Loading...
Note: File does not exist in v6.2.
1/*
2 * This file contains the handling of command.
3 * It prepares command and sends it to firmware when it is ready.
4 */
5
6#include <linux/hardirq.h>
7#include <linux/kfifo.h>
8#include <linux/sched.h>
9#include <linux/slab.h>
10#include <linux/if_arp.h>
11
12#include "decl.h"
13#include "cfg.h"
14#include "cmd.h"
15
16#define CAL_NF(nf) ((s32)(-(s32)(nf)))
17#define CAL_RSSI(snr, nf) ((s32)((s32)(snr) + CAL_NF(nf)))
18
19/**
20 * lbs_cmd_copyback - Simple callback that copies response back into command
21 *
22 * @priv: A pointer to &struct lbs_private structure
23 * @extra: A pointer to the original command structure for which
24 * 'resp' is a response
25 * @resp: A pointer to the command response
26 *
27 * returns: 0 on success, error on failure
28 */
29int lbs_cmd_copyback(struct lbs_private *priv, unsigned long extra,
30 struct cmd_header *resp)
31{
32 struct cmd_header *buf = (void *)extra;
33 uint16_t copy_len;
34
35 copy_len = min(le16_to_cpu(buf->size), le16_to_cpu(resp->size));
36 memcpy(buf, resp, copy_len);
37 return 0;
38}
39EXPORT_SYMBOL_GPL(lbs_cmd_copyback);
40
41/**
42 * lbs_cmd_async_callback - Simple callback that ignores the result.
43 * Use this if you just want to send a command to the hardware, but don't
44 * care for the result.
45 *
46 * @priv: ignored
47 * @extra: ignored
48 * @resp: ignored
49 *
50 * returns: 0 for success
51 */
52static int lbs_cmd_async_callback(struct lbs_private *priv, unsigned long extra,
53 struct cmd_header *resp)
54{
55 return 0;
56}
57
58
59/**
60 * is_command_allowed_in_ps - tests if a command is allowed in Power Save mode
61 *
62 * @cmd: the command ID
63 *
64 * returns: 1 if allowed, 0 if not allowed
65 */
66static u8 is_command_allowed_in_ps(u16 cmd)
67{
68 switch (cmd) {
69 case CMD_802_11_RSSI:
70 return 1;
71 case CMD_802_11_HOST_SLEEP_CFG:
72 return 1;
73 default:
74 break;
75 }
76 return 0;
77}
78
79/**
80 * lbs_update_hw_spec - Updates the hardware details like MAC address
81 * and regulatory region
82 *
83 * @priv: A pointer to &struct lbs_private structure
84 *
85 * returns: 0 on success, error on failure
86 */
87int lbs_update_hw_spec(struct lbs_private *priv)
88{
89 struct cmd_ds_get_hw_spec cmd;
90 int ret = -1;
91 u32 i;
92
93 lbs_deb_enter(LBS_DEB_CMD);
94
95 memset(&cmd, 0, sizeof(cmd));
96 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
97 memcpy(cmd.permanentaddr, priv->current_addr, ETH_ALEN);
98 ret = lbs_cmd_with_response(priv, CMD_GET_HW_SPEC, &cmd);
99 if (ret)
100 goto out;
101
102 priv->fwcapinfo = le32_to_cpu(cmd.fwcapinfo);
103
104 /* The firmware release is in an interesting format: the patch
105 * level is in the most significant nibble ... so fix that: */
106 priv->fwrelease = le32_to_cpu(cmd.fwrelease);
107 priv->fwrelease = (priv->fwrelease << 8) |
108 (priv->fwrelease >> 24 & 0xff);
109
110 /* Some firmware capabilities:
111 * CF card firmware 5.0.16p0: cap 0x00000303
112 * USB dongle firmware 5.110.17p2: cap 0x00000303
113 */
114 netdev_info(priv->dev, "%pM, fw %u.%u.%up%u, cap 0x%08x\n",
115 cmd.permanentaddr,
116 priv->fwrelease >> 24 & 0xff,
117 priv->fwrelease >> 16 & 0xff,
118 priv->fwrelease >> 8 & 0xff,
119 priv->fwrelease & 0xff,
120 priv->fwcapinfo);
121 lbs_deb_cmd("GET_HW_SPEC: hardware interface 0x%x, hardware spec 0x%04x\n",
122 cmd.hwifversion, cmd.version);
123
124 /* Clamp region code to 8-bit since FW spec indicates that it should
125 * only ever be 8-bit, even though the field size is 16-bit. Some firmware
126 * returns non-zero high 8 bits here.
127 *
128 * Firmware version 4.0.102 used in CF8381 has region code shifted. We
129 * need to check for this problem and handle it properly.
130 */
131 if (MRVL_FW_MAJOR_REV(priv->fwrelease) == MRVL_FW_V4)
132 priv->regioncode = (le16_to_cpu(cmd.regioncode) >> 8) & 0xFF;
133 else
134 priv->regioncode = le16_to_cpu(cmd.regioncode) & 0xFF;
135
136 for (i = 0; i < MRVDRV_MAX_REGION_CODE; i++) {
137 /* use the region code to search for the index */
138 if (priv->regioncode == lbs_region_code_to_index[i])
139 break;
140 }
141
142 /* if it's unidentified region code, use the default (USA) */
143 if (i >= MRVDRV_MAX_REGION_CODE) {
144 priv->regioncode = 0x10;
145 netdev_info(priv->dev,
146 "unidentified region code; using the default (USA)\n");
147 }
148
149 if (priv->current_addr[0] == 0xff)
150 memmove(priv->current_addr, cmd.permanentaddr, ETH_ALEN);
151
152 if (!priv->copied_hwaddr) {
153 memcpy(priv->dev->dev_addr, priv->current_addr, ETH_ALEN);
154 if (priv->mesh_dev)
155 memcpy(priv->mesh_dev->dev_addr,
156 priv->current_addr, ETH_ALEN);
157 priv->copied_hwaddr = 1;
158 }
159
160out:
161 lbs_deb_leave(LBS_DEB_CMD);
162 return ret;
163}
164
165static int lbs_ret_host_sleep_cfg(struct lbs_private *priv, unsigned long dummy,
166 struct cmd_header *resp)
167{
168 lbs_deb_enter(LBS_DEB_CMD);
169 if (priv->is_host_sleep_activated) {
170 priv->is_host_sleep_configured = 0;
171 if (priv->psstate == PS_STATE_FULL_POWER) {
172 priv->is_host_sleep_activated = 0;
173 wake_up_interruptible(&priv->host_sleep_q);
174 }
175 } else {
176 priv->is_host_sleep_configured = 1;
177 }
178 lbs_deb_leave(LBS_DEB_CMD);
179 return 0;
180}
181
182int lbs_host_sleep_cfg(struct lbs_private *priv, uint32_t criteria,
183 struct wol_config *p_wol_config)
184{
185 struct cmd_ds_host_sleep cmd_config;
186 int ret;
187
188 /*
189 * Certain firmware versions do not support EHS_REMOVE_WAKEUP command
190 * and the card will return a failure. Since we need to be
191 * able to reset the mask, in those cases we set a 0 mask instead.
