Merge branch 'linus' into x86/doc
[linux-2.6] / drivers / net / wireless / libertas / main.c
1 /**
2   * This file contains the major functions in WLAN
3   * driver. It includes init, exit, open, close and main
4   * thread etc..
5   */
6
7 #include <linux/moduleparam.h>
8 #include <linux/delay.h>
9 #include <linux/etherdevice.h>
10 #include <linux/netdevice.h>
11 #include <linux/if_arp.h>
12 #include <linux/kthread.h>
13 #include <linux/kfifo.h>
14 #include <linux/stddef.h>
15
16 #include <net/iw_handler.h>
17 #include <net/ieee80211.h>
18
19 #include "host.h"
20 #include "decl.h"
21 #include "dev.h"
22 #include "wext.h"
23 #include "debugfs.h"
24 #include "scan.h"
25 #include "assoc.h"
26 #include "cmd.h"
27
28 #define DRIVER_RELEASE_VERSION "323.p0"
29 const char lbs_driver_version[] = "COMM-USB8388-" DRIVER_RELEASE_VERSION
30 #ifdef  DEBUG
31     "-dbg"
32 #endif
33     "";
34
35
36 /* Module parameters */
37 unsigned int lbs_debug;
38 EXPORT_SYMBOL_GPL(lbs_debug);
39 module_param_named(libertas_debug, lbs_debug, int, 0644);
40
41
42 /* This global structure is used to send the confirm_sleep command as
43  * fast as possible down to the firmware. */
44 struct cmd_confirm_sleep confirm_sleep;
45
46
47 #define LBS_TX_PWR_DEFAULT              20      /*100mW */
48 #define LBS_TX_PWR_US_DEFAULT           20      /*100mW */
49 #define LBS_TX_PWR_JP_DEFAULT           16      /*50mW */
50 #define LBS_TX_PWR_FR_DEFAULT           20      /*100mW */
51 #define LBS_TX_PWR_EMEA_DEFAULT 20      /*100mW */
52
53 /* Format { channel, frequency (MHz), maxtxpower } */
54 /* band: 'B/G', region: USA FCC/Canada IC */
55 static struct chan_freq_power channel_freq_power_US_BG[] = {
56         {1, 2412, LBS_TX_PWR_US_DEFAULT},
57         {2, 2417, LBS_TX_PWR_US_DEFAULT},
58         {3, 2422, LBS_TX_PWR_US_DEFAULT},
59         {4, 2427, LBS_TX_PWR_US_DEFAULT},
60         {5, 2432, LBS_TX_PWR_US_DEFAULT},
61         {6, 2437, LBS_TX_PWR_US_DEFAULT},
62         {7, 2442, LBS_TX_PWR_US_DEFAULT},
63         {8, 2447, LBS_TX_PWR_US_DEFAULT},
64         {9, 2452, LBS_TX_PWR_US_DEFAULT},
65         {10, 2457, LBS_TX_PWR_US_DEFAULT},
66         {11, 2462, LBS_TX_PWR_US_DEFAULT}
67 };
68
69 /* band: 'B/G', region: Europe ETSI */
70 static struct chan_freq_power channel_freq_power_EU_BG[] = {
71         {1, 2412, LBS_TX_PWR_EMEA_DEFAULT},
72         {2, 2417, LBS_TX_PWR_EMEA_DEFAULT},
73         {3, 2422, LBS_TX_PWR_EMEA_DEFAULT},
74         {4, 2427, LBS_TX_PWR_EMEA_DEFAULT},
75         {5, 2432, LBS_TX_PWR_EMEA_DEFAULT},
76         {6, 2437, LBS_TX_PWR_EMEA_DEFAULT},
77         {7, 2442, LBS_TX_PWR_EMEA_DEFAULT},
78         {8, 2447, LBS_TX_PWR_EMEA_DEFAULT},
79         {9, 2452, LBS_TX_PWR_EMEA_DEFAULT},
80         {10, 2457, LBS_TX_PWR_EMEA_DEFAULT},
81         {11, 2462, LBS_TX_PWR_EMEA_DEFAULT},
82         {12, 2467, LBS_TX_PWR_EMEA_DEFAULT},
83         {13, 2472, LBS_TX_PWR_EMEA_DEFAULT}
84 };
85
86 /* band: 'B/G', region: Spain */
87 static struct chan_freq_power channel_freq_power_SPN_BG[] = {
88         {10, 2457, LBS_TX_PWR_DEFAULT},
89         {11, 2462, LBS_TX_PWR_DEFAULT}
90 };
91
92 /* band: 'B/G', region: France */
93 static struct chan_freq_power channel_freq_power_FR_BG[] = {
94         {10, 2457, LBS_TX_PWR_FR_DEFAULT},
95         {11, 2462, LBS_TX_PWR_FR_DEFAULT},
96         {12, 2467, LBS_TX_PWR_FR_DEFAULT},
97         {13, 2472, LBS_TX_PWR_FR_DEFAULT}
98 };
99
100 /* band: 'B/G', region: Japan */
101 static struct chan_freq_power channel_freq_power_JPN_BG[] = {
102         {1, 2412, LBS_TX_PWR_JP_DEFAULT},
103         {2, 2417, LBS_TX_PWR_JP_DEFAULT},
104         {3, 2422, LBS_TX_PWR_JP_DEFAULT},
105         {4, 2427, LBS_TX_PWR_JP_DEFAULT},
106         {5, 2432, LBS_TX_PWR_JP_DEFAULT},
107         {6, 2437, LBS_TX_PWR_JP_DEFAULT},
108         {7, 2442, LBS_TX_PWR_JP_DEFAULT},
109         {8, 2447, LBS_TX_PWR_JP_DEFAULT},
110         {9, 2452, LBS_TX_PWR_JP_DEFAULT},
111         {10, 2457, LBS_TX_PWR_JP_DEFAULT},
112         {11, 2462, LBS_TX_PWR_JP_DEFAULT},
113         {12, 2467, LBS_TX_PWR_JP_DEFAULT},
114         {13, 2472, LBS_TX_PWR_JP_DEFAULT},
115         {14, 2484, LBS_TX_PWR_JP_DEFAULT}
116 };
117
118 /**
119  * the structure for channel, frequency and power
120  */
121 struct region_cfp_table {
122         u8 region;
123         struct chan_freq_power *cfp_BG;
124         int cfp_no_BG;
125 };
126
127 /**
128  * the structure for the mapping between region and CFP
129  */
130 static struct region_cfp_table region_cfp_table[] = {
131         {0x10,                  /*US FCC */
132          channel_freq_power_US_BG,
133          ARRAY_SIZE(channel_freq_power_US_BG),
134          }
135         ,
136         {0x20,                  /*CANADA IC */
137          channel_freq_power_US_BG,
138          ARRAY_SIZE(channel_freq_power_US_BG),
139          }
140         ,
141         {0x30, /*EU*/ channel_freq_power_EU_BG,
142          ARRAY_SIZE(channel_freq_power_EU_BG),
143          }
144         ,
145         {0x31, /*SPAIN*/ channel_freq_power_SPN_BG,
146          ARRAY_SIZE(channel_freq_power_SPN_BG),
147          }
148         ,
149         {0x32, /*FRANCE*/ channel_freq_power_FR_BG,
150          ARRAY_SIZE(channel_freq_power_FR_BG),
151          }
152         ,
153         {0x40, /*JAPAN*/ channel_freq_power_JPN_BG,
154          ARRAY_SIZE(channel_freq_power_JPN_BG),
155          }
156         ,
157 /*Add new region here */
158 };
159
160 /**
161  * the table to keep region code
162  */
163 u16 lbs_region_code_to_index[MRVDRV_MAX_REGION_CODE] =
164     { 0x10, 0x20, 0x30, 0x31, 0x32, 0x40 };
165
166 /**
167  * 802.11b/g supported bitrates (in 500Kb/s units)
168  */
169 u8 lbs_bg_rates[MAX_RATES] =
170     { 0x02, 0x04, 0x0b, 0x16, 0x0c, 0x12, 0x18, 0x24, 0x30, 0x48, 0x60, 0x6c,
171 0x00, 0x00 };
172
173 /**
174  * FW rate table.  FW refers to rates by their index in this table, not by the
175  * rate value itself.  Values of 0x00 are
176  * reserved positions.
