2 * Atheros AR9170 driver
4 * mac80211 interaction code
6 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
7 * Copyright 2009, Christian Lamparter <chunkeey@web.de>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; see the file COPYING. If not, see
21 * http://www.gnu.org/licenses/.
23 * This file incorporates work covered by the following copyright and
25 * Copyright (c) 2007-2008 Atheros Communications, Inc.
27 * Permission to use, copy, modify, and/or distribute this software for any
28 * purpose with or without fee is hereby granted, provided that the above
29 * copyright notice and this permission notice appear in all copies.
31 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
32 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
33 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
34 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
35 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
36 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
37 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
40 #include <linux/init.h>
41 #include <linux/module.h>
42 #include <linux/etherdevice.h>
43 #include <net/mac80211.h>
48 static int modparam_nohwcrypt
;
49 module_param_named(nohwcrypt
, modparam_nohwcrypt
, bool, S_IRUGO
);
50 MODULE_PARM_DESC(nohwcrypt
, "Disable hardware encryption.");
52 #define RATE(_bitrate, _hw_rate, _txpidx, _flags) { \
53 .bitrate = (_bitrate), \
55 .hw_value = (_hw_rate) | (_txpidx) << 4, \
58 static struct ieee80211_rate __ar9170_ratetable
[] = {
60 RATE(20, 1, 1, IEEE80211_RATE_SHORT_PREAMBLE
),
61 RATE(55, 2, 2, IEEE80211_RATE_SHORT_PREAMBLE
),
62 RATE(110, 3, 3, IEEE80211_RATE_SHORT_PREAMBLE
),
74 #define ar9170_g_ratetable (__ar9170_ratetable + 0)
75 #define ar9170_g_ratetable_size 12
76 #define ar9170_a_ratetable (__ar9170_ratetable + 4)
77 #define ar9170_a_ratetable_size 8
80 * NB: The hw_value is used as an index into the ar9170_phy_freq_params
81 * array in phy.c so that we don't have to do frequency lookups!
83 #define CHAN(_freq, _idx) { \
84 .center_freq = (_freq), \
86 .max_power = 18, /* XXX */ \
89 static struct ieee80211_channel ar9170_2ghz_chantable
[] = {
106 static struct ieee80211_channel ar9170_5ghz_chantable
[] = {
145 #define AR9170_HT_CAP \
147 .ht_supported = true, \
148 .cap = IEEE80211_HT_CAP_MAX_AMSDU | \
149 IEEE80211_HT_CAP_SUP_WIDTH_20_40 | \
150 IEEE80211_HT_CAP_SGI_40 | \
151 IEEE80211_HT_CAP_DSSSCCK40 | \
152 IEEE80211_HT_CAP_SM_PS, \
154 .ampdu_density = 6, \
156 .rx_mask = { 0xFF, 0xFF, 0, 0, 0, 0, 0, 0, 0, 0, }, \
160 static struct ieee80211_supported_band ar9170_band_2GHz
= {
161 .channels
= ar9170_2ghz_chantable
,
162 .n_channels
= ARRAY_SIZE(ar9170_2ghz_chantable
),
163 .bitrates
= ar9170_g_ratetable
,
164 .n_bitrates
= ar9170_g_ratetable_size
,
165 .ht_cap
= AR9170_HT_CAP
,
168 static struct ieee80211_supported_band ar9170_band_5GHz
= {
169 .channels
= ar9170_5ghz_chantable
,
170 .n_channels
= ARRAY_SIZE(ar9170_5ghz_chantable
),
171 .bitrates
= ar9170_a_ratetable
,
172 .n_bitrates
= ar9170_a_ratetable_size
,
173 .ht_cap
= AR9170_HT_CAP
,
176 #ifdef AR9170_QUEUE_DEBUG
178 * In case some wants works with AR9170's crazy tx_status queueing techniques.
179 * He might need this rather useful probing function.
181 * NOTE: caller must hold the queue's spinlock!
184 static void ar9170_print_txheader(struct ar9170
*ar
, struct sk_buff
*skb
)
186 struct ar9170_tx_control
*txc
= (void *) skb
->data
;
187 struct ieee80211_hdr
*hdr
= (void *)txc
->frame_data
;
189 printk(KERN_DEBUG
"%s: => FRAME [skb:%p, queue:%d, DA:[%pM] "
190 "mac_control:%04x, phy_control:%08x]\n",
191 wiphy_name(ar
->hw
->wiphy
), skb
, skb_get_queue_mapping(skb
),
192 ieee80211_get_DA(hdr
), le16_to_cpu(txc
->mac_control
),
193 le32_to_cpu(txc
->phy_control
));
196 static void ar9170_dump_station_tx_status_queue(struct ar9170
*ar
,
197 struct sk_buff_head
*queue
)
202 printk(KERN_DEBUG
"---[ cut here ]---\n");
203 printk(KERN_DEBUG
"%s: %d entries in tx_status queue.\n",
204 wiphy_name(ar
->hw
->wiphy
), skb_queue_len(queue
));
206 skb_queue_walk(queue
, skb
) {
207 struct ar9170_tx_control
*txc
= (void *) skb
->data
;
208 struct ieee80211_hdr
*hdr
= (void *)txc
->frame_data
;
210 printk(KERN_DEBUG
"index:%d => \n", i
);
211 ar9170_print_txheader(ar
, skb
);
213 printk(KERN_DEBUG
"---[ end ]---\n");
215 #endif /* AR9170_QUEUE_DEBUG */
217 void ar9170_handle_tx_status(struct ar9170
*ar
, struct sk_buff
*skb
,
218 bool valid_status
, u16 tx_status
)
220 struct ieee80211_tx_info
*txinfo
;
221 unsigned int retries
= 0, queue
= skb_get_queue_mapping(skb
);
224 spin_lock_irqsave(&ar
->tx_stats_lock
, flags
);
225 ar
->tx_stats
[queue
].len
--;
226 if (ieee80211_queue_stopped(ar
->hw
, queue
))
227 ieee80211_wake_queue(ar
->hw
, queue
);
228 spin_unlock_irqrestore(&ar
->tx_stats_lock
, flags
);
230 txinfo
= IEEE80211_SKB_CB(skb
);
231 ieee80211_tx_info_clear_status(txinfo
);
234 case AR9170_TX_STATUS_RETRY
:
236 case AR9170_TX_STATUS_COMPLETE
:
237 txinfo
->flags
|= IEEE80211_TX_STAT_ACK
;
240 case AR9170_TX_STATUS_FAILED
:
241 retries
= ar
->hw
->conf
.long_frame_max_tx_count
;
245 printk(KERN_ERR
"%s: invalid tx_status response (%x).\n",
246 wiphy_name(ar
->hw
->wiphy
), tx_status
);
251 txinfo
->status
.rates
[0].count
= retries
+ 1;
253 skb_pull(skb
, sizeof(struct ar9170_tx_control
));
254 ieee80211_tx_status_irqsafe(ar
->hw
, skb
);
257 static struct sk_buff
*ar9170_find_skb_in_queue(struct ar9170
*ar
,
260 struct sk_buff_head
*q
)
265 spin_lock_irqsave(&q
->lock
, flags
);
266 skb_queue_walk(q
, skb
) {
267 struct ar9170_tx_control
*txc
= (void *) skb
->data
;
268 struct ieee80211_hdr
*hdr
= (void *) txc
->frame_data
;
269 u32 txc_queue
= (le32_to_cpu(txc
->phy_control
) &
270 AR9170_TX_PHY_QOS_MASK
) >>
271 AR9170_TX_PHY_QOS_SHIFT
;
273 if ((queue
!= txc_queue
) ||
274 (compare_ether_addr(ieee80211_get_DA(hdr
), mac
)))
277 __skb_unlink(skb
, q
);
278 spin_unlock_irqrestore(&q
->lock
, flags
);
281 spin_unlock_irqrestore(&q
->lock
, flags
);
285 static struct sk_buff
*ar9170_find_queued_skb(struct ar9170
*ar
, const u8
*mac
,
288 struct ieee80211_sta
*sta
;
292 * Unfortunately, the firmware does not tell to which (queued) frame
293 * this transmission status report belongs to.
