Linux Audio

Check our new training course

Loading...
v6.8
   1// SPDX-License-Identifier: GPL-2.0-only
   2/******************************************************************************
   3 *
   4 * Copyright(c) 2003 - 2011 Intel Corporation. All rights reserved.
   5 *
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
   6 * Contact Information:
   7 *  Intel Linux Wireless <ilw@linux.intel.com>
   8 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
   9 *
  10 *****************************************************************************/
  11
  12#include <linux/kernel.h>
  13#include <linux/module.h>
  14#include <linux/slab.h>
  15#include <linux/pci.h>
  16#include <linux/dma-mapping.h>
  17#include <linux/delay.h>
  18#include <linux/sched.h>
  19#include <linux/skbuff.h>
  20#include <linux/netdevice.h>
  21#include <linux/firmware.h>
  22#include <linux/etherdevice.h>
  23#include <asm/unaligned.h>
  24#include <net/mac80211.h>
  25
  26#include "common.h"
  27#include "3945.h"
  28
  29/* Send led command */
  30static int
  31il3945_send_led_cmd(struct il_priv *il, struct il_led_cmd *led_cmd)
  32{
  33	struct il_host_cmd cmd = {
  34		.id = C_LEDS,
  35		.len = sizeof(struct il_led_cmd),
  36		.data = led_cmd,
  37		.flags = CMD_ASYNC,
  38		.callback = NULL,
  39	};
  40
  41	return il_send_cmd(il, &cmd);
  42}
  43
  44#define IL_DECLARE_RATE_INFO(r, ip, in, rp, rn, pp, np)    \
  45	[RATE_##r##M_IDX] = { RATE_##r##M_PLCP,   \
  46				    RATE_##r##M_IEEE,   \
  47				    RATE_##ip##M_IDX, \
  48				    RATE_##in##M_IDX, \
  49				    RATE_##rp##M_IDX, \
  50				    RATE_##rn##M_IDX, \
  51				    RATE_##pp##M_IDX, \
  52				    RATE_##np##M_IDX, \
  53				    RATE_##r##M_IDX_TBL, \
  54				    RATE_##ip##M_IDX_TBL }
  55
  56/*
  57 * Parameter order:
  58 *   rate, prev rate, next rate, prev tgg rate, next tgg rate
  59 *
  60 * If there isn't a valid next or previous rate then INV is used which
  61 * maps to RATE_INVALID
  62 *
  63 */
  64const struct il3945_rate_info il3945_rates[RATE_COUNT_3945] = {
  65	IL_DECLARE_RATE_INFO(1, INV, 2, INV, 2, INV, 2),	/*  1mbps */
  66	IL_DECLARE_RATE_INFO(2, 1, 5, 1, 5, 1, 5),	/*  2mbps */
  67	IL_DECLARE_RATE_INFO(5, 2, 6, 2, 11, 2, 11),	/*5.5mbps */
  68	IL_DECLARE_RATE_INFO(11, 9, 12, 5, 12, 5, 18),	/* 11mbps */
  69	IL_DECLARE_RATE_INFO(6, 5, 9, 5, 11, 5, 11),	/*  6mbps */
  70	IL_DECLARE_RATE_INFO(9, 6, 11, 5, 11, 5, 11),	/*  9mbps */
  71	IL_DECLARE_RATE_INFO(12, 11, 18, 11, 18, 11, 18),	/* 12mbps */
  72	IL_DECLARE_RATE_INFO(18, 12, 24, 12, 24, 11, 24),	/* 18mbps */
  73	IL_DECLARE_RATE_INFO(24, 18, 36, 18, 36, 18, 36),	/* 24mbps */
  74	IL_DECLARE_RATE_INFO(36, 24, 48, 24, 48, 24, 48),	/* 36mbps */
  75	IL_DECLARE_RATE_INFO(48, 36, 54, 36, 54, 36, 54),	/* 48mbps */
  76	IL_DECLARE_RATE_INFO(54, 48, INV, 48, INV, 48, INV),	/* 54mbps */
  77};
  78
  79static inline u8
  80il3945_get_prev_ieee_rate(u8 rate_idx)
  81{
  82	u8 rate = il3945_rates[rate_idx].prev_ieee;
  83
  84	if (rate == RATE_INVALID)
  85		rate = rate_idx;
  86	return rate;
  87}
  88
  89/* 1 = enable the il3945_disable_events() function */
  90#define IL_EVT_DISABLE (0)
  91#define IL_EVT_DISABLE_SIZE (1532/32)
  92
  93/*
  94 * il3945_disable_events - Disable selected events in uCode event log
  95 *
  96 * Disable an event by writing "1"s into "disable"
  97 *   bitmap in SRAM.  Bit position corresponds to Event # (id/type).
  98 *   Default values of 0 enable uCode events to be logged.
  99 * Use for only special debugging.  This function is just a placeholder as-is,
 100 *   you'll need to provide the special bits! ...
 101 *   ... and set IL_EVT_DISABLE to 1. */
 102void
 103il3945_disable_events(struct il_priv *il)
 104{
 105	int i;
 106	u32 base;		/* SRAM address of event log header */
 107	u32 disable_ptr;	/* SRAM address of event-disable bitmap array */
 108	u32 array_size;		/* # of u32 entries in array */
 109	static const u32 evt_disable[IL_EVT_DISABLE_SIZE] = {
 110		0x00000000,	/*   31 -    0  Event id numbers */
 111		0x00000000,	/*   63 -   32 */
 112		0x00000000,	/*   95 -   64 */
 113		0x00000000,	/*  127 -   96 */
 114		0x00000000,	/*  159 -  128 */
 115		0x00000000,	/*  191 -  160 */
 116		0x00000000,	/*  223 -  192 */
 117		0x00000000,	/*  255 -  224 */
 118		0x00000000,	/*  287 -  256 */
 119		0x00000000,	/*  319 -  288 */
 120		0x00000000,	/*  351 -  320 */
 121		0x00000000,	/*  383 -  352 */
 122		0x00000000,	/*  415 -  384 */
 123		0x00000000,	/*  447 -  416 */
 124		0x00000000,	/*  479 -  448 */
 125		0x00000000,	/*  511 -  480 */
 126		0x00000000,	/*  543 -  512 */
 127		0x00000000,	/*  575 -  544 */
 128		0x00000000,	/*  607 -  576 */
 129		0x00000000,	/*  639 -  608 */
 130		0x00000000,	/*  671 -  640 */
 131		0x00000000,	/*  703 -  672 */
 132		0x00000000,	/*  735 -  704 */
 133		0x00000000,	/*  767 -  736 */
 134		0x00000000,	/*  799 -  768 */
 135		0x00000000,	/*  831 -  800 */
 136		0x00000000,	/*  863 -  832 */
 137		0x00000000,	/*  895 -  864 */
 138		0x00000000,	/*  927 -  896 */
 139		0x00000000,	/*  959 -  928 */
 140		0x00000000,	/*  991 -  960 */
 141		0x00000000,	/* 1023 -  992 */
 142		0x00000000,	/* 1055 - 1024 */
 143		0x00000000,	/* 1087 - 1056 */
 144		0x00000000,	/* 1119 - 1088 */
 145		0x00000000,	/* 1151 - 1120 */
 146		0x00000000,	/* 1183 - 1152 */
 147		0x00000000,	/* 1215 - 1184 */
 148		0x00000000,	/* 1247 - 1216 */
 149		0x00000000,	/* 1279 - 1248 */
 150		0x00000000,	/* 1311 - 1280 */
 151		0x00000000,	/* 1343 - 1312 */
 152		0x00000000,	/* 1375 - 1344 */
 153		0x00000000,	/* 1407 - 1376 */
 154		0x00000000,	/* 1439 - 1408 */
 155		0x00000000,	/* 1471 - 1440 */
 156		0x00000000,	/* 1503 - 1472 */
 157	};
 158
 159	base = le32_to_cpu(il->card_alive.log_event_table_ptr);
 160	if (!il3945_hw_valid_rtc_data_addr(base)) {
 161		IL_ERR("Invalid event log pointer 0x%08X\n", base);
 162		return;
 163	}
 164
 165	disable_ptr = il_read_targ_mem(il, base + (4 * sizeof(u32)));
 166	array_size = il_read_targ_mem(il, base + (5 * sizeof(u32)));
 167
 168	if (IL_EVT_DISABLE && array_size == IL_EVT_DISABLE_SIZE) {
 169		D_INFO("Disabling selected uCode log events at 0x%x\n",
 170		       disable_ptr);
 171		for (i = 0; i < IL_EVT_DISABLE_SIZE; i++)
 172			il_write_targ_mem(il, disable_ptr + (i * sizeof(u32)),
 173					  evt_disable[i]);
 174
 175	} else {
 176		D_INFO("Selected uCode log events may be disabled\n");
 177		D_INFO("  by writing \"1\"s into disable bitmap\n");
 178		D_INFO("  in SRAM at 0x%x, size %d u32s\n", disable_ptr,
 179		       array_size);
 180	}
 181
 182}
 183
 184static int
 185il3945_hwrate_to_plcp_idx(u8 plcp)
 186{
 187	int idx;
 188
 189	for (idx = 0; idx < RATE_COUNT_3945; idx++)
 190		if (il3945_rates[idx].plcp == plcp)
 191			return idx;
 192	return -1;
 193}
 194
 195#ifdef CONFIG_IWLEGACY_DEBUG
 196#define TX_STATUS_ENTRY(x) case TX_3945_STATUS_FAIL_ ## x: return #x
 197
 198static const char *
 199il3945_get_tx_fail_reason(u32 status)
 200{
 201	switch (status & TX_STATUS_MSK) {
 202	case TX_3945_STATUS_SUCCESS:
 203		return "SUCCESS";
 204		TX_STATUS_ENTRY(SHORT_LIMIT);
 205		TX_STATUS_ENTRY(LONG_LIMIT);
 206		TX_STATUS_ENTRY(FIFO_UNDERRUN);
 207		TX_STATUS_ENTRY(MGMNT_ABORT);
 208		TX_STATUS_ENTRY(NEXT_FRAG);
 209		TX_STATUS_ENTRY(LIFE_EXPIRE);
 210		TX_STATUS_ENTRY(DEST_PS);
 211		TX_STATUS_ENTRY(ABORTED);
 212		TX_STATUS_ENTRY(BT_RETRY);
 213		TX_STATUS_ENTRY(STA_INVALID);
 214		TX_STATUS_ENTRY(FRAG_DROPPED);
 215		TX_STATUS_ENTRY(TID_DISABLE);
 216		TX_STATUS_ENTRY(FRAME_FLUSHED);
 217		TX_STATUS_ENTRY(INSUFFICIENT_CF_POLL);
 218		TX_STATUS_ENTRY(TX_LOCKED);
 219		TX_STATUS_ENTRY(NO_BEACON_ON_RADAR);
 220	}
 221
 222	return "UNKNOWN";
 223}
 224#else
 225static inline const char *
 226il3945_get_tx_fail_reason(u32 status)
 227{
 228	return "";
 229}
 230#endif
 231
 232/*
 233 * get ieee prev rate from rate scale table.
 234 * for A and B mode we need to overright prev
 235 * value
 236 */
 237int
 238il3945_rs_next_rate(struct il_priv *il, int rate)
 239{
 240	int next_rate = il3945_get_prev_ieee_rate(rate);
 241
 242	switch (il->band) {
 243	case NL80211_BAND_5GHZ:
 244		if (rate == RATE_12M_IDX)
 245			next_rate = RATE_9M_IDX;
 246		else if (rate == RATE_6M_IDX)
 247			next_rate = RATE_6M_IDX;
 248		break;
 249	case NL80211_BAND_2GHZ:
 250		if (!(il->_3945.sta_supp_rates & IL_OFDM_RATES_MASK) &&
 251		    il_is_associated(il)) {
 252			if (rate == RATE_11M_IDX)
 253				next_rate = RATE_5M_IDX;
 254		}
 255		break;
 256
 257	default:
 258		break;
 259	}
 260
 261	return next_rate;
 262}
 263
 264/*
 265 * il3945_tx_queue_reclaim - Reclaim Tx queue entries already Tx'd
 266 *
 267 * When FW advances 'R' idx, all entries between old and new 'R' idx
 268 * need to be reclaimed. As result, some free space forms. If there is
 269 * enough free space (> low mark), wake the stack that feeds us.
 270 */
 271static void
 272il3945_tx_queue_reclaim(struct il_priv *il, int txq_id, int idx)
 273{
 274	struct il_tx_queue *txq = &il->txq[txq_id];
 275	struct il_queue *q = &txq->q;
 276	struct sk_buff *skb;
 277
 278	BUG_ON(txq_id == IL39_CMD_QUEUE_NUM);
 279
 280	for (idx = il_queue_inc_wrap(idx, q->n_bd); q->read_ptr != idx;
 281	     q->read_ptr = il_queue_inc_wrap(q->read_ptr, q->n_bd)) {
 282
 283		skb = txq->skbs[txq->q.read_ptr];
 284		ieee80211_tx_status_irqsafe(il->hw, skb);
 285		txq->skbs[txq->q.read_ptr] = NULL;
 286		il->ops->txq_free_tfd(il, txq);
 287	}
 288
 289	if (il_queue_space(q) > q->low_mark && txq_id >= 0 &&
 290	    txq_id != IL39_CMD_QUEUE_NUM && il->mac80211_registered)
 291		il_wake_queue(il, txq);
 292}
 293
 294/*
 295 * il3945_hdl_tx - Handle Tx response
 296 */
 297static void
 298il3945_hdl_tx(struct il_priv *il, struct il_rx_buf *rxb)
 299{
 300	struct il_rx_pkt *pkt = rxb_addr(rxb);
 301	u16 sequence = le16_to_cpu(pkt->hdr.sequence);
 302	int txq_id = SEQ_TO_QUEUE(sequence);
 303	int idx = SEQ_TO_IDX(sequence);
 304	struct il_tx_queue *txq = &il->txq[txq_id];
 305	struct ieee80211_tx_info *info;
 306	struct il3945_tx_resp *tx_resp = (void *)&pkt->u.raw[0];
 307	u32 status = le32_to_cpu(tx_resp->status);
 308	int rate_idx;
 309	int fail;
 310
 311	if (idx >= txq->q.n_bd || il_queue_used(&txq->q, idx) == 0) {
 312		IL_ERR("Read idx for DMA queue txq_id (%d) idx %d "
 313		       "is out of range [0-%d] %d %d\n", txq_id, idx,
 314		       txq->q.n_bd, txq->q.write_ptr, txq->q.read_ptr);
 315		return;
 316	}
 317
 318	/*
 319	 * Firmware will not transmit frame on passive channel, if it not yet
 320	 * received some valid frame on that channel. When this error happen
 321	 * we have to wait until firmware will unblock itself i.e. when we
 322	 * note received beacon or other frame. We unblock queues in
 323	 * il3945_pass_packet_to_mac80211 or in il_mac_bss_info_changed.
 324	 */
 325	if (unlikely((status & TX_STATUS_MSK) == TX_STATUS_FAIL_PASSIVE_NO_RX) &&
 326	    il->iw_mode == NL80211_IFTYPE_STATION) {
 327		il_stop_queues_by_reason(il, IL_STOP_REASON_PASSIVE);
 328		D_INFO("Stopped queues - RX waiting on passive channel\n");
 329	}
 330
 331	txq->time_stamp = jiffies;
 332	info = IEEE80211_SKB_CB(txq->skbs[txq->q.read_ptr]);
 333	ieee80211_tx_info_clear_status(info);
 334
 335	/* Fill the MRR chain with some info about on-chip retransmissions */
 336	rate_idx = il3945_hwrate_to_plcp_idx(tx_resp->rate);
 337	if (info->band == NL80211_BAND_5GHZ)
 338		rate_idx -= IL_FIRST_OFDM_RATE;
 339
 340	fail = tx_resp->failure_frame;
 341
 342	info->status.rates[0].idx = rate_idx;
 343	info->status.rates[0].count = fail + 1;	/* add final attempt */
 344
 345	/* tx_status->rts_retry_count = tx_resp->failure_rts; */
 346	info->flags |=
 347	    ((status & TX_STATUS_MSK) ==
 348	     TX_STATUS_SUCCESS) ? IEEE80211_TX_STAT_ACK : 0;
 349
 350	D_TX("Tx queue %d Status %s (0x%08x) plcp rate %d retries %d\n", txq_id,
 351	     il3945_get_tx_fail_reason(status), status, tx_resp->rate,
 352	     tx_resp->failure_frame);
 353
 354	D_TX_REPLY("Tx queue reclaim %d\n", idx);
 355	il3945_tx_queue_reclaim(il, txq_id, idx);
 356
 357	if (status & TX_ABORT_REQUIRED_MSK)
 358		IL_ERR("TODO:  Implement Tx ABORT REQUIRED!!!\n");
 359}
 360
 361/*****************************************************************************
 362 *
 363 * Intel PRO/Wireless 3945ABG/BG Network Connection
 364 *
 365 *  RX handler implementations
 366 *
 367 *****************************************************************************/
 368#ifdef CONFIG_IWLEGACY_DEBUGFS
 369static void
 370il3945_accumulative_stats(struct il_priv *il, __le32 * stats)
 371{
 372	int i;
 373	__le32 *prev_stats;
 374	u32 *accum_stats;
 375	u32 *delta, *max_delta;
 376
 377	prev_stats = (__le32 *) &il->_3945.stats;
 378	accum_stats = (u32 *) &il->_3945.accum_stats;
 379	delta = (u32 *) &il->_3945.delta_stats;
 380	max_delta = (u32 *) &il->_3945.max_delta;
 381
 382	for (i = sizeof(__le32); i < sizeof(struct il3945_notif_stats);
 383	     i +=
 384	     sizeof(__le32), stats++, prev_stats++, delta++, max_delta++,
 385	     accum_stats++) {
 386		if (le32_to_cpu(*stats) > le32_to_cpu(*prev_stats)) {
 387			*delta =
 388			    (le32_to_cpu(*stats) - le32_to_cpu(*prev_stats));
 389			*accum_stats += *delta;
 390			if (*delta > *max_delta)
 391				*max_delta = *delta;
 392		}
 393	}
 394
 395	/* reset accumulative stats for "no-counter" type stats */
 396	il->_3945.accum_stats.general.temperature =
 397	    il->_3945.stats.general.temperature;
 398	il->_3945.accum_stats.general.ttl_timestamp =
 399	    il->_3945.stats.general.ttl_timestamp;
 400}
 401#endif
 402
 403void
 404il3945_hdl_stats(struct il_priv *il, struct il_rx_buf *rxb)
 405{
 406	struct il_rx_pkt *pkt = rxb_addr(rxb);
 407
 408	D_RX("Statistics notification received (%d vs %d).\n",
 409	     (int)sizeof(struct il3945_notif_stats),
 410	     le32_to_cpu(pkt->len_n_flags) & IL_RX_FRAME_SIZE_MSK);
 411#ifdef CONFIG_IWLEGACY_DEBUGFS
 412	il3945_accumulative_stats(il, (__le32 *) &pkt->u.raw);
 413#endif
 414
 415	memcpy(&il->_3945.stats, pkt->u.raw, sizeof(il->_3945.stats));
 416}
 417
 418void
 419il3945_hdl_c_stats(struct il_priv *il, struct il_rx_buf *rxb)
 420{
 421	struct il_rx_pkt *pkt = rxb_addr(rxb);
 422	__le32 *flag = (__le32 *) &pkt->u.raw;
 423
 424	if (le32_to_cpu(*flag) & UCODE_STATS_CLEAR_MSK) {
 425#ifdef CONFIG_IWLEGACY_DEBUGFS
 426		memset(&il->_3945.accum_stats, 0,
 427		       sizeof(struct il3945_notif_stats));
 428		memset(&il->_3945.delta_stats, 0,
 429		       sizeof(struct il3945_notif_stats));
 430		memset(&il->_3945.max_delta, 0,
 431		       sizeof(struct il3945_notif_stats));
 432#endif
 433		D_RX("Statistics have been cleared\n");
 434	}
 435	il3945_hdl_stats(il, rxb);
 436}
 437
 438/******************************************************************************
 439 *
 440 * Misc. internal state and helper functions
 441 *
 442 ******************************************************************************/
 443
 444/* This is necessary only for a number of stats, see the caller. */
 445static int
 446il3945_is_network_packet(struct il_priv *il, struct ieee80211_hdr *header)
 447{
 448	/* Filter incoming packets to determine if they are targeted toward
 449	 * this network, discarding packets coming from ourselves */
 450	switch (il->iw_mode) {
 451	case NL80211_IFTYPE_ADHOC:	/* Header: Dest. | Source    | BSSID */
 452		/* packets to our IBSS update information */
 453		return ether_addr_equal_64bits(header->addr3, il->bssid);
 454	case NL80211_IFTYPE_STATION:	/* Header: Dest. | AP{BSSID} | Source */
 455		/* packets to our IBSS update information */
 456		return ether_addr_equal_64bits(header->addr2, il->bssid);
 457	default:
 458		return 1;
 459	}
 460}
 461
 462#define SMALL_PACKET_SIZE 256
 463
 464static void
 465il3945_pass_packet_to_mac80211(struct il_priv *il, struct il_rx_buf *rxb,
 466			       struct ieee80211_rx_status *stats)
 467{
 468	struct il_rx_pkt *pkt = rxb_addr(rxb);
 469	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
 470	struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
 471	struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
 472	u32 len = le16_to_cpu(rx_hdr->len);
 473	struct sk_buff *skb;
 474	__le16 fc = hdr->frame_control;
 475	u32 fraglen = PAGE_SIZE << il->hw_params.rx_page_order;
 476
 477	/* We received data from the HW, so stop the watchdog */
 478	if (unlikely(len + IL39_RX_FRAME_SIZE > fraglen)) {
 479		D_DROP("Corruption detected!\n");
 480		return;
 481	}
 482
 483	/* We only process data packets if the interface is open */
 484	if (unlikely(!il->is_open)) {
 485		D_DROP("Dropping packet while interface is not open.\n");
 486		return;
 487	}
 488
 489	if (unlikely(test_bit(IL_STOP_REASON_PASSIVE, &il->stop_reason))) {
 490		il_wake_queues_by_reason(il, IL_STOP_REASON_PASSIVE);
 491		D_INFO("Woke queues - frame received on passive channel\n");
 492	}
 493
 494	skb = dev_alloc_skb(SMALL_PACKET_SIZE);
 495	if (!skb) {
 496		IL_ERR("dev_alloc_skb failed\n");
 497		return;
 498	}
 499
 500	if (!il3945_mod_params.sw_crypto)
 501		il_set_decrypted_flag(il, (struct ieee80211_hdr *)pkt,
 502				      le32_to_cpu(rx_end->status), stats);
 503
 504	/* If frame is small enough to fit into skb->head, copy it
 505	 * and do not consume a full page
 506	 */
 507	if (len <= SMALL_PACKET_SIZE) {
 508		skb_put_data(skb, rx_hdr->payload, len);
 509	} else {
 510		skb_add_rx_frag(skb, 0, rxb->page,
 511				(void *)rx_hdr->payload - (void *)pkt, len,
 512				fraglen);
 513		il->alloc_rxb_page--;
 514		rxb->page = NULL;
 515	}
 516	il_update_stats(il, false, fc, len);
 517	memcpy(IEEE80211_SKB_RXCB(skb), stats, sizeof(*stats));
 518
 519	ieee80211_rx(il->hw, skb);
 520}
 521
 522#define IL_DELAY_NEXT_SCAN_AFTER_ASSOC (HZ*6)
 523
 524static void
 525il3945_hdl_rx(struct il_priv *il, struct il_rx_buf *rxb)
 526{
 527	struct ieee80211_hdr *header;
 528	struct ieee80211_rx_status rx_status = {};
 529	struct il_rx_pkt *pkt = rxb_addr(rxb);
 530	struct il3945_rx_frame_stats *rx_stats = IL_RX_STATS(pkt);
 531	struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
 532	struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
 533	u16 rx_stats_sig_avg __maybe_unused = le16_to_cpu(rx_stats->sig_avg);
 534	u16 rx_stats_noise_diff __maybe_unused =
 535	    le16_to_cpu(rx_stats->noise_diff);
 536	u8 network_packet;
 537
 538	rx_status.flag = 0;
 539	rx_status.mactime = le64_to_cpu(rx_end->timestamp);
 540	rx_status.band =
 541	    (rx_hdr->
 542	     phy_flags & RX_RES_PHY_FLAGS_BAND_24_MSK) ? NL80211_BAND_2GHZ :
 543	    NL80211_BAND_5GHZ;
 544	rx_status.freq =
 545	    ieee80211_channel_to_frequency(le16_to_cpu(rx_hdr->channel),
 546					   rx_status.band);
 547
 548	rx_status.rate_idx = il3945_hwrate_to_plcp_idx(rx_hdr->rate);
 549	if (rx_status.band == NL80211_BAND_5GHZ)
 550		rx_status.rate_idx -= IL_FIRST_OFDM_RATE;
 551
 552	rx_status.antenna =
 553	    (le16_to_cpu(rx_hdr->phy_flags) & RX_RES_PHY_FLAGS_ANTENNA_MSK) >>
 554	    4;
 555
 556	/* set the preamble flag if appropriate */
 557	if (rx_hdr->phy_flags & RX_RES_PHY_FLAGS_SHORT_PREAMBLE_MSK)
 558		rx_status.enc_flags |= RX_ENC_FLAG_SHORTPRE;
 559
 560	if ((unlikely(rx_stats->phy_count > 20))) {
 561		D_DROP("dsp size out of range [0,20]: %d\n",
 562		       rx_stats->phy_count);
 563		return;
 564	}
 565
 566	if (!(rx_end->status & RX_RES_STATUS_NO_CRC32_ERROR) ||
 567	    !(rx_end->status & RX_RES_STATUS_NO_RXE_OVERFLOW)) {
 568		D_RX("Bad CRC or FIFO: 0x%08X.\n", rx_end->status);
 569		return;
 570	}
 571
 572	/* Convert 3945's rssi indicator to dBm */
 573	rx_status.signal = rx_stats->rssi - IL39_RSSI_OFFSET;
 574
 575	D_STATS("Rssi %d sig_avg %d noise_diff %d\n", rx_status.signal,
 576		rx_stats_sig_avg, rx_stats_noise_diff);
 577
 578	header = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
 579
 580	network_packet = il3945_is_network_packet(il, header);
 581
 582	D_STATS("[%c] %d RSSI:%d Signal:%u, Rate:%u\n",
 583		network_packet ? '*' : ' ', le16_to_cpu(rx_hdr->channel),
 584		rx_status.signal, rx_status.signal, rx_status.rate_idx);
 585
 586	if (network_packet) {
 587		il->_3945.last_beacon_time =
 588		    le32_to_cpu(rx_end->beacon_timestamp);