177  */
178 static u8 fw_data_rates[MAX_RATES] =
179     { 0x02, 0x04, 0x0B, 0x16, 0x00, 0x0C, 0x12,
180       0x18, 0x24, 0x30, 0x48, 0x60, 0x6C, 0x00
181 };
182
183 /**
184  *  @brief use index to get the data rate
185  *
186  *  @param idx                The index of data rate
187  *  @return                     data rate or 0
188  */
189 u32 lbs_fw_index_to_data_rate(u8 idx)
190 {
191         if (idx >= sizeof(fw_data_rates))
192                 idx = 0;
193         return fw_data_rates[idx];
194 }
195
196 /**
197  *  @brief use rate to get the index
198  *
199  *  @param rate                 data rate
200  *  @return                     index or 0
201  */
202 u8 lbs_data_rate_to_fw_index(u32 rate)
203 {
204         u8 i;
205
206         if (!rate)
207                 return 0;
208
209         for (i = 0; i < sizeof(fw_data_rates); i++) {
210                 if (rate == fw_data_rates[i])
211                         return i;
212         }
213         return 0;
214 }
215
216 /**
217  * Attributes exported through sysfs
218  */
219
220 /**
221  * @brief Get function for sysfs attribute anycast_mask
222  */
223 static ssize_t lbs_anycast_get(struct device *dev,
224                 struct device_attribute *attr, char * buf)
225 {
226         struct lbs_private *priv = to_net_dev(dev)->priv;
227         struct cmd_ds_mesh_access mesh_access;
228         int ret;
229
230         memset(&mesh_access, 0, sizeof(mesh_access));
231
232         ret = lbs_mesh_access(priv, CMD_ACT_MESH_GET_ANYCAST, &mesh_access);
233         if (ret)
234                 return ret;
235
236         return snprintf(buf, 12, "0x%X\n", le32_to_cpu(mesh_access.data[0]));
237 }
238
239 /**
240  * @brief Set function for sysfs attribute anycast_mask
241  */
242 static ssize_t lbs_anycast_set(struct device *dev,
243                 struct device_attribute *attr, const char * buf, size_t count)
244 {
245         struct lbs_private *priv = to_net_dev(dev)->priv;
246         struct cmd_ds_mesh_access mesh_access;
247         uint32_t datum;
248         int ret;
249
250         memset(&mesh_access, 0, sizeof(mesh_access));
251         sscanf(buf, "%x", &datum);
252         mesh_access.data[0] = cpu_to_le32(datum);
253
254         ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_ANYCAST, &mesh_access);
255         if (ret)
256                 return ret;
257
258         return strlen(buf);
259 }
260
261 static int lbs_add_rtap(struct lbs_private *priv);
262 static void lbs_remove_rtap(struct lbs_private *priv);
263 static int lbs_add_mesh(struct lbs_private *priv);
264 static void lbs_remove_mesh(struct lbs_private *priv);
265
266
267 /**
268  * Get function for sysfs attribute rtap
269  */
270 static ssize_t lbs_rtap_get(struct device *dev,
271                 struct device_attribute *attr, char * buf)
272 {
273         struct lbs_private *priv = to_net_dev(dev)->priv;
274         return snprintf(buf, 5, "0x%X\n", priv->monitormode);
275 }
276
277 /**
278  *  Set function for sysfs attribute rtap
279  */
280 static ssize_t lbs_rtap_set(struct device *dev,
281                 struct device_attribute *attr, const char * buf, size_t count)
282 {
283         int monitor_mode;
284         struct lbs_private *priv = to_net_dev(dev)->priv;
285
286         sscanf(buf, "%x", &monitor_mode);
287         if (monitor_mode) {
288                 if (priv->monitormode == monitor_mode)
289                         return strlen(buf);
290                 if (!priv->monitormode) {
291                         if (priv->infra_open || priv->mesh_open)
292                                 return -EBUSY;
293                         if (priv->mode == IW_MODE_INFRA)
294                                 lbs_send_deauthentication(priv);
295                         else if (priv->mode == IW_MODE_ADHOC)
296                                 lbs_stop_adhoc_network(priv);
297                         lbs_add_rtap(priv);
298                 }
299                 priv->monitormode = monitor_mode;
300         } else {
301                 if (!priv->monitormode)
302                         return strlen(buf);
303                 priv->monitormode = 0;
304                 lbs_remove_rtap(priv);
305
306                 if (priv->currenttxskb) {
307                         dev_kfree_skb_any(priv->currenttxskb);
308                         priv->currenttxskb = NULL;
309                 }
310
311                 /* Wake queues, command thread, etc. */
312                 lbs_host_to_card_done(priv);
313         }
314
315         lbs_prepare_and_send_command(priv,
316                         CMD_802_11_MONITOR_MODE, CMD_ACT_SET,
317                         CMD_OPTION_WAITFORRSP, 0, &priv->monitormode);
318         return strlen(buf);
319 }
320
321 /**
322  * lbs_rtap attribute to be exported per ethX interface
323  * through sysfs (/sys/class/net/ethX/lbs_rtap)
324  */
325 static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get, lbs_rtap_set );
326
327 /**
328  * Get function for sysfs attribute mesh
329  */
330 static ssize_t lbs_mesh_get(struct device *dev,
331                 struct device_attribute *attr, char * buf)
332 {
333         struct lbs_private *priv = to_net_dev(dev)->priv;
334         return snprintf(buf, 5, "0x%X\n", !!priv->mesh_dev);
335 }
336
337 /**
338  *  Set function for sysfs attribute mesh
339  */
340 static ssize_t lbs_mesh_set(struct device *dev,
341                 struct device_attribute *attr, const char * buf, size_t count)
342 {
343         struct lbs_private *priv = to_net_dev(dev)->priv;
344         int enable;
345         int ret, action = CMD_ACT_MESH_CONFIG_STOP;
346
347         sscanf(buf, "%x", &enable);
348         enable = !!enable;
349         if (enable == !!priv->mesh_dev)
350                 return count;
351         if (enable)
352                 action = CMD_ACT_MESH_CONFIG_START;
353         ret = lbs_mesh_config(priv, action, priv->curbssparams.channel);
354         if (ret)
355                 return ret;
356
357         if (enable)
358                 lbs_add_mesh(priv);
359         else
360                 lbs_remove_mesh(priv);
361
362         return count;
363 }
364
365 /**
366  * lbs_mesh attribute to be exported per ethX interface
367  * through sysfs (/sys/class/net/ethX/lbs_mesh)
368  */
369 static DEVICE_ATTR(lbs_mesh, 0644, lbs_mesh_get, lbs_mesh_set);
370
371 /**
372  * anycast_mask attribute to be exported per mshX interface
373  * through sysfs (/sys/class/net/mshX/anycast_mask)
374  */
375 static DEVICE_ATTR(anycast_mask, 0644, lbs_anycast_get, lbs_anycast_set);
376
377 static struct attribute *lbs_mesh_sysfs_entries[] = {
378         &dev_attr_anycast_mask.attr,
379         NULL,
380 };
381
382 static struct attribute_group lbs_mesh_attr_group = {
383         .attrs = lbs_mesh_sysfs_entries,
384 };
385
386 /**
387  *  @brief This function opens the ethX or mshX interface
388  *
389  *  @param dev     A pointer to net_device structure
390  *  @return        0 or -EBUSY if monitor mode active
391  */
392 static int lbs_dev_open(struct net_device *dev)
393 {
394         struct lbs_private *priv = (struct lbs_private *) dev->priv ;
395         int ret = 0;
396
397         lbs_deb_enter(LBS_DEB_NET);
398
399         spin_lock_irq(&priv->driver_lock);
400
401         if (priv->monitormode) {
402                 ret = -EBUSY;
403                 goto out;
404         }
405
406         if (dev == priv->mesh_dev) {
407                 priv->mesh_open = 1;
408                 priv->mesh_connect_status = LBS_CONNECTED;
409                 netif_carrier_on(dev);
410         } else {
411                 priv->infra_open = 1;
412
413                 if (priv->connect_status == LBS_CONNECTED)
414                         netif_carrier_on(dev);
415                 else
416                         netif_carrier_off(dev);
417         }
418
419         if (!priv->tx_pending_len)
420                 netif_wake_queue(dev);
421  out:
422
423         spin_unlock_irq(&priv->driver_lock);
424         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
425         return ret;
426 }
427
428 /**
429  *  @brief This function closes the mshX interface
430  *
431  *  @param dev     A pointer to net_device structure
432  *  @return        0
433  */
434 static int lbs_mesh_stop(struct net_device *dev)
435 {
436         struct lbs_private *priv = (struct lbs_private *) (dev->priv);
437
438         lbs_deb_enter(LBS_DEB_MESH);
439         spin_lock_irq(&priv->driver_lock);
440
441         priv->mesh_open = 0;
