Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next-2.6
[linux-2.6] / drivers / net / wireless / libertas / main.c
1 /**
2   * This file contains the major functions in WLAN
3   * driver. It includes init, exit, open, close and main
4   * thread etc..
5   */
6
7 #include <linux/moduleparam.h>
8 #include <linux/delay.h>
9 #include <linux/etherdevice.h>
10 #include <linux/netdevice.h>
11 #include <linux/if_arp.h>
12 #include <linux/kthread.h>
13 #include <linux/kfifo.h>
14 #include <linux/stddef.h>
15
16 #include <net/iw_handler.h>
17 #include <net/ieee80211.h>
18
19 #include "host.h"
20 #include "decl.h"
21 #include "dev.h"
22 #include "wext.h"
23 #include "debugfs.h"
24 #include "scan.h"
25 #include "assoc.h"
26 #include "cmd.h"
27
28 #define DRIVER_RELEASE_VERSION "323.p0"
29 const char lbs_driver_version[] = "COMM-USB8388-" DRIVER_RELEASE_VERSION
30 #ifdef  DEBUG
31     "-dbg"
32 #endif
33     "";
34
35
36 /* Module parameters */
37 unsigned int lbs_debug;
38 EXPORT_SYMBOL_GPL(lbs_debug);
39 module_param_named(libertas_debug, lbs_debug, int, 0644);
40
41
42 /* This global structure is used to send the confirm_sleep command as
43  * fast as possible down to the firmware. */
44 struct cmd_confirm_sleep confirm_sleep;
45
46
47 #define LBS_TX_PWR_DEFAULT              20      /*100mW */
48 #define LBS_TX_PWR_US_DEFAULT           20      /*100mW */
49 #define LBS_TX_PWR_JP_DEFAULT           16      /*50mW */
50 #define LBS_TX_PWR_FR_DEFAULT           20      /*100mW */
51 #define LBS_TX_PWR_EMEA_DEFAULT 20      /*100mW */
52
53 /* Format { channel, frequency (MHz), maxtxpower } */
54 /* band: 'B/G', region: USA FCC/Canada IC */
55 static struct chan_freq_power channel_freq_power_US_BG[] = {
56         {1, 2412, LBS_TX_PWR_US_DEFAULT},
57         {2, 2417, LBS_TX_PWR_US_DEFAULT},
58         {3, 2422, LBS_TX_PWR_US_DEFAULT},
59         {4, 2427, LBS_TX_PWR_US_DEFAULT},
60         {5, 2432, LBS_TX_PWR_US_DEFAULT},
61         {6, 2437, LBS_TX_PWR_US_DEFAULT},
62         {7, 2442, LBS_TX_PWR_US_DEFAULT},
63         {8, 2447, LBS_TX_PWR_US_DEFAULT},
64         {9, 2452, LBS_TX_PWR_US_DEFAULT},
65         {10, 2457, LBS_TX_PWR_US_DEFAULT},
66         {11, 2462, LBS_TX_PWR_US_DEFAULT}
67 };
68
69 /* band: 'B/G', region: Europe ETSI */
70 static struct chan_freq_power channel_freq_power_EU_BG[] = {
71         {1, 2412, LBS_TX_PWR_EMEA_DEFAULT},
72         {2, 2417, LBS_TX_PWR_EMEA_DEFAULT},
73         {3, 2422, LBS_TX_PWR_EMEA_DEFAULT},
74         {4, 2427, LBS_TX_PWR_EMEA_DEFAULT},
75         {5, 2432, LBS_TX_PWR_EMEA_DEFAULT},
76         {6, 2437, LBS_TX_PWR_EMEA_DEFAULT},
77         {7, 2442, LBS_TX_PWR_EMEA_DEFAULT},
78         {8, 2447, LBS_TX_PWR_EMEA_DEFAULT},
79         {9, 2452, LBS_TX_PWR_EMEA_DEFAULT},
80         {10, 2457, LBS_TX_PWR_EMEA_DEFAULT},
81         {11, 2462, LBS_TX_PWR_EMEA_DEFAULT},
82         {12, 2467, LBS_TX_PWR_EMEA_DEFAULT},
83         {13, 2472, LBS_TX_PWR_EMEA_DEFAULT}
84 };
85
86 /* band: 'B/G', region: Spain */
87 static struct chan_freq_power channel_freq_power_SPN_BG[] = {
88         {10, 2457, LBS_TX_PWR_DEFAULT},
89         {11, 2462, LBS_TX_PWR_DEFAULT}
90 };
91
92 /* band: 'B/G', region: France */
93 static struct chan_freq_power channel_freq_power_FR_BG[] = {
94         {10, 2457, LBS_TX_PWR_FR_DEFAULT},
95         {11, 2462, LBS_TX_PWR_FR_DEFAULT},
96         {12, 2467, LBS_TX_PWR_FR_DEFAULT},
97         {13, 2472, LBS_TX_PWR_FR_DEFAULT}
98 };
99
100 /* band: 'B/G', region: Japan */
101 static struct chan_freq_power channel_freq_power_JPN_BG[] = {
102         {1, 2412, LBS_TX_PWR_JP_DEFAULT},
103         {2, 2417, LBS_TX_PWR_JP_DEFAULT},
104         {3, 2422, LBS_TX_PWR_JP_DEFAULT},
105         {4, 2427, LBS_TX_PWR_JP_DEFAULT},
106         {5, 2432, LBS_TX_PWR_JP_DEFAULT},
107         {6, 2437, LBS_TX_PWR_JP_DEFAULT},
108         {7, 2442, LBS_TX_PWR_JP_DEFAULT},
109         {8, 2447, LBS_TX_PWR_JP_DEFAULT},
110         {9, 2452, LBS_TX_PWR_JP_DEFAULT},
111         {10, 2457, LBS_TX_PWR_JP_DEFAULT},
112         {11, 2462, LBS_TX_PWR_JP_DEFAULT},
113         {12, 2467, LBS_TX_PWR_JP_DEFAULT},
114         {13, 2472, LBS_TX_PWR_JP_DEFAULT},
115         {14, 2484, LBS_TX_PWR_JP_DEFAULT}
116 };
117
118 /**
119  * the structure for channel, frequency and power
120  */
121 struct region_cfp_table {
122         u8 region;
123         struct chan_freq_power *cfp_BG;
124         int cfp_no_BG;
125 };
126
127 /**
128  * the structure for the mapping between region and CFP
129  */
130 static struct region_cfp_table region_cfp_table[] = {
131         {0x10,                  /*US FCC */
132          channel_freq_power_US_BG,
133          ARRAY_SIZE(channel_freq_power_US_BG),
134          }
135         ,
136         {0x20,                  /*CANADA IC */
137          channel_freq_power_US_BG,
138          ARRAY_SIZE(channel_freq_power_US_BG),
139          }
140         ,
141         {0x30, /*EU*/ channel_freq_power_EU_BG,
142          ARRAY_SIZE(channel_freq_power_EU_BG),
143          }
144         ,
145         {0x31, /*SPAIN*/ channel_freq_power_SPN_BG,
146          ARRAY_SIZE(channel_freq_power_SPN_BG),
147          }
148         ,
149         {0x32, /*FRANCE*/ channel_freq_power_FR_BG,
150          ARRAY_SIZE(channel_freq_power_FR_BG),
151          }
152         ,
153         {0x40, /*JAPAN*/ channel_freq_power_JPN_BG,
154          ARRAY_SIZE(channel_freq_power_JPN_BG),
155          }
156         ,
157 /*Add new region here */
158 };
159
160 /**
161  * the table to keep region code
162  */
163 u16 lbs_region_code_to_index[MRVDRV_MAX_REGION_CODE] =
164     { 0x10, 0x20, 0x30, 0x31, 0x32, 0x40 };
165
166 /**
167  * 802.11b/g supported bitrates (in 500Kb/s units)
168  */
169 u8 lbs_bg_rates[MAX_RATES] =
170     { 0x02, 0x04, 0x0b, 0x16, 0x0c, 0x12, 0x18, 0x24, 0x30, 0x48, 0x60, 0x6c,
171 0x00, 0x00 };
172
173 /**
174  * FW rate table.  FW refers to rates by their index in this table, not by the
175  * rate value itself.  Values of 0x00 are
176  * reserved positions.
