git.oblomov.eu Git - linux-2.6/blob - drivers/net/wireless/libertas/main.c

   1 /**
   2   * This file contains the major functions in WLAN
   3   * driver. It includes init, exit, open, close and main
   4   * thread etc..
   5   */
   6
   7 #include <linux/moduleparam.h>
   8 #include <linux/delay.h>
   9 #include <linux/etherdevice.h>
  10 #include <linux/netdevice.h>
  11 #include <linux/if_arp.h>
  12 #include <linux/kthread.h>
  13 #include <linux/kfifo.h>
  14 #include <linux/stddef.h>
  15 #include <linux/ieee80211.h>
  16 #include <net/iw_handler.h>
  17
  18 #include "host.h"
  19 #include "decl.h"
  20 #include "dev.h"
  21 #include "wext.h"
  22 #include "debugfs.h"
  23 #include "scan.h"
  24 #include "assoc.h"
  25 #include "cmd.h"
  26
  27 #define DRIVER_RELEASE_VERSION "323.p0"
  28 const char lbs_driver_version[] = "COMM-USB8388-" DRIVER_RELEASE_VERSION
  29 #ifdef  DEBUG
  30     "-dbg"
  31 #endif
  32     "";
  33
  34
  35 /* Module parameters */
  36 unsigned int lbs_debug;
  37 EXPORT_SYMBOL_GPL(lbs_debug);
  38 module_param_named(libertas_debug, lbs_debug, int, 0644);
  39
  40
  41 /* This global structure is used to send the confirm_sleep command as
  42  * fast as possible down to the firmware. */
  43 struct cmd_confirm_sleep confirm_sleep;
  44
  45
  46 #define LBS_TX_PWR_DEFAULT              20      /*100mW */
  47 #define LBS_TX_PWR_US_DEFAULT           20      /*100mW */
  48 #define LBS_TX_PWR_JP_DEFAULT           16      /*50mW */
  49 #define LBS_TX_PWR_FR_DEFAULT           20      /*100mW */
  50 #define LBS_TX_PWR_EMEA_DEFAULT 20      /*100mW */
  51
  52 /* Format { channel, frequency (MHz), maxtxpower } */
  53 /* band: 'B/G', region: USA FCC/Canada IC */
  54 static struct chan_freq_power channel_freq_power_US_BG[] = {
  55         {1, 2412, LBS_TX_PWR_US_DEFAULT},
  56         {2, 2417, LBS_TX_PWR_US_DEFAULT},
  57         {3, 2422, LBS_TX_PWR_US_DEFAULT},
  58         {4, 2427, LBS_TX_PWR_US_DEFAULT},
  59         {5, 2432, LBS_TX_PWR_US_DEFAULT},
  60         {6, 2437, LBS_TX_PWR_US_DEFAULT},
  61         {7, 2442, LBS_TX_PWR_US_DEFAULT},
  62         {8, 2447, LBS_TX_PWR_US_DEFAULT},
  63         {9, 2452, LBS_TX_PWR_US_DEFAULT},
  64         {10, 2457, LBS_TX_PWR_US_DEFAULT},
  65         {11, 2462, LBS_TX_PWR_US_DEFAULT}
  66 };
  67
  68 /* band: 'B/G', region: Europe ETSI */
  69 static struct chan_freq_power channel_freq_power_EU_BG[] = {
  70         {1, 2412, LBS_TX_PWR_EMEA_DEFAULT},
  71         {2, 2417, LBS_TX_PWR_EMEA_DEFAULT},
  72         {3, 2422, LBS_TX_PWR_EMEA_DEFAULT},
  73         {4, 2427, LBS_TX_PWR_EMEA_DEFAULT},
  74         {5, 2432, LBS_TX_PWR_EMEA_DEFAULT},
  75         {6, 2437, LBS_TX_PWR_EMEA_DEFAULT},
  76         {7, 2442, LBS_TX_PWR_EMEA_DEFAULT},
  77         {8, 2447, LBS_TX_PWR_EMEA_DEFAULT},
  78         {9, 2452, LBS_TX_PWR_EMEA_DEFAULT},
  79         {10, 2457, LBS_TX_PWR_EMEA_DEFAULT},
  80         {11, 2462, LBS_TX_PWR_EMEA_DEFAULT},
  81         {12, 2467, LBS_TX_PWR_EMEA_DEFAULT},
  82         {13, 2472, LBS_TX_PWR_EMEA_DEFAULT}
  83 };
  84
  85 /* band: 'B/G', region: Spain */
  86 static struct chan_freq_power channel_freq_power_SPN_BG[] = {
  87         {10, 2457, LBS_TX_PWR_DEFAULT},
  88         {11, 2462, LBS_TX_PWR_DEFAULT}
  89 };
  90
  91 /* band: 'B/G', region: France */
  92 static struct chan_freq_power channel_freq_power_FR_BG[] = {
  93         {10, 2457, LBS_TX_PWR_FR_DEFAULT},
  94         {11, 2462, LBS_TX_PWR_FR_DEFAULT},
  95         {12, 2467, LBS_TX_PWR_FR_DEFAULT},
  96         {13, 2472, LBS_TX_PWR_FR_DEFAULT}
  97 };
  98
  99 /* band: 'B/G', region: Japan */
 100 static struct chan_freq_power channel_freq_power_JPN_BG[] = {
 101         {1, 2412, LBS_TX_PWR_JP_DEFAULT},
 102         {2, 2417, LBS_TX_PWR_JP_DEFAULT},
 103         {3, 2422, LBS_TX_PWR_JP_DEFAULT},
 104         {4, 2427, LBS_TX_PWR_JP_DEFAULT},
 105         {5, 2432, LBS_TX_PWR_JP_DEFAULT},
 106         {6, 2437, LBS_TX_PWR_JP_DEFAULT},
 107         {7, 2442, LBS_TX_PWR_JP_DEFAULT},
 108         {8, 2447, LBS_TX_PWR_JP_DEFAULT},
 109         {9, 2452, LBS_TX_PWR_JP_DEFAULT},
 110         {10, 2457, LBS_TX_PWR_JP_DEFAULT},
 111         {11, 2462, LBS_TX_PWR_JP_DEFAULT},
 112         {12, 2467, LBS_TX_PWR_JP_DEFAULT},
 113         {13, 2472, LBS_TX_PWR_JP_DEFAULT},
 114         {14, 2484, LBS_TX_PWR_JP_DEFAULT}
 115 };
 116
 117 /**
 118  * the structure for channel, frequency and power
 119  */
 120 struct region_cfp_table {
 121         u8 region;
 122         struct chan_freq_power *cfp_BG;
 123         int cfp_no_BG;
 124 };
 125
 126 /**
 127  * the structure for the mapping between region and CFP
 128  */
 129 static struct region_cfp_table region_cfp_table[] = {
 130         {0x10,                  /*US FCC */
 131          channel_freq_power_US_BG,
 132          ARRAY_SIZE(channel_freq_power_US_BG),
 133          }
 134         ,
 135         {0x20,                  /*CANADA IC */
 136          channel_freq_power_US_BG,
 137          ARRAY_SIZE(channel_freq_power_US_BG),
 138          }
 139         ,
 140         {0x30, /*EU*/ channel_freq_power_EU_BG,
 141          ARRAY_SIZE(channel_freq_power_EU_BG),
 142          }
 143         ,
 144         {0x31, /*SPAIN*/ channel_freq_power_SPN_BG,
 145          ARRAY_SIZE(channel_freq_power_SPN_BG),
 146          }
 147         ,
 148         {0x32, /*FRANCE*/ channel_freq_power_FR_BG,
 149          ARRAY_SIZE(channel_freq_power_FR_BG),
 150          }
 151         ,
 152         {0x40, /*JAPAN*/ channel_freq_power_JPN_BG,
 153          ARRAY_SIZE(channel_freq_power_JPN_BG),
 154          }
 155         ,
 156 /*Add new region here */
 157 };
 158
 159 /**
 160  * the table to keep region code
 161  */
 162 u16 lbs_region_code_to_index[MRVDRV_MAX_REGION_CODE] =
 163     { 0x10, 0x20, 0x30, 0x31, 0x32, 0x40 };
 164
 165 /**
 166  * 802.11b/g supported bitrates (in 500Kb/s units)
 167  */
 168 u8 lbs_bg_rates[MAX_RATES] =
 169     { 0x02, 0x04, 0x0b, 0x16, 0x0c, 0x12, 0x18, 0x24, 0x30, 0x48, 0x60, 0x6c,
 170 0x00, 0x00 };
 171
 172 /**
 173  * FW rate table.  FW refers to rates by their index in this table, not by the
 174  * rate value itself.  Values of 0x00 are
 175  * reserved positions.