 589		il->_3945.last_tsf = le64_to_cpu(rx_end->timestamp);
 590		il->_3945.last_rx_rssi = rx_status.signal;
 591	}
 592
 593	il3945_pass_packet_to_mac80211(il, rxb, &rx_status);
 594}
 595
 596int
 597il3945_hw_txq_attach_buf_to_tfd(struct il_priv *il, struct il_tx_queue *txq,
 598				dma_addr_t addr, u16 len, u8 reset, u8 pad)
 599{
 600	int count;
 601	struct il_queue *q;
 602	struct il3945_tfd *tfd, *tfd_tmp;
 603
 604	q = &txq->q;
 605	tfd_tmp = (struct il3945_tfd *)txq->tfds;
 606	tfd = &tfd_tmp[q->write_ptr];
 607
 608	if (reset)
 609		memset(tfd, 0, sizeof(*tfd));
 610
 611	count = TFD_CTL_COUNT_GET(le32_to_cpu(tfd->control_flags));
 612
 613	if (count >= NUM_TFD_CHUNKS || count < 0) {
 614		IL_ERR("Error can not send more than %d chunks\n",
 615		       NUM_TFD_CHUNKS);
 616		return -EINVAL;
 617	}
 618
 619	tfd->tbs[count].addr = cpu_to_le32(addr);
 620	tfd->tbs[count].len = cpu_to_le32(len);
 621
 622	count++;
 623
 624	tfd->control_flags =
 625	    cpu_to_le32(TFD_CTL_COUNT_SET(count) | TFD_CTL_PAD_SET(pad));
 626
 627	return 0;
 628}
 629
 630/*
 631 * il3945_hw_txq_free_tfd - Free one TFD, those at idx [txq->q.read_ptr]
 632 *
 633 * Does NOT advance any idxes
 634 */
 635void
 636il3945_hw_txq_free_tfd(struct il_priv *il, struct il_tx_queue *txq)
 637{
 638	struct il3945_tfd *tfd_tmp = (struct il3945_tfd *)txq->tfds;
 639	int idx = txq->q.read_ptr;
 640	struct il3945_tfd *tfd = &tfd_tmp[idx];
 641	struct pci_dev *dev = il->pci_dev;
 642	int i;
 643	int counter;
 644
 645	/* sanity check */
 646	counter = TFD_CTL_COUNT_GET(le32_to_cpu(tfd->control_flags));
 647	if (counter > NUM_TFD_CHUNKS) {
 648		IL_ERR("Too many chunks: %i\n", counter);
 649		/* @todo issue fatal error, it is quite serious situation */
 650		return;
 651	}
 652
 653	/* Unmap tx_cmd */
 654	if (counter)
 655		dma_unmap_single(&dev->dev,
 656				 dma_unmap_addr(&txq->meta[idx], mapping),
 657				 dma_unmap_len(&txq->meta[idx], len),
 658				 DMA_TO_DEVICE);
 659
 660	/* unmap chunks if any */
 661
 662	for (i = 1; i < counter; i++)
 663		dma_unmap_single(&dev->dev, le32_to_cpu(tfd->tbs[i].addr),
 664				 le32_to_cpu(tfd->tbs[i].len), DMA_TO_DEVICE);
 
 665
 666	/* free SKB */
 667	if (txq->skbs) {
 668		struct sk_buff *skb = txq->skbs[txq->q.read_ptr];
 669
 670		/* can be called from irqs-disabled context */
 671		if (skb) {
 672			dev_kfree_skb_any(skb);
 673			txq->skbs[txq->q.read_ptr] = NULL;
 674		}
 675	}
 676}
 677
 678/*
 679 * il3945_hw_build_tx_cmd_rate - Add rate portion to TX_CMD:
 680 *
 681*/
 682void
 683il3945_hw_build_tx_cmd_rate(struct il_priv *il, struct il_device_cmd *cmd,
 684			    struct ieee80211_tx_info *info,
 685			    struct ieee80211_hdr *hdr, int sta_id)
 686{
 687	u16 hw_value = ieee80211_get_tx_rate(il->hw, info)->hw_value;
 688	u16 rate_idx = min(hw_value & 0xffff, RATE_COUNT_3945 - 1);
 689	u16 rate_mask;
 690	int rate;
 691	const u8 rts_retry_limit = 7;
 692	u8 data_retry_limit;
 693	__le32 tx_flags;
 694	__le16 fc = hdr->frame_control;
 695	struct il3945_tx_cmd *tx_cmd = (struct il3945_tx_cmd *)cmd->cmd.payload;
 696
 697	rate = il3945_rates[rate_idx].plcp;
 698	tx_flags = tx_cmd->tx_flags;
 699
 700	/* We need to figure out how to get the sta->supp_rates while
 701	 * in this running context */
 702	rate_mask = RATES_MASK_3945;
 703
 704	/* Set retry limit on DATA packets and Probe Responses */
 705	if (ieee80211_is_probe_resp(fc))
 706		data_retry_limit = 3;
 707	else
 708		data_retry_limit = IL_DEFAULT_TX_RETRY;
 709	tx_cmd->data_retry_limit = data_retry_limit;
 710	/* Set retry limit on RTS packets */
 711	tx_cmd->rts_retry_limit = min(data_retry_limit, rts_retry_limit);
 712
 713	tx_cmd->rate = rate;
 714	tx_cmd->tx_flags = tx_flags;
 715
 716	/* OFDM */
 717	tx_cmd->supp_rates[0] =
 718	    ((rate_mask & IL_OFDM_RATES_MASK) >> IL_FIRST_OFDM_RATE) & 0xFF;
 719
 720	/* CCK */
 721	tx_cmd->supp_rates[1] = (rate_mask & 0xF);
 722
 723	D_RATE("Tx sta id: %d, rate: %d (plcp), flags: 0x%4X "
 724	       "cck/ofdm mask: 0x%x/0x%x\n", sta_id, tx_cmd->rate,
 725	       le32_to_cpu(tx_cmd->tx_flags), tx_cmd->supp_rates[1],
 726	       tx_cmd->supp_rates[0]);
 727}
 728
 729static u8
 730il3945_sync_sta(struct il_priv *il, int sta_id, u16 tx_rate)
 731{
 732	unsigned long flags_spin;
 733	struct il_station_entry *station;
 734
 735	if (sta_id == IL_INVALID_STATION)
 736		return IL_INVALID_STATION;
 737
 738	spin_lock_irqsave(&il->sta_lock, flags_spin);
 739	station = &il->stations[sta_id];
 740
 741	station->sta.sta.modify_mask = STA_MODIFY_TX_RATE_MSK;
 742	station->sta.rate_n_flags = cpu_to_le16(tx_rate);
 743	station->sta.mode = STA_CONTROL_MODIFY_MSK;
 744	il_send_add_sta(il, &station->sta, CMD_ASYNC);
 745	spin_unlock_irqrestore(&il->sta_lock, flags_spin);
 746
 747	D_RATE("SCALE sync station %d to rate %d\n", sta_id, tx_rate);
 748	return sta_id;
 749}
 750
 751static void
 752il3945_set_pwr_vmain(struct il_priv *il)
 753{
 754/*
 755 * (for documentation purposes)
 756 * to set power to V_AUX, do
 757
 758		if (pci_pme_capable(il->pci_dev, PCI_D3cold)) {
 759			il_set_bits_mask_prph(il, APMG_PS_CTRL_REG,
 760					APMG_PS_CTRL_VAL_PWR_SRC_VAUX,
 761					~APMG_PS_CTRL_MSK_PWR_SRC);
 762
 763			_il_poll_bit(il, CSR_GPIO_IN,
 764				     CSR_GPIO_IN_VAL_VAUX_PWR_SRC,
 765				     CSR_GPIO_IN_BIT_AUX_POWER, 5000);
 766		}
 767 */
 768
 769	il_set_bits_mask_prph(il, APMG_PS_CTRL_REG,
 770			      APMG_PS_CTRL_VAL_PWR_SRC_VMAIN,
 771			      ~APMG_PS_CTRL_MSK_PWR_SRC);
 772
 773	_il_poll_bit(il, CSR_GPIO_IN, CSR_GPIO_IN_VAL_VMAIN_PWR_SRC,
 774		     CSR_GPIO_IN_BIT_AUX_POWER, 5000);
 775}
 776
 777static int
 778il3945_rx_init(struct il_priv *il, struct il_rx_queue *rxq)
 779{
 780	il_wr(il, FH39_RCSR_RBD_BASE(0), rxq->bd_dma);
 781	il_wr(il, FH39_RCSR_RPTR_ADDR(0), rxq->rb_stts_dma);
 782	il_wr(il, FH39_RCSR_WPTR(0), 0);
 783	il_wr(il, FH39_RCSR_CONFIG(0),
 784	      FH39_RCSR_RX_CONFIG_REG_VAL_DMA_CHNL_EN_ENABLE |
 785	      FH39_RCSR_RX_CONFIG_REG_VAL_RDRBD_EN_ENABLE |
 786	      FH39_RCSR_RX_CONFIG_REG_BIT_WR_STTS_EN |
 787	      FH39_RCSR_RX_CONFIG_REG_VAL_MAX_FRAG_SIZE_128 | (RX_QUEUE_SIZE_LOG
 788							       <<
 789							       FH39_RCSR_RX_CONFIG_REG_POS_RBDC_SIZE)
 790	      | FH39_RCSR_RX_CONFIG_REG_VAL_IRQ_DEST_INT_HOST | (1 <<
 791								 FH39_RCSR_RX_CONFIG_REG_POS_IRQ_RBTH)
 792	      | FH39_RCSR_RX_CONFIG_REG_VAL_MSG_MODE_FH);
 793
 794	/* fake read to flush all prev I/O */
 795	il_rd(il, FH39_RSSR_CTRL);
 796
 797	return 0;
 798}
 799
 800static int
 801il3945_tx_reset(struct il_priv *il)
 802{
 803	/* bypass mode */
 804	il_wr_prph(il, ALM_SCD_MODE_REG, 0x2);
 805
 806	/* RA 0 is active */
 807	il_wr_prph(il, ALM_SCD_ARASTAT_REG, 0x01);
 808
 809	/* all 6 fifo are active */
 810	il_wr_prph(il, ALM_SCD_TXFACT_REG, 0x3f);
 811
 812	il_wr_prph(il, ALM_SCD_SBYP_MODE_1_REG, 0x010000);
 813	il_wr_prph(il, ALM_SCD_SBYP_MODE_2_REG, 0x030002);
 814	il_wr_prph(il, ALM_SCD_TXF4MF_REG, 0x000004);
 815	il_wr_prph(il, ALM_SCD_TXF5MF_REG, 0x000005);
 816
 817	il_wr(il, FH39_TSSR_CBB_BASE, il->_3945.shared_phys);
 818
 819	il_wr(il, FH39_TSSR_MSG_CONFIG,
 820	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TXPD_ON |
 821	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RD_TXPD_ON |
 822	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_MAX_FRAG_SIZE_128B |
 823	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TFD_ON |
 824	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RD_CBB_ON |
 825	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RSP_WAIT_TH |
 826	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_RSP_WAIT_TH);
 827
 828	return 0;
 829}
 830
 831/*
 832 * il3945_txq_ctx_reset - Reset TX queue context
 833 *
 834 * Destroys all DMA structures and initialize them again
 835 */
 836static int
 837il3945_txq_ctx_reset(struct il_priv *il)
 838{
 839	int rc, txq_id;
 840
 841	il3945_hw_txq_ctx_free(il);
 842
 843	/* allocate tx queue structure */
 844	rc = il_alloc_txq_mem(il);
 845	if (rc)
 846		return rc;
 847
 848	/* Tx CMD queue */
 849	rc = il3945_tx_reset(il);
 850	if (rc)
 851		goto error;
 852
 853	/* Tx queue(s) */
 854	for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++) {
 855		rc = il_tx_queue_init(il, txq_id);
 856		if (rc) {
 857			IL_ERR("Tx %d queue init failed\n", txq_id);
 858			goto error;
 859		}
 860	}
 861
 862	return rc;
 863
 864error:
 865	il3945_hw_txq_ctx_free(il);
 866	return rc;
 867}
 868
 869/*
 870 * Start up 3945's basic functionality after it has been reset
 871 * (e.g. after platform boot, or shutdown via il_apm_stop())
 872 * NOTE:  This does not load uCode nor start the embedded processor
 873 */
 874static int
 875il3945_apm_init(struct il_priv *il)
 876{
 877	int ret = il_apm_init(il);
 878
 879	/* Clear APMG (NIC's internal power management) interrupts */
 880	il_wr_prph(il, APMG_RTC_INT_MSK_REG, 0x0);
 881	il_wr_prph(il, APMG_RTC_INT_STT_REG, 0xFFFFFFFF);
 882
 883	/* Reset radio chip */
 884	il_set_bits_prph(il, APMG_PS_CTRL_REG, APMG_PS_CTRL_VAL_RESET_REQ);
 885	udelay(5);
 886	il_clear_bits_prph(il, APMG_PS_CTRL_REG, APMG_PS_CTRL_VAL_RESET_REQ);
 887
 888	return ret;
 889}
 890
 891static void
 892il3945_nic_config(struct il_priv *il)
 893{
 894	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
 895	unsigned long flags;
 896	u8 rev_id = il->pci_dev->revision;
 897
 898	spin_lock_irqsave(&il->lock, flags);
 899
 900	/* Determine HW type */
 901	D_INFO("HW Revision ID = 0x%X\n", rev_id);
 902
 903	if (rev_id & PCI_CFG_REV_ID_BIT_RTP)
 904		D_INFO("RTP type\n");
 905	else if (rev_id & PCI_CFG_REV_ID_BIT_BASIC_SKU) {
 906		D_INFO("3945 RADIO-MB type\n");
 907		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 908			   CSR39_HW_IF_CONFIG_REG_BIT_3945_MB);
 909	} else {
 910		D_INFO("3945 RADIO-MM type\n");
 911		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 912			   CSR39_HW_IF_CONFIG_REG_BIT_3945_MM);
 913	}
 914
 915	if (EEPROM_SKU_CAP_OP_MODE_MRC == eeprom->sku_cap) {
 916		D_INFO("SKU OP mode is mrc\n");
 917		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 918			   CSR39_HW_IF_CONFIG_REG_BIT_SKU_MRC);
 919	} else
 920		D_INFO("SKU OP mode is basic\n");
 921
 922	if ((eeprom->board_revision & 0xF0) == 0xD0) {
 923		D_INFO("3945ABG revision is 0x%X\n", eeprom->board_revision);
 924		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 925			   CSR39_HW_IF_CONFIG_REG_BIT_BOARD_TYPE);
 926	} else {
 927		D_INFO("3945ABG revision is 0x%X\n", eeprom->board_revision);
 928		il_clear_bit(il, CSR_HW_IF_CONFIG_REG,
 929			     CSR39_HW_IF_CONFIG_REG_BIT_BOARD_TYPE);
 930	}
 931
 932	if (eeprom->almgor_m_version <= 1) {
 933		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 934			   CSR39_HW_IF_CONFIG_REG_BITS_SILICON_TYPE_A);
 935		D_INFO("Card M type A version is 0x%X\n",
 936		       eeprom->almgor_m_version);
 937	} else {
 938		D_INFO("Card M type B version is 0x%X\n",
 939		       eeprom->almgor_m_version);
 940		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 941			   CSR39_HW_IF_CONFIG_REG_BITS_SILICON_TYPE_B);
 942	}
 943	spin_unlock_irqrestore(&il->lock, flags);
 944
 945	if (eeprom->sku_cap & EEPROM_SKU_CAP_SW_RF_KILL_ENABLE)
 946		D_RF_KILL("SW RF KILL supported in EEPROM.\n");
 947
 948	if (eeprom->sku_cap & EEPROM_SKU_CAP_HW_RF_KILL_ENABLE)
 949		D_RF_KILL("HW RF KILL supported in EEPROM.\n");
 950}
 951
 952int
 953il3945_hw_nic_init(struct il_priv *il)
 954{
 955	int rc;
 956	unsigned long flags;
 957	struct il_rx_queue *rxq = &il->rxq;
 958
 959	spin_lock_irqsave(&il->lock, flags);
 960	il3945_apm_init(il);
 961	spin_unlock_irqrestore(&il->lock, flags);
 962
 963	il3945_set_pwr_vmain(il);
 964	il3945_nic_config(il);
 965
 966	/* Allocate the RX queue, or reset if it is already allocated */
 967	if (!rxq->bd) {
 968		rc = il_rx_queue_alloc(il);
 969		if (rc) {
 970			IL_ERR("Unable to initialize Rx queue\n");
 971			return -ENOMEM;
 972		}
 973	} else
 974		il3945_rx_queue_reset(il, rxq);
 975
 976	il3945_rx_replenish(il);
 977
 978	il3945_rx_init(il, rxq);
 979
 980	/* Look at using this instead:
 981	   rxq->need_update = 1;
 982	   il_rx_queue_update_write_ptr(il, rxq);
 983	 */
 984
 985	il_wr(il, FH39_RCSR_WPTR(0), rxq->write & ~7);
 986
 987	rc = il3945_txq_ctx_reset(il);
 988	if (rc)
 989		return rc;
 990
 991	set_bit(S_INIT, &il->status);
 992
 993	return 0;
 994}
 995
 996/*
 997 * il3945_hw_txq_ctx_free - Free TXQ Context
 998 *
 999 * Destroy all TX DMA queues and structures
1000 */
1001void
1002il3945_hw_txq_ctx_free(struct il_priv *il)
1003{
1004	int txq_id;
1005
1006	/* Tx queues */
1007	if (il->txq) {
1008		for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++)
1009			if (txq_id == IL39_CMD_QUEUE_NUM)
1010				il_cmd_queue_free(il);
1011			else
1012				il_tx_queue_free(il, txq_id);
1013	}
1014
1015	/* free tx queue structure */
1016	il_free_txq_mem(il);
1017}
1018
1019void
1020il3945_hw_txq_ctx_stop(struct il_priv *il)
1021{
1022	int txq_id;
1023
1024	/* stop SCD */
1025	_il_wr_prph(il, ALM_SCD_MODE_REG, 0);
1026	_il_wr_prph(il, ALM_SCD_TXFACT_REG, 0);
1027
1028	/* reset TFD queues */
1029	for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++) {
1030		_il_wr(il, FH39_TCSR_CONFIG(txq_id), 0x0);
1031		_il_poll_bit(il, FH39_TSSR_TX_STATUS,
1032			     FH39_TSSR_TX_STATUS_REG_MSK_CHNL_IDLE(txq_id),
1033			     FH39_TSSR_TX_STATUS_REG_MSK_CHNL_IDLE(txq_id),
1034			     1000);
1035	}
1036}
1037
1038/*
1039 * il3945_hw_reg_adjust_power_by_temp
1040 * return idx delta into power gain settings table
1041*/
1042static int
1043il3945_hw_reg_adjust_power_by_temp(int new_reading, int old_reading)
1044{
1045	return (new_reading - old_reading) * (-11) / 100;
1046}
1047
1048/*
1049 * il3945_hw_reg_temp_out_of_range - Keep temperature in sane range
1050 */
1051static inline int
1052il3945_hw_reg_temp_out_of_range(int temperature)
1053{
1054	return (temperature < -260 || temperature > 25) ? 1 : 0;
1055}
1056
1057int
1058il3945_hw_get_temperature(struct il_priv *il)
1059{
1060	return _il_rd(il, CSR_UCODE_DRV_GP2);
1061}
1062
1063/*
1064 * il3945_hw_reg_txpower_get_temperature
1065 * get the current temperature by reading from NIC
1066*/
1067static int
1068il3945_hw_reg_txpower_get_temperature(struct il_priv *il)
1069{
1070	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1071	int temperature;
1072
1073	temperature = il3945_hw_get_temperature(il);
1074
1075	/* driver's okay range is -260 to +25.
1076	 *   human readable okay range is 0 to +285 */
1077	D_INFO("Temperature: %d\n", temperature + IL_TEMP_CONVERT);
1078
1079	/* handle insane temp reading */
1080	if (il3945_hw_reg_temp_out_of_range(temperature)) {
1081		IL_ERR("Error bad temperature value  %d\n", temperature);
1082
1083		/* if really really hot(?),
1084		 *   substitute the 3rd band/group's temp measured at factory */
1085		if (il->last_temperature > 100)
1086			temperature = eeprom->groups[2].temperature;
1087		else		/* else use most recent "sane" value from driver */
1088			temperature = il->last_temperature;
1089	}
1090
1091	return temperature;	/* raw, not "human readable" */
1092}
1093
1094/* Adjust Txpower only if temperature variance is greater than threshold.
1095 *
1096 * Both are lower than older versions' 9 degrees */
1097#define IL_TEMPERATURE_LIMIT_TIMER   6
1098
1099/*
1100 * il3945_is_temp_calib_needed - determines if new calibration is needed
1101 *
1102 * records new temperature in tx_mgr->temperature.
1103 * replaces tx_mgr->last_temperature *only* if calib needed
1104 *    (assumes caller will actually do the calibration!). */
1105static int
1106il3945_is_temp_calib_needed(struct il_priv *il)
1107{
1108	int temp_diff;
1109
1110	il->temperature = il3945_hw_reg_txpower_get_temperature(il);
1111	temp_diff = il->temperature - il->last_temperature;
1112
1113	/* get absolute value */
1114	if (temp_diff < 0) {
1115		D_POWER("Getting cooler, delta %d,\n", temp_diff);
1116		temp_diff = -temp_diff;
1117	} else if (temp_diff == 0)
1118		D_POWER("Same temp,\n");
1119	else
1120		D_POWER("Getting warmer, delta %d,\n", temp_diff);
1121
1122	/* if we don't need calibration, *don't* update last_temperature */
1123	if (temp_diff < IL_TEMPERATURE_LIMIT_TIMER) {
1124		D_POWER("Timed thermal calib not needed\n");
1125		return 0;
1126	}
1127
1128	D_POWER("Timed thermal calib needed\n");
1129
1130	/* assume that caller will actually do calib ...
1131	 *   update the "last temperature" value */
1132	il->last_temperature = il->temperature;
1133	return 1;
1134}
1135
1136#define IL_MAX_GAIN_ENTRIES 78
1137#define IL_CCK_FROM_OFDM_POWER_DIFF  -5
1138#define IL_CCK_FROM_OFDM_IDX_DIFF (10)
1139
1140/* radio and DSP power table, each step is 1/2 dB.
1141 * 1st number is for RF analog gain, 2nd number is for DSP pre-DAC gain. */
1142static struct il3945_tx_power power_gain_table[2][IL_MAX_GAIN_ENTRIES] = {
1143	{
1144	 {251, 127},		/* 2.4 GHz, highest power */
1145	 {251, 127},
1146	 {251, 127},
1147	 {251, 127},
1148	 {251, 125},
1149	 {251, 110},
1150	 {251, 105},
1151	 {251, 98},
1152	 {187, 125},
1153	 {187, 115},
1154	 {187, 108},
1155	 {187, 99},
1156	 {243, 119},
1157	 {243, 111},
1158	 {243, 105},
1159	 {243, 97},
1160	 {243, 92},
1161	 {211, 106},
1162	 {211, 100},
1163	 {179, 120},
1164	 {179, 113},
1165	 {179, 107},
1166	 {147, 125},
1167	 {147, 119},
1168	 {147, 112},
1169	 {147, 106},
1170	 {147, 101},
1171	 {147, 97},
1172	 {147, 91},
1173	 {115, 107},
1174	 {235, 121},
1175	 {235, 115},
1176	 {235, 109},
1177	 {203, 127},
1178	 {203, 121},
1179	 {203, 115},
1180	 {203, 108},
1181	 {203, 102},
1182	 {203, 96},
1183	 {203, 92},
1184	 {171, 110},
1185	 {171, 104},
1186	 {171, 98},
1187	 {139, 116},
1188	 {227, 125},
1189	 {227, 119},
1190	 {227, 113},
1191	 {227, 107},
1192	 {227, 101},
1193	 {227, 96},
1194	 {195, 113},
1195	 {195, 106},
1196	 {195, 102},
1197	 {195, 95},
1198	 {163, 113},
1199	 {163, 106},
1200	 {163, 102},
1201	 {163, 95},
1202	 {131, 113},
1203	 {131, 106},
1204	 {131, 102},
1205	 {131, 95},
1206	 {99, 113},
1207	 {99, 106},
1208	 {99, 102},
1209	 {99, 95},
1210	 {67, 113},
1211	 {67, 106},
1212	 {67, 102},
1213	 {67, 95},
1214	 {35, 113},
1215	 {35, 106},
1216	 {35, 102},
1217	 {35, 95},
1218	 {3, 113},
1219	 {3, 106},
1220	 {3, 102},
1221	 {3, 95}		/* 2.4 GHz, lowest power */
1222	},
1223	{
1224	 {251, 127},		/* 5.x GHz, highest power */
1225	 {251, 120},
1226	 {251, 114},
1227	 {219, 119},
1228	 {219, 101},
1229	 {187, 113},
1230	 {187, 102},
1231	 {155, 114},
1232	 {155, 103},
1233	 {123, 117},
1234	 {123, 107},
1235	 {123, 99},
1236	 {123, 92},
1237	 {91, 108},
1238	 {59, 125},
1239	 {59, 118},
1240	 {59, 109},
1241	 {59, 102},
1242	 {59, 96},
1243	 {59, 90},
1244	 {27, 104},
1245	 {27, 98},
1246	 {27, 92},
1247	 {115, 118},
1248	 {115, 111},
1249	 {115, 104},
1250	 {83, 126},
1251	 {83, 121},
1252	 {83, 113},
1253	 {83, 105},
1254	 {83, 99},
1255	 {51, 118},
1256	 {51, 111},
1257	 {51, 104},
1258	 {51, 98},
1259	 {19, 116},
1260	 {19, 109},
1261	 {19, 102},
1262	 {19, 98},
1263	 {19, 93},
1264	 {171, 113},
1265	 {171, 107},
1266	 {171, 99},
1267	 {139, 120},
1268	 {139, 113},
1269	 {139, 107},
1270	 {139, 99},
1271	 {107, 120},
1272	 {107, 113},
1273	 {107, 107},
1274	 {107, 99},
1275	 {75, 120},
1276	 {75, 113},
1277	 {75, 107},
1278	 {75, 99},
1279	 {43, 120},
1280	 {43, 113},
1281	 {43, 107},
1282	 {43, 99},
1283	 {11, 120},
1284	 {11, 113},
1285	 {11, 107},
1286	 {11, 99},
1287	 {131, 107},
1288	 {131, 99},
1289	 {99, 120},
1290	 {99, 113},
1291	 {99, 107},
1292	 {99, 99},
1293	 {67, 120},
1294	 {67, 113},
1295	 {67, 107},
1296	 {67, 99},
1297	 {35, 120},
1298	 {35, 113},
1299	 {35, 107},
1300	 {35, 99},
1301	 {3, 120}		/* 5.x GHz, lowest power */
1302	}
1303};
1304
1305static inline u8
1306il3945_hw_reg_fix_power_idx(int idx)
1307{
1308	if (idx < 0)
1309		return 0;
1310	if (idx >= IL_MAX_GAIN_ENTRIES)
1311		return IL_MAX_GAIN_ENTRIES - 1;
1312	return (u8) idx;
1313}
1314
1315/* Kick off thermal recalibration check every 60 seconds */
1316#define REG_RECALIB_PERIOD (60)
1317
1318/*
1319 * il3945_hw_reg_set_scan_power - Set Tx power for scan probe requests
1320 *
1321 * Set (in our channel info database) the direct scan Tx power for 1 Mbit (CCK)
1322 * or 6 Mbit (OFDM) rates.
