libertas: make worker thread not freezable
[linux-2.6] / drivers / net / wireless / libertas / cmdresp.c
1 /**
2   * This file contains the handling of command
3   * responses as well as events generated by firmware.
4   */
5 #include <linux/delay.h>
6 #include <linux/if_arp.h>
7 #include <linux/netdevice.h>
8
9 #include <net/iw_handler.h>
10
11 #include "host.h"
12 #include "decl.h"
13 #include "defs.h"
14 #include "dev.h"
15 #include "join.h"
16 #include "wext.h"
17
18 /**
19  *  @brief This function handles disconnect event. it
20  *  reports disconnect to upper layer, clean tx/rx packets,
21  *  reset link state etc.
22  *
23  *  @param priv    A pointer to struct lbs_private structure
24  *  @return        n/a
25  */
26 void lbs_mac_event_disconnected(struct lbs_private *priv)
27 {
28         union iwreq_data wrqu;
29
30         if (priv->connect_status != LBS_CONNECTED)
31                 return;
32
33         lbs_deb_enter(LBS_DEB_ASSOC);
34
35         memset(wrqu.ap_addr.sa_data, 0x00, ETH_ALEN);
36         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
37
38         /*
39          * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
40          * It causes problem in the Supplicant
41          */
42
43         msleep_interruptible(1000);
44         wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
45
46         /* report disconnect to upper layer */
47         netif_stop_queue(priv->dev);
48         netif_carrier_off(priv->dev);
49
50         /* Free Tx and Rx packets */
51         kfree_skb(priv->currenttxskb);
52         priv->currenttxskb = NULL;
53         priv->tx_pending_len = 0;
54
55         /* reset SNR/NF/RSSI values */
56         memset(priv->SNR, 0x00, sizeof(priv->SNR));
57         memset(priv->NF, 0x00, sizeof(priv->NF));
58         memset(priv->RSSI, 0x00, sizeof(priv->RSSI));
59         memset(priv->rawSNR, 0x00, sizeof(priv->rawSNR));
60         memset(priv->rawNF, 0x00, sizeof(priv->rawNF));
61         priv->nextSNRNF = 0;
62         priv->numSNRNF = 0;
63         priv->connect_status = LBS_DISCONNECTED;
64
65         /* Clear out associated SSID and BSSID since connection is
66          * no longer valid.
67          */
68         memset(&priv->curbssparams.bssid, 0, ETH_ALEN);
69         memset(&priv->curbssparams.ssid, 0, IW_ESSID_MAX_SIZE);
70         priv->curbssparams.ssid_len = 0;
71
72         if (priv->psstate != PS_STATE_FULL_POWER) {
73                 /* make firmware to exit PS mode */
74                 lbs_deb_cmd("disconnected, so exit PS mode\n");
75                 lbs_ps_wakeup(priv, 0);
76         }
77         lbs_deb_leave(LBS_DEB_CMD);
78 }
79
80 /**
81  *  @brief This function handles MIC failure event.
82  *
83  *  @param priv    A pointer to struct lbs_private structure
84  *  @para  event   the event id
85  *  @return        n/a
86  */
87 static void handle_mic_failureevent(struct lbs_private *priv, u32 event)
88 {
89         char buf[50];
90
91         lbs_deb_enter(LBS_DEB_CMD);
92         memset(buf, 0, sizeof(buf));
93
94         sprintf(buf, "%s", "MLME-MICHAELMICFAILURE.indication ");
95
96         if (event == MACREG_INT_CODE_MIC_ERR_UNICAST) {
97                 strcat(buf, "unicast ");
98         } else {
99                 strcat(buf, "multicast ");
100         }
101
102         lbs_send_iwevcustom_event(priv, buf);
103         lbs_deb_leave(LBS_DEB_CMD);
104 }
105
106 static int lbs_ret_reg_access(struct lbs_private *priv,
107                                u16 type, struct cmd_ds_command *resp)
108 {
109         int ret = 0;
110
111         lbs_deb_enter(LBS_DEB_CMD);
112
113         switch (type) {
114         case CMD_RET(CMD_MAC_REG_ACCESS):
115                 {
116                         struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
117
118                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
119                         priv->offsetvalue.value = le32_to_cpu(reg->value);
120                         break;
121                 }
122
123         case CMD_RET(CMD_BBP_REG_ACCESS):
124                 {
125                         struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
126
127                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
128                         priv->offsetvalue.value = reg->value;
129                         break;
130                 }
131
132         case CMD_RET(CMD_RF_REG_ACCESS):
133                 {
134                         struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
135
