2 * This file contains the handling of command
3 * responses as well as events generated by firmware.
5 #include <linux/delay.h>
6 #include <linux/if_arp.h>
7 #include <linux/netdevice.h>
9 #include <net/iw_handler.h>
19 * @brief This function handles disconnect event. it
20 * reports disconnect to upper layer, clean tx/rx packets,
21 * reset link state etc.
23 * @param priv A pointer to struct lbs_private structure
26 void lbs_mac_event_disconnected(struct lbs_private
*priv
)
28 union iwreq_data wrqu
;
30 if (priv
->connect_status
!= LBS_CONNECTED
)
33 lbs_deb_enter(LBS_DEB_ASSOC
);
35 memset(wrqu
.ap_addr
.sa_data
, 0x00, ETH_ALEN
);
36 wrqu
.ap_addr
.sa_family
= ARPHRD_ETHER
;
39 * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
40 * It causes problem in the Supplicant
43 msleep_interruptible(1000);
44 wireless_send_event(priv
->dev
, SIOCGIWAP
, &wrqu
, NULL
);
46 /* report disconnect to upper layer */
47 netif_stop_queue(priv
->dev
);
48 netif_carrier_off(priv
->dev
);
50 /* Free Tx and Rx packets */
51 kfree_skb(priv
->currenttxskb
);
52 priv
->currenttxskb
= NULL
;
53 priv
->tx_pending_len
= 0;
55 /* reset SNR/NF/RSSI values */
56 memset(priv
->SNR
, 0x00, sizeof(priv
->SNR
));
57 memset(priv
->NF
, 0x00, sizeof(priv
->NF
));
58 memset(priv
->RSSI
, 0x00, sizeof(priv
->RSSI
));
59 memset(priv
->rawSNR
, 0x00, sizeof(priv
->rawSNR
));
60 memset(priv
->rawNF
, 0x00, sizeof(priv
->rawNF
));
63 priv
->connect_status
= LBS_DISCONNECTED
;
65 /* Clear out associated SSID and BSSID since connection is
68 memset(&priv
->curbssparams
.bssid
, 0, ETH_ALEN
);
69 memset(&priv
->curbssparams
.ssid
, 0, IW_ESSID_MAX_SIZE
);
70 priv
->curbssparams
.ssid_len
= 0;
72 if (priv
->psstate
!= PS_STATE_FULL_POWER
) {
73 /* make firmware to exit PS mode */
74 lbs_deb_cmd("disconnected, so exit PS mode\n");
75 lbs_ps_wakeup(priv
, 0);
77 lbs_deb_leave(LBS_DEB_ASSOC
);
81 * @brief This function handles MIC failure event.
83 * @param priv A pointer to struct lbs_private structure
84 * @para event the event id
87 static void handle_mic_failureevent(struct lbs_private
*priv
, u32 event
)
91 lbs_deb_enter(LBS_DEB_CMD
);
92 memset(buf
, 0, sizeof(buf
));
94 sprintf(buf
, "%s", "MLME-MICHAELMICFAILURE.indication ");
96 if (event
== MACREG_INT_CODE_MIC_ERR_UNICAST
) {
97 strcat(buf
, "unicast ");
99 strcat(buf
, "multicast ");
102 lbs_send_iwevcustom_event(priv
, buf
);
103 lbs_deb_leave(LBS_DEB_CMD
);
106 static int lbs_ret_reg_access(struct lbs_private
*priv
,
107 u16 type
, struct cmd_ds_command
*resp
)
111 lbs_deb_enter(LBS_DEB_CMD
);
114 case CMD_RET(CMD_MAC_REG_ACCESS
):
116 struct cmd_ds_mac_reg_access
*reg
= &resp
->params
.macreg
;
118 priv
->offsetvalue
.offset
= (u32
)le16_to_cpu(reg
->offset
);
119 priv
->offsetvalue
.value
= le32_to_cpu(reg
->value
);
123 case CMD_RET(CMD_BBP_REG_ACCESS
):
125 struct cmd_ds_bbp_reg_access
*reg
= &resp
->params
.bbpreg
;
127 priv
->offsetvalue
.offset
= (u32
)le16_to_cpu(reg
->offset
);
128 priv
->offsetvalue
.value
= reg
->value
;
132 case CMD_RET(CMD_RF_REG_ACCESS
):
134 struct cmd_ds_rf_reg_access
*reg
= &resp
->params
.rfreg
;
136 priv
->offsetvalue
.offset
= (u32
)le16_to_cpu(reg
->offset
);
137 priv
->offsetvalue
.value
= reg
->value
;
145 lbs_deb_leave_args(LBS_DEB_CMD
, "ret %d", ret
);
