2 * This file contains the handling of command.
3 * It prepares command and sends it to firmware when it is ready.
6 #include <net/iw_handler.h>
7 #include <net/lib80211.h>
8 #include <linux/kfifo.h>
18 static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv);
22 * @brief Simple callback that copies response back into command
24 * @param priv A pointer to struct lbs_private structure
25 * @param extra A pointer to the original command structure for which
26 * 'resp' is a response
27 * @param resp A pointer to the command response
29 * @return 0 on success, error on failure
31 int lbs_cmd_copyback(struct lbs_private *priv, unsigned long extra,
32 struct cmd_header *resp)
34 struct cmd_header *buf = (void *)extra;
37 copy_len = min(le16_to_cpu(buf->size), le16_to_cpu(resp->size));
38 memcpy(buf, resp, copy_len);
41 EXPORT_SYMBOL_GPL(lbs_cmd_copyback);
44 * @brief Simple callback that ignores the result. Use this if
45 * you just want to send a command to the hardware, but don't
46 * care for the result.
49 * @param extra ignored
52 * @return 0 for success
54 static int lbs_cmd_async_callback(struct lbs_private *priv, unsigned long extra,
55 struct cmd_header *resp)
62 * @brief Checks whether a command is allowed in Power Save mode
64 * @param command the command ID
65 * @return 1 if allowed, 0 if not allowed
67 static u8 is_command_allowed_in_ps(u16 cmd)
79 * @brief Updates the hardware details like MAC address and regulatory region
81 * @param priv A pointer to struct lbs_private structure
83 * @return 0 on success, error on failure
85 int lbs_update_hw_spec(struct lbs_private *priv)
87 struct cmd_ds_get_hw_spec cmd;
91 lbs_deb_enter(LBS_DEB_CMD);
93 memset(&cmd, 0, sizeof(cmd));
94 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
95 memcpy(cmd.permanentaddr, priv->current_addr, ETH_ALEN);
96 ret = lbs_cmd_with_response(priv, CMD_GET_HW_SPEC, &cmd);
100 priv->fwcapinfo = le32_to_cpu(cmd.fwcapinfo);
102 /* The firmware release is in an interesting format: the patch
103 * level is in the most significant nibble ... so fix that: */
104 priv->fwrelease = le32_to_cpu(cmd.fwrelease);
105 priv->fwrelease = (priv->fwrelease << 8) |
106 (priv->fwrelease >> 24 & 0xff);
108 /* Some firmware capabilities:
109 * CF card firmware 5.0.16p0: cap 0x00000303
110 * USB dongle firmware 5.110.17p2: cap 0x00000303
112 lbs_pr_info("%pM, fw %u.%u.%up%u, cap 0x%08x\n",
114 priv->fwrelease >> 24 & 0xff,
115 priv->fwrelease >> 16 & 0xff,
116 priv->fwrelease >> 8 & 0xff,
117 priv->fwrelease & 0xff,
119 lbs_deb_cmd("GET_HW_SPEC: hardware interface 0x%x, hardware spec 0x%04x\n",
120 cmd.hwifversion, cmd.version);
122 /* Determine mesh_fw_ver from fwrelease and fwcapinfo */
123 /* 5.0.16p0 9.0.0.p0 is known to NOT support any mesh */
124 /* 5.110.22 have mesh command with 0xa3 command id */
125 /* 10.0.0.p0 FW brings in mesh config command with different id */
126 /* Check FW version MSB and initialize mesh_fw_ver */
127 if (MRVL_FW_MAJOR_REV(priv->fwrelease) == MRVL_FW_V5)
128 priv->mesh_fw_ver = MESH_FW_OLD;
129 else if ((MRVL_FW_MAJOR_REV(priv->fwrelease) >= MRVL_FW_V10) &&
130 (priv->fwcapinfo & MESH_CAPINFO_ENABLE_MASK))
131 priv->mesh_fw_ver = MESH_FW_NEW;
133 priv->mesh_fw_ver = MESH_NONE;
135 /* Clamp region code to 8-bit since FW spec indicates that it should
136 * only ever be 8-bit, even though the field size is 16-bit. Some firmware
137 * returns non-zero high 8 bits here.
139 priv->regioncode = le16_to_cpu(cmd.regioncode) & 0xFF;
141 for (i = 0; i < MRVDRV_MAX_REGION_CODE; i++) {
142 /* use the region code to search for the index */
143 if (priv->regioncode == lbs_region_code_to_index[i])
147 /* if it's unidentified region code, use the default (USA) */
148 if (i >= MRVDRV_MAX_REGION_CODE) {
149 priv->regioncode = 0x10;
150 lbs_pr_info("unidentified region code; using the default (USA)\n");
153 if (priv->current_addr[0] == 0xff)
154 memmove(priv->current_addr, cmd.permanentaddr, ETH_ALEN);
156 memcpy(priv->dev->dev_addr, priv->current_addr, ETH_ALEN);
158 memcpy(priv->mesh_dev->dev_addr, priv->current_addr, ETH_ALEN);
160 if (lbs_set_regiontable(priv, priv->regioncode, 0)) {
165 if (lbs_set_universaltable(priv, 0)) {
171 lbs_deb_leave(LBS_DEB_CMD);
175 int lbs_host_sleep_cfg(struct lbs_private *priv, uint32_t criteria,
176 struct wol_config *p_wol_config)
178 struct cmd_ds_host_sleep cmd_config;
181 cmd_config.hdr.size = cpu_to_le16(sizeof(cmd_config));
182 cmd_config.criteria = cpu_to_le32(criteria);
183 cmd_config.gpio = priv->wol_gpio;
184 cmd_config.gap = priv->wol_gap;
186 if (p_wol_config != NULL)
187 memcpy((uint8_t *)&cmd_config.wol_conf, (uint8_t *)p_wol_config,
188 sizeof(struct wol_config));
190 cmd_config.wol_conf.action = CMD_ACT_ACTION_NONE;
192 ret = lbs_cmd_with_response(priv, CMD_802_11_HOST_SLEEP_CFG, &cmd_config);
195 lbs_deb_cmd("Set WOL criteria to %x\n", criteria);
196 priv->wol_criteria = criteria;
198 memcpy((uint8_t *) p_wol_config,
199 (uint8_t *)&cmd_config.wol_conf,
200 sizeof(struct wol_config));
202 lbs_pr_info("HOST_SLEEP_CFG failed %d\n", ret);
207 EXPORT_SYMBOL_GPL(lbs_host_sleep_cfg);
209 static int lbs_cmd_802_11_ps_mode(struct cmd_ds_command *cmd,
212 struct cmd_ds_802_11_ps_mode *psm = &cmd->params.psmode;
214 lbs_deb_enter(LBS_DEB_CMD);
216 cmd->command = cpu_to_le16(CMD_802_11_PS_MODE);
217 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_ps_mode) +
219 psm->action = cpu_to_le16(cmd_action);
220 psm->multipledtim = 0;
221 switch (cmd_action) {
222 case CMD_SUBCMD_ENTER_PS:
223 lbs_deb_cmd("PS command:" "SubCode- Enter PS\n");
225 psm->locallisteninterval = 0;
226 psm->nullpktinterval = 0;
228 cpu_to_le16(MRVDRV_DEFAULT_MULTIPLE_DTIM);
231 case CMD_SUBCMD_EXIT_PS:
232 lbs_deb_cmd("PS command:" "SubCode- Exit PS\n");
235 case CMD_SUBCMD_SLEEP_CONFIRMED:
236 lbs_deb_cmd("PS command: SubCode- sleep confirm\n");
243 lbs_deb_leave(LBS_DEB_CMD);
247 int lbs_cmd_802_11_inactivity_timeout(struct lbs_private *priv,
248 uint16_t cmd_action, uint16_t *timeout)
250 struct cmd_ds_802_11_inactivity_timeout cmd;
253 lbs_deb_enter(LBS_DEB_CMD);
255 cmd.hdr.command = cpu_to_le16(CMD_802_11_INACTIVITY_TIMEOUT);
256 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
258 cmd.action = cpu_to_le16(cmd_action);
260 if (cmd_action == CMD_ACT_SET)