295 * So we have to make risky guesses - with the scarce information
296 * the firmware provided (-> destination MAC, and phy_control) -
297 * and hope that we picked the right one...
300 sta
= ieee80211_find_sta(ar
->hw
, mac
);
303 struct ar9170_sta_info
*sta_priv
= (void *) sta
->drv_priv
;
304 skb
= skb_dequeue(&sta_priv
->tx_status
[queue
]);
311 /* scan the waste queue for candidates */
312 skb
= ar9170_find_skb_in_queue(ar
, mac
, queue
,
313 &ar
->global_tx_status_waste
);
315 /* so it still _must_ be in the global list. */
316 skb
= ar9170_find_skb_in_queue(ar
, mac
, queue
,
317 &ar
->global_tx_status
);
320 #ifdef AR9170_QUEUE_DEBUG
321 if (unlikely((!skb
) && net_ratelimit())) {
322 printk(KERN_ERR
"%s: ESS:[%pM] does not have any "
323 "outstanding frames in this queue (%d).\n",
324 wiphy_name(ar
->hw
->wiphy
), mac
, queue
);
326 #endif /* AR9170_QUEUE_DEBUG */
331 * This worker tries to keep the global tx_status queue empty.
332 * So we can guarantee that incoming tx_status reports for
333 * unregistered stations are always synced with the actual
334 * frame - which we think - belongs to.
337 static void ar9170_tx_status_janitor(struct work_struct
*work
)
339 struct ar9170
*ar
= container_of(work
, struct ar9170
,
340 tx_status_janitor
.work
);
343 if (unlikely(!IS_STARTED(ar
)))
346 mutex_lock(&ar
->mutex
);
347 /* recycle the garbage back to mac80211... one by one. */
348 while ((skb
= skb_dequeue(&ar
->global_tx_status_waste
))) {
349 #ifdef AR9170_QUEUE_DEBUG
350 printk(KERN_DEBUG
"%s: dispose queued frame =>\n",
351 wiphy_name(ar
->hw
->wiphy
));
352 ar9170_print_txheader(ar
, skb
);
353 #endif /* AR9170_QUEUE_DEBUG */
354 ar9170_handle_tx_status(ar
, skb
, false,
355 AR9170_TX_STATUS_FAILED
);
358 while ((skb
= skb_dequeue(&ar
->global_tx_status
))) {
359 #ifdef AR9170_QUEUE_DEBUG
360 printk(KERN_DEBUG
"%s: moving frame into waste queue =>\n",
361 wiphy_name(ar
->hw
->wiphy
));
363 ar9170_print_txheader(ar
, skb
);
364 #endif /* AR9170_QUEUE_DEBUG */
365 skb_queue_tail(&ar
->global_tx_status_waste
, skb
);
368 /* recall the janitor in 100ms - if there's garbage in the can. */
369 if (skb_queue_len(&ar
->global_tx_status_waste
) > 0)
370 queue_delayed_work(ar
->hw
->workqueue
, &ar
->tx_status_janitor
,
371 msecs_to_jiffies(100));
373 mutex_unlock(&ar
->mutex
);
376 static void ar9170_handle_command_response(struct ar9170
*ar
,
379 struct ar9170_cmd_response
*cmd
= (void *) buf
;
381 if ((cmd
->type
& 0xc0) != 0xc0) {
382 ar
->callback_cmd(ar
, len
, buf
);
386 /* hardware event handlers */
390 * TX status notification:
391 * bytes: 0c c1 XX YY M1 M2 M3 M4 M5 M6 R4 R3 R2 R1 S2 S1
395 * M1-M6 is the MAC address
396 * R1-R4 is the transmit rate
397 * S1-S2 is the transmit status
401 u32 queue
= (le32_to_cpu(cmd
->tx_status
.rate
) &
402 AR9170_TX_PHY_QOS_MASK
) >> AR9170_TX_PHY_QOS_SHIFT
;
404 skb
= ar9170_find_queued_skb(ar
, cmd
->tx_status
.dst
, queue
);
408 ar9170_handle_tx_status(ar
, skb
, true,
409 le16_to_cpu(cmd
->tx_status
.status
));
417 if (ar
->vif
&& ar
->vif
->type
== NL80211_IFTYPE_AP
)
418 queue_work(ar
->hw
->workqueue
, &ar
->beacon_work
);
423 * (IBSS) beacon send notification
424 * bytes: 04 c2 XX YY B4 B3 B2 B1
428 * B1-B4 "should" be the number of send out beacons.
433 /* End of Atim Window */
438 /* BlockACK events */
442 /* Watchdog Interrupt */
446 /* retransmission issue / SIFS/EIFS collision ?! */
450 printk(KERN_INFO
"received unhandled event %x\n", cmd
->type
);
451 print_hex_dump_bytes("dump:", DUMP_PREFIX_NONE
, buf
, len
);
456 static void ar9170_rx_reset_rx_mpdu(struct ar9170
*ar
)
458 memset(&ar
->rx_mpdu
.plcp
, 0, sizeof(struct ar9170_rx_head
));
459 ar
->rx_mpdu
.has_plcp
= false;
462 static int ar9170_nag_limiter(struct ar9170
*ar
)
467 * we expect all sorts of errors in promiscuous mode.
468 * don't bother with it, it's OK!
470 if (ar
->sniffer_enabled
)
474 * only go for frequent errors! The hardware tends to
475 * do some stupid thing once in a while under load, in
476 * noisy environments or just for fun!
478 if (time_before(jiffies
, ar
->bad_hw_nagger
) && net_ratelimit())
479 print_message
= true;
481 print_message
= false;
483 /* reset threshold for "once in a while" */
484 ar
->bad_hw_nagger
= jiffies
+ HZ
/ 4;
485 return print_message
;
488 static int ar9170_rx_mac_status(struct ar9170
*ar
,
489 struct ar9170_rx_head
*head
,
490 struct ar9170_rx_macstatus
*mac
,
491 struct ieee80211_rx_status
*status
)
495 BUILD_BUG_ON(sizeof(struct ar9170_rx_head
) != 12);
496 BUILD_BUG_ON(sizeof(struct ar9170_rx_macstatus
) != 4);
499 if (error
& AR9170_RX_ERROR_MMIC
) {
500 status
->flag
|= RX_FLAG_MMIC_ERROR
;
501 error
&= ~AR9170_RX_ERROR_MMIC
;
504 if (error
& AR9170_RX_ERROR_PLCP
) {
505 status
->flag
|= RX_FLAG_FAILED_PLCP_CRC
;
506 error
&= ~AR9170_RX_ERROR_PLCP
;
508 if (!(ar
->filter_state
& FIF_PLCPFAIL
))
512 if (error
& AR9170_RX_ERROR_FCS
) {
513 status
->flag
|= RX_FLAG_FAILED_FCS_CRC
;
514 error
&= ~AR9170_RX_ERROR_FCS
;
516 if (!(ar
->filter_state
& FIF_FCSFAIL
))
520 decrypt
= ar9170_get_decrypt_type(mac
);
521 if (!(decrypt
& AR9170_RX_ENC_SOFTWARE
) &&
522 decrypt
!= AR9170_ENC_ALG_NONE
)
523 status
->flag
|= RX_FLAG_DECRYPTED
;
525 /* ignore wrong RA errors */
526 error
&= ~AR9170_RX_ERROR_WRONG_RA
;
528 if (error
& AR9170_RX_ERROR_DECRYPT
) {
529 error
&= ~AR9170_RX_ERROR_DECRYPT
;
531 * Rx decryption is done in place,
532 * the original data is lost anyway.