136                         priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
137                         priv->offsetvalue.value = reg->value;
138                         break;
139                 }
140
141         default:
142                 ret = -1;
143         }
144
145         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
146         return ret;
147 }
148
149 static int lbs_ret_802_11_sleep_params(struct lbs_private *priv,
150                                         struct cmd_ds_command *resp)
151 {
152         struct cmd_ds_802_11_sleep_params *sp = &resp->params.sleep_params;
153
154         lbs_deb_enter(LBS_DEB_CMD);
155
156         lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, calcontrol 0x%x "
157                     "extsleepclk 0x%x\n", le16_to_cpu(sp->error),
158                     le16_to_cpu(sp->offset), le16_to_cpu(sp->stabletime),
159                     sp->calcontrol, sp->externalsleepclk);
160
161         priv->sp.sp_error = le16_to_cpu(sp->error);
162         priv->sp.sp_offset = le16_to_cpu(sp->offset);
163         priv->sp.sp_stabletime = le16_to_cpu(sp->stabletime);
164         priv->sp.sp_calcontrol = sp->calcontrol;
165         priv->sp.sp_extsleepclk = sp->externalsleepclk;
166         priv->sp.sp_reserved = le16_to_cpu(sp->reserved);
167
168         lbs_deb_enter(LBS_DEB_CMD);
169         return 0;
170 }
171
172 static int lbs_ret_802_11_stat(struct lbs_private *priv,
173                                 struct cmd_ds_command *resp)
174 {
175         lbs_deb_enter(LBS_DEB_CMD);
176 /*      currently priv->wlan802_11Stat is unused
177
178         struct cmd_ds_802_11_get_stat *p11Stat = &resp->params.gstat;
179
180         // TODO Convert it to Big endian befor copy
181         memcpy(&priv->wlan802_11Stat,
182                p11Stat, sizeof(struct cmd_ds_802_11_get_stat));
183 */
184         lbs_deb_leave(LBS_DEB_CMD);
185         return 0;
186 }
187
188 static int lbs_ret_802_11_snmp_mib(struct lbs_private *priv,
189                                     struct cmd_ds_command *resp)
190 {
191         struct cmd_ds_802_11_snmp_mib *smib = &resp->params.smib;
192         u16 oid = le16_to_cpu(smib->oid);
193         u16 querytype = le16_to_cpu(smib->querytype);
194
195         lbs_deb_enter(LBS_DEB_CMD);
196
197         lbs_deb_cmd("SNMP_RESP: oid 0x%x, querytype 0x%x\n", oid,
198                querytype);
199         lbs_deb_cmd("SNMP_RESP: Buf size %d\n", le16_to_cpu(smib->bufsize));
200
201         if (querytype == CMD_ACT_GET) {
202                 switch (oid) {
203                 case FRAGTHRESH_I:
204                         priv->fragthsd =
205                                 le16_to_cpu(*((__le16 *)(smib->value)));
206                         lbs_deb_cmd("SNMP_RESP: frag threshold %u\n",
207                                     priv->fragthsd);
208                         break;
209                 case RTSTHRESH_I:
210                         priv->rtsthsd =
211                                 le16_to_cpu(*((__le16 *)(smib->value)));
212                         lbs_deb_cmd("SNMP_RESP: rts threshold %u\n",
213                                     priv->rtsthsd);
214                         break;
215                 case SHORT_RETRYLIM_I:
216                         priv->txretrycount =
217                                 le16_to_cpu(*((__le16 *)(smib->value)));
218                         lbs_deb_cmd("SNMP_RESP: tx retry count %u\n",
219                                     priv->rtsthsd);
220                         break;
221                 default:
222                         break;
223                 }
224         }
225
226         lbs_deb_enter(LBS_DEB_CMD);
227         return 0;
228 }
229
230 static int lbs_ret_802_11_key_material(struct lbs_private *priv,
231                                         struct cmd_ds_command *resp)
232 {
233         struct cmd_ds_802_11_key_material *pkeymaterial =
234             &resp->params.keymaterial;
235         u16 action = le16_to_cpu(pkeymaterial->action);
236
237         lbs_deb_enter(LBS_DEB_CMD);
238
239         /* Copy the returned key to driver private data */
240         if (action == CMD_ACT_GET) {
241                 u8 * buf_ptr = (u8 *) &pkeymaterial->keyParamSet;
242                 u8 * resp_end = (u8 *) (resp + le16_to_cpu(resp->size));
243
244                 while (buf_ptr < resp_end) {
245                         struct MrvlIEtype_keyParamSet * pkeyparamset =
246                             (struct MrvlIEtype_keyParamSet *) buf_ptr;
