iwlwifi: Fix mode changes (ad-hoc <--> managed)
[linux-2.6.git] / drivers / net / wireless / iwlwifi / iwl4965-base.c
blob8e7860debdf6330709332c764aaad8de069fe682
1 /******************************************************************************
3 * Copyright(c) 2003 - 2008 Intel Corporation. All rights reserved.
5 * Portions of this file are derived from the ipw3945 project, as well
6 * as portions of the ieee80211 subsystem header files.
8 * This program is free software; you can redistribute it and/or modify it
9 * under the terms of version 2 of the GNU General Public License as
10 * published by the Free Software Foundation.
12 * This program is distributed in the hope that it will be useful, but WITHOUT
13 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
14 * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
15 * more details.
17 * You should have received a copy of the GNU General Public License along with
18 * this program; if not, write to the Free Software Foundation, Inc.,
19 * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
21 * The full GNU General Public License is included in this distribution in the
22 * file called LICENSE.
24 * Contact Information:
25 * James P. Ketrenos <ipw2100-admin@linux.intel.com>
26 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
28 *****************************************************************************/
30 #include <linux/kernel.h>
31 #include <linux/module.h>
32 #include <linux/version.h>
33 #include <linux/init.h>
34 #include <linux/pci.h>
35 #include <linux/dma-mapping.h>
36 #include <linux/delay.h>
37 #include <linux/skbuff.h>
38 #include <linux/netdevice.h>
39 #include <linux/wireless.h>
40 #include <linux/firmware.h>
41 #include <linux/etherdevice.h>
42 #include <linux/if_arp.h>
44 #include <net/mac80211.h>
46 #include <asm/div64.h>
48 #include "iwl-eeprom.h"
49 #include "iwl-dev.h"
50 #include "iwl-core.h"
51 #include "iwl-io.h"
52 #include "iwl-helpers.h"
53 #include "iwl-sta.h"
54 #include "iwl-calib.h"
57 /******************************************************************************
59 * module boiler plate
61 ******************************************************************************/
64 * module name, copyright, version, etc.
65 * NOTE: DRV_NAME is defined in iwlwifi.h for use by iwl-debug.h and printk
68 #define DRV_DESCRIPTION "Intel(R) Wireless WiFi Link 4965AGN driver for Linux"
70 #ifdef CONFIG_IWLWIFI_DEBUG
71 #define VD "d"
72 #else
73 #define VD
74 #endif
76 #ifdef CONFIG_IWL4965_SPECTRUM_MEASUREMENT
77 #define VS "s"
78 #else
79 #define VS
80 #endif
82 #define DRV_VERSION IWLWIFI_VERSION VD VS
85 MODULE_DESCRIPTION(DRV_DESCRIPTION);
86 MODULE_VERSION(DRV_VERSION);
87 MODULE_AUTHOR(DRV_COPYRIGHT);
88 MODULE_LICENSE("GPL");
90 static int iwl4965_is_empty_essid(const char *essid, int essid_len)
92 /* Single white space is for Linksys APs */
93 if (essid_len == 1 && essid[0] == ' ')
94 return 1;
96 /* Otherwise, if the entire essid is 0, we assume it is hidden */
97 while (essid_len) {
98 essid_len--;
99 if (essid[essid_len] != '\0')
100 return 0;
103 return 1;
106 static const char *iwl4965_escape_essid(const char *essid, u8 essid_len)
108 static char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
109 const char *s = essid;
110 char *d = escaped;
112 if (iwl4965_is_empty_essid(essid, essid_len)) {
113 memcpy(escaped, "<hidden>", sizeof("<hidden>"));
114 return escaped;
117 essid_len = min(essid_len, (u8) IW_ESSID_MAX_SIZE);
118 while (essid_len--) {
119 if (*s == '\0') {
120 *d++ = '\\';
121 *d++ = '0';
122 s++;
123 } else
124 *d++ = *s++;
126 *d = '\0';
127 return escaped;
130 /*************** STATION TABLE MANAGEMENT ****
131 * mac80211 should be examined to determine if sta_info is duplicating
132 * the functionality provided here
135 /**************************************************************/
139 static void iwl4965_set_rxon_hwcrypto(struct iwl_priv *priv, int hw_decrypt)
141 struct iwl_rxon_cmd *rxon = &priv->staging_rxon;
143 if (hw_decrypt)
144 rxon->filter_flags &= ~RXON_FILTER_DIS_DECRYPT_MSK;
145 else
146 rxon->filter_flags |= RXON_FILTER_DIS_DECRYPT_MSK;
151 * iwl4965_check_rxon_cmd - validate RXON structure is valid
153 * NOTE: This is really only useful during development and can eventually
154 * be #ifdef'd out once the driver is stable and folks aren't actively
155 * making changes
157 static int iwl4965_check_rxon_cmd(struct iwl_rxon_cmd *rxon)
159 int error = 0;
160 int counter = 1;
162 if (rxon->flags & RXON_FLG_BAND_24G_MSK) {
163 error |= le32_to_cpu(rxon->flags &
164 (RXON_FLG_TGJ_NARROW_BAND_MSK |
165 RXON_FLG_RADAR_DETECT_MSK));
166 if (error)
167 IWL_WARNING("check 24G fields %d | %d\n",
168 counter++, error);
169 } else {
170 error |= (rxon->flags & RXON_FLG_SHORT_SLOT_MSK) ?
171 0 : le32_to_cpu(RXON_FLG_SHORT_SLOT_MSK);
172 if (error)
173 IWL_WARNING("check 52 fields %d | %d\n",
174 counter++, error);
175 error |= le32_to_cpu(rxon->flags & RXON_FLG_CCK_MSK);
176 if (error)
177 IWL_WARNING("check 52 CCK %d | %d\n",
178 counter++, error);
180 error |= (rxon->node_addr[0] | rxon->bssid_addr[0]) & 0x1;
181 if (error)
182 IWL_WARNING("check mac addr %d | %d\n", counter++, error);
184 /* make sure basic rates 6Mbps and 1Mbps are supported */
185 error |= (((rxon->ofdm_basic_rates & IWL_RATE_6M_MASK) == 0) &&
186 ((rxon->cck_basic_rates & IWL_RATE_1M_MASK) == 0));
187 if (error)
188 IWL_WARNING("check basic rate %d | %d\n", counter++, error);
190 error |= (le16_to_cpu(rxon->assoc_id) > 2007);
191 if (error)
192 IWL_WARNING("check assoc id %d | %d\n", counter++, error);
194 error |= ((rxon->flags & (RXON_FLG_CCK_MSK | RXON_FLG_SHORT_SLOT_MSK))
195 == (RXON_FLG_CCK_MSK | RXON_FLG_SHORT_SLOT_MSK));
196 if (error)
197 IWL_WARNING("check CCK and short slot %d | %d\n",
198 counter++, error);
200 error |= ((rxon->flags & (RXON_FLG_CCK_MSK | RXON_FLG_AUTO_DETECT_MSK))
201 == (RXON_FLG_CCK_MSK | RXON_FLG_AUTO_DETECT_MSK));
202 if (error)
203 IWL_WARNING("check CCK & auto detect %d | %d\n",
204 counter++, error);
206 error |= ((rxon->flags & (RXON_FLG_AUTO_DETECT_MSK |
207 RXON_FLG_TGG_PROTECT_MSK)) == RXON_FLG_TGG_PROTECT_MSK);
208 if (error)
209 IWL_WARNING("check TGG and auto detect %d | %d\n",
210 counter++, error);
212 if (error)
213 IWL_WARNING("Tuning to channel %d\n",
214 le16_to_cpu(rxon->channel));
216 if (error) {
217 IWL_ERROR("Not a valid iwl4965_rxon_assoc_cmd field values\n");
218 return -1;
220 return 0;
224 * iwl4965_full_rxon_required - check if full RXON (vs RXON_ASSOC) cmd is needed
225 * @priv: staging_rxon is compared to active_rxon
227 * If the RXON structure is changing enough to require a new tune,
228 * or is clearing the RXON_FILTER_ASSOC_MSK, then return 1 to indicate that
229 * a new tune (full RXON command, rather than RXON_ASSOC cmd) is required.
231 static int iwl4965_full_rxon_required(struct iwl_priv *priv)
234 /* These items are only settable from the full RXON command */
235 if (!(priv->active_rxon.filter_flags & RXON_FILTER_ASSOC_MSK) ||
236 compare_ether_addr(priv->staging_rxon.bssid_addr,
237 priv->active_rxon.bssid_addr) ||
238 compare_ether_addr(priv->staging_rxon.node_addr,
239 priv->active_rxon.node_addr) ||
240 compare_ether_addr(priv->staging_rxon.wlap_bssid_addr,
241 priv->active_rxon.wlap_bssid_addr) ||
242 (priv->staging_rxon.dev_type != priv->active_rxon.dev_type) ||
243 (priv->staging_rxon.channel != priv->active_rxon.channel) ||
244 (priv->staging_rxon.air_propagation !=
245 priv->active_rxon.air_propagation) ||
246 (priv->staging_rxon.ofdm_ht_single_stream_basic_rates !=
247 priv->active_rxon.ofdm_ht_single_stream_basic_rates) ||
248 (priv->staging_rxon.ofdm_ht_dual_stream_basic_rates !=
249 priv->active_rxon.ofdm_ht_dual_stream_basic_rates) ||
250 (priv->staging_rxon.rx_chain != priv->active_rxon.rx_chain) ||
251 (priv->staging_rxon.assoc_id != priv->active_rxon.assoc_id))
252 return 1;
254 /* flags, filter_flags, ofdm_basic_rates, and cck_basic_rates can
255 * be updated with the RXON_ASSOC command -- however only some
256 * flag transitions are allowed using RXON_ASSOC */
258 /* Check if we are not switching bands */
259 if ((priv->staging_rxon.flags & RXON_FLG_BAND_24G_MSK) !=
260 (priv->active_rxon.flags & RXON_FLG_BAND_24G_MSK))
261 return 1;
263 /* Check if we are switching association toggle */
264 if ((priv->staging_rxon.filter_flags & RXON_FILTER_ASSOC_MSK) !=
265 (priv->active_rxon.filter_flags & RXON_FILTER_ASSOC_MSK))
266 return 1;
268 return 0;
272 * iwl4965_commit_rxon - commit staging_rxon to hardware
274 * The RXON command in staging_rxon is committed to the hardware and
275 * the active_rxon structure is updated with the new data. This
276 * function correctly transitions out of the RXON_ASSOC_MSK state if
277 * a HW tune is required based on the RXON structure changes.
279 static int iwl4965_commit_rxon(struct iwl_priv *priv)
281 /* cast away the const for active_rxon in this function */
282 struct iwl_rxon_cmd *active_rxon = (void *)&priv->active_rxon;
283 DECLARE_MAC_BUF(mac);
284 int rc = 0;
286 if (!iwl_is_alive(priv))
287 return -1;
289 /* always get timestamp with Rx frame */
290 priv->staging_rxon.flags |= RXON_FLG_TSF2HOST_MSK;
292 rc = iwl4965_check_rxon_cmd(&priv->staging_rxon);
293 if (rc) {
294 IWL_ERROR("Invalid RXON configuration. Not committing.\n");
295 return -EINVAL;
298 /* If we don't need to send a full RXON, we can use
299 * iwl4965_rxon_assoc_cmd which is used to reconfigure filter
300 * and other flags for the current radio configuration. */
301 if (!iwl4965_full_rxon_required(priv)) {
302 rc = iwl_send_rxon_assoc(priv);
303 if (rc) {
304 IWL_ERROR("Error setting RXON_ASSOC "
305 "configuration (%d).\n", rc);
306 return rc;
309 memcpy(active_rxon, &priv->staging_rxon, sizeof(*active_rxon));
311 return 0;
314 /* station table will be cleared */
315 priv->assoc_station_added = 0;
317 /* If we are currently associated and the new config requires
318 * an RXON_ASSOC and the new config wants the associated mask enabled,
319 * we must clear the associated from the active configuration
320 * before we apply the new config */
321 if (iwl_is_associated(priv) &&
322 (priv->staging_rxon.filter_flags & RXON_FILTER_ASSOC_MSK)) {
323 IWL_DEBUG_INFO("Toggling associated bit on current RXON\n");
324 active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
326 rc = iwl_send_cmd_pdu(priv, REPLY_RXON,
327 sizeof(struct iwl_rxon_cmd),
328 &priv->active_rxon);
330 /* If the mask clearing failed then we set
331 * active_rxon back to what it was previously */
332 if (rc) {
333 active_rxon->filter_flags |= RXON_FILTER_ASSOC_MSK;
334 IWL_ERROR("Error clearing ASSOC_MSK on current "
335 "configuration (%d).\n", rc);
336 return rc;
340 IWL_DEBUG_INFO("Sending RXON\n"
341 "* with%s RXON_FILTER_ASSOC_MSK\n"
342 "* channel = %d\n"
343 "* bssid = %s\n",
344 ((priv->staging_rxon.filter_flags &
345 RXON_FILTER_ASSOC_MSK) ? "" : "out"),
346 le16_to_cpu(priv->staging_rxon.channel),
347 print_mac(mac, priv->staging_rxon.bssid_addr));
349 iwl4965_set_rxon_hwcrypto(priv, !priv->hw_params.sw_crypto);
350 /* Apply the new configuration */
351 rc = iwl_send_cmd_pdu(priv, REPLY_RXON,
352 sizeof(struct iwl_rxon_cmd), &priv->staging_rxon);
353 if (rc) {
354 IWL_ERROR("Error setting new configuration (%d).\n", rc);
355 return rc;
358 iwl_remove_station(priv, iwl_bcast_addr, 0);
359 iwlcore_clear_stations_table(priv);
361 if (!priv->error_recovering)
362 priv->start_calib = 0;
364 iwl_init_sensitivity(priv);
366 memcpy(active_rxon, &priv->staging_rxon, sizeof(*active_rxon));
368 /* If we issue a new RXON command which required a tune then we must
369 * send a new TXPOWER command or we won't be able to Tx any frames */
370 rc = iwl4965_hw_reg_send_txpower(priv);
371 if (rc) {
372 IWL_ERROR("Error setting Tx power (%d).\n", rc);
373 return rc;
376 /* Add the broadcast address so we can send broadcast frames */
377 if (iwl_rxon_add_station(priv, iwl_bcast_addr, 0) ==
378 IWL_INVALID_STATION) {
379 IWL_ERROR("Error adding BROADCAST address for transmit.\n");
380 return -EIO;
383 /* If we have set the ASSOC_MSK and we are in BSS mode then
384 * add the IWL_AP_ID to the station rate table */
385 if (iwl_is_associated(priv) &&
386 (priv->iw_mode == IEEE80211_IF_TYPE_STA)) {
387 if (iwl_rxon_add_station(priv, priv->active_rxon.bssid_addr, 1)
388 == IWL_INVALID_STATION) {
389 IWL_ERROR("Error adding AP address for transmit.\n");
390 return -EIO;
392 priv->assoc_station_added = 1;
393 if (priv->default_wep_key &&
394 iwl_send_static_wepkey_cmd(priv, 0))
395 IWL_ERROR("Could not send WEP static key.\n");
398 return 0;
401 void iwl4965_update_chain_flags(struct iwl_priv *priv)
404 iwl_set_rxon_chain(priv);
405 iwl4965_commit_rxon(priv);
408 static int iwl4965_send_bt_config(struct iwl_priv *priv)
410 struct iwl4965_bt_cmd bt_cmd = {
411 .flags = 3,
412 .lead_time = 0xAA,
413 .max_kill = 1,
414 .kill_ack_mask = 0,
415 .kill_cts_mask = 0,
418 return iwl_send_cmd_pdu(priv, REPLY_BT_CONFIG,
419 sizeof(struct iwl4965_bt_cmd), &bt_cmd);
422 static int iwl4965_send_scan_abort(struct iwl_priv *priv)
424 int ret = 0;
425 struct iwl_rx_packet *res;
426 struct iwl_host_cmd cmd = {
427 .id = REPLY_SCAN_ABORT_CMD,
428 .meta.flags = CMD_WANT_SKB,
431 /* If there isn't a scan actively going on in the hardware
432 * then we are in between scan bands and not actually
433 * actively scanning, so don't send the abort command */
434 if (!test_bit(STATUS_SCAN_HW, &priv->status)) {
435 clear_bit(STATUS_SCAN_ABORTING, &priv->status);
436 return 0;
439 ret = iwl_send_cmd_sync(priv, &cmd);
440 if (ret) {
441 clear_bit(STATUS_SCAN_ABORTING, &priv->status);
442 return ret;
445 res = (struct iwl_rx_packet *)cmd.meta.u.skb->data;
446 if (res->u.status != CAN_ABORT_STATUS) {
447 /* The scan abort will return 1 for success or
448 * 2 for "failure". A failure condition can be
449 * due to simply not being in an active scan which
450 * can occur if we send the scan abort before we
451 * the microcode has notified us that a scan is
452 * completed. */
453 IWL_DEBUG_INFO("SCAN_ABORT returned %d.\n", res->u.status);
454 clear_bit(STATUS_SCAN_ABORTING, &priv->status);
455 clear_bit(STATUS_SCAN_HW, &priv->status);
458 dev_kfree_skb_any(cmd.meta.u.skb);
460 return ret;
464 * CARD_STATE_CMD
466 * Use: Sets the device's internal card state to enable, disable, or halt
468 * When in the 'enable' state the card operates as normal.
469 * When in the 'disable' state, the card enters into a low power mode.
470 * When in the 'halt' state, the card is shut down and must be fully
471 * restarted to come back on.
473 static int iwl4965_send_card_state(struct iwl_priv *priv, u32 flags, u8 meta_flag)
475 struct iwl_host_cmd cmd = {
476 .id = REPLY_CARD_STATE_CMD,
477 .len = sizeof(u32),
478 .data = &flags,
479 .meta.flags = meta_flag,
482 return iwl_send_cmd(priv, &cmd);
485 static void iwl_clear_free_frames(struct iwl_priv *priv)
487 struct list_head *element;
489 IWL_DEBUG_INFO("%d frames on pre-allocated heap on clear.\n",
490 priv->frames_count);
492 while (!list_empty(&priv->free_frames)) {
493 element = priv->free_frames.next;
494 list_del(element);
495 kfree(list_entry(element, struct iwl_frame, list));
496 priv->frames_count--;
499 if (priv->frames_count) {
500 IWL_WARNING("%d frames still in use. Did we lose one?\n",
501 priv->frames_count);
502 priv->frames_count = 0;
506 static struct iwl_frame *iwl_get_free_frame(struct iwl_priv *priv)
508 struct iwl_frame *frame;
509 struct list_head *element;
510 if (list_empty(&priv->free_frames)) {
511 frame = kzalloc(sizeof(*frame), GFP_KERNEL);
512 if (!frame) {
513 IWL_ERROR("Could not allocate frame!\n");
514 return NULL;
517 priv->frames_count++;
518 return frame;
521 element = priv->free_frames.next;
522 list_del(element);
523 return list_entry(element, struct iwl_frame, list);
526 static void iwl_free_frame(struct iwl_priv *priv, struct iwl_frame *frame)
528 memset(frame, 0, sizeof(*frame));
529 list_add(&frame->list, &priv->free_frames);
532 unsigned int iwl4965_fill_beacon_frame(struct iwl_priv *priv,
533 struct ieee80211_hdr *hdr,
534 const u8 *dest, int left)
537 if (!iwl_is_associated(priv) || !priv->ibss_beacon ||
538 ((priv->iw_mode != IEEE80211_IF_TYPE_IBSS) &&
539 (priv->iw_mode != IEEE80211_IF_TYPE_AP)))
540 return 0;
542 if (priv->ibss_beacon->len > left)
543 return 0;
545 memcpy(hdr, priv->ibss_beacon->data, priv->ibss_beacon->len);
547 return priv->ibss_beacon->len;
550 static u8 iwl4965_rate_get_lowest_plcp(struct iwl_priv *priv)
552 int i;
553 int rate_mask;
555 /* Set rate mask*/
556 if (priv->staging_rxon.flags & RXON_FLG_BAND_24G_MSK)
557 rate_mask = priv->active_rate_basic & 0xF;
558 else
559 rate_mask = priv->active_rate_basic & 0xFF0;
561 /* Find lowest valid rate */
562 for (i = IWL_RATE_1M_INDEX; i != IWL_RATE_INVALID;
563 i = iwl_rates[i].next_ieee) {
564 if (rate_mask & (1 << i))
565 return iwl_rates[i].plcp;
568 /* No valid rate was found. Assign the lowest one */
569 if (priv->staging_rxon.flags & RXON_FLG_BAND_24G_MSK)
570 return IWL_RATE_1M_PLCP;
571 else
572 return IWL_RATE_6M_PLCP;
575 static int iwl4965_send_beacon_cmd(struct iwl_priv *priv)
577 struct iwl_frame *frame;
578 unsigned int frame_size;
579 int rc;
580 u8 rate;
582 frame = iwl_get_free_frame(priv);
584 if (!frame) {
585 IWL_ERROR("Could not obtain free frame buffer for beacon "
586 "command.\n");
587 return -ENOMEM;
590 rate = iwl4965_rate_get_lowest_plcp(priv);
592 frame_size = iwl4965_hw_get_beacon_cmd(priv, frame, rate);
594 rc = iwl_send_cmd_pdu(priv, REPLY_TX_BEACON, frame_size,
595 &frame->u.cmd[0]);
597 iwl_free_frame(priv, frame);
599 return rc;
602 /******************************************************************************
604 * Misc. internal state and helper functions
606 ******************************************************************************/
609 * iwl4965_supported_rate_to_ie - fill in the supported rate in IE field
611 * return : set the bit for each supported rate insert in ie
613 static u16 iwl4965_supported_rate_to_ie(u8 *ie, u16 supported_rate,
614 u16 basic_rate, int *left)
616 u16 ret_rates = 0, bit;
617 int i;
618 u8 *cnt = ie;
619 u8 *rates = ie + 1;
621 for (bit = 1, i = 0; i < IWL_RATE_COUNT; i++, bit <<= 1) {
622 if (bit & supported_rate) {
623 ret_rates |= bit;
624 rates[*cnt] = iwl_rates[i].ieee |
625 ((bit & basic_rate) ? 0x80 : 0x00);
626 (*cnt)++;
627 (*left)--;
628 if ((*left <= 0) ||
629 (*cnt >= IWL_SUPPORTED_RATES_IE_LEN))
630 break;
634 return ret_rates;
637 static void iwl4965_ht_conf(struct iwl_priv *priv,
638 struct ieee80211_bss_conf *bss_conf)
640 struct ieee80211_ht_info *ht_conf = bss_conf->ht_conf;
641 struct ieee80211_ht_bss_info *ht_bss_conf = bss_conf->ht_bss_conf;
642 struct iwl_ht_info *iwl_conf = &priv->current_ht_config;
644 IWL_DEBUG_MAC80211("enter: \n");
646 iwl_conf->is_ht = bss_conf->assoc_ht;
648 if (!iwl_conf->is_ht)
649 return;
651 priv->ps_mode = (u8)((ht_conf->cap & IEEE80211_HT_CAP_MIMO_PS) >> 2);
653 if (ht_conf->cap & IEEE80211_HT_CAP_SGI_20)
654 iwl_conf->sgf |= HT_SHORT_GI_20MHZ;
655 if (ht_conf->cap & IEEE80211_HT_CAP_SGI_40)
656 iwl_conf->sgf |= HT_SHORT_GI_40MHZ;
658 iwl_conf->is_green_field = !!(ht_conf->cap & IEEE80211_HT_CAP_GRN_FLD);
659 iwl_conf->max_amsdu_size =
660 !!(ht_conf->cap & IEEE80211_HT_CAP_MAX_AMSDU);
662 iwl_conf->supported_chan_width =
663 !!(ht_conf->cap & IEEE80211_HT_CAP_SUP_WIDTH);
664 iwl_conf->extension_chan_offset =
665 ht_bss_conf->bss_cap & IEEE80211_HT_IE_CHA_SEC_OFFSET;
666 /* If no above or below channel supplied disable FAT channel */
667 if (iwl_conf->extension_chan_offset != IEEE80211_HT_IE_CHA_SEC_ABOVE &&
668 iwl_conf->extension_chan_offset != IEEE80211_HT_IE_CHA_SEC_BELOW) {
669 iwl_conf->extension_chan_offset = IEEE80211_HT_IE_CHA_SEC_NONE;
670 iwl_conf->supported_chan_width = 0;
673 iwl_conf->tx_mimo_ps_mode =
674 (u8)((ht_conf->cap & IEEE80211_HT_CAP_MIMO_PS) >> 2);
675 memcpy(iwl_conf->supp_mcs_set, ht_conf->supp_mcs_set, 16);
677 iwl_conf->control_channel = ht_bss_conf->primary_channel;
678 iwl_conf->tx_chan_width =
679 !!(ht_bss_conf->bss_cap & IEEE80211_HT_IE_CHA_WIDTH);
680 iwl_conf->ht_protection =
681 ht_bss_conf->bss_op_mode & IEEE80211_HT_IE_HT_PROTECTION;
682 iwl_conf->non_GF_STA_present =
683 !!(ht_bss_conf->bss_op_mode & IEEE80211_HT_IE_NON_GF_STA_PRSNT);
685 IWL_DEBUG_MAC80211("control channel %d\n", iwl_conf->control_channel);
686 IWL_DEBUG_MAC80211("leave\n");
689 static void iwl_ht_cap_to_ie(const struct ieee80211_supported_band *sband,
690 u8 *pos, int *left)
692 struct ieee80211_ht_cap *ht_cap;
694 if (!sband || !sband->ht_info.ht_supported)
695 return;
697 if (*left < sizeof(struct ieee80211_ht_cap))
698 return;
700 *pos++ = sizeof(struct ieee80211_ht_cap);
701 ht_cap = (struct ieee80211_ht_cap *) pos;
703 ht_cap->cap_info = cpu_to_le16(sband->ht_info.cap);
704 memcpy(ht_cap->supp_mcs_set, sband->ht_info.supp_mcs_set, 16);