 176  */
 177 static u8 fw_data_rates[MAX_RATES] =
 178     { 0x02, 0x04, 0x0B, 0x16, 0x00, 0x0C, 0x12,
 179       0x18, 0x24, 0x30, 0x48, 0x60, 0x6C, 0x00
 180 };
 181
 182 /**
 183  *  @brief use index to get the data rate
 184  *
 185  *  @param idx                The index of data rate
 186  *  @return                     data rate or 0
 187  */
 188 u32 lbs_fw_index_to_data_rate(u8 idx)
 189 {
 190         if (idx >= sizeof(fw_data_rates))
 191                 idx = 0;
 192         return fw_data_rates[idx];
 193 }
 194
 195 /**
 196  *  @brief use rate to get the index
 197  *
 198  *  @param rate                 data rate
 199  *  @return                     index or 0
 200  */
 201 u8 lbs_data_rate_to_fw_index(u32 rate)
 202 {
 203         u8 i;
 204
 205         if (!rate)
 206                 return 0;
 207
 208         for (i = 0; i < sizeof(fw_data_rates); i++) {
 209                 if (rate == fw_data_rates[i])
 210                         return i;
 211         }
 212         return 0;
 213 }
 214
 215 /**
 216  * Attributes exported through sysfs
 217  */
 218
 219 /**
 220  * @brief Get function for sysfs attribute anycast_mask
 221  */
 222 static ssize_t lbs_anycast_get(struct device *dev,
 223                 struct device_attribute *attr, char * buf)
 224 {
 225         struct lbs_private *priv = to_net_dev(dev)->ml_priv;
 226         struct cmd_ds_mesh_access mesh_access;
 227         int ret;
 228
 229         memset(&mesh_access, 0, sizeof(mesh_access));
 230
 231         ret = lbs_mesh_access(priv, CMD_ACT_MESH_GET_ANYCAST, &mesh_access);
 232         if (ret)
 233                 return ret;
 234
 235         return snprintf(buf, 12, "0x%X\n", le32_to_cpu(mesh_access.data[0]));
 236 }
 237
 238 /**
 239  * @brief Set function for sysfs attribute anycast_mask
 240  */
 241 static ssize_t lbs_anycast_set(struct device *dev,
 242                 struct device_attribute *attr, const char * buf, size_t count)
 243 {
 244         struct lbs_private *priv = to_net_dev(dev)->ml_priv;
 245         struct cmd_ds_mesh_access mesh_access;
 246         uint32_t datum;
 247         int ret;
 248
 249         memset(&mesh_access, 0, sizeof(mesh_access));
 250         sscanf(buf, "%x", &datum);
 251         mesh_access.data[0] = cpu_to_le32(datum);
 252
 253         ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_ANYCAST, &mesh_access);
 254         if (ret)
 255                 return ret;
 256
 257         return strlen(buf);
 258 }
 259
 260 /**
 261  * @brief Get function for sysfs attribute prb_rsp_limit
 262  */
 263 static ssize_t lbs_prb_rsp_limit_get(struct device *dev,
 264                 struct device_attribute *attr, char *buf)
 265 {
 266         struct lbs_private *priv = to_net_dev(dev)->ml_priv;
 267         struct cmd_ds_mesh_access mesh_access;
 268         int ret;
 269         u32 retry_limit;
 270
 271         memset(&mesh_access, 0, sizeof(mesh_access));
 272         mesh_access.data[0] = cpu_to_le32(CMD_ACT_GET);
 273
 274         ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_GET_PRB_RSP_LIMIT,
 275                         &mesh_access);
 276         if (ret)
 277                 return ret;
 278
 279         retry_limit = le32_to_cpu(mesh_access.data[1]);
 280         return snprintf(buf, 10, "%d\n", retry_limit);
 281 }
 282
 283 /**
 284  * @brief Set function for sysfs attribute prb_rsp_limit
 285  */
 286 static ssize_t lbs_prb_rsp_limit_set(struct device *dev,
 287                 struct device_attribute *attr, const char *buf, size_t count)
 288 {
 289         struct lbs_private *priv = to_net_dev(dev)->ml_priv;
 290         struct cmd_ds_mesh_access mesh_access;
 291         int ret;
 292         unsigned long retry_limit;
 293
 294         memset(&mesh_access, 0, sizeof(mesh_access));
 295         mesh_access.data[0] = cpu_to_le32(CMD_ACT_SET);
 296
 297         if (!strict_strtoul(buf, 10, &retry_limit))
 298                 return -ENOTSUPP;
 299         if (retry_limit > 15)
 300                 return -ENOTSUPP;
 301
 302         mesh_access.data[1] = cpu_to_le32(retry_limit);
 303
 304         ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_GET_PRB_RSP_LIMIT,
 305                         &mesh_access);
 306         if (ret)
 307                 return ret;
 308
 309         return strlen(buf);
 310 }
 311
 312 static int lbs_add_rtap(struct lbs_private *priv);
 313 static void lbs_remove_rtap(struct lbs_private *priv);
 314 static int lbs_add_mesh(struct lbs_private *priv);
 315 static void lbs_remove_mesh(struct lbs_private *priv);
 316
 317
 318 /**
 319  * Get function for sysfs attribute rtap
 320  */
 321 static ssize_t lbs_rtap_get(struct device *dev,
 322                 struct device_attribute *attr, char * buf)
 323 {
 324         struct lbs_private *priv = to_net_dev(dev)->ml_priv;
 325         return snprintf(buf, 5, "0x%X\n", priv->monitormode);
 326 }
 327
 328 /**
 329  *  Set function for sysfs attribute rtap
 330  */
 331 static ssize_t lbs_rtap_set(struct device *dev,
 332                 struct device_attribute *attr, const char * buf, size_t count)
 333 {
 334         int monitor_mode;
 335         struct lbs_private *priv = to_net_dev(dev)->ml_priv;
 336
 337         sscanf(buf, "%x", &monitor_mode);
 338         if (monitor_mode) {
 339                 if (priv->monitormode == monitor_mode)
 340                         return strlen(buf);
 341                 if (!priv->monitormode) {
 342                         if (priv->infra_open || priv->mesh_open)
 343                                 return -EBUSY;
 344                         if (priv->mode == IW_MODE_INFRA)
 345                                 lbs_cmd_80211_deauthenticate(priv,
 346                                                              priv->curbssparams.bssid,
 347                                                              WLAN_REASON_DEAUTH_LEAVING);
 348                         else if (priv->mode == IW_MODE_ADHOC)
 349                                 lbs_adhoc_stop(priv);
 350                         lbs_add_rtap(priv);
 351                 }
 352                 priv->monitormode = monitor_mode;
 353         } else {
 354                 if (!priv->monitormode)
 355                         return strlen(buf);
 356                 priv->monitormode = 0;
 357                 lbs_remove_rtap(priv);
 358
 359                 if (priv->currenttxskb) {
 360                         dev_kfree_skb_any(priv->currenttxskb);
 361                         priv->currenttxskb = NULL;
 362                 }
 363
 364                 /* Wake queues, command thread, etc. */
 365                 lbs_host_to_card_done(priv);
 366         }
 367
 368         lbs_prepare_and_send_command(priv,
 369                         CMD_802_11_MONITOR_MODE, CMD_ACT_SET,
 370                         CMD_OPTION_WAITFORRSP, 0, &priv->monitormode);
 371         return strlen(buf);
 372 }
 373
 374 /**
 375  * lbs_rtap attribute to be exported per ethX interface
 376  * through sysfs (/sys/class/net/ethX/lbs_rtap)
 377  */
 378 static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get, lbs_rtap_set );
 379
 380 /**
 381  * Get function for sysfs attribute mesh
 382  */
 383 static ssize_t lbs_mesh_get(struct device *dev,
 384                 struct device_attribute *attr, char * buf)
 385 {
 386         struct lbs_private *priv = to_net_dev(dev)->ml_priv;
 387         return snprintf(buf, 5, "0x%X\n", !!priv->mesh_dev);
 388 }
 389
 390 /**
 391  *  Set function for sysfs attribute mesh
 392  */
 393 static ssize_t lbs_mesh_set(struct device *dev,
 394                 struct device_attribute *attr, const char * buf, size_t count)
 395 {
 396         struct lbs_private *priv = to_net_dev(dev)->ml_priv;
 397         int enable;
 398         int ret, action = CMD_ACT_MESH_CONFIG_STOP;
 399
 400         sscanf(buf, "%x", &enable);
 401         enable = !!enable;
 402         if (enable == !!priv->mesh_dev)
 403                 return count;
 404         if (enable)
 405                 action = CMD_ACT_MESH_CONFIG_START;
 406         ret = lbs_mesh_config(priv, action, priv->curbssparams.channel);
 407         if (ret)
 408                 return ret;
 409
 410         if (enable)
 411                 lbs_add_mesh(priv);
 412         else
 413                 lbs_remove_mesh(priv);
 414
 415         return count;
 416 }
