drivers/net/wireless/libertas/cmdresp.c

   1 /**
   2   * This file contains the handling of command
   3   * responses as well as events generated by firmware.
   4   */
   5 #include <linux/slab.h>
   6 #include <linux/delay.h>
   7 #include <linux/sched.h>
   8 #include <asm/unaligned.h>
   9 #include <net/cfg80211.h>
  10
  11 #include "cfg.h"
  12 #include "cmd.h"
  13
  14 /**
  15  *  @brief This function handles disconnect event. it
  16  *  reports disconnect to upper layer, clean tx/rx packets,
  17  *  reset link state etc.
  18  *
  19  *  @param priv    A pointer to struct lbs_private structure
  20  *  @return        n/a
  21  */
  22 void lbs_mac_event_disconnected(struct lbs_private *priv)
  23 {
  24         if (priv->connect_status != LBS_CONNECTED)
  25                 return;
  26
  27         lbs_deb_enter(LBS_DEB_ASSOC);
  28
  29         /*
  30          * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
  31          * It causes problem in the Supplicant
  32          */
  33         msleep_interruptible(1000);
  34
  35         if (priv->wdev->iftype == NL80211_IFTYPE_STATION)
  36                 lbs_send_disconnect_notification(priv);
  37
  38         /* report disconnect to upper layer */
  39         netif_stop_queue(priv->dev);
  40         netif_carrier_off(priv->dev);
  41
  42         /* Free Tx and Rx packets */
  43         kfree_skb(priv->currenttxskb);
  44         priv->currenttxskb = NULL;
  45         priv->tx_pending_len = 0;
  46
  47         priv->connect_status = LBS_DISCONNECTED;
  48
  49         if (priv->psstate != PS_STATE_FULL_POWER) {
  50                 /* make firmware to exit PS mode */
  51                 lbs_deb_cmd("disconnected, so exit PS mode\n");
  52                 lbs_ps_wakeup(priv, 0);
  53         }
  54         lbs_deb_leave(LBS_DEB_ASSOC);
  55 }
  56
  57 static int lbs_ret_reg_access(struct lbs_private *priv,
  58                                u16 type, struct cmd_ds_command *resp)
  59 {
  60         int ret = 0;
  61
  62         lbs_deb_enter(LBS_DEB_CMD);
  63
  64         switch (type) {
  65         case CMD_RET(CMD_MAC_REG_ACCESS):
  66                 {
  67                         struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
  68
  69                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
  70                         priv->offsetvalue.value = le32_to_cpu(reg->value);
  71                         break;
  72                 }
  73
  74         case CMD_RET(CMD_BBP_REG_ACCESS):
  75                 {
  76                         struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
  77
  78                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
  79                         priv->offsetvalue.value = reg->value;
  80                         break;
  81                 }
  82
  83         case CMD_RET(CMD_RF_REG_ACCESS):
  84                 {
  85                         struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
  86
  87                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
  88                         priv->offsetvalue.value = reg->value;
  89                         break;
  90                 }
  91
  92         default:
  93                 ret = -1;
  94         }
  95
  96         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
  97         return ret;
  98 }
  99
 100 /**
 101  *  @brief This function parses countryinfo from AP and download country info to FW
 102  *  @param priv    pointer to struct lbs_private
 103  *  @param resp    pointer to command response buffer
 104  *  @return        0; -1
 105  */
 106 static int lbs_ret_802_11d_domain_info(struct cmd_ds_command *resp)
 107 {
 108         struct cmd_ds_802_11d_domain_info *domaininfo =
 109                         &resp->params.domaininforesp;
 110         struct mrvl_ie_domain_param_set *domain = &domaininfo->domain;
 111         u16 action = le16_to_cpu(domaininfo->action);
 112         s16 ret = 0;
 113         u8 nr_triplet = 0;
 114
 115         lbs_deb_enter(LBS_DEB_11D);
 116
 117         lbs_deb_hex(LBS_DEB_11D, "domain info resp", (u8 *) resp,
 118                         (int)le16_to_cpu(resp->size));
 119
 120         nr_triplet = (le16_to_cpu(domain->header.len) - COUNTRY_CODE_LEN) /
 121                 sizeof(struct ieee80211_country_ie_triplet);
 122
 123         lbs_deb_11d("domain info resp: nr_triplet %d\n", nr_triplet);
 124
 125         if (nr_triplet > MRVDRV_MAX_TRIPLET_802_11D) {
 126                 lbs_deb_11d("invalid number of triplets returned!!\n");
 127                 return -1;
 128         }
 129
 130         switch (action) {
 131         case CMD_ACT_SET:       /*Proc set action */
 132                 break;
 133
 134         case CMD_ACT_GET:
 135                 break;
 136         default:
 137                 lbs_deb_11d("invalid action:%d\n", domaininfo->action);
 138                 ret = -1;
 139                 break;
 140         }
 141
 142         lbs_deb_leave_args(LBS_DEB_11D, "ret %d", ret);
 143         return ret;
 144 }
 145
 146 static inline int handle_cmd_response(struct lbs_private *priv,
 147                                       struct cmd_header *cmd_response)
 148 {
 149         struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
 150         int ret = 0;
 151         unsigned long flags;
 152         uint16_t respcmd = le16_to_cpu(resp->command);
 153
 154         lbs_deb_enter(LBS_DEB_HOST);
 155
 156         switch (respcmd) {
 157         case CMD_RET(CMD_MAC_REG_ACCESS):
 158         case CMD_RET(CMD_BBP_REG_ACCESS):
 159         case CMD_RET(CMD_RF_REG_ACCESS):
 160                 ret = lbs_ret_reg_access(priv, respcmd, resp);