247                         struct enc_key * pkey;
248                         u16 param_set_len = le16_to_cpu(pkeyparamset->length);
249                         u16 key_len = le16_to_cpu(pkeyparamset->keylen);
250                         u16 key_flags = le16_to_cpu(pkeyparamset->keyinfo);
251                         u16 key_type = le16_to_cpu(pkeyparamset->keytypeid);
252                         u8 * end;
253
254                         end = (u8 *) pkeyparamset + sizeof (pkeyparamset->type)
255                                                   + sizeof (pkeyparamset->length)
256                                                   + param_set_len;
257                         /* Make sure we don't access past the end of the IEs */
258                         if (end > resp_end)
259                                 break;
260
261                         if (key_flags & KEY_INFO_WPA_UNICAST)
262                                 pkey = &priv->wpa_unicast_key;
263                         else if (key_flags & KEY_INFO_WPA_MCAST)
264                                 pkey = &priv->wpa_mcast_key;
265                         else
266                                 break;
267
268                         /* Copy returned key into driver */
269                         memset(pkey, 0, sizeof(struct enc_key));
270                         if (key_len > sizeof(pkey->key))
271                                 break;
272                         pkey->type = key_type;
273                         pkey->flags = key_flags;
274                         pkey->len = key_len;
275                         memcpy(pkey->key, pkeyparamset->key, pkey->len);
276
277                         buf_ptr = end + 1;
278                 }
279         }
280
281         lbs_deb_enter(LBS_DEB_CMD);
282         return 0;
283 }
284
285 static int lbs_ret_802_11_mac_address(struct lbs_private *priv,
286                                        struct cmd_ds_command *resp)
287 {
288         struct cmd_ds_802_11_mac_address *macadd = &resp->params.macadd;
289
290         lbs_deb_enter(LBS_DEB_CMD);
291
292         memcpy(priv->current_addr, macadd->macadd, ETH_ALEN);
293
294         lbs_deb_enter(LBS_DEB_CMD);
295         return 0;
296 }
297
298 static int lbs_ret_802_11_rf_tx_power(struct lbs_private *priv,
299                                        struct cmd_ds_command *resp)
300 {
301         struct cmd_ds_802_11_rf_tx_power *rtp = &resp->params.txp;
302
303         lbs_deb_enter(LBS_DEB_CMD);
304
305         priv->txpowerlevel = le16_to_cpu(rtp->currentlevel);
306
307         lbs_deb_cmd("TX power currently %d\n", priv->txpowerlevel);
308
309         lbs_deb_leave(LBS_DEB_CMD);
310         return 0;
311 }
312
313 static int lbs_ret_802_11_rate_adapt_rateset(struct lbs_private *priv,
314                                               struct cmd_ds_command *resp)
315 {
316         struct cmd_ds_802_11_rate_adapt_rateset *rates = &resp->params.rateset;
317
318         lbs_deb_enter(LBS_DEB_CMD);
319
320         if (rates->action == CMD_ACT_GET) {
321                 priv->enablehwauto = le16_to_cpu(rates->enablehwauto);
322                 priv->ratebitmap = le16_to_cpu(rates->bitmap);
323         }
324
325         lbs_deb_leave(LBS_DEB_CMD);
326         return 0;
327 }
328
329 static int lbs_ret_802_11_rssi(struct lbs_private *priv,
330                                 struct cmd_ds_command *resp)
331 {
332         struct cmd_ds_802_11_rssi_rsp *rssirsp = &resp->params.rssirsp;
333
334         lbs_deb_enter(LBS_DEB_CMD);
335
336         /* store the non average value */
337         priv->SNR[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->SNR);
338         priv->NF[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->noisefloor);
339
340         priv->SNR[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgSNR);
341         priv->NF[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgnoisefloor);
342
343         priv->RSSI[TYPE_BEACON][TYPE_NOAVG] =
344             CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_NOAVG],
345                      priv->NF[TYPE_BEACON][TYPE_NOAVG]);
346
347         priv->RSSI[TYPE_BEACON][TYPE_AVG] =
348             CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_AVG] / AVG_SCALE,
349                      priv->NF[TYPE_BEACON][TYPE_AVG] / AVG_SCALE);
350
351         lbs_deb_cmd("RSSI: beacon %d, avg %d\n",
352                priv->RSSI[TYPE_BEACON][TYPE_NOAVG],
353                priv->RSSI[TYPE_BEACON][TYPE_AVG]);
354
355         lbs_deb_leave(LBS_DEB_CMD);
