return 0;
ea2b26e0
JK
6441}
6442
ea2b26e0
JK
6443static int ipw_wpa_set_auth_algs(struct ipw_priv *priv, int value)
6444{
6445 struct ieee80211_device *ieee = priv->ieee;
6446 struct ieee80211_security sec = {
6447 .flags = SEC_AUTH_MODE,
6448 };
6449 int ret = 0;
6450
afbf30a2 6451 if (value & IW_AUTH_ALG_SHARED_KEY) {
ea2b26e0
JK
6452 sec.auth_mode = WLAN_AUTH_SHARED_KEY;
6453 ieee->open_wep = 0;
afbf30a2 6454 } else if (value & IW_AUTH_ALG_OPEN_SYSTEM) {
ea2b26e0
JK
6455 sec.auth_mode = WLAN_AUTH_OPEN;
6456 ieee->open_wep = 1;
3e234b4e
ZY
6457 } else if (value & IW_AUTH_ALG_LEAP) {
6458 sec.auth_mode = WLAN_AUTH_LEAP;
6459 ieee->open_wep = 1;
afbf30a2
JK
6460 } else
6461 return -EINVAL;
ea2b26e0
JK
6462
6463 if (ieee->set_security)
6464 ieee->set_security(ieee->dev, &sec);
6465 else
6466 ret = -EOPNOTSUPP;
6467
6468 return ret;
6469}
6470
a73e22b2
AB
6471static void ipw_wpa_assoc_frame(struct ipw_priv *priv, char *wpa_ie,
6472 int wpa_ie_len)
afbf30a2
JK
6473{
6474 /* make sure WPA is enabled */
6475 ipw_wpa_enable(priv, 1);
afbf30a2
JK
6476}
6477
6478static int ipw_set_rsn_capa(struct ipw_priv *priv,
6479 char *capabilities, int length)
6480{
afbf30a2
JK
6481 IPW_DEBUG_HC("HOST_CMD_RSN_CAPABILITIES\n");
6482
0a7bcf26 6483 return ipw_send_cmd_pdu(priv, IPW_CMD_RSN_CAPABILITIES, length,
2638bc39 6484 capabilities);
afbf30a2
JK
6485}
6486
b095c381 6487/*
afbf30a2
JK
6488 * WE-18 support
6489 */
6490
6491/* SIOCSIWGENIE */
6492static int ipw_wx_set_genie(struct net_device *dev,
6493 struct iw_request_info *info,
6494 union iwreq_data *wrqu, char *extra)
ea2b26e0 6495{
afbf30a2
JK
6496 struct ipw_priv *priv = ieee80211_priv(dev);
6497 struct ieee80211_device *ieee = priv->ieee;
6498 u8 *buf;
6499 int err = 0;
ea2b26e0 6500
afbf30a2
JK
6501 if (wrqu->data.length > MAX_WPA_IE_LEN ||
6502 (wrqu->data.length && extra == NULL))
6503 return -EINVAL;
ea2b26e0 6504
afbf30a2
JK
6505 if (wrqu->data.length) {
6506 buf = kmalloc(wrqu->data.length, GFP_KERNEL);
6507 if (buf == NULL) {
6508 err = -ENOMEM;
6509 goto out;
6510 }
6511
6512 memcpy(buf, extra, wrqu->data.length);
6513 kfree(ieee->wpa_ie);
6514 ieee->wpa_ie = buf;
6515 ieee->wpa_ie_len = wrqu->data.length;
b095c381 6516 } else {
afbf30a2
JK
6517 kfree(ieee->wpa_ie);
6518 ieee->wpa_ie = NULL;
6519 ieee->wpa_ie_len = 0;
ea2b26e0 6520 }
afbf30a2
JK
6521
6522 ipw_wpa_assoc_frame(priv, ieee->wpa_ie, ieee->wpa_ie_len);
6523 out:
afbf30a2
JK
6524 return err;
6525}
6526
6527/* SIOCGIWGENIE */
6528static int ipw_wx_get_genie(struct net_device *dev,
6529 struct iw_request_info *info,
6530 union iwreq_data *wrqu, char *extra)
6531{
6532 struct ipw_priv *priv = ieee80211_priv(dev);
6533 struct ieee80211_device *ieee = priv->ieee;
6534 int err = 0;
6535
afbf30a2
JK
6536 if (ieee->wpa_ie_len == 0 || ieee->wpa_ie == NULL) {
6537 wrqu->data.length = 0;
6538 goto out;
6539 }
6540
6541 if (wrqu->data.length < ieee->wpa_ie_len) {
6542 err = -E2BIG;
6543 goto out;
6544 }
6545
6546 wrqu->data.length = ieee->wpa_ie_len;
6547 memcpy(extra, ieee->wpa_ie, ieee->wpa_ie_len);
6548
6549 out:
afbf30a2
JK
6550 return err;
6551}
6552
1fbfea54
ZY
6553static int wext_cipher2level(int cipher)
6554{
6555 switch (cipher) {
6556 case IW_AUTH_CIPHER_NONE:
6557 return SEC_LEVEL_0;
6558 case IW_AUTH_CIPHER_WEP40:
6559 case IW_AUTH_CIPHER_WEP104:
6560 return SEC_LEVEL_1;
6561 case IW_AUTH_CIPHER_TKIP:
6562 return SEC_LEVEL_2;
6563 case IW_AUTH_CIPHER_CCMP:
6564 return SEC_LEVEL_3;
6565 default:
6566 return -1;
6567 }
6568}
6569
afbf30a2
JK
6570/* SIOCSIWAUTH */
6571static int ipw_wx_set_auth(struct net_device *dev,
6572 struct iw_request_info *info,
6573 union iwreq_data *wrqu, char *extra)
6574{
6575 struct ipw_priv *priv = ieee80211_priv(dev);
6576 struct ieee80211_device *ieee = priv->ieee;
6577 struct iw_param *param = &wrqu->param;
6578 struct ieee80211_crypt_data *crypt;
6579 unsigned long flags;
6580 int ret = 0;
6581
6582 switch (param->flags & IW_AUTH_INDEX) {
6583 case IW_AUTH_WPA_VERSION:
1fbfea54 6584 break;
afbf30a2 6585 case IW_AUTH_CIPHER_PAIRWISE:
1fbfea54
ZY
6586 ipw_set_hw_decrypt_unicast(priv,
6587 wext_cipher2level(param->value));
6588 break;
afbf30a2 6589 case IW_AUTH_CIPHER_GROUP:
1fbfea54
ZY
6590 ipw_set_hw_decrypt_multicast(priv,
6591 wext_cipher2level(param->value));
6592 break;
afbf30a2
JK
6593 case IW_AUTH_KEY_MGMT:
6594 /*
6595 * ipw2200 does not use these parameters
6596 */
6597 break;
6598
6599 case IW_AUTH_TKIP_COUNTERMEASURES:
6600 crypt = priv->ieee->crypt[priv->ieee->tx_keyidx];
991d1cc5 6601 if (!crypt || !crypt->ops->set_flags || !crypt->ops->get_flags)
afbf30a2 6602 break;
afbf30a2
JK
6603
6604 flags = crypt->ops->get_flags(crypt->priv);
6605
6606 if (param->value)
6607 flags |= IEEE80211_CRYPTO_TKIP_COUNTERMEASURES;
6608 else
6609 flags &= ~IEEE80211_CRYPTO_TKIP_COUNTERMEASURES;
6610
6611 crypt->ops->set_flags(flags, crypt->priv);
6612
6613 break;
6614
6615 case IW_AUTH_DROP_UNENCRYPTED:{
6616 /* HACK:
6617 *
6618 * wpa_supplicant calls set_wpa_enabled when the driver
6619 * is loaded and unloaded, regardless of if WPA is being
6620 * used. No other calls are made which can be used to
6621 * determine if encryption will be used or not prior to
6622 * association being expected. If encryption is not being
6623 * used, drop_unencrypted is set to false, else true -- we
6624 * can use this to determine if the CAP_PRIVACY_ON bit should
6625 * be set.
6626 */
6627 struct ieee80211_security sec = {
6628 .flags = SEC_ENABLED,
6629 .enabled = param->value,
6630 };
6631 priv->ieee->drop_unencrypted = param->value;
6632 /* We only change SEC_LEVEL for open mode. Others
6633 * are set by ipw_wpa_set_encryption.
6634 */
6635 if (!param->value) {
6636 sec.flags |= SEC_LEVEL;
6637 sec.level = SEC_LEVEL_0;
6638 } else {
6639 sec.flags |= SEC_LEVEL;
6640 sec.level = SEC_LEVEL_1;
6641 }
6642 if (priv->ieee->set_security)
6643 priv->ieee->set_security(priv->ieee->dev, &sec);
6644 break;
6645 }
6646
6647 case IW_AUTH_80211_AUTH_ALG:
6648 ret = ipw_wpa_set_auth_algs(priv, param->value);
6649 break;
6650
6651 case IW_AUTH_WPA_ENABLED:
6652 ret = ipw_wpa_enable(priv, param->value);
e3c5a64e 6653 ipw_disassociate(priv);
afbf30a2
JK
6654 break;
6655
6656 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6657 ieee->ieee802_1x = param->value;
6658 break;
6659
afbf30a2
JK
6660 case IW_AUTH_PRIVACY_INVOKED:
6661 ieee->privacy_invoked = param->value;
6662 break;
6663
6664 default:
6665 return -EOPNOTSUPP;
6666 }
6667 return ret;
6668}
6669
6670/* SIOCGIWAUTH */
6671static int ipw_wx_get_auth(struct net_device *dev,
6672 struct iw_request_info *info,
6673 union iwreq_data *wrqu, char *extra)
6674{
6675 struct ipw_priv *priv = ieee80211_priv(dev);
6676 struct ieee80211_device *ieee = priv->ieee;
6677 struct ieee80211_crypt_data *crypt;
6678 struct iw_param *param = &wrqu->param;
6679 int ret = 0;
6680
6681 switch (param->flags & IW_AUTH_INDEX) {
6682 case IW_AUTH_WPA_VERSION:
6683 case IW_AUTH_CIPHER_PAIRWISE:
6684 case IW_AUTH_CIPHER_GROUP:
6685 case IW_AUTH_KEY_MGMT:
6686 /*
6687 * wpa_supplicant will control these internally
6688 */
6689 ret = -EOPNOTSUPP;
6690 break;
6691
6692 case IW_AUTH_TKIP_COUNTERMEASURES:
6693 crypt = priv->ieee->crypt[priv->ieee->tx_keyidx];
991d1cc5 6694 if (!crypt || !crypt->ops->get_flags)
afbf30a2 6695 break;
afbf30a2
JK
6696
6697 param->value = (crypt->ops->get_flags(crypt->priv) &
6698 IEEE80211_CRYPTO_TKIP_COUNTERMEASURES) ? 1 : 0;
6699
6700 break;
6701
6702 case IW_AUTH_DROP_UNENCRYPTED:
6703 param->value = ieee->drop_unencrypted;
6704 break;
6705
6706 case IW_AUTH_80211_AUTH_ALG:
6707 param->value = ieee->sec.auth_mode;
6708 break;
6709
6710 case IW_AUTH_WPA_ENABLED:
6711 param->value = ieee->wpa_enabled;
6712 break;
6713
6714 case IW_AUTH_RX_UNENCRYPTED_EAPOL:
6715 param->value = ieee->ieee802_1x;
6716 break;
6717
6718 case IW_AUTH_ROAMING_CONTROL:
6719 case IW_AUTH_PRIVACY_INVOKED:
6720 param->value = ieee->privacy_invoked;
6721 break;
6722
6723 default:
6724 return -EOPNOTSUPP;
6725 }
6726 return 0;
6727}
6728
6729/* SIOCSIWENCODEEXT */
6730static int ipw_wx_set_encodeext(struct net_device *dev,
6731 struct iw_request_info *info,
6732 union iwreq_data *wrqu, char *extra)
6733{
6734 struct ipw_priv *priv = ieee80211_priv(dev);
6735 struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
6736
6737 if (hwcrypto) {
afbf30a2 6738 if (ext->alg == IW_ENCODE_ALG_TKIP) {
567deaf6
HL
6739 /* IPW HW can't build TKIP MIC,
6740 host decryption still needed */
6741 if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
6742 priv->ieee->host_mc_decrypt = 1;
6743 else {
6744 priv->ieee->host_encrypt = 0;
6745 priv->ieee->host_encrypt_msdu = 1;
6746 priv->ieee->host_decrypt = 1;
6747 }
afbf30a2
JK
6748 } else {
6749 priv->ieee->host_encrypt = 0;
6750 priv->ieee->host_encrypt_msdu = 0;
6751 priv->ieee->host_decrypt = 0;
567deaf6 6752 priv->ieee->host_mc_decrypt = 0;
afbf30a2
JK
6753 }
6754 }
6755
6756 return ieee80211_wx_set_encodeext(priv->ieee, info, wrqu, extra);
6757}
6758
6759/* SIOCGIWENCODEEXT */
6760static int ipw_wx_get_encodeext(struct net_device *dev,
6761 struct iw_request_info *info,
6762 union iwreq_data *wrqu, char *extra)
6763{
6764 struct ipw_priv *priv = ieee80211_priv(dev);
6765 return ieee80211_wx_get_encodeext(priv->ieee, info, wrqu, extra);
6766}
6767
6768/* SIOCSIWMLME */
6769static int ipw_wx_set_mlme(struct net_device *dev,
6770 struct iw_request_info *info,
6771 union iwreq_data *wrqu, char *extra)
6772{
6773 struct ipw_priv *priv = ieee80211_priv(dev);
6774 struct iw_mlme *mlme = (struct iw_mlme *)extra;
e62e1ee0 6775 __le16 reason;
afbf30a2
JK
6776
6777 reason = cpu_to_le16(mlme->reason_code);
6778
6779 switch (mlme->cmd) {
6780 case IW_MLME_DEAUTH:
67fd6b45 6781 /* silently ignore */
afbf30a2
JK
6782 break;
6783
6784 case IW_MLME_DISASSOC:
6785 ipw_disassociate(priv);
6786 break;
6787
6788 default:
6789 return -EOPNOTSUPP;
6790 }
6791 return 0;
6792}
afbf30a2 6793
e43e3c1e 6794#ifdef CONFIG_IPW2200_QOS
afbf30a2
JK
6795
6796/* QoS */
6797/*
6798* get the modulation type of the current network or
6799* the card current mode
6800*/
53d0bcf8 6801static u8 ipw_qos_current_mode(struct ipw_priv * priv)
afbf30a2
JK
6802{
6803 u8 mode = 0;
6804
6805 if (priv->status & STATUS_ASSOCIATED) {
6806 unsigned long flags;
6807
6808 spin_lock_irqsave(&priv->ieee->lock, flags);
6809 mode = priv->assoc_network->mode;
6810 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6811 } else {
6812 mode = priv->ieee->mode;
6813 }
6814 IPW_DEBUG_QOS("QoS network/card mode %d \n", mode);
6815 return mode;
b095c381 6816}
ea2b26e0 6817
b095c381
JK
6818/*
6819* Handle management frame beacon and probe response
6820*/
3b9990cb
JK
6821static int ipw_qos_handle_probe_response(struct ipw_priv *priv,
6822 int active_network,
6823 struct ieee80211_network *network)
b095c381
JK
6824{
6825 u32 size = sizeof(struct ieee80211_qos_parameters);
6826
afbf30a2 6827 if (network->capability & WLAN_CAPABILITY_IBSS)
b095c381
JK
6828 network->qos_data.active = network->qos_data.supported;
6829
6830 if (network->flags & NETWORK_HAS_QOS_MASK) {
afbf30a2
JK
6831 if (active_network &&
6832 (network->flags & NETWORK_HAS_QOS_PARAMETERS))
b095c381
JK
6833 network->qos_data.active = network->qos_data.supported;
6834
6835 if ((network->qos_data.active == 1) && (active_network == 1) &&
6836 (network->flags & NETWORK_HAS_QOS_PARAMETERS) &&
6837 (network->qos_data.old_param_count !=
6838 network->qos_data.param_count)) {
6839 network->qos_data.old_param_count =
6840 network->qos_data.param_count;
6841 schedule_work(&priv->qos_activate);
afbf30a2
JK
6842 IPW_DEBUG_QOS("QoS parameters change call "
6843 "qos_activate\n");
b095c381 6844 }
ea2b26e0 6845 } else {
afbf30a2
JK
6846 if ((priv->ieee->mode == IEEE_B) || (network->mode == IEEE_B))
6847 memcpy(&network->qos_data.parameters,
b095c381 6848 &def_parameters_CCK, size);
afbf30a2
JK
6849 else
6850 memcpy(&network->qos_data.parameters,
b095c381 6851 &def_parameters_OFDM, size);
afbf30a2 6852
b095c381
JK
6853 if ((network->qos_data.active == 1) && (active_network == 1)) {
6854 IPW_DEBUG_QOS("QoS was disabled call qos_activate \n");
6855 schedule_work(&priv->qos_activate);
6856 }
6857
6858 network->qos_data.active = 0;
6859 network->qos_data.supported = 0;
ea2b26e0 6860 }
afbf30a2
JK
6861 if ((priv->status & STATUS_ASSOCIATED) &&
6862 (priv->ieee->iw_mode == IW_MODE_ADHOC) && (active_network == 0)) {
6863 if (memcmp(network->bssid, priv->bssid, ETH_ALEN))
c5d3dce8 6864 if (network->capability & WLAN_CAPABILITY_IBSS)
b095c381 6865 if ((network->ssid_len ==
afbf30a2
JK
6866 priv->assoc_network->ssid_len) &&
6867 !memcmp(network->ssid,
6868 priv->assoc_network->ssid,
6869 network->ssid_len)) {
b095c381
JK
6870 queue_work(priv->workqueue,
6871 &priv->merge_networks);
6872 }
b095c381 6873 }
ea2b26e0 6874
b095c381
JK
6875 return 0;
6876}
6877
6878/*
6879* This function set up the firmware to support QoS. It sends
6880* IPW_CMD_QOS_PARAMETERS and IPW_CMD_WME_INFO
6881*/
6882static int ipw_qos_activate(struct ipw_priv *priv,
6883 struct ieee80211_qos_data *qos_network_data)
6884{
6885 int err;
6886 struct ieee80211_qos_parameters qos_parameters[QOS_QOS_SETS];
6887 struct ieee80211_qos_parameters *active_one = NULL;
6888 u32 size = sizeof(struct ieee80211_qos_parameters);
6889 u32 burst_duration;
6890 int i;
6891 u8 type;
6892
6893 type = ipw_qos_current_mode(priv);
6894
6895 active_one = &(qos_parameters[QOS_PARAM_SET_DEF_CCK]);
6896 memcpy(active_one, priv->qos_data.def_qos_parm_CCK, size);
6897 active_one = &(qos_parameters[QOS_PARAM_SET_DEF_OFDM]);
6898 memcpy(active_one, priv->qos_data.def_qos_parm_OFDM, size);
6899
6900 if (qos_network_data == NULL) {
6901 if (type == IEEE_B) {
6902 IPW_DEBUG_QOS("QoS activate network mode %d\n", type);
6903 active_one = &def_parameters_CCK;
6904 } else
6905 active_one = &def_parameters_OFDM;
6906
afbf30a2 6907 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK
6908 burst_duration = ipw_qos_get_burst_duration(priv);
6909 for (i = 0; i < QOS_QUEUE_NUM; i++)
afbf30a2 6910 qos_parameters[QOS_PARAM_SET_ACTIVE].tx_op_limit[i] =
8fffc15d 6911 cpu_to_le16(burst_duration);
afbf30a2 6912 } else if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
b095c381
JK
6913 if (type == IEEE_B) {
6914 IPW_DEBUG_QOS("QoS activate IBSS nework mode %d\n",
6915 type);
6916 if (priv->qos_data.qos_enable == 0)
6917 active_one = &def_parameters_CCK;
6918 else
6919 active_one = priv->qos_data.def_qos_parm_CCK;
6920 } else {
6921 if (priv->qos_data.qos_enable == 0)
6922 active_one = &def_parameters_OFDM;
6923 else
6924 active_one = priv->qos_data.def_qos_parm_OFDM;
6925 }
afbf30a2 6926 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK
6927 } else {
6928 unsigned long flags;
6929 int active;
6930
6931 spin_lock_irqsave(&priv->ieee->lock, flags);
6932 active_one = &(qos_network_data->parameters);
6933 qos_network_data->old_param_count =
6934 qos_network_data->param_count;
afbf30a2 6935 memcpy(&qos_parameters[QOS_PARAM_SET_ACTIVE], active_one, size);
b095c381
JK
6936 active = qos_network_data->supported;
6937 spin_unlock_irqrestore(&priv->ieee->lock, flags);
6938
6939 if (active == 0) {
6940 burst_duration = ipw_qos_get_burst_duration(priv);
6941 for (i = 0; i < QOS_QUEUE_NUM; i++)
6942 qos_parameters[QOS_PARAM_SET_ACTIVE].
8fffc15d 6943 tx_op_limit[i] = cpu_to_le16(burst_duration);
b095c381
JK
6944 }
6945 }
6946
6947 IPW_DEBUG_QOS("QoS sending IPW_CMD_QOS_PARAMETERS\n");
afbf30a2
JK
6948 err = ipw_send_qos_params_command(priv,
6949 (struct ieee80211_qos_parameters *)
6950 &(qos_parameters[0]));
b095c381
JK
6951 if (err)
6952 IPW_DEBUG_QOS("QoS IPW_CMD_QOS_PARAMETERS failed\n");
6953
6954 return err;
6955}
6956
6957/*
6958* send IPW_CMD_WME_INFO to the firmware
6959*/
6960static int ipw_qos_set_info_element(struct ipw_priv *priv)
6961{
6962 int ret = 0;
6963 struct ieee80211_qos_information_element qos_info;
6964
6965 if (priv == NULL)
6966 return -1;
6967
6968 qos_info.elementID = QOS_ELEMENT_ID;
6969 qos_info.length = sizeof(struct ieee80211_qos_information_element) - 2;
6970
6971 qos_info.version = QOS_VERSION_1;
6972 qos_info.ac_info = 0;
6973
6974 memcpy(qos_info.qui, qos_oui, QOS_OUI_LEN);
6975 qos_info.qui_type = QOS_OUI_TYPE;
6976 qos_info.qui_subtype = QOS_OUI_INFO_SUB_TYPE;
6977
6978 ret = ipw_send_qos_info_command(priv, &qos_info);
6979 if (ret != 0) {
6980 IPW_DEBUG_QOS("QoS error calling ipw_send_qos_info_command\n");
6981 }
6982 return ret;
6983}
6984
6985/*
6986* Set the QoS parameter with the association request structure
6987*/
6988static int ipw_qos_association(struct ipw_priv *priv,
6989 struct ieee80211_network *network)
6990{
6991 int err = 0;
6992 struct ieee80211_qos_data *qos_data = NULL;
6993 struct ieee80211_qos_data ibss_data = {
6994 .supported = 1,
6995 .active = 1,
6996 };
6997
6998 switch (priv->ieee->iw_mode) {
6999 case IW_MODE_ADHOC:
5d9428de 7000 BUG_ON(!(network->capability & WLAN_CAPABILITY_IBSS));
b095c381
JK
7001
7002 qos_data = &ibss_data;
7003 break;
7004
7005 case IW_MODE_INFRA:
7006 qos_data = &network->qos_data;
7007 break;
7008
7009 default:
7010 BUG();
7011 break;
7012 }
7013
7014 err = ipw_qos_activate(priv, qos_data);
7015 if (err) {
7016 priv->assoc_request.policy_support &= ~HC_QOS_SUPPORT_ASSOC;
7017 return err;
7018 }
7019
7020 if (priv->qos_data.qos_enable && qos_data->supported) {
7021 IPW_DEBUG_QOS("QoS will be enabled for this association\n");
7022 priv->assoc_request.policy_support |= HC_QOS_SUPPORT_ASSOC;
7023 return ipw_qos_set_info_element(priv);
7024 }
7025
7026 return 0;
7027}
7028
7029/*
0779bf2d
ML
7030* handling the beaconing responses. if we get different QoS setting
7031* off the network from the associated setting, adjust the QoS
b095c381
JK
7032* setting
7033*/
7034static int ipw_qos_association_resp(struct ipw_priv *priv,
7035 struct ieee80211_network *network)
7036{
7037 int ret = 0;
7038 unsigned long flags;
7039 u32 size = sizeof(struct ieee80211_qos_parameters);
7040 int set_qos_param = 0;
7041
afbf30a2
JK
7042 if ((priv == NULL) || (network == NULL) ||
7043 (priv->assoc_network == NULL))
b095c381
JK
7044 return ret;
7045
7046 if (!(priv->status & STATUS_ASSOCIATED))
7047 return ret;
7048
afbf30a2 7049 if ((priv->ieee->iw_mode != IW_MODE_INFRA))
b095c381 7050 return ret;
b095c381
JK
7051
7052 spin_lock_irqsave(&priv->ieee->lock, flags);
7053 if (network->flags & NETWORK_HAS_QOS_PARAMETERS) {
afbf30a2 7054 memcpy(&priv->assoc_network->qos_data, &network->qos_data,
b095c381
JK
7055 sizeof(struct ieee80211_qos_data));
7056 priv->assoc_network->qos_data.active = 1;
7057 if ((network->qos_data.old_param_count !=
7058 network->qos_data.param_count)) {
7059 set_qos_param = 1;
7060 network->qos_data.old_param_count =
7061 network->qos_data.param_count;
7062 }
7063
7064 } else {
afbf30a2
JK
7065 if ((network->mode == IEEE_B) || (priv->ieee->mode == IEEE_B))
7066 memcpy(&priv->assoc_network->qos_data.parameters,
b095c381 7067 &def_parameters_CCK, size);
afbf30a2
JK
7068 else
7069 memcpy(&priv->assoc_network->qos_data.parameters,
b095c381 7070 &def_parameters_OFDM, size);
b095c381
JK
7071 priv->assoc_network->qos_data.active = 0;
7072 priv->assoc_network->qos_data.supported = 0;
7073 set_qos_param = 1;
7074 }
7075
7076 spin_unlock_irqrestore(&priv->ieee->lock, flags);
7077
7078 if (set_qos_param == 1)
7079 schedule_work(&priv->qos_activate);
7080
7081 return ret;
7082}
7083
7084static u32 ipw_qos_get_burst_duration(struct ipw_priv *priv)
7085{
7086 u32 ret = 0;
7087
7088 if ((priv == NULL))
7089 return 0;
7090
afbf30a2 7091 if (!(priv->ieee->modulation & IEEE80211_OFDM_MODULATION))
b095c381 7092 ret = priv->qos_data.burst_duration_CCK;
afbf30a2 7093 else
b095c381 7094 ret = priv->qos_data.burst_duration_OFDM;
afbf30a2 7095
b095c381
JK
7096 return ret;
7097}
7098
7099/*
7100* Initialize the setting of QoS global
7101*/
7102static void ipw_qos_init(struct ipw_priv *priv, int enable,
7103 int burst_enable, u32 burst_duration_CCK,
7104 u32 burst_duration_OFDM)
7105{
7106 priv->qos_data.qos_enable = enable;
7107
7108 if (priv->qos_data.qos_enable) {
7109 priv->qos_data.def_qos_parm_CCK = &def_qos_parameters_CCK;
7110 priv->qos_data.def_qos_parm_OFDM = &def_qos_parameters_OFDM;
7111 IPW_DEBUG_QOS("QoS is enabled\n");
7112 } else {
7113 priv->qos_data.def_qos_parm_CCK = &def_parameters_CCK;
7114 priv->qos_data.def_qos_parm_OFDM = &def_parameters_OFDM;
7115 IPW_DEBUG_QOS("QoS is not enabled\n");
7116 }
7117
7118 priv->qos_data.burst_enable = burst_enable;
7119
7120 if (burst_enable) {
7121 priv->qos_data.burst_duration_CCK = burst_duration_CCK;
7122 priv->qos_data.burst_duration_OFDM = burst_duration_OFDM;
7123 } else {
7124 priv->qos_data.burst_duration_CCK = 0;
7125 priv->qos_data.burst_duration_OFDM = 0;
7126 }
7127}
7128
7129/*
7130* map the packet priority to the right TX Queue
7131*/
7132static int ipw_get_tx_queue_number(struct ipw_priv *priv, u16 priority)
7133{
7134 if (priority > 7 || !priv->qos_data.qos_enable)
7135 priority = 0;
7136
7137 return from_priority_to_tx_queue[priority] - 1;
7138}
7139
a5cf4fe6
ZY
7140static int ipw_is_qos_active(struct net_device *dev,
7141 struct sk_buff *skb)
b095c381 7142{
a5cf4fe6 7143 struct ipw_priv *priv = ieee80211_priv(dev);
b095c381
JK
7144 struct ieee80211_qos_data *qos_data = NULL;
7145 int active, supported;
a5cf4fe6
ZY
7146 u8 *daddr = skb->data + ETH_ALEN;
7147 int unicast = !is_multicast_ether_addr(daddr);
b095c381
JK
7148
7149 if (!(priv->status & STATUS_ASSOCIATED))
7150 return 0;
7151
7152 qos_data = &priv->assoc_network->qos_data;
7153
b095c381
JK
7154 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
7155 if (unicast == 0)
7156 qos_data->active = 0;
7157 else
7158 qos_data->active = qos_data->supported;
7159 }
b095c381
JK
7160 active = qos_data->active;
7161 supported = qos_data->supported;
afbf30a2
JK
7162 IPW_DEBUG_QOS("QoS %d network is QoS active %d supported %d "
7163 "unicast %d\n",
7164 priv->qos_data.qos_enable, active, supported, unicast);
a5cf4fe6
ZY
7165 if (active && priv->qos_data.qos_enable)
7166 return 1;
b095c381 7167
a5cf4fe6
ZY
7168 return 0;
7169
7170}
7171/*
7172* add QoS parameter to the TX command
7173*/
7174static int ipw_qos_set_tx_queue_command(struct ipw_priv *priv,
7175 u16 priority,
7176 struct tfd_data *tfd)
7177{
7178 int tx_queue_id = 0;
7179
7180
7181 tx_queue_id = from_priority_to_tx_queue[priority] - 1;
7182 tfd->tx_flags_ext |= DCT_FLAG_EXT_QOS_ENABLED;
7183
7184 if (priv->qos_data.qos_no_ack_mask & (1UL << tx_queue_id)) {
7185 tfd->tx_flags &= ~DCT_FLAG_ACK_REQD;
851ca268 7186 tfd->tfd.tfd_26.mchdr.qos_ctrl |= cpu_to_le16(CTRL_QOS_NO_ACK);
a5cf4fe6
ZY
7187 }
7188 return 0;
b095c381
JK
7189}
7190
7191/*
7192* background support to run QoS activate functionality
7193*/
c4028958 7194static void ipw_bg_qos_activate(struct work_struct *work)
b095c381 7195{
c4028958
DH
7196 struct ipw_priv *priv =
7197 container_of(work, struct ipw_priv, qos_activate);
b095c381
JK
7198
7199 if (priv == NULL)
7200 return;
7201
4644151b 7202 mutex_lock(&priv->mutex);
b095c381
JK
7203
7204 if (priv->status & STATUS_ASSOCIATED)
7205 ipw_qos_activate(priv, &(priv->assoc_network->qos_data));
7206
4644151b 7207 mutex_unlock(&priv->mutex);
b095c381
JK
7208}
7209
3b9990cb
JK
7210static int ipw_handle_probe_response(struct net_device *dev,
7211 struct ieee80211_probe_response *resp,
7212 struct ieee80211_network *network)
b095c381
JK
7213{
7214 struct ipw_priv *priv = ieee80211_priv(dev);
3b9990cb
JK
7215 int active_network = ((priv->status & STATUS_ASSOCIATED) &&
7216 (network == priv->assoc_network));
43f66a6c 7217
3b9990cb 7218 ipw_qos_handle_probe_response(priv, active_network, network);
43f66a6c 7219
3b9990cb
JK
7220 return 0;
7221}
43f66a6c 7222
3b9990cb
JK
7223static int ipw_handle_beacon(struct net_device *dev,
7224 struct ieee80211_beacon *resp,
7225 struct ieee80211_network *network)
7226{
7227 struct ipw_priv *priv = ieee80211_priv(dev);
7228 int active_network = ((priv->status & STATUS_ASSOCIATED) &&
7229 (network == priv->assoc_network));
bf79451e 7230
3b9990cb 7231 ipw_qos_handle_probe_response(priv, active_network, network);
bf79451e 7232
b095c381
JK
7233 return 0;
7234}
bf79451e 7235
3b9990cb
JK
7236static int ipw_handle_assoc_response(struct net_device *dev,
7237 struct ieee80211_assoc_response *resp,
7238 struct ieee80211_network *network)
7239{
7240 struct ipw_priv *priv = ieee80211_priv(dev);
7241 ipw_qos_association_resp(priv, network);
7242 return 0;
7243}
43f66a6c 7244
b095c381
JK
7245static int ipw_send_qos_params_command(struct ipw_priv *priv, struct ieee80211_qos_parameters
7246 *qos_param)
7247{
4e22699f
ZY
7248 return ipw_send_cmd_pdu(priv, IPW_CMD_QOS_PARAMETERS,
7249 sizeof(*qos_param) * 3, qos_param);
b095c381
JK
7250}
7251
7252static int ipw_send_qos_info_command(struct ipw_priv *priv, struct ieee80211_qos_information_element
7253 *qos_param)
7254{
4e22699f
ZY
7255 return ipw_send_cmd_pdu(priv, IPW_CMD_WME_INFO, sizeof(*qos_param),
7256 qos_param);
43f66a6c
JK
7257}
7258
e43e3c1e 7259#endif /* CONFIG_IPW2200_QOS */
b095c381 7260
43f66a6c
JK
7261static int ipw_associate_network(struct ipw_priv *priv,
7262 struct ieee80211_network *network,
0edd5b44 7263 struct ipw_supported_rates *rates, int roaming)
43f66a6c
JK
7264{
7265 int err;
7266
7267 if (priv->config & CFG_FIXED_RATE)
b095c381 7268 ipw_set_fixed_rate(priv, network->mode);
43f66a6c
JK
7269
7270 if (!(priv->config & CFG_STATIC_ESSID)) {
bf79451e 7271 priv->essid_len = min(network->ssid_len,
0edd5b44 7272 (u8) IW_ESSID_MAX_SIZE);
43f66a6c
JK
7273 memcpy(priv->essid, network->ssid, priv->essid_len);
7274 }
7275
7276 network->last_associate = jiffies;
7277
7278 memset(&priv->assoc_request, 0, sizeof(priv->assoc_request));
7279 priv->assoc_request.channel = network->channel;
3e234b4e
ZY
7280 priv->assoc_request.auth_key = 0;
7281
43f66a6c 7282 if ((priv->capability & CAP_PRIVACY_ON) &&
3e234b4e 7283 (priv->ieee->sec.auth_mode == WLAN_AUTH_SHARED_KEY)) {
43f66a6c 7284 priv->assoc_request.auth_type = AUTH_SHARED_KEY;
b095c381
JK
7285 priv->assoc_request.auth_key = priv->ieee->sec.active_key;
7286
1ba61e05 7287 if (priv->ieee->sec.level == SEC_LEVEL_1)
b095c381 7288 ipw_send_wep_keys(priv, DCW_WEP_KEY_SEC_TYPE_WEP);
3e234b4e
ZY
7289
7290 } else if ((priv->capability & CAP_PRIVACY_ON) &&
7291 (priv->ieee->sec.auth_mode == WLAN_AUTH_LEAP))
7292 priv->assoc_request.auth_type = AUTH_LEAP;
7293 else
43f66a6c 7294 priv->assoc_request.auth_type = AUTH_OPEN;
43f66a6c 7295
b095c381 7296 if (priv->ieee->wpa_ie_len) {
5b5e807f 7297 priv->assoc_request.policy_support = cpu_to_le16(0x02); /* RSN active */
ea2b26e0
JK
7298 ipw_set_rsn_capa(priv, priv->ieee->wpa_ie,
7299 priv->ieee->wpa_ie_len);
7300 }
43f66a6c 7301
bf79451e
JG
7302 /*
7303 * It is valid for our ieee device to support multiple modes, but
7304 * when it comes to associating to a given network we have to choose
43f66a6c
JK
7305 * just one mode.
