2 * Atheros AR9170 driver
4 * mac80211 interaction code
6 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
7 * Copyright 2009, Christian Lamparter <chunkeey@web.de>
9 * This program is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU General Public License as published by
11 * the Free Software Foundation; either version 2 of the License, or
12 * (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; see the file COPYING. If not, see
21 * http://www.gnu.org/licenses/.
23 * This file incorporates work covered by the following copyright and
25 * Copyright (c) 2007-2008 Atheros Communications, Inc.
27 * Permission to use, copy, modify, and/or distribute this software for any
28 * purpose with or without fee is hereby granted, provided that the above
29 * copyright notice and this permission notice appear in all copies.
31 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
32 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
33 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
34 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
35 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
36 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
37 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
40 #include <linux/init.h>
41 #include <linux/slab.h>
42 #include <linux/module.h>
43 #include <linux/etherdevice.h>
44 #include <net/mac80211.h>
49 static int modparam_nohwcrypt
;
50 module_param_named(nohwcrypt
, modparam_nohwcrypt
, bool, S_IRUGO
);
51 MODULE_PARM_DESC(nohwcrypt
, "Disable hardware encryption.");
53 #define RATE(_bitrate, _hw_rate, _txpidx, _flags) { \
54 .bitrate = (_bitrate), \
56 .hw_value = (_hw_rate) | (_txpidx) << 4, \
59 static struct ieee80211_rate __ar9170_ratetable
[] = {
61 RATE(20, 1, 1, IEEE80211_RATE_SHORT_PREAMBLE
),
62 RATE(55, 2, 2, IEEE80211_RATE_SHORT_PREAMBLE
),
63 RATE(110, 3, 3, IEEE80211_RATE_SHORT_PREAMBLE
),
75 #define ar9170_g_ratetable (__ar9170_ratetable + 0)
76 #define ar9170_g_ratetable_size 12
77 #define ar9170_a_ratetable (__ar9170_ratetable + 4)
78 #define ar9170_a_ratetable_size 8
81 * NB: The hw_value is used as an index into the ar9170_phy_freq_params
82 * array in phy.c so that we don't have to do frequency lookups!
84 #define CHAN(_freq, _idx) { \
85 .center_freq = (_freq), \
87 .max_power = 18, /* XXX */ \
90 static struct ieee80211_channel ar9170_2ghz_chantable
[] = {
107 static struct ieee80211_channel ar9170_5ghz_chantable
[] = {
146 #define AR9170_HT_CAP \
148 .ht_supported = true, \
149 .cap = IEEE80211_HT_CAP_MAX_AMSDU | \
150 IEEE80211_HT_CAP_SUP_WIDTH_20_40 | \
151 IEEE80211_HT_CAP_SGI_40 | \
152 IEEE80211_HT_CAP_GRN_FLD | \
153 IEEE80211_HT_CAP_DSSSCCK40 | \
154 IEEE80211_HT_CAP_SM_PS, \
156 .ampdu_density = 6, \
158 .rx_mask = { 0xff, 0xff, 0, 0, 0x1, 0, 0, 0, 0, 0, }, \
159 .rx_highest = cpu_to_le16(300), \
160 .tx_params = IEEE80211_HT_MCS_TX_DEFINED, \
164 static struct ieee80211_supported_band ar9170_band_2GHz
= {
165 .channels
= ar9170_2ghz_chantable
,
166 .n_channels
= ARRAY_SIZE(ar9170_2ghz_chantable
),
167 .bitrates
= ar9170_g_ratetable
,
168 .n_bitrates
= ar9170_g_ratetable_size
,
169 .ht_cap
= AR9170_HT_CAP
,
172 static struct ieee80211_supported_band ar9170_band_5GHz
= {
173 .channels
= ar9170_5ghz_chantable
,
174 .n_channels
= ARRAY_SIZE(ar9170_5ghz_chantable
),
175 .bitrates
= ar9170_a_ratetable
,
176 .n_bitrates
= ar9170_a_ratetable_size
,
177 .ht_cap
= AR9170_HT_CAP
,
180 static void ar9170_tx(struct ar9170
*ar
);
182 static inline u16
ar9170_get_seq_h(struct ieee80211_hdr
*hdr
)
184 return le16_to_cpu(hdr
->seq_ctrl
) >> 4;
187 static inline u16
ar9170_get_seq(struct sk_buff
*skb
)
189 struct ar9170_tx_control
*txc
= (void *) skb
->data
;
190 return ar9170_get_seq_h((void *) txc
->frame_data
);
193 #ifdef AR9170_QUEUE_DEBUG
194 static void ar9170_print_txheader(struct ar9170
*ar
, struct sk_buff
*skb
)
196 struct ar9170_tx_control
*txc
= (void *) skb
->data
;
197 struct ieee80211_tx_info
*txinfo
= IEEE80211_SKB_CB(skb
);
198 struct ar9170_tx_info
*arinfo
= (void *) txinfo
->rate_driver_data
;
199 struct ieee80211_hdr
*hdr
= (void *) txc
->frame_data
;
201 wiphy_debug(ar
->hw
->wiphy
,
202 "=> FRAME [skb:%p, q:%d, DA:[%pM] s:%d "
203 "mac_ctrl:%04x, phy_ctrl:%08x, timeout:[%d ms]]\n",
204 skb
, skb_get_queue_mapping(skb
),
205 ieee80211_get_DA(hdr
), ar9170_get_seq_h(hdr
),
206 le16_to_cpu(txc
->mac_control
), le32_to_cpu(txc
->phy_control
),
207 jiffies_to_msecs(arinfo
->timeout
- jiffies
));
210 static void __ar9170_dump_txqueue(struct ar9170
*ar
,
211 struct sk_buff_head
*queue
)
216 printk(KERN_DEBUG
"---[ cut here ]---\n");
217 wiphy_debug(ar
->hw
->wiphy
, "%d entries in queue.\n",
218 skb_queue_len(queue
));
220 skb_queue_walk(queue
, skb
) {
221 printk(KERN_DEBUG
"index:%d =>\n", i
++);
222 ar9170_print_txheader(ar
, skb
);
224 if (i
!= skb_queue_len(queue
))
225 printk(KERN_DEBUG
"WARNING: queue frame counter "
226 "mismatch %d != %d\n", skb_queue_len(queue
), i
);
227 printk(KERN_DEBUG
"---[ end ]---\n");
229 #endif /* AR9170_QUEUE_DEBUG */
231 #ifdef AR9170_QUEUE_DEBUG
232 static void ar9170_dump_txqueue(struct ar9170
*ar
,
233 struct sk_buff_head
*queue
)
237 spin_lock_irqsave(&queue
->lock
, flags
);
238 __ar9170_dump_txqueue(ar
, queue
);
239 spin_unlock_irqrestore(&queue
->lock
, flags
);
241 #endif /* AR9170_QUEUE_DEBUG */
243 #ifdef AR9170_QUEUE_STOP_DEBUG
244 static void __ar9170_dump_txstats(struct ar9170
*ar
)
248 wiphy_debug(ar
->hw
->wiphy
, "QoS queue stats\n");
250 for (i
= 0; i
< __AR9170_NUM_TXQ
; i
++)
251 wiphy_debug(ar
->hw
->wiphy
,
252 "queue:%d limit:%d len:%d waitack:%d stopped:%d\n",
253 i
, ar
->tx_stats
[i
].limit
, ar
->tx_stats
[i
].len
,
254 skb_queue_len(&ar
->tx_status
[i
]),
255 ieee80211_queue_stopped(ar
->hw
, i
));
257 #endif /* AR9170_QUEUE_STOP_DEBUG */
259 /* caller must guarantee exclusive access for _bin_ queue. */
260 static void ar9170_recycle_expired(struct ar9170
*ar
,
261 struct sk_buff_head
*queue
,
262 struct sk_buff_head
*bin
)
264 struct sk_buff
*skb
, *old
= NULL
;
267 spin_lock_irqsave(&queue
->lock
, flags
);
268 while ((skb