356         return 0;
357 }
358
359 static int lbs_ret_802_11_eeprom_access(struct lbs_private *priv,
360                                   struct cmd_ds_command *resp)
361 {
362         struct lbs_ioctl_regrdwr *pbuf;
363         pbuf = (struct lbs_ioctl_regrdwr *) priv->prdeeprom;
364
365         lbs_deb_enter_args(LBS_DEB_CMD, "len %d",
366                le16_to_cpu(resp->params.rdeeprom.bytecount));
367         if (pbuf->NOB < le16_to_cpu(resp->params.rdeeprom.bytecount)) {
368                 pbuf->NOB = 0;
369                 lbs_deb_cmd("EEPROM read length too big\n");
370                 return -1;
371         }
372         pbuf->NOB = le16_to_cpu(resp->params.rdeeprom.bytecount);
373         if (pbuf->NOB > 0) {
374
375                 memcpy(&pbuf->value, (u8 *) & resp->params.rdeeprom.value,
376                        le16_to_cpu(resp->params.rdeeprom.bytecount));
377                 lbs_deb_hex(LBS_DEB_CMD, "EEPROM", (char *)&pbuf->value,
378                         le16_to_cpu(resp->params.rdeeprom.bytecount));
379         }
380         lbs_deb_leave(LBS_DEB_CMD);
381         return 0;
382 }
383
384 static int lbs_ret_get_log(struct lbs_private *priv,
385                             struct cmd_ds_command *resp)
386 {
387         struct cmd_ds_802_11_get_log *logmessage = &resp->params.glog;
388
389         lbs_deb_enter(LBS_DEB_CMD);
390
391         /* Stored little-endian */
392         memcpy(&priv->logmsg, logmessage, sizeof(struct cmd_ds_802_11_get_log));
393
394         lbs_deb_leave(LBS_DEB_CMD);
395         return 0;
396 }
397
398 static int lbs_ret_802_11_enable_rsn(struct lbs_private *priv,
399                                           struct cmd_ds_command *resp)
400 {
401         struct cmd_ds_802_11_enable_rsn *enable_rsn = &resp->params.enbrsn;
402         u32 * pdata_buf = priv->cur_cmd->pdata_buf;
403
404         lbs_deb_enter(LBS_DEB_CMD);
405
406         if (enable_rsn->action == cpu_to_le16(CMD_ACT_GET)) {
407                 if (pdata_buf)
408                         *pdata_buf = (u32) le16_to_cpu(enable_rsn->enable);
409         }
410
411         lbs_deb_leave(LBS_DEB_CMD);
412         return 0;
413 }
414
415 static int lbs_ret_802_11_bcn_ctrl(struct lbs_private * priv,
416                                         struct cmd_ds_command *resp)
417 {
418         struct cmd_ds_802_11_beacon_control *bcn_ctrl =
419             &resp->params.bcn_ctrl;
420
421         lbs_deb_enter(LBS_DEB_CMD);
422
423         if (bcn_ctrl->action == CMD_ACT_GET) {
424                 priv->beacon_enable = (u8) le16_to_cpu(bcn_ctrl->beacon_enable);
425                 priv->beacon_period = le16_to_cpu(bcn_ctrl->beacon_period);
426         }
427
428         lbs_deb_enter(LBS_DEB_CMD);
429         return 0;
430 }
431
432 static int lbs_ret_802_11_subscribe_event(struct lbs_private *priv,
433         struct cmd_ds_command *resp)
434 {
435         struct cmd_ds_802_11_subscribe_event *cmd_event =
436                 &resp->params.subscribe_event;
437         struct cmd_ds_802_11_subscribe_event *dst_event =
438                 priv->cur_cmd->pdata_buf;
439
440         lbs_deb_enter(LBS_DEB_CMD);
441
442         if (dst_event->action == cpu_to_le16(CMD_ACT_GET)) {
443                 dst_event->events = cmd_event->events;
444                 memcpy(dst_event->tlv, cmd_event->tlv, sizeof(dst_event->tlv));
445         }
446
447         lbs_deb_leave(LBS_DEB_CMD);
448         return 0;
449 }
450
451 static inline int handle_cmd_response(struct lbs_private *priv,
452                                       unsigned long dummy,
453                                       struct cmd_header *cmd_response)
454 {
455         struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
456         int ret = 0;
457         unsigned long flags;
458         uint16_t respcmd = le16_to_cpu(resp->command);
459
460         lbs_deb_enter(LBS_DEB_HOST);
461
462         switch (respcmd) {
463         case CMD_RET(CMD_MAC_REG_ACCESS):
464         case CMD_RET(CMD_BBP_REG_ACCESS):
465         case CMD_RET(CMD_RF_REG_ACCESS):
466                 ret = lbs_ret_reg_access(priv, respcmd, resp);
467                 break;
468
469         case CMD_RET(CMD_802_11_SCAN):
470                 ret = lbs_ret_80211_scan(priv, resp);
471                 break;
472
473         case CMD_RET(CMD_802_11_GET_LOG):
474                 ret = lbs_ret_get_log(priv, resp);
475                 break;
476
477         case CMD_RET_802_11_ASSOCIATE:
478         case CMD_RET(CMD_802_11_ASSOCIATE):