1323 */
1324static void
1325il3945_hw_reg_set_scan_power(struct il_priv *il, u32 scan_tbl_idx, s32 rate_idx,
1326			     const s8 *clip_pwrs,
1327			     struct il_channel_info *ch_info, int band_idx)
1328{
1329	struct il3945_scan_power_info *scan_power_info;
1330	s8 power;
1331	u8 power_idx;
1332
1333	scan_power_info = &ch_info->scan_pwr_info[scan_tbl_idx];
1334
1335	/* use this channel group's 6Mbit clipping/saturation pwr,
1336	 *   but cap at regulatory scan power restriction (set during init
1337	 *   based on eeprom channel data) for this channel.  */
1338	power = min(ch_info->scan_power, clip_pwrs[RATE_6M_IDX_TBL]);
1339
1340	power = min(power, il->tx_power_user_lmt);
1341	scan_power_info->requested_power = power;
1342
1343	/* find difference between new scan *power* and current "normal"
1344	 *   Tx *power* for 6Mb.  Use this difference (x2) to adjust the
1345	 *   current "normal" temperature-compensated Tx power *idx* for
1346	 *   this rate (1Mb or 6Mb) to yield new temp-compensated scan power
1347	 *   *idx*. */
1348	power_idx =
1349	    ch_info->power_info[rate_idx].power_table_idx - (power -
1350							     ch_info->
1351							     power_info
1352							     [RATE_6M_IDX_TBL].
1353							     requested_power) *
1354	    2;
1355
1356	/* store reference idx that we use when adjusting *all* scan
1357	 *   powers.  So we can accommodate user (all channel) or spectrum
1358	 *   management (single channel) power changes "between" temperature
1359	 *   feedback compensation procedures.
1360	 * don't force fit this reference idx into gain table; it may be a
1361	 *   negative number.  This will help avoid errors when we're at
1362	 *   the lower bounds (highest gains, for warmest temperatures)
1363	 *   of the table. */
1364
1365	/* don't exceed table bounds for "real" setting */
1366	power_idx = il3945_hw_reg_fix_power_idx(power_idx);
1367
1368	scan_power_info->power_table_idx = power_idx;
1369	scan_power_info->tpc.tx_gain =
1370	    power_gain_table[band_idx][power_idx].tx_gain;
1371	scan_power_info->tpc.dsp_atten =
1372	    power_gain_table[band_idx][power_idx].dsp_atten;
1373}
1374
1375/*
1376 * il3945_send_tx_power - fill in Tx Power command with gain settings
1377 *
1378 * Configures power settings for all rates for the current channel,
1379 * using values from channel info struct, and send to NIC
1380 */
1381static int
1382il3945_send_tx_power(struct il_priv *il)
1383{
1384	int rate_idx, i;
1385	const struct il_channel_info *ch_info = NULL;
1386	struct il3945_txpowertable_cmd txpower = {
1387		.channel = il->active.channel,
1388	};
1389	u16 chan;
1390
1391	if (WARN_ONCE
1392	    (test_bit(S_SCAN_HW, &il->status),
1393	     "TX Power requested while scanning!\n"))
1394		return -EAGAIN;
1395
1396	chan = le16_to_cpu(il->active.channel);
1397
1398	txpower.band = (il->band == NL80211_BAND_5GHZ) ? 0 : 1;
1399	ch_info = il_get_channel_info(il, il->band, chan);
1400	if (!ch_info) {
1401		IL_ERR("Failed to get channel info for channel %d [%d]\n", chan,
1402		       il->band);
1403		return -EINVAL;
1404	}
1405
1406	if (!il_is_channel_valid(ch_info)) {
1407		D_POWER("Not calling TX_PWR_TBL_CMD on " "non-Tx channel.\n");
1408		return 0;
1409	}
1410
1411	/* fill cmd with power settings for all rates for current channel */
1412	/* Fill OFDM rate */
1413	for (rate_idx = IL_FIRST_OFDM_RATE, i = 0;
1414	     rate_idx <= IL39_LAST_OFDM_RATE; rate_idx++, i++) {
1415
1416		txpower.power[i].tpc = ch_info->power_info[i].tpc;
1417		txpower.power[i].rate = il3945_rates[rate_idx].plcp;
1418
1419		D_POWER("ch %d:%d rf %d dsp %3d rate code 0x%02x\n",
1420			le16_to_cpu(txpower.channel), txpower.band,
1421			txpower.power[i].tpc.tx_gain,
1422			txpower.power[i].tpc.dsp_atten, txpower.power[i].rate);
1423	}
1424	/* Fill CCK rates */
1425	for (rate_idx = IL_FIRST_CCK_RATE; rate_idx <= IL_LAST_CCK_RATE;
1426	     rate_idx++, i++) {
1427		txpower.power[i].tpc = ch_info->power_info[i].tpc;
1428		txpower.power[i].rate = il3945_rates[rate_idx].plcp;
1429
1430		D_POWER("ch %d:%d rf %d dsp %3d rate code 0x%02x\n",
1431			le16_to_cpu(txpower.channel), txpower.band,
1432			txpower.power[i].tpc.tx_gain,
1433			txpower.power[i].tpc.dsp_atten, txpower.power[i].rate);
1434	}
1435
1436	return il_send_cmd_pdu(il, C_TX_PWR_TBL,
1437			       sizeof(struct il3945_txpowertable_cmd),
1438			       &txpower);
1439
1440}
1441
1442/*
1443 * il3945_hw_reg_set_new_power - Configures power tables at new levels
1444 * @ch_info: Channel to update.  Uses power_info.requested_power.
1445 *
1446 * Replace requested_power and base_power_idx ch_info fields for
1447 * one channel.
1448 *
1449 * Called if user or spectrum management changes power preferences.
1450 * Takes into account h/w and modulation limitations (clip power).
1451 *
1452 * This does *not* send anything to NIC, just sets up ch_info for one channel.
1453 *
1454 * NOTE: reg_compensate_for_temperature_dif() *must* be run after this to
1455 *	 properly fill out the scan powers, and actual h/w gain settings,
1456 *	 and send changes to NIC
1457 */
1458static int
1459il3945_hw_reg_set_new_power(struct il_priv *il, struct il_channel_info *ch_info)
1460{
1461	struct il3945_channel_power_info *power_info;
1462	int power_changed = 0;
1463	int i;
1464	const s8 *clip_pwrs;
1465	int power;
1466
1467	/* Get this chnlgrp's rate-to-max/clip-powers table */
1468	clip_pwrs = il->_3945.clip_groups[ch_info->group_idx].clip_powers;
1469
1470	/* Get this channel's rate-to-current-power settings table */
1471	power_info = ch_info->power_info;
1472
1473	/* update OFDM Txpower settings */
1474	for (i = RATE_6M_IDX_TBL; i <= RATE_54M_IDX_TBL; i++, ++power_info) {
1475		int delta_idx;
1476
1477		/* limit new power to be no more than h/w capability */
1478		power = min(ch_info->curr_txpow, clip_pwrs[i]);
1479		if (power == power_info->requested_power)
1480			continue;
1481
1482		/* find difference between old and new requested powers,
1483		 *    update base (non-temp-compensated) power idx */
1484		delta_idx = (power - power_info->requested_power) * 2;
1485		power_info->base_power_idx -= delta_idx;
1486
1487		/* save new requested power value */
1488		power_info->requested_power = power;
1489
1490		power_changed = 1;
1491	}
1492
1493	/* update CCK Txpower settings, based on OFDM 12M setting ...
1494	 *    ... all CCK power settings for a given channel are the *same*. */
1495	if (power_changed) {
1496		power =
1497		    ch_info->power_info[RATE_12M_IDX_TBL].requested_power +
1498		    IL_CCK_FROM_OFDM_POWER_DIFF;
1499
1500		/* do all CCK rates' il3945_channel_power_info structures */
1501		for (i = RATE_1M_IDX_TBL; i <= RATE_11M_IDX_TBL; i++) {
1502			power_info->requested_power = power;
1503			power_info->base_power_idx =
1504			    ch_info->power_info[RATE_12M_IDX_TBL].
1505			    base_power_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
1506			++power_info;
1507		}
1508	}
1509
1510	return 0;
1511}
1512
1513/*
1514 * il3945_hw_reg_get_ch_txpower_limit - returns new power limit for channel
1515 *
1516 * NOTE: Returned power limit may be less (but not more) than requested,
1517 *	 based strictly on regulatory (eeprom and spectrum mgt) limitations
1518 *	 (no consideration for h/w clipping limitations).
1519 */
1520static int
1521il3945_hw_reg_get_ch_txpower_limit(struct il_channel_info *ch_info)
1522{
1523	s8 max_power;
1524
1525#if 0
1526	/* if we're using TGd limits, use lower of TGd or EEPROM */
1527	if (ch_info->tgd_data.max_power != 0)
1528		max_power =
1529		    min(ch_info->tgd_data.max_power,
1530			ch_info->eeprom.max_power_avg);
1531
1532	/* else just use EEPROM limits */
1533	else
1534#endif
1535		max_power = ch_info->eeprom.max_power_avg;
1536
1537	return min(max_power, ch_info->max_power_avg);
1538}
1539
1540/*
1541 * il3945_hw_reg_comp_txpower_temp - Compensate for temperature
1542 *
1543 * Compensate txpower settings of *all* channels for temperature.
1544 * This only accounts for the difference between current temperature
1545 *   and the factory calibration temperatures, and bases the new settings
1546 *   on the channel's base_power_idx.
1547 *
1548 * If RxOn is "associated", this sends the new Txpower to NIC!
1549 */
1550static int
1551il3945_hw_reg_comp_txpower_temp(struct il_priv *il)
1552{
1553	struct il_channel_info *ch_info = NULL;
1554	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1555	int delta_idx;
1556	const s8 *clip_pwrs;	/* array of h/w max power levels for each rate */
1557	u8 a_band;
1558	u8 rate_idx;
1559	u8 scan_tbl_idx;
1560	u8 i;
1561	int ref_temp;
1562	int temperature = il->temperature;
1563
1564	if (il->disable_tx_power_cal || test_bit(S_SCANNING, &il->status)) {
1565		/* do not perform tx power calibration */
1566		return 0;
1567	}
1568	/* set up new Tx power info for each and every channel, 2.4 and 5.x */
1569	for (i = 0; i < il->channel_count; i++) {
1570		ch_info = &il->channel_info[i];
1571		a_band = il_is_channel_a_band(ch_info);
1572
1573		/* Get this chnlgrp's factory calibration temperature */
1574		ref_temp = (s16) eeprom->groups[ch_info->group_idx].temperature;
1575
1576		/* get power idx adjustment based on current and factory
1577		 * temps */
1578		delta_idx =
1579		    il3945_hw_reg_adjust_power_by_temp(temperature, ref_temp);
1580
1581		/* set tx power value for all rates, OFDM and CCK */
1582		for (rate_idx = 0; rate_idx < RATE_COUNT_3945; rate_idx++) {
1583			int power_idx =
1584			    ch_info->power_info[rate_idx].base_power_idx;
1585
1586			/* temperature compensate */
1587			power_idx += delta_idx;
1588
1589			/* stay within table range */
1590			power_idx = il3945_hw_reg_fix_power_idx(power_idx);
1591			ch_info->power_info[rate_idx].power_table_idx =
1592			    (u8) power_idx;
1593			ch_info->power_info[rate_idx].tpc =
1594			    power_gain_table[a_band][power_idx];
1595		}
1596
1597		/* Get this chnlgrp's rate-to-max/clip-powers table */
1598		clip_pwrs =
1599		    il->_3945.clip_groups[ch_info->group_idx].clip_powers;
1600
1601		/* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
1602		for (scan_tbl_idx = 0; scan_tbl_idx < IL_NUM_SCAN_RATES;
1603		     scan_tbl_idx++) {
1604			s32 actual_idx =
1605			    (scan_tbl_idx ==
1606			     0) ? RATE_1M_IDX_TBL : RATE_6M_IDX_TBL;
1607			il3945_hw_reg_set_scan_power(il, scan_tbl_idx,
1608						     actual_idx, clip_pwrs,
1609						     ch_info, a_band);
1610		}
1611	}
1612
1613	/* send Txpower command for current channel to ucode */
1614	return il->ops->send_tx_power(il);
1615}
1616
1617int
1618il3945_hw_reg_set_txpower(struct il_priv *il, s8 power)
1619{
1620	struct il_channel_info *ch_info;
1621	s8 max_power;
 
1622	u8 i;
1623
1624	if (il->tx_power_user_lmt == power) {
1625		D_POWER("Requested Tx power same as current " "limit: %ddBm.\n",
1626			power);
1627		return 0;
1628	}
1629
1630	D_POWER("Setting upper limit clamp to %ddBm.\n", power);
1631	il->tx_power_user_lmt = power;
1632
1633	/* set up new Tx powers for each and every channel, 2.4 and 5.x */
1634
1635	for (i = 0; i < il->channel_count; i++) {
1636		ch_info = &il->channel_info[i];
 
1637
1638		/* find minimum power of all user and regulatory constraints
1639		 *    (does not consider h/w clipping limitations) */
1640		max_power = il3945_hw_reg_get_ch_txpower_limit(ch_info);
1641		max_power = min(power, max_power);
1642		if (max_power != ch_info->curr_txpow) {
1643			ch_info->curr_txpow = max_power;
1644
1645			/* this considers the h/w clipping limitations */
1646			il3945_hw_reg_set_new_power(il, ch_info);
1647		}
1648	}
1649
1650	/* update txpower settings for all channels,
1651	 *   send to NIC if associated. */
1652	il3945_is_temp_calib_needed(il);
1653	il3945_hw_reg_comp_txpower_temp(il);
1654
1655	return 0;
1656}
1657
1658static int
1659il3945_send_rxon_assoc(struct il_priv *il)
1660{
1661	int rc = 0;
1662	struct il_rx_pkt *pkt;
1663	struct il3945_rxon_assoc_cmd rxon_assoc;
1664	struct il_host_cmd cmd = {
1665		.id = C_RXON_ASSOC,
1666		.len = sizeof(rxon_assoc),
1667		.flags = CMD_WANT_SKB,
1668		.data = &rxon_assoc,
1669	};
1670	const struct il_rxon_cmd *rxon1 = &il->staging;
1671	const struct il_rxon_cmd *rxon2 = &il->active;
1672
1673	if (rxon1->flags == rxon2->flags &&
1674	    rxon1->filter_flags == rxon2->filter_flags &&
1675	    rxon1->cck_basic_rates == rxon2->cck_basic_rates &&
1676	    rxon1->ofdm_basic_rates == rxon2->ofdm_basic_rates) {
1677		D_INFO("Using current RXON_ASSOC.  Not resending.\n");
1678		return 0;
1679	}
1680
1681	rxon_assoc.flags = il->staging.flags;
1682	rxon_assoc.filter_flags = il->staging.filter_flags;
1683	rxon_assoc.ofdm_basic_rates = il->staging.ofdm_basic_rates;
1684	rxon_assoc.cck_basic_rates = il->staging.cck_basic_rates;
1685	rxon_assoc.reserved = 0;
1686
1687	rc = il_send_cmd_sync(il, &cmd);
1688	if (rc)
1689		return rc;
1690
1691	pkt = (struct il_rx_pkt *)cmd.reply_page;
1692	if (pkt->hdr.flags & IL_CMD_FAILED_MSK) {
1693		IL_ERR("Bad return from C_RXON_ASSOC command\n");
1694		rc = -EIO;
1695	}
1696
1697	il_free_pages(il, cmd.reply_page);
1698
1699	return rc;
1700}
1701
1702/*
1703 * il3945_commit_rxon - commit staging_rxon to hardware
1704 *
1705 * The RXON command in staging_rxon is committed to the hardware and
1706 * the active_rxon structure is updated with the new data.  This
1707 * function correctly transitions out of the RXON_ASSOC_MSK state if
1708 * a HW tune is required based on the RXON structure changes.
1709 */
1710int
1711il3945_commit_rxon(struct il_priv *il)
1712{
1713	/* cast away the const for active_rxon in this function */
1714	struct il3945_rxon_cmd *active_rxon = (void *)&il->active;
1715	struct il3945_rxon_cmd *staging_rxon = (void *)&il->staging;
1716	int rc = 0;
1717	bool new_assoc = !!(staging_rxon->filter_flags & RXON_FILTER_ASSOC_MSK);
1718
1719	if (test_bit(S_EXIT_PENDING, &il->status))
1720		return -EINVAL;
1721
1722	if (!il_is_alive(il))
1723		return -1;
1724
1725	/* always get timestamp with Rx frame */
1726	staging_rxon->flags |= RXON_FLG_TSF2HOST_MSK;
1727
1728	/* select antenna */
1729	staging_rxon->flags &= ~(RXON_FLG_DIS_DIV_MSK | RXON_FLG_ANT_SEL_MSK);
1730	staging_rxon->flags |= il3945_get_antenna_flags(il);
1731
1732	rc = il_check_rxon_cmd(il);
1733	if (rc) {
1734		IL_ERR("Invalid RXON configuration.  Not committing.\n");
1735		return -EINVAL;
1736	}
1737
1738	/* If we don't need to send a full RXON, we can use
1739	 * il3945_rxon_assoc_cmd which is used to reconfigure filter
1740	 * and other flags for the current radio configuration. */
1741	if (!il_full_rxon_required(il)) {
1742		rc = il_send_rxon_assoc(il);
1743		if (rc) {
1744			IL_ERR("Error setting RXON_ASSOC "
1745			       "configuration (%d).\n", rc);
1746			return rc;
1747		}
1748
1749		memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
1750		/*
1751		 * We do not commit tx power settings while channel changing,
1752		 * do it now if tx power changed.
1753		 */
1754		il_set_tx_power(il, il->tx_power_next, false);
1755		return 0;
1756	}
1757
1758	/* If we are currently associated and the new config requires
1759	 * an RXON_ASSOC and the new config wants the associated mask enabled,
1760	 * we must clear the associated from the active configuration
1761	 * before we apply the new config */
1762	if (il_is_associated(il) && new_assoc) {
1763		D_INFO("Toggling associated bit on current RXON\n");
1764		active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
1765
1766		/*
1767		 * reserved4 and 5 could have been filled by the iwlcore code.
1768		 * Let's clear them before pushing to the 3945.
1769		 */
1770		active_rxon->reserved4 = 0;
1771		active_rxon->reserved5 = 0;
1772		rc = il_send_cmd_pdu(il, C_RXON, sizeof(struct il3945_rxon_cmd),
1773				     &il->active);
1774
1775		/* If the mask clearing failed then we set
1776		 * active_rxon back to what it was previously */
1777		if (rc) {
1778			active_rxon->filter_flags |= RXON_FILTER_ASSOC_MSK;
1779			IL_ERR("Error clearing ASSOC_MSK on current "
1780			       "configuration (%d).\n", rc);
1781			return rc;
1782		}
1783		il_clear_ucode_stations(il);
1784		il_restore_stations(il);
1785	}
1786
1787	D_INFO("Sending RXON\n" "* with%s RXON_FILTER_ASSOC_MSK\n"
1788	       "* channel = %d\n" "* bssid = %pM\n", (new_assoc ? "" : "out"),
1789	       le16_to_cpu(staging_rxon->channel), staging_rxon->bssid_addr);
1790
1791	/*
1792	 * reserved4 and 5 could have been filled by the iwlcore code.
1793	 * Let's clear them before pushing to the 3945.
1794	 */
1795	staging_rxon->reserved4 = 0;
1796	staging_rxon->reserved5 = 0;
1797
1798	il_set_rxon_hwcrypto(il, !il3945_mod_params.sw_crypto);
1799
1800	/* Apply the new configuration */
1801	rc = il_send_cmd_pdu(il, C_RXON, sizeof(struct il3945_rxon_cmd),
1802			     staging_rxon);
1803	if (rc) {
1804		IL_ERR("Error setting new configuration (%d).\n", rc);
1805		return rc;
1806	}
1807
1808	memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
1809
1810	if (!new_assoc) {
1811		il_clear_ucode_stations(il);
1812		il_restore_stations(il);
1813	}
1814
1815	/* If we issue a new RXON command which required a tune then we must
1816	 * send a new TXPOWER command or we won't be able to Tx any frames */
1817	rc = il_set_tx_power(il, il->tx_power_next, true);
1818	if (rc) {
1819		IL_ERR("Error setting Tx power (%d).\n", rc);
1820		return rc;
1821	}
1822
1823	/* Init the hardware's rate fallback order based on the band */
1824	rc = il3945_init_hw_rate_table(il);
1825	if (rc) {
1826		IL_ERR("Error setting HW rate table: %02X\n", rc);
1827		return -EIO;
1828	}
1829
1830	return 0;
1831}
1832
1833/*
1834 * il3945_reg_txpower_periodic -  called when time to check our temperature.
1835 *
1836 * -- reset periodic timer
1837 * -- see if temp has changed enough to warrant re-calibration ... if so:
1838 *     -- correct coeffs for temp (can reset temp timer)
1839 *     -- save this temp as "last",
1840 *     -- send new set of gain settings to NIC
1841 * NOTE:  This should continue working, even when we're not associated,
1842 *   so we can keep our internal table of scan powers current. */
1843void
1844il3945_reg_txpower_periodic(struct il_priv *il)
1845{
1846	/* This will kick in the "brute force"
1847	 * il3945_hw_reg_comp_txpower_temp() below */
1848	if (!il3945_is_temp_calib_needed(il))
1849		goto reschedule;
1850
1851	/* Set up a new set of temp-adjusted TxPowers, send to NIC.
1852	 * This is based *only* on current temperature,
1853	 * ignoring any previous power measurements */
1854	il3945_hw_reg_comp_txpower_temp(il);
1855
1856reschedule:
1857	queue_delayed_work(il->workqueue, &il->_3945.thermal_periodic,
1858			   REG_RECALIB_PERIOD * HZ);
1859}
1860
1861static void
1862il3945_bg_reg_txpower_periodic(struct work_struct *work)
1863{
1864	struct il_priv *il = container_of(work, struct il_priv,
1865					  _3945.thermal_periodic.work);
1866
1867	mutex_lock(&il->mutex);
1868	if (test_bit(S_EXIT_PENDING, &il->status) || il->txq == NULL)
1869		goto out;
1870
1871	il3945_reg_txpower_periodic(il);
1872out:
1873	mutex_unlock(&il->mutex);
1874}
1875
1876/*
1877 * il3945_hw_reg_get_ch_grp_idx - find the channel-group idx (0-4) for channel.
1878 *
1879 * This function is used when initializing channel-info structs.
1880 *
1881 * NOTE: These channel groups do *NOT* match the bands above!
1882 *	 These channel groups are based on factory-tested channels;
1883 *	 on A-band, EEPROM's "group frequency" entries represent the top
1884 *	 channel in each group 1-4.  Group 5 All B/G channels are in group 0.
1885 */
1886static u16
1887il3945_hw_reg_get_ch_grp_idx(struct il_priv *il,
1888			     const struct il_channel_info *ch_info)
1889{
1890	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1891	struct il3945_eeprom_txpower_group *ch_grp = &eeprom->groups[0];
1892	u8 group;
1893	u16 group_idx = 0;	/* based on factory calib frequencies */
1894	u8 grp_channel;
1895
1896	/* Find the group idx for the channel ... don't use idx 1(?) */
1897	if (il_is_channel_a_band(ch_info)) {
1898		for (group = 1; group < 5; group++) {
1899			grp_channel = ch_grp[group].group_channel;
1900			if (ch_info->channel <= grp_channel) {
1901				group_idx = group;
1902				break;
1903			}
1904		}
1905		/* group 4 has a few channels *above* its factory cal freq */
1906		if (group == 5)
1907			group_idx = 4;
1908	} else
1909		group_idx = 0;	/* 2.4 GHz, group 0 */
1910
1911	D_POWER("Chnl %d mapped to grp %d\n", ch_info->channel, group_idx);
1912	return group_idx;
1913}
1914
1915/*
1916 * il3945_hw_reg_get_matched_power_idx - Interpolate to get nominal idx
1917 *
1918 * Interpolate to get nominal (i.e. at factory calibration temperature) idx
1919 *   into radio/DSP gain settings table for requested power.
1920 */
1921static int
1922il3945_hw_reg_get_matched_power_idx(struct il_priv *il, s8 requested_power,
1923				    s32 setting_idx, s32 *new_idx)
1924{
1925	const struct il3945_eeprom_txpower_group *chnl_grp = NULL;
1926	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1927	s32 idx0, idx1;
1928	s32 power = 2 * requested_power;
1929	s32 i;
1930	const struct il3945_eeprom_txpower_sample *samples;
1931	s32 gains0, gains1;
1932	s32 res;
1933	s32 denominator;
1934
1935	chnl_grp = &eeprom->groups[setting_idx];
1936	samples = chnl_grp->samples;
1937	for (i = 0; i < 5; i++) {
1938		if (power == samples[i].power) {
1939			*new_idx = samples[i].gain_idx;
1940			return 0;
1941		}
1942	}
1943
1944	if (power > samples[1].power) {
1945		idx0 = 0;
1946		idx1 = 1;
1947	} else if (power > samples[2].power) {
1948		idx0 = 1;
1949		idx1 = 2;
1950	} else if (power > samples[3].power) {
1951		idx0 = 2;
1952		idx1 = 3;
1953	} else {
1954		idx0 = 3;
1955		idx1 = 4;
1956	}
1957
1958	denominator = (s32) samples[idx1].power - (s32) samples[idx0].power;
1959	if (denominator == 0)
1960		return -EINVAL;
1961	gains0 = (s32) samples[idx0].gain_idx * (1 << 19);
1962	gains1 = (s32) samples[idx1].gain_idx * (1 << 19);
1963	res =
1964	    gains0 + (gains1 - gains0) * ((s32) power -
1965					  (s32) samples[idx0].power) /
1966	    denominator + (1 << 18);
1967	*new_idx = res >> 19;
1968	return 0;
1969}
1970
1971static void
1972il3945_hw_reg_init_channel_groups(struct il_priv *il)
1973{
1974	u32 i;
1975	s32 rate_idx;
1976	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1977	const struct il3945_eeprom_txpower_group *group;
1978
1979	D_POWER("Initializing factory calib info from EEPROM\n");
1980
1981	for (i = 0; i < IL_NUM_TX_CALIB_GROUPS; i++) {
1982		s8 *clip_pwrs;	/* table of power levels for each rate */
1983		s8 satur_pwr;	/* saturation power for each chnl group */
1984		group = &eeprom->groups[i];
1985
1986		/* sanity check on factory saturation power value */
1987		if (group->saturation_power < 40) {
1988			IL_WARN("Error: saturation power is %d, "
1989				"less than minimum expected 40\n",
1990				group->saturation_power);
1991			return;
1992		}
1993
1994		/*
1995		 * Derive requested power levels for each rate, based on
1996		 *   hardware capabilities (saturation power for band).