705 ht_cap->ampdu_params_info =
706 (sband->ht_info.ampdu_factor & IEEE80211_HT_CAP_AMPDU_FACTOR) |
707 ((sband->ht_info.ampdu_density << 2) &
708 IEEE80211_HT_CAP_AMPDU_DENSITY);
709 *left -= sizeof(struct ieee80211_ht_cap);
713 * iwl4965_fill_probe_req - fill in all required fields and IE for probe request
715 static u16 iwl4965_fill_probe_req(struct iwl_priv *priv,
716 enum ieee80211_band band,
717 struct ieee80211_mgmt *frame,
718 int left, int is_direct)
720 int len = 0;
721 u8 *pos = NULL;
722 u16 active_rates, ret_rates, cck_rates, active_rate_basic;
723 const struct ieee80211_supported_band *sband =
724 iwl_get_hw_mode(priv, band);
726 /* Make sure there is enough space for the probe request,
727 * two mandatory IEs and the data */
728 left -= 24;
729 if (left < 0)
730 return 0;
731 len += 24;
733 frame->frame_control = cpu_to_le16(IEEE80211_STYPE_PROBE_REQ);
734 memcpy(frame->da, iwl_bcast_addr, ETH_ALEN);
735 memcpy(frame->sa, priv->mac_addr, ETH_ALEN);
736 memcpy(frame->bssid, iwl_bcast_addr, ETH_ALEN);
737 frame->seq_ctrl = 0;
739 /* fill in our indirect SSID IE */
740 /* ...next IE... */
742 left -= 2;
743 if (left < 0)
744 return 0;
745 len += 2;
746 pos = &(frame->u.probe_req.variable[0]);
747 *pos++ = WLAN_EID_SSID;
748 *pos++ = 0;
750 /* fill in our direct SSID IE... */
751 if (is_direct) {
752 /* ...next IE... */
753 left -= 2 + priv->essid_len;
754 if (left < 0)
755 return 0;
756 /* ... fill it in... */
757 *pos++ = WLAN_EID_SSID;
758 *pos++ = priv->essid_len;
759 memcpy(pos, priv->essid, priv->essid_len);
760 pos += priv->essid_len;
761 len += 2 + priv->essid_len;
764 /* fill in supported rate */
765 /* ...next IE... */
766 left -= 2;
767 if (left < 0)
768 return 0;
770 /* ... fill it in... */
771 *pos++ = WLAN_EID_SUPP_RATES;
772 *pos = 0;
774 /* exclude 60M rate */
775 active_rates = priv->rates_mask;
776 active_rates &= ~IWL_RATE_60M_MASK;
778 active_rate_basic = active_rates & IWL_BASIC_RATES_MASK;
780 cck_rates = IWL_CCK_RATES_MASK & active_rates;
781 ret_rates = iwl4965_supported_rate_to_ie(pos, cck_rates,
782 active_rate_basic, &left);
783 active_rates &= ~ret_rates;
785 ret_rates = iwl4965_supported_rate_to_ie(pos, active_rates,
786 active_rate_basic, &left);
787 active_rates &= ~ret_rates;
789 len += 2 + *pos;
790 pos += (*pos) + 1;
791 if (active_rates == 0)
792 goto fill_end;
794 /* fill in supported extended rate */
795 /* ...next IE... */
796 left -= 2;
797 if (left < 0)
798 return 0;
799 /* ... fill it in... */
800 *pos++ = WLAN_EID_EXT_SUPP_RATES;
801 *pos = 0;
802 iwl4965_supported_rate_to_ie(pos, active_rates,
803 active_rate_basic, &left);
804 if (*pos > 0)
805 len += 2 + *pos;
807 fill_end:
808 /* fill in HT IE */
809 left -= 2;
810 if (left < 0)
811 return 0;
813 *pos++ = WLAN_EID_HT_CAPABILITY;
814 *pos = 0;
816 iwl_ht_cap_to_ie(sband, pos, &left);
818 if (*pos > 0)
819 len += 2 + *pos;
820 return (u16)len;
824 * QoS support
826 static int iwl4965_send_qos_params_command(struct iwl_priv *priv,
827 struct iwl4965_qosparam_cmd *qos)
830 return iwl_send_cmd_pdu(priv, REPLY_QOS_PARAM,
831 sizeof(struct iwl4965_qosparam_cmd), qos);
834 static void iwl4965_activate_qos(struct iwl_priv *priv, u8 force)
836 unsigned long flags;
838 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
839 return;
841 if (!priv->qos_data.qos_enable)
842 return;
844 spin_lock_irqsave(&priv->lock, flags);
845 priv->qos_data.def_qos_parm.qos_flags = 0;
847 if (priv->qos_data.qos_cap.q_AP.queue_request &&
848 !priv->qos_data.qos_cap.q_AP.txop_request)
849 priv->qos_data.def_qos_parm.qos_flags |=
850 QOS_PARAM_FLG_TXOP_TYPE_MSK;
851 if (priv->qos_data.qos_active)
852 priv->qos_data.def_qos_parm.qos_flags |=
853 QOS_PARAM_FLG_UPDATE_EDCA_MSK;
855 if (priv->current_ht_config.is_ht)
856 priv->qos_data.def_qos_parm.qos_flags |= QOS_PARAM_FLG_TGN_MSK;
858 spin_unlock_irqrestore(&priv->lock, flags);
860 if (force || iwl_is_associated(priv)) {
861 IWL_DEBUG_QOS("send QoS cmd with Qos active=%d FLAGS=0x%X\n",
862 priv->qos_data.qos_active,
863 priv->qos_data.def_qos_parm.qos_flags);
865 iwl4965_send_qos_params_command(priv,
866 &(priv->qos_data.def_qos_parm));
870 int iwl4965_is_network_packet(struct iwl_priv *priv, struct ieee80211_hdr *header)
872 /* Filter incoming packets to determine if they are targeted toward
873 * this network, discarding packets coming from ourselves */
874 switch (priv->iw_mode) {
875 case IEEE80211_IF_TYPE_IBSS: /* Header: Dest. | Source | BSSID */
876 /* packets from our adapter are dropped (echo) */
877 if (!compare_ether_addr(header->addr2, priv->mac_addr))
878 return 0;
879 /* {broad,multi}cast packets to our IBSS go through */
880 if (is_multicast_ether_addr(header->addr1))
881 return !compare_ether_addr(header->addr3, priv->bssid);
882 /* packets to our adapter go through */
883 return !compare_ether_addr(header->addr1, priv->mac_addr);
884 case IEEE80211_IF_TYPE_STA: /* Header: Dest. | AP{BSSID} | Source */
885 /* packets from our adapter are dropped (echo) */
886 if (!compare_ether_addr(header->addr3, priv->mac_addr))
887 return 0;
888 /* {broad,multi}cast packets to our BSS go through */
889 if (is_multicast_ether_addr(header->addr1))
890 return !compare_ether_addr(header->addr2, priv->bssid);
891 /* packets to our adapter go through */
892 return !compare_ether_addr(header->addr1, priv->mac_addr);
893 default:
894 break;
897 return 1;
903 * iwl4965_scan_cancel - Cancel any currently executing HW scan
905 * NOTE: priv->mutex is not required before calling this function
907 static int iwl4965_scan_cancel(struct iwl_priv *priv)
909 if (!test_bit(STATUS_SCAN_HW, &priv->status)) {
910 clear_bit(STATUS_SCANNING, &priv->status);
911 return 0;
914 if (test_bit(STATUS_SCANNING, &priv->status)) {
915 if (!test_bit(STATUS_SCAN_ABORTING, &priv->status)) {
916 IWL_DEBUG_SCAN("Queuing scan abort.\n");
917 set_bit(STATUS_SCAN_ABORTING, &priv->status);
918 queue_work(priv->workqueue, &priv->abort_scan);
920 } else
921 IWL_DEBUG_SCAN("Scan abort already in progress.\n");
923 return test_bit(STATUS_SCANNING, &priv->status);
926 return 0;
930 * iwl4965_scan_cancel_timeout - Cancel any currently executing HW scan
931 * @ms: amount of time to wait (in milliseconds) for scan to abort
933 * NOTE: priv->mutex must be held before calling this function
935 static int iwl4965_scan_cancel_timeout(struct iwl_priv *priv, unsigned long ms)
937 unsigned long now = jiffies;
938 int ret;
940 ret = iwl4965_scan_cancel(priv);
941 if (ret && ms) {
942 mutex_unlock(&priv->mutex);
943 while (!time_after(jiffies, now + msecs_to_jiffies(ms)) &&
944 test_bit(STATUS_SCANNING, &priv->status))
945 msleep(1);
946 mutex_lock(&priv->mutex);
948 return test_bit(STATUS_SCANNING, &priv->status);
951 return ret;
954 static void iwl4965_sequence_reset(struct iwl_priv *priv)
956 /* Reset ieee stats */
958 /* We don't reset the net_device_stats (ieee->stats) on
959 * re-association */
961 priv->last_seq_num = -1;
962 priv->last_frag_num = -1;
963 priv->last_packet_time = 0;
965 iwl4965_scan_cancel(priv);
968 #define MAX_UCODE_BEACON_INTERVAL 4096
969 #define INTEL_CONN_LISTEN_INTERVAL __constant_cpu_to_le16(0xA)
971 static __le16 iwl4965_adjust_beacon_interval(u16 beacon_val)
973 u16 new_val = 0;
974 u16 beacon_factor = 0;
976 beacon_factor =
977 (beacon_val + MAX_UCODE_BEACON_INTERVAL)
978 / MAX_UCODE_BEACON_INTERVAL;
979 new_val = beacon_val / beacon_factor;
981 return cpu_to_le16(new_val);
984 static void iwl4965_setup_rxon_timing(struct iwl_priv *priv)
986 u64 interval_tm_unit;
987 u64 tsf, result;
988 unsigned long flags;
989 struct ieee80211_conf *conf = NULL;
990 u16 beacon_int = 0;
992 conf = ieee80211_get_hw_conf(priv->hw);
994 spin_lock_irqsave(&priv->lock, flags);
995 priv->rxon_timing.timestamp.dw[1] = cpu_to_le32(priv->timestamp >> 32);
996 priv->rxon_timing.timestamp.dw[0] =
997 cpu_to_le32(priv->timestamp & 0xFFFFFFFF);
999 priv->rxon_timing.listen_interval = INTEL_CONN_LISTEN_INTERVAL;
1001 tsf = priv->timestamp;
1003 beacon_int = priv->beacon_int;
1004 spin_unlock_irqrestore(&priv->lock, flags);
1006 if (priv->iw_mode == IEEE80211_IF_TYPE_STA) {
1007 if (beacon_int == 0) {
1008 priv->rxon_timing.beacon_interval = cpu_to_le16(100);
1009 priv->rxon_timing.beacon_init_val = cpu_to_le32(102400);
1010 } else {
1011 priv->rxon_timing.beacon_interval =
1012 cpu_to_le16(beacon_int);
1013 priv->rxon_timing.beacon_interval =
1014 iwl4965_adjust_beacon_interval(
1015 le16_to_cpu(priv->rxon_timing.beacon_interval));
1018 priv->rxon_timing.atim_window = 0;
1019 } else {
1020 priv->rxon_timing.beacon_interval =
1021 iwl4965_adjust_beacon_interval(conf->beacon_int);
1022 /* TODO: we need to get atim_window from upper stack
1023 * for now we set to 0 */
1024 priv->rxon_timing.atim_window = 0;
1027 interval_tm_unit =
1028 (le16_to_cpu(priv->rxon_timing.beacon_interval) * 1024);
1029 result = do_div(tsf, interval_tm_unit);
1030 priv->rxon_timing.beacon_init_val =
1031 cpu_to_le32((u32) ((u64) interval_tm_unit - result));
1033 IWL_DEBUG_ASSOC
1034 ("beacon interval %d beacon timer %d beacon tim %d\n",
1035 le16_to_cpu(priv->rxon_timing.beacon_interval),
1036 le32_to_cpu(priv->rxon_timing.beacon_init_val),
1037 le16_to_cpu(priv->rxon_timing.atim_window));
1040 static int iwl4965_scan_initiate(struct iwl_priv *priv)
1042 if (priv->iw_mode == IEEE80211_IF_TYPE_AP) {
1043 IWL_ERROR("APs don't scan.\n");
1044 return 0;
1047 if (!iwl_is_ready_rf(priv)) {
1048 IWL_DEBUG_SCAN("Aborting scan due to not ready.\n");
1049 return -EIO;
1052 if (test_bit(STATUS_SCANNING, &priv->status)) {
1053 IWL_DEBUG_SCAN("Scan already in progress.\n");
1054 return -EAGAIN;
1057 if (test_bit(STATUS_SCAN_ABORTING, &priv->status)) {
1058 IWL_DEBUG_SCAN("Scan request while abort pending. "
1059 "Queuing.\n");
1060 return -EAGAIN;
1063 IWL_DEBUG_INFO("Starting scan...\n");
1064 priv->scan_bands = 2;
1065 set_bit(STATUS_SCANNING, &priv->status);
1066 priv->scan_start = jiffies;
1067 priv->scan_pass_start = priv->scan_start;
1069 queue_work(priv->workqueue, &priv->request_scan);
1071 return 0;
1075 static void iwl_set_flags_for_band(struct iwl_priv *priv,
1076 enum ieee80211_band band)
1078 if (band == IEEE80211_BAND_5GHZ) {
1079 priv->staging_rxon.flags &=
1080 ~(RXON_FLG_BAND_24G_MSK | RXON_FLG_AUTO_DETECT_MSK
1081 | RXON_FLG_CCK_MSK);
1082 priv->staging_rxon.flags |= RXON_FLG_SHORT_SLOT_MSK;
1083 } else {
1084 /* Copied from iwl4965_post_associate() */
1085 if (priv->assoc_capability & WLAN_CAPABILITY_SHORT_SLOT_TIME)
1086 priv->staging_rxon.flags |= RXON_FLG_SHORT_SLOT_MSK;
1087 else
1088 priv->staging_rxon.flags &= ~RXON_FLG_SHORT_SLOT_MSK;
1090 if (priv->iw_mode == IEEE80211_IF_TYPE_IBSS)
1091 priv->staging_rxon.flags &= ~RXON_FLG_SHORT_SLOT_MSK;
1093 priv->staging_rxon.flags |= RXON_FLG_BAND_24G_MSK;
1094 priv->staging_rxon.flags |= RXON_FLG_AUTO_DETECT_MSK;
1095 priv->staging_rxon.flags &= ~RXON_FLG_CCK_MSK;
1100 * initialize rxon structure with default values from eeprom
1102 static void iwl4965_connection_init_rx_config(struct iwl_priv *priv)
1104 const struct iwl_channel_info *ch_info;
1106 memset(&priv->staging_rxon, 0, sizeof(priv->staging_rxon));
1108 switch (priv->iw_mode) {
1109 case IEEE80211_IF_TYPE_AP:
1110 priv->staging_rxon.dev_type = RXON_DEV_TYPE_AP;
1111 break;
1113 case IEEE80211_IF_TYPE_STA:
1114 priv->staging_rxon.dev_type = RXON_DEV_TYPE_ESS;
1115 priv->staging_rxon.filter_flags = RXON_FILTER_ACCEPT_GRP_MSK;
1116 break;
1118 case IEEE80211_IF_TYPE_IBSS:
1119 priv->staging_rxon.dev_type = RXON_DEV_TYPE_IBSS;
1120 priv->staging_rxon.flags = RXON_FLG_SHORT_PREAMBLE_MSK;
1121 priv->staging_rxon.filter_flags = RXON_FILTER_BCON_AWARE_MSK |
1122 RXON_FILTER_ACCEPT_GRP_MSK;
1123 break;
1125 case IEEE80211_IF_TYPE_MNTR:
1126 priv->staging_rxon.dev_type = RXON_DEV_TYPE_SNIFFER;
1127 priv->staging_rxon.filter_flags = RXON_FILTER_PROMISC_MSK |
1128 RXON_FILTER_CTL2HOST_MSK | RXON_FILTER_ACCEPT_GRP_MSK;
1129 break;
1130 default:
1131 IWL_ERROR("Unsupported interface type %d\n", priv->iw_mode);
1132 break;
1135 #if 0
1136 /* TODO: Figure out when short_preamble would be set and cache from
1137 * that */
1138 if (!hw_to_local(priv->hw)->short_preamble)
1139 priv->staging_rxon.flags &= ~RXON_FLG_SHORT_PREAMBLE_MSK;
1140 else
1141 priv->staging_rxon.flags |= RXON_FLG_SHORT_PREAMBLE_MSK;
1142 #endif
1144 ch_info = iwl_get_channel_info(priv, priv->band,
1145 le16_to_cpu(priv->staging_rxon.channel));
1147 if (!ch_info)
1148 ch_info = &priv->channel_info[0];
1151 * in some case A channels are all non IBSS
1152 * in this case force B/G channel
1154 if ((priv->iw_mode == IEEE80211_IF_TYPE_IBSS) &&
1155 !(is_channel_ibss(ch_info)))
1156 ch_info = &priv->channel_info[0];
1158 priv->staging_rxon.channel = cpu_to_le16(ch_info->channel);
1159 priv->band = ch_info->band;
1161 iwl_set_flags_for_band(priv, priv->band);
1163 priv->staging_rxon.ofdm_basic_rates =
1164 (IWL_OFDM_RATES_MASK >> IWL_FIRST_OFDM_RATE) & 0xFF;
1165 priv->staging_rxon.cck_basic_rates =
1166 (IWL_CCK_RATES_MASK >> IWL_FIRST_CCK_RATE) & 0xF;
1168 priv->staging_rxon.flags &= ~(RXON_FLG_CHANNEL_MODE_MIXED_MSK |
1169 RXON_FLG_CHANNEL_MODE_PURE_40_MSK);
1170 memcpy(priv->staging_rxon.node_addr, priv->mac_addr, ETH_ALEN);
1171 memcpy(priv->staging_rxon.wlap_bssid_addr, priv->mac_addr, ETH_ALEN);
1172 priv->staging_rxon.ofdm_ht_single_stream_basic_rates = 0xff;
1173 priv->staging_rxon.ofdm_ht_dual_stream_basic_rates = 0xff;
1174 iwl_set_rxon_chain(priv);
1177 static int iwl4965_set_mode(struct iwl_priv *priv, int mode)
1179 priv->iw_mode = mode;
1181 /* init channel/phymode to values given at driver init */
1182 iwl_set_rxon_channel(priv, IEEE80211_BAND_2GHZ, 6);
1184 iwl4965_connection_init_rx_config(priv);
1185 memcpy(priv->staging_rxon.node_addr, priv->mac_addr, ETH_ALEN);
1187 iwlcore_clear_stations_table(priv);
1189 /* dont commit rxon if rf-kill is on*/
1190 if (!iwl_is_ready_rf(priv))
1191 return -EAGAIN;
1193 cancel_delayed_work(&priv->scan_check);
1194 if (iwl4965_scan_cancel_timeout(priv, 100)) {
1195 IWL_WARNING("Aborted scan still in progress after 100ms\n");
1196 IWL_DEBUG_MAC80211("leaving - scan abort failed.\n");
1197 return -EAGAIN;
1200 iwl4965_commit_rxon(priv);
1202 return 0;
1205 static void iwl4965_set_rate(struct iwl_priv *priv)
1207 const struct ieee80211_supported_band *hw = NULL;
1208 struct ieee80211_rate *rate;
1209 int i;
1211 hw = iwl_get_hw_mode(priv, priv->band);
1212 if (!hw) {
1213 IWL_ERROR("Failed to set rate: unable to get hw mode\n");
1214 return;
1217 priv->active_rate = 0;
1218 priv->active_rate_basic = 0;
1220 for (i = 0; i < hw->n_bitrates; i++) {
1221 rate = &(hw->bitrates[i]);
1222 if (rate->hw_value < IWL_RATE_COUNT)
1223 priv->active_rate |= (1 << rate->hw_value);
1226 IWL_DEBUG_RATE("Set active_rate = %0x, active_rate_basic = %0x\n",
1227 priv->active_rate, priv->active_rate_basic);
1230 * If a basic rate is configured, then use it (adding IWL_RATE_1M_MASK)
1231 * otherwise set it to the default of all CCK rates and 6, 12, 24 for
1232 * OFDM
1234 if (priv->active_rate_basic & IWL_CCK_BASIC_RATES_MASK)
1235 priv->staging_rxon.cck_basic_rates =
1236 ((priv->active_rate_basic &
1237 IWL_CCK_RATES_MASK) >> IWL_FIRST_CCK_RATE) & 0xF;
1238 else
1239 priv->staging_rxon.cck_basic_rates =
1240 (IWL_CCK_BASIC_RATES_MASK >> IWL_FIRST_CCK_RATE) & 0xF;
1242 if (priv->active_rate_basic & IWL_OFDM_BASIC_RATES_MASK)
1243 priv->staging_rxon.ofdm_basic_rates =
1244 ((priv->active_rate_basic &
1245 (IWL_OFDM_BASIC_RATES_MASK | IWL_RATE_6M_MASK)) >>
1246 IWL_FIRST_OFDM_RATE) & 0xFF;
1247 else
1248 priv->staging_rxon.ofdm_basic_rates =
1249 (IWL_OFDM_BASIC_RATES_MASK >> IWL_FIRST_OFDM_RATE) & 0xFF;
1252 int iwl4965_radio_kill_sw(struct iwl_priv *priv, int disable_radio)
1254 unsigned long flags;
1256 if (!!disable_radio == test_bit(STATUS_RF_KILL_SW, &priv->status))
1257 return 0;
1259 IWL_DEBUG_RF_KILL("Manual SW RF KILL set to: RADIO %s\n",
1260 disable_radio ? "OFF" : "ON");
1262 if (disable_radio) {
1263 iwl4965_scan_cancel(priv);
1264 /* FIXME: This is a workaround for AP */
1265 if (priv->iw_mode != IEEE80211_IF_TYPE_AP) {
1266 spin_lock_irqsave(&priv->lock, flags);
1267 iwl_write32(priv, CSR_UCODE_DRV_GP1_SET,
1268 CSR_UCODE_SW_BIT_RFKILL);
1269 spin_unlock_irqrestore(&priv->lock, flags);
1270 /* call the host command only if no hw rf-kill set */
1271 if (!test_bit(STATUS_RF_KILL_HW, &priv->status) &&
1272 iwl_is_ready(priv))
1273 iwl4965_send_card_state(priv,
1274 CARD_STATE_CMD_DISABLE,
1276 set_bit(STATUS_RF_KILL_SW, &priv->status);
1278 /* make sure mac80211 stop sending Tx frame */
1279 if (priv->mac80211_registered)
1280 ieee80211_stop_queues(priv->hw);
1282 return 0;
1285 spin_lock_irqsave(&priv->lock, flags);
1286 iwl_write32(priv, CSR_UCODE_DRV_GP1_CLR, CSR_UCODE_SW_BIT_RFKILL);
1288 clear_bit(STATUS_RF_KILL_SW, &priv->status);
1289 spin_unlock_irqrestore(&priv->lock, flags);
1291 /* wake up ucode */
1292 msleep(10);
1294 spin_lock_irqsave(&priv->lock, flags);
1295 iwl_read32(priv, CSR_UCODE_DRV_GP1);
1296 if (!iwl_grab_nic_access(priv))
1297 iwl_release_nic_access(priv);
1298 spin_unlock_irqrestore(&priv->lock, flags);
1300 if (test_bit(STATUS_RF_KILL_HW, &priv->status)) {
1301 IWL_DEBUG_RF_KILL("Can not turn radio back on - "
1302 "disabled by HW switch\n");
1303 return 0;
1306 queue_work(priv->workqueue, &priv->restart);
1307 return 1;
1310 #define IWL_PACKET_RETRY_TIME HZ
1312 int iwl4965_is_duplicate_packet(struct iwl_priv *priv, struct ieee80211_hdr *header)
1314 u16 sc = le16_to_cpu(header->seq_ctrl);
1315 u16 seq = (sc & IEEE80211_SCTL_SEQ) >> 4;
1316 u16 frag = sc & IEEE80211_SCTL_FRAG;
1317 u16 *last_seq, *last_frag;
1318 unsigned long *last_time;
1320 switch (priv->iw_mode) {
1321 case IEEE80211_IF_TYPE_IBSS:{
1322 struct list_head *p;
1323 struct iwl4965_ibss_seq *entry = NULL;
1324 u8 *mac = header->addr2;
1325 int index = mac[5] & (IWL_IBSS_MAC_HASH_SIZE - 1);
1327 __list_for_each(p, &priv->ibss_mac_hash[index]) {
1328 entry = list_entry(p, struct iwl4965_ibss_seq, list);
1329 if (!compare_ether_addr(entry->mac, mac))
1330 break;
1332 if (p == &priv->ibss_mac_hash[index]) {
1333 entry = kzalloc(sizeof(*entry), GFP_ATOMIC);
1334 if (!entry) {
1335 IWL_ERROR("Cannot malloc new mac entry\n");
1336 return 0;
1338 memcpy(entry->mac, mac, ETH_ALEN);
1339 entry->seq_num = seq;
1340 entry->frag_num = frag;
1341 entry->packet_time = jiffies;
1342 list_add(&entry->list, &priv->ibss_mac_hash[index]);
1343 return 0;
1345 last_seq = &entry->seq_num;
1346 last_frag = &entry->frag_num;
1347 last_time = &entry->packet_time;
1348 break;
1350 case IEEE80211_IF_TYPE_STA:
1351 last_seq = &priv->last_seq_num;
1352 last_frag = &priv->last_frag_num;
1353 last_time = &priv->last_packet_time;
1354 break;
1355 default:
1356 return 0;
1358 if ((*last_seq == seq) &&
1359 time_after(*last_time + IWL_PACKET_RETRY_TIME, jiffies)) {
1360 if (*last_frag == frag)
1361 goto drop;
1362 if (*last_frag + 1 != frag)
1363 /* out-of-order fragment */
1364 goto drop;
1365 } else
1366 *last_seq = seq;
1368 *last_frag = frag;
1369 *last_time = jiffies;
1370 return 0;
1372 drop:
1373 return 1;
1376 #ifdef CONFIG_IWL4965_SPECTRUM_MEASUREMENT
1378 #include "iwl-spectrum.h"
1380 #define BEACON_TIME_MASK_LOW 0x00FFFFFF
1381 #define BEACON_TIME_MASK_HIGH 0xFF000000
1382 #define TIME_UNIT 1024
1385 * extended beacon time format
1386 * time in usec will be changed into a 32-bit value in 8:24 format
1387 * the high 1 byte is the beacon counts
1388 * the lower 3 bytes is the time in usec within one beacon interval
1391 static u32 iwl4965_usecs_to_beacons(u32 usec, u32 beacon_interval)
1393 u32 quot;
1394 u32 rem;
1395 u32 interval = beacon_interval * 1024;
1397 if (!interval || !usec)
1398 return 0;
1400 quot = (usec / interval) & (BEACON_TIME_MASK_HIGH >> 24);
1401 rem = (usec % interval) & BEACON_TIME_MASK_LOW;
1403 return (quot << 24) + rem;
1406 /* base is usually what we get from ucode with each received frame,
1407 * the same as HW timer counter counting down
1410 static __le32 iwl4965_add_beacon_time(u32 base, u32 addon, u32 beacon_interval)
1412 u32 base_low = base & BEACON_TIME_MASK_LOW;
1413 u32 addon_low = addon & BEACON_TIME_MASK_LOW;
1414 u32 interval = beacon_interval * TIME_UNIT;
1415 u32 res = (base & BEACON_TIME_MASK_HIGH) +
1416 (addon & BEACON_TIME_MASK_HIGH);
1418 if (base_low > addon_low)
1419 res += base_low - addon_low;
1420 else if (base_low < addon_low) {
1421 res += interval + base_low - addon_low;
1422 res += (1 << 24);
1423 } else
1424 res += (1 << 24);
1426 return cpu_to_le32(res);
1429 static int iwl4965_get_measurement(struct iwl_priv *priv,
1430 struct ieee80211_measurement_params *params,
1431 u8 type)
1433 struct iwl4965_spectrum_cmd spectrum;
1434 struct iwl_rx_packet *res;
1435 struct iwl_host_cmd cmd = {
1436 .id = REPLY_SPECTRUM_MEASUREMENT_CMD,
1437 .data = (void *)&spectrum,
1438 .meta.flags = CMD_WANT_SKB,
1440 u32 add_time = le64_to_cpu(params->start_time);
