Linux Audio

Check our new training course

Loading...
Note: File does not exist in v4.17.
  1/*
  2 * Common code for mac80211 Prism54 drivers
  3 *
  4 * Copyright (c) 2006, Michael Wu <flamingice@sourmilk.net>
  5 * Copyright (c) 2007-2009, Christian Lamparter <chunkeey@web.de>
  6 * Copyright 2008, Johannes Berg <johannes@sipsolutions.net>
  7 *
  8 * Based on:
  9 * - the islsm (softmac prism54) driver, which is:
 10 *   Copyright 2004-2006 Jean-Baptiste Note <jbnote@gmail.com>, et al.
 11 * - stlc45xx driver
 12 *   Copyright (C) 2008 Nokia Corporation and/or its subsidiary(-ies).
 13 *
 14 * This program is free software; you can redistribute it and/or modify
 15 * it under the terms of the GNU General Public License version 2 as
 16 * published by the Free Software Foundation.
 17 */
 18
 19#include <linux/export.h>
 20#include <linux/init.h>
 21#include <linux/firmware.h>
 22#include <linux/etherdevice.h>
 23#include <asm/div64.h>
 24
 25#include <net/mac80211.h>
 26
 27#include "p54.h"
 28#include "lmac.h"
 29
 30#ifdef P54_MM_DEBUG
 31static void p54_dump_tx_queue(struct p54_common *priv)
 32{
 33	unsigned long flags;
 34	struct ieee80211_tx_info *info;
 35	struct p54_tx_info *range;
 36	struct sk_buff *skb;
 37	struct p54_hdr *hdr;
 38	unsigned int i = 0;
 39	u32 prev_addr;
 40	u32 largest_hole = 0, free;
 41
 42	spin_lock_irqsave(&priv->tx_queue.lock, flags);
 43	wiphy_debug(priv->hw->wiphy, "/ --- tx queue dump (%d entries) ---\n",
 44		    skb_queue_len(&priv->tx_queue));
 45
 46	prev_addr = priv->rx_start;
 47	skb_queue_walk(&priv->tx_queue, skb) {
 48		info = IEEE80211_SKB_CB(skb);
 49		range = (void *) info->rate_driver_data;
 50		hdr = (void *) skb->data;
 51
 52		free = range->start_addr - prev_addr;
 53		wiphy_debug(priv->hw->wiphy,
 54			    "| [%02d] => [skb:%p skb_len:0x%04x "
 55			    "hdr:{flags:%02x len:%04x req_id:%04x type:%02x} "
 56			    "mem:{start:%04x end:%04x, free:%d}]\n",
 57			    i++, skb, skb->len,
 58			    le16_to_cpu(hdr->flags), le16_to_cpu(hdr->len),
 59			    le32_to_cpu(hdr->req_id), le16_to_cpu(hdr->type),
 60			    range->start_addr, range->end_addr, free);
 61
 62		prev_addr = range->end_addr;
 63		largest_hole = max(largest_hole, free);
 64	}
 65	free = priv->rx_end - prev_addr;
 66	largest_hole = max(largest_hole, free);
 67	wiphy_debug(priv->hw->wiphy,
 68		    "\\ --- [free: %d], largest free block: %d ---\n",
 69		    free, largest_hole);
 70	spin_unlock_irqrestore(&priv->tx_queue.lock, flags);
 71}
 72#endif /* P54_MM_DEBUG */
 73
 74/*
 75 * So, the firmware is somewhat stupid and doesn't know what places in its
 76 * memory incoming data should go to. By poking around in the firmware, we
 77 * can find some unused memory to upload our packets to. However, data that we
 78 * want the card to TX needs to stay intact until the card has told us that
 79 * it is done with it. This function finds empty places we can upload to and
 80 * marks allocated areas as reserved if necessary. p54_find_and_unlink_skb or
 81 * p54_free_skb frees allocated areas.
 82 */
 83static int p54_assign_address(struct p54_common *priv, struct sk_buff *skb)
 84{
 85	struct sk_buff *entry, *target_skb = NULL;
 86	struct ieee80211_tx_info *info;
 87	struct p54_tx_info *range;
 88	struct p54_hdr *data = (void *) skb->data;
 89	unsigned long flags;
 90	u32 last_addr = priv->rx_start;
 91	u32 target_addr = priv->rx_start;
 92	u16 len = priv->headroom + skb->len + priv->tailroom + 3;
 93
 94	info = IEEE80211_SKB_CB(skb);
 95	range = (void *) info->rate_driver_data;
 96	len = (range->extra_len + len) & ~0x3;
 97
 98	spin_lock_irqsave(&priv->tx_queue.lock, flags);
 99	if (unlikely(skb_queue_len(&priv->tx_queue) == 32)) {
100		/*
101		 * The tx_queue is now really full.
