drivers/net/wireless/libertas/cmdresp.c

   1 /**
   2   * This file contains the handling of command
   3   * responses as well as events generated by firmware.
   4   */
   5 #include <linux/slab.h>
   6 #include <linux/delay.h>
   7 #include <linux/sched.h>
   8 #include <linux/if_arp.h>
   9 #include <linux/netdevice.h>
  10 #include <asm/unaligned.h>
  11 #include <net/iw_handler.h>
  12
  13 #include "host.h"
  14 #include "decl.h"
  15 #include "cmd.h"
  16 #include "defs.h"
  17 #include "dev.h"
  18 #include "assoc.h"
  19 #include "wext.h"
  20
  21 /**
  22  *  @brief This function handles disconnect event. it
  23  *  reports disconnect to upper layer, clean tx/rx packets,
  24  *  reset link state etc.
  25  *
  26  *  @param priv    A pointer to struct lbs_private structure
  27  *  @return        n/a
  28  */
  29 void lbs_mac_event_disconnected(struct lbs_private *priv)
  30 {
  31         if (priv->connect_status != LBS_CONNECTED)
  32                 return;
  33
  34         lbs_deb_enter(LBS_DEB_ASSOC);
  35
  36         /*
  37          * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
  38          * It causes problem in the Supplicant
  39          */
  40         msleep_interruptible(1000);
  41         lbs_send_disconnect_notification(priv);
  42
  43         /* report disconnect to upper layer */
  44         netif_stop_queue(priv->dev);
  45         netif_carrier_off(priv->dev);
  46
  47         /* Free Tx and Rx packets */
  48         kfree_skb(priv->currenttxskb);
  49         priv->currenttxskb = NULL;
  50         priv->tx_pending_len = 0;
  51
  52         /* reset SNR/NF/RSSI values */
  53         memset(priv->SNR, 0x00, sizeof(priv->SNR));
  54         memset(priv->NF, 0x00, sizeof(priv->NF));
  55         memset(priv->RSSI, 0x00, sizeof(priv->RSSI));
  56         memset(priv->rawSNR, 0x00, sizeof(priv->rawSNR));
  57         memset(priv->rawNF, 0x00, sizeof(priv->rawNF));
  58         priv->nextSNRNF = 0;
  59         priv->numSNRNF = 0;
  60         priv->connect_status = LBS_DISCONNECTED;
  61
  62         /* Clear out associated SSID and BSSID since connection is
  63          * no longer valid.
  64          */
  65         memset(&priv->curbssparams.bssid, 0, ETH_ALEN);
  66         memset(&priv->curbssparams.ssid, 0, IEEE80211_MAX_SSID_LEN);
  67         priv->curbssparams.ssid_len = 0;
  68
  69         if (priv->psstate != PS_STATE_FULL_POWER) {
  70                 /* make firmware to exit PS mode */
  71                 lbs_deb_cmd("disconnected, so exit PS mode\n");
  72                 lbs_ps_wakeup(priv, 0);
  73         }
  74         lbs_deb_leave(LBS_DEB_ASSOC);
  75 }
  76
  77 static int lbs_ret_reg_access(struct lbs_private *priv,
  78                                u16 type, struct cmd_ds_command *resp)
  79 {
  80         int ret = 0;
  81
  82         lbs_deb_enter(LBS_DEB_CMD);
  83
  84         switch (type) {
  85         case CMD_RET(CMD_MAC_REG_ACCESS):
  86                 {
  87                         struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
  88
  89                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
  90                         priv->offsetvalue.value = le32_to_cpu(reg->value);
  91                         break;
  92                 }
  93
  94         case CMD_RET(CMD_BBP_REG_ACCESS):
  95                 {
  96                         struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
  97
  98                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
  99                         priv->offsetvalue.value = reg->value;
 100                         break;
 101                 }
 102
 103         case CMD_RET(CMD_RF_REG_ACCESS):
 104                 {
 105                         struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
 106
 107                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
 108                         priv->offsetvalue.value = reg->value;
 109                         break;
 110                 }
 111
 112         default:
 113                 ret = -1;
 114         }
 115
 116         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 117         return ret;
 118 }
 119
 120 static inline int handle_cmd_response(struct lbs_private *priv,
 121                                       struct cmd_header *cmd_response)
 122 {
 123         struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
 124         int ret = 0;
 125         unsigned long flags;
 126         uint16_t respcmd = le16_to_cpu(resp->command);
 127
 128         lbs_deb_enter(LBS_DEB_HOST);
 129
 130         switch (respcmd) {
 131         case CMD_RET(CMD_MAC_REG_ACCESS):
 132         case CMD_RET(CMD_BBP_REG_ACCESS):
 133         case CMD_RET(CMD_RF_REG_ACCESS):
 134                 ret = lbs_ret_reg_access(priv, respcmd, resp);
 135                 break;
 136
 137         case CMD_RET(CMD_802_11_SET_AFC):
 138         case CMD_RET(CMD_802_11_GET_AFC):
 139                 spin_lock_irqsave(&priv->driver_lock, flags);
 140                 memmove((void *)priv->cur_cmd->callback_arg, &resp->params.afc,
 141                         sizeof(struct cmd_ds_802_11_afc));
 142                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 143
 144                 break;
 145