7306 */
7307 if (network->mode & priv->ieee->mode & IEEE_A)
7308 priv->assoc_request.ieee_mode = IPW_A_MODE;
7309 else if (network->mode & priv->ieee->mode & IEEE_G)
7310 priv->assoc_request.ieee_mode = IPW_G_MODE;
7311 else if (network->mode & priv->ieee->mode & IEEE_B)
7312 priv->assoc_request.ieee_mode = IPW_B_MODE;
7313
5b5e807f 7314 priv->assoc_request.capability = cpu_to_le16(network->capability);
ea2b26e0
JK
7315 if ((network->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
7316 && !(priv->config & CFG_PREAMBLE_LONG)) {
7317 priv->assoc_request.preamble_length = DCT_FLAG_SHORT_PREAMBLE;
7318 } else {
7319 priv->assoc_request.preamble_length = DCT_FLAG_LONG_PREAMBLE;
7320
7321 /* Clear the short preamble if we won't be supporting it */
7322 priv->assoc_request.capability &=
5b5e807f 7323 ~cpu_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE);
ea2b26e0
JK
7324 }
7325
afbf30a2
JK
7326 /* Clear capability bits that aren't used in Ad Hoc */
7327 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
7328 priv->assoc_request.capability &=
5b5e807f 7329 ~cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT_TIME);
afbf30a2 7330
43f66a6c 7331 IPW_DEBUG_ASSOC("%sssocation attempt: '%s', channel %d, "
ea2b26e0 7332 "802.11%c [%d], %s[:%s], enc=%s%s%s%c%c\n",
43f66a6c 7333 roaming ? "Rea" : "A",
7e272fcf 7334 escape_ssid(priv->essid, priv->essid_len),
bf79451e
JG
7335 network->channel,
7336 ipw_modes[priv->assoc_request.ieee_mode],
7337 rates->num_rates,
ea2b26e0
JK
7338 (priv->assoc_request.preamble_length ==
7339 DCT_FLAG_LONG_PREAMBLE) ? "long" : "short",
7340 network->capability &
7341 WLAN_CAPABILITY_SHORT_PREAMBLE ? "short" : "long",
43f66a6c 7342 priv->capability & CAP_PRIVACY_ON ? "on " : "off",
bf79451e
JG
7343 priv->capability & CAP_PRIVACY_ON ?
7344 (priv->capability & CAP_SHARED_KEY ? "(shared)" :
43f66a6c
JK
7345 "(open)") : "",
7346 priv->capability & CAP_PRIVACY_ON ? " key=" : "",
bf79451e 7347 priv->capability & CAP_PRIVACY_ON ?
b095c381 7348 '1' + priv->ieee->sec.active_key : '.',
0edd5b44 7349 priv->capability & CAP_PRIVACY_ON ? '.' : ' ');
43f66a6c 7350
5b5e807f 7351 priv->assoc_request.beacon_interval = cpu_to_le16(network->beacon_interval);
43f66a6c 7352 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
0edd5b44 7353 (network->time_stamp[0] == 0) && (network->time_stamp[1] == 0)) {
43f66a6c
JK
7354 priv->assoc_request.assoc_type = HC_IBSS_START;
7355 priv->assoc_request.assoc_tsf_msw = 0;
7356 priv->assoc_request.assoc_tsf_lsw = 0;
7357 } else {
7358 if (unlikely(roaming))
7359 priv->assoc_request.assoc_type = HC_REASSOCIATE;
7360 else
7361 priv->assoc_request.assoc_type = HC_ASSOCIATE;
5b5e807f
AV
7362 priv->assoc_request.assoc_tsf_msw = cpu_to_le32(network->time_stamp[1]);
7363 priv->assoc_request.assoc_tsf_lsw = cpu_to_le32(network->time_stamp[0]);
43f66a6c
JK
7364 }
7365
afbf30a2 7366 memcpy(priv->assoc_request.bssid, network->bssid, ETH_ALEN);
43f66a6c
JK
7367
7368 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
7369 memset(&priv->assoc_request.dest, 0xFF, ETH_ALEN);
5b5e807f 7370 priv->assoc_request.atim_window = cpu_to_le16(network->atim_window);
43f66a6c 7371 } else {
afbf30a2 7372 memcpy(priv->assoc_request.dest, network->bssid, ETH_ALEN);
43f66a6c
JK
7373 priv->assoc_request.atim_window = 0;
7374 }
7375
5b5e807f 7376 priv->assoc_request.listen_interval = cpu_to_le16(network->listen_interval);
bf79451e 7377
43f66a6c
JK
7378 err = ipw_send_ssid(priv, priv->essid, priv->essid_len);
7379 if (err) {
7380 IPW_DEBUG_HC("Attempt to send SSID command failed.\n");
7381 return err;
7382 }
7383
7384 rates->ieee_mode = priv->assoc_request.ieee_mode;
7385 rates->purpose = IPW_RATE_CONNECT;
7386 ipw_send_supported_rates(priv, rates);
bf79451e 7387
43f66a6c
JK
7388 if (priv->assoc_request.ieee_mode == IPW_G_MODE)
7389 priv->sys_config.dot11g_auto_detection = 1;
7390 else
7391 priv->sys_config.dot11g_auto_detection = 0;
c848d0af
JK
7392
7393 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
7394 priv->sys_config.answer_broadcast_ssid_probe = 1;
7395 else
7396 priv->sys_config.answer_broadcast_ssid_probe = 0;
7397
d685b8c2 7398 err = ipw_send_system_config(priv);
43f66a6c
JK
7399 if (err) {
7400 IPW_DEBUG_HC("Attempt to send sys config command failed.\n");
7401 return err;
7402 }
bf79451e 7403
43f66a6c 7404 IPW_DEBUG_ASSOC("Association sensitivity: %d\n", network->stats.rssi);
ea2b26e0 7405 err = ipw_set_sensitivity(priv, network->stats.rssi + IPW_RSSI_TO_DBM);
43f66a6c
JK
7406 if (err) {
7407 IPW_DEBUG_HC("Attempt to send associate command failed.\n");
7408 return err;
7409 }
7410
7411 /*
7412 * If preemption is enabled, it is possible for the association
7413 * to complete before we return from ipw_send_associate. Therefore
7414 * we have to be sure and update our priviate data first.
7415 */
7416 priv->channel = network->channel;
7417 memcpy(priv->bssid, network->bssid, ETH_ALEN);
bf79451e 7418 priv->status |= STATUS_ASSOCIATING;
43f66a6c
JK
7419 priv->status &= ~STATUS_SECURITY_UPDATED;
7420
7421 priv->assoc_network = network;
7422
e43e3c1e 7423#ifdef CONFIG_IPW2200_QOS
b095c381
JK
7424 ipw_qos_association(priv, network);
7425#endif
7426
43f66a6c
JK
7427 err = ipw_send_associate(priv, &priv->assoc_request);
7428 if (err) {
7429 IPW_DEBUG_HC("Attempt to send associate command failed.\n");
7430 return err;
7431 }
bf79451e 7432
e174961c 7433 IPW_DEBUG(IPW_DL_STATE, "associating: '%s' %pM \n",
7e272fcf 7434 escape_ssid(priv->essid, priv->essid_len),
e174961c 7435 priv->bssid);
43f66a6c
JK
7436
7437 return 0;
7438}
7439
7440static void ipw_roam(void *data)
7441{
7442 struct ipw_priv *priv = data;
7443 struct ieee80211_network *network = NULL;
7444 struct ipw_network_match match = {
7445 .network = priv->assoc_network
7446 };
7447
7448 /* The roaming process is as follows:
bf79451e
JG
7449 *
7450 * 1. Missed beacon threshold triggers the roaming process by
43f66a6c
JK
7451 * setting the status ROAM bit and requesting a scan.
7452 * 2. When the scan completes, it schedules the ROAM work
7453 * 3. The ROAM work looks at all of the known networks for one that
7454 * is a better network than the currently associated. If none
7455 * found, the ROAM process is over (ROAM bit cleared)
7456 * 4. If a better network is found, a disassociation request is
7457 * sent.
7458 * 5. When the disassociation completes, the roam work is again
7459 * scheduled. The second time through, the driver is no longer
7460 * associated, and the newly selected network is sent an
bf79451e 7461 * association request.
43f66a6c
JK
7462 * 6. At this point ,the roaming process is complete and the ROAM
7463 * status bit is cleared.
7464 */
7465
7466 /* If we are no longer associated, and the roaming bit is no longer
7467 * set, then we are not actively roaming, so just return */
7468 if (!(priv->status & (STATUS_ASSOCIATED | STATUS_ROAMING)))
7469 return;
bf79451e 7470
43f66a6c 7471 if (priv->status & STATUS_ASSOCIATED) {
bf79451e 7472 /* First pass through ROAM process -- look for a better
43f66a6c 7473 * network */
a613bffd 7474 unsigned long flags;
43f66a6c
JK
7475 u8 rssi = priv->assoc_network->stats.rssi;
7476 priv->assoc_network->stats.rssi = -128;
a613bffd 7477 spin_lock_irqsave(&priv->ieee->lock, flags);
43f66a6c
JK
7478 list_for_each_entry(network, &priv->ieee->network_list, list) {
7479 if (network != priv->assoc_network)
7480 ipw_best_network(priv, &match, network, 1);
7481 }
a613bffd 7482 spin_unlock_irqrestore(&priv->ieee->lock, flags);
43f66a6c 7483 priv->assoc_network->stats.rssi = rssi;
bf79451e 7484
43f66a6c
JK
7485 if (match.network == priv->assoc_network) {
7486 IPW_DEBUG_ASSOC("No better APs in this network to "
7487 "roam to.\n");
7488 priv->status &= ~STATUS_ROAMING;
7489 ipw_debug_config(priv);
7490 return;
7491 }
bf79451e 7492
43f66a6c
JK
7493 ipw_send_disassociate(priv, 1);
7494 priv->assoc_network = match.network;
7495
7496 return;
bf79451e 7497 }
43f66a6c
JK
7498
7499 /* Second pass through ROAM process -- request association */
7500 ipw_compatible_rates(priv, priv->assoc_network, &match.rates);
7501 ipw_associate_network(priv, priv->assoc_network, &match.rates, 1);
7502 priv->status &= ~STATUS_ROAMING;
7503}
7504
c4028958 7505static void ipw_bg_roam(struct work_struct *work)
c848d0af 7506{
c4028958
DH
7507 struct ipw_priv *priv =
7508 container_of(work, struct ipw_priv, roam);
4644151b 7509 mutex_lock(&priv->mutex);
c4028958 7510 ipw_roam(priv);
4644151b 7511 mutex_unlock(&priv->mutex);
c848d0af
JK
7512}
7513
7514static int ipw_associate(void *data)
43f66a6c
JK
7515{
7516 struct ipw_priv *priv = data;
7517
7518 struct ieee80211_network *network = NULL;
7519 struct ipw_network_match match = {
7520 .network = NULL
7521 };
7522 struct ipw_supported_rates *rates;
7523 struct list_head *element;
a613bffd 7524 unsigned long flags;
43f66a6c 7525
b095c381
JK
7526 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
7527 IPW_DEBUG_ASSOC("Not attempting association (monitor mode)\n");
7528 return 0;
7529 }
7530
c848d0af 7531 if (priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
afbf30a2
JK
7532 IPW_DEBUG_ASSOC("Not attempting association (already in "
7533 "progress)\n");
c848d0af
JK
7534 return 0;
7535 }
7536
e6324726
HL
7537 if (priv->status & STATUS_DISASSOCIATING) {
7538 IPW_DEBUG_ASSOC("Not attempting association (in "
7539 "disassociating)\n ");
7540 queue_work(priv->workqueue, &priv->associate);
7541 return 0;
7542 }
7543
c848d0af 7544 if (!ipw_is_init(priv) || (priv->status & STATUS_SCANNING)) {
afbf30a2
JK
7545 IPW_DEBUG_ASSOC("Not attempting association (scanning or not "
7546 "initialized)\n");
c848d0af
JK
7547 return 0;
7548 }
43f66a6c
JK
7549
7550 if (!(priv->config & CFG_ASSOCIATE) &&
7551 !(priv->config & (CFG_STATIC_ESSID |
0edd5b44 7552 CFG_STATIC_CHANNEL | CFG_STATIC_BSSID))) {
43f66a6c 7553 IPW_DEBUG_ASSOC("Not attempting association (associate=0)\n");
c848d0af 7554 return 0;
43f66a6c
JK
7555 }
7556
a613bffd
JK
7557 /* Protect our use of the network_list */
7558 spin_lock_irqsave(&priv->ieee->lock, flags);
bf79451e 7559 list_for_each_entry(network, &priv->ieee->network_list, list)
0edd5b44 7560 ipw_best_network(priv, &match, network, 0);
43f66a6c
JK
7561
7562 network = match.network;
7563 rates = &match.rates;
7564
7565 if (network == NULL &&
7566 priv->ieee->iw_mode == IW_MODE_ADHOC &&
7567 priv->config & CFG_ADHOC_CREATE &&
7568 priv->config & CFG_STATIC_ESSID &&
a6d4eae8
DW
7569 priv->config & CFG_STATIC_CHANNEL) {
7570 /* Use oldest network if the free list is empty */
7571 if (list_empty(&priv->ieee->network_free_list)) {
7572 struct ieee80211_network *oldest = NULL;
7573 struct ieee80211_network *target;
a6d4eae8
DW
7574
7575 list_for_each_entry(target, &priv->ieee->network_list, list) {
7576 if ((oldest == NULL) ||
7577 (target->last_scanned < oldest->last_scanned))
7578 oldest = target;
7579 }
7580
7581 /* If there are no more slots, expire the oldest */
7582 list_del(&oldest->list);
7583 target = oldest;
e174961c 7584 IPW_DEBUG_ASSOC("Expired '%s' (%pM) from "
a6d4eae8 7585 "network list.\n",
7e272fcf
JL
7586 escape_ssid(target->ssid,
7587 target->ssid_len),
e174961c 7588 target->bssid);
a6d4eae8
DW
7589 list_add_tail(&target->list,
7590 &priv->ieee->network_free_list);
7591 }
7592
43f66a6c 7593 element = priv->ieee->network_free_list.next;
0edd5b44 7594 network = list_entry(element, struct ieee80211_network, list);
43f66a6c
JK
7595 ipw_adhoc_create(priv, network);
7596 rates = &priv->rates;
7597 list_del(element);
7598 list_add_tail(&network->list, &priv->ieee->network_list);
7599 }
a613bffd 7600 spin_unlock_irqrestore(&priv->ieee->lock, flags);
bf79451e 7601
43f66a6c
JK
7602 /* If we reached the end of the list, then we don't have any valid
7603 * matching APs */
7604 if (!network) {
7605 ipw_debug_config(priv);
7606
b095c381
JK
7607 if (!(priv->status & STATUS_SCANNING)) {
7608 if (!(priv->config & CFG_SPEED_SCAN))
7609 queue_delayed_work(priv->workqueue,
7610 &priv->request_scan,
7611 SCAN_INTERVAL);
7612 else
c4028958
DH
7613 queue_delayed_work(priv->workqueue,
7614 &priv->request_scan, 0);
b095c381 7615 }
bf79451e 7616
c848d0af 7617 return 0;
43f66a6c
JK
7618 }
7619
7620 ipw_associate_network(priv, network, rates, 0);
c848d0af
JK
7621
7622 return 1;
7623}
7624
c4028958 7625static void ipw_bg_associate(struct work_struct *work)
c848d0af 7626{
c4028958
DH
7627 struct ipw_priv *priv =
7628 container_of(work, struct ipw_priv, associate);
4644151b 7629 mutex_lock(&priv->mutex);
c4028958 7630 ipw_associate(priv);
4644151b 7631 mutex_unlock(&priv->mutex);
43f66a6c 7632}
bf79451e 7633
b095c381
JK
7634static void ipw_rebuild_decrypted_skb(struct ipw_priv *priv,
7635 struct sk_buff *skb)
7636{
7637 struct ieee80211_hdr *hdr;
7638 u16 fc;
7639
7640 hdr = (struct ieee80211_hdr *)skb->data;
7641 fc = le16_to_cpu(hdr->frame_ctl);
7642 if (!(fc & IEEE80211_FCTL_PROTECTED))
7643 return;
7644
7645 fc &= ~IEEE80211_FCTL_PROTECTED;
7646 hdr->frame_ctl = cpu_to_le16(fc);
7647 switch (priv->ieee->sec.level) {
7648 case SEC_LEVEL_3:
7649 /* Remove CCMP HDR */
7650 memmove(skb->data + IEEE80211_3ADDR_LEN,
7651 skb->data + IEEE80211_3ADDR_LEN + 8,
7652 skb->len - IEEE80211_3ADDR_LEN - 8);
f4ff497d 7653 skb_trim(skb, skb->len - 16); /* CCMP_HDR_LEN + CCMP_MIC_LEN */
b095c381
JK
7654 break;
7655 case SEC_LEVEL_2:
7656 break;
7657 case SEC_LEVEL_1:
7658 /* Remove IV */
7659 memmove(skb->data + IEEE80211_3ADDR_LEN,
7660 skb->data + IEEE80211_3ADDR_LEN + 4,
7661 skb->len - IEEE80211_3ADDR_LEN - 4);
f4ff497d 7662 skb_trim(skb, skb->len - 8); /* IV + ICV */
b095c381
JK
7663 break;
7664 case SEC_LEVEL_0:
7665 break;
7666 default:
7667 printk(KERN_ERR "Unknow security level %d\n",
7668 priv->ieee->sec.level);
7669 break;
7670 }
43f66a6c 7671}
bf79451e 7672
b095c381
JK
7673static void ipw_handle_data_packet(struct ipw_priv *priv,
7674 struct ipw_rx_mem_buffer *rxb,
7675 struct ieee80211_rx_stats *stats)
43f66a6c 7676{
567deaf6 7677 struct ieee80211_hdr_4addr *hdr;
43f66a6c
JK
7678 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7679
7680 /* We received data from the HW, so stop the watchdog */
7681 priv->net_dev->trans_start = jiffies;
7682
bf79451e 7683 /* We only process data packets if the
43f66a6c 7684 * interface is open */
a613bffd 7685 if (unlikely((le16_to_cpu(pkt->u.frame.length) + IPW_RX_FRAME_SIZE) >
43f66a6c
JK
7686 skb_tailroom(rxb->skb))) {
7687 priv->ieee->stats.rx_errors++;
7688 priv->wstats.discard.misc++;
7689 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7690 return;
7691 } else if (unlikely(!netif_running(priv->net_dev))) {
7692 priv->ieee->stats.rx_dropped++;
7693 priv->wstats.discard.misc++;
7694 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7695 return;
7696 }
7697
7698 /* Advance skb->data to the start of the actual payload */
aaa4d308 7699 skb_reserve(rxb->skb, offsetof(struct ipw_rx_packet, u.frame.data));
43f66a6c
JK
7700
7701 /* Set the size of the skb to the size of the frame */
a613bffd 7702 skb_put(rxb->skb, le16_to_cpu(pkt->u.frame.length));
43f66a6c
JK
7703
7704 IPW_DEBUG_RX("Rx packet of %d bytes.\n", rxb->skb->len);
7705
b095c381 7706 /* HW decrypt will not clear the WEP bit, MIC, PN, etc. */
567deaf6
HL
7707 hdr = (struct ieee80211_hdr_4addr *)rxb->skb->data;
7708 if (priv->ieee->iw_mode != IW_MODE_MONITOR &&
3c19065a 7709 (is_multicast_ether_addr(hdr->addr1) ?
567deaf6 7710 !priv->ieee->host_mc_decrypt : !priv->ieee->host_decrypt))
b095c381
JK
7711 ipw_rebuild_decrypted_skb(priv, rxb->skb);
7712
bf79451e 7713 if (!ieee80211_rx(priv->ieee, rxb->skb, stats))
43f66a6c 7714 priv->ieee->stats.rx_errors++;
a613bffd 7715 else { /* ieee80211_rx succeeded, so it now owns the SKB */
43f66a6c 7716 rxb->skb = NULL;
b095c381 7717 __ipw_led_activity_on(priv);
a613bffd 7718 }
43f66a6c
JK
7719}
7720
459d4087 7721#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK
7722static void ipw_handle_data_packet_monitor(struct ipw_priv *priv,
7723 struct ipw_rx_mem_buffer *rxb,
7724 struct ieee80211_rx_stats *stats)
7725{
7726 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7727 struct ipw_rx_frame *frame = &pkt->u.frame;
7728
7729 /* initial pull of some data */
7730 u16 received_channel = frame->received_channel;
7731 u8 antennaAndPhy = frame->antennaAndPhy;
7732 s8 antsignal = frame->rssi_dbm - IPW_RSSI_TO_DBM; /* call it signed anyhow */
7733 u16 pktrate = frame->rate;
7734
7735 /* Magic struct that slots into the radiotap header -- no reason
7736 * to build this manually element by element, we can write it much
7737 * more efficiently than we can parse it. ORDER MATTERS HERE */
d685b8c2 7738 struct ipw_rt_hdr *ipw_rt;
24a47dbd
MK
7739
7740 short len = le16_to_cpu(pkt->u.frame.length);
7741
7742 /* We received data from the HW, so stop the watchdog */
7743 priv->net_dev->trans_start = jiffies;
7744
7745 /* We only process data packets if the
7746 * interface is open */
7747 if (unlikely((le16_to_cpu(pkt->u.frame.length) + IPW_RX_FRAME_SIZE) >
7748 skb_tailroom(rxb->skb))) {
7749 priv->ieee->stats.rx_errors++;
7750 priv->wstats.discard.misc++;
7751 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7752 return;
7753 } else if (unlikely(!netif_running(priv->net_dev))) {
7754 priv->ieee->stats.rx_dropped++;
7755 priv->wstats.discard.misc++;
7756 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7757 return;
7758 }
7759
7760 /* Libpcap 0.9.3+ can handle variable length radiotap, so we'll use
7761 * that now */
7762 if (len > IPW_RX_BUF_SIZE - sizeof(struct ipw_rt_hdr)) {
7763 /* FIXME: Should alloc bigger skb instead */
7764 priv->ieee->stats.rx_dropped++;
7765 priv->wstats.discard.misc++;
7766 IPW_DEBUG_DROP("Dropping too large packet in monitor\n");
7767 return;
7768 }
7769
7770 /* copy the frame itself */
7771 memmove(rxb->skb->data + sizeof(struct ipw_rt_hdr),
7772 rxb->skb->data + IPW_RX_FRAME_SIZE, len);
7773
7774 /* Zero the radiotap static buffer ... We only need to zero the bytes NOT
7775 * part of our real header, saves a little time.
7776 *
7777 * No longer necessary since we fill in all our data. Purge before merging
7778 * patch officially.
7779 * memset(rxb->skb->data + sizeof(struct ipw_rt_hdr), 0,
7780 * IEEE80211_RADIOTAP_HDRLEN - sizeof(struct ipw_rt_hdr));
7781 */
7782
7783 ipw_rt = (struct ipw_rt_hdr *)rxb->skb->data;
7784
7785 ipw_rt->rt_hdr.it_version = PKTHDR_RADIOTAP_VERSION;
7786 ipw_rt->rt_hdr.it_pad = 0; /* always good to zero */
743b84d2 7787 ipw_rt->rt_hdr.it_len = cpu_to_le16(sizeof(struct ipw_rt_hdr)); /* total header+data */
24a47dbd
MK
7788
7789 /* Big bitfield of all the fields we provide in radiotap */
743b84d2
AV
7790 ipw_rt->rt_hdr.it_present = cpu_to_le32(
7791 (1 << IEEE80211_RADIOTAP_TSFT) |
4b1f8a99 7792 (1 << IEEE80211_RADIOTAP_FLAGS) |
24a47dbd
MK
7793 (1 << IEEE80211_RADIOTAP_RATE) |
7794 (1 << IEEE80211_RADIOTAP_CHANNEL) |
7795 (1 << IEEE80211_RADIOTAP_DBM_ANTSIGNAL) |
d685b8c2 7796 (1 << IEEE80211_RADIOTAP_DBM_ANTNOISE) |
24a47dbd
MK
7797 (1 << IEEE80211_RADIOTAP_ANTENNA));
7798
7799 /* Zero the flags, we'll add to them as we go */
7800 ipw_rt->rt_flags = 0;
4b1f8a99
ZY
7801 ipw_rt->rt_tsf = (u64)(frame->parent_tsf[3] << 24 |
7802 frame->parent_tsf[2] << 16 |
7803 frame->parent_tsf[1] << 8 |
7804 frame->parent_tsf[0]);
24a47dbd
MK
7805
7806 /* Convert signal to DBM */
7807 ipw_rt->rt_dbmsignal = antsignal;
4b1f8a99 7808 ipw_rt->rt_dbmnoise = frame->noise;
24a47dbd
MK
7809
7810 /* Convert the channel data and set the flags */
7811 ipw_rt->rt_channel = cpu_to_le16(ieee80211chan2mhz(received_channel));
7812 if (received_channel > 14) { /* 802.11a */
7813 ipw_rt->rt_chbitmask =
7814 cpu_to_le16((IEEE80211_CHAN_OFDM | IEEE80211_CHAN_5GHZ));
7815 } else if (antennaAndPhy & 32) { /* 802.11b */
7816 ipw_rt->rt_chbitmask =
7817 cpu_to_le16((IEEE80211_CHAN_CCK | IEEE80211_CHAN_2GHZ));
7818 } else { /* 802.11g */
7819 ipw_rt->rt_chbitmask =
472caf8c 7820 cpu_to_le16(IEEE80211_CHAN_OFDM | IEEE80211_CHAN_2GHZ);
24a47dbd
MK
7821 }
7822
7823 /* set the rate in multiples of 500k/s */
7824 switch (pktrate) {
7825 case IPW_TX_RATE_1MB:
7826 ipw_rt->rt_rate = 2;
7827 break;
7828 case IPW_TX_RATE_2MB:
7829 ipw_rt->rt_rate = 4;
7830 break;
7831 case IPW_TX_RATE_5MB:
7832 ipw_rt->rt_rate = 10;
7833 break;
7834 case IPW_TX_RATE_6MB:
7835 ipw_rt->rt_rate = 12;
7836 break;
7837 case IPW_TX_RATE_9MB:
7838 ipw_rt->rt_rate = 18;
7839 break;
7840 case IPW_TX_RATE_11MB:
7841 ipw_rt->rt_rate = 22;
7842 break;
7843 case IPW_TX_RATE_12MB:
7844 ipw_rt->rt_rate = 24;
7845 break;
7846 case IPW_TX_RATE_18MB:
7847 ipw_rt->rt_rate = 36;
7848 break;
7849 case IPW_TX_RATE_24MB:
7850 ipw_rt->rt_rate = 48;
7851 break;
7852 case IPW_TX_RATE_36MB:
7853 ipw_rt->rt_rate = 72;
7854 break;
7855 case IPW_TX_RATE_48MB:
7856 ipw_rt->rt_rate = 96;
7857 break;
7858 case IPW_TX_RATE_54MB:
7859 ipw_rt->rt_rate = 108;
7860 break;
7861 default:
7862 ipw_rt->rt_rate = 0;
7863 break;
7864 }
7865
7866 /* antenna number */
7867 ipw_rt->rt_antenna = (antennaAndPhy & 3); /* Is this right? */
7868
7869 /* set the preamble flag if we have it */
7870 if ((antennaAndPhy & 64))
7871 ipw_rt->rt_flags |= IEEE80211_RADIOTAP_F_SHORTPRE;
7872
7873 /* Set the size of the skb to the size of the frame */
7874 skb_put(rxb->skb, len + sizeof(struct ipw_rt_hdr));
43f66a6c
JK
7875
7876 IPW_DEBUG_RX("Rx packet of %d bytes.\n", rxb->skb->len);
7877
bf79451e 7878 if (!ieee80211_rx(priv->ieee, rxb->skb, stats))
43f66a6c 7879 priv->ieee->stats.rx_errors++;
24a47dbd
MK
7880 else { /* ieee80211_rx succeeded, so it now owns the SKB */
7881 rxb->skb = NULL;
7882 /* no LED during capture */
7883 }
7884}
7885#endif
7886
d685b8c2
ZY
7887#ifdef CONFIG_IPW2200_PROMISCUOUS
7888#define ieee80211_is_probe_response(fc) \
7889 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT && \
7890 (fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_PROBE_RESP )
7891
7892#define ieee80211_is_management(fc) \
7893 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_MGMT)
7894
7895#define ieee80211_is_control(fc) \
7896 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_CTL)
7897
7898#define ieee80211_is_data(fc) \
7899 ((fc & IEEE80211_FCTL_FTYPE) == IEEE80211_FTYPE_DATA)
7900
7901#define ieee80211_is_assoc_request(fc) \
7902 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_ASSOC_REQ)
7903
7904#define ieee80211_is_reassoc_request(fc) \
7905 ((fc & IEEE80211_FCTL_STYPE) == IEEE80211_STYPE_REASSOC_REQ)
7906
7907static void ipw_handle_promiscuous_rx(struct ipw_priv *priv,
7908 struct ipw_rx_mem_buffer *rxb,
7909 struct ieee80211_rx_stats *stats)
7910{
7911 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)rxb->skb->data;
7912 struct ipw_rx_frame *frame = &pkt->u.frame;
7913 struct ipw_rt_hdr *ipw_rt;
7914
7915 /* First cache any information we need before we overwrite
7916 * the information provided in the skb from the hardware */
7917 struct ieee80211_hdr *hdr;
7918 u16 channel = frame->received_channel;
7919 u8 phy_flags = frame->antennaAndPhy;
7920 s8 signal = frame->rssi_dbm - IPW_RSSI_TO_DBM;
7921 s8 noise = frame->noise;
7922 u8 rate = frame->rate;
7923 short len = le16_to_cpu(pkt->u.frame.length);
d685b8c2
ZY
7924 struct sk_buff *skb;
7925 int hdr_only = 0;
7926 u16 filter = priv->prom_priv->filter;
7927
7928 /* If the filter is set to not include Rx frames then return */
7929 if (filter & IPW_PROM_NO_RX)
7930 return;
7931
d685b8c2
ZY
7932 /* We received data from the HW, so stop the watchdog */
7933 priv->prom_net_dev->trans_start = jiffies;
7934
7935 if (unlikely((len + IPW_RX_FRAME_SIZE) > skb_tailroom(rxb->skb))) {
7936 priv->prom_priv->ieee->stats.rx_errors++;
7937 IPW_DEBUG_DROP("Corruption detected! Oh no!\n");
7938 return;
7939 }
7940
7941 /* We only process data packets if the interface is open */
7942 if (unlikely(!netif_running(priv->prom_net_dev))) {
7943 priv->prom_priv->ieee->stats.rx_dropped++;
7944 IPW_DEBUG_DROP("Dropping packet while interface is not up.\n");
7945 return;
7946 }
7947
7948 /* Libpcap 0.9.3+ can handle variable length radiotap, so we'll use
7949 * that now */
7950 if (len > IPW_RX_BUF_SIZE - sizeof(struct ipw_rt_hdr)) {
7951 /* FIXME: Should alloc bigger skb instead */
7952 priv->prom_priv->ieee->stats.rx_dropped++;
7953 IPW_DEBUG_DROP("Dropping too large packet in monitor\n");
7954 return;
7955 }
7956
7957 hdr = (void *)rxb->skb->data + IPW_RX_FRAME_SIZE;
851ca268 7958 if (ieee80211_is_management(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY
7959 if (filter & IPW_PROM_NO_MGMT)
7960 return;
7961 if (filter & IPW_PROM_MGMT_HEADER_ONLY)
7962 hdr_only = 1;
851ca268 7963 } else if (ieee80211_is_control(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY
7964 if (filter & IPW_PROM_NO_CTL)
7965 return;
7966 if (filter & IPW_PROM_CTL_HEADER_ONLY)
7967 hdr_only = 1;
851ca268 7968 } else if (ieee80211_is_data(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY
7969 if (filter & IPW_PROM_NO_DATA)
7970 return;
7971 if (filter & IPW_PROM_DATA_HEADER_ONLY)
7972 hdr_only = 1;
7973 }
7974
7975 /* Copy the SKB since this is for the promiscuous side */
7976 skb = skb_copy(rxb->skb, GFP_ATOMIC);
7977 if (skb == NULL) {
7978 IPW_ERROR("skb_clone failed for promiscuous copy.\n");
7979 return;
7980 }
7981
7982 /* copy the frame data to write after where the radiotap header goes */
7983 ipw_rt = (void *)skb->data;
7984
7985 if (hdr_only)
851ca268 7986 len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_ctl));
d685b8c2
ZY
7987
7988 memcpy(ipw_rt->payload, hdr, len);
7989
7990 /* Zero the radiotap static buffer ... We only need to zero the bytes
7991 * NOT part of our real header, saves a little time.