102		 *
103		 * TODO: check if the device has crashed and reset it.
104		 */
105		spin_unlock_irqrestore(&priv->tx_queue.lock, flags);
106		return -EBUSY;
107	}
108
109	skb_queue_walk(&priv->tx_queue, entry) {
110		u32 hole_size;
111		info = IEEE80211_SKB_CB(entry);
112		range = (void *) info->rate_driver_data;
113		hole_size = range->start_addr - last_addr;
114
115		if (!target_skb && hole_size >= len) {
116			target_skb = entry->prev;
117			hole_size -= len;
118			target_addr = last_addr;
119			break;
120		}
121		last_addr = range->end_addr;
122	}
123	if (unlikely(!target_skb)) {
124		if (priv->rx_end - last_addr >= len) {
125			target_skb = priv->tx_queue.prev;
126			if (!skb_queue_empty(&priv->tx_queue)) {
127				info = IEEE80211_SKB_CB(target_skb);
128				range = (void *)info->rate_driver_data;
129				target_addr = range->end_addr;
130			}
131		} else {
132			spin_unlock_irqrestore(&priv->tx_queue.lock, flags);
133			return -ENOSPC;
134		}
135	}
136
137	info = IEEE80211_SKB_CB(skb);
138	range = (void *) info->rate_driver_data;
139	range->start_addr = target_addr;
140	range->end_addr = target_addr + len;
141	data->req_id = cpu_to_le32(target_addr + priv->headroom);
142	if (IS_DATA_FRAME(skb) &&
143	    unlikely(GET_HW_QUEUE(skb) == P54_QUEUE_BEACON))
144		priv->beacon_req_id = data->req_id;
145
146	__skb_queue_after(&priv->tx_queue, target_skb, skb);
147	spin_unlock_irqrestore(&priv->tx_queue.lock, flags);
148	return 0;
149}
150
151static void p54_tx_pending(struct p54_common *priv)
152{
153	struct sk_buff *skb;
154	int ret;
155
156	skb = skb_dequeue(&priv->tx_pending);
157	if (unlikely(!skb))
158		return ;
159
160	ret = p54_assign_address(priv, skb);
161	if (unlikely(ret))
162		skb_queue_head(&priv->tx_pending, skb);
163	else
164		priv->tx(priv->hw, skb);
165}
166
167static void p54_wake_queues(struct p54_common *priv)
168{
169	unsigned long flags;
170	unsigned int i;
171
172	if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED))
173		return ;
174
175	p54_tx_pending(priv);
176
177	spin_lock_irqsave(&priv->tx_stats_lock, flags);
178	for (i = 0; i < priv->hw->queues; i++) {
179		if (priv->tx_stats[i + P54_QUEUE_DATA].len <
180		    priv->tx_stats[i + P54_QUEUE_DATA].limit)
181			ieee80211_wake_queue(priv->hw, i);
182	}
183	spin_unlock_irqrestore(&priv->tx_stats_lock, flags);
184}
185
186static int p54_tx_qos_accounting_alloc(struct p54_common *priv,
187				       struct sk_buff *skb,
188				       const u16 p54_queue)
189{
190	struct p54_tx_queue_stats *queue;
191	unsigned long flags;
192
193	if (WARN_ON(p54_queue >= P54_QUEUE_NUM))
194		return -EINVAL;
195
196	queue = &priv->tx_stats[p54_queue];
197
198	spin_lock_irqsave(&priv->tx_stats_lock, flags);
199	if (unlikely(queue->len >= queue->limit && IS_QOS_QUEUE(p54_queue))) {
200		spin_unlock_irqrestore(&priv->tx_stats_lock, flags);
201		return -ENOSPC;
202	}
203
204	queue->len++;
205	queue->count++;
206
207	if (unlikely(queue->len == queue->limit && IS_QOS_QUEUE(p54_queue))) {
208		u16 ac_queue = p54_queue - P54_QUEUE_DATA;
209		ieee80211_stop_queue(priv->hw, ac_queue);
210	}
211
212	spin_unlock_irqrestore(&priv->tx_stats_lock, flags);
213	return 0;
214}
215
216static void p54_tx_qos_accounting_free(struct p54_common *priv,
217				       struct sk_buff *skb)
218{
219	if (IS_DATA_FRAME(skb)) {
220		unsigned long flags;
221
222		spin_lock_irqsave(&priv->tx_stats_lock, flags);