 146         case CMD_RET(CMD_802_11_BEACON_STOP):
 147                 break;
 148
 149         case CMD_RET(CMD_802_11_RSSI):
 150                 ret = lbs_ret_802_11_rssi(priv, resp);
 151                 break;
 152
 153         case CMD_RET(CMD_802_11_TPC_CFG):
 154                 spin_lock_irqsave(&priv->driver_lock, flags);
 155                 memmove((void *)priv->cur_cmd->callback_arg, &resp->params.tpccfg,
 156                         sizeof(struct cmd_ds_802_11_tpc_cfg));
 157                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 158                 break;
 159
 160         case CMD_RET(CMD_BT_ACCESS):
 161                 spin_lock_irqsave(&priv->driver_lock, flags);
 162                 if (priv->cur_cmd->callback_arg)
 163                         memcpy((void *)priv->cur_cmd->callback_arg,
 164                                &resp->params.bt.addr1, 2 * ETH_ALEN);
 165                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 166                 break;
 167         case CMD_RET(CMD_FWT_ACCESS):
 168                 spin_lock_irqsave(&priv->driver_lock, flags);
 169                 if (priv->cur_cmd->callback_arg)
 170                         memcpy((void *)priv->cur_cmd->callback_arg, &resp->params.fwt,
 171                                sizeof(resp->params.fwt));
 172                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 173                 break;
 174         case CMD_RET(CMD_802_11_BEACON_CTRL):
 175                 ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
 176                 break;
 177
 178         default:
 179                 lbs_pr_err("CMD_RESP: unknown cmd response 0x%04x\n",
 180                            le16_to_cpu(resp->command));
 181                 break;
 182         }
 183         lbs_deb_leave(LBS_DEB_HOST);
 184         return ret;
 185 }
 186
 187 int lbs_process_command_response(struct lbs_private *priv, u8 *data, u32 len)
 188 {
 189         uint16_t respcmd, curcmd;
 190         struct cmd_header *resp;
 191         int ret = 0;
 192         unsigned long flags;
 193         uint16_t result;
 194
 195         lbs_deb_enter(LBS_DEB_HOST);
 196
 197         mutex_lock(&priv->lock);
 198         spin_lock_irqsave(&priv->driver_lock, flags);
 199
 200         if (!priv->cur_cmd) {
 201                 lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
 202                 ret = -1;
 203                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 204                 goto done;
 205         }
 206
 207         resp = (void *)data;
 208         curcmd = le16_to_cpu(priv->cur_cmd->cmdbuf->command);
 209         respcmd = le16_to_cpu(resp->command);
 210         result = le16_to_cpu(resp->result);
 211
 212         lbs_deb_cmd("CMD_RESP: response 0x%04x, seq %d, size %d\n",
 213                      respcmd, le16_to_cpu(resp->seqnum), len);
 214         lbs_deb_hex(LBS_DEB_CMD, "CMD_RESP", (void *) resp, len);
 215
 216         if (resp->seqnum != priv->cur_cmd->cmdbuf->seqnum) {
 217                 lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
 218                             le16_to_cpu(resp->seqnum), le16_to_cpu(priv->cur_cmd->cmdbuf->seqnum));
 219                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 220                 ret = -1;
 221                 goto done;
 222         }
 223         if (respcmd != CMD_RET(curcmd) &&
 224             respcmd != CMD_RET_802_11_ASSOCIATE && curcmd != CMD_802_11_ASSOCIATE) {
 225                 lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd, curcmd);
 226                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 227                 ret = -1;
 228                 goto done;
 229         }
 230
 231         if (resp->result == cpu_to_le16(0x0004)) {
 232                 /* 0x0004 means -EAGAIN. Drop the response, let it time out
 233                    and be resubmitted */
 234                 lbs_pr_info("Firmware returns DEFER to command %x. Will let it time out...\n",
 235                             le16_to_cpu(resp->command));
 236                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 237                 ret = -1;
 238                 goto done;
 239         }
 240
 241         /* Now we got response from FW, cancel the command timer */
 242         del_timer(&priv->command_timer);
 243         priv->cmd_timed_out = 0;
 244
 245         /* Store the response code to cur_cmd_retcode. */
 246         priv->cur_cmd_retcode = result;
 247
 248         if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
 249                 struct cmd_ds_802_11_ps_mode *psmode = (void *) &resp[1];
 250                 u16 action = le16_to_cpu(psmode->action);
 251
 252                 lbs_deb_host(
 253                        "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
 254                        result, action);
 255
 256                 if (result) {
 257                         lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
 258                                     result);
 259                         /*
 260                          * We should not re-try enter-ps command in
 261                          * ad-hoc mode. It takes place in
 262                          * lbs_execute_next_command().