1441 int rc;
1442 int spectrum_resp_status;
1443 int duration = le16_to_cpu(params->duration);
1445 if (iwl_is_associated(priv))
1446 add_time =
1447 iwl4965_usecs_to_beacons(
1448 le64_to_cpu(params->start_time) - priv->last_tsf,
1449 le16_to_cpu(priv->rxon_timing.beacon_interval));
1451 memset(&spectrum, 0, sizeof(spectrum));
1453 spectrum.channel_count = cpu_to_le16(1);
1454 spectrum.flags =
1455 RXON_FLG_TSF2HOST_MSK | RXON_FLG_ANT_A_MSK | RXON_FLG_DIS_DIV_MSK;
1456 spectrum.filter_flags = MEASUREMENT_FILTER_FLAG;
1457 cmd.len = sizeof(spectrum);
1458 spectrum.len = cpu_to_le16(cmd.len - sizeof(spectrum.len));
1460 if (iwl_is_associated(priv))
1461 spectrum.start_time =
1462 iwl4965_add_beacon_time(priv->last_beacon_time,
1463 add_time,
1464 le16_to_cpu(priv->rxon_timing.beacon_interval));
1465 else
1466 spectrum.start_time = 0;
1468 spectrum.channels[0].duration = cpu_to_le32(duration * TIME_UNIT);
1469 spectrum.channels[0].channel = params->channel;
1470 spectrum.channels[0].type = type;
1471 if (priv->active_rxon.flags & RXON_FLG_BAND_24G_MSK)
1472 spectrum.flags |= RXON_FLG_BAND_24G_MSK |
1473 RXON_FLG_AUTO_DETECT_MSK | RXON_FLG_TGG_PROTECT_MSK;
1475 rc = iwl_send_cmd_sync(priv, &cmd);
1476 if (rc)
1477 return rc;
1479 res = (struct iwl_rx_packet *)cmd.meta.u.skb->data;
1480 if (res->hdr.flags & IWL_CMD_FAILED_MSK) {
1481 IWL_ERROR("Bad return from REPLY_RX_ON_ASSOC command\n");
1482 rc = -EIO;
1485 spectrum_resp_status = le16_to_cpu(res->u.spectrum.status);
1486 switch (spectrum_resp_status) {
1487 case 0: /* Command will be handled */
1488 if (res->u.spectrum.id != 0xff) {
1489 IWL_DEBUG_INFO
1490 ("Replaced existing measurement: %d\n",
1491 res->u.spectrum.id);
1492 priv->measurement_status &= ~MEASUREMENT_READY;
1494 priv->measurement_status |= MEASUREMENT_ACTIVE;
1495 rc = 0;
1496 break;
1498 case 1: /* Command will not be handled */
1499 rc = -EAGAIN;
1500 break;
1503 dev_kfree_skb_any(cmd.meta.u.skb);
1505 return rc;
1507 #endif
1509 /******************************************************************************
1511 * Generic RX handler implementations
1513 ******************************************************************************/
1514 static void iwl_rx_reply_alive(struct iwl_priv *priv,
1515 struct iwl_rx_mem_buffer *rxb)
1517 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1518 struct iwl_alive_resp *palive;
1519 struct delayed_work *pwork;
1521 palive = &pkt->u.alive_frame;
1523 IWL_DEBUG_INFO("Alive ucode status 0x%08X revision "
1524 "0x%01X 0x%01X\n",
1525 palive->is_valid, palive->ver_type,
1526 palive->ver_subtype);
1528 if (palive->ver_subtype == INITIALIZE_SUBTYPE) {
1529 IWL_DEBUG_INFO("Initialization Alive received.\n");
1530 memcpy(&priv->card_alive_init,
1531 &pkt->u.alive_frame,
1532 sizeof(struct iwl_init_alive_resp));
1533 pwork = &priv->init_alive_start;
1534 } else {
1535 IWL_DEBUG_INFO("Runtime Alive received.\n");
1536 memcpy(&priv->card_alive, &pkt->u.alive_frame,
1537 sizeof(struct iwl_alive_resp));
1538 pwork = &priv->alive_start;
1541 /* We delay the ALIVE response by 5ms to
1542 * give the HW RF Kill time to activate... */
1543 if (palive->is_valid == UCODE_VALID_OK)
1544 queue_delayed_work(priv->workqueue, pwork,
1545 msecs_to_jiffies(5));
1546 else
1547 IWL_WARNING("uCode did not respond OK.\n");
1550 static void iwl4965_rx_reply_error(struct iwl_priv *priv,
1551 struct iwl_rx_mem_buffer *rxb)
1553 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1555 IWL_ERROR("Error Reply type 0x%08X cmd %s (0x%02X) "
1556 "seq 0x%04X ser 0x%08X\n",
1557 le32_to_cpu(pkt->u.err_resp.error_type),
1558 get_cmd_string(pkt->u.err_resp.cmd_id),
1559 pkt->u.err_resp.cmd_id,
1560 le16_to_cpu(pkt->u.err_resp.bad_cmd_seq_num),
1561 le32_to_cpu(pkt->u.err_resp.error_info));
1564 #define TX_STATUS_ENTRY(x) case TX_STATUS_FAIL_ ## x: return #x
1566 static void iwl4965_rx_csa(struct iwl_priv *priv, struct iwl_rx_mem_buffer *rxb)
1568 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1569 struct iwl_rxon_cmd *rxon = (void *)&priv->active_rxon;
1570 struct iwl4965_csa_notification *csa = &(pkt->u.csa_notif);
1571 IWL_DEBUG_11H("CSA notif: channel %d, status %d\n",
1572 le16_to_cpu(csa->channel), le32_to_cpu(csa->status));
1573 rxon->channel = csa->channel;
1574 priv->staging_rxon.channel = csa->channel;
1577 static void iwl4965_rx_spectrum_measure_notif(struct iwl_priv *priv,
1578 struct iwl_rx_mem_buffer *rxb)
1580 #ifdef CONFIG_IWL4965_SPECTRUM_MEASUREMENT
1581 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1582 struct iwl4965_spectrum_notification *report = &(pkt->u.spectrum_notif);
1584 if (!report->state) {
1585 IWL_DEBUG(IWL_DL_11H,
1586 "Spectrum Measure Notification: Start\n");
1587 return;
1590 memcpy(&priv->measure_report, report, sizeof(*report));
1591 priv->measurement_status |= MEASUREMENT_READY;
1592 #endif
1595 static void iwl4965_rx_pm_sleep_notif(struct iwl_priv *priv,
1596 struct iwl_rx_mem_buffer *rxb)
1598 #ifdef CONFIG_IWLWIFI_DEBUG
1599 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1600 struct iwl4965_sleep_notification *sleep = &(pkt->u.sleep_notif);
1601 IWL_DEBUG_RX("sleep mode: %d, src: %d\n",
1602 sleep->pm_sleep_mode, sleep->pm_wakeup_src);
1603 #endif
1606 static void iwl4965_rx_pm_debug_statistics_notif(struct iwl_priv *priv,
1607 struct iwl_rx_mem_buffer *rxb)
1609 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1610 IWL_DEBUG_RADIO("Dumping %d bytes of unhandled "
1611 "notification for %s:\n",
1612 le32_to_cpu(pkt->len), get_cmd_string(pkt->hdr.cmd));
1613 iwl_print_hex_dump(priv, IWL_DL_RADIO, pkt->u.raw, le32_to_cpu(pkt->len));
1616 static void iwl4965_bg_beacon_update(struct work_struct *work)
1618 struct iwl_priv *priv =
1619 container_of(work, struct iwl_priv, beacon_update);
1620 struct sk_buff *beacon;
1622 /* Pull updated AP beacon from mac80211. will fail if not in AP mode */
1623 beacon = ieee80211_beacon_get(priv->hw, priv->vif);
1625 if (!beacon) {
1626 IWL_ERROR("update beacon failed\n");
1627 return;
1630 mutex_lock(&priv->mutex);
1631 /* new beacon skb is allocated every time; dispose previous.*/
1632 if (priv->ibss_beacon)
1633 dev_kfree_skb(priv->ibss_beacon);
1635 priv->ibss_beacon = beacon;
1636 mutex_unlock(&priv->mutex);
1638 iwl4965_send_beacon_cmd(priv);
1642 * iwl4965_bg_statistics_periodic - Timer callback to queue statistics
1644 * This callback is provided in order to send a statistics request.
1646 * This timer function is continually reset to execute within
1647 * REG_RECALIB_PERIOD seconds since the last STATISTICS_NOTIFICATION
1648 * was received. We need to ensure we receive the statistics in order
1649 * to update the temperature used for calibrating the TXPOWER.
1651 static void iwl4965_bg_statistics_periodic(unsigned long data)
1653 struct iwl_priv *priv = (struct iwl_priv *)data;
1655 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
1656 return;
1658 iwl_send_statistics_request(priv, CMD_ASYNC);
1661 static void iwl4965_rx_beacon_notif(struct iwl_priv *priv,
1662 struct iwl_rx_mem_buffer *rxb)
1664 #ifdef CONFIG_IWLWIFI_DEBUG
1665 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1666 struct iwl4965_beacon_notif *beacon = &(pkt->u.beacon_status);
1667 u8 rate = iwl4965_hw_get_rate(beacon->beacon_notify_hdr.rate_n_flags);
1669 IWL_DEBUG_RX("beacon status %x retries %d iss %d "
1670 "tsf %d %d rate %d\n",
1671 le32_to_cpu(beacon->beacon_notify_hdr.status) & TX_STATUS_MSK,
1672 beacon->beacon_notify_hdr.failure_frame,
1673 le32_to_cpu(beacon->ibss_mgr_status),
1674 le32_to_cpu(beacon->high_tsf),
1675 le32_to_cpu(beacon->low_tsf), rate);
1676 #endif
1678 if ((priv->iw_mode == IEEE80211_IF_TYPE_AP) &&
1679 (!test_bit(STATUS_EXIT_PENDING, &priv->status)))
1680 queue_work(priv->workqueue, &priv->beacon_update);
1683 /* Service response to REPLY_SCAN_CMD (0x80) */
1684 static void iwl4965_rx_reply_scan(struct iwl_priv *priv,
1685 struct iwl_rx_mem_buffer *rxb)
1687 #ifdef CONFIG_IWLWIFI_DEBUG
1688 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1689 struct iwl4965_scanreq_notification *notif =
1690 (struct iwl4965_scanreq_notification *)pkt->u.raw;
1692 IWL_DEBUG_RX("Scan request status = 0x%x\n", notif->status);
1693 #endif
1696 /* Service SCAN_START_NOTIFICATION (0x82) */
1697 static void iwl4965_rx_scan_start_notif(struct iwl_priv *priv,
1698 struct iwl_rx_mem_buffer *rxb)
1700 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1701 struct iwl4965_scanstart_notification *notif =
1702 (struct iwl4965_scanstart_notification *)pkt->u.raw;
1703 priv->scan_start_tsf = le32_to_cpu(notif->tsf_low);
1704 IWL_DEBUG_SCAN("Scan start: "
1705 "%d [802.11%s] "
1706 "(TSF: 0x%08X:%08X) - %d (beacon timer %u)\n",
1707 notif->channel,
1708 notif->band ? "bg" : "a",
1709 notif->tsf_high,
1710 notif->tsf_low, notif->status, notif->beacon_timer);
1713 /* Service SCAN_RESULTS_NOTIFICATION (0x83) */
1714 static void iwl4965_rx_scan_results_notif(struct iwl_priv *priv,
1715 struct iwl_rx_mem_buffer *rxb)
1717 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1718 struct iwl4965_scanresults_notification *notif =
1719 (struct iwl4965_scanresults_notification *)pkt->u.raw;
1721 IWL_DEBUG_SCAN("Scan ch.res: "
1722 "%d [802.11%s] "
1723 "(TSF: 0x%08X:%08X) - %d "
1724 "elapsed=%lu usec (%dms since last)\n",
1725 notif->channel,
1726 notif->band ? "bg" : "a",
1727 le32_to_cpu(notif->tsf_high),
1728 le32_to_cpu(notif->tsf_low),
1729 le32_to_cpu(notif->statistics[0]),
1730 le32_to_cpu(notif->tsf_low) - priv->scan_start_tsf,
1731 jiffies_to_msecs(elapsed_jiffies
1732 (priv->last_scan_jiffies, jiffies)));
1734 priv->last_scan_jiffies = jiffies;
1735 priv->next_scan_jiffies = 0;
1738 /* Service SCAN_COMPLETE_NOTIFICATION (0x84) */
1739 static void iwl4965_rx_scan_complete_notif(struct iwl_priv *priv,
1740 struct iwl_rx_mem_buffer *rxb)
1742 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1743 struct iwl4965_scancomplete_notification *scan_notif = (void *)pkt->u.raw;
1745 IWL_DEBUG_SCAN("Scan complete: %d channels (TSF 0x%08X:%08X) - %d\n",
1746 scan_notif->scanned_channels,
1747 scan_notif->tsf_low,
1748 scan_notif->tsf_high, scan_notif->status);
1750 /* The HW is no longer scanning */
1751 clear_bit(STATUS_SCAN_HW, &priv->status);
1753 /* The scan completion notification came in, so kill that timer... */
1754 cancel_delayed_work(&priv->scan_check);
1756 IWL_DEBUG_INFO("Scan pass on %sGHz took %dms\n",
1757 (priv->scan_bands == 2) ? "2.4" : "5.2",
1758 jiffies_to_msecs(elapsed_jiffies
1759 (priv->scan_pass_start, jiffies)));
1761 /* Remove this scanned band from the list
1762 * of pending bands to scan */
1763 priv->scan_bands--;
1765 /* If a request to abort was given, or the scan did not succeed
1766 * then we reset the scan state machine and terminate,
1767 * re-queuing another scan if one has been requested */
1768 if (test_bit(STATUS_SCAN_ABORTING, &priv->status)) {
1769 IWL_DEBUG_INFO("Aborted scan completed.\n");
1770 clear_bit(STATUS_SCAN_ABORTING, &priv->status);
1771 } else {
1772 /* If there are more bands on this scan pass reschedule */
1773 if (priv->scan_bands > 0)
1774 goto reschedule;
1777 priv->last_scan_jiffies = jiffies;
1778 priv->next_scan_jiffies = 0;
1779 IWL_DEBUG_INFO("Setting scan to off\n");
1781 clear_bit(STATUS_SCANNING, &priv->status);
1783 IWL_DEBUG_INFO("Scan took %dms\n",
1784 jiffies_to_msecs(elapsed_jiffies(priv->scan_start, jiffies)));
1786 queue_work(priv->workqueue, &priv->scan_completed);
1788 return;
1790 reschedule:
1791 priv->scan_pass_start = jiffies;
1792 queue_work(priv->workqueue, &priv->request_scan);
1795 /* Handle notification from uCode that card's power state is changing
1796 * due to software, hardware, or critical temperature RFKILL */
1797 static void iwl4965_rx_card_state_notif(struct iwl_priv *priv,
1798 struct iwl_rx_mem_buffer *rxb)
1800 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1801 u32 flags = le32_to_cpu(pkt->u.card_state_notif.flags);
1802 unsigned long status = priv->status;
1804 IWL_DEBUG_RF_KILL("Card state received: HW:%s SW:%s\n",
1805 (flags & HW_CARD_DISABLED) ? "Kill" : "On",
1806 (flags & SW_CARD_DISABLED) ? "Kill" : "On");
1808 if (flags & (SW_CARD_DISABLED | HW_CARD_DISABLED |
1809 RF_CARD_DISABLED)) {
1811 iwl_write32(priv, CSR_UCODE_DRV_GP1_SET,
1812 CSR_UCODE_DRV_GP1_BIT_CMD_BLOCKED);
1814 if (!iwl_grab_nic_access(priv)) {
1815 iwl_write_direct32(
1816 priv, HBUS_TARG_MBX_C,
1817 HBUS_TARG_MBX_C_REG_BIT_CMD_BLOCKED);
1819 iwl_release_nic_access(priv);
1822 if (!(flags & RXON_CARD_DISABLED)) {
1823 iwl_write32(priv, CSR_UCODE_DRV_GP1_CLR,
1824 CSR_UCODE_DRV_GP1_BIT_CMD_BLOCKED);
1825 if (!iwl_grab_nic_access(priv)) {
1826 iwl_write_direct32(
1827 priv, HBUS_TARG_MBX_C,
1828 HBUS_TARG_MBX_C_REG_BIT_CMD_BLOCKED);
1830 iwl_release_nic_access(priv);
1834 if (flags & RF_CARD_DISABLED) {
1835 iwl_write32(priv, CSR_UCODE_DRV_GP1_SET,
1836 CSR_UCODE_DRV_GP1_REG_BIT_CT_KILL_EXIT);
1837 iwl_read32(priv, CSR_UCODE_DRV_GP1);
1838 if (!iwl_grab_nic_access(priv))
1839 iwl_release_nic_access(priv);
1843 if (flags & HW_CARD_DISABLED)
1844 set_bit(STATUS_RF_KILL_HW, &priv->status);
1845 else
1846 clear_bit(STATUS_RF_KILL_HW, &priv->status);
1849 if (flags & SW_CARD_DISABLED)
1850 set_bit(STATUS_RF_KILL_SW, &priv->status);
1851 else
1852 clear_bit(STATUS_RF_KILL_SW, &priv->status);
1854 if (!(flags & RXON_CARD_DISABLED))
1855 iwl4965_scan_cancel(priv);
1857 if ((test_bit(STATUS_RF_KILL_HW, &status) !=
1858 test_bit(STATUS_RF_KILL_HW, &priv->status)) ||
1859 (test_bit(STATUS_RF_KILL_SW, &status) !=
1860 test_bit(STATUS_RF_KILL_SW, &priv->status)))
1861 queue_work(priv->workqueue, &priv->rf_kill);
1862 else
1863 wake_up_interruptible(&priv->wait_command_queue);
1866 /* Cache phy data (Rx signal strength, etc) for HT frame (REPLY_RX_PHY_CMD).
1867 * This will be used later in iwl4965_rx_reply_rx() for REPLY_RX_MPDU_CMD. */
1868 static void iwl4965_rx_reply_rx_phy(struct iwl_priv *priv,
1869 struct iwl_rx_mem_buffer *rxb)
1871 struct iwl_rx_packet *pkt = (struct iwl_rx_packet *)rxb->skb->data;
1872 priv->last_phy_res[0] = 1;
1873 memcpy(&priv->last_phy_res[1], &(pkt->u.raw[0]),
1874 sizeof(struct iwl4965_rx_phy_res));
1878 * iwl4965_setup_rx_handlers - Initialize Rx handler callbacks
1880 * Setup the RX handlers for each of the reply types sent from the uCode
1881 * to the host.
1883 * This function chains into the hardware specific files for them to setup
1884 * any hardware specific handlers as well.
1886 static void iwl4965_setup_rx_handlers(struct iwl_priv *priv)
1888 priv->rx_handlers[REPLY_ALIVE] = iwl_rx_reply_alive;
1889 priv->rx_handlers[REPLY_ERROR] = iwl4965_rx_reply_error;
1890 priv->rx_handlers[CHANNEL_SWITCH_NOTIFICATION] = iwl4965_rx_csa;
1891 priv->rx_handlers[SPECTRUM_MEASURE_NOTIFICATION] =
1892 iwl4965_rx_spectrum_measure_notif;
1893 priv->rx_handlers[PM_SLEEP_NOTIFICATION] = iwl4965_rx_pm_sleep_notif;
1894 priv->rx_handlers[PM_DEBUG_STATISTIC_NOTIFIC] =
1895 iwl4965_rx_pm_debug_statistics_notif;
1896 priv->rx_handlers[BEACON_NOTIFICATION] = iwl4965_rx_beacon_notif;
1899 * The same handler is used for both the REPLY to a discrete
1900 * statistics request from the host as well as for the periodic
1901 * statistics notifications (after received beacons) from the uCode.
1903 priv->rx_handlers[REPLY_STATISTICS_CMD] = iwl4965_hw_rx_statistics;
1904 priv->rx_handlers[STATISTICS_NOTIFICATION] = iwl4965_hw_rx_statistics;
1905 /* scan handlers */
1906 priv->rx_handlers[REPLY_SCAN_CMD] = iwl4965_rx_reply_scan;
1907 priv->rx_handlers[SCAN_START_NOTIFICATION] = iwl4965_rx_scan_start_notif;
1908 priv->rx_handlers[SCAN_RESULTS_NOTIFICATION] =
1909 iwl4965_rx_scan_results_notif;
1910 priv->rx_handlers[SCAN_COMPLETE_NOTIFICATION] =
1911 iwl4965_rx_scan_complete_notif;
1912 /* status change handler */
1913 priv->rx_handlers[CARD_STATE_NOTIFICATION] = iwl4965_rx_card_state_notif;
1915 priv->rx_handlers[MISSED_BEACONS_NOTIFICATION] =
1916 iwl_rx_missed_beacon_notif;
1917 /* Rx handlers */
1918 priv->rx_handlers[REPLY_RX_PHY_CMD] = iwl4965_rx_reply_rx_phy;
1919 priv->rx_handlers[REPLY_RX_MPDU_CMD] = iwl4965_rx_reply_rx;
1920 /* Set up hardware specific Rx handlers */
1921 priv->cfg->ops->lib->rx_handler_setup(priv);
1925 * this should be called while priv->lock is locked
1927 static void __iwl_rx_replenish(struct iwl_priv *priv)
1929 iwl_rx_allocate(priv);
1930 iwl_rx_queue_restock(priv);
1935 * iwl_rx_handle - Main entry function for receiving responses from uCode
1937 * Uses the priv->rx_handlers callback function array to invoke
1938 * the appropriate handlers, including command responses,
1939 * frame-received notifications, and other notifications.
1941 void iwl_rx_handle(struct iwl_priv *priv)
1943 struct iwl_rx_mem_buffer *rxb;
1944 struct iwl_rx_packet *pkt;
1945 struct iwl_rx_queue *rxq = &priv->rxq;
1946 u32 r, i;
1947 int reclaim;
1948 unsigned long flags;
1949 u8 fill_rx = 0;
1950 u32 count = 8;
1952 /* uCode's read index (stored in shared DRAM) indicates the last Rx
1953 * buffer that the driver may process (last buffer filled by ucode). */
1954 r = priv->cfg->ops->lib->shared_mem_rx_idx(priv);
1955 i = rxq->read;
1957 /* Rx interrupt, but nothing sent from uCode */
1958 if (i == r)
1959 IWL_DEBUG(IWL_DL_RX, "r = %d, i = %d\n", r, i);
1961 if (iwl_rx_queue_space(rxq) > (RX_QUEUE_SIZE / 2))
1962 fill_rx = 1;
1964 while (i != r) {
1965 rxb = rxq->queue[i];
1967 /* If an RXB doesn't have a Rx queue slot associated with it,
1968 * then a bug has been introduced in the queue refilling
1969 * routines -- catch it here */
1970 BUG_ON(rxb == NULL);
1972 rxq->queue[i] = NULL;
1974 pci_dma_sync_single_for_cpu(priv->pci_dev, rxb->dma_addr,
1975 priv->hw_params.rx_buf_size,
1976 PCI_DMA_FROMDEVICE);
1977 pkt = (struct iwl_rx_packet *)rxb->skb->data;
1979 /* Reclaim a command buffer only if this packet is a response
1980 * to a (driver-originated) command.
1981 * If the packet (e.g. Rx frame) originated from uCode,
1982 * there is no command buffer to reclaim.
1983 * Ucode should set SEQ_RX_FRAME bit if ucode-originated,
1984 * but apparently a few don't get set; catch them here. */
1985 reclaim = !(pkt->hdr.sequence & SEQ_RX_FRAME) &&
1986 (pkt->hdr.cmd != REPLY_RX_PHY_CMD) &&
1987 (pkt->hdr.cmd != REPLY_RX) &&
1988 (pkt->hdr.cmd != REPLY_COMPRESSED_BA) &&
1989 (pkt->hdr.cmd != STATISTICS_NOTIFICATION) &&
1990 (pkt->hdr.cmd != REPLY_TX);
1992 /* Based on type of command response or notification,
1993 * handle those that need handling via function in
1994 * rx_handlers table. See iwl4965_setup_rx_handlers() */
1995 if (priv->rx_handlers[pkt->hdr.cmd]) {
1996 IWL_DEBUG(IWL_DL_RX, "r = %d, i = %d, %s, 0x%02x\n", r,
1997 i, get_cmd_string(pkt->hdr.cmd), pkt->hdr.cmd);
1998 priv->rx_handlers[pkt->hdr.cmd] (priv, rxb);
1999 } else {
2000 /* No handling needed */
2001 IWL_DEBUG(IWL_DL_RX,
2002 "r %d i %d No handler needed for %s, 0x%02x\n",
2003 r, i, get_cmd_string(pkt->hdr.cmd),
2004 pkt->hdr.cmd);
2007 if (reclaim) {
2008 /* Invoke any callbacks, transfer the skb to caller, and
2009 * fire off the (possibly) blocking iwl_send_cmd()
2010 * as we reclaim the driver command queue */
2011 if (rxb && rxb->skb)
2012 iwl_tx_cmd_complete(priv, rxb);
2013 else
2014 IWL_WARNING("Claim null rxb?\n");
2017 /* For now we just don't re-use anything. We can tweak this
2018 * later to try and re-use notification packets and SKBs that
2019 * fail to Rx correctly */
2020 if (rxb->skb != NULL) {
2021 priv->alloc_rxb_skb--;
2022 dev_kfree_skb_any(rxb->skb);
2023 rxb->skb = NULL;
2026 pci_unmap_single(priv->pci_dev, rxb->dma_addr,
2027 priv->hw_params.rx_buf_size,
2028 PCI_DMA_FROMDEVICE);
2029 spin_lock_irqsave(&rxq->lock, flags);
2030 list_add_tail(&rxb->list, &priv->rxq.rx_used);
2031 spin_unlock_irqrestore(&rxq->lock, flags);
2032 i = (i + 1) & RX_QUEUE_MASK;
2033 /* If there are a lot of unused frames,
2034 * restock the Rx queue so ucode wont assert. */
2035 if (fill_rx) {
2036 count++;
2037 if (count >= 8) {
2038 priv->rxq.read = i;
2039 __iwl_rx_replenish(priv);
2040 count = 0;
2045 /* Backtrack one entry */
2046 priv->rxq.read = i;
2047 iwl_rx_queue_restock(priv);
2049 /* Convert linear signal-to-noise ratio into dB */
2050 static u8 ratio2dB[100] = {
2051 /* 0 1 2 3 4 5 6 7 8 9 */
2052 0, 0, 6, 10, 12, 14, 16, 17, 18, 19, /* 00 - 09 */
2053 20, 21, 22, 22, 23, 23, 24, 25, 26, 26, /* 10 - 19 */
2054 26, 26, 26, 27, 27, 28, 28, 28, 29, 29, /* 20 - 29 */
2055 29, 30, 30, 30, 31, 31, 31, 31, 32, 32, /* 30 - 39 */
2056 32, 32, 32, 33, 33, 33, 33, 33, 34, 34, /* 40 - 49 */
2057 34, 34, 34, 34, 35, 35, 35, 35, 35, 35, /* 50 - 59 */
2058 36, 36, 36, 36, 36, 36, 36, 37, 37, 37, /* 60 - 69 */
2059 37, 37, 37, 37, 37, 38, 38, 38, 38, 38, /* 70 - 79 */
2060 38, 38, 38, 38, 38, 39, 39, 39, 39, 39, /* 80 - 89 */
2061 39, 39, 39, 39, 39, 40, 40, 40, 40, 40 /* 90 - 99 */
2064 /* Calculates a relative dB value from a ratio of linear
2065 * (i.e. not dB) signal levels.