7992 *
7993 * No longer necessary since we fill in all our data. Purge before
7994 * merging patch officially.
7995 * memset(rxb->skb->data + sizeof(struct ipw_rt_hdr), 0,
7996 * IEEE80211_RADIOTAP_HDRLEN - sizeof(struct ipw_rt_hdr));
7997 */
7998
7999 ipw_rt->rt_hdr.it_version = PKTHDR_RADIOTAP_VERSION;
8000 ipw_rt->rt_hdr.it_pad = 0; /* always good to zero */
743b84d2 8001 ipw_rt->rt_hdr.it_len = cpu_to_le16(sizeof(*ipw_rt)); /* total header+data */
d685b8c2
ZY
8002
8003 /* Set the size of the skb to the size of the frame */
743b84d2 8004 skb_put(skb, sizeof(*ipw_rt) + len);
d685b8c2
ZY
8005
8006 /* Big bitfield of all the fields we provide in radiotap */
743b84d2
AV
8007 ipw_rt->rt_hdr.it_present = cpu_to_le32(
8008 (1 << IEEE80211_RADIOTAP_TSFT) |
4b1f8a99 8009 (1 << IEEE80211_RADIOTAP_FLAGS) |
d685b8c2
ZY
8010 (1 << IEEE80211_RADIOTAP_RATE) |
8011 (1 << IEEE80211_RADIOTAP_CHANNEL) |
8012 (1 << IEEE80211_RADIOTAP_DBM_ANTSIGNAL) |
8013 (1 << IEEE80211_RADIOTAP_DBM_ANTNOISE) |
8014 (1 << IEEE80211_RADIOTAP_ANTENNA));
8015
8016 /* Zero the flags, we'll add to them as we go */
8017 ipw_rt->rt_flags = 0;
4b1f8a99
ZY
8018 ipw_rt->rt_tsf = (u64)(frame->parent_tsf[3] << 24 |
8019 frame->parent_tsf[2] << 16 |
8020 frame->parent_tsf[1] << 8 |
8021 frame->parent_tsf[0]);
d685b8c2
ZY
8022
8023 /* Convert to DBM */
8024 ipw_rt->rt_dbmsignal = signal;
8025 ipw_rt->rt_dbmnoise = noise;
8026
8027 /* Convert the channel data and set the flags */
8028 ipw_rt->rt_channel = cpu_to_le16(ieee80211chan2mhz(channel));
8029 if (channel > 14) { /* 802.11a */
8030 ipw_rt->rt_chbitmask =
8031 cpu_to_le16((IEEE80211_CHAN_OFDM | IEEE80211_CHAN_5GHZ));
8032 } else if (phy_flags & (1 << 5)) { /* 802.11b */
8033 ipw_rt->rt_chbitmask =
8034 cpu_to_le16((IEEE80211_CHAN_CCK | IEEE80211_CHAN_2GHZ));
8035 } else { /* 802.11g */
8036 ipw_rt->rt_chbitmask =
472caf8c 8037 cpu_to_le16(IEEE80211_CHAN_OFDM | IEEE80211_CHAN_2GHZ);
d685b8c2
ZY
8038 }
8039
8040 /* set the rate in multiples of 500k/s */
8041 switch (rate) {
8042 case IPW_TX_RATE_1MB:
8043 ipw_rt->rt_rate = 2;
8044 break;
8045 case IPW_TX_RATE_2MB:
8046 ipw_rt->rt_rate = 4;
8047 break;
8048 case IPW_TX_RATE_5MB:
8049 ipw_rt->rt_rate = 10;
8050 break;
8051 case IPW_TX_RATE_6MB:
8052 ipw_rt->rt_rate = 12;
8053 break;
8054 case IPW_TX_RATE_9MB:
8055 ipw_rt->rt_rate = 18;
8056 break;
8057 case IPW_TX_RATE_11MB:
8058 ipw_rt->rt_rate = 22;
8059 break;
8060 case IPW_TX_RATE_12MB:
8061 ipw_rt->rt_rate = 24;
8062 break;
8063 case IPW_TX_RATE_18MB:
8064 ipw_rt->rt_rate = 36;
8065 break;
8066 case IPW_TX_RATE_24MB:
8067 ipw_rt->rt_rate = 48;
8068 break;
8069 case IPW_TX_RATE_36MB:
8070 ipw_rt->rt_rate = 72;
8071 break;
8072 case IPW_TX_RATE_48MB:
8073 ipw_rt->rt_rate = 96;
8074 break;
8075 case IPW_TX_RATE_54MB:
8076 ipw_rt->rt_rate = 108;
8077 break;
8078 default:
8079 ipw_rt->rt_rate = 0;
8080 break;
8081 }
8082
8083 /* antenna number */
8084 ipw_rt->rt_antenna = (phy_flags & 3);
8085
8086 /* set the preamble flag if we have it */
8087 if (phy_flags & (1 << 6))
8088 ipw_rt->rt_flags |= IEEE80211_RADIOTAP_F_SHORTPRE;
8089
8090 IPW_DEBUG_RX("Rx packet of %d bytes.\n", skb->len);
8091
8092 if (!ieee80211_rx(priv->prom_priv->ieee, skb, stats)) {
8093 priv->prom_priv->ieee->stats.rx_errors++;
8094 dev_kfree_skb_any(skb);
8095 }
8096}
8097#endif
8098
858119e1 8099static int is_network_packet(struct ipw_priv *priv,
ea2b26e0
JK
8100 struct ieee80211_hdr_4addr *header)
8101{
8102 /* Filter incoming packets to determine if they are targetted toward
8103 * this network, discarding packets coming from ourselves */
8104 switch (priv->ieee->iw_mode) {
a613bffd 8105 case IW_MODE_ADHOC: /* Header: Dest. | Source | BSSID */
c848d0af
JK
8106 /* packets from our adapter are dropped (echo) */
8107 if (!memcmp(header->addr2, priv->net_dev->dev_addr, ETH_ALEN))
8108 return 0;
8109
90700fd9 8110 /* {broad,multi}cast packets to our BSSID go through */
3c19065a 8111 if (is_multicast_ether_addr(header->addr1))
ea2b26e0 8112 return !memcmp(header->addr3, priv->bssid, ETH_ALEN);
a613bffd
JK
8113
8114 /* packets to our adapter go through */
8115 return !memcmp(header->addr1, priv->net_dev->dev_addr,
8116 ETH_ALEN);
a613bffd 8117
90700fd9 8118 case IW_MODE_INFRA: /* Header: Dest. | BSSID | Source */
c848d0af
JK
8119 /* packets from our adapter are dropped (echo) */
8120 if (!memcmp(header->addr3, priv->net_dev->dev_addr, ETH_ALEN))
8121 return 0;
8122
90700fd9 8123 /* {broad,multi}cast packets to our BSS go through */
3c19065a 8124 if (is_multicast_ether_addr(header->addr1))
a613bffd
JK
8125 return !memcmp(header->addr2, priv->bssid, ETH_ALEN);
8126
8127 /* packets to our adapter go through */
8128 return !memcmp(header->addr1, priv->net_dev->dev_addr,
8129 ETH_ALEN);
ea2b26e0 8130 }
a613bffd 8131
ea2b26e0
JK
8132 return 1;
8133}
8134
afbf30a2
JK
8135#define IPW_PACKET_RETRY_TIME HZ
8136
858119e1 8137static int is_duplicate_packet(struct ipw_priv *priv,
afbf30a2
JK
8138 struct ieee80211_hdr_4addr *header)
8139{
afbf30a2
JK
8140 u16 sc = le16_to_cpu(header->seq_ctl);
8141 u16 seq = WLAN_GET_SEQ_SEQ(sc);
8142 u16 frag = WLAN_GET_SEQ_FRAG(sc);
8143 u16 *last_seq, *last_frag;
8144 unsigned long *last_time;
8145
8146 switch (priv->ieee->iw_mode) {
8147 case IW_MODE_ADHOC:
8148 {
8149 struct list_head *p;
8150 struct ipw_ibss_seq *entry = NULL;
8151 u8 *mac = header->addr2;
8152 int index = mac[5] % IPW_IBSS_MAC_HASH_SIZE;
8153
8154 __list_for_each(p, &priv->ibss_mac_hash[index]) {
8155 entry =
8156 list_entry(p, struct ipw_ibss_seq, list);
8157 if (!memcmp(entry->mac, mac, ETH_ALEN))
8158 break;
8159 }
8160 if (p == &priv->ibss_mac_hash[index]) {
8161 entry = kmalloc(sizeof(*entry), GFP_ATOMIC);
8162 if (!entry) {
8163 IPW_ERROR
8164 ("Cannot malloc new mac entry\n");
8165 return 0;
8166 }
8167 memcpy(entry->mac, mac, ETH_ALEN);
8168 entry->seq_num = seq;
8169 entry->frag_num = frag;
8170 entry->packet_time = jiffies;
8171 list_add(&entry->list,
8172 &priv->ibss_mac_hash[index]);
8173 return 0;
8174 }
8175 last_seq = &entry->seq_num;
8176 last_frag = &entry->frag_num;
8177 last_time = &entry->packet_time;
8178 break;
8179 }
8180 case IW_MODE_INFRA:
8181 last_seq = &priv->last_seq_num;
8182 last_frag = &priv->last_frag_num;
8183 last_time = &priv->last_packet_time;
8184 break;
8185 default:
8186 return 0;
8187 }
8188 if ((*last_seq == seq) &&
8189 time_after(*last_time + IPW_PACKET_RETRY_TIME, jiffies)) {
8190 if (*last_frag == frag)
8191 goto drop;
8192 if (*last_frag + 1 != frag)
8193 /* out-of-order fragment */
8194 goto drop;
afbf30a2
JK
8195 } else
8196 *last_seq = seq;
8197
f57ce7ce 8198 *last_frag = frag;
afbf30a2
JK
8199 *last_time = jiffies;
8200 return 0;
8201
8202 drop:
87b016cb
ZY
8203 /* Comment this line now since we observed the card receives
8204 * duplicate packets but the FCTL_RETRY bit is not set in the
8205 * IBSS mode with fragmentation enabled.
8206 BUG_ON(!(le16_to_cpu(header->frame_ctl) & IEEE80211_FCTL_RETRY)); */
afbf30a2
JK
8207 return 1;
8208}
8209
b095c381
JK
8210static void ipw_handle_mgmt_packet(struct ipw_priv *priv,
8211 struct ipw_rx_mem_buffer *rxb,
8212 struct ieee80211_rx_stats *stats)
8213{
8214 struct sk_buff *skb = rxb->skb;
8215 struct ipw_rx_packet *pkt = (struct ipw_rx_packet *)skb->data;
8216 struct ieee80211_hdr_4addr *header = (struct ieee80211_hdr_4addr *)
8217 (skb->data + IPW_RX_FRAME_SIZE);
8218
8219 ieee80211_rx_mgt(priv->ieee, header, stats);
8220
8221 if (priv->ieee->iw_mode == IW_MODE_ADHOC &&
8222 ((WLAN_FC_GET_STYPE(le16_to_cpu(header->frame_ctl)) ==
8223 IEEE80211_STYPE_PROBE_RESP) ||
8224 (WLAN_FC_GET_STYPE(le16_to_cpu(header->frame_ctl)) ==
8225 IEEE80211_STYPE_BEACON))) {
8226 if (!memcmp(header->addr3, priv->bssid, ETH_ALEN))
8227 ipw_add_station(priv, header->addr2);
8228 }
8229
8230 if (priv->config & CFG_NET_STATS) {
8231 IPW_DEBUG_HC("sending stat packet\n");
8232
8233 /* Set the size of the skb to the size of the full
8234 * ipw header and 802.11 frame */
8235 skb_put(skb, le16_to_cpu(pkt->u.frame.length) +
8236 IPW_RX_FRAME_SIZE);
8237
8238 /* Advance past the ipw packet header to the 802.11 frame */
8239 skb_pull(skb, IPW_RX_FRAME_SIZE);
8240
8241 /* Push the ieee80211_rx_stats before the 802.11 frame */
8242 memcpy(skb_push(skb, sizeof(*stats)), stats, sizeof(*stats));
8243
8244 skb->dev = priv->ieee->dev;
8245
8246 /* Point raw at the ieee80211_stats */
459a98ed 8247 skb_reset_mac_header(skb);
b095c381
JK
8248
8249 skb->pkt_type = PACKET_OTHERHOST;
8250 skb->protocol = __constant_htons(ETH_P_80211_STATS);
8251 memset(skb->cb, 0, sizeof(rxb->skb->cb));
8252 netif_rx(skb);
43f66a6c 8253 rxb->skb = NULL;
b095c381 8254 }
43f66a6c
JK
8255}
8256
43f66a6c
JK
8257/*
8258 * Main entry function for recieving a packet with 80211 headers. This
8259 * should be called when ever the FW has notified us that there is a new
8260 * skb in the recieve queue.
8261 */
8262static void ipw_rx(struct ipw_priv *priv)
8263{
8264 struct ipw_rx_mem_buffer *rxb;
8265 struct ipw_rx_packet *pkt;
0dacca1f 8266 struct ieee80211_hdr_4addr *header;
43f66a6c
JK
8267 u32 r, w, i;
8268 u8 network_packet;
943dbef4 8269 u8 fill_rx = 0;
43f66a6c 8270
b095c381
JK
8271 r = ipw_read32(priv, IPW_RX_READ_INDEX);
8272 w = ipw_read32(priv, IPW_RX_WRITE_INDEX);
943dbef4
DW
8273 i = priv->rxq->read;
8274
8275 if (ipw_rx_queue_space (priv->rxq) > (RX_QUEUE_SIZE / 2))
8276 fill_rx = 1;
43f66a6c
JK
8277
8278 while (i != r) {
8279 rxb = priv->rxq->queue[i];
43f66a6c
JK
8280 if (unlikely(rxb == NULL)) {
8281 printk(KERN_CRIT "Queue not allocated!\n");
8282 break;
8283 }
43f66a6c
JK
8284 priv->rxq->queue[i] = NULL;
8285
8286 pci_dma_sync_single_for_cpu(priv->pci_dev, rxb->dma_addr,
b095c381 8287 IPW_RX_BUF_SIZE,
43f66a6c
JK
8288 PCI_DMA_FROMDEVICE);
8289
8290 pkt = (struct ipw_rx_packet *)rxb->skb->data;
8291 IPW_DEBUG_RX("Packet: type=%02X seq=%02X bits=%02X\n",
8292 pkt->header.message_type,
0edd5b44 8293 pkt->header.rx_seq_num, pkt->header.control_bits);
43f66a6c
JK
8294
8295 switch (pkt->header.message_type) {
0edd5b44
JG
8296 case RX_FRAME_TYPE: /* 802.11 frame */ {
8297 struct ieee80211_rx_stats stats = {
851ca268 8298 .rssi = pkt->u.frame.rssi_dbm -
0edd5b44 8299 IPW_RSSI_TO_DBM,
c848d0af 8300 .signal =
b191608a
BM
8301 le16_to_cpu(pkt->u.frame.rssi_dbm) -
8302 IPW_RSSI_TO_DBM + 0x100,
c848d0af
JK
8303 .noise =
8304 le16_to_cpu(pkt->u.frame.noise),
0edd5b44
JG
8305 .rate = pkt->u.frame.rate,
8306 .mac_time = jiffies,
8307 .received_channel =
8308 pkt->u.frame.received_channel,
8309 .freq =
8310 (pkt->u.frame.
8311 control & (1 << 0)) ?
8312 IEEE80211_24GHZ_BAND :
8313 IEEE80211_52GHZ_BAND,
a613bffd 8314 .len = le16_to_cpu(pkt->u.frame.length),
0edd5b44
JG
8315 };
8316
8317 if (stats.rssi != 0)
8318 stats.mask |= IEEE80211_STATMASK_RSSI;
8319 if (stats.signal != 0)
8320 stats.mask |= IEEE80211_STATMASK_SIGNAL;
c848d0af
JK
8321 if (stats.noise != 0)
8322 stats.mask |= IEEE80211_STATMASK_NOISE;
0edd5b44
JG
8323 if (stats.rate != 0)
8324 stats.mask |= IEEE80211_STATMASK_RATE;
8325
8326 priv->rx_packets++;
43f66a6c 8327
d685b8c2
ZY
8328#ifdef CONFIG_IPW2200_PROMISCUOUS
8329 if (priv->prom_net_dev && netif_running(priv->prom_net_dev))
8330 ipw_handle_promiscuous_rx(priv, rxb, &stats);
8331#endif
8332
b095c381 8333#ifdef CONFIG_IPW2200_MONITOR
0edd5b44 8334 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
459d4087 8335#ifdef CONFIG_IPW2200_RADIOTAP
d685b8c2
ZY
8336
8337 ipw_handle_data_packet_monitor(priv,
8338 rxb,
8339 &stats);
24a47dbd 8340#else
d685b8c2
ZY
8341 ipw_handle_data_packet(priv, rxb,
8342 &stats);
24a47dbd 8343#endif
0edd5b44
JG
8344 break;
8345 }
43f66a6c 8346#endif
bf79451e 8347
0edd5b44 8348 header =
0dacca1f
JK
8349 (struct ieee80211_hdr_4addr *)(rxb->skb->
8350 data +
8351 IPW_RX_FRAME_SIZE);
43f66a6c
JK
8352 /* TODO: Check Ad-Hoc dest/source and make sure
8353 * that we are actually parsing these packets
bf79451e 8354 * correctly -- we should probably use the
43f66a6c
JK
8355 * frame control of the packet and disregard
8356 * the current iw_mode */
0edd5b44 8357
ea2b26e0
JK
8358 network_packet =
8359 is_network_packet(priv, header);
0edd5b44
JG
8360 if (network_packet && priv->assoc_network) {
8361 priv->assoc_network->stats.rssi =
8362 stats.rssi;
00d21de5
ZY
8363 priv->exp_avg_rssi =
8364 exponential_average(priv->exp_avg_rssi,
8365 stats.rssi, DEPTH_RSSI);
0edd5b44
JG
8366 }
8367
8368 IPW_DEBUG_RX("Frame: len=%u\n",
a613bffd 8369 le16_to_cpu(pkt->u.frame.length));
0edd5b44 8370
a613bffd 8371 if (le16_to_cpu(pkt->u.frame.length) <
9d0be03a
ZY
8372 ieee80211_get_hdrlen(le16_to_cpu(
8373 header->frame_ctl))) {
0edd5b44
JG
8374 IPW_DEBUG_DROP
8375 ("Received packet is too small. "
8376 "Dropping.\n");
8377 priv->ieee->stats.rx_errors++;
8378 priv->wstats.discard.misc++;
8379 break;
8380 }
8381
a613bffd
JK
8382 switch (WLAN_FC_GET_TYPE
8383 (le16_to_cpu(header->frame_ctl))) {
b095c381 8384
0edd5b44 8385 case IEEE80211_FTYPE_MGMT:
b095c381
JK
8386 ipw_handle_mgmt_packet(priv, rxb,
8387 &stats);
0edd5b44
JG
8388 break;
8389
8390 case IEEE80211_FTYPE_CTL:
8391 break;
8392
8393 case IEEE80211_FTYPE_DATA:
afbf30a2
JK
8394 if (unlikely(!network_packet ||
8395 is_duplicate_packet(priv,
8396 header)))
8397 {
0edd5b44 8398 IPW_DEBUG_DROP("Dropping: "
e174961c
JB
8399 "%pM, "
8400 "%pM, "
8401 "%pM\n",
8402 header->addr1,
8403 header->addr2,
8404 header->addr3);
b095c381
JK
8405 break;
8406 }
8407
8408 ipw_handle_data_packet(priv, rxb,
8409 &stats);
8410
0edd5b44
JG
8411 break;
8412 }
43f66a6c
JK
8413 break;
8414 }
bf79451e 8415
0edd5b44
JG
8416 case RX_HOST_NOTIFICATION_TYPE:{
8417 IPW_DEBUG_RX
8418 ("Notification: subtype=%02X flags=%02X size=%d\n",
43f66a6c
JK
8419 pkt->u.notification.subtype,
8420 pkt->u.notification.flags,
720eeb43 8421 le16_to_cpu(pkt->u.notification.size));
0edd5b44
JG
8422 ipw_rx_notification(priv, &pkt->u.notification);
8423 break;
8424 }
43f66a6c
JK
8425
8426 default:
8427 IPW_DEBUG_RX("Bad Rx packet of type %d\n",
8428 pkt->header.message_type);
8429 break;
8430 }
bf79451e
JG
8431
8432 /* For now we just don't re-use anything. We can tweak this
8433 * later to try and re-use notification packets and SKBs that
43f66a6c
JK
8434 * fail to Rx correctly */
8435 if (rxb->skb != NULL) {
8436 dev_kfree_skb_any(rxb->skb);
8437 rxb->skb = NULL;
8438 }
bf79451e 8439
43f66a6c 8440 pci_unmap_single(priv->pci_dev, rxb->dma_addr,
b095c381 8441 IPW_RX_BUF_SIZE, PCI_DMA_FROMDEVICE);
43f66a6c 8442 list_add_tail(&rxb->list, &priv->rxq->rx_used);
bf79451e 8443
43f66a6c 8444 i = (i + 1) % RX_QUEUE_SIZE;
943dbef4
DW
8445
8446 /* If there are a lot of unsued frames, restock the Rx queue
8447 * so the ucode won't assert */
8448 if (fill_rx) {
8449 priv->rxq->read = i;
8450 ipw_rx_queue_replenish(priv);
8451 }
43f66a6c
JK
8452 }
8453
8454 /* Backtrack one entry */
943dbef4 8455 priv->rxq->read = i;
43f66a6c
JK
8456 ipw_rx_queue_restock(priv);
8457}
8458
afbf30a2
JK
8459#define DEFAULT_RTS_THRESHOLD 2304U
8460#define MIN_RTS_THRESHOLD 1U
8461#define MAX_RTS_THRESHOLD 2304U
8462#define DEFAULT_BEACON_INTERVAL 100U
8463#define DEFAULT_SHORT_RETRY_LIMIT 7U
8464#define DEFAULT_LONG_RETRY_LIMIT 4U
8465
d6d5b5c1
ZY
8466/**
8467 * ipw_sw_reset
8468 * @option: options to control different reset behaviour
8469 * 0 = reset everything except the 'disable' module_param
8470 * 1 = reset everything and print out driver info (for probe only)
8471 * 2 = reset everything
8472 */
8473static int ipw_sw_reset(struct ipw_priv *priv, int option)
43f66a6c 8474{
afbf30a2
JK
8475 int band, modulation;
8476 int old_mode = priv->ieee->iw_mode;
43f66a6c 8477
afbf30a2
JK
8478 /* Initialize module parameter values here */
8479 priv->config = 0;
43f66a6c 8480
afbf30a2
JK
8481 /* We default to disabling the LED code as right now it causes
8482 * too many systems to lock up... */
8483 if (!led)
8484 priv->config |= CFG_NO_LED;
43f66a6c 8485
afbf30a2
JK
8486 if (associate)
8487 priv->config |= CFG_ASSOCIATE;
8488 else
8489 IPW_DEBUG_INFO("Auto associate disabled.\n");
bf79451e 8490
afbf30a2
JK
8491 if (auto_create)
8492 priv->config |= CFG_ADHOC_CREATE;
8493 else
8494 IPW_DEBUG_INFO("Auto adhoc creation disabled.\n");
43f66a6c 8495
17ed081d
ZY
8496 priv->config &= ~CFG_STATIC_ESSID;
8497 priv->essid_len = 0;
8498 memset(priv->essid, 0, IW_ESSID_MAX_SIZE);
8499
d6d5b5c1 8500 if (disable && option) {
afbf30a2
JK
8501 priv->status |= STATUS_RF_KILL_SW;
8502 IPW_DEBUG_INFO("Radio disabled.\n");
43f66a6c 8503 }
bf79451e 8504
afbf30a2
JK
8505 if (channel != 0) {
8506 priv->config |= CFG_STATIC_CHANNEL;
8507 priv->channel = channel;
8508 IPW_DEBUG_INFO("Bind to static channel %d\n", channel);
8509 /* TODO: Validate that provided channel is in range */
43f66a6c 8510 }
e43e3c1e 8511#ifdef CONFIG_IPW2200_QOS
afbf30a2
JK
8512 ipw_qos_init(priv, qos_enable, qos_burst_enable,
8513 burst_duration_CCK, burst_duration_OFDM);
e43e3c1e 8514#endif /* CONFIG_IPW2200_QOS */
43f66a6c 8515
afbf30a2
JK
8516 switch (mode) {
8517 case 1:
8518 priv->ieee->iw_mode = IW_MODE_ADHOC;
8519 priv->net_dev->type = ARPHRD_ETHER;
8520
8521 break;
8522#ifdef CONFIG_IPW2200_MONITOR
8523 case 2:
8524 priv->ieee->iw_mode = IW_MODE_MONITOR;
459d4087 8525#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK
8526 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
8527#else
afbf30a2 8528 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 8529#endif
afbf30a2
JK
8530 break;
8531#endif
8532 default:
8533 case 0:
8534 priv->net_dev->type = ARPHRD_ETHER;
8535 priv->ieee->iw_mode = IW_MODE_INFRA;
8536 break;
43f66a6c
JK
8537 }
8538
afbf30a2
JK
8539 if (hwcrypto) {
8540 priv->ieee->host_encrypt = 0;
8541 priv->ieee->host_encrypt_msdu = 0;
8542 priv->ieee->host_decrypt = 0;
567deaf6 8543 priv->ieee->host_mc_decrypt = 0;
afbf30a2
JK
8544 }
8545 IPW_DEBUG_INFO("Hardware crypto [%s]\n", hwcrypto ? "on" : "off");
43f66a6c 8546
e402c937
ZY
8547 /* IPW2200/2915 is abled to do hardware fragmentation. */
8548 priv->ieee->host_open_frag = 0;
bf79451e 8549
afbf30a2
JK
8550 if ((priv->pci_dev->device == 0x4223) ||
8551 (priv->pci_dev->device == 0x4224)) {
e8c69e27 8552 if (option == 1)
afbf30a2
JK
8553 printk(KERN_INFO DRV_NAME
8554 ": Detected Intel PRO/Wireless 2915ABG Network "
8555 "Connection\n");
8556 priv->ieee->abg_true = 1;
8557 band = IEEE80211_52GHZ_BAND | IEEE80211_24GHZ_BAND;
8558 modulation = IEEE80211_OFDM_MODULATION |
8559 IEEE80211_CCK_MODULATION;
8560 priv->adapter = IPW_2915ABG;
8561 priv->ieee->mode = IEEE_A | IEEE_G | IEEE_B;
43f66a6c 8562 } else {
e8c69e27 8563 if (option == 1)
afbf30a2
JK
8564 printk(KERN_INFO DRV_NAME
8565 ": Detected Intel PRO/Wireless 2200BG Network "
8566 "Connection\n");
bf79451e 8567
afbf30a2
JK
8568 priv->ieee->abg_true = 0;
8569 band = IEEE80211_24GHZ_BAND;
8570 modulation = IEEE80211_OFDM_MODULATION |
8571 IEEE80211_CCK_MODULATION;
8572 priv->adapter = IPW_2200BG;
8573 priv->ieee->mode = IEEE_G | IEEE_B;
43f66a6c
JK
8574 }
8575
afbf30a2
JK
8576 priv->ieee->freq_band = band;
8577 priv->ieee->modulation = modulation;
43f66a6c 8578
afbf30a2 8579 priv->rates_mask = IEEE80211_DEFAULT_RATES_MASK;
bf79451e 8580
afbf30a2
JK
8581 priv->disassociate_threshold = IPW_MB_DISASSOCIATE_THRESHOLD_DEFAULT;
8582 priv->roaming_threshold = IPW_MB_ROAMING_THRESHOLD_DEFAULT;
43f66a6c 8583
afbf30a2
JK
8584 priv->rts_threshold = DEFAULT_RTS_THRESHOLD;
8585 priv->short_retry_limit = DEFAULT_SHORT_RETRY_LIMIT;
8586 priv->long_retry_limit = DEFAULT_LONG_RETRY_LIMIT;
43f66a6c 8587
afbf30a2
JK
8588 /* If power management is turned on, default to AC mode */
8589 priv->power_mode = IPW_POWER_AC;
8590 priv->tx_power = IPW_TX_POWER_DEFAULT;
8591
0ece35b5 8592 return old_mode == priv->ieee->iw_mode;
43f66a6c
JK
8593}
8594
8595/*
8596 * This file defines the Wireless Extension handlers. It does not
8597 * define any methods of hardware manipulation and relies on the
8598 * functions defined in ipw_main to provide the HW interaction.
bf79451e
JG
8599 *
8600 * The exception to this is the use of the ipw_get_ordinal()
43f66a6c
JK
8601 * function used to poll the hardware vs. making unecessary calls.