149 static int lbs_ret_802_11_snmp_mib(struct lbs_private
*priv
,
150 struct cmd_ds_command
*resp
)
152 struct cmd_ds_802_11_snmp_mib
*smib
= &resp
->params
.smib
;
153 u16 oid
= le16_to_cpu(smib
->oid
);
154 u16 querytype
= le16_to_cpu(smib
->querytype
);
156 lbs_deb_enter(LBS_DEB_CMD
);
158 lbs_deb_cmd("SNMP_RESP: oid 0x%x, querytype 0x%x\n", oid
,
160 lbs_deb_cmd("SNMP_RESP: Buf size %d\n", le16_to_cpu(smib
->bufsize
));
162 if (querytype
== CMD_ACT_GET
) {
166 le16_to_cpu(*((__le16
*)(smib
->value
)));
167 lbs_deb_cmd("SNMP_RESP: frag threshold %u\n",
172 le16_to_cpu(*((__le16
*)(smib
->value
)));
173 lbs_deb_cmd("SNMP_RESP: rts threshold %u\n",
176 case SHORT_RETRYLIM_I
:
178 le16_to_cpu(*((__le16
*)(smib
->value
)));
179 lbs_deb_cmd("SNMP_RESP: tx retry count %u\n",
187 lbs_deb_enter(LBS_DEB_CMD
);
191 static int lbs_ret_802_11_rssi(struct lbs_private
*priv
,
192 struct cmd_ds_command
*resp
)
194 struct cmd_ds_802_11_rssi_rsp
*rssirsp
= &resp
->params
.rssirsp
;
196 lbs_deb_enter(LBS_DEB_CMD
);
198 /* store the non average value */
199 priv
->SNR
[TYPE_BEACON
][TYPE_NOAVG
] = le16_to_cpu(rssirsp
->SNR
);
200 priv
->NF
[TYPE_BEACON
][TYPE_NOAVG
] = le16_to_cpu(rssirsp
->noisefloor
);
202 priv
->SNR
[TYPE_BEACON
][TYPE_AVG
] = le16_to_cpu(rssirsp
->avgSNR
);
203 priv
->NF
[TYPE_BEACON
][TYPE_AVG
] = le16_to_cpu(rssirsp
->avgnoisefloor
);
205 priv
->RSSI
[TYPE_BEACON
][TYPE_NOAVG
] =
206 CAL_RSSI(priv
->SNR
[TYPE_BEACON
][TYPE_NOAVG
],
207 priv
->NF
[TYPE_BEACON
][TYPE_NOAVG
]);
209 priv
->RSSI
[TYPE_BEACON
][TYPE_AVG
] =
210 CAL_RSSI(priv
->SNR
[TYPE_BEACON
][TYPE_AVG
] / AVG_SCALE
,
211 priv
->NF
[TYPE_BEACON
][TYPE_AVG
] / AVG_SCALE
);
213 lbs_deb_cmd("RSSI: beacon %d, avg %d\n",
214 priv
->RSSI
[TYPE_BEACON
][TYPE_NOAVG
],
215 priv
->RSSI
[TYPE_BEACON
][TYPE_AVG
]);
217 lbs_deb_leave(LBS_DEB_CMD
);
221 static int lbs_ret_802_11_bcn_ctrl(struct lbs_private
* priv
,
222 struct cmd_ds_command
*resp
)
224 struct cmd_ds_802_11_beacon_control
*bcn_ctrl
=
225 &resp
->params
.bcn_ctrl
;
227 lbs_deb_enter(LBS_DEB_CMD
);
229 if (bcn_ctrl
->action
== CMD_ACT_GET
) {
230 priv
->beacon_enable
= (u8
) le16_to_cpu(bcn_ctrl
->beacon_enable
);
231 priv
->beacon_period
= le16_to_cpu(bcn_ctrl
->beacon_period
);
234 lbs_deb_enter(LBS_DEB_CMD
);
238 static inline int handle_cmd_response(struct lbs_private
*priv
,
239 struct cmd_header
*cmd_response
)
241 struct cmd_ds_command
*resp
= (struct cmd_ds_command
*) cmd_response
;
244 uint16_t respcmd
= le16_to_cpu(resp
->command
);
246 lbs_deb_enter(LBS_DEB_HOST
);
249 case CMD_RET(CMD_MAC_REG_ACCESS
):
250 case CMD_RET(CMD_BBP_REG_ACCESS
):
251 case CMD_RET(CMD_RF_REG_ACCESS
):
252 ret
= lbs_ret_reg_access(priv
, respcmd
, resp
);
255 case CMD_RET_802_11_ASSOCIATE
:
256 case CMD_RET(CMD_802_11_ASSOCIATE
):
257 case CMD_RET(CMD_802_11_REASSOCIATE
):
258 ret
= lbs_ret_80211_associate(priv
, resp
);
261 case CMD_RET(CMD_802_11_SNMP_MIB
):
262 ret
= lbs_ret_802_11_snmp_mib(priv
, resp
);
265 case CMD_RET(CMD_802_11_SET_AFC
):
266 case CMD_RET(CMD_802_11_GET_AFC
):
267 spin_lock_irqsave(&priv
->driver_lock
, flags
);
268 memmove((void *)priv
->cur_cmd
->callback_arg
, &resp
->params
.afc
,
269 sizeof(struct cmd_ds_802_11_afc
));
270 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