223		priv->tx_stats[GET_HW_QUEUE(skb)].len--;
224		spin_unlock_irqrestore(&priv->tx_stats_lock, flags);
225
226		if (unlikely(GET_HW_QUEUE(skb) == P54_QUEUE_BEACON)) {
227			if (priv->beacon_req_id == GET_REQ_ID(skb)) {
228				/* this is the  active beacon set anymore */
229				priv->beacon_req_id = 0;
230			}
231			complete(&priv->beacon_comp);
232		}
233	}
234	p54_wake_queues(priv);
235}
236
237void p54_free_skb(struct ieee80211_hw *dev, struct sk_buff *skb)
238{
239	struct p54_common *priv = dev->priv;
240	if (unlikely(!skb))
241		return ;
242
243	skb_unlink(skb, &priv->tx_queue);
244	p54_tx_qos_accounting_free(priv, skb);
245	ieee80211_free_txskb(dev, skb);
246}
247EXPORT_SYMBOL_GPL(p54_free_skb);
248
249static struct sk_buff *p54_find_and_unlink_skb(struct p54_common *priv,
250					       const __le32 req_id)
251{
252	struct sk_buff *entry;
253	unsigned long flags;
254
255	spin_lock_irqsave(&priv->tx_queue.lock, flags);
256	skb_queue_walk(&priv->tx_queue, entry) {
257		struct p54_hdr *hdr = (struct p54_hdr *) entry->data;
258
259		if (hdr->req_id == req_id) {
260			__skb_unlink(entry, &priv->tx_queue);
261			spin_unlock_irqrestore(&priv->tx_queue.lock, flags);
262			p54_tx_qos_accounting_free(priv, entry);
263			return entry;
264		}
265	}
266	spin_unlock_irqrestore(&priv->tx_queue.lock, flags);
267	return NULL;
268}
269
270void p54_tx(struct p54_common *priv, struct sk_buff *skb)
271{
272	skb_queue_tail(&priv->tx_pending, skb);
273	p54_tx_pending(priv);
274}
275
276static int p54_rssi_to_dbm(struct p54_common *priv, int rssi)
277{
278	if (priv->rxhw != 5) {
279		return ((rssi * priv->cur_rssi->mul) / 64 +
280			 priv->cur_rssi->add) / 4;
281	} else {
282		/*
283		 * TODO: find the correct formula
284		 */
285		return rssi / 2 - 110;
286	}
287}
288
289/*
290 * Even if the firmware is capable of dealing with incoming traffic,
291 * while dozing, we have to prepared in case mac80211 uses PS-POLL
292 * to retrieve outstanding frames from our AP.
293 * (see comment in net/mac80211/mlme.c @ line 1993)
294 */
295static void p54_pspoll_workaround(struct p54_common *priv, struct sk_buff *skb)
296{
297	struct ieee80211_hdr *hdr = (void *) skb->data;
298	struct ieee80211_tim_ie *tim_ie;
299	u8 *tim;
300	u8 tim_len;
301	bool new_psm;
302
303	/* only beacons have a TIM IE */
304	if (!ieee80211_is_beacon(hdr->frame_control))
305		return;
306
307	if (!priv->aid)
308		return;
309
310	/* only consider beacons from the associated BSSID */
311	if (!ether_addr_equal(hdr->addr3, priv->bssid))
312		return;
313
314	tim = p54_find_ie(skb, WLAN_EID_TIM);
315	if (!tim)
316		return;
317
318	tim_len = tim[1];
319	tim_ie = (struct ieee80211_tim_ie *) &tim[2];
320
321	new_psm = ieee80211_check_tim(tim_ie, tim_len, priv->aid);
322	if (new_psm != priv->powersave_override) {
323		priv->powersave_override = new_psm;
324		p54_set_ps(priv);
325	}
326}
327
328static int p54_rx_data(struct p54_common *priv, struct sk_buff *skb)
329{
330	struct p54_rx_data *hdr = (struct p54_rx_data *) skb->data;
331	struct ieee80211_rx_status *rx_status = IEEE80211_SKB_RXCB(skb);
332	u16 freq = le16_to_cpu(hdr->freq);
333	size_t header_len = sizeof(*hdr);
334	u32 tsf32;
335	u8 rate = hdr->rate & 0xf;
336
337	/*
338	 * If the device is in a unspecified state we have to
339	 * ignore all data frames. Else we could end up with a
340	 * nasty crash.