8602 *
8603 */
8604
bf79451e
JG
8605static int ipw_wx_get_name(struct net_device *dev,
8606 struct iw_request_info *info,
43f66a6c
JK
8607 union iwreq_data *wrqu, char *extra)
8608{
8609 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8610 mutex_lock(&priv->mutex);
c848d0af 8611 if (priv->status & STATUS_RF_KILL_MASK)
a613bffd 8612 strcpy(wrqu->name, "radio off");
c848d0af 8613 else if (!(priv->status & STATUS_ASSOCIATED))
43f66a6c 8614 strcpy(wrqu->name, "unassociated");
bf79451e 8615 else
43f66a6c
JK
8616 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11%c",
8617 ipw_modes[priv->assoc_request.ieee_mode]);
8618 IPW_DEBUG_WX("Name: %s\n", wrqu->name);
4644151b 8619 mutex_unlock(&priv->mutex);
43f66a6c
JK
8620 return 0;
8621}
8622
8623static int ipw_set_channel(struct ipw_priv *priv, u8 channel)
8624{
8625 if (channel == 0) {
8626 IPW_DEBUG_INFO("Setting channel to ANY (0)\n");
8627 priv->config &= ~CFG_STATIC_CHANNEL;
c848d0af
JK
8628 IPW_DEBUG_ASSOC("Attempting to associate with new "
8629 "parameters.\n");
8630 ipw_associate(priv);
43f66a6c
JK
8631 return 0;
8632 }
8633
8634 priv->config |= CFG_STATIC_CHANNEL;
8635
8636 if (priv->channel == channel) {
0edd5b44
JG
8637 IPW_DEBUG_INFO("Request to set channel to current value (%d)\n",
8638 channel);
43f66a6c
JK
8639 return 0;
8640 }
8641
8642 IPW_DEBUG_INFO("Setting channel to %i\n", (int)channel);
8643 priv->channel = channel;
8644
b095c381
JK
8645#ifdef CONFIG_IPW2200_MONITOR
8646 if (priv->ieee->iw_mode == IW_MODE_MONITOR) {
afbf30a2 8647 int i;
b095c381 8648 if (priv->status & STATUS_SCANNING) {
afbf30a2 8649 IPW_DEBUG_SCAN("Scan abort triggered due to "
b095c381 8650 "channel change.\n");
afbf30a2 8651 ipw_abort_scan(priv);
b095c381
JK
8652 }
8653
8654 for (i = 1000; i && (priv->status & STATUS_SCANNING); i--)
8655 udelay(10);
8656
8657 if (priv->status & STATUS_SCANNING)
8658 IPW_DEBUG_SCAN("Still scanning...\n");
8659 else
8660 IPW_DEBUG_SCAN("Took %dms to abort current scan\n",
8661 1000 - i);
8662
8663 return 0;
43f66a6c 8664 }
b095c381
JK
8665#endif /* CONFIG_IPW2200_MONITOR */
8666
c848d0af
JK
8667 /* Network configuration changed -- force [re]association */
8668 IPW_DEBUG_ASSOC("[re]association triggered due to channel change.\n");
8669 if (!ipw_disassociate(priv))
43f66a6c 8670 ipw_associate(priv);
43f66a6c
JK
8671
8672 return 0;
8673}
8674
bf79451e
JG
8675static int ipw_wx_set_freq(struct net_device *dev,
8676 struct iw_request_info *info,
8677 union iwreq_data *wrqu, char *extra)
43f66a6c
JK
8678{
8679 struct ipw_priv *priv = ieee80211_priv(dev);
1867b117 8680 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
43f66a6c 8681 struct iw_freq *fwrq = &wrqu->freq;
afbf30a2 8682 int ret = 0, i;
1fe0adb4
LH
8683 u8 channel, flags;
8684 int band;
b095c381
JK
8685
8686 if (fwrq->m == 0) {
8687 IPW_DEBUG_WX("SET Freq/Channel -> any\n");
4644151b 8688 mutex_lock(&priv->mutex);
b095c381 8689 ret = ipw_set_channel(priv, 0);
4644151b 8690 mutex_unlock(&priv->mutex);
b095c381
JK
8691 return ret;
8692 }
43f66a6c
JK
8693 /* if setting by freq convert to channel */
8694 if (fwrq->e == 1) {
1867b117 8695 channel = ieee80211_freq_to_channel(priv->ieee, fwrq->m);
b095c381
JK
8696 if (channel == 0)
8697 return -EINVAL;
8698 } else
8699 channel = fwrq->m;
bf79451e 8700
1867b117 8701 if (!(band = ieee80211_is_valid_channel(priv->ieee, channel)))
b095c381 8702 return -EINVAL;
43f66a6c 8703
1fe0adb4 8704 if (priv->ieee->iw_mode == IW_MODE_ADHOC) {
1867b117 8705 i = ieee80211_channel_to_index(priv->ieee, channel);
afbf30a2
JK
8706 if (i == -1)
8707 return -EINVAL;
bf79451e 8708
1fe0adb4
LH
8709 flags = (band == IEEE80211_24GHZ_BAND) ?
8710 geo->bg[i].flags : geo->a[i].flags;
8711 if (flags & IEEE80211_CH_PASSIVE_ONLY) {
afbf30a2
JK
8712 IPW_DEBUG_WX("Invalid Ad-Hoc channel for 802.11a\n");
8713 return -EINVAL;
43f66a6c
JK
8714 }
8715 }
bf79451e 8716
43f66a6c 8717 IPW_DEBUG_WX("SET Freq/Channel -> %d \n", fwrq->m);
4644151b 8718 mutex_lock(&priv->mutex);
b095c381 8719 ret = ipw_set_channel(priv, channel);
4644151b 8720 mutex_unlock(&priv->mutex);
c848d0af 8721 return ret;
43f66a6c
JK
8722}
8723
bf79451e
JG
8724static int ipw_wx_get_freq(struct net_device *dev,
8725 struct iw_request_info *info,
43f66a6c
JK
8726 union iwreq_data *wrqu, char *extra)
8727{
8728 struct ipw_priv *priv = ieee80211_priv(dev);
8729
8730 wrqu->freq.e = 0;
8731
8732 /* If we are associated, trying to associate, or have a statically
8733 * configured CHANNEL then return that; otherwise return ANY */
4644151b 8734 mutex_lock(&priv->mutex);
43f66a6c 8735 if (priv->config & CFG_STATIC_CHANNEL ||
c580f67f
ZY
8736 priv->status & (STATUS_ASSOCIATING | STATUS_ASSOCIATED)) {
8737 int i;
8738
8739 i = ieee80211_channel_to_index(priv->ieee, priv->channel);
8740 BUG_ON(i == -1);
8741 wrqu->freq.e = 1;
8742
8743 switch (ieee80211_is_valid_channel(priv->ieee, priv->channel)) {
8744 case IEEE80211_52GHZ_BAND:
8745 wrqu->freq.m = priv->ieee->geo.a[i].freq * 100000;
8746 break;
8747
8748 case IEEE80211_24GHZ_BAND:
8749 wrqu->freq.m = priv->ieee->geo.bg[i].freq * 100000;
8750 break;
8751
8752 default:
8753 BUG();
8754 }
8755 } else
43f66a6c
JK
8756 wrqu->freq.m = 0;
8757
4644151b 8758 mutex_unlock(&priv->mutex);
43f66a6c
JK
8759 IPW_DEBUG_WX("GET Freq/Channel -> %d \n", priv->channel);
8760 return 0;
8761}
8762
bf79451e
JG
8763static int ipw_wx_set_mode(struct net_device *dev,
8764 struct iw_request_info *info,
43f66a6c
JK
8765 union iwreq_data *wrqu, char *extra)
8766{
8767 struct ipw_priv *priv = ieee80211_priv(dev);
8768 int err = 0;
8769
8770 IPW_DEBUG_WX("Set MODE: %d\n", wrqu->mode);
8771
43f66a6c 8772 switch (wrqu->mode) {
b095c381 8773#ifdef CONFIG_IPW2200_MONITOR
43f66a6c
JK
8774 case IW_MODE_MONITOR:
8775#endif
8776 case IW_MODE_ADHOC:
8777 case IW_MODE_INFRA:
8778 break;
8779 case IW_MODE_AUTO:
8780 wrqu->mode = IW_MODE_INFRA;
8781 break;
8782 default:
8783 return -EINVAL;
8784 }
b095c381
JK
8785 if (wrqu->mode == priv->ieee->iw_mode)
8786 return 0;
43f66a6c 8787
4644151b 8788 mutex_lock(&priv->mutex);
43f66a6c 8789
afbf30a2
JK
8790 ipw_sw_reset(priv, 0);
8791
b095c381 8792#ifdef CONFIG_IPW2200_MONITOR
bf79451e 8793 if (priv->ieee->iw_mode == IW_MODE_MONITOR)
43f66a6c 8794 priv->net_dev->type = ARPHRD_ETHER;
bf79451e
JG
8795
8796 if (wrqu->mode == IW_MODE_MONITOR)
459d4087 8797#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK
8798 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
8799#else
43f66a6c 8800 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 8801#endif
b095c381 8802#endif /* CONFIG_IPW2200_MONITOR */
bf79451e 8803
bf79451e 8804 /* Free the existing firmware and reset the fw_loaded
43f66a6c 8805 * flag so ipw_load() will bring in the new firmawre */
afbf30a2 8806 free_firmware();
43f66a6c
JK
8807
8808 priv->ieee->iw_mode = wrqu->mode;
bf79451e 8809
c848d0af 8810 queue_work(priv->workqueue, &priv->adapter_restart);
4644151b 8811 mutex_unlock(&priv->mutex);
0edd5b44 8812 return err;
43f66a6c
JK
8813}
8814
bf79451e 8815static int ipw_wx_get_mode(struct net_device *dev,
0edd5b44
JG
8816 struct iw_request_info *info,
8817 union iwreq_data *wrqu, char *extra)
43f66a6c
JK
8818{
8819 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 8820 mutex_lock(&priv->mutex);
43f66a6c
JK
8821 wrqu->mode = priv->ieee->iw_mode;
8822 IPW_DEBUG_WX("Get MODE -> %d\n", wrqu->mode);
4644151b 8823 mutex_unlock(&priv->mutex);
43f66a6c
JK
8824 return 0;
8825}
8826
43f66a6c
JK
8827/* Values are in microsecond */
8828static const s32 timeout_duration[] = {
8829 350000,
8830 250000,
8831 75000,
8832 37000,
8833 25000,
8834};
8835
8836static const s32 period_duration[] = {
8837 400000,
8838 700000,
8839 1000000,
8840 1000000,
8841 1000000
8842};
8843
bf79451e
JG
8844static int ipw_wx_get_range(struct net_device *dev,
8845 struct iw_request_info *info,
43f66a6c
JK
8846 union iwreq_data *wrqu, char *extra)
8847{
8848 struct ipw_priv *priv = ieee80211_priv(dev);
8849 struct iw_range *range = (struct iw_range *)extra;
1867b117 8850 const struct ieee80211_geo *geo = ieee80211_get_geo(priv->ieee);
b095c381 8851 int i = 0, j;
43f66a6c
JK
8852
8853 wrqu->data.length = sizeof(*range);
8854 memset(range, 0, sizeof(*range));
8855
8856 /* 54Mbs == ~27 Mb/s real (802.11g) */
bf79451e 8857 range->throughput = 27 * 1000 * 1000;
43f66a6c
JK
8858
8859 range->max_qual.qual = 100;
8860 /* TODO: Find real max RSSI and stick here */
8861 range->max_qual.level = 0;
b191608a 8862 range->max_qual.noise = 0;
0edd5b44 8863 range->max_qual.updated = 7; /* Updated all three */
43f66a6c
JK
8864
8865 range->avg_qual.qual = 70;
8866 /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
0edd5b44 8867 range->avg_qual.level = 0; /* FIXME to real average level */
43f66a6c 8868 range->avg_qual.noise = 0;
0edd5b44 8869 range->avg_qual.updated = 7; /* Updated all three */
4644151b 8870 mutex_lock(&priv->mutex);
0edd5b44 8871 range->num_bitrates = min(priv->rates.num_rates, (u8) IW_MAX_BITRATES);
43f66a6c 8872
bf79451e
JG
8873 for (i = 0; i < range->num_bitrates; i++)
8874 range->bitrate[i] = (priv->rates.supported_rates[i] & 0x7F) *
0edd5b44 8875 500000;
bf79451e 8876
43f66a6c
JK
8877 range->max_rts = DEFAULT_RTS_THRESHOLD;
8878 range->min_frag = MIN_FRAG_THRESHOLD;
8879 range->max_frag = MAX_FRAG_THRESHOLD;
8880
8881 range->encoding_size[0] = 5;
bf79451e 8882 range->encoding_size[1] = 13;
43f66a6c
JK
8883 range->num_encoding_sizes = 2;
8884 range->max_encoding_tokens = WEP_KEYS;
8885
8886 /* Set the Wireless Extension versions */
8887 range->we_version_compiled = WIRELESS_EXT;
f1b50863 8888 range->we_version_source = 18;
43f66a6c 8889
b095c381
JK
8890 i = 0;
8891 if (priv->ieee->mode & (IEEE_B | IEEE_G)) {
e815de42
ZY
8892 for (j = 0; j < geo->bg_channels && i < IW_MAX_FREQUENCIES; j++) {
8893 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
8894 (geo->bg[j].flags & IEEE80211_CH_PASSIVE_ONLY))
8895 continue;
8896
b095c381
JK
8897 range->freq[i].i = geo->bg[j].channel;
8898 range->freq[i].m = geo->bg[j].freq * 100000;
8899 range->freq[i].e = 1;
e815de42 8900 i++;
b095c381
JK
8901 }
8902 }
43f66a6c 8903
b095c381 8904 if (priv->ieee->mode & IEEE_A) {
e815de42
ZY
8905 for (j = 0; j < geo->a_channels && i < IW_MAX_FREQUENCIES; j++) {
8906 if ((priv->ieee->iw_mode == IW_MODE_ADHOC) &&
8907 (geo->a[j].flags & IEEE80211_CH_PASSIVE_ONLY))
8908 continue;
8909
b095c381
JK
8910 range->freq[i].i = geo->a[j].channel;
8911 range->freq[i].m = geo->a[j].freq * 100000;
8912 range->freq[i].e = 1;
e815de42 8913 i++;
b095c381 8914 }
43f66a6c 8915 }
b095c381
JK
8916
8917 range->num_channels = i;
8918 range->num_frequency = i;
8919
4644151b 8920 mutex_unlock(&priv->mutex);
97a78ca9
BB
8921
8922 /* Event capability (kernel + driver) */
8923 range->event_capa[0] = (IW_EVENT_CAPA_K_0 |
8924 IW_EVENT_CAPA_MASK(SIOCGIWTHRSPY) |
07f02e46
ZY
8925 IW_EVENT_CAPA_MASK(SIOCGIWAP) |
8926 IW_EVENT_CAPA_MASK(SIOCGIWSCAN));
97a78ca9 8927 range->event_capa[1] = IW_EVENT_CAPA_K_1;
43f66a6c 8928
f1b50863
DW
8929 range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
8930 IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
8931
374fdfbc
DW
8932 range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE;
8933
43f66a6c
JK
8934 IPW_DEBUG_WX("GET Range\n");
8935 return 0;
8936}
8937
bf79451e
JG
8938static int ipw_wx_set_wap(struct net_device *dev,
8939 struct iw_request_info *info,
43f66a6c
JK
8940 union iwreq_data *wrqu, char *extra)
8941{
8942 struct ipw_priv *priv = ieee80211_priv(dev);
8943
8944 static const unsigned char any[] = {
8945 0xff, 0xff, 0xff, 0xff, 0xff, 0xff
8946 };
8947 static const unsigned char off[] = {
8948 0x00, 0x00, 0x00, 0x00, 0x00, 0x00
8949 };
8950
bf79451e 8951 if (wrqu->ap_addr.sa_family != ARPHRD_ETHER)
43f66a6c 8952 return -EINVAL;
4644151b 8953 mutex_lock(&priv->mutex);
43f66a6c
JK
8954 if (!memcmp(any, wrqu->ap_addr.sa_data, ETH_ALEN) ||
8955 !memcmp(off, wrqu->ap_addr.sa_data, ETH_ALEN)) {
8956 /* we disable mandatory BSSID association */
8957 IPW_DEBUG_WX("Setting AP BSSID to ANY\n");
8958 priv->config &= ~CFG_STATIC_BSSID;
c848d0af
JK
8959 IPW_DEBUG_ASSOC("Attempting to associate with new "
8960 "parameters.\n");
8961 ipw_associate(priv);
4644151b 8962 mutex_unlock(&priv->mutex);
43f66a6c
JK
8963 return 0;
8964 }
8965
8966 priv->config |= CFG_STATIC_BSSID;
8967 if (!memcmp(priv->bssid, wrqu->ap_addr.sa_data, ETH_ALEN)) {
8968 IPW_DEBUG_WX("BSSID set to current BSSID.\n");
4644151b 8969 mutex_unlock(&priv->mutex);
43f66a6c
JK
8970 return 0;
8971 }
8972
e174961c
JB
8973 IPW_DEBUG_WX("Setting mandatory BSSID to %pM\n",
8974 wrqu->ap_addr.sa_data);
43f66a6c
JK
8975
8976 memcpy(priv->bssid, wrqu->ap_addr.sa_data, ETH_ALEN);
8977
c848d0af
JK
8978 /* Network configuration changed -- force [re]association */
8979 IPW_DEBUG_ASSOC("[re]association triggered due to BSSID change.\n");
8980 if (!ipw_disassociate(priv))
43f66a6c 8981 ipw_associate(priv);
43f66a6c 8982
4644151b 8983 mutex_unlock(&priv->mutex);
43f66a6c
JK
8984 return 0;
8985}
8986
bf79451e
JG
8987static int ipw_wx_get_wap(struct net_device *dev,
8988 struct iw_request_info *info,
43f66a6c
JK
8989 union iwreq_data *wrqu, char *extra)
8990{
8991 struct ipw_priv *priv = ieee80211_priv(dev);
0795af57 8992
43f66a6c
JK
8993 /* If we are associated, trying to associate, or have a statically
8994 * configured BSSID then return that; otherwise return ANY */
4644151b 8995 mutex_lock(&priv->mutex);
bf79451e 8996 if (priv->config & CFG_STATIC_BSSID ||
43f66a6c
JK
8997 priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
8998 wrqu->ap_addr.sa_family = ARPHRD_ETHER;
afbf30a2 8999 memcpy(wrqu->ap_addr.sa_data, priv->bssid, ETH_ALEN);
43f66a6c
JK
9000 } else
9001 memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
9002
e174961c
JB
9003 IPW_DEBUG_WX("Getting WAP BSSID: %pM\n",
9004 wrqu->ap_addr.sa_data);
4644151b 9005 mutex_unlock(&priv->mutex);
43f66a6c
JK
9006 return 0;
9007}
9008
bf79451e
JG
9009static int ipw_wx_set_essid(struct net_device *dev,
9010 struct iw_request_info *info,
43f66a6c
JK
9011 union iwreq_data *wrqu, char *extra)
9012{
9013 struct ipw_priv *priv = ieee80211_priv(dev);
ab644b0b
ZY
9014 int length;
9015
9016 mutex_lock(&priv->mutex);
43f66a6c 9017
ab644b0b
ZY
9018 if (!wrqu->essid.flags)
9019 {
9020 IPW_DEBUG_WX("Setting ESSID to ANY\n");
9021 ipw_disassociate(priv);
9022 priv->config &= ~CFG_STATIC_ESSID;
9023 ipw_associate(priv);
9024 mutex_unlock(&priv->mutex);
9025 return 0;
9026 }
43f66a6c 9027
a9f0d423 9028 length = min((int)wrqu->essid.length, IW_ESSID_MAX_SIZE);
43f66a6c
JK
9029
9030 priv->config |= CFG_STATIC_ESSID;
9031
a9f0d423
ZY
9032 if (priv->essid_len == length && !memcmp(priv->essid, extra, length)
9033 && (priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING))) {
43f66a6c 9034 IPW_DEBUG_WX("ESSID set to current ESSID.\n");
4644151b 9035 mutex_unlock(&priv->mutex);
43f66a6c
JK
9036 return 0;
9037 }
9038
7e272fcf 9039 IPW_DEBUG_WX("Setting ESSID: '%s' (%d)\n", escape_ssid(extra, length),
43f66a6c
JK
9040 length);
9041
9042 priv->essid_len = length;
a9f0d423 9043 memcpy(priv->essid, extra, priv->essid_len);
bf79451e 9044
c848d0af
JK
9045 /* Network configuration changed -- force [re]association */
9046 IPW_DEBUG_ASSOC("[re]association triggered due to ESSID change.\n");
9047 if (!ipw_disassociate(priv))
43f66a6c 9048 ipw_associate(priv);
43f66a6c 9049
4644151b 9050 mutex_unlock(&priv->mutex);
43f66a6c
JK
9051 return 0;
9052}
9053
bf79451e
JG
9054static int ipw_wx_get_essid(struct net_device *dev,
9055 struct iw_request_info *info,
43f66a6c
JK
9056 union iwreq_data *wrqu, char *extra)
9057{
9058 struct ipw_priv *priv = ieee80211_priv(dev);
9059
9060 /* If we are associated, trying to associate, or have a statically
9061 * configured ESSID then return that; otherwise return ANY */
4644151b 9062 mutex_lock(&priv->mutex);
43f66a6c 9063 if (priv->config & CFG_STATIC_ESSID ||
bf79451e
JG
9064 priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) {
9065 IPW_DEBUG_WX("Getting essid: '%s'\n",
7e272fcf 9066 escape_ssid(priv->essid, priv->essid_len));
bf79451e 9067 memcpy(extra, priv->essid, priv->essid_len);
43f66a6c 9068 wrqu->essid.length = priv->essid_len;
0edd5b44 9069 wrqu->essid.flags = 1; /* active */
43f66a6c
JK
9070 } else {
9071 IPW_DEBUG_WX("Getting essid: ANY\n");
9072 wrqu->essid.length = 0;
0edd5b44 9073 wrqu->essid.flags = 0; /* active */
43f66a6c 9074 }
4644151b 9075 mutex_unlock(&priv->mutex);
43f66a6c
JK
9076 return 0;
9077}
9078
bf79451e
JG
9079static int ipw_wx_set_nick(struct net_device *dev,
9080 struct iw_request_info *info,
43f66a6c 9081 union iwreq_data *wrqu, char *extra)
bf79451e 9082{
43f66a6c
JK
9083 struct ipw_priv *priv = ieee80211_priv(dev);
9084
9085 IPW_DEBUG_WX("Setting nick to '%s'\n", extra);
9086 if (wrqu->data.length > IW_ESSID_MAX_SIZE)
9087 return -E2BIG;
4644151b 9088 mutex_lock(&priv->mutex);
0edd5b44 9089 wrqu->data.length = min((size_t) wrqu->data.length, sizeof(priv->nick));
43f66a6c 9090 memset(priv->nick, 0, sizeof(priv->nick));
0edd5b44 9091 memcpy(priv->nick, extra, wrqu->data.length);
43f66a6c 9092 IPW_DEBUG_TRACE("<<\n");
4644151b 9093 mutex_unlock(&priv->mutex);
43f66a6c
JK
9094 return 0;
9095
9096}
9097
bf79451e
JG
9098static int ipw_wx_get_nick(struct net_device *dev,
9099 struct iw_request_info *info,
43f66a6c 9100 union iwreq_data *wrqu, char *extra)
bf79451e 9101{
43f66a6c
JK
9102 struct ipw_priv *priv = ieee80211_priv(dev);
9103 IPW_DEBUG_WX("Getting nick\n");
4644151b 9104 mutex_lock(&priv->mutex);
919ee6dd 9105 wrqu->data.length = strlen(priv->nick);
43f66a6c 9106 memcpy(extra, priv->nick, wrqu->data.length);
0edd5b44 9107 wrqu->data.flags = 1; /* active */
4644151b 9108 mutex_unlock(&priv->mutex);
43f66a6c
JK
9109 return 0;
9110}
9111
651be26f
OH
9112static int ipw_wx_set_sens(struct net_device *dev,
9113 struct iw_request_info *info,
9114 union iwreq_data *wrqu, char *extra)
9115{
9116 struct ipw_priv *priv = ieee80211_priv(dev);
9117 int err = 0;
9118
9119 IPW_DEBUG_WX("Setting roaming threshold to %d\n", wrqu->sens.value);
9120 IPW_DEBUG_WX("Setting disassociate threshold to %d\n", 3*wrqu->sens.value);
9121 mutex_lock(&priv->mutex);
9122
9123 if (wrqu->sens.fixed == 0)
9124 {
9125 priv->roaming_threshold = IPW_MB_ROAMING_THRESHOLD_DEFAULT;
9126 priv->disassociate_threshold = IPW_MB_DISASSOCIATE_THRESHOLD_DEFAULT;
9127 goto out;
9128 }
9129 if ((wrqu->sens.value > IPW_MB_ROAMING_THRESHOLD_MAX) ||
9130 (wrqu->sens.value < IPW_MB_ROAMING_THRESHOLD_MIN)) {
9131 err = -EINVAL;
9132 goto out;
9133 }
9134
9135 priv->roaming_threshold = wrqu->sens.value;
9136 priv->disassociate_threshold = 3*wrqu->sens.value;
9137 out:
9138 mutex_unlock(&priv->mutex);
9139 return err;
9140}
9141
9142static int ipw_wx_get_sens(struct net_device *dev,
9143 struct iw_request_info *info,
9144 union iwreq_data *wrqu, char *extra)
9145{
9146 struct ipw_priv *priv = ieee80211_priv(dev);
9147 mutex_lock(&priv->mutex);
9148 wrqu->sens.fixed = 1;
9149 wrqu->sens.value = priv->roaming_threshold;
9150 mutex_unlock(&priv->mutex);
9151
9152 IPW_DEBUG_WX("GET roaming threshold -> %s %d \n",
9153 wrqu->power.disabled ? "OFF" : "ON", wrqu->power.value);
9154
9155 return 0;
9156}
9157
43f66a6c
JK
9158static int ipw_wx_set_rate(struct net_device *dev,
9159 struct iw_request_info *info,
9160 union iwreq_data *wrqu, char *extra)
bf79451e 9161{
ea2b26e0
JK
9162 /* TODO: We should use semaphores or locks for access to priv */
9163 struct ipw_priv *priv = ieee80211_priv(dev);
9164 u32 target_rate = wrqu->bitrate.value;
9165 u32 fixed, mask;
9166
9167 /* value = -1, fixed = 0 means auto only, so we should use all rates offered by AP */
9168 /* value = X, fixed = 1 means only rate X */
9169 /* value = X, fixed = 0 means all rates lower equal X */
9170
9171 if (target_rate == -1) {
9172 fixed = 0;
9173 mask = IEEE80211_DEFAULT_RATES_MASK;
9174 /* Now we should reassociate */
9175 goto apply;
9176 }
9177
9178 mask = 0;
9179 fixed = wrqu->bitrate.fixed;
9180
9181 if (target_rate == 1000000 || !fixed)
9182 mask |= IEEE80211_CCK_RATE_1MB_MASK;
9183 if (target_rate == 1000000)
9184 goto apply;
9185
9186 if (target_rate == 2000000 || !fixed)
9187 mask |= IEEE80211_CCK_RATE_2MB_MASK;
9188 if (target_rate == 2000000)
9189 goto apply;
9190
9191 if (target_rate == 5500000 || !fixed)
9192 mask |= IEEE80211_CCK_RATE_5MB_MASK;
9193 if (target_rate == 5500000)
9194 goto apply;
9195
9196 if (target_rate == 6000000 || !fixed)
9197 mask |= IEEE80211_OFDM_RATE_6MB_MASK;
9198 if (target_rate == 6000000)
9199 goto apply;
9200
9201 if (target_rate == 9000000 || !fixed)
9202 mask |= IEEE80211_OFDM_RATE_9MB_MASK;
9203 if (target_rate == 9000000)
9204 goto apply;
9205
9206 if (target_rate == 11000000 || !fixed)
9207 mask |= IEEE80211_CCK_RATE_11MB_MASK;
9208 if (target_rate == 11000000)
9209 goto apply;
9210
9211 if (target_rate == 12000000 || !fixed)
9212 mask |= IEEE80211_OFDM_RATE_12MB_MASK;
9213 if (target_rate == 12000000)
9214 goto apply;
9215
9216 if (target_rate == 18000000 || !fixed)
9217 mask |= IEEE80211_OFDM_RATE_18MB_MASK;
9218 if (target_rate == 18000000)
9219 goto apply;
9220
9221 if (target_rate == 24000000 || !fixed)
9222 mask |= IEEE80211_OFDM_RATE_24MB_MASK;
9223 if (target_rate == 24000000)
9224 goto apply;
9225
9226 if (target_rate == 36000000 || !fixed)
9227 mask |= IEEE80211_OFDM_RATE_36MB_MASK;
9228 if (target_rate == 36000000)
9229 goto apply;
9230
9231 if (target_rate == 48000000 || !fixed)
9232 mask |= IEEE80211_OFDM_RATE_48MB_MASK;
9233 if (target_rate == 48000000)
9234 goto apply;
9235
9236 if (target_rate == 54000000 || !fixed)
9237 mask |= IEEE80211_OFDM_RATE_54MB_MASK;
9238 if (target_rate == 54000000)
9239 goto apply;
9240
9241 IPW_DEBUG_WX("invalid rate specified, returning error\n");
9242 return -EINVAL;
9243
9244 apply:
9245 IPW_DEBUG_WX("Setting rate mask to 0x%08X [%s]\n",
9246 mask, fixed ? "fixed" : "sub-rates");
4644151b 9247 mutex_lock(&priv->mutex);
b095c381 9248 if (mask == IEEE80211_DEFAULT_RATES_MASK) {
ea2b26e0 9249 priv->config &= ~CFG_FIXED_RATE;
b095c381
JK
9250 ipw_set_fixed_rate(priv, priv->ieee->mode);
9251 } else
ea2b26e0
JK
9252 priv->config |= CFG_FIXED_RATE;
9253
c848d0af
JK
9254 if (priv->rates_mask == mask) {
9255 IPW_DEBUG_WX("Mask set to current mask.\n");
4644151b 9256 mutex_unlock(&priv->mutex);
c848d0af 9257 return 0;
ea2b26e0
JK
9258 }
9259
c848d0af
JK
9260 priv->rates_mask = mask;
9261
9262 /* Network configuration changed -- force [re]association */
9263 IPW_DEBUG_ASSOC("[re]association triggered due to rates change.\n");
9264 if (!ipw_disassociate(priv))
9265 ipw_associate(priv);
9266
4644151b 9267 mutex_unlock(&priv->mutex);
ea2b26e0 9268 return 0;
43f66a6c
JK
9269}
9270
bf79451e
JG
9271static int ipw_wx_get_rate(struct net_device *dev,
9272 struct iw_request_info *info,
43f66a6c 9273 union iwreq_data *wrqu, char *extra)
bf79451e 9274{
0edd5b44 9275 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9276 mutex_lock(&priv->mutex);
43f66a6c 9277 wrqu->bitrate.value = priv->last_rate;
455936c7 9278 wrqu->bitrate.fixed = (priv->config & CFG_FIXED_RATE) ? 1 : 0;
4644151b 9279 mutex_unlock(&priv->mutex);
43f66a6c
JK
9280 IPW_DEBUG_WX("GET Rate -> %d \n", wrqu->bitrate.value);
9281 return 0;
9282}
9283
bf79451e
JG
9284static int ipw_wx_set_rts(struct net_device *dev,
9285 struct iw_request_info *info,
43f66a6c 9286 union iwreq_data *wrqu, char *extra)
bf79451e 9287{
43f66a6c 9288 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9289 mutex_lock(&priv->mutex);
ea8862dc 9290 if (wrqu->rts.disabled || !wrqu->rts.fixed)
43f66a6c
JK
9291 priv->rts_threshold = DEFAULT_RTS_THRESHOLD;
9292 else {
9293 if (wrqu->rts.value < MIN_RTS_THRESHOLD ||
c848d0af 9294 wrqu->rts.value > MAX_RTS_THRESHOLD) {
4644151b 9295 mutex_unlock(&priv->mutex);
43f66a6c 9296 return -EINVAL;
c848d0af 9297 }
43f66a6c
JK
9298 priv->rts_threshold = wrqu->rts.value;
9299 }
9300
9301 ipw_send_rts_threshold(priv, priv->rts_threshold);
4644151b 9302 mutex_unlock(&priv->mutex);
43f66a6c
JK
9303 IPW_DEBUG_WX("SET RTS Threshold -> %d \n", priv->rts_threshold);
9304 return 0;
9305}
9306
bf79451e
JG
9307static int ipw_wx_get_rts(struct net_device *dev,
9308 struct iw_request_info *info,
43f66a6c 9309 union iwreq_data *wrqu, char *extra)
bf79451e 9310{
43f66a6c 9311 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9312 mutex_lock(&priv->mutex);
43f66a6c
JK
9313 wrqu->rts.value = priv->rts_threshold;
9314 wrqu->rts.fixed = 0; /* no auto select */
0edd5b44 9315 wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD);
4644151b 9316 mutex_unlock(&priv->mutex);
43f66a6c
JK
9317 IPW_DEBUG_WX("GET RTS Threshold -> %d \n", wrqu->rts.value);
9318 return 0;
9319}
9320
bf79451e
JG
9321static int ipw_wx_set_txpow(struct net_device *dev,
9322 struct iw_request_info *info,
43f66a6c 9323 union iwreq_data *wrqu, char *extra)
bf79451e 9324{
43f66a6c 9325 struct ipw_priv *priv = ieee80211_priv(dev);
6de9f7f2 9326 int err = 0;
43f66a6c 9327
4644151b 9328 mutex_lock(&priv->mutex);
c848d0af 9329 if (ipw_radio_kill_sw(priv, wrqu->power.disabled)) {
6de9f7f2
ZY
9330 err = -EINPROGRESS;
9331 goto out;
43f66a6c 9332 }
43f66a6c 9333
b095c381
JK
9334 if (!wrqu->power.fixed)