538 /* drop any other error frames */
539 if (unlikely(error
)) {
540 /* TODO: update netdevice's RX dropped/errors statistics */
542 if (ar9170_nag_limiter(ar
))
543 printk(KERN_DEBUG
"%s: received frame with "
544 "suspicious error code (%#x).\n",
545 wiphy_name(ar
->hw
->wiphy
), error
);
550 status
->band
= ar
->channel
->band
;
551 status
->freq
= ar
->channel
->center_freq
;
553 switch (mac
->status
& AR9170_RX_STATUS_MODULATION_MASK
) {
554 case AR9170_RX_STATUS_MODULATION_CCK
:
555 if (mac
->status
& AR9170_RX_STATUS_SHORT_PREAMBLE
)
556 status
->flag
|= RX_FLAG_SHORTPRE
;
557 switch (head
->plcp
[0]) {
559 status
->rate_idx
= 0;
562 status
->rate_idx
= 1;
565 status
->rate_idx
= 2;
568 status
->rate_idx
= 3;
571 if (ar9170_nag_limiter(ar
))
572 printk(KERN_ERR
"%s: invalid plcp cck rate "
573 "(%x).\n", wiphy_name(ar
->hw
->wiphy
),
579 case AR9170_RX_STATUS_MODULATION_OFDM
:
580 switch (head
->plcp
[0] & 0xf) {
582 status
->rate_idx
= 0;
585 status
->rate_idx
= 1;
588 status
->rate_idx
= 2;
591 status
->rate_idx
= 3;
594 status
->rate_idx
= 4;
597 status
->rate_idx
= 5;
600 status
->rate_idx
= 6;
603 status
->rate_idx
= 7;
606 if (ar9170_nag_limiter(ar
))
607 printk(KERN_ERR
"%s: invalid plcp ofdm rate "
608 "(%x).\n", wiphy_name(ar
->hw
->wiphy
),
612 if (status
->band
== IEEE80211_BAND_2GHZ
)
613 status
->rate_idx
+= 4;
616 case AR9170_RX_STATUS_MODULATION_HT
:
617 if (head
->plcp
[3] & 0x80)
618 status
->flag
|= RX_FLAG_40MHZ
;
619 if (head
->plcp
[6] & 0x80)
620 status
->flag
|= RX_FLAG_SHORT_GI
;
622 status
->rate_idx
= clamp(0, 75, head
->plcp
[6] & 0x7f);
623 status
->flag
|= RX_FLAG_HT
;
626 case AR9170_RX_STATUS_MODULATION_DUPOFDM
:
628 if (ar9170_nag_limiter(ar
))
629 printk(KERN_ERR
"%s: invalid modulation\n",
630 wiphy_name(ar
->hw
->wiphy
));
637 static void ar9170_rx_phy_status(struct ar9170
*ar
,
638 struct ar9170_rx_phystatus
*phy
,
639 struct ieee80211_rx_status
*status
)
643 BUILD_BUG_ON(sizeof(struct ar9170_rx_phystatus
) != 20);
645 for (i
= 0; i
< 3; i
++)
646 if (phy
->rssi
[i
] != 0x80)
647 status
->antenna
|= BIT(i
);
649 /* post-process RSSI */
650 for (i
= 0; i
< 7; i
++)
651 if (phy
->rssi
[i
] & 0x80)
652 phy
->rssi
[i
] = ((phy
->rssi
[i
] & 0x7f) + 1) & 0x7f;
654 /* TODO: we could do something with phy_errors */
655 status
->signal
= ar
->noise
[0] + phy
->rssi_combined
;
656 status
->noise
= ar
->noise
[0];
659 static struct sk_buff
*ar9170_rx_copy_data(u8
*buf
, int len
)
663 struct ieee80211_hdr
*hdr
= (void *) buf
;
665 if (ieee80211_is_data_qos(hdr
->frame_control
)) {
666 u8
*qc
= ieee80211_get_qos_ctl(hdr
);
667 reserved
+= NET_IP_ALIGN
;
669 if (*qc
& IEEE80211_QOS_CONTROL_A_MSDU_PRESENT
)
670 reserved
+= NET_IP_ALIGN
;
673 if (ieee80211_has_a4(hdr
->frame_control
))
674 reserved
+= NET_IP_ALIGN
;
676 reserved
= 32 + (reserved
& NET_IP_ALIGN
);
678 skb
= dev_alloc_skb(len
+ reserved
);
680 skb_reserve(skb
, reserved
);
681 memcpy(skb_put(skb
, len
), buf
, len
);
688 * If the frame alignment is right (or the kernel has
689 * CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS), and there
690 * is only a single MPDU in the USB frame, then we could
691 * submit to mac80211 the SKB directly. However, since
692 * there may be multiple packets in one SKB in stream
693 * mode, and we need to observe the proper ordering,
694 * this is non-trivial.
697 static void ar9170_handle_mpdu(struct ar9170
*ar
, u8
*buf
, int len
)
699 struct ar9170_rx_head
*head
;
700 struct ar9170_rx_macstatus
*mac
;
701 struct ar9170_rx_phystatus
*phy
= NULL
;
702 struct ieee80211_rx_status status
;
706 if (unlikely(!IS_STARTED(ar
) || len
< (sizeof(*mac
))))
710 mpdu_len
= len
- sizeof(*mac
);
712 mac
= (void *)(buf
+ mpdu_len
);
713 if (unlikely(mac
->error
& AR9170_RX_ERROR_FATAL
)) {
714 /* this frame is too damaged and can't be used - drop it */
719 switch (mac
->status
& AR9170_RX_STATUS_MPDU_MASK
) {
720 case AR9170_RX_STATUS_MPDU_FIRST
:
721 /* first mpdu packet has the plcp header */
722 if (likely(mpdu_len
>= sizeof(struct ar9170_rx_head
))) {
724 memcpy(&ar
->rx_mpdu
.plcp
, (void *) buf
,
725 sizeof(struct ar9170_rx_head
));
727 mpdu_len
-= sizeof(struct ar9170_rx_head
);
728 buf
+= sizeof(struct ar9170_rx_head
);
729 ar
->rx_mpdu
.has_plcp
= true;
731 if (ar9170_nag_limiter(ar
))
732 printk(KERN_ERR
"%s: plcp info is clipped.\n",
733 wiphy_name(ar
->hw
->wiphy
));
738 case AR9170_RX_STATUS_MPDU_LAST
:
739 /* last mpdu has a extra tail with phy status information */
741 if (likely(mpdu_len
>= sizeof(struct ar9170_rx_phystatus
))) {
742 mpdu_len
-= sizeof(struct ar9170_rx_phystatus
);
743 phy
= (void *)(buf
+ mpdu_len
);
745 if (ar9170_nag_limiter(ar
))
746 printk(KERN_ERR
"%s: frame tail is clipped.\n",
747 wiphy_name(ar
->hw
->wiphy
));
751 case AR9170_RX_STATUS_MPDU_MIDDLE
:
752 /* middle mpdus are just data */
753 if (unlikely(!ar
->rx_mpdu
.has_plcp
)) {
754 if (!ar9170_nag_limiter(ar
))
757 printk(KERN_ERR
"%s: rx stream did not start "
758 "with a first_mpdu frame tag.\n",
759 wiphy_name(ar
->hw
->wiphy
));
764 head
= &ar
->rx_mpdu
.plcp
;
767 case AR9170_RX_STATUS_MPDU_SINGLE
:
768 /* single mpdu - has plcp (head) and phy status (tail) */
771 mpdu_len
-= sizeof(struct ar9170_rx_head
);
772 mpdu_len
-= sizeof(struct ar9170_rx_phystatus
);
774 buf
+= sizeof(struct ar9170_rx_head
);
775 phy
= (void *)(buf
+ mpdu_len
);
783 if (unlikely(mpdu_len
< FCS_LEN
))
786 memset(&status
, 0, sizeof(status
));
787 if (unlikely(ar9170_rx_mac_status(ar
, head
, mac
, &status
)))
791 ar9170_rx_phy_status(ar
, phy
, &status
);
793 skb
= ar9170_rx_copy_data(buf
, mpdu_len
);
795 ieee80211_rx_irqsafe(ar
->hw
, skb
, &status
);
798 void ar9170_rx(struct ar9170
*ar
, struct sk_buff
*skb
)
800 unsigned int i
, tlen
, resplen
, wlen
= 0, clen
= 0;
807 clen
= tbuf
[1] << 8 | tbuf
[0];
808 wlen
= ALIGN(clen
, 4);
810 /* check if this is stream has a valid tag.*/
811 if (tbuf
[2] != 0 || tbuf
[3] != 0x4e) {
813 * TODO: handle the highly unlikely event that the
814 * corrupted stream has the TAG at the right position.