 161                 break;
 162
 163         case CMD_RET(CMD_802_11_SET_AFC):
 164         case CMD_RET(CMD_802_11_GET_AFC):
 165                 spin_lock_irqsave(&priv->driver_lock, flags);
 166                 memmove((void *)priv->cur_cmd->callback_arg, &resp->params.afc,
 167                         sizeof(struct cmd_ds_802_11_afc));
 168                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 169
 170                 break;
 171
 172         case CMD_RET(CMD_802_11_BEACON_STOP):
 173                 break;
 174
 175         case CMD_RET(CMD_802_11D_DOMAIN_INFO):
 176                 ret = lbs_ret_802_11d_domain_info(resp);
 177                 break;
 178
 179         case CMD_RET(CMD_802_11_TPC_CFG):
 180                 spin_lock_irqsave(&priv->driver_lock, flags);
 181                 memmove((void *)priv->cur_cmd->callback_arg, &resp->params.tpccfg,
 182                         sizeof(struct cmd_ds_802_11_tpc_cfg));
 183                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 184                 break;
 185
 186         case CMD_RET(CMD_BT_ACCESS):
 187                 spin_lock_irqsave(&priv->driver_lock, flags);
 188                 if (priv->cur_cmd->callback_arg)
 189                         memcpy((void *)priv->cur_cmd->callback_arg,
 190                                &resp->params.bt.addr1, 2 * ETH_ALEN);
 191                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 192                 break;
 193         case CMD_RET(CMD_FWT_ACCESS):
 194                 spin_lock_irqsave(&priv->driver_lock, flags);
 195                 if (priv->cur_cmd->callback_arg)
 196                         memcpy((void *)priv->cur_cmd->callback_arg, &resp->params.fwt,
 197                                sizeof(resp->params.fwt));
 198                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 199                 break;
 200         case CMD_RET(CMD_802_11_BEACON_CTRL):
 201                 ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
 202                 break;
 203
 204         default:
 205                 lbs_pr_err("CMD_RESP: unknown cmd response 0x%04x\n",
 206                            le16_to_cpu(resp->command));
 207                 break;
 208         }
 209         lbs_deb_leave(LBS_DEB_HOST);
 210         return ret;
 211 }
 212
 213 int lbs_process_command_response(struct lbs_private *priv, u8 *data, u32 len)
 214 {
 215         uint16_t respcmd, curcmd;
 216         struct cmd_header *resp;
 217         int ret = 0;
 218         unsigned long flags;
 219         uint16_t result;
 220
 221         lbs_deb_enter(LBS_DEB_HOST);
 222
 223         mutex_lock(&priv->lock);
 224         spin_lock_irqsave(&priv->driver_lock, flags);
 225
 226         if (!priv->cur_cmd) {
 227                 lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
 228                 ret = -1;
 229                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 230                 goto done;
 231         }
 232
 233         resp = (void *)data;
 234         curcmd = le16_to_cpu(priv->cur_cmd->cmdbuf->command);
 235         respcmd = le16_to_cpu(resp->command);
 236         result = le16_to_cpu(resp->result);
 237
 238         lbs_deb_cmd("CMD_RESP: response 0x%04x, seq %d, size %d\n",
 239                      respcmd, le16_to_cpu(resp->seqnum), len);
 240         lbs_deb_hex(LBS_DEB_CMD, "CMD_RESP", (void *) resp, len);
 241
 242         if (resp->seqnum != priv->cur_cmd->cmdbuf->seqnum) {
 243                 lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
 244                             le16_to_cpu(resp->seqnum), le16_to_cpu(priv->cur_cmd->cmdbuf->seqnum));
 245                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 246                 ret = -1;
 247                 goto done;
 248         }
 249         if (respcmd != CMD_RET(curcmd) &&
 250             respcmd != CMD_RET_802_11_ASSOCIATE && curcmd != CMD_802_11_ASSOCIATE) {
 251                 lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd, curcmd);
 252                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 253                 ret = -1;
 254                 goto done;
 255         }
 256
 257         if (resp->result == cpu_to_le16(0x0004)) {
 258                 /* 0x0004 means -EAGAIN. Drop the response, let it time out
 259                    and be resubmitted */
 260                 lbs_pr_info("Firmware returns DEFER to command %x. Will let it time out...\n",
 261                             le16_to_cpu(resp->command));
 262                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 263                 ret = -1;
 264                 goto done;
 265         }
 266
 267         /* Now we got response from FW, cancel the command timer */
 268         del_timer(&priv->command_timer);
 269         priv->cmd_timed_out = 0;
 270
 271         /* Store the response code to cur_cmd_retcode. */
 272         priv->cur_cmd_retcode = result;
 273
 274         if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
 275                 struct cmd_ds_802_11_ps_mode *psmode = (void *) &resp[1];
 276                 u16 action = le16_to_cpu(psmode->action);
 277
 278                 lbs_deb_host(
 279                        "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
 280                        result, action);
 281
 282                 if (result) {
 283                         lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
 284                                     result);
 285                         /*
 286                          * We should not re-try enter-ps command in
 287                          * ad-hoc mode. It takes place in
 288                          * lbs_execute_next_command().