9335 wrqu->power.value = IPW_TX_POWER_DEFAULT;
9336
c848d0af 9337 if (wrqu->power.flags != IW_TXPOW_DBM) {
6de9f7f2
ZY
9338 err = -EINVAL;
9339 goto out;
c848d0af 9340 }
43f66a6c 9341
b095c381 9342 if ((wrqu->power.value > IPW_TX_POWER_MAX) ||
afbf30a2 9343 (wrqu->power.value < IPW_TX_POWER_MIN)) {
6de9f7f2
ZY
9344 err = -EINVAL;
9345 goto out;
c848d0af 9346 }
43f66a6c 9347
43f66a6c 9348 priv->tx_power = wrqu->power.value;
6de9f7f2
ZY
9349 err = ipw_set_tx_power(priv);
9350 out:
4644151b 9351 mutex_unlock(&priv->mutex);
6de9f7f2 9352 return err;
43f66a6c
JK
9353}
9354
bf79451e
JG
9355static int ipw_wx_get_txpow(struct net_device *dev,
9356 struct iw_request_info *info,
43f66a6c 9357 union iwreq_data *wrqu, char *extra)
bf79451e 9358{
43f66a6c 9359 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9360 mutex_lock(&priv->mutex);
43f66a6c
JK
9361 wrqu->power.value = priv->tx_power;
9362 wrqu->power.fixed = 1;
9363 wrqu->power.flags = IW_TXPOW_DBM;
9364 wrqu->power.disabled = (priv->status & STATUS_RF_KILL_MASK) ? 1 : 0;
4644151b 9365 mutex_unlock(&priv->mutex);
43f66a6c 9366
bf79451e 9367 IPW_DEBUG_WX("GET TX Power -> %s %d \n",
22501c8e 9368 wrqu->power.disabled ? "OFF" : "ON", wrqu->power.value);
43f66a6c
JK
9369
9370 return 0;
9371}
9372
bf79451e 9373static int ipw_wx_set_frag(struct net_device *dev,
0edd5b44
JG
9374 struct iw_request_info *info,
9375 union iwreq_data *wrqu, char *extra)
43f66a6c
JK
9376{
9377 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9378 mutex_lock(&priv->mutex);
ea8862dc 9379 if (wrqu->frag.disabled || !wrqu->frag.fixed)
43f66a6c
JK
9380 priv->ieee->fts = DEFAULT_FTS;
9381 else {
9382 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
b095c381 9383 wrqu->frag.value > MAX_FRAG_THRESHOLD) {
4644151b 9384 mutex_unlock(&priv->mutex);
43f66a6c 9385 return -EINVAL;
b095c381 9386 }
bf79451e 9387
43f66a6c
JK
9388 priv->ieee->fts = wrqu->frag.value & ~0x1;
9389 }
9390
9391 ipw_send_frag_threshold(priv, wrqu->frag.value);
4644151b 9392 mutex_unlock(&priv->mutex);
43f66a6c
JK
9393 IPW_DEBUG_WX("SET Frag Threshold -> %d \n", wrqu->frag.value);
9394 return 0;
9395}
9396
bf79451e 9397static int ipw_wx_get_frag(struct net_device *dev,
0edd5b44
JG
9398 struct iw_request_info *info,
9399 union iwreq_data *wrqu, char *extra)
43f66a6c
JK
9400{
9401 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9402 mutex_lock(&priv->mutex);
43f66a6c
JK
9403 wrqu->frag.value = priv->ieee->fts;
9404 wrqu->frag.fixed = 0; /* no auto select */
0edd5b44 9405 wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FTS);
4644151b 9406 mutex_unlock(&priv->mutex);
43f66a6c
JK
9407 IPW_DEBUG_WX("GET Frag Threshold -> %d \n", wrqu->frag.value);
9408
9409 return 0;
9410}
9411
bf79451e
JG
9412static int ipw_wx_set_retry(struct net_device *dev,
9413 struct iw_request_info *info,
43f66a6c 9414 union iwreq_data *wrqu, char *extra)
bf79451e 9415{
afbf30a2
JK
9416 struct ipw_priv *priv = ieee80211_priv(dev);
9417
9418 if (wrqu->retry.flags & IW_RETRY_LIFETIME || wrqu->retry.disabled)
9419 return -EINVAL;
9420
9421 if (!(wrqu->retry.flags & IW_RETRY_LIMIT))
9422 return 0;
9423
d5f7ac20 9424 if (wrqu->retry.value < 0 || wrqu->retry.value >= 255)
afbf30a2
JK
9425 return -EINVAL;
9426
4644151b 9427 mutex_lock(&priv->mutex);
919ee6dd 9428 if (wrqu->retry.flags & IW_RETRY_SHORT)
afbf30a2 9429 priv->short_retry_limit = (u8) wrqu->retry.value;
919ee6dd 9430 else if (wrqu->retry.flags & IW_RETRY_LONG)
afbf30a2
JK
9431 priv->long_retry_limit = (u8) wrqu->retry.value;
9432 else {
9433 priv->short_retry_limit = (u8) wrqu->retry.value;
9434 priv->long_retry_limit = (u8) wrqu->retry.value;
9435 }
9436
9437 ipw_send_retry_limit(priv, priv->short_retry_limit,
9438 priv->long_retry_limit);
4644151b 9439 mutex_unlock(&priv->mutex);
afbf30a2
JK
9440 IPW_DEBUG_WX("SET retry limit -> short:%d long:%d\n",
9441 priv->short_retry_limit, priv->long_retry_limit);
9442 return 0;
43f66a6c
JK
9443}
9444
bf79451e
JG
9445static int ipw_wx_get_retry(struct net_device *dev,
9446 struct iw_request_info *info,
43f66a6c 9447 union iwreq_data *wrqu, char *extra)
bf79451e 9448{
afbf30a2
JK
9449 struct ipw_priv *priv = ieee80211_priv(dev);
9450
4644151b 9451 mutex_lock(&priv->mutex);
afbf30a2
JK
9452 wrqu->retry.disabled = 0;
9453
9454 if ((wrqu->retry.flags & IW_RETRY_TYPE) == IW_RETRY_LIFETIME) {
4644151b 9455 mutex_unlock(&priv->mutex);
afbf30a2
JK
9456 return -EINVAL;
9457 }
9458
919ee6dd
JT
9459 if (wrqu->retry.flags & IW_RETRY_LONG) {
9460 wrqu->retry.flags = IW_RETRY_LIMIT | IW_RETRY_LONG;
afbf30a2 9461 wrqu->retry.value = priv->long_retry_limit;
919ee6dd
JT
9462 } else if (wrqu->retry.flags & IW_RETRY_SHORT) {
9463 wrqu->retry.flags = IW_RETRY_LIMIT | IW_RETRY_SHORT;
afbf30a2
JK
9464 wrqu->retry.value = priv->short_retry_limit;
9465 } else {
9466 wrqu->retry.flags = IW_RETRY_LIMIT;
9467 wrqu->retry.value = priv->short_retry_limit;
9468 }
4644151b 9469 mutex_unlock(&priv->mutex);
afbf30a2
JK
9470
9471 IPW_DEBUG_WX("GET retry -> %d \n", wrqu->retry.value);
9472
9473 return 0;
9474}
9475
bf79451e
JG
9476static int ipw_wx_set_scan(struct net_device *dev,
9477 struct iw_request_info *info,
43f66a6c
JK
9478 union iwreq_data *wrqu, char *extra)
9479{
9480 struct ipw_priv *priv = ieee80211_priv(dev);
094c4d2d 9481 struct iw_scan_req *req = (struct iw_scan_req *)extra;
ea177305 9482 struct delayed_work *work = NULL;
094c4d2d 9483
0b531676 9484 mutex_lock(&priv->mutex);
ea177305 9485
0b531676 9486 priv->user_requested_scan = 1;
0b531676 9487
094c4d2d 9488 if (wrqu->data.length == sizeof(struct iw_scan_req)) {
afbf30a2 9489 if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
ea177305
DW
9490 int len = min((int)req->essid_len,
9491 (int)sizeof(priv->direct_scan_ssid));
9492 memcpy(priv->direct_scan_ssid, req->essid, len);
9493 priv->direct_scan_ssid_len = len;
9494 work = &priv->request_direct_scan;
9495 } else if (req->scan_type == IW_SCAN_TYPE_PASSIVE) {
9496 work = &priv->request_passive_scan;
094c4d2d 9497 }
ea177305
DW
9498 } else {
9499 /* Normal active broadcast scan */
9500 work = &priv->request_scan;
afbf30a2 9501 }
8935f39e 9502
ea177305
DW
9503 mutex_unlock(&priv->mutex);
9504
43f66a6c 9505 IPW_DEBUG_WX("Start scan\n");
b095c381 9506
ea177305 9507 queue_delayed_work(priv->workqueue, work, 0);
b095c381 9508
43f66a6c
JK
9509 return 0;
9510}
9511
bf79451e
JG
9512static int ipw_wx_get_scan(struct net_device *dev,
9513 struct iw_request_info *info,
43f66a6c 9514 union iwreq_data *wrqu, char *extra)
bf79451e 9515{
43f66a6c
JK
9516 struct ipw_priv *priv = ieee80211_priv(dev);
9517 return ieee80211_wx_get_scan(priv->ieee, info, wrqu, extra);
9518}
9519
bf79451e 9520static int ipw_wx_set_encode(struct net_device *dev,
0edd5b44
JG
9521 struct iw_request_info *info,
9522 union iwreq_data *wrqu, char *key)
43f66a6c
JK
9523{
9524 struct ipw_priv *priv = ieee80211_priv(dev);
afbf30a2 9525 int ret;
caeff81b 9526 u32 cap = priv->capability;
afbf30a2 9527
4644151b 9528 mutex_lock(&priv->mutex);
afbf30a2 9529 ret = ieee80211_wx_set_encode(priv->ieee, info, wrqu, key);
afbf30a2 9530
caeff81b
HL
9531 /* In IBSS mode, we need to notify the firmware to update
9532 * the beacon info after we changed the capability. */
9533 if (cap != priv->capability &&
9534 priv->ieee->iw_mode == IW_MODE_ADHOC &&
9535 priv->status & STATUS_ASSOCIATED)
9536 ipw_disassociate(priv);
9537
4644151b 9538 mutex_unlock(&priv->mutex);
afbf30a2 9539 return ret;
43f66a6c
JK
9540}
9541
bf79451e 9542static int ipw_wx_get_encode(struct net_device *dev,
0edd5b44
JG
9543 struct iw_request_info *info,
9544 union iwreq_data *wrqu, char *key)
43f66a6c
JK
9545{
9546 struct ipw_priv *priv = ieee80211_priv(dev);
9547 return ieee80211_wx_get_encode(priv->ieee, info, wrqu, key);
9548}
9549
bf79451e 9550static int ipw_wx_set_power(struct net_device *dev,
0edd5b44
JG
9551 struct iw_request_info *info,
9552 union iwreq_data *wrqu, char *extra)
43f66a6c
JK
9553{
9554 struct ipw_priv *priv = ieee80211_priv(dev);
9555 int err;
4644151b 9556 mutex_lock(&priv->mutex);
43f66a6c
JK
9557 if (wrqu->power.disabled) {
9558 priv->power_mode = IPW_POWER_LEVEL(priv->power_mode);
9559 err = ipw_send_power_mode(priv, IPW_POWER_MODE_CAM);
9560 if (err) {
9561 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9562 mutex_unlock(&priv->mutex);
43f66a6c
JK
9563 return err;
9564 }
43f66a6c 9565 IPW_DEBUG_WX("SET Power Management Mode -> off\n");
4644151b 9566 mutex_unlock(&priv->mutex);
43f66a6c 9567 return 0;
bf79451e 9568 }
43f66a6c
JK
9569
9570 switch (wrqu->power.flags & IW_POWER_MODE) {
0edd5b44
JG
9571 case IW_POWER_ON: /* If not specified */
9572 case IW_POWER_MODE: /* If set all mask */
c03983ac 9573 case IW_POWER_ALL_R: /* If explicitly state all */
43f66a6c 9574 break;
0edd5b44 9575 default: /* Otherwise we don't support it */
43f66a6c
JK
9576 IPW_DEBUG_WX("SET PM Mode: %X not supported.\n",
9577 wrqu->power.flags);
4644151b 9578 mutex_unlock(&priv->mutex);
bf79451e 9579 return -EOPNOTSUPP;
43f66a6c 9580 }
bf79451e 9581
43f66a6c
JK
9582 /* If the user hasn't specified a power management mode yet, default
9583 * to BATTERY */
0edd5b44 9584 if (IPW_POWER_LEVEL(priv->power_mode) == IPW_POWER_AC)
43f66a6c 9585 priv->power_mode = IPW_POWER_ENABLED | IPW_POWER_BATTERY;
bf79451e 9586 else
43f66a6c 9587 priv->power_mode = IPW_POWER_ENABLED | priv->power_mode;
4e157f08 9588
43f66a6c
JK
9589 err = ipw_send_power_mode(priv, IPW_POWER_LEVEL(priv->power_mode));
9590 if (err) {
9591 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9592 mutex_unlock(&priv->mutex);
43f66a6c
JK
9593 return err;
9594 }
9595
0edd5b44 9596 IPW_DEBUG_WX("SET Power Management Mode -> 0x%02X\n", priv->power_mode);
4644151b 9597 mutex_unlock(&priv->mutex);
43f66a6c
JK
9598 return 0;
9599}
9600
bf79451e 9601static int ipw_wx_get_power(struct net_device *dev,
0edd5b44
JG
9602 struct iw_request_info *info,
9603 union iwreq_data *wrqu, char *extra)
43f66a6c
JK
9604{
9605 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9606 mutex_lock(&priv->mutex);
a613bffd 9607 if (!(priv->power_mode & IPW_POWER_ENABLED))
43f66a6c 9608 wrqu->power.disabled = 1;
a613bffd 9609 else
43f66a6c 9610 wrqu->power.disabled = 0;
43f66a6c 9611
4644151b 9612 mutex_unlock(&priv->mutex);
43f66a6c 9613 IPW_DEBUG_WX("GET Power Management Mode -> %02X\n", priv->power_mode);
bf79451e 9614
43f66a6c
JK
9615 return 0;
9616}
9617
bf79451e 9618static int ipw_wx_set_powermode(struct net_device *dev,
0edd5b44
JG
9619 struct iw_request_info *info,
9620 union iwreq_data *wrqu, char *extra)
43f66a6c
JK
9621{
9622 struct ipw_priv *priv = ieee80211_priv(dev);
9623 int mode = *(int *)extra;
9624 int err;
4e157f08 9625
4644151b 9626 mutex_lock(&priv->mutex);
4e157f08 9627 if ((mode < 1) || (mode > IPW_POWER_LIMIT))
43f66a6c 9628 mode = IPW_POWER_AC;
bf79451e 9629
4e157f08 9630 if (IPW_POWER_LEVEL(priv->power_mode) != mode) {
43f66a6c 9631 err = ipw_send_power_mode(priv, mode);
43f66a6c
JK
9632 if (err) {
9633 IPW_DEBUG_WX("failed setting power mode.\n");
4644151b 9634 mutex_unlock(&priv->mutex);
43f66a6c
JK
9635 return err;
9636 }
4e157f08 9637 priv->power_mode = IPW_POWER_ENABLED | mode;
43f66a6c 9638 }
4644151b 9639 mutex_unlock(&priv->mutex);
43f66a6c
JK
9640 return 0;
9641}
9642
9643#define MAX_WX_STRING 80
bf79451e 9644static int ipw_wx_get_powermode(struct net_device *dev,
0edd5b44
JG
9645 struct iw_request_info *info,
9646 union iwreq_data *wrqu, char *extra)
43f66a6c
JK
9647{
9648 struct ipw_priv *priv = ieee80211_priv(dev);
9649 int level = IPW_POWER_LEVEL(priv->power_mode);
9650 char *p = extra;
9651
9652 p += snprintf(p, MAX_WX_STRING, "Power save level: %d ", level);
9653
9654 switch (level) {
9655 case IPW_POWER_AC:
9656 p += snprintf(p, MAX_WX_STRING - (p - extra), "(AC)");
9657 break;
9658 case IPW_POWER_BATTERY:
9659 p += snprintf(p, MAX_WX_STRING - (p - extra), "(BATTERY)");
9660 break;
9661 default:
9662 p += snprintf(p, MAX_WX_STRING - (p - extra),
bf79451e 9663 "(Timeout %dms, Period %dms)",
43f66a6c
JK
9664 timeout_duration[level - 1] / 1000,
9665 period_duration[level - 1] / 1000);
9666 }
9667
9668 if (!(priv->power_mode & IPW_POWER_ENABLED))
0edd5b44 9669 p += snprintf(p, MAX_WX_STRING - (p - extra), " OFF");
43f66a6c
JK
9670
9671 wrqu->data.length = p - extra + 1;
9672
9673 return 0;
9674}
9675
9676static int ipw_wx_set_wireless_mode(struct net_device *dev,
0edd5b44
JG
9677 struct iw_request_info *info,
9678 union iwreq_data *wrqu, char *extra)
43f66a6c 9679{
0edd5b44 9680 struct ipw_priv *priv = ieee80211_priv(dev);
43f66a6c
JK
9681 int mode = *(int *)extra;
9682 u8 band = 0, modulation = 0;
9683
9684 if (mode == 0 || mode & ~IEEE_MODE_MASK) {
0edd5b44 9685 IPW_WARNING("Attempt to set invalid wireless mode: %d\n", mode);
43f66a6c
JK
9686 return -EINVAL;
9687 }
4644151b 9688 mutex_lock(&priv->mutex);
43f66a6c 9689 if (priv->adapter == IPW_2915ABG) {
a33a1982 9690 priv->ieee->abg_true = 1;
43f66a6c
JK
9691 if (mode & IEEE_A) {
9692 band |= IEEE80211_52GHZ_BAND;
9693 modulation |= IEEE80211_OFDM_MODULATION;
9694 } else
a33a1982 9695 priv->ieee->abg_true = 0;
43f66a6c
JK
9696 } else {
9697 if (mode & IEEE_A) {
9698 IPW_WARNING("Attempt to set 2200BG into "
9699 "802.11a mode\n");
4644151b 9700 mutex_unlock(&priv->mutex);
43f66a6c
JK
9701 return -EINVAL;
9702 }
9703
a33a1982 9704 priv->ieee->abg_true = 0;
43f66a6c
JK
9705 }
9706
9707 if (mode & IEEE_B) {
9708 band |= IEEE80211_24GHZ_BAND;
9709 modulation |= IEEE80211_CCK_MODULATION;
9710 } else
a33a1982 9711 priv->ieee->abg_true = 0;
bf79451e 9712
43f66a6c
JK
9713 if (mode & IEEE_G) {
9714 band |= IEEE80211_24GHZ_BAND;
9715 modulation |= IEEE80211_OFDM_MODULATION;
9716 } else
a33a1982 9717 priv->ieee->abg_true = 0;
43f66a6c
JK
9718
9719 priv->ieee->mode = mode;
9720 priv->ieee->freq_band = band;
9721 priv->ieee->modulation = modulation;
0edd5b44 9722 init_supported_rates(priv, &priv->rates);
43f66a6c 9723
c848d0af
JK
9724 /* Network configuration changed -- force [re]association */
9725 IPW_DEBUG_ASSOC("[re]association triggered due to mode change.\n");
9726 if (!ipw_disassociate(priv)) {
43f66a6c 9727 ipw_send_supported_rates(priv, &priv->rates);
c848d0af
JK
9728 ipw_associate(priv);
9729 }
43f66a6c 9730
a613bffd
JK
9731 /* Update the band LEDs */
9732 ipw_led_band_on(priv);
43f66a6c 9733
bf79451e 9734 IPW_DEBUG_WX("PRIV SET MODE: %c%c%c\n",
43f66a6c 9735 mode & IEEE_A ? 'a' : '.',
0edd5b44 9736 mode & IEEE_B ? 'b' : '.', mode & IEEE_G ? 'g' : '.');
4644151b 9737 mutex_unlock(&priv->mutex);
43f66a6c
JK
9738 return 0;
9739}
9740
9741static int ipw_wx_get_wireless_mode(struct net_device *dev,
0edd5b44
JG
9742 struct iw_request_info *info,
9743 union iwreq_data *wrqu, char *extra)
43f66a6c 9744{
0edd5b44 9745 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9746 mutex_lock(&priv->mutex);
ea2b26e0
JK
9747 switch (priv->ieee->mode) {
9748 case IEEE_A:
43f66a6c
JK
9749 strncpy(extra, "802.11a (1)", MAX_WX_STRING);
9750 break;
ea2b26e0
JK
9751 case IEEE_B:
9752 strncpy(extra, "802.11b (2)", MAX_WX_STRING);
9753 break;
9754 case IEEE_A | IEEE_B:
9755 strncpy(extra, "802.11ab (3)", MAX_WX_STRING);
9756 break;
9757 case IEEE_G:
9758 strncpy(extra, "802.11g (4)", MAX_WX_STRING);
9759 break;
9760 case IEEE_A | IEEE_G:
9761 strncpy(extra, "802.11ag (5)", MAX_WX_STRING);
9762 break;
9763 case IEEE_B | IEEE_G:
9764 strncpy(extra, "802.11bg (6)", MAX_WX_STRING);
9765 break;
9766 case IEEE_A | IEEE_B | IEEE_G:
9767 strncpy(extra, "802.11abg (7)", MAX_WX_STRING);
9768 break;
9769 default:
9770 strncpy(extra, "unknown", MAX_WX_STRING);
43f66a6c 9771 break;
bf79451e
JG
9772 }
9773
43f66a6c
JK
9774 IPW_DEBUG_WX("PRIV GET MODE: %s\n", extra);
9775
0edd5b44 9776 wrqu->data.length = strlen(extra) + 1;
4644151b 9777 mutex_unlock(&priv->mutex);
b095c381
JK
9778
9779 return 0;
9780}
9781
9782static int ipw_wx_set_preamble(struct net_device *dev,
9783 struct iw_request_info *info,
9784 union iwreq_data *wrqu, char *extra)
9785{
9786 struct ipw_priv *priv = ieee80211_priv(dev);
9787 int mode = *(int *)extra;
4644151b 9788 mutex_lock(&priv->mutex);
b095c381
JK
9789 /* Switching from SHORT -> LONG requires a disassociation */
9790 if (mode == 1) {
9791 if (!(priv->config & CFG_PREAMBLE_LONG)) {
9792 priv->config |= CFG_PREAMBLE_LONG;
9793
9794 /* Network configuration changed -- force [re]association */
9795 IPW_DEBUG_ASSOC
9796 ("[re]association triggered due to preamble change.\n");
9797 if (!ipw_disassociate(priv))
9798 ipw_associate(priv);
9799 }
9800 goto done;
9801 }
43f66a6c 9802
b095c381
JK
9803 if (mode == 0) {
9804 priv->config &= ~CFG_PREAMBLE_LONG;
9805 goto done;
9806 }
4644151b 9807 mutex_unlock(&priv->mutex);
b095c381
JK
9808 return -EINVAL;
9809
9810 done:
4644151b 9811 mutex_unlock(&priv->mutex);
b095c381
JK
9812 return 0;
9813}
9814
9815static int ipw_wx_get_preamble(struct net_device *dev,
9816 struct iw_request_info *info,
9817 union iwreq_data *wrqu, char *extra)
9818{
9819 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 9820 mutex_lock(&priv->mutex);
b095c381
JK
9821 if (priv->config & CFG_PREAMBLE_LONG)
9822 snprintf(wrqu->name, IFNAMSIZ, "long (1)");
9823 else
9824 snprintf(wrqu->name, IFNAMSIZ, "auto (0)");
4644151b 9825 mutex_unlock(&priv->mutex);
0edd5b44 9826 return 0;
43f66a6c
JK
9827}
9828
b095c381
JK
9829#ifdef CONFIG_IPW2200_MONITOR
9830static int ipw_wx_set_monitor(struct net_device *dev,
bf79451e 9831 struct iw_request_info *info,
43f66a6c 9832 union iwreq_data *wrqu, char *extra)
bf79451e 9833{
43f66a6c
JK
9834 struct ipw_priv *priv = ieee80211_priv(dev);
9835 int *parms = (int *)extra;
9836 int enable = (parms[0] > 0);
4644151b 9837 mutex_lock(&priv->mutex);
b095c381 9838 IPW_DEBUG_WX("SET MONITOR: %d %d\n", enable, parms[1]);
43f66a6c
JK
9839 if (enable) {
9840 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
459d4087 9841#ifdef CONFIG_IPW2200_RADIOTAP
24a47dbd
MK
9842 priv->net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
9843#else
43f66a6c 9844 priv->net_dev->type = ARPHRD_IEEE80211;
24a47dbd 9845#endif
b095c381 9846 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c 9847 }
bf79451e 9848
43f66a6c
JK
9849 ipw_set_channel(priv, parms[1]);
9850 } else {
b095c381 9851 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
4644151b 9852 mutex_unlock(&priv->mutex);
43f66a6c 9853 return 0;
b095c381 9854 }
43f66a6c 9855 priv->net_dev->type = ARPHRD_ETHER;
b095c381 9856 queue_work(priv->workqueue, &priv->adapter_restart);
43f66a6c 9857 }
4644151b 9858 mutex_unlock(&priv->mutex);
43f66a6c
JK
9859 return 0;
9860}
9861
67fd6b45 9862#endif /* CONFIG_IPW2200_MONITOR */
b095c381 9863
bf79451e
JG
9864static int ipw_wx_reset(struct net_device *dev,
9865 struct iw_request_info *info,
43f66a6c 9866 union iwreq_data *wrqu, char *extra)
bf79451e 9867{
43f66a6c
JK
9868 struct ipw_priv *priv = ieee80211_priv(dev);
9869 IPW_DEBUG_WX("RESET\n");
b095c381
JK
9870 queue_work(priv->workqueue, &priv->adapter_restart);
9871 return 0;
9872}
9873
b095c381
JK
9874static int ipw_wx_sw_reset(struct net_device *dev,
9875 struct iw_request_info *info,
9876 union iwreq_data *wrqu, char *extra)
ea2b26e0
JK
9877{
9878 struct ipw_priv *priv = ieee80211_priv(dev);
b095c381
JK
9879 union iwreq_data wrqu_sec = {
9880 .encoding = {
9881 .flags = IW_ENCODE_DISABLED,
9882 },
9883 };
afbf30a2 9884 int ret;
c848d0af 9885
b095c381 9886 IPW_DEBUG_WX("SW_RESET\n");
ea2b26e0 9887
4644151b 9888 mutex_lock(&priv->mutex);
ea2b26e0 9889
d6d5b5c1 9890 ret = ipw_sw_reset(priv, 2);
afbf30a2
JK
9891 if (!ret) {
9892 free_firmware();
9893 ipw_adapter_restart(priv);
9894 }
ea2b26e0 9895
b095c381
JK
9896 /* The SW reset bit might have been toggled on by the 'disable'
9897 * module parameter, so take appropriate action */
9898 ipw_radio_kill_sw(priv, priv->status & STATUS_RF_KILL_SW);
ea2b26e0 9899
4644151b 9900 mutex_unlock(&priv->mutex);
b095c381 9901 ieee80211_wx_set_encode(priv->ieee, info, &wrqu_sec, NULL);
4644151b 9902 mutex_lock(&priv->mutex);
bf79451e 9903
b095c381
JK
9904 if (!(priv->status & STATUS_RF_KILL_MASK)) {
9905 /* Configuration likely changed -- force [re]association */
9906 IPW_DEBUG_ASSOC("[re]association triggered due to sw "
9907 "reset.\n");
9908 if (!ipw_disassociate(priv))
9909 ipw_associate(priv);
43f66a6c 9910 }
b095c381 9911
4644151b 9912 mutex_unlock(&priv->mutex);
43f66a6c 9913
43f66a6c
JK
9914 return 0;
9915}
43f66a6c
JK
9916
9917/* Rebase the WE IOCTLs to zero for the handler array */
9918#define IW_IOCTL(x) [(x)-SIOCSIWCOMMIT]
0edd5b44 9919static iw_handler ipw_wx_handlers[] = {
ea2b26e0
JK
9920 IW_IOCTL(SIOCGIWNAME) = ipw_wx_get_name,
9921 IW_IOCTL(SIOCSIWFREQ) = ipw_wx_set_freq,
9922 IW_IOCTL(SIOCGIWFREQ) = ipw_wx_get_freq,
9923 IW_IOCTL(SIOCSIWMODE) = ipw_wx_set_mode,
9924 IW_IOCTL(SIOCGIWMODE) = ipw_wx_get_mode,
651be26f
OH
9925 IW_IOCTL(SIOCSIWSENS) = ipw_wx_set_sens,
9926 IW_IOCTL(SIOCGIWSENS) = ipw_wx_get_sens,
ea2b26e0
JK
9927 IW_IOCTL(SIOCGIWRANGE) = ipw_wx_get_range,
9928 IW_IOCTL(SIOCSIWAP) = ipw_wx_set_wap,
9929 IW_IOCTL(SIOCGIWAP) = ipw_wx_get_wap,
9930 IW_IOCTL(SIOCSIWSCAN) = ipw_wx_set_scan,
9931 IW_IOCTL(SIOCGIWSCAN) = ipw_wx_get_scan,
9932 IW_IOCTL(SIOCSIWESSID) = ipw_wx_set_essid,
9933 IW_IOCTL(SIOCGIWESSID) = ipw_wx_get_essid,
9934 IW_IOCTL(SIOCSIWNICKN) = ipw_wx_set_nick,
9935 IW_IOCTL(SIOCGIWNICKN) = ipw_wx_get_nick,
9936 IW_IOCTL(SIOCSIWRATE) = ipw_wx_set_rate,
9937 IW_IOCTL(SIOCGIWRATE) = ipw_wx_get_rate,
9938 IW_IOCTL(SIOCSIWRTS) = ipw_wx_set_rts,
9939 IW_IOCTL(SIOCGIWRTS) = ipw_wx_get_rts,
9940 IW_IOCTL(SIOCSIWFRAG) = ipw_wx_set_frag,
9941 IW_IOCTL(SIOCGIWFRAG) = ipw_wx_get_frag,
9942 IW_IOCTL(SIOCSIWTXPOW) = ipw_wx_set_txpow,
9943 IW_IOCTL(SIOCGIWTXPOW) = ipw_wx_get_txpow,
9944 IW_IOCTL(SIOCSIWRETRY) = ipw_wx_set_retry,
9945 IW_IOCTL(SIOCGIWRETRY) = ipw_wx_get_retry,
9946 IW_IOCTL(SIOCSIWENCODE) = ipw_wx_set_encode,
9947 IW_IOCTL(SIOCGIWENCODE) = ipw_wx_get_encode,
9948 IW_IOCTL(SIOCSIWPOWER) = ipw_wx_set_power,
9949 IW_IOCTL(SIOCGIWPOWER) = ipw_wx_get_power,
a613bffd
JK
9950 IW_IOCTL(SIOCSIWSPY) = iw_handler_set_spy,
9951 IW_IOCTL(SIOCGIWSPY) = iw_handler_get_spy,
9952 IW_IOCTL(SIOCSIWTHRSPY) = iw_handler_set_thrspy,
9953 IW_IOCTL(SIOCGIWTHRSPY) = iw_handler_get_thrspy,
afbf30a2
JK
9954 IW_IOCTL(SIOCSIWGENIE) = ipw_wx_set_genie,
9955 IW_IOCTL(SIOCGIWGENIE) = ipw_wx_get_genie,
9956 IW_IOCTL(SIOCSIWMLME) = ipw_wx_set_mlme,
9957 IW_IOCTL(SIOCSIWAUTH) = ipw_wx_set_auth,
9958 IW_IOCTL(SIOCGIWAUTH) = ipw_wx_get_auth,
9959 IW_IOCTL(SIOCSIWENCODEEXT) = ipw_wx_set_encodeext,
9960 IW_IOCTL(SIOCGIWENCODEEXT) = ipw_wx_get_encodeext,
43f66a6c
JK
9961};
9962
b095c381
JK
9963enum {
9964 IPW_PRIV_SET_POWER = SIOCIWFIRSTPRIV,
9965 IPW_PRIV_GET_POWER,
9966 IPW_PRIV_SET_MODE,
9967 IPW_PRIV_GET_MODE,
9968 IPW_PRIV_SET_PREAMBLE,
9969 IPW_PRIV_GET_PREAMBLE,
9970 IPW_PRIV_RESET,
9971 IPW_PRIV_SW_RESET,
9972#ifdef CONFIG_IPW2200_MONITOR
9973 IPW_PRIV_SET_MONITOR,
9974#endif
9975};
43f66a6c 9976
bf79451e 9977static struct iw_priv_args ipw_priv_args[] = {
43f66a6c 9978 {
0edd5b44
JG
9979 .cmd = IPW_PRIV_SET_POWER,
9980 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9981 .name = "set_power"},
43f66a6c 9982 {
0edd5b44
JG
9983 .cmd = IPW_PRIV_GET_POWER,
9984 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | MAX_WX_STRING,
9985 .name = "get_power"},
43f66a6c 9986 {
0edd5b44
JG
9987 .cmd = IPW_PRIV_SET_MODE,
9988 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9989 .name = "set_mode"},
43f66a6c 9990 {
0edd5b44
JG
9991 .cmd = IPW_PRIV_GET_MODE,
9992 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | MAX_WX_STRING,
9993 .name = "get_mode"},
43f66a6c 9994 {
ea2b26e0
JK
9995 .cmd = IPW_PRIV_SET_PREAMBLE,
9996 .set_args = IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1,
9997 .name = "set_preamble"},
9998 {
9999 .cmd = IPW_PRIV_GET_PREAMBLE,
10000 .get_args = IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ,
10001 .name = "get_preamble"},
43f66a6c 10002 {
0edd5b44
JG
10003 IPW_PRIV_RESET,
10004 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 0, 0, "reset"},
b095c381
JK
10005 {
10006 IPW_PRIV_SW_RESET,
10007 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 0, 0, "sw_reset"},
10008#ifdef CONFIG_IPW2200_MONITOR
10009 {
10010 IPW_PRIV_SET_MONITOR,
10011 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "monitor"},
10012#endif /* CONFIG_IPW2200_MONITOR */
43f66a6c
JK
10013};
10014
10015static iw_handler ipw_priv_handler[] = {
10016 ipw_wx_set_powermode,
10017 ipw_wx_get_powermode,
10018 ipw_wx_set_wireless_mode,
10019 ipw_wx_get_wireless_mode,
ea2b26e0
JK
10020 ipw_wx_set_preamble,
10021 ipw_wx_get_preamble,
bf79451e 10022 ipw_wx_reset,
b095c381
JK
10023 ipw_wx_sw_reset,
10024#ifdef CONFIG_IPW2200_MONITOR
10025 ipw_wx_set_monitor,
43f66a6c
JK
10026#endif
10027};
10028
0edd5b44 10029static struct iw_handler_def ipw_wx_handler_def = {
ea2b26e0
JK
10030 .standard = ipw_wx_handlers,
10031 .num_standard = ARRAY_SIZE(ipw_wx_handlers),
10032 .num_private = ARRAY_SIZE(ipw_priv_handler),
10033 .num_private_args = ARRAY_SIZE(ipw_priv_args),
10034 .private = ipw_priv_handler,
10035 .private_args = ipw_priv_args,
97a78ca9 10036 .get_wireless_stats = ipw_get_wireless_stats,
43f66a6c
JK
10037};
10038
43f66a6c
JK
10039/*
10040 * Get wireless statistics.