192 */
193 if (criteria == EHS_REMOVE_WAKEUP && !priv->ehs_remove_supported)
194 criteria = 0;
195
196 cmd_config.hdr.size = cpu_to_le16(sizeof(cmd_config));
197 cmd_config.criteria = cpu_to_le32(criteria);
198 cmd_config.gpio = priv->wol_gpio;
199 cmd_config.gap = priv->wol_gap;
200
201 if (p_wol_config != NULL)
202 memcpy((uint8_t *)&cmd_config.wol_conf, (uint8_t *)p_wol_config,
203 sizeof(struct wol_config));
204 else
205 cmd_config.wol_conf.action = CMD_ACT_ACTION_NONE;
206
207 ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_CFG, &cmd_config.hdr,
208 le16_to_cpu(cmd_config.hdr.size),
209 lbs_ret_host_sleep_cfg, 0);
210 if (!ret) {
211 if (p_wol_config)
212 memcpy((uint8_t *) p_wol_config,
213 (uint8_t *)&cmd_config.wol_conf,
214 sizeof(struct wol_config));
215 } else {
216 netdev_info(priv->dev, "HOST_SLEEP_CFG failed %d\n", ret);
217 }
218
219 return ret;
220}
221EXPORT_SYMBOL_GPL(lbs_host_sleep_cfg);
222
223/**
224 * lbs_set_ps_mode - Sets the Power Save mode
225 *
226 * @priv: A pointer to &struct lbs_private structure
227 * @cmd_action: The Power Save operation (PS_MODE_ACTION_ENTER_PS or
228 * PS_MODE_ACTION_EXIT_PS)
229 * @block: Whether to block on a response or not
230 *
231 * returns: 0 on success, error on failure
232 */
233int lbs_set_ps_mode(struct lbs_private *priv, u16 cmd_action, bool block)
234{
235 struct cmd_ds_802_11_ps_mode cmd;
236 int ret = 0;
237
238 lbs_deb_enter(LBS_DEB_CMD);
239
240 memset(&cmd, 0, sizeof(cmd));
241 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
242 cmd.action = cpu_to_le16(cmd_action);
243
244 if (cmd_action == PS_MODE_ACTION_ENTER_PS) {
245 lbs_deb_cmd("PS_MODE: action ENTER_PS\n");
246 cmd.multipledtim = cpu_to_le16(1); /* Default DTIM multiple */
247 } else if (cmd_action == PS_MODE_ACTION_EXIT_PS) {
248 lbs_deb_cmd("PS_MODE: action EXIT_PS\n");
249 } else {
250 /* We don't handle CONFIRM_SLEEP here because it needs to
251 * be fastpathed to the firmware.
252 */
253 lbs_deb_cmd("PS_MODE: unknown action 0x%X\n", cmd_action);
254 ret = -EOPNOTSUPP;
255 goto out;
256 }
257
258 if (block)
259 ret = lbs_cmd_with_response(priv, CMD_802_11_PS_MODE, &cmd);
260 else
261 lbs_cmd_async(priv, CMD_802_11_PS_MODE, &cmd.hdr, sizeof (cmd));
262
263out:
264 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
265 return ret;
266}
267
268int lbs_cmd_802_11_sleep_params(struct lbs_private *priv, uint16_t cmd_action,
269 struct sleep_params *sp)
270{
271 struct cmd_ds_802_11_sleep_params cmd;
272 int ret;
273
274 lbs_deb_enter(LBS_DEB_CMD);
275
276 if (cmd_action == CMD_ACT_GET) {
277 memset(&cmd, 0, sizeof(cmd));
278 } else {
279 cmd.error = cpu_to_le16(sp->sp_error);
280 cmd.offset = cpu_to_le16(sp->sp_offset);
281 cmd.stabletime = cpu_to_le16(sp->sp_stabletime);
282 cmd.calcontrol = sp->sp_calcontrol;
283 cmd.externalsleepclk = sp->sp_extsleepclk;
284 cmd.reserved = cpu_to_le16(sp->sp_reserved);
285 }
286 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
287 cmd.action = cpu_to_le16(cmd_action);
288
289 ret = lbs_cmd_with_response(priv, CMD_802_11_SLEEP_PARAMS, &cmd);
290
291 if (!ret) {
292 lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, "
293 "calcontrol 0x%x extsleepclk 0x%x\n",
294 le16_to_cpu(cmd.error), le16_to_cpu(cmd.offset),
295 le16_to_cpu(cmd.stabletime), cmd.calcontrol,
296 cmd.externalsleepclk);
297
298 sp->sp_error = le16_to_cpu(cmd.error);
299 sp->sp_offset = le16_to_cpu(cmd.offset);
300 sp->sp_stabletime = le16_to_cpu(cmd.stabletime);
301 sp->sp_calcontrol = cmd.calcontrol;
302 sp->sp_extsleepclk = cmd.externalsleepclk;
303 sp->sp_reserved = le16_to_cpu(cmd.reserved);
304 }
305
306 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
307 return 0;
308}
309
310static int lbs_wait_for_ds_awake(struct lbs_private *priv)
311{
312 int ret = 0;
313
314 lbs_deb_enter(LBS_DEB_CMD);
315
316 if (priv->is_deep_sleep) {
317 if (!wait_event_interruptible_timeout(priv->ds_awake_q,
318 !priv->is_deep_sleep, (10 * HZ))) {
319 netdev_err(priv->dev, "ds_awake_q: timer expired\n");
320 ret = -1;
321 }
322 }
323
324 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
325 return ret;
326}
327
328int lbs_set_deep_sleep(struct lbs_private *priv, int deep_sleep)
329{
330 int ret = 0;
331
332 lbs_deb_enter(LBS_DEB_CMD);
333
334 if (deep_sleep) {
335 if (priv->is_deep_sleep != 1) {
336 lbs_deb_cmd("deep sleep: sleep\n");
337 BUG_ON(!priv->enter_deep_sleep);
338 ret = priv->enter_deep_sleep(priv);
339 if (!ret) {
340 netif_stop_queue(priv->dev);
341 netif_carrier_off(priv->dev);
342 }
343 } else {
344 netdev_err(priv->dev, "deep sleep: already enabled\n");
345 }
346 } else {
347 if (priv->is_deep_sleep) {
348 lbs_deb_cmd("deep sleep: wakeup\n");
349 BUG_ON(!priv->exit_deep_sleep);
350 ret = priv->exit_deep_sleep(priv);
351 if (!ret) {
352 ret = lbs_wait_for_ds_awake(priv);
353 if (ret)
354 netdev_err(priv->dev,
355 "deep sleep: wakeup failed\n");
356 }
357 }
358 }
359
360 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
361 return ret;
362}
363
364static int lbs_ret_host_sleep_activate(struct lbs_private *priv,
365 unsigned long dummy,
366 struct cmd_header *cmd)
367{
368 lbs_deb_enter(LBS_DEB_FW);
369 priv->is_host_sleep_activated = 1;
370 wake_up_interruptible(&priv->host_sleep_q);
371 lbs_deb_leave(LBS_DEB_FW);
372 return 0;
373}
374
375int lbs_set_host_sleep(struct lbs_private *priv, int host_sleep)
376{
377 struct cmd_header cmd;
378 int ret = 0;
379 uint32_t criteria = EHS_REMOVE_WAKEUP;
380
381 lbs_deb_enter(LBS_DEB_CMD);
382
383 if (host_sleep) {
384 if (priv->is_host_sleep_activated != 1) {
385 memset(&cmd, 0, sizeof(cmd));
386 ret = lbs_host_sleep_cfg(priv, priv->wol_criteria,
387 (struct wol_config *)NULL);
388 if (ret) {
389 netdev_info(priv->dev,
390 "Host sleep configuration failed: %d\n",
391 ret);
392 return ret;
393 }
394 if (priv->psstate == PS_STATE_FULL_POWER) {
395 ret = __lbs_cmd(priv,
396 CMD_802_11_HOST_SLEEP_ACTIVATE,
397 &cmd,
398 sizeof(cmd),
399 lbs_ret_host_sleep_activate, 0);
400 if (ret)
401 netdev_info(priv->dev,
402 "HOST_SLEEP_ACTIVATE failed: %d\n",
403 ret);
404 }
405
406 if (!wait_event_interruptible_timeout(
407 priv->host_sleep_q,
408 priv->is_host_sleep_activated,
409 (10 * HZ))) {
410 netdev_err(priv->dev,
411 "host_sleep_q: timer expired\n");
412 ret = -1;