 289                          */
 290                         if (priv->wdev->iftype == NL80211_IFTYPE_MONITOR &&
 291                             action == CMD_SUBCMD_ENTER_PS)
 292                                 priv->psmode = LBS802_11POWERMODECAM;
 293                 } else if (action == CMD_SUBCMD_ENTER_PS) {
 294                         priv->needtowakeup = 0;
 295                         priv->psstate = PS_STATE_AWAKE;
 296
 297                         lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
 298                         if (priv->connect_status != LBS_CONNECTED) {
 299                                 /*
 300                                  * When Deauth Event received before Enter_PS command
 301                                  * response, We need to wake up the firmware.
 302                                  */
 303                                 lbs_deb_host(
 304                                        "disconnected, invoking lbs_ps_wakeup\n");
 305
 306                                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 307                                 mutex_unlock(&priv->lock);
 308                                 lbs_ps_wakeup(priv, 0);
 309                                 mutex_lock(&priv->lock);
 310                                 spin_lock_irqsave(&priv->driver_lock, flags);
 311                         }
 312                 } else if (action == CMD_SUBCMD_EXIT_PS) {
 313                         priv->needtowakeup = 0;
 314                         priv->psstate = PS_STATE_FULL_POWER;
 315                         lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
 316                 } else {
 317                         lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
 318                 }
 319
 320                 lbs_complete_command(priv, priv->cur_cmd, result);
 321                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 322
 323                 ret = 0;
 324                 goto done;
 325         }
 326
 327         /* If the command is not successful, cleanup and return failure */
 328         if ((result != 0 || !(respcmd & 0x8000))) {
 329                 lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
 330                        result, respcmd);
 331                 /*
 332                  * Handling errors here
 333                  */
 334                 switch (respcmd) {
 335                 case CMD_RET(CMD_GET_HW_SPEC):
 336                 case CMD_RET(CMD_802_11_RESET):
 337                         lbs_deb_host("CMD_RESP: reset failed\n");
 338                         break;
 339
 340                 }
 341                 lbs_complete_command(priv, priv->cur_cmd, result);
 342                 spin_unlock_irqrestore(&priv->driver_lock, flags);
 343
 344                 ret = -1;
 345                 goto done;
 346         }
 347
 348         spin_unlock_irqrestore(&priv->driver_lock, flags);
 349
 350         if (priv->cur_cmd && priv->cur_cmd->callback) {
 351                 ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
 352                                 resp);
 353         } else
 354                 ret = handle_cmd_response(priv, resp);
 355
 356         spin_lock_irqsave(&priv->driver_lock, flags);
 357
 358         if (priv->cur_cmd) {
 359                 /* Clean up and Put current command back to cmdfreeq */
 360                 lbs_complete_command(priv, priv->cur_cmd, result);
 361         }
 362         spin_unlock_irqrestore(&priv->driver_lock, flags);
 363
 364 done:
 365         mutex_unlock(&priv->lock);
 366         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
 367         return ret;
 368 }
 369
 370 int lbs_process_event(struct lbs_private *priv, u32 event)
 371 {
 372         int ret = 0;
 373         struct cmd_header cmd;
 374
 375         lbs_deb_enter(LBS_DEB_CMD);
 376
 377         switch (event) {
 378         case MACREG_INT_CODE_LINK_SENSED:
 379                 lbs_deb_cmd("EVENT: link sensed\n");
 380                 break;
 381
 382         case MACREG_INT_CODE_DEAUTHENTICATED:
 383                 lbs_deb_cmd("EVENT: deauthenticated\n");
 384                 lbs_mac_event_disconnected(priv);
 385                 break;
 386
 387         case MACREG_INT_CODE_DISASSOCIATED:
 388                 lbs_deb_cmd("EVENT: disassociated\n");
 389                 lbs_mac_event_disconnected(priv);
 390                 break;
 391
 392         case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
 393                 lbs_deb_cmd("EVENT: link lost\n");