341	 */
342	if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED))
343		return 0;
344
345	if (!(hdr->flags & cpu_to_le16(P54_HDR_FLAG_DATA_IN_FCS_GOOD)))
346		return 0;
347
348	if (hdr->decrypt_status == P54_DECRYPT_OK)
349		rx_status->flag |= RX_FLAG_DECRYPTED;
350	if ((hdr->decrypt_status == P54_DECRYPT_FAIL_MICHAEL) ||
351	    (hdr->decrypt_status == P54_DECRYPT_FAIL_TKIP))
352		rx_status->flag |= RX_FLAG_MMIC_ERROR;
353
354	rx_status->signal = p54_rssi_to_dbm(priv, hdr->rssi);
355	if (hdr->rate & 0x10)
356		rx_status->flag |= RX_FLAG_SHORTPRE;
357	if (priv->hw->conf.channel->band == IEEE80211_BAND_5GHZ)
358		rx_status->rate_idx = (rate < 4) ? 0 : rate - 4;
359	else
360		rx_status->rate_idx = rate;
361
362	rx_status->freq = freq;
363	rx_status->band =  priv->hw->conf.channel->band;
364	rx_status->antenna = hdr->antenna;
365
366	tsf32 = le32_to_cpu(hdr->tsf32);
367	if (tsf32 < priv->tsf_low32)
368		priv->tsf_high32++;
369	rx_status->mactime = ((u64)priv->tsf_high32) << 32 | tsf32;
370	priv->tsf_low32 = tsf32;
371
372	rx_status->flag |= RX_FLAG_MACTIME_MPDU;
373
374	if (hdr->flags & cpu_to_le16(P54_HDR_FLAG_DATA_ALIGN))
375		header_len += hdr->align[0];
376
377	skb_pull(skb, header_len);
378	skb_trim(skb, le16_to_cpu(hdr->len));
379	if (unlikely(priv->hw->conf.flags & IEEE80211_CONF_PS))
380		p54_pspoll_workaround(priv, skb);
381
382	ieee80211_rx_irqsafe(priv->hw, skb);
383
384	ieee80211_queue_delayed_work(priv->hw, &priv->work,
385			   msecs_to_jiffies(P54_STATISTICS_UPDATE));
386
387	return -1;
388}
389
390static void p54_rx_frame_sent(struct p54_common *priv, struct sk_buff *skb)
391{
392	struct p54_hdr *hdr = (struct p54_hdr *) skb->data;
393	struct p54_frame_sent *payload = (struct p54_frame_sent *) hdr->data;
394	struct ieee80211_tx_info *info;
395	struct p54_hdr *entry_hdr;
396	struct p54_tx_data *entry_data;
397	struct sk_buff *entry;
398	unsigned int pad = 0, frame_len;
399	int count, idx;
400
401	entry = p54_find_and_unlink_skb(priv, hdr->req_id);
402	if (unlikely(!entry))
403		return ;
404
405	frame_len = entry->len;
406	info = IEEE80211_SKB_CB(entry);
407	entry_hdr = (struct p54_hdr *) entry->data;
408	entry_data = (struct p54_tx_data *) entry_hdr->data;
409	priv->stats.dot11ACKFailureCount += payload->tries - 1;
410
411	/*
412	 * Frames in P54_QUEUE_FWSCAN and P54_QUEUE_BEACON are
413	 * generated by the driver. Therefore tx_status is bogus
414	 * and we don't want to confuse the mac80211 stack.
415	 */
416	if (unlikely(entry_data->hw_queue < P54_QUEUE_FWSCAN)) {
417		dev_kfree_skb_any(entry);
418		return ;
419	}
420
421	/*
422	 * Clear manually, ieee80211_tx_info_clear_status would
423	 * clear the counts too and we need them.
424	 */
425	memset(&info->status.ampdu_ack_len, 0,
426	       sizeof(struct ieee80211_tx_info) -
427	       offsetof(struct ieee80211_tx_info, status.ampdu_ack_len));
428	BUILD_BUG_ON(offsetof(struct ieee80211_tx_info,
429			      status.ampdu_ack_len) != 23);
430
431	if (entry_hdr->flags & cpu_to_le16(P54_HDR_FLAG_DATA_ALIGN))
432		pad = entry_data->align[0];
433
434	/* walk through the rates array and adjust the counts */
435	count = payload->tries;
436	for (idx = 0; idx < 4; idx++) {
437		if (count >= info->status.rates[idx].count) {
438			count -= info->status.rates[idx].count;
439		} else if (count > 0) {
440			info->status.rates[idx].count = count;
441			count = 0;
442		} else {
443			info->status.rates[idx].idx = -1;
444			info->status.rates[idx].count = 0;
445		}
446	}
447