1997		 * Basic value is 3dB down from saturation, with further
1998		 *   power reductions for highest 3 data rates.  These
1999		 *   backoffs provide headroom for high rate modulation
2000		 *   power peaks, without too much distortion (clipping).
2001		 */
2002		/* we'll fill in this array with h/w max power levels */
2003		clip_pwrs = (s8 *) il->_3945.clip_groups[i].clip_powers;
2004
2005		/* divide factory saturation power by 2 to find -3dB level */
2006		satur_pwr = (s8) (group->saturation_power >> 1);
2007
2008		/* fill in channel group's nominal powers for each rate */
2009		for (rate_idx = 0; rate_idx < RATE_COUNT_3945;
2010		     rate_idx++, clip_pwrs++) {
2011			switch (rate_idx) {
2012			case RATE_36M_IDX_TBL:
2013				if (i == 0)	/* B/G */
2014					*clip_pwrs = satur_pwr;
2015				else	/* A */
2016					*clip_pwrs = satur_pwr - 5;
2017				break;
2018			case RATE_48M_IDX_TBL:
2019				if (i == 0)
2020					*clip_pwrs = satur_pwr - 7;
2021				else
2022					*clip_pwrs = satur_pwr - 10;
2023				break;
2024			case RATE_54M_IDX_TBL:
2025				if (i == 0)
2026					*clip_pwrs = satur_pwr - 9;
2027				else
2028					*clip_pwrs = satur_pwr - 12;
2029				break;
2030			default:
2031				*clip_pwrs = satur_pwr;
2032				break;
2033			}
2034		}
2035	}
2036}
2037
2038/*
2039 * il3945_txpower_set_from_eeprom - Set channel power info based on EEPROM
2040 *
2041 * Second pass (during init) to set up il->channel_info
2042 *
2043 * Set up Tx-power settings in our channel info database for each VALID
2044 * (for this geo/SKU) channel, at all Tx data rates, based on eeprom values
2045 * and current temperature.
2046 *
2047 * Since this is based on current temperature (at init time), these values may
2048 * not be valid for very long, but it gives us a starting/default point,
2049 * and allows us to active (i.e. using Tx) scan.
2050 *
2051 * This does *not* write values to NIC, just sets up our internal table.
2052 */
2053int
2054il3945_txpower_set_from_eeprom(struct il_priv *il)
2055{
2056	struct il_channel_info *ch_info = NULL;
2057	struct il3945_channel_power_info *pwr_info;
2058	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
2059	int delta_idx;
2060	u8 rate_idx;
2061	u8 scan_tbl_idx;
2062	const s8 *clip_pwrs;	/* array of power levels for each rate */
2063	u8 gain, dsp_atten;
2064	s8 power;
2065	u8 pwr_idx, base_pwr_idx, a_band;
2066	u8 i;
2067	int temperature;
2068
2069	/* save temperature reference,
2070	 *   so we can determine next time to calibrate */
2071	temperature = il3945_hw_reg_txpower_get_temperature(il);
2072	il->last_temperature = temperature;
2073
2074	il3945_hw_reg_init_channel_groups(il);
2075
2076	/* initialize Tx power info for each and every channel, 2.4 and 5.x */
2077	for (i = 0, ch_info = il->channel_info; i < il->channel_count;
2078	     i++, ch_info++) {
2079		a_band = il_is_channel_a_band(ch_info);
2080		if (!il_is_channel_valid(ch_info))
2081			continue;
2082
2083		/* find this channel's channel group (*not* "band") idx */
2084		ch_info->group_idx = il3945_hw_reg_get_ch_grp_idx(il, ch_info);
2085
2086		/* Get this chnlgrp's rate->max/clip-powers table */
2087		clip_pwrs =
2088		    il->_3945.clip_groups[ch_info->group_idx].clip_powers;
2089
2090		/* calculate power idx *adjustment* value according to
2091		 *  diff between current temperature and factory temperature */
2092		delta_idx =
2093		    il3945_hw_reg_adjust_power_by_temp(temperature,
2094						       eeprom->groups[ch_info->
2095								      group_idx].
2096						       temperature);
2097
2098		D_POWER("Delta idx for channel %d: %d [%d]\n", ch_info->channel,
2099			delta_idx, temperature + IL_TEMP_CONVERT);
2100
2101		/* set tx power value for all OFDM rates */
2102		for (rate_idx = 0; rate_idx < IL_OFDM_RATES; rate_idx++) {
2103			s32 power_idx;
2104			int rc;
2105
2106			/* use channel group's clip-power table,
2107			 *   but don't exceed channel's max power */
2108			s8 pwr = min(ch_info->max_power_avg,
2109				     clip_pwrs[rate_idx]);
2110
2111			pwr_info = &ch_info->power_info[rate_idx];
2112
2113			/* get base (i.e. at factory-measured temperature)
2114			 *    power table idx for this rate's power */
2115			rc = il3945_hw_reg_get_matched_power_idx(il, pwr,
2116								 ch_info->
2117								 group_idx,
2118								 &power_idx);
2119			if (rc) {
2120				IL_ERR("Invalid power idx\n");
2121				return rc;
2122			}
2123			pwr_info->base_power_idx = (u8) power_idx;
2124
2125			/* temperature compensate */
2126			power_idx += delta_idx;
2127
2128			/* stay within range of gain table */
2129			power_idx = il3945_hw_reg_fix_power_idx(power_idx);
2130
2131			/* fill 1 OFDM rate's il3945_channel_power_info struct */
2132			pwr_info->requested_power = pwr;
2133			pwr_info->power_table_idx = (u8) power_idx;
2134			pwr_info->tpc.tx_gain =
2135			    power_gain_table[a_band][power_idx].tx_gain;
2136			pwr_info->tpc.dsp_atten =
2137			    power_gain_table[a_band][power_idx].dsp_atten;
2138		}
2139
2140		/* set tx power for CCK rates, based on OFDM 12 Mbit settings */
2141		pwr_info = &ch_info->power_info[RATE_12M_IDX_TBL];
2142		power = pwr_info->requested_power + IL_CCK_FROM_OFDM_POWER_DIFF;
2143		pwr_idx = pwr_info->power_table_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
2144		base_pwr_idx =
2145		    pwr_info->base_power_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
2146
2147		/* stay within table range */
2148		pwr_idx = il3945_hw_reg_fix_power_idx(pwr_idx);
2149		gain = power_gain_table[a_band][pwr_idx].tx_gain;
2150		dsp_atten = power_gain_table[a_band][pwr_idx].dsp_atten;
2151
2152		/* fill each CCK rate's il3945_channel_power_info structure
2153		 * NOTE:  All CCK-rate Txpwrs are the same for a given chnl!
2154		 * NOTE:  CCK rates start at end of OFDM rates! */
2155		for (rate_idx = 0; rate_idx < IL_CCK_RATES; rate_idx++) {
2156			pwr_info =
2157			    &ch_info->power_info[rate_idx + IL_OFDM_RATES];
2158			pwr_info->requested_power = power;
2159			pwr_info->power_table_idx = pwr_idx;
2160			pwr_info->base_power_idx = base_pwr_idx;
2161			pwr_info->tpc.tx_gain = gain;
2162			pwr_info->tpc.dsp_atten = dsp_atten;
2163		}
2164
2165		/* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
2166		for (scan_tbl_idx = 0; scan_tbl_idx < IL_NUM_SCAN_RATES;
2167		     scan_tbl_idx++) {
2168			s32 actual_idx =
2169			    (scan_tbl_idx ==
2170			     0) ? RATE_1M_IDX_TBL : RATE_6M_IDX_TBL;
2171			il3945_hw_reg_set_scan_power(il, scan_tbl_idx,
2172						     actual_idx, clip_pwrs,
2173						     ch_info, a_band);
2174		}
2175	}
2176
2177	return 0;
2178}
2179
2180int
2181il3945_hw_rxq_stop(struct il_priv *il)
2182{
2183	int ret;
2184
2185	_il_wr(il, FH39_RCSR_CONFIG(0), 0);
2186	ret = _il_poll_bit(il, FH39_RSSR_STATUS,
2187			   FH39_RSSR_CHNL0_RX_STATUS_CHNL_IDLE,
2188			   FH39_RSSR_CHNL0_RX_STATUS_CHNL_IDLE,
2189			   1000);
2190	if (ret < 0)
2191		IL_ERR("Can't stop Rx DMA.\n");
2192
2193	return 0;
2194}
2195
2196int
2197il3945_hw_tx_queue_init(struct il_priv *il, struct il_tx_queue *txq)
2198{
2199	int txq_id = txq->q.id;
2200
2201	struct il3945_shared *shared_data = il->_3945.shared_virt;
2202
2203	shared_data->tx_base_ptr[txq_id] = cpu_to_le32((u32) txq->q.dma_addr);
2204
2205	il_wr(il, FH39_CBCC_CTRL(txq_id), 0);
2206	il_wr(il, FH39_CBCC_BASE(txq_id), 0);
2207
2208	il_wr(il, FH39_TCSR_CONFIG(txq_id),
2209	      FH39_TCSR_TX_CONFIG_REG_VAL_CIRQ_RTC_NOINT |
2210	      FH39_TCSR_TX_CONFIG_REG_VAL_MSG_MODE_TXF |
2211	      FH39_TCSR_TX_CONFIG_REG_VAL_CIRQ_HOST_IFTFD |
2212	      FH39_TCSR_TX_CONFIG_REG_VAL_DMA_CREDIT_ENABLE_VAL |
2213	      FH39_TCSR_TX_CONFIG_REG_VAL_DMA_CHNL_ENABLE);
2214
2215	/* fake read to flush all prev. writes */
2216	_il_rd(il, FH39_TSSR_CBB_BASE);
2217
2218	return 0;
2219}
2220
2221/*
2222 * HCMD utils
2223 */
2224static u16
2225il3945_get_hcmd_size(u8 cmd_id, u16 len)
2226{
2227	switch (cmd_id) {
2228	case C_RXON:
2229		return sizeof(struct il3945_rxon_cmd);
2230	case C_POWER_TBL:
2231		return sizeof(struct il3945_powertable_cmd);
2232	default:
2233		return len;
2234	}
2235}
2236
2237static u16
2238il3945_build_addsta_hcmd(const struct il_addsta_cmd *cmd, u8 * data)
2239{
2240	struct il3945_addsta_cmd *addsta = (struct il3945_addsta_cmd *)data;
2241	addsta->mode = cmd->mode;
2242	memcpy(&addsta->sta, &cmd->sta, sizeof(struct sta_id_modify));
2243	memcpy(&addsta->key, &cmd->key, sizeof(struct il4965_keyinfo));
2244	addsta->station_flags = cmd->station_flags;
2245	addsta->station_flags_msk = cmd->station_flags_msk;
2246	addsta->tid_disable_tx = cpu_to_le16(0);
2247	addsta->rate_n_flags = cmd->rate_n_flags;
2248	addsta->add_immediate_ba_tid = cmd->add_immediate_ba_tid;
2249	addsta->remove_immediate_ba_tid = cmd->remove_immediate_ba_tid;
2250	addsta->add_immediate_ba_ssn = cmd->add_immediate_ba_ssn;
2251
2252	return (u16) sizeof(struct il3945_addsta_cmd);
2253}
2254
2255static int
2256il3945_add_bssid_station(struct il_priv *il, const u8 * addr, u8 * sta_id_r)
2257{
2258	int ret;
2259	u8 sta_id;
2260	unsigned long flags;
2261
2262	if (sta_id_r)
2263		*sta_id_r = IL_INVALID_STATION;
2264
2265	ret = il_add_station_common(il, addr, 0, NULL, &sta_id);
2266	if (ret) {
2267		IL_ERR("Unable to add station %pM\n", addr);
2268		return ret;
2269	}
2270
2271	if (sta_id_r)
2272		*sta_id_r = sta_id;
2273
2274	spin_lock_irqsave(&il->sta_lock, flags);
2275	il->stations[sta_id].used |= IL_STA_LOCAL;
2276	spin_unlock_irqrestore(&il->sta_lock, flags);
2277
2278	return 0;
2279}
2280
2281static int
2282il3945_manage_ibss_station(struct il_priv *il, struct ieee80211_vif *vif,
2283			   bool add)
2284{
2285	struct il_vif_priv *vif_priv = (void *)vif->drv_priv;
2286	int ret;
2287
2288	if (add) {
2289		ret =
2290		    il3945_add_bssid_station(il, vif->bss_conf.bssid,
2291					     &vif_priv->ibss_bssid_sta_id);
2292		if (ret)
2293			return ret;
2294
2295		il3945_sync_sta(il, vif_priv->ibss_bssid_sta_id,
2296				(il->band ==
2297				 NL80211_BAND_5GHZ) ? RATE_6M_PLCP :
2298				RATE_1M_PLCP);
2299		il3945_rate_scale_init(il->hw, vif_priv->ibss_bssid_sta_id);
2300
2301		return 0;
2302	}
2303
2304	return il_remove_station(il, vif_priv->ibss_bssid_sta_id,
2305				 vif->bss_conf.bssid);
2306}
2307
2308/*
2309 * il3945_init_hw_rate_table - Initialize the hardware rate fallback table
2310 */
2311int
2312il3945_init_hw_rate_table(struct il_priv *il)
2313{
2314	int rc, i, idx, prev_idx;
2315	struct il3945_rate_scaling_cmd rate_cmd = {
2316		.reserved = {0, 0, 0},
2317	};
2318	struct il3945_rate_scaling_info *table = rate_cmd.table;
2319
2320	for (i = 0; i < ARRAY_SIZE(il3945_rates); i++) {
2321		idx = il3945_rates[i].table_rs_idx;
2322
2323		table[idx].rate_n_flags = cpu_to_le16(il3945_rates[i].plcp);
2324		table[idx].try_cnt = il->retry_rate;
2325		prev_idx = il3945_get_prev_ieee_rate(i);
2326		table[idx].next_rate_idx = il3945_rates[prev_idx].table_rs_idx;
2327	}
2328
2329	switch (il->band) {
2330	case NL80211_BAND_5GHZ:
2331		D_RATE("Select A mode rate scale\n");
2332		/* If one of the following CCK rates is used,
2333		 * have it fall back to the 6M OFDM rate */
2334		for (i = RATE_1M_IDX_TBL; i <= RATE_11M_IDX_TBL; i++)
2335			table[i].next_rate_idx =
2336			    il3945_rates[IL_FIRST_OFDM_RATE].table_rs_idx;
2337
2338		/* Don't fall back to CCK rates */
2339		table[RATE_12M_IDX_TBL].next_rate_idx = RATE_9M_IDX_TBL;
2340
2341		/* Don't drop out of OFDM rates */
2342		table[RATE_6M_IDX_TBL].next_rate_idx =
2343		    il3945_rates[IL_FIRST_OFDM_RATE].table_rs_idx;
2344		break;
2345
2346	case NL80211_BAND_2GHZ:
2347		D_RATE("Select B/G mode rate scale\n");
2348		/* If an OFDM rate is used, have it fall back to the
2349		 * 1M CCK rates */
2350
2351		if (!(il->_3945.sta_supp_rates & IL_OFDM_RATES_MASK) &&
2352		    il_is_associated(il)) {
2353
2354			idx = IL_FIRST_CCK_RATE;
2355			for (i = RATE_6M_IDX_TBL; i <= RATE_54M_IDX_TBL; i++)
2356				table[i].next_rate_idx =
2357				    il3945_rates[idx].table_rs_idx;
2358
2359			idx = RATE_11M_IDX_TBL;
2360			/* CCK shouldn't fall back to OFDM... */
2361			table[idx].next_rate_idx = RATE_5M_IDX_TBL;
2362		}
2363		break;
2364
2365	default:
2366		WARN_ON(1);
2367		break;
2368	}
2369
2370	/* Update the rate scaling for control frame Tx */
2371	rate_cmd.table_id = 0;
2372	rc = il_send_cmd_pdu(il, C_RATE_SCALE, sizeof(rate_cmd), &rate_cmd);
2373	if (rc)
2374		return rc;
2375
2376	/* Update the rate scaling for data frame Tx */
2377	rate_cmd.table_id = 1;
2378	return il_send_cmd_pdu(il, C_RATE_SCALE, sizeof(rate_cmd), &rate_cmd);
2379}
2380
2381/* Called when initializing driver */
2382int
2383il3945_hw_set_hw_params(struct il_priv *il)
2384{
2385	memset((void *)&il->hw_params, 0, sizeof(struct il_hw_params));
2386
2387	il->_3945.shared_virt =
2388	    dma_alloc_coherent(&il->pci_dev->dev, sizeof(struct il3945_shared),
2389			       &il->_3945.shared_phys, GFP_KERNEL);
2390	if (!il->_3945.shared_virt)
2391		return -ENOMEM;
2392
2393	il->hw_params.bcast_id = IL3945_BROADCAST_ID;
2394
2395	/* Assign number of Usable TX queues */
2396	il->hw_params.max_txq_num = il->cfg->num_of_queues;
2397
2398	il->hw_params.tfd_size = sizeof(struct il3945_tfd);
2399	il->hw_params.rx_page_order = get_order(IL_RX_BUF_SIZE_3K);
2400	il->hw_params.max_rxq_size = RX_QUEUE_SIZE;
2401	il->hw_params.max_rxq_log = RX_QUEUE_SIZE_LOG;
2402	il->hw_params.max_stations = IL3945_STATION_COUNT;
2403
2404	il->sta_key_max_num = STA_KEY_MAX_NUM;
2405
2406	il->hw_params.rx_wrt_ptr_reg = FH39_RSCSR_CHNL0_WPTR;
2407	il->hw_params.max_beacon_itrvl = IL39_MAX_UCODE_BEACON_INTERVAL;
2408	il->hw_params.beacon_time_tsf_bits = IL3945_EXT_BEACON_TIME_POS;
2409
2410	return 0;
2411}
2412
2413unsigned int
2414il3945_hw_get_beacon_cmd(struct il_priv *il, struct il3945_frame *frame,
2415			 u8 rate)
2416{
2417	struct il3945_tx_beacon_cmd *tx_beacon_cmd;
2418	unsigned int frame_size;
2419
2420	tx_beacon_cmd = (struct il3945_tx_beacon_cmd *)&frame->u;
2421	memset(tx_beacon_cmd, 0, sizeof(*tx_beacon_cmd));
2422
2423	tx_beacon_cmd->tx.sta_id = il->hw_params.bcast_id;
2424	tx_beacon_cmd->tx.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
2425
2426	frame_size =
2427	    il3945_fill_beacon_frame(il, tx_beacon_cmd->frame,
2428				     sizeof(frame->u) - sizeof(*tx_beacon_cmd));
2429
2430	BUG_ON(frame_size > MAX_MPDU_SIZE);
2431	tx_beacon_cmd->tx.len = cpu_to_le16((u16) frame_size);
2432
2433	tx_beacon_cmd->tx.rate = rate;
2434	tx_beacon_cmd->tx.tx_flags =
2435	    (TX_CMD_FLG_SEQ_CTL_MSK | TX_CMD_FLG_TSF_MSK);
2436
2437	/* supp_rates[0] == OFDM start at IL_FIRST_OFDM_RATE */
2438	tx_beacon_cmd->tx.supp_rates[0] =
2439	    (IL_OFDM_BASIC_RATES_MASK >> IL_FIRST_OFDM_RATE) & 0xFF;
2440
2441	tx_beacon_cmd->tx.supp_rates[1] = (IL_CCK_BASIC_RATES_MASK & 0xF);
2442
2443	return sizeof(struct il3945_tx_beacon_cmd) + frame_size;
2444}
2445
2446void
2447il3945_hw_handler_setup(struct il_priv *il)
2448{
2449	il->handlers[C_TX] = il3945_hdl_tx;
2450	il->handlers[N_3945_RX] = il3945_hdl_rx;
2451}
2452
2453void
2454il3945_hw_setup_deferred_work(struct il_priv *il)
2455{
2456	INIT_DELAYED_WORK(&il->_3945.thermal_periodic,
2457			  il3945_bg_reg_txpower_periodic);
2458}
2459
2460void
2461il3945_hw_cancel_deferred_work(struct il_priv *il)
2462{
2463	cancel_delayed_work(&il->_3945.thermal_periodic);
2464}
2465
2466/* check contents of special bootstrap uCode SRAM */
2467static int
2468il3945_verify_bsm(struct il_priv *il)
2469{
2470	__le32 *image = il->ucode_boot.v_addr;
2471	u32 len = il->ucode_boot.len;
2472	u32 reg;
2473	u32 val;
2474
2475	D_INFO("Begin verify bsm\n");
2476
2477	/* verify BSM SRAM contents */
2478	val = il_rd_prph(il, BSM_WR_DWCOUNT_REG);
2479	for (reg = BSM_SRAM_LOWER_BOUND; reg < BSM_SRAM_LOWER_BOUND + len;
2480	     reg += sizeof(u32), image++) {
2481		val = il_rd_prph(il, reg);
2482		if (val != le32_to_cpu(*image)) {
2483			IL_ERR("BSM uCode verification failed at "
2484			       "addr 0x%08X+%u (of %u), is 0x%x, s/b 0x%x\n",
2485			       BSM_SRAM_LOWER_BOUND, reg - BSM_SRAM_LOWER_BOUND,
2486			       len, val, le32_to_cpu(*image));
2487			return -EIO;
2488		}
2489	}
2490
2491	D_INFO("BSM bootstrap uCode image OK\n");
2492
2493	return 0;
2494}
2495
2496/******************************************************************************
2497 *
2498 * EEPROM related functions
2499 *
2500 ******************************************************************************/
2501
2502/*
2503 * Clear the OWNER_MSK, to establish driver (instead of uCode running on
2504 * embedded controller) as EEPROM reader; each read is a series of pulses
2505 * to/from the EEPROM chip, not a single event, so even reads could conflict
2506 * if they weren't arbitrated by some ownership mechanism.  Here, the driver
2507 * simply claims ownership, which should be safe when this function is called
2508 * (i.e. before loading uCode!).
2509 */
2510static int
2511il3945_eeprom_acquire_semaphore(struct il_priv *il)
2512{
2513	_il_clear_bit(il, CSR_EEPROM_GP, CSR_EEPROM_GP_IF_OWNER_MSK);
2514	return 0;
2515}
2516
2517static void
2518il3945_eeprom_release_semaphore(struct il_priv *il)
2519{
2520	return;
2521}
2522
2523 /*
2524  * il3945_load_bsm - Load bootstrap instructions
2525  *
2526  * BSM operation:
2527  *
2528  * The Bootstrap State Machine (BSM) stores a short bootstrap uCode program
2529  * in special SRAM that does not power down during RFKILL.  When powering back
2530  * up after power-saving sleeps (or during initial uCode load), the BSM loads
2531  * the bootstrap program into the on-board processor, and starts it.
2532  *
2533  * The bootstrap program loads (via DMA) instructions and data for a new
2534  * program from host DRAM locations indicated by the host driver in the
2535  * BSM_DRAM_* registers.  Once the new program is loaded, it starts
2536  * automatically.
2537  *
2538  * When initializing the NIC, the host driver points the BSM to the
2539  * "initialize" uCode image.  This uCode sets up some internal data, then
2540  * notifies host via "initialize alive" that it is complete.
2541  *
2542  * The host then replaces the BSM_DRAM_* pointer values to point to the
2543  * normal runtime uCode instructions and a backup uCode data cache buffer
2544  * (filled initially with starting data values for the on-board processor),
2545  * then triggers the "initialize" uCode to load and launch the runtime uCode,
2546  * which begins normal operation.
2547  *
2548  * When doing a power-save shutdown, runtime uCode saves data SRAM into
2549  * the backup data cache in DRAM before SRAM is powered down.
2550  *
2551  * When powering back up, the BSM loads the bootstrap program.  This reloads
2552  * the runtime uCode instructions and the backup data cache into SRAM,
2553  * and re-launches the runtime uCode from where it left off.
2554  */
2555static int
2556il3945_load_bsm(struct il_priv *il)
2557{
2558	__le32 *image = il->ucode_boot.v_addr;
2559	u32 len = il->ucode_boot.len;
2560	dma_addr_t pinst;
2561	dma_addr_t pdata;
2562	u32 inst_len;
2563	u32 data_len;
2564	int rc;
2565	int i;
2566	u32 done;
2567	u32 reg_offset;
2568
2569	D_INFO("Begin load bsm\n");
2570
2571	/* make sure bootstrap program is no larger than BSM's SRAM size */
2572	if (len > IL39_MAX_BSM_SIZE)
2573		return -EINVAL;
2574
2575	/* Tell bootstrap uCode where to find the "Initialize" uCode
2576	 *   in host DRAM ... host DRAM physical address bits 31:0 for 3945.