261 cmd.timeout = cpu_to_le16(*timeout);
265 ret = lbs_cmd_with_response(priv, CMD_802_11_INACTIVITY_TIMEOUT, &cmd);
268 *timeout = le16_to_cpu(cmd.timeout);
270 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
274 int lbs_cmd_802_11_sleep_params(struct lbs_private *priv, uint16_t cmd_action,
275 struct sleep_params *sp)
277 struct cmd_ds_802_11_sleep_params cmd;
280 lbs_deb_enter(LBS_DEB_CMD);
282 if (cmd_action == CMD_ACT_GET) {
283 memset(&cmd, 0, sizeof(cmd));
285 cmd.error = cpu_to_le16(sp->sp_error);
286 cmd.offset = cpu_to_le16(sp->sp_offset);
287 cmd.stabletime = cpu_to_le16(sp->sp_stabletime);
288 cmd.calcontrol = sp->sp_calcontrol;
289 cmd.externalsleepclk = sp->sp_extsleepclk;
290 cmd.reserved = cpu_to_le16(sp->sp_reserved);
292 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
293 cmd.action = cpu_to_le16(cmd_action);
295 ret = lbs_cmd_with_response(priv, CMD_802_11_SLEEP_PARAMS, &cmd);
298 lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, "
299 "calcontrol 0x%x extsleepclk 0x%x\n",
300 le16_to_cpu(cmd.error), le16_to_cpu(cmd.offset),
301 le16_to_cpu(cmd.stabletime), cmd.calcontrol,
302 cmd.externalsleepclk);
304 sp->sp_error = le16_to_cpu(cmd.error);
305 sp->sp_offset = le16_to_cpu(cmd.offset);
306 sp->sp_stabletime = le16_to_cpu(cmd.stabletime);
307 sp->sp_calcontrol = cmd.calcontrol;
308 sp->sp_extsleepclk = cmd.externalsleepclk;
309 sp->sp_reserved = le16_to_cpu(cmd.reserved);
312 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
316 int lbs_cmd_802_11_set_wep(struct lbs_private *priv, uint16_t cmd_action,
317 struct assoc_request *assoc)
319 struct cmd_ds_802_11_set_wep cmd;
322 lbs_deb_enter(LBS_DEB_CMD);
324 memset(&cmd, 0, sizeof(cmd));
325 cmd.hdr.command = cpu_to_le16(CMD_802_11_SET_WEP);
326 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
328 cmd.action = cpu_to_le16(cmd_action);
330 if (cmd_action == CMD_ACT_ADD) {
333 /* default tx key index */
334 cmd.keyindex = cpu_to_le16(assoc->wep_tx_keyidx &
335 CMD_WEP_KEY_INDEX_MASK);
337 /* Copy key types and material to host command structure */
338 for (i = 0; i < 4; i++) {
339 struct enc_key *pkey = &assoc->wep_keys[i];
343 cmd.keytype[i] = CMD_TYPE_WEP_40_BIT;
344 memmove(cmd.keymaterial[i], pkey->key, pkey->len);
345 lbs_deb_cmd("SET_WEP: add key %d (40 bit)\n", i);
347 case KEY_LEN_WEP_104:
348 cmd.keytype[i] = CMD_TYPE_WEP_104_BIT;
349 memmove(cmd.keymaterial[i], pkey->key, pkey->len);
350 lbs_deb_cmd("SET_WEP: add key %d (104 bit)\n", i);
355 lbs_deb_cmd("SET_WEP: invalid key %d, length %d\n",
362 } else if (cmd_action == CMD_ACT_REMOVE) {
363 /* ACT_REMOVE clears _all_ WEP keys */
365 /* default tx key index */
366 cmd.keyindex = cpu_to_le16(priv->wep_tx_keyidx &
367 CMD_WEP_KEY_INDEX_MASK);
368 lbs_deb_cmd("SET_WEP: remove key %d\n", priv->wep_tx_keyidx);
371 ret = lbs_cmd_with_response(priv, CMD_802_11_SET_WEP, &cmd);
373 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
377 int lbs_cmd_802_11_enable_rsn(struct lbs_private *priv, uint16_t cmd_action,
380 struct cmd_ds_802_11_enable_rsn cmd;
383 lbs_deb_enter(LBS_DEB_CMD);
385 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
386 cmd.action = cpu_to_le16(cmd_action);
388 if (cmd_action == CMD_ACT_GET)
392 cmd.enable = cpu_to_le16(CMD_ENABLE_RSN);
394 cmd.enable = cpu_to_le16(CMD_DISABLE_RSN);
395 lbs_deb_cmd("ENABLE_RSN: %d\n", *enable);
398 ret = lbs_cmd_with_response(priv, CMD_802_11_ENABLE_RSN, &cmd);
399 if (!ret && cmd_action == CMD_ACT_GET)
400 *enable = le16_to_cpu(cmd.enable);
402 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
406 static void set_one_wpa_key(struct MrvlIEtype_keyParamSet *keyparam,
409 lbs_deb_enter(LBS_DEB_CMD);
411 if (key->flags & KEY_INFO_WPA_ENABLED)
412 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_ENABLED);
413 if (key->flags & KEY_INFO_WPA_UNICAST)
414 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_UNICAST);
415 if (key->flags & KEY_INFO_WPA_MCAST)
416 keyparam->keyinfo |= cpu_to_le16(KEY_INFO_WPA_MCAST);
418 keyparam->type = cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
419 keyparam->keytypeid = cpu_to_le16(key->type);
420 keyparam->keylen = cpu_to_le16(key->len);
421 memcpy(keyparam->key, key->key, key->len);
423 /* Length field doesn't include the {type,length} header */
424 keyparam->length = cpu_to_le16(sizeof(*keyparam) - 4);
425 lbs_deb_leave(LBS_DEB_CMD);
428 int lbs_cmd_802_11_key_material(struct lbs_private *priv, uint16_t cmd_action,
429 struct assoc_request *assoc)
431 struct cmd_ds_802_11_key_material cmd;
435 lbs_deb_enter(LBS_DEB_CMD);
437 cmd.action = cpu_to_le16(cmd_action);
438 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
440 if (cmd_action == CMD_ACT_GET) {
441 cmd.hdr.size = cpu_to_le16(S_DS_GEN + 2);
443 memset(cmd.keyParamSet, 0, sizeof(cmd.keyParamSet));
445 if (test_bit(ASSOC_FLAG_WPA_UCAST_KEY, &assoc->flags)) {
446 set_one_wpa_key(&cmd.keyParamSet[index],
447 &assoc->wpa_unicast_key);
451 if (test_bit(ASSOC_FLAG_WPA_MCAST_KEY, &assoc->flags)) {
452 set_one_wpa_key(&cmd.keyParamSet[index],
453 &assoc->wpa_mcast_key);
457 /* The common header and as many keys as we included */
458 cmd.hdr.size = cpu_to_le16(offsetof(typeof(cmd),
459 keyParamSet[index]));
461 ret = lbs_cmd_with_response(priv, CMD_802_11_KEY_MATERIAL, &cmd);
462 /* Copy the returned key to driver private data */
463 if (!ret && cmd_action == CMD_ACT_GET) {
464 void *buf_ptr = cmd.keyParamSet;
465 void *resp_end = &(&cmd)[1];
467 while (buf_ptr < resp_end) {
468 struct MrvlIEtype_keyParamSet *keyparam = buf_ptr;
470 uint16_t param_set_len = le16_to_cpu(keyparam->length);
471 uint16_t key_len = le16_to_cpu(keyparam->keylen);
472 uint16_t key_flags = le16_to_cpu(keyparam->keyinfo);
473 uint16_t key_type = le16_to_cpu(keyparam->keytypeid);
476 end = (void *)keyparam + sizeof(keyparam->type)
477 + sizeof(keyparam->length) + param_set_len;
479 /* Make sure we don't access past the end of the IEs */
483 if (key_flags & KEY_INFO_WPA_UNICAST)
484 key = &priv->wpa_unicast_key;
485 else if (key_flags & KEY_INFO_WPA_MCAST)
486 key = &priv->wpa_mcast_key;
490 /* Copy returned key into driver */
491 memset(key, 0, sizeof(struct enc_key));
492 if (key_len > sizeof(key->key))
494 key->type = key_type;
495 key->flags = key_flags;