2066 * Conversion assumes that levels are voltages (20*log), not powers (10*log). */
2067 int iwl4965_calc_db_from_ratio(int sig_ratio)
2069 /* 1000:1 or higher just report as 60 dB */
2070 if (sig_ratio >= 1000)
2071 return 60;
2073 /* 100:1 or higher, divide by 10 and use table,
2074 * add 20 dB to make up for divide by 10 */
2075 if (sig_ratio >= 100)
2076 return (20 + (int)ratio2dB[sig_ratio/10]);
2078 /* We shouldn't see this */
2079 if (sig_ratio < 1)
2080 return 0;
2082 /* Use table for ratios 1:1 - 99:1 */
2083 return (int)ratio2dB[sig_ratio];
2086 #define PERFECT_RSSI (-20) /* dBm */
2087 #define WORST_RSSI (-95) /* dBm */
2088 #define RSSI_RANGE (PERFECT_RSSI - WORST_RSSI)
2090 /* Calculate an indication of rx signal quality (a percentage, not dBm!).
2091 * See http://www.ces.clemson.edu/linux/signal_quality.shtml for info
2092 * about formulas used below. */
2093 int iwl4965_calc_sig_qual(int rssi_dbm, int noise_dbm)
2095 int sig_qual;
2096 int degradation = PERFECT_RSSI - rssi_dbm;
2098 /* If we get a noise measurement, use signal-to-noise ratio (SNR)
2099 * as indicator; formula is (signal dbm - noise dbm).
2100 * SNR at or above 40 is a great signal (100%).
2101 * Below that, scale to fit SNR of 0 - 40 dB within 0 - 100% indicator.
2102 * Weakest usable signal is usually 10 - 15 dB SNR. */
2103 if (noise_dbm) {
2104 if (rssi_dbm - noise_dbm >= 40)
2105 return 100;
2106 else if (rssi_dbm < noise_dbm)
2107 return 0;
2108 sig_qual = ((rssi_dbm - noise_dbm) * 5) / 2;
2110 /* Else use just the signal level.
2111 * This formula is a least squares fit of data points collected and
2112 * compared with a reference system that had a percentage (%) display
2113 * for signal quality. */
2114 } else
2115 sig_qual = (100 * (RSSI_RANGE * RSSI_RANGE) - degradation *
2116 (15 * RSSI_RANGE + 62 * degradation)) /
2117 (RSSI_RANGE * RSSI_RANGE);
2119 if (sig_qual > 100)
2120 sig_qual = 100;
2121 else if (sig_qual < 1)
2122 sig_qual = 0;
2124 return sig_qual;
2127 #ifdef CONFIG_IWLWIFI_DEBUG
2128 static void iwl4965_print_rx_config_cmd(struct iwl_priv *priv)
2130 struct iwl_rxon_cmd *rxon = &priv->staging_rxon;
2131 DECLARE_MAC_BUF(mac);
2133 IWL_DEBUG_RADIO("RX CONFIG:\n");
2134 iwl_print_hex_dump(priv, IWL_DL_RADIO, (u8 *) rxon, sizeof(*rxon));
2135 IWL_DEBUG_RADIO("u16 channel: 0x%x\n", le16_to_cpu(rxon->channel));
2136 IWL_DEBUG_RADIO("u32 flags: 0x%08X\n", le32_to_cpu(rxon->flags));
2137 IWL_DEBUG_RADIO("u32 filter_flags: 0x%08x\n",
2138 le32_to_cpu(rxon->filter_flags));
2139 IWL_DEBUG_RADIO("u8 dev_type: 0x%x\n", rxon->dev_type);
2140 IWL_DEBUG_RADIO("u8 ofdm_basic_rates: 0x%02x\n",
2141 rxon->ofdm_basic_rates);
2142 IWL_DEBUG_RADIO("u8 cck_basic_rates: 0x%02x\n", rxon->cck_basic_rates);
2143 IWL_DEBUG_RADIO("u8[6] node_addr: %s\n",
2144 print_mac(mac, rxon->node_addr));
2145 IWL_DEBUG_RADIO("u8[6] bssid_addr: %s\n",
2146 print_mac(mac, rxon->bssid_addr));
2147 IWL_DEBUG_RADIO("u16 assoc_id: 0x%x\n", le16_to_cpu(rxon->assoc_id));
2149 #endif
2151 static void iwl4965_enable_interrupts(struct iwl_priv *priv)
2153 IWL_DEBUG_ISR("Enabling interrupts\n");
2154 set_bit(STATUS_INT_ENABLED, &priv->status);
2155 iwl_write32(priv, CSR_INT_MASK, CSR_INI_SET_MASK);
2158 /* call this function to flush any scheduled tasklet */
2159 static inline void iwl_synchronize_irq(struct iwl_priv *priv)
2161 /* wait to make sure we flush pedding tasklet*/
2162 synchronize_irq(priv->pci_dev->irq);
2163 tasklet_kill(&priv->irq_tasklet);
2166 static inline void iwl4965_disable_interrupts(struct iwl_priv *priv)
2168 clear_bit(STATUS_INT_ENABLED, &priv->status);
2170 /* disable interrupts from uCode/NIC to host */
2171 iwl_write32(priv, CSR_INT_MASK, 0x00000000);
2173 /* acknowledge/clear/reset any interrupts still pending
2174 * from uCode or flow handler (Rx/Tx DMA) */
2175 iwl_write32(priv, CSR_INT, 0xffffffff);
2176 iwl_write32(priv, CSR_FH_INT_STATUS, 0xffffffff);
2177 IWL_DEBUG_ISR("Disabled interrupts\n");
2182 * iwl4965_irq_handle_error - called for HW or SW error interrupt from card
2184 static void iwl4965_irq_handle_error(struct iwl_priv *priv)
2186 /* Set the FW error flag -- cleared on iwl4965_down */
2187 set_bit(STATUS_FW_ERROR, &priv->status);
2189 /* Cancel currently queued command. */
2190 clear_bit(STATUS_HCMD_ACTIVE, &priv->status);
2192 #ifdef CONFIG_IWLWIFI_DEBUG
2193 if (priv->debug_level & IWL_DL_FW_ERRORS) {
2194 iwl_dump_nic_error_log(priv);
2195 iwl_dump_nic_event_log(priv);
2196 iwl4965_print_rx_config_cmd(priv);
2198 #endif
2200 wake_up_interruptible(&priv->wait_command_queue);
2202 /* Keep the restart process from trying to send host
2203 * commands by clearing the INIT status bit */
2204 clear_bit(STATUS_READY, &priv->status);
2206 if (!test_bit(STATUS_EXIT_PENDING, &priv->status)) {
2207 IWL_DEBUG(IWL_DL_FW_ERRORS,
2208 "Restarting adapter due to uCode error.\n");
2210 if (iwl_is_associated(priv)) {
2211 memcpy(&priv->recovery_rxon, &priv->active_rxon,
2212 sizeof(priv->recovery_rxon));
2213 priv->error_recovering = 1;
2215 if (priv->cfg->mod_params->restart_fw)
2216 queue_work(priv->workqueue, &priv->restart);
2220 static void iwl4965_error_recovery(struct iwl_priv *priv)
2222 unsigned long flags;
2224 memcpy(&priv->staging_rxon, &priv->recovery_rxon,
2225 sizeof(priv->staging_rxon));
2226 priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
2227 iwl4965_commit_rxon(priv);
2229 iwl_rxon_add_station(priv, priv->bssid, 1);
2231 spin_lock_irqsave(&priv->lock, flags);
2232 priv->assoc_id = le16_to_cpu(priv->staging_rxon.assoc_id);
2233 priv->error_recovering = 0;
2234 spin_unlock_irqrestore(&priv->lock, flags);
2237 static void iwl4965_irq_tasklet(struct iwl_priv *priv)
2239 u32 inta, handled = 0;
2240 u32 inta_fh;
2241 unsigned long flags;
2242 #ifdef CONFIG_IWLWIFI_DEBUG
2243 u32 inta_mask;
2244 #endif
2246 spin_lock_irqsave(&priv->lock, flags);
2248 /* Ack/clear/reset pending uCode interrupts.
2249 * Note: Some bits in CSR_INT are "OR" of bits in CSR_FH_INT_STATUS,
2250 * and will clear only when CSR_FH_INT_STATUS gets cleared. */
2251 inta = iwl_read32(priv, CSR_INT);
2252 iwl_write32(priv, CSR_INT, inta);
2254 /* Ack/clear/reset pending flow-handler (DMA) interrupts.
2255 * Any new interrupts that happen after this, either while we're
2256 * in this tasklet, or later, will show up in next ISR/tasklet. */
2257 inta_fh = iwl_read32(priv, CSR_FH_INT_STATUS);
2258 iwl_write32(priv, CSR_FH_INT_STATUS, inta_fh);
2260 #ifdef CONFIG_IWLWIFI_DEBUG
2261 if (priv->debug_level & IWL_DL_ISR) {
2262 /* just for debug */
2263 inta_mask = iwl_read32(priv, CSR_INT_MASK);
2264 IWL_DEBUG_ISR("inta 0x%08x, enabled 0x%08x, fh 0x%08x\n",
2265 inta, inta_mask, inta_fh);
2267 #endif
2269 /* Since CSR_INT and CSR_FH_INT_STATUS reads and clears are not
2270 * atomic, make sure that inta covers all the interrupts that
2271 * we've discovered, even if FH interrupt came in just after
2272 * reading CSR_INT. */
2273 if (inta_fh & CSR49_FH_INT_RX_MASK)
2274 inta |= CSR_INT_BIT_FH_RX;
2275 if (inta_fh & CSR49_FH_INT_TX_MASK)
2276 inta |= CSR_INT_BIT_FH_TX;
2278 /* Now service all interrupt bits discovered above. */
2279 if (inta & CSR_INT_BIT_HW_ERR) {
2280 IWL_ERROR("Microcode HW error detected. Restarting.\n");
2282 /* Tell the device to stop sending interrupts */
2283 iwl4965_disable_interrupts(priv);
2285 iwl4965_irq_handle_error(priv);
2287 handled |= CSR_INT_BIT_HW_ERR;
2289 spin_unlock_irqrestore(&priv->lock, flags);
2291 return;
2294 #ifdef CONFIG_IWLWIFI_DEBUG
2295 if (priv->debug_level & (IWL_DL_ISR)) {
2296 /* NIC fires this, but we don't use it, redundant with WAKEUP */
2297 if (inta & CSR_INT_BIT_SCD)
2298 IWL_DEBUG_ISR("Scheduler finished to transmit "
2299 "the frame/frames.\n");
2301 /* Alive notification via Rx interrupt will do the real work */
2302 if (inta & CSR_INT_BIT_ALIVE)
2303 IWL_DEBUG_ISR("Alive interrupt\n");
2305 #endif
2306 /* Safely ignore these bits for debug checks below */
2307 inta &= ~(CSR_INT_BIT_SCD | CSR_INT_BIT_ALIVE);
2309 /* HW RF KILL switch toggled */
2310 if (inta & CSR_INT_BIT_RF_KILL) {
2311 int hw_rf_kill = 0;
2312 if (!(iwl_read32(priv, CSR_GP_CNTRL) &
2313 CSR_GP_CNTRL_REG_FLAG_HW_RF_KILL_SW))
2314 hw_rf_kill = 1;
2316 IWL_DEBUG(IWL_DL_RF_KILL, "RF_KILL bit toggled to %s.\n",
2317 hw_rf_kill ? "disable radio":"enable radio");
2319 /* Queue restart only if RF_KILL switch was set to "kill"
2320 * when we loaded driver, and is now set to "enable".
2321 * After we're Alive, RF_KILL gets handled by
2322 * iwl4965_rx_card_state_notif() */
2323 if (!hw_rf_kill && !test_bit(STATUS_ALIVE, &priv->status)) {
2324 clear_bit(STATUS_RF_KILL_HW, &priv->status);
2325 queue_work(priv->workqueue, &priv->restart);
2328 handled |= CSR_INT_BIT_RF_KILL;
2331 /* Chip got too hot and stopped itself */
2332 if (inta & CSR_INT_BIT_CT_KILL) {
2333 IWL_ERROR("Microcode CT kill error detected.\n");
2334 handled |= CSR_INT_BIT_CT_KILL;
2337 /* Error detected by uCode */
2338 if (inta & CSR_INT_BIT_SW_ERR) {
2339 IWL_ERROR("Microcode SW error detected. Restarting 0x%X.\n",
2340 inta);
2341 iwl4965_irq_handle_error(priv);
2342 handled |= CSR_INT_BIT_SW_ERR;
2345 /* uCode wakes up after power-down sleep */
2346 if (inta & CSR_INT_BIT_WAKEUP) {
2347 IWL_DEBUG_ISR("Wakeup interrupt\n");
2348 iwl_rx_queue_update_write_ptr(priv, &priv->rxq);
2349 iwl_txq_update_write_ptr(priv, &priv->txq[0]);
2350 iwl_txq_update_write_ptr(priv, &priv->txq[1]);
2351 iwl_txq_update_write_ptr(priv, &priv->txq[2]);
2352 iwl_txq_update_write_ptr(priv, &priv->txq[3]);
2353 iwl_txq_update_write_ptr(priv, &priv->txq[4]);
2354 iwl_txq_update_write_ptr(priv, &priv->txq[5]);
2356 handled |= CSR_INT_BIT_WAKEUP;
2359 /* All uCode command responses, including Tx command responses,
2360 * Rx "responses" (frame-received notification), and other
2361 * notifications from uCode come through here*/
2362 if (inta & (CSR_INT_BIT_FH_RX | CSR_INT_BIT_SW_RX)) {
2363 iwl_rx_handle(priv);
2364 handled |= (CSR_INT_BIT_FH_RX | CSR_INT_BIT_SW_RX);
2367 if (inta & CSR_INT_BIT_FH_TX) {
2368 IWL_DEBUG_ISR("Tx interrupt\n");
2369 handled |= CSR_INT_BIT_FH_TX;
2370 /* FH finished to write, send event */
2371 priv->ucode_write_complete = 1;
2372 wake_up_interruptible(&priv->wait_command_queue);
2375 if (inta & ~handled)
2376 IWL_ERROR("Unhandled INTA bits 0x%08x\n", inta & ~handled);
2378 if (inta & ~CSR_INI_SET_MASK) {
2379 IWL_WARNING("Disabled INTA bits 0x%08x were pending\n",
2380 inta & ~CSR_INI_SET_MASK);
2381 IWL_WARNING(" with FH_INT = 0x%08x\n", inta_fh);
2384 /* Re-enable all interrupts */
2385 /* only Re-enable if diabled by irq */
2386 if (test_bit(STATUS_INT_ENABLED, &priv->status))
2387 iwl4965_enable_interrupts(priv);
2389 #ifdef CONFIG_IWLWIFI_DEBUG
2390 if (priv->debug_level & (IWL_DL_ISR)) {
2391 inta = iwl_read32(priv, CSR_INT);
2392 inta_mask = iwl_read32(priv, CSR_INT_MASK);
2393 inta_fh = iwl_read32(priv, CSR_FH_INT_STATUS);
2394 IWL_DEBUG_ISR("End inta 0x%08x, enabled 0x%08x, fh 0x%08x, "
2395 "flags 0x%08lx\n", inta, inta_mask, inta_fh, flags);
2397 #endif
2398 spin_unlock_irqrestore(&priv->lock, flags);
2401 static irqreturn_t iwl4965_isr(int irq, void *data)
2403 struct iwl_priv *priv = data;
2404 u32 inta, inta_mask;
2405 u32 inta_fh;
2406 if (!priv)
2407 return IRQ_NONE;
2409 spin_lock(&priv->lock);
2411 /* Disable (but don't clear!) interrupts here to avoid
2412 * back-to-back ISRs and sporadic interrupts from our NIC.
2413 * If we have something to service, the tasklet will re-enable ints.
2414 * If we *don't* have something, we'll re-enable before leaving here. */
2415 inta_mask = iwl_read32(priv, CSR_INT_MASK); /* just for debug */
2416 iwl_write32(priv, CSR_INT_MASK, 0x00000000);
2418 /* Discover which interrupts are active/pending */
2419 inta = iwl_read32(priv, CSR_INT);
2420 inta_fh = iwl_read32(priv, CSR_FH_INT_STATUS);
2422 /* Ignore interrupt if there's nothing in NIC to service.
2423 * This may be due to IRQ shared with another device,
2424 * or due to sporadic interrupts thrown from our NIC. */
2425 if (!inta && !inta_fh) {
2426 IWL_DEBUG_ISR("Ignore interrupt, inta == 0, inta_fh == 0\n");
2427 goto none;
2430 if ((inta == 0xFFFFFFFF) || ((inta & 0xFFFFFFF0) == 0xa5a5a5a0)) {
2431 /* Hardware disappeared. It might have already raised
2432 * an interrupt */
2433 IWL_WARNING("HARDWARE GONE?? INTA == 0x%080x\n", inta);
2434 goto unplugged;
2437 IWL_DEBUG_ISR("ISR inta 0x%08x, enabled 0x%08x, fh 0x%08x\n",
2438 inta, inta_mask, inta_fh);
2440 inta &= ~CSR_INT_BIT_SCD;
2442 /* iwl4965_irq_tasklet() will service interrupts and re-enable them */
2443 if (likely(inta || inta_fh))
2444 tasklet_schedule(&priv->irq_tasklet);
2446 unplugged:
2447 spin_unlock(&priv->lock);
2448 return IRQ_HANDLED;
2450 none:
2451 /* re-enable interrupts here since we don't have anything to service. */
2452 /* only Re-enable if diabled by irq */
2453 if (test_bit(STATUS_INT_ENABLED, &priv->status))
2454 iwl4965_enable_interrupts(priv);
2455 spin_unlock(&priv->lock);
2456 return IRQ_NONE;
2459 /* For active scan, listen ACTIVE_DWELL_TIME (msec) on each channel after
2460 * sending probe req. This should be set long enough to hear probe responses
2461 * from more than one AP. */
2462 #define IWL_ACTIVE_DWELL_TIME_24 (20) /* all times in msec */
2463 #define IWL_ACTIVE_DWELL_TIME_52 (10)
2465 /* For faster active scanning, scan will move to the next channel if fewer than
2466 * PLCP_QUIET_THRESH packets are heard on this channel within
2467 * ACTIVE_QUIET_TIME after sending probe request. This shortens the dwell
2468 * time if it's a quiet channel (nothing responded to our probe, and there's
2469 * no other traffic).
2470 * Disable "quiet" feature by setting PLCP_QUIET_THRESH to 0. */
2471 #define IWL_PLCP_QUIET_THRESH __constant_cpu_to_le16(1) /* packets */
2472 #define IWL_ACTIVE_QUIET_TIME __constant_cpu_to_le16(5) /* msec */
2474 /* For passive scan, listen PASSIVE_DWELL_TIME (msec) on each channel.
2475 * Must be set longer than active dwell time.
2476 * For the most reliable scan, set > AP beacon interval (typically 100msec). */
2477 #define IWL_PASSIVE_DWELL_TIME_24 (20) /* all times in msec */
2478 #define IWL_PASSIVE_DWELL_TIME_52 (10)
2479 #define IWL_PASSIVE_DWELL_BASE (100)
2480 #define IWL_CHANNEL_TUNE_TIME 5
2482 static inline u16 iwl4965_get_active_dwell_time(struct iwl_priv *priv,
2483 enum ieee80211_band band)
2485 if (band == IEEE80211_BAND_5GHZ)
2486 return IWL_ACTIVE_DWELL_TIME_52;
2487 else
2488 return IWL_ACTIVE_DWELL_TIME_24;
2491 static u16 iwl4965_get_passive_dwell_time(struct iwl_priv *priv,
2492 enum ieee80211_band band)
2494 u16 active = iwl4965_get_active_dwell_time(priv, band);
2495 u16 passive = (band != IEEE80211_BAND_5GHZ) ?
2496 IWL_PASSIVE_DWELL_BASE + IWL_PASSIVE_DWELL_TIME_24 :
2497 IWL_PASSIVE_DWELL_BASE + IWL_PASSIVE_DWELL_TIME_52;
2499 if (iwl_is_associated(priv)) {
2500 /* If we're associated, we clamp the maximum passive
2501 * dwell time to be 98% of the beacon interval (minus
2502 * 2 * channel tune time) */
2503 passive = priv->beacon_int;
2504 if ((passive > IWL_PASSIVE_DWELL_BASE) || !passive)
2505 passive = IWL_PASSIVE_DWELL_BASE;
2506 passive = (passive * 98) / 100 - IWL_CHANNEL_TUNE_TIME * 2;
2509 if (passive <= active)
2510 passive = active + 1;
2512 return passive;
2515 static int iwl4965_get_channels_for_scan(struct iwl_priv *priv,
2516 enum ieee80211_band band,
2517 u8 is_active, u8 direct_mask,
2518 struct iwl4965_scan_channel *scan_ch)
2520 const struct ieee80211_channel *channels = NULL;
2521 const struct ieee80211_supported_band *sband;
2522 const struct iwl_channel_info *ch_info;
2523 u16 passive_dwell = 0;
2524 u16 active_dwell = 0;
2525 int added, i;
2527 sband = iwl_get_hw_mode(priv, band);
2528 if (!sband)
2529 return 0;
2531 channels = sband->channels;
2533 active_dwell = iwl4965_get_active_dwell_time(priv, band);
2534 passive_dwell = iwl4965_get_passive_dwell_time(priv, band);
2536 for (i = 0, added = 0; i < sband->n_channels; i++) {
2537 if (channels[i].flags & IEEE80211_CHAN_DISABLED)
2538 continue;
2540 scan_ch->channel = ieee80211_frequency_to_channel(channels[i].center_freq);
2542 ch_info = iwl_get_channel_info(priv, band,
2543 scan_ch->channel);
2544 if (!is_channel_valid(ch_info)) {
2545 IWL_DEBUG_SCAN("Channel %d is INVALID for this SKU.\n",
2546 scan_ch->channel);
2547 continue;
2550 if (!is_active || is_channel_passive(ch_info) ||
2551 (channels[i].flags & IEEE80211_CHAN_PASSIVE_SCAN))
2552 scan_ch->type = 0; /* passive */
2553 else
2554 scan_ch->type = 1; /* active */
2556 if (scan_ch->type & 1)
2557 scan_ch->type |= (direct_mask << 1);
2559 scan_ch->active_dwell = cpu_to_le16(active_dwell);
2560 scan_ch->passive_dwell = cpu_to_le16(passive_dwell);
2562 /* Set txpower levels to defaults */
2563 scan_ch->tpc.dsp_atten = 110;
2564 /* scan_pwr_info->tpc.dsp_atten; */
2566 /*scan_pwr_info->tpc.tx_gain; */
2567 if (band == IEEE80211_BAND_5GHZ)
2568 scan_ch->tpc.tx_gain = ((1 << 5) | (3 << 3)) | 3;
2569 else {
2570 scan_ch->tpc.tx_gain = ((1 << 5) | (5 << 3));
2571 /* NOTE: if we were doing 6Mb OFDM for scans we'd use
2572 * power level:
2573 * scan_ch->tpc.tx_gain = ((1 << 5) | (2 << 3)) | 3;
2577 IWL_DEBUG_SCAN("Scanning %d [%s %d]\n",
2578 scan_ch->channel,
2579 (scan_ch->type & 1) ? "ACTIVE" : "PASSIVE",
2580 (scan_ch->type & 1) ?
2581 active_dwell : passive_dwell);
2583 scan_ch++;
2584 added++;
2587 IWL_DEBUG_SCAN("total channels to scan %d \n", added);
2588 return added;
2591 /******************************************************************************
2593 * uCode download functions
2595 ******************************************************************************/
2597 static void iwl4965_dealloc_ucode_pci(struct iwl_priv *priv)
2599 iwl_free_fw_desc(priv->pci_dev, &priv->ucode_code);
2600 iwl_free_fw_desc(priv->pci_dev, &priv->ucode_data);
2601 iwl_free_fw_desc(priv->pci_dev, &priv->ucode_data_backup);
2602 iwl_free_fw_desc(priv->pci_dev, &priv->ucode_init);
2603 iwl_free_fw_desc(priv->pci_dev, &priv->ucode_init_data);
2604 iwl_free_fw_desc(priv->pci_dev, &priv->ucode_boot);
2607 static void iwl4965_nic_start(struct iwl_priv *priv)
2609 /* Remove all resets to allow NIC to operate */
2610 iwl_write32(priv, CSR_RESET, 0);
2615 * iwl4965_read_ucode - Read uCode images from disk file.
2617 * Copy into buffers for card to fetch via bus-mastering
2619 static int iwl4965_read_ucode(struct iwl_priv *priv)
2621 struct iwl4965_ucode *ucode;
2622 int ret;
2623 const struct firmware *ucode_raw;
2624 const char *name = priv->cfg->fw_name;
2625 u8 *src;
2626 size_t len;
2627 u32 ver, inst_size, data_size, init_size, init_data_size, boot_size;
2629 /* Ask kernel firmware_class module to get the boot firmware off disk.