817 /* check if the frame can be repaired. */
818 if (!ar
->rx_failover_missing
) {
819 /* this is no "short read". */
820 if (ar9170_nag_limiter(ar
)) {
821 printk(KERN_ERR
"%s: missing tag!\n",
822 wiphy_name(ar
->hw
->wiphy
));
828 if (ar
->rx_failover_missing
> tlen
) {
829 if (ar9170_nag_limiter(ar
)) {
830 printk(KERN_ERR
"%s: possible multi "
831 "stream corruption!\n",
832 wiphy_name(ar
->hw
->wiphy
));
838 memcpy(skb_put(ar
->rx_failover
, tlen
), tbuf
, tlen
);
839 ar
->rx_failover_missing
-= tlen
;
841 if (ar
->rx_failover_missing
<= 0) {
843 * nested ar9170_rx call!
844 * termination is guranteed, even when the
845 * combined frame also have a element with
849 ar
->rx_failover_missing
= 0;
850 ar9170_rx(ar
, ar
->rx_failover
);
852 skb_reset_tail_pointer(ar
->rx_failover
);
853 skb_trim(ar
->rx_failover
, 0);
859 /* check if stream is clipped */
860 if (wlen
> tlen
- 4) {
861 if (ar
->rx_failover_missing
) {
862 /* TODO: handle double stream corruption. */
863 if (ar9170_nag_limiter(ar
)) {
864 printk(KERN_ERR
"%s: double rx stream "
866 wiphy_name(ar
->hw
->wiphy
));
873 * save incomplete data set.
874 * the firmware will resend the missing bits when
875 * the rx - descriptor comes round again.
878 memcpy(skb_put(ar
->rx_failover
, tlen
), tbuf
, tlen
);
879 ar
->rx_failover_missing
= clen
- tlen
;
889 /* weird thing, but this is the same in the original driver */
890 while (resplen
> 2 && i
< 12 &&
891 respbuf
[0] == 0xff && respbuf
[1] == 0xff) {
900 /* found the 6 * 0xffff marker? */
902 ar9170_handle_command_response(ar
, respbuf
, resplen
);
904 ar9170_handle_mpdu(ar
, respbuf
, clen
);
909 printk(KERN_ERR
"%s: %d bytes of unprocessed "
910 "data left in rx stream!\n",
911 wiphy_name(ar
->hw
->wiphy
), tlen
);
919 printk(KERN_ERR
"%s: damaged RX stream data [want:%d, "
920 "data:%d, rx:%d, pending:%d ]\n",
921 wiphy_name(ar
->hw
->wiphy
), clen
, wlen
, tlen
,
922 ar
->rx_failover_missing
);
924 if (ar
->rx_failover_missing
)
925 print_hex_dump_bytes("rxbuf:", DUMP_PREFIX_OFFSET
,
926 ar
->rx_failover
->data
,
927 ar
->rx_failover
->len
);
929 print_hex_dump_bytes("stream:", DUMP_PREFIX_OFFSET
,
930 skb
->data
, skb
->len
);
932 printk(KERN_ERR
"%s: please check your hardware and cables, if "
933 "you see this message frequently.\n",
934 wiphy_name(ar
->hw
->wiphy
));
937 if (ar
->rx_failover_missing
) {
938 skb_reset_tail_pointer(ar
->rx_failover
);
939 skb_trim(ar
->rx_failover
, 0);
940 ar
->rx_failover_missing
= 0;
944 #define AR9170_FILL_QUEUE(queue, ai_fs, cwmin, cwmax, _txop) \
946 queue.aifs = ai_fs; \
947 queue.cw_min = cwmin; \
948 queue.cw_max = cwmax; \
949 queue.txop = _txop; \
952 static int ar9170_op_start(struct ieee80211_hw
*hw
)
954 struct ar9170
*ar
= hw
->priv
;
957 mutex_lock(&ar
->mutex
);
959 ar
->filter_changed
= 0;
961 /* reinitialize queues statistics */
962 memset(&ar
->tx_stats
, 0, sizeof(ar
->tx_stats
));
963 for (i
= 0; i
< ARRAY_SIZE(ar
->tx_stats
); i
++)
964 ar
->tx_stats
[i
].limit
= 8;
966 /* reset QoS defaults */
967 AR9170_FILL_QUEUE(ar
->edcf
[0], 3, 15, 1023, 0); /* BEST EFFORT*/
968 AR9170_FILL_QUEUE(ar
->edcf
[1], 7, 15, 1023, 0); /* BACKGROUND */
969 AR9170_FILL_QUEUE(ar
->edcf
[2], 2, 7, 15, 94); /* VIDEO */
970 AR9170_FILL_QUEUE(ar
->edcf
[3], 2, 3, 7, 47); /* VOICE */
971 AR9170_FILL_QUEUE(ar
->edcf
[4], 2, 3, 7, 0); /* SPECIAL */
973 ar
->bad_hw_nagger
= jiffies
;
979 err
= ar9170_init_mac(ar
);
983 err
= ar9170_set_qos(ar
);
987 err
= ar9170_init_phy(ar
, IEEE80211_BAND_2GHZ
);
991 err
= ar9170_init_rf(ar
);
996 err
= ar9170_write_reg(ar
, 0x1c3d30, 0x100);
1000 ar
->state
= AR9170_STARTED
;
1003 mutex_unlock(&ar
->mutex
);
1007 static void ar9170_op_stop(struct ieee80211_hw
*hw
)
1009 struct ar9170
*ar
= hw
->priv
;
1012 ar
->state
= AR9170_IDLE
;
1014 flush_workqueue(ar
->hw
->workqueue
);
1016 mutex_lock(&ar
->mutex
);
1017 cancel_delayed_work_sync(&ar
->tx_status_janitor
);
1018 cancel_work_sync(&ar
->filter_config_work
);
1019 cancel_work_sync(&ar
->beacon_work
);
1020 skb_queue_purge(&ar
->global_tx_status_waste
);
1021 skb_queue_purge(&ar
->global_tx_status
);
1023 if (IS_ACCEPTING_CMD(ar
)) {
1024 ar9170_set_leds_state(ar
, 0);
1027 ar9170_write_reg(ar
, 0x1c3d30, 0);
1031 mutex_unlock(&ar
->mutex
);
1034 int ar9170_op_tx(struct ieee80211_hw
*hw
, struct sk_buff
*skb
)
1036 struct ar9170
*ar
= hw
->priv
;
1037 struct ieee80211_hdr
*hdr
;
1038 struct ar9170_tx_control
*txc
;
1039 struct ieee80211_tx_info
*info
;
1040 struct ieee80211_rate
*rate
= NULL
;
1041 struct ieee80211_tx_rate
*txrate
;
1042 unsigned int queue
= skb_get_queue_mapping(skb
);
1043 unsigned long flags
= 0;
1044 struct ar9170_sta_info