442         priv->mesh_connect_status = LBS_DISCONNECTED;
443
444         netif_stop_queue(dev);
445         netif_carrier_off(dev);
446
447         spin_unlock_irq(&priv->driver_lock);
448
449         schedule_work(&priv->mcast_work);
450
451         lbs_deb_leave(LBS_DEB_MESH);
452         return 0;
453 }
454
455 /**
456  *  @brief This function closes the ethX interface
457  *
458  *  @param dev     A pointer to net_device structure
459  *  @return        0
460  */
461 static int lbs_eth_stop(struct net_device *dev)
462 {
463         struct lbs_private *priv = (struct lbs_private *) dev->priv;
464
465         lbs_deb_enter(LBS_DEB_NET);
466
467         spin_lock_irq(&priv->driver_lock);
468         priv->infra_open = 0;
469         netif_stop_queue(dev);
470         spin_unlock_irq(&priv->driver_lock);
471
472         schedule_work(&priv->mcast_work);
473
474         lbs_deb_leave(LBS_DEB_NET);
475         return 0;
476 }
477
478 static void lbs_tx_timeout(struct net_device *dev)
479 {
480         struct lbs_private *priv = (struct lbs_private *) dev->priv;
481
482         lbs_deb_enter(LBS_DEB_TX);
483
484         lbs_pr_err("tx watch dog timeout\n");
485
486         dev->trans_start = jiffies;
487
488         if (priv->currenttxskb)
489                 lbs_send_tx_feedback(priv, 0);
490
491         /* XX: Shouldn't we also call into the hw-specific driver
492            to kick it somehow? */
493         lbs_host_to_card_done(priv);
494
495         /* More often than not, this actually happens because the
496            firmware has crapped itself -- rather than just a very
497            busy medium. So send a harmless command, and if/when
498            _that_ times out, we'll kick it in the head. */
499         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
500                                      0, 0, NULL);
501
502         lbs_deb_leave(LBS_DEB_TX);
503 }
504
505 void lbs_host_to_card_done(struct lbs_private *priv)
506 {
507         unsigned long flags;
508
509         lbs_deb_enter(LBS_DEB_THREAD);
510
511         spin_lock_irqsave(&priv->driver_lock, flags);
512
513         priv->dnld_sent = DNLD_RES_RECEIVED;
514
515         /* Wake main thread if commands are pending */
516         if (!priv->cur_cmd || priv->tx_pending_len > 0)
517                 wake_up_interruptible(&priv->waitq);
518
519         spin_unlock_irqrestore(&priv->driver_lock, flags);
520         lbs_deb_leave(LBS_DEB_THREAD);
521 }
522 EXPORT_SYMBOL_GPL(lbs_host_to_card_done);
523
524 /**
525  *  @brief This function returns the network statistics
526  *
527  *  @param dev     A pointer to struct lbs_private structure
528  *  @return        A pointer to net_device_stats structure
529  */
530 static struct net_device_stats *lbs_get_stats(struct net_device *dev)
531 {
532         struct lbs_private *priv = (struct lbs_private *) dev->priv;
533
534         lbs_deb_enter(LBS_DEB_NET);
535         return &priv->stats;
536 }
537
538 static int lbs_set_mac_address(struct net_device *dev, void *addr)
539 {
540         int ret = 0;
541         struct lbs_private *priv = (struct lbs_private *) dev->priv;
542         struct sockaddr *phwaddr = addr;
543         struct cmd_ds_802_11_mac_address cmd;
544
545         lbs_deb_enter(LBS_DEB_NET);
546
547         /* In case it was called from the mesh device */
548         dev = priv->dev;
549
550         cmd.hdr.size = cpu_to_le16(sizeof(cmd));
551         cmd.action = cpu_to_le16(CMD_ACT_SET);
552         memcpy(cmd.macadd, phwaddr->sa_data, ETH_ALEN);
553
554         ret = lbs_cmd_with_response(priv, CMD_802_11_MAC_ADDRESS, &cmd);
555         if (ret) {
556                 lbs_deb_net("set MAC address failed\n");
557                 goto done;
558         }
559
560         memcpy(priv->current_addr, phwaddr->sa_data, ETH_ALEN);
561         memcpy(dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
562         if (priv->mesh_dev)
563                 memcpy(priv->mesh_dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
564
565 done:
566         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
567         return ret;
568 }
569
570
571 static inline int mac_in_list(unsigned char *list, int list_len,
572                               unsigned char *mac)
573 {
574         while (list_len) {
575                 if (!memcmp(list, mac, ETH_ALEN))
576                         return 1;
577                 list += ETH_ALEN;
578                 list_len--;
579         }
580         return 0;
581 }
582
583
584 static int lbs_add_mcast_addrs(struct cmd_ds_mac_multicast_adr *cmd,
585                                struct net_device *dev, int nr_addrs)
586 {
587         int i = nr_addrs;
588         struct dev_mc_list *mc_list;
589         DECLARE_MAC_BUF(mac);
590
591         if ((dev->flags & (IFF_UP|IFF_MULTICAST)) != (IFF_UP|IFF_MULTICAST))
592                 return nr_addrs;
593
594         netif_addr_lock_bh(dev);
595         for (mc_list = dev->mc_list; mc_list; mc_list = mc_list->next) {
596                 if (mac_in_list(cmd->maclist, nr_addrs, mc_list->dmi_addr)) {
597                         lbs_deb_net("mcast address %s:%s skipped\n", dev->name,
598                                     print_mac(mac, mc_list->dmi_addr));
599                         continue;
600                 }
601
602                 if (i == MRVDRV_MAX_MULTICAST_LIST_SIZE)
603                         break;
604                 memcpy(&cmd->maclist[6*i], mc_list->dmi_addr, ETH_ALEN);
605                 lbs_deb_net("mcast address %s:%s added to filter\n", dev->name,
606                             print_mac(mac, mc_list->dmi_addr));
607                 i++;
608         }
609         netif_addr_unlock_bh(dev);
610         if (mc_list)
611                 return -EOVERFLOW;
612
613         return i;
614 }
615
616 static void lbs_set_mcast_worker(struct work_struct *work)
617 {
618         struct lbs_private *priv = container_of(work, struct lbs_private, mcast_work);
619         struct cmd_ds_mac_multicast_adr mcast_cmd;
620         int dev_flags;
621         int nr_addrs;
622         int old_mac_control = priv->mac_control;
623
624         lbs_deb_enter(LBS_DEB_NET);
625
626         dev_flags = priv->dev->flags;
627         if (priv->mesh_dev)
628                 dev_flags |= priv->mesh_dev->flags;
629
630         if (dev_flags & IFF_PROMISC) {
631                 priv->mac_control |= CMD_ACT_MAC_PROMISCUOUS_ENABLE;
632                 priv->mac_control &= ~(CMD_ACT_MAC_ALL_MULTICAST_ENABLE |
633                                        CMD_ACT_MAC_MULTICAST_ENABLE);
634                 goto out_set_mac_control;
635         } else if (dev_flags & IFF_ALLMULTI) {
636         do_allmulti:
637                 priv->mac_control |= CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
638                 priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
639                                        CMD_ACT_MAC_MULTICAST_ENABLE);
640                 goto out_set_mac_control;
641         }
642
643         /* Once for priv->dev, again for priv->mesh_dev if it exists */
644         nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->dev, 0);
645         if (nr_addrs >= 0 && priv->mesh_dev)
646                 nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->mesh_dev, nr_addrs);
647         if (nr_addrs < 0)
648                 goto do_allmulti;
649
650         if (nr_addrs) {
651                 int size = offsetof(struct cmd_ds_mac_multicast_adr,
652                                     maclist[6*nr_addrs]);
653
654                 mcast_cmd.action = cpu_to_le16(CMD_ACT_SET);
655                 mcast_cmd.hdr.size = cpu_to_le16(size);
656                 mcast_cmd.nr_of_adrs = cpu_to_le16(nr_addrs);
657
658                 lbs_cmd_async(priv, CMD_MAC_MULTICAST_ADR, &mcast_cmd.hdr, size);
659
660                 priv->mac_control |= CMD_ACT_MAC_MULTICAST_ENABLE;
661         } else
662                 priv->mac_control &= ~CMD_ACT_MAC_MULTICAST_ENABLE;
663
664         priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
665                                CMD_ACT_MAC_ALL_MULTICAST_ENABLE);
666  out_set_mac_control:
667         if (priv->mac_control != old_mac_control)
668                 lbs_set_mac_control(priv);
669
670         lbs_deb_leave(LBS_DEB_NET);
671 }
672
673 static void lbs_set_multicast_list(struct net_device *dev)
674 {
675         struct lbs_private *priv = dev->priv;
676
677         schedule_work(&priv->mcast_work);
678 }
679
680 /**
681  *  @brief This function handles the major jobs in the LBS driver.