448	if (!(info->flags & IEEE80211_TX_CTL_NO_ACK) &&
449	     !(payload->status & P54_TX_FAILED))
450		info->flags |= IEEE80211_TX_STAT_ACK;
451	if (payload->status & P54_TX_PSM_CANCELLED)
452		info->flags |= IEEE80211_TX_STAT_TX_FILTERED;
453	info->status.ack_signal = p54_rssi_to_dbm(priv,
454						  (int)payload->ack_rssi);
455
456	/* Undo all changes to the frame. */
457	switch (entry_data->key_type) {
458	case P54_CRYPTO_TKIPMICHAEL: {
459		u8 *iv = (u8 *)(entry_data->align + pad +
460				entry_data->crypt_offset);
461
462		/* Restore the original TKIP IV. */
463		iv[2] = iv[0];
464		iv[0] = iv[1];
465		iv[1] = (iv[0] | 0x20) & 0x7f;	/* WEPSeed - 8.3.2.2 */
466
467		frame_len -= 12; /* remove TKIP_MMIC + TKIP_ICV */
468		break;
469		}
470	case P54_CRYPTO_AESCCMP:
471		frame_len -= 8; /* remove CCMP_MIC */
472		break;
473	case P54_CRYPTO_WEP:
474		frame_len -= 4; /* remove WEP_ICV */
475		break;
476	}
477
478	skb_trim(entry, frame_len);
479	skb_pull(entry, sizeof(*hdr) + pad + sizeof(*entry_data));
480	ieee80211_tx_status_irqsafe(priv->hw, entry);
481}
482
483static void p54_rx_eeprom_readback(struct p54_common *priv,
484				   struct sk_buff *skb)
485{
486	struct p54_hdr *hdr = (struct p54_hdr *) skb->data;
487	struct p54_eeprom_lm86 *eeprom = (struct p54_eeprom_lm86 *) hdr->data;
488	struct sk_buff *tmp;
489
490	if (!priv->eeprom)
491		return ;
492
493	if (priv->fw_var >= 0x509) {
494		memcpy(priv->eeprom, eeprom->v2.data,
495		       le16_to_cpu(eeprom->v2.len));
496	} else {
497		memcpy(priv->eeprom, eeprom->v1.data,
498		       le16_to_cpu(eeprom->v1.len));
499	}
500
501	priv->eeprom = NULL;
502	tmp = p54_find_and_unlink_skb(priv, hdr->req_id);
503	dev_kfree_skb_any(tmp);
504	complete(&priv->eeprom_comp);
505}
506
507static void p54_rx_stats(struct p54_common *priv, struct sk_buff *skb)
508{
509	struct p54_hdr *hdr = (struct p54_hdr *) skb->data;
510	struct p54_statistics *stats = (struct p54_statistics *) hdr->data;
511	struct sk_buff *tmp;
512	struct ieee80211_channel *chan;
513	unsigned int i, rssi, tx, cca, dtime, dtotal, dcca, dtx, drssi, unit;
514	u32 tsf32;
515
516	if (unlikely(priv->mode == NL80211_IFTYPE_UNSPECIFIED))
517		return ;
518
519	tsf32 = le32_to_cpu(stats->tsf32);
520	if (tsf32 < priv->tsf_low32)
521		priv->tsf_high32++;
522	priv->tsf_low32 = tsf32;
523
524	priv->stats.dot11RTSFailureCount = le32_to_cpu(stats->rts_fail);
525	priv->stats.dot11RTSSuccessCount = le32_to_cpu(stats->rts_success);
526	priv->stats.dot11FCSErrorCount = le32_to_cpu(stats->rx_bad_fcs);
527
528	priv->noise = p54_rssi_to_dbm(priv, le32_to_cpu(stats->noise));
529
530	/*
531	 * STSW450X LMAC API page 26 - 3.8 Statistics
532	 * "The exact measurement period can be derived from the
533	 * timestamp member".
534	 */
535	dtime = tsf32 - priv->survey_raw.timestamp;
536
537	/*
538	 * STSW450X LMAC API page 26 - 3.8.1 Noise histogram
539	 * The LMAC samples RSSI, CCA and transmit state at regular
540	 * periods (typically 8 times per 1k [as in 1024] usec).
541	 */
542	cca = le32_to_cpu(stats->sample_cca);
543	tx = le32_to_cpu(stats->sample_tx);
544	rssi = 0;
545	for (i = 0; i < ARRAY_SIZE(stats->sample_noise); i++)
546		rssi += le32_to_cpu(stats->sample_noise[i]);
547
548	dcca = cca - priv->survey_raw.cached_cca;
549	drssi = rssi - priv->survey_raw.cached_rssi;
550	dtx = tx - priv->survey_raw.cached_tx;
551	dtotal = dcca + drssi + dtx;
552
553	/*
554	 * update statistics when more than a second is over since the
555	 * last call, or when a update is badly needed.