= skb_peek(queue
))) {
269 struct ieee80211_tx_info
*txinfo
;
270 struct ar9170_tx_info
*arinfo
;
272 txinfo
= IEEE80211_SKB_CB(skb
);
273 arinfo
= (void *) txinfo
->rate_driver_data
;
275 if (time_is_before_jiffies(arinfo
->timeout
)) {
276 #ifdef AR9170_QUEUE_DEBUG
277 wiphy_debug(ar
->hw
->wiphy
,
278 "[%ld > %ld] frame expired => recycle\n",
279 jiffies
, arinfo
->timeout
);
280 ar9170_print_txheader(ar
, skb
);
281 #endif /* AR9170_QUEUE_DEBUG */
282 __skb_unlink(skb
, queue
);
283 __skb_queue_tail(bin
, skb
);
288 if (unlikely(old
== skb
)) {
289 /* bail out - queue is shot. */
296 spin_unlock_irqrestore(&queue
->lock
, flags
);
299 static void ar9170_tx_status(struct ar9170
*ar
, struct sk_buff
*skb
,
302 struct ieee80211_tx_info
*txinfo
;
303 unsigned int retries
= 0;
305 txinfo
= IEEE80211_SKB_CB(skb
);
306 ieee80211_tx_info_clear_status(txinfo
);
309 case AR9170_TX_STATUS_RETRY
:
311 case AR9170_TX_STATUS_COMPLETE
:
312 txinfo
->flags
|= IEEE80211_TX_STAT_ACK
;
315 case AR9170_TX_STATUS_FAILED
:
316 retries
= ar
->hw
->conf
.long_frame_max_tx_count
;
320 wiphy_err(ar
->hw
->wiphy
,
321 "invalid tx_status response (%x)\n", tx_status
);
325 txinfo
->status
.rates
[0].count
= retries
+ 1;
326 skb_pull(skb
, sizeof(struct ar9170_tx_control
));
327 ieee80211_tx_status_irqsafe(ar
->hw
, skb
);
330 void ar9170_tx_callback(struct ar9170
*ar
, struct sk_buff
*skb
)
332 struct ieee80211_tx_info
*info
= IEEE80211_SKB_CB(skb
);
333 struct ar9170_tx_info
*arinfo
= (void *) info
->rate_driver_data
;
334 unsigned int queue
= skb_get_queue_mapping(skb
);
337 spin_lock_irqsave(&ar
->tx_stats_lock
, flags
);
338 ar
->tx_stats
[queue
].len
--;
340 if (ar
->tx_stats
[queue
].len
< AR9170_NUM_TX_LIMIT_SOFT
) {
341 #ifdef AR9170_QUEUE_STOP_DEBUG
342 wiphy_debug(ar
->hw
->wiphy
, "wake queue %d\n", queue
);
343 __ar9170_dump_txstats(ar
);
344 #endif /* AR9170_QUEUE_STOP_DEBUG */
345 ieee80211_wake_queue(ar
->hw
, queue
);
347 spin_unlock_irqrestore(&ar
->tx_stats_lock
, flags
);
349 if (info
->flags
& IEEE80211_TX_CTL_NO_ACK
) {
350 ar9170_tx_status(ar
, skb
, AR9170_TX_STATUS_FAILED
);
352 arinfo
->timeout
= jiffies
+
353 msecs_to_jiffies(AR9170_TX_TIMEOUT
);
355 skb_queue_tail(&ar
->tx_status
[queue
], skb
);
358 if (!ar
->tx_stats
[queue
].len
&&
359 !skb_queue_empty(&ar
->tx_pending
[queue
])) {
364 static struct sk_buff
*ar9170_get_queued_skb(struct ar9170
*ar
,
366 struct sk_buff_head
*queue
,
373 * Unfortunately, the firmware does not tell to which (queued) frame
374 * this transmission status report belongs to.
376 * So we have to make risky guesses - with the scarce information
377 * the firmware provided (-> destination MAC, and phy_control) -
378 * and hope that we picked the right one...
381 spin_lock_irqsave(&queue
->lock
, flags
);
382 skb_queue_walk(queue
, skb
) {
383 struct ar9170_tx_control
*txc
= (void *) skb
->data
;
384 struct ieee80211_hdr
*hdr
= (void *) txc
->frame_data
;
387 if (mac
&& compare_ether_addr(ieee80211_get_DA(hdr
), mac
)) {
388 #ifdef AR9170_QUEUE_DEBUG
389 wiphy_debug(ar
->hw
->wiphy
,
390 "skip frame => DA %pM != %pM\n",
391 mac
, ieee80211_get_DA(hdr
));
392 ar9170_print_txheader(ar
, skb
);
393 #endif /* AR9170_QUEUE_DEBUG */
397 r
= (le32_to_cpu(txc
->phy_control
) & AR9170_TX_PHY_MCS_MASK
) >>
398 AR9170_TX_PHY_MCS_SHIFT
;
400 if ((rate
!= AR9170_TX_INVALID_RATE
) && (r
!= rate
)) {
401 #ifdef AR9170_QUEUE_DEBUG
402 wiphy_debug(ar
->hw
->wiphy
,
403 "skip frame => rate %d != %d\n", rate
, r
);
404 ar9170_print_txheader(ar
, skb
);
405 #endif /* AR9170_QUEUE_DEBUG */
409 __skb_unlink(skb
, queue
);
410 spin_unlock_irqrestore(&queue
->lock
, flags
);
414 #ifdef AR9170_QUEUE_DEBUG
415 wiphy_err(ar
->hw
->wiphy
,
416 "ESS:[%pM] does not have any outstanding frames in queue.\n",
418 __ar9170_dump_txqueue(ar
, queue
);
419 #endif /* AR9170_QUEUE_DEBUG */
420 spin_unlock_irqrestore(&queue
->lock
, flags
);
426 * This worker tries to keeps an maintain tx_status queues.
427 * So we can guarantee that incoming tx_status reports are
428 * actually for a pending frame.
431 static void ar9170_tx_janitor(struct work_struct
*work
)
433 struct ar9170
*ar
= container_of(work
, struct ar9170
,
435 struct sk_buff_head waste
;
437 bool resched
= false;
439 if (unlikely(!IS_STARTED(ar
)))
442 skb_queue_head_init(&waste
);
444 for (i
= 0; i
< __AR9170_NUM_TXQ
; i
++) {
445 #ifdef AR9170_QUEUE_DEBUG
446 wiphy_debug(ar
->hw
->wiphy
, "garbage collector scans queue:%d\n",
448 ar9170_dump_txqueue(ar
, &ar
->tx_pending
[i
]);
449 ar9170_dump_txqueue(ar
, &ar
->tx_status
[i
]);
450 #endif /* AR9170_QUEUE_DEBUG */
452 ar9170_recycle_expired(ar
, &ar
->tx_status
[i
], &waste
);
453 ar9170_recycle_expired(ar
, &ar
->tx_pending
[i
], &waste
);
454 skb_queue_purge(&waste
);
456 if (!skb_queue_empty(&ar
->tx_status
[i
]) ||
457 !skb_queue_empty(&ar
->tx_pending
[i
]))
464 ieee80211_queue_delayed_work(ar
->hw
,
466 msecs_to_jiffies(AR9170_JANITOR_DELAY
));
469 void ar9170_handle_command_response(struct ar9170
*ar
, void *buf
, u32 len
)
471 struct ar9170_cmd_response
*cmd
= (void *) buf
;
473 if ((cmd
->type
& 0xc0) != 0xc0) {
474 ar
->callback_cmd(ar
, len
, buf
);
478 /* hardware event handlers */
482 * TX status notification:
483 * bytes: 0c c1 XX YY M1 M2 M3 M4 M5 M6 R4 R3 R2 R1 S2 S1
487 * M1-M6 is the MAC address
488 * R1-R4 is the transmit rate
489 * S1-S2 is the transmit status
493 u32 phy
= le32_to_cpu(cmd
->tx_status
.rate
);
494 u32 q
= (phy
& AR9170_TX_PHY_QOS_MASK
) >>
495 AR9170_TX_PHY_QOS_SHIFT
;
496 #ifdef AR9170_QUEUE_DEBUG
497 wiphy_debug(ar
->hw
->wiphy
,
498 "recv tx_status for %pm, p:%08x, q:%d\n",
499 cmd
->tx_status
.dst
, phy
, q
);
500 #endif /* AR9170_QUEUE_DEBUG */
502 skb
= ar9170_get_queued_skb(ar
, cmd
->tx_status
.dst
,
504 AR9170_TX_INVALID_RATE
);
508 ar9170_tx_status(ar
, skb
, le16_to_cpu(cmd
->tx_status
.status
));
516 if (ar
->vif
&& ar
->vif
->type
== NL80211_IFTYPE_AP
)
517 ieee80211_queue_work(ar
->hw
, &ar
->beacon_work
);
522 * (IBSS) beacon send notification
523 * bytes: 04 c2 XX YY B4 B3 B2 B1
527 * B1-B4 "should" be the number of send out beacons.