682  *  It handles all events generated by firmware, RX data received
683  *  from firmware and TX data sent from kernel.
684  *
685  *  @param data    A pointer to lbs_thread structure
686  *  @return        0
687  */
688 static int lbs_thread(void *data)
689 {
690         struct net_device *dev = data;
691         struct lbs_private *priv = dev->priv;
692         wait_queue_t wait;
693
694         lbs_deb_enter(LBS_DEB_THREAD);
695
696         init_waitqueue_entry(&wait, current);
697
698         for (;;) {
699                 int shouldsleep;
700                 u8 resp_idx;
701
702                 lbs_deb_thread("1: currenttxskb %p, dnld_sent %d\n",
703                                 priv->currenttxskb, priv->dnld_sent);
704
705                 add_wait_queue(&priv->waitq, &wait);
706                 set_current_state(TASK_INTERRUPTIBLE);
707                 spin_lock_irq(&priv->driver_lock);
708
709                 if (kthread_should_stop())
710                         shouldsleep = 0;        /* Bye */
711                 else if (priv->surpriseremoved)
712                         shouldsleep = 1;        /* We need to wait until we're _told_ to die */
713                 else if (priv->psstate == PS_STATE_SLEEP)
714                         shouldsleep = 1;        /* Sleep mode. Nothing we can do till it wakes */
715                 else if (priv->cmd_timed_out)
716                         shouldsleep = 0;        /* Command timed out. Recover */
717                 else if (!priv->fw_ready)
718                         shouldsleep = 1;        /* Firmware not ready. We're waiting for it */
719                 else if (priv->dnld_sent)
720                         shouldsleep = 1;        /* Something is en route to the device already */
721                 else if (priv->tx_pending_len > 0)
722                         shouldsleep = 0;        /* We've a packet to send */
723                 else if (priv->resp_len[priv->resp_idx])
724                         shouldsleep = 0;        /* We have a command response */
725                 else if (priv->cur_cmd)
726                         shouldsleep = 1;        /* Can't send a command; one already running */
727                 else if (!list_empty(&priv->cmdpendingq))
728                         shouldsleep = 0;        /* We have a command to send */
729                 else if (__kfifo_len(priv->event_fifo))
730                         shouldsleep = 0;        /* We have an event to process */
731                 else
732                         shouldsleep = 1;        /* No command */
733
734                 if (shouldsleep) {
735                         lbs_deb_thread("sleeping, connect_status %d, "
736                                 "psmode %d, psstate %d\n",
737                                 priv->connect_status,
738                                 priv->psmode, priv->psstate);
739                         spin_unlock_irq(&priv->driver_lock);
740                         schedule();
741                 } else
742                         spin_unlock_irq(&priv->driver_lock);
743
744                 lbs_deb_thread("2: currenttxskb %p, dnld_send %d\n",
745                                priv->currenttxskb, priv->dnld_sent);
746
747                 set_current_state(TASK_RUNNING);
748                 remove_wait_queue(&priv->waitq, &wait);
749
750                 lbs_deb_thread("3: currenttxskb %p, dnld_sent %d\n",
751                                priv->currenttxskb, priv->dnld_sent);
752
753                 if (kthread_should_stop()) {
754                         lbs_deb_thread("break from main thread\n");
755                         break;
756                 }
757
758                 if (priv->surpriseremoved) {
759                         lbs_deb_thread("adapter removed; waiting to die...\n");
760                         continue;
761                 }
762
763                 lbs_deb_thread("4: currenttxskb %p, dnld_sent %d\n",
764                        priv->currenttxskb, priv->dnld_sent);
765
766                 /* Process any pending command response */
767                 spin_lock_irq(&priv->driver_lock);
768                 resp_idx = priv->resp_idx;
769                 if (priv->resp_len[resp_idx]) {
770                         spin_unlock_irq(&priv->driver_lock);
771                         lbs_process_command_response(priv,
772                                 priv->resp_buf[resp_idx],
773                                 priv->resp_len[resp_idx]);
774                         spin_lock_irq(&priv->driver_lock);
775                         priv->resp_len[resp_idx] = 0;
776                 }
777                 spin_unlock_irq(&priv->driver_lock);
778
779                 /* command timeout stuff */
780                 if (priv->cmd_timed_out && priv->cur_cmd) {
781                         struct cmd_ctrl_node *cmdnode = priv->cur_cmd;
782
783                         if (++priv->nr_retries > 3) {
784                                 lbs_pr_info("Excessive timeouts submitting "
785                                         "command 0x%04x\n",
786                                         le16_to_cpu(cmdnode->cmdbuf->command));
787                                 lbs_complete_command(priv, cmdnode, -ETIMEDOUT);
788                                 priv->nr_retries = 0;
789                                 if (priv->reset_card)
790                                         priv->reset_card(priv);
791                         } else {
792                                 priv->cur_cmd = NULL;
793                                 priv->dnld_sent = DNLD_RES_RECEIVED;
794                                 lbs_pr_info("requeueing command 0x%04x due "
795                                         "to timeout (#%d)\n",
796                                         le16_to_cpu(cmdnode->cmdbuf->command),
797                                         priv->nr_retries);
798
799                                 /* Stick it back at the _top_ of the pending queue
800                                    for immediate resubmission */
801                                 list_add(&cmdnode->list, &priv->cmdpendingq);
802                         }
803                 }
804                 priv->cmd_timed_out = 0;
805
806                 /* Process hardware events, e.g. card removed, link lost */
807                 spin_lock_irq(&priv->driver_lock);
808                 while (__kfifo_len(priv->event_fifo)) {
809                         u32 event;
810
811                         __kfifo_get(priv->event_fifo, (unsigned char *) &event,
812                                 sizeof(event));