 417
 418 /**
 419  * lbs_mesh attribute to be exported per ethX interface
 420  * through sysfs (/sys/class/net/ethX/lbs_mesh)
 421  */
 422 static DEVICE_ATTR(lbs_mesh, 0644, lbs_mesh_get, lbs_mesh_set);
 423
 424 /**
 425  * anycast_mask attribute to be exported per mshX interface
 426  * through sysfs (/sys/class/net/mshX/anycast_mask)
 427  */
 428 static DEVICE_ATTR(anycast_mask, 0644, lbs_anycast_get, lbs_anycast_set);
 429
 430 /**
 431  * prb_rsp_limit attribute to be exported per mshX interface
 432  * through sysfs (/sys/class/net/mshX/prb_rsp_limit)
 433  */
 434 static DEVICE_ATTR(prb_rsp_limit, 0644, lbs_prb_rsp_limit_get,
 435                 lbs_prb_rsp_limit_set);
 436
 437 static struct attribute *lbs_mesh_sysfs_entries[] = {
 438         &dev_attr_anycast_mask.attr,
 439         &dev_attr_prb_rsp_limit.attr,
 440         NULL,
 441 };
 442
 443 static struct attribute_group lbs_mesh_attr_group = {
 444         .attrs = lbs_mesh_sysfs_entries,
 445 };
 446
 447 /**
 448  *  @brief This function opens the ethX or mshX interface
 449  *
 450  *  @param dev     A pointer to net_device structure
 451  *  @return        0 or -EBUSY if monitor mode active
 452  */
 453 static int lbs_dev_open(struct net_device *dev)
 454 {
 455         struct lbs_private *priv = dev->ml_priv;
 456         int ret = 0;
 457
 458         lbs_deb_enter(LBS_DEB_NET);
 459
 460         spin_lock_irq(&priv->driver_lock);
 461
 462         if (priv->monitormode) {
 463                 ret = -EBUSY;
 464                 goto out;
 465         }
 466
 467         if (dev == priv->mesh_dev) {
 468                 priv->mesh_open = 1;
 469                 priv->mesh_connect_status = LBS_CONNECTED;
 470                 netif_carrier_on(dev);
 471         } else {
 472                 priv->infra_open = 1;
 473
 474                 if (priv->connect_status == LBS_CONNECTED)
 475                         netif_carrier_on(dev);
 476                 else
 477                         netif_carrier_off(dev);
 478         }
 479
 480         if (!priv->tx_pending_len)
 481                 netif_wake_queue(dev);
 482  out:
 483
 484         spin_unlock_irq(&priv->driver_lock);
 485         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
 486         return ret;
 487 }
 488
 489 /**
 490  *  @brief This function closes the mshX interface
 491  *
 492  *  @param dev     A pointer to net_device structure
 493  *  @return        0
 494  */
 495 static int lbs_mesh_stop(struct net_device *dev)
 496 {
 497         struct lbs_private *priv = dev->ml_priv;
 498
 499         lbs_deb_enter(LBS_DEB_MESH);
 500         spin_lock_irq(&priv->driver_lock);
 501
 502         priv->mesh_open = 0;
 503         priv->mesh_connect_status = LBS_DISCONNECTED;
 504
 505         netif_stop_queue(dev);
 506         netif_carrier_off(dev);
 507
 508         spin_unlock_irq(&priv->driver_lock);
 509
 510         schedule_work(&priv->mcast_work);
 511
 512         lbs_deb_leave(LBS_DEB_MESH);
 513         return 0;
 514 }
 515
 516 /**
 517  *  @brief This function closes the ethX interface
 518  *
 519  *  @param dev     A pointer to net_device structure
 520  *  @return        0
 521  */
 522 static int lbs_eth_stop(struct net_device *dev)
 523 {
 524         struct lbs_private *priv = dev->ml_priv;
 525
 526         lbs_deb_enter(LBS_DEB_NET);
 527
 528         spin_lock_irq(&priv->driver_lock);
 529         priv->infra_open = 0;
 530         netif_stop_queue(dev);
 531         spin_unlock_irq(&priv->driver_lock);
 532
 533         schedule_work(&priv->mcast_work);
 534
 535         lbs_deb_leave(LBS_DEB_NET);
 536         return 0;
 537 }
 538
 539 static void lbs_tx_timeout(struct net_device *dev)
 540 {
 541         struct lbs_private *priv = dev->ml_priv;
 542
 543         lbs_deb_enter(LBS_DEB_TX);
 544
 545         lbs_pr_err("tx watch dog timeout\n");
 546
 547         dev->trans_start = jiffies;
 548
 549         if (priv->currenttxskb)
 550                 lbs_send_tx_feedback(priv, 0);
 551
 552         /* XX: Shouldn't we also call into the hw-specific driver
 553            to kick it somehow? */
 554         lbs_host_to_card_done(priv);
 555
 556         /* More often than not, this actually happens because the
 557            firmware has crapped itself -- rather than just a very
 558            busy medium. So send a harmless command, and if/when
 559            _that_ times out, we'll kick it in the head. */
 560         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
 561                                      0, 0, NULL);
 562
 563         lbs_deb_leave(LBS_DEB_TX);
 564 }
 565
 566 void lbs_host_to_card_done(struct lbs_private *priv)
 567 {
 568         unsigned long flags;
 569
 570         lbs_deb_enter(LBS_DEB_THREAD);
 571
 572         spin_lock_irqsave(&priv->driver_lock, flags);
 573
 574         priv->dnld_sent = DNLD_RES_RECEIVED;
 575
 576         /* Wake main thread if commands are pending */
 577         if (!priv->cur_cmd || priv->tx_pending_len > 0)
 578                 wake_up_interruptible(&priv->waitq);
 579
 580         spin_unlock_irqrestore(&priv->driver_lock, flags);
 581         lbs_deb_leave(LBS_DEB_THREAD);
 582 }
 583 EXPORT_SYMBOL_GPL(lbs_host_to_card_done);
 584
 585 static int lbs_set_mac_address(struct net_device *dev, void *addr)
 586 {
 587         int ret = 0;
 588         struct lbs_private *priv = dev->ml_priv;
 589         struct sockaddr *phwaddr = addr;
 590         struct cmd_ds_802_11_mac_address cmd;
 591
 592         lbs_deb_enter(LBS_DEB_NET);
 593
 594         /* In case it was called from the mesh device */
 595         dev = priv->dev;
 596
 597         cmd.hdr.size = cpu_to_le16(sizeof(cmd));
 598         cmd.action = cpu_to_le16(CMD_ACT_SET);
 599         memcpy(cmd.macadd, phwaddr->sa_data, ETH_ALEN);
 600
 601         ret = lbs_cmd_with_response(priv, CMD_802_11_MAC_ADDRESS, &cmd);
 602         if (ret) {
 603                 lbs_deb_net("set MAC address failed\n");
 604                 goto done;
 605         }
 606
 607         memcpy(priv->current_addr, phwaddr->sa_data, ETH_ALEN);
 608         memcpy(dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
 609         if (priv->mesh_dev)
 610                 memcpy(priv->mesh_dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
 611
 612 done:
 613         lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
 614         return ret;
 615 }
 616
 617
 618 static inline int mac_in_list(unsigned char *list, int list_len,
 619                               unsigned char *mac)
 620 {
 621         while (list_len) {
 622                 if (!memcmp(list, mac, ETH_ALEN))
 623                         return 1;
 624                 list += ETH_ALEN;
 625                 list_len--;
 626         }
 627         return 0;
 628 }
 629
 630
 631 static int lbs_add_mcast_addrs(struct cmd_ds_mac_multicast_adr *cmd,
 632                                struct net_device *dev, int nr_addrs)
 633 {
 634         int i = nr_addrs;
 635         struct dev_mc_list *mc_list;
 636
 637         if ((dev->flags & (IFF_UP|IFF_MULTICAST)) != (IFF_UP|IFF_MULTICAST))
 638                 return nr_addrs;
 639
 640         netif_addr_lock_bh(dev);
 641         for (mc_list = dev->mc_list; mc_list; mc_list = mc_list->next) {
 642                 if (mac_in_list(cmd->maclist, nr_addrs, mc_list->dmi_addr)) {
 643                         lbs_deb_net("mcast address %s:%pM skipped\n", dev->name,
 644                                     mc_list->dmi_addr);
 645                         continue;
 646                 }
 647
 648                 if (i == MRVDRV_MAX_MULTICAST_LIST_SIZE)
 649                         break;
 650                 memcpy(&cmd->maclist[6*i], mc_list->dmi_addr, ETH_ALEN);
 651                 lbs_deb_net("mcast address %s:%pM added to filter\n", dev->name,
 652                             mc_list->dmi_addr);
 653                 i++;
 654         }
 655         netif_addr_unlock_bh(dev);
 656         if (mc_list)
 657                 return -EOVERFLOW;
 658
 659         return i;
 660 }
 661
 662 static void lbs_set_mcast_worker(struct work_struct *work)
 663 {
 664         struct lbs_private *priv = container_of(work, struct lbs_private, mcast_work);
 665         struct cmd_ds_mac_multicast_adr mcast_cmd;
 666         int dev_flags;
 667         int nr_addrs;