532 /* End of Atim Window */
536 /* BlockACK bitmap */
540 /* BlockACK events */
544 /* Watchdog Interrupt */
548 /* retransmission issue / SIFS/EIFS collision ?! */
553 printk(KERN_DEBUG
"ar9170 FW: %.*s\n", len
- 4,
561 printk(KERN_DEBUG
"ar9170 FW: u8: %#.2x\n",
565 printk(KERN_DEBUG
"ar9170 FW: u8: %#.4x\n",
566 le16_to_cpup((__le16
*)((char *)buf
+ 4)));
569 printk(KERN_DEBUG
"ar9170 FW: u8: %#.8x\n",
570 le32_to_cpup((__le32
*)((char *)buf
+ 4)));
573 printk(KERN_DEBUG
"ar9170 FW: u8: %#.16lx\n",
574 (unsigned long)le64_to_cpup(
575 (__le64
*)((char *)buf
+ 4)));
580 print_hex_dump_bytes("ar9170 FW:", DUMP_PREFIX_NONE
,
581 (char *)buf
+ 4, len
- 4);
585 pr_info("received unhandled event %x\n", cmd
->type
);
586 print_hex_dump_bytes("dump:", DUMP_PREFIX_NONE
, buf
, len
);
591 static void ar9170_rx_reset_rx_mpdu(struct ar9170
*ar
)
593 memset(&ar
->rx_mpdu
.plcp
, 0, sizeof(struct ar9170_rx_head
));
594 ar
->rx_mpdu
.has_plcp
= false;
597 int ar9170_nag_limiter(struct ar9170
*ar
)
602 * we expect all sorts of errors in promiscuous mode.
603 * don't bother with it, it's OK!
605 if (ar
->sniffer_enabled
)
609 * only go for frequent errors! The hardware tends to
610 * do some stupid thing once in a while under load, in
611 * noisy environments or just for fun!
613 if (time_before(jiffies
, ar
->bad_hw_nagger
) && net_ratelimit())
614 print_message
= true;
616 print_message
= false;
618 /* reset threshold for "once in a while" */
619 ar
->bad_hw_nagger
= jiffies
+ HZ
/ 4;
620 return print_message
;
623 static int ar9170_rx_mac_status(struct ar9170
*ar
,
624 struct ar9170_rx_head
*head
,
625 struct ar9170_rx_macstatus
*mac
,
626 struct ieee80211_rx_status
*status
)
630 BUILD_BUG_ON(sizeof(struct ar9170_rx_head
) != 12);
631 BUILD_BUG_ON(sizeof(struct ar9170_rx_macstatus
) != 4);
634 if (error
& AR9170_RX_ERROR_MMIC
) {
635 status
->flag
|= RX_FLAG_MMIC_ERROR
;
636 error
&= ~AR9170_RX_ERROR_MMIC
;
639 if (error
& AR9170_RX_ERROR_PLCP
) {
640 status
->flag
|= RX_FLAG_FAILED_PLCP_CRC
;
641 error
&= ~AR9170_RX_ERROR_PLCP
;
643 if (!(ar
->filter_state
& FIF_PLCPFAIL
))
647 if (error
& AR9170_RX_ERROR_FCS
) {
648 status
->flag
|= RX_FLAG_FAILED_FCS_CRC
;
649 error
&= ~AR9170_RX_ERROR_FCS
;
651 if (!(ar
->filter_state
& FIF_FCSFAIL
))
655 decrypt
= ar9170_get_decrypt_type(mac
);
656 if (!(decrypt
& AR9170_RX_ENC_SOFTWARE
) &&
657 decrypt
!= AR9170_ENC_ALG_NONE
)
658 status
->flag
|= RX_FLAG_DECRYPTED
;
660 /* ignore wrong RA errors */
661 error
&= ~AR9170_RX_ERROR_WRONG_RA
;
663 if (error
& AR9170_RX_ERROR_DECRYPT
) {
664 error
&= ~AR9170_RX_ERROR_DECRYPT
;
666 * Rx decryption is done in place,
667 * the original data is lost anyway.
673 /* drop any other error frames */
674 if (unlikely(error
)) {
675 /* TODO: update netdevice's RX dropped/errors statistics */
677 if (ar9170_nag_limiter(ar
))
678 wiphy_debug(ar
->hw
->wiphy
,
679 "received frame with suspicious error code (%#x).\n",
685 status
->band
= ar
->channel
->band
;
686 status
->freq
= ar
->channel
->center_freq
;
688 switch (mac
->status
& AR9170_RX_STATUS_MODULATION_MASK
) {
689 case AR9170_RX_STATUS_MODULATION_CCK
:
690 if (mac
->status
& AR9170_RX_STATUS_SHORT_PREAMBLE
)
691 status
->flag
|= RX_FLAG_SHORTPRE
;
692 switch (head
->plcp
[0]) {
694 status
->rate_idx
= 0;
697 status
->rate_idx
= 1;
700 status
->rate_idx
= 2;
703 status
->rate_idx
= 3;
706 if (ar9170_nag_limiter(ar
))
707 wiphy_err(ar
->hw
->wiphy
,
708 "invalid plcp cck rate (%x).\n",
714 case AR9170_RX_STATUS_MODULATION_DUPOFDM
:
715 case AR9170_RX_STATUS_MODULATION_OFDM
:
716 switch (head
->plcp
[0] & 0xf) {
718 status
->rate_idx
= 0;
721 status
->rate_idx
= 1;
724 status
->rate_idx
= 2;
727 status
->rate_idx
= 3;
730 status
->rate_idx
= 4;
733 status
->rate_idx
= 5;
736 status
->rate_idx
= 6;
739 status
->rate_idx
= 7;
742 if (ar9170_nag_limiter(ar
))
743 wiphy_err(ar
->hw
->wiphy
,
744 "invalid plcp ofdm rate (%x).\n",
748 if (status
->band
== IEEE80211_BAND_2GHZ
)
749 status
->rate_idx
+= 4;
752 case AR9170_RX_STATUS_MODULATION_HT
:
753 if (head
->plcp
[3] & 0x80)
754 status
->flag
|= RX_FLAG_40MHZ
;
755 if (head
->plcp
[6] & 0x80)
756 status
->flag
|= RX_FLAG_SHORT_GI
;
758 status
->rate_idx
= clamp(0, 75, head
->plcp
[6] & 0x7f);
759 status
->flag
|= RX_FLAG_HT
;
763 if (ar9170_nag_limiter(ar
))
764 wiphy_err(ar
->hw
->wiphy
, "invalid modulation\n");
771 static void ar9170_rx_phy_status(struct ar9170
*ar
,
772 struct ar9170_rx_phystatus
*phy
,
773 struct ieee80211_rx_status
*status
)
777 BUILD_BUG_ON(sizeof(struct ar9170_rx_phystatus
) != 20);
779 for (i
= 0; i
< 3; i
++)
780 if (phy
->rssi
[i
] != 0x80)
781 status
->antenna
|= BIT(i
);
783 /* post-process RSSI */
784 for (i
= 0; i
< 7; i
++)
785 if (phy
->rssi
[i
] & 0x80)
786 phy
->rssi
[i
] = ((phy
->rssi
[i
] & 0x7f) + 1) & 0x7f;
788 /* TODO: we could do something with phy_errors */
789 status
->signal
= ar
->noise
[0] + phy
->rssi_combined
;
792 static struct sk_buff
*ar9170_rx_copy_data(u8
*buf
, int len
)
796 struct ieee80211_hdr
*hdr
= (void *) buf
;
798 if (ieee80211_is_data_qos(hdr
->frame_control
)) {
799 u8
*qc
= ieee80211_get_qos_ctl(hdr
);
800 reserved
+= NET_IP_ALIGN
;
802 if (*qc
& IEEE80211_QOS_CONTROL_A_MSDU_PRESENT
)
803 reserved
+= NET_IP_ALIGN
;
806 if (ieee80211_has_a4(hdr
->frame_control
))
807 reserved
+= NET_IP_ALIGN
;
809 reserved
= 32 + (reserved
& NET_IP_ALIGN
);
811 skb
= dev_alloc_skb(len
+ reserved
);
813 skb_reserve(skb
, reserved
);
814 memcpy(skb_put(skb
, len
), buf
, len
);
821 * If the frame alignment is right (or the kernel has
822 * CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS), and there
823 * is only a single MPDU in the USB frame, then we could
824 * submit to mac80211 the SKB directly. However, since
825 * there may be multiple packets in one SKB in stream
826 * mode, and we need to observe the proper ordering,
827 * this is non-trivial.