497 memcpy(key->key, keyparam->key, key->len);
503 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
508 * @brief Set an SNMP MIB value
510 * @param priv A pointer to struct lbs_private structure
511 * @param oid The OID to set in the firmware
512 * @param val Value to set the OID to
514 * @return 0 on success, error on failure
516 int lbs_set_snmp_mib(struct lbs_private *priv, u32 oid, u16 val)
518 struct cmd_ds_802_11_snmp_mib cmd;
521 lbs_deb_enter(LBS_DEB_CMD);
523 memset(&cmd, 0, sizeof (cmd));
524 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
525 cmd.action = cpu_to_le16(CMD_ACT_SET);
526 cmd.oid = cpu_to_le16((u16) oid);
529 case SNMP_MIB_OID_BSS_TYPE:
530 cmd.bufsize = cpu_to_le16(sizeof(u8));
531 cmd.value[0] = (val == IW_MODE_ADHOC) ? 2 : 1;
533 case SNMP_MIB_OID_11D_ENABLE:
534 case SNMP_MIB_OID_FRAG_THRESHOLD:
535 case SNMP_MIB_OID_RTS_THRESHOLD:
536 case SNMP_MIB_OID_SHORT_RETRY_LIMIT:
537 case SNMP_MIB_OID_LONG_RETRY_LIMIT:
538 cmd.bufsize = cpu_to_le16(sizeof(u16));
539 *((__le16 *)(&cmd.value)) = cpu_to_le16(val);
542 lbs_deb_cmd("SNMP_CMD: (set) unhandled OID 0x%x\n", oid);
547 lbs_deb_cmd("SNMP_CMD: (set) oid 0x%x, oid size 0x%x, value 0x%x\n",
548 le16_to_cpu(cmd.oid), le16_to_cpu(cmd.bufsize), val);
550 ret = lbs_cmd_with_response(priv, CMD_802_11_SNMP_MIB, &cmd);
553 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
558 * @brief Get an SNMP MIB value
560 * @param priv A pointer to struct lbs_private structure
561 * @param oid The OID to retrieve from the firmware
562 * @param out_val Location for the returned value
564 * @return 0 on success, error on failure
566 int lbs_get_snmp_mib(struct lbs_private *priv, u32 oid, u16 *out_val)
568 struct cmd_ds_802_11_snmp_mib cmd;
571 lbs_deb_enter(LBS_DEB_CMD);
573 memset(&cmd, 0, sizeof (cmd));
574 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
575 cmd.action = cpu_to_le16(CMD_ACT_GET);
576 cmd.oid = cpu_to_le16(oid);
578 ret = lbs_cmd_with_response(priv, CMD_802_11_SNMP_MIB, &cmd);
582 switch (le16_to_cpu(cmd.bufsize)) {
584 if (oid == SNMP_MIB_OID_BSS_TYPE) {
585 if (cmd.value[0] == 2)
586 *out_val = IW_MODE_ADHOC;
588 *out_val = IW_MODE_INFRA;
590 *out_val = cmd.value[0];
593 *out_val = le16_to_cpu(*((__le16 *)(&cmd.value)));
596 lbs_deb_cmd("SNMP_CMD: (get) unhandled OID 0x%x size %d\n",
597 oid, le16_to_cpu(cmd.bufsize));
602 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
607 * @brief Get the min, max, and current TX power
609 * @param priv A pointer to struct lbs_private structure
610 * @param curlevel Current power level in dBm
611 * @param minlevel Minimum supported power level in dBm (optional)
612 * @param maxlevel Maximum supported power level in dBm (optional)
614 * @return 0 on success, error on failure
616 int lbs_get_tx_power(struct lbs_private *priv, s16 *curlevel, s16 *minlevel,
619 struct cmd_ds_802_11_rf_tx_power cmd;
622 lbs_deb_enter(LBS_DEB_CMD);
624 memset(&cmd, 0, sizeof(cmd));
625 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
626 cmd.action = cpu_to_le16(CMD_ACT_GET);
628 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
630 *curlevel = le16_to_cpu(cmd.curlevel);
632 *minlevel = cmd.minlevel;
634 *maxlevel = cmd.maxlevel;
637 lbs_deb_leave(LBS_DEB_CMD);
642 * @brief Set the TX power
644 * @param priv A pointer to struct lbs_private structure
645 * @param dbm The desired power level in dBm
647 * @return 0 on success, error on failure
649 int lbs_set_tx_power(struct lbs_private *priv, s16 dbm)
651 struct cmd_ds_802_11_rf_tx_power cmd;
654 lbs_deb_enter(LBS_DEB_CMD);
656 memset(&cmd, 0, sizeof(cmd));
657 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
658 cmd.action = cpu_to_le16(CMD_ACT_SET);
659 cmd.curlevel = cpu_to_le16(dbm);
661 lbs_deb_cmd("SET_RF_TX_POWER: %d dBm\n", dbm);
663 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
665 lbs_deb_leave(LBS_DEB_CMD);
669 static int lbs_cmd_802_11_monitor_mode(struct cmd_ds_command *cmd,
670 u16 cmd_action, void *pdata_buf)
672 struct cmd_ds_802_11_monitor_mode *monitor = &cmd->params.monitor;
674 cmd->command = cpu_to_le16(CMD_802_11_MONITOR_MODE);
676 cpu_to_le16(sizeof(struct cmd_ds_802_11_monitor_mode) +
679 monitor->action = cpu_to_le16(cmd_action);
680 if (cmd_action == CMD_ACT_SET) {
682 cpu_to_le16((u16) (*(u32 *) pdata_buf));
688 static __le16 lbs_rate_to_fw_bitmap(int rate, int lower_rates_ok)
708 int i = lbs_data_rate_to_fw_index(rate);
710 ratemask = (0x1fef >> (12 - i));
713 return cpu_to_le16(ratemask);
716 int lbs_cmd_802_11_rate_adapt_rateset(struct lbs_private *priv,
719 struct cmd_ds_802_11_rate_adapt_rateset cmd;
722 lbs_deb_enter(LBS_DEB_CMD);
724 if (!priv->cur_rate && !priv->enablehwauto)
727 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
729 cmd.action = cpu_to_le16(cmd_action);
730 cmd.enablehwauto = cpu_to_le16(priv->enablehwauto);
731 cmd.bitmap = lbs_rate_to_fw_bitmap(priv->cur_rate, priv->enablehwauto);
732 ret = lbs_cmd_with_response(priv, CMD_802_11_RATE_ADAPT_RATESET, &cmd);
733 if (!ret && cmd_action == CMD_ACT_GET) {
734 priv->ratebitmap = le16_to_cpu(cmd.bitmap);
735 priv->enablehwauto = le16_to_cpu(cmd.enablehwauto);
738 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
741 EXPORT_SYMBOL_GPL(lbs_cmd_802_11_rate_adapt_rateset);
744 * @brief Set the data rate
746 * @param priv A pointer to struct lbs_private structure
747 * @param rate The desired data rate, or 0 to clear a locked rate
749 * @return 0 on success, error on failure
751 int lbs_set_data_rate(struct lbs_private *priv, u8 rate)
753 struct cmd_ds_802_11_data_rate cmd;
756 lbs_deb_enter(LBS_DEB_CMD);
758 memset(&cmd, 0, sizeof(cmd));
759 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
762 cmd.action = cpu_to_le16(CMD_ACT_SET_TX_FIX_RATE);
763 cmd.rates[0] = lbs_data_rate_to_fw_index(rate);
764 if (cmd.rates[0] == 0) {
765 lbs_deb_cmd("DATA_RATE: invalid requested rate of"
770 lbs_deb_cmd("DATA_RATE: set fixed 0x%02X\n", cmd.rates[0]);
772 cmd.action = cpu_to_le16(CMD_ACT_SET_TX_AUTO);
773 lbs_deb_cmd("DATA_RATE: setting auto\n");
776 ret = lbs_cmd_with_response(priv, CMD_802_11_DATA_RATE, &cmd);
780 lbs_deb_hex(LBS_DEB_CMD, "DATA_RATE_RESP", (u8 *) &cmd, sizeof (cmd));
782 /* FIXME: get actual rates FW can do if this command actually returns
783 * all data rates supported.