 668         int old_mac_control = priv->mac_control;
 669
 670         lbs_deb_enter(LBS_DEB_NET);
 671
 672         dev_flags = priv->dev->flags;
 673         if (priv->mesh_dev)
 674                 dev_flags |= priv->mesh_dev->flags;
 675
 676         if (dev_flags & IFF_PROMISC) {
 677                 priv->mac_control |= CMD_ACT_MAC_PROMISCUOUS_ENABLE;
 678                 priv->mac_control &= ~(CMD_ACT_MAC_ALL_MULTICAST_ENABLE |
 679                                        CMD_ACT_MAC_MULTICAST_ENABLE);
 680                 goto out_set_mac_control;
 681         } else if (dev_flags & IFF_ALLMULTI) {
 682         do_allmulti:
 683                 priv->mac_control |= CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
 684                 priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
 685                                        CMD_ACT_MAC_MULTICAST_ENABLE);
 686                 goto out_set_mac_control;
 687         }
 688
 689         /* Once for priv->dev, again for priv->mesh_dev if it exists */
 690         nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->dev, 0);
 691         if (nr_addrs >= 0 && priv->mesh_dev)
 692                 nr_addrs = lbs_add_mcast_addrs(&mcast_cmd, priv->mesh_dev, nr_addrs);
 693         if (nr_addrs < 0)
 694                 goto do_allmulti;
 695
 696         if (nr_addrs) {
 697                 int size = offsetof(struct cmd_ds_mac_multicast_adr,
 698                                     maclist[6*nr_addrs]);
 699
 700                 mcast_cmd.action = cpu_to_le16(CMD_ACT_SET);
 701                 mcast_cmd.hdr.size = cpu_to_le16(size);
 702                 mcast_cmd.nr_of_adrs = cpu_to_le16(nr_addrs);
 703
 704                 lbs_cmd_async(priv, CMD_MAC_MULTICAST_ADR, &mcast_cmd.hdr, size);
 705
 706                 priv->mac_control |= CMD_ACT_MAC_MULTICAST_ENABLE;
 707         } else
 708                 priv->mac_control &= ~CMD_ACT_MAC_MULTICAST_ENABLE;
 709
 710         priv->mac_control &= ~(CMD_ACT_MAC_PROMISCUOUS_ENABLE |
 711                                CMD_ACT_MAC_ALL_MULTICAST_ENABLE);
 712  out_set_mac_control:
 713         if (priv->mac_control != old_mac_control)
 714                 lbs_set_mac_control(priv);
 715
 716         lbs_deb_leave(LBS_DEB_NET);
 717 }
 718
 719 static void lbs_set_multicast_list(struct net_device *dev)
 720 {
 721         struct lbs_private *priv = dev->ml_priv;
 722
 723         schedule_work(&priv->mcast_work);
 724 }
 725
 726 /**
 727  *  @brief This function handles the major jobs in the LBS driver.
 728  *  It handles all events generated by firmware, RX data received
 729  *  from firmware and TX data sent from kernel.
 730  *
 731  *  @param data    A pointer to lbs_thread structure
 732  *  @return        0
 733  */
 734 static int lbs_thread(void *data)
 735 {
 736         struct net_device *dev = data;
 737         struct lbs_private *priv = dev->ml_priv;
 738         wait_queue_t wait;
 739
 740         lbs_deb_enter(LBS_DEB_THREAD);
 741
 742         init_waitqueue_entry(&wait, current);
 743
 744         for (;;) {
 745                 int shouldsleep;
 746                 u8 resp_idx;
 747
 748                 lbs_deb_thread("1: currenttxskb %p, dnld_sent %d\n",
 749                                 priv->currenttxskb, priv->dnld_sent);
 750
 751                 add_wait_queue(&priv->waitq, &wait);
 752                 set_current_state(TASK_INTERRUPTIBLE);
 753                 spin_lock_irq(&priv->driver_lock);
 754
 755                 if (kthread_should_stop())
 756                         shouldsleep = 0;        /* Bye */
 757                 else if (priv->surpriseremoved)
 758                         shouldsleep = 1;        /* We need to wait until we're _told_ to die */
 759                 else if (priv->psstate == PS_STATE_SLEEP)
 760                         shouldsleep = 1;        /* Sleep mode. Nothing we can do till it wakes */
 761                 else if (priv->cmd_timed_out)
 762                         shouldsleep = 0;        /* Command timed out. Recover */
 763                 else if (!priv->fw_ready)
 764                         shouldsleep = 1;        /* Firmware not ready. We're waiting for it */
 765                 else if (priv->dnld_sent)
 766                         shouldsleep = 1;        /* Something is en route to the device already */
 767                 else if (priv->tx_pending_len > 0)
 768                         shouldsleep = 0;        /* We've a packet to send */
 769                 else if (priv->resp_len[priv->resp_idx])
 770                         shouldsleep = 0;        /* We have a command response */
 771                 else if (priv->cur_cmd)
 772                         shouldsleep = 1;        /* Can't send a command; one already running */
 773                 else if (!list_empty(&priv->cmdpendingq))
 774                         shouldsleep = 0;        /* We have a command to send */
 775                 else if (__kfifo_len(priv->event_fifo))
 776                         shouldsleep = 0;        /* We have an event to process */
 777                 else
 778                         shouldsleep = 1;        /* No command */
 779
 780                 if (shouldsleep) {
 781                         lbs_deb_thread("sleeping, connect_status %d, "
 782                                 "psmode %d, psstate %d\n",
 783                                 priv->connect_status,
 784                                 priv->psmode, priv->psstate);
 785                         spin_unlock_irq(&priv->driver_lock);
 786                         schedule();
 787                 } else
 788                         spin_unlock_irq(&priv->driver_lock);
 789
 790                 lbs_deb_thread("2: currenttxskb %p, dnld_send %d\n",
 791                                priv->currenttxskb, priv->dnld_sent);
 792
 793                 set_current_state(TASK_RUNNING);
 794                 remove_wait_queue(&priv->waitq, &wait);
 795
 796                 lbs_deb_thread("3: currenttxskb %p, dnld_sent %d\n",
 797                                priv->currenttxskb, priv->dnld_sent);
 798
 799                 if (kthread_should_stop()) {
 800                         lbs_deb_thread("break from main thread\n");
 801                         break;
 802                 }
 803
 804                 if (priv->surpriseremoved) {
 805                         lbs_deb_thread("adapter removed; waiting to die...\n");
 806                         continue;
 807                 }
 808
 809                 lbs_deb_thread("4: currenttxskb %p, dnld_sent %d\n",
 810                        priv->currenttxskb, priv->dnld_sent);
 811
 812                 /* Process any pending command response */
 813                 spin_lock_irq(&priv->driver_lock);
 814                 resp_idx = priv->resp_idx;
 815                 if (priv->resp_len[resp_idx]) {
 816                         spin_unlock_irq(&priv->driver_lock);
 817                         lbs_process_command_response(priv,
 818                                 priv->resp_buf[resp_idx],
 819                                 priv->resp_len[resp_idx]);
 820                         spin_lock_irq(&priv->driver_lock);
 821                         priv->resp_len[resp_idx] = 0;
 822                 }
 823                 spin_unlock_irq(&priv->driver_lock);
 824
 825                 /* command timeout stuff */
 826                 if (priv->cmd_timed_out && priv->cur_cmd) {
 827                         struct cmd_ctrl_node *cmdnode = priv->cur_cmd;
 828
 829                         if (++priv->nr_retries > 3) {
 830                                 lbs_pr_info("Excessive timeouts submitting "
 831                                         "command 0x%04x\n",
 832                                         le16_to_cpu(cmdnode->cmdbuf->command));
 833                                 lbs_complete_command(priv, cmdnode, -ETIMEDOUT);
 834                                 priv->nr_retries = 0;
 835                                 if (priv->reset_card)
 836                                         priv->reset_card(priv);
 837                         } else {
 838                                 priv->cur_cmd = NULL;
 839                                 priv->dnld_sent = DNLD_RES_RECEIVED;
 840                                 lbs_pr_info("requeueing command 0x%04x due "
 841                                         "to timeout (#%d)\n",