177  */
178 static u8 fw_data_rates[MAX_RATES] =
179     { 0x02, 0x04, 0x0B, 0x16, 0x00, 0x0C, 0x12,
180       0x18, 0x24, 0x30, 0x48, 0x60, 0x6C, 0x00
181 };
182
183 /**
184  *  @brief use index to get the data rate
185  *
186  *  @param idx                The index of data rate
187  *  @return                     data rate or 0
188  */
189 u32 lbs_fw_index_to_data_rate(u8 idx)
190 {
191         if (idx >= sizeof(fw_data_rates))
192                 idx = 0;
193         return fw_data_rates[idx];
194 }
195
196 /**
197  *  @brief use rate to get the index
198  *
199  *  @param rate                 data rate
200  *  @return                     index or 0
201  */
202 u8 lbs_data_rate_to_fw_index(u32 rate)
203 {
204         u8 i;
205
206         if (!rate)
207                 return 0;
208
209         for (i = 0; i < sizeof(fw_data_rates); i++) {
210                 if (rate == fw_data_rates[i])
211                         return i;
212         }
213         return 0;
214 }
215
216 /**
217  * Attributes exported through sysfs
218  */
219
220 /**
221  * @brief Get function for sysfs attribute anycast_mask
222  */
223 static ssize_t lbs_anycast_get(struct device *dev,
224                 struct device_attribute *attr, char * buf)
225 {
226         struct lbs_private *priv = to_net_dev(dev)->priv;
227         struct cmd_ds_mesh_access mesh_access;
228         int ret;
229
230         memset(&mesh_access, 0, sizeof(mesh_access));
231
232         ret = lbs_mesh_access(priv, CMD_ACT_MESH_GET_ANYCAST, &mesh_access);
233         if (ret)
234                 return ret;
235
236         return snprintf(buf, 12, "0x%X\n", le32_to_cpu(mesh_access.data[0]));
237 }
238
239 /**
240  * @brief Set function for sysfs attribute anycast_mask
241  */
242 static ssize_t lbs_anycast_set(struct device *dev,
243                 struct device_attribute *attr, const char * buf, size_t count)
244 {
245         struct lbs_private *priv = to_net_dev(dev)->priv;
246         struct cmd_ds_mesh_access mesh_access;
247         uint32_t datum;
248         int ret;
249
250         memset(&mesh_access, 0, sizeof(mesh_access));
251         sscanf(buf, "%x", &datum);
252         mesh_access.data[0] = cpu_to_le32(datum);
253
254         ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_ANYCAST, &mesh_access);
255         if (ret)
256                 return ret;
257
258         return strlen(buf);
259 }
260
261 static int lbs_add_rtap(struct lbs_private *priv);
262 static void lbs_remove_rtap(struct lbs_private *priv);
263 static int lbs_add_mesh(struct lbs_private *priv);
264 static void lbs_remove_mesh(struct lbs_private *priv);
265
266
267 /**
268  * Get function for sysfs attribute rtap
269  */
270 static ssize_t lbs_rtap_get(struct device *dev,
271                 struct device_attribute *attr, char * buf)
272 {
273         struct lbs_private *priv = to_net_dev(dev)->priv;
274         return snprintf(buf, 5, "0x%X\n", priv->monitormode);
275 }
276
277 /**
278  *  Set function for sysfs attribute rtap
279  */
280 static ssize_t lbs_rtap_set(struct device *dev,
281                 struct device_attribute *attr, const char * buf, size_t count)
282 {
283         int monitor_mode;
284         struct lbs_private *priv = to_net_dev(dev)->priv;
285
286         sscanf(buf, "%x", &monitor_mode);
287         if (monitor_mode) {
288                 if (priv->monitormode == monitor_mode)
289                         return strlen(buf);
290                 if (!priv->monitormode) {
291                         if (priv->infra_open || priv->mesh_open)
292                                 return -EBUSY;
293                         if (priv->mode == IW_MODE_INFRA)
294                                 lbs_cmd_80211_deauthenticate(priv,
295                                                              priv->curbssparams.bssid,
296                                                              WLAN_REASON_DEAUTH_LEAVING);
297                         else if (priv->mode == IW_MODE_ADHOC)
298                                 lbs_adhoc_stop(priv);
299                         lbs_add_rtap(priv);
300                 }
301                 priv->monitormode = monitor_mode;
302         } else {
303                 if (!priv->monitormode)
304                         return strlen(buf);
305                 priv->monitormode = 0;
306                 lbs_remove_rtap(priv);
307
308                 if (priv->currenttxskb) {
309                         dev_kfree_skb_any(priv->currenttxskb);
310                         priv->currenttxskb = NULL;
311                 }
312
313                 /* Wake queues, command thread, etc. */
314                 lbs_host_to_card_done(priv);
315         }
316
317         lbs_prepare_and_send_command(priv,
318                         CMD_802_11_MONITOR_MODE, CMD_ACT_SET,
319                         CMD_OPTION_WAITFORRSP, 0, &priv->monitormode);
320         return strlen(buf);
321 }
322
323 /**
324  * lbs_rtap attribute to be exported per ethX interface
325  * through sysfs (/sys/class/net/ethX/lbs_rtap)
326  */
327 static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get, lbs_rtap_set );
328
329 /**
330  * Get function for sysfs attribute mesh
331  */
332 static ssize_t lbs_mesh_get(struct device *dev,
333                 struct device_attribute *attr, char * buf)
334 {
335         struct lbs_private *priv = to_net_dev(dev)->priv;
336         return snprintf(buf, 5, "0x%X\n", !!priv->mesh_dev);
337 }
338
339 /**
340  *  Set function for sysfs attribute mesh
341  */
342 static ssize_t lbs_mesh_set(struct device *dev,
343                 struct device_attribute *attr, const char * buf, size_t count)
344 {
345         struct lbs_private *priv = to_net_dev(dev)->priv;
346         int enable;
347         int ret, action = CMD_ACT_MESH_CONFIG_STOP;
348
349         sscanf(buf, "%x", &enable);
350         enable = !!enable;
351         if (enable == !!priv->mesh_dev)
352                 return count;
353         if (enable)
354                 action = CMD_ACT_MESH_CONFIG_START;
355         ret = lbs_mesh_config(priv, action, priv->curbssparams.channel);
356         if (ret)
357                 return ret;
358
359         if (enable)
360                 lbs_add_mesh(priv);
361         else
362                 lbs_remove_mesh(priv);
363
364         return count;
365 }
366
367 /**
368  * lbs_mesh attribute to be exported per ethX interface
369  * through sysfs (/sys/class/net/ethX/lbs_mesh)
370  */
371 static DEVICE_ATTR(lbs_mesh, 0644, lbs_mesh_get, lbs_mesh_set);
372
373 /**
374  * anycast_mask attribute to be exported per mshX interface
375  * through sysfs (/sys/class/net/mshX/anycast_mask)
376  */
377 static DEVICE_ATTR(anycast_mask, 0644, lbs_anycast_get, lbs_anycast_set);
378
379 static struct attribute *lbs_mesh_sysfs_entries[] = {
380         &dev_attr_anycast_mask.attr,
381         NULL,
382 };
383
384 static struct attribute_group lbs_mesh_attr_group = {
385         .attrs = lbs_mesh_sysfs_entries,
386 };
387
388 /**
389  *  @brief This function opens the ethX or mshX interface
390  *
391  *  @param dev     A pointer to net_device structure
392  *  @return        0 or -EBUSY if monitor mode active
393  */
394 static int lbs_dev_open(struct net_device *dev)
395 {
396         struct lbs_private *priv = (struct lbs_private *) dev->priv ;
397         int ret = 0;
398
399         lbs_deb_enter(LBS_DEB_NET);
400
401         spin_lock_irq(&priv->driver_lock);
402
403         if (priv->monitormode) {
404                 ret = -EBUSY;
405                 goto out;
406         }
407
408         if (dev == priv->mesh_dev) {
409                 priv->mesh_open = 1;
410                 priv->mesh_connect_status = LBS_CONNECTED;
411                 netif_carrier_on(dev);
412         } else {
413                 priv->infra_open = 1;
414
415                 if (priv->connect_status == LBS_CONNECTED)
416                         netif_carrier_on(dev);
417                 else
418                         netif_carrier_off(dev);
419         }
420
421         if (!priv->tx_pending_len)
422                 netif_wake_queue(dev);
423  out:
424
425         spin_unlock_irq(&priv->driver_lock);
426         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
427         return ret;
428 }
429
430 /**
431  *  @brief This function closes the mshX interface
432  *
433  *  @param dev     A pointer to net_device structure
434  *  @return        0
435  */
436 static int lbs_mesh_stop(struct net_device *dev)
437 {
438         struct lbs_private *priv = (struct lbs_private *) (dev->priv);
439
440         lbs_deb_enter(LBS_DEB_MESH);