10041 * Called by /proc/net/wireless
10042 * Also called by SIOCGIWSTATS
10043 */
0edd5b44 10044static struct iw_statistics *ipw_get_wireless_stats(struct net_device *dev)
43f66a6c
JK
10045{
10046 struct ipw_priv *priv = ieee80211_priv(dev);
10047 struct iw_statistics *wstats;
bf79451e 10048
43f66a6c
JK
10049 wstats = &priv->wstats;
10050
ea2b26e0 10051 /* if hw is disabled, then ipw_get_ordinal() can't be called.
afbf30a2 10052 * netdev->get_wireless_stats seems to be called before fw is
43f66a6c
JK
10053 * initialized. STATUS_ASSOCIATED will only be set if the hw is up
10054 * and associated; if not associcated, the values are all meaningless
10055 * anyway, so set them all to NULL and INVALID */
10056 if (!(priv->status & STATUS_ASSOCIATED)) {
10057 wstats->miss.beacon = 0;
10058 wstats->discard.retries = 0;
10059 wstats->qual.qual = 0;
10060 wstats->qual.level = 0;
10061 wstats->qual.noise = 0;
10062 wstats->qual.updated = 7;
10063 wstats->qual.updated |= IW_QUAL_NOISE_INVALID |
0edd5b44 10064 IW_QUAL_QUAL_INVALID | IW_QUAL_LEVEL_INVALID;
43f66a6c 10065 return wstats;
bf79451e 10066 }
43f66a6c
JK
10067
10068 wstats->qual.qual = priv->quality;
00d21de5
ZY
10069 wstats->qual.level = priv->exp_avg_rssi;
10070 wstats->qual.noise = priv->exp_avg_noise;
43f66a6c 10071 wstats->qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED |
b191608a 10072 IW_QUAL_NOISE_UPDATED | IW_QUAL_DBM;
43f66a6c
JK
10073
10074 wstats->miss.beacon = average_value(&priv->average_missed_beacons);
10075 wstats->discard.retries = priv->last_tx_failures;
10076 wstats->discard.code = priv->ieee->ieee_stats.rx_discards_undecryptable;
bf79451e 10077
43f66a6c
JK
10078/* if (ipw_get_ordinal(priv, IPW_ORD_STAT_TX_RETRY, &tx_retry, &len))
10079 goto fail_get_ordinal;
10080 wstats->discard.retries += tx_retry; */
bf79451e 10081
43f66a6c
JK
10082 return wstats;
10083}
10084
43f66a6c
JK
10085/* net device stuff */
10086
858119e1 10087static void init_sys_config(struct ipw_sys_config *sys_config)
43f66a6c 10088{
0edd5b44 10089 memset(sys_config, 0, sizeof(struct ipw_sys_config));
810dabd4 10090 sys_config->bt_coexistence = 0;
43f66a6c
JK
10091 sys_config->answer_broadcast_ssid_probe = 0;
10092 sys_config->accept_all_data_frames = 0;
10093 sys_config->accept_non_directed_frames = 1;
10094 sys_config->exclude_unicast_unencrypted = 0;
10095 sys_config->disable_unicast_decryption = 1;
10096 sys_config->exclude_multicast_unencrypted = 0;
10097 sys_config->disable_multicast_decryption = 1;
d2b83e12
ZY
10098 if (antenna < CFG_SYS_ANTENNA_BOTH || antenna > CFG_SYS_ANTENNA_B)
10099 antenna = CFG_SYS_ANTENNA_BOTH;
10100 sys_config->antenna_diversity = antenna;
0edd5b44 10101 sys_config->pass_crc_to_host = 0; /* TODO: See if 1 gives us FCS */
43f66a6c 10102 sys_config->dot11g_auto_detection = 0;
bf79451e 10103 sys_config->enable_cts_to_self = 0;
43f66a6c 10104 sys_config->bt_coexist_collision_thr = 0;
67fd6b45 10105 sys_config->pass_noise_stats_to_host = 1; /* 1 -- fix for 256 */
12977154 10106 sys_config->silence_threshold = 0x1e;
43f66a6c
JK
10107}
10108
10109static int ipw_net_open(struct net_device *dev)
10110{
43f66a6c 10111 IPW_DEBUG_INFO("dev->open\n");
521c4d96 10112 netif_start_queue(dev);
43f66a6c
JK
10113 return 0;
10114}
10115
10116static int ipw_net_stop(struct net_device *dev)
10117{
10118 IPW_DEBUG_INFO("dev->close\n");
10119 netif_stop_queue(dev);
10120 return 0;
10121}
10122
10123/*
10124todo:
10125
10126modify to send one tfd per fragment instead of using chunking. otherwise
10127we need to heavily modify the ieee80211_skb_to_txb.
10128*/
10129
858119e1 10130static int ipw_tx_skb(struct ipw_priv *priv, struct ieee80211_txb *txb,
227d2dc1 10131 int pri)
43f66a6c 10132{
a5cf4fe6 10133 struct ieee80211_hdr_3addrqos *hdr = (struct ieee80211_hdr_3addrqos *)
0edd5b44 10134 txb->fragments[0]->data;
43f66a6c
JK
10135 int i = 0;
10136 struct tfd_frame *tfd;
e43e3c1e 10137#ifdef CONFIG_IPW2200_QOS
b095c381
JK
10138 int tx_id = ipw_get_tx_queue_number(priv, pri);
10139 struct clx2_tx_queue *txq = &priv->txq[tx_id];
10140#else
43f66a6c 10141 struct clx2_tx_queue *txq = &priv->txq[0];
b095c381 10142#endif
43f66a6c
JK
10143 struct clx2_queue *q = &txq->q;
10144 u8 id, hdr_len, unicast;
10145 u16 remaining_bytes;
c848d0af 10146 int fc;
43f66a6c 10147
a5cf4fe6 10148 hdr_len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_ctl));
43f66a6c
JK
10149 switch (priv->ieee->iw_mode) {
10150 case IW_MODE_ADHOC:
3c19065a 10151 unicast = !is_multicast_ether_addr(hdr->addr1);
43f66a6c
JK
10152 id = ipw_find_station(priv, hdr->addr1);
10153 if (id == IPW_INVALID_STATION) {
10154 id = ipw_add_station(priv, hdr->addr1);
10155 if (id == IPW_INVALID_STATION) {
10156 IPW_WARNING("Attempt to send data to "
e174961c
JB
10157 "invalid cell: %pM\n",
10158 hdr->addr1);
43f66a6c
JK
10159 goto drop;
10160 }
10161 }
10162 break;
10163
10164 case IW_MODE_INFRA:
10165 default:
3c19065a 10166 unicast = !is_multicast_ether_addr(hdr->addr3);
43f66a6c
JK
10167 id = 0;
10168 break;
10169 }
10170
10171 tfd = &txq->bd[q->first_empty];
10172 txq->txb[q->first_empty] = txb;
10173 memset(tfd, 0, sizeof(*tfd));
10174 tfd->u.data.station_number = id;
10175
10176 tfd->control_flags.message_type = TX_FRAME_TYPE;
10177 tfd->control_flags.control_bits = TFD_NEED_IRQ_MASK;
10178
10179 tfd->u.data.cmd_id = DINO_CMD_TX;
a613bffd 10180 tfd->u.data.len = cpu_to_le16(txb->payload_size);
43f66a6c 10181 remaining_bytes = txb->payload_size;
bf79451e 10182
43f66a6c 10183 if (priv->assoc_request.ieee_mode == IPW_B_MODE)
b095c381 10184 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_MODE_CCK;
43f66a6c 10185 else
b095c381 10186 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_MODE_OFDM;
43f66a6c 10187
ea2b26e0
JK
10188 if (priv->assoc_request.preamble_length == DCT_FLAG_SHORT_PREAMBLE)
10189 tfd->u.data.tx_flags |= DCT_FLAG_SHORT_PREAMBLE;
43f66a6c 10190
c848d0af
JK
10191 fc = le16_to_cpu(hdr->frame_ctl);
10192 hdr->frame_ctl = cpu_to_le16(fc & ~IEEE80211_FCTL_MOREFRAGS);
43f66a6c
JK
10193
10194 memcpy(&tfd->u.data.tfd.tfd_24.mchdr, hdr, hdr_len);
10195
b095c381
JK
10196 if (likely(unicast))
10197 tfd->u.data.tx_flags |= DCT_FLAG_ACK_REQD;
10198
10199 if (txb->encrypted && !priv->ieee->host_encrypt) {
10200 switch (priv->ieee->sec.level) {
10201 case SEC_LEVEL_3:
10202 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10203 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
b095c381
JK
10204 /* XXX: ACK flag must be set for CCMP even if it
10205 * is a multicast/broadcast packet, because CCMP
10206 * group communication encrypted by GTK is
10207 * actually done by the AP. */
10208 if (!unicast)
10209 tfd->u.data.tx_flags |= DCT_FLAG_ACK_REQD;
10210
10211 tfd->u.data.tx_flags &= ~DCT_FLAG_NO_WEP;
10212 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_SECURITY_CCM;
10213 tfd->u.data.key_index = 0;
10214 tfd->u.data.key_index |= DCT_WEP_INDEX_USE_IMMEDIATE;
10215 break;
10216 case SEC_LEVEL_2:
10217 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10218 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
b095c381
JK
10219 tfd->u.data.tx_flags &= ~DCT_FLAG_NO_WEP;
10220 tfd->u.data.tx_flags_ext |= DCT_FLAG_EXT_SECURITY_TKIP;
10221 tfd->u.data.key_index = DCT_WEP_INDEX_USE_IMMEDIATE;
10222 break;
10223 case SEC_LEVEL_1:
10224 tfd->u.data.tfd.tfd_24.mchdr.frame_ctl |=
851ca268 10225 cpu_to_le16(IEEE80211_FCTL_PROTECTED);
b095c381
JK
10226 tfd->u.data.key_index = priv->ieee->tx_keyidx;
10227 if (priv->ieee->sec.key_sizes[priv->ieee->tx_keyidx] <=
10228 40)
10229 tfd->u.data.key_index |= DCT_WEP_KEY_64Bit;
10230 else
10231 tfd->u.data.key_index |= DCT_WEP_KEY_128Bit;
10232 break;
10233 case SEC_LEVEL_0:
10234 break;
10235 default:
10236 printk(KERN_ERR "Unknow security level %d\n",
10237 priv->ieee->sec.level);
10238 break;
10239 }
10240 } else
10241 /* No hardware encryption */
10242 tfd->u.data.tx_flags |= DCT_FLAG_NO_WEP;
10243
e43e3c1e 10244#ifdef CONFIG_IPW2200_QOS
a5cf4fe6
ZY
10245 if (fc & IEEE80211_STYPE_QOS_DATA)
10246 ipw_qos_set_tx_queue_command(priv, pri, &(tfd->u.data));
e43e3c1e 10247#endif /* CONFIG_IPW2200_QOS */
b095c381 10248
43f66a6c 10249 /* payload */
a613bffd
JK
10250 tfd->u.data.num_chunks = cpu_to_le32(min((u8) (NUM_TFD_CHUNKS - 2),
10251 txb->nr_frags));
10252 IPW_DEBUG_FRAG("%i fragments being sent as %i chunks.\n",
10253 txb->nr_frags, le32_to_cpu(tfd->u.data.num_chunks));
10254 for (i = 0; i < le32_to_cpu(tfd->u.data.num_chunks); i++) {
10255 IPW_DEBUG_FRAG("Adding fragment %i of %i (%d bytes).\n",
10256 i, le32_to_cpu(tfd->u.data.num_chunks),
10257 txb->fragments[i]->len - hdr_len);
bf79451e 10258 IPW_DEBUG_TX("Dumping TX packet frag %i of %i (%d bytes):\n",
43f66a6c
JK
10259 i, tfd->u.data.num_chunks,
10260 txb->fragments[i]->len - hdr_len);
bf79451e 10261 printk_buf(IPW_DL_TX, txb->fragments[i]->data + hdr_len,
43f66a6c
JK
10262 txb->fragments[i]->len - hdr_len);
10263
0edd5b44 10264 tfd->u.data.chunk_ptr[i] =
a613bffd
JK
10265 cpu_to_le32(pci_map_single
10266 (priv->pci_dev,
10267 txb->fragments[i]->data + hdr_len,
10268 txb->fragments[i]->len - hdr_len,
10269 PCI_DMA_TODEVICE));
10270 tfd->u.data.chunk_len[i] =
10271 cpu_to_le16(txb->fragments[i]->len - hdr_len);
43f66a6c
JK
10272 }
10273
10274 if (i != txb->nr_frags) {
10275 struct sk_buff *skb;
10276 u16 remaining_bytes = 0;
10277 int j;
10278
10279 for (j = i; j < txb->nr_frags; j++)
10280 remaining_bytes += txb->fragments[j]->len - hdr_len;
10281
10282 printk(KERN_INFO "Trying to reallocate for %d bytes\n",
10283 remaining_bytes);
10284 skb = alloc_skb(remaining_bytes, GFP_ATOMIC);
10285 if (skb != NULL) {
a613bffd 10286 tfd->u.data.chunk_len[i] = cpu_to_le16(remaining_bytes);
43f66a6c
JK
10287 for (j = i; j < txb->nr_frags; j++) {
10288 int size = txb->fragments[j]->len - hdr_len;
afbf30a2 10289
43f66a6c 10290 printk(KERN_INFO "Adding frag %d %d...\n",
0edd5b44 10291 j, size);
43f66a6c 10292 memcpy(skb_put(skb, size),
0edd5b44 10293 txb->fragments[j]->data + hdr_len, size);
43f66a6c
JK
10294 }
10295 dev_kfree_skb_any(txb->fragments[i]);
10296 txb->fragments[i] = skb;
0edd5b44 10297 tfd->u.data.chunk_ptr[i] =
a613bffd
JK
10298 cpu_to_le32(pci_map_single
10299 (priv->pci_dev, skb->data,
4958730e 10300 remaining_bytes,
a613bffd
JK
10301 PCI_DMA_TODEVICE));
10302
5c05863d 10303 le32_add_cpu(&tfd->u.data.num_chunks, 1);
bf79451e 10304 }
43f66a6c
JK
10305 }
10306
10307 /* kick DMA */
10308 q->first_empty = ipw_queue_inc_wrap(q->first_empty, q->n_bd);
10309 ipw_write32(priv, q->reg_w, q->first_empty);
10310
943dbef4 10311 if (ipw_tx_queue_space(q) < q->high_mark)
f697014a
JK
10312 netif_stop_queue(priv->net_dev);
10313
227d2dc1 10314 return NETDEV_TX_OK;
43f66a6c 10315
0edd5b44 10316 drop:
43f66a6c
JK
10317 IPW_DEBUG_DROP("Silently dropping Tx packet.\n");
10318 ieee80211_txb_free(txb);
227d2dc1
JK
10319 return NETDEV_TX_OK;
10320}
10321
10322static int ipw_net_is_queue_full(struct net_device *dev, int pri)
10323{
10324 struct ipw_priv *priv = ieee80211_priv(dev);
e43e3c1e 10325#ifdef CONFIG_IPW2200_QOS
227d2dc1
JK
10326 int tx_id = ipw_get_tx_queue_number(priv, pri);
10327 struct clx2_tx_queue *txq = &priv->txq[tx_id];
10328#else
10329 struct clx2_tx_queue *txq = &priv->txq[0];
e43e3c1e 10330#endif /* CONFIG_IPW2200_QOS */
227d2dc1 10331
943dbef4 10332 if (ipw_tx_queue_space(&txq->q) < txq->q.high_mark)
227d2dc1
JK
10333 return 1;
10334
10335 return 0;
43f66a6c
JK
10336}
10337
d685b8c2
ZY
10338#ifdef CONFIG_IPW2200_PROMISCUOUS
10339static void ipw_handle_promiscuous_tx(struct ipw_priv *priv,
10340 struct ieee80211_txb *txb)
10341{
10342 struct ieee80211_rx_stats dummystats;
10343 struct ieee80211_hdr *hdr;
10344 u8 n;
10345 u16 filter = priv->prom_priv->filter;
10346 int hdr_only = 0;
10347
10348 if (filter & IPW_PROM_NO_TX)
10349 return;
10350
10351 memset(&dummystats, 0, sizeof(dummystats));
10352
10353 /* Filtering of fragment chains is done agains the first fragment */
10354 hdr = (void *)txb->fragments[0]->data;
851ca268 10355 if (ieee80211_is_management(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY
10356 if (filter & IPW_PROM_NO_MGMT)
10357 return;
10358 if (filter & IPW_PROM_MGMT_HEADER_ONLY)
10359 hdr_only = 1;
851ca268 10360 } else if (ieee80211_is_control(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY
10361 if (filter & IPW_PROM_NO_CTL)
10362 return;
10363 if (filter & IPW_PROM_CTL_HEADER_ONLY)
10364 hdr_only = 1;
851ca268 10365 } else if (ieee80211_is_data(le16_to_cpu(hdr->frame_ctl))) {
d685b8c2
ZY
10366 if (filter & IPW_PROM_NO_DATA)
10367 return;
10368 if (filter & IPW_PROM_DATA_HEADER_ONLY)
10369 hdr_only = 1;
10370 }
10371
10372 for(n=0; n<txb->nr_frags; ++n) {
10373 struct sk_buff *src = txb->fragments[n];
10374 struct sk_buff *dst;
10375 struct ieee80211_radiotap_header *rt_hdr;
10376 int len;
10377
10378 if (hdr_only) {
10379 hdr = (void *)src->data;
851ca268 10380 len = ieee80211_get_hdrlen(le16_to_cpu(hdr->frame_ctl));
d685b8c2
ZY
10381 } else
10382 len = src->len;
10383
10384 dst = alloc_skb(
10385 len + IEEE80211_RADIOTAP_HDRLEN, GFP_ATOMIC);
10386 if (!dst) continue;
10387
10388 rt_hdr = (void *)skb_put(dst, sizeof(*rt_hdr));
10389
10390 rt_hdr->it_version = PKTHDR_RADIOTAP_VERSION;
10391 rt_hdr->it_pad = 0;
10392 rt_hdr->it_present = 0; /* after all, it's just an idea */
743b84d2 10393 rt_hdr->it_present |= cpu_to_le32(1 << IEEE80211_RADIOTAP_CHANNEL);
d685b8c2 10394
e62e1ee0 10395 *(__le16*)skb_put(dst, sizeof(u16)) = cpu_to_le16(
d685b8c2
ZY
10396 ieee80211chan2mhz(priv->channel));
10397 if (priv->channel > 14) /* 802.11a */
e62e1ee0 10398 *(__le16*)skb_put(dst, sizeof(u16)) =
d685b8c2
ZY
10399 cpu_to_le16(IEEE80211_CHAN_OFDM |
10400 IEEE80211_CHAN_5GHZ);
10401 else if (priv->ieee->mode == IEEE_B) /* 802.11b */
e62e1ee0 10402 *(__le16*)skb_put(dst, sizeof(u16)) =
d685b8c2
ZY
10403 cpu_to_le16(IEEE80211_CHAN_CCK |
10404 IEEE80211_CHAN_2GHZ);
10405 else /* 802.11g */
e62e1ee0 10406 *(__le16*)skb_put(dst, sizeof(u16)) =
d685b8c2
ZY
10407 cpu_to_le16(IEEE80211_CHAN_OFDM |
10408 IEEE80211_CHAN_2GHZ);
10409
743b84d2 10410 rt_hdr->it_len = cpu_to_le16(dst->len);
d685b8c2 10411
d626f62b 10412 skb_copy_from_linear_data(src, skb_put(dst, len), len);
d685b8c2
ZY
10413
10414 if (!ieee80211_rx(priv->prom_priv->ieee, dst, &dummystats))
10415 dev_kfree_skb_any(dst);
10416 }
10417}
10418#endif
10419
43f66a6c 10420static int ipw_net_hard_start_xmit(struct ieee80211_txb *txb,
c8d42d1a 10421 struct net_device *dev, int pri)
43f66a6c
JK
10422{
10423 struct ipw_priv *priv = ieee80211_priv(dev);
10424 unsigned long flags;
227d2dc1 10425 int ret;
43f66a6c
JK
10426
10427 IPW_DEBUG_TX("dev->xmit(%d bytes)\n", txb->payload_size);
43f66a6c
JK
10428 spin_lock_irqsave(&priv->lock, flags);
10429
d685b8c2
ZY
10430#ifdef CONFIG_IPW2200_PROMISCUOUS
10431 if (rtap_iface && netif_running(priv->prom_net_dev))
10432 ipw_handle_promiscuous_tx(priv, txb);
10433#endif
10434
227d2dc1
JK
10435 ret = ipw_tx_skb(priv, txb, pri);
10436 if (ret == NETDEV_TX_OK)
10437 __ipw_led_activity_on(priv);
43f66a6c 10438 spin_unlock_irqrestore(&priv->lock, flags);
43f66a6c 10439
227d2dc1 10440 return ret;
43f66a6c
JK
10441}
10442
10443static struct net_device_stats *ipw_net_get_stats(struct net_device *dev)
10444{
10445 struct ipw_priv *priv = ieee80211_priv(dev);
bf79451e 10446
43f66a6c
JK
10447 priv->ieee->stats.tx_packets = priv->tx_packets;
10448 priv->ieee->stats.rx_packets = priv->rx_packets;
10449 return &priv->ieee->stats;
10450}
10451
10452static void ipw_net_set_multicast_list(struct net_device *dev)
10453{
10454
10455}
10456
10457static int ipw_net_set_mac_address(struct net_device *dev, void *p)
10458{
10459 struct ipw_priv *priv = ieee80211_priv(dev);
10460 struct sockaddr *addr = p;
0795af57 10461
43f66a6c
JK
10462 if (!is_valid_ether_addr(addr->sa_data))
10463 return -EADDRNOTAVAIL;
4644151b 10464 mutex_lock(&priv->mutex);
43f66a6c
JK
10465 priv->config |= CFG_CUSTOM_MAC;
10466 memcpy(priv->mac_addr, addr->sa_data, ETH_ALEN);
e174961c
JB
10467 printk(KERN_INFO "%s: Setting MAC to %pM\n",
10468 priv->net_dev->name, priv->mac_addr);
a613bffd 10469 queue_work(priv->workqueue, &priv->adapter_restart);
4644151b 10470 mutex_unlock(&priv->mutex);
43f66a6c
JK
10471 return 0;
10472}
10473
bf79451e 10474static void ipw_ethtool_get_drvinfo(struct net_device *dev,
43f66a6c
JK
10475 struct ethtool_drvinfo *info)
10476{
10477 struct ipw_priv *p = ieee80211_priv(dev);
10478 char vers[64];
10479 char date[32];
10480 u32 len;
10481
10482 strcpy(info->driver, DRV_NAME);
10483 strcpy(info->version, DRV_VERSION);
10484
10485 len = sizeof(vers);
10486 ipw_get_ordinal(p, IPW_ORD_STAT_FW_VERSION, vers, &len);
10487 len = sizeof(date);
10488 ipw_get_ordinal(p, IPW_ORD_STAT_FW_DATE, date, &len);
10489
0edd5b44 10490 snprintf(info->fw_version, sizeof(info->fw_version), "%s (%s)",
43f66a6c
JK
10491 vers, date);
10492 strcpy(info->bus_info, pci_name(p->pci_dev));
b095c381 10493 info->eedump_len = IPW_EEPROM_IMAGE_SIZE;
43f66a6c
JK
10494}
10495
10496static u32 ipw_ethtool_get_link(struct net_device *dev)
10497{
10498 struct ipw_priv *priv = ieee80211_priv(dev);
10499 return (priv->status & STATUS_ASSOCIATED) != 0;
10500}
10501
10502static int ipw_ethtool_get_eeprom_len(struct net_device *dev)
10503{
b095c381 10504 return IPW_EEPROM_IMAGE_SIZE;
43f66a6c
JK
10505}
10506
10507static int ipw_ethtool_get_eeprom(struct net_device *dev,
0edd5b44 10508 struct ethtool_eeprom *eeprom, u8 * bytes)
43f66a6c
JK
10509{
10510 struct ipw_priv *p = ieee80211_priv(dev);
10511
b095c381 10512 if (eeprom->offset + eeprom->len > IPW_EEPROM_IMAGE_SIZE)
43f66a6c 10513 return -EINVAL;
4644151b 10514 mutex_lock(&p->mutex);
afbf30a2 10515 memcpy(bytes, &p->eeprom[eeprom->offset], eeprom->len);
4644151b 10516 mutex_unlock(&p->mutex);
43f66a6c
JK
10517 return 0;
10518}
10519
10520static int ipw_ethtool_set_eeprom(struct net_device *dev,
0edd5b44 10521 struct ethtool_eeprom *eeprom, u8 * bytes)
43f66a6c
JK
10522{
10523 struct ipw_priv *p = ieee80211_priv(dev);
10524 int i;
10525
b095c381 10526 if (eeprom->offset + eeprom->len > IPW_EEPROM_IMAGE_SIZE)
43f66a6c 10527 return -EINVAL;
4644151b 10528 mutex_lock(&p->mutex);
afbf30a2 10529 memcpy(&p->eeprom[eeprom->offset], bytes, eeprom->len);
71e585fc
AB
10530 for (i = 0; i < IPW_EEPROM_IMAGE_SIZE; i++)
10531 ipw_write8(p, i + IPW_EEPROM_DATA, p->eeprom[i]);
4644151b 10532 mutex_unlock(&p->mutex);
43f66a6c
JK
10533 return 0;
10534}
10535
7282d491 10536static const struct ethtool_ops ipw_ethtool_ops = {
ea2b26e0
JK
10537 .get_link = ipw_ethtool_get_link,
10538 .get_drvinfo = ipw_ethtool_get_drvinfo,
10539 .get_eeprom_len = ipw_ethtool_get_eeprom_len,
10540 .get_eeprom = ipw_ethtool_get_eeprom,
10541 .set_eeprom = ipw_ethtool_set_eeprom,
43f66a6c
JK
10542};
10543
7d12e780 10544static irqreturn_t ipw_isr(int irq, void *data)
43f66a6c
JK
10545{
10546 struct ipw_priv *priv = data;
10547 u32 inta, inta_mask;
bf79451e 10548
43f66a6c
JK
10549 if (!priv)
10550 return IRQ_NONE;
10551
89c318ed 10552 spin_lock(&priv->irq_lock);
43f66a6c
JK
10553
10554 if (!(priv->status & STATUS_INT_ENABLED)) {
d00d0121 10555 /* IRQ is disabled */
43f66a6c
JK
10556 goto none;
10557 }
10558
b095c381
JK
10559 inta = ipw_read32(priv, IPW_INTA_RW);
10560 inta_mask = ipw_read32(priv, IPW_INTA_MASK_R);
bf79451e 10561
43f66a6c
JK
10562 if (inta == 0xFFFFFFFF) {
10563 /* Hardware disappeared */
10564 IPW_WARNING("IRQ INTA == 0xFFFFFFFF\n");
10565 goto none;
10566 }
10567
b095c381 10568 if (!(inta & (IPW_INTA_MASK_ALL & inta_mask))) {
43f66a6c
JK
10569 /* Shared interrupt */
10570 goto none;
10571 }
10572
10573 /* tell the device to stop sending interrupts */
89c318ed 10574 __ipw_disable_interrupts(priv);
bf79451e 10575
43f66a6c 10576 /* ack current interrupts */
b095c381
JK
10577 inta &= (IPW_INTA_MASK_ALL & inta_mask);
10578 ipw_write32(priv, IPW_INTA_RW, inta);
bf79451e 10579
43f66a6c
JK
10580 /* Cache INTA value for our tasklet */
10581 priv->isr_inta = inta;
10582
10583 tasklet_schedule(&priv->irq_tasklet);
10584
89c318ed 10585 spin_unlock(&priv->irq_lock);
43f66a6c
JK
10586
10587 return IRQ_HANDLED;
0edd5b44 10588 none:
89c318ed 10589 spin_unlock(&priv->irq_lock);
43f66a6c
JK
10590 return IRQ_NONE;
10591}
10592
10593static void ipw_rf_kill(void *adapter)
10594{
10595 struct ipw_priv *priv = adapter;
10596 unsigned long flags;
bf79451e 10597
43f66a6c
JK
10598 spin_lock_irqsave(&priv->lock, flags);
10599
10600 if (rf_kill_active(priv)) {
10601 IPW_DEBUG_RF_KILL("RF Kill active, rescheduling GPIO check\n");
10602 if (priv->workqueue)
10603 queue_delayed_work(priv->workqueue,
10604 &priv->rf_kill, 2 * HZ);
10605 goto exit_unlock;
10606 }
10607
10608 /* RF Kill is now disabled, so bring the device back up */
10609
10610 if (!(priv->status & STATUS_RF_KILL_MASK)) {
10611 IPW_DEBUG_RF_KILL("HW RF Kill no longer active, restarting "
10612 "device\n");
10613
10614 /* we can not do an adapter restart while inside an irq lock */
10615 queue_work(priv->workqueue, &priv->adapter_restart);
bf79451e 10616 } else
43f66a6c
JK
10617 IPW_DEBUG_RF_KILL("HW RF Kill deactivated. SW RF Kill still "
10618 "enabled\n");
10619
0edd5b44 10620 exit_unlock:
43f66a6c
JK
10621 spin_unlock_irqrestore(&priv->lock, flags);
10622}
10623
c4028958 10624static void ipw_bg_rf_kill(struct work_struct *work)
c848d0af 10625{
c4028958
DH
10626 struct ipw_priv *priv =
10627 container_of(work, struct ipw_priv, rf_kill.work);
4644151b 10628 mutex_lock(&priv->mutex);
c4028958 10629 ipw_rf_kill(priv);