413 }
414 } else {
415 netdev_err(priv->dev, "host sleep: already enabled\n");
416 }
417 } else {
418 if (priv->is_host_sleep_activated)
419 ret = lbs_host_sleep_cfg(priv, criteria,
420 (struct wol_config *)NULL);
421 }
422
423 return ret;
424}
425
426/**
427 * lbs_set_snmp_mib - Set an SNMP MIB value
428 *
429 * @priv: A pointer to &struct lbs_private structure
430 * @oid: The OID to set in the firmware
431 * @val: Value to set the OID to
432 *
433 * returns: 0 on success, error on failure
434 */
435int lbs_set_snmp_mib(struct lbs_private *priv, u32 oid, u16 val)
436{
437 struct cmd_ds_802_11_snmp_mib cmd;
438 int ret;
439
440 lbs_deb_enter(LBS_DEB_CMD);
441
442 memset(&cmd, 0, sizeof (cmd));
443 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
444 cmd.action = cpu_to_le16(CMD_ACT_SET);
445 cmd.oid = cpu_to_le16((u16) oid);
446
447 switch (oid) {
448 case SNMP_MIB_OID_BSS_TYPE:
449 cmd.bufsize = cpu_to_le16(sizeof(u8));
450 cmd.value[0] = val;
451 break;
452 case SNMP_MIB_OID_11D_ENABLE:
453 case SNMP_MIB_OID_FRAG_THRESHOLD:
454 case SNMP_MIB_OID_RTS_THRESHOLD:
455 case SNMP_MIB_OID_SHORT_RETRY_LIMIT:
456 case SNMP_MIB_OID_LONG_RETRY_LIMIT:
457 cmd.bufsize = cpu_to_le16(sizeof(u16));
458 *((__le16 *)(&cmd.value)) = cpu_to_le16(val);
459 break;
460 default:
461 lbs_deb_cmd("SNMP_CMD: (set) unhandled OID 0x%x\n", oid);
462 ret = -EINVAL;
463 goto out;
464 }
465
466 lbs_deb_cmd("SNMP_CMD: (set) oid 0x%x, oid size 0x%x, value 0x%x\n",
467 le16_to_cpu(cmd.oid), le16_to_cpu(cmd.bufsize), val);
468
469 ret = lbs_cmd_with_response(priv, CMD_802_11_SNMP_MIB, &cmd);
470
471out:
472 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
473 return ret;
474}
475
476/**
477 * lbs_get_snmp_mib - Get an SNMP MIB value
478 *
479 * @priv: A pointer to &struct lbs_private structure
480 * @oid: The OID to retrieve from the firmware
481 * @out_val: Location for the returned value
482 *
483 * returns: 0 on success, error on failure
484 */
485int lbs_get_snmp_mib(struct lbs_private *priv, u32 oid, u16 *out_val)
486{
487 struct cmd_ds_802_11_snmp_mib cmd;
488 int ret;
489
490 lbs_deb_enter(LBS_DEB_CMD);
491
492 memset(&cmd, 0, sizeof (cmd));
493 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
494 cmd.action = cpu_to_le16(CMD_ACT_GET);
495 cmd.oid = cpu_to_le16(oid);
496
497 ret = lbs_cmd_with_response(priv, CMD_802_11_SNMP_MIB, &cmd);
498 if (ret)
499 goto out;
500
501 switch (le16_to_cpu(cmd.bufsize)) {
502 case sizeof(u8):
503 *out_val = cmd.value[0];
504 break;
505 case sizeof(u16):
506 *out_val = le16_to_cpu(*((__le16 *)(&cmd.value)));
507 break;
508 default:
509 lbs_deb_cmd("SNMP_CMD: (get) unhandled OID 0x%x size %d\n",
510 oid, le16_to_cpu(cmd.bufsize));
511 break;
512 }
513
514out:
515 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
516 return ret;
517}
518
519/**
520 * lbs_get_tx_power - Get the min, max, and current TX power
521 *
522 * @priv: A pointer to &struct lbs_private structure
523 * @curlevel: Current power level in dBm
524 * @minlevel: Minimum supported power level in dBm (optional)
525 * @maxlevel: Maximum supported power level in dBm (optional)
526 *
527 * returns: 0 on success, error on failure
528 */
529int lbs_get_tx_power(struct lbs_private *priv, s16 *curlevel, s16 *minlevel,
530 s16 *maxlevel)
531{
532 struct cmd_ds_802_11_rf_tx_power cmd;
533 int ret;
534
535 lbs_deb_enter(LBS_DEB_CMD);
536
537 memset(&cmd, 0, sizeof(cmd));
538 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
539 cmd.action = cpu_to_le16(CMD_ACT_GET);
540
541 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
542 if (ret == 0) {
543 *curlevel = le16_to_cpu(cmd.curlevel);
544 if (minlevel)
545 *minlevel = cmd.minlevel;
546 if (maxlevel)
547 *maxlevel = cmd.maxlevel;
548 }
549
550 lbs_deb_leave(LBS_DEB_CMD);
551 return ret;
552}
553
554/**
555 * lbs_set_tx_power - Set the TX power
556 *
557 * @priv: A pointer to &struct lbs_private structure
558 * @dbm: The desired power level in dBm
559 *
560 * returns: 0 on success, error on failure
561 */
562int lbs_set_tx_power(struct lbs_private *priv, s16 dbm)
563{
564 struct cmd_ds_802_11_rf_tx_power cmd;
565 int ret;
566
567 lbs_deb_enter(LBS_DEB_CMD);
568
569 memset(&cmd, 0, sizeof(cmd));
570 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
571 cmd.action = cpu_to_le16(CMD_ACT_SET);
572 cmd.curlevel = cpu_to_le16(dbm);
573
574 lbs_deb_cmd("SET_RF_TX_POWER: %d dBm\n", dbm);
575
576 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_TX_POWER, &cmd);
577
578 lbs_deb_leave(LBS_DEB_CMD);
579 return ret;
580}
581
582/**
583 * lbs_set_monitor_mode - Enable or disable monitor mode
584 * (only implemented on OLPC usb8388 FW)
585 *
586 * @priv: A pointer to &struct lbs_private structure
587 * @enable: 1 to enable monitor mode, 0 to disable
588 *
589 * returns: 0 on success, error on failure
590 */
591int lbs_set_monitor_mode(struct lbs_private *priv, int enable)
592{
593 struct cmd_ds_802_11_monitor_mode cmd;
594 int ret;
595
596 memset(&cmd, 0, sizeof(cmd));
597 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
598 cmd.action = cpu_to_le16(CMD_ACT_SET);
599 if (enable)
600 cmd.mode = cpu_to_le16(0x1);
601
602 lbs_deb_cmd("SET_MONITOR_MODE: %d\n", enable);
603
604 ret = lbs_cmd_with_response(priv, CMD_802_11_MONITOR_MODE, &cmd);
605 if (ret == 0) {
606 priv->dev->type = enable ? ARPHRD_IEEE80211_RADIOTAP :
607 ARPHRD_ETHER;
608 }
609
610 lbs_deb_leave(LBS_DEB_CMD);
611 return ret;
612}
613
614/**
615 * lbs_get_channel - Get the radio channel
616 *
617 * @priv: A pointer to &struct lbs_private structure
618 *
619 * returns: The channel on success, error on failure
620 */
621static int lbs_get_channel(struct lbs_private *priv)
622{
623 struct cmd_ds_802_11_rf_channel cmd;
624 int ret = 0;
625
626 lbs_deb_enter(LBS_DEB_CMD);
627
628 memset(&cmd, 0, sizeof(cmd));
629 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
630 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_GET);
631
632 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
633 if (ret)
634 goto out;
635
636 ret = le16_to_cpu(cmd.channel);
637 lbs_deb_cmd("current radio channel is %d\n", ret);
638
639out:
640 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
641 return ret;
642}
643
644int lbs_update_channel(struct lbs_private *priv)
645{