441         spin_lock_irq(&priv->driver_lock);
442
443         priv->mesh_open = 0;
444         priv->mesh_connect_status = LBS_DISCONNECTED;
445
446         netif_stop_queue(dev);
447         netif_carrier_off(dev);
448
449         spin_unlock_irq(&priv->driver_lock);
450
451         schedule_work(&priv->mcast_work);
452
453         lbs_deb_leave(LBS_DEB_MESH);
454         return 0;
455 }
456
457 /**
458  *  @brief This function closes the ethX interface
459  *
460  *  @param dev     A pointer to net_device structure
461  *  @return        0
462  */
463 static int lbs_eth_stop(struct net_device *dev)
464 {
465         struct lbs_private *priv = (struct lbs_private *) dev->priv;
466
467         lbs_deb_enter(LBS_DEB_NET);
468
469         spin_lock_irq(&priv->driver_lock);
470         priv->infra_open = 0;
471         netif_stop_queue(dev);
472         spin_unlock_irq(&priv->driver_lock);
473
474         schedule_work(&priv->mcast_work);
475
476         lbs_deb_leave(LBS_DEB_NET);
477         return 0;
478 }
479
480 static void lbs_tx_timeout(struct net_device *dev)
481 {
482         struct lbs_private *priv = (struct lbs_private *) dev->priv;
483
484         lbs_deb_enter(LBS_DEB_TX);
485
486         lbs_pr_err("tx watch dog timeout\n");
487
488         dev->trans_start = jiffies;
489
490         if (priv->currenttxskb)
491                 lbs_send_tx_feedback(priv, 0);
492
493         /* XX: Shouldn't we also call into the hw-specific driver
494            to kick it somehow? */
495         lbs_host_to_card_done(priv);
496
497         /* More often than not, this actually happens because the
498            firmware has crapped itself -- rather than just a very
499            busy medium. So send a harmless command, and if/when
500            _that_ times out, we'll kick it in the head. */
501         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
502                                      0, 0, NULL);
503
504         lbs_deb_leave(LBS_DEB_TX);
505 }
506
507 void lbs_host_to_card_done(struct lbs_private *priv)
508 {
509         unsigned long flags;
510
511         lbs_deb_enter(LBS_DEB_THREAD);
512
513         spin_lock_irqsave(&priv->driver_lock, flags);
514
515         priv->dnld_sent = DNLD_RES_RECEIVED;
516
517         /* Wake main thread if commands are pending */
518         if (!priv->cur_cmd || priv->tx_pending_len > 0)
519                 wake_up_interruptible(&priv->waitq);
520
521         spin_unlock_irqrestore(&priv->driver_lock, flags);
522         lbs_deb_leave(LBS_DEB_THREAD);
523 }
524 EXPORT_SYMBOL_GPL(lbs_host_to_card_done);
525
526 /**
527  *  @brief This function returns the network statistics
528  *
529  *  @param dev     A pointer to struct lbs_private structure
530  *  @return        A pointer to net_device_stats structure
531  */
532 static struct net_device_stats *lbs_get_stats(struct net_device *dev)
533 {
534         struct lbs_private *priv = (struct lbs_private *) dev->priv;
535
536         lbs_deb_enter(LBS_DEB_NET);
537         return &priv->stats;
538 }
539
540 static int lbs_set_mac_address(struct net_device *dev, void *addr)
541 {
542         int ret = 0;
543         struct lbs_private *priv = (struct lbs_private *) dev->priv;
544         struct sockaddr *phwaddr = addr;
545         struct cmd_ds_802_11_mac_address cmd;
546
547         lbs_deb_enter(LBS_DEB_NET);
548
549         /* In case it was called from the mesh device */
550         dev = priv->dev;
551
552         cmd.hdr.size = cpu_to_le16(sizeof(cmd));
553         cmd.action = cpu_to_le16(CMD_ACT_SET);
554         memcpy(cmd.macadd, phwaddr->sa_data, ETH_ALEN);
555
556         ret = lbs_cmd_with_response(priv, CMD_802_11_MAC_ADDRESS, &cmd);
557         if (ret) {
558                 lbs_deb_net("set MAC address failed\n");
559                 goto done;
560         }
561
562         memcpy(priv->current_addr, phwaddr->sa_data, ETH_ALEN);
563         memcpy(dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
564         if (priv->mesh_dev)
565                 memcpy(priv->mesh_dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
566
567 done:
568         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
569         return ret;
570 }
571
572
573 static inline int mac_in_list(unsigned char *list, int list_len,
574                               unsigned char *mac)
575 {
576         while (list_len) {
577                 if (!memcmp(list, mac, ETH_ALEN))
578                         return 1;
579                 list += ETH_ALEN;
580                 list_len--;
581         }
582         return 0;
583 }
584
585
586 static int lbs_add_mcast_addrs(struct cmd_ds_mac_multicast_adr *cmd,
587                                struct net_device *dev, int nr_addrs)
588 {
589         int i = nr_addrs;
590         struct dev_mc_list *mc_list;
591         DECLARE_MAC_BUF(mac);
592
593         if ((dev->flags & (IFF_UP|IFF_MULTICAST)) != (IFF_UP|IFF_MULTICAST))
594                 return nr_addrs;
595
596         netif_addr_lock_bh(dev);
597         for (mc_list = dev->mc_list; mc_list; mc_list = mc_list->next) {
598                 if (mac_in_list(cmd->maclist, nr_addrs, mc_list->dmi_addr)) {
599                         lbs_deb_net("mcast address %s:%s skipped\n", dev->name,
600                                     print_mac(mac, mc_list->dmi_addr));
601                         continue;
602                 }
603
604                 if (i == MRVDRV_MAX_MULTICAST_LIST_SIZE)
605                         break;
606                 memcpy(&cmd->maclist[6*i], mc_list->dmi_addr, ETH_ALEN);
607                 lbs_deb_net("mcast address %s:%s added to filter\n", dev->name,
608                             print_mac(mac, mc_list->dmi_addr));
609                 i++;
610         }
611         netif_addr_unlock_bh(dev);
612         if (mc_list)
613                 return -EOVERFLOW;
614
615         return i;
616 }
617
618 static void lbs_set_mcast_worker(struct work_struct *work)
619 {
620         struct lbs_private *priv = container_of(work, struct lbs_private, mcast_work);
621         struct cmd_ds_mac_multicast_adr mcast_cmd;
622         int dev_flags;
623         int nr_addrs;
624         int old_mac_control = priv->mac_control;
625
626         lbs_deb_enter(LBS_DEB_NET);
627
628         dev_flags = priv->dev->flags;
629         if (priv->mesh_dev)
630                 dev_flags |= priv->mesh_dev->flags;
631
632         if (dev_flags & IFF_PROMISC) {
633                 priv->mac_control |= CMD_ACT_MAC_PROMISCUOUS_ENABLE;
634                 priv->mac_control &= ~(CMD_ACT_MAC_ALL_MULTICAST_ENABLE |
635                                        CMD_ACT_MAC_MULTICAST_ENABLE);
636                 goto out_set_mac_control;
637         } else if (dev_flags & IFF_ALLMULTI) {
638         do_allmulti:
639                 priv->mac_control |= CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
640                 priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
641                                        CMD_ACT_MAC_MULTICAST_ENABLE);
642                 goto out_set_mac_control;
643         }
644
645         /* Once for priv->dev, again for priv->mesh_dev if it exists */
646         nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->dev, 0);
647         if (nr_addrs >= 0 && priv->mesh_dev)
648                 nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->mesh_dev, nr_addrs);
649         if (nr_addrs < 0)
650                 goto do_allmulti;
651
652         if (nr_addrs) {
653                 int size = offsetof(struct cmd_ds_mac_multicast_adr,
654                                     maclist[6*nr_addrs]);
655
656                 mcast_cmd.action = cpu_to_le16(CMD_ACT_SET);
657                 mcast_cmd.hdr.size = cpu_to_le16(size);
658                 mcast_cmd.nr_of_adrs = cpu_to_le16(nr_addrs);
659
660                 lbs_cmd_async(priv, CMD_MAC_MULTICAST_ADR, &mcast_cmd.hdr, size);
661
662                 priv->mac_control |= CMD_ACT_MAC_MULTICAST_ENABLE;
663         } else
664                 priv->mac_control &= ~CMD_ACT_MAC_MULTICAST_ENABLE;
665
666         priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
667                                CMD_ACT_MAC_ALL_MULTICAST_ENABLE);
668  out_set_mac_control:
669         if (priv->mac_control != old_mac_control)
670                 lbs_set_mac_control(priv);
671
672         lbs_deb_leave(LBS_DEB_NET);
673 }
674
675 static void lbs_set_multicast_list(struct net_device *dev)
676 {
677         struct lbs_private *priv = dev->priv;
678
679         schedule_work(&priv->mcast_work);
680 }
681
682 /**
683  *  @brief This function handles the major jobs in the LBS driver.