2577	 * NOTE:  il3945_initialize_alive_start() will replace these values,
2578	 *        after the "initialize" uCode has run, to point to
2579	 *        runtime/protocol instructions and backup data cache. */
2580	pinst = il->ucode_init.p_addr;
2581	pdata = il->ucode_init_data.p_addr;
2582	inst_len = il->ucode_init.len;
2583	data_len = il->ucode_init_data.len;
2584
2585	il_wr_prph(il, BSM_DRAM_INST_PTR_REG, pinst);
2586	il_wr_prph(il, BSM_DRAM_DATA_PTR_REG, pdata);
2587	il_wr_prph(il, BSM_DRAM_INST_BYTECOUNT_REG, inst_len);
2588	il_wr_prph(il, BSM_DRAM_DATA_BYTECOUNT_REG, data_len);
2589
2590	/* Fill BSM memory with bootstrap instructions */
2591	for (reg_offset = BSM_SRAM_LOWER_BOUND;
2592	     reg_offset < BSM_SRAM_LOWER_BOUND + len;
2593	     reg_offset += sizeof(u32), image++)
2594		_il_wr_prph(il, reg_offset, le32_to_cpu(*image));
2595
2596	rc = il3945_verify_bsm(il);
2597	if (rc)
2598		return rc;
2599
2600	/* Tell BSM to copy from BSM SRAM into instruction SRAM, when asked */
2601	il_wr_prph(il, BSM_WR_MEM_SRC_REG, 0x0);
2602	il_wr_prph(il, BSM_WR_MEM_DST_REG, IL39_RTC_INST_LOWER_BOUND);
2603	il_wr_prph(il, BSM_WR_DWCOUNT_REG, len / sizeof(u32));
2604
2605	/* Load bootstrap code into instruction SRAM now,
2606	 *   to prepare to load "initialize" uCode */
2607	il_wr_prph(il, BSM_WR_CTRL_REG, BSM_WR_CTRL_REG_BIT_START);
2608
2609	/* Wait for load of bootstrap uCode to finish */
2610	for (i = 0; i < 100; i++) {
2611		done = il_rd_prph(il, BSM_WR_CTRL_REG);
2612		if (!(done & BSM_WR_CTRL_REG_BIT_START))
2613			break;
2614		udelay(10);
2615	}
2616	if (i < 100)
2617		D_INFO("BSM write complete, poll %d iterations\n", i);
2618	else {
2619		IL_ERR("BSM write did not complete!\n");
2620		return -EIO;
2621	}
2622
2623	/* Enable future boot loads whenever power management unit triggers it
2624	 *   (e.g. when powering back up after power-save shutdown) */
2625	il_wr_prph(il, BSM_WR_CTRL_REG, BSM_WR_CTRL_REG_BIT_START_EN);
2626
2627	return 0;
2628}
2629
2630const struct il_ops il3945_ops = {
2631	.txq_attach_buf_to_tfd = il3945_hw_txq_attach_buf_to_tfd,
2632	.txq_free_tfd = il3945_hw_txq_free_tfd,
2633	.txq_init = il3945_hw_tx_queue_init,
2634	.load_ucode = il3945_load_bsm,
2635	.dump_nic_error_log = il3945_dump_nic_error_log,
2636	.apm_init = il3945_apm_init,
2637	.send_tx_power = il3945_send_tx_power,
2638	.is_valid_rtc_data_addr = il3945_hw_valid_rtc_data_addr,
2639	.eeprom_acquire_semaphore = il3945_eeprom_acquire_semaphore,
2640	.eeprom_release_semaphore = il3945_eeprom_release_semaphore,
2641
2642	.rxon_assoc = il3945_send_rxon_assoc,
2643	.commit_rxon = il3945_commit_rxon,
2644
2645	.get_hcmd_size = il3945_get_hcmd_size,
2646	.build_addsta_hcmd = il3945_build_addsta_hcmd,
2647	.request_scan = il3945_request_scan,
2648	.post_scan = il3945_post_scan,
2649
2650	.post_associate = il3945_post_associate,
2651	.config_ap = il3945_config_ap,
2652	.manage_ibss_station = il3945_manage_ibss_station,
2653
2654	.send_led_cmd = il3945_send_led_cmd,
2655};
2656
2657static const struct il_cfg il3945_bg_cfg = {
2658	.name = "3945BG",
2659	.fw_name_pre = IL3945_FW_PRE,
2660	.ucode_api_max = IL3945_UCODE_API_MAX,
2661	.ucode_api_min = IL3945_UCODE_API_MIN,
2662	.sku = IL_SKU_G,
2663	.eeprom_ver = EEPROM_3945_EEPROM_VERSION,
2664	.mod_params = &il3945_mod_params,
2665	.led_mode = IL_LED_BLINK,
2666
2667	.eeprom_size = IL3945_EEPROM_IMG_SIZE,
2668	.num_of_queues = IL39_NUM_QUEUES,
2669	.pll_cfg_val = CSR39_ANA_PLL_CFG_VAL,
2670	.set_l0s = false,
2671	.use_bsm = true,
2672	.led_compensation = 64,
2673	.wd_timeout = IL_DEF_WD_TIMEOUT,
2674
2675	.regulatory_bands = {
2676		EEPROM_REGULATORY_BAND_1_CHANNELS,
2677		EEPROM_REGULATORY_BAND_2_CHANNELS,
2678		EEPROM_REGULATORY_BAND_3_CHANNELS,
2679		EEPROM_REGULATORY_BAND_4_CHANNELS,
2680		EEPROM_REGULATORY_BAND_5_CHANNELS,
2681		EEPROM_REGULATORY_BAND_NO_HT40,
2682		EEPROM_REGULATORY_BAND_NO_HT40,
2683	},
2684};
2685
2686static const struct il_cfg il3945_abg_cfg = {
2687	.name = "3945ABG",
2688	.fw_name_pre = IL3945_FW_PRE,
2689	.ucode_api_max = IL3945_UCODE_API_MAX,
2690	.ucode_api_min = IL3945_UCODE_API_MIN,
2691	.sku = IL_SKU_A | IL_SKU_G,
2692	.eeprom_ver = EEPROM_3945_EEPROM_VERSION,
2693	.mod_params = &il3945_mod_params,
2694	.led_mode = IL_LED_BLINK,
2695
2696	.eeprom_size = IL3945_EEPROM_IMG_SIZE,
2697	.num_of_queues = IL39_NUM_QUEUES,
2698	.pll_cfg_val = CSR39_ANA_PLL_CFG_VAL,
2699	.set_l0s = false,
2700	.use_bsm = true,
2701	.led_compensation = 64,
2702	.wd_timeout = IL_DEF_WD_TIMEOUT,
2703
2704	.regulatory_bands = {
2705		EEPROM_REGULATORY_BAND_1_CHANNELS,
2706		EEPROM_REGULATORY_BAND_2_CHANNELS,
2707		EEPROM_REGULATORY_BAND_3_CHANNELS,
2708		EEPROM_REGULATORY_BAND_4_CHANNELS,
2709		EEPROM_REGULATORY_BAND_5_CHANNELS,
2710		EEPROM_REGULATORY_BAND_NO_HT40,
2711		EEPROM_REGULATORY_BAND_NO_HT40,
2712	},
2713};
2714
2715const struct pci_device_id il3945_hw_card_ids[] = {
2716	{IL_PCI_DEVICE(0x4222, 0x1005, il3945_bg_cfg)},
2717	{IL_PCI_DEVICE(0x4222, 0x1034, il3945_bg_cfg)},
2718	{IL_PCI_DEVICE(0x4222, 0x1044, il3945_bg_cfg)},
2719	{IL_PCI_DEVICE(0x4227, 0x1014, il3945_bg_cfg)},
2720	{IL_PCI_DEVICE(0x4222, PCI_ANY_ID, il3945_abg_cfg)},
2721	{IL_PCI_DEVICE(0x4227, PCI_ANY_ID, il3945_abg_cfg)},
2722	{0}
2723};
2724
2725MODULE_DEVICE_TABLE(pci, il3945_hw_card_ids);
v4.10.11
 
   1/******************************************************************************
   2 *
   3 * Copyright(c) 2003 - 2011 Intel Corporation. All rights reserved.
   4 *
   5 * This program is free software; you can redistribute it and/or modify it
   6 * under the terms of version 2 of the GNU General Public License as
   7 * published by the Free Software Foundation.
   8 *
   9 * This program is distributed in the hope that it will be useful, but WITHOUT
  10 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  12 * more details.
  13 *
  14 * You should have received a copy of the GNU General Public License along with
  15 * this program; if not, write to the Free Software Foundation, Inc.,
  16 * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17 *
  18 * The full GNU General Public License is included in this distribution in the
  19 * file called LICENSE.
  20 *
  21 * Contact Information:
  22 *  Intel Linux Wireless <ilw@linux.intel.com>
  23 * Intel Corporation, 5200 N.E. Elam Young Parkway, Hillsboro, OR 97124-6497
  24 *
  25 *****************************************************************************/
  26
  27#include <linux/kernel.h>
  28#include <linux/module.h>
  29#include <linux/slab.h>
  30#include <linux/pci.h>
  31#include <linux/dma-mapping.h>
  32#include <linux/delay.h>
  33#include <linux/sched.h>
  34#include <linux/skbuff.h>
  35#include <linux/netdevice.h>
  36#include <linux/firmware.h>
  37#include <linux/etherdevice.h>
  38#include <asm/unaligned.h>
  39#include <net/mac80211.h>
  40
  41#include "common.h"
  42#include "3945.h"
  43
  44/* Send led command */
  45static int
  46il3945_send_led_cmd(struct il_priv *il, struct il_led_cmd *led_cmd)
  47{
  48	struct il_host_cmd cmd = {
  49		.id = C_LEDS,
  50		.len = sizeof(struct il_led_cmd),
  51		.data = led_cmd,
  52		.flags = CMD_ASYNC,
  53		.callback = NULL,
  54	};
  55
  56	return il_send_cmd(il, &cmd);
  57}
  58
  59#define IL_DECLARE_RATE_INFO(r, ip, in, rp, rn, pp, np)    \
  60	[RATE_##r##M_IDX] = { RATE_##r##M_PLCP,   \
  61				    RATE_##r##M_IEEE,   \
  62				    RATE_##ip##M_IDX, \
  63				    RATE_##in##M_IDX, \
  64				    RATE_##rp##M_IDX, \
  65				    RATE_##rn##M_IDX, \
  66				    RATE_##pp##M_IDX, \
  67				    RATE_##np##M_IDX, \
  68				    RATE_##r##M_IDX_TBL, \
  69				    RATE_##ip##M_IDX_TBL }
  70
  71/*
  72 * Parameter order:
  73 *   rate, prev rate, next rate, prev tgg rate, next tgg rate
  74 *
  75 * If there isn't a valid next or previous rate then INV is used which
  76 * maps to RATE_INVALID
  77 *
  78 */
  79const struct il3945_rate_info il3945_rates[RATE_COUNT_3945] = {
  80	IL_DECLARE_RATE_INFO(1, INV, 2, INV, 2, INV, 2),	/*  1mbps */
  81	IL_DECLARE_RATE_INFO(2, 1, 5, 1, 5, 1, 5),	/*  2mbps */
  82	IL_DECLARE_RATE_INFO(5, 2, 6, 2, 11, 2, 11),	/*5.5mbps */
  83	IL_DECLARE_RATE_INFO(11, 9, 12, 5, 12, 5, 18),	/* 11mbps */
  84	IL_DECLARE_RATE_INFO(6, 5, 9, 5, 11, 5, 11),	/*  6mbps */
  85	IL_DECLARE_RATE_INFO(9, 6, 11, 5, 11, 5, 11),	/*  9mbps */
  86	IL_DECLARE_RATE_INFO(12, 11, 18, 11, 18, 11, 18),	/* 12mbps */
  87	IL_DECLARE_RATE_INFO(18, 12, 24, 12, 24, 11, 24),	/* 18mbps */
  88	IL_DECLARE_RATE_INFO(24, 18, 36, 18, 36, 18, 36),	/* 24mbps */
  89	IL_DECLARE_RATE_INFO(36, 24, 48, 24, 48, 24, 48),	/* 36mbps */
  90	IL_DECLARE_RATE_INFO(48, 36, 54, 36, 54, 36, 54),	/* 48mbps */
  91	IL_DECLARE_RATE_INFO(54, 48, INV, 48, INV, 48, INV),	/* 54mbps */
  92};
  93
  94static inline u8
  95il3945_get_prev_ieee_rate(u8 rate_idx)
  96{
  97	u8 rate = il3945_rates[rate_idx].prev_ieee;
  98
  99	if (rate == RATE_INVALID)
 100		rate = rate_idx;
 101	return rate;
 102}
 103
 104/* 1 = enable the il3945_disable_events() function */
 105#define IL_EVT_DISABLE (0)
 106#define IL_EVT_DISABLE_SIZE (1532/32)
 107
 108/**
 109 * il3945_disable_events - Disable selected events in uCode event log
 110 *
 111 * Disable an event by writing "1"s into "disable"
 112 *   bitmap in SRAM.  Bit position corresponds to Event # (id/type).
 113 *   Default values of 0 enable uCode events to be logged.
 114 * Use for only special debugging.  This function is just a placeholder as-is,
 115 *   you'll need to provide the special bits! ...
 116 *   ... and set IL_EVT_DISABLE to 1. */
 117void
 118il3945_disable_events(struct il_priv *il)
 119{
 120	int i;
 121	u32 base;		/* SRAM address of event log header */
 122	u32 disable_ptr;	/* SRAM address of event-disable bitmap array */
 123	u32 array_size;		/* # of u32 entries in array */
 124	static const u32 evt_disable[IL_EVT_DISABLE_SIZE] = {
 125		0x00000000,	/*   31 -    0  Event id numbers */
 126		0x00000000,	/*   63 -   32 */
 127		0x00000000,	/*   95 -   64 */
 128		0x00000000,	/*  127 -   96 */
 129		0x00000000,	/*  159 -  128 */
 130		0x00000000,	/*  191 -  160 */
 131		0x00000000,	/*  223 -  192 */
 132		0x00000000,	/*  255 -  224 */
 133		0x00000000,	/*  287 -  256 */
 134		0x00000000,	/*  319 -  288 */
 135		0x00000000,	/*  351 -  320 */
 136		0x00000000,	/*  383 -  352 */
 137		0x00000000,	/*  415 -  384 */
 138		0x00000000,	/*  447 -  416 */
 139		0x00000000,	/*  479 -  448 */
 140		0x00000000,	/*  511 -  480 */
 141		0x00000000,	/*  543 -  512 */
 142		0x00000000,	/*  575 -  544 */
 143		0x00000000,	/*  607 -  576 */
 144		0x00000000,	/*  639 -  608 */
 145		0x00000000,	/*  671 -  640 */
 146		0x00000000,	/*  703 -  672 */
 147		0x00000000,	/*  735 -  704 */
 148		0x00000000,	/*  767 -  736 */
 149		0x00000000,	/*  799 -  768 */
 150		0x00000000,	/*  831 -  800 */
 151		0x00000000,	/*  863 -  832 */
 152		0x00000000,	/*  895 -  864 */
 153		0x00000000,	/*  927 -  896 */
 154		0x00000000,	/*  959 -  928 */
 155		0x00000000,	/*  991 -  960 */
 156		0x00000000,	/* 1023 -  992 */
 157		0x00000000,	/* 1055 - 1024 */
 158		0x00000000,	/* 1087 - 1056 */
 159		0x00000000,	/* 1119 - 1088 */
 160		0x00000000,	/* 1151 - 1120 */
 161		0x00000000,	/* 1183 - 1152 */
 162		0x00000000,	/* 1215 - 1184 */
 163		0x00000000,	/* 1247 - 1216 */
 164		0x00000000,	/* 1279 - 1248 */
 165		0x00000000,	/* 1311 - 1280 */
 166		0x00000000,	/* 1343 - 1312 */
 167		0x00000000,	/* 1375 - 1344 */
 168		0x00000000,	/* 1407 - 1376 */
 169		0x00000000,	/* 1439 - 1408 */
 170		0x00000000,	/* 1471 - 1440 */
 171		0x00000000,	/* 1503 - 1472 */
 172	};
 173
 174	base = le32_to_cpu(il->card_alive.log_event_table_ptr);
 175	if (!il3945_hw_valid_rtc_data_addr(base)) {
 176		IL_ERR("Invalid event log pointer 0x%08X\n", base);
 177		return;
 178	}
 179
 180	disable_ptr = il_read_targ_mem(il, base + (4 * sizeof(u32)));
 181	array_size = il_read_targ_mem(il, base + (5 * sizeof(u32)));
 182
 183	if (IL_EVT_DISABLE && array_size == IL_EVT_DISABLE_SIZE) {
 184		D_INFO("Disabling selected uCode log events at 0x%x\n",
 185		       disable_ptr);
 186		for (i = 0; i < IL_EVT_DISABLE_SIZE; i++)
 187			il_write_targ_mem(il, disable_ptr + (i * sizeof(u32)),
 188					  evt_disable[i]);
 189
 190	} else {
 191		D_INFO("Selected uCode log events may be disabled\n");
 192		D_INFO("  by writing \"1\"s into disable bitmap\n");
 193		D_INFO("  in SRAM at 0x%x, size %d u32s\n", disable_ptr,
 194		       array_size);
 195	}
 196
 197}
 198
 199static int
 200il3945_hwrate_to_plcp_idx(u8 plcp)
 201{
 202	int idx;
 203
 204	for (idx = 0; idx < RATE_COUNT_3945; idx++)
 205		if (il3945_rates[idx].plcp == plcp)
 206			return idx;
 207	return -1;
 208}
 209
 210#ifdef CONFIG_IWLEGACY_DEBUG
 211#define TX_STATUS_ENTRY(x) case TX_3945_STATUS_FAIL_ ## x: return #x
 212
 213static const char *
 214il3945_get_tx_fail_reason(u32 status)
 215{
 216	switch (status & TX_STATUS_MSK) {
 217	case TX_3945_STATUS_SUCCESS:
 218		return "SUCCESS";
 219		TX_STATUS_ENTRY(SHORT_LIMIT);
 220		TX_STATUS_ENTRY(LONG_LIMIT);
 221		TX_STATUS_ENTRY(FIFO_UNDERRUN);
 222		TX_STATUS_ENTRY(MGMNT_ABORT);
 223		TX_STATUS_ENTRY(NEXT_FRAG);
 224		TX_STATUS_ENTRY(LIFE_EXPIRE);
 225		TX_STATUS_ENTRY(DEST_PS);
 226		TX_STATUS_ENTRY(ABORTED);
 227		TX_STATUS_ENTRY(BT_RETRY);
 228		TX_STATUS_ENTRY(STA_INVALID);
 229		TX_STATUS_ENTRY(FRAG_DROPPED);
 230		TX_STATUS_ENTRY(TID_DISABLE);
 231		TX_STATUS_ENTRY(FRAME_FLUSHED);
 232		TX_STATUS_ENTRY(INSUFFICIENT_CF_POLL);
 233		TX_STATUS_ENTRY(TX_LOCKED);
 234		TX_STATUS_ENTRY(NO_BEACON_ON_RADAR);
 235	}
 236
 237	return "UNKNOWN";
 238}
 239#else
 240static inline const char *
 241il3945_get_tx_fail_reason(u32 status)
 242{
 243	return "";
 244}
 245#endif
 246
 247/*
 248 * get ieee prev rate from rate scale table.
 249 * for A and B mode we need to overright prev
 250 * value
 251 */
 252int
 253il3945_rs_next_rate(struct il_priv *il, int rate)
 254{
 255	int next_rate = il3945_get_prev_ieee_rate(rate);
 256
 257	switch (il->band) {
 258	case NL80211_BAND_5GHZ:
 259		if (rate == RATE_12M_IDX)
 260			next_rate = RATE_9M_IDX;
 261		else if (rate == RATE_6M_IDX)
 262			next_rate = RATE_6M_IDX;
 263		break;
 264	case NL80211_BAND_2GHZ:
 265		if (!(il->_3945.sta_supp_rates & IL_OFDM_RATES_MASK) &&
 266		    il_is_associated(il)) {
 267			if (rate == RATE_11M_IDX)
 268				next_rate = RATE_5M_IDX;
 269		}
 270		break;
 271
 272	default:
 273		break;
 274	}
 275
 276	return next_rate;
 277}
 278
 279/**
 280 * il3945_tx_queue_reclaim - Reclaim Tx queue entries already Tx'd
 281 *
 282 * When FW advances 'R' idx, all entries between old and new 'R' idx
 283 * need to be reclaimed. As result, some free space forms. If there is
 284 * enough free space (> low mark), wake the stack that feeds us.
 285 */
 286static void
 287il3945_tx_queue_reclaim(struct il_priv *il, int txq_id, int idx)
 288{
 289	struct il_tx_queue *txq = &il->txq[txq_id];
 290	struct il_queue *q = &txq->q;
 291	struct sk_buff *skb;
 292
 293	BUG_ON(txq_id == IL39_CMD_QUEUE_NUM);
 294
 295	for (idx = il_queue_inc_wrap(idx, q->n_bd); q->read_ptr != idx;
 296	     q->read_ptr = il_queue_inc_wrap(q->read_ptr, q->n_bd)) {
 297
 298		skb = txq->skbs[txq->q.read_ptr];
 299		ieee80211_tx_status_irqsafe(il->hw, skb);
 300		txq->skbs[txq->q.read_ptr] = NULL;
 301		il->ops->txq_free_tfd(il, txq);
 302	}
 303
 304	if (il_queue_space(q) > q->low_mark && txq_id >= 0 &&
 305	    txq_id != IL39_CMD_QUEUE_NUM && il->mac80211_registered)
 306		il_wake_queue(il, txq);
 307}
 308
 309/**
 310 * il3945_hdl_tx - Handle Tx response
 311 */
 312static void
 313il3945_hdl_tx(struct il_priv *il, struct il_rx_buf *rxb)
 314{
 315	struct il_rx_pkt *pkt = rxb_addr(rxb);
 316	u16 sequence = le16_to_cpu(pkt->hdr.sequence);
 317	int txq_id = SEQ_TO_QUEUE(sequence);
 318	int idx = SEQ_TO_IDX(sequence);
 319	struct il_tx_queue *txq = &il->txq[txq_id];
 320	struct ieee80211_tx_info *info;
 321	struct il3945_tx_resp *tx_resp = (void *)&pkt->u.raw[0];
 322	u32 status = le32_to_cpu(tx_resp->status);
 323	int rate_idx;
 324	int fail;
 325
 326	if (idx >= txq->q.n_bd || il_queue_used(&txq->q, idx) == 0) {
 327		IL_ERR("Read idx for DMA queue txq_id (%d) idx %d "
 328		       "is out of range [0-%d] %d %d\n", txq_id, idx,
 329		       txq->q.n_bd, txq->q.write_ptr, txq->q.read_ptr);
 330		return;
 331	}
 332
 333	/*
 334	 * Firmware will not transmit frame on passive channel, if it not yet
 335	 * received some valid frame on that channel. When this error happen
 336	 * we have to wait until firmware will unblock itself i.e. when we
 337	 * note received beacon or other frame. We unblock queues in
 338	 * il3945_pass_packet_to_mac80211 or in il_mac_bss_info_changed.