646 int ret;
647
648 /* the channel in f/w could be out of sync; get the current channel */
649 lbs_deb_enter(LBS_DEB_ASSOC);
650
651 ret = lbs_get_channel(priv);
652 if (ret > 0) {
653 priv->channel = ret;
654 ret = 0;
655 }
656 lbs_deb_leave_args(LBS_DEB_ASSOC, "ret %d", ret);
657 return ret;
658}
659
660/**
661 * lbs_set_channel - Set the radio channel
662 *
663 * @priv: A pointer to &struct lbs_private structure
664 * @channel: The desired channel, or 0 to clear a locked channel
665 *
666 * returns: 0 on success, error on failure
667 */
668int lbs_set_channel(struct lbs_private *priv, u8 channel)
669{
670 struct cmd_ds_802_11_rf_channel cmd;
671#ifdef DEBUG
672 u8 old_channel = priv->channel;
673#endif
674 int ret = 0;
675
676 lbs_deb_enter(LBS_DEB_CMD);
677
678 memset(&cmd, 0, sizeof(cmd));
679 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
680 cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_SET);
681 cmd.channel = cpu_to_le16(channel);
682
683 ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
684 if (ret)
685 goto out;
686
687 priv->channel = (uint8_t) le16_to_cpu(cmd.channel);
688 lbs_deb_cmd("channel switch from %d to %d\n", old_channel,
689 priv->channel);
690
691out:
692 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
693 return ret;
694}
695
696/**
697 * lbs_get_rssi - Get current RSSI and noise floor
698 *
699 * @priv: A pointer to &struct lbs_private structure
700 * @rssi: On successful return, signal level in mBm
701 * @nf: On successful return, Noise floor
702 *
703 * returns: The channel on success, error on failure
704 */
705int lbs_get_rssi(struct lbs_private *priv, s8 *rssi, s8 *nf)
706{
707 struct cmd_ds_802_11_rssi cmd;
708 int ret = 0;
709
710 lbs_deb_enter(LBS_DEB_CMD);
711
712 BUG_ON(rssi == NULL);
713 BUG_ON(nf == NULL);
714
715 memset(&cmd, 0, sizeof(cmd));
716 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
717 /* Average SNR over last 8 beacons */
718 cmd.n_or_snr = cpu_to_le16(8);
719
720 ret = lbs_cmd_with_response(priv, CMD_802_11_RSSI, &cmd);
721 if (ret == 0) {
722 *nf = CAL_NF(le16_to_cpu(cmd.nf));
723 *rssi = CAL_RSSI(le16_to_cpu(cmd.n_or_snr), le16_to_cpu(cmd.nf));
724 }
725
726 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
727 return ret;
728}
729
730/**
731 * lbs_set_11d_domain_info - Send regulatory and 802.11d domain information
732 * to the firmware
733 *
734 * @priv: pointer to &struct lbs_private
735 * @request: cfg80211 regulatory request structure
736 * @bands: the device's supported bands and channels
737 *
738 * returns: 0 on success, error code on failure
739*/
740int lbs_set_11d_domain_info(struct lbs_private *priv,
741 struct regulatory_request *request,
742 struct ieee80211_supported_band **bands)
743{
744 struct cmd_ds_802_11d_domain_info cmd;
745 struct mrvl_ie_domain_param_set *domain = &cmd.domain;
746 struct ieee80211_country_ie_triplet *t;
747 enum ieee80211_band band;
748 struct ieee80211_channel *ch;
749 u8 num_triplet = 0;
750 u8 num_parsed_chan = 0;
751 u8 first_channel = 0, next_chan = 0, max_pwr = 0;
752 u8 i, flag = 0;
753 size_t triplet_size;
754 int ret;
755
756 lbs_deb_enter(LBS_DEB_11D);
757
758 memset(&cmd, 0, sizeof(cmd));
759 cmd.action = cpu_to_le16(CMD_ACT_SET);
760
761 lbs_deb_11d("Setting country code '%c%c'\n",
762 request->alpha2[0], request->alpha2[1]);
763
764 domain->header.type = cpu_to_le16(TLV_TYPE_DOMAIN);
765
766 /* Set country code */
767 domain->country_code[0] = request->alpha2[0];
768 domain->country_code[1] = request->alpha2[1];
769 domain->country_code[2] = ' ';
770
771 /* Now set up the channel triplets; firmware is somewhat picky here
772 * and doesn't validate channel numbers and spans; hence it would
773 * interpret a triplet of (36, 4, 20) as channels 36, 37, 38, 39. Since
774 * the last 3 aren't valid channels, the driver is responsible for
775 * splitting that up into 4 triplet pairs of (36, 1, 20) + (40, 1, 20)
776 * etc.
777 */
778 for (band = 0;
779 (band < IEEE80211_NUM_BANDS) && (num_triplet < MAX_11D_TRIPLETS);
780 band++) {
781
782 if (!bands[band])
783 continue;
784
785 for (i = 0;
786 (i < bands[band]->n_channels) && (num_triplet < MAX_11D_TRIPLETS);
787 i++) {
788 ch = &bands[band]->channels[i];
789 if (ch->flags & IEEE80211_CHAN_DISABLED)
790 continue;
791
792 if (!flag) {
793 flag = 1;
794 next_chan = first_channel = (u32) ch->hw_value;
795 max_pwr = ch->max_power;
796 num_parsed_chan = 1;
797 continue;
798 }
799
800 if ((ch->hw_value == next_chan + 1) &&
801 (ch->max_power == max_pwr)) {
802 /* Consolidate adjacent channels */
803 next_chan++;
804 num_parsed_chan++;
805 } else {
806 /* Add this triplet */
807 lbs_deb_11d("11D triplet (%d, %d, %d)\n",
808 first_channel, num_parsed_chan,
809 max_pwr);
810 t = &domain->triplet[num_triplet];
811 t->chans.first_channel = first_channel;
812 t->chans.num_channels = num_parsed_chan;
813 t->chans.max_power = max_pwr;
814 num_triplet++;
815 flag = 0;
816 }
817 }
818
819 if (flag) {
820 /* Add last triplet */
821 lbs_deb_11d("11D triplet (%d, %d, %d)\n", first_channel,
822 num_parsed_chan, max_pwr);
823 t = &domain->triplet[num_triplet];
824 t->chans.first_channel = first_channel;
825 t->chans.num_channels = num_parsed_chan;
826 t->chans.max_power = max_pwr;
827 num_triplet++;
828 }
829 }
830
831 lbs_deb_11d("# triplets %d\n", num_triplet);
832
833 /* Set command header sizes */
834 triplet_size = num_triplet * sizeof(struct ieee80211_country_ie_triplet);
835 domain->header.len = cpu_to_le16(sizeof(domain->country_code) +
836 triplet_size);
837
838 lbs_deb_hex(LBS_DEB_11D, "802.11D domain param set",
839 (u8 *) &cmd.domain.country_code,
840 le16_to_cpu(domain->header.len));
841
842 cmd.hdr.size = cpu_to_le16(sizeof(cmd.hdr) +
843 sizeof(cmd.action) +
844 sizeof(cmd.domain.header) +
845 sizeof(cmd.domain.country_code) +
846 triplet_size);
847
848 ret = lbs_cmd_with_response(priv, CMD_802_11D_DOMAIN_INFO, &cmd);
849
850 lbs_deb_leave_args(LBS_DEB_11D, "ret %d", ret);
851 return ret;
852}
853
854/**
855 * lbs_get_reg - Read a MAC, Baseband, or RF register
856 *
857 * @priv: pointer to &struct lbs_private
858 * @reg: register command, one of CMD_MAC_REG_ACCESS,
859 * CMD_BBP_REG_ACCESS, or CMD_RF_REG_ACCESS
860 * @offset: byte offset of the register to get