*sta_info
= NULL
;
1051 if (unlikely(!IS_STARTED(ar
)))
1054 hdr
= (void *)skb
->data
;
1055 info
= IEEE80211_SKB_CB(skb
);
1058 spin_lock_irqsave(&ar
->tx_stats_lock
, flags
);
1059 if (ar
->tx_stats
[queue
].limit
< ar
->tx_stats
[queue
].len
) {
1060 spin_unlock_irqrestore(&ar
->tx_stats_lock
, flags
);
1061 return NETDEV_TX_OK
;
1064 ar
->tx_stats
[queue
].len
++;
1065 ar
->tx_stats
[queue
].count
++;
1066 if (ar
->tx_stats
[queue
].limit
== ar
->tx_stats
[queue
].len
)
1067 ieee80211_stop_queue(hw
, queue
);
1069 spin_unlock_irqrestore(&ar
->tx_stats_lock
, flags
);
1071 txc
= (void *)skb_push(skb
, sizeof(*txc
));
1073 tx_status
= (((info
->flags
& IEEE80211_TX_CTL_RATE_CTRL_PROBE
) != 0) ||
1074 ((info
->flags
& IEEE80211_TX_CTL_REQ_TX_STATUS
) != 0));
1076 if (info
->control
.hw_key
) {
1077 icv
= info
->control
.hw_key
->icv_len
;
1079 switch (info
->control
.hw_key
->alg
) {
1081 keytype
= AR9170_TX_MAC_ENCR_RC4
;
1084 keytype
= AR9170_TX_MAC_ENCR_RC4
;
1087 keytype
= AR9170_TX_MAC_ENCR_AES
;
1096 txc
->length
= cpu_to_le16(len
+ icv
+ 4);
1098 txc
->mac_control
= cpu_to_le16(AR9170_TX_MAC_HW_DURATION
|
1099 AR9170_TX_MAC_BACKOFF
);
1100 txc
->mac_control
|= cpu_to_le16(ar9170_qos_hwmap
[queue
] <<
1101 AR9170_TX_MAC_QOS_SHIFT
);
1102 txc
->mac_control
|= cpu_to_le16(keytype
);
1103 txc
->phy_control
= cpu_to_le32(0);
1105 if (info
->flags
& IEEE80211_TX_CTL_NO_ACK
)
1106 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_NO_ACK
);
1108 if (info
->flags
& IEEE80211_TX_CTL_AMPDU
)
1109 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_AGGR
);
1111 txrate
= &info
->control
.rates
[0];
1113 if (txrate
->flags
& IEEE80211_TX_RC_USE_CTS_PROTECT
)
1114 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_PROT_CTS
);
1115 else if (txrate
->flags
& IEEE80211_TX_RC_USE_RTS_CTS
)
1116 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_PROT_RTS
);
1118 if (txrate
->flags
& IEEE80211_TX_RC_GREEN_FIELD
)
1119 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_GREENFIELD
);
1121 if (txrate
->flags
& IEEE80211_TX_RC_USE_SHORT_PREAMBLE
)
1122 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_SHORT_PREAMBLE
);
1124 if (txrate
->flags
& IEEE80211_TX_RC_40_MHZ_WIDTH
)
1125 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_BW_40MHZ
);
1126 /* this works because 40 MHz is 2 and dup is 3 */
1127 if (txrate
->flags
& IEEE80211_TX_RC_DUP_DATA
)
1128 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_BW_40MHZ_DUP
);
1130 if (txrate
->flags
& IEEE80211_TX_RC_SHORT_GI
)
1131 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_SHORT_GI
);
1133 if (txrate
->flags
& IEEE80211_TX_RC_MCS
) {
1134 u32 r
= txrate
->idx
;
1137 r
<<= AR9170_TX_PHY_MCS_SHIFT
;
1138 if (WARN_ON(r
& ~AR9170_TX_PHY_MCS_MASK
))
1140 txc
->phy_control
|= cpu_to_le32(r
& AR9170_TX_PHY_MCS_MASK
);
1141 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_MOD_HT
);
1143 if (txrate
->flags
& IEEE80211_TX_RC_40_MHZ_WIDTH
) {
1144 if (info
->band
== IEEE80211_BAND_5GHZ
)
1145 txpower
= ar
->power_5G_ht40
;
1147 txpower
= ar
->power_2G_ht40
;
1149 if (info
->band
== IEEE80211_BAND_5GHZ
)
1150 txpower
= ar
->power_5G_ht20
;
1152 txpower
= ar
->power_2G_ht20
;
1155 power
= txpower
[(txrate
->idx
) & 7];
1160 u8 idx
= txrate
->idx
;
1162 if (info
->band
!= IEEE80211_BAND_2GHZ
) {
1164 txpower
= ar
->power_5G_leg
;
1165 mod
= AR9170_TX_PHY_MOD_OFDM
;
1168 txpower
= ar
->power_2G_cck
;
1169 mod
= AR9170_TX_PHY_MOD_CCK
;
1171 mod
= AR9170_TX_PHY_MOD_OFDM
;
1172 txpower
= ar
->power_2G_ofdm
;
1176 rate
= &__ar9170_ratetable
[idx
];
1178 phyrate
= rate
->hw_value
& 0xF;
1179 power
= txpower
[(rate
->hw_value
& 0x30) >> 4];
1180 phyrate
<<= AR9170_TX_PHY_MCS_SHIFT
;
1182 txc
->phy_control
|= cpu_to_le32(mod
);
1183 txc
->phy_control
|= cpu_to_le32(phyrate
);
1186 power
<<= AR9170_TX_PHY_TX_PWR_SHIFT
;
1187 power
&= AR9170_TX_PHY_TX_PWR_MASK
;
1188 txc
->phy_control
|= cpu_to_le32(power
);
1191 if (ar
->eeprom
.tx_mask
== 1) {
1192 chains
= AR9170_TX_PHY_TXCHAIN_1
;
1194 chains
= AR9170_TX_PHY_TXCHAIN_2
;
1196 /* >= 36M legacy OFDM - use only one chain */
1197 if (rate
&& rate
->bitrate
>= 360)
1198 chains
= AR9170_TX_PHY_TXCHAIN_1
;
1200 txc
->phy_control
|= cpu_to_le32(chains
<< AR9170_TX_PHY_TXCHAIN_SHIFT
);
1203 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_RATE_PROBE
);
1206 * Putting the QoS queue bits into an unexplored territory is
1207 * certainly not elegant.
1209 * In my defense: This idea provides a reasonable way to
1210 * smuggle valuable information to the tx_status callback.
1211 * Also, the idea behind this bit-abuse came straight from
1212 * the original driver code.