830 static void ar9170_handle_mpdu(struct ar9170
*ar
, u8
*buf
, int len
)
832 struct ar9170_rx_head
*head
;
833 struct ar9170_rx_macstatus
*mac
;
834 struct ar9170_rx_phystatus
*phy
= NULL
;
835 struct ieee80211_rx_status status
;
839 if (unlikely(!IS_STARTED(ar
) || len
< (sizeof(*mac
))))
843 mpdu_len
= len
- sizeof(*mac
);
845 mac
= (void *)(buf
+ mpdu_len
);
846 if (unlikely(mac
->error
& AR9170_RX_ERROR_FATAL
)) {
847 /* this frame is too damaged and can't be used - drop it */
852 switch (mac
->status
& AR9170_RX_STATUS_MPDU_MASK
) {
853 case AR9170_RX_STATUS_MPDU_FIRST
:
854 /* first mpdu packet has the plcp header */
855 if (likely(mpdu_len
>= sizeof(struct ar9170_rx_head
))) {
857 memcpy(&ar
->rx_mpdu
.plcp
, (void *) buf
,
858 sizeof(struct ar9170_rx_head
));
860 mpdu_len
-= sizeof(struct ar9170_rx_head
);
861 buf
+= sizeof(struct ar9170_rx_head
);
862 ar
->rx_mpdu
.has_plcp
= true;
864 if (ar9170_nag_limiter(ar
))
865 wiphy_err(ar
->hw
->wiphy
,
866 "plcp info is clipped.\n");
871 case AR9170_RX_STATUS_MPDU_LAST
:
872 /* last mpdu has a extra tail with phy status information */
874 if (likely(mpdu_len
>= sizeof(struct ar9170_rx_phystatus
))) {
875 mpdu_len
-= sizeof(struct ar9170_rx_phystatus
);
876 phy
= (void *)(buf
+ mpdu_len
);
878 if (ar9170_nag_limiter(ar
))
879 wiphy_err(ar
->hw
->wiphy
,
880 "frame tail is clipped.\n");
884 case AR9170_RX_STATUS_MPDU_MIDDLE
:
885 /* middle mpdus are just data */
886 if (unlikely(!ar
->rx_mpdu
.has_plcp
)) {
887 if (!ar9170_nag_limiter(ar
))
890 wiphy_err(ar
->hw
->wiphy
,
891 "rx stream did not start with a first_mpdu frame tag.\n");
896 head
= &ar
->rx_mpdu
.plcp
;
899 case AR9170_RX_STATUS_MPDU_SINGLE
:
900 /* single mpdu - has plcp (head) and phy status (tail) */
903 mpdu_len
-= sizeof(struct ar9170_rx_head
);
904 mpdu_len
-= sizeof(struct ar9170_rx_phystatus
);
906 buf
+= sizeof(struct ar9170_rx_head
);
907 phy
= (void *)(buf
+ mpdu_len
);
915 if (unlikely(mpdu_len
< FCS_LEN
))
918 memset(&status
, 0, sizeof(status
));
919 if (unlikely(ar9170_rx_mac_status(ar
, head
, mac
, &status
)))
923 ar9170_rx_phy_status(ar
, phy
, &status
);
925 skb
= ar9170_rx_copy_data(buf
, mpdu_len
);
927 memcpy(IEEE80211_SKB_RXCB(skb
), &status
, sizeof(status
));
928 ieee80211_rx_irqsafe(ar
->hw
, skb
);
932 void ar9170_rx(struct ar9170
*ar
, struct sk_buff
*skb
)
934 unsigned int i
, tlen
, resplen
, wlen
= 0, clen
= 0;
941 clen
= tbuf
[1] << 8 | tbuf
[0];
942 wlen
= ALIGN(clen
, 4);
944 /* check if this is stream has a valid tag.*/
945 if (tbuf
[2] != 0 || tbuf
[3] != 0x4e) {
947 * TODO: handle the highly unlikely event that the
948 * corrupted stream has the TAG at the right position.
951 /* check if the frame can be repaired. */
952 if (!ar
->rx_failover_missing
) {
953 /* this is no "short read". */
954 if (ar9170_nag_limiter(ar
)) {
955 wiphy_err(ar
->hw
->wiphy
,
962 if (ar
->rx_failover_missing
> tlen
) {
963 if (ar9170_nag_limiter(ar
)) {
964 wiphy_err(ar
->hw
->wiphy
,
965 "possible multi stream corruption!\n");
971 memcpy(skb_put(ar
->rx_failover
, tlen
), tbuf
, tlen
);
972 ar
->rx_failover_missing
-= tlen
;
974 if (ar
->rx_failover_missing
<= 0) {
976 * nested ar9170_rx call!
977 * termination is guranteed, even when the
978 * combined frame also have a element with
982 ar
->rx_failover_missing
= 0;
983 ar9170_rx(ar
, ar
->rx_failover
);
985 skb_reset_tail_pointer(ar
->rx_failover
);
986 skb_trim(ar
->rx_failover
, 0);
992 /* check if stream is clipped */
993 if (wlen
> tlen
- 4) {
994 if (ar
->rx_failover_missing
) {
995 /* TODO: handle double stream corruption. */
996 if (ar9170_nag_limiter(ar
)) {
997 wiphy_err(ar
->hw
->wiphy
,
998 "double rx stream corruption!\n");
1005 * save incomplete data set.
1006 * the firmware will resend the missing bits when
1007 * the rx - descriptor comes round again.
1010 memcpy(skb_put(ar
->rx_failover
, tlen
), tbuf
, tlen
);
1011 ar
->rx_failover_missing
= clen
- tlen
;
1021 /* weird thing, but this is the same in the original driver */
1022 while (resplen
> 2 && i
< 12 &&
1023 respbuf
[0] == 0xff && respbuf
[1] == 0xff) {
1032 /* found the 6 * 0xffff marker? */
1034 ar9170_handle_command_response(ar
, respbuf
, resplen
);
1036 ar9170_handle_mpdu(ar
, respbuf
, clen
);
1040 if (net_ratelimit())
1041 wiphy_err(ar
->hw
->wiphy
,
1042 "%d bytes of unprocessed data left in rx stream!\n",
1051 wiphy_err(ar
->hw
->wiphy
,
1052 "damaged RX stream data [want:%d, data:%d, rx:%d, pending:%d ]\n",
1053 clen
, wlen
, tlen
, ar
->rx_failover_missing
);
1055 if (ar
->rx_failover_missing
)
1056 print_hex_dump_bytes("rxbuf:", DUMP_PREFIX_OFFSET
,
1057 ar
->rx_failover
->data
,
1058 ar
->rx_failover
->len
);
1060 print_hex_dump_bytes("stream:", DUMP_PREFIX_OFFSET
,
1061 skb
->data
, skb
->len
);
1063 wiphy_err(ar
->hw
->wiphy
,
1064 "If you see this message frequently, please check your hardware and cables.\n");
1067 if (ar
->rx_failover_missing
) {
1068 skb_reset_tail_pointer(ar
->rx_failover
);
1069 skb_trim(ar
->rx_failover
, 0);
1070 ar
->rx_failover_missing
= 0;
1074 #define AR9170_FILL_QUEUE(queue, ai_fs, cwmin, cwmax, _txop) \
1076 queue.aifs = ai_fs; \
1077 queue.cw_min = cwmin; \
1078 queue.cw_max = cwmax; \
1079 queue.txop = _txop; \
1082 static int ar9170_op_start(struct ieee80211_hw
*hw
)
1084 struct ar9170
*ar
= hw
->priv
;
1087 mutex_lock(&ar
->mutex
);
1089 /* reinitialize queues statistics */
1090 memset(&ar
->tx_stats
, 0, sizeof(ar
->tx_stats
));
1091 for (i
= 0; i
< __AR9170_NUM_TXQ
; i
++)
1092 ar
->tx_stats
[i
].limit
= AR9170_TXQ_DEPTH
;
1094 /* reset QoS defaults */
1095 AR9170_FILL_QUEUE(ar
->edcf
[0], 3, 15, 1023, 0); /* BEST EFFORT*/
1096 AR9170_FILL_QUEUE(ar
->edcf
[1], 7, 15, 1023, 0); /* BACKGROUND */
1097 AR9170_FILL_QUEUE(ar
->edcf
[2], 2, 7, 15, 94); /* VIDEO */
1098 AR9170_FILL_QUEUE(ar
->edcf
[3], 2, 3, 7, 47); /* VOICE */
1099 AR9170_FILL_QUEUE(ar
->edcf
[4], 2, 3, 7, 0); /* SPECIAL */
1101 /* set sane AMPDU defaults */
1102 ar
->global_ampdu_density
= 6;
1103 ar
->global_ampdu_factor
= 3;
1105 ar
->bad_hw_nagger
= jiffies
;
1111 err
= ar9170_init_mac(ar
);
1115 err
= ar9170_set_qos(ar
);
1119 err