861 * @value: on success, the value of the register at 'offset'
862 *
863 * returns: 0 on success, error code on failure
864*/
865int lbs_get_reg(struct lbs_private *priv, u16 reg, u16 offset, u32 *value)
866{
867 struct cmd_ds_reg_access cmd;
868 int ret = 0;
869
870 lbs_deb_enter(LBS_DEB_CMD);
871
872 BUG_ON(value == NULL);
873
874 memset(&cmd, 0, sizeof(cmd));
875 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
876 cmd.action = cpu_to_le16(CMD_ACT_GET);
877 cmd.offset = cpu_to_le16(offset);
878
879 if (reg != CMD_MAC_REG_ACCESS &&
880 reg != CMD_BBP_REG_ACCESS &&
881 reg != CMD_RF_REG_ACCESS) {
882 ret = -EINVAL;
883 goto out;
884 }
885
886 ret = lbs_cmd_with_response(priv, reg, &cmd);
887 if (!ret) {
888 if (reg == CMD_BBP_REG_ACCESS || reg == CMD_RF_REG_ACCESS)
889 *value = cmd.value.bbp_rf;
890 else if (reg == CMD_MAC_REG_ACCESS)
891 *value = le32_to_cpu(cmd.value.mac);
892 }
893
894out:
895 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
896 return ret;
897}
898
899/**
900 * lbs_set_reg - Write a MAC, Baseband, or RF register
901 *
902 * @priv: pointer to &struct lbs_private
903 * @reg: register command, one of CMD_MAC_REG_ACCESS,
904 * CMD_BBP_REG_ACCESS, or CMD_RF_REG_ACCESS
905 * @offset: byte offset of the register to set
906 * @value: the value to write to the register at 'offset'
907 *
908 * returns: 0 on success, error code on failure
909*/
910int lbs_set_reg(struct lbs_private *priv, u16 reg, u16 offset, u32 value)
911{
912 struct cmd_ds_reg_access cmd;
913 int ret = 0;
914
915 lbs_deb_enter(LBS_DEB_CMD);
916
917 memset(&cmd, 0, sizeof(cmd));
918 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
919 cmd.action = cpu_to_le16(CMD_ACT_SET);
920 cmd.offset = cpu_to_le16(offset);
921
922 if (reg == CMD_BBP_REG_ACCESS || reg == CMD_RF_REG_ACCESS)
923 cmd.value.bbp_rf = (u8) (value & 0xFF);
924 else if (reg == CMD_MAC_REG_ACCESS)
925 cmd.value.mac = cpu_to_le32(value);
926 else {
927 ret = -EINVAL;
928 goto out;
929 }
930
931 ret = lbs_cmd_with_response(priv, reg, &cmd);
932
933out:
934 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
935 return ret;
936}
937
938static void lbs_queue_cmd(struct lbs_private *priv,
939 struct cmd_ctrl_node *cmdnode)
940{
941 unsigned long flags;
942 int addtail = 1;
943
944 lbs_deb_enter(LBS_DEB_HOST);
945
946 if (!cmdnode) {
947 lbs_deb_host("QUEUE_CMD: cmdnode is NULL\n");
948 goto done;
949 }
950 if (!cmdnode->cmdbuf->size) {
951 lbs_deb_host("DNLD_CMD: cmd size is zero\n");
952 goto done;
953 }
954 cmdnode->result = 0;
955
956 /* Exit_PS command needs to be queued in the header always. */
957 if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_PS_MODE) {
958 struct cmd_ds_802_11_ps_mode *psm = (void *) &cmdnode->cmdbuf;
959
960 if (psm->action == cpu_to_le16(PS_MODE_ACTION_EXIT_PS)) {
961 if (priv->psstate != PS_STATE_FULL_POWER)
962 addtail = 0;
963 }
964 }
965
966 if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_WAKEUP_CONFIRM)
967 addtail = 0;
968
969 spin_lock_irqsave(&priv->driver_lock, flags);
970
971 if (addtail)
972 list_add_tail(&cmdnode->list, &priv->cmdpendingq);
973 else
974 list_add(&cmdnode->list, &priv->cmdpendingq);
975
976 spin_unlock_irqrestore(&priv->driver_lock, flags);
977
978 lbs_deb_host("QUEUE_CMD: inserted command 0x%04x into cmdpendingq\n",
979 le16_to_cpu(cmdnode->cmdbuf->command));
980
981done:
982 lbs_deb_leave(LBS_DEB_HOST);
983}
984
985static void lbs_submit_command(struct lbs_private *priv,
986 struct cmd_ctrl_node *cmdnode)
987{
988 unsigned long flags;
989 struct cmd_header *cmd;
990 uint16_t cmdsize;
991 uint16_t command;
992 int timeo = 3 * HZ;
993 int ret;
994
995 lbs_deb_enter(LBS_DEB_HOST);
996
997 cmd = cmdnode->cmdbuf;
998
999 spin_lock_irqsave(&priv->driver_lock, flags);
1000 priv->seqnum++;
1001 cmd->seqnum = cpu_to_le16(priv->seqnum);
1002 priv->cur_cmd = cmdnode;
1003 spin_unlock_irqrestore(&priv->driver_lock, flags);
1004
1005 cmdsize = le16_to_cpu(cmd->size);
1006 command = le16_to_cpu(cmd->command);
1007
1008 /* These commands take longer */
1009 if (command == CMD_802_11_SCAN || command == CMD_802_11_ASSOCIATE)
1010 timeo = 5 * HZ;
1011
1012 lbs_deb_cmd("DNLD_CMD: command 0x%04x, seq %d, size %d\n",
1013 command, le16_to_cpu(cmd->seqnum), cmdsize);
1014 lbs_deb_hex(LBS_DEB_CMD, "DNLD_CMD", (void *) cmdnode->cmdbuf, cmdsize);
1015
1016 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) cmd, cmdsize);
1017
1018 if (ret) {
1019 netdev_info(priv->dev, "DNLD_CMD: hw_host_to_card failed: %d\n",
1020 ret);
1021 /* Let the timer kick in and retry, and potentially reset
1022 the whole thing if the condition persists */
1023 timeo = HZ/4;
1024 }
1025
1026 if (command == CMD_802_11_DEEP_SLEEP) {
1027 if (priv->is_auto_deep_sleep_enabled) {
1028 priv->wakeup_dev_required = 1;
1029 priv->dnld_sent = 0;
1030 }
1031 priv->is_deep_sleep = 1;
1032 lbs_complete_command(priv, cmdnode, 0);
1033 } else {
1034 /* Setup the timer after transmit command */
1035 mod_timer(&priv->command_timer, jiffies + timeo);
1036 }
1037
1038 lbs_deb_leave(LBS_DEB_HOST);
1039}
1040
1041/*
1042 * This function inserts command node to cmdfreeq
1043 * after cleans it. Requires priv->driver_lock held.
1044 */
1045static void __lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1046 struct cmd_ctrl_node *cmdnode)
1047{
1048 lbs_deb_enter(LBS_DEB_HOST);
1049
1050 if (!cmdnode)
1051 goto out;
1052
1053 cmdnode->callback = NULL;
1054 cmdnode->callback_arg = 0;
1055
1056 memset(cmdnode->cmdbuf, 0, LBS_CMD_BUFFER_SIZE);
1057
1058 list_add_tail(&cmdnode->list, &priv->cmdfreeq);
1059 out:
1060 lbs_deb_leave(LBS_DEB_HOST);
1061}
1062
1063static void lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1064 struct cmd_ctrl_node *ptempcmd)
1065{
1066 unsigned long flags;
1067
1068 spin_lock_irqsave(&priv->driver_lock, flags);
1069 __lbs_cleanup_and_insert_cmd(priv, ptempcmd);
1070 spin_unlock_irqrestore(&priv->driver_lock, flags);
1071}
1072
1073void __lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
1074 int result)
1075{
1076 /*
1077 * Normally, commands are removed from cmdpendingq before being
1078 * submitted. However, we can arrive here on alternative codepaths
1079 * where the command is still pending. Make sure the command really
1080 * isn't part of a list at this point.