 842                                         le16_to_cpu(cmdnode->cmdbuf->command),
 843                                         priv->nr_retries);
 844
 845                                 /* Stick it back at the _top_ of the pending queue
 846                                    for immediate resubmission */
 847                                 list_add(&cmdnode->list, &priv->cmdpendingq);
 848                         }
 849                 }
 850                 priv->cmd_timed_out = 0;
 851
 852                 /* Process hardware events, e.g. card removed, link lost */
 853                 spin_lock_irq(&priv->driver_lock);
 854                 while (__kfifo_len(priv->event_fifo)) {
 855                         u32 event;
 856
 857                         __kfifo_get(priv->event_fifo, (unsigned char *) &event,
 858                                 sizeof(event));
 859                         spin_unlock_irq(&priv->driver_lock);
 860                         lbs_process_event(priv, event);
 861                         spin_lock_irq(&priv->driver_lock);
 862                 }
 863                 spin_unlock_irq(&priv->driver_lock);
 864
 865                 if (!priv->fw_ready)
 866                         continue;
 867
 868                 /* Check if we need to confirm Sleep Request received previously */
 869                 if (priv->psstate == PS_STATE_PRE_SLEEP &&
 870                     !priv->dnld_sent && !priv->cur_cmd) {
 871                         if (priv->connect_status == LBS_CONNECTED) {
 872                                 lbs_deb_thread("pre-sleep, currenttxskb %p, "
 873                                         "dnld_sent %d, cur_cmd %p\n",
 874                                         priv->currenttxskb, priv->dnld_sent,
 875                                         priv->cur_cmd);
 876
 877                                 lbs_ps_confirm_sleep(priv);
 878                         } else {
 879                                 /* workaround for firmware sending
 880                                  * deauth/linkloss event immediately
 881                                  * after sleep request; remove this
 882                                  * after firmware fixes it
 883                                  */
 884                                 priv->psstate = PS_STATE_AWAKE;
 885                                 lbs_pr_alert("ignore PS_SleepConfirm in "
 886                                         "non-connected state\n");
 887                         }
 888                 }
 889
 890                 /* The PS state is changed during processing of Sleep Request
 891                  * event above
 892                  */
 893                 if ((priv->psstate == PS_STATE_SLEEP) ||
 894                     (priv->psstate == PS_STATE_PRE_SLEEP))
 895                         continue;
 896
 897                 /* Execute the next command */
 898                 if (!priv->dnld_sent && !priv->cur_cmd)
 899                         lbs_execute_next_command(priv);
 900
 901                 /* Wake-up command waiters which can't sleep in
 902                  * lbs_prepare_and_send_command
 903                  */
 904                 if (!list_empty(&priv->cmdpendingq))
 905                         wake_up_all(&priv->cmd_pending);
 906
 907                 spin_lock_irq(&priv->driver_lock);
 908                 if (!priv->dnld_sent && priv->tx_pending_len > 0) {
 909                         int ret = priv->hw_host_to_card(priv, MVMS_DAT,
 910                                                         priv->tx_pending_buf,
 911                                                         priv->tx_pending_len);
 912                         if (ret) {
 913                                 lbs_deb_tx("host_to_card failed %d\n", ret);
 914                                 priv->dnld_sent = DNLD_RES_RECEIVED;
 915                         }
 916                         priv->tx_pending_len = 0;
 917                         if (!priv->currenttxskb) {
 918                                 /* We can wake the queues immediately if we aren't
 919                                    waiting for TX feedback */
 920                                 if (priv->connect_status == LBS_CONNECTED)
 921                                         netif_wake_queue(priv->dev);
 922                                 if (priv->mesh_dev &&
 923                                     priv->mesh_connect_status == LBS_CONNECTED)
 924                                         netif_wake_queue(priv->mesh_dev);
 925                         }
 926                 }
 927                 spin_unlock_irq(&priv->driver_lock);
 928         }
 929
 930         del_timer(&priv->command_timer);
 931         wake_up_all(&priv->cmd_pending);
 932
 933         lbs_deb_leave(LBS_DEB_THREAD);
 934         return 0;
 935 }
 936
 937 static int lbs_suspend_callback(struct lbs_private *priv, unsigned long dummy,
 938                                 struct cmd_header *cmd)
 939 {
 940         lbs_deb_enter(LBS_DEB_FW);
 941
 942         netif_device_detach(priv->dev);
 943         if (priv->mesh_dev)
 944                 netif_device_detach(priv->mesh_dev);
 945
 946         priv->fw_ready = 0;
 947         lbs_deb_leave(LBS_DEB_FW);
 948         return 0;
 949 }
 950
 951 int lbs_suspend(struct lbs_private *priv)
 952 {
 953         struct cmd_header cmd;
 954         int ret;
 955
 956         lbs_deb_enter(LBS_DEB_FW);
 957
 958         if (priv->wol_criteria == 0xffffffff) {
 959                 lbs_pr_info("Suspend attempt without configuring wake params!\n");
 960                 return -EINVAL;
 961         }
 962
 963         memset(&cmd, 0, sizeof(cmd));
 964
 965         ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_ACTIVATE, &cmd,
 966                         sizeof(cmd), lbs_suspend_callback, 0);
 967         if (ret)
 968                 lbs_pr_info("HOST_SLEEP_ACTIVATE failed: %d\n", ret);
 969
 970         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
 971         return ret;
 972 }
 973 EXPORT_SYMBOL_GPL(lbs_suspend);
 974
 975 void lbs_resume(struct lbs_private *priv)
 976 {
 977         lbs_deb_enter(LBS_DEB_FW);
 978
 979         priv->fw_ready = 1;
 980
 981         /* Firmware doesn't seem to give us RX packets any more
 982            until we send it some command. Might as well update */
 983         lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
 984                                      0, 0, NULL);
 985
 986         netif_device_attach(priv->dev);
 987         if (priv->mesh_dev)
 988                 netif_device_attach(priv->mesh_dev);
 989
 990         lbs_deb_leave(LBS_DEB_FW);
 991 }
 992 EXPORT_SYMBOL_GPL(lbs_resume);
 993
 994 /**
 995  * @brief This function gets the HW spec from the firmware and sets
 996  *        some basic parameters.
 997  *
 998  *  @param priv    A pointer to struct lbs_private structure
 999  *  @return        0 or -1
1000  */
1001 static int lbs_setup_firmware(struct lbs_private *priv)
1002 {
1003         int ret = -1;
1004         s16 curlevel = 0, minlevel = 0, maxlevel = 0;
1005         struct cmd_header cmd;
1006
1007         lbs_deb_enter(LBS_DEB_FW);
1008
1009         if (priv->fn_init_required) {
1010                 memset(&cmd, 0, sizeof(cmd));
1011                 if (__lbs_cmd(priv, CMD_FUNC_INIT, &cmd, sizeof(cmd),
1012                                 lbs_cmd_copyback, (unsigned long) &cmd))
1013                         lbs_pr_alert("CMD_FUNC_INIT command failed\n");
1014         }
1015
1016         /* Read MAC address from firmware */
1017         memset(priv->current_addr, 0xff, ETH_ALEN);
1018         ret = lbs_update_hw_spec(priv);
1019         if (ret)
1020                 goto done;
1021
1022         /* Read power levels if available */
1023         ret = lbs_get_tx_power(priv, &curlevel, &minlevel, &maxlevel);
1024         if (ret == 0) {
1025                 priv->txpower_cur = curlevel;
1026                 priv->txpower_min = minlevel;
1027                 priv->txpower_max = maxlevel;
1028         }
1029
1030         lbs_set_mac_control(priv);
1031 done:
1032         lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
1033         return ret;
1034 }
1035
1036 /**
1037  *  This function handles the timeout of command sending.
1038  *  It will re-send the same command again.