813                         spin_unlock_irq(&priv->driver_lock);
814                         lbs_process_event(priv, event);
815                         spin_lock_irq(&priv->driver_lock);
816                 }
817                 spin_unlock_irq(&priv->driver_lock);
818
819                 if (!priv->fw_ready)
820                         continue;
821
822                 /* Check if we need to confirm Sleep Request received previously */
823                 if (priv->psstate == PS_STATE_PRE_SLEEP &&
824                     !priv->dnld_sent && !priv->cur_cmd) {
825                         if (priv->connect_status == LBS_CONNECTED) {
826                                 lbs_deb_thread("pre-sleep, currenttxskb %p, "
827                                         "dnld_sent %d, cur_cmd %p\n",
828                                         priv->currenttxskb, priv->dnld_sent,
829                                         priv->cur_cmd);
830
831                                 lbs_ps_confirm_sleep(priv);
832                         } else {
833                                 /* workaround for firmware sending
834                                  * deauth/linkloss event immediately
835                                  * after sleep request; remove this
836                                  * after firmware fixes it
837                                  */
838                                 priv->psstate = PS_STATE_AWAKE;
839                                 lbs_pr_alert("ignore PS_SleepConfirm in "
840                                         "non-connected state\n");
841                         }
842                 }
843
844                 /* The PS state is changed during processing of Sleep Request
845                  * event above
846                  */
847                 if ((priv->psstate == PS_STATE_SLEEP) ||
848                     (priv->psstate == PS_STATE_PRE_SLEEP))
849                         continue;
850
851                 /* Execute the next command */
852                 if (!priv->dnld_sent && !priv->cur_cmd)
853                         lbs_execute_next_command(priv);
854
855                 /* Wake-up command waiters which can't sleep in
856                  * lbs_prepare_and_send_command
857                  */
858                 if (!list_empty(&priv->cmdpendingq))
859                         wake_up_all(&priv->cmd_pending);
860
861                 spin_lock_irq(&priv->driver_lock);
862                 if (!priv->dnld_sent && priv->tx_pending_len > 0) {
863                         int ret = priv->hw_host_to_card(priv, MVMS_DAT,
864                                                         priv->tx_pending_buf,
865                                                         priv->tx_pending_len);
866                         if (ret) {
867                                 lbs_deb_tx("host_to_card failed %d\n", ret);
868                                 priv->dnld_sent = DNLD_RES_RECEIVED;
869                         }
870                         priv->tx_pending_len = 0;
871                         if (!priv->currenttxskb) {
872                                 /* We can wake the queues immediately if we aren't
873                                    waiting for TX feedback */
874                                 if (priv->connect_status == LBS_CONNECTED)
875                                         netif_wake_queue(priv->dev);
876                                 if (priv->mesh_dev &&
877                                     priv->mesh_connect_status == LBS_CONNECTED)
878                                         netif_wake_queue(priv->mesh_dev);
879                         }
880                 }
881                 spin_unlock_irq(&priv->driver_lock);
882         }
883
884         del_timer(&priv->command_timer);
885         wake_up_all(&priv->cmd_pending);
886
887         lbs_deb_leave(LBS_DEB_THREAD);
888         return 0;
889 }
890
891 static int lbs_suspend_callback(struct lbs_private *priv, unsigned long dummy,
892                                 struct cmd_header *cmd)
893 {
894         lbs_deb_enter(LBS_DEB_FW);
895
896         netif_device_detach(priv->dev);
897         if (priv->mesh_dev)
898                 netif_device_detach(priv->mesh_dev);
899
900         priv->fw_ready = 0;
901         lbs_deb_leave(LBS_DEB_FW);
902         return 0;
903 }
904
905 int lbs_suspend(struct lbs_private *priv)
906 {
907         struct cmd_header cmd;
908         int ret;
909
910         lbs_deb_enter(LBS_DEB_FW);
911
912         if (priv->wol_criteria == 0xffffffff) {
913                 lbs_pr_info("Suspend attempt without configuring wake params!\n");
914                 return -EINVAL;
915         }
916
917         memset(&cmd, 0, sizeof(cmd));
918
919         ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_ACTIVATE, &cmd,
920                         sizeof(cmd), lbs_suspend_callback, 0);
921         if (ret)
922                 lbs_pr_info("HOST_SLEEP_ACTIVATE failed: %d\n", ret);
923
924         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
925         return ret;
926 }
927 EXPORT_SYMBOL_GPL(lbs_suspend);
928
929 void lbs_resume(struct lbs_private *priv)
930 {
931         lbs_deb_enter(LBS_DEB_FW);
932
933         priv->fw_ready = 1;
934
935         /* Firmware doesn't seem to give us RX packets any more
936            until we send it some command. Might as well update */
937         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
938                                      0, 0, NULL);
939
940         netif_device_attach(priv->dev);
941         if (priv->mesh_dev)
942                 netif_device_attach(priv->mesh_dev);
943
944         lbs_deb_leave(LBS_DEB_FW);
945 }
946 EXPORT_SYMBOL_GPL(lbs_resume);
947
948 /**
949  *  @brief This function downloads firmware image, gets
950  *  HW spec from firmware and set basic parameters to
951  *  firmware.
952  *
953  *  @param priv    A pointer to struct lbs_private structure
954  *  @return        0 or -1
955  */
956 static int lbs_setup_firmware(struct lbs_private *priv)
957 {
958         int ret = -1;
959
960         lbs_deb_enter(LBS_DEB_FW);
961
962         /*
963          * Read MAC address from HW
964          */
965         memset(priv->current_addr, 0xff, ETH_ALEN);
966         ret = lbs_update_hw_spec(priv);
967         if (ret)
968                 goto done;
969
970         lbs_set_mac_control(priv);
971 done:
972         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
973         return ret;
974 }
975
976 /**
977  *  This function handles the timeout of command sending.
978  *  It will re-send the same command again.