= ar9170_init_phy(ar
, IEEE80211_BAND_2GHZ
);
1123 err
= ar9170_init_rf(ar
);
1128 err
= ar9170_write_reg(ar
, 0x1c3d30, 0x100);
1132 ar
->state
= AR9170_STARTED
;
1135 mutex_unlock(&ar
->mutex
);
1139 static void ar9170_op_stop(struct ieee80211_hw
*hw
)
1141 struct ar9170
*ar
= hw
->priv
;
1145 ar
->state
= AR9170_IDLE
;
1147 cancel_delayed_work_sync(&ar
->tx_janitor
);
1148 #ifdef CONFIG_AR9170_LEDS
1149 cancel_delayed_work_sync(&ar
->led_work
);
1151 cancel_work_sync(&ar
->beacon_work
);
1153 mutex_lock(&ar
->mutex
);
1155 if (IS_ACCEPTING_CMD(ar
)) {
1156 ar9170_set_leds_state(ar
, 0);
1159 ar9170_write_reg(ar
, 0x1c3d30, 0);
1163 for (i
= 0; i
< __AR9170_NUM_TXQ
; i
++) {
1164 skb_queue_purge(&ar
->tx_pending
[i
]);
1165 skb_queue_purge(&ar
->tx_status
[i
]);
1168 mutex_unlock(&ar
->mutex
);
1171 static int ar9170_tx_prepare(struct ar9170
*ar
, struct sk_buff
*skb
)
1173 struct ieee80211_hdr
*hdr
;
1174 struct ar9170_tx_control
*txc
;
1175 struct ieee80211_tx_info
*info
;
1176 struct ieee80211_tx_rate
*txrate
;
1177 struct ar9170_tx_info
*arinfo
;
1178 unsigned int queue
= skb_get_queue_mapping(skb
);
1182 BUILD_BUG_ON(sizeof(*arinfo
) > sizeof(info
->rate_driver_data
));
1184 hdr
= (void *)skb
->data
;
1185 info
= IEEE80211_SKB_CB(skb
);
1188 txc
= (void *)skb_push(skb
, sizeof(*txc
));
1190 if (info
->control
.hw_key
) {
1191 icv
= info
->control
.hw_key
->icv_len
;
1193 switch (info
->control
.hw_key
->alg
) {
1195 keytype
= AR9170_TX_MAC_ENCR_RC4
;
1198 keytype
= AR9170_TX_MAC_ENCR_RC4
;
1201 keytype
= AR9170_TX_MAC_ENCR_AES
;
1210 txc
->length
= cpu_to_le16(len
+ icv
+ 4);
1212 txc
->mac_control
= cpu_to_le16(AR9170_TX_MAC_HW_DURATION
|
1213 AR9170_TX_MAC_BACKOFF
);
1214 txc
->mac_control
|= cpu_to_le16(ar9170_qos_hwmap
[queue
] <<
1215 AR9170_TX_MAC_QOS_SHIFT
);
1216 txc
->mac_control
|= cpu_to_le16(keytype
);
1217 txc
->phy_control
= cpu_to_le32(0);
1219 if (info
->flags
& IEEE80211_TX_CTL_NO_ACK
)
1220 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_NO_ACK
);
1222 txrate
= &info
->control
.rates
[0];
1223 if (txrate
->flags
& IEEE80211_TX_RC_USE_CTS_PROTECT
)
1224 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_PROT_CTS
);
1225 else if (txrate
->flags
& IEEE80211_TX_RC_USE_RTS_CTS
)
1226 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_PROT_RTS
);
1228 arinfo
= (void *)info
->rate_driver_data
;
1229 arinfo
->timeout
= jiffies
+ msecs_to_jiffies(AR9170_QUEUE_TIMEOUT
);
1231 if (!(info
->flags
& IEEE80211_TX_CTL_NO_ACK
) &&
1232 (is_valid_ether_addr(ieee80211_get_DA(hdr
)))) {
1235 * Putting the QoS queue bits into an unexplored territory is
1236 * certainly not elegant.
1238 * In my defense: This idea provides a reasonable way to
1239 * smuggle valuable information to the tx_status callback.
1240 * Also, the idea behind this bit-abuse came straight from
1241 * the original driver code.
1245 cpu_to_le32(queue
<< AR9170_TX_PHY_QOS_SHIFT
);
1247 txc
->mac_control
|= cpu_to_le16(AR9170_TX_MAC_RATE_PROBE
);
1253 skb_pull(skb
, sizeof(*txc
));
1257 static void ar9170_tx_prepare_phy(struct ar9170
*ar
, struct sk_buff
*skb
)
1259 struct ar9170_tx_control
*txc
;
1260 struct ieee80211_tx_info
*info
;
1261 struct ieee80211_rate
*rate
= NULL
;
1262 struct ieee80211_tx_rate
*txrate
;
1265 txc
= (void *) skb
->data
;
1266 info
= IEEE80211_SKB_CB(skb
);
1267 txrate
= &info
->control
.rates
[0];
1269 if (txrate
->flags
& IEEE80211_TX_RC_GREEN_FIELD
)
1270 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_GREENFIELD
);
1272 if (txrate
->flags
& IEEE80211_TX_RC_USE_SHORT_PREAMBLE
)
1273 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_SHORT_PREAMBLE
);
1275 if (txrate
->flags
& IEEE80211_TX_RC_40_MHZ_WIDTH
)
1276 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_BW_40MHZ
);
1277 /* this works because 40 MHz is 2 and dup is 3 */
1278 if (txrate
->flags
& IEEE80211_TX_RC_DUP_DATA
)
1279 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_BW_40MHZ_DUP
);
1281 if (txrate
->flags
& IEEE80211_TX_RC_SHORT_GI
)
1282 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_SHORT_GI
);
1284 if (txrate
->flags
& IEEE80211_TX_RC_MCS
) {
1285 u32 r
= txrate
->idx
;
1288 /* heavy clip control */
1289 txc
->phy_control
|= cpu_to_le32((r
& 0x7) << 7);
1291 r
<<= AR9170_TX_PHY_MCS_SHIFT
;
1292 BUG_ON(r
& ~AR9170_TX_PHY_MCS_MASK
);
1294 txc
->phy_control
|= cpu_to_le32(r
& AR9170_TX_PHY_MCS_MASK
);
1295 txc
->phy_control
|= cpu_to_le32(AR9170_TX_PHY_MOD_HT
);
1297 if (txrate
->flags
& IEEE80211_TX_RC_40_MHZ_WIDTH
) {
1298 if (info
->band
== IEEE80211_BAND_5GHZ
)
1299 txpower
= ar
->power_5G_ht40
;
1301 txpower
= ar
->power_2G_ht40
;
1303 if (info
->band
== IEEE80211_BAND_5GHZ
)
1304 txpower
= ar
->power_5G_ht20
;
1306 txpower
= ar
->power_2G_ht20
;
1309 power
= txpower
[(txrate
->idx
) & 7];
1314 u8 idx
= txrate
->idx
;
1316 if (info
->band
!= IEEE80211_BAND_2GHZ
) {
1318 txpower
= ar
->power_5G_leg
;
1319 mod
= AR9170_TX_PHY_MOD_OFDM
;
1322 txpower
= ar
->power_2G_cck
;
1323 mod
= AR9170_TX_PHY_MOD_CCK
;
1325 mod
= AR9170_TX_PHY_MOD_OFDM
;
1326 txpower
= ar
->power_2G_ofdm
;
1330 rate
= &__ar9170_ratetable
[idx
];
1332 phyrate
= rate
->hw_value
& 0xF;
1333 power
= txpower
[(rate
->hw_value
& 0x30) >> 4];
1334 phyrate
<<= AR9170_TX_PHY_MCS_SHIFT
;
1336 txc
->phy_control
|= cpu_to_le32(mod
);
1337 txc
->phy_control
|= cpu_to_le32(phyrate
);
1340 power
<<= AR9170_TX_PHY_TX_PWR_SHIFT
;
1341 power
&= AR9170_TX_PHY_TX_PWR_MASK
;
1342 txc
->phy_control
|= cpu_to_le32(power
);
1345 if (ar
->eeprom
.tx_mask
== 1) {
1346 chains
= AR9170_TX_PHY_TXCHAIN_1
;
1348 chains
= AR9170_TX_PHY_TXCHAIN_2
;
1350 /* >= 36M legacy OFDM - use only one chain */
1351 if (rate
&& rate
->bitrate
>= 360)
1352 chains
= AR9170_TX_PHY_TXCHAIN_1
;
1354 txc
->phy_control
|= cpu_to_le32(chains
<< AR9170_TX_PHY_TXCHAIN_SHIFT
);
1357 static void ar9170_tx(struct ar9170
*ar
)
1359 struct sk_buff
*skb
;
1360 unsigned long flags
;
1361 struct ieee80211_tx_info
*info
;
1362 struct ar9170_tx_info
*arinfo
;
1363 unsigned int i
, frames
, frames_failed
, remaining_space
;
1365 bool schedule_garbagecollector
= false;
1367 BUILD_BUG_ON(sizeof(*arinfo