1081 */
1082 list_del_init(&cmd->list);
1083
1084 cmd->result = result;
1085 cmd->cmdwaitqwoken = 1;
1086 wake_up(&cmd->cmdwait_q);
1087
1088 if (!cmd->callback || cmd->callback == lbs_cmd_async_callback)
1089 __lbs_cleanup_and_insert_cmd(priv, cmd);
1090 priv->cur_cmd = NULL;
1091 wake_up_interruptible(&priv->waitq);
1092}
1093
1094void lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
1095 int result)
1096{
1097 unsigned long flags;
1098 spin_lock_irqsave(&priv->driver_lock, flags);
1099 __lbs_complete_command(priv, cmd, result);
1100 spin_unlock_irqrestore(&priv->driver_lock, flags);
1101}
1102
1103int lbs_set_radio(struct lbs_private *priv, u8 preamble, u8 radio_on)
1104{
1105 struct cmd_ds_802_11_radio_control cmd;
1106 int ret = -EINVAL;
1107
1108 lbs_deb_enter(LBS_DEB_CMD);
1109
1110 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1111 cmd.action = cpu_to_le16(CMD_ACT_SET);
1112
1113 /* Only v8 and below support setting the preamble */
1114 if (priv->fwrelease < 0x09000000) {
1115 switch (preamble) {
1116 case RADIO_PREAMBLE_SHORT:
1117 case RADIO_PREAMBLE_AUTO:
1118 case RADIO_PREAMBLE_LONG:
1119 cmd.control = cpu_to_le16(preamble);
1120 break;
1121 default:
1122 goto out;
1123 }
1124 }
1125
1126 if (radio_on)
1127 cmd.control |= cpu_to_le16(0x1);
1128 else {
1129 cmd.control &= cpu_to_le16(~0x1);
1130 priv->txpower_cur = 0;
1131 }
1132
1133 lbs_deb_cmd("RADIO_CONTROL: radio %s, preamble %d\n",
1134 radio_on ? "ON" : "OFF", preamble);
1135
1136 priv->radio_on = radio_on;
1137
1138 ret = lbs_cmd_with_response(priv, CMD_802_11_RADIO_CONTROL, &cmd);
1139
1140out:
1141 lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1142 return ret;
1143}
1144
1145void lbs_set_mac_control(struct lbs_private *priv)
1146{
1147 struct cmd_ds_mac_control cmd;
1148
1149 lbs_deb_enter(LBS_DEB_CMD);
1150
1151 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1152 cmd.action = cpu_to_le16(priv->mac_control);
1153 cmd.reserved = 0;
1154
1155 lbs_cmd_async(priv, CMD_MAC_CONTROL, &cmd.hdr, sizeof(cmd));
1156
1157 lbs_deb_leave(LBS_DEB_CMD);
1158}
1159
1160/**
1161 * lbs_allocate_cmd_buffer - allocates the command buffer and links
1162 * it to command free queue
1163 *
1164 * @priv: A pointer to &struct lbs_private structure
1165 *
1166 * returns: 0 for success or -1 on error
1167 */
1168int lbs_allocate_cmd_buffer(struct lbs_private *priv)
1169{
1170 int ret = 0;
1171 u32 bufsize;
1172 u32 i;
1173 struct cmd_ctrl_node *cmdarray;
1174
1175 lbs_deb_enter(LBS_DEB_HOST);
1176
1177 /* Allocate and initialize the command array */
1178 bufsize = sizeof(struct cmd_ctrl_node) * LBS_NUM_CMD_BUFFERS;
1179 if (!(cmdarray = kzalloc(bufsize, GFP_KERNEL))) {
1180 lbs_deb_host("ALLOC_CMD_BUF: tempcmd_array is NULL\n");
1181 ret = -1;
1182 goto done;
1183 }
1184 priv->cmd_array = cmdarray;
1185
1186 /* Allocate and initialize each command buffer in the command array */
1187 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1188 cmdarray[i].cmdbuf = kzalloc(LBS_CMD_BUFFER_SIZE, GFP_KERNEL);
1189 if (!cmdarray[i].cmdbuf) {
1190 lbs_deb_host("ALLOC_CMD_BUF: ptempvirtualaddr is NULL\n");
1191 ret = -1;
1192 goto done;
1193 }
1194 }
1195
1196 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1197 init_waitqueue_head(&cmdarray[i].cmdwait_q);
1198 lbs_cleanup_and_insert_cmd(priv, &cmdarray[i]);
1199 }
1200 ret = 0;
1201
1202done:
1203 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1204 return ret;
1205}
1206
1207/**
1208 * lbs_free_cmd_buffer - free the command buffer
1209 *
1210 * @priv: A pointer to &struct lbs_private structure
1211 *
1212 * returns: 0 for success
1213 */
1214int lbs_free_cmd_buffer(struct lbs_private *priv)
1215{
1216 struct cmd_ctrl_node *cmdarray;
1217 unsigned int i;
1218
1219 lbs_deb_enter(LBS_DEB_HOST);
1220
1221 /* need to check if cmd array is allocated or not */
1222 if (priv->cmd_array == NULL) {
1223 lbs_deb_host("FREE_CMD_BUF: cmd_array is NULL\n");
1224 goto done;
1225 }
1226
1227 cmdarray = priv->cmd_array;
1228
1229 /* Release shared memory buffers */
1230 for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
1231 if (cmdarray[i].cmdbuf) {
1232 kfree(cmdarray[i].cmdbuf);
1233 cmdarray[i].cmdbuf = NULL;
1234 }
1235 }
1236
1237 /* Release cmd_ctrl_node */
1238 if (priv->cmd_array) {
1239 kfree(priv->cmd_array);
1240 priv->cmd_array = NULL;
1241 }
1242
1243done:
1244 lbs_deb_leave(LBS_DEB_HOST);
1245 return 0;
1246}
1247
1248/**
1249 * lbs_get_free_cmd_node - gets a free command node if available in
1250 * command free queue
1251 *
1252 * @priv: A pointer to &struct lbs_private structure
1253 *
1254 * returns: A pointer to &cmd_ctrl_node structure on success
1255 * or %NULL on error
1256 */
1257static struct cmd_ctrl_node *lbs_get_free_cmd_node(struct lbs_private *priv)
1258{
1259 struct cmd_ctrl_node *tempnode;
1260 unsigned long flags;
1261
1262 lbs_deb_enter(LBS_DEB_HOST);
1263
1264 if (!priv)
1265 return NULL;
1266
1267 spin_lock_irqsave(&priv->driver_lock, flags);
1268
1269 if (!list_empty(&priv->cmdfreeq)) {
1270 tempnode = list_first_entry(&priv->cmdfreeq,
1271 struct cmd_ctrl_node, list);
1272 list_del_init(&tempnode->list);
1273 } else {
1274 lbs_deb_host("GET_CMD_NODE: cmd_ctrl_node is not available\n");
1275 tempnode = NULL;
1276 }
1277
1278 spin_unlock_irqrestore(&priv->driver_lock, flags);
1279
1280 lbs_deb_leave(LBS_DEB_HOST);
1281 return tempnode;
1282}
1283
1284/**
1285 * lbs_execute_next_command - execute next command in command
1286 * pending queue. Will put firmware back to PS mode if applicable.