 394                 lbs_mac_event_disconnected(priv);
 395                 break;
 396
 397         case MACREG_INT_CODE_PS_SLEEP:
 398                 lbs_deb_cmd("EVENT: ps sleep\n");
 399
 400                 /* handle unexpected PS SLEEP event */
 401                 if (priv->psstate == PS_STATE_FULL_POWER) {
 402                         lbs_deb_cmd(
 403                                "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
 404                         break;
 405                 }
 406                 priv->psstate = PS_STATE_PRE_SLEEP;
 407
 408                 lbs_ps_confirm_sleep(priv);
 409
 410                 break;
 411
 412         case MACREG_INT_CODE_HOST_AWAKE:
 413                 lbs_deb_cmd("EVENT: host awake\n");
 414                 if (priv->reset_deep_sleep_wakeup)
 415                         priv->reset_deep_sleep_wakeup(priv);
 416                 priv->is_deep_sleep = 0;
 417                 lbs_cmd_async(priv, CMD_802_11_WAKEUP_CONFIRM, &cmd,
 418                                 sizeof(cmd));
 419                 priv->is_host_sleep_activated = 0;
 420                 wake_up_interruptible(&priv->host_sleep_q);
 421                 break;
 422
 423         case MACREG_INT_CODE_DEEP_SLEEP_AWAKE:
 424                 if (priv->reset_deep_sleep_wakeup)
 425                         priv->reset_deep_sleep_wakeup(priv);
 426                 lbs_deb_cmd("EVENT: ds awake\n");
 427                 priv->is_deep_sleep = 0;
 428                 priv->wakeup_dev_required = 0;
 429                 wake_up_interruptible(&priv->ds_awake_q);
 430                 break;
 431
 432         case MACREG_INT_CODE_PS_AWAKE:
 433                 lbs_deb_cmd("EVENT: ps awake\n");
 434                 /* handle unexpected PS AWAKE event */
 435                 if (priv->psstate == PS_STATE_FULL_POWER) {
 436                         lbs_deb_cmd(
 437                                "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
 438                         break;
 439                 }
 440
 441                 priv->psstate = PS_STATE_AWAKE;
 442
 443                 if (priv->needtowakeup) {
 444                         /*
 445                          * wait for the command processing to finish
 446                          * before resuming sending
 447                          * priv->needtowakeup will be set to FALSE
 448                          * in lbs_ps_wakeup()
 449                          */
 450                         lbs_deb_cmd("waking up ...\n");
 451                         lbs_ps_wakeup(priv, 0);
 452                 }
 453                 break;
 454
 455         case MACREG_INT_CODE_MIC_ERR_UNICAST:
 456                 lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
 457                 lbs_send_mic_failureevent(priv, event);
 458                 break;
 459
 460         case MACREG_INT_CODE_MIC_ERR_MULTICAST:
 461                 lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
 462                 lbs_send_mic_failureevent(priv, event);
 463                 break;
 464
 465         case MACREG_INT_CODE_MIB_CHANGED:
 466                 lbs_deb_cmd("EVENT: MIB CHANGED\n");
 467                 break;
 468         case MACREG_INT_CODE_INIT_DONE:
 469                 lbs_deb_cmd("EVENT: INIT DONE\n");
 470                 break;
 471         case MACREG_INT_CODE_ADHOC_BCN_LOST:
 472                 lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
 473                 break;
 474         case MACREG_INT_CODE_RSSI_LOW:
 475                 lbs_pr_alert("EVENT: rssi low\n");
 476                 break;
 477         case MACREG_INT_CODE_SNR_LOW:
 478                 lbs_pr_alert("EVENT: snr low\n");
 479                 break;
 480         case MACREG_INT_CODE_MAX_FAIL:
 481                 lbs_pr_alert("EVENT: max fail\n");
 482                 break;
 483         case MACREG_INT_CODE_RSSI_HIGH:
 484                 lbs_pr_alert("EVENT: rssi high\n");
 485                 break;
 486         case MACREG_INT_CODE_SNR_HIGH:
 487                 lbs_pr_alert("EVENT: snr high\n");
 488                 break;
 489
 490         case MACREG_INT_CODE_MESH_AUTO_STARTED:
 491                 /* Ignore spurious autostart events */
 492                 lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
 493                 break;
 494
 495         default:
 496                 lbs_pr_alert("EVENT: unknown event id %d\n", event);
 497                 break;
 498         }
 499
 500         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
 501         return ret;
 502 }