 339	 */
 340	if (unlikely((status & TX_STATUS_MSK) == TX_STATUS_FAIL_PASSIVE_NO_RX) &&
 341	    il->iw_mode == NL80211_IFTYPE_STATION) {
 342		il_stop_queues_by_reason(il, IL_STOP_REASON_PASSIVE);
 343		D_INFO("Stopped queues - RX waiting on passive channel\n");
 344	}
 345
 346	txq->time_stamp = jiffies;
 347	info = IEEE80211_SKB_CB(txq->skbs[txq->q.read_ptr]);
 348	ieee80211_tx_info_clear_status(info);
 349
 350	/* Fill the MRR chain with some info about on-chip retransmissions */
 351	rate_idx = il3945_hwrate_to_plcp_idx(tx_resp->rate);
 352	if (info->band == NL80211_BAND_5GHZ)
 353		rate_idx -= IL_FIRST_OFDM_RATE;
 354
 355	fail = tx_resp->failure_frame;
 356
 357	info->status.rates[0].idx = rate_idx;
 358	info->status.rates[0].count = fail + 1;	/* add final attempt */
 359
 360	/* tx_status->rts_retry_count = tx_resp->failure_rts; */
 361	info->flags |=
 362	    ((status & TX_STATUS_MSK) ==
 363	     TX_STATUS_SUCCESS) ? IEEE80211_TX_STAT_ACK : 0;
 364
 365	D_TX("Tx queue %d Status %s (0x%08x) plcp rate %d retries %d\n", txq_id,
 366	     il3945_get_tx_fail_reason(status), status, tx_resp->rate,
 367	     tx_resp->failure_frame);
 368
 369	D_TX_REPLY("Tx queue reclaim %d\n", idx);
 370	il3945_tx_queue_reclaim(il, txq_id, idx);
 371
 372	if (status & TX_ABORT_REQUIRED_MSK)
 373		IL_ERR("TODO:  Implement Tx ABORT REQUIRED!!!\n");
 374}
 375
 376/*****************************************************************************
 377 *
 378 * Intel PRO/Wireless 3945ABG/BG Network Connection
 379 *
 380 *  RX handler implementations
 381 *
 382 *****************************************************************************/
 383#ifdef CONFIG_IWLEGACY_DEBUGFS
 384static void
 385il3945_accumulative_stats(struct il_priv *il, __le32 * stats)
 386{
 387	int i;
 388	__le32 *prev_stats;
 389	u32 *accum_stats;
 390	u32 *delta, *max_delta;
 391
 392	prev_stats = (__le32 *) &il->_3945.stats;
 393	accum_stats = (u32 *) &il->_3945.accum_stats;
 394	delta = (u32 *) &il->_3945.delta_stats;
 395	max_delta = (u32 *) &il->_3945.max_delta;
 396
 397	for (i = sizeof(__le32); i < sizeof(struct il3945_notif_stats);
 398	     i +=
 399	     sizeof(__le32), stats++, prev_stats++, delta++, max_delta++,
 400	     accum_stats++) {
 401		if (le32_to_cpu(*stats) > le32_to_cpu(*prev_stats)) {
 402			*delta =
 403			    (le32_to_cpu(*stats) - le32_to_cpu(*prev_stats));
 404			*accum_stats += *delta;
 405			if (*delta > *max_delta)
 406				*max_delta = *delta;
 407		}
 408	}
 409
 410	/* reset accumulative stats for "no-counter" type stats */
 411	il->_3945.accum_stats.general.temperature =
 412	    il->_3945.stats.general.temperature;
 413	il->_3945.accum_stats.general.ttl_timestamp =
 414	    il->_3945.stats.general.ttl_timestamp;
 415}
 416#endif
 417
 418void
 419il3945_hdl_stats(struct il_priv *il, struct il_rx_buf *rxb)
 420{
 421	struct il_rx_pkt *pkt = rxb_addr(rxb);
 422
 423	D_RX("Statistics notification received (%d vs %d).\n",
 424	     (int)sizeof(struct il3945_notif_stats),
 425	     le32_to_cpu(pkt->len_n_flags) & IL_RX_FRAME_SIZE_MSK);
 426#ifdef CONFIG_IWLEGACY_DEBUGFS
 427	il3945_accumulative_stats(il, (__le32 *) &pkt->u.raw);
 428#endif
 429
 430	memcpy(&il->_3945.stats, pkt->u.raw, sizeof(il->_3945.stats));
 431}
 432
 433void
 434il3945_hdl_c_stats(struct il_priv *il, struct il_rx_buf *rxb)
 435{
 436	struct il_rx_pkt *pkt = rxb_addr(rxb);
 437	__le32 *flag = (__le32 *) &pkt->u.raw;
 438
 439	if (le32_to_cpu(*flag) & UCODE_STATS_CLEAR_MSK) {
 440#ifdef CONFIG_IWLEGACY_DEBUGFS
 441		memset(&il->_3945.accum_stats, 0,
 442		       sizeof(struct il3945_notif_stats));
 443		memset(&il->_3945.delta_stats, 0,
 444		       sizeof(struct il3945_notif_stats));
 445		memset(&il->_3945.max_delta, 0,
 446		       sizeof(struct il3945_notif_stats));
 447#endif
 448		D_RX("Statistics have been cleared\n");
 449	}
 450	il3945_hdl_stats(il, rxb);
 451}
 452
 453/******************************************************************************
 454 *
 455 * Misc. internal state and helper functions
 456 *
 457 ******************************************************************************/
 458
 459/* This is necessary only for a number of stats, see the caller. */
 460static int
 461il3945_is_network_packet(struct il_priv *il, struct ieee80211_hdr *header)
 462{
 463	/* Filter incoming packets to determine if they are targeted toward
 464	 * this network, discarding packets coming from ourselves */
 465	switch (il->iw_mode) {
 466	case NL80211_IFTYPE_ADHOC:	/* Header: Dest. | Source    | BSSID */
 467		/* packets to our IBSS update information */
 468		return ether_addr_equal_64bits(header->addr3, il->bssid);
 469	case NL80211_IFTYPE_STATION:	/* Header: Dest. | AP{BSSID} | Source */
 470		/* packets to our IBSS update information */
 471		return ether_addr_equal_64bits(header->addr2, il->bssid);
 472	default:
 473		return 1;
 474	}
 475}
 476
 477#define SMALL_PACKET_SIZE 256
 478
 479static void
 480il3945_pass_packet_to_mac80211(struct il_priv *il, struct il_rx_buf *rxb,
 481			       struct ieee80211_rx_status *stats)
 482{
 483	struct il_rx_pkt *pkt = rxb_addr(rxb);
 484	struct ieee80211_hdr *hdr = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
 485	struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
 486	struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
 487	u32 len = le16_to_cpu(rx_hdr->len);
 488	struct sk_buff *skb;
 489	__le16 fc = hdr->frame_control;
 490	u32 fraglen = PAGE_SIZE << il->hw_params.rx_page_order;
 491
 492	/* We received data from the HW, so stop the watchdog */
 493	if (unlikely(len + IL39_RX_FRAME_SIZE > fraglen)) {
 494		D_DROP("Corruption detected!\n");
 495		return;
 496	}
 497
 498	/* We only process data packets if the interface is open */
 499	if (unlikely(!il->is_open)) {
 500		D_DROP("Dropping packet while interface is not open.\n");
 501		return;
 502	}
 503
 504	if (unlikely(test_bit(IL_STOP_REASON_PASSIVE, &il->stop_reason))) {
 505		il_wake_queues_by_reason(il, IL_STOP_REASON_PASSIVE);
 506		D_INFO("Woke queues - frame received on passive channel\n");
 507	}
 508
 509	skb = dev_alloc_skb(SMALL_PACKET_SIZE);
 510	if (!skb) {
 511		IL_ERR("dev_alloc_skb failed\n");
 512		return;
 513	}
 514
 515	if (!il3945_mod_params.sw_crypto)
 516		il_set_decrypted_flag(il, (struct ieee80211_hdr *)pkt,
 517				      le32_to_cpu(rx_end->status), stats);
 518
 519	/* If frame is small enough to fit into skb->head, copy it
 520	 * and do not consume a full page
 521	 */
 522	if (len <= SMALL_PACKET_SIZE) {
 523		memcpy(skb_put(skb, len), rx_hdr->payload, len);
 524	} else {
 525		skb_add_rx_frag(skb, 0, rxb->page,
 526				(void *)rx_hdr->payload - (void *)pkt, len,
 527				fraglen);
 528		il->alloc_rxb_page--;
 529		rxb->page = NULL;
 530	}
 531	il_update_stats(il, false, fc, len);
 532	memcpy(IEEE80211_SKB_RXCB(skb), stats, sizeof(*stats));
 533
 534	ieee80211_rx(il->hw, skb);
 535}
 536
 537#define IL_DELAY_NEXT_SCAN_AFTER_ASSOC (HZ*6)
 538
 539static void
 540il3945_hdl_rx(struct il_priv *il, struct il_rx_buf *rxb)
 541{
 542	struct ieee80211_hdr *header;
 543	struct ieee80211_rx_status rx_status = {};
 544	struct il_rx_pkt *pkt = rxb_addr(rxb);
 545	struct il3945_rx_frame_stats *rx_stats = IL_RX_STATS(pkt);
 546	struct il3945_rx_frame_hdr *rx_hdr = IL_RX_HDR(pkt);
 547	struct il3945_rx_frame_end *rx_end = IL_RX_END(pkt);
 548	u16 rx_stats_sig_avg __maybe_unused = le16_to_cpu(rx_stats->sig_avg);
 549	u16 rx_stats_noise_diff __maybe_unused =
 550	    le16_to_cpu(rx_stats->noise_diff);
 551	u8 network_packet;
 552
 553	rx_status.flag = 0;
 554	rx_status.mactime = le64_to_cpu(rx_end->timestamp);
 555	rx_status.band =
 556	    (rx_hdr->
 557	     phy_flags & RX_RES_PHY_FLAGS_BAND_24_MSK) ? NL80211_BAND_2GHZ :
 558	    NL80211_BAND_5GHZ;
 559	rx_status.freq =
 560	    ieee80211_channel_to_frequency(le16_to_cpu(rx_hdr->channel),
 561					   rx_status.band);
 562
 563	rx_status.rate_idx = il3945_hwrate_to_plcp_idx(rx_hdr->rate);
 564	if (rx_status.band == NL80211_BAND_5GHZ)
 565		rx_status.rate_idx -= IL_FIRST_OFDM_RATE;
 566
 567	rx_status.antenna =
 568	    (le16_to_cpu(rx_hdr->phy_flags) & RX_RES_PHY_FLAGS_ANTENNA_MSK) >>
 569	    4;
 570
 571	/* set the preamble flag if appropriate */
 572	if (rx_hdr->phy_flags & RX_RES_PHY_FLAGS_SHORT_PREAMBLE_MSK)
 573		rx_status.flag |= RX_FLAG_SHORTPRE;
 574
 575	if ((unlikely(rx_stats->phy_count > 20))) {
 576		D_DROP("dsp size out of range [0,20]: %d\n",
 577		       rx_stats->phy_count);
 578		return;
 579	}
 580
 581	if (!(rx_end->status & RX_RES_STATUS_NO_CRC32_ERROR) ||
 582	    !(rx_end->status & RX_RES_STATUS_NO_RXE_OVERFLOW)) {
 583		D_RX("Bad CRC or FIFO: 0x%08X.\n", rx_end->status);
 584		return;
 585	}
 586
 587	/* Convert 3945's rssi indicator to dBm */
 588	rx_status.signal = rx_stats->rssi - IL39_RSSI_OFFSET;
 589
 590	D_STATS("Rssi %d sig_avg %d noise_diff %d\n", rx_status.signal,
 591		rx_stats_sig_avg, rx_stats_noise_diff);
 592
 593	header = (struct ieee80211_hdr *)IL_RX_DATA(pkt);
 594
 595	network_packet = il3945_is_network_packet(il, header);
 596
 597	D_STATS("[%c] %d RSSI:%d Signal:%u, Rate:%u\n",
 598		network_packet ? '*' : ' ', le16_to_cpu(rx_hdr->channel),
 599		rx_status.signal, rx_status.signal, rx_status.rate_idx);
 600
 601	if (network_packet) {
 602		il->_3945.last_beacon_time =
 603		    le32_to_cpu(rx_end->beacon_timestamp);
 604		il->_3945.last_tsf = le64_to_cpu(rx_end->timestamp);
 605		il->_3945.last_rx_rssi = rx_status.signal;
 606	}
 607
 608	il3945_pass_packet_to_mac80211(il, rxb, &rx_status);
 609}
 610
 611int
 612il3945_hw_txq_attach_buf_to_tfd(struct il_priv *il, struct il_tx_queue *txq,
 613				dma_addr_t addr, u16 len, u8 reset, u8 pad)
 614{
 615	int count;
 616	struct il_queue *q;
 617	struct il3945_tfd *tfd, *tfd_tmp;
 618
 619	q = &txq->q;
 620	tfd_tmp = (struct il3945_tfd *)txq->tfds;
 621	tfd = &tfd_tmp[q->write_ptr];
 622
 623	if (reset)
 624		memset(tfd, 0, sizeof(*tfd));
 625
 626	count = TFD_CTL_COUNT_GET(le32_to_cpu(tfd->control_flags));
 627
 628	if (count >= NUM_TFD_CHUNKS || count < 0) {
 629		IL_ERR("Error can not send more than %d chunks\n",
 630		       NUM_TFD_CHUNKS);
 631		return -EINVAL;
 632	}
 633
 634	tfd->tbs[count].addr = cpu_to_le32(addr);
 635	tfd->tbs[count].len = cpu_to_le32(len);
 636
 637	count++;
 638
 639	tfd->control_flags =
 640	    cpu_to_le32(TFD_CTL_COUNT_SET(count) | TFD_CTL_PAD_SET(pad));
 641
 642	return 0;
 643}
 644
 645/**
 646 * il3945_hw_txq_free_tfd - Free one TFD, those at idx [txq->q.read_ptr]
 647 *
 648 * Does NOT advance any idxes
 649 */
 650void
 651il3945_hw_txq_free_tfd(struct il_priv *il, struct il_tx_queue *txq)
 652{
 653	struct il3945_tfd *tfd_tmp = (struct il3945_tfd *)txq->tfds;
 654	int idx = txq->q.read_ptr;
 655	struct il3945_tfd *tfd = &tfd_tmp[idx];
 656	struct pci_dev *dev = il->pci_dev;
 657	int i;
 658	int counter;
 659
 660	/* sanity check */
 661	counter = TFD_CTL_COUNT_GET(le32_to_cpu(tfd->control_flags));
 662	if (counter > NUM_TFD_CHUNKS) {
 663		IL_ERR("Too many chunks: %i\n", counter);
 664		/* @todo issue fatal error, it is quite serious situation */
 665		return;
 666	}
 667
 668	/* Unmap tx_cmd */
 669	if (counter)
 670		pci_unmap_single(dev, dma_unmap_addr(&txq->meta[idx], mapping),
 
 671				 dma_unmap_len(&txq->meta[idx], len),
 672				 PCI_DMA_TODEVICE);
 673
 674	/* unmap chunks if any */
 675
 676	for (i = 1; i < counter; i++)
 677		pci_unmap_single(dev, le32_to_cpu(tfd->tbs[i].addr),
 678				 le32_to_cpu(tfd->tbs[i].len),
 679				 PCI_DMA_TODEVICE);
 680
 681	/* free SKB */
 682	if (txq->skbs) {
 683		struct sk_buff *skb = txq->skbs[txq->q.read_ptr];
 684
 685		/* can be called from irqs-disabled context */
 686		if (skb) {
 687			dev_kfree_skb_any(skb);
 688			txq->skbs[txq->q.read_ptr] = NULL;
 689		}
 690	}
 691}
 692
 693/**
 694 * il3945_hw_build_tx_cmd_rate - Add rate portion to TX_CMD:
 695 *
 696*/
 697void
 698il3945_hw_build_tx_cmd_rate(struct il_priv *il, struct il_device_cmd *cmd,
 699			    struct ieee80211_tx_info *info,
 700			    struct ieee80211_hdr *hdr, int sta_id)
 701{
 702	u16 hw_value = ieee80211_get_tx_rate(il->hw, info)->hw_value;
 703	u16 rate_idx = min(hw_value & 0xffff, RATE_COUNT_3945 - 1);
 704	u16 rate_mask;
 705	int rate;
 706	const u8 rts_retry_limit = 7;
 707	u8 data_retry_limit;
 708	__le32 tx_flags;
 709	__le16 fc = hdr->frame_control;
 710	struct il3945_tx_cmd *tx_cmd = (struct il3945_tx_cmd *)cmd->cmd.payload;
 711
 712	rate = il3945_rates[rate_idx].plcp;
 713	tx_flags = tx_cmd->tx_flags;
 714
 715	/* We need to figure out how to get the sta->supp_rates while
 716	 * in this running context */
 717	rate_mask = RATES_MASK_3945;
 718
 719	/* Set retry limit on DATA packets and Probe Responses */
 720	if (ieee80211_is_probe_resp(fc))
 721		data_retry_limit = 3;
 722	else
 723		data_retry_limit = IL_DEFAULT_TX_RETRY;
 724	tx_cmd->data_retry_limit = data_retry_limit;
 725	/* Set retry limit on RTS packets */
 726	tx_cmd->rts_retry_limit = min(data_retry_limit, rts_retry_limit);
 727
 728	tx_cmd->rate = rate;
 729	tx_cmd->tx_flags = tx_flags;
 730
 731	/* OFDM */
 732	tx_cmd->supp_rates[0] =
 733	    ((rate_mask & IL_OFDM_RATES_MASK) >> IL_FIRST_OFDM_RATE) & 0xFF;
 734
 735	/* CCK */
 736	tx_cmd->supp_rates[1] = (rate_mask & 0xF);
 737
 738	D_RATE("Tx sta id: %d, rate: %d (plcp), flags: 0x%4X "
 739	       "cck/ofdm mask: 0x%x/0x%x\n", sta_id, tx_cmd->rate,
 740	       le32_to_cpu(tx_cmd->tx_flags), tx_cmd->supp_rates[1],
 741	       tx_cmd->supp_rates[0]);
 742}
 743
 744static u8
 745il3945_sync_sta(struct il_priv *il, int sta_id, u16 tx_rate)
 746{
 747	unsigned long flags_spin;
 748	struct il_station_entry *station;
 749
 750	if (sta_id == IL_INVALID_STATION)
 751		return IL_INVALID_STATION;
 752
 753	spin_lock_irqsave(&il->sta_lock, flags_spin);
 754	station = &il->stations[sta_id];
 755
 756	station->sta.sta.modify_mask = STA_MODIFY_TX_RATE_MSK;
 757	station->sta.rate_n_flags = cpu_to_le16(tx_rate);
 758	station->sta.mode = STA_CONTROL_MODIFY_MSK;
 759	il_send_add_sta(il, &station->sta, CMD_ASYNC);
 760	spin_unlock_irqrestore(&il->sta_lock, flags_spin);
 761
 762	D_RATE("SCALE sync station %d to rate %d\n", sta_id, tx_rate);
 763	return sta_id;
 764}
 765
 766static void
 767il3945_set_pwr_vmain(struct il_priv *il)
 768{
 769/*
 770 * (for documentation purposes)
 771 * to set power to V_AUX, do
 772
 773		if (pci_pme_capable(il->pci_dev, PCI_D3cold)) {
 774			il_set_bits_mask_prph(il, APMG_PS_CTRL_REG,
 775					APMG_PS_CTRL_VAL_PWR_SRC_VAUX,
 776					~APMG_PS_CTRL_MSK_PWR_SRC);
 777
 778			_il_poll_bit(il, CSR_GPIO_IN,
 779				     CSR_GPIO_IN_VAL_VAUX_PWR_SRC,
 780				     CSR_GPIO_IN_BIT_AUX_POWER, 5000);
 781		}
 782 */
 783
 784	il_set_bits_mask_prph(il, APMG_PS_CTRL_REG,
 785			      APMG_PS_CTRL_VAL_PWR_SRC_VMAIN,
 786			      ~APMG_PS_CTRL_MSK_PWR_SRC);
 787
 788	_il_poll_bit(il, CSR_GPIO_IN, CSR_GPIO_IN_VAL_VMAIN_PWR_SRC,
 789		     CSR_GPIO_IN_BIT_AUX_POWER, 5000);
 790}
 791
 792static int
 793il3945_rx_init(struct il_priv *il, struct il_rx_queue *rxq)
 794{
 795	il_wr(il, FH39_RCSR_RBD_BASE(0), rxq->bd_dma);
 796	il_wr(il, FH39_RCSR_RPTR_ADDR(0), rxq->rb_stts_dma);
 797	il_wr(il, FH39_RCSR_WPTR(0), 0);
 798	il_wr(il, FH39_RCSR_CONFIG(0),
 799	      FH39_RCSR_RX_CONFIG_REG_VAL_DMA_CHNL_EN_ENABLE |
 800	      FH39_RCSR_RX_CONFIG_REG_VAL_RDRBD_EN_ENABLE |
 801	      FH39_RCSR_RX_CONFIG_REG_BIT_WR_STTS_EN |
 802	      FH39_RCSR_RX_CONFIG_REG_VAL_MAX_FRAG_SIZE_128 | (RX_QUEUE_SIZE_LOG
 803							       <<
 804							       FH39_RCSR_RX_CONFIG_REG_POS_RBDC_SIZE)
 805	      | FH39_RCSR_RX_CONFIG_REG_VAL_IRQ_DEST_INT_HOST | (1 <<
 806								 FH39_RCSR_RX_CONFIG_REG_POS_IRQ_RBTH)
 807	      | FH39_RCSR_RX_CONFIG_REG_VAL_MSG_MODE_FH);
 808
 809	/* fake read to flush all prev I/O */
 810	il_rd(il, FH39_RSSR_CTRL);
 811
 812	return 0;
 813}
 814
 815static int
 816il3945_tx_reset(struct il_priv *il)
 817{
 818	/* bypass mode */
 819	il_wr_prph(il, ALM_SCD_MODE_REG, 0x2);
 820
 821	/* RA 0 is active */
 822	il_wr_prph(il, ALM_SCD_ARASTAT_REG, 0x01);
 823
 824	/* all 6 fifo are active */
 825	il_wr_prph(il, ALM_SCD_TXFACT_REG, 0x3f);
 826
 827	il_wr_prph(il, ALM_SCD_SBYP_MODE_1_REG, 0x010000);
 828	il_wr_prph(il, ALM_SCD_SBYP_MODE_2_REG, 0x030002);
 829	il_wr_prph(il, ALM_SCD_TXF4MF_REG, 0x000004);
 830	il_wr_prph(il, ALM_SCD_TXF5MF_REG, 0x000005);
 831
 832	il_wr(il, FH39_TSSR_CBB_BASE, il->_3945.shared_phys);
 833
 834	il_wr(il, FH39_TSSR_MSG_CONFIG,
 835	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TXPD_ON |
 836	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RD_TXPD_ON |
 837	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_MAX_FRAG_SIZE_128B |
 838	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_SNOOP_RD_TFD_ON |
 839	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RD_CBB_ON |
 840	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_ORDER_RSP_WAIT_TH |
 841	      FH39_TSSR_TX_MSG_CONFIG_REG_VAL_RSP_WAIT_TH);
 842
 843	return 0;
 844}
 845
 846/**
 847 * il3945_txq_ctx_reset - Reset TX queue context
 848 *
 849 * Destroys all DMA structures and initialize them again
 850 */
 851static int
 852il3945_txq_ctx_reset(struct il_priv *il)
 853{
 854	int rc, txq_id;
 855
 856	il3945_hw_txq_ctx_free(il);
 857
 858	/* allocate tx queue structure */
 859	rc = il_alloc_txq_mem(il);
 860	if (rc)
 861		return rc;
 862
 863	/* Tx CMD queue */
 864	rc = il3945_tx_reset(il);
 865	if (rc)
 866		goto error;
 867
 868	/* Tx queue(s) */
 869	for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++) {
 870		rc = il_tx_queue_init(il, txq_id);
 871		if (rc) {
 872			IL_ERR("Tx %d queue init failed\n", txq_id);
 873			goto error;
 874		}
 875	}
 876
 877	return rc;
 878
 879error:
 880	il3945_hw_txq_ctx_free(il);
 881	return rc;
 882}
 883
 884/*
 885 * Start up 3945's basic functionality after it has been reset
 886 * (e.g. after platform boot, or shutdown via il_apm_stop())
 887 * NOTE:  This does not load uCode nor start the embedded processor
 888 */
 889static int
 890il3945_apm_init(struct il_priv *il)
 891{
 892	int ret = il_apm_init(il);
 893
 894	/* Clear APMG (NIC's internal power management) interrupts */
 895	il_wr_prph(il, APMG_RTC_INT_MSK_REG, 0x0);
 896	il_wr_prph(il, APMG_RTC_INT_STT_REG, 0xFFFFFFFF);
 897
 898	/* Reset radio chip */
 899	il_set_bits_prph(il, APMG_PS_CTRL_REG, APMG_PS_CTRL_VAL_RESET_REQ);
 900	udelay(5);
 901	il_clear_bits_prph(il, APMG_PS_CTRL_REG, APMG_PS_CTRL_VAL_RESET_REQ);
 902
 903	return ret;
 904}
 905
 906static void
 907il3945_nic_config(struct il_priv *il)
 908{
 909	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
 910	unsigned long flags;
 911	u8 rev_id = il->pci_dev->revision;
 912
 913	spin_lock_irqsave(&il->lock, flags);
 914
 915	/* Determine HW type */
 916	D_INFO("HW Revision ID = 0x%X\n", rev_id);
 917
 918	if (rev_id & PCI_CFG_REV_ID_BIT_RTP)
 919		D_INFO("RTP type\n");
 920	else if (rev_id & PCI_CFG_REV_ID_BIT_BASIC_SKU) {
 921		D_INFO("3945 RADIO-MB type\n");
 922		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 923			   CSR39_HW_IF_CONFIG_REG_BIT_3945_MB);
 924	} else {
 925		D_INFO("3945 RADIO-MM type\n");
 926		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 927			   CSR39_HW_IF_CONFIG_REG_BIT_3945_MM);
 928	}
 929
 930	if (EEPROM_SKU_CAP_OP_MODE_MRC == eeprom->sku_cap) {
 931		D_INFO("SKU OP mode is mrc\n");
 932		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 933			   CSR39_HW_IF_CONFIG_REG_BIT_SKU_MRC);
 934	} else
 935		D_INFO("SKU OP mode is basic\n");
 936
 937	if ((eeprom->board_revision & 0xF0) == 0xD0) {
 938		D_INFO("3945ABG revision is 0x%X\n", eeprom->board_revision);
 939		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 940			   CSR39_HW_IF_CONFIG_REG_BIT_BOARD_TYPE);
 941	} else {
 942		D_INFO("3945ABG revision is 0x%X\n", eeprom->board_revision);
 943		il_clear_bit(il, CSR_HW_IF_CONFIG_REG,
 944			     CSR39_HW_IF_CONFIG_REG_BIT_BOARD_TYPE);
 945	}
 946
 947	if (eeprom->almgor_m_version <= 1) {
 948		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 949			   CSR39_HW_IF_CONFIG_REG_BITS_SILICON_TYPE_A);
 950		D_INFO("Card M type A version is 0x%X\n",
 951		       eeprom->almgor_m_version);
 952	} else {
 953		D_INFO("Card M type B version is 0x%X\n",
 954		       eeprom->almgor_m_version);
 955		il_set_bit(il, CSR_HW_IF_CONFIG_REG,
 956			   CSR39_HW_IF_CONFIG_REG_BITS_SILICON_TYPE_B);
 957	}
 958	spin_unlock_irqrestore(&il->lock, flags);
 959
 960	if (eeprom->sku_cap & EEPROM_SKU_CAP_SW_RF_KILL_ENABLE)
 961		D_RF_KILL("SW RF KILL supported in EEPROM.\n");
 962
 963	if (eeprom->sku_cap & EEPROM_SKU_CAP_HW_RF_KILL_ENABLE)
 964		D_RF_KILL("HW RF KILL supported in EEPROM.\n");
 965}
 966
 967int
 968il3945_hw_nic_init(struct il_priv *il)
 969{
 970	int rc;
 971	unsigned long flags;
 972	struct il_rx_queue *rxq = &il->rxq;
 973
 974	spin_lock_irqsave(&il->lock, flags);
 975	il3945_apm_init(il);
 976	spin_unlock_irqrestore(&il->lock, flags);
 977
 978	il3945_set_pwr_vmain(il);
 979	il3945_nic_config(il);
 980
 981	/* Allocate the RX queue, or reset if it is already allocated */
 982	if (!rxq->bd) {
 983		rc = il_rx_queue_alloc(il);
 984		if (rc) {
 985			IL_ERR("Unable to initialize Rx queue\n");
 986			return -ENOMEM;
 987		}
 988	} else
 989		il3945_rx_queue_reset(il, rxq);
 990
 991	il3945_rx_replenish(il);
 992
 993	il3945_rx_init(il, rxq);
 994
 995	/* Look at using this instead:
 996	   rxq->need_update = 1;
 997	   il_rx_queue_update_write_ptr(il, rxq);
 998	 */
 999
1000	il_wr(il, FH39_RCSR_WPTR(0), rxq->write & ~7);
1001
1002	rc = il3945_txq_ctx_reset(il);
1003	if (rc)
1004		return rc;
1005
1006	set_bit(S_INIT, &il->status);
1007
1008	return 0;
1009}
1010
1011/**
1012 * il3945_hw_txq_ctx_free - Free TXQ Context
1013 *
1014 * Destroy all TX DMA queues and structures
1015 */
1016void
1017il3945_hw_txq_ctx_free(struct il_priv *il)
1018{
1019	int txq_id;
1020
1021	/* Tx queues */
1022	if (il->txq) {
1023		for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++)
1024			if (txq_id == IL39_CMD_QUEUE_NUM)
1025				il_cmd_queue_free(il);
1026			else
1027				il_tx_queue_free(il, txq_id);
1028	}
1029
1030	/* free tx queue structure */
1031	il_free_txq_mem(il);
1032}
1033
1034void
1035il3945_hw_txq_ctx_stop(struct il_priv *il)
1036{
1037	int txq_id;
1038
1039	/* stop SCD */
1040	_il_wr_prph(il, ALM_SCD_MODE_REG, 0);
1041	_il_wr_prph(il, ALM_SCD_TXFACT_REG, 0);
1042
1043	/* reset TFD queues */
1044	for (txq_id = 0; txq_id < il->hw_params.max_txq_num; txq_id++) {
1045		_il_wr(il, FH39_TCSR_CONFIG(txq_id), 0x0);
1046		_il_poll_bit(il, FH39_TSSR_TX_STATUS,
1047			     FH39_TSSR_TX_STATUS_REG_MSK_CHNL_IDLE(txq_id),
1048			     FH39_TSSR_TX_STATUS_REG_MSK_CHNL_IDLE(txq_id),
1049			     1000);
1050	}
1051}
1052
1053/**
1054 * il3945_hw_reg_adjust_power_by_temp
1055 * return idx delta into power gain settings table
1056*/
1057static int
1058il3945_hw_reg_adjust_power_by_temp(int new_reading, int old_reading)
1059{
1060	return (new_reading - old_reading) * (-11) / 100;
1061}
1062
1063/**
1064 * il3945_hw_reg_temp_out_of_range - Keep temperature in sane range
1065 */
1066static inline int
1067il3945_hw_reg_temp_out_of_range(int temperature)
1068{
1069	return (temperature < -260 || temperature > 25) ? 1 : 0;
1070}
1071
1072int
1073il3945_hw_get_temperature(struct il_priv *il)
1074{
1075	return _il_rd(il, CSR_UCODE_DRV_GP2);
1076}
1077
1078/**
1079 * il3945_hw_reg_txpower_get_temperature
1080 * get the current temperature by reading from NIC
1081*/
1082static int
1083il3945_hw_reg_txpower_get_temperature(struct il_priv *il)
1084{
1085	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1086	int temperature;
1087
1088	temperature = il3945_hw_get_temperature(il);
1089
1090	/* driver's okay range is -260 to +25.
1091	 *   human readable okay range is 0 to +285 */
1092	D_INFO("Temperature: %d\n", temperature + IL_TEMP_CONVERT);
1093
1094	/* handle insane temp reading */
1095	if (il3945_hw_reg_temp_out_of_range(temperature)) {
1096		IL_ERR("Error bad temperature value  %d\n", temperature);
1097
1098		/* if really really hot(?),
1099		 *   substitute the 3rd band/group's temp measured at factory */
1100		if (il->last_temperature > 100)
1101			temperature = eeprom->groups[2].temperature;
1102		else		/* else use most recent "sane" value from driver */
1103			temperature = il->last_temperature;
1104	}
1105
1106	return temperature;	/* raw, not "human readable" */
1107}
1108
1109/* Adjust Txpower only if temperature variance is greater than threshold.