2630 * request_firmware() is synchronous, file is in memory on return. */
2631 ret = request_firmware(&ucode_raw, name, &priv->pci_dev->dev);
2632 if (ret < 0) {
2633 IWL_ERROR("%s firmware file req failed: Reason %d\n",
2634 name, ret);
2635 goto error;
2638 IWL_DEBUG_INFO("Got firmware '%s' file (%zd bytes) from disk\n",
2639 name, ucode_raw->size);
2641 /* Make sure that we got at least our header! */
2642 if (ucode_raw->size < sizeof(*ucode)) {
2643 IWL_ERROR("File size way too small!\n");
2644 ret = -EINVAL;
2645 goto err_release;
2648 /* Data from ucode file: header followed by uCode images */
2649 ucode = (void *)ucode_raw->data;
2651 ver = le32_to_cpu(ucode->ver);
2652 inst_size = le32_to_cpu(ucode->inst_size);
2653 data_size = le32_to_cpu(ucode->data_size);
2654 init_size = le32_to_cpu(ucode->init_size);
2655 init_data_size = le32_to_cpu(ucode->init_data_size);
2656 boot_size = le32_to_cpu(ucode->boot_size);
2658 IWL_DEBUG_INFO("f/w package hdr ucode version = 0x%x\n", ver);
2659 IWL_DEBUG_INFO("f/w package hdr runtime inst size = %u\n",
2660 inst_size);
2661 IWL_DEBUG_INFO("f/w package hdr runtime data size = %u\n",
2662 data_size);
2663 IWL_DEBUG_INFO("f/w package hdr init inst size = %u\n",
2664 init_size);
2665 IWL_DEBUG_INFO("f/w package hdr init data size = %u\n",
2666 init_data_size);
2667 IWL_DEBUG_INFO("f/w package hdr boot inst size = %u\n",
2668 boot_size);
2670 /* Verify size of file vs. image size info in file's header */
2671 if (ucode_raw->size < sizeof(*ucode) +
2672 inst_size + data_size + init_size +
2673 init_data_size + boot_size) {
2675 IWL_DEBUG_INFO("uCode file size %d too small\n",
2676 (int)ucode_raw->size);
2677 ret = -EINVAL;
2678 goto err_release;
2681 /* Verify that uCode images will fit in card's SRAM */
2682 if (inst_size > priv->hw_params.max_inst_size) {
2683 IWL_DEBUG_INFO("uCode instr len %d too large to fit in\n",
2684 inst_size);
2685 ret = -EINVAL;
2686 goto err_release;
2689 if (data_size > priv->hw_params.max_data_size) {
2690 IWL_DEBUG_INFO("uCode data len %d too large to fit in\n",
2691 data_size);
2692 ret = -EINVAL;
2693 goto err_release;
2695 if (init_size > priv->hw_params.max_inst_size) {
2696 IWL_DEBUG_INFO
2697 ("uCode init instr len %d too large to fit in\n",
2698 init_size);
2699 ret = -EINVAL;
2700 goto err_release;
2702 if (init_data_size > priv->hw_params.max_data_size) {
2703 IWL_DEBUG_INFO
2704 ("uCode init data len %d too large to fit in\n",
2705 init_data_size);
2706 ret = -EINVAL;
2707 goto err_release;
2709 if (boot_size > priv->hw_params.max_bsm_size) {
2710 IWL_DEBUG_INFO
2711 ("uCode boot instr len %d too large to fit in\n",
2712 boot_size);
2713 ret = -EINVAL;
2714 goto err_release;
2717 /* Allocate ucode buffers for card's bus-master loading ... */
2719 /* Runtime instructions and 2 copies of data:
2720 * 1) unmodified from disk
2721 * 2) backup cache for save/restore during power-downs */
2722 priv->ucode_code.len = inst_size;
2723 iwl_alloc_fw_desc(priv->pci_dev, &priv->ucode_code);
2725 priv->ucode_data.len = data_size;
2726 iwl_alloc_fw_desc(priv->pci_dev, &priv->ucode_data);
2728 priv->ucode_data_backup.len = data_size;
2729 iwl_alloc_fw_desc(priv->pci_dev, &priv->ucode_data_backup);
2731 /* Initialization instructions and data */
2732 if (init_size && init_data_size) {
2733 priv->ucode_init.len = init_size;
2734 iwl_alloc_fw_desc(priv->pci_dev, &priv->ucode_init);
2736 priv->ucode_init_data.len = init_data_size;
2737 iwl_alloc_fw_desc(priv->pci_dev, &priv->ucode_init_data);
2739 if (!priv->ucode_init.v_addr || !priv->ucode_init_data.v_addr)
2740 goto err_pci_alloc;
2743 /* Bootstrap (instructions only, no data) */
2744 if (boot_size) {
2745 priv->ucode_boot.len = boot_size;
2746 iwl_alloc_fw_desc(priv->pci_dev, &priv->ucode_boot);
2748 if (!priv->ucode_boot.v_addr)
2749 goto err_pci_alloc;
2752 /* Copy images into buffers for card's bus-master reads ... */
2754 /* Runtime instructions (first block of data in file) */
2755 src = &ucode->data[0];
2756 len = priv->ucode_code.len;
2757 IWL_DEBUG_INFO("Copying (but not loading) uCode instr len %Zd\n", len);
2758 memcpy(priv->ucode_code.v_addr, src, len);
2759 IWL_DEBUG_INFO("uCode instr buf vaddr = 0x%p, paddr = 0x%08x\n",
2760 priv->ucode_code.v_addr, (u32)priv->ucode_code.p_addr);
2762 /* Runtime data (2nd block)
2763 * NOTE: Copy into backup buffer will be done in iwl4965_up() */
2764 src = &ucode->data[inst_size];
2765 len = priv->ucode_data.len;
2766 IWL_DEBUG_INFO("Copying (but not loading) uCode data len %Zd\n", len);
2767 memcpy(priv->ucode_data.v_addr, src, len);
2768 memcpy(priv->ucode_data_backup.v_addr, src, len);
2770 /* Initialization instructions (3rd block) */
2771 if (init_size) {
2772 src = &ucode->data[inst_size + data_size];
2773 len = priv->ucode_init.len;
2774 IWL_DEBUG_INFO("Copying (but not loading) init instr len %Zd\n",
2775 len);
2776 memcpy(priv->ucode_init.v_addr, src, len);
2779 /* Initialization data (4th block) */
2780 if (init_data_size) {
2781 src = &ucode->data[inst_size + data_size + init_size];
2782 len = priv->ucode_init_data.len;
2783 IWL_DEBUG_INFO("Copying (but not loading) init data len %Zd\n",
2784 len);
2785 memcpy(priv->ucode_init_data.v_addr, src, len);
2788 /* Bootstrap instructions (5th block) */
2789 src = &ucode->data[inst_size + data_size + init_size + init_data_size];
2790 len = priv->ucode_boot.len;
2791 IWL_DEBUG_INFO("Copying (but not loading) boot instr len %Zd\n", len);
2792 memcpy(priv->ucode_boot.v_addr, src, len);
2794 /* We have our copies now, allow OS release its copies */
2795 release_firmware(ucode_raw);
2796 return 0;
2798 err_pci_alloc:
2799 IWL_ERROR("failed to allocate pci memory\n");
2800 ret = -ENOMEM;
2801 iwl4965_dealloc_ucode_pci(priv);
2803 err_release:
2804 release_firmware(ucode_raw);
2806 error:
2807 return ret;
2811 * iwl_alive_start - called after REPLY_ALIVE notification received
2812 * from protocol/runtime uCode (initialization uCode's
2813 * Alive gets handled by iwl_init_alive_start()).
2815 static void iwl_alive_start(struct iwl_priv *priv)
2817 int ret = 0;
2819 IWL_DEBUG_INFO("Runtime Alive received.\n");
2821 if (priv->card_alive.is_valid != UCODE_VALID_OK) {
2822 /* We had an error bringing up the hardware, so take it
2823 * all the way back down so we can try again */
2824 IWL_DEBUG_INFO("Alive failed.\n");
2825 goto restart;
2828 /* Initialize uCode has loaded Runtime uCode ... verify inst image.
2829 * This is a paranoid check, because we would not have gotten the
2830 * "runtime" alive if code weren't properly loaded. */
2831 if (iwl_verify_ucode(priv)) {
2832 /* Runtime instruction load was bad;
2833 * take it all the way back down so we can try again */
2834 IWL_DEBUG_INFO("Bad runtime uCode load.\n");
2835 goto restart;
2838 iwlcore_clear_stations_table(priv);
2839 ret = priv->cfg->ops->lib->alive_notify(priv);
2840 if (ret) {
2841 IWL_WARNING("Could not complete ALIVE transition [ntf]: %d\n",
2842 ret);
2843 goto restart;
2846 /* After the ALIVE response, we can send host commands to 4965 uCode */
2847 set_bit(STATUS_ALIVE, &priv->status);
2849 if (iwl_is_rfkill(priv))
2850 return;
2852 ieee80211_wake_queues(priv->hw);
2854 priv->active_rate = priv->rates_mask;
2855 priv->active_rate_basic = priv->rates_mask & IWL_BASIC_RATES_MASK;
2857 if (iwl_is_associated(priv)) {
2858 struct iwl_rxon_cmd *active_rxon =
2859 (struct iwl_rxon_cmd *)&priv->active_rxon;
2861 memcpy(&priv->staging_rxon, &priv->active_rxon,
2862 sizeof(priv->staging_rxon));
2863 active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
2864 } else {
2865 /* Initialize our rx_config data */
2866 iwl4965_connection_init_rx_config(priv);
2867 memcpy(priv->staging_rxon.node_addr, priv->mac_addr, ETH_ALEN);
2870 /* Configure Bluetooth device coexistence support */
2871 iwl4965_send_bt_config(priv);
2873 iwl_reset_run_time_calib(priv);
2875 /* Configure the adapter for unassociated operation */
2876 iwl4965_commit_rxon(priv);
2878 /* At this point, the NIC is initialized and operational */
2879 iwl4965_rf_kill_ct_config(priv);
2881 iwl_leds_register(priv);
2883 IWL_DEBUG_INFO("ALIVE processing complete.\n");
2884 set_bit(STATUS_READY, &priv->status);
2885 wake_up_interruptible(&priv->wait_command_queue);
2887 if (priv->error_recovering)
2888 iwl4965_error_recovery(priv);
2890 iwlcore_low_level_notify(priv, IWLCORE_START_EVT);
2891 ieee80211_notify_mac(priv->hw, IEEE80211_NOTIFY_RE_ASSOC);
2893 if (test_and_clear_bit(STATUS_MODE_PENDING, &priv->status))
2894 iwl4965_set_mode(priv, priv->iw_mode);
2896 return;
2898 restart:
2899 queue_work(priv->workqueue, &priv->restart);
2902 static void iwl_cancel_deferred_work(struct iwl_priv *priv);
2904 static void __iwl4965_down(struct iwl_priv *priv)
2906 unsigned long flags;
2907 int exit_pending = test_bit(STATUS_EXIT_PENDING, &priv->status);
2909 IWL_DEBUG_INFO(DRV_NAME " is going down\n");
2911 if (!exit_pending)
2912 set_bit(STATUS_EXIT_PENDING, &priv->status);
2914 iwl_leds_unregister(priv);
2916 iwlcore_low_level_notify(priv, IWLCORE_STOP_EVT);
2918 iwlcore_clear_stations_table(priv);
2920 /* Unblock any waiting calls */
2921 wake_up_interruptible_all(&priv->wait_command_queue);
2923 /* Wipe out the EXIT_PENDING status bit if we are not actually
2924 * exiting the module */
2925 if (!exit_pending)
2926 clear_bit(STATUS_EXIT_PENDING, &priv->status);
2928 /* stop and reset the on-board processor */
2929 iwl_write32(priv, CSR_RESET, CSR_RESET_REG_FLAG_NEVO_RESET);
2931 /* tell the device to stop sending interrupts */
2932 spin_lock_irqsave(&priv->lock, flags);
2933 iwl4965_disable_interrupts(priv);
2934 spin_unlock_irqrestore(&priv->lock, flags);
2935 iwl_synchronize_irq(priv);
2937 if (priv->mac80211_registered)
2938 ieee80211_stop_queues(priv->hw);
2940 /* If we have not previously called iwl4965_init() then
2941 * clear all bits but the RF Kill and SUSPEND bits and return */
2942 if (!iwl_is_init(priv)) {
2943 priv->status = test_bit(STATUS_RF_KILL_HW, &priv->status) <<
2944 STATUS_RF_KILL_HW |
2945 test_bit(STATUS_RF_KILL_SW, &priv->status) <<
2946 STATUS_RF_KILL_SW |
2947 test_bit(STATUS_GEO_CONFIGURED, &priv->status) <<
2948 STATUS_GEO_CONFIGURED |
2949 test_bit(STATUS_IN_SUSPEND, &priv->status) <<
2950 STATUS_IN_SUSPEND;
2951 goto exit;
2954 /* ...otherwise clear out all the status bits but the RF Kill and
2955 * SUSPEND bits and continue taking the NIC down. */
2956 priv->status &= test_bit(STATUS_RF_KILL_HW, &priv->status) <<
2957 STATUS_RF_KILL_HW |
2958 test_bit(STATUS_RF_KILL_SW, &priv->status) <<
2959 STATUS_RF_KILL_SW |
2960 test_bit(STATUS_GEO_CONFIGURED, &priv->status) <<
2961 STATUS_GEO_CONFIGURED |
2962 test_bit(STATUS_IN_SUSPEND, &priv->status) <<
2963 STATUS_IN_SUSPEND |
2964 test_bit(STATUS_FW_ERROR, &priv->status) <<
2965 STATUS_FW_ERROR;
2967 spin_lock_irqsave(&priv->lock, flags);
2968 iwl_clear_bit(priv, CSR_GP_CNTRL,
2969 CSR_GP_CNTRL_REG_FLAG_MAC_ACCESS_REQ);
2970 spin_unlock_irqrestore(&priv->lock, flags);
2972 iwl_txq_ctx_stop(priv);
2973 iwl_rxq_stop(priv);
2975 spin_lock_irqsave(&priv->lock, flags);
2976 if (!iwl_grab_nic_access(priv)) {
2977 iwl_write_prph(priv, APMG_CLK_DIS_REG,
2978 APMG_CLK_VAL_DMA_CLK_RQT);
2979 iwl_release_nic_access(priv);
2981 spin_unlock_irqrestore(&priv->lock, flags);
2983 udelay(5);
2985 /* FIXME: apm_ops.suspend(priv) */
2986 priv->cfg->ops->lib->apm_ops.reset(priv);
2987 priv->cfg->ops->lib->free_shared_mem(priv);
2989 exit:
2990 memset(&priv->card_alive, 0, sizeof(struct iwl_alive_resp));
2992 if (priv->ibss_beacon)
2993 dev_kfree_skb(priv->ibss_beacon);
2994 priv->ibss_beacon = NULL;
2996 /* clear out any free frames */
2997 iwl_clear_free_frames(priv);
3000 static void iwl4965_down(struct iwl_priv *priv)
3002 mutex_lock(&priv->mutex);
3003 __iwl4965_down(priv);
3004 mutex_unlock(&priv->mutex);
3006 iwl_cancel_deferred_work(priv);
3009 #define MAX_HW_RESTARTS 5
3011 static int __iwl4965_up(struct iwl_priv *priv)
3013 int i;
3014 int ret;
3016 if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
3017 IWL_WARNING("Exit pending; will not bring the NIC up\n");
3018 return -EIO;
3021 if (!priv->ucode_data_backup.v_addr || !priv->ucode_data.v_addr) {
3022 IWL_ERROR("ucode not available for device bringup\n");
3023 return -EIO;
3026 /* If platform's RF_KILL switch is NOT set to KILL */
3027 if (iwl_read32(priv, CSR_GP_CNTRL) &
3028 CSR_GP_CNTRL_REG_FLAG_HW_RF_KILL_SW)
3029 clear_bit(STATUS_RF_KILL_HW, &priv->status);
3030 else {
3031 set_bit(STATUS_RF_KILL_HW, &priv->status);
3032 if (!test_bit(STATUS_IN_SUSPEND, &priv->status)) {
3033 iwl_rfkill_set_hw_state(priv);
3034 IWL_WARNING("Radio disabled by HW RF Kill switch\n");
3035 return -ENODEV;
3039 iwl_rfkill_set_hw_state(priv);
3040 iwl_write32(priv, CSR_INT, 0xFFFFFFFF);
3042 ret = priv->cfg->ops->lib->alloc_shared_mem(priv);
3043 if (ret) {
3044 IWL_ERROR("Unable to allocate shared memory\n");
3045 return ret;
3048 ret = iwl_hw_nic_init(priv);
3049 if (ret) {
3050 IWL_ERROR("Unable to init nic\n");
3051 return ret;
3054 /* make sure rfkill handshake bits are cleared */
3055 iwl_write32(priv, CSR_UCODE_DRV_GP1_CLR, CSR_UCODE_SW_BIT_RFKILL);
3056 iwl_write32(priv, CSR_UCODE_DRV_GP1_CLR,
3057 CSR_UCODE_DRV_GP1_BIT_CMD_BLOCKED);
3059 /* clear (again), then enable host interrupts */
3060 iwl_write32(priv, CSR_INT, 0xFFFFFFFF);
3061 iwl4965_enable_interrupts(priv);
3063 /* really make sure rfkill handshake bits are cleared */
3064 iwl_write32(priv, CSR_UCODE_DRV_GP1_CLR, CSR_UCODE_SW_BIT_RFKILL);
3065 iwl_write32(priv, CSR_UCODE_DRV_GP1_CLR, CSR_UCODE_SW_BIT_RFKILL);
3067 /* Copy original ucode data image from disk into backup cache.
3068 * This will be used to initialize the on-board processor's
3069 * data SRAM for a clean start when the runtime program first loads. */
3070 memcpy(priv->ucode_data_backup.v_addr, priv->ucode_data.v_addr,
3071 priv->ucode_data.len);
3073 /* We return success when we resume from suspend and rf_kill is on. */
3074 if (test_bit(STATUS_RF_KILL_HW, &priv->status) ||
3075 test_bit(STATUS_RF_KILL_SW, &priv->status))
3076 return 0;
3078 for (i = 0; i < MAX_HW_RESTARTS; i++) {
3080 iwlcore_clear_stations_table(priv);
3082 /* load bootstrap state machine,
3083 * load bootstrap program into processor's memory,
3084 * prepare to load the "initialize" uCode */
3085 ret = priv->cfg->ops->lib->load_ucode(priv);
3087 if (ret) {
3088 IWL_ERROR("Unable to set up bootstrap uCode: %d\n", ret);
3089 continue;
3092 /* Clear out the uCode error bit if it is set */
3093 clear_bit(STATUS_FW_ERROR, &priv->status);
3095 /* start card; "initialize" will load runtime ucode */
3096 iwl4965_nic_start(priv);
3098 IWL_DEBUG_INFO(DRV_NAME " is coming up\n");
3100 return 0;
3103 set_bit(STATUS_EXIT_PENDING, &priv->status);
3104 __iwl4965_down(priv);
3105 clear_bit(STATUS_EXIT_PENDING, &priv->status);
3107 /* tried to restart and config the device for as long as our
3108 * patience could withstand */
3109 IWL_ERROR("Unable to initialize device after %d attempts.\n", i);
3110 return -EIO;
3114 /*****************************************************************************
3116 * Workqueue callbacks
3118 *****************************************************************************/
3120 static void iwl_bg_init_alive_start(struct work_struct *data)
3122 struct iwl_priv *priv =
3123 container_of(data, struct iwl_priv, init_alive_start.work);
3125 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3126 return;
3128 mutex_lock(&priv->mutex);
3129 priv->cfg->ops->lib->init_alive_start(priv);
3130 mutex_unlock(&priv->mutex);
3133 static void iwl_bg_alive_start(struct work_struct *data)
3135 struct iwl_priv *priv =
3136 container_of(data, struct iwl_priv, alive_start.work);
3138 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3139 return;
3141 mutex_lock(&priv->mutex);
3142 iwl_alive_start(priv);
3143 mutex_unlock(&priv->mutex);
3146 static void iwl4965_bg_rf_kill(struct work_struct *work)
3148 struct iwl_priv *priv = container_of(work, struct iwl_priv, rf_kill);
3150 wake_up_interruptible(&priv->wait_command_queue);
3152 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3153 return;
3155 mutex_lock(&priv->mutex);
3157 if (!iwl_is_rfkill(priv)) {
3158 IWL_DEBUG(IWL_DL_RF_KILL,
3159 "HW and/or SW RF Kill no longer active, restarting "
3160 "device\n");
3161 if (!test_bit(STATUS_EXIT_PENDING, &priv->status))
3162 queue_work(priv->workqueue, &priv->restart);
3163 } else {
3164 /* make sure mac80211 stop sending Tx frame */
3165 if (priv->mac80211_registered)
3166 ieee80211_stop_queues(priv->hw);
3168 if (!test_bit(STATUS_RF_KILL_HW, &priv->status))
3169 IWL_DEBUG_RF_KILL("Can not turn radio back on - "
3170 "disabled by SW switch\n");
3171 else
3172 IWL_WARNING("Radio Frequency Kill Switch is On:\n"
3173 "Kill switch must be turned off for "
3174 "wireless networking to work.\n");
3176 iwl_rfkill_set_hw_state(priv);
3178 mutex_unlock(&priv->mutex);
3181 static void iwl4965_bg_set_monitor(struct work_struct *work)
3183 struct iwl_priv *priv = container_of(work,
3184 struct iwl_priv, set_monitor);
3185 int ret;
3187 IWL_DEBUG(IWL_DL_STATE, "setting monitor mode\n");
3189 mutex_lock(&priv->mutex);
3191 ret = iwl4965_set_mode(priv, IEEE80211_IF_TYPE_MNTR);
3193 if (ret) {
3194 if (ret == -EAGAIN)
3195 IWL_DEBUG(IWL_DL_STATE, "leave - not ready\n");
3196 else
3197 IWL_ERROR("iwl4965_set_mode() failed ret = %d\n", ret);
3200 mutex_unlock(&priv->mutex);
3203 #define IWL_SCAN_CHECK_WATCHDOG (7 * HZ)
3205 static void iwl4965_bg_scan_check(struct work_struct *data)
3207 struct iwl_priv *priv =
3208 container_of(data, struct iwl_priv, scan_check.work);
3210 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3211 return;
3213 mutex_lock(&priv->mutex);
3214 if (test_bit(STATUS_SCANNING, &priv->status) ||
3215 test_bit(STATUS_SCAN_ABORTING, &priv->status)) {
3216 IWL_DEBUG(IWL_DL_SCAN, "Scan completion watchdog resetting "
3217 "adapter (%dms)\n",
3218 jiffies_to_msecs(IWL_SCAN_CHECK_WATCHDOG));
3220 if (!test_bit(STATUS_EXIT_PENDING, &priv->status))
3221 iwl4965_send_scan_abort(priv);
3223 mutex_unlock(&priv->mutex);
3226 static void iwl4965_bg_request_scan(struct work_struct *data)
3228 struct iwl_priv *priv =
3229 container_of(data, struct iwl_priv, request_scan);
3230 struct iwl_host_cmd cmd = {
3231 .id = REPLY_SCAN_CMD,
3232 .len = sizeof(struct iwl4965_scan_cmd),
3233 .meta.flags = CMD_SIZE_HUGE,
3235 struct iwl4965_scan_cmd *scan;
3236 struct ieee80211_conf *conf = NULL;
3237 u16 cmd_len;
3238 enum ieee80211_band band;
3239 u8 direct_mask;
3240 int ret = 0;
3242 conf = ieee80211_get_hw_conf(priv->hw);
3244 mutex_lock(&priv->mutex);
3246 if (!iwl_is_ready(priv)) {
3247 IWL_WARNING("request scan called when driver not ready.\n");
3248 goto done;
3251 /* Make sure the scan wasn't cancelled before this queued work
3252 * was given the chance to run... */
3253 if (!test_bit(STATUS_SCANNING, &priv->status))
3254 goto done;
3256 /* This should never be called or scheduled if there is currently
3257 * a scan active in the hardware. */
3258 if (test_bit(STATUS_SCAN_HW, &priv->status)) {
3259 IWL_DEBUG_INFO("Multiple concurrent scan requests in parallel. "
3260 "Ignoring second request.\n");
3261 ret = -EIO;
3262 goto done;
3265 if (test_bit(STATUS_EXIT_PENDING, &priv->status)) {
3266 IWL_DEBUG_SCAN("Aborting scan due to device shutdown\n");
3267 goto done;
3270 if (test_bit(STATUS_SCAN_ABORTING, &priv->status)) {
3271 IWL_DEBUG_HC("Scan request while abort pending. Queuing.\n");
3272 goto done;
3275 if (iwl_is_rfkill(priv)) {
3276 IWL_DEBUG_HC("Aborting scan due to RF Kill activation\n");
3277 goto done;
3280 if (!test_bit(STATUS_READY, &priv->status)) {
3281 IWL_DEBUG_HC("Scan request while uninitialized. Queuing.\n");
3282 goto done;
3285 if (!priv->scan_bands) {
3286 IWL_DEBUG_HC("Aborting scan due to no requested bands\n");
3287 goto done;
3290 if (!priv->scan) {
3291 priv->scan = kmalloc(sizeof(struct iwl4965_scan_cmd) +
3292 IWL_MAX_SCAN_SIZE, GFP_KERNEL);
3293 if (!priv->scan) {
3294 ret = -ENOMEM;
3295 goto done;
3298 scan = priv->scan;
3299 memset(scan, 0, sizeof(struct iwl4965_scan_cmd) + IWL_MAX_SCAN_SIZE);
3301 scan->quiet_plcp_th = IWL_PLCP_QUIET_THRESH;
3302 scan->quiet_time = IWL_ACTIVE_QUIET_TIME;
3304 if (iwl_is_associated(priv)) {
3305 u16 interval = 0;
3306 u32 extra;
3307 u32 suspend_time = 100;
3308 u32 scan_suspend_time = 100;
3309 unsigned long flags;
3311 IWL_DEBUG_INFO("Scanning while associated...\n");
3313 spin_lock_irqsave(&priv->lock, flags);
3314 interval = priv->beacon_int;
3315 spin_unlock_irqrestore(&priv->lock, flags);
3317 scan->suspend_time = 0;
3318 scan->max_out_time = cpu_to_le32(200 * 1024);
3319 if (!interval)
3320 interval = suspend_time;
3322 extra = (suspend_time / interval) << 22;
3323 scan_suspend_time = (extra |
3324 ((suspend_time % interval) * 1024));
3325 scan->suspend_time = cpu_to_le32(scan_suspend_time);
3326 IWL_DEBUG_SCAN("suspend_time 0x%X beacon interval %d\n",
3327 scan_suspend_time, interval);
3330 /* We should add the ability for user to lock to PASSIVE ONLY */
3331 if (priv->one_direct_scan) {
3332 IWL_DEBUG_SCAN
3333 ("Kicking off one direct scan for '%s'\n",
3334 iwl4965_escape_essid(priv->direct_ssid,
3335 priv->direct_ssid_len));
3336 scan->direct_scan[0].id = WLAN_EID_SSID;
3337 scan->direct_scan[0].len = priv->direct_ssid_len;
3338 memcpy(scan->direct_scan[0].ssid,
3339 priv->direct_ssid, priv->direct_ssid_len);
3340 direct_mask = 1;
3341 } else if (!iwl_is_associated(priv) && priv->essid_len) {
3342 IWL_DEBUG_SCAN
3343 ("Kicking off one direct scan for '%s' when not associated\n",
3344 iwl4965_escape_essid(priv->essid, priv->essid_len));
3345 scan->direct_scan[0].id = WLAN_EID_SSID;
3346 scan->direct_scan[0].len = priv->essid_len;
3347 memcpy(scan->direct_scan[0].ssid, priv->essid, priv->essid_len);
3348 direct_mask = 1;
3349 } else {
3350 IWL_DEBUG_SCAN("Kicking off one indirect scan.\n");
3351 direct_mask = 0;
3354 scan->tx_cmd.tx_flags = TX_CMD_FLG_SEQ_CTL_MSK;
3355 scan->tx_cmd.sta_id = priv->hw_params.bcast_sta_id;
3356 scan->tx_cmd.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
3359 switch (priv->scan_bands) {
3360 case 2:
3361 scan->flags = RXON_FLG_BAND_24G_MSK | RXON_FLG_AUTO_DETECT_MSK;
3362 scan->tx_cmd.rate_n_flags =
3363 iwl4965_hw_set_rate_n_flags(IWL_RATE_1M_PLCP,
3364 RATE_MCS_ANT_B_MSK|RATE_MCS_CCK_MSK);
3366 scan->good_CRC_th = 0;
3367 band = IEEE80211_BAND_2GHZ;
3368 break;
3370 case 1:
3371 scan->tx_cmd.rate_n_flags =
3372 iwl4965_hw_set_rate_n_flags(IWL_RATE_6M_PLCP,
3373 RATE_MCS_ANT_B_MSK);
3374 scan->good_CRC_th = IWL_GOOD_CRC_TH;
3375 band = IEEE80211_BAND_5GHZ;
3376 break;
3378 default:
3379 IWL_WARNING("Invalid scan band count\n");
3380 goto done;
3383 /* We don't build a direct scan probe request; the uCode will do
3384 * that based on the direct_mask added to each channel entry */
3385 cmd_len = iwl4965_fill_probe_req(priv, band,
3386 (struct ieee80211_mgmt *)scan->data,
3387 IWL_MAX_SCAN_SIZE - sizeof(*scan), 0);
3389 scan->tx_cmd.len = cpu_to_le16(cmd_len);
3390 /* select Rx chains */
3392 /* Force use of chains B and C (0x6) for scan Rx.