1039  */
1040 static void command_timer_fn(unsigned long data)
1041 {
1042         struct lbs_private *priv = (struct lbs_private *)data;
1043         unsigned long flags;
1044
1045         lbs_deb_enter(LBS_DEB_CMD);
1046         spin_lock_irqsave(&priv->driver_lock, flags);
1047
1048         if (!priv->cur_cmd)
1049                 goto out;
1050
1051         lbs_pr_info("command 0x%04x timed out\n",
1052                 le16_to_cpu(priv->cur_cmd->cmdbuf->command));
1053
1054         priv->cmd_timed_out = 1;
1055         wake_up_interruptible(&priv->waitq);
1056 out:
1057         spin_unlock_irqrestore(&priv->driver_lock, flags);
1058         lbs_deb_leave(LBS_DEB_CMD);
1059 }
1060
1061 static void lbs_sync_channel_worker(struct work_struct *work)
1062 {
1063         struct lbs_private *priv = container_of(work, struct lbs_private,
1064                 sync_channel);
1065
1066         lbs_deb_enter(LBS_DEB_MAIN);
1067         if (lbs_update_channel(priv))
1068                 lbs_pr_info("Channel synchronization failed.");
1069         lbs_deb_leave(LBS_DEB_MAIN);
1070 }
1071
1072
1073 static int lbs_init_adapter(struct lbs_private *priv)
1074 {
1075         size_t bufsize;
1076         int i, ret = 0;
1077
1078         lbs_deb_enter(LBS_DEB_MAIN);
1079
1080         /* Allocate buffer to store the BSSID list */
1081         bufsize = MAX_NETWORK_COUNT * sizeof(struct bss_descriptor);
1082         priv->networks = kzalloc(bufsize, GFP_KERNEL);
1083         if (!priv->networks) {
1084                 lbs_pr_err("Out of memory allocating beacons\n");
1085                 ret = -1;
1086                 goto out;
1087         }
1088
1089         /* Initialize scan result lists */
1090         INIT_LIST_HEAD(&priv->network_free_list);
1091         INIT_LIST_HEAD(&priv->network_list);
1092         for (i = 0; i < MAX_NETWORK_COUNT; i++) {
1093                 list_add_tail(&priv->networks[i].list,
1094                               &priv->network_free_list);
1095         }
1096
1097         memset(priv->current_addr, 0xff, ETH_ALEN);
1098
1099         priv->connect_status = LBS_DISCONNECTED;
1100         priv->mesh_connect_status = LBS_DISCONNECTED;
1101         priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
1102         priv->mode = IW_MODE_INFRA;
1103         priv->curbssparams.channel = DEFAULT_AD_HOC_CHANNEL;
1104         priv->mac_control = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
1105         priv->radio_on = 1;
1106         priv->enablehwauto = 1;
1107         priv->capability = WLAN_CAPABILITY_SHORT_PREAMBLE;
1108         priv->psmode = LBS802_11POWERMODECAM;
1109         priv->psstate = PS_STATE_FULL_POWER;
1110
1111         mutex_init(&priv->lock);
1112
1113         setup_timer(&priv->command_timer, command_timer_fn,
1114                 (unsigned long)priv);
1115
1116         INIT_LIST_HEAD(&priv->cmdfreeq);
1117         INIT_LIST_HEAD(&priv->cmdpendingq);
1118
1119         spin_lock_init(&priv->driver_lock);
1120         init_waitqueue_head(&priv->cmd_pending);
1121
1122         /* Allocate the command buffers */
1123         if (lbs_allocate_cmd_buffer(priv)) {
1124                 lbs_pr_err("Out of memory allocating command buffers\n");
1125                 ret = -ENOMEM;
1126                 goto out;
1127         }
1128         priv->resp_idx = 0;
1129         priv->resp_len[0] = priv->resp_len[1] = 0;
1130
1131         /* Create the event FIFO */
1132         priv->event_fifo = kfifo_alloc(sizeof(u32) * 16, GFP_KERNEL, NULL);
1133         if (IS_ERR(priv->event_fifo)) {
1134                 lbs_pr_err("Out of memory allocating event FIFO buffer\n");
1135                 ret = -ENOMEM;
1136                 goto out;
1137         }
1138
1139 out:
1140         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1141
1142         return ret;
1143 }
1144
1145 static void lbs_free_adapter(struct lbs_private *priv)
1146 {
1147         lbs_deb_enter(LBS_DEB_MAIN);
1148
1149         lbs_free_cmd_buffer(priv);
1150         if (priv->event_fifo)
1151                 kfifo_free(priv->event_fifo);
1152         del_timer(&priv->command_timer);
1153         kfree(priv->networks);
1154         priv->networks = NULL;
1155
1156         lbs_deb_leave(LBS_DEB_MAIN);
1157 }
1158
1159 static const struct net_device_ops lbs_netdev_ops = {
1160         .ndo_open               = lbs_dev_open,
1161         .ndo_stop               = lbs_eth_stop,
1162         .ndo_start_xmit         = lbs_hard_start_xmit,
1163         .ndo_set_mac_address    = lbs_set_mac_address,
1164         .ndo_tx_timeout         = lbs_tx_timeout,
1165         .ndo_set_multicast_list = lbs_set_multicast_list,
1166         .ndo_change_mtu         = eth_change_mtu,
1167         .ndo_validate_addr      = eth_validate_addr,
1168 };
1169
1170 /**
1171  * @brief This function adds the card. it will probe the
1172  * card, allocate the lbs_priv and initialize the device.
1173  *
1174  *  @param card    A pointer to card
1175  *  @return        A pointer to struct lbs_private structure
1176  */
1177 struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
1178 {
1179         struct net_device *dev = NULL;
1180         struct lbs_private *priv = NULL;
1181
1182         lbs_deb_enter(LBS_DEB_MAIN);
1183
1184         /* Allocate an Ethernet device and register it */
1185         dev = alloc_etherdev(sizeof(struct lbs_private));
1186         if (!dev) {
1187                 lbs_pr_err("init ethX device failed\n");
1188                 goto done;
1189         }
1190         priv = netdev_priv(dev);
1191         dev->ml_priv = priv;
1192
1193         if (lbs_init_adapter(priv)) {
1194                 lbs_pr_err("failed to initialize adapter structure.\n");
1195                 goto err_init_adapter;
1196         }
1197
1198         priv->dev = dev;
1199         priv->card = card;
1200         priv->mesh_open = 0;
1201         priv->infra_open = 0;
1202
1203         priv->fn_init_required = 0;
1204         priv->fn_shutdown_required = 0;
1205
1206         /* Setup the OS Interface to our functions */
1207         dev->netdev_ops = &lbs_netdev_ops;
1208         dev->watchdog_timeo = 5 * HZ;
1209         dev->ethtool_ops = &lbs_ethtool_ops;
1210 #ifdef  WIRELESS_EXT
1211         dev->wireless_handlers = &lbs_handler_def;
1212 #endif
1213         dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1214
1215         SET_NETDEV_DEV(dev, dmdev);
1216
1217         priv->rtap_net_dev = NULL;
1218
1219         lbs_deb_thread("Starting main thread...\n");
1220         init_waitqueue_head(&priv->waitq);
1221         priv->main_thread = kthread_run(lbs_thread, dev, "lbs_main");
1222         if (IS_ERR(priv->main_thread)) {
1223                 lbs_deb_thread("Error creating main thread.\n");
1224                 goto err_init_adapter;
1225         }
1226
1227         priv->work_thread = create_singlethread_workqueue("lbs_worker");
1228         INIT_DELAYED_WORK(&priv->assoc_work, lbs_association_worker);
1229         INIT_DELAYED_WORK(&priv->scan_work, lbs_scan_worker);
1230         INIT_WORK(&priv->mcast_work, lbs_set_mcast_worker);
1231         INIT_WORK(&priv->sync_channel, lbs_sync_channel_worker);
1232
1233         sprintf(priv->mesh_ssid, "mesh");
1234         priv->mesh_ssid_len = 4;
1235
1236         priv->wol_criteria = 0xffffffff;
1237         priv->wol_gpio = 0xff;
1238
1239         goto done;
1240
1241 err_init_adapter:
1242         lbs_free_adapter(priv);
1243         free_netdev(dev);
1244         priv = NULL;
1245
1246 done:
1247         lbs_deb_leave_args(LBS_DEB_MAIN, "priv %p", priv);
1248         return priv;
1249 }
1250 EXPORT_SYMBOL_GPL(lbs_add_card);
1251
1252
1253 void lbs_remove_card(struct lbs_private *priv)
1254 {
1255         struct net_device *dev = priv->dev;
1256         union iwreq_data wrqu;
1257
1258         lbs_deb_enter(LBS_DEB_MAIN);
1259
1260         lbs_remove_mesh(priv);
1261         lbs_remove_rtap(priv);
1262
1263         dev = priv->dev;
1264
1265         cancel_delayed_work_sync(&priv->scan_work);
1266         cancel_delayed_work_sync(&priv->assoc_work);
1267         cancel_work_sync(&priv->mcast_work);
1268
1269         /* worker thread destruction blocks on the in-flight command which
1270          * should have been cleared already in lbs_stop_card().