684  *  It handles all events generated by firmware, RX data received
685  *  from firmware and TX data sent from kernel.
686  *
687  *  @param data    A pointer to lbs_thread structure
688  *  @return        0
689  */
690 static int lbs_thread(void *data)
691 {
692         struct net_device *dev = data;
693         struct lbs_private *priv = dev->priv;
694         wait_queue_t wait;
695
696         lbs_deb_enter(LBS_DEB_THREAD);
697
698         init_waitqueue_entry(&wait, current);
699
700         for (;;) {
701                 int shouldsleep;
702                 u8 resp_idx;
703
704                 lbs_deb_thread("1: currenttxskb %p, dnld_sent %d\n",
705                                 priv->currenttxskb, priv->dnld_sent);
706
707                 add_wait_queue(&priv->waitq, &wait);
708                 set_current_state(TASK_INTERRUPTIBLE);
709                 spin_lock_irq(&priv->driver_lock);
710
711                 if (kthread_should_stop())
712                         shouldsleep = 0;        /* Bye */
713                 else if (priv->surpriseremoved)
714                         shouldsleep = 1;        /* We need to wait until we're _told_ to die */
715                 else if (priv->psstate == PS_STATE_SLEEP)
716                         shouldsleep = 1;        /* Sleep mode. Nothing we can do till it wakes */
717                 else if (priv->cmd_timed_out)
718                         shouldsleep = 0;        /* Command timed out. Recover */
719                 else if (!priv->fw_ready)
720                         shouldsleep = 1;        /* Firmware not ready. We're waiting for it */
721                 else if (priv->dnld_sent)
722                         shouldsleep = 1;        /* Something is en route to the device already */
723                 else if (priv->tx_pending_len > 0)
724                         shouldsleep = 0;        /* We've a packet to send */
725                 else if (priv->resp_len[priv->resp_idx])
726                         shouldsleep = 0;        /* We have a command response */
727                 else if (priv->cur_cmd)
728                         shouldsleep = 1;        /* Can't send a command; one already running */
729                 else if (!list_empty(&priv->cmdpendingq))
730                         shouldsleep = 0;        /* We have a command to send */
731                 else if (__kfifo_len(priv->event_fifo))
732                         shouldsleep = 0;        /* We have an event to process */
733                 else
734                         shouldsleep = 1;        /* No command */
735
736                 if (shouldsleep) {
737                         lbs_deb_thread("sleeping, connect_status %d, "
738                                 "psmode %d, psstate %d\n",
739                                 priv->connect_status,
740                                 priv->psmode, priv->psstate);
741                         spin_unlock_irq(&priv->driver_lock);
742                         schedule();
743                 } else
744                         spin_unlock_irq(&priv->driver_lock);
745
746                 lbs_deb_thread("2: currenttxskb %p, dnld_send %d\n",
747                                priv->currenttxskb, priv->dnld_sent);
748
749                 set_current_state(TASK_RUNNING);
750                 remove_wait_queue(&priv->waitq, &wait);
751
752                 lbs_deb_thread("3: currenttxskb %p, dnld_sent %d\n",
753                                priv->currenttxskb, priv->dnld_sent);
754
755                 if (kthread_should_stop()) {
756                         lbs_deb_thread("break from main thread\n");
757                         break;
758                 }
759
760                 if (priv->surpriseremoved) {
761                         lbs_deb_thread("adapter removed; waiting to die...\n");
762                         continue;
763                 }
764
765                 lbs_deb_thread("4: currenttxskb %p, dnld_sent %d\n",
766                        priv->currenttxskb, priv->dnld_sent);
767
768                 /* Process any pending command response */
769                 spin_lock_irq(&priv->driver_lock);
770                 resp_idx = priv->resp_idx;
771                 if (priv->resp_len[resp_idx]) {
772                         spin_unlock_irq(&priv->driver_lock);
773                         lbs_process_command_response(priv,
774                                 priv->resp_buf[resp_idx],
775                                 priv->resp_len[resp_idx]);
776                         spin_lock_irq(&priv->driver_lock);
777                         priv->resp_len[resp_idx] = 0;
778                 }
779                 spin_unlock_irq(&priv->driver_lock);
780
781                 /* command timeout stuff */
782                 if (priv->cmd_timed_out && priv->cur_cmd) {
783                         struct cmd_ctrl_node *cmdnode = priv->cur_cmd;
784
785                         if (++priv->nr_retries > 3) {
786                                 lbs_pr_info("Excessive timeouts submitting "
787                                         "command 0x%04x\n",
788                                         le16_to_cpu(cmdnode->cmdbuf->command));
789                                 lbs_complete_command(priv, cmdnode, -ETIMEDOUT);
790                                 priv->nr_retries = 0;
791                                 if (priv->reset_card)
792                                         priv->reset_card(priv);
793                         } else {
794                                 priv->cur_cmd = NULL;
795                                 priv->dnld_sent = DNLD_RES_RECEIVED;
796                                 lbs_pr_info("requeueing command 0x%04x due "
797                                         "to timeout (#%d)\n",
798                                         le16_to_cpu(cmdnode->cmdbuf->command),
799                                         priv->nr_retries);
800
801                                 /* Stick it back at the _top_ of the pending queue
802                                    for immediate resubmission */
803                                 list_add(&cmdnode->list, &priv->cmdpendingq);
804                         }
805                 }
806                 priv->cmd_timed_out = 0;
807
808                 /* Process hardware events, e.g. card removed, link lost */
809                 spin_lock_irq(&priv->driver_lock);
810                 while (__kfifo_len(priv->event_fifo)) {
811                         u32 event;
812
813                         __kfifo_get(priv->event_fifo, (unsigned char *) &event,
814                                 sizeof(event));
815                         spin_unlock_irq(&priv->driver_lock);
816                         lbs_process_event(priv, event);
817                         spin_lock_irq(&priv->driver_lock);
818                 }
819                 spin_unlock_irq(&priv->driver_lock);
820
821                 if (!priv->fw_ready)
822                         continue;
823
824                 /* Check if we need to confirm Sleep Request received previously */
825                 if (priv->psstate == PS_STATE_PRE_SLEEP &&
826                     !priv->dnld_sent && !priv->cur_cmd) {
827                         if (priv->connect_status == LBS_CONNECTED) {
828                                 lbs_deb_thread("pre-sleep, currenttxskb %p, "
829                                         "dnld_sent %d, cur_cmd %p\n",
830                                         priv->currenttxskb, priv->dnld_sent,
831                                         priv->cur_cmd);
832
833                                 lbs_ps_confirm_sleep(priv);
834                         } else {
835                                 /* workaround for firmware sending
836                                  * deauth/linkloss event immediately
837                                  * after sleep request; remove this
838                                  * after firmware fixes it
839                                  */
840                                 priv->psstate = PS_STATE_AWAKE;
841                                 lbs_pr_alert("ignore PS_SleepConfirm in "
842                                         "non-connected state\n");
843                         }
844                 }
845
846                 /* The PS state is changed during processing of Sleep Request
847                  * event above
848                  */
849                 if ((priv->psstate == PS_STATE_SLEEP) ||
850                     (priv->psstate == PS_STATE_PRE_SLEEP))
851                         continue;
852
853                 /* Execute the next command */
854                 if (!priv->dnld_sent && !priv->cur_cmd)
855                         lbs_execute_next_command(priv);
856
857                 /* Wake-up command waiters which can't sleep in
858                  * lbs_prepare_and_send_command
859                  */
860                 if (!list_empty(&priv->cmdpendingq))
861                         wake_up_all(&priv->cmd_pending);