 263                          */
 264                         if (priv->mode == IW_MODE_ADHOC &&
 265                             action == CMD_SUBCMD_ENTER_PS)
 266                                 priv->psmode = LBS802_11POWERMODECAM;
 267                 } else if (action == CMD_SUBCMD_ENTER_PS) {
 268                         priv->needtowakeup = 0;
 269                         priv->psstate = PS_STATE_AWAKE;
 270
 271                         lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
 272                         if (priv->connect_status != LBS_CONNECTED) {
 273                                 /*
 274                                  * When Deauth Event received before Enter_PS command
 275                                  * response, We need to wake up the firmware.
 276                                  */
 277                                 lbs_deb_host(
 278                                        "disconnected, invoking lbs_ps_wakeup\n");
 279
 280                                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 281                                 mutex_unlock(&priv->lock);
 282                                 lbs_ps_wakeup(priv, 0);
 283                                 mutex_lock(&priv->lock);
 284                                 spin_lock_irqsave(&priv->driver_lock, flags);
 285                         }
 286                 } else if (action == CMD_SUBCMD_EXIT_PS) {
 287                         priv->needtowakeup = 0;
 288                         priv->psstate = PS_STATE_FULL_POWER;
 289                         lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
 290                 } else {
 291                         lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
 292                 }
 293
 294                 lbs_complete_command(priv, priv->cur_cmd, result);
 295                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 296
 297                 ret = 0;
 298                 goto done;
 299         }
 300
 301         /* If the command is not successful, cleanup and return failure */
 302         if ((result != 0 || !(respcmd & 0x8000))) {
 303                 lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
 304                        result, respcmd);
 305                 /*
 306                  * Handling errors here
 307                  */
 308                 switch (respcmd) {
 309                 case CMD_RET(CMD_GET_HW_SPEC):
 310                 case CMD_RET(CMD_802_11_RESET):
 311                         lbs_deb_host("CMD_RESP: reset failed\n");
 312                         break;
 313
 314                 }
 315                 lbs_complete_command(priv, priv->cur_cmd, result);
 316                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 317
 318                 ret = -1;
 319                 goto done;
 320         }
 321
 322         spin_unlock_irqrestore(&priv->driver_lock, flags);
 323
 324         if (priv->cur_cmd && priv->cur_cmd->callback) {
 325                 ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
 326                                 resp);
 327         } else
 328                 ret = handle_cmd_response(priv, resp);
 329
 330         spin_lock_irqsave(&priv->driver_lock, flags);
 331
 332         if (priv->cur_cmd) {
 333                 /* Clean up and Put current command back to cmdfreeq */
 334                 lbs_complete_command(priv, priv->cur_cmd, result);
 335         }
 336         spin_unlock_irqrestore(&priv->driver_lock, flags);
 337
 338 done:
 339         mutex_unlock(&priv->lock);
 340         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
 341         return ret;
 342 }
 343
 344 static int lbs_send_confirmwake(struct lbs_private *priv)
 345 {
 346         struct cmd_header cmd;
 347         int ret = 0;
 348
 349         lbs_deb_enter(LBS_DEB_HOST);
 350
 351         cmd.command = cpu_to_le16(CMD_802_11_WAKEUP_CONFIRM);
 352         cmd.size = cpu_to_le16(sizeof(cmd));
 353         cmd.seqnum = cpu_to_le16(++priv->seqnum);
 354         cmd.result = 0;
 355
 356         lbs_deb_hex(LBS_DEB_HOST, "wake confirm", (u8 *) &cmd,
 357                 sizeof(cmd));
 358
 359         ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) &cmd, sizeof(cmd));
 360         if (ret)
 361                 lbs_pr_alert("SEND_WAKEC_CMD: Host to Card failed for Confirm Wake\n");
 362
 363         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
 364         return ret;
 365 }
 366
 367 int lbs_process_event(struct lbs_private *priv, u32 event)
 368 {
 369         int ret = 0;
 370
 371         lbs_deb_enter(LBS_DEB_CMD);
 372
 373         switch (event) {
 374         case MACREG_INT_CODE_LINK_SENSED:
 375                 lbs_deb_cmd("EVENT: link sensed\n");
 376                 break;
 377
 378         case MACREG_INT_CODE_DEAUTHENTICATED:
 379                 lbs_deb_cmd("EVENT: deauthenticated\n");
 380                 lbs_mac_event_disconnected(priv);
 381                 break;
 382
 383         case MACREG_INT_CODE_DISASSOCIATED:
 384                 lbs_deb_cmd("EVENT: disassociated\n");
 385                 lbs_mac_event_disconnected(priv);
 386                 break;
 387
 388         case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
 389                 lbs_deb_cmd("EVENT: link lost\n");
 390                 lbs_mac_event_disconnected(priv);
 391                 break;
 392
 393         case MACREG_INT_CODE_PS_SLEEP:
 394                 lbs_deb_cmd("EVENT: ps sleep\n");
 395
 396                 /* handle unexpected PS SLEEP event */
 397                 if (priv->psstate == PS_STATE_FULL_POWER) {
 398                         lbs_deb_cmd(
 399                                "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
 400                         break;
 401                 }
 402                 priv->psstate = PS_STATE_PRE_SLEEP;
 403
 404                 lbs_ps_confirm_sleep(priv);
 405
 406                 break;
 407
 408         case MACREG_INT_CODE_HOST_AWAKE:
 409                 lbs_deb_cmd("EVENT: host awake\n");
 410                 if (priv->reset_deep_sleep_wakeup)
 411                         priv->reset_deep_sleep_wakeup(priv);
 412                 priv->is_deep_sleep = 0;
 413                 lbs_send_confirmwake(priv);
 414                 break;
 415
 416         case MACREG_INT_CODE_DEEP_SLEEP_AWAKE:
 417                 if (priv->reset_deep_sleep_wakeup)
 418                         priv->reset_deep_sleep_wakeup(priv);
 419                 lbs_deb_cmd("EVENT: ds awake\n");
 420                 priv->is_deep_sleep = 0;
 421                 priv->wakeup_dev_required = 0;
 422                 wake_up_interruptible(&priv->ds_awake_q);
 423                 break;
 424
 425         case MACREG_INT_CODE_PS_AWAKE:
 426                 lbs_deb_cmd("EVENT: ps awake\n");
 427                 /* handle unexpected PS AWAKE event */
 428                 if (priv->psstate == PS_STATE_FULL_POWER) {
 429                         lbs_deb_cmd(
 430                                "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
 431                         break;
 432                 }
 433
 434                 priv->psstate = PS_STATE_AWAKE;
 435
 436                 if (priv->needtowakeup) {
 437                         /*
 438                          * wait for the command processing to finish
 439                          * before resuming sending
 440                          * priv->needtowakeup will be set to FALSE
 441                          * in lbs_ps_wakeup()
 442                          */
 443                         lbs_deb_cmd("waking up ...\n");
 444                         lbs_ps_wakeup(priv, 0);
 445                 }
 446                 break;
 447
 448         case MACREG_INT_CODE_MIC_ERR_UNICAST:
 449                 lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
 450                 lbs_send_mic_failureevent(priv, event);
 451                 break;
 452
 453         case MACREG_INT_CODE_MIC_ERR_MULTICAST:
 454                 lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
 455                 lbs_send_mic_failureevent(priv, event);
 456                 break;
 457
 458         case MACREG_INT_CODE_MIB_CHANGED:
 459                 lbs_deb_cmd("EVENT: MIB CHANGED\n");
 460                 break;
 461         case MACREG_INT_CODE_INIT_DONE:
 462                 lbs_deb_cmd("EVENT: INIT DONE\n");
 463                 break;
 464         case MACREG_INT_CODE_ADHOC_BCN_LOST:
 465                 lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
 466                 break;
 467         case MACREG_INT_CODE_RSSI_LOW:
 468                 lbs_pr_alert("EVENT: rssi low\n");
 469                 break;
 470         case MACREG_INT_CODE_SNR_LOW:
 471                 lbs_pr_alert("EVENT: snr low\n");
 472                 break;
 473         case MACREG_INT_CODE_MAX_FAIL:
 474                 lbs_pr_alert("EVENT: max fail\n");
 475                 break;
 476         case MACREG_INT_CODE_RSSI_HIGH:
 477                 lbs_pr_alert("EVENT: rssi high\n");
 478                 break;
 479         case MACREG_INT_CODE_SNR_HIGH:
 480                 lbs_pr_alert("EVENT: snr high\n");
 481                 break;
 482
 483         case MACREG_INT_CODE_MESH_AUTO_STARTED:
 484                 /* Ignore spurious autostart events */
 485                 lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
 486                 break;
 487
 488         default:
 489                 lbs_pr_alert("EVENT: unknown event id %d\n", event);
 490                 break;
 491         }
 492
 493         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 494         return ret;
 495 }