4644151b 10630 mutex_unlock(&priv->mutex);
c848d0af
JK
10631}
10632
a73e22b2 10633static void ipw_link_up(struct ipw_priv *priv)
a613bffd 10634{
afbf30a2
JK
10635 priv->last_seq_num = -1;
10636 priv->last_frag_num = -1;
10637 priv->last_packet_time = 0;
10638
a613bffd 10639 netif_carrier_on(priv->net_dev);
a613bffd 10640
c848d0af 10641 cancel_delayed_work(&priv->request_scan);
ea177305
DW
10642 cancel_delayed_work(&priv->request_direct_scan);
10643 cancel_delayed_work(&priv->request_passive_scan);
0b531676 10644 cancel_delayed_work(&priv->scan_event);
a613bffd
JK
10645 ipw_reset_stats(priv);
10646 /* Ensure the rate is updated immediately */
10647 priv->last_rate = ipw_get_current_rate(priv);
10648 ipw_gather_stats(priv);
10649 ipw_led_link_up(priv);
10650 notify_wx_assoc_event(priv);
10651
10652 if (priv->config & CFG_BACKGROUND_SCAN)
10653 queue_delayed_work(priv->workqueue, &priv->request_scan, HZ);
10654}
10655
c4028958 10656static void ipw_bg_link_up(struct work_struct *work)
c848d0af 10657{
c4028958
DH
10658 struct ipw_priv *priv =
10659 container_of(work, struct ipw_priv, link_up);
4644151b 10660 mutex_lock(&priv->mutex);
c4028958 10661 ipw_link_up(priv);
4644151b 10662 mutex_unlock(&priv->mutex);
c848d0af
JK
10663}
10664
a73e22b2 10665static void ipw_link_down(struct ipw_priv *priv)
a613bffd
JK
10666{
10667 ipw_led_link_down(priv);
10668 netif_carrier_off(priv->net_dev);
a613bffd
JK
10669 notify_wx_assoc_event(priv);
10670
10671 /* Cancel any queued work ... */
10672 cancel_delayed_work(&priv->request_scan);
ea177305
DW
10673 cancel_delayed_work(&priv->request_direct_scan);
10674 cancel_delayed_work(&priv->request_passive_scan);
a613bffd
JK
10675 cancel_delayed_work(&priv->adhoc_check);
10676 cancel_delayed_work(&priv->gather_stats);
10677
10678 ipw_reset_stats(priv);
10679
afbf30a2
JK
10680 if (!(priv->status & STATUS_EXIT_PENDING)) {
10681 /* Queue up another scan... */
c4028958 10682 queue_delayed_work(priv->workqueue, &priv->request_scan, 0);
0b531676
DW
10683 } else
10684 cancel_delayed_work(&priv->scan_event);
a613bffd
JK
10685}
10686
c4028958 10687static void ipw_bg_link_down(struct work_struct *work)
c848d0af 10688{
c4028958
DH
10689 struct ipw_priv *priv =
10690 container_of(work, struct ipw_priv, link_down);
4644151b 10691 mutex_lock(&priv->mutex);
c4028958 10692 ipw_link_down(priv);
4644151b 10693 mutex_unlock(&priv->mutex);
43f66a6c
JK
10694}
10695
2ef19e63 10696static int __devinit ipw_setup_deferred_work(struct ipw_priv *priv)
43f66a6c
JK
10697{
10698 int ret = 0;
10699
43f66a6c 10700 priv->workqueue = create_workqueue(DRV_NAME);
43f66a6c 10701 init_waitqueue_head(&priv->wait_command_queue);
afbf30a2 10702 init_waitqueue_head(&priv->wait_state);
43f66a6c 10703
c4028958
DH
10704 INIT_DELAYED_WORK(&priv->adhoc_check, ipw_bg_adhoc_check);
10705 INIT_WORK(&priv->associate, ipw_bg_associate);
10706 INIT_WORK(&priv->disassociate, ipw_bg_disassociate);
10707 INIT_WORK(&priv->system_config, ipw_system_config);
10708 INIT_WORK(&priv->rx_replenish, ipw_bg_rx_queue_replenish);
10709 INIT_WORK(&priv->adapter_restart, ipw_bg_adapter_restart);
10710 INIT_DELAYED_WORK(&priv->rf_kill, ipw_bg_rf_kill);
10711 INIT_WORK(&priv->up, ipw_bg_up);
10712 INIT_WORK(&priv->down, ipw_bg_down);
10713 INIT_DELAYED_WORK(&priv->request_scan, ipw_request_scan);
ea177305
DW
10714 INIT_DELAYED_WORK(&priv->request_direct_scan, ipw_request_direct_scan);
10715 INIT_DELAYED_WORK(&priv->request_passive_scan, ipw_request_passive_scan);
0b531676 10716 INIT_DELAYED_WORK(&priv->scan_event, ipw_scan_event);
c4028958
DH
10717 INIT_DELAYED_WORK(&priv->gather_stats, ipw_bg_gather_stats);
10718 INIT_WORK(&priv->abort_scan, ipw_bg_abort_scan);
10719 INIT_WORK(&priv->roam, ipw_bg_roam);
10720 INIT_DELAYED_WORK(&priv->scan_check, ipw_bg_scan_check);
10721 INIT_WORK(&priv->link_up, ipw_bg_link_up);
10722 INIT_WORK(&priv->link_down, ipw_bg_link_down);
10723 INIT_DELAYED_WORK(&priv->led_link_on, ipw_bg_led_link_on);
10724 INIT_DELAYED_WORK(&priv->led_link_off, ipw_bg_led_link_off);
10725 INIT_DELAYED_WORK(&priv->led_act_off, ipw_bg_led_activity_off);
10726 INIT_WORK(&priv->merge_networks, ipw_merge_adhoc_network);
43f66a6c 10727
e43e3c1e 10728#ifdef CONFIG_IPW2200_QOS
c4028958 10729 INIT_WORK(&priv->qos_activate, ipw_bg_qos_activate);
e43e3c1e 10730#endif /* CONFIG_IPW2200_QOS */
43f66a6c
JK
10731
10732 tasklet_init(&priv->irq_tasklet, (void (*)(unsigned long))
10733 ipw_irq_tasklet, (unsigned long)priv);
10734
10735 return ret;
10736}
10737
43f66a6c
JK
10738static void shim__set_security(struct net_device *dev,
10739 struct ieee80211_security *sec)
10740{
10741 struct ipw_priv *priv = ieee80211_priv(dev);
10742 int i;
bf79451e 10743 for (i = 0; i < 4; i++) {
43f66a6c 10744 if (sec->flags & (1 << i)) {
afbf30a2 10745 priv->ieee->sec.encode_alg[i] = sec->encode_alg[i];
b095c381 10746 priv->ieee->sec.key_sizes[i] = sec->key_sizes[i];
43f66a6c 10747 if (sec->key_sizes[i] == 0)
b095c381
JK
10748 priv->ieee->sec.flags &= ~(1 << i);
10749 else {
10750 memcpy(priv->ieee->sec.keys[i], sec->keys[i],
43f66a6c 10751 sec->key_sizes[i]);
b095c381
JK
10752 priv->ieee->sec.flags |= (1 << i);
10753 }
43f66a6c 10754 priv->status |= STATUS_SECURITY_UPDATED;
b095c381
JK
10755 } else if (sec->level != SEC_LEVEL_1)
10756 priv->ieee->sec.flags &= ~(1 << i);
43f66a6c
JK
10757 }
10758
b095c381 10759 if (sec->flags & SEC_ACTIVE_KEY) {
43f66a6c 10760 if (sec->active_key <= 3) {
b095c381
JK
10761 priv->ieee->sec.active_key = sec->active_key;
10762 priv->ieee->sec.flags |= SEC_ACTIVE_KEY;
bf79451e 10763 } else
b095c381 10764 priv->ieee->sec.flags &= ~SEC_ACTIVE_KEY;
43f66a6c 10765 priv->status |= STATUS_SECURITY_UPDATED;
b095c381
JK
10766 } else
10767 priv->ieee->sec.flags &= ~SEC_ACTIVE_KEY;
43f66a6c
JK
10768
10769 if ((sec->flags & SEC_AUTH_MODE) &&
b095c381
JK
10770 (priv->ieee->sec.auth_mode != sec->auth_mode)) {
10771 priv->ieee->sec.auth_mode = sec->auth_mode;
10772 priv->ieee->sec.flags |= SEC_AUTH_MODE;
43f66a6c
JK
10773 if (sec->auth_mode == WLAN_AUTH_SHARED_KEY)
10774 priv->capability |= CAP_SHARED_KEY;
10775 else
10776 priv->capability &= ~CAP_SHARED_KEY;
10777 priv->status |= STATUS_SECURITY_UPDATED;
10778 }
bf79451e 10779
b095c381
JK
10780 if (sec->flags & SEC_ENABLED && priv->ieee->sec.enabled != sec->enabled) {
10781 priv->ieee->sec.flags |= SEC_ENABLED;
10782 priv->ieee->sec.enabled = sec->enabled;
43f66a6c 10783 priv->status |= STATUS_SECURITY_UPDATED;
bf79451e 10784 if (sec->enabled)
43f66a6c
JK
10785 priv->capability |= CAP_PRIVACY_ON;
10786 else
10787 priv->capability &= ~CAP_PRIVACY_ON;
10788 }
bf79451e 10789
afbf30a2
JK
10790 if (sec->flags & SEC_ENCRYPT)
10791 priv->ieee->sec.encrypt = sec->encrypt;
bf79451e 10792
b095c381
JK
10793 if (sec->flags & SEC_LEVEL && priv->ieee->sec.level != sec->level) {
10794 priv->ieee->sec.level = sec->level;
10795 priv->ieee->sec.flags |= SEC_LEVEL;
43f66a6c
JK
10796 priv->status |= STATUS_SECURITY_UPDATED;
10797 }
10798
1fbfea54
ZY
10799 if (!priv->ieee->host_encrypt && (sec->flags & SEC_ENCRYPT))
10800 ipw_set_hwcrypto_keys(priv);
10801
bf79451e
JG
10802 /* To match current functionality of ipw2100 (which works well w/
10803 * various supplicants, we don't force a disassociate if the
43f66a6c
JK
10804 * privacy capability changes ... */
10805#if 0
10806 if ((priv->status & (STATUS_ASSOCIATED | STATUS_ASSOCIATING)) &&
bf79451e 10807 (((priv->assoc_request.capability &
5b5e807f 10808 cpu_to_le16(WLAN_CAPABILITY_PRIVACY)) && !sec->enabled) ||
bf79451e 10809 (!(priv->assoc_request.capability &
5b5e807f 10810 cpu_to_le16(WLAN_CAPABILITY_PRIVACY)) && sec->enabled))) {
43f66a6c
JK
10811 IPW_DEBUG_ASSOC("Disassociating due to capability "
10812 "change.\n");
10813 ipw_disassociate(priv);
10814 }
10815#endif
10816}
10817
bf79451e 10818static int init_supported_rates(struct ipw_priv *priv,
43f66a6c
JK
10819 struct ipw_supported_rates *rates)
10820{
10821 /* TODO: Mask out rates based on priv->rates_mask */
10822
10823 memset(rates, 0, sizeof(*rates));
0edd5b44 10824 /* configure supported rates */
43f66a6c
JK
10825 switch (priv->ieee->freq_band) {
10826 case IEEE80211_52GHZ_BAND:
10827 rates->ieee_mode = IPW_A_MODE;
10828 rates->purpose = IPW_RATE_CAPABILITIES;
10829 ipw_add_ofdm_scan_rates(rates, IEEE80211_CCK_MODULATION,
10830 IEEE80211_OFDM_DEFAULT_RATES_MASK);
10831 break;
10832
0edd5b44 10833 default: /* Mixed or 2.4Ghz */
43f66a6c
JK
10834 rates->ieee_mode = IPW_G_MODE;
10835 rates->purpose = IPW_RATE_CAPABILITIES;
10836 ipw_add_cck_scan_rates(rates, IEEE80211_CCK_MODULATION,
10837 IEEE80211_CCK_DEFAULT_RATES_MASK);
10838 if (priv->ieee->modulation & IEEE80211_OFDM_MODULATION) {
10839 ipw_add_ofdm_scan_rates(rates, IEEE80211_CCK_MODULATION,
10840 IEEE80211_OFDM_DEFAULT_RATES_MASK);
10841 }
10842 break;
10843 }
10844
10845 return 0;
10846}
10847
bf79451e 10848static int ipw_config(struct ipw_priv *priv)
43f66a6c 10849{
43f66a6c
JK
10850 /* This is only called from ipw_up, which resets/reloads the firmware
10851 so, we don't need to first disable the card before we configure
10852 it */
6de9f7f2 10853 if (ipw_set_tx_power(priv))
43f66a6c
JK
10854 goto error;
10855
10856 /* initialize adapter address */
10857 if (ipw_send_adapter_address(priv, priv->net_dev->dev_addr))
10858 goto error;
10859
10860 /* set basic system config settings */
10861 init_sys_config(&priv->sys_config);
810dabd4
ZY
10862
10863 /* Support Bluetooth if we have BT h/w on board, and user wants to.
10864 * Does not support BT priority yet (don't abort or defer our Tx) */
10865 if (bt_coexist) {
2638bc39 10866 unsigned char bt_caps = priv->eeprom[EEPROM_SKU_CAPABILITY];
810dabd4
ZY
10867
10868 if (bt_caps & EEPROM_SKU_CAP_BT_CHANNEL_SIG)
10869 priv->sys_config.bt_coexistence
2638bc39 10870 |= CFG_BT_COEXISTENCE_SIGNAL_CHNL;
810dabd4
ZY
10871 if (bt_caps & EEPROM_SKU_CAP_BT_OOB)
10872 priv->sys_config.bt_coexistence
2638bc39 10873 |= CFG_BT_COEXISTENCE_OOB;
810dabd4
ZY
10874 }
10875
d685b8c2
ZY
10876#ifdef CONFIG_IPW2200_PROMISCUOUS
10877 if (priv->prom_net_dev && netif_running(priv->prom_net_dev)) {
10878 priv->sys_config.accept_all_data_frames = 1;
10879 priv->sys_config.accept_non_directed_frames = 1;
10880 priv->sys_config.accept_all_mgmt_bcpr = 1;
10881 priv->sys_config.accept_all_mgmt_frames = 1;
10882 }
10883#endif
10884
c848d0af
JK
10885 if (priv->ieee->iw_mode == IW_MODE_ADHOC)
10886 priv->sys_config.answer_broadcast_ssid_probe = 1;
10887 else
10888 priv->sys_config.answer_broadcast_ssid_probe = 0;
10889
d685b8c2 10890 if (ipw_send_system_config(priv))
43f66a6c
JK
10891 goto error;
10892
0edd5b44
JG
10893 init_supported_rates(priv, &priv->rates);
10894 if (ipw_send_supported_rates(priv, &priv->rates))
43f66a6c
JK
10895 goto error;
10896
10897 /* Set request-to-send threshold */
10898 if (priv->rts_threshold) {
10899 if (ipw_send_rts_threshold(priv, priv->rts_threshold))
10900 goto error;
10901 }
e43e3c1e 10902#ifdef CONFIG_IPW2200_QOS
b095c381
JK
10903 IPW_DEBUG_QOS("QoS: call ipw_qos_activate\n");
10904 ipw_qos_activate(priv, NULL);
e43e3c1e 10905#endif /* CONFIG_IPW2200_QOS */
43f66a6c
JK
10906
10907 if (ipw_set_random_seed(priv))
10908 goto error;
bf79451e 10909
43f66a6c
JK
10910 /* final state transition to the RUN state */
10911 if (ipw_send_host_complete(priv))
10912 goto error;
10913
e666619e
JK
10914 priv->status |= STATUS_INIT;
10915
10916 ipw_led_init(priv);
10917 ipw_led_radio_on(priv);
10918 priv->notif_missed_beacons = 0;
10919
10920 /* Set hardware WEP key if it is configured. */
10921 if ((priv->capability & CAP_PRIVACY_ON) &&
10922 (priv->ieee->sec.level == SEC_LEVEL_1) &&
10923 !(priv->ieee->host_encrypt || priv->ieee->host_decrypt))
10924 ipw_set_hwcrypto_keys(priv);
43f66a6c
JK
10925
10926 return 0;
bf79451e 10927
0edd5b44 10928 error:
43f66a6c
JK
10929 return -EIO;
10930}
10931
4f36f808
JK
10932/*
10933 * NOTE:
10934 *
10935 * These tables have been tested in conjunction with the
10936 * Intel PRO/Wireless 2200BG and 2915ABG Network Connection Adapters.
10937 *
10938 * Altering this values, using it on other hardware, or in geographies
10939 * not intended for resale of the above mentioned Intel adapters has
10940 * not been tested.
10941 *
48a84770
HBA
10942 * Remember to update the table in README.ipw2200 when changing this
10943 * table.
10944 *
4f36f808
JK
10945 */
10946static const struct ieee80211_geo ipw_geos[] = {
10947 { /* Restricted */
10948 "---",
10949 .bg_channels = 11,
10950 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10951 {2427, 4}, {2432, 5}, {2437, 6},
10952 {2442, 7}, {2447, 8}, {2452, 9},
10953 {2457, 10}, {2462, 11}},
10954 },
10955
10956 { /* Custom US/Canada */
10957 "ZZF",
10958 .bg_channels = 11,
10959 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10960 {2427, 4}, {2432, 5}, {2437, 6},
10961 {2442, 7}, {2447, 8}, {2452, 9},
10962 {2457, 10}, {2462, 11}},
10963 .a_channels = 8,
10964 .a = {{5180, 36},
10965 {5200, 40},
10966 {5220, 44},
10967 {5240, 48},
10968 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10969 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10970 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10971 {5320, 64, IEEE80211_CH_PASSIVE_ONLY}},
10972 },
10973
10974 { /* Rest of World */
10975 "ZZD",
10976 .bg_channels = 13,
10977 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10978 {2427, 4}, {2432, 5}, {2437, 6},
10979 {2442, 7}, {2447, 8}, {2452, 9},
10980 {2457, 10}, {2462, 11}, {2467, 12},
10981 {2472, 13}},
10982 },
10983
10984 { /* Custom USA & Europe & High */
10985 "ZZA",
10986 .bg_channels = 11,
10987 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
10988 {2427, 4}, {2432, 5}, {2437, 6},
10989 {2442, 7}, {2447, 8}, {2452, 9},
10990 {2457, 10}, {2462, 11}},
10991 .a_channels = 13,
10992 .a = {{5180, 36},
10993 {5200, 40},
10994 {5220, 44},
10995 {5240, 48},
10996 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
10997 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
10998 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
10999 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11000 {5745, 149},
11001 {5765, 153},
11002 {5785, 157},
11003 {5805, 161},
11004 {5825, 165}},
11005 },
11006
11007 { /* Custom NA & Europe */
11008 "ZZB",
11009 .bg_channels = 11,
11010 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11011 {2427, 4}, {2432, 5}, {2437, 6},
11012 {2442, 7}, {2447, 8}, {2452, 9},
11013 {2457, 10}, {2462, 11}},
11014 .a_channels = 13,
11015 .a = {{5180, 36},
11016 {5200, 40},
11017 {5220, 44},
11018 {5240, 48},
11019 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11020 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11021 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11022 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11023 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11024 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11025 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11026 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11027 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11028 },
11029
11030 { /* Custom Japan */
11031 "ZZC",
11032 .bg_channels = 11,
11033 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11034 {2427, 4}, {2432, 5}, {2437, 6},
11035 {2442, 7}, {2447, 8}, {2452, 9},
11036 {2457, 10}, {2462, 11}},
11037 .a_channels = 4,
11038 .a = {{5170, 34}, {5190, 38},
11039 {5210, 42}, {5230, 46}},
11040 },
11041
11042 { /* Custom */
11043 "ZZM",
11044 .bg_channels = 11,
11045 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11046 {2427, 4}, {2432, 5}, {2437, 6},
11047 {2442, 7}, {2447, 8}, {2452, 9},
11048 {2457, 10}, {2462, 11}},
11049 },
11050
11051 { /* Europe */
11052 "ZZE",
11053 .bg_channels = 13,
11054 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11055 {2427, 4}, {2432, 5}, {2437, 6},
11056 {2442, 7}, {2447, 8}, {2452, 9},
11057 {2457, 10}, {2462, 11}, {2467, 12},
11058 {2472, 13}},
11059 .a_channels = 19,
11060 .a = {{5180, 36},
11061 {5200, 40},
11062 {5220, 44},
11063 {5240, 48},
11064 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11065 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11066 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11067 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11068 {5500, 100, IEEE80211_CH_PASSIVE_ONLY},
11069 {5520, 104, IEEE80211_CH_PASSIVE_ONLY},
11070 {5540, 108, IEEE80211_CH_PASSIVE_ONLY},
11071 {5560, 112, IEEE80211_CH_PASSIVE_ONLY},
11072 {5580, 116, IEEE80211_CH_PASSIVE_ONLY},
11073 {5600, 120, IEEE80211_CH_PASSIVE_ONLY},
11074 {5620, 124, IEEE80211_CH_PASSIVE_ONLY},
11075 {5640, 128, IEEE80211_CH_PASSIVE_ONLY},
11076 {5660, 132, IEEE80211_CH_PASSIVE_ONLY},
11077 {5680, 136, IEEE80211_CH_PASSIVE_ONLY},
11078 {5700, 140, IEEE80211_CH_PASSIVE_ONLY}},
11079 },
11080
11081 { /* Custom Japan */
11082 "ZZJ",
11083 .bg_channels = 14,
11084 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11085 {2427, 4}, {2432, 5}, {2437, 6},
11086 {2442, 7}, {2447, 8}, {2452, 9},
11087 {2457, 10}, {2462, 11}, {2467, 12},
11088 {2472, 13}, {2484, 14, IEEE80211_CH_B_ONLY}},
11089 .a_channels = 4,
11090 .a = {{5170, 34}, {5190, 38},
11091 {5210, 42}, {5230, 46}},
11092 },
11093
03520576
JK
11094 { /* Rest of World */
11095 "ZZR",
11096 .bg_channels = 14,
11097 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11098 {2427, 4}, {2432, 5}, {2437, 6},
11099 {2442, 7}, {2447, 8}, {2452, 9},
11100 {2457, 10}, {2462, 11}, {2467, 12},
11101 {2472, 13}, {2484, 14, IEEE80211_CH_B_ONLY |
11102 IEEE80211_CH_PASSIVE_ONLY}},
11103 },
11104
4f36f808
JK
11105 { /* High Band */
11106 "ZZH",
11107 .bg_channels = 13,
11108 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11109 {2427, 4}, {2432, 5}, {2437, 6},
11110 {2442, 7}, {2447, 8}, {2452, 9},
11111 {2457, 10}, {2462, 11},
11112 {2467, 12, IEEE80211_CH_PASSIVE_ONLY},
11113 {2472, 13, IEEE80211_CH_PASSIVE_ONLY}},
11114 .a_channels = 4,
11115 .a = {{5745, 149}, {5765, 153},
11116 {5785, 157}, {5805, 161}},
11117 },
11118
11119 { /* Custom Europe */
11120 "ZZG",
11121 .bg_channels = 13,
11122 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11123 {2427, 4}, {2432, 5}, {2437, 6},
11124 {2442, 7}, {2447, 8}, {2452, 9},
11125 {2457, 10}, {2462, 11},
11126 {2467, 12}, {2472, 13}},
11127 .a_channels = 4,
11128 .a = {{5180, 36}, {5200, 40},
11129 {5220, 44}, {5240, 48}},
11130 },
11131
11132 { /* Europe */
11133 "ZZK",
11134 .bg_channels = 13,
11135 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11136 {2427, 4}, {2432, 5}, {2437, 6},
11137 {2442, 7}, {2447, 8}, {2452, 9},
11138 {2457, 10}, {2462, 11},
11139 {2467, 12, IEEE80211_CH_PASSIVE_ONLY},
11140 {2472, 13, IEEE80211_CH_PASSIVE_ONLY}},
11141 .a_channels = 24,
11142 .a = {{5180, 36, IEEE80211_CH_PASSIVE_ONLY},
11143 {5200, 40, IEEE80211_CH_PASSIVE_ONLY},
11144 {5220, 44, IEEE80211_CH_PASSIVE_ONLY},
11145 {5240, 48, IEEE80211_CH_PASSIVE_ONLY},
11146 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11147 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11148 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11149 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11150 {5500, 100, IEEE80211_CH_PASSIVE_ONLY},
11151 {5520, 104, IEEE80211_CH_PASSIVE_ONLY},
11152 {5540, 108, IEEE80211_CH_PASSIVE_ONLY},
11153 {5560, 112, IEEE80211_CH_PASSIVE_ONLY},
11154 {5580, 116, IEEE80211_CH_PASSIVE_ONLY},
11155 {5600, 120, IEEE80211_CH_PASSIVE_ONLY},
11156 {5620, 124, IEEE80211_CH_PASSIVE_ONLY},
11157 {5640, 128, IEEE80211_CH_PASSIVE_ONLY},
11158 {5660, 132, IEEE80211_CH_PASSIVE_ONLY},
11159 {5680, 136, IEEE80211_CH_PASSIVE_ONLY},
11160 {5700, 140, IEEE80211_CH_PASSIVE_ONLY},
11161 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11162 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11163 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11164 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11165 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11166 },
11167
11168 { /* Europe */
11169 "ZZL",
11170 .bg_channels = 11,
11171 .bg = {{2412, 1}, {2417, 2}, {2422, 3},
11172 {2427, 4}, {2432, 5}, {2437, 6},
11173 {2442, 7}, {2447, 8}, {2452, 9},
11174 {2457, 10}, {2462, 11}},
11175 .a_channels = 13,
11176 .a = {{5180, 36, IEEE80211_CH_PASSIVE_ONLY},
11177 {5200, 40, IEEE80211_CH_PASSIVE_ONLY},
11178 {5220, 44, IEEE80211_CH_PASSIVE_ONLY},
11179 {5240, 48, IEEE80211_CH_PASSIVE_ONLY},
11180 {5260, 52, IEEE80211_CH_PASSIVE_ONLY},
11181 {5280, 56, IEEE80211_CH_PASSIVE_ONLY},
11182 {5300, 60, IEEE80211_CH_PASSIVE_ONLY},
11183 {5320, 64, IEEE80211_CH_PASSIVE_ONLY},
11184 {5745, 149, IEEE80211_CH_PASSIVE_ONLY},
11185 {5765, 153, IEEE80211_CH_PASSIVE_ONLY},
11186 {5785, 157, IEEE80211_CH_PASSIVE_ONLY},
11187 {5805, 161, IEEE80211_CH_PASSIVE_ONLY},
11188 {5825, 165, IEEE80211_CH_PASSIVE_ONLY}},
11189 }
afbf30a2
JK
11190};
11191
43f66a6c
JK
11192#define MAX_HW_RESTARTS 5
11193static int ipw_up(struct ipw_priv *priv)
11194{
4f36f808 11195 int rc, i, j;
43f66a6c
JK
11196
11197 if (priv->status & STATUS_EXIT_PENDING)
11198 return -EIO;
11199
f6c5cb7c 11200 if (cmdlog && !priv->cmdlog) {
e6e3f12a 11201 priv->cmdlog = kcalloc(cmdlog, sizeof(*priv->cmdlog),
f6c5cb7c
JK
11202 GFP_KERNEL);
11203 if (priv->cmdlog == NULL) {
11204 IPW_ERROR("Error allocating %d command log entries.\n",
11205 cmdlog);
d0b526b7 11206 return -ENOMEM;
f6c5cb7c 11207 } else {
f6c5cb7c
JK
11208 priv->cmdlog_len = cmdlog;
11209 }
11210 }
11211
0edd5b44 11212 for (i = 0; i < MAX_HW_RESTARTS; i++) {
bf79451e 11213 /* Load the microcode, firmware, and eeprom.