) > sizeof(info
->rate_driver_data
));
1369 if (unlikely(!IS_STARTED(ar
)))
1372 remaining_space
= AR9170_TX_MAX_PENDING
;
1374 for (i
= 0; i
< __AR9170_NUM_TXQ
; i
++) {
1375 spin_lock_irqsave(&ar
->tx_stats_lock
, flags
);
1376 frames
= min(ar
->tx_stats
[i
].limit
- ar
->tx_stats
[i
].len
,
1377 skb_queue_len(&ar
->tx_pending
[i
]));
1379 if (remaining_space
< frames
) {
1380 #ifdef AR9170_QUEUE_DEBUG
1381 wiphy_debug(ar
->hw
->wiphy
,
1382 "tx quota reached queue:%d, "
1383 "remaining slots:%d, needed:%d\n",
1384 i
, remaining_space
, frames
);
1385 #endif /* AR9170_QUEUE_DEBUG */
1386 frames
= remaining_space
;
1389 ar
->tx_stats
[i
].len
+= frames
;
1390 ar
->tx_stats
[i
].count
+= frames
;
1391 if (ar
->tx_stats
[i
].len
>= ar
->tx_stats
[i
].limit
) {
1392 #ifdef AR9170_QUEUE_DEBUG
1393 wiphy_debug(ar
->hw
->wiphy
, "queue %d full\n", i
);
1394 wiphy_debug(ar
->hw
->wiphy
, "stuck frames: ===>\n");
1395 ar9170_dump_txqueue(ar
, &ar
->tx_pending
[i
]);
1396 ar9170_dump_txqueue(ar
, &ar
->tx_status
[i
]);
1397 #endif /* AR9170_QUEUE_DEBUG */
1399 #ifdef AR9170_QUEUE_STOP_DEBUG
1400 wiphy_debug(ar
->hw
->wiphy
, "stop queue %d\n", i
);
1401 __ar9170_dump_txstats(ar
);
1402 #endif /* AR9170_QUEUE_STOP_DEBUG */
1403 ieee80211_stop_queue(ar
->hw
, i
);
1406 spin_unlock_irqrestore(&ar
->tx_stats_lock
, flags
);
1413 skb
= skb_dequeue(&ar
->tx_pending
[i
]);
1414 if (unlikely(!skb
)) {
1415 frames_failed
+= frames
;
1420 info
= IEEE80211_SKB_CB(skb
);
1421 arinfo
= (void *) info
->rate_driver_data
;
1423 /* TODO: cancel stuck frames */
1424 arinfo
->timeout
= jiffies
+
1425 msecs_to_jiffies(AR9170_TX_TIMEOUT
);
1427 #ifdef AR9170_QUEUE_DEBUG
1428 wiphy_debug(ar
->hw
->wiphy
, "send frame q:%d =>\n", i
);
1429 ar9170_print_txheader(ar
, skb
);
1430 #endif /* AR9170_QUEUE_DEBUG */
1432 err
= ar
->tx(ar
, skb
);
1433 if (unlikely(err
)) {
1435 dev_kfree_skb_any(skb
);
1438 schedule_garbagecollector
= true;
1444 #ifdef AR9170_QUEUE_DEBUG
1445 wiphy_debug(ar
->hw
->wiphy
,
1446 "ar9170_tx report for queue %d\n", i
);
1448 wiphy_debug(ar
->hw
->wiphy
,
1449 "unprocessed pending frames left:\n");
1450 ar9170_dump_txqueue(ar
, &ar
->tx_pending
[i
]);
1451 #endif /* AR9170_QUEUE_DEBUG */
1453 if (unlikely(frames_failed
)) {
1454 #ifdef AR9170_QUEUE_DEBUG
1455 wiphy_debug(ar
->hw
->wiphy
,
1456 "frames failed %d =>\n", frames_failed
);
1457 #endif /* AR9170_QUEUE_DEBUG */
1459 spin_lock_irqsave(&ar
->tx_stats_lock
, flags
);
1460 ar
->tx_stats
[i
].len
-= frames_failed
;
1461 ar
->tx_stats
[i
].count
-= frames_failed
;
1462 #ifdef AR9170_QUEUE_STOP_DEBUG
1463 wiphy_debug(ar
->hw
->wiphy
, "wake queue %d\n", i
);
1464 __ar9170_dump_txstats(ar
);
1465 #endif /* AR9170_QUEUE_STOP_DEBUG */
1466 ieee80211_wake_queue(ar
->hw
, i
);
1467 spin_unlock_irqrestore(&ar
->tx_stats_lock
, flags
);
1471 if (!schedule_garbagecollector
)
1474 ieee80211_queue_delayed_work(ar
->hw
,
1476 msecs_to_jiffies(AR9170_JANITOR_DELAY
));
1479 int ar9170_op_tx(struct ieee80211_hw
*hw
, struct sk_buff
*skb
)
1481 struct ar9170
*ar
= hw
->priv
;
1482 struct ieee80211_tx_info
*info
;
1485 if (unlikely(!IS_STARTED(ar
)))
1488 if (unlikely(ar9170_tx_prepare(ar
, skb
)))
1491 queue
= skb_get_queue_mapping(skb
);
1492 info
= IEEE80211_SKB_CB(skb
);
1493 ar9170_tx_prepare_phy(ar
, skb
);
1494 skb_queue_tail(&ar
->tx_pending
[queue
], skb
);
1497 return NETDEV_TX_OK
;
1500 dev_kfree_skb_any(skb
);
1501 return NETDEV_TX_OK
;
1504 static int ar9170_op_add_interface(struct ieee80211_hw
*hw
,
1505 struct ieee80211_vif
*vif
)
1507 struct ar9170
*ar
= hw
->priv
;
1508 struct ath_common
*common
= &ar
->common
;
1511 mutex_lock(&ar
->mutex
);
1519 memcpy(common
->macaddr
, vif
->addr
, ETH_ALEN
);
1521 if (modparam_nohwcrypt
|| (ar
->vif
->type
!= NL80211_IFTYPE_STATION
)) {
1522 ar
->rx_software_decryption
= true;
1523 ar
->disable_offload
= true;
1527 err
= ar9170_update_frame_filter(ar
, AR9170_MAC_REG_FTF_DEFAULTS
);
1531 err
= ar9170_set_operating_mode(ar
);
1534 mutex_unlock(&ar
->mutex
);
1538 static void ar9170_op_remove_interface(struct ieee80211_hw
*hw
,
1539 struct ieee80211_vif
*vif
)
1541 struct ar9170
*ar
= hw
->priv
;
1543 mutex_lock(&ar
->mutex
);
1545 ar9170_update_frame_filter(ar
, 0);
1546 ar9170_set_beacon_timers(ar
);
1547 dev_kfree_skb(ar
->beacon
);
1549 ar
->sniffer_enabled
= false;
1550 ar
->rx_software_decryption
= false;
1551 ar9170_set_operating_mode(ar
);
1552 mutex_unlock(&ar
->mutex
);
1555 static int ar9170_op_config(struct ieee80211_hw
*hw
, u32 changed
)
1557 struct ar9170
*ar
= hw
->priv
;
1560 mutex_lock(&ar
->mutex
);
1562 if (changed
& IEEE80211_CONF_CHANGE_LISTEN_INTERVAL
) {
1567 if (changed
& IEEE80211_CONF_CHANGE_PS
) {
1572 if (changed
& IEEE80211_CONF_CHANGE_POWER
) {
1577 if (changed
& IEEE80211_CONF_CHANGE_RETRY_LIMITS
) {
1579 * is it long_frame_max_tx_count or short_frame_max_tx_count?
1582 err
= ar9170_set_hwretry_limit(ar
,
1583 ar
->hw
->conf
.long_frame_max_tx_count
);
1588 if (changed
& IEEE80211_CONF_CHANGE_CHANNEL
) {
1590 /* adjust slot time for 5 GHz */
1591 err
= ar9170_set_slot_time(ar
);
1595 err
= ar9170_set_dyn_sifs_ack(ar
);
1599 err
= ar9170_set_channel(ar
, hw
->conf
.channel
,
1601 nl80211_to_ar9170(hw
->conf
.channel_type
));
1607 mutex_unlock(&ar
->mutex
);
1611 static u64
ar9170_op_prepare_multicast(struct ieee80211_hw
*hw
,
1612 struct netdev_hw_addr_list
*mc_list
)
1615 struct netdev_hw_addr
*ha
;
1617 /* always get broadcast frames */
1618 mchash
= 1ULL << (0xff >> 2);
1620 netdev_hw_addr_list_for_each(ha
, mc_list
)
1621 mchash
|= 1ULL << (ha
->addr
[5] >> 2);
1626 static void ar9170_op_configure_filter(struct ieee80211_hw
*hw
,
1627 unsigned int changed_flags
,
1628 unsigned int *new_flags
,
1631 struct ar9170
*ar
= hw
->priv
;
1633 if (unlikely(!IS_ACCEPTING_CMD(ar
)))
1636 mutex_lock(&ar
->mutex
);
1638 /* mask supported flags */
1639 *new_flags
&= FIF_ALLMULTI
| FIF_CONTROL
| FIF_BCN_PRBRESP_PROMISC
|
1640 FIF_PROMISC_IN_BSS
| FIF_FCSFAIL
| FIF_PLCPFAIL
;
1641 ar
->filter_state
= *new_flags
;
1643 * We can support more by setting the sniffer bit and
1644 * then checking the error flags, later.