1287 *
1288 * @priv: A pointer to &struct lbs_private structure
1289 *
1290 * returns: 0 on success or -1 on error
1291 */
1292int lbs_execute_next_command(struct lbs_private *priv)
1293{
1294 struct cmd_ctrl_node *cmdnode = NULL;
1295 struct cmd_header *cmd;
1296 unsigned long flags;
1297 int ret = 0;
1298
1299 /* Debug group is LBS_DEB_THREAD and not LBS_DEB_HOST, because the
1300 * only caller to us is lbs_thread() and we get even when a
1301 * data packet is received */
1302 lbs_deb_enter(LBS_DEB_THREAD);
1303
1304 spin_lock_irqsave(&priv->driver_lock, flags);
1305
1306 if (priv->cur_cmd) {
1307 netdev_alert(priv->dev,
1308 "EXEC_NEXT_CMD: already processing command!\n");
1309 spin_unlock_irqrestore(&priv->driver_lock, flags);
1310 ret = -1;
1311 goto done;
1312 }
1313
1314 if (!list_empty(&priv->cmdpendingq)) {
1315 cmdnode = list_first_entry(&priv->cmdpendingq,
1316 struct cmd_ctrl_node, list);
1317 }
1318
1319 spin_unlock_irqrestore(&priv->driver_lock, flags);
1320
1321 if (cmdnode) {
1322 cmd = cmdnode->cmdbuf;
1323
1324 if (is_command_allowed_in_ps(le16_to_cpu(cmd->command))) {
1325 if ((priv->psstate == PS_STATE_SLEEP) ||
1326 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1327 lbs_deb_host(
1328 "EXEC_NEXT_CMD: cannot send cmd 0x%04x in psstate %d\n",
1329 le16_to_cpu(cmd->command),
1330 priv->psstate);
1331 ret = -1;
1332 goto done;
1333 }
1334 lbs_deb_host("EXEC_NEXT_CMD: OK to send command "
1335 "0x%04x in psstate %d\n",
1336 le16_to_cpu(cmd->command), priv->psstate);
1337 } else if (priv->psstate != PS_STATE_FULL_POWER) {
1338 /*
1339 * 1. Non-PS command:
1340 * Queue it. set needtowakeup to TRUE if current state
1341 * is SLEEP, otherwise call send EXIT_PS.
1342 * 2. PS command but not EXIT_PS:
1343 * Ignore it.
1344 * 3. PS command EXIT_PS:
1345 * Set needtowakeup to TRUE if current state is SLEEP,
1346 * otherwise send this command down to firmware
1347 * immediately.
1348 */
1349 if (cmd->command != cpu_to_le16(CMD_802_11_PS_MODE)) {
1350 /* Prepare to send Exit PS,
1351 * this non PS command will be sent later */
1352 if ((priv->psstate == PS_STATE_SLEEP)
1353 || (priv->psstate == PS_STATE_PRE_SLEEP)
1354 ) {
1355 /* w/ new scheme, it will not reach here.
1356 since it is blocked in main_thread. */
1357 priv->needtowakeup = 1;
1358 } else {
1359 lbs_set_ps_mode(priv,
1360 PS_MODE_ACTION_EXIT_PS,
1361 false);
1362 }
1363
1364 ret = 0;
1365 goto done;
1366 } else {
1367 /*
1368 * PS command. Ignore it if it is not Exit_PS.
1369 * otherwise send it down immediately.
1370 */
1371 struct cmd_ds_802_11_ps_mode *psm = (void *)&cmd[1];
1372
1373 lbs_deb_host(
1374 "EXEC_NEXT_CMD: PS cmd, action 0x%02x\n",
1375 psm->action);
1376 if (psm->action !=
1377 cpu_to_le16(PS_MODE_ACTION_EXIT_PS)) {
1378 lbs_deb_host(
1379 "EXEC_NEXT_CMD: ignore ENTER_PS cmd\n");
1380 lbs_complete_command(priv, cmdnode, 0);
1381
1382 ret = 0;
1383 goto done;
1384 }
1385
1386 if ((priv->psstate == PS_STATE_SLEEP) ||
1387 (priv->psstate == PS_STATE_PRE_SLEEP)) {
1388 lbs_deb_host(
1389 "EXEC_NEXT_CMD: ignore EXIT_PS cmd in sleep\n");
1390 lbs_complete_command(priv, cmdnode, 0);
1391 priv->needtowakeup = 1;
1392
1393 ret = 0;
1394 goto done;
1395 }
1396
1397 lbs_deb_host(
1398 "EXEC_NEXT_CMD: sending EXIT_PS\n");
1399 }
1400 }
1401 spin_lock_irqsave(&priv->driver_lock, flags);
1402 list_del_init(&cmdnode->list);
1403 spin_unlock_irqrestore(&priv->driver_lock, flags);
1404 lbs_deb_host("EXEC_NEXT_CMD: sending command 0x%04x\n",
1405 le16_to_cpu(cmd->command));
1406 lbs_submit_command(priv, cmdnode);
1407 } else {
1408 /*
1409 * check if in power save mode, if yes, put the device back
1410 * to PS mode
1411 */
1412#ifdef TODO
1413 /*
1414 * This was the old code for libertas+wext. Someone that
1415 * understands this beast should re-code it in a sane way.
1416 *
1417 * I actually don't understand why this is related to WPA
1418 * and to connection status, shouldn't powering should be
1419 * independ of such things?
1420 */
1421 if ((priv->psmode != LBS802_11POWERMODECAM) &&
1422 (priv->psstate == PS_STATE_FULL_POWER) &&
1423 ((priv->connect_status == LBS_CONNECTED) ||
1424 lbs_mesh_connected(priv))) {
1425 if (priv->secinfo.WPAenabled ||
1426 priv->secinfo.WPA2enabled) {
1427 /* check for valid WPA group keys */
1428 if (priv->wpa_mcast_key.len ||
1429 priv->wpa_unicast_key.len) {
1430 lbs_deb_host(
1431 "EXEC_NEXT_CMD: WPA enabled and GTK_SET"
1432 " go back to PS_SLEEP");
1433 lbs_set_ps_mode(priv,
1434 PS_MODE_ACTION_ENTER_PS,
1435 false);
1436 }
1437 } else {
1438 lbs_deb_host(
1439 "EXEC_NEXT_CMD: cmdpendingq empty, "
1440 "go back to PS_SLEEP");
1441 lbs_set_ps_mode(priv, PS_MODE_ACTION_ENTER_PS,
1442 false);
1443 }
1444 }
1445#endif
1446 }
1447
1448 ret = 0;
1449done:
1450 lbs_deb_leave(LBS_DEB_THREAD);
1451 return ret;
1452}
1453
1454static void lbs_send_confirmsleep(struct lbs_private *priv)
1455{
1456 unsigned long flags;
1457 int ret;
1458
1459 lbs_deb_enter(LBS_DEB_HOST);
1460 lbs_deb_hex(LBS_DEB_HOST, "sleep confirm", (u8 *) &confirm_sleep,
1461 sizeof(confirm_sleep));
1462
1463 ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) &confirm_sleep,
1464 sizeof(confirm_sleep));
1465 if (ret) {
1466 netdev_alert(priv->dev, "confirm_sleep failed\n");
1467 goto out;
1468 }
1469
1470 spin_lock_irqsave(&priv->driver_lock, flags);
1471
1472 /* We don't get a response on the sleep-confirmation */
1473 priv->dnld_sent = DNLD_RES_RECEIVED;
1474
1475 if (priv->is_host_sleep_configured) {
1476 priv->is_host_sleep_activated = 1;
1477 wake_up_interruptible(&priv->host_sleep_q);
1478 }
1479
1480 /* If nothing to do, go back to sleep (?) */
1481 if (!kfifo_len(&priv->event_fifo) && !priv->resp_len[priv->resp_idx])
1482 priv->psstate = PS_STATE_SLEEP;
1483
1484 spin_unlock_irqrestore(&priv->driver_lock, flags);
1485
1486out:
1487 lbs_deb_leave(LBS_DEB_HOST);
1488}
1489
1490/**
1491 * lbs_ps_confirm_sleep - checks condition and prepares to
1492 * send sleep confirm command to firmware if ok
1493 *
1494 * @priv: A pointer to &struct lbs_private structure
1495 *
1496 * returns: n/a
1497 */
1498void lbs_ps_confirm_sleep(struct lbs_private *priv)
1499{
1500 unsigned long flags =0;
1501 int allowed = 1;
1502
1503 lbs_deb_enter(LBS_DEB_HOST);
1504
1505 spin_lock_irqsave(&priv->driver_lock, flags);
1506 if (priv->dnld_sent) {
1507 allowed = 0;
1508 lbs_deb_host("dnld_sent was set\n");
1509 }
1510
1511 /* In-progress command? */
1512 if (priv->cur_cmd) {
1513 allowed = 0;
1514 lbs_deb_host("cur_cmd was set\n");
1515 }
1516
1517 /* Pending events or command responses? */
1518 if (kfifo_len(&priv->event_fifo) || priv->resp_len[priv->resp_idx]) {
1519 allowed = 0;
1520 lbs_deb_host("pending events or command responses\n");
1521 }
1522 spin_unlock_irqrestore(&priv->driver_lock, flags);
1523
1524 if (allowed) {
1525 lbs_deb_host("sending lbs_ps_confirm_sleep\n");
1526 lbs_send_confirmsleep(priv);
1527 } else {
1528 lbs_deb_host("sleep confirm has been delayed\n");
1529 }
1530
1531 lbs_deb_leave(LBS_DEB_HOST);
1532}
1533
1534
1535/**
1536 * lbs_set_tpc_cfg - Configures the transmission power control functionality
1537 *
1538 * @priv: A pointer to &struct lbs_private structure
1539 * @enable: Transmission power control enable
1540 * @p0: Power level when link quality is good (dBm).