862
863                 spin_lock_irq(&priv->driver_lock);
864                 if (!priv->dnld_sent && priv->tx_pending_len > 0) {
865                         int ret = priv->hw_host_to_card(priv, MVMS_DAT,
866                                                         priv->tx_pending_buf,
867                                                         priv->tx_pending_len);
868                         if (ret) {
869                                 lbs_deb_tx("host_to_card failed %d\n", ret);
870                                 priv->dnld_sent = DNLD_RES_RECEIVED;
871                         }
872                         priv->tx_pending_len = 0;
873                         if (!priv->currenttxskb) {
874                                 /* We can wake the queues immediately if we aren't
875                                    waiting for TX feedback */
876                                 if (priv->connect_status == LBS_CONNECTED)
877                                         netif_wake_queue(priv->dev);
878                                 if (priv->mesh_dev &&
879                                     priv->mesh_connect_status == LBS_CONNECTED)
880                                         netif_wake_queue(priv->mesh_dev);
881                         }
882                 }
883                 spin_unlock_irq(&priv->driver_lock);
884         }
885
886         del_timer(&priv->command_timer);
887         wake_up_all(&priv->cmd_pending);
888
889         lbs_deb_leave(LBS_DEB_THREAD);
890         return 0;
891 }
892
893 static int lbs_suspend_callback(struct lbs_private *priv, unsigned long dummy,
894                                 struct cmd_header *cmd)
895 {
896         lbs_deb_enter(LBS_DEB_FW);
897
898         netif_device_detach(priv->dev);
899         if (priv->mesh_dev)
900                 netif_device_detach(priv->mesh_dev);
901
902         priv->fw_ready = 0;
903         lbs_deb_leave(LBS_DEB_FW);
904         return 0;
905 }
906
907 int lbs_suspend(struct lbs_private *priv)
908 {
909         struct cmd_header cmd;
910         int ret;
911
912         lbs_deb_enter(LBS_DEB_FW);
913
914         if (priv->wol_criteria == 0xffffffff) {
915                 lbs_pr_info("Suspend attempt without configuring wake params!\n");
916                 return -EINVAL;
917         }
918
919         memset(&cmd, 0, sizeof(cmd));
920
921         ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_ACTIVATE, &cmd,
922                         sizeof(cmd), lbs_suspend_callback, 0);
923         if (ret)
924                 lbs_pr_info("HOST_SLEEP_ACTIVATE failed: %d\n", ret);
925
926         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
927         return ret;
928 }
929 EXPORT_SYMBOL_GPL(lbs_suspend);
930
931 void lbs_resume(struct lbs_private *priv)
932 {
933         lbs_deb_enter(LBS_DEB_FW);
934
935         priv->fw_ready = 1;
936
937         /* Firmware doesn't seem to give us RX packets any more
938            until we send it some command. Might as well update */
939         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
940                                      0, 0, NULL);
941
942         netif_device_attach(priv->dev);
943         if (priv->mesh_dev)
944                 netif_device_attach(priv->mesh_dev);
945
946         lbs_deb_leave(LBS_DEB_FW);
947 }
948 EXPORT_SYMBOL_GPL(lbs_resume);
949
950 /**
951  *  @brief This function downloads firmware image, gets
952  *  HW spec from firmware and set basic parameters to
953  *  firmware.
954  *
955  *  @param priv    A pointer to struct lbs_private structure
956  *  @return        0 or -1
957  */
958 static int lbs_setup_firmware(struct lbs_private *priv)
959 {
960         int ret = -1;
961         s16 curlevel = 0, minlevel = 0, maxlevel = 0;
962
963         lbs_deb_enter(LBS_DEB_FW);
964
965         /* Read MAC address from firmware */
966         memset(priv->current_addr, 0xff, ETH_ALEN);
967         ret = lbs_update_hw_spec(priv);
968         if (ret)
969                 goto done;
970
971         /* Read power levels if available */
972         ret = lbs_get_tx_power(priv, &curlevel, &minlevel, &maxlevel);
973         if (ret == 0) {
974                 priv->txpower_cur = curlevel;
975                 priv->txpower_min = minlevel;
976                 priv->txpower_max = maxlevel;
977         }
978
979         lbs_set_mac_control(priv);
980 done:
981         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
982         return ret;
983 }
984
985 /**
986  *  This function handles the timeout of command sending.
987  *  It will re-send the same command again.
988  */
989 static void command_timer_fn(unsigned long data)
990 {
991         struct lbs_private *priv = (struct lbs_private *)data;
992         unsigned long flags;
993
994         lbs_deb_enter(LBS_DEB_CMD);
995         spin_lock_irqsave(&priv->driver_lock, flags);
996
997         if (!priv->cur_cmd)
998                 goto out;
999
1000         lbs_pr_info("command 0x%04x timed out\n",
1001                 le16_to_cpu(priv->cur_cmd->cmdbuf->command));
1002
1003         priv->cmd_timed_out = 1;
1004         wake_up_interruptible(&priv->waitq);
1005 out:
1006         spin_unlock_irqrestore(&priv->driver_lock, flags);
1007         lbs_deb_leave(LBS_DEB_CMD);
1008 }
1009
1010 static void lbs_sync_channel_worker(struct work_struct *work)
1011 {
1012         struct lbs_private *priv = container_of(work, struct lbs_private,
1013                 sync_channel);
1014
1015         lbs_deb_enter(LBS_DEB_MAIN);
1016         if (lbs_update_channel(priv))
1017                 lbs_pr_info("Channel synchronization failed.");
1018         lbs_deb_leave(LBS_DEB_MAIN);
1019 }
1020
1021
1022 static int lbs_init_adapter(struct lbs_private *priv)
1023 {
1024         size_t bufsize;
1025         int i, ret = 0;
1026
1027         lbs_deb_enter(LBS_DEB_MAIN);
1028
1029         /* Allocate buffer to store the BSSID list */
1030         bufsize = MAX_NETWORK_COUNT * sizeof(struct bss_descriptor);
1031         priv->networks = kzalloc(bufsize, GFP_KERNEL);
1032         if (!priv->networks) {
1033                 lbs_pr_err("Out of memory allocating beacons\n");
1034                 ret = -1;
1035                 goto out;
1036         }
1037
1038         /* Initialize scan result lists */
1039         INIT_LIST_HEAD(&priv->network_free_list);
1040         INIT_LIST_HEAD(&priv->network_list);
1041         for (i = 0; i < MAX_NETWORK_COUNT; i++) {
1042                 list_add_tail(&priv->networks[i].list,
1043                               &priv->network_free_list);
1044         }
1045
1046         memset(priv->current_addr, 0xff, ETH_ALEN);
1047
1048         priv->connect_status = LBS_DISCONNECTED;
1049         priv->mesh_connect_status = LBS_DISCONNECTED;
1050         priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
1051         priv->mode = IW_MODE_INFRA;
1052         priv->curbssparams.channel = DEFAULT_AD_HOC_CHANNEL;
1053         priv->mac_control = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
1054         priv->radio_on = 1;
1055         priv->enablehwauto = 1;
1056         priv->capability = WLAN_CAPABILITY_SHORT_PREAMBLE;
1057         priv->psmode = LBS802_11POWERMODECAM;
1058         priv->psstate = PS_STATE_FULL_POWER;
1059
1060         mutex_init(&priv->lock);
1061
1062         setup_timer(&priv->command_timer, command_timer_fn,
1063                 (unsigned long)priv);
1064
1065         INIT_LIST_HEAD(&priv->cmdfreeq);
1066         INIT_LIST_HEAD(&priv->cmdpendingq);
1067
1068         spin_lock_init(&priv->driver_lock);
1069         init_waitqueue_head(&priv->cmd_pending);
1070
1071         /* Allocate the command buffers */
1072         if (lbs_allocate_cmd_buffer(priv)) {
1073                 lbs_pr_err("Out of memory allocating command buffers\n");
1074                 ret = -ENOMEM;
1075                 goto out;
1076         }
1077         priv->resp_idx = 0;
1078         priv->resp_len[0] = priv->resp_len[1] = 0;
1079
1080         /* Create the event FIFO */
1081         priv->event_fifo = kfifo_alloc(sizeof(u32) * 16, GFP_KERNEL, NULL);
1082         if (IS_ERR(priv->event_fifo)) {
1083                 lbs_pr_err("Out of memory allocating event FIFO buffer\n");
1084                 ret = -ENOMEM;
1085                 goto out;
1086         }
1087
1088 out:
1089         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1090
1091         return ret;
1092 }
1093
1094 static void lbs_free_adapter(struct lbs_private *priv)
1095 {
1096         lbs_deb_enter(LBS_DEB_MAIN);
1097
1098         lbs_free_cmd_buffer(priv);
1099         if (priv->event_fifo)
1100                 kfifo_free(priv->event_fifo);
1101         del_timer(&priv->command_timer);
1102         kfree(priv->networks);
1103         priv->networks = NULL;
1104
1105         lbs_deb_leave(LBS_DEB_MAIN);
1106 }
1107
1108 /**
1109  * @brief This function adds the card. it will probe the
1110  * card, allocate the lbs_priv and initialize the device.