274 case CMD_RET(CMD_802_11_AUTHENTICATE
):
275 case CMD_RET(CMD_802_11_BEACON_STOP
):
278 case CMD_RET(CMD_802_11_RSSI
):
279 ret
= lbs_ret_802_11_rssi(priv
, resp
);
282 case CMD_RET(CMD_802_11D_DOMAIN_INFO
):
283 ret
= lbs_ret_802_11d_domain_info(resp
);
286 case CMD_RET(CMD_802_11_TPC_CFG
):
287 spin_lock_irqsave(&priv
->driver_lock
, flags
);
288 memmove((void *)priv
->cur_cmd
->callback_arg
, &resp
->params
.tpccfg
,
289 sizeof(struct cmd_ds_802_11_tpc_cfg
));
290 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
292 case CMD_RET(CMD_802_11_LED_GPIO_CTRL
):
293 spin_lock_irqsave(&priv
->driver_lock
, flags
);
294 memmove((void *)priv
->cur_cmd
->callback_arg
, &resp
->params
.ledgpio
,
295 sizeof(struct cmd_ds_802_11_led_ctrl
));
296 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
299 case CMD_RET(CMD_GET_TSF
):
300 spin_lock_irqsave(&priv
->driver_lock
, flags
);
301 memcpy((void *)priv
->cur_cmd
->callback_arg
,
302 &resp
->params
.gettsf
.tsfvalue
, sizeof(u64
));
303 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
305 case CMD_RET(CMD_BT_ACCESS
):
306 spin_lock_irqsave(&priv
->driver_lock
, flags
);
307 if (priv
->cur_cmd
->callback_arg
)
308 memcpy((void *)priv
->cur_cmd
->callback_arg
,
309 &resp
->params
.bt
.addr1
, 2 * ETH_ALEN
);
310 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
312 case CMD_RET(CMD_FWT_ACCESS
):
313 spin_lock_irqsave(&priv
->driver_lock
, flags
);
314 if (priv
->cur_cmd
->callback_arg
)
315 memcpy((void *)priv
->cur_cmd
->callback_arg
, &resp
->params
.fwt
,
316 sizeof(resp
->params
.fwt
));
317 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
319 case CMD_RET(CMD_802_11_BEACON_CTRL
):
320 ret
= lbs_ret_802_11_bcn_ctrl(priv
, resp
);
324 lbs_pr_err("CMD_RESP: unknown cmd response 0x%04x\n",
325 le16_to_cpu(resp
->command
));
328 lbs_deb_leave(LBS_DEB_HOST
);
332 int lbs_process_command_response(struct lbs_private
*priv
, u8
*data
, u32 len
)
334 uint16_t respcmd
, curcmd
;
335 struct cmd_header
*resp
;
340 lbs_deb_enter(LBS_DEB_HOST
);
342 mutex_lock(&priv
->lock
);
343 spin_lock_irqsave(&priv
->driver_lock
, flags
);
345 if (!priv
->cur_cmd
) {
346 lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
348 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
353 curcmd
= le16_to_cpu(priv
->cur_cmd
->cmdbuf
->command
);
354 respcmd
= le16_to_cpu(resp
->command
);
355 result
= le16_to_cpu(resp
->result
);
357 lbs_deb_cmd("CMD_RESP: response 0x%04x, seq %d, size %d\n",
358 respcmd
, le16_to_cpu(resp
->seqnum
), len
);
359 lbs_deb_hex(LBS_DEB_CMD
, "CMD_RESP", (void *) resp
, len
);
361 if (resp
->seqnum
!= priv
->cur_cmd
->cmdbuf
->seqnum
) {
362 lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
363 le16_to_cpu(resp
->seqnum
), le16_to_cpu(priv
->cur_cmd
->cmdbuf
->seqnum
));
364 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
368 if (respcmd
!= CMD_RET(curcmd
) &&
369 respcmd
!= CMD_RET_802_11_ASSOCIATE
&& curcmd
!= CMD_802_11_ASSOCIATE
) {
370 lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd
, curcmd
);
371 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
376 if (resp
->result
== cpu_to_le16(0x0004)) {
377 /* 0x0004 means -EAGAIN. Drop the response, let it time out
378 and be resubmitted */
379 lbs_pr_info("Firmware returns DEFER to command %x. Will let it time out...\n",