1216 cpu_to_le32(queue
<< AR9170_TX_PHY_QOS_SHIFT
);
1218 if (info
->control
.sta
) {
1219 sta_info
= (void *) info
->control
.sta
->drv_priv
;
1220 skb_queue_tail(&sta_info
->tx_status
[queue
], skb
);
1222 skb_queue_tail(&ar
->global_tx_status
, skb
);
1224 queue_delayed_work(ar
->hw
->workqueue
,
1225 &ar
->tx_status_janitor
,
1226 msecs_to_jiffies(100));
1230 err
= ar
->tx(ar
, skb
, tx_status
, 0);
1231 if (unlikely(tx_status
&& err
)) {
1232 if (info
->control
.sta
)
1233 skb_unlink(skb
, &sta_info
->tx_status
[queue
]);
1235 skb_unlink(skb
, &ar
->global_tx_status
);
1238 return NETDEV_TX_OK
;
1241 spin_lock_irqsave(&ar
->tx_stats_lock
, flags
);
1242 ar
->tx_stats
[queue
].len
--;
1243 ar
->tx_stats
[queue
].count
--;
1244 spin_unlock_irqrestore(&ar
->tx_stats_lock
, flags
);
1248 return NETDEV_TX_OK
;
1251 static int ar9170_op_add_interface(struct ieee80211_hw
*hw
,
1252 struct ieee80211_if_init_conf
*conf
)
1254 struct ar9170
*ar
= hw
->priv
;
1257 mutex_lock(&ar
->mutex
);
1264 ar
->vif
= conf
->vif
;
1265 memcpy(ar
->mac_addr
, conf
->mac_addr
, ETH_ALEN
);
1267 if (modparam_nohwcrypt
|| (ar
->vif
->type
!= NL80211_IFTYPE_STATION
)) {
1268 ar
->rx_software_decryption
= true;
1269 ar
->disable_offload
= true;
1273 ar
->want_filter
= AR9170_MAC_REG_FTF_DEFAULTS
;
1274 err
= ar9170_update_frame_filter(ar
);
1278 err
= ar9170_set_operating_mode(ar
);
1281 mutex_unlock(&ar
->mutex
);
1285 static void ar9170_op_remove_interface(struct ieee80211_hw
*hw
,
1286 struct ieee80211_if_init_conf
*conf
)
1288 struct ar9170
*ar
= hw
->priv
;
1290 mutex_lock(&ar
->mutex
);
1292 ar
->want_filter
= 0;
1293 ar9170_update_frame_filter(ar
);
1294 ar9170_set_beacon_timers(ar
);
1295 dev_kfree_skb(ar
->beacon
);
1297 ar
->sniffer_enabled
= false;
1298 ar
->rx_software_decryption
= false;
1299 ar9170_set_operating_mode(ar
);
1300 mutex_unlock(&ar
->mutex
);
1303 static int ar9170_op_config(struct ieee80211_hw
*hw
, u32 changed
)
1305 struct ar9170
*ar
= hw
->priv
;
1308 mutex_lock(&ar
->mutex
);
1310 if (changed
& IEEE80211_CONF_CHANGE_RADIO_ENABLED
) {
1315 if (changed
& IEEE80211_CONF_CHANGE_LISTEN_INTERVAL
) {
1320 if (changed
& IEEE80211_CONF_CHANGE_PS
) {
1325 if (changed
& IEEE80211_CONF_CHANGE_POWER
) {
1330 if (changed
& IEEE80211_CONF_CHANGE_RETRY_LIMITS
) {
1332 * is it long_frame_max_tx_count or short_frame_max_tx_count?
1335 err
= ar9170_set_hwretry_limit(ar
,
1336 ar
->hw
->conf
.long_frame_max_tx_count
);
1341 if (changed
& BSS_CHANGED_BEACON_INT
) {
1342 err
= ar9170_set_beacon_timers(ar
);
1347 if (changed
& IEEE80211_CONF_CHANGE_CHANNEL
) {
1349 /* adjust slot time for 5 GHz */
1350 err
= ar9170_set_slot_time(ar
);
1354 err
= ar9170_set_dyn_sifs_ack(ar
);
1358 err
= ar9170_set_channel(ar
, hw
->conf
.channel
,
1360 nl80211_to_ar9170(hw
->conf
.channel_type
));
1366 mutex_unlock(&ar
->mutex
);
1370 static void ar9170_set_filters(struct work_struct
*work
)
1372 struct ar9170
*ar
= container_of(work
, struct ar9170
,
1373 filter_config_work
);
1376 if (unlikely(!IS_STARTED(ar
)))
1379 mutex_lock(&ar
->mutex
);
1380 if (test_and_clear_bit(AR9170_FILTER_CHANGED_MODE
,
1381 &ar
->filter_changed
)) {
1382 err
= ar9170_set_operating_mode(ar
);
1387 if (test_and_clear_bit(AR9170_FILTER_CHANGED_MULTICAST
,
1388 &ar
->filter_changed
)) {
1389 err
= ar9170_update_multicast(ar
);
1394 if (test_and_clear_bit(AR9170_FILTER_CHANGED_FRAMEFILTER
,
1395 &ar
->filter_changed
)) {
1396 err
= ar9170_update_frame_filter(ar
);
1402 mutex_unlock(&ar
->mutex
);
1405 static void ar9170_op_configure_filter(struct ieee80211_hw
*hw
,
1406 unsigned int changed_flags
,
1407 unsigned int *new_flags
,
1408 int mc_count
, struct dev_mc_list
*mclist
)
1410 struct ar9170
*ar
= hw
->priv
;
1412 /* mask supported flags */
1413 *new_flags
&= FIF_ALLMULTI
| FIF_CONTROL
| FIF_BCN_PRBRESP_PROMISC
|
1414 FIF_PROMISC_IN_BSS
| FIF_FCSFAIL
| FIF_PLCPFAIL
;
1415 ar
->filter_state
= *new_flags
;
1417 * We can support more by setting the sniffer bit and
1418 * then checking the error flags, later.
1421 if (changed_flags
& FIF_ALLMULTI
) {
1422 if (*new_flags
& FIF_ALLMULTI
) {
1423 ar
->want_mc_hash
= ~0ULL;
1428 /* always get broadcast frames */
1429 mchash
= 1ULL << (0xff >> 2);
1431 for (i
= 0; i
< mc_count
; i
++) {
1432 if (WARN_ON(!mclist
))
1434 mchash
|= 1ULL << (mclist
->dmi_addr
[5] >> 2);
1435 mclist
= mclist
->next
;
1437 ar
->want_mc_hash
= mchash
;
1439 set_bit(AR9170_FILTER_CHANGED_MULTICAST
, &ar
->filter_changed
);
1442 if (changed_flags
& FIF_CONTROL
) {
1443 u32 filter
= AR9170_MAC_REG_FTF_PSPOLL
|
1444 AR9170_MAC_REG_FTF_RTS
|
1445 AR9170_MAC_REG_FTF_CTS
|
1446 AR9170_MAC_REG_FTF_ACK
|
1447 AR9170_MAC_REG_FTF_CFE
|
1448 AR9170_MAC_REG_FTF_CFE_ACK
;
1450 if (*new_flags
& FIF_CONTROL
)
1451 ar
->want_filter
= ar
->cur_filter
| filter
;
1453 ar
->want_filter
= ar
->cur_filter
& ~filter
;
1455 set_bit(AR9170_FILTER_CHANGED_FRAMEFILTER
,
1456 &ar
->filter_changed
);
1459 if (changed_flags
& FIF_PROMISC_IN_BSS
) {
1460 ar
->sniffer_enabled
= ((*new_flags
) & FIF_PROMISC_IN_BSS
) != 0;
1461 set_bit(AR9170_FILTER_CHANGED_MODE
,
1462 &ar
->filter_changed
);
1465 if (likely(IS_STARTED(ar
)))
1466 queue_work(ar
->hw
->workqueue
, &ar
->filter_config_work
);
1469 static void ar9170_op_bss_info_changed(struct ieee80211_hw
*hw
,
1470 struct ieee80211_vif
*vif
,
1471 struct ieee80211_bss_conf
*bss_conf
,
1474 struct ar9170
*ar
= hw
->priv
;
1477 mutex_lock(&ar
->mutex
);
1479 if (changed
& BSS_CHANGED_BSSID
) {
1480 memcpy(ar
->bssid
, bss_conf
->bssid
, ETH_ALEN
);
1481 err
= ar9170_set_operating_mode(ar
);
1486 if (changed
& (BSS_CHANGED_BEACON