1111  *
1112  *  @param card    A pointer to card
1113  *  @return        A pointer to struct lbs_private structure
1114  */
1115 struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
1116 {
1117         struct net_device *dev = NULL;
1118         struct lbs_private *priv = NULL;
1119
1120         lbs_deb_enter(LBS_DEB_MAIN);
1121
1122         /* Allocate an Ethernet device and register it */
1123         dev = alloc_etherdev(sizeof(struct lbs_private));
1124         if (!dev) {
1125                 lbs_pr_err("init ethX device failed\n");
1126                 goto done;
1127         }
1128         priv = dev->priv;
1129
1130         if (lbs_init_adapter(priv)) {
1131                 lbs_pr_err("failed to initialize adapter structure.\n");
1132                 goto err_init_adapter;
1133         }
1134
1135         priv->dev = dev;
1136         priv->card = card;
1137         priv->mesh_open = 0;
1138         priv->infra_open = 0;
1139
1140         /* Setup the OS Interface to our functions */
1141         dev->open = lbs_dev_open;
1142         dev->hard_start_xmit = lbs_hard_start_xmit;
1143         dev->stop = lbs_eth_stop;
1144         dev->set_mac_address = lbs_set_mac_address;
1145         dev->tx_timeout = lbs_tx_timeout;
1146         dev->get_stats = lbs_get_stats;
1147         dev->watchdog_timeo = 5 * HZ;
1148         dev->ethtool_ops = &lbs_ethtool_ops;
1149 #ifdef  WIRELESS_EXT
1150         dev->wireless_handlers = (struct iw_handler_def *)&lbs_handler_def;
1151 #endif
1152         dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1153         dev->set_multicast_list = lbs_set_multicast_list;
1154
1155         SET_NETDEV_DEV(dev, dmdev);
1156
1157         priv->rtap_net_dev = NULL;
1158
1159         lbs_deb_thread("Starting main thread...\n");
1160         init_waitqueue_head(&priv->waitq);
1161         priv->main_thread = kthread_run(lbs_thread, dev, "lbs_main");
1162         if (IS_ERR(priv->main_thread)) {
1163                 lbs_deb_thread("Error creating main thread.\n");
1164                 goto err_init_adapter;
1165         }
1166
1167         priv->work_thread = create_singlethread_workqueue("lbs_worker");
1168         INIT_DELAYED_WORK(&priv->assoc_work, lbs_association_worker);
1169         INIT_DELAYED_WORK(&priv->scan_work, lbs_scan_worker);
1170         INIT_WORK(&priv->mcast_work, lbs_set_mcast_worker);
1171         INIT_WORK(&priv->sync_channel, lbs_sync_channel_worker);
1172
1173         sprintf(priv->mesh_ssid, "mesh");
1174         priv->mesh_ssid_len = 4;
1175
1176         priv->wol_criteria = 0xffffffff;
1177         priv->wol_gpio = 0xff;
1178
1179         goto done;
1180
1181 err_init_adapter:
1182         lbs_free_adapter(priv);
1183         free_netdev(dev);
1184         priv = NULL;
1185
1186 done:
1187         lbs_deb_leave_args(LBS_DEB_MAIN, "priv %p", priv);
1188         return priv;
1189 }
1190 EXPORT_SYMBOL_GPL(lbs_add_card);
1191
1192
1193 void lbs_remove_card(struct lbs_private *priv)
1194 {
1195         struct net_device *dev = priv->dev;
1196         union iwreq_data wrqu;
1197
1198         lbs_deb_enter(LBS_DEB_MAIN);
1199
1200         lbs_remove_mesh(priv);
1201         lbs_remove_rtap(priv);
1202
1203         dev = priv->dev;
1204
1205         cancel_delayed_work_sync(&priv->scan_work);
1206         cancel_delayed_work_sync(&priv->assoc_work);
1207         cancel_work_sync(&priv->mcast_work);
1208
1209         /* worker thread destruction blocks on the in-flight command which
1210          * should have been cleared already in lbs_stop_card().
1211          */
1212         lbs_deb_main("destroying worker thread\n");
1213         destroy_workqueue(priv->work_thread);
1214         lbs_deb_main("done destroying worker thread\n");
1215
1216         if (priv->psmode == LBS802_11POWERMODEMAX_PSP) {
1217                 priv->psmode = LBS802_11POWERMODECAM;
1218                 lbs_ps_wakeup(priv, CMD_OPTION_WAITFORRSP);
1219         }
1220
1221         memset(wrqu.ap_addr.sa_data, 0xaa, ETH_ALEN);
1222         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1223         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
1224
1225         /* Stop the thread servicing the interrupts */
1226         priv->surpriseremoved = 1;
1227         kthread_stop(priv->main_thread);
1228
1229         lbs_free_adapter(priv);
1230
1231         priv->dev = NULL;
1232         free_netdev(dev);
1233
1234         lbs_deb_leave(LBS_DEB_MAIN);
1235 }
1236 EXPORT_SYMBOL_GPL(lbs_remove_card);
1237
1238
1239 int lbs_start_card(struct lbs_private *priv)
1240 {
1241         struct net_device *dev = priv->dev;
1242         int ret = -1;
1243
1244         lbs_deb_enter(LBS_DEB_MAIN);
1245
1246         /* poke the firmware */
1247         ret = lbs_setup_firmware(priv);
1248         if (ret)
1249                 goto done;
1250
1251         /* init 802.11d */
1252         lbs_init_11d(priv);
1253
1254         if (register_netdev(dev)) {
1255                 lbs_pr_err("cannot register ethX device\n");
1256                 goto done;
1257         }
1258
1259         lbs_update_channel(priv);
1260
1261         /* 5.0.16p0 is known to NOT support any mesh */
1262         if (priv->fwrelease > 0x05001000) {
1263                 /* Enable mesh, if supported, and work out which TLV it uses.