556	 */
557	if (dtotal && (priv->update_stats || dtime >= USEC_PER_SEC) &&
558	    dtime >= dtotal) {
559		priv->survey_raw.timestamp = tsf32;
560		priv->update_stats = false;
561		unit = dtime / dtotal;
562
563		if (dcca) {
564			priv->survey_raw.cca += dcca * unit;
565			priv->survey_raw.cached_cca = cca;
566		}
567		if (dtx) {
568			priv->survey_raw.tx += dtx * unit;
569			priv->survey_raw.cached_tx = tx;
570		}
571		if (drssi) {
572			priv->survey_raw.rssi += drssi * unit;
573			priv->survey_raw.cached_rssi = rssi;
574		}
575
576		/* 1024 usec / 8 times = 128 usec / time */
577		if (!(priv->phy_ps || priv->phy_idle))
578			priv->survey_raw.active += dtotal * unit;
579		else
580			priv->survey_raw.active += (dcca + dtx) * unit;
581	}
582
583	chan = priv->curchan;
584	if (chan) {
585		struct survey_info *survey = &priv->survey[chan->hw_value];
586		survey->noise = clamp_t(s8, priv->noise, -128, 127);
587		survey->channel_time = priv->survey_raw.active;
588		survey->channel_time_tx = priv->survey_raw.tx;
589		survey->channel_time_busy = priv->survey_raw.tx +
590			priv->survey_raw.cca;
591		do_div(survey->channel_time, 1024);
592		do_div(survey->channel_time_tx, 1024);
593		do_div(survey->channel_time_busy, 1024);
594	}
595
596	tmp = p54_find_and_unlink_skb(priv, hdr->req_id);
597	dev_kfree_skb_any(tmp);
598	complete(&priv->stat_comp);
599}
600
601static void p54_rx_trap(struct p54_common *priv, struct sk_buff *skb)
602{
603	struct p54_hdr *hdr = (struct p54_hdr *) skb->data;
604	struct p54_trap *trap = (struct p54_trap *) hdr->data;
605	u16 event = le16_to_cpu(trap->event);
606	u16 freq = le16_to_cpu(trap->frequency);
607
608	switch (event) {
609	case P54_TRAP_BEACON_TX:
610		break;
611	case P54_TRAP_RADAR:
612		wiphy_info(priv->hw->wiphy, "radar (freq:%d MHz)\n", freq);
613		break;
614	case P54_TRAP_NO_BEACON:
615		if (priv->vif)
616			ieee80211_beacon_loss(priv->vif);
617		break;
618	case P54_TRAP_SCAN:
619		break;
620	case P54_TRAP_TBTT:
621		break;
622	case P54_TRAP_TIMER:
623		break;
624	case P54_TRAP_FAA_RADIO_OFF:
625		wiphy_rfkill_set_hw_state(priv->hw->wiphy, true);
626		break;
627	case P54_TRAP_FAA_RADIO_ON:
628		wiphy_rfkill_set_hw_state(priv->hw->wiphy, false);
629		break;
630	default:
631		wiphy_info(priv->hw->wiphy, "received event:%x freq:%d\n",
632			   event, freq);
633		break;
634	}
635}
636
637static int p54_rx_control(struct p54_common *priv, struct sk_buff *skb)
638{
639	struct p54_hdr *hdr = (struct p54_hdr *) skb->data;
640
641	switch (le16_to_cpu(hdr->type)) {
642	case P54_CONTROL_TYPE_TXDONE:
643		p54_rx_frame_sent(priv, skb);
644		break;
645	case P54_CONTROL_TYPE_TRAP:
646		p54_rx_trap(priv, skb);
647		break;
648	case P54_CONTROL_TYPE_BBP:
649		break;
650	case P54_CONTROL_TYPE_STAT_READBACK:
651		p54_rx_stats(priv, skb);
652		break;
653	case P54_CONTROL_TYPE_EEPROM_READBACK:
654		p54_rx_eeprom_readback(priv, skb);
655		break;
656	default:
657		wiphy_debug(priv->hw->wiphy,
658			    "not handling 0x%02x type control frame\n",
659			    le16_to_cpu(hdr->type));
660		break;
661	}
662	return 0;
663}
664
665/* returns zero if skb can be reused */
666int p54_rx(struct ieee80211_hw *dev, struct sk_buff *skb)
667{
668	struct p54_common *priv = dev->priv;
669	u16 type = le16_to_cpu(*((__le16 *)skb->data));
670
671	if (type & P54_HDR_FLAG_CONTROL)
672		return p54_rx_control(priv, skb);
673	else
674		return p54_rx_data(priv, skb);
675}
676EXPORT_SYMBOL_GPL(p54_rx);
677
678static void p54_tx_80211_header(struct p54_common *priv, struct sk_buff *skb,
679				struct ieee80211_tx_info *info, u8 *queue,
680				u32 *extra_len, u16 *flags, u16 *aid,
681				bool *burst_possible)
682{
683	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)skb->data;
684
685	if (ieee80211_is_data_qos(hdr->frame_control))
686		*burst_possible = true;
687	else
688		*burst_possible = false;
689
690	if (!(info->flags & IEEE80211_TX_CTL_ASSIGN_SEQ))
691		*flags |= P54_HDR_FLAG_DATA_OUT_SEQNR;
692
693	if (info->flags & IEEE80211_TX_CTL_NO_PS_BUFFER)
694		*flags |= P54_HDR_FLAG_DATA_OUT_NOCANCEL;
695
696	if (info->flags & IEEE80211_TX_CTL_CLEAR_PS_FILT)
697		*flags |= P54_HDR_FLAG_DATA_OUT_NOCANCEL;
698
699	*queue = skb_get_queue_mapping(skb) + P54_QUEUE_DATA;
700
701	switch (priv->mode) {
702	case NL80211_IFTYPE_MONITOR:
703		/*
704		 * We have to set P54_HDR_FLAG_DATA_OUT_PROMISC for
705		 * every frame in promiscuous/monitor mode.