1271          */
1272         lbs_deb_main("destroying worker thread\n");
1273         destroy_workqueue(priv->work_thread);
1274         lbs_deb_main("done destroying worker thread\n");
1275
1276         if (priv->psmode == LBS802_11POWERMODEMAX_PSP) {
1277                 priv->psmode = LBS802_11POWERMODECAM;
1278                 lbs_ps_wakeup(priv, CMD_OPTION_WAITFORRSP);
1279         }
1280
1281         memset(wrqu.ap_addr.sa_data, 0xaa, ETH_ALEN);
1282         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
1283         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
1284
1285         /* Stop the thread servicing the interrupts */
1286         priv->surpriseremoved = 1;
1287         kthread_stop(priv->main_thread);
1288
1289         lbs_free_adapter(priv);
1290
1291         priv->dev = NULL;
1292         free_netdev(dev);
1293
1294         lbs_deb_leave(LBS_DEB_MAIN);
1295 }
1296 EXPORT_SYMBOL_GPL(lbs_remove_card);
1297
1298
1299 int lbs_start_card(struct lbs_private *priv)
1300 {
1301         struct net_device *dev = priv->dev;
1302         int ret = -1;
1303
1304         lbs_deb_enter(LBS_DEB_MAIN);
1305
1306         /* poke the firmware */
1307         ret = lbs_setup_firmware(priv);
1308         if (ret)
1309                 goto done;
1310
1311         /* init 802.11d */
1312         lbs_init_11d(priv);
1313
1314         if (register_netdev(dev)) {
1315                 lbs_pr_err("cannot register ethX device\n");
1316                 goto done;
1317         }
1318
1319         lbs_update_channel(priv);
1320
1321         /* Check mesh FW version and appropriately send the mesh start
1322          * command
1323          */
1324         if (priv->mesh_fw_ver == MESH_FW_OLD) {
1325                 /* Enable mesh, if supported, and work out which TLV it uses.
1326                    0x100 + 291 is an unofficial value used in 5.110.20.pXX
1327                    0x100 + 37 is the official value used in 5.110.21.pXX
1328                    but we check them in that order because 20.pXX doesn't
1329                    give an error -- it just silently fails. */
1330
1331                 /* 5.110.20.pXX firmware will fail the command if the channel
1332                    doesn't match the existing channel. But only if the TLV
1333                    is correct. If the channel is wrong, _BOTH_ versions will
1334                    give an error to 0x100+291, and allow 0x100+37 to succeed.
1335                    It's just that 5.110.20.pXX will not have done anything
1336                    useful */
1337
1338                 priv->mesh_tlv = TLV_TYPE_OLD_MESH_ID;
1339                 if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1340                                     priv->curbssparams.channel)) {
1341                         priv->mesh_tlv = TLV_TYPE_MESH_ID;
1342                         if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1343                                             priv->curbssparams.channel))
1344                                 priv->mesh_tlv = 0;
1345                 }
1346         } else if (priv->mesh_fw_ver == MESH_FW_NEW) {
1347                 /* 10.0.0.pXX new firmwares should succeed with TLV
1348                  * 0x100+37; Do not invoke command with old TLV.
1349                  */
1350                 priv->mesh_tlv = TLV_TYPE_MESH_ID;
1351                 if (lbs_mesh_config(priv, CMD_ACT_MESH_CONFIG_START,
1352                                     priv->curbssparams.channel))
1353                         priv->mesh_tlv = 0;
1354         }
1355         if (priv->mesh_tlv) {
1356                 lbs_add_mesh(priv);
1357
1358                 if (device_create_file(&dev->dev, &dev_attr_lbs_mesh))
1359                         lbs_pr_err("cannot register lbs_mesh attribute\n");
1360
1361                 /* While rtap isn't related to mesh, only mesh-enabled
1362                  * firmware implements the rtap functionality via
1363                  * CMD_802_11_MONITOR_MODE.
1364                  */
1365                 if (device_create_file(&dev->dev, &dev_attr_lbs_rtap))
1366                         lbs_pr_err("cannot register lbs_rtap attribute\n");
1367         }
1368
1369         lbs_debugfs_init_one(priv, dev);
1370
1371         lbs_pr_info("%s: Marvell WLAN 802.11 adapter\n", dev->name);
1372
1373         ret = 0;
1374
1375 done:
1376         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1377         return ret;
1378 }
1379 EXPORT_SYMBOL_GPL(lbs_start_card);
1380
1381
1382 void lbs_stop_card(struct lbs_private *priv)
1383 {
1384         struct net_device *dev;
1385         struct cmd_ctrl_node *cmdnode;
1386         unsigned long flags;
1387         struct cmd_header cmd;
1388
1389         lbs_deb_enter(LBS_DEB_MAIN);
1390
1391         if (!priv)
1392                 goto out;
1393
1394         if (priv->fn_shutdown_required) {
1395                 memset(&cmd, 0, sizeof(cmd));
1396                 if (__lbs_cmd(priv, CMD_FUNC_SHUTDOWN, &cmd, sizeof(cmd),
1397                                 lbs_cmd_copyback, (unsigned long) &cmd))
1398                         lbs_pr_alert("CMD_FUNC_SHUTDOWN command failed\n");
1399         }
1400
1401         dev = priv->dev;
1402
1403         netif_stop_queue(dev);
1404         netif_carrier_off(dev);
1405
1406         lbs_debugfs_remove_one(priv);
1407         if (priv->mesh_tlv) {
1408                 device_remove_file(&dev->dev, &dev_attr_lbs_mesh);
1409                 device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
1410         }
1411
1412         /* Delete the timeout of the currently processing command */
1413         del_timer_sync(&priv->command_timer);
1414
1415         /* Flush pending command nodes */
1416         spin_lock_irqsave(&priv->driver_lock, flags);
1417         lbs_deb_main("clearing pending commands\n");
1418         list_for_each_entry(cmdnode, &priv->cmdpendingq, list) {
1419                 cmdnode->result = -ENOENT;
1420                 cmdnode->cmdwaitqwoken = 1;
1421                 wake_up_interruptible(&cmdnode->cmdwait_q);
1422         }
1423
1424         /* Flush the command the card is currently processing */
1425         if (priv->cur_cmd) {
1426                 lbs_deb_main("clearing current command\n");
1427                 priv->cur_cmd->result = -ENOENT;
1428                 priv->cur_cmd->cmdwaitqwoken = 1;
1429                 wake_up_interruptible(&priv->cur_cmd->cmdwait_q);
1430         }
1431         lbs_deb_main("done clearing commands\n");
1432         spin_unlock_irqrestore(&priv->driver_lock, flags);
1433
1434         unregister_netdev(dev);
1435
1436 out:
1437         lbs_deb_leave(LBS_DEB_MAIN);
1438 }
1439 EXPORT_SYMBOL_GPL(lbs_stop_card);
1440
1441
1442 static const struct net_device_ops mesh_netdev_ops = {
1443         .ndo_open               = lbs_dev_open,
1444         .ndo_stop               = lbs_mesh_stop,
1445         .ndo_start_xmit         = lbs_hard_start_xmit,
1446         .ndo_set_mac_address    = lbs_set_mac_address,
1447         .ndo_set_multicast_list = lbs_set_multicast_list,
1448 };
1449
1450 /**
1451  * @brief This function adds mshX interface
1452  *
1453  *  @param priv    A pointer to the struct lbs_private structure
1454  *  @return        0 if successful, -X otherwise
1455  */
1456 static int lbs_add_mesh(struct lbs_private *priv)
1457 {
1458         struct net_device *mesh_dev = NULL;
1459         int ret = 0;
1460
1461         lbs_deb_enter(LBS_DEB_MESH);
1462
1463         /* Allocate a virtual mesh device */
1464         if (!(mesh_dev = alloc_netdev(0, "msh%d", ether_setup))) {
1465                 lbs_deb_mesh("init mshX device failed\n");
1466                 ret = -ENOMEM;
1467                 goto done;
1468         }
1469         mesh_dev->ml_priv = priv;
1470         priv->mesh_dev = mesh_dev;
1471
1472         mesh_dev->netdev_ops = &mesh_netdev_ops;
1473         mesh_dev->ethtool_ops = &lbs_ethtool_ops;
1474         memcpy(mesh_dev->dev_addr, priv->dev->dev_addr,
1475                         sizeof(priv->dev->dev_addr));
1476
1477         SET_NETDEV_DEV(priv->mesh_dev, priv->dev->dev.parent);
1478
1479 #ifdef  WIRELESS_EXT
1480         mesh_dev->wireless_handlers = (struct iw_handler_def *)&mesh_handler_def;
1481 #endif
1482         mesh_dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1483         /* Register virtual mesh interface */
1484         ret = register_netdev(mesh_dev);
1485         if (ret) {
1486                 lbs_pr_err("cannot register mshX virtual interface\n");
1487                 goto err_free;
1488         }
1489
1490         ret = sysfs_create_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1491         if (ret)
1492                 goto err_unregister;
1493
1494         lbs_persist_config_init(mesh_dev);
1495
1496         /* Everything successful */
1497         ret = 0;
1498         goto done;
1499
1500 err_unregister:
1501         unregister_netdev(mesh_dev);
1502
1503 err_free:
1504         free_netdev(mesh_dev);
1505
1506 done:
1507         lbs_deb_leave_args(LBS_DEB_MESH, "ret %d", ret);
1508         return ret;
1509 }
1510
1511 static void lbs_remove_mesh(struct lbs_private *priv)
1512 {
1513         struct net_device *mesh_dev;
1514
1515
1516         mesh_dev = priv->mesh_dev;
1517         if (!mesh_dev)
1518                 return;
1519
1520         lbs_deb_enter(LBS_DEB_MESH);
1521         netif_stop_queue(mesh_dev);
1522         netif_carrier_off(mesh_dev);
1523         sysfs_remove_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1524         lbs_persist_config_remove(mesh_dev);
1525         unregister_netdev(mesh_dev);
1526         priv->mesh_dev = NULL;
1527         free_netdev(mesh_dev);
1528         lbs_deb_leave(LBS_DEB_MESH);
1529 }
1530
1531 /**
1532  *  @brief This function finds the CFP in
1533  *  region_cfp_table based on region and band parameter.