1264                    0x100 + 291 is an unofficial value used in 5.110.20.pXX
1265                    0x100 + 37 is the official value used in 5.110.21.pXX
1266                    but we check them in that order because 20.pXX doesn't
1267                    give an error -- it just silently fails. */
1268
1269                 /* 5.110.20.pXX firmware will fail the command if the channel
1270                    doesn't match the existing channel. But only if the TLV
1271                    is correct. If the channel is wrong, _BOTH_ versions will
1272                    give an error to 0x100+291, and allow 0x100+37 to succeed.
1273                    It's just that 5.110.20.pXX will not have done anything
1274                    useful */
1275
1276                 priv->mesh_tlv = 0x100 + 291;
1277                 if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1278                                     priv->curbssparams.channel)) {
1279                         priv->mesh_tlv = 0x100 + 37;
1280                         if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1281                                             priv->curbssparams.channel))
1282                                 priv->mesh_tlv = 0;
1283                 }
1284                 if (priv->mesh_tlv) {
1285                         lbs_add_mesh(priv);
1286
1287                         if (device_create_file(&dev->dev, &dev_attr_lbs_mesh))
1288                                 lbs_pr_err("cannot register lbs_mesh attribute\n");
1289
1290                         /* While rtap isn't related to mesh, only mesh-enabled
1291                          * firmware implements the rtap functionality via
1292                          * CMD_802_11_MONITOR_MODE.
1293                          */
1294                         if (device_create_file(&dev->dev, &dev_attr_lbs_rtap))
1295                                 lbs_pr_err("cannot register lbs_rtap attribute\n");
1296                 }
1297         }
1298
1299         lbs_debugfs_init_one(priv, dev);
1300
1301         lbs_pr_info("%s: Marvell WLAN 802.11 adapter\n", dev->name);
1302
1303         ret = 0;
1304
1305 done:
1306         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1307         return ret;
1308 }
1309 EXPORT_SYMBOL_GPL(lbs_start_card);
1310
1311
1312 void lbs_stop_card(struct lbs_private *priv)
1313 {
1314         struct net_device *dev = priv->dev;
1315         struct cmd_ctrl_node *cmdnode;
1316         unsigned long flags;
1317
1318         lbs_deb_enter(LBS_DEB_MAIN);
1319
1320         if (!priv)
1321                 goto out;
1322
1323         netif_stop_queue(priv->dev);
1324         netif_carrier_off(priv->dev);
1325
1326         lbs_debugfs_remove_one(priv);
1327         if (priv->mesh_tlv) {
1328                 device_remove_file(&dev->dev, &dev_attr_lbs_mesh);
1329                 device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
1330         }
1331
1332         /* Delete the timeout of the currently processing command */
1333         del_timer_sync(&priv->command_timer);
1334
1335         /* Flush pending command nodes */
1336         spin_lock_irqsave(&priv->driver_lock, flags);
1337         lbs_deb_main("clearing pending commands\n");
1338         list_for_each_entry(cmdnode, &priv->cmdpendingq, list) {
1339                 cmdnode->result = -ENOENT;
1340                 cmdnode->cmdwaitqwoken = 1;
1341                 wake_up_interruptible(&cmdnode->cmdwait_q);
1342         }
1343
1344         /* Flush the command the card is currently processing */
1345         if (priv->cur_cmd) {
1346                 lbs_deb_main("clearing current command\n");
1347                 priv->cur_cmd->result = -ENOENT;
1348                 priv->cur_cmd->cmdwaitqwoken = 1;
1349                 wake_up_interruptible(&priv->cur_cmd->cmdwait_q);
1350         }
1351         lbs_deb_main("done clearing commands\n");
1352         spin_unlock_irqrestore(&priv->driver_lock, flags);
1353
1354         unregister_netdev(dev);
1355
1356 out:
1357         lbs_deb_leave(LBS_DEB_MAIN);
1358 }
1359 EXPORT_SYMBOL_GPL(lbs_stop_card);
1360
1361
1362 /**
1363  * @brief This function adds mshX interface
1364  *
1365  *  @param priv    A pointer to the struct lbs_private structure
1366  *  @return        0 if successful, -X otherwise
1367  */
1368 static int lbs_add_mesh(struct lbs_private *priv)
1369 {
1370         struct net_device *mesh_dev = NULL;
1371         int ret = 0;
1372
1373         lbs_deb_enter(LBS_DEB_MESH);
1374
1375         /* Allocate a virtual mesh device */
1376         if (!(mesh_dev = alloc_netdev(0, "msh%d", ether_setup))) {
1377                 lbs_deb_mesh("init mshX device failed\n");
1378                 ret = -ENOMEM;
1379                 goto done;
1380         }
1381         mesh_dev->priv = priv;
1382         priv->mesh_dev = mesh_dev;
1383
1384         mesh_dev->open = lbs_dev_open;
1385         mesh_dev->hard_start_xmit = lbs_hard_start_xmit;
1386         mesh_dev->stop = lbs_mesh_stop;
1387         mesh_dev->get_stats = lbs_get_stats;
1388         mesh_dev->set_mac_address = lbs_set_mac_address;
1389         mesh_dev->ethtool_ops = &lbs_ethtool_ops;
1390         memcpy(mesh_dev->dev_addr, priv->dev->dev_addr,
1391                         sizeof(priv->dev->dev_addr));
1392
1393         SET_NETDEV_DEV(priv->mesh_dev, priv->dev->dev.parent);
1394
1395 #ifdef  WIRELESS_EXT
1396         mesh_dev->wireless_handlers = (struct iw_handler_def *)&mesh_handler_def;
1397 #endif
1398         mesh_dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1399         mesh_dev->set_multicast_list = lbs_set_multicast_list;
1400         /* Register virtual mesh interface */
1401         ret = register_netdev(mesh_dev);
1402         if (ret) {
1403                 lbs_pr_err("cannot register mshX virtual interface\n");
1404                 goto err_free;
1405         }
1406
1407         ret = sysfs_create_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1408         if (ret)
1409                 goto err_unregister;
1410
1411         lbs_persist_config_init(mesh_dev);
1412
1413         /* Everything successful */
1414         ret = 0;
1415         goto done;
1416
1417 err_unregister:
1418         unregister_netdev(mesh_dev);
1419
1420 err_free:
1421         free_netdev(mesh_dev);
1422
1423 done:
1424         lbs_deb_leave_args(LBS_DEB_MESH, "ret %d", ret);
1425         return ret;
1426 }
1427
1428 static void lbs_remove_mesh(struct lbs_private *priv)
1429 {
1430         struct net_device *mesh_dev;
1431
1432
1433         mesh_dev = priv->mesh_dev;
1434         if (!mesh_dev)
1435                 return;
1436
1437         lbs_deb_enter(LBS_DEB_MESH);
1438         netif_stop_queue(mesh_dev);
1439         netif_carrier_off(mesh_dev);
1440         sysfs_remove_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1441         lbs_persist_config_remove(mesh_dev);
1442         unregister_netdev(mesh_dev);
1443         priv->mesh_dev = NULL;
1444         free_netdev(mesh_dev);
1445         lbs_deb_leave(LBS_DEB_MESH);
1446 }
1447
1448 /**
1449  *  @brief This function finds the CFP in
1450  *  region_cfp_table based on region and band parameter.