479         case CMD_RET(CMD_802_11_REASSOCIATE):
480                 ret = lbs_ret_80211_associate(priv, resp);
481                 break;
482
483         case CMD_RET(CMD_802_11_DISASSOCIATE):
484         case CMD_RET(CMD_802_11_DEAUTHENTICATE):
485                 ret = lbs_ret_80211_disassociate(priv, resp);
486                 break;
487
488         case CMD_RET(CMD_802_11_AD_HOC_START):
489         case CMD_RET(CMD_802_11_AD_HOC_JOIN):
490                 ret = lbs_ret_80211_ad_hoc_start(priv, resp);
491                 break;
492
493         case CMD_RET(CMD_802_11_GET_STAT):
494                 ret = lbs_ret_802_11_stat(priv, resp);
495                 break;
496
497         case CMD_RET(CMD_802_11_SNMP_MIB):
498                 ret = lbs_ret_802_11_snmp_mib(priv, resp);
499                 break;
500
501         case CMD_RET(CMD_802_11_RF_TX_POWER):
502                 ret = lbs_ret_802_11_rf_tx_power(priv, resp);
503                 break;
504
505         case CMD_RET(CMD_802_11_SET_AFC):
506         case CMD_RET(CMD_802_11_GET_AFC):
507                 spin_lock_irqsave(&priv->driver_lock, flags);
508                 memmove(priv->cur_cmd->pdata_buf, &resp->params.afc,
509                         sizeof(struct cmd_ds_802_11_afc));
510                 spin_unlock_irqrestore(&priv->driver_lock, flags);
511
512                 break;
513
514         case CMD_RET(CMD_MAC_MULTICAST_ADR):
515         case CMD_RET(CMD_MAC_CONTROL):
516         case CMD_RET(CMD_802_11_SET_WEP):
517         case CMD_RET(CMD_802_11_RESET):
518         case CMD_RET(CMD_802_11_AUTHENTICATE):
519         case CMD_RET(CMD_802_11_RADIO_CONTROL):
520         case CMD_RET(CMD_802_11_BEACON_STOP):
521                 break;
522
523         case CMD_RET(CMD_802_11_ENABLE_RSN):
524                 ret = lbs_ret_802_11_enable_rsn(priv, resp);
525                 break;
526
527         case CMD_RET(CMD_802_11_RATE_ADAPT_RATESET):
528                 ret = lbs_ret_802_11_rate_adapt_rateset(priv, resp);
529                 break;
530
531         case CMD_RET(CMD_802_11_RSSI):
532                 ret = lbs_ret_802_11_rssi(priv, resp);
533                 break;
534
535         case CMD_RET(CMD_802_11_MAC_ADDRESS):
536                 ret = lbs_ret_802_11_mac_address(priv, resp);
537                 break;
538
539         case CMD_RET(CMD_802_11_AD_HOC_STOP):
540                 ret = lbs_ret_80211_ad_hoc_stop(priv, resp);
541                 break;
542
543         case CMD_RET(CMD_802_11_KEY_MATERIAL):
544                 ret = lbs_ret_802_11_key_material(priv, resp);
545                 break;
546
547         case CMD_RET(CMD_802_11_EEPROM_ACCESS):
548                 ret = lbs_ret_802_11_eeprom_access(priv, resp);
549                 break;
550
551         case CMD_RET(CMD_802_11D_DOMAIN_INFO):
552                 ret = lbs_ret_802_11d_domain_info(priv, resp);
553                 break;
554
555         case CMD_RET(CMD_802_11_SLEEP_PARAMS):
556                 ret = lbs_ret_802_11_sleep_params(priv, resp);
557                 break;
558         case CMD_RET(CMD_802_11_INACTIVITY_TIMEOUT):
559                 spin_lock_irqsave(&priv->driver_lock, flags);
560                 *((u16 *) priv->cur_cmd->pdata_buf) =
561                     le16_to_cpu(resp->params.inactivity_timeout.timeout);
562                 spin_unlock_irqrestore(&priv->driver_lock, flags);
563                 break;
564
565         case CMD_RET(CMD_802_11_TPC_CFG):
566                 spin_lock_irqsave(&priv->driver_lock, flags);
567                 memmove(priv->cur_cmd->pdata_buf, &resp->params.tpccfg,
568                         sizeof(struct cmd_ds_802_11_tpc_cfg));
569                 spin_unlock_irqrestore(&priv->driver_lock, flags);
570                 break;
571         case CMD_RET(CMD_802_11_LED_GPIO_CTRL):
572                 spin_lock_irqsave(&priv->driver_lock, flags);
573                 memmove(priv->cur_cmd->pdata_buf, &resp->params.ledgpio,
574                         sizeof(struct cmd_ds_802_11_led_ctrl));
575                 spin_unlock_irqrestore(&priv->driver_lock, flags);
576                 break;
577         case CMD_RET(CMD_802_11_SUBSCRIBE_EVENT):
578                 ret = lbs_ret_802_11_subscribe_event(priv, resp);
579                 break;
580
581         case CMD_RET(CMD_802_11_PWR_CFG):
582                 spin_lock_irqsave(&priv->driver_lock, flags);
583                 memmove(priv->cur_cmd->pdata_buf, &resp->params.pwrcfg,
584                         sizeof(struct cmd_ds_802_11_pwr_cfg));