785 priv->cur_rate = lbs_fw_index_to_data_rate(cmd.rates[0]);
786 lbs_deb_cmd("DATA_RATE: current rate is 0x%02x\n", priv->cur_rate);
789 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
794 * @brief Get the radio channel
796 * @param priv A pointer to struct lbs_private structure
798 * @return The channel on success, error on failure
800 int lbs_get_channel(struct lbs_private *priv)
802 struct cmd_ds_802_11_rf_channel cmd;
805 lbs_deb_enter(LBS_DEB_CMD);
807 memset(&cmd, 0, sizeof(cmd));
808 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
809 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_GET);
811 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
815 ret = le16_to_cpu(cmd.channel);
816 lbs_deb_cmd("current radio channel is %d\n", ret);
819 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
823 int lbs_update_channel(struct lbs_private *priv)
827 /* the channel in f/w could be out of sync; get the current channel */
828 lbs_deb_enter(LBS_DEB_ASSOC);
830 ret = lbs_get_channel(priv);
832 priv->curbssparams.channel = ret;
835 lbs_deb_leave_args(LBS_DEB_ASSOC, "ret %d", ret);
840 * @brief Set the radio channel
842 * @param priv A pointer to struct lbs_private structure
843 * @param channel The desired channel, or 0 to clear a locked channel
845 * @return 0 on success, error on failure
847 int lbs_set_channel(struct lbs_private *priv, u8 channel)
849 struct cmd_ds_802_11_rf_channel cmd;
851 u8 old_channel = priv->curbssparams.channel;
855 lbs_deb_enter(LBS_DEB_CMD);
857 memset(&cmd, 0, sizeof(cmd));
858 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
859 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_SET);
860 cmd.channel = cpu_to_le16(channel);
862 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
866 priv->curbssparams.channel = (uint8_t) le16_to_cpu(cmd.channel);
867 lbs_deb_cmd("channel switch from %d to %d\n", old_channel,
868 priv->curbssparams.channel);
871 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
875 static int lbs_cmd_802_11_rssi(struct lbs_private *priv,
876 struct cmd_ds_command *cmd)
879 lbs_deb_enter(LBS_DEB_CMD);
880 cmd->command = cpu_to_le16(CMD_802_11_RSSI);
881 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_rssi) + S_DS_GEN);
882 cmd->params.rssi.N = cpu_to_le16(DEFAULT_BCN_AVG_FACTOR);
884 /* reset Beacon SNR/NF/RSSI values */
885 priv->SNR[TYPE_BEACON][TYPE_NOAVG] = 0;
886 priv->SNR[TYPE_BEACON][TYPE_AVG] = 0;
887 priv->NF[TYPE_BEACON][TYPE_NOAVG] = 0;
888 priv->NF[TYPE_BEACON][TYPE_AVG] = 0;
889 priv->RSSI[TYPE_BEACON][TYPE_NOAVG] = 0;
890 priv->RSSI[TYPE_BEACON][TYPE_AVG] = 0;
892 lbs_deb_leave(LBS_DEB_CMD);
896 static int lbs_cmd_reg_access(struct cmd_ds_command *cmdptr,
897 u8 cmd_action, void *pdata_buf)
899 struct lbs_offset_value *offval;
901 lbs_deb_enter(LBS_DEB_CMD);
903 offval = (struct lbs_offset_value *)pdata_buf;
905 switch (le16_to_cpu(cmdptr->command)) {
906 case CMD_MAC_REG_ACCESS:
908 struct cmd_ds_mac_reg_access *macreg;
911 cpu_to_le16(sizeof (struct cmd_ds_mac_reg_access)
914 (struct cmd_ds_mac_reg_access *)&cmdptr->params.
917 macreg->action = cpu_to_le16(cmd_action);
918 macreg->offset = cpu_to_le16((u16) offval->offset);
919 macreg->value = cpu_to_le32(offval->value);
924 case CMD_BBP_REG_ACCESS:
926 struct cmd_ds_bbp_reg_access *bbpreg;
930 (struct cmd_ds_bbp_reg_access)
933 (struct cmd_ds_bbp_reg_access *)&cmdptr->params.
936 bbpreg->action = cpu_to_le16(cmd_action);
937 bbpreg->offset = cpu_to_le16((u16) offval->offset);
938 bbpreg->value = (u8) offval->value;
943 case CMD_RF_REG_ACCESS:
945 struct cmd_ds_rf_reg_access *rfreg;
949 (struct cmd_ds_rf_reg_access) +
952 (struct cmd_ds_rf_reg_access *)&cmdptr->params.
955 rfreg->action = cpu_to_le16(cmd_action);
956 rfreg->offset = cpu_to_le16((u16) offval->offset);
957 rfreg->value = (u8) offval->value;
966 lbs_deb_leave(LBS_DEB_CMD);
970 static int lbs_cmd_bt_access(struct cmd_ds_command *cmd,
971 u16 cmd_action, void *pdata_buf)
973 struct cmd_ds_bt_access *bt_access = &cmd->params.bt;
974 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
976 cmd->command = cpu_to_le16(CMD_BT_ACCESS);
977 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_bt_access) + S_DS_GEN);
979 bt_access->action = cpu_to_le16(cmd_action);
981 switch (cmd_action) {
982 case CMD_ACT_BT_ACCESS_ADD:
983 memcpy(bt_access->addr1, pdata_buf, 2 * ETH_ALEN);
984 lbs_deb_hex(LBS_DEB_MESH, "BT_ADD: blinded MAC addr", bt_access->addr1, 6);
986 case CMD_ACT_BT_ACCESS_DEL:
987 memcpy(bt_access->addr1, pdata_buf, 1 * ETH_ALEN);
988 lbs_deb_hex(LBS_DEB_MESH, "BT_DEL: blinded MAC addr", bt_access->addr1, 6);
990 case CMD_ACT_BT_ACCESS_LIST:
991 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
993 case CMD_ACT_BT_ACCESS_RESET:
995 case CMD_ACT_BT_ACCESS_SET_INVERT:
996 bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
998 case CMD_ACT_BT_ACCESS_GET_INVERT:
1003 lbs_deb_leave(LBS_DEB_CMD);
1007 static int lbs_cmd_fwt_access(struct cmd_ds_command *cmd,
1008 u16 cmd_action, void *pdata_buf)
1010 struct cmd_ds_fwt_access *fwt_access = &cmd->params.fwt;
1011 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1013 cmd->command = cpu_to_le16(CMD_FWT_ACCESS);
1014 cmd->size = cpu_to_le16(sizeof(struct cmd_ds_fwt_access) + S_DS_GEN);
1018 memcpy(fwt_access, pdata_buf, sizeof(*fwt_access));
1020 memset(fwt_access, 0, sizeof(*fwt_access));
1022 fwt_access->action = cpu_to_le16(cmd_action);
1024 lbs_deb_leave(LBS_DEB_CMD);
1028 int lbs_mesh_access(struct lbs_private *priv, uint16_t cmd_action,
1029 struct cmd_ds_mesh_access *cmd)
1033 lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1035 cmd->hdr.command = cpu_to_le16(CMD_MESH_ACCESS);
1036 cmd->hdr.size = cpu_to_le16(sizeof(*cmd));
1037 cmd->hdr.result = 0;
1039 cmd->action = cpu_to_le16(cmd_action);
1041 ret = lbs_cmd_with_response(priv, CMD_MESH_ACCESS, cmd);
1043 lbs_deb_leave(LBS_DEB_CMD);
1047 static int __lbs_mesh_config_send(struct lbs_private *priv,
1048 struct cmd_ds_mesh_config *cmd,
1049 uint16_t action, uint16_t type)
1052 u16 command = CMD_MESH_CONFIG_OLD;
1054 lbs_deb_enter(LBS_DEB_CMD);
1057 * Command id is 0xac for v10 FW along with mesh interface
1058 * id in bits 14-13-12.