1647 if (changed_flags
& FIF_ALLMULTI
&& *new_flags
& FIF_ALLMULTI
)
1650 if (multicast
!= ar
->cur_mc_hash
)
1651 ar9170_update_multicast(ar
, multicast
);
1653 if (changed_flags
& FIF_CONTROL
) {
1654 u32 filter
= AR9170_MAC_REG_FTF_PSPOLL
|
1655 AR9170_MAC_REG_FTF_RTS
|
1656 AR9170_MAC_REG_FTF_CTS
|
1657 AR9170_MAC_REG_FTF_ACK
|
1658 AR9170_MAC_REG_FTF_CFE
|
1659 AR9170_MAC_REG_FTF_CFE_ACK
;
1661 if (*new_flags
& FIF_CONTROL
)
1662 filter
|= ar
->cur_filter
;
1664 filter
&= (~ar
->cur_filter
);
1666 ar9170_update_frame_filter(ar
, filter
);
1669 if (changed_flags
& FIF_PROMISC_IN_BSS
) {
1670 ar
->sniffer_enabled
= ((*new_flags
) & FIF_PROMISC_IN_BSS
) != 0;
1671 ar9170_set_operating_mode(ar
);
1674 mutex_unlock(&ar
->mutex
);
1678 static void ar9170_op_bss_info_changed(struct ieee80211_hw
*hw
,
1679 struct ieee80211_vif
*vif
,
1680 struct ieee80211_bss_conf
*bss_conf
,
1683 struct ar9170
*ar
= hw
->priv
;
1684 struct ath_common
*common
= &ar
->common
;
1687 mutex_lock(&ar
->mutex
);
1689 if (changed
& BSS_CHANGED_BSSID
) {
1690 memcpy(common
->curbssid
, bss_conf
->bssid
, ETH_ALEN
);
1691 err
= ar9170_set_operating_mode(ar
);
1696 if (changed
& BSS_CHANGED_BEACON_ENABLED
)
1697 ar
->enable_beacon
= bss_conf
->enable_beacon
;
1699 if (changed
& BSS_CHANGED_BEACON
) {
1700 err
= ar9170_update_beacon(ar
);
1705 if (changed
& (BSS_CHANGED_BEACON_ENABLED
| BSS_CHANGED_BEACON
|
1706 BSS_CHANGED_BEACON_INT
)) {
1707 err
= ar9170_set_beacon_timers(ar
);
1712 if (changed
& BSS_CHANGED_ASSOC
) {
1713 #ifndef CONFIG_AR9170_LEDS
1714 /* enable assoc LED. */
1715 err
= ar9170_set_leds_state(ar
, bss_conf
->assoc
? 2 : 0);
1716 #endif /* CONFIG_AR9170_LEDS */
1719 if (changed
& BSS_CHANGED_HT
) {
1724 if (changed
& BSS_CHANGED_ERP_SLOT
) {
1725 err
= ar9170_set_slot_time(ar
);
1730 if (changed
& BSS_CHANGED_BASIC_RATES
) {
1731 err
= ar9170_set_basic_rates(ar
);
1737 mutex_unlock(&ar
->mutex
);
1740 static u64
ar9170_op_get_tsf(struct ieee80211_hw
*hw
)
1742 struct ar9170
*ar
= hw
->priv
;
1746 static const u32 addr
[NR
] = { AR9170_MAC_REG_TSF_H
,
1747 AR9170_MAC_REG_TSF_L
,
1748 AR9170_MAC_REG_TSF_H
};
1752 mutex_lock(&ar
->mutex
);
1754 while (loops
++ < 10) {
1755 err
= ar9170_read_mreg(ar
, NR
, addr
, val
);
1756 if (err
|| val
[0] == val
[2])
1760 mutex_unlock(&ar
->mutex
);
1765 tsf
= (tsf
<< 32) | val
[1];
1770 static int ar9170_set_key(struct ieee80211_hw
*hw
, enum set_key_cmd cmd
,
1771 struct ieee80211_vif
*vif
, struct ieee80211_sta
*sta
,
1772 struct ieee80211_key_conf
*key
)
1774 struct ar9170
*ar
= hw
->priv
;
1778 if ((!ar
->vif
) || (ar
->disable_offload
))
1783 if (key
->keylen
== WLAN_KEY_LEN_WEP40
)
1784 ktype
= AR9170_ENC_ALG_WEP64
;
1786 ktype
= AR9170_ENC_ALG_WEP128
;
1789 ktype
= AR9170_ENC_ALG_TKIP
;
1792 ktype
= AR9170_ENC_ALG_AESCCMP
;
1798 mutex_lock(&ar
->mutex
);
1799 if (cmd
== SET_KEY
) {
1800 if (unlikely(!IS_STARTED(ar
))) {
1805 /* group keys need all-zeroes address */
1806 if (!(key
->flags
& IEEE80211_KEY_FLAG_PAIRWISE
))
1809 if (key
->flags
& IEEE80211_KEY_FLAG_PAIRWISE
) {
1810 for (i
= 0; i
< 64; i
++)
1811 if (!(ar
->usedkeys
& BIT(i
)))
1814 ar
->rx_software_decryption
= true;
1815 ar9170_set_operating_mode(ar
);
1820 i
= 64 + key
->keyidx
;
1823 key
->hw_key_idx
= i
;
1825 err
= ar9170_upload_key(ar
, i
, sta
? sta
->addr
: NULL
, ktype
, 0,
1826 key
->key
, min_t(u8
, 16, key
->keylen
));
1830 if (key
->alg
== ALG_TKIP
) {
1831 err
= ar9170_upload_key(ar
, i
, sta
? sta
->addr
: NULL
,
1832 ktype
, 1, key
->key
+ 16, 16);
1837 * hardware is not capable generating the MMIC
1838 * for fragmented frames!
1840 key
->flags
|= IEEE80211_KEY_FLAG_GENERATE_MMIC
;
1844 ar
->usedkeys
|= BIT(i
);
1846 key
->flags
|= IEEE80211_KEY_FLAG_GENERATE_IV
;
1848 if (unlikely(!IS_STARTED(ar
))) {
1849 /* The device is gone... together with the key ;-) */
1854 err
= ar9170_disable_key(ar
, key
->hw_key_idx
);
1858 if (key
->hw_key_idx
< 64) {
1859 ar
->usedkeys
&= ~BIT(key
->hw_key_idx
);
1861 err
= ar9170_upload_key(ar
, key
->hw_key_idx
, NULL
,
1862 AR9170_ENC_ALG_NONE
, 0,
1867 if (key
->alg
== ALG_TKIP
) {
1868 err
= ar9170_upload_key(ar
, key
->hw_key_idx
,
1870 AR9170_ENC_ALG_NONE
, 1,
1879 ar9170_regwrite_begin(ar
);
1880 ar9170_regwrite(AR9170_MAC_REG_ROLL_CALL_TBL_L
, ar
->usedkeys
);
1881 ar9170_regwrite(AR9170_MAC_REG_ROLL_CALL_TBL_H
, ar
->usedkeys
>> 32);
1882 ar9170_regwrite_finish();
1883 err
= ar9170_regwrite_result();
1886 mutex_unlock(&ar
->mutex
);
1891 static int ar9170_get_stats(struct ieee80211_hw
*hw
,
1892 struct ieee80211_low_level_stats
*stats
)
1894 struct ar9170
*ar
= hw
->priv
;
1898 mutex_lock(&ar
->mutex
);
1899 err
= ar9170_read_reg(ar
, AR9170_MAC_REG_TX_RETRY
, &val
);
1900 ar
->stats
.dot11ACKFailureCount
+= val
;
1902 memcpy(stats
, &ar
->stats
, sizeof(*stats
));
1903 mutex_unlock(&ar
->mutex
);
1908 static int ar9170_get_survey(struct ieee80211_hw
*hw
, int idx
,
1909 struct survey_info
*survey
)
1911 struct ar9170
*ar
= hw
->priv
;
1912 struct ieee80211_conf
*conf
= &hw
->conf
;
1917 /* TODO: update noise value, e.g. call ar9170_set_channel */
1919 survey
->channel
= conf
->channel
;
1920 survey
->filled
= SURVEY_INFO_NOISE_DBM
;
1921 survey
->noise
= ar
->noise
[0];
1926 static int ar9170_conf_tx(struct ieee80211_hw
*hw
, u16 queue
,
1927 const struct ieee80211_tx_queue_params
*param
)
1929 struct ar9170
*ar
= hw
->priv
;
1932 mutex_lock(&ar
->mutex
);
1933 if (queue
< __AR9170_NUM_TXQ
) {
1934 memcpy(&ar
->edcf
[ar9170_qos_hwmap
[queue
]],
1935 param
, sizeof(*param
));
1937 ret
= ar9170_set_qos(ar
);
1942 mutex_unlock(&ar
->mutex
);
1946 static int ar9170_ampdu_action(struct ieee80211_hw
*hw
,
1947 struct ieee80211_vif
*vif
,
1948 enum ieee80211_ampdu_mlme_action action
,
1949 struct ieee80211_sta
*sta
, u16 tid
, u16
*ssn
)
1952 case IEEE80211_AMPDU_RX_START
:
1953 case IEEE80211_AMPDU_RX_STOP
:
1954 /* Handled by firmware */
1964 static const struct ieee80211_ops ar9170_ops
= {
1965 .start
= ar9170_op_start
,
1966 .stop
= ar9170_op_stop
,
1968 .add_interface
= ar9170_op_add_interface
,
1969 .remove_interface
= ar9170_op_remove_interface
,
1970 .config
= ar9170_op_config
,
1971 .prepare_multicast
= ar9170_op_prepare_multicast
,
1972 .configure_filter
= ar9170_op_configure_filter
,
1973 .conf_tx
= ar9170_conf_tx
,
1974 .bss_info_changed
= ar9170_op_bss_info_changed
,
1975 .get_tsf
= ar9170_op_get_tsf
,
1976 .set_key
= ar9170_set_key
,
1977 .get_stats
= ar9170_get_stats
,
1978 .get_survey
= ar9170_get_survey
,
1979 .ampdu_action
= ar9170_ampdu_action
,
1982 void *ar9170_alloc(size_t priv_size
)
1984 struct ieee80211_hw
*hw
;
1986 struct sk_buff
*skb
;
1990 * this buffer is used for rx stream reconstruction.