585                 spin_unlock_irqrestore(&priv->driver_lock, flags);
586
587                 break;
588
589         case CMD_RET(CMD_GET_TSF):
590                 spin_lock_irqsave(&priv->driver_lock, flags);
591                 memcpy(priv->cur_cmd->pdata_buf,
592                        &resp->params.gettsf.tsfvalue, sizeof(u64));
593                 spin_unlock_irqrestore(&priv->driver_lock, flags);
594                 break;
595         case CMD_RET(CMD_BT_ACCESS):
596                 spin_lock_irqsave(&priv->driver_lock, flags);
597                 if (priv->cur_cmd->pdata_buf)
598                         memcpy(priv->cur_cmd->pdata_buf,
599                                &resp->params.bt.addr1, 2 * ETH_ALEN);
600                 spin_unlock_irqrestore(&priv->driver_lock, flags);
601                 break;
602         case CMD_RET(CMD_FWT_ACCESS):
603                 spin_lock_irqsave(&priv->driver_lock, flags);
604                 if (priv->cur_cmd->pdata_buf)
605                         memcpy(priv->cur_cmd->pdata_buf, &resp->params.fwt,
606                                sizeof(resp->params.fwt));
607                 spin_unlock_irqrestore(&priv->driver_lock, flags);
608                 break;
609         case CMD_RET(CMD_802_11_BEACON_CTRL):
610                 ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
611                 break;
612
613         default:
614                 lbs_deb_host("CMD_RESP: unknown cmd response 0x%04x\n",
615                              le16_to_cpu(resp->command));
616                 break;
617         }
618         lbs_deb_leave(LBS_DEB_HOST);
619         return ret;
620 }
621
622 int lbs_process_rx_command(struct lbs_private *priv)
623 {
624         uint16_t respcmd, curcmd;
625         struct cmd_header *resp;
626         int ret = 0;
627         unsigned long flags;
628         uint16_t result;
629
630         lbs_deb_enter(LBS_DEB_HOST);
631
632         mutex_lock(&priv->lock);
633         spin_lock_irqsave(&priv->driver_lock, flags);
634
635         if (!priv->cur_cmd) {
636                 lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
637                 ret = -1;
638                 spin_unlock_irqrestore(&priv->driver_lock, flags);
639                 goto done;
640         }
641
642         curcmd = le16_to_cpu(priv->cur_cmd->cmdbuf->command);
643
644         resp = priv->cur_cmd->cmdbuf;
645
646         respcmd = le16_to_cpu(resp->command);
647         result = le16_to_cpu(resp->result);
648
649         lbs_deb_host("CMD_RESP: response 0x%04x, seq %d, size %d, jiffies %lu\n",
650                      respcmd, le16_to_cpu(resp->seqnum), priv->upld_len, jiffies);
651         lbs_deb_hex(LBS_DEB_HOST, "CMD_RESP", (void *) resp, priv->upld_len);
652
653         if (resp->seqnum != priv->cur_cmd->cmdbuf->seqnum) {
654                 lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
655                             le16_to_cpu(resp->seqnum), le16_to_cpu(priv->cur_cmd->cmdbuf->seqnum));
656                 spin_unlock_irqrestore(&priv->driver_lock, flags);
657                 ret = -1;
658                 goto done;
659         }
660         if (respcmd != CMD_RET(curcmd) &&
661             respcmd != CMD_802_11_ASSOCIATE && curcmd != CMD_RET_802_11_ASSOCIATE) {
662                 lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd, curcmd);
663                 spin_unlock_irqrestore(&priv->driver_lock, flags);
664                 ret = -1;
665                 goto done;
666         }
667
668         /* Now we got response from FW, cancel the command timer */
669         del_timer(&priv->command_timer);
670
671         /* Store the response code to cur_cmd_retcode. */
672         priv->cur_cmd_retcode = result;
673
674         if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
675                 struct cmd_ds_802_11_ps_mode *psmode = (void *) resp;
676                 u16 action = le16_to_cpu(psmode->action);
677
678                 lbs_deb_host(
679                        "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
680                        result, action);
681
682                 if (result) {
683                         lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
684                                     result);
685                         /*
686                          * We should not re-try enter-ps command in
687                          * ad-hoc mode. It takes place in
688                          * lbs_execute_next_command().