979  */
980 static void command_timer_fn(unsigned long data)
981 {
982         struct lbs_private *priv = (struct lbs_private *)data;
983         unsigned long flags;
984
985         lbs_deb_enter(LBS_DEB_CMD);
986         spin_lock_irqsave(&priv->driver_lock, flags);
987
988         if (!priv->cur_cmd)
989                 goto out;
990
991         lbs_pr_info("command 0x%04x timed out\n",
992                 le16_to_cpu(priv->cur_cmd->cmdbuf->command));
993
994         priv->cmd_timed_out = 1;
995         wake_up_interruptible(&priv->waitq);
996 out:
997         spin_unlock_irqrestore(&priv->driver_lock, flags);
998         lbs_deb_leave(LBS_DEB_CMD);
999 }
1000
1001 static void lbs_sync_channel_worker(struct work_struct *work)
1002 {
1003         struct lbs_private *priv = container_of(work, struct lbs_private,
1004                 sync_channel);
1005
1006         lbs_deb_enter(LBS_DEB_MAIN);
1007         if (lbs_update_channel(priv))
1008                 lbs_pr_info("Channel synchronization failed.");
1009         lbs_deb_leave(LBS_DEB_MAIN);
1010 }
1011
1012
1013 static int lbs_init_adapter(struct lbs_private *priv)
1014 {
1015         size_t bufsize;
1016         int i, ret = 0;
1017
1018         lbs_deb_enter(LBS_DEB_MAIN);
1019
1020         /* Allocate buffer to store the BSSID list */
1021         bufsize = MAX_NETWORK_COUNT * sizeof(struct bss_descriptor);
1022         priv->networks = kzalloc(bufsize, GFP_KERNEL);
1023         if (!priv->networks) {
1024                 lbs_pr_err("Out of memory allocating beacons\n");
1025                 ret = -1;
1026                 goto out;
1027         }
1028
1029         /* Initialize scan result lists */
1030         INIT_LIST_HEAD(&priv->network_free_list);
1031         INIT_LIST_HEAD(&priv->network_list);
1032         for (i = 0; i < MAX_NETWORK_COUNT; i++) {
1033                 list_add_tail(&priv->networks[i].list,
1034                               &priv->network_free_list);
1035         }
1036
1037         memset(priv->current_addr, 0xff, ETH_ALEN);
1038
1039         priv->connect_status = LBS_DISCONNECTED;
1040         priv->mesh_connect_status = LBS_DISCONNECTED;
1041         priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
1042         priv->mode = IW_MODE_INFRA;
1043         priv->curbssparams.channel = DEFAULT_AD_HOC_CHANNEL;
1044         priv->mac_control = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
1045         priv->radioon = RADIO_ON;
1046         priv->enablehwauto = 1;
1047         priv->capability = WLAN_CAPABILITY_SHORT_PREAMBLE;
1048         priv->psmode = LBS802_11POWERMODECAM;
1049         priv->psstate = PS_STATE_FULL_POWER;
1050
1051         mutex_init(&priv->lock);
1052
1053         setup_timer(&priv->command_timer, command_timer_fn,
1054                 (unsigned long)priv);
1055
1056         INIT_LIST_HEAD(&priv->cmdfreeq);
1057         INIT_LIST_HEAD(&priv->cmdpendingq);
1058
1059         spin_lock_init(&priv->driver_lock);
1060         init_waitqueue_head(&priv->cmd_pending);
1061
1062         /* Allocate the command buffers */
1063         if (lbs_allocate_cmd_buffer(priv)) {
1064                 lbs_pr_err("Out of memory allocating command buffers\n");
1065                 ret = -ENOMEM;
1066                 goto out;
1067         }
1068         priv->resp_idx = 0;
1069         priv->resp_len[0] = priv->resp_len[1] = 0;
1070
1071         /* Create the event FIFO */
1072         priv->event_fifo = kfifo_alloc(sizeof(u32) * 16, GFP_KERNEL, NULL);
1073         if (IS_ERR(priv->event_fifo)) {
1074                 lbs_pr_err("Out of memory allocating event FIFO buffer\n");
1075                 ret = -ENOMEM;
1076                 goto out;
1077         }
1078
1079 out:
1080         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1081
1082         return ret;
1083 }
1084
1085 static void lbs_free_adapter(struct lbs_private *priv)
1086 {
1087         lbs_deb_enter(LBS_DEB_MAIN);
1088
1089         lbs_free_cmd_buffer(priv);
1090         if (priv->event_fifo)
1091                 kfifo_free(priv->event_fifo);
1092         del_timer(&priv->command_timer);
1093         kfree(priv->networks);
1094         priv->networks = NULL;
1095
1096         lbs_deb_leave(LBS_DEB_MAIN);
1097 }
1098
1099 /**
1100  * @brief This function adds the card. it will probe the
1101  * card, allocate the lbs_priv and initialize the device.
1102  *
1103  *  @param card    A pointer to card
1104  *  @return        A pointer to struct lbs_private structure
1105  */
1106 struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
1107 {
1108         struct net_device *dev = NULL;
1109         struct lbs_private *priv = NULL;
1110
1111         lbs_deb_enter(LBS_DEB_MAIN);
1112
1113         /* Allocate an Ethernet device and register it */
1114         dev = alloc_etherdev(sizeof(struct lbs_private));
1115         if (!dev) {
1116                 lbs_pr_err("init ethX device failed\n");
1117                 goto done;
1118         }
1119         priv = dev->priv;
1120
1121         if (lbs_init_adapter(priv)) {
1122                 lbs_pr_err("failed to initialize adapter structure.\n");
1123                 goto err_init_adapter;
1124         }
1125
1126         priv->dev = dev;
1127         priv->card = card;
1128         priv->mesh_open = 0;
1129         priv->infra_open = 0;
1130
1131         /* Setup the OS Interface to our functions */
1132         dev->open = lbs_dev_open;
1133         dev->hard_start_xmit = lbs_hard_start_xmit;
1134         dev->stop = lbs_eth_stop;
1135         dev->set_mac_address = lbs_set_mac_address;
1136         dev->tx_timeout = lbs_tx_timeout;
1137         dev->get_stats = lbs_get_stats;
1138         dev->watchdog_timeo = 5 * HZ;
1139         dev->ethtool_ops = &lbs_ethtool_ops;
1140 #ifdef  WIRELESS_EXT
1141         dev->wireless_handlers = (struct iw_handler_def *)&lbs_handler_def;
1142 #endif
1143         dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1144         dev->set_multicast_list = lbs_set_multicast_list;
1145
1146         SET_NETDEV_DEV(dev, dmdev);
1147
1148         priv->rtap_net_dev = NULL;
1149
1150         lbs_deb_thread("Starting main thread...\n");
1151         init_waitqueue_head(&priv->waitq);
1152         priv->main_thread = kthread_run(lbs_thread, dev, "lbs_main");
1153         if (IS_ERR(priv->main_thread)) {
1154                 lbs_deb_thread("Error creating main thread.\n");
1155                 goto err_init_adapter;
1156         }
1157
1158         priv->work_thread = create_singlethread_workqueue("lbs_worker");
1159         INIT_DELAYED_WORK(&priv->assoc_work, lbs_association_worker);
1160         INIT_DELAYED_WORK(&priv->scan_work, lbs_scan_worker);
1161         INIT_WORK(&priv->mcast_work, lbs_set_mcast_worker);
1162         INIT_WORK(&priv->sync_channel, lbs_sync_channel_worker);
1163
1164         sprintf(priv->mesh_ssid, "mesh");
1165         priv->mesh_ssid_len = 4;
1166
1167         priv->wol_criteria = 0xffffffff;
1168         priv->wol_gpio = 0xff;
1169
1170         goto done;
1171
1172 err_init_adapter:
1173         lbs_free_adapter(priv);
1174         free_netdev(dev);
1175         priv = NULL;
1176
1177 done:
1178         lbs_deb_leave_args(LBS_DEB_MAIN, "priv %p", priv);
1179         return priv;
1180 }
1181 EXPORT_SYMBOL_GPL(lbs_add_card);
1182
1183
1184 void lbs_remove_card(struct lbs_private *priv)
1185 {
1186         struct net_device *dev = priv->dev;
1187         union iwreq_data wrqu;
1188
1189         lbs_deb_enter(LBS_DEB_MAIN);
1190
1191         lbs_remove_mesh(priv);
1192         lbs_remove_rtap(priv);
1193
1194         dev = priv->dev;
1195
1196         cancel_delayed_work_sync(&priv->scan_work);
1197         cancel_delayed_work_sync(&priv->assoc_work);
1198         cancel_work_sync(&priv->mcast_work);
1199         destroy_workqueue(priv->work_thread);
1200
1201         if (priv->psmode == LBS802_11POWERMODEMAX_PSP) {
1202                 priv->psmode = LBS802_11POWERMODECAM;
1203                 lbs_ps_wakeup(priv, CMD_OPTION_WAITFORRSP);
1204         }
1205
1206         memset(wrqu.ap_addr.sa_data, 0xaa, ETH_ALEN);
1207         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1208         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
1209
1210         /* Stop the thread servicing the interrupts */
1211         priv->surpriseremoved = 1;
1212         kthread_stop(priv->main_thread);
1213
1214         lbs_free_adapter(priv);
1215
1216         priv->dev = NULL;
1217         free_netdev(dev);
1218
1219         lbs_deb_leave(LBS_DEB_MAIN);
1220 }
1221 EXPORT_SYMBOL_GPL(lbs_remove_card);
1222
1223
1224 int lbs_start_card(struct lbs_private *priv)
1225 {
1226         struct net_device *dev = priv->dev;
1227         int ret = -1;
1228
1229         lbs_deb_enter(LBS_DEB_MAIN);
1230
1231         /* poke the firmware */
1232         ret = lbs_setup_firmware(priv);
1233         if (ret)
1234                 goto done;
1235
1236         /* init 802.11d */
1237         lbs_init_11d(priv);
1238
1239         if (register_netdev(dev)) {
1240                 lbs_pr_err("cannot register ethX device\n");
1241                 goto done;
1242         }
1243
1244         lbs_update_channel(priv);
1245
1246         /* 5.0.16p0 is known to NOT support any mesh */
1247         if (priv->fwrelease > 0x05001000) {
1248                 /* Enable mesh, if supported, and work out which TLV it uses.