1991 * Under heavy load this device (or the transport layer?)
1992 * tends to split the streams into separate rx descriptors.
1995 skb
= __dev_alloc_skb(AR9170_RX_STREAM_MAX_SIZE
, GFP_KERNEL
);
1999 hw
= ieee80211_alloc_hw(priv_size
, &ar9170_ops
);
2005 ar
->rx_failover
= skb
;
2007 mutex_init(&ar
->mutex
);
2008 spin_lock_init(&ar
->cmdlock
);
2009 spin_lock_init(&ar
->tx_stats_lock
);
2010 for (i
= 0; i
< __AR9170_NUM_TXQ
; i
++) {
2011 skb_queue_head_init(&ar
->tx_status
[i
]);
2012 skb_queue_head_init(&ar
->tx_pending
[i
]);
2014 ar9170_rx_reset_rx_mpdu(ar
);
2015 INIT_WORK(&ar
->beacon_work
, ar9170_new_beacon
);
2016 INIT_DELAYED_WORK(&ar
->tx_janitor
, ar9170_tx_janitor
);
2018 /* all hw supports 2.4 GHz, so set channel to 1 by default */
2019 ar
->channel
= &ar9170_2ghz_chantable
[0];
2021 /* first part of wiphy init */
2022 ar
->hw
->wiphy
->interface_modes
= BIT(NL80211_IFTYPE_STATION
) |
2023 BIT(NL80211_IFTYPE_WDS
) |
2024 BIT(NL80211_IFTYPE_ADHOC
);
2025 ar
->hw
->flags
|= IEEE80211_HW_RX_INCLUDES_FCS
|
2026 IEEE80211_HW_HOST_BROADCAST_PS_BUFFERING
|
2027 IEEE80211_HW_SIGNAL_DBM
;
2029 ar
->hw
->queues
= __AR9170_NUM_TXQ
;
2030 ar
->hw
->extra_tx_headroom
= 8;
2032 ar
->hw
->max_rates
= 1;
2033 ar
->hw
->max_rate_tries
= 3;
2035 for (i
= 0; i
< ARRAY_SIZE(ar
->noise
); i
++)
2036 ar
->noise
[i
] = -95; /* ATH_DEFAULT_NOISE_FLOOR */
2042 return ERR_PTR(-ENOMEM
);
2045 static int ar9170_read_eeprom(struct ar9170
*ar
)
2047 #define RW 8 /* number of words to read at once */
2048 #define RB (sizeof(u32) * RW)
2049 struct ath_regulatory
*regulatory
= &ar
->common
.regulatory
;
2050 u8
*eeprom
= (void *)&ar
->eeprom
;
2051 u8
*addr
= ar
->eeprom
.mac_address
;
2053 unsigned int rx_streams
, tx_streams
, tx_params
= 0;
2054 int i
, j
, err
, bands
= 0;
2056 BUILD_BUG_ON(sizeof(ar
->eeprom
) & 3);
2058 BUILD_BUG_ON(RB
> AR9170_MAX_CMD_LEN
- 4);
2060 /* don't want to handle trailing remains */
2061 BUILD_BUG_ON(sizeof(ar
->eeprom
) % RB
);
2064 for (i
= 0; i
< sizeof(ar
->eeprom
)/RB
; i
++) {
2065 for (j
= 0; j
< RW
; j
++)
2066 offsets
[j
] = cpu_to_le32(AR9170_EEPROM_START
+
2069 err
= ar
->exec_cmd(ar
, AR9170_CMD_RREG
,
2070 RB
, (u8
*) &offsets
,
2071 RB
, eeprom
+ RB
* i
);
2079 if (ar
->eeprom
.length
== cpu_to_le16(0xFFFF))
2082 if (ar
->eeprom
.operating_flags
& AR9170_OPFLAG_2GHZ
) {
2083 ar
->hw
->wiphy
->bands
[IEEE80211_BAND_2GHZ
] = &ar9170_band_2GHz
;
2086 if (ar
->eeprom
.operating_flags
& AR9170_OPFLAG_5GHZ
) {
2087 ar
->hw
->wiphy
->bands
[IEEE80211_BAND_5GHZ
] = &ar9170_band_5GHz
;
2091 rx_streams
= hweight8(ar
->eeprom
.rx_mask
);
2092 tx_streams
= hweight8(ar
->eeprom
.tx_mask
);
2094 if (rx_streams
!= tx_streams
)
2095 tx_params
= IEEE80211_HT_MCS_TX_RX_DIFF
;
2097 if (tx_streams
>= 1 && tx_streams
<= IEEE80211_HT_MCS_TX_MAX_STREAMS
)
2098 tx_params
= (tx_streams
- 1) <<
2099 IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT
;
2101 ar9170_band_2GHz
.ht_cap
.mcs
.tx_params
|= tx_params
;
2102 ar9170_band_5GHz
.ht_cap
.mcs
.tx_params
|= tx_params
;
2105 * I measured this, a bandswitch takes roughly
2106 * 135 ms and a frequency switch about 80.
2108 * FIXME: measure these values again once EEPROM settings
2109 * are used, that will influence them!
2112 ar
->hw
->channel_change_time
= 135 * 1000;
2114 ar
->hw
->channel_change_time
= 80 * 1000;
2116 regulatory
->current_rd
= le16_to_cpu(ar
->eeprom
.reg_domain
[0]);
2117 regulatory
->current_rd_ext
= le16_to_cpu(ar
->eeprom
.reg_domain
[1]);
2119 /* second part of wiphy init */
2120 SET_IEEE80211_PERM_ADDR(ar
->hw
, addr
);
2122 return bands
? 0 : -EINVAL
;
2125 static int ar9170_reg_notifier(struct wiphy
*wiphy
,
2126 struct regulatory_request
*request
)
2128 struct ieee80211_hw
*hw
= wiphy_to_ieee80211_hw(wiphy
);
2129 struct ar9170
*ar
= hw
->priv
;
2131 return ath_reg_notifier_apply(wiphy
, request
, &ar
->common
.regulatory
);
2134 int ar9170_register(struct ar9170
*ar
, struct device
*pdev
)
2136 struct ath_regulatory
*regulatory
= &ar
->common
.regulatory
;
2139 /* try to read EEPROM, init MAC addr */
2140 err
= ar9170_read_eeprom(ar
);
2144 err
= ath_regd_init(regulatory
, ar
->hw
->wiphy
,
2145 ar9170_reg_notifier
);
2149 err
= ieee80211_register_hw(ar
->hw
);
2153 if (!ath_is_world_regd(regulatory
))
2154 regulatory_hint(ar
->hw
->wiphy
, regulatory
->alpha2
);
2156 err
= ar9170_init_leds(ar
);
2160 #ifdef CONFIG_AR9170_LEDS
2161 err
= ar9170_register_leds(ar
);
2164 #endif /* CONFIG_AR9170_LEDS */
2166 dev_info(pdev
, "Atheros AR9170 is registered as '%s'\n",
2167 wiphy_name(ar
->hw
->wiphy
));
2169 ar
->registered
= true;
2173 ieee80211_unregister_hw(ar
->hw
);
2179 void ar9170_unregister(struct ar9170
*ar
)
2181 if (ar
->registered
) {
2182 #ifdef CONFIG_AR9170_LEDS
2183 ar9170_unregister_leds(ar
);
2184 #endif /* CONFIG_AR9170_LEDS */
2186 ieee80211_unregister_hw(ar
->hw
);
2189 kfree_skb(ar
->rx_failover
);
2190 mutex_destroy(&ar
->mutex
);