380 le16_to_cpu(resp
->command
));
381 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
386 /* Now we got response from FW, cancel the command timer */
387 del_timer(&priv
->command_timer
);
388 priv
->cmd_timed_out
= 0;
389 if (priv
->nr_retries
) {
390 lbs_pr_info("Received result %x to command %x after %d retries\n",
391 result
, curcmd
, priv
->nr_retries
);
392 priv
->nr_retries
= 0;
395 /* Store the response code to cur_cmd_retcode. */
396 priv
->cur_cmd_retcode
= result
;
398 if (respcmd
== CMD_RET(CMD_802_11_PS_MODE
)) {
399 struct cmd_ds_802_11_ps_mode
*psmode
= (void *) &resp
[1];
400 u16 action
= le16_to_cpu(psmode
->action
);
403 "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
407 lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
410 * We should not re-try enter-ps command in
411 * ad-hoc mode. It takes place in
412 * lbs_execute_next_command().
414 if (priv
->mode
== IW_MODE_ADHOC
&&
415 action
== CMD_SUBCMD_ENTER_PS
)
416 priv
->psmode
= LBS802_11POWERMODECAM
;
417 } else if (action
== CMD_SUBCMD_ENTER_PS
) {
418 priv
->needtowakeup
= 0;
419 priv
->psstate
= PS_STATE_AWAKE
;
421 lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
422 if (priv
->connect_status
!= LBS_CONNECTED
) {
424 * When Deauth Event received before Enter_PS command
425 * response, We need to wake up the firmware.
428 "disconnected, invoking lbs_ps_wakeup\n");
430 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
431 mutex_unlock(&priv
->lock
);
432 lbs_ps_wakeup(priv
, 0);
433 mutex_lock(&priv
->lock
);
434 spin_lock_irqsave(&priv
->driver_lock
, flags
);
436 } else if (action
== CMD_SUBCMD_EXIT_PS
) {
437 priv
->needtowakeup
= 0;
438 priv
->psstate
= PS_STATE_FULL_POWER
;
439 lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
441 lbs_deb_host("CMD_RESP: PS action 0x%X\n", action
);
444 lbs_complete_command(priv
, priv
->cur_cmd
, result
);
445 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
451 /* If the command is not successful, cleanup and return failure */
452 if ((result
!= 0 || !(respcmd
& 0x8000))) {
453 lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
456 * Handling errors here
459 case CMD_RET(CMD_GET_HW_SPEC
):
460 case CMD_RET(CMD_802_11_RESET
):
461 lbs_deb_host("CMD_RESP: reset failed\n");
465 lbs_complete_command(priv
, priv
->cur_cmd
, result
);
466 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
472 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
474 if (priv
->cur_cmd
&& priv
->cur_cmd
->callback
) {
475 ret
= priv
->cur_cmd
->callback(priv
, priv
->cur_cmd
->callback_arg
,
478 ret
= handle_cmd_response(priv
, resp
);
480 spin_lock_irqsave(&priv
->driver_lock
, flags
);
483 /* Clean up and Put current command back to cmdfreeq */
484 lbs_complete_command(priv
, priv
->cur_cmd
, result
);
486 spin_unlock_irqrestore(&priv
->driver_lock
, flags
);
489 mutex_unlock(&priv
->lock
);
490 lbs_deb_leave_args(LBS_DEB_HOST
, "ret %d", ret
);
494 static int lbs_send_confirmwake(struct lbs_private
*priv
)
496 struct cmd_header cmd
;
499 lbs_deb_enter(LBS_DEB_HOST
);
501 cmd
.command
= cpu_to_le16(CMD_802_11_WAKEUP_CONFIRM
);
502 cmd
.size
= cpu_to_le16(sizeof(cmd
));
503 cmd
.seqnum
= cpu_to_le16(++priv
->seqnum
);
506 lbs_deb_hex(LBS_DEB_HOST
, "wake confirm", (u8
*) &cmd