1060 if (priv->mesh_fw_ver == MESH_FW_NEW)
1061 command = CMD_MESH_CONFIG |
1062 (MESH_IFACE_ID << MESH_IFACE_BIT_OFFSET);
1064 cmd->hdr.command = cpu_to_le16(command);
1065 cmd->hdr.size = cpu_to_le16(sizeof(struct cmd_ds_mesh_config));
1066 cmd->hdr.result = 0;
1068 cmd->type = cpu_to_le16(type);
1069 cmd->action = cpu_to_le16(action);
1071 ret = lbs_cmd_with_response(priv, command, cmd);
1073 lbs_deb_leave(LBS_DEB_CMD);
1077 int lbs_mesh_config_send(struct lbs_private *priv,
1078 struct cmd_ds_mesh_config *cmd,
1079 uint16_t action, uint16_t type)
1083 if (!(priv->fwcapinfo & FW_CAPINFO_PERSISTENT_CONFIG))
1086 ret = __lbs_mesh_config_send(priv, cmd, action, type);
1090 /* This function is the CMD_MESH_CONFIG legacy function. It only handles the
1091 * START and STOP actions. The extended actions supported by CMD_MESH_CONFIG
1092 * are all handled by preparing a struct cmd_ds_mesh_config and passing it to
1093 * lbs_mesh_config_send.
1095 int lbs_mesh_config(struct lbs_private *priv, uint16_t action, uint16_t chan)
1097 struct cmd_ds_mesh_config cmd;
1098 struct mrvl_meshie *ie;
1099 DECLARE_SSID_BUF(ssid);
1101 memset(&cmd, 0, sizeof(cmd));
1102 cmd.channel = cpu_to_le16(chan);
1103 ie = (struct mrvl_meshie *)cmd.data;
1106 case CMD_ACT_MESH_CONFIG_START:
1107 ie->id = WLAN_EID_GENERIC;
1108 ie->val.oui[0] = 0x00;
1109 ie->val.oui[1] = 0x50;
1110 ie->val.oui[2] = 0x43;
1111 ie->val.type = MARVELL_MESH_IE_TYPE;
1112 ie->val.subtype = MARVELL_MESH_IE_SUBTYPE;
1113 ie->val.version = MARVELL_MESH_IE_VERSION;
1114 ie->val.active_protocol_id = MARVELL_MESH_PROTO_ID_HWMP;
1115 ie->val.active_metric_id = MARVELL_MESH_METRIC_ID;
1116 ie->val.mesh_capability = MARVELL_MESH_CAPABILITY;
1117 ie->val.mesh_id_len = priv->mesh_ssid_len;
1118 memcpy(ie->val.mesh_id, priv->mesh_ssid, priv->mesh_ssid_len);
1119 ie->len = sizeof(struct mrvl_meshie_val) -
1120 IW_ESSID_MAX_SIZE + priv->mesh_ssid_len;
1121 cmd.length = cpu_to_le16(sizeof(struct mrvl_meshie_val));
1123 case CMD_ACT_MESH_CONFIG_STOP:
1128 lbs_deb_cmd("mesh config action %d type %x channel %d SSID %s\n",
1129 action, priv->mesh_tlv, chan,
1130 print_ssid(ssid, priv->mesh_ssid, priv->mesh_ssid_len));
1132 return __lbs_mesh_config_send(priv, &cmd, action, priv->mesh_tlv);
1135 static int lbs_cmd_bcn_ctrl(struct lbs_private * priv,
1136 struct cmd_ds_command *cmd,
1139 struct cmd_ds_802_11_beacon_control
1140 *bcn_ctrl = &cmd->params.bcn_ctrl;
1142 lbs_deb_enter(LBS_DEB_CMD);
1144 cpu_to_le16(sizeof(struct cmd_ds_802_11_beacon_control)
1146 cmd->command = cpu_to_le16(CMD_802_11_BEACON_CTRL);
1148 bcn_ctrl->action = cpu_to_le16(cmd_action);
1149 bcn_ctrl->beacon_enable = cpu_to_le16(priv->beacon_enable);
1150 bcn_ctrl->beacon_period = cpu_to_le16(priv->beacon_period);
1152 lbs_deb_leave(LBS_DEB_CMD);
1156 static void lbs_queue_cmd(struct lbs_private *priv,
1157 struct cmd_ctrl_node *cmdnode)
1159 unsigned long flags;
1162 lbs_deb_enter(LBS_DEB_HOST);
1165 lbs_deb_host("QUEUE_CMD: cmdnode is NULL\n");
1168 if (!cmdnode->cmdbuf->size) {
1169 lbs_deb_host("DNLD_CMD: cmd size is zero\n");
1172 cmdnode->result = 0;
1174 /* Exit_PS command needs to be queued in the header always. */
1175 if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_PS_MODE) {
1176 struct cmd_ds_802_11_ps_mode *psm = (void *) &cmdnode->cmdbuf[1];
1178 if (psm->action == cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1179 if (priv->psstate != PS_STATE_FULL_POWER)
1184 spin_lock_irqsave(&priv->driver_lock, flags);
1187 list_add_tail(&cmdnode->list, &priv->cmdpendingq);
1189 list_add(&cmdnode->list, &priv->cmdpendingq);
1191 spin_unlock_irqrestore(&priv->driver_lock, flags);
1193 lbs_deb_host("QUEUE_CMD: inserted command 0x%04x into cmdpendingq\n",
1194 le16_to_cpu(cmdnode->cmdbuf->command));
1197 lbs_deb_leave(LBS_DEB_HOST);
1200 static void lbs_submit_command(struct lbs_private *priv,
1201 struct cmd_ctrl_node *cmdnode)
1203 unsigned long flags;
1204 struct cmd_header *cmd;
1210 lbs_deb_enter(LBS_DEB_HOST);
1212 cmd = cmdnode->cmdbuf;
1214 spin_lock_irqsave(&priv->driver_lock, flags);
1215 priv->cur_cmd = cmdnode;
1216 priv->cur_cmd_retcode = 0;
1217 spin_unlock_irqrestore(&priv->driver_lock, flags);
1219 cmdsize = le16_to_cpu(cmd->size);
1220 command = le16_to_cpu(cmd->command);
1222 /* These commands take longer */
1223 if (command == CMD_802_11_SCAN || command == CMD_802_11_ASSOCIATE ||
1224 command == CMD_802_11_AUTHENTICATE)
1227 lbs_deb_cmd("DNLD_CMD: command 0x%04x, seq %d, size %d\n",
1228 command, le16_to_cpu(cmd->seqnum), cmdsize);
1229 lbs_deb_hex(LBS_DEB_CMD, "DNLD_CMD", (void *) cmdnode->cmdbuf, cmdsize);
1231 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) cmd, cmdsize);
1234 lbs_pr_info("DNLD_CMD: hw_host_to_card failed: %d\n", ret);
1235 /* Let the timer kick in and retry, and potentially reset
1236 the whole thing if the condition persists */
1240 /* Setup the timer after transmit command */
1241 mod_timer(&priv->command_timer, jiffies + timeo);
1243 lbs_deb_leave(LBS_DEB_HOST);
1247 * This function inserts command node to cmdfreeq
1248 * after cleans it. Requires priv->driver_lock held.
1250 static void __lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1251 struct cmd_ctrl_node *cmdnode)
1253 lbs_deb_enter(LBS_DEB_HOST);
1258 cmdnode->callback = NULL;
1259 cmdnode->callback_arg = 0;
1261 memset(cmdnode->cmdbuf, 0, LBS_CMD_BUFFER_SIZE);
1263 list_add_tail(&cmdnode->list, &priv->cmdfreeq);
1265 lbs_deb_leave(LBS_DEB_HOST);
1268 static void lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1269 struct cmd_ctrl_node *ptempcmd)
1271 unsigned long flags;
1273 spin_lock_irqsave(&priv->driver_lock, flags);
1274 __lbs_cleanup_and_insert_cmd(priv, ptempcmd);
1275 spin_unlock_irqrestore(&priv->driver_lock, flags);
1278 void lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
1281 if (cmd == priv->cur_cmd)
1282 priv->cur_cmd_retcode = result;
1284 cmd->result = result;
1285 cmd->cmdwaitqwoken = 1;
1286 wake_up_interruptible(&cmd->cmdwait_q);
1288 if (!cmd->callback || cmd->callback == lbs_cmd_async_callback)
1289 __lbs_cleanup_and_insert_cmd(priv, cmd);
1290 priv->cur_cmd = NULL;
1293 int lbs_set_radio(struct lbs_private *priv, u8 preamble, u8 radio_on)
1295 struct cmd_ds_802_11_radio_control cmd;
1298 lbs_deb_enter(LBS_DEB_CMD);
1300 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1301 cmd.action = cpu_to_le16(CMD_ACT_SET);
1303 /* Only v8 and below support setting the preamble */
1304 if (priv->fwrelease < 0x09000000) {
1306 case RADIO_PREAMBLE_SHORT:
1307 if (!(priv->capability & WLAN_CAPABILITY_SHORT_PREAMBLE))
1310 case RADIO_PREAMBLE_AUTO:
1311 case RADIO_PREAMBLE_LONG:
1312 cmd.control = cpu_to_le16(preamble);
1320 cmd.control |= cpu_to_le16(0x1);
1322 cmd.control &= cpu_to_le16(~0x1);
1323 priv->txpower_cur = 0;
1326 lbs_deb_cmd("RADIO_CONTROL: radio %s, preamble %d\n",
1327 radio_on ? "ON" : "OFF", preamble);
1329 priv->radio_on = radio_on;
1331 ret = lbs_cmd_with_response(priv, CMD_802_11_RADIO_CONTROL, &cmd);
1334 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1338 void lbs_set_mac_control(struct lbs_private *priv)
1340 struct cmd_ds_mac_control cmd;
1342 lbs_deb_enter(LBS_DEB_CMD);
1344 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1345 cmd.action = cpu_to_le16(priv->mac_control);
1348 lbs_cmd_async(priv, CMD_MAC_CONTROL, &cmd.hdr, sizeof(cmd));
1350 lbs_deb_leave(LBS_DEB_CMD);
1354 * @brief This function prepare the command before send to firmware.