3393 * Avoid A (0x1) because of its off-channel reception on A-band.
3394 * MIMO is not used here, but value is required to make uCode happy. */
3395 scan->rx_chain = RXON_RX_CHAIN_DRIVER_FORCE_MSK |
3396 cpu_to_le16((0x7 << RXON_RX_CHAIN_VALID_POS) |
3397 (0x6 << RXON_RX_CHAIN_FORCE_SEL_POS) |
3398 (0x7 << RXON_RX_CHAIN_FORCE_MIMO_SEL_POS));
3400 if (priv->iw_mode == IEEE80211_IF_TYPE_MNTR)
3401 scan->filter_flags = RXON_FILTER_PROMISC_MSK;
3403 if (direct_mask)
3404 scan->channel_count =
3405 iwl4965_get_channels_for_scan(
3406 priv, band, 1, /* active */
3407 direct_mask,
3408 (void *)&scan->data[le16_to_cpu(scan->tx_cmd.len)]);
3409 else
3410 scan->channel_count =
3411 iwl4965_get_channels_for_scan(
3412 priv, band, 0, /* passive */
3413 direct_mask,
3414 (void *)&scan->data[le16_to_cpu(scan->tx_cmd.len)]);
3416 scan->filter_flags |= (RXON_FILTER_ACCEPT_GRP_MSK |
3417 RXON_FILTER_BCON_AWARE_MSK);
3418 cmd.len += le16_to_cpu(scan->tx_cmd.len) +
3419 scan->channel_count * sizeof(struct iwl4965_scan_channel);
3420 cmd.data = scan;
3421 scan->len = cpu_to_le16(cmd.len);
3423 set_bit(STATUS_SCAN_HW, &priv->status);
3424 ret = iwl_send_cmd_sync(priv, &cmd);
3425 if (ret)
3426 goto done;
3428 queue_delayed_work(priv->workqueue, &priv->scan_check,
3429 IWL_SCAN_CHECK_WATCHDOG);
3431 mutex_unlock(&priv->mutex);
3432 return;
3434 done:
3435 /* inform mac80211 scan aborted */
3436 queue_work(priv->workqueue, &priv->scan_completed);
3437 mutex_unlock(&priv->mutex);
3440 static void iwl_bg_run_time_calib_work(struct work_struct *work)
3442 struct iwl_priv *priv = container_of(work, struct iwl_priv,
3443 run_time_calib_work);
3445 mutex_lock(&priv->mutex);
3447 if (test_bit(STATUS_EXIT_PENDING, &priv->status) ||
3448 test_bit(STATUS_SCANNING, &priv->status)) {
3449 mutex_unlock(&priv->mutex);
3450 return;
3453 if (priv->start_calib) {
3454 iwl_chain_noise_calibration(priv, &priv->statistics);
3456 iwl_sensitivity_calibration(priv, &priv->statistics);
3459 mutex_unlock(&priv->mutex);
3460 return;
3463 static void iwl4965_bg_up(struct work_struct *data)
3465 struct iwl_priv *priv = container_of(data, struct iwl_priv, up);
3467 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3468 return;
3470 mutex_lock(&priv->mutex);
3471 __iwl4965_up(priv);
3472 mutex_unlock(&priv->mutex);
3475 static void iwl4965_bg_restart(struct work_struct *data)
3477 struct iwl_priv *priv = container_of(data, struct iwl_priv, restart);
3479 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3480 return;
3482 iwl4965_down(priv);
3483 queue_work(priv->workqueue, &priv->up);
3486 static void iwl4965_bg_rx_replenish(struct work_struct *data)
3488 struct iwl_priv *priv =
3489 container_of(data, struct iwl_priv, rx_replenish);
3491 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3492 return;
3494 mutex_lock(&priv->mutex);
3495 iwl_rx_replenish(priv);
3496 mutex_unlock(&priv->mutex);
3499 #define IWL_DELAY_NEXT_SCAN (HZ*2)
3501 static void iwl4965_post_associate(struct iwl_priv *priv)
3503 struct ieee80211_conf *conf = NULL;
3504 int ret = 0;
3505 DECLARE_MAC_BUF(mac);
3507 if (priv->iw_mode == IEEE80211_IF_TYPE_AP) {
3508 IWL_ERROR("%s Should not be called in AP mode\n", __FUNCTION__);
3509 return;
3512 IWL_DEBUG_ASSOC("Associated as %d to: %s\n",
3513 priv->assoc_id,
3514 print_mac(mac, priv->active_rxon.bssid_addr));
3517 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3518 return;
3521 if (!priv->vif || !priv->is_open)
3522 return;
3524 iwl4965_scan_cancel_timeout(priv, 200);
3526 conf = ieee80211_get_hw_conf(priv->hw);
3528 priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
3529 iwl4965_commit_rxon(priv);
3531 memset(&priv->rxon_timing, 0, sizeof(struct iwl4965_rxon_time_cmd));
3532 iwl4965_setup_rxon_timing(priv);
3533 ret = iwl_send_cmd_pdu(priv, REPLY_RXON_TIMING,
3534 sizeof(priv->rxon_timing), &priv->rxon_timing);
3535 if (ret)
3536 IWL_WARNING("REPLY_RXON_TIMING failed - "
3537 "Attempting to continue.\n");
3539 priv->staging_rxon.filter_flags |= RXON_FILTER_ASSOC_MSK;
3541 if (priv->current_ht_config.is_ht)
3542 iwl_set_rxon_ht(priv, &priv->current_ht_config);
3544 iwl_set_rxon_chain(priv);
3545 priv->staging_rxon.assoc_id = cpu_to_le16(priv->assoc_id);
3547 IWL_DEBUG_ASSOC("assoc id %d beacon interval %d\n",
3548 priv->assoc_id, priv->beacon_int);
3550 if (priv->assoc_capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
3551 priv->staging_rxon.flags |= RXON_FLG_SHORT_PREAMBLE_MSK;
3552 else
3553 priv->staging_rxon.flags &= ~RXON_FLG_SHORT_PREAMBLE_MSK;
3555 if (priv->staging_rxon.flags & RXON_FLG_BAND_24G_MSK) {
3556 if (priv->assoc_capability & WLAN_CAPABILITY_SHORT_SLOT_TIME)
3557 priv->staging_rxon.flags |= RXON_FLG_SHORT_SLOT_MSK;
3558 else
3559 priv->staging_rxon.flags &= ~RXON_FLG_SHORT_SLOT_MSK;
3561 if (priv->iw_mode == IEEE80211_IF_TYPE_IBSS)
3562 priv->staging_rxon.flags &= ~RXON_FLG_SHORT_SLOT_MSK;
3566 iwl4965_commit_rxon(priv);
3568 switch (priv->iw_mode) {
3569 case IEEE80211_IF_TYPE_STA:
3570 iwl4965_rate_scale_init(priv->hw, IWL_AP_ID);
3571 break;
3573 case IEEE80211_IF_TYPE_IBSS:
3575 /* assume default assoc id */
3576 priv->assoc_id = 1;
3578 iwl_rxon_add_station(priv, priv->bssid, 0);
3579 iwl4965_rate_scale_init(priv->hw, IWL_STA_ID);
3580 iwl4965_send_beacon_cmd(priv);
3582 break;
3584 default:
3585 IWL_ERROR("%s Should not be called in %d mode\n",
3586 __FUNCTION__, priv->iw_mode);
3587 break;
3590 iwl4965_sequence_reset(priv);
3592 /* Enable Rx differential gain and sensitivity calibrations */
3593 iwl_chain_noise_reset(priv);
3594 priv->start_calib = 1;
3596 if (priv->iw_mode == IEEE80211_IF_TYPE_IBSS)
3597 priv->assoc_station_added = 1;
3599 iwl4965_activate_qos(priv, 0);
3601 iwl_power_update_mode(priv, 0);
3602 /* we have just associated, don't start scan too early */
3603 priv->next_scan_jiffies = jiffies + IWL_DELAY_NEXT_SCAN;
3607 static void iwl4965_bg_post_associate(struct work_struct *data)
3609 struct iwl_priv *priv = container_of(data, struct iwl_priv,
3610 post_associate.work);
3612 mutex_lock(&priv->mutex);
3613 iwl4965_post_associate(priv);
3614 mutex_unlock(&priv->mutex);
3618 static void iwl4965_bg_abort_scan(struct work_struct *work)
3620 struct iwl_priv *priv = container_of(work, struct iwl_priv, abort_scan);
3622 if (!iwl_is_ready(priv))
3623 return;
3625 mutex_lock(&priv->mutex);
3627 set_bit(STATUS_SCAN_ABORTING, &priv->status);
3628 iwl4965_send_scan_abort(priv);
3630 mutex_unlock(&priv->mutex);
3633 static int iwl4965_mac_config(struct ieee80211_hw *hw, struct ieee80211_conf *conf);
3635 static void iwl4965_bg_scan_completed(struct work_struct *work)
3637 struct iwl_priv *priv =
3638 container_of(work, struct iwl_priv, scan_completed);
3640 IWL_DEBUG(IWL_DL_SCAN, "SCAN complete scan\n");
3642 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3643 return;
3645 if (test_bit(STATUS_CONF_PENDING, &priv->status))
3646 iwl4965_mac_config(priv->hw, ieee80211_get_hw_conf(priv->hw));
3648 ieee80211_scan_completed(priv->hw);
3650 /* Since setting the TXPOWER may have been deferred while
3651 * performing the scan, fire one off */
3652 mutex_lock(&priv->mutex);
3653 iwl4965_hw_reg_send_txpower(priv);
3654 mutex_unlock(&priv->mutex);
3657 /*****************************************************************************
3659 * mac80211 entry point functions
3661 *****************************************************************************/
3663 #define UCODE_READY_TIMEOUT (2 * HZ)
3665 static int iwl4965_mac_start(struct ieee80211_hw *hw)
3667 struct iwl_priv *priv = hw->priv;
3668 int ret;
3670 IWL_DEBUG_MAC80211("enter\n");
3672 if (pci_enable_device(priv->pci_dev)) {
3673 IWL_ERROR("Fail to pci_enable_device\n");
3674 return -ENODEV;
3676 pci_restore_state(priv->pci_dev);
3677 pci_enable_msi(priv->pci_dev);
3679 ret = request_irq(priv->pci_dev->irq, iwl4965_isr, IRQF_SHARED,
3680 DRV_NAME, priv);
3681 if (ret) {
3682 IWL_ERROR("Error allocating IRQ %d\n", priv->pci_dev->irq);
3683 goto out_disable_msi;
3686 /* we should be verifying the device is ready to be opened */
3687 mutex_lock(&priv->mutex);
3689 memset(&priv->staging_rxon, 0, sizeof(struct iwl_rxon_cmd));
3690 /* fetch ucode file from disk, alloc and copy to bus-master buffers ...
3691 * ucode filename and max sizes are card-specific. */
3693 if (!priv->ucode_code.len) {
3694 ret = iwl4965_read_ucode(priv);
3695 if (ret) {
3696 IWL_ERROR("Could not read microcode: %d\n", ret);
3697 mutex_unlock(&priv->mutex);
3698 goto out_release_irq;
3702 ret = __iwl4965_up(priv);
3704 mutex_unlock(&priv->mutex);
3706 if (ret)
3707 goto out_release_irq;
3709 IWL_DEBUG_INFO("Start UP work done.\n");
3711 if (test_bit(STATUS_IN_SUSPEND, &priv->status))
3712 return 0;
3714 /* Wait for START_ALIVE from Run Time ucode. Otherwise callbacks from
3715 * mac80211 will not be run successfully. */
3716 if (priv->ucode_type == UCODE_RT) {
3717 ret = wait_event_interruptible_timeout(priv->wait_command_queue,
3718 test_bit(STATUS_READY, &priv->status),
3719 UCODE_READY_TIMEOUT);
3720 if (!ret) {
3721 if (!test_bit(STATUS_READY, &priv->status)) {
3722 IWL_ERROR("START_ALIVE timeout after %dms.\n",
3723 jiffies_to_msecs(UCODE_READY_TIMEOUT));
3724 ret = -ETIMEDOUT;
3725 goto out_release_irq;
3729 priv->is_open = 1;
3731 IWL_DEBUG_MAC80211("leave\n");
3732 return 0;
3734 out_release_irq:
3735 free_irq(priv->pci_dev->irq, priv);
3736 out_disable_msi:
3737 pci_disable_msi(priv->pci_dev);
3738 pci_disable_device(priv->pci_dev);
3739 priv->is_open = 0;
3740 IWL_DEBUG_MAC80211("leave - failed\n");
3741 return ret;
3744 static void iwl4965_mac_stop(struct ieee80211_hw *hw)
3746 struct iwl_priv *priv = hw->priv;
3748 IWL_DEBUG_MAC80211("enter\n");
3750 if (!priv->is_open) {
3751 IWL_DEBUG_MAC80211("leave - skip\n");
3752 return;
3755 priv->is_open = 0;
3757 if (iwl_is_ready_rf(priv)) {
3758 /* stop mac, cancel any scan request and clear
3759 * RXON_FILTER_ASSOC_MSK BIT
3761 mutex_lock(&priv->mutex);
3762 iwl4965_scan_cancel_timeout(priv, 100);
3763 cancel_delayed_work(&priv->post_associate);
3764 mutex_unlock(&priv->mutex);
3767 iwl4965_down(priv);
3769 flush_workqueue(priv->workqueue);
3770 free_irq(priv->pci_dev->irq, priv);
3771 pci_disable_msi(priv->pci_dev);
3772 pci_save_state(priv->pci_dev);
3773 pci_disable_device(priv->pci_dev);
3775 IWL_DEBUG_MAC80211("leave\n");
3778 static int iwl4965_mac_tx(struct ieee80211_hw *hw, struct sk_buff *skb)
3780 struct iwl_priv *priv = hw->priv;
3782 IWL_DEBUG_MAC80211("enter\n");
3784 if (priv->iw_mode == IEEE80211_IF_TYPE_MNTR) {
3785 IWL_DEBUG_MAC80211("leave - monitor\n");
3786 return -1;
3789 IWL_DEBUG_TX("dev->xmit(%d bytes) at rate 0x%02x\n", skb->len,
3790 ieee80211_get_tx_rate(hw, IEEE80211_SKB_CB(skb))->bitrate);
3792 if (iwl_tx_skb(priv, skb))
3793 dev_kfree_skb_any(skb);
3795 IWL_DEBUG_MAC80211("leave\n");
3796 return 0;
3799 static int iwl4965_mac_add_interface(struct ieee80211_hw *hw,
3800 struct ieee80211_if_init_conf *conf)
3802 struct iwl_priv *priv = hw->priv;
3803 unsigned long flags;
3804 DECLARE_MAC_BUF(mac);
3806 IWL_DEBUG_MAC80211("enter: type %d\n", conf->type);
3808 if (priv->vif) {
3809 IWL_DEBUG_MAC80211("leave - vif != NULL\n");
3810 return -EOPNOTSUPP;
3813 spin_lock_irqsave(&priv->lock, flags);
3814 priv->vif = conf->vif;
3816 spin_unlock_irqrestore(&priv->lock, flags);
3818 mutex_lock(&priv->mutex);
3820 if (conf->mac_addr) {
3821 IWL_DEBUG_MAC80211("Set %s\n", print_mac(mac, conf->mac_addr));
3822 memcpy(priv->mac_addr, conf->mac_addr, ETH_ALEN);
3825 if (iwl4965_set_mode(priv, conf->type) == -EAGAIN)
3826 /* we are not ready, will run again when ready */
3827 set_bit(STATUS_MODE_PENDING, &priv->status);
3829 mutex_unlock(&priv->mutex);
3831 IWL_DEBUG_MAC80211("leave\n");
3832 return 0;
3836 * iwl4965_mac_config - mac80211 config callback
3838 * We ignore conf->flags & IEEE80211_CONF_SHORT_SLOT_TIME since it seems to
3839 * be set inappropriately and the driver currently sets the hardware up to
3840 * use it whenever needed.
3842 static int iwl4965_mac_config(struct ieee80211_hw *hw, struct ieee80211_conf *conf)
3844 struct iwl_priv *priv = hw->priv;
3845 const struct iwl_channel_info *ch_info;
3846 unsigned long flags;
3847 int ret = 0;
3848 u16 channel;
3850 mutex_lock(&priv->mutex);
3851 IWL_DEBUG_MAC80211("enter to channel %d\n", conf->channel->hw_value);
3853 priv->add_radiotap = !!(conf->flags & IEEE80211_CONF_RADIOTAP);
3856 if (priv->cfg->ops->lib->radio_kill_sw &&
3857 priv->cfg->ops->lib->radio_kill_sw(priv, !conf->radio_enabled)) {
3858 IWL_DEBUG_MAC80211("leave - RF-KILL - waiting for uCode\n");
3859 mutex_unlock(&priv->mutex);
3862 if (!iwl_is_ready(priv)) {
3863 IWL_DEBUG_MAC80211("leave - not ready\n");
3864 ret = -EIO;
3865 goto out;
3868 if (unlikely(!priv->cfg->mod_params->disable_hw_scan &&
3869 test_bit(STATUS_SCANNING, &priv->status))) {
3870 IWL_DEBUG_MAC80211("leave - scanning\n");
3871 set_bit(STATUS_CONF_PENDING, &priv->status);
3872 mutex_unlock(&priv->mutex);
3873 return 0;
3876 channel = ieee80211_frequency_to_channel(conf->channel->center_freq);
3877 ch_info = iwl_get_channel_info(priv, conf->channel->band, channel);
3878 if (!is_channel_valid(ch_info)) {
3879 IWL_DEBUG_MAC80211("leave - invalid channel\n");
3880 ret = -EINVAL;
3881 goto out;
3884 if (priv->iw_mode == IEEE80211_IF_TYPE_IBSS &&
3885 !is_channel_ibss(ch_info)) {
3886 IWL_ERROR("channel %d in band %d not IBSS channel\n",
3887 conf->channel->hw_value, conf->channel->band);
3888 ret = -EINVAL;
3889 goto out;
3892 spin_lock_irqsave(&priv->lock, flags);
3894 /* if we are switching from ht to 2.4 clear flags
3895 * from any ht related info since 2.4 does not
3896 * support ht */
3897 if ((le16_to_cpu(priv->staging_rxon.channel) != channel)
3898 #ifdef IEEE80211_CONF_CHANNEL_SWITCH
3899 && !(conf->flags & IEEE80211_CONF_CHANNEL_SWITCH)
3900 #endif
3902 priv->staging_rxon.flags = 0;
3904 iwl_set_rxon_channel(priv, conf->channel->band, channel);
3906 iwl_set_flags_for_band(priv, conf->channel->band);
3908 /* The list of supported rates and rate mask can be different
3909 * for each band; since the band may have changed, reset
3910 * the rate mask to what mac80211 lists */
3911 iwl4965_set_rate(priv);
3913 spin_unlock_irqrestore(&priv->lock, flags);
3915 #ifdef IEEE80211_CONF_CHANNEL_SWITCH
3916 if (conf->flags & IEEE80211_CONF_CHANNEL_SWITCH) {
3917 iwl4965_hw_channel_switch(priv, conf->channel);
3918 goto out;
3920 #endif
3922 if (!conf->radio_enabled) {
3923 IWL_DEBUG_MAC80211("leave - radio disabled\n");
3924 goto out;
3927 if (iwl_is_rfkill(priv)) {
3928 IWL_DEBUG_MAC80211("leave - RF kill\n");
3929 ret = -EIO;
3930 goto out;
3933 iwl4965_set_rate(priv);
3935 if (memcmp(&priv->active_rxon,
3936 &priv->staging_rxon, sizeof(priv->staging_rxon)))
3937 iwl4965_commit_rxon(priv);
3938 else
3939 IWL_DEBUG_INFO("No re-sending same RXON configuration.\n");
3941 IWL_DEBUG_MAC80211("leave\n");
3943 out:
3944 clear_bit(STATUS_CONF_PENDING, &priv->status);
3945 mutex_unlock(&priv->mutex);
3946 return ret;
3949 static void iwl4965_config_ap(struct iwl_priv *priv)
3951 int ret = 0;
3953 if (test_bit(STATUS_EXIT_PENDING, &priv->status))
3954 return;
3956 /* The following should be done only at AP bring up */
3957 if ((priv->active_rxon.filter_flags & RXON_FILTER_ASSOC_MSK) == 0) {
3959 /* RXON - unassoc (to set timing command) */
3960 priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
3961 iwl4965_commit_rxon(priv);
3963 /* RXON Timing */
3964 memset(&priv->rxon_timing, 0, sizeof(struct iwl4965_rxon_time_cmd));
3965 iwl4965_setup_rxon_timing(priv);
3966 ret = iwl_send_cmd_pdu(priv, REPLY_RXON_TIMING,
3967 sizeof(priv->rxon_timing), &priv->rxon_timing);
3968 if (ret)
3969 IWL_WARNING("REPLY_RXON_TIMING failed - "
3970 "Attempting to continue.\n");
3972 iwl_set_rxon_chain(priv);
3974 /* FIXME: what should be the assoc_id for AP? */
3975 priv->staging_rxon.assoc_id = cpu_to_le16(priv->assoc_id);
3976 if (priv->assoc_capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
3977 priv->staging_rxon.flags |=
3978 RXON_FLG_SHORT_PREAMBLE_MSK;
3979 else
3980 priv->staging_rxon.flags &=
3981 ~RXON_FLG_SHORT_PREAMBLE_MSK;
3983 if (priv->staging_rxon.flags & RXON_FLG_BAND_24G_MSK) {
3984 if (priv->assoc_capability &
3985 WLAN_CAPABILITY_SHORT_SLOT_TIME)
3986 priv->staging_rxon.flags |=
3987 RXON_FLG_SHORT_SLOT_MSK;
3988 else
3989 priv->staging_rxon.flags &=
3990 ~RXON_FLG_SHORT_SLOT_MSK;
3992 if (priv->iw_mode == IEEE80211_IF_TYPE_IBSS)
3993 priv->staging_rxon.flags &=
3994 ~RXON_FLG_SHORT_SLOT_MSK;
3996 /* restore RXON assoc */
3997 priv->staging_rxon.filter_flags |= RXON_FILTER_ASSOC_MSK;
3998 iwl4965_commit_rxon(priv);
3999 iwl4965_activate_qos(priv, 1);
4000 iwl_rxon_add_station(priv, iwl_bcast_addr, 0);
4002 iwl4965_send_beacon_cmd(priv);
4004 /* FIXME - we need to add code here to detect a totally new
4005 * configuration, reset the AP, unassoc, rxon timing, assoc,
4006 * clear sta table, add BCAST sta... */