,
509 ret
= priv
->hw_host_to_card(priv
, MVMS_CMD
, (u8
*) &cmd
, sizeof(cmd
));
511 lbs_pr_alert("SEND_WAKEC_CMD: Host to Card failed for Confirm Wake\n");
513 lbs_deb_leave_args(LBS_DEB_HOST
, "ret %d", ret
);
517 int lbs_process_event(struct lbs_private
*priv
, u32 event
)
521 lbs_deb_enter(LBS_DEB_CMD
);
524 case MACREG_INT_CODE_LINK_SENSED
:
525 lbs_deb_cmd("EVENT: link sensed\n");
528 case MACREG_INT_CODE_DEAUTHENTICATED
:
529 lbs_deb_cmd("EVENT: deauthenticated\n");
530 lbs_mac_event_disconnected(priv
);
533 case MACREG_INT_CODE_DISASSOCIATED
:
534 lbs_deb_cmd("EVENT: disassociated\n");
535 lbs_mac_event_disconnected(priv
);
538 case MACREG_INT_CODE_LINK_LOST_NO_SCAN
:
539 lbs_deb_cmd("EVENT: link lost\n");
540 lbs_mac_event_disconnected(priv
);
543 case MACREG_INT_CODE_PS_SLEEP
:
544 lbs_deb_cmd("EVENT: ps sleep\n");
546 /* handle unexpected PS SLEEP event */
547 if (priv
->psstate
== PS_STATE_FULL_POWER
) {
549 "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
552 priv
->psstate
= PS_STATE_PRE_SLEEP
;
554 lbs_ps_confirm_sleep(priv
);
558 case MACREG_INT_CODE_HOST_AWAKE
:
559 lbs_deb_cmd("EVENT: host awake\n");
560 lbs_send_confirmwake(priv
);
563 case MACREG_INT_CODE_PS_AWAKE
:
564 lbs_deb_cmd("EVENT: ps awake\n");
565 /* handle unexpected PS AWAKE event */
566 if (priv
->psstate
== PS_STATE_FULL_POWER
) {
568 "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
572 priv
->psstate
= PS_STATE_AWAKE
;
574 if (priv
->needtowakeup
) {
576 * wait for the command processing to finish
577 * before resuming sending
578 * priv->needtowakeup will be set to FALSE
581 lbs_deb_cmd("waking up ...\n");
582 lbs_ps_wakeup(priv
, 0);
586 case MACREG_INT_CODE_MIC_ERR_UNICAST
:
587 lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
588 handle_mic_failureevent(priv
, MACREG_INT_CODE_MIC_ERR_UNICAST
);
591 case MACREG_INT_CODE_MIC_ERR_MULTICAST
:
592 lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
593 handle_mic_failureevent(priv
, MACREG_INT_CODE_MIC_ERR_MULTICAST
);
596 case MACREG_INT_CODE_MIB_CHANGED
:
597 lbs_deb_cmd("EVENT: MIB CHANGED\n");
599 case MACREG_INT_CODE_INIT_DONE
:
600 lbs_deb_cmd("EVENT: INIT DONE\n");
602 case MACREG_INT_CODE_ADHOC_BCN_LOST
:
603 lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
605 case MACREG_INT_CODE_RSSI_LOW
:
606 lbs_pr_alert("EVENT: rssi low\n");
608 case MACREG_INT_CODE_SNR_LOW
:
609 lbs_pr_alert("EVENT: snr low\n");
611 case MACREG_INT_CODE_MAX_FAIL
:
612 lbs_pr_alert("EVENT: max fail\n");
614 case MACREG_INT_CODE_RSSI_HIGH
:
615 lbs_pr_alert("EVENT: rssi high\n");
617 case MACREG_INT_CODE_SNR_HIGH
:
618 lbs_pr_alert("EVENT: snr high\n");
621 case MACREG_INT_CODE_MESH_AUTO_STARTED
:
622 /* Ignore spurious autostart events if autostart is disabled */
623 if (!priv
->mesh_autostart_enabled
) {
624 lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
627 lbs_pr_info("EVENT: MESH_AUTO_STARTED\n");
628 priv
->mesh_connect_status
= LBS_CONNECTED
;
629 if (priv
->mesh_open
) {
630 netif_carrier_on(priv
->mesh_dev
);
631 if (!priv
->tx_pending_len
)
632 netif_wake_queue(priv
->mesh_dev
);
634 priv
->mode
= IW_MODE_ADHOC
;
635 schedule_work(&priv
->sync_channel
);
639 lbs_pr_alert("EVENT: unknown event id %d\n", event
);
643 lbs_deb_leave_args(LBS_DEB_CMD
, "ret %d", ret
);