| BSS_CHANGED_BEACON_ENABLED
)) {
1487 err
= ar9170_update_beacon(ar
);
1491 err
= ar9170_set_beacon_timers(ar
);
1496 if (changed
& BSS_CHANGED_ASSOC
) {
1497 ar
->state
= bss_conf
->assoc
? AR9170_ASSOCIATED
: ar
->state
;
1499 #ifndef CONFIG_AR9170_LEDS
1500 /* enable assoc LED. */
1501 err
= ar9170_set_leds_state(ar
, bss_conf
->assoc
? 2 : 0);
1502 #endif /* CONFIG_AR9170_LEDS */
1505 if (changed
& BSS_CHANGED_BEACON_INT
) {
1506 err
= ar9170_set_beacon_timers(ar
);
1511 if (changed
& BSS_CHANGED_HT
) {
1516 if (changed
& BSS_CHANGED_ERP_SLOT
) {
1517 err
= ar9170_set_slot_time(ar
);
1522 if (changed
& BSS_CHANGED_BASIC_RATES
) {
1523 err
= ar9170_set_basic_rates(ar
);
1529 mutex_unlock(&ar
->mutex
);
1532 static u64
ar9170_op_get_tsf(struct ieee80211_hw
*hw
)
1534 struct ar9170
*ar
= hw
->priv
;
1540 mutex_lock(&ar
->mutex
);
1541 err
= ar9170_read_reg(ar
, AR9170_MAC_REG_TSF_L
, &tsf_low
);
1543 err
= ar9170_read_reg(ar
, AR9170_MAC_REG_TSF_H
, &tsf_high
);
1544 mutex_unlock(&ar
->mutex
);
1550 tsf
= (tsf
<< 32) | tsf_low
;
1554 static int ar9170_set_key(struct ieee80211_hw
*hw
, enum set_key_cmd cmd
,
1555 struct ieee80211_vif
*vif
, struct ieee80211_sta
*sta
,
1556 struct ieee80211_key_conf
*key
)
1558 struct ar9170
*ar
= hw
->priv
;
1562 if ((!ar
->vif
) || (ar
->disable_offload
))
1567 if (key
->keylen
== WLAN_KEY_LEN_WEP40
)
1568 ktype
= AR9170_ENC_ALG_WEP64
;
1570 ktype
= AR9170_ENC_ALG_WEP128
;
1573 ktype
= AR9170_ENC_ALG_TKIP
;
1576 ktype
= AR9170_ENC_ALG_AESCCMP
;
1582 mutex_lock(&ar
->mutex
);
1583 if (cmd
== SET_KEY
) {
1584 if (unlikely(!IS_STARTED(ar
))) {
1589 /* group keys need all-zeroes address */
1590 if (!(key
->flags
& IEEE80211_KEY_FLAG_PAIRWISE
))
1593 if (key
->flags
& IEEE80211_KEY_FLAG_PAIRWISE
) {
1594 for (i
= 0; i
< 64; i
++)
1595 if (!(ar
->usedkeys
& BIT(i
)))
1598 ar
->rx_software_decryption
= true;
1599 ar9170_set_operating_mode(ar
);
1604 i
= 64 + key
->keyidx
;
1607 key
->hw_key_idx
= i
;
1609 err
= ar9170_upload_key(ar
, i
, sta
? sta
->addr
: NULL
, ktype
, 0,
1610 key
->key
, min_t(u8
, 16, key
->keylen
));
1614 if (key
->alg
== ALG_TKIP
) {
1615 err
= ar9170_upload_key(ar
, i
, sta
? sta
->addr
: NULL
,
1616 ktype
, 1, key
->key
+ 16, 16);
1621 * hardware is not capable generating the MMIC
1622 * for fragmented frames!
1624 key
->flags
|= IEEE80211_KEY_FLAG_GENERATE_MMIC
;
1628 ar
->usedkeys
|= BIT(i
);
1630 key
->flags
|= IEEE80211_KEY_FLAG_GENERATE_IV
;
1632 if (unlikely(!IS_STARTED(ar
))) {
1633 /* The device is gone... together with the key ;-) */
1638 err
= ar9170_disable_key(ar
, key
->hw_key_idx
);
1642 if (key
->hw_key_idx
< 64) {
1643 ar
->usedkeys
&= ~BIT(key
->hw_key_idx
);
1645 err
= ar9170_upload_key(ar
, key
->hw_key_idx
, NULL
,
1646 AR9170_ENC_ALG_NONE
, 0,
1651 if (key
->alg
== ALG_TKIP
) {
1652 err
= ar9170_upload_key(ar
, key
->hw_key_idx
,
1654 AR9170_ENC_ALG_NONE
, 1,
1663 ar9170_regwrite_begin(ar
);
1664 ar9170_regwrite(AR9170_MAC_REG_ROLL_CALL_TBL_L
, ar
->usedkeys
);
1665 ar9170_regwrite(AR9170_MAC_REG_ROLL_CALL_TBL_H
, ar
->usedkeys
>> 32);
1666 ar9170_regwrite_finish();
1667 err
= ar9170_regwrite_result();
1670 mutex_unlock(&ar
->mutex
);
1675 static void ar9170_sta_notify(struct ieee80211_hw
*hw
,
1676 struct ieee80211_vif
*vif
,
1677 enum sta_notify_cmd cmd
,
1678 struct ieee80211_sta
*sta
)
1680 struct ar9170
*ar
= hw
->priv
;
1681 struct ar9170_sta_info
*info
= (void *) sta
->drv_priv
;
1682 struct sk_buff
*skb
;
1686 case STA_NOTIFY_ADD
:
1687 for (i
= 0; i
< ar
->hw
->queues
; i
++)
1688 skb_queue_head_init(&info
->tx_status
[i
]);
1691 case STA_NOTIFY_REMOVE
:
1694 * transfer all outstanding frames that need a tx_status
1695 * reports to the global tx_status queue
1698 for (i
= 0; i
< ar
->hw
->queues
; i
++) {
1699 while ((skb
= skb_dequeue(&info
->tx_status
[i
]))) {
1700 #ifdef AR9170_QUEUE_DEBUG
1701 printk(KERN_DEBUG
"%s: queueing frame in "
1702 "global tx_status queue =>\n",
1703 wiphy_name(ar
->hw
->wiphy
));
1705 ar9170_print_txheader(ar
, skb
);
1706 #endif /* AR9170_QUEUE_DEBUG */
1707 skb_queue_tail(&ar
->global_tx_status
, skb
);
1710 queue_delayed_work(ar
->hw
->workqueue
, &ar
->tx_status_janitor
,
1711 msecs_to_jiffies(100));
1719 static int ar9170_get_stats(struct ieee80211_hw
*hw
,
1720 struct ieee80211_low_level_stats
*stats
)
1722 struct ar9170
*ar
= hw
->priv
;
1726 mutex_lock(&ar
->mutex
);
1727 err
= ar9170_read_reg(ar
, AR9170_MAC_REG_TX_RETRY
, &val
);
1728 ar
->stats
.dot11ACKFailureCount
+= val
;
1730 memcpy(stats
, &ar
->stats
, sizeof(*stats
));
1731 mutex_unlock(&ar
->mutex
);
1736 static int ar9170_get_tx_stats(struct ieee80211_hw
*hw
,
1737 struct ieee80211_tx_queue_stats
*tx_stats
)
1739 struct ar9170
*ar
= hw
->priv
;
1741 spin_lock_bh(&ar
->tx_stats_lock
);
1742 memcpy(tx_stats
, ar
->tx_stats
, sizeof(tx_stats
[0]) * hw
->queues
);
1743 spin_unlock_bh(&ar
->tx_stats_lock
);
1748 static int ar9170_conf_tx(struct ieee80211_hw
*hw
, u16 queue
,
1749 const struct ieee80211_tx_queue_params
*param
)
1751 struct ar9170
*ar
= hw
->priv
;
1754 mutex_lock(&ar
->mutex
);
1755 if ((param
) && !(queue
> ar
->hw
->queues
)) {
1756 memcpy(&ar
->edcf
[ar9170_qos_hwmap
[queue
]],
1757 param
, sizeof(*param
));
1759 ret
= ar9170_set_qos(ar
);
1763 mutex_unlock(&ar
->mutex
);
1767 static int ar9170_ampdu_action(struct ieee80211_hw
*hw
,
1768 enum ieee80211_ampdu_mlme_action action
,
1769 struct ieee80211_sta
*sta
, u16 tid
, u16
*ssn
)
1772 case IEEE80211_AMPDU_RX_START
:
1773 case IEEE80211_AMPDU_RX_STOP
:
1775 * Something goes wrong -- RX locks up
1776 * after a while of receiving aggregated
1777 * frames -- not enabling for now.