43f66a6c
JK
11214 * Also start the clocks. */
11215 rc = ipw_load(priv);
11216 if (rc) {
a4f6bbb3 11217 IPW_ERROR("Unable to load firmware: %d\n", rc);
43f66a6c
JK
11218 return rc;
11219 }
11220
11221 ipw_init_ordinals(priv);
11222 if (!(priv->config & CFG_CUSTOM_MAC))
11223 eeprom_parse_mac(priv, priv->mac_addr);
11224 memcpy(priv->net_dev->dev_addr, priv->mac_addr, ETH_ALEN);
11225
4f36f808
JK
11226 for (j = 0; j < ARRAY_SIZE(ipw_geos); j++) {
11227 if (!memcmp(&priv->eeprom[EEPROM_COUNTRY_CODE],
11228 ipw_geos[j].name, 3))
11229 break;
11230 }
03520576
JK
11231 if (j == ARRAY_SIZE(ipw_geos)) {
11232 IPW_WARNING("SKU [%c%c%c] not recognized.\n",
11233 priv->eeprom[EEPROM_COUNTRY_CODE + 0],
11234 priv->eeprom[EEPROM_COUNTRY_CODE + 1],
11235 priv->eeprom[EEPROM_COUNTRY_CODE + 2]);
4f36f808 11236 j = 0;
03520576 11237 }
1867b117 11238 if (ieee80211_set_geo(priv->ieee, &ipw_geos[j])) {
4f36f808
JK
11239 IPW_WARNING("Could not set geography.");
11240 return 0;
11241 }
11242
b095c381
JK
11243 if (priv->status & STATUS_RF_KILL_SW) {
11244 IPW_WARNING("Radio disabled by module parameter.\n");
11245 return 0;
11246 } else if (rf_kill_active(priv)) {
11247 IPW_WARNING("Radio Frequency Kill Switch is On:\n"
11248 "Kill switch must be turned off for "
11249 "wireless networking to work.\n");
11250 queue_delayed_work(priv->workqueue, &priv->rf_kill,
11251 2 * HZ);
43f66a6c 11252 return 0;
c848d0af 11253 }
43f66a6c
JK
11254
11255 rc = ipw_config(priv);
11256 if (!rc) {
11257 IPW_DEBUG_INFO("Configured device on count %i\n", i);
e666619e
JK
11258
11259 /* If configure to try and auto-associate, kick
11260 * off a scan. */
c4028958
DH
11261 queue_delayed_work(priv->workqueue,
11262 &priv->request_scan, 0);
afbf30a2 11263
43f66a6c 11264 return 0;
43f66a6c 11265 }
bf79451e 11266
c848d0af 11267 IPW_DEBUG_INFO("Device configuration failed: 0x%08X\n", rc);
43f66a6c
JK
11268 IPW_DEBUG_INFO("Failed to config device on retry %d of %d\n",
11269 i, MAX_HW_RESTARTS);
11270
11271 /* We had an error bringing up the hardware, so take it
11272 * all the way back down so we can try again */
11273 ipw_down(priv);
11274 }
11275
bf79451e 11276 /* tried to restart and config the device for as long as our
43f66a6c 11277 * patience could withstand */
0edd5b44 11278 IPW_ERROR("Unable to initialize device after %d attempts.\n", i);
c848d0af 11279
43f66a6c
JK
11280 return -EIO;
11281}
11282
c4028958 11283static void ipw_bg_up(struct work_struct *work)
c848d0af 11284{
c4028958
DH
11285 struct ipw_priv *priv =
11286 container_of(work, struct ipw_priv, up);
4644151b 11287 mutex_lock(&priv->mutex);
c4028958 11288 ipw_up(priv);
4644151b 11289 mutex_unlock(&priv->mutex);
c848d0af
JK
11290}
11291
b095c381 11292static void ipw_deinit(struct ipw_priv *priv)
43f66a6c 11293{
b095c381
JK
11294 int i;
11295
11296 if (priv->status & STATUS_SCANNING) {
11297 IPW_DEBUG_INFO("Aborting scan during shutdown.\n");
11298 ipw_abort_scan(priv);
11299 }
11300
11301 if (priv->status & STATUS_ASSOCIATED) {
11302 IPW_DEBUG_INFO("Disassociating during shutdown.\n");
11303 ipw_disassociate(priv);
11304 }
11305
11306 ipw_led_shutdown(priv);
11307
11308 /* Wait up to 1s for status to change to not scanning and not
11309 * associated (disassociation can take a while for a ful 802.11
11310 * exchange */
11311 for (i = 1000; i && (priv->status &
11312 (STATUS_DISASSOCIATING |
11313 STATUS_ASSOCIATED | STATUS_SCANNING)); i--)
11314 udelay(10);
11315
11316 if (priv->status & (STATUS_DISASSOCIATING |
11317 STATUS_ASSOCIATED | STATUS_SCANNING))
11318 IPW_DEBUG_INFO("Still associated or scanning...\n");
11319 else
11320 IPW_DEBUG_INFO("Took %dms to de-init\n", 1000 - i);
11321
43f66a6c 11322 /* Attempt to disable the card */
43f66a6c 11323 ipw_send_card_disable(priv, 0);
b095c381
JK
11324
11325 priv->status &= ~STATUS_INIT;
11326}
11327
11328static void ipw_down(struct ipw_priv *priv)
11329{
11330 int exit_pending = priv->status & STATUS_EXIT_PENDING;
11331
11332 priv->status |= STATUS_EXIT_PENDING;
11333
11334 if (ipw_is_init(priv))
11335 ipw_deinit(priv);
11336
11337 /* Wipe out the EXIT_PENDING status bit if we are not actually
11338 * exiting the module */
11339 if (!exit_pending)
11340 priv->status &= ~STATUS_EXIT_PENDING;
43f66a6c
JK
11341
11342 /* tell the device to stop sending interrupts */
11343 ipw_disable_interrupts(priv);
11344
11345 /* Clear all bits but the RF Kill */
b095c381 11346 priv->status &= STATUS_RF_KILL_MASK | STATUS_EXIT_PENDING;
43f66a6c 11347 netif_carrier_off(priv->net_dev);
43f66a6c
JK
11348
11349 ipw_stop_nic(priv);
a613bffd
JK
11350
11351 ipw_led_radio_off(priv);
43f66a6c
JK
11352}
11353
c4028958 11354static void ipw_bg_down(struct work_struct *work)
c848d0af 11355{
c4028958
DH
11356 struct ipw_priv *priv =
11357 container_of(work, struct ipw_priv, down);
4644151b 11358 mutex_lock(&priv->mutex);
c4028958 11359 ipw_down(priv);
4644151b 11360 mutex_unlock(&priv->mutex);
43f66a6c
JK
11361}
11362
11363/* Called by register_netdev() */
11364static int ipw_net_init(struct net_device *dev)
11365{
11366 struct ipw_priv *priv = ieee80211_priv(dev);
4644151b 11367 mutex_lock(&priv->mutex);
43f66a6c 11368
c848d0af 11369 if (ipw_up(priv)) {
4644151b 11370 mutex_unlock(&priv->mutex);
43f66a6c 11371 return -EIO;
c848d0af 11372 }
43f66a6c 11373
4644151b 11374 mutex_unlock(&priv->mutex);
43f66a6c
JK
11375 return 0;
11376}
11377
11378/* PCI driver stuff */
11379static struct pci_device_id card_ids[] = {
11380 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2701, 0, 0, 0},
11381 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2702, 0, 0, 0},
11382 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2711, 0, 0, 0},
11383 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2712, 0, 0, 0},
11384 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2721, 0, 0, 0},
11385 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2722, 0, 0, 0},
11386 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2731, 0, 0, 0},
11387 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2732, 0, 0, 0},
11388 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2741, 0, 0, 0},
11389 {PCI_VENDOR_ID_INTEL, 0x1043, 0x103c, 0x2741, 0, 0, 0},
11390 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2742, 0, 0, 0},
11391 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2751, 0, 0, 0},
11392 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2752, 0, 0, 0},
11393 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2753, 0, 0, 0},
11394 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2754, 0, 0, 0},
11395 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2761, 0, 0, 0},
11396 {PCI_VENDOR_ID_INTEL, 0x1043, 0x8086, 0x2762, 0, 0, 0},
11397 {PCI_VENDOR_ID_INTEL, 0x104f, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0},
0edd5b44 11398 {PCI_VENDOR_ID_INTEL, 0x4220, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* BG */
a613bffd 11399 {PCI_VENDOR_ID_INTEL, 0x4221, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* BG */
0edd5b44
JG
11400 {PCI_VENDOR_ID_INTEL, 0x4223, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* ABG */
11401 {PCI_VENDOR_ID_INTEL, 0x4224, PCI_ANY_ID, PCI_ANY_ID, 0, 0, 0}, /* ABG */
bf79451e 11402
43f66a6c
JK
11403 /* required last entry */
11404 {0,}
11405};
11406
11407MODULE_DEVICE_TABLE(pci, card_ids);
11408
11409static struct attribute *ipw_sysfs_entries[] = {
11410 &dev_attr_rf_kill.attr,
11411 &dev_attr_direct_dword.attr,
11412 &dev_attr_indirect_byte.attr,
11413 &dev_attr_indirect_dword.attr,
11414 &dev_attr_mem_gpio_reg.attr,
11415 &dev_attr_command_event_reg.attr,
11416 &dev_attr_nic_type.attr,
11417 &dev_attr_status.attr,
11418 &dev_attr_cfg.attr,
b39860c6
JK
11419 &dev_attr_error.attr,
11420 &dev_attr_event_log.attr,
f6c5cb7c 11421 &dev_attr_cmd_log.attr,
43f66a6c
JK
11422 &dev_attr_eeprom_delay.attr,
11423 &dev_attr_ucode_version.attr,
11424 &dev_attr_rtc.attr,
a613bffd
JK
11425 &dev_attr_scan_age.attr,
11426 &dev_attr_led.attr,
b095c381
JK
11427 &dev_attr_speed_scan.attr,
11428 &dev_attr_net_stats.attr,
375dd244 11429 &dev_attr_channels.attr,
d685b8c2
ZY
11430#ifdef CONFIG_IPW2200_PROMISCUOUS
11431 &dev_attr_rtap_iface.attr,
11432 &dev_attr_rtap_filter.attr,
11433#endif
43f66a6c
JK
11434 NULL
11435};
11436
11437static struct attribute_group ipw_attribute_group = {
11438 .name = NULL, /* put in device directory */
0edd5b44 11439 .attrs = ipw_sysfs_entries,
43f66a6c
JK
11440};
11441
d685b8c2
ZY
11442#ifdef CONFIG_IPW2200_PROMISCUOUS
11443static int ipw_prom_open(struct net_device *dev)
11444{
11445 struct ipw_prom_priv *prom_priv = ieee80211_priv(dev);
11446 struct ipw_priv *priv = prom_priv->priv;
11447
11448 IPW_DEBUG_INFO("prom dev->open\n");
11449 netif_carrier_off(dev);
d685b8c2
ZY
11450
11451 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
11452 priv->sys_config.accept_all_data_frames = 1;
11453 priv->sys_config.accept_non_directed_frames = 1;
11454 priv->sys_config.accept_all_mgmt_bcpr = 1;
11455 priv->sys_config.accept_all_mgmt_frames = 1;
11456
11457 ipw_send_system_config(priv);
11458 }
11459
11460 return 0;
11461}
11462
11463static int ipw_prom_stop(struct net_device *dev)
11464{
11465 struct ipw_prom_priv *prom_priv = ieee80211_priv(dev);
11466 struct ipw_priv *priv = prom_priv->priv;
11467
11468 IPW_DEBUG_INFO("prom dev->stop\n");
11469
11470 if (priv->ieee->iw_mode != IW_MODE_MONITOR) {
11471 priv->sys_config.accept_all_data_frames = 0;
11472 priv->sys_config.accept_non_directed_frames = 0;
11473 priv->sys_config.accept_all_mgmt_bcpr = 0;
11474 priv->sys_config.accept_all_mgmt_frames = 0;
11475
11476 ipw_send_system_config(priv);
11477 }
11478
11479 return 0;
11480}
11481
11482static int ipw_prom_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
11483{
11484 IPW_DEBUG_INFO("prom dev->xmit\n");
d685b8c2
ZY
11485 return -EOPNOTSUPP;
11486}
11487
11488static struct net_device_stats *ipw_prom_get_stats(struct net_device *dev)
11489{
11490 struct ipw_prom_priv *prom_priv = ieee80211_priv(dev);
11491 return &prom_priv->ieee->stats;
11492}
11493
11494static int ipw_prom_alloc(struct ipw_priv *priv)
11495{
11496 int rc = 0;
11497
11498 if (priv->prom_net_dev)
11499 return -EPERM;
11500
11501 priv->prom_net_dev = alloc_ieee80211(sizeof(struct ipw_prom_priv));
11502 if (priv->prom_net_dev == NULL)
11503 return -ENOMEM;
11504
11505 priv->prom_priv = ieee80211_priv(priv->prom_net_dev);
11506 priv->prom_priv->ieee = netdev_priv(priv->prom_net_dev);
11507 priv->prom_priv->priv = priv;
11508
11509 strcpy(priv->prom_net_dev->name, "rtap%d");
3f2eeac9 11510 memcpy(priv->prom_net_dev->dev_addr, priv->mac_addr, ETH_ALEN);
d685b8c2
ZY
11511
11512 priv->prom_net_dev->type = ARPHRD_IEEE80211_RADIOTAP;
11513 priv->prom_net_dev->open = ipw_prom_open;
11514 priv->prom_net_dev->stop = ipw_prom_stop;
11515 priv->prom_net_dev->get_stats = ipw_prom_get_stats;
11516 priv->prom_net_dev->hard_start_xmit = ipw_prom_hard_start_xmit;
11517
11518 priv->prom_priv->ieee->iw_mode = IW_MODE_MONITOR;
229ce3ab 11519 SET_NETDEV_DEV(priv->prom_net_dev, &priv->pci_dev->dev);
d685b8c2
ZY
11520
11521 rc = register_netdev(priv->prom_net_dev);
11522 if (rc) {
11523 free_ieee80211(priv->prom_net_dev);
11524 priv->prom_net_dev = NULL;
11525 return rc;
11526 }
11527
11528 return 0;
11529}
11530
11531static void ipw_prom_free(struct ipw_priv *priv)
11532{
11533 if (!priv->prom_net_dev)
11534 return;
11535
11536 unregister_netdev(priv->prom_net_dev);
11537 free_ieee80211(priv->prom_net_dev);
11538
11539 priv->prom_net_dev = NULL;
11540}
11541
11542#endif
11543
11544
2ef19e63
AB
11545static int __devinit ipw_pci_probe(struct pci_dev *pdev,
11546 const struct pci_device_id *ent)
43f66a6c
JK
11547{
11548 int err = 0;
11549 struct net_device *net_dev;
11550 void __iomem *base;
11551 u32 length, val;
11552 struct ipw_priv *priv;
afbf30a2 11553 int i;
43f66a6c
JK
11554
11555 net_dev = alloc_ieee80211(sizeof(struct ipw_priv));
11556 if (net_dev == NULL) {
11557 err = -ENOMEM;
11558 goto out;
11559 }
11560
11561 priv = ieee80211_priv(net_dev);
11562 priv->ieee = netdev_priv(net_dev);
a613bffd 11563
43f66a6c
JK
11564 priv->net_dev = net_dev;
11565 priv->pci_dev = pdev;
43f66a6c 11566 ipw_debug_level = debug;
89c318ed 11567 spin_lock_init(&priv->irq_lock);
43f66a6c 11568 spin_lock_init(&priv->lock);
afbf30a2
JK
11569 for (i = 0; i < IPW_IBSS_MAC_HASH_SIZE; i++)
11570 INIT_LIST_HEAD(&priv->ibss_mac_hash[i]);
43f66a6c 11571
4644151b 11572 mutex_init(&priv->mutex);
43f66a6c
JK
11573 if (pci_enable_device(pdev)) {
11574 err = -ENODEV;
11575 goto out_free_ieee80211;
11576 }
11577
11578 pci_set_master(pdev);
11579
0e08b44e 11580 err = pci_set_dma_mask(pdev, DMA_32BIT_MASK);
bf79451e 11581 if (!err)
0e08b44e 11582 err = pci_set_consistent_dma_mask(pdev, DMA_32BIT_MASK);
43f66a6c
JK
11583 if (err) {
11584 printk(KERN_WARNING DRV_NAME ": No suitable DMA available.\n");
11585 goto out_pci_disable_device;
11586 }
11587
11588 pci_set_drvdata(pdev, priv);
11589
11590 err = pci_request_regions(pdev, DRV_NAME);
bf79451e 11591 if (err)
43f66a6c
JK
11592 goto out_pci_disable_device;
11593
bf79451e 11594 /* We disable the RETRY_TIMEOUT register (0x41) to keep
43f66a6c 11595 * PCI Tx retries from interfering with C3 CPU state */
bf79451e
JG
11596 pci_read_config_dword(pdev, 0x40, &val);
11597 if ((val & 0x0000ff00) != 0)
43f66a6c 11598 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
bf79451e 11599
43f66a6c
JK
11600 length = pci_resource_len(pdev, 0);
11601 priv->hw_len = length;
bf79451e 11602
275f165f 11603 base = pci_ioremap_bar(pdev, 0);
43f66a6c
JK
11604 if (!base) {
11605 err = -ENODEV;
11606 goto out_pci_release_regions;
11607 }
11608
11609 priv->hw_base = base;
11610 IPW_DEBUG_INFO("pci_resource_len = 0x%08x\n", length);
11611 IPW_DEBUG_INFO("pci_resource_base = %p\n", base);
11612
11613 err = ipw_setup_deferred_work(priv);
11614 if (err) {
11615 IPW_ERROR("Unable to setup deferred work\n");
11616 goto out_iounmap;
11617 }
11618
b095c381 11619 ipw_sw_reset(priv, 1);
43f66a6c 11620
1fb9df5d 11621 err = request_irq(pdev->irq, ipw_isr, IRQF_SHARED, DRV_NAME, priv);
43f66a6c
JK
11622 if (err) {
11623 IPW_ERROR("Error allocating IRQ %d\n", pdev->irq);
11624 goto out_destroy_workqueue;
11625 }
11626
43f66a6c
JK
11627 SET_NETDEV_DEV(net_dev, &pdev->dev);
11628
4644151b 11629 mutex_lock(&priv->mutex);
c848d0af 11630
43f66a6c
JK
11631 priv->ieee->hard_start_xmit = ipw_net_hard_start_xmit;
11632 priv->ieee->set_security = shim__set_security;
227d2dc1 11633 priv->ieee->is_queue_full = ipw_net_is_queue_full;
43f66a6c 11634
e43e3c1e 11635#ifdef CONFIG_IPW2200_QOS
a5cf4fe6 11636 priv->ieee->is_qos_active = ipw_is_qos_active;
3b9990cb
JK
11637 priv->ieee->handle_probe_response = ipw_handle_beacon;
11638 priv->ieee->handle_beacon = ipw_handle_probe_response;
11639 priv->ieee->handle_assoc_response = ipw_handle_assoc_response;
e43e3c1e 11640#endif /* CONFIG_IPW2200_QOS */
b095c381 11641
c848d0af
JK
11642 priv->ieee->perfect_rssi = -20;
11643 priv->ieee->worst_rssi = -85;
43f66a6c
JK
11644
11645 net_dev->open = ipw_net_open;
11646 net_dev->stop = ipw_net_stop;
11647 net_dev->init = ipw_net_init;
11648 net_dev->get_stats = ipw_net_get_stats;
11649 net_dev->set_multicast_list = ipw_net_set_multicast_list;
11650 net_dev->set_mac_address = ipw_net_set_mac_address;
97a78ca9 11651 priv->wireless_data.spy_data = &priv->ieee->spy_data;
97a78ca9 11652 net_dev->wireless_data = &priv->wireless_data;
43f66a6c
JK
11653 net_dev->wireless_handlers = &ipw_wx_handler_def;
11654 net_dev->ethtool_ops = &ipw_ethtool_ops;
11655 net_dev->irq = pdev->irq;
0edd5b44 11656 net_dev->base_addr = (unsigned long)priv->hw_base;
43f66a6c
JK
11657 net_dev->mem_start = pci_resource_start(pdev, 0);
11658 net_dev->mem_end = net_dev->mem_start + pci_resource_len(pdev, 0) - 1;
11659
11660 err = sysfs_create_group(&pdev->dev.kobj, &ipw_attribute_group);
11661 if (err) {
11662 IPW_ERROR("failed to create sysfs device attributes\n");
4644151b 11663 mutex_unlock(&priv->mutex);
43f66a6c
JK
11664 goto out_release_irq;
11665 }
11666
4644151b 11667 mutex_unlock(&priv->mutex);
43f66a6c
JK
11668 err = register_netdev(net_dev);
11669 if (err) {
11670 IPW_ERROR("failed to register network device\n");
a613bffd 11671 goto out_remove_sysfs;
43f66a6c 11672 }
48a84770 11673
d685b8c2
ZY
11674#ifdef CONFIG_IPW2200_PROMISCUOUS
11675 if (rtap_iface) {
11676 err = ipw_prom_alloc(priv);
11677 if (err) {
11678 IPW_ERROR("Failed to register promiscuous network "
11679 "device (error %d).\n", err);
11680 unregister_netdev(priv->net_dev);
11681 goto out_remove_sysfs;
11682 }
11683 }
11684#endif
11685
48a84770
HBA
11686 printk(KERN_INFO DRV_NAME ": Detected geography %s (%d 802.11bg "
11687 "channels, %d 802.11a channels)\n",
11688 priv->ieee->geo.name, priv->ieee->geo.bg_channels,
11689 priv->ieee->geo.a_channels);
11690
43f66a6c
JK
11691 return 0;
11692
a613bffd 11693 out_remove_sysfs:
43f66a6c 11694 sysfs_remove_group(&pdev->dev.kobj, &ipw_attribute_group);
0edd5b44 11695 out_release_irq:
43f66a6c 11696 free_irq(pdev->irq, priv);
0edd5b44 11697 out_destroy_workqueue:
43f66a6c
JK
11698 destroy_workqueue(priv->workqueue);
11699 priv->workqueue = NULL;
0edd5b44 11700 out_iounmap:
43f66a6c 11701 iounmap(priv->hw_base);
0edd5b44 11702 out_pci_release_regions:
43f66a6c 11703 pci_release_regions(pdev);
0edd5b44 11704 out_pci_disable_device:
43f66a6c
JK
11705 pci_disable_device(pdev);
11706 pci_set_drvdata(pdev, NULL);
0edd5b44 11707 out_free_ieee80211:
43f66a6c 11708 free_ieee80211(priv->net_dev);
0edd5b44 11709 out:
43f66a6c
JK
11710 return err;
11711}
11712
2ef19e63 11713static void __devexit ipw_pci_remove(struct pci_dev *pdev)
43f66a6c
JK
11714{
11715 struct ipw_priv *priv = pci_get_drvdata(pdev);
afbf30a2
JK
11716 struct list_head *p, *q;
11717 int i;
b095c381 11718
43f66a6c
JK
11719 if (!priv)
11720 return;
11721
4644151b 11722 mutex_lock(&priv->mutex);
43f66a6c 11723
afbf30a2 11724 priv->status |= STATUS_EXIT_PENDING;
43f66a6c 11725 ipw_down(priv);
43f66a6c
JK
11726 sysfs_remove_group(&pdev->dev.kobj, &ipw_attribute_group);
11727
4644151b 11728 mutex_unlock(&priv->mutex);
43f66a6c
JK
11729
11730 unregister_netdev(priv->net_dev);
11731
11732 if (priv->rxq) {
11733 ipw_rx_queue_free(priv, priv->rxq);
11734 priv->rxq = NULL;
11735 }
11736 ipw_tx_queue_free(priv);
11737
f6c5cb7c
JK
11738 if (priv->cmdlog) {
11739 kfree(priv->cmdlog);
11740 priv->cmdlog = NULL;
11741 }
43f66a6c
JK
11742 /* ipw_down will ensure that there is no more pending work
11743 * in the workqueue's, so we can safely remove them now. */
a613bffd
JK
11744 cancel_delayed_work(&priv->adhoc_check);
11745 cancel_delayed_work(&priv->gather_stats);
11746 cancel_delayed_work(&priv->request_scan);
ea177305
DW
11747 cancel_delayed_work(&priv->request_direct_scan);
11748 cancel_delayed_work(&priv->request_passive_scan);
0b531676 11749 cancel_delayed_work(&priv->scan_event);
a613bffd
JK
11750 cancel_delayed_work(&priv->rf_kill);
11751 cancel_delayed_work(&priv->scan_check);
11752 destroy_workqueue(priv->workqueue);
11753 priv->workqueue = NULL;
43f66a6c 11754
afbf30a2
JK
11755 /* Free MAC hash list for ADHOC */
11756 for (i = 0; i < IPW_IBSS_MAC_HASH_SIZE; i++) {
11757 list_for_each_safe(p, q, &priv->ibss_mac_hash[i]) {
afbf30a2 11758 list_del(p);
489f4458 11759 kfree(list_entry(p, struct ipw_ibss_seq, list));
afbf30a2
JK
11760 }
11761 }
11762
8f760780
JJ
11763 kfree(priv->error);
11764 priv->error = NULL;
43f66a6c 11765
d685b8c2
ZY
11766#ifdef CONFIG_IPW2200_PROMISCUOUS
11767 ipw_prom_free(priv);
11768#endif
11769
43f66a6c
JK
11770 free_irq(pdev->irq, priv);
11771 iounmap(priv->hw_base);
11772 pci_release_regions(pdev);
11773 pci_disable_device(pdev);
11774 pci_set_drvdata(pdev, NULL);
11775 free_ieee80211(priv->net_dev);
afbf30a2 11776 free_firmware();
43f66a6c
JK
11777}
11778
43f66a6c 11779#ifdef CONFIG_PM
583a4e88 11780static int ipw_pci_suspend(struct pci_dev *pdev, pm_message_t state)
43f66a6c
JK
11781{
11782 struct ipw_priv *priv = pci_get_drvdata(pdev);
11783 struct net_device *dev = priv->net_dev;
11784
11785 printk(KERN_INFO "%s: Going into suspend...\n", dev->name);
11786
0edd5b44 11787 /* Take down the device; powers it off, etc. */
43f66a6c
JK
11788 ipw_down(priv);
11789
11790 /* Remove the PRESENT state of the device */
11791 netif_device_detach(dev);
11792
43f66a6c 11793 pci_save_state(pdev);
43f66a6c 11794 pci_disable_device(pdev);
583a4e88 11795 pci_set_power_state(pdev, pci_choose_state(pdev, state));
bf79451e 11796
43f66a6c
JK
11797 return 0;
11798}
11799
11800static int ipw_pci_resume(struct pci_dev *pdev)
11801{
11802 struct ipw_priv *priv = pci_get_drvdata(pdev);
11803 struct net_device *dev = priv->net_dev;
02e0e5e9 11804 int err;
43f66a6c 11805 u32 val;
bf79451e 11806
43f66a6c
JK
11807 printk(KERN_INFO "%s: Coming out of suspend...\n", dev->name);
11808
ea2b26e0 11809 pci_set_power_state(pdev, PCI_D0);
02e0e5e9
JL
11810 err = pci_enable_device(pdev);
11811 if (err) {
11812 printk(KERN_ERR "%s: pci_enable_device failed on resume\n",
11813 dev->name);
11814 return err;
11815 }
43f66a6c 11816 pci_restore_state(pdev);
ea2b26e0 11817
43f66a6c
JK
11818 /*
11819 * Suspend/Resume resets the PCI configuration space, so we have to
11820 * re-disable the RETRY_TIMEOUT register (0x41) to keep PCI Tx retries
11821 * from interfering with C3 CPU state. pci_restore_state won't help
11822 * here since it only restores the first 64 bytes pci config header.
11823 */
bf79451e
JG
11824 pci_read_config_dword(pdev, 0x40, &val);
11825 if ((val & 0x0000ff00) != 0)
43f66a6c
JK
11826 pci_write_config_dword(pdev, 0x40, val & 0xffff00ff);
11827
11828 /* Set the device back into the PRESENT state; this will also wake
11829 * the queue of needed */
11830 netif_device_attach(dev);
11831
11832 /* Bring the device back up */
11833 queue_work(priv->workqueue, &priv->up);
bf79451e 11834
43f66a6c
JK
11835 return 0;
11836}
11837#endif
11838
c8c22c94
ZY
11839static void ipw_pci_shutdown(struct pci_dev *pdev)
11840{
11841 struct ipw_priv *priv = pci_get_drvdata(pdev);
11842
11843 /* Take down the device; powers it off, etc. */
11844 ipw_down(priv);
11845
11846 pci_disable_device(pdev);
11847}
11848
43f66a6c
JK
11849/* driver initialization stuff */
11850static struct pci_driver ipw_driver = {
11851 .name = DRV_NAME,
11852 .id_table = card_ids,
11853 .probe = ipw_pci_probe,
11854 .remove = __devexit_p(ipw_pci_remove),
11855#ifdef CONFIG_PM
11856 .suspend = ipw_pci_suspend,
11857 .resume = ipw_pci_resume,
11858#endif
c8c22c94 11859 .shutdown = ipw_pci_shutdown,
43f66a6c
JK
11860};
11861
11862static int __init ipw_init(void)
11863{
11864 int ret;
11865
11866 printk(KERN_INFO DRV_NAME ": " DRV_DESCRIPTION ", " DRV_VERSION "\n");
11867 printk(KERN_INFO DRV_NAME ": " DRV_COPYRIGHT "\n");
11868
29917620 11869 ret = pci_register_driver(&ipw_driver);
43f66a6c
JK
11870 if (ret) {
11871 IPW_ERROR("Unable to initialize PCI module\n");
11872 return ret;
11873 }
11874
0edd5b44 11875 ret = driver_create_file(&ipw_driver.driver, &driver_attr_debug_level);
43f66a6c
JK
11876 if (ret) {
11877 IPW_ERROR("Unable to create driver sysfs file\n");
11878 pci_unregister_driver(&ipw_driver);
11879 return ret;
11880 }
11881
11882 return ret;
11883}
11884
11885static void __exit ipw_exit(void)
11886{
11887 driver_remove_file(&ipw_driver.driver, &driver_attr_debug_level);
11888 pci_unregister_driver(&ipw_driver);
11889}
11890
11891module_param(disable, int, 0444);
11892MODULE_PARM_DESC(disable, "manually disable the radio (default 0 [radio on])");
11893
11894module_param(associate, int, 0444);
5c7f9b73 11895MODULE_PARM_DESC(associate, "auto associate when scanning (default off)");
43f66a6c
JK
11896
11897module_param(auto_create, int, 0444);
11898MODULE_PARM_DESC(auto_create, "auto create adhoc network (default on)");
11899
a613bffd 11900module_param(led, int, 0444);
61a2d07d 11901MODULE_PARM_DESC(led, "enable led control on some systems (default 0 off)");
a613bffd 11902
43f66a6c
JK
11903module_param(debug, int, 0444);
11904MODULE_PARM_DESC(debug, "debug output mask");
11905
11906module_param(channel, int, 0444);
bf79451e 11907MODULE_PARM_DESC(channel, "channel to limit associate to (default 0 [ANY])");
43f66a6c 11908
d685b8c2
ZY
11909#ifdef CONFIG_IPW2200_PROMISCUOUS
11910module_param(rtap_iface, int, 0444);
11911MODULE_PARM_DESC(rtap_iface, "create the rtap interface (1 - create, default 0)");
11912#endif
11913
e43e3c1e 11914#ifdef CONFIG_IPW2200_QOS
b095c381
JK
11915module_param(qos_enable, int, 0444);
11916MODULE_PARM_DESC(qos_enable, "enable all QoS functionalitis");
11917
11918module_param(qos_burst_enable, int, 0444);
11919MODULE_PARM_DESC(qos_burst_enable, "enable QoS burst mode");
11920
11921module_param(qos_no_ack_mask, int, 0444);
11922MODULE_PARM_DESC(qos_no_ack_mask, "mask Tx_Queue to no ack");
43f66a6c 11923
b095c381
JK
11924module_param(burst_duration_CCK, int, 0444);
11925MODULE_PARM_DESC(burst_duration_CCK, "set CCK burst value");
11926
11927module_param(burst_duration_OFDM, int, 0444);
11928MODULE_PARM_DESC(burst_duration_OFDM, "set OFDM burst value");
e43e3c1e 11929#endif /* CONFIG_IPW2200_QOS */
b095c381
JK
11930
11931#ifdef CONFIG_IPW2200_MONITOR
43f66a6c
JK
11932module_param(mode, int, 0444);
11933MODULE_PARM_DESC(mode, "network mode (0=BSS,1=IBSS,2=Monitor)");
11934#else
11935module_param(mode, int, 0444);
11936MODULE_PARM_DESC(mode, "network mode (0=BSS,1=IBSS)");
11937#endif
11938
810dabd4
ZY
11939module_param(bt_coexist, int, 0444);
11940MODULE_PARM_DESC(bt_coexist, "enable bluetooth coexistence (default off)");
11941
b095c381 11942module_param(hwcrypto, int, 0444);
bde37d03 11943MODULE_PARM_DESC(hwcrypto, "enable hardware crypto (default off)");
b095c381 11944
f6c5cb7c
JK
11945module_param(cmdlog, int, 0444);
11946MODULE_PARM_DESC(cmdlog,
11947 "allocate a ring buffer for logging firmware commands");
11948
4bfdb91d
ZY
11949module_param(roaming, int, 0444);
11950MODULE_PARM_DESC(roaming, "enable roaming support (default on)");
11951
d2b83e12
ZY
11952module_param(antenna, int, 0444);
11953MODULE_PARM_DESC(antenna, "select antenna 1=Main, 3=Aux, default 0 [both], 2=slow_diversity (choose the one with lower background noise)");
11954
43f66a6c
JK
11955module_exit(ipw_exit);
11956module_init(ipw_init);