4009 static int iwl4965_mac_config_interface(struct ieee80211_hw *hw,
4010 struct ieee80211_vif *vif,
4011 struct ieee80211_if_conf *conf)
4013 struct iwl_priv *priv = hw->priv;
4014 DECLARE_MAC_BUF(mac);
4015 unsigned long flags;
4016 int rc;
4018 if (conf == NULL)
4019 return -EIO;
4021 if (priv->vif != vif) {
4022 IWL_DEBUG_MAC80211("leave - priv->vif != vif\n");
4023 return 0;
4026 if ((priv->iw_mode == IEEE80211_IF_TYPE_AP) &&
4027 (!conf->beacon || !conf->ssid_len)) {
4028 IWL_DEBUG_MAC80211
4029 ("Leaving in AP mode because HostAPD is not ready.\n");
4030 return 0;
4033 if (!iwl_is_alive(priv))
4034 return -EAGAIN;
4036 mutex_lock(&priv->mutex);
4038 if (conf->bssid)
4039 IWL_DEBUG_MAC80211("bssid: %s\n",
4040 print_mac(mac, conf->bssid));
4043 * very dubious code was here; the probe filtering flag is never set:
4045 if (unlikely(test_bit(STATUS_SCANNING, &priv->status)) &&
4046 !(priv->hw->flags & IEEE80211_HW_NO_PROBE_FILTERING)) {
4049 if (priv->iw_mode == IEEE80211_IF_TYPE_AP) {
4050 if (!conf->bssid) {
4051 conf->bssid = priv->mac_addr;
4052 memcpy(priv->bssid, priv->mac_addr, ETH_ALEN);
4053 IWL_DEBUG_MAC80211("bssid was set to: %s\n",
4054 print_mac(mac, conf->bssid));
4056 if (priv->ibss_beacon)
4057 dev_kfree_skb(priv->ibss_beacon);
4059 priv->ibss_beacon = conf->beacon;
4062 if (iwl_is_rfkill(priv))
4063 goto done;
4065 if (conf->bssid && !is_zero_ether_addr(conf->bssid) &&
4066 !is_multicast_ether_addr(conf->bssid)) {
4067 /* If there is currently a HW scan going on in the background
4068 * then we need to cancel it else the RXON below will fail. */
4069 if (iwl4965_scan_cancel_timeout(priv, 100)) {
4070 IWL_WARNING("Aborted scan still in progress "
4071 "after 100ms\n");
4072 IWL_DEBUG_MAC80211("leaving - scan abort failed.\n");
4073 mutex_unlock(&priv->mutex);
4074 return -EAGAIN;
4076 memcpy(priv->staging_rxon.bssid_addr, conf->bssid, ETH_ALEN);
4078 /* TODO: Audit driver for usage of these members and see
4079 * if mac80211 deprecates them (priv->bssid looks like it
4080 * shouldn't be there, but I haven't scanned the IBSS code
4081 * to verify) - jpk */
4082 memcpy(priv->bssid, conf->bssid, ETH_ALEN);
4084 if (priv->iw_mode == IEEE80211_IF_TYPE_AP)
4085 iwl4965_config_ap(priv);
4086 else {
4087 rc = iwl4965_commit_rxon(priv);
4088 if ((priv->iw_mode == IEEE80211_IF_TYPE_STA) && rc)
4089 iwl_rxon_add_station(
4090 priv, priv->active_rxon.bssid_addr, 1);
4093 } else {
4094 iwl4965_scan_cancel_timeout(priv, 100);
4095 priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
4096 iwl4965_commit_rxon(priv);
4099 done:
4100 spin_lock_irqsave(&priv->lock, flags);
4101 if (!conf->ssid_len)
4102 memset(priv->essid, 0, IW_ESSID_MAX_SIZE);
4103 else
4104 memcpy(priv->essid, conf->ssid, conf->ssid_len);
4106 priv->essid_len = conf->ssid_len;
4107 spin_unlock_irqrestore(&priv->lock, flags);
4109 IWL_DEBUG_MAC80211("leave\n");
4110 mutex_unlock(&priv->mutex);
4112 return 0;
4115 static void iwl4965_configure_filter(struct ieee80211_hw *hw,
4116 unsigned int changed_flags,
4117 unsigned int *total_flags,
4118 int mc_count, struct dev_addr_list *mc_list)
4121 * XXX: dummy
4122 * see also iwl4965_connection_init_rx_config
4124 struct iwl_priv *priv = hw->priv;
4125 int new_flags = 0;
4126 if (changed_flags & (FIF_PROMISC_IN_BSS | FIF_OTHER_BSS)) {
4127 if (*total_flags & (FIF_PROMISC_IN_BSS | FIF_OTHER_BSS)) {
4128 IWL_DEBUG_MAC80211("Enter: type %d (0x%x, 0x%x)\n",
4129 IEEE80211_IF_TYPE_MNTR,
4130 changed_flags, *total_flags);
4131 /* queue work 'cuz mac80211 is holding a lock which
4132 * prevents us from issuing (synchronous) f/w cmds */
4133 queue_work(priv->workqueue, &priv->set_monitor);
4134 new_flags &= FIF_PROMISC_IN_BSS |
4135 FIF_OTHER_BSS |
4136 FIF_ALLMULTI;
4139 *total_flags = new_flags;
4142 static void iwl4965_mac_remove_interface(struct ieee80211_hw *hw,
4143 struct ieee80211_if_init_conf *conf)
4145 struct iwl_priv *priv = hw->priv;
4147 IWL_DEBUG_MAC80211("enter\n");
4149 mutex_lock(&priv->mutex);
4151 if (iwl_is_ready_rf(priv)) {
4152 iwl4965_scan_cancel_timeout(priv, 100);
4153 cancel_delayed_work(&priv->post_associate);
4154 priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
4155 iwl4965_commit_rxon(priv);
4157 if (priv->vif == conf->vif) {
4158 priv->vif = NULL;
4159 memset(priv->bssid, 0, ETH_ALEN);
4160 memset(priv->essid, 0, IW_ESSID_MAX_SIZE);
4161 priv->essid_len = 0;
4163 mutex_unlock(&priv->mutex);
4165 IWL_DEBUG_MAC80211("leave\n");
4169 #define IWL_DELAY_NEXT_SCAN_AFTER_ASSOC (HZ*6)
4170 static void iwl4965_bss_info_changed(struct ieee80211_hw *hw,
4171 struct ieee80211_vif *vif,
4172 struct ieee80211_bss_conf *bss_conf,
4173 u32 changes)
4175 struct iwl_priv *priv = hw->priv;
4177 IWL_DEBUG_MAC80211("changes = 0x%X\n", changes);
4179 if (changes & BSS_CHANGED_ERP_PREAMBLE) {
4180 IWL_DEBUG_MAC80211("ERP_PREAMBLE %d\n",
4181 bss_conf->use_short_preamble);
4182 if (bss_conf->use_short_preamble)
4183 priv->staging_rxon.flags |= RXON_FLG_SHORT_PREAMBLE_MSK;
4184 else
4185 priv->staging_rxon.flags &= ~RXON_FLG_SHORT_PREAMBLE_MSK;
4188 if (changes & BSS_CHANGED_ERP_CTS_PROT) {
4189 IWL_DEBUG_MAC80211("ERP_CTS %d\n", bss_conf->use_cts_prot);
4190 if (bss_conf->use_cts_prot && (priv->band != IEEE80211_BAND_5GHZ))
4191 priv->staging_rxon.flags |= RXON_FLG_TGG_PROTECT_MSK;
4192 else
4193 priv->staging_rxon.flags &= ~RXON_FLG_TGG_PROTECT_MSK;
4196 if (changes & BSS_CHANGED_HT) {
4197 IWL_DEBUG_MAC80211("HT %d\n", bss_conf->assoc_ht);
4198 iwl4965_ht_conf(priv, bss_conf);
4199 iwl_set_rxon_chain(priv);
4202 if (changes & BSS_CHANGED_ASSOC) {
4203 IWL_DEBUG_MAC80211("ASSOC %d\n", bss_conf->assoc);
4204 /* This should never happen as this function should
4205 * never be called from interrupt context. */
4206 if (WARN_ON_ONCE(in_interrupt()))
4207 return;
4208 if (bss_conf->assoc) {
4209 priv->assoc_id = bss_conf->aid;
4210 priv->beacon_int = bss_conf->beacon_int;
4211 priv->timestamp = bss_conf->timestamp;
4212 priv->assoc_capability = bss_conf->assoc_capability;
4213 priv->next_scan_jiffies = jiffies +
4214 IWL_DELAY_NEXT_SCAN_AFTER_ASSOC;
4215 mutex_lock(&priv->mutex);
4216 iwl4965_post_associate(priv);
4217 mutex_unlock(&priv->mutex);
4218 } else {
4219 priv->assoc_id = 0;
4220 IWL_DEBUG_MAC80211("DISASSOC %d\n", bss_conf->assoc);
4222 } else if (changes && iwl_is_associated(priv) && priv->assoc_id) {
4223 IWL_DEBUG_MAC80211("Associated Changes %d\n", changes);
4224 iwl_send_rxon_assoc(priv);
4229 static int iwl4965_mac_hw_scan(struct ieee80211_hw *hw, u8 *ssid, size_t len)
4231 int rc = 0;
4232 unsigned long flags;
4233 struct iwl_priv *priv = hw->priv;
4235 IWL_DEBUG_MAC80211("enter\n");
4237 mutex_lock(&priv->mutex);
4238 spin_lock_irqsave(&priv->lock, flags);
4240 if (!iwl_is_ready_rf(priv)) {
4241 rc = -EIO;
4242 IWL_DEBUG_MAC80211("leave - not ready or exit pending\n");
4243 goto out_unlock;
4246 if (priv->iw_mode == IEEE80211_IF_TYPE_AP) { /* APs don't scan */
4247 rc = -EIO;
4248 IWL_ERROR("ERROR: APs don't scan\n");
4249 goto out_unlock;
4252 /* we don't schedule scan within next_scan_jiffies period */
4253 if (priv->next_scan_jiffies &&
4254 time_after(priv->next_scan_jiffies, jiffies)) {
4255 rc = -EAGAIN;
4256 goto out_unlock;
4258 /* if we just finished scan ask for delay */
4259 if (priv->last_scan_jiffies && time_after(priv->last_scan_jiffies +
4260 IWL_DELAY_NEXT_SCAN, jiffies)) {
4261 rc = -EAGAIN;
4262 goto out_unlock;
4264 if (len) {
4265 IWL_DEBUG_SCAN("direct scan for %s [%d]\n ",
4266 iwl4965_escape_essid(ssid, len), (int)len);
4268 priv->one_direct_scan = 1;
4269 priv->direct_ssid_len = (u8)
4270 min((u8) len, (u8) IW_ESSID_MAX_SIZE);
4271 memcpy(priv->direct_ssid, ssid, priv->direct_ssid_len);
4272 } else
4273 priv->one_direct_scan = 0;
4275 rc = iwl4965_scan_initiate(priv);
4277 IWL_DEBUG_MAC80211("leave\n");
4279 out_unlock:
4280 spin_unlock_irqrestore(&priv->lock, flags);
4281 mutex_unlock(&priv->mutex);
4283 return rc;
4286 static void iwl4965_mac_update_tkip_key(struct ieee80211_hw *hw,
4287 struct ieee80211_key_conf *keyconf, const u8 *addr,
4288 u32 iv32, u16 *phase1key)
4290 struct iwl_priv *priv = hw->priv;
4291 u8 sta_id = IWL_INVALID_STATION;
4292 unsigned long flags;
4293 __le16 key_flags = 0;
4294 int i;
4295 DECLARE_MAC_BUF(mac);
4297 IWL_DEBUG_MAC80211("enter\n");
4299 sta_id = iwl_find_station(priv, addr);
4300 if (sta_id == IWL_INVALID_STATION) {
4301 IWL_DEBUG_MAC80211("leave - %s not in station map.\n",
4302 print_mac(mac, addr));
4303 return;
4306 iwl4965_scan_cancel_timeout(priv, 100);
4308 key_flags |= (STA_KEY_FLG_TKIP | STA_KEY_FLG_MAP_KEY_MSK);
4309 key_flags |= cpu_to_le16(keyconf->keyidx << STA_KEY_FLG_KEYID_POS);
4310 key_flags &= ~STA_KEY_FLG_INVALID;
4312 if (sta_id == priv->hw_params.bcast_sta_id)
4313 key_flags |= STA_KEY_MULTICAST_MSK;
4315 spin_lock_irqsave(&priv->sta_lock, flags);
4317 priv->stations[sta_id].sta.key.key_flags = key_flags;
4318 priv->stations[sta_id].sta.key.tkip_rx_tsc_byte2 = (u8) iv32;
4320 for (i = 0; i < 5; i++)
4321 priv->stations[sta_id].sta.key.tkip_rx_ttak[i] =
4322 cpu_to_le16(phase1key[i]);
4324 priv->stations[sta_id].sta.sta.modify_mask = STA_MODIFY_KEY_MASK;
4325 priv->stations[sta_id].sta.mode = STA_CONTROL_MODIFY_MSK;
4327 iwl_send_add_sta(priv, &priv->stations[sta_id].sta, CMD_ASYNC);
4329 spin_unlock_irqrestore(&priv->sta_lock, flags);
4331 IWL_DEBUG_MAC80211("leave\n");
4334 static int iwl4965_mac_set_key(struct ieee80211_hw *hw, enum set_key_cmd cmd,
4335 const u8 *local_addr, const u8 *addr,
4336 struct ieee80211_key_conf *key)
4338 struct iwl_priv *priv = hw->priv;
4339 DECLARE_MAC_BUF(mac);
4340 int ret = 0;
4341 u8 sta_id = IWL_INVALID_STATION;
4342 u8 is_default_wep_key = 0;
4344 IWL_DEBUG_MAC80211("enter\n");
4346 if (priv->hw_params.sw_crypto) {
4347 IWL_DEBUG_MAC80211("leave - hwcrypto disabled\n");
4348 return -EOPNOTSUPP;
4351 if (is_zero_ether_addr(addr))
4352 /* only support pairwise keys */
4353 return -EOPNOTSUPP;
4355 sta_id = iwl_find_station(priv, addr);
4356 if (sta_id == IWL_INVALID_STATION) {
4357 IWL_DEBUG_MAC80211("leave - %s not in station map.\n",
4358 print_mac(mac, addr));
4359 return -EINVAL;
4363 mutex_lock(&priv->mutex);
4364 iwl4965_scan_cancel_timeout(priv, 100);
4365 mutex_unlock(&priv->mutex);
4367 /* If we are getting WEP group key and we didn't receive any key mapping
4368 * so far, we are in legacy wep mode (group key only), otherwise we are
4369 * in 1X mode.
4370 * In legacy wep mode, we use another host command to the uCode */
4371 if (key->alg == ALG_WEP && sta_id == priv->hw_params.bcast_sta_id &&
4372 priv->iw_mode != IEEE80211_IF_TYPE_AP) {
4373 if (cmd == SET_KEY)
4374 is_default_wep_key = !priv->key_mapping_key;
4375 else
4376 is_default_wep_key =
4377 (key->hw_key_idx == HW_KEY_DEFAULT);
4380 switch (cmd) {
4381 case SET_KEY:
4382 if (is_default_wep_key)
4383 ret = iwl_set_default_wep_key(priv, key);
4384 else
4385 ret = iwl_set_dynamic_key(priv, key, sta_id);
4387 IWL_DEBUG_MAC80211("enable hwcrypto key\n");
4388 break;
4389 case DISABLE_KEY:
4390 if (is_default_wep_key)
4391 ret = iwl_remove_default_wep_key(priv, key);
4392 else
4393 ret = iwl_remove_dynamic_key(priv, key, sta_id);
4395 IWL_DEBUG_MAC80211("disable hwcrypto key\n");
4396 break;
4397 default:
4398 ret = -EINVAL;
4401 IWL_DEBUG_MAC80211("leave\n");
4403 return ret;
4406 static int iwl4965_mac_conf_tx(struct ieee80211_hw *hw, u16 queue,
4407 const struct ieee80211_tx_queue_params *params)
4409 struct iwl_priv *priv = hw->priv;
4410 unsigned long flags;
4411 int q;
4413 IWL_DEBUG_MAC80211("enter\n");
4415 if (!iwl_is_ready_rf(priv)) {
4416 IWL_DEBUG_MAC80211("leave - RF not ready\n");
4417 return -EIO;
4420 if (queue >= AC_NUM) {
4421 IWL_DEBUG_MAC80211("leave - queue >= AC_NUM %d\n", queue);
4422 return 0;
4425 if (!priv->qos_data.qos_enable) {
4426 priv->qos_data.qos_active = 0;
4427 IWL_DEBUG_MAC80211("leave - qos not enabled\n");
4428 return 0;
4430 q = AC_NUM - 1 - queue;
4432 spin_lock_irqsave(&priv->lock, flags);
4434 priv->qos_data.def_qos_parm.ac[q].cw_min = cpu_to_le16(params->cw_min);
4435 priv->qos_data.def_qos_parm.ac[q].cw_max = cpu_to_le16(params->cw_max);
4436 priv->qos_data.def_qos_parm.ac[q].aifsn = params->aifs;
4437 priv->qos_data.def_qos_parm.ac[q].edca_txop =
4438 cpu_to_le16((params->txop * 32));
4440 priv->qos_data.def_qos_parm.ac[q].reserved1 = 0;
4441 priv->qos_data.qos_active = 1;
4443 spin_unlock_irqrestore(&priv->lock, flags);
4445 mutex_lock(&priv->mutex);
4446 if (priv->iw_mode == IEEE80211_IF_TYPE_AP)
4447 iwl4965_activate_qos(priv, 1);
4448 else if (priv->assoc_id && iwl_is_associated(priv))
4449 iwl4965_activate_qos(priv, 0);
4451 mutex_unlock(&priv->mutex);
4453 IWL_DEBUG_MAC80211("leave\n");
4454 return 0;
4457 static int iwl4965_mac_get_tx_stats(struct ieee80211_hw *hw,
4458 struct ieee80211_tx_queue_stats *stats)
4460 struct iwl_priv *priv = hw->priv;
4461 int i, avail;
4462 struct iwl_tx_queue *txq;
4463 struct iwl_queue *q;
4464 unsigned long flags;
4466 IWL_DEBUG_MAC80211("enter\n");
4468 if (!iwl_is_ready_rf(priv)) {
4469 IWL_DEBUG_MAC80211("leave - RF not ready\n");
4470 return -EIO;
4473 spin_lock_irqsave(&priv->lock, flags);
4475 for (i = 0; i < AC_NUM; i++) {
4476 txq = &priv->txq[i];
4477 q = &txq->q;
4478 avail = iwl_queue_space(q);
4480 stats[i].len = q->n_window - avail;
4481 stats[i].limit = q->n_window - q->high_mark;
4482 stats[i].count = q->n_window;
4485 spin_unlock_irqrestore(&priv->lock, flags);
4487 IWL_DEBUG_MAC80211("leave\n");
4489 return 0;
4492 static int iwl4965_mac_get_stats(struct ieee80211_hw *hw,
4493 struct ieee80211_low_level_stats *stats)
4495 struct iwl_priv *priv = hw->priv;
4497 priv = hw->priv;
4498 IWL_DEBUG_MAC80211("enter\n");
4499 IWL_DEBUG_MAC80211("leave\n");
4501 return 0;
4504 static u64 iwl4965_mac_get_tsf(struct ieee80211_hw *hw)
4506 struct iwl_priv *priv;
4508 priv = hw->priv;
4509 IWL_DEBUG_MAC80211("enter\n");
4510 IWL_DEBUG_MAC80211("leave\n");
4512 return 0;
4515 static void iwl4965_mac_reset_tsf(struct ieee80211_hw *hw)
4517 struct iwl_priv *priv = hw->priv;
4518 unsigned long flags;
4520 mutex_lock(&priv->mutex);
4521 IWL_DEBUG_MAC80211("enter\n");
4523 priv->lq_mngr.lq_ready = 0;
4524 spin_lock_irqsave(&priv->lock, flags);
4525 memset(&priv->current_ht_config, 0, sizeof(struct iwl_ht_info));
4526 spin_unlock_irqrestore(&priv->lock, flags);
4528 iwl_reset_qos(priv);
4530 cancel_delayed_work(&priv->post_associate);
4532 spin_lock_irqsave(&priv->lock, flags);
4533 priv->assoc_id = 0;
4534 priv->assoc_capability = 0;
4535 priv->assoc_station_added = 0;
4537 /* new association get rid of ibss beacon skb */
4538 if (priv->ibss_beacon)
4539 dev_kfree_skb(priv->ibss_beacon);
4541 priv->ibss_beacon = NULL;
4543 priv->beacon_int = priv->hw->conf.beacon_int;
4544 priv->timestamp = 0;
4545 if ((priv->iw_mode == IEEE80211_IF_TYPE_STA))
4546 priv->beacon_int = 0;
4548 spin_unlock_irqrestore(&priv->lock, flags);
4550 if (!iwl_is_ready_rf(priv)) {
4551 IWL_DEBUG_MAC80211("leave - not ready\n");
4552 mutex_unlock(&priv->mutex);
4553 return;
4556 /* we are restarting association process
4557 * clear RXON_FILTER_ASSOC_MSK bit
4559 if (priv->iw_mode != IEEE80211_IF_TYPE_AP) {
4560 iwl4965_scan_cancel_timeout(priv, 100);
4561 priv->staging_rxon.filter_flags &= ~RXON_FILTER_ASSOC_MSK;
4562 iwl4965_commit_rxon(priv);
4565 iwl_power_update_mode(priv, 0);
4567 /* Per mac80211.h: This is only used in IBSS mode... */
4568 if (priv->iw_mode != IEEE80211_IF_TYPE_IBSS) {
4570 IWL_DEBUG_MAC80211("leave - not in IBSS\n");
4571 mutex_unlock(&priv->mutex);
4572 return;
4575 iwl4965_set_rate(priv);
4577 mutex_unlock(&priv->mutex);
4579 IWL_DEBUG_MAC80211("leave\n");
4582 static int iwl4965_mac_beacon_update(struct ieee80211_hw *hw, struct sk_buff *skb)
4584 struct iwl_priv *priv = hw->priv;
4585 unsigned long flags;
4587 mutex_lock(&priv->mutex);
4588 IWL_DEBUG_MAC80211("enter\n");
4590 if (!iwl_is_ready_rf(priv)) {
4591 IWL_DEBUG_MAC80211("leave - RF not ready\n");
4592 mutex_unlock(&priv->mutex);
4593 return -EIO;
4596 if (priv->iw_mode != IEEE80211_IF_TYPE_IBSS) {
4597 IWL_DEBUG_MAC80211("leave - not IBSS\n");
4598 mutex_unlock(&priv->mutex);
4599 return -EIO;
4602 spin_lock_irqsave(&priv->lock, flags);
4604 if (priv->ibss_beacon)
4605 dev_kfree_skb(priv->ibss_beacon);
4607 priv->ibss_beacon = skb;
4609 priv->assoc_id = 0;
4611 IWL_DEBUG_MAC80211("leave\n");
4612 spin_unlock_irqrestore(&priv->lock, flags);
4614 iwl_reset_qos(priv);
4616 iwl4965_post_associate(priv);
4618 mutex_unlock(&priv->mutex);
4620 return 0;
4623 /*****************************************************************************
4625 * sysfs attributes
4627 *****************************************************************************/
4629 #ifdef CONFIG_IWLWIFI_DEBUG
4632 * The following adds a new attribute to the sysfs representation
4633 * of this device driver (i.e. a new file in /sys/bus/pci/drivers/iwl/)
4634 * used for controlling the debug level.
4636 * See the level definitions in iwl for details.