1785 static const struct ieee80211_ops ar9170_ops
= {
1786 .start
= ar9170_op_start
,
1787 .stop
= ar9170_op_stop
,
1789 .add_interface
= ar9170_op_add_interface
,
1790 .remove_interface
= ar9170_op_remove_interface
,
1791 .config
= ar9170_op_config
,
1792 .configure_filter
= ar9170_op_configure_filter
,
1793 .conf_tx
= ar9170_conf_tx
,
1794 .bss_info_changed
= ar9170_op_bss_info_changed
,
1795 .get_tsf
= ar9170_op_get_tsf
,
1796 .set_key
= ar9170_set_key
,
1797 .sta_notify
= ar9170_sta_notify
,
1798 .get_stats
= ar9170_get_stats
,
1799 .get_tx_stats
= ar9170_get_tx_stats
,
1800 .ampdu_action
= ar9170_ampdu_action
,
1803 void *ar9170_alloc(size_t priv_size
)
1805 struct ieee80211_hw
*hw
;
1807 struct sk_buff
*skb
;
1811 * this buffer is used for rx stream reconstruction.
1812 * Under heavy load this device (or the transport layer?)
1813 * tends to split the streams into seperate rx descriptors.
1816 skb
= __dev_alloc_skb(AR9170_MAX_RX_BUFFER_SIZE
, GFP_KERNEL
);
1820 hw
= ieee80211_alloc_hw(priv_size
, &ar9170_ops
);
1826 ar
->rx_failover
= skb
;
1828 mutex_init(&ar
->mutex
);
1829 spin_lock_init(&ar
->cmdlock
);
1830 spin_lock_init(&ar
->tx_stats_lock
);
1831 skb_queue_head_init(&ar
->global_tx_status
);
1832 skb_queue_head_init(&ar
->global_tx_status_waste
);
1833 ar9170_rx_reset_rx_mpdu(ar
);
1834 INIT_WORK(&ar
->filter_config_work
, ar9170_set_filters
);
1835 INIT_WORK(&ar
->beacon_work
, ar9170_new_beacon
);
1836 INIT_DELAYED_WORK(&ar
->tx_status_janitor
, ar9170_tx_status_janitor
);
1838 /* all hw supports 2.4 GHz, so set channel to 1 by default */
1839 ar
->channel
= &ar9170_2ghz_chantable
[0];
1841 /* first part of wiphy init */
1842 ar
->hw
->wiphy
->interface_modes
= BIT(NL80211_IFTYPE_STATION
) |
1843 BIT(NL80211_IFTYPE_WDS
) |
1844 BIT(NL80211_IFTYPE_ADHOC
);
1845 ar
->hw
->flags
|= IEEE80211_HW_RX_INCLUDES_FCS
|
1846 IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING
|
1847 IEEE80211_HW_SIGNAL_DBM
|
1848 IEEE80211_HW_NOISE_DBM
;
1850 ar
->hw
->queues
= __AR9170_NUM_TXQ
;
1851 ar
->hw
->extra_tx_headroom
= 8;
1852 ar
->hw
->sta_data_size
= sizeof(struct ar9170_sta_info
);
1854 ar
->hw
->max_rates
= 1;
1855 ar
->hw
->max_rate_tries
= 3;
1857 for (i
= 0; i
< ARRAY_SIZE(ar
->noise
); i
++)
1858 ar
->noise
[i
] = -95; /* ATH_DEFAULT_NOISE_FLOOR */
1864 return ERR_PTR(-ENOMEM
);
1867 static int ar9170_read_eeprom(struct ar9170
*ar
)
1869 #define RW 8 /* number of words to read at once */
1870 #define RB (sizeof(u32) * RW)
1871 DECLARE_MAC_BUF(mbuf
);
1872 u8
*eeprom
= (void *)&ar
->eeprom
;
1873 u8
*addr
= ar
->eeprom
.mac_address
;
1875 int i
, j
, err
, bands
= 0;
1877 BUILD_BUG_ON(sizeof(ar
->eeprom
) & 3);
1879 BUILD_BUG_ON(RB
> AR9170_MAX_CMD_LEN
- 4);
1881 /* don't want to handle trailing remains */
1882 BUILD_BUG_ON(sizeof(ar
->eeprom
) % RB
);
1885 for (i
= 0; i
< sizeof(ar
->eeprom
)/RB
; i
++) {
1886 for (j
= 0; j
< RW
; j
++)
1887 offsets
[j
] = cpu_to_le32(AR9170_EEPROM_START
+
1890 err
= ar
->exec_cmd(ar
, AR9170_CMD_RREG
,
1891 RB
, (u8
*) &offsets
,
1892 RB
, eeprom
+ RB
* i
);
1900 if (ar
->eeprom
.length
== cpu_to_le16(0xFFFF))
1903 if (ar
->eeprom
.operating_flags
& AR9170_OPFLAG_2GHZ
) {
1904 ar
->hw
->wiphy
->bands
[IEEE80211_BAND_2GHZ
] = &ar9170_band_2GHz
;
1907 if (ar
->eeprom
.operating_flags
& AR9170_OPFLAG_5GHZ
) {
1908 ar
->hw
->wiphy
->bands
[IEEE80211_BAND_5GHZ
] = &ar9170_band_5GHz
;
1912 * I measured this, a bandswitch takes roughly
1913 * 135 ms and a frequency switch about 80.
1915 * FIXME: measure these values again once EEPROM settings
1916 * are used, that will influence them!
1919 ar
->hw
->channel_change_time
= 135 * 1000;
1921 ar
->hw
->channel_change_time
= 80 * 1000;
1923 ar
->regulatory
.current_rd
= le16_to_cpu(ar
->eeprom
.reg_domain
[0]);
1924 ar
->regulatory
.current_rd_ext
= le16_to_cpu(ar
->eeprom
.reg_domain
[1]);
1926 /* second part of wiphy init */
1927 SET_IEEE80211_PERM_ADDR(ar
->hw
, addr
);
1929 return bands
? 0 : -EINVAL
;
1932 static int ar9170_reg_notifier(struct wiphy
*wiphy
,
1933 struct regulatory_request
*request
)
1935 struct ieee80211_hw
*hw
= wiphy_to_ieee80211_hw(wiphy
);
1936 struct ar9170
*ar
= hw
->priv
;
1938 return ath_reg_notifier_apply(wiphy
, request
, &ar
->regulatory
);
1941 int ar9170_register(struct ar9170
*ar
, struct device
*pdev
)
1945 /* try to read EEPROM, init MAC addr */
1946 err
= ar9170_read_eeprom(ar
);
1950 err
= ath_regd_init(&ar
->regulatory
, ar
->hw
->wiphy
,
1951 ar9170_reg_notifier
);
1955 err
= ieee80211_register_hw(ar
->hw
);
1959 if (!ath_is_world_regd(&ar
->regulatory
))
1960 regulatory_hint(ar
->hw
->wiphy
, ar
->regulatory
.alpha2
);
1962 err
= ar9170_init_leds(ar
);
1966 #ifdef CONFIG_AR9170_LEDS
1967 err
= ar9170_register_leds(ar
);
1970 #endif /* CONFIG_AR9170_LEDS */
1972 dev_info(pdev
, "Atheros AR9170 is registered as '%s'\n",
1973 wiphy_name(ar
->hw
->wiphy
));
1978 ieee80211_unregister_hw(ar
->hw
);
1984 void ar9170_unregister(struct ar9170
*ar
)
1986 #ifdef CONFIG_AR9170_LEDS
1987 ar9170_unregister_leds(ar
);
1988 #endif /* CONFIG_AR9170_LEDS */
1990 kfree_skb(ar
->rx_failover
);
1991 ieee80211_unregister_hw(ar
->hw
);
1992 mutex_destroy(&ar
->mutex
);