1249                    0x100 + 291 is an unofficial value used in 5.110.20.pXX
1250                    0x100 + 37 is the official value used in 5.110.21.pXX
1251                    but we check them in that order because 20.pXX doesn't
1252                    give an error -- it just silently fails. */
1253
1254                 /* 5.110.20.pXX firmware will fail the command if the channel
1255                    doesn't match the existing channel. But only if the TLV
1256                    is correct. If the channel is wrong, _BOTH_ versions will
1257                    give an error to 0x100+291, and allow 0x100+37 to succeed.
1258                    It's just that 5.110.20.pXX will not have done anything
1259                    useful */
1260
1261                 priv->mesh_tlv = 0x100 + 291;
1262                 if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1263                                     priv->curbssparams.channel)) {
1264                         priv->mesh_tlv = 0x100 + 37;
1265                         if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1266                                             priv->curbssparams.channel))
1267                                 priv->mesh_tlv = 0;
1268                 }
1269                 if (priv->mesh_tlv) {
1270                         lbs_add_mesh(priv);
1271
1272                         if (device_create_file(&dev->dev, &dev_attr_lbs_mesh))
1273                                 lbs_pr_err("cannot register lbs_mesh attribute\n");
1274
1275                         /* While rtap isn't related to mesh, only mesh-enabled
1276                          * firmware implements the rtap functionality via
1277                          * CMD_802_11_MONITOR_MODE.
1278                          */
1279                         if (device_create_file(&dev->dev, &dev_attr_lbs_rtap))
1280                                 lbs_pr_err("cannot register lbs_rtap attribute\n");
1281                 }
1282         }
1283
1284         lbs_debugfs_init_one(priv, dev);
1285
1286         lbs_pr_info("%s: Marvell WLAN 802.11 adapter\n", dev->name);
1287
1288         ret = 0;
1289
1290 done:
1291         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1292         return ret;
1293 }
1294 EXPORT_SYMBOL_GPL(lbs_start_card);
1295
1296
1297 void lbs_stop_card(struct lbs_private *priv)
1298 {
1299         struct net_device *dev = priv->dev;
1300         struct cmd_ctrl_node *cmdnode;
1301         unsigned long flags;
1302
1303         lbs_deb_enter(LBS_DEB_MAIN);
1304
1305         if (!priv)
1306                 goto out;
1307
1308         netif_stop_queue(priv->dev);
1309         netif_carrier_off(priv->dev);
1310
1311         lbs_debugfs_remove_one(priv);
1312         if (priv->mesh_tlv) {
1313                 device_remove_file(&dev->dev, &dev_attr_lbs_mesh);
1314                 device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
1315         }
1316
1317         /* Flush pending command nodes */
1318         del_timer_sync(&priv->command_timer);
1319         spin_lock_irqsave(&priv->driver_lock, flags);
1320         list_for_each_entry(cmdnode, &priv->cmdpendingq, list) {
1321                 cmdnode->result = -ENOENT;
1322                 cmdnode->cmdwaitqwoken = 1;
1323                 wake_up_interruptible(&cmdnode->cmdwait_q);
1324         }
1325         spin_unlock_irqrestore(&priv->driver_lock, flags);
1326
1327         unregister_netdev(dev);
1328
1329 out:
1330         lbs_deb_leave(LBS_DEB_MAIN);
1331 }
1332 EXPORT_SYMBOL_GPL(lbs_stop_card);
1333
1334
1335 /**
1336  * @brief This function adds mshX interface
1337  *
1338  *  @param priv    A pointer to the struct lbs_private structure
1339  *  @return        0 if successful, -X otherwise
1340  */
1341 static int lbs_add_mesh(struct lbs_private *priv)
1342 {
1343         struct net_device *mesh_dev = NULL;
1344         int ret = 0;
1345
1346         lbs_deb_enter(LBS_DEB_MESH);
1347
1348         /* Allocate a virtual mesh device */
1349         if (!(mesh_dev = alloc_netdev(0, "msh%d", ether_setup))) {
1350                 lbs_deb_mesh("init mshX device failed\n");
1351                 ret = -ENOMEM;
1352                 goto done;
1353         }
1354         mesh_dev->priv = priv;
1355         priv->mesh_dev = mesh_dev;
1356
1357         mesh_dev->open = lbs_dev_open;
1358         mesh_dev->hard_start_xmit = lbs_hard_start_xmit;
1359         mesh_dev->stop = lbs_mesh_stop;
1360         mesh_dev->get_stats = lbs_get_stats;
1361         mesh_dev->set_mac_address = lbs_set_mac_address;
1362         mesh_dev->ethtool_ops = &lbs_ethtool_ops;
1363         memcpy(mesh_dev->dev_addr, priv->dev->dev_addr,
1364                         sizeof(priv->dev->dev_addr));
1365
1366         SET_NETDEV_DEV(priv->mesh_dev, priv->dev->dev.parent);
1367
1368 #ifdef  WIRELESS_EXT
1369         mesh_dev->wireless_handlers = (struct iw_handler_def *)&mesh_handler_def;
1370 #endif
1371         mesh_dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1372         mesh_dev->set_multicast_list = lbs_set_multicast_list;
1373         /* Register virtual mesh interface */
1374         ret = register_netdev(mesh_dev);
1375         if (ret) {
1376                 lbs_pr_err("cannot register mshX virtual interface\n");
1377                 goto err_free;
1378         }
1379
1380         ret = sysfs_create_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1381         if (ret)
1382                 goto err_unregister;
1383
1384         lbs_persist_config_init(mesh_dev);
1385
1386         /* Everything successful */
1387         ret = 0;
1388         goto done;
1389
1390 err_unregister:
1391         unregister_netdev(mesh_dev);
1392
1393 err_free:
1394         free_netdev(mesh_dev);
1395
1396 done:
1397         lbs_deb_leave_args(LBS_DEB_MESH, "ret %d", ret);
1398         return ret;
1399 }
1400
1401 static void lbs_remove_mesh(struct lbs_private *priv)
1402 {
1403         struct net_device *mesh_dev;
1404
1405
1406         mesh_dev = priv->mesh_dev;
1407         if (!mesh_dev)
1408                 return;
1409
1410         lbs_deb_enter(LBS_DEB_MESH);
1411         netif_stop_queue(mesh_dev);
1412         netif_carrier_off(mesh_dev);
1413         sysfs_remove_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1414         lbs_persist_config_remove(mesh_dev);
1415         unregister_netdev(mesh_dev);
1416         priv->mesh_dev = NULL;
1417         free_netdev(mesh_dev);
1418         lbs_deb_leave(LBS_DEB_MESH);
1419 }
1420
1421 /**
1422  *  @brief This function finds the CFP in
1423  *  region_cfp_table based on region and band parameter.