1534  *
1535  *  @param region  The region code
1536  *  @param band    The band
1537  *  @param cfp_no  A pointer to CFP number
1538  *  @return        A pointer to CFP
1539  */
1540 struct chan_freq_power *lbs_get_region_cfp_table(u8 region, int *cfp_no)
1541 {
1542         int i, end;
1543
1544         lbs_deb_enter(LBS_DEB_MAIN);
1545
1546         end = ARRAY_SIZE(region_cfp_table);
1547
1548         for (i = 0; i < end ; i++) {
1549                 lbs_deb_main("region_cfp_table[i].region=%d\n",
1550                         region_cfp_table[i].region);
1551                 if (region_cfp_table[i].region == region) {
1552                         *cfp_no = region_cfp_table[i].cfp_no_BG;
1553                         lbs_deb_leave(LBS_DEB_MAIN);
1554                         return region_cfp_table[i].cfp_BG;
1555                 }
1556         }
1557
1558         lbs_deb_leave_args(LBS_DEB_MAIN, "ret NULL");
1559         return NULL;
1560 }
1561
1562 int lbs_set_regiontable(struct lbs_private *priv, u8 region, u8 band)
1563 {
1564         int ret = 0;
1565         int i = 0;
1566
1567         struct chan_freq_power *cfp;
1568         int cfp_no;
1569
1570         lbs_deb_enter(LBS_DEB_MAIN);
1571
1572         memset(priv->region_channel, 0, sizeof(priv->region_channel));
1573
1574         cfp = lbs_get_region_cfp_table(region, &cfp_no);
1575         if (cfp != NULL) {
1576                 priv->region_channel[i].nrcfp = cfp_no;
1577                 priv->region_channel[i].CFP = cfp;
1578         } else {
1579                 lbs_deb_main("wrong region code %#x in band B/G\n",
1580                        region);
1581                 ret = -1;
1582                 goto out;
1583         }
1584         priv->region_channel[i].valid = 1;
1585         priv->region_channel[i].region = region;
1586         priv->region_channel[i].band = band;
1587         i++;
1588 out:
1589         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1590         return ret;
1591 }
1592
1593 void lbs_queue_event(struct lbs_private *priv, u32 event)
1594 {
1595         unsigned long flags;
1596
1597         lbs_deb_enter(LBS_DEB_THREAD);
1598         spin_lock_irqsave(&priv->driver_lock, flags);
1599
1600         if (priv->psstate == PS_STATE_SLEEP)
1601                 priv->psstate = PS_STATE_AWAKE;
1602
1603         __kfifo_put(priv->event_fifo, (unsigned char *) &event, sizeof(u32));
1604
1605         wake_up_interruptible(&priv->waitq);
1606
1607         spin_unlock_irqrestore(&priv->driver_lock, flags);
1608         lbs_deb_leave(LBS_DEB_THREAD);
1609 }
1610 EXPORT_SYMBOL_GPL(lbs_queue_event);
1611
1612 void lbs_notify_command_response(struct lbs_private *priv, u8 resp_idx)
1613 {
1614         lbs_deb_enter(LBS_DEB_THREAD);
1615
1616         if (priv->psstate == PS_STATE_SLEEP)
1617                 priv->psstate = PS_STATE_AWAKE;
1618
1619         /* Swap buffers by flipping the response index */
1620         BUG_ON(resp_idx > 1);
1621         priv->resp_idx = resp_idx;
1622
1623         wake_up_interruptible(&priv->waitq);
1624
1625         lbs_deb_leave(LBS_DEB_THREAD);
1626 }
1627 EXPORT_SYMBOL_GPL(lbs_notify_command_response);
1628
1629 static int __init lbs_init_module(void)
1630 {
1631         lbs_deb_enter(LBS_DEB_MAIN);
1632         memset(&confirm_sleep, 0, sizeof(confirm_sleep));
1633         confirm_sleep.hdr.command = cpu_to_le16(CMD_802_11_PS_MODE);
1634         confirm_sleep.hdr.size = cpu_to_le16(sizeof(confirm_sleep));
1635         confirm_sleep.action = cpu_to_le16(CMD_SUBCMD_SLEEP_CONFIRMED);
1636         lbs_debugfs_init();
1637         lbs_deb_leave(LBS_DEB_MAIN);
1638         return 0;
1639 }
1640
1641 static void __exit lbs_exit_module(void)
1642 {
1643         lbs_deb_enter(LBS_DEB_MAIN);
1644         lbs_debugfs_remove();
1645         lbs_deb_leave(LBS_DEB_MAIN);
1646 }
1647
1648 /*
1649  * rtap interface support fuctions
1650  */
1651
1652 static int lbs_rtap_open(struct net_device *dev)
1653 {
1654         /* Yes, _stop_ the queue. Because we don't support injection */
1655         lbs_deb_enter(LBS_DEB_MAIN);
1656         netif_carrier_off(dev);
1657         netif_stop_queue(dev);
1658         lbs_deb_leave(LBS_DEB_LEAVE);
1659         return 0;
1660 }
1661
1662 static int lbs_rtap_stop(struct net_device *dev)
1663 {
1664         lbs_deb_enter(LBS_DEB_MAIN);
1665         lbs_deb_leave(LBS_DEB_MAIN);
1666         return 0;
1667 }
1668
1669 static int lbs_rtap_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
1670 {
1671         netif_stop_queue(dev);
1672         return NETDEV_TX_BUSY;
1673 }
1674
1675 static void lbs_remove_rtap(struct lbs_private *priv)
1676 {
1677         lbs_deb_enter(LBS_DEB_MAIN);
1678         if (priv->rtap_net_dev == NULL)
1679                 goto out;
1680         unregister_netdev(priv->rtap_net_dev);
1681         free_netdev(priv->rtap_net_dev);
1682         priv->rtap_net_dev = NULL;
1683 out:
1684         lbs_deb_leave(LBS_DEB_MAIN);
1685 }
1686
1687 static const struct net_device_ops rtap_netdev_ops = {
1688         .ndo_open = lbs_rtap_open,
1689         .ndo_stop = lbs_rtap_stop,
1690         .ndo_start_xmit = lbs_rtap_hard_start_xmit,
1691 };
1692
1693 static int lbs_add_rtap(struct lbs_private *priv)
1694 {
1695         int ret = 0;
1696         struct net_device *rtap_dev;
1697
1698         lbs_deb_enter(LBS_DEB_MAIN);
1699         if (priv->rtap_net_dev) {
1700                 ret = -EPERM;
1701                 goto out;
1702         }
1703
1704         rtap_dev = alloc_netdev(0, "rtap%d", ether_setup);
1705         if (rtap_dev == NULL) {
1706                 ret = -ENOMEM;
1707                 goto out;
1708         }
1709
1710         memcpy(rtap_dev->dev_addr, priv->current_addr, ETH_ALEN);
1711         rtap_dev->type = ARPHRD_IEEE80211_RADIOTAP;
1712         rtap_dev->netdev_ops = &rtap_netdev_ops;
1713         rtap_dev->ml_priv = priv;
1714         SET_NETDEV_DEV(rtap_dev, priv->dev->dev.parent);
1715
1716         ret = register_netdev(rtap_dev);
1717         if (ret) {
1718                 free_netdev(rtap_dev);
1719                 goto out;
1720         }
1721         priv->rtap_net_dev = rtap_dev;
1722
1723 out:
1724         lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1725         return ret;
1726 }
1727
1728 module_init(lbs_init_module);
1729 module_exit(lbs_exit_module);
1730
1731 MODULE_DESCRIPTION("Libertas WLAN Driver Library");
1732 MODULE_AUTHOR("Marvell International Ltd.");
1733 MODULE_LICENSE("GPL");