4639 static ssize_t show_debug_level(struct device *d,
4640 struct device_attribute *attr, char *buf)
4642 struct iwl_priv *priv = d->driver_data;
4644 return sprintf(buf, "0x%08X\n", priv->debug_level);
4646 static ssize_t store_debug_level(struct device *d,
4647 struct device_attribute *attr,
4648 const char *buf, size_t count)
4650 struct iwl_priv *priv = d->driver_data;
4651 char *p = (char *)buf;
4652 u32 val;
4654 val = simple_strtoul(p, &p, 0);
4655 if (p == buf)
4656 printk(KERN_INFO DRV_NAME
4657 ": %s is not in hex or decimal form.\n", buf);
4658 else
4659 priv->debug_level = val;
4661 return strnlen(buf, count);
4664 static DEVICE_ATTR(debug_level, S_IWUSR | S_IRUGO,
4665 show_debug_level, store_debug_level);
4668 #endif /* CONFIG_IWLWIFI_DEBUG */
4671 static ssize_t show_version(struct device *d,
4672 struct device_attribute *attr, char *buf)
4674 struct iwl_priv *priv = d->driver_data;
4675 struct iwl_alive_resp *palive = &priv->card_alive;
4677 if (palive->is_valid)
4678 return sprintf(buf, "fw version: 0x%01X.0x%01X.0x%01X.0x%01X\n"
4679 "fw type: 0x%01X 0x%01X\n",
4680 palive->ucode_major, palive->ucode_minor,
4681 palive->sw_rev[0], palive->sw_rev[1],
4682 palive->ver_type, palive->ver_subtype);
4684 else
4685 return sprintf(buf, "fw not loaded\n");
4688 static DEVICE_ATTR(version, S_IWUSR | S_IRUGO, show_version, NULL);
4690 static ssize_t show_temperature(struct device *d,
4691 struct device_attribute *attr, char *buf)
4693 struct iwl_priv *priv = (struct iwl_priv *)d->driver_data;
4695 if (!iwl_is_alive(priv))
4696 return -EAGAIN;
4698 return sprintf(buf, "%d\n", iwl4965_hw_get_temperature(priv));
4701 static DEVICE_ATTR(temperature, S_IRUGO, show_temperature, NULL);
4703 static ssize_t show_rs_window(struct device *d,
4704 struct device_attribute *attr,
4705 char *buf)
4707 struct iwl_priv *priv = d->driver_data;
4708 return iwl4965_fill_rs_info(priv->hw, buf, IWL_AP_ID);
4710 static DEVICE_ATTR(rs_window, S_IRUGO, show_rs_window, NULL);
4712 static ssize_t show_tx_power(struct device *d,
4713 struct device_attribute *attr, char *buf)
4715 struct iwl_priv *priv = (struct iwl_priv *)d->driver_data;
4716 return sprintf(buf, "%d\n", priv->user_txpower_limit);
4719 static ssize_t store_tx_power(struct device *d,
4720 struct device_attribute *attr,
4721 const char *buf, size_t count)
4723 struct iwl_priv *priv = (struct iwl_priv *)d->driver_data;
4724 char *p = (char *)buf;
4725 u32 val;
4727 val = simple_strtoul(p, &p, 10);
4728 if (p == buf)
4729 printk(KERN_INFO DRV_NAME
4730 ": %s is not in decimal form.\n", buf);
4731 else
4732 iwl4965_hw_reg_set_txpower(priv, val);
4734 return count;
4737 static DEVICE_ATTR(tx_power, S_IWUSR | S_IRUGO, show_tx_power, store_tx_power);
4739 static ssize_t show_flags(struct device *d,
4740 struct device_attribute *attr, char *buf)
4742 struct iwl_priv *priv = (struct iwl_priv *)d->driver_data;
4744 return sprintf(buf, "0x%04X\n", priv->active_rxon.flags);
4747 static ssize_t store_flags(struct device *d,
4748 struct device_attribute *attr,
4749 const char *buf, size_t count)
4751 struct iwl_priv *priv = (struct iwl_priv *)d->driver_data;
4752 u32 flags = simple_strtoul(buf, NULL, 0);
4754 mutex_lock(&priv->mutex);
4755 if (le32_to_cpu(priv->staging_rxon.flags) != flags) {
4756 /* Cancel any currently running scans... */
4757 if (iwl4965_scan_cancel_timeout(priv, 100))
4758 IWL_WARNING("Could not cancel scan.\n");
4759 else {
4760 IWL_DEBUG_INFO("Committing rxon.flags = 0x%04X\n",
4761 flags);
4762 priv->staging_rxon.flags = cpu_to_le32(flags);
4763 iwl4965_commit_rxon(priv);
4766 mutex_unlock(&priv->mutex);
4768 return count;
4771 static DEVICE_ATTR(flags, S_IWUSR | S_IRUGO, show_flags, store_flags);
4773 static ssize_t show_filter_flags(struct device *d,
4774 struct device_attribute *attr, char *buf)
4776 struct iwl_priv *priv = (struct iwl_priv *)d->driver_data;
4778 return sprintf(buf, "0x%04X\n",
4779 le32_to_cpu(priv->active_rxon.filter_flags));
4782 static ssize_t store_filter_flags(struct device *d,
4783 struct device_attribute *attr,
4784 const char *buf, size_t count)
4786 struct iwl_priv *priv = (struct iwl_priv *)d->driver_data;
4787 u32 filter_flags = simple_strtoul(buf, NULL, 0);
4789 mutex_lock(&priv->mutex);
4790 if (le32_to_cpu(priv->staging_rxon.filter_flags) != filter_flags) {
4791 /* Cancel any currently running scans... */
4792 if (iwl4965_scan_cancel_timeout(priv, 100))
4793 IWL_WARNING("Could not cancel scan.\n");
4794 else {
4795 IWL_DEBUG_INFO("Committing rxon.filter_flags = "
4796 "0x%04X\n", filter_flags);
4797 priv->staging_rxon.filter_flags =
4798 cpu_to_le32(filter_flags);
4799 iwl4965_commit_rxon(priv);
4802 mutex_unlock(&priv->mutex);
4804 return count;
4807 static DEVICE_ATTR(filter_flags, S_IWUSR | S_IRUGO, show_filter_flags,
4808 store_filter_flags);
4810 #ifdef CONFIG_IWL4965_SPECTRUM_MEASUREMENT
4812 static ssize_t show_measurement(struct device *d,
4813 struct device_attribute *attr, char *buf)
4815 struct iwl_priv *priv = dev_get_drvdata(d);
4816 struct iwl4965_spectrum_notification measure_report;
4817 u32 size = sizeof(measure_report), len = 0, ofs = 0;
4818 u8 *data = (u8 *) & measure_report;
4819 unsigned long flags;
4821 spin_lock_irqsave(&priv->lock, flags);
4822 if (!(priv->measurement_status & MEASUREMENT_READY)) {
4823 spin_unlock_irqrestore(&priv->lock, flags);
4824 return 0;
4826 memcpy(&measure_report, &priv->measure_report, size);
4827 priv->measurement_status = 0;
4828 spin_unlock_irqrestore(&priv->lock, flags);
4830 while (size && (PAGE_SIZE - len)) {
4831 hex_dump_to_buffer(data + ofs, size, 16, 1, buf + len,
4832 PAGE_SIZE - len, 1);
4833 len = strlen(buf);
4834 if (PAGE_SIZE - len)
4835 buf[len++] = '\n';
4837 ofs += 16;
4838 size -= min(size, 16U);
4841 return len;
4844 static ssize_t store_measurement(struct device *d,
4845 struct device_attribute *attr,
4846 const char *buf, size_t count)
4848 struct iwl_priv *priv = dev_get_drvdata(d);
4849 struct ieee80211_measurement_params params = {
4850 .channel = le16_to_cpu(priv->active_rxon.channel),
4851 .start_time = cpu_to_le64(priv->last_tsf),
4852 .duration = cpu_to_le16(1),
4854 u8 type = IWL_MEASURE_BASIC;
4855 u8 buffer[32];
4856 u8 channel;
4858 if (count) {
4859 char *p = buffer;
4860 strncpy(buffer, buf, min(sizeof(buffer), count));
4861 channel = simple_strtoul(p, NULL, 0);
4862 if (channel)
4863 params.channel = channel;
4865 p = buffer;
4866 while (*p && *p != ' ')
4867 p++;
4868 if (*p)
4869 type = simple_strtoul(p + 1, NULL, 0);
4872 IWL_DEBUG_INFO("Invoking measurement of type %d on "
4873 "channel %d (for '%s')\n", type, params.channel, buf);
4874 iwl4965_get_measurement(priv, &params, type);
4876 return count;
4879 static DEVICE_ATTR(measurement, S_IRUSR | S_IWUSR,
4880 show_measurement, store_measurement);
4881 #endif /* CONFIG_IWL4965_SPECTRUM_MEASUREMENT */
4883 static ssize_t store_retry_rate(struct device *d,
4884 struct device_attribute *attr,
4885 const char *buf, size_t count)
4887 struct iwl_priv *priv = dev_get_drvdata(d);
4889 priv->retry_rate = simple_strtoul(buf, NULL, 0);
4890 if (priv->retry_rate <= 0)
4891 priv->retry_rate = 1;
4893 return count;
4896 static ssize_t show_retry_rate(struct device *d,
4897 struct device_attribute *attr, char *buf)
4899 struct iwl_priv *priv = dev_get_drvdata(d);
4900 return sprintf(buf, "%d", priv->retry_rate);
4903 static DEVICE_ATTR(retry_rate, S_IWUSR | S_IRUSR, show_retry_rate,
4904 store_retry_rate);
4906 static ssize_t store_power_level(struct device *d,
4907 struct device_attribute *attr,
4908 const char *buf, size_t count)
4910 struct iwl_priv *priv = dev_get_drvdata(d);
4911 int rc;
4912 int mode;
4914 mode = simple_strtoul(buf, NULL, 0);
4915 mutex_lock(&priv->mutex);
4917 if (!iwl_is_ready(priv)) {
4918 rc = -EAGAIN;
4919 goto out;
4922 rc = iwl_power_set_user_mode(priv, mode);
4923 if (rc) {
4924 IWL_DEBUG_MAC80211("failed setting power mode.\n");
4925 goto out;
4927 rc = count;
4929 out:
4930 mutex_unlock(&priv->mutex);
4931 return rc;
4934 #define MAX_WX_STRING 80
4936 /* Values are in microsecond */
4937 static const s32 timeout_duration[] = {
4938 350000,
4939 250000,
4940 75000,
4941 37000,
4942 25000,
4944 static const s32 period_duration[] = {
4945 400000,
4946 700000,
4947 1000000,
4948 1000000,
4949 1000000
4952 static ssize_t show_power_level(struct device *d,
4953 struct device_attribute *attr, char *buf)
4955 struct iwl_priv *priv = dev_get_drvdata(d);
4956 int level = priv->power_data.power_mode;
4957 char *p = buf;
4959 p += sprintf(p, "%d ", level);
4960 switch (level) {
4961 case IWL_POWER_MODE_CAM:
4962 case IWL_POWER_AC:
4963 p += sprintf(p, "(AC)");
4964 break;
4965 case IWL_POWER_BATTERY:
4966 p += sprintf(p, "(BATTERY)");
4967 break;
4968 default:
4969 p += sprintf(p,
4970 "(Timeout %dms, Period %dms)",
4971 timeout_duration[level - 1] / 1000,
4972 period_duration[level - 1] / 1000);
4975 if (!(priv->power_mode & IWL_POWER_ENABLED))
4976 p += sprintf(p, " OFF\n");
4977 else
4978 p += sprintf(p, " \n");
4980 p += sprintf(p, " \n");
4981 return (p - buf + 1);
4984 static DEVICE_ATTR(power_level, S_IWUSR | S_IRUSR, show_power_level,
4985 store_power_level);
4987 static ssize_t show_channels(struct device *d,
4988 struct device_attribute *attr, char *buf)
4990 /* all this shit doesn't belong into sysfs anyway */
4991 return 0;
4994 static DEVICE_ATTR(channels, S_IRUSR, show_channels, NULL);
4996 static ssize_t show_statistics(struct device *d,
4997 struct device_attribute *attr, char *buf)
4999 struct iwl_priv *priv = dev_get_drvdata(d);
5000 u32 size = sizeof(struct iwl4965_notif_statistics);
5001 u32 len = 0, ofs = 0;
5002 u8 *data = (u8 *) & priv->statistics;
5003 int rc = 0;
5005 if (!iwl_is_alive(priv))
5006 return -EAGAIN;
5008 mutex_lock(&priv->mutex);
5009 rc = iwl_send_statistics_request(priv, 0);
5010 mutex_unlock(&priv->mutex);
5012 if (rc) {
5013 len = sprintf(buf,
5014 "Error sending statistics request: 0x%08X\n", rc);
5015 return len;
5018 while (size && (PAGE_SIZE - len)) {
5019 hex_dump_to_buffer(data + ofs, size, 16, 1, buf + len,
5020 PAGE_SIZE - len, 1);
5021 len = strlen(buf);
5022 if (PAGE_SIZE - len)
5023 buf[len++] = '\n';
5025 ofs += 16;
5026 size -= min(size, 16U);
5029 return len;
5032 static DEVICE_ATTR(statistics, S_IRUGO, show_statistics, NULL);
5034 static ssize_t show_status(struct device *d,
5035 struct device_attribute *attr, char *buf)
5037 struct iwl_priv *priv = (struct iwl_priv *)d->driver_data;
5038 if (!iwl_is_alive(priv))
5039 return -EAGAIN;
5040 return sprintf(buf, "0x%08x\n", (int)priv->status);
5043 static DEVICE_ATTR(status, S_IRUGO, show_status, NULL);
5045 /*****************************************************************************
5047 * driver setup and teardown
5049 *****************************************************************************/
5051 static void iwl_setup_deferred_work(struct iwl_priv *priv)
5053 priv->workqueue = create_workqueue(DRV_NAME);
5055 init_waitqueue_head(&priv->wait_command_queue);
5057 INIT_WORK(&priv->up, iwl4965_bg_up);
5058 INIT_WORK(&priv->restart, iwl4965_bg_restart);
5059 INIT_WORK(&priv->rx_replenish, iwl4965_bg_rx_replenish);
5060 INIT_WORK(&priv->scan_completed, iwl4965_bg_scan_completed);
5061 INIT_WORK(&priv->request_scan, iwl4965_bg_request_scan);
5062 INIT_WORK(&priv->abort_scan, iwl4965_bg_abort_scan);
5063 INIT_WORK(&priv->rf_kill, iwl4965_bg_rf_kill);
5064 INIT_WORK(&priv->beacon_update, iwl4965_bg_beacon_update);
5065 INIT_WORK(&priv->set_monitor, iwl4965_bg_set_monitor);
5066 INIT_WORK(&priv->run_time_calib_work, iwl_bg_run_time_calib_work);
5067 INIT_DELAYED_WORK(&priv->post_associate, iwl4965_bg_post_associate);
5068 INIT_DELAYED_WORK(&priv->init_alive_start, iwl_bg_init_alive_start);
5069 INIT_DELAYED_WORK(&priv->alive_start, iwl_bg_alive_start);
5070 INIT_DELAYED_WORK(&priv->scan_check, iwl4965_bg_scan_check);
5072 if (priv->cfg->ops->lib->setup_deferred_work)
5073 priv->cfg->ops->lib->setup_deferred_work(priv);
5075 init_timer(&priv->statistics_periodic);
5076 priv->statistics_periodic.data = (unsigned long)priv;
5077 priv->statistics_periodic.function = iwl4965_bg_statistics_periodic;
5079 tasklet_init(&priv->irq_tasklet, (void (*)(unsigned long))
5080 iwl4965_irq_tasklet, (unsigned long)priv);
5083 static void iwl_cancel_deferred_work(struct iwl_priv *priv)
5085 if (priv->cfg->ops->lib->cancel_deferred_work)
5086 priv->cfg->ops->lib->cancel_deferred_work(priv);
5088 cancel_delayed_work_sync(&priv->init_alive_start);
5089 cancel_delayed_work(&priv->scan_check);
5090 cancel_delayed_work(&priv->alive_start);
5091 cancel_delayed_work(&priv->post_associate);
5092 cancel_work_sync(&priv->beacon_update);
5093 del_timer_sync(&priv->statistics_periodic);
5096 static struct attribute *iwl4965_sysfs_entries[] = {
5097 &dev_attr_channels.attr,
5098 &dev_attr_flags.attr,
5099 &dev_attr_filter_flags.attr,
5100 #ifdef CONFIG_IWL4965_SPECTRUM_MEASUREMENT
5101 &dev_attr_measurement.attr,
5102 #endif
5103 &dev_attr_power_level.attr,
5104 &dev_attr_retry_rate.attr,
5105 &dev_attr_rs_window.attr,
5106 &dev_attr_statistics.attr,
5107 &dev_attr_status.attr,
5108 &dev_attr_temperature.attr,
5109 &dev_attr_tx_power.attr,
5110 #ifdef CONFIG_IWLWIFI_DEBUG
5111 &dev_attr_debug_level.attr,
5112 #endif
5113 &dev_attr_version.attr,
5115 NULL
5118 static struct attribute_group iwl4965_attribute_group = {
5119 .name = NULL, /* put in device directory */
5120 .attrs = iwl4965_sysfs_entries,
5123 static struct ieee80211_ops iwl4965_hw_ops = {
5124 .tx = iwl4965_mac_tx,
5125 .start = iwl4965_mac_start,
5126 .stop = iwl4965_mac_stop,
5127 .add_interface = iwl4965_mac_add_interface,
5128 .remove_interface = iwl4965_mac_remove_interface,
5129 .config = iwl4965_mac_config,
5130 .config_interface = iwl4965_mac_config_interface,
5131 .configure_filter = iwl4965_configure_filter,
5132 .set_key = iwl4965_mac_set_key,
5133 .update_tkip_key = iwl4965_mac_update_tkip_key,
5134 .get_stats = iwl4965_mac_get_stats,
5135 .get_tx_stats = iwl4965_mac_get_tx_stats,
5136 .conf_tx = iwl4965_mac_conf_tx,
5137 .get_tsf = iwl4965_mac_get_tsf,
5138 .reset_tsf = iwl4965_mac_reset_tsf,
5139 .beacon_update = iwl4965_mac_beacon_update,
5140 .bss_info_changed = iwl4965_bss_info_changed,
5141 .ampdu_action = iwl4965_mac_ampdu_action,
5142 .hw_scan = iwl4965_mac_hw_scan
5145 static int iwl4965_pci_probe(struct pci_dev *pdev, const struct pci_device_id *ent)
5147 int err = 0;
5148 struct iwl_priv *priv;
5149 struct ieee80211_hw *hw;
5150 struct iwl_cfg *cfg = (struct iwl_cfg *)(ent->driver_data);
5151 unsigned long flags;
5152 DECLARE_MAC_BUF(mac);
5154 /************************
5155 * 1. Allocating HW data
5156 ************************/
5158 /* Disabling hardware scan means that mac80211 will perform scans
5159 * "the hard way", rather than using device's scan. */
5160 if (cfg->mod_params->disable_hw_scan) {
5161 if (cfg->mod_params->debug & IWL_DL_INFO)
5162 dev_printk(KERN_DEBUG, &(pdev->dev),
5163 "Disabling hw_scan\n");
5164 iwl4965_hw_ops.hw_scan = NULL;
5167 hw = iwl_alloc_all(cfg, &iwl4965_hw_ops);
5168 if (!hw) {
5169 err = -ENOMEM;
5170 goto out;
5172 priv = hw->priv;
5173 /* At this point both hw and priv are allocated. */
5175 SET_IEEE80211_DEV(hw, &pdev->dev);
5177 IWL_DEBUG_INFO("*** LOAD DRIVER ***\n");
5178 priv->cfg = cfg;
5179 priv->pci_dev = pdev;
5181 #ifdef CONFIG_IWLWIFI_DEBUG
5182 priv->debug_level = priv->cfg->mod_params->debug;
5183 atomic_set(&priv->restrict_refcnt, 0);
5184 #endif
5186 /**************************
5187 * 2. Initializing PCI bus
5188 **************************/
5189 if (pci_enable_device(pdev)) {
5190 err = -ENODEV;
5191 goto out_ieee80211_free_hw;
5194 pci_set_master(pdev);
5196 err = pci_set_dma_mask(pdev, DMA_64BIT_MASK);
5197 if (!err)
5198 err = pci_set_consistent_dma_mask(pdev, DMA_64BIT_MASK);
5199 if (err) {
5200 err = pci_set_dma_mask(pdev, DMA_32BIT_MASK);
5201 if (!err)
5202 err = pci_set_consistent_dma_mask(pdev, DMA_32BIT_MASK);
5203 /* both attempts failed: */
5204 if (err) {
5205 printk(KERN_WARNING "%s: No suitable DMA available.\n",
5206 DRV_NAME);
5207 goto out_pci_disable_device;
5211 err = pci_request_regions(pdev, DRV_NAME);
5212 if (err)
5213 goto out_pci_disable_device;
5215 pci_set_drvdata(pdev, priv);
5217 /* We disable the RETRY_TIMEOUT register (0x41) to keep
5218 * PCI Tx retries from interfering with C3 CPU state */
5219 pci_write_config_byte(pdev, 0x41, 0x00);
5221 /***********************
5222 * 3. Read REV register
5223 ***********************/
5224 priv->hw_base = pci_iomap(pdev, 0, 0);
5225 if (!priv->hw_base) {
5226 err = -ENODEV;
5227 goto out_pci_release_regions;
5230 IWL_DEBUG_INFO("pci_resource_len = 0x%08llx\n",
5231 (unsigned long long) pci_resource_len(pdev, 0));
5232 IWL_DEBUG_INFO("pci_resource_base = %p\n", priv->hw_base);
5234 iwl_hw_detect(priv);
5235 printk(KERN_INFO DRV_NAME
5236 ": Detected Intel Wireless WiFi Link %s REV=0x%X\n",
5237 priv->cfg->name, priv->hw_rev);
5239 /* amp init */
5240 err = priv->cfg->ops->lib->apm_ops.init(priv);
5241 if (err < 0) {
5242 IWL_DEBUG_INFO("Failed to init APMG\n");
5243 goto out_iounmap;
5245 /*****************
5246 * 4. Read EEPROM
5247 *****************/
5248 /* Read the EEPROM */
5249 err = iwl_eeprom_init(priv);
5250 if (err) {
5251 IWL_ERROR("Unable to init EEPROM\n");
5252 goto out_iounmap;
5254 err = iwl_eeprom_check_version(priv);
5255 if (err)
5256 goto out_iounmap;
5258 /* extract MAC Address */
5259 iwl_eeprom_get_mac(priv, priv->mac_addr);
5260 IWL_DEBUG_INFO("MAC address: %s\n", print_mac(mac, priv->mac_addr));
5261 SET_IEEE80211_PERM_ADDR(priv->hw, priv->mac_addr);
5263 /************************
5264 * 5. Setup HW constants
5265 ************************/
5266 /* Device-specific setup */
5267 if (priv->cfg->ops->lib->set_hw_params(priv)) {
5268 IWL_ERROR("failed to set hw parameters\n");
5269 goto out_free_eeprom;
5272 /*******************
5273 * 6. Setup priv
5274 *******************/
5276 err = iwl_init_drv(priv);
5277 if (err)
5278 goto out_free_eeprom;
5279 /* At this point both hw and priv are initialized. */
5281 /**********************************
5282 * 7. Initialize module parameters
5283 **********************************/
5285 /* Disable radio (SW RF KILL) via parameter when loading driver */
5286 if (priv->cfg->mod_params->disable) {
5287 set_bit(STATUS_RF_KILL_SW, &priv->status);
5288 IWL_DEBUG_INFO("Radio disabled.\n");
5291 /********************
5292 * 8. Setup services
5293 ********************/
5294 spin_lock_irqsave(&priv->lock, flags);
5295 iwl4965_disable_interrupts(priv);
5296 spin_unlock_irqrestore(&priv->lock, flags);
5298 err = sysfs_create_group(&pdev->dev.kobj, &iwl4965_attribute_group);
5299 if (err) {
5300 IWL_ERROR("failed to create sysfs device attributes\n");
5301 goto out_uninit_drv;
5305 iwl_setup_deferred_work(priv);
5306 iwl4965_setup_rx_handlers(priv);
5308 /********************
5309 * 9. Conclude
5310 ********************/
5311 pci_save_state(pdev);
5312 pci_disable_device(pdev);
5314 /**********************************
5315 * 10. Setup and register mac80211
5316 **********************************/
5318 err = iwl_setup_mac(priv);
5319 if (err)
5320 goto out_remove_sysfs;
5322 err = iwl_dbgfs_register(priv, DRV_NAME);
5323 if (err)
5324 IWL_ERROR("failed to create debugfs files\n");
5326 /* notify iwlcore to init */
5327 iwlcore_low_level_notify(priv, IWLCORE_INIT_EVT);
5328 return 0;
5330 out_remove_sysfs:
5331 sysfs_remove_group(&pdev->dev.kobj, &iwl4965_attribute_group);
5332 out_uninit_drv:
5333 iwl_uninit_drv(priv);
5334 out_free_eeprom:
5335 iwl_eeprom_free(priv);
5336 out_iounmap:
5337 pci_iounmap(pdev, priv->hw_base);
5338 out_pci_release_regions:
5339 pci_release_regions(pdev);
5340 pci_set_drvdata(pdev, NULL);
5341 out_pci_disable_device:
5342 pci_disable_device(pdev);
5343 out_ieee80211_free_hw:
5344 ieee80211_free_hw(priv->hw);
5345 out:
5346 return err;
5349 static void __devexit iwl4965_pci_remove(struct pci_dev *pdev)
5351 struct iwl_priv *priv = pci_get_drvdata(pdev);
5352 struct list_head *p, *q;
5353 int i;
5354 unsigned long flags;
5356 if (!priv)
5357 return;
5359 IWL_DEBUG_INFO("*** UNLOAD DRIVER ***\n");
5361 iwl_dbgfs_unregister(priv);
5362 sysfs_remove_group(&pdev->dev.kobj, &iwl4965_attribute_group);
5364 if (priv->mac80211_registered) {
5365 ieee80211_unregister_hw(priv->hw);
5366 priv->mac80211_registered = 0;
5369 set_bit(STATUS_EXIT_PENDING, &priv->status);
5371 iwl4965_down(priv);
5373 /* make sure we flush any pending irq or
5374 * tasklet for the driver
5376 spin_lock_irqsave(&priv->lock, flags);
5377 iwl4965_disable_interrupts(priv);
5378 spin_unlock_irqrestore(&priv->lock, flags);
5380 iwl_synchronize_irq(priv);
5382 /* Free MAC hash list for ADHOC */
5383 for (i = 0; i < IWL_IBSS_MAC_HASH_SIZE; i++) {
5384 list_for_each_safe(p, q, &priv->ibss_mac_hash[i]) {
5385 list_del(p);
5386 kfree(list_entry(p, struct iwl4965_ibss_seq, list));
5390 iwlcore_low_level_notify(priv, IWLCORE_REMOVE_EVT);
5392 iwl4965_dealloc_ucode_pci(priv);
5394 if (priv->rxq.bd)
5395 iwl_rx_queue_free(priv, &priv->rxq);
5396 iwl_hw_txq_ctx_free(priv);
5398 iwlcore_clear_stations_table(priv);
5399 iwl_eeprom_free(priv);
5402 /*netif_stop_queue(dev); */
5403 flush_workqueue(priv->workqueue);
5405 /* ieee80211_unregister_hw calls iwl4965_mac_stop, which flushes
5406 * priv->workqueue... so we can't take down the workqueue
5407 * until now... */
5408 destroy_workqueue(priv->workqueue);
5409 priv->workqueue = NULL;
5411 pci_iounmap(pdev, priv->hw_base);
5412 pci_release_regions(pdev);
5413 pci_disable_device(pdev);
5414 pci_set_drvdata(pdev, NULL);
5416 iwl_uninit_drv(priv);
5418 if (priv->ibss_beacon)
5419 dev_kfree_skb(priv->ibss_beacon);
5421 ieee80211_free_hw(priv->hw);
5424 #ifdef CONFIG_PM
5426 static int iwl4965_pci_suspend(struct pci_dev *pdev, pm_message_t state)
5428 struct iwl_priv *priv = pci_get_drvdata(pdev);
5430 if (priv->is_open) {
5431 set_bit(STATUS_IN_SUSPEND, &priv->status);
5432 iwl4965_mac_stop(priv->hw);
5433 priv->is_open = 1;
5436 pci_set_power_state(pdev, PCI_D3hot);
5438 return 0;
5441 static int iwl4965_pci_resume(struct pci_dev *pdev)
5443 struct iwl_priv *priv = pci_get_drvdata(pdev);
5445 pci_set_power_state(pdev, PCI_D0);
5447 if (priv->is_open)
5448 iwl4965_mac_start(priv->hw);
5450 clear_bit(STATUS_IN_SUSPEND, &priv->status);
5451 return 0;
5454 #endif /* CONFIG_PM */
5456 /*****************************************************************************
5458 * driver and module entry point
5460 *****************************************************************************/
5462 /* Hardware specific file defines the PCI IDs table for that hardware module */
5463 static struct pci_device_id iwl_hw_card_ids[] = {
5464 {IWL_PCI_DEVICE(0x4229, PCI_ANY_ID, iwl4965_agn_cfg)},
5465 {IWL_PCI_DEVICE(0x4230, PCI_ANY_ID, iwl4965_agn_cfg)},
5466 #ifdef CONFIG_IWL5000
5467 {IWL_PCI_DEVICE(0x4235, PCI_ANY_ID, iwl5300_agn_cfg)},
5468 {IWL_PCI_DEVICE(0x4232, PCI_ANY_ID, iwl5100_agn_cfg)},
5469 {IWL_PCI_DEVICE(0x423A, PCI_ANY_ID, iwl5350_agn_cfg)},
5470 #endif /* CONFIG_IWL5000 */
5473 MODULE_DEVICE_TABLE(pci, iwl_hw_card_ids);
5475 static struct pci_driver iwl_driver = {
5476 .name = DRV_NAME,
5477 .id_table = iwl_hw_card_ids,
5478 .probe = iwl4965_pci_probe,
5479 .remove = __devexit_p(iwl4965_pci_remove),
5480 #ifdef CONFIG_PM
5481 .suspend = iwl4965_pci_suspend,
5482 .resume = iwl4965_pci_resume,
5483 #endif
5486 static int __init iwl4965_init(void)
5489 int ret;
5490 printk(KERN_INFO DRV_NAME ": " DRV_DESCRIPTION ", " DRV_VERSION "\n");
5491 printk(KERN_INFO DRV_NAME ": " DRV_COPYRIGHT "\n");
5493 ret = iwl4965_rate_control_register();
5494 if (ret) {
5495 IWL_ERROR("Unable to register rate control algorithm: %d\n", ret);
5496 return ret;
5499 ret = pci_register_driver(&iwl_driver);
5500 if (ret) {
5501 IWL_ERROR("Unable to initialize PCI module\n");
5502 goto error_register;
5505 return ret;
5507 error_register:
5508 iwl4965_rate_control_unregister();
5509 return ret;
5512 static void __exit iwl4965_exit(void)
5514 pci_unregister_driver(&iwl_driver);
5515 iwl4965_rate_control_unregister();
5518 module_exit(iwl4965_exit);
5519 module_init(iwl4965_init);