706		 * see STSW45x0C LMAC API - page 12.
707		 */
708		*aid = 0;
709		*flags |= P54_HDR_FLAG_DATA_OUT_PROMISC;
710		break;
711	case NL80211_IFTYPE_STATION:
712		*aid = 1;
713		break;
714	case NL80211_IFTYPE_AP:
715	case NL80211_IFTYPE_ADHOC:
716	case NL80211_IFTYPE_MESH_POINT:
717		if (info->flags & IEEE80211_TX_CTL_SEND_AFTER_DTIM) {
718			*aid = 0;
719			*queue = P54_QUEUE_CAB;
720			return;
721		}
722
723		if (unlikely(ieee80211_is_mgmt(hdr->frame_control))) {
724			if (ieee80211_is_probe_resp(hdr->frame_control)) {
725				*aid = 0;
726				*flags |= P54_HDR_FLAG_DATA_OUT_TIMESTAMP |
727					  P54_HDR_FLAG_DATA_OUT_NOCANCEL;
728				return;
729			} else if (ieee80211_is_beacon(hdr->frame_control)) {
730				*aid = 0;
731
732				if (info->flags & IEEE80211_TX_CTL_INJECTED) {
733					/*
734					 * Injecting beacons on top of a AP is
735					 * not a good idea... nevertheless,
736					 * it should be doable.
737					 */
738
739					return;
740				}
741
742				*flags |= P54_HDR_FLAG_DATA_OUT_TIMESTAMP;
743				*queue = P54_QUEUE_BEACON;
744				*extra_len = IEEE80211_MAX_TIM_LEN;
745				return;
746			}
747		}
748
749		if (info->control.sta)
750			*aid = info->control.sta->aid;
751		break;
752	}
753}
754
755static u8 p54_convert_algo(u32 cipher)
756{
757	switch (cipher) {
758	case WLAN_CIPHER_SUITE_WEP40:
759	case WLAN_CIPHER_SUITE_WEP104:
760		return P54_CRYPTO_WEP;
761	case WLAN_CIPHER_SUITE_TKIP:
762		return P54_CRYPTO_TKIPMICHAEL;
763	case WLAN_CIPHER_SUITE_CCMP:
764		return P54_CRYPTO_AESCCMP;
765	default:
766		return 0;
767	}
768}
769
770void p54_tx_80211(struct ieee80211_hw *dev, struct sk_buff *skb)
771{
772	struct p54_common *priv = dev->priv;
773	struct ieee80211_tx_info *info = IEEE80211_SKB_CB(skb);
774	struct p54_tx_info *p54info;
775	struct p54_hdr *hdr;
776	struct p54_tx_data *txhdr;
777	unsigned int padding, len, extra_len = 0;
778	int i, j, ridx;
779	u16 hdr_flags = 0, aid = 0;
780	u8 rate, queue = 0, crypt_offset = 0;
781	u8 cts_rate = 0x20;
782	u8 rc_flags;
783	u8 calculated_tries[4];
784	u8 nrates = 0, nremaining = 8;
785	bool burst_allowed = false;
786
787	p54_tx_80211_header(priv, skb, info, &queue, &extra_len,
788			    &hdr_flags, &aid, &burst_allowed);
789
790	if (p54_tx_qos_accounting_alloc(priv, skb, queue)) {
791		ieee80211_free_txskb(dev, skb);
792		return;
793	}
794
795	padding = (unsigned long)(skb->data - (sizeof(*hdr) + sizeof(*txhdr))) & 3;
796	len = skb->len;
797
798	if (info->control.hw_key) {
799		crypt_offset = ieee80211_get_hdrlen_from_skb(skb);
800		if (info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP) {
801			u8 *iv = (u8 *)(skb->data + crypt_offset);
802			/*
803			 * The firmware excepts that the IV has to have
804			 * this special format
805			 */
806			iv[1] = iv[0];
807			iv[0] = iv[2];
808			iv[2] = 0;
809		}
810	}
811
812	txhdr = (struct p54_tx_data *) skb_push(skb, sizeof(*txhdr) + padding);
813	hdr = (struct p54_hdr *) skb_push(skb, sizeof(*hdr));
814
815	if (padding)
816		hdr_flags |= P54_HDR_FLAG_DATA_ALIGN;
817	hdr->type = cpu_to_le16(aid);
818	hdr->rts_tries = info->control.rates[0].count;
819
820	/*
821	 * we register the rates in perfect order, and
822	 * RTS/CTS won't happen on 5 GHz
823	 */
824	cts_rate = info->control.rts_cts_rate_idx;
825
826	memset(&txhdr->rateset, 0, sizeof(txhdr->rateset));
827
828	/* see how many rates got used */
829	for (i = 0; i < dev->max_rates; i++) {
830		if (info->control.rates[i].idx < 0)
831			break;
832		nrates++;
833	}
834
835	/* limit tries to 8/nrates per rate */
836	for (i = 0; i < nrates; i++) {
837		/*
838		 * The magic expression here is equivalent to 8/nrates for
839		 * all values that matter, but avoids division and jumps.