1424  *
1425  *  @param region  The region code
1426  *  @param band    The band
1427  *  @param cfp_no  A pointer to CFP number
1428  *  @return        A pointer to CFP
1429  */
1430 struct chan_freq_power *lbs_get_region_cfp_table(u8 region, int *cfp_no)
1431 {
1432         int i, end;
1433
1434         lbs_deb_enter(LBS_DEB_MAIN);
1435
1436         end = ARRAY_SIZE(region_cfp_table);
1437
1438         for (i = 0; i < end ; i++) {
1439                 lbs_deb_main("region_cfp_table[i].region=%d\n",
1440                         region_cfp_table[i].region);
1441                 if (region_cfp_table[i].region == region) {
1442                         *cfp_no = region_cfp_table[i].cfp_no_BG;
1443                         lbs_deb_leave(LBS_DEB_MAIN);
1444                         return region_cfp_table[i].cfp_BG;
1445                 }
1446         }
1447
1448         lbs_deb_leave_args(LBS_DEB_MAIN, "ret NULL");
1449         return NULL;
1450 }
1451
1452 int lbs_set_regiontable(struct lbs_private *priv, u8 region, u8 band)
1453 {
1454         int ret = 0;
1455         int i = 0;
1456
1457         struct chan_freq_power *cfp;
1458         int cfp_no;
1459
1460         lbs_deb_enter(LBS_DEB_MAIN);
1461
1462         memset(priv->region_channel, 0, sizeof(priv->region_channel));
1463
1464         cfp = lbs_get_region_cfp_table(region, &cfp_no);
1465         if (cfp != NULL) {
1466                 priv->region_channel[i].nrcfp = cfp_no;
1467                 priv->region_channel[i].CFP = cfp;
1468         } else {
1469                 lbs_deb_main("wrong region code %#x in band B/G\n",
1470                        region);
1471                 ret = -1;
1472                 goto out;
1473         }
1474         priv->region_channel[i].valid = 1;
1475         priv->region_channel[i].region = region;
1476         priv->region_channel[i].band = band;
1477         i++;
1478 out:
1479         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1480         return ret;
1481 }
1482
1483 void lbs_queue_event(struct lbs_private *priv, u32 event)
1484 {
1485         unsigned long flags;
1486
1487         lbs_deb_enter(LBS_DEB_THREAD);
1488         spin_lock_irqsave(&priv->driver_lock, flags);
1489
1490         if (priv->psstate == PS_STATE_SLEEP)
1491                 priv->psstate = PS_STATE_AWAKE;
1492
1493         __kfifo_put(priv->event_fifo, (unsigned char *) &event, sizeof(u32));
1494
1495         wake_up_interruptible(&priv->waitq);
1496
1497         spin_unlock_irqrestore(&priv->driver_lock, flags);
1498         lbs_deb_leave(LBS_DEB_THREAD);
1499 }
1500 EXPORT_SYMBOL_GPL(lbs_queue_event);
1501
1502 void lbs_notify_command_response(struct lbs_private *priv, u8 resp_idx)
1503 {
1504         lbs_deb_enter(LBS_DEB_THREAD);
1505
1506         if (priv->psstate == PS_STATE_SLEEP)
1507                 priv->psstate = PS_STATE_AWAKE;
1508
1509         /* Swap buffers by flipping the response index */
1510         BUG_ON(resp_idx > 1);
1511         priv->resp_idx = resp_idx;
1512
1513         wake_up_interruptible(&priv->waitq);
1514
1515         lbs_deb_leave(LBS_DEB_THREAD);
1516 }
1517 EXPORT_SYMBOL_GPL(lbs_notify_command_response);
1518
1519 static int __init lbs_init_module(void)
1520 {
1521         lbs_deb_enter(LBS_DEB_MAIN);
1522         memset(&confirm_sleep, 0, sizeof(confirm_sleep));
1523         confirm_sleep.hdr.command = cpu_to_le16(CMD_802_11_PS_MODE);
1524         confirm_sleep.hdr.size = cpu_to_le16(sizeof(confirm_sleep));
1525         confirm_sleep.action = cpu_to_le16(CMD_SUBCMD_SLEEP_CONFIRMED);
1526         lbs_debugfs_init();
1527         lbs_deb_leave(LBS_DEB_MAIN);
1528         return 0;
1529 }
1530
1531 static void __exit lbs_exit_module(void)
1532 {
1533         lbs_deb_enter(LBS_DEB_MAIN);
1534         lbs_debugfs_remove();
1535         lbs_deb_leave(LBS_DEB_MAIN);
1536 }
1537
1538 /*
1539  * rtap interface support fuctions
1540  */
1541
1542 static int lbs_rtap_open(struct net_device *dev)
1543 {
1544         /* Yes, _stop_ the queue. Because we don't support injection */
1545         lbs_deb_enter(LBS_DEB_MAIN);
1546         netif_carrier_off(dev);
1547         netif_stop_queue(dev);
1548         lbs_deb_leave(LBS_DEB_LEAVE);
1549         return 0;
1550 }
1551
1552 static int lbs_rtap_stop(struct net_device *dev)
1553 {
1554         lbs_deb_enter(LBS_DEB_MAIN);
1555         lbs_deb_leave(LBS_DEB_MAIN);
1556         return 0;
1557 }
1558
1559 static int lbs_rtap_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
1560 {
1561         netif_stop_queue(dev);
1562         return NETDEV_TX_BUSY;
1563 }
1564
1565 static struct net_device_stats *lbs_rtap_get_stats(struct net_device *dev)
1566 {
1567         struct lbs_private *priv = dev->priv;
1568         lbs_deb_enter(LBS_DEB_NET);
1569         return &priv->stats;
1570 }
1571
1572
1573 static void lbs_remove_rtap(struct lbs_private *priv)
1574 {
1575         lbs_deb_enter(LBS_DEB_MAIN);
1576         if (priv->rtap_net_dev == NULL)
1577                 goto out;
1578         unregister_netdev(priv->rtap_net_dev);
1579         free_netdev(priv->rtap_net_dev);
1580         priv->rtap_net_dev = NULL;
1581 out:
1582         lbs_deb_leave(LBS_DEB_MAIN);
1583 }
1584
1585 static int lbs_add_rtap(struct lbs_private *priv)
1586 {
1587         int ret = 0;
1588         struct net_device *rtap_dev;
1589
1590         lbs_deb_enter(LBS_DEB_MAIN);
1591         if (priv->rtap_net_dev) {
1592                 ret = -EPERM;
1593                 goto out;
1594         }
1595
1596         rtap_dev = alloc_netdev(0, "rtap%d", ether_setup);
1597         if (rtap_dev == NULL) {
1598                 ret = -ENOMEM;
1599                 goto out;
1600         }
1601
1602         memcpy(rtap_dev->dev_addr, priv->current_addr, ETH_ALEN);
1603         rtap_dev->type = ARPHRD_IEEE80211_RADIOTAP;
1604         rtap_dev->open = lbs_rtap_open;
1605         rtap_dev->stop = lbs_rtap_stop;
1606         rtap_dev->get_stats = lbs_rtap_get_stats;
1607         rtap_dev->hard_start_xmit = lbs_rtap_hard_start_xmit;
1608         rtap_dev->priv = priv;
1609         SET_NETDEV_DEV(rtap_dev, priv->dev->dev.parent);
1610
1611         ret = register_netdev(rtap_dev);
1612         if (ret) {
1613                 free_netdev(rtap_dev);
1614                 goto out;
1615         }
1616         priv->rtap_net_dev = rtap_dev;
1617
1618 out:
1619         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1620         return ret;
1621 }
1622
1623 #ifndef CONFIG_IEEE80211
1624 const char *escape_essid(const char *essid, u8 essid_len)
1625 {
1626         static char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
1627         const char *s = essid;
1628         char *d = escaped;
1629
1630         if (ieee80211_is_empty_essid(essid, essid_len)) {
1631                 memcpy(escaped, "<hidden>", sizeof("<hidden>"));
1632                 return escaped;
1633         }
1634
1635         essid_len = min(essid_len, (u8) IW_ESSID_MAX_SIZE);
1636         while (essid_len--) {
1637                 if (*s == '\0') {
1638                         *d++ = '\\';
1639                         *d++ = '0';
1640                         s++;
1641                 } else {
1642                         *d++ = *s++;
1643                 }
1644         }
1645         *d = '\0';
1646         return escaped;
1647 }
1648 #endif
1649
1650 module_init(lbs_init_module);
1651 module_exit(lbs_exit_module);
1652
1653 MODULE_DESCRIPTION("Libertas WLAN Driver Library");
1654 MODULE_AUTHOR("Marvell International Ltd.");
1655 MODULE_LICENSE("GPL");