1356 * @param priv A pointer to struct lbs_private structure
1357 * @param cmd_no command number
1358 * @param cmd_action command action: GET or SET
1359 * @param wait_option wait option: wait response or not
1360 * @param cmd_oid cmd oid: treated as sub command
1361 * @param pdata_buf A pointer to informaion buffer
1364 int lbs_prepare_and_send_command(struct lbs_private *priv,
1367 u16 wait_option, u32 cmd_oid, void *pdata_buf)
1370 struct cmd_ctrl_node *cmdnode;
1371 struct cmd_ds_command *cmdptr;
1372 unsigned long flags;
1374 lbs_deb_enter(LBS_DEB_HOST);
1377 lbs_deb_host("PREP_CMD: priv is NULL\n");
1382 if (priv->surpriseremoved) {
1383 lbs_deb_host("PREP_CMD: card removed\n");
1388 cmdnode = lbs_get_cmd_ctrl_node(priv);
1390 if (cmdnode == NULL) {
1391 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1393 /* Wake up main thread to execute next command */
1394 wake_up_interruptible(&priv->waitq);
1399 cmdnode->callback = NULL;
1400 cmdnode->callback_arg = (unsigned long)pdata_buf;
1402 cmdptr = (struct cmd_ds_command *)cmdnode->cmdbuf;
1404 lbs_deb_host("PREP_CMD: command 0x%04x\n", cmd_no);
1406 /* Set sequence number, command and INT option */
1408 cmdptr->seqnum = cpu_to_le16(priv->seqnum);
1410 cmdptr->command = cpu_to_le16(cmd_no);
1414 case CMD_802_11_PS_MODE:
1415 ret = lbs_cmd_802_11_ps_mode(cmdptr, cmd_action);
1418 case CMD_802_11_ASSOCIATE:
1419 case CMD_802_11_REASSOCIATE:
1420 ret = lbs_cmd_80211_associate(priv, cmdptr, pdata_buf);
1423 case CMD_802_11_AUTHENTICATE:
1424 ret = lbs_cmd_80211_authenticate(priv, cmdptr, pdata_buf);
1427 case CMD_MAC_REG_ACCESS:
1428 case CMD_BBP_REG_ACCESS:
1429 case CMD_RF_REG_ACCESS:
1430 ret = lbs_cmd_reg_access(cmdptr, cmd_action, pdata_buf);
1433 case CMD_802_11_MONITOR_MODE:
1434 ret = lbs_cmd_802_11_monitor_mode(cmdptr,
1435 cmd_action, pdata_buf);
1438 case CMD_802_11_RSSI:
1439 ret = lbs_cmd_802_11_rssi(priv, cmdptr);
1442 case CMD_802_11_SET_AFC:
1443 case CMD_802_11_GET_AFC:
1445 cmdptr->command = cpu_to_le16(cmd_no);
1446 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_afc) +
1449 memmove(&cmdptr->params.afc,
1450 pdata_buf, sizeof(struct cmd_ds_802_11_afc));
1455 case CMD_802_11D_DOMAIN_INFO:
1456 ret = lbs_cmd_802_11d_domain_info(priv, cmdptr,
1457 cmd_no, cmd_action);
1460 case CMD_802_11_TPC_CFG:
1461 cmdptr->command = cpu_to_le16(CMD_802_11_TPC_CFG);
1463 cpu_to_le16(sizeof(struct cmd_ds_802_11_tpc_cfg) +
1466 memmove(&cmdptr->params.tpccfg,
1467 pdata_buf, sizeof(struct cmd_ds_802_11_tpc_cfg));
1471 case CMD_802_11_LED_GPIO_CTRL:
1473 struct mrvlietypes_ledgpio *gpio =
1474 (struct mrvlietypes_ledgpio*)
1475 cmdptr->params.ledgpio.data;
1477 memmove(&cmdptr->params.ledgpio,
1479 sizeof(struct cmd_ds_802_11_led_ctrl));
1482 cpu_to_le16(CMD_802_11_LED_GPIO_CTRL);
1484 #define ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN 8
1486 cpu_to_le16(le16_to_cpu(gpio->header.len)
1488 + ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN);
1489 gpio->header.len = gpio->header.len;
1496 ret = lbs_cmd_bt_access(cmdptr, cmd_action, pdata_buf);
1499 case CMD_FWT_ACCESS:
1500 ret = lbs_cmd_fwt_access(cmdptr, cmd_action, pdata_buf);
1504 cmdptr->command = cpu_to_le16(CMD_GET_TSF);
1505 cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_get_tsf) +
1509 case CMD_802_11_BEACON_CTRL:
1510 ret = lbs_cmd_bcn_ctrl(priv, cmdptr, cmd_action);
1513 lbs_pr_err("PREP_CMD: unknown command 0x%04x\n", cmd_no);
1518 /* return error, since the command preparation failed */
1520 lbs_deb_host("PREP_CMD: command preparation failed\n");
1521 lbs_cleanup_and_insert_cmd(priv, cmdnode);
1526 cmdnode->cmdwaitqwoken = 0;
1528 lbs_queue_cmd(priv, cmdnode);
1529 wake_up_interruptible(&priv->waitq);
1531 if (wait_option & CMD_OPTION_WAITFORRSP) {
1532 lbs_deb_host("PREP_CMD: wait for response\n");
1534 wait_event_interruptible(cmdnode->cmdwait_q,
1535 cmdnode->cmdwaitqwoken);
1538 spin_lock_irqsave(&priv->driver_lock, flags);
1539 if (priv->cur_cmd_retcode) {
1540 lbs_deb_host("PREP_CMD: command failed with return code %d\n",
1541 priv->cur_cmd_retcode);
1542 priv->cur_cmd_retcode = 0;
1545 spin_unlock_irqrestore(&priv->driver_lock, flags);
1548 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1553 * @brief This function allocates the command buffer and link
1554 * it to command free queue.
1556 * @param priv A pointer to struct lbs_private structure
1559 int lbs_allocate_cmd_buffer(struct lbs_private *priv)
1564 struct cmd_ctrl_node *cmdarray;
1566 lbs_deb_enter(LBS_DEB_HOST);
1568 /* Allocate and initialize the command array */
1569 bufsize = sizeof(struct cmd_ctrl_node) * LBS_NUM_CMD_BUFFERS;
1570 if (!(cmdarray = kzalloc(bufsize, GFP_KERNEL))) {
1571 lbs_deb_host("ALLOC_CMD_BUF: tempcmd_array is NULL\n");
1575 priv->cmd_array = cmdarray;
1577 /* Allocate and initialize each command buffer in the command array */
1578 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1579 cmdarray[i].cmdbuf = kzalloc(LBS_CMD_BUFFER_SIZE, GFP_KERNEL);
1580 if (!cmdarray[i].cmdbuf) {
1581 lbs_deb_host("ALLOC_CMD_BUF: ptempvirtualaddr is NULL\n");
1587 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1588 init_waitqueue_head(&cmdarray[i].cmdwait_q);
1589 lbs_cleanup_and_insert_cmd(priv, &cmdarray[i]);
1594 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1599 * @brief This function frees the command buffer.