840		 * Note that nrates can only take the values 1 through 4.
841		 */
842		calculated_tries[i] = min_t(int, ((15 >> nrates) | 1) + 1,
843						 info->control.rates[i].count);
844		nremaining -= calculated_tries[i];
845	}
846
847	/* if there are tries left, distribute from back to front */
848	for (i = nrates - 1; nremaining > 0 && i >= 0; i--) {
849		int tmp = info->control.rates[i].count - calculated_tries[i];
850
851		if (tmp <= 0)
852			continue;
853		/* RC requested more tries at this rate */
854
855		tmp = min_t(int, tmp, nremaining);
856		calculated_tries[i] += tmp;
857		nremaining -= tmp;
858	}
859
860	ridx = 0;
861	for (i = 0; i < nrates && ridx < 8; i++) {
862		/* we register the rates in perfect order */
863		rate = info->control.rates[i].idx;
864		if (info->band == IEEE80211_BAND_5GHZ)
865			rate += 4;
866
867		/* store the count we actually calculated for TX status */
868		info->control.rates[i].count = calculated_tries[i];
869
870		rc_flags = info->control.rates[i].flags;
871		if (rc_flags & IEEE80211_TX_RC_USE_SHORT_PREAMBLE) {
872			rate |= 0x10;
873			cts_rate |= 0x10;
874		}
875		if (rc_flags & IEEE80211_TX_RC_USE_RTS_CTS) {
876			burst_allowed = false;
877			rate |= 0x40;
878		} else if (rc_flags & IEEE80211_TX_RC_USE_CTS_PROTECT) {
879			rate |= 0x20;
880			burst_allowed = false;
881		}
882		for (j = 0; j < calculated_tries[i] && ridx < 8; j++) {
883			txhdr->rateset[ridx] = rate;
884			ridx++;
885		}
886	}
887
888	if (burst_allowed)
889		hdr_flags |= P54_HDR_FLAG_DATA_OUT_BURST;
890
891	/* TODO: enable bursting */
892	hdr->flags = cpu_to_le16(hdr_flags);
893	hdr->tries = ridx;
894	txhdr->rts_rate_idx = 0;
895	if (info->control.hw_key) {
896		txhdr->key_type = p54_convert_algo(info->control.hw_key->cipher);
897		txhdr->key_len = min((u8)16, info->control.hw_key->keylen);
898		memcpy(txhdr->key, info->control.hw_key->key, txhdr->key_len);
899		if (info->control.hw_key->cipher == WLAN_CIPHER_SUITE_TKIP) {
900			/* reserve space for the MIC key */
901			len += 8;
902			memcpy(skb_put(skb, 8), &(info->control.hw_key->key
903				[NL80211_TKIP_DATA_OFFSET_TX_MIC_KEY]), 8);
904		}
905		/* reserve some space for ICV */
906		len += info->control.hw_key->icv_len;
907		memset(skb_put(skb, info->control.hw_key->icv_len), 0,
908		       info->control.hw_key->icv_len);
909	} else {
910		txhdr->key_type = 0;
911		txhdr->key_len = 0;
912	}
913	txhdr->crypt_offset = crypt_offset;
914	txhdr->hw_queue = queue;
915	txhdr->backlog = priv->tx_stats[queue].len - 1;
916	memset(txhdr->durations, 0, sizeof(txhdr->durations));
917	txhdr->tx_antenna = 2 & priv->tx_diversity_mask;
918	if (priv->rxhw == 5) {
919		txhdr->longbow.cts_rate = cts_rate;
920		txhdr->longbow.output_power = cpu_to_le16(priv->output_power);
921	} else {
922		txhdr->normal.output_power = priv->output_power;
923		txhdr->normal.cts_rate = cts_rate;
924	}
925	if (padding)
926		txhdr->align[0] = padding;
927
928	hdr->len = cpu_to_le16(len);
929	/* modifies skb->cb and with it info, so must be last! */
930	p54info = (void *) info->rate_driver_data;
931	p54info->extra_len = extra_len;
932
933	p54_tx(priv, skb);
934}