1451  *
1452  *  @param region  The region code
1453  *  @param band    The band
1454  *  @param cfp_no  A pointer to CFP number
1455  *  @return        A pointer to CFP
1456  */
1457 struct chan_freq_power *lbs_get_region_cfp_table(u8 region, int *cfp_no)
1458 {
1459         int i, end;
1460
1461         lbs_deb_enter(LBS_DEB_MAIN);
1462
1463         end = ARRAY_SIZE(region_cfp_table);
1464
1465         for (i = 0; i < end ; i++) {
1466                 lbs_deb_main("region_cfp_table[i].region=%d\n",
1467                         region_cfp_table[i].region);
1468                 if (region_cfp_table[i].region == region) {
1469                         *cfp_no = region_cfp_table[i].cfp_no_BG;
1470                         lbs_deb_leave(LBS_DEB_MAIN);
1471                         return region_cfp_table[i].cfp_BG;
1472                 }
1473         }
1474
1475         lbs_deb_leave_args(LBS_DEB_MAIN, "ret NULL");
1476         return NULL;
1477 }
1478
1479 int lbs_set_regiontable(struct lbs_private *priv, u8 region, u8 band)
1480 {
1481         int ret = 0;
1482         int i = 0;
1483
1484         struct chan_freq_power *cfp;
1485         int cfp_no;
1486
1487         lbs_deb_enter(LBS_DEB_MAIN);
1488
1489         memset(priv->region_channel, 0, sizeof(priv->region_channel));
1490
1491         cfp = lbs_get_region_cfp_table(region, &cfp_no);
1492         if (cfp != NULL) {
1493                 priv->region_channel[i].nrcfp = cfp_no;
1494                 priv->region_channel[i].CFP = cfp;
1495         } else {
1496                 lbs_deb_main("wrong region code %#x in band B/G\n",
1497                        region);
1498                 ret = -1;
1499                 goto out;
1500         }
1501         priv->region_channel[i].valid = 1;
1502         priv->region_channel[i].region = region;
1503         priv->region_channel[i].band = band;
1504         i++;
1505 out:
1506         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1507         return ret;
1508 }
1509
1510 void lbs_queue_event(struct lbs_private *priv, u32 event)
1511 {
1512         unsigned long flags;
1513
1514         lbs_deb_enter(LBS_DEB_THREAD);
1515         spin_lock_irqsave(&priv->driver_lock, flags);
1516
1517         if (priv->psstate == PS_STATE_SLEEP)
1518                 priv->psstate = PS_STATE_AWAKE;
1519
1520         __kfifo_put(priv->event_fifo, (unsigned char *) &event, sizeof(u32));
1521
1522         wake_up_interruptible(&priv->waitq);
1523
1524         spin_unlock_irqrestore(&priv->driver_lock, flags);
1525         lbs_deb_leave(LBS_DEB_THREAD);
1526 }
1527 EXPORT_SYMBOL_GPL(lbs_queue_event);
1528
1529 void lbs_notify_command_response(struct lbs_private *priv, u8 resp_idx)
1530 {
1531         lbs_deb_enter(LBS_DEB_THREAD);
1532
1533         if (priv->psstate == PS_STATE_SLEEP)
1534                 priv->psstate = PS_STATE_AWAKE;
1535
1536         /* Swap buffers by flipping the response index */
1537         BUG_ON(resp_idx > 1);
1538         priv->resp_idx = resp_idx;
1539
1540         wake_up_interruptible(&priv->waitq);
1541
1542         lbs_deb_leave(LBS_DEB_THREAD);
1543 }
1544 EXPORT_SYMBOL_GPL(lbs_notify_command_response);
1545
1546 static int __init lbs_init_module(void)
1547 {
1548         lbs_deb_enter(LBS_DEB_MAIN);
1549         memset(&confirm_sleep, 0, sizeof(confirm_sleep));
1550         confirm_sleep.hdr.command = cpu_to_le16(CMD_802_11_PS_MODE);
1551         confirm_sleep.hdr.size = cpu_to_le16(sizeof(confirm_sleep));
1552         confirm_sleep.action = cpu_to_le16(CMD_SUBCMD_SLEEP_CONFIRMED);
1553         lbs_debugfs_init();
1554         lbs_deb_leave(LBS_DEB_MAIN);
1555         return 0;
1556 }
1557
1558 static void __exit lbs_exit_module(void)
1559 {
1560         lbs_deb_enter(LBS_DEB_MAIN);
1561         lbs_debugfs_remove();
1562         lbs_deb_leave(LBS_DEB_MAIN);
1563 }
1564
1565 /*
1566  * rtap interface support fuctions
1567  */
1568
1569 static int lbs_rtap_open(struct net_device *dev)
1570 {
1571         /* Yes, _stop_ the queue. Because we don't support injection */
1572         lbs_deb_enter(LBS_DEB_MAIN);
1573         netif_carrier_off(dev);
1574         netif_stop_queue(dev);
1575         lbs_deb_leave(LBS_DEB_LEAVE);
1576         return 0;
1577 }
1578
1579 static int lbs_rtap_stop(struct net_device *dev)
1580 {
1581         lbs_deb_enter(LBS_DEB_MAIN);
1582         lbs_deb_leave(LBS_DEB_MAIN);
1583         return 0;
1584 }
1585
1586 static int lbs_rtap_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
1587 {
1588         netif_stop_queue(dev);
1589         return NETDEV_TX_BUSY;
1590 }
1591
1592 static struct net_device_stats *lbs_rtap_get_stats(struct net_device *dev)
1593 {
1594         struct lbs_private *priv = dev->priv;
1595         lbs_deb_enter(LBS_DEB_NET);
1596         return &priv->stats;
1597 }
1598
1599
1600 static void lbs_remove_rtap(struct lbs_private *priv)
1601 {
1602         lbs_deb_enter(LBS_DEB_MAIN);
1603         if (priv->rtap_net_dev == NULL)
1604                 goto out;
1605         unregister_netdev(priv->rtap_net_dev);
1606         free_netdev(priv->rtap_net_dev);
1607         priv->rtap_net_dev = NULL;
1608 out:
1609         lbs_deb_leave(LBS_DEB_MAIN);
1610 }
1611
1612 static int lbs_add_rtap(struct lbs_private *priv)
1613 {
1614         int ret = 0;
1615         struct net_device *rtap_dev;
1616
1617         lbs_deb_enter(LBS_DEB_MAIN);
1618         if (priv->rtap_net_dev) {
1619                 ret = -EPERM;
1620                 goto out;
1621         }
1622
1623         rtap_dev = alloc_netdev(0, "rtap%d", ether_setup);
1624         if (rtap_dev == NULL) {
1625                 ret = -ENOMEM;
1626                 goto out;
1627         }
1628
1629         memcpy(rtap_dev->dev_addr, priv->current_addr, ETH_ALEN);
1630         rtap_dev->type = ARPHRD_IEEE80211_RADIOTAP;
1631         rtap_dev->open = lbs_rtap_open;
1632         rtap_dev->stop = lbs_rtap_stop;
1633         rtap_dev->get_stats = lbs_rtap_get_stats;
1634         rtap_dev->hard_start_xmit = lbs_rtap_hard_start_xmit;
1635         rtap_dev->priv = priv;
1636         SET_NETDEV_DEV(rtap_dev, priv->dev->dev.parent);
1637
1638         ret = register_netdev(rtap_dev);
1639         if (ret) {
1640                 free_netdev(rtap_dev);
1641                 goto out;
1642         }
1643         priv->rtap_net_dev = rtap_dev;
1644
1645 out:
1646         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1647         return ret;
1648 }
1649
1650 #ifndef CONFIG_IEEE80211
1651 const char *escape_essid(const char *essid, u8 essid_len)
1652 {
1653         static char escaped[IW_ESSID_MAX_SIZE * 2 + 1];
1654         const char *s = essid;
1655         char *d = escaped;
1656
1657         if (ieee80211_is_empty_essid(essid, essid_len)) {
1658                 memcpy(escaped, "<hidden>", sizeof("<hidden>"));
1659                 return escaped;
1660         }
1661
1662         essid_len = min(essid_len, (u8) IW_ESSID_MAX_SIZE);
1663         while (essid_len--) {
1664                 if (*s == '\0') {
1665                         *d++ = '\\';
1666                         *d++ = '0';
1667                         s++;
1668                 } else {
1669                         *d++ = *s++;
1670                 }
1671         }
1672         *d = '\0';
1673         return escaped;
1674 }
1675 #endif
1676
1677 module_init(lbs_init_module);
1678 module_exit(lbs_exit_module);
1679
1680 MODULE_DESCRIPTION("Libertas WLAN Driver Library");
1681 MODULE_AUTHOR("Marvell International Ltd.");
1682 MODULE_LICENSE("GPL");