1110 *
1111 * Both are lower than older versions' 9 degrees */
1112#define IL_TEMPERATURE_LIMIT_TIMER   6
1113
1114/**
1115 * il3945_is_temp_calib_needed - determines if new calibration is needed
1116 *
1117 * records new temperature in tx_mgr->temperature.
1118 * replaces tx_mgr->last_temperature *only* if calib needed
1119 *    (assumes caller will actually do the calibration!). */
1120static int
1121il3945_is_temp_calib_needed(struct il_priv *il)
1122{
1123	int temp_diff;
1124
1125	il->temperature = il3945_hw_reg_txpower_get_temperature(il);
1126	temp_diff = il->temperature - il->last_temperature;
1127
1128	/* get absolute value */
1129	if (temp_diff < 0) {
1130		D_POWER("Getting cooler, delta %d,\n", temp_diff);
1131		temp_diff = -temp_diff;
1132	} else if (temp_diff == 0)
1133		D_POWER("Same temp,\n");
1134	else
1135		D_POWER("Getting warmer, delta %d,\n", temp_diff);
1136
1137	/* if we don't need calibration, *don't* update last_temperature */
1138	if (temp_diff < IL_TEMPERATURE_LIMIT_TIMER) {
1139		D_POWER("Timed thermal calib not needed\n");
1140		return 0;
1141	}
1142
1143	D_POWER("Timed thermal calib needed\n");
1144
1145	/* assume that caller will actually do calib ...
1146	 *   update the "last temperature" value */
1147	il->last_temperature = il->temperature;
1148	return 1;
1149}
1150
1151#define IL_MAX_GAIN_ENTRIES 78
1152#define IL_CCK_FROM_OFDM_POWER_DIFF  -5
1153#define IL_CCK_FROM_OFDM_IDX_DIFF (10)
1154
1155/* radio and DSP power table, each step is 1/2 dB.
1156 * 1st number is for RF analog gain, 2nd number is for DSP pre-DAC gain. */
1157static struct il3945_tx_power power_gain_table[2][IL_MAX_GAIN_ENTRIES] = {
1158	{
1159	 {251, 127},		/* 2.4 GHz, highest power */
1160	 {251, 127},
1161	 {251, 127},
1162	 {251, 127},
1163	 {251, 125},
1164	 {251, 110},
1165	 {251, 105},
1166	 {251, 98},
1167	 {187, 125},
1168	 {187, 115},
1169	 {187, 108},
1170	 {187, 99},
1171	 {243, 119},
1172	 {243, 111},
1173	 {243, 105},
1174	 {243, 97},
1175	 {243, 92},
1176	 {211, 106},
1177	 {211, 100},
1178	 {179, 120},
1179	 {179, 113},
1180	 {179, 107},
1181	 {147, 125},
1182	 {147, 119},
1183	 {147, 112},
1184	 {147, 106},
1185	 {147, 101},
1186	 {147, 97},
1187	 {147, 91},
1188	 {115, 107},
1189	 {235, 121},
1190	 {235, 115},
1191	 {235, 109},
1192	 {203, 127},
1193	 {203, 121},
1194	 {203, 115},
1195	 {203, 108},
1196	 {203, 102},
1197	 {203, 96},
1198	 {203, 92},
1199	 {171, 110},
1200	 {171, 104},
1201	 {171, 98},
1202	 {139, 116},
1203	 {227, 125},
1204	 {227, 119},
1205	 {227, 113},
1206	 {227, 107},
1207	 {227, 101},
1208	 {227, 96},
1209	 {195, 113},
1210	 {195, 106},
1211	 {195, 102},
1212	 {195, 95},
1213	 {163, 113},
1214	 {163, 106},
1215	 {163, 102},
1216	 {163, 95},
1217	 {131, 113},
1218	 {131, 106},
1219	 {131, 102},
1220	 {131, 95},
1221	 {99, 113},
1222	 {99, 106},
1223	 {99, 102},
1224	 {99, 95},
1225	 {67, 113},
1226	 {67, 106},
1227	 {67, 102},
1228	 {67, 95},
1229	 {35, 113},
1230	 {35, 106},
1231	 {35, 102},
1232	 {35, 95},
1233	 {3, 113},
1234	 {3, 106},
1235	 {3, 102},
1236	 {3, 95}		/* 2.4 GHz, lowest power */
1237	},
1238	{
1239	 {251, 127},		/* 5.x GHz, highest power */
1240	 {251, 120},
1241	 {251, 114},
1242	 {219, 119},
1243	 {219, 101},
1244	 {187, 113},
1245	 {187, 102},
1246	 {155, 114},
1247	 {155, 103},
1248	 {123, 117},
1249	 {123, 107},
1250	 {123, 99},
1251	 {123, 92},
1252	 {91, 108},
1253	 {59, 125},
1254	 {59, 118},
1255	 {59, 109},
1256	 {59, 102},
1257	 {59, 96},
1258	 {59, 90},
1259	 {27, 104},
1260	 {27, 98},
1261	 {27, 92},
1262	 {115, 118},
1263	 {115, 111},
1264	 {115, 104},
1265	 {83, 126},
1266	 {83, 121},
1267	 {83, 113},
1268	 {83, 105},
1269	 {83, 99},
1270	 {51, 118},
1271	 {51, 111},
1272	 {51, 104},
1273	 {51, 98},
1274	 {19, 116},
1275	 {19, 109},
1276	 {19, 102},
1277	 {19, 98},
1278	 {19, 93},
1279	 {171, 113},
1280	 {171, 107},
1281	 {171, 99},
1282	 {139, 120},
1283	 {139, 113},
1284	 {139, 107},
1285	 {139, 99},
1286	 {107, 120},
1287	 {107, 113},
1288	 {107, 107},
1289	 {107, 99},
1290	 {75, 120},
1291	 {75, 113},
1292	 {75, 107},
1293	 {75, 99},
1294	 {43, 120},
1295	 {43, 113},
1296	 {43, 107},
1297	 {43, 99},
1298	 {11, 120},
1299	 {11, 113},
1300	 {11, 107},
1301	 {11, 99},
1302	 {131, 107},
1303	 {131, 99},
1304	 {99, 120},
1305	 {99, 113},
1306	 {99, 107},
1307	 {99, 99},
1308	 {67, 120},
1309	 {67, 113},
1310	 {67, 107},
1311	 {67, 99},
1312	 {35, 120},
1313	 {35, 113},
1314	 {35, 107},
1315	 {35, 99},
1316	 {3, 120}		/* 5.x GHz, lowest power */
1317	}
1318};
1319
1320static inline u8
1321il3945_hw_reg_fix_power_idx(int idx)
1322{
1323	if (idx < 0)
1324		return 0;
1325	if (idx >= IL_MAX_GAIN_ENTRIES)
1326		return IL_MAX_GAIN_ENTRIES - 1;
1327	return (u8) idx;
1328}
1329
1330/* Kick off thermal recalibration check every 60 seconds */
1331#define REG_RECALIB_PERIOD (60)
1332
1333/**
1334 * il3945_hw_reg_set_scan_power - Set Tx power for scan probe requests
1335 *
1336 * Set (in our channel info database) the direct scan Tx power for 1 Mbit (CCK)
1337 * or 6 Mbit (OFDM) rates.
1338 */
1339static void
1340il3945_hw_reg_set_scan_power(struct il_priv *il, u32 scan_tbl_idx, s32 rate_idx,
1341			     const s8 *clip_pwrs,
1342			     struct il_channel_info *ch_info, int band_idx)
1343{
1344	struct il3945_scan_power_info *scan_power_info;
1345	s8 power;
1346	u8 power_idx;
1347
1348	scan_power_info = &ch_info->scan_pwr_info[scan_tbl_idx];
1349
1350	/* use this channel group's 6Mbit clipping/saturation pwr,
1351	 *   but cap at regulatory scan power restriction (set during init
1352	 *   based on eeprom channel data) for this channel.  */
1353	power = min(ch_info->scan_power, clip_pwrs[RATE_6M_IDX_TBL]);
1354
1355	power = min(power, il->tx_power_user_lmt);
1356	scan_power_info->requested_power = power;
1357
1358	/* find difference between new scan *power* and current "normal"
1359	 *   Tx *power* for 6Mb.  Use this difference (x2) to adjust the
1360	 *   current "normal" temperature-compensated Tx power *idx* for
1361	 *   this rate (1Mb or 6Mb) to yield new temp-compensated scan power
1362	 *   *idx*. */
1363	power_idx =
1364	    ch_info->power_info[rate_idx].power_table_idx - (power -
1365							     ch_info->
1366							     power_info
1367							     [RATE_6M_IDX_TBL].
1368							     requested_power) *
1369	    2;
1370
1371	/* store reference idx that we use when adjusting *all* scan
1372	 *   powers.  So we can accommodate user (all channel) or spectrum
1373	 *   management (single channel) power changes "between" temperature
1374	 *   feedback compensation procedures.
1375	 * don't force fit this reference idx into gain table; it may be a
1376	 *   negative number.  This will help avoid errors when we're at
1377	 *   the lower bounds (highest gains, for warmest temperatures)
1378	 *   of the table. */
1379
1380	/* don't exceed table bounds for "real" setting */
1381	power_idx = il3945_hw_reg_fix_power_idx(power_idx);
1382
1383	scan_power_info->power_table_idx = power_idx;
1384	scan_power_info->tpc.tx_gain =
1385	    power_gain_table[band_idx][power_idx].tx_gain;
1386	scan_power_info->tpc.dsp_atten =
1387	    power_gain_table[band_idx][power_idx].dsp_atten;
1388}
1389
1390/**
1391 * il3945_send_tx_power - fill in Tx Power command with gain settings
1392 *
1393 * Configures power settings for all rates for the current channel,
1394 * using values from channel info struct, and send to NIC
1395 */
1396static int
1397il3945_send_tx_power(struct il_priv *il)
1398{
1399	int rate_idx, i;
1400	const struct il_channel_info *ch_info = NULL;
1401	struct il3945_txpowertable_cmd txpower = {
1402		.channel = il->active.channel,
1403	};
1404	u16 chan;
1405
1406	if (WARN_ONCE
1407	    (test_bit(S_SCAN_HW, &il->status),
1408	     "TX Power requested while scanning!\n"))
1409		return -EAGAIN;
1410
1411	chan = le16_to_cpu(il->active.channel);
1412
1413	txpower.band = (il->band == NL80211_BAND_5GHZ) ? 0 : 1;
1414	ch_info = il_get_channel_info(il, il->band, chan);
1415	if (!ch_info) {
1416		IL_ERR("Failed to get channel info for channel %d [%d]\n", chan,
1417		       il->band);
1418		return -EINVAL;
1419	}
1420
1421	if (!il_is_channel_valid(ch_info)) {
1422		D_POWER("Not calling TX_PWR_TBL_CMD on " "non-Tx channel.\n");
1423		return 0;
1424	}
1425
1426	/* fill cmd with power settings for all rates for current channel */
1427	/* Fill OFDM rate */
1428	for (rate_idx = IL_FIRST_OFDM_RATE, i = 0;
1429	     rate_idx <= IL39_LAST_OFDM_RATE; rate_idx++, i++) {
1430
1431		txpower.power[i].tpc = ch_info->power_info[i].tpc;
1432		txpower.power[i].rate = il3945_rates[rate_idx].plcp;
1433
1434		D_POWER("ch %d:%d rf %d dsp %3d rate code 0x%02x\n",
1435			le16_to_cpu(txpower.channel), txpower.band,
1436			txpower.power[i].tpc.tx_gain,
1437			txpower.power[i].tpc.dsp_atten, txpower.power[i].rate);
1438	}
1439	/* Fill CCK rates */
1440	for (rate_idx = IL_FIRST_CCK_RATE; rate_idx <= IL_LAST_CCK_RATE;
1441	     rate_idx++, i++) {
1442		txpower.power[i].tpc = ch_info->power_info[i].tpc;
1443		txpower.power[i].rate = il3945_rates[rate_idx].plcp;
1444
1445		D_POWER("ch %d:%d rf %d dsp %3d rate code 0x%02x\n",
1446			le16_to_cpu(txpower.channel), txpower.band,
1447			txpower.power[i].tpc.tx_gain,
1448			txpower.power[i].tpc.dsp_atten, txpower.power[i].rate);
1449	}
1450
1451	return il_send_cmd_pdu(il, C_TX_PWR_TBL,
1452			       sizeof(struct il3945_txpowertable_cmd),
1453			       &txpower);
1454
1455}
1456
1457/**
1458 * il3945_hw_reg_set_new_power - Configures power tables at new levels
1459 * @ch_info: Channel to update.  Uses power_info.requested_power.
1460 *
1461 * Replace requested_power and base_power_idx ch_info fields for
1462 * one channel.
1463 *
1464 * Called if user or spectrum management changes power preferences.
1465 * Takes into account h/w and modulation limitations (clip power).
1466 *
1467 * This does *not* send anything to NIC, just sets up ch_info for one channel.
1468 *
1469 * NOTE: reg_compensate_for_temperature_dif() *must* be run after this to
1470 *	 properly fill out the scan powers, and actual h/w gain settings,
1471 *	 and send changes to NIC
1472 */
1473static int
1474il3945_hw_reg_set_new_power(struct il_priv *il, struct il_channel_info *ch_info)
1475{
1476	struct il3945_channel_power_info *power_info;
1477	int power_changed = 0;
1478	int i;
1479	const s8 *clip_pwrs;
1480	int power;
1481
1482	/* Get this chnlgrp's rate-to-max/clip-powers table */
1483	clip_pwrs = il->_3945.clip_groups[ch_info->group_idx].clip_powers;
1484
1485	/* Get this channel's rate-to-current-power settings table */
1486	power_info = ch_info->power_info;
1487
1488	/* update OFDM Txpower settings */
1489	for (i = RATE_6M_IDX_TBL; i <= RATE_54M_IDX_TBL; i++, ++power_info) {
1490		int delta_idx;
1491
1492		/* limit new power to be no more than h/w capability */
1493		power = min(ch_info->curr_txpow, clip_pwrs[i]);
1494		if (power == power_info->requested_power)
1495			continue;
1496
1497		/* find difference between old and new requested powers,
1498		 *    update base (non-temp-compensated) power idx */
1499		delta_idx = (power - power_info->requested_power) * 2;
1500		power_info->base_power_idx -= delta_idx;
1501
1502		/* save new requested power value */
1503		power_info->requested_power = power;
1504
1505		power_changed = 1;
1506	}
1507
1508	/* update CCK Txpower settings, based on OFDM 12M setting ...
1509	 *    ... all CCK power settings for a given channel are the *same*. */
1510	if (power_changed) {
1511		power =
1512		    ch_info->power_info[RATE_12M_IDX_TBL].requested_power +
1513		    IL_CCK_FROM_OFDM_POWER_DIFF;
1514
1515		/* do all CCK rates' il3945_channel_power_info structures */
1516		for (i = RATE_1M_IDX_TBL; i <= RATE_11M_IDX_TBL; i++) {
1517			power_info->requested_power = power;
1518			power_info->base_power_idx =
1519			    ch_info->power_info[RATE_12M_IDX_TBL].
1520			    base_power_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
1521			++power_info;
1522		}
1523	}
1524
1525	return 0;
1526}
1527
1528/**
1529 * il3945_hw_reg_get_ch_txpower_limit - returns new power limit for channel
1530 *
1531 * NOTE: Returned power limit may be less (but not more) than requested,
1532 *	 based strictly on regulatory (eeprom and spectrum mgt) limitations
1533 *	 (no consideration for h/w clipping limitations).
1534 */
1535static int
1536il3945_hw_reg_get_ch_txpower_limit(struct il_channel_info *ch_info)
1537{
1538	s8 max_power;
1539
1540#if 0
1541	/* if we're using TGd limits, use lower of TGd or EEPROM */
1542	if (ch_info->tgd_data.max_power != 0)
1543		max_power =
1544		    min(ch_info->tgd_data.max_power,
1545			ch_info->eeprom.max_power_avg);
1546
1547	/* else just use EEPROM limits */
1548	else
1549#endif
1550		max_power = ch_info->eeprom.max_power_avg;
1551
1552	return min(max_power, ch_info->max_power_avg);
1553}
1554
1555/**
1556 * il3945_hw_reg_comp_txpower_temp - Compensate for temperature
1557 *
1558 * Compensate txpower settings of *all* channels for temperature.
1559 * This only accounts for the difference between current temperature
1560 *   and the factory calibration temperatures, and bases the new settings
1561 *   on the channel's base_power_idx.
1562 *
1563 * If RxOn is "associated", this sends the new Txpower to NIC!
1564 */
1565static int
1566il3945_hw_reg_comp_txpower_temp(struct il_priv *il)
1567{
1568	struct il_channel_info *ch_info = NULL;
1569	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1570	int delta_idx;
1571	const s8 *clip_pwrs;	/* array of h/w max power levels for each rate */
1572	u8 a_band;
1573	u8 rate_idx;
1574	u8 scan_tbl_idx;
1575	u8 i;
1576	int ref_temp;
1577	int temperature = il->temperature;
1578
1579	if (il->disable_tx_power_cal || test_bit(S_SCANNING, &il->status)) {
1580		/* do not perform tx power calibration */
1581		return 0;
1582	}
1583	/* set up new Tx power info for each and every channel, 2.4 and 5.x */
1584	for (i = 0; i < il->channel_count; i++) {
1585		ch_info = &il->channel_info[i];
1586		a_band = il_is_channel_a_band(ch_info);
1587
1588		/* Get this chnlgrp's factory calibration temperature */
1589		ref_temp = (s16) eeprom->groups[ch_info->group_idx].temperature;
1590
1591		/* get power idx adjustment based on current and factory
1592		 * temps */
1593		delta_idx =
1594		    il3945_hw_reg_adjust_power_by_temp(temperature, ref_temp);
1595
1596		/* set tx power value for all rates, OFDM and CCK */
1597		for (rate_idx = 0; rate_idx < RATE_COUNT_3945; rate_idx++) {
1598			int power_idx =
1599			    ch_info->power_info[rate_idx].base_power_idx;
1600
1601			/* temperature compensate */
1602			power_idx += delta_idx;
1603
1604			/* stay within table range */
1605			power_idx = il3945_hw_reg_fix_power_idx(power_idx);
1606			ch_info->power_info[rate_idx].power_table_idx =
1607			    (u8) power_idx;
1608			ch_info->power_info[rate_idx].tpc =
1609			    power_gain_table[a_band][power_idx];
1610		}
1611
1612		/* Get this chnlgrp's rate-to-max/clip-powers table */
1613		clip_pwrs =
1614		    il->_3945.clip_groups[ch_info->group_idx].clip_powers;
1615
1616		/* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
1617		for (scan_tbl_idx = 0; scan_tbl_idx < IL_NUM_SCAN_RATES;
1618		     scan_tbl_idx++) {
1619			s32 actual_idx =
1620			    (scan_tbl_idx ==
1621			     0) ? RATE_1M_IDX_TBL : RATE_6M_IDX_TBL;
1622			il3945_hw_reg_set_scan_power(il, scan_tbl_idx,
1623						     actual_idx, clip_pwrs,
1624						     ch_info, a_band);
1625		}
1626	}
1627
1628	/* send Txpower command for current channel to ucode */
1629	return il->ops->send_tx_power(il);
1630}
1631
1632int
1633il3945_hw_reg_set_txpower(struct il_priv *il, s8 power)
1634{
1635	struct il_channel_info *ch_info;
1636	s8 max_power;
1637	u8 a_band;
1638	u8 i;
1639
1640	if (il->tx_power_user_lmt == power) {
1641		D_POWER("Requested Tx power same as current " "limit: %ddBm.\n",
1642			power);
1643		return 0;
1644	}
1645
1646	D_POWER("Setting upper limit clamp to %ddBm.\n", power);
1647	il->tx_power_user_lmt = power;
1648
1649	/* set up new Tx powers for each and every channel, 2.4 and 5.x */
1650
1651	for (i = 0; i < il->channel_count; i++) {
1652		ch_info = &il->channel_info[i];
1653		a_band = il_is_channel_a_band(ch_info);
1654
1655		/* find minimum power of all user and regulatory constraints
1656		 *    (does not consider h/w clipping limitations) */
1657		max_power = il3945_hw_reg_get_ch_txpower_limit(ch_info);
1658		max_power = min(power, max_power);
1659		if (max_power != ch_info->curr_txpow) {
1660			ch_info->curr_txpow = max_power;
1661
1662			/* this considers the h/w clipping limitations */
1663			il3945_hw_reg_set_new_power(il, ch_info);
1664		}
1665	}
1666
1667	/* update txpower settings for all channels,
1668	 *   send to NIC if associated. */
1669	il3945_is_temp_calib_needed(il);
1670	il3945_hw_reg_comp_txpower_temp(il);
1671
1672	return 0;
1673}
1674
1675static int
1676il3945_send_rxon_assoc(struct il_priv *il)
1677{
1678	int rc = 0;
1679	struct il_rx_pkt *pkt;
1680	struct il3945_rxon_assoc_cmd rxon_assoc;
1681	struct il_host_cmd cmd = {
1682		.id = C_RXON_ASSOC,
1683		.len = sizeof(rxon_assoc),
1684		.flags = CMD_WANT_SKB,
1685		.data = &rxon_assoc,
1686	};
1687	const struct il_rxon_cmd *rxon1 = &il->staging;
1688	const struct il_rxon_cmd *rxon2 = &il->active;
1689
1690	if (rxon1->flags == rxon2->flags &&
1691	    rxon1->filter_flags == rxon2->filter_flags &&
1692	    rxon1->cck_basic_rates == rxon2->cck_basic_rates &&
1693	    rxon1->ofdm_basic_rates == rxon2->ofdm_basic_rates) {
1694		D_INFO("Using current RXON_ASSOC.  Not resending.\n");
1695		return 0;
1696	}
1697
1698	rxon_assoc.flags = il->staging.flags;
1699	rxon_assoc.filter_flags = il->staging.filter_flags;
1700	rxon_assoc.ofdm_basic_rates = il->staging.ofdm_basic_rates;
1701	rxon_assoc.cck_basic_rates = il->staging.cck_basic_rates;
1702	rxon_assoc.reserved = 0;
1703
1704	rc = il_send_cmd_sync(il, &cmd);
1705	if (rc)
1706		return rc;
1707
1708	pkt = (struct il_rx_pkt *)cmd.reply_page;
1709	if (pkt->hdr.flags & IL_CMD_FAILED_MSK) {
1710		IL_ERR("Bad return from C_RXON_ASSOC command\n");
1711		rc = -EIO;
1712	}
1713
1714	il_free_pages(il, cmd.reply_page);
1715
1716	return rc;
1717}
1718
1719/**
1720 * il3945_commit_rxon - commit staging_rxon to hardware
1721 *
1722 * The RXON command in staging_rxon is committed to the hardware and
1723 * the active_rxon structure is updated with the new data.  This
1724 * function correctly transitions out of the RXON_ASSOC_MSK state if
1725 * a HW tune is required based on the RXON structure changes.
1726 */
1727int
1728il3945_commit_rxon(struct il_priv *il)
1729{
1730	/* cast away the const for active_rxon in this function */
1731	struct il3945_rxon_cmd *active_rxon = (void *)&il->active;
1732	struct il3945_rxon_cmd *staging_rxon = (void *)&il->staging;
1733	int rc = 0;
1734	bool new_assoc = !!(staging_rxon->filter_flags & RXON_FILTER_ASSOC_MSK);
1735
1736	if (test_bit(S_EXIT_PENDING, &il->status))
1737		return -EINVAL;
1738
1739	if (!il_is_alive(il))
1740		return -1;
1741
1742	/* always get timestamp with Rx frame */
1743	staging_rxon->flags |= RXON_FLG_TSF2HOST_MSK;
1744
1745	/* select antenna */
1746	staging_rxon->flags &= ~(RXON_FLG_DIS_DIV_MSK | RXON_FLG_ANT_SEL_MSK);
1747	staging_rxon->flags |= il3945_get_antenna_flags(il);
1748
1749	rc = il_check_rxon_cmd(il);
1750	if (rc) {
1751		IL_ERR("Invalid RXON configuration.  Not committing.\n");
1752		return -EINVAL;
1753	}
1754
1755	/* If we don't need to send a full RXON, we can use
1756	 * il3945_rxon_assoc_cmd which is used to reconfigure filter
1757	 * and other flags for the current radio configuration. */
1758	if (!il_full_rxon_required(il)) {
1759		rc = il_send_rxon_assoc(il);
1760		if (rc) {
1761			IL_ERR("Error setting RXON_ASSOC "
1762			       "configuration (%d).\n", rc);
1763			return rc;
1764		}
1765
1766		memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
1767		/*
1768		 * We do not commit tx power settings while channel changing,
1769		 * do it now if tx power changed.
1770		 */
1771		il_set_tx_power(il, il->tx_power_next, false);
1772		return 0;
1773	}
1774
1775	/* If we are currently associated and the new config requires
1776	 * an RXON_ASSOC and the new config wants the associated mask enabled,
1777	 * we must clear the associated from the active configuration
1778	 * before we apply the new config */
1779	if (il_is_associated(il) && new_assoc) {
1780		D_INFO("Toggling associated bit on current RXON\n");
1781		active_rxon->filter_flags &= ~RXON_FILTER_ASSOC_MSK;
1782
1783		/*
1784		 * reserved4 and 5 could have been filled by the iwlcore code.
1785		 * Let's clear them before pushing to the 3945.
1786		 */
1787		active_rxon->reserved4 = 0;
1788		active_rxon->reserved5 = 0;
1789		rc = il_send_cmd_pdu(il, C_RXON, sizeof(struct il3945_rxon_cmd),
1790				     &il->active);
1791
1792		/* If the mask clearing failed then we set
1793		 * active_rxon back to what it was previously */
1794		if (rc) {
1795			active_rxon->filter_flags |= RXON_FILTER_ASSOC_MSK;
1796			IL_ERR("Error clearing ASSOC_MSK on current "
1797			       "configuration (%d).\n", rc);
1798			return rc;
1799		}
1800		il_clear_ucode_stations(il);
1801		il_restore_stations(il);
1802	}
1803
1804	D_INFO("Sending RXON\n" "* with%s RXON_FILTER_ASSOC_MSK\n"
1805	       "* channel = %d\n" "* bssid = %pM\n", (new_assoc ? "" : "out"),
1806	       le16_to_cpu(staging_rxon->channel), staging_rxon->bssid_addr);
1807
1808	/*
1809	 * reserved4 and 5 could have been filled by the iwlcore code.
1810	 * Let's clear them before pushing to the 3945.