1601 * @param priv A pointer to struct lbs_private structure
1604 int lbs_free_cmd_buffer(struct lbs_private *priv)
1606 struct cmd_ctrl_node *cmdarray;
1609 lbs_deb_enter(LBS_DEB_HOST);
1611 /* need to check if cmd array is allocated or not */
1612 if (priv->cmd_array == NULL) {
1613 lbs_deb_host("FREE_CMD_BUF: cmd_array is NULL\n");
1617 cmdarray = priv->cmd_array;
1619 /* Release shared memory buffers */
1620 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1621 if (cmdarray[i].cmdbuf) {
1622 kfree(cmdarray[i].cmdbuf);
1623 cmdarray[i].cmdbuf = NULL;
1627 /* Release cmd_ctrl_node */
1628 if (priv->cmd_array) {
1629 kfree(priv->cmd_array);
1630 priv->cmd_array = NULL;
1634 lbs_deb_leave(LBS_DEB_HOST);
1639 * @brief This function gets a free command node if available in
1640 * command free queue.
1642 * @param priv A pointer to struct lbs_private structure
1643 * @return cmd_ctrl_node A pointer to cmd_ctrl_node structure or NULL
1645 static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv)
1647 struct cmd_ctrl_node *tempnode;
1648 unsigned long flags;
1650 lbs_deb_enter(LBS_DEB_HOST);
1655 spin_lock_irqsave(&priv->driver_lock, flags);
1657 if (!list_empty(&priv->cmdfreeq)) {
1658 tempnode = list_first_entry(&priv->cmdfreeq,
1659 struct cmd_ctrl_node, list);
1660 list_del(&tempnode->list);
1662 lbs_deb_host("GET_CMD_NODE: cmd_ctrl_node is not available\n");
1666 spin_unlock_irqrestore(&priv->driver_lock, flags);
1668 lbs_deb_leave(LBS_DEB_HOST);
1673 * @brief This function executes next command in command
1674 * pending queue. It will put firmware back to PS mode
1677 * @param priv A pointer to struct lbs_private structure
1680 int lbs_execute_next_command(struct lbs_private *priv)
1682 struct cmd_ctrl_node *cmdnode = NULL;
1683 struct cmd_header *cmd;
1684 unsigned long flags;
1687 /* Debug group is LBS_DEB_THREAD and not LBS_DEB_HOST, because the
1688 * only caller to us is lbs_thread() and we get even when a
1689 * data packet is received */
1690 lbs_deb_enter(LBS_DEB_THREAD);
1692 spin_lock_irqsave(&priv->driver_lock, flags);
1694 if (priv->cur_cmd) {
1695 lbs_pr_alert( "EXEC_NEXT_CMD: already processing command!\n");
1696 spin_unlock_irqrestore(&priv->driver_lock, flags);
1701 if (!list_empty(&priv->cmdpendingq)) {
1702 cmdnode = list_first_entry(&priv->cmdpendingq,
1703 struct cmd_ctrl_node, list);
1706 spin_unlock_irqrestore(&priv->driver_lock, flags);
1709 cmd = cmdnode->cmdbuf;
1711 if (is_command_allowed_in_ps(le16_to_cpu(cmd->command))) {
1712 if ((priv->psstate == PS_STATE_SLEEP) ||
1713 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1715 "EXEC_NEXT_CMD: cannot send cmd 0x%04x in psstate %d\n",
1716 le16_to_cpu(cmd->command),
1721 lbs_deb_host("EXEC_NEXT_CMD: OK to send command "
1722 "0x%04x in psstate %d\n",
1723 le16_to_cpu(cmd->command), priv->psstate);
1724 } else if (priv->psstate != PS_STATE_FULL_POWER) {
1726 * 1. Non-PS command:
1727 * Queue it. set needtowakeup to TRUE if current state
1728 * is SLEEP, otherwise call lbs_ps_wakeup to send Exit_PS.
1729 * 2. PS command but not Exit_PS:
1731 * 3. PS command Exit_PS:
1732 * Set needtowakeup to TRUE if current state is SLEEP,
1733 * otherwise send this command down to firmware
1736 if (cmd->command != cpu_to_le16(CMD_802_11_PS_MODE)) {
1737 /* Prepare to send Exit PS,
1738 * this non PS command will be sent later */
1739 if ((priv->psstate == PS_STATE_SLEEP)
1740 || (priv->psstate == PS_STATE_PRE_SLEEP)
1742 /* w/ new scheme, it will not reach here.
1743 since it is blocked in main_thread. */
1744 priv->needtowakeup = 1;
1746 lbs_ps_wakeup(priv, 0);
1752 * PS command. Ignore it if it is not Exit_PS.
1753 * otherwise send it down immediately.
1755 struct cmd_ds_802_11_ps_mode *psm = (void *)&cmd[1];
1758 "EXEC_NEXT_CMD: PS cmd, action 0x%02x\n",
1761 cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1763 "EXEC_NEXT_CMD: ignore ENTER_PS cmd\n");
1764 list_del(&cmdnode->list);
1765 spin_lock_irqsave(&priv->driver_lock, flags);
1766 lbs_complete_command(priv, cmdnode, 0);
1767 spin_unlock_irqrestore(&priv->driver_lock, flags);
1773 if ((priv->psstate == PS_STATE_SLEEP) ||
1774 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1776 "EXEC_NEXT_CMD: ignore EXIT_PS cmd in sleep\n");
1777 list_del(&cmdnode->list);
1778 spin_lock_irqsave(&priv->driver_lock, flags);
1779 lbs_complete_command(priv, cmdnode, 0);
1780 spin_unlock_irqrestore(&priv->driver_lock, flags);
1781 priv->needtowakeup = 1;
1788 "EXEC_NEXT_CMD: sending EXIT_PS\n");
1791 list_del(&cmdnode->list);
1792 lbs_deb_host("EXEC_NEXT_CMD: sending command 0x%04x\n",
1793 le16_to_cpu(cmd->command));
1794 lbs_submit_command(priv, cmdnode);
1797 * check if in power save mode, if yes, put the device back
1800 if ((priv->psmode != LBS802_11POWERMODECAM) &&
1801 (priv->psstate == PS_STATE_FULL_POWER) &&
1802 ((priv->connect_status == LBS_CONNECTED) ||
1803 (priv->mesh_connect_status == LBS_CONNECTED))) {
1804 if (priv->secinfo.WPAenabled ||
1805 priv->secinfo.WPA2enabled) {
1806 /* check for valid WPA group keys */
1807 if (priv->wpa_mcast_key.len ||
1808 priv->wpa_unicast_key.len) {
1810 "EXEC_NEXT_CMD: WPA enabled and GTK_SET"
1811 " go back to PS_SLEEP");
1812 lbs_ps_sleep(priv, 0);
1816 "EXEC_NEXT_CMD: cmdpendingq empty, "
1817 "go back to PS_SLEEP");
1818 lbs_ps_sleep(priv, 0);
1825 lbs_deb_leave(LBS_DEB_THREAD);
1829 void lbs_send_iwevcustom_event(struct lbs_private *priv, s8 *str)
1831 union iwreq_data iwrq;
1834 lbs_deb_enter(LBS_DEB_WEXT);
1836 memset(&iwrq, 0, sizeof(union iwreq_data));
1837 memset(buf, 0, sizeof(buf));
1839 snprintf(buf, sizeof(buf) - 1, "%s", str);
1841 iwrq.data.length = strlen(buf) + 1 + IW_EV_LCP_LEN;
1843 /* Send Event to upper layer */
1844 lbs_deb_wext("event indication string %s\n", (char *)buf);
1845 lbs_deb_wext("event indication length %d\n", iwrq.data.length);
1846 lbs_deb_wext("sending wireless event IWEVCUSTOM for %s\n", str);
1848 wireless_send_event(priv->dev, IWEVCUSTOM, &iwrq, buf);
1850 lbs_deb_leave(LBS_DEB_WEXT);
1853 static void lbs_send_confirmsleep(struct lbs_private *priv)
1855 unsigned long flags;
1858 lbs_deb_enter(LBS_DEB_HOST);
1859 lbs_deb_hex(LBS_DEB_HOST, "sleep confirm", (u8 *) &confirm_sleep,
1860 sizeof(confirm_sleep));
1862 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) &confirm_sleep,
1863 sizeof(confirm_sleep));
1865 lbs_pr_alert("confirm_sleep failed\n");
1869 spin_lock_irqsave(&priv->driver_lock, flags);
1871 /* We don't get a response on the sleep-confirmation */
1872 priv->dnld_sent = DNLD_RES_RECEIVED;
1874 /* If nothing to do, go back to sleep (?) */
1875 if (!__kfifo_len(priv->event_fifo) && !priv->resp_len[priv->resp_idx])
1876 priv->psstate = PS_STATE_SLEEP;
1878 spin_unlock_irqrestore(&priv->driver_lock, flags);
1881 lbs_deb_leave(LBS_DEB_HOST);
1884 void lbs_ps_sleep(struct lbs_private *priv, int wait_option)
1886 lbs_deb_enter(LBS_DEB_HOST);
1889 * PS is currently supported only in Infrastructure mode
1890 * Remove this check if it is to be supported in IBSS mode also
1893 lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1894 CMD_SUBCMD_ENTER_PS, wait_option, 0, NULL);
1896 lbs_deb_leave(LBS_DEB_HOST);
1900 * @brief This function sends Exit_PS command to firmware.