1541 * @p1: Power level when link quality is fair (dBm).
1542 * @p2: Power level when link quality is poor (dBm).
1543 * @usesnr: Use Signal to Noise Ratio in TPC
1544 *
1545 * returns: 0 on success
1546 */
1547int lbs_set_tpc_cfg(struct lbs_private *priv, int enable, int8_t p0, int8_t p1,
1548 int8_t p2, int usesnr)
1549{
1550 struct cmd_ds_802_11_tpc_cfg cmd;
1551 int ret;
1552
1553 memset(&cmd, 0, sizeof(cmd));
1554 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1555 cmd.action = cpu_to_le16(CMD_ACT_SET);
1556 cmd.enable = !!enable;
1557 cmd.usesnr = !!usesnr;
1558 cmd.P0 = p0;
1559 cmd.P1 = p1;
1560 cmd.P2 = p2;
1561
1562 ret = lbs_cmd_with_response(priv, CMD_802_11_TPC_CFG, &cmd);
1563
1564 return ret;
1565}
1566
1567/**
1568 * lbs_set_power_adapt_cfg - Configures the power adaptation settings
1569 *
1570 * @priv: A pointer to &struct lbs_private structure
1571 * @enable: Power adaptation enable
1572 * @p0: Power level for 1, 2, 5.5 and 11 Mbps (dBm).
1573 * @p1: Power level for 6, 9, 12, 18, 22, 24 and 36 Mbps (dBm).
1574 * @p2: Power level for 48 and 54 Mbps (dBm).
1575 *
1576 * returns: 0 on Success
1577 */
1578
1579int lbs_set_power_adapt_cfg(struct lbs_private *priv, int enable, int8_t p0,
1580 int8_t p1, int8_t p2)
1581{
1582 struct cmd_ds_802_11_pa_cfg cmd;
1583 int ret;
1584
1585 memset(&cmd, 0, sizeof(cmd));
1586 cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1587 cmd.action = cpu_to_le16(CMD_ACT_SET);
1588 cmd.enable = !!enable;
1589 cmd.P0 = p0;
1590 cmd.P1 = p1;
1591 cmd.P2 = p2;
1592
1593 ret = lbs_cmd_with_response(priv, CMD_802_11_PA_CFG , &cmd);
1594
1595 return ret;
1596}
1597
1598
1599struct cmd_ctrl_node *__lbs_cmd_async(struct lbs_private *priv,
1600 uint16_t command, struct cmd_header *in_cmd, int in_cmd_size,
1601 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
1602 unsigned long callback_arg)
1603{
1604 struct cmd_ctrl_node *cmdnode;
1605
1606 lbs_deb_enter(LBS_DEB_HOST);
1607
1608 if (priv->surpriseremoved) {
1609 lbs_deb_host("PREP_CMD: card removed\n");
1610 cmdnode = ERR_PTR(-ENOENT);
1611 goto done;
1612 }
1613
1614 /* No commands are allowed in Deep Sleep until we toggle the GPIO
1615 * to wake up the card and it has signaled that it's ready.
1616 */
1617 if (!priv->is_auto_deep_sleep_enabled) {
1618 if (priv->is_deep_sleep) {
1619 lbs_deb_cmd("command not allowed in deep sleep\n");
1620 cmdnode = ERR_PTR(-EBUSY);
1621 goto done;
1622 }
1623 }
1624
1625 cmdnode = lbs_get_free_cmd_node(priv);
1626 if (cmdnode == NULL) {
1627 lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1628
1629 /* Wake up main thread to execute next command */
1630 wake_up_interruptible(&priv->waitq);
1631 cmdnode = ERR_PTR(-ENOBUFS);
1632 goto done;
1633 }
1634
1635 cmdnode->callback = callback;
1636 cmdnode->callback_arg = callback_arg;
1637
1638 /* Copy the incoming command to the buffer */
1639 memcpy(cmdnode->cmdbuf, in_cmd, in_cmd_size);
1640
1641 /* Set command, clean result, move to buffer */
1642 cmdnode->cmdbuf->command = cpu_to_le16(command);
1643 cmdnode->cmdbuf->size = cpu_to_le16(in_cmd_size);
1644 cmdnode->cmdbuf->result = 0;
1645
1646 lbs_deb_host("PREP_CMD: command 0x%04x\n", command);
1647
1648 cmdnode->cmdwaitqwoken = 0;
1649 lbs_queue_cmd(priv, cmdnode);
1650 wake_up_interruptible(&priv->waitq);
1651
1652 done:
1653 lbs_deb_leave_args(LBS_DEB_HOST, "ret %p", cmdnode);
1654 return cmdnode;
1655}
1656
1657void lbs_cmd_async(struct lbs_private *priv, uint16_t command,
1658 struct cmd_header *in_cmd, int in_cmd_size)
1659{
1660 lbs_deb_enter(LBS_DEB_CMD);
1661 __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
1662 lbs_cmd_async_callback, 0);
1663 lbs_deb_leave(LBS_DEB_CMD);
1664}
1665
1666int __lbs_cmd(struct lbs_private *priv, uint16_t command,
1667 struct cmd_header *in_cmd, int in_cmd_size,
1668 int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
1669 unsigned long callback_arg)
1670{
1671 struct cmd_ctrl_node *cmdnode;
1672 unsigned long flags;
1673 int ret = 0;
1674
1675 lbs_deb_enter(LBS_DEB_HOST);
1676
1677 cmdnode = __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
1678 callback, callback_arg);
1679 if (IS_ERR(cmdnode)) {
1680 ret = PTR_ERR(cmdnode);
1681 goto done;
1682 }
1683
1684 might_sleep();
1685
1686 /*
1687 * Be careful with signals here. A signal may be received as the system
1688 * goes into suspend or resume. We do not want this to interrupt the
1689 * command, so we perform an uninterruptible sleep.
1690 */
1691 wait_event(cmdnode->cmdwait_q, cmdnode->cmdwaitqwoken);
1692
1693 spin_lock_irqsave(&priv->driver_lock, flags);
1694 ret = cmdnode->result;
1695 if (ret)
1696 netdev_info(priv->dev, "PREP_CMD: command 0x%04x failed: %d\n",
1697 command, ret);
1698
1699 __lbs_cleanup_and_insert_cmd(priv, cmdnode);
1700 spin_unlock_irqrestore(&priv->driver_lock, flags);
1701
1702done:
1703 lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1704 return ret;
1705}
1706EXPORT_SYMBOL_GPL(__lbs_cmd);