1811	 */
1812	staging_rxon->reserved4 = 0;
1813	staging_rxon->reserved5 = 0;
1814
1815	il_set_rxon_hwcrypto(il, !il3945_mod_params.sw_crypto);
1816
1817	/* Apply the new configuration */
1818	rc = il_send_cmd_pdu(il, C_RXON, sizeof(struct il3945_rxon_cmd),
1819			     staging_rxon);
1820	if (rc) {
1821		IL_ERR("Error setting new configuration (%d).\n", rc);
1822		return rc;
1823	}
1824
1825	memcpy(active_rxon, staging_rxon, sizeof(*active_rxon));
1826
1827	if (!new_assoc) {
1828		il_clear_ucode_stations(il);
1829		il_restore_stations(il);
1830	}
1831
1832	/* If we issue a new RXON command which required a tune then we must
1833	 * send a new TXPOWER command or we won't be able to Tx any frames */
1834	rc = il_set_tx_power(il, il->tx_power_next, true);
1835	if (rc) {
1836		IL_ERR("Error setting Tx power (%d).\n", rc);
1837		return rc;
1838	}
1839
1840	/* Init the hardware's rate fallback order based on the band */
1841	rc = il3945_init_hw_rate_table(il);
1842	if (rc) {
1843		IL_ERR("Error setting HW rate table: %02X\n", rc);
1844		return -EIO;
1845	}
1846
1847	return 0;
1848}
1849
1850/**
1851 * il3945_reg_txpower_periodic -  called when time to check our temperature.
1852 *
1853 * -- reset periodic timer
1854 * -- see if temp has changed enough to warrant re-calibration ... if so:
1855 *     -- correct coeffs for temp (can reset temp timer)
1856 *     -- save this temp as "last",
1857 *     -- send new set of gain settings to NIC
1858 * NOTE:  This should continue working, even when we're not associated,
1859 *   so we can keep our internal table of scan powers current. */
1860void
1861il3945_reg_txpower_periodic(struct il_priv *il)
1862{
1863	/* This will kick in the "brute force"
1864	 * il3945_hw_reg_comp_txpower_temp() below */
1865	if (!il3945_is_temp_calib_needed(il))
1866		goto reschedule;
1867
1868	/* Set up a new set of temp-adjusted TxPowers, send to NIC.
1869	 * This is based *only* on current temperature,
1870	 * ignoring any previous power measurements */
1871	il3945_hw_reg_comp_txpower_temp(il);
1872
1873reschedule:
1874	queue_delayed_work(il->workqueue, &il->_3945.thermal_periodic,
1875			   REG_RECALIB_PERIOD * HZ);
1876}
1877
1878static void
1879il3945_bg_reg_txpower_periodic(struct work_struct *work)
1880{
1881	struct il_priv *il = container_of(work, struct il_priv,
1882					  _3945.thermal_periodic.work);
1883
1884	mutex_lock(&il->mutex);
1885	if (test_bit(S_EXIT_PENDING, &il->status) || il->txq == NULL)
1886		goto out;
1887
1888	il3945_reg_txpower_periodic(il);
1889out:
1890	mutex_unlock(&il->mutex);
1891}
1892
1893/**
1894 * il3945_hw_reg_get_ch_grp_idx - find the channel-group idx (0-4) for channel.
1895 *
1896 * This function is used when initializing channel-info structs.
1897 *
1898 * NOTE: These channel groups do *NOT* match the bands above!
1899 *	 These channel groups are based on factory-tested channels;
1900 *	 on A-band, EEPROM's "group frequency" entries represent the top
1901 *	 channel in each group 1-4.  Group 5 All B/G channels are in group 0.
1902 */
1903static u16
1904il3945_hw_reg_get_ch_grp_idx(struct il_priv *il,
1905			     const struct il_channel_info *ch_info)
1906{
1907	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1908	struct il3945_eeprom_txpower_group *ch_grp = &eeprom->groups[0];
1909	u8 group;
1910	u16 group_idx = 0;	/* based on factory calib frequencies */
1911	u8 grp_channel;
1912
1913	/* Find the group idx for the channel ... don't use idx 1(?) */
1914	if (il_is_channel_a_band(ch_info)) {
1915		for (group = 1; group < 5; group++) {
1916			grp_channel = ch_grp[group].group_channel;
1917			if (ch_info->channel <= grp_channel) {
1918				group_idx = group;
1919				break;
1920			}
1921		}
1922		/* group 4 has a few channels *above* its factory cal freq */
1923		if (group == 5)
1924			group_idx = 4;
1925	} else
1926		group_idx = 0;	/* 2.4 GHz, group 0 */
1927
1928	D_POWER("Chnl %d mapped to grp %d\n", ch_info->channel, group_idx);
1929	return group_idx;
1930}
1931
1932/**
1933 * il3945_hw_reg_get_matched_power_idx - Interpolate to get nominal idx
1934 *
1935 * Interpolate to get nominal (i.e. at factory calibration temperature) idx
1936 *   into radio/DSP gain settings table for requested power.
1937 */
1938static int
1939il3945_hw_reg_get_matched_power_idx(struct il_priv *il, s8 requested_power,
1940				    s32 setting_idx, s32 *new_idx)
1941{
1942	const struct il3945_eeprom_txpower_group *chnl_grp = NULL;
1943	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1944	s32 idx0, idx1;
1945	s32 power = 2 * requested_power;
1946	s32 i;
1947	const struct il3945_eeprom_txpower_sample *samples;
1948	s32 gains0, gains1;
1949	s32 res;
1950	s32 denominator;
1951
1952	chnl_grp = &eeprom->groups[setting_idx];
1953	samples = chnl_grp->samples;
1954	for (i = 0; i < 5; i++) {
1955		if (power == samples[i].power) {
1956			*new_idx = samples[i].gain_idx;
1957			return 0;
1958		}
1959	}
1960
1961	if (power > samples[1].power) {
1962		idx0 = 0;
1963		idx1 = 1;
1964	} else if (power > samples[2].power) {
1965		idx0 = 1;
1966		idx1 = 2;
1967	} else if (power > samples[3].power) {
1968		idx0 = 2;
1969		idx1 = 3;
1970	} else {
1971		idx0 = 3;
1972		idx1 = 4;
1973	}
1974
1975	denominator = (s32) samples[idx1].power - (s32) samples[idx0].power;
1976	if (denominator == 0)
1977		return -EINVAL;
1978	gains0 = (s32) samples[idx0].gain_idx * (1 << 19);
1979	gains1 = (s32) samples[idx1].gain_idx * (1 << 19);
1980	res =
1981	    gains0 + (gains1 - gains0) * ((s32) power -
1982					  (s32) samples[idx0].power) /
1983	    denominator + (1 << 18);
1984	*new_idx = res >> 19;
1985	return 0;
1986}
1987
1988static void
1989il3945_hw_reg_init_channel_groups(struct il_priv *il)
1990{
1991	u32 i;
1992	s32 rate_idx;
1993	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
1994	const struct il3945_eeprom_txpower_group *group;
1995
1996	D_POWER("Initializing factory calib info from EEPROM\n");
1997
1998	for (i = 0; i < IL_NUM_TX_CALIB_GROUPS; i++) {
1999		s8 *clip_pwrs;	/* table of power levels for each rate */
2000		s8 satur_pwr;	/* saturation power for each chnl group */
2001		group = &eeprom->groups[i];
2002
2003		/* sanity check on factory saturation power value */
2004		if (group->saturation_power < 40) {
2005			IL_WARN("Error: saturation power is %d, "
2006				"less than minimum expected 40\n",
2007				group->saturation_power);
2008			return;
2009		}
2010
2011		/*
2012		 * Derive requested power levels for each rate, based on
2013		 *   hardware capabilities (saturation power for band).
2014		 * Basic value is 3dB down from saturation, with further
2015		 *   power reductions for highest 3 data rates.  These
2016		 *   backoffs provide headroom for high rate modulation
2017		 *   power peaks, without too much distortion (clipping).
2018		 */
2019		/* we'll fill in this array with h/w max power levels */
2020		clip_pwrs = (s8 *) il->_3945.clip_groups[i].clip_powers;
2021
2022		/* divide factory saturation power by 2 to find -3dB level */
2023		satur_pwr = (s8) (group->saturation_power >> 1);
2024
2025		/* fill in channel group's nominal powers for each rate */
2026		for (rate_idx = 0; rate_idx < RATE_COUNT_3945;
2027		     rate_idx++, clip_pwrs++) {
2028			switch (rate_idx) {
2029			case RATE_36M_IDX_TBL:
2030				if (i == 0)	/* B/G */
2031					*clip_pwrs = satur_pwr;
2032				else	/* A */
2033					*clip_pwrs = satur_pwr - 5;
2034				break;
2035			case RATE_48M_IDX_TBL:
2036				if (i == 0)
2037					*clip_pwrs = satur_pwr - 7;
2038				else
2039					*clip_pwrs = satur_pwr - 10;
2040				break;
2041			case RATE_54M_IDX_TBL:
2042				if (i == 0)
2043					*clip_pwrs = satur_pwr - 9;
2044				else
2045					*clip_pwrs = satur_pwr - 12;
2046				break;
2047			default:
2048				*clip_pwrs = satur_pwr;
2049				break;
2050			}
2051		}
2052	}
2053}
2054
2055/**
2056 * il3945_txpower_set_from_eeprom - Set channel power info based on EEPROM
2057 *
2058 * Second pass (during init) to set up il->channel_info
2059 *
2060 * Set up Tx-power settings in our channel info database for each VALID
2061 * (for this geo/SKU) channel, at all Tx data rates, based on eeprom values
2062 * and current temperature.
2063 *
2064 * Since this is based on current temperature (at init time), these values may
2065 * not be valid for very long, but it gives us a starting/default point,
2066 * and allows us to active (i.e. using Tx) scan.
2067 *
2068 * This does *not* write values to NIC, just sets up our internal table.
2069 */
2070int
2071il3945_txpower_set_from_eeprom(struct il_priv *il)
2072{
2073	struct il_channel_info *ch_info = NULL;
2074	struct il3945_channel_power_info *pwr_info;
2075	struct il3945_eeprom *eeprom = (struct il3945_eeprom *)il->eeprom;
2076	int delta_idx;
2077	u8 rate_idx;
2078	u8 scan_tbl_idx;
2079	const s8 *clip_pwrs;	/* array of power levels for each rate */
2080	u8 gain, dsp_atten;
2081	s8 power;
2082	u8 pwr_idx, base_pwr_idx, a_band;
2083	u8 i;
2084	int temperature;
2085
2086	/* save temperature reference,
2087	 *   so we can determine next time to calibrate */
2088	temperature = il3945_hw_reg_txpower_get_temperature(il);
2089	il->last_temperature = temperature;
2090
2091	il3945_hw_reg_init_channel_groups(il);
2092
2093	/* initialize Tx power info for each and every channel, 2.4 and 5.x */
2094	for (i = 0, ch_info = il->channel_info; i < il->channel_count;
2095	     i++, ch_info++) {
2096		a_band = il_is_channel_a_band(ch_info);
2097		if (!il_is_channel_valid(ch_info))
2098			continue;
2099
2100		/* find this channel's channel group (*not* "band") idx */
2101		ch_info->group_idx = il3945_hw_reg_get_ch_grp_idx(il, ch_info);
2102
2103		/* Get this chnlgrp's rate->max/clip-powers table */
2104		clip_pwrs =
2105		    il->_3945.clip_groups[ch_info->group_idx].clip_powers;
2106
2107		/* calculate power idx *adjustment* value according to
2108		 *  diff between current temperature and factory temperature */
2109		delta_idx =
2110		    il3945_hw_reg_adjust_power_by_temp(temperature,
2111						       eeprom->groups[ch_info->
2112								      group_idx].
2113						       temperature);
2114
2115		D_POWER("Delta idx for channel %d: %d [%d]\n", ch_info->channel,
2116			delta_idx, temperature + IL_TEMP_CONVERT);
2117
2118		/* set tx power value for all OFDM rates */
2119		for (rate_idx = 0; rate_idx < IL_OFDM_RATES; rate_idx++) {
2120			s32 uninitialized_var(power_idx);
2121			int rc;
2122
2123			/* use channel group's clip-power table,
2124			 *   but don't exceed channel's max power */
2125			s8 pwr = min(ch_info->max_power_avg,
2126				     clip_pwrs[rate_idx]);
2127
2128			pwr_info = &ch_info->power_info[rate_idx];
2129
2130			/* get base (i.e. at factory-measured temperature)
2131			 *    power table idx for this rate's power */
2132			rc = il3945_hw_reg_get_matched_power_idx(il, pwr,
2133								 ch_info->
2134								 group_idx,
2135								 &power_idx);
2136			if (rc) {
2137				IL_ERR("Invalid power idx\n");
2138				return rc;
2139			}
2140			pwr_info->base_power_idx = (u8) power_idx;
2141
2142			/* temperature compensate */
2143			power_idx += delta_idx;
2144
2145			/* stay within range of gain table */
2146			power_idx = il3945_hw_reg_fix_power_idx(power_idx);
2147
2148			/* fill 1 OFDM rate's il3945_channel_power_info struct */
2149			pwr_info->requested_power = pwr;
2150			pwr_info->power_table_idx = (u8) power_idx;
2151			pwr_info->tpc.tx_gain =
2152			    power_gain_table[a_band][power_idx].tx_gain;
2153			pwr_info->tpc.dsp_atten =
2154			    power_gain_table[a_band][power_idx].dsp_atten;
2155		}
2156
2157		/* set tx power for CCK rates, based on OFDM 12 Mbit settings */
2158		pwr_info = &ch_info->power_info[RATE_12M_IDX_TBL];
2159		power = pwr_info->requested_power + IL_CCK_FROM_OFDM_POWER_DIFF;
2160		pwr_idx = pwr_info->power_table_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
2161		base_pwr_idx =
2162		    pwr_info->base_power_idx + IL_CCK_FROM_OFDM_IDX_DIFF;
2163
2164		/* stay within table range */
2165		pwr_idx = il3945_hw_reg_fix_power_idx(pwr_idx);
2166		gain = power_gain_table[a_band][pwr_idx].tx_gain;
2167		dsp_atten = power_gain_table[a_band][pwr_idx].dsp_atten;
2168
2169		/* fill each CCK rate's il3945_channel_power_info structure
2170		 * NOTE:  All CCK-rate Txpwrs are the same for a given chnl!
2171		 * NOTE:  CCK rates start at end of OFDM rates! */
2172		for (rate_idx = 0; rate_idx < IL_CCK_RATES; rate_idx++) {
2173			pwr_info =
2174			    &ch_info->power_info[rate_idx + IL_OFDM_RATES];
2175			pwr_info->requested_power = power;
2176			pwr_info->power_table_idx = pwr_idx;
2177			pwr_info->base_power_idx = base_pwr_idx;
2178			pwr_info->tpc.tx_gain = gain;
2179			pwr_info->tpc.dsp_atten = dsp_atten;
2180		}
2181
2182		/* set scan tx power, 1Mbit for CCK, 6Mbit for OFDM */
2183		for (scan_tbl_idx = 0; scan_tbl_idx < IL_NUM_SCAN_RATES;
2184		     scan_tbl_idx++) {
2185			s32 actual_idx =
2186			    (scan_tbl_idx ==
2187			     0) ? RATE_1M_IDX_TBL : RATE_6M_IDX_TBL;
2188			il3945_hw_reg_set_scan_power(il, scan_tbl_idx,
2189						     actual_idx, clip_pwrs,
2190						     ch_info, a_band);
2191		}
2192	}
2193
2194	return 0;
2195}
2196
2197int
2198il3945_hw_rxq_stop(struct il_priv *il)
2199{
2200	int ret;
2201
2202	_il_wr(il, FH39_RCSR_CONFIG(0), 0);
2203	ret = _il_poll_bit(il, FH39_RSSR_STATUS,
2204			   FH39_RSSR_CHNL0_RX_STATUS_CHNL_IDLE,
2205			   FH39_RSSR_CHNL0_RX_STATUS_CHNL_IDLE,
2206			   1000);
2207	if (ret < 0)
2208		IL_ERR("Can't stop Rx DMA.\n");
2209
2210	return 0;
2211}
2212
2213int
2214il3945_hw_tx_queue_init(struct il_priv *il, struct il_tx_queue *txq)
2215{
2216	int txq_id = txq->q.id;
2217
2218	struct il3945_shared *shared_data = il->_3945.shared_virt;
2219
2220	shared_data->tx_base_ptr[txq_id] = cpu_to_le32((u32) txq->q.dma_addr);
2221
2222	il_wr(il, FH39_CBCC_CTRL(txq_id), 0);
2223	il_wr(il, FH39_CBCC_BASE(txq_id), 0);
2224
2225	il_wr(il, FH39_TCSR_CONFIG(txq_id),
2226	      FH39_TCSR_TX_CONFIG_REG_VAL_CIRQ_RTC_NOINT |
2227	      FH39_TCSR_TX_CONFIG_REG_VAL_MSG_MODE_TXF |
2228	      FH39_TCSR_TX_CONFIG_REG_VAL_CIRQ_HOST_IFTFD |
2229	      FH39_TCSR_TX_CONFIG_REG_VAL_DMA_CREDIT_ENABLE_VAL |
2230	      FH39_TCSR_TX_CONFIG_REG_VAL_DMA_CHNL_ENABLE);
2231
2232	/* fake read to flush all prev. writes */
2233	_il_rd(il, FH39_TSSR_CBB_BASE);
2234
2235	return 0;
2236}
2237
2238/*
2239 * HCMD utils
2240 */
2241static u16
2242il3945_get_hcmd_size(u8 cmd_id, u16 len)
2243{
2244	switch (cmd_id) {
2245	case C_RXON:
2246		return sizeof(struct il3945_rxon_cmd);
2247	case C_POWER_TBL:
2248		return sizeof(struct il3945_powertable_cmd);
2249	default:
2250		return len;
2251	}
2252}
2253
2254static u16
2255il3945_build_addsta_hcmd(const struct il_addsta_cmd *cmd, u8 * data)
2256{
2257	struct il3945_addsta_cmd *addsta = (struct il3945_addsta_cmd *)data;
2258	addsta->mode = cmd->mode;
2259	memcpy(&addsta->sta, &cmd->sta, sizeof(struct sta_id_modify));
2260	memcpy(&addsta->key, &cmd->key, sizeof(struct il4965_keyinfo));
2261	addsta->station_flags = cmd->station_flags;
2262	addsta->station_flags_msk = cmd->station_flags_msk;
2263	addsta->tid_disable_tx = cpu_to_le16(0);
2264	addsta->rate_n_flags = cmd->rate_n_flags;
2265	addsta->add_immediate_ba_tid = cmd->add_immediate_ba_tid;
2266	addsta->remove_immediate_ba_tid = cmd->remove_immediate_ba_tid;
2267	addsta->add_immediate_ba_ssn = cmd->add_immediate_ba_ssn;
2268
2269	return (u16) sizeof(struct il3945_addsta_cmd);
2270}
2271
2272static int
2273il3945_add_bssid_station(struct il_priv *il, const u8 * addr, u8 * sta_id_r)
2274{
2275	int ret;
2276	u8 sta_id;
2277	unsigned long flags;
2278
2279	if (sta_id_r)
2280		*sta_id_r = IL_INVALID_STATION;
2281
2282	ret = il_add_station_common(il, addr, 0, NULL, &sta_id);
2283	if (ret) {
2284		IL_ERR("Unable to add station %pM\n", addr);
2285		return ret;
2286	}
2287
2288	if (sta_id_r)
2289		*sta_id_r = sta_id;
2290
2291	spin_lock_irqsave(&il->sta_lock, flags);
2292	il->stations[sta_id].used |= IL_STA_LOCAL;
2293	spin_unlock_irqrestore(&il->sta_lock, flags);
2294
2295	return 0;
2296}
2297
2298static int
2299il3945_manage_ibss_station(struct il_priv *il, struct ieee80211_vif *vif,
2300			   bool add)
2301{
2302	struct il_vif_priv *vif_priv = (void *)vif->drv_priv;
2303	int ret;
2304
2305	if (add) {
2306		ret =
2307		    il3945_add_bssid_station(il, vif->bss_conf.bssid,
2308					     &vif_priv->ibss_bssid_sta_id);
2309		if (ret)
2310			return ret;
2311
2312		il3945_sync_sta(il, vif_priv->ibss_bssid_sta_id,
2313				(il->band ==
2314				 NL80211_BAND_5GHZ) ? RATE_6M_PLCP :
2315				RATE_1M_PLCP);
2316		il3945_rate_scale_init(il->hw, vif_priv->ibss_bssid_sta_id);
2317
2318		return 0;
2319	}
2320
2321	return il_remove_station(il, vif_priv->ibss_bssid_sta_id,
2322				 vif->bss_conf.bssid);
2323}
2324
2325/**
2326 * il3945_init_hw_rate_table - Initialize the hardware rate fallback table
2327 */
2328int
2329il3945_init_hw_rate_table(struct il_priv *il)
2330{
2331	int rc, i, idx, prev_idx;
2332	struct il3945_rate_scaling_cmd rate_cmd = {
2333		.reserved = {0, 0, 0},
2334	};
2335	struct il3945_rate_scaling_info *table = rate_cmd.table;
2336
2337	for (i = 0; i < ARRAY_SIZE(il3945_rates); i++) {
2338		idx = il3945_rates[i].table_rs_idx;
2339
2340		table[idx].rate_n_flags = cpu_to_le16(il3945_rates[i].plcp);
2341		table[idx].try_cnt = il->retry_rate;
2342		prev_idx = il3945_get_prev_ieee_rate(i);
2343		table[idx].next_rate_idx = il3945_rates[prev_idx].table_rs_idx;
2344	}
2345
2346	switch (il->band) {
2347	case NL80211_BAND_5GHZ:
2348		D_RATE("Select A mode rate scale\n");
2349		/* If one of the following CCK rates is used,
2350		 * have it fall back to the 6M OFDM rate */
2351		for (i = RATE_1M_IDX_TBL; i <= RATE_11M_IDX_TBL; i++)
2352			table[i].next_rate_idx =
2353			    il3945_rates[IL_FIRST_OFDM_RATE].table_rs_idx;
2354
2355		/* Don't fall back to CCK rates */
2356		table[RATE_12M_IDX_TBL].next_rate_idx = RATE_9M_IDX_TBL;
2357
2358		/* Don't drop out of OFDM rates */
2359		table[RATE_6M_IDX_TBL].next_rate_idx =
2360		    il3945_rates[IL_FIRST_OFDM_RATE].table_rs_idx;
2361		break;
2362
2363	case NL80211_BAND_2GHZ:
2364		D_RATE("Select B/G mode rate scale\n");
2365		/* If an OFDM rate is used, have it fall back to the
2366		 * 1M CCK rates */
2367
2368		if (!(il->_3945.sta_supp_rates & IL_OFDM_RATES_MASK) &&
2369		    il_is_associated(il)) {
2370
2371			idx = IL_FIRST_CCK_RATE;
2372			for (i = RATE_6M_IDX_TBL; i <= RATE_54M_IDX_TBL; i++)
2373				table[i].next_rate_idx =
2374				    il3945_rates[idx].table_rs_idx;
2375
2376			idx = RATE_11M_IDX_TBL;
2377			/* CCK shouldn't fall back to OFDM... */
2378			table[idx].next_rate_idx = RATE_5M_IDX_TBL;
2379		}
2380		break;
2381
2382	default:
2383		WARN_ON(1);
2384		break;
2385	}
2386
2387	/* Update the rate scaling for control frame Tx */
2388	rate_cmd.table_id = 0;
2389	rc = il_send_cmd_pdu(il, C_RATE_SCALE, sizeof(rate_cmd), &rate_cmd);
2390	if (rc)
2391		return rc;
2392
2393	/* Update the rate scaling for data frame Tx */
2394	rate_cmd.table_id = 1;
2395	return il_send_cmd_pdu(il, C_RATE_SCALE, sizeof(rate_cmd), &rate_cmd);
2396}
2397
2398/* Called when initializing driver */
2399int
2400il3945_hw_set_hw_params(struct il_priv *il)
2401{
2402	memset((void *)&il->hw_params, 0, sizeof(struct il_hw_params));
2403
2404	il->_3945.shared_virt =
2405	    dma_alloc_coherent(&il->pci_dev->dev, sizeof(struct il3945_shared),
2406			       &il->_3945.shared_phys, GFP_KERNEL);
2407	if (!il->_3945.shared_virt)
2408		return -ENOMEM;
2409
2410	il->hw_params.bcast_id = IL3945_BROADCAST_ID;
2411
2412	/* Assign number of Usable TX queues */
2413	il->hw_params.max_txq_num = il->cfg->num_of_queues;
2414
2415	il->hw_params.tfd_size = sizeof(struct il3945_tfd);
2416	il->hw_params.rx_page_order = get_order(IL_RX_BUF_SIZE_3K);
2417	il->hw_params.max_rxq_size = RX_QUEUE_SIZE;
2418	il->hw_params.max_rxq_log = RX_QUEUE_SIZE_LOG;
2419	il->hw_params.max_stations = IL3945_STATION_COUNT;
2420
2421	il->sta_key_max_num = STA_KEY_MAX_NUM;
2422
2423	il->hw_params.rx_wrt_ptr_reg = FH39_RSCSR_CHNL0_WPTR;
2424	il->hw_params.max_beacon_itrvl = IL39_MAX_UCODE_BEACON_INTERVAL;
2425	il->hw_params.beacon_time_tsf_bits = IL3945_EXT_BEACON_TIME_POS;
2426
2427	return 0;
2428}
2429
2430unsigned int
2431il3945_hw_get_beacon_cmd(struct il_priv *il, struct il3945_frame *frame,
2432			 u8 rate)
2433{
2434	struct il3945_tx_beacon_cmd *tx_beacon_cmd;
2435	unsigned int frame_size;
2436
2437	tx_beacon_cmd = (struct il3945_tx_beacon_cmd *)&frame->u;
2438	memset(tx_beacon_cmd, 0, sizeof(*tx_beacon_cmd));
2439
2440	tx_beacon_cmd->tx.sta_id = il->hw_params.bcast_id;
2441	tx_beacon_cmd->tx.stop_time.life_time = TX_CMD_LIFE_TIME_INFINITE;
2442
2443	frame_size =
2444	    il3945_fill_beacon_frame(il, tx_beacon_cmd->frame,
2445				     sizeof(frame->u) - sizeof(*tx_beacon_cmd));
2446
2447	BUG_ON(frame_size > MAX_MPDU_SIZE);
2448	tx_beacon_cmd->tx.len = cpu_to_le16((u16) frame_size);
2449
2450	tx_beacon_cmd->tx.rate = rate;
2451	tx_beacon_cmd->tx.tx_flags =
2452	    (TX_CMD_FLG_SEQ_CTL_MSK | TX_CMD_FLG_TSF_MSK);
2453
2454	/* supp_rates[0] == OFDM start at IL_FIRST_OFDM_RATE */
2455	tx_beacon_cmd->tx.supp_rates[0] =
2456	    (IL_OFDM_BASIC_RATES_MASK >> IL_FIRST_OFDM_RATE) & 0xFF;
2457
2458	tx_beacon_cmd->tx.supp_rates[1] = (IL_CCK_BASIC_RATES_MASK & 0xF);
2459
2460	return sizeof(struct il3945_tx_beacon_cmd) + frame_size;
2461}
2