1902 * @param priv A pointer to struct lbs_private structure
1903 * @param wait_option wait response or not
1906 void lbs_ps_wakeup(struct lbs_private *priv, int wait_option)
1910 lbs_deb_enter(LBS_DEB_HOST);
1912 Localpsmode = cpu_to_le32(LBS802_11POWERMODECAM);
1914 lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
1916 wait_option, 0, &Localpsmode);
1918 lbs_deb_leave(LBS_DEB_HOST);
1922 * @brief This function checks condition and prepares to
1923 * send sleep confirm command to firmware if ok.
1925 * @param priv A pointer to struct lbs_private structure
1926 * @param psmode Power Saving mode
1929 void lbs_ps_confirm_sleep(struct lbs_private *priv)
1931 unsigned long flags =0;
1934 lbs_deb_enter(LBS_DEB_HOST);
1936 spin_lock_irqsave(&priv->driver_lock, flags);
1937 if (priv->dnld_sent) {
1939 lbs_deb_host("dnld_sent was set\n");
1942 /* In-progress command? */
1943 if (priv->cur_cmd) {
1945 lbs_deb_host("cur_cmd was set\n");
1948 /* Pending events or command responses? */
1949 if (__kfifo_len(priv->event_fifo) || priv->resp_len[priv->resp_idx]) {
1951 lbs_deb_host("pending events or command responses\n");
1953 spin_unlock_irqrestore(&priv->driver_lock, flags);
1956 lbs_deb_host("sending lbs_ps_confirm_sleep\n");
1957 lbs_send_confirmsleep(priv);
1959 lbs_deb_host("sleep confirm has been delayed\n");
1962 lbs_deb_leave(LBS_DEB_HOST);
1967 * @brief Configures the transmission power control functionality.
1969 * @param priv A pointer to struct lbs_private structure
1970 * @param enable Transmission power control enable
1971 * @param p0 Power level when link quality is good (dBm).
1972 * @param p1 Power level when link quality is fair (dBm).
1973 * @param p2 Power level when link quality is poor (dBm).
1974 * @param usesnr Use Signal to Noise Ratio in TPC
1976 * @return 0 on success
1978 int lbs_set_tpc_cfg(struct lbs_private *priv, int enable, int8_t p0, int8_t p1,
1979 int8_t p2, int usesnr)
1981 struct cmd_ds_802_11_tpc_cfg cmd;
1984 memset(&cmd, 0, sizeof(cmd));
1985 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1986 cmd.action = cpu_to_le16(CMD_ACT_SET);
1987 cmd.enable = !!enable;
1988 cmd.usesnr = !!usesnr;
1993 ret = lbs_cmd_with_response(priv, CMD_802_11_TPC_CFG, &cmd);
1999 * @brief Configures the power adaptation settings.
2001 * @param priv A pointer to struct lbs_private structure
2002 * @param enable Power adaptation enable
2003 * @param p0 Power level for 1, 2, 5.5 and 11 Mbps (dBm).
2004 * @param p1 Power level for 6, 9, 12, 18, 22, 24 and 36 Mbps (dBm).
2005 * @param p2 Power level for 48 and 54 Mbps (dBm).
2007 * @return 0 on Success
2010 int lbs_set_power_adapt_cfg(struct lbs_private *priv, int enable, int8_t p0,
2011 int8_t p1, int8_t p2)
2013 struct cmd_ds_802_11_pa_cfg cmd;
2016 memset(&cmd, 0, sizeof(cmd));
2017 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
2018 cmd.action = cpu_to_le16(CMD_ACT_SET);
2019 cmd.enable = !!enable;
2024 ret = lbs_cmd_with_response(priv, CMD_802_11_PA_CFG , &cmd);
2030 static struct cmd_ctrl_node *__lbs_cmd_async(struct lbs_private *priv,
2031 uint16_t command, struct cmd_header *in_cmd, int in_cmd_size,
2032 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
2033 unsigned long callback_arg)
2035 struct cmd_ctrl_node *cmdnode;
2037 lbs_deb_enter(LBS_DEB_HOST);
2039 if (priv->surpriseremoved) {
2040 lbs_deb_host("PREP_CMD: card removed\n");
2041 cmdnode = ERR_PTR(-ENOENT);
2045 cmdnode = lbs_get_cmd_ctrl_node(priv);
2046 if (cmdnode == NULL) {
2047 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
2049 /* Wake up main thread to execute next command */
2050 wake_up_interruptible(&priv->waitq);
2051 cmdnode = ERR_PTR(-ENOBUFS);
2055 cmdnode->callback = callback;
2056 cmdnode->callback_arg = callback_arg;
2058 /* Copy the incoming command to the buffer */
2059 memcpy(cmdnode->cmdbuf, in_cmd, in_cmd_size);
2061 /* Set sequence number, clean result, move to buffer */
2063 cmdnode->cmdbuf->command = cpu_to_le16(command);
2064 cmdnode->cmdbuf->size = cpu_to_le16(in_cmd_size);
2065 cmdnode->cmdbuf->seqnum = cpu_to_le16(priv->seqnum);
2066 cmdnode->cmdbuf->result = 0;
2068 lbs_deb_host("PREP_CMD: command 0x%04x\n", command);
2070 cmdnode->cmdwaitqwoken = 0;
2071 lbs_queue_cmd(priv, cmdnode);
2072 wake_up_interruptible(&priv->waitq);
2075 lbs_deb_leave_args(LBS_DEB_HOST, "ret %p", cmdnode);
2079 void lbs_cmd_async(struct lbs_private *priv, uint16_t command,
2080 struct cmd_header *in_cmd, int in_cmd_size)
2082 lbs_deb_enter(LBS_DEB_CMD);
2083 __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
2084 lbs_cmd_async_callback, 0);
2085 lbs_deb_leave(LBS_DEB_CMD);
2088 int __lbs_cmd(struct lbs_private *priv, uint16_t command,
2089 struct cmd_header *in_cmd, int in_cmd_size,
2090 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
2091 unsigned long callback_arg)
2093 struct cmd_ctrl_node *cmdnode;
2094 unsigned long flags;
2097 lbs_deb_enter(LBS_DEB_HOST);
2099 cmdnode = __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
2100 callback, callback_arg);
2101 if (IS_ERR(cmdnode)) {
2102 ret = PTR_ERR(cmdnode);
2107 wait_event_interruptible(cmdnode->cmdwait_q, cmdnode->cmdwaitqwoken);
2109 spin_lock_irqsave(&priv->driver_lock, flags);
2110 ret = cmdnode->result;
2112 lbs_pr_info("PREP_CMD: command 0x%04x failed: %d\n",
2115 __lbs_cleanup_and_insert_cmd(priv, cmdnode);
2116 spin_unlock_irqrestore(&priv->driver_lock, flags);
2119 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
2122 EXPORT_SYMBOL_GPL(__lbs_cmd);