689                          */
690                         if (priv->mode == IW_MODE_ADHOC &&
691                             action == CMD_SUBCMD_ENTER_PS)
692                                 priv->psmode = LBS802_11POWERMODECAM;
693                 } else if (action == CMD_SUBCMD_ENTER_PS) {
694                         priv->needtowakeup = 0;
695                         priv->psstate = PS_STATE_AWAKE;
696
697                         lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
698                         if (priv->connect_status != LBS_CONNECTED) {
699                                 /*
700                                  * When Deauth Event received before Enter_PS command
701                                  * response, We need to wake up the firmware.
702                                  */
703                                 lbs_deb_host(
704                                        "disconnected, invoking lbs_ps_wakeup\n");
705
706                                 spin_unlock_irqrestore(&priv->driver_lock, flags);
707                                 mutex_unlock(&priv->lock);
708                                 lbs_ps_wakeup(priv, 0);
709                                 mutex_lock(&priv->lock);
710                                 spin_lock_irqsave(&priv->driver_lock, flags);
711                         }
712                 } else if (action == CMD_SUBCMD_EXIT_PS) {
713                         priv->needtowakeup = 0;
714                         priv->psstate = PS_STATE_FULL_POWER;
715                         lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
716                 } else {
717                         lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
718                 }
719
720                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
721                 priv->cur_cmd = NULL;
722                 spin_unlock_irqrestore(&priv->driver_lock, flags);
723
724                 ret = 0;
725                 goto done;
726         }
727
728         /* If the command is not successful, cleanup and return failure */
729         if ((result != 0 || !(respcmd & 0x8000))) {
730                 lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
731                        result, respcmd);
732                 /*
733                  * Handling errors here
734                  */
735                 switch (respcmd) {
736                 case CMD_RET(CMD_GET_HW_SPEC):
737                 case CMD_RET(CMD_802_11_RESET):
738                         lbs_deb_host("CMD_RESP: reset failed\n");
739                         break;
740
741                 }
742
743                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
744                 priv->cur_cmd = NULL;
745                 spin_unlock_irqrestore(&priv->driver_lock, flags);
746
747                 ret = -1;
748                 goto done;
749         }
750
751         spin_unlock_irqrestore(&priv->driver_lock, flags);
752
753         if (priv->cur_cmd && priv->cur_cmd->callback) {
754                 ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
755                                 resp);
756         } else
757                 ret = handle_cmd_response(priv, 0, resp);
758
759         spin_lock_irqsave(&priv->driver_lock, flags);
760
761         if (priv->cur_cmd) {
762                 /* Clean up and Put current command back to cmdfreeq */
763                 __lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
764                 priv->cur_cmd = NULL;
765         }
766         spin_unlock_irqrestore(&priv->driver_lock, flags);
767
768 done:
769         mutex_unlock(&priv->lock);
770         lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
771         return ret;
772 }
773
774 int lbs_process_event(struct lbs_private *priv)
775 {
776         int ret = 0;
777         u32 eventcause;
778
779         lbs_deb_enter(LBS_DEB_CMD);
780
781         spin_lock_irq(&priv->driver_lock);
782         eventcause = priv->eventcause >> SBI_EVENT_CAUSE_SHIFT;
783         spin_unlock_irq(&priv->driver_lock);
784
785         lbs_deb_cmd("event cause %d\n", eventcause);
786
787         switch (eventcause) {
788         case MACREG_INT_CODE_LINK_SENSED:
789                 lbs_deb_cmd("EVENT: MACREG_INT_CODE_LINK_SENSED\n");
790                 break;
791
792         case MACREG_INT_CODE_DEAUTHENTICATED:
793                 lbs_deb_cmd("EVENT: deauthenticated\n");
794                 lbs_mac_event_disconnected(priv);
795                 break;
796
797         case MACREG_INT_CODE_DISASSOCIATED:
798                 lbs_deb_cmd("EVENT: disassociated\n");
799                 lbs_mac_event_disconnected(priv);
800                 break;
801
802         case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
803                 lbs_deb_cmd("EVENT: link lost\n");
804                 lbs_mac_event_disconnected(priv);
805                 break;
806
807         case MACREG_INT_CODE_PS_SLEEP:
808                 lbs_deb_cmd("EVENT: sleep\n");
809
810                 /* handle unexpected PS SLEEP event */
811                 if (priv->psstate == PS_STATE_FULL_POWER) {
812                         lbs_deb_cmd(
813                                "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
814                         break;
815                 }
816                 priv->psstate = PS_STATE_PRE_SLEEP;
817
818                 lbs_ps_confirm_sleep(priv, (u16) priv->psmode);
819
820                 break;
821
822         case MACREG_INT_CODE_PS_AWAKE:
823                 lbs_deb_cmd("EVENT: awake\n");
824
825                 /* handle unexpected PS AWAKE event */
826                 if (priv->psstate == PS_STATE_FULL_POWER) {
827                         lbs_deb_cmd(
828                                "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
829                         break;
830                 }
831
832                 priv->psstate = PS_STATE_AWAKE;
833
834                 if (priv->needtowakeup) {
835                         /*
836                          * wait for the command processing to finish
837                          * before resuming sending
838                          * priv->needtowakeup will be set to FALSE
839                          * in lbs_ps_wakeup()
840                          */
841                         lbs_deb_cmd("waking up ...\n");
842                         lbs_ps_wakeup(priv, 0);
843                 }
844                 break;
845
846         case MACREG_INT_CODE_MIC_ERR_UNICAST:
847                 lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
848                 handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_UNICAST);
849                 break;
850
851         case MACREG_INT_CODE_MIC_ERR_MULTICAST:
852                 lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
853                 handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_MULTICAST);
854                 break;
855         case MACREG_INT_CODE_MIB_CHANGED:
856         case MACREG_INT_CODE_INIT_DONE:
857                 break;
858
859         case MACREG_INT_CODE_ADHOC_BCN_LOST:
860                 lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
861                 break;
862
863         case MACREG_INT_CODE_RSSI_LOW:
864                 lbs_pr_alert("EVENT: rssi low\n");
865                 break;
866         case MACREG_INT_CODE_SNR_LOW:
867                 lbs_pr_alert("EVENT: snr low\n");
868                 break;
869         case MACREG_INT_CODE_MAX_FAIL:
870                 lbs_pr_alert("EVENT: max fail\n");
871                 break;
872         case MACREG_INT_CODE_RSSI_HIGH:
873                 lbs_pr_alert("EVENT: rssi high\n");
874                 break;
875         case MACREG_INT_CODE_SNR_HIGH:
876                 lbs_pr_alert("EVENT: snr high\n");
877                 break;
878
879         case MACREG_INT_CODE_MESH_AUTO_STARTED:
880                 /* Ignore spurious autostart events if autostart is disabled */
881                 if (!priv->mesh_autostart_enabled) {
882                         lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
883                         break;
884                 }
885                 lbs_pr_info("EVENT: MESH_AUTO_STARTED\n");
886                 priv->mesh_connect_status = LBS_CONNECTED;
887                 if (priv->mesh_open) {
888                         netif_carrier_on(priv->mesh_dev);
889                         if (!priv->tx_pending_len)
890                                 netif_wake_queue(priv->mesh_dev);
891                 }
892                 priv->mode = IW_MODE_ADHOC;
893                 schedule_work(&priv->sync_channel);
894                 break;
895
896         default:
897                 lbs_pr_alert("EVENT: unknown event id %d\n", eventcause);
898                 break;
899         }
900
901         spin_lock_irq(&priv->driver_lock);
902         priv->eventcause = 0;
903         spin_unlock_irq(&priv->driver_lock);
904
905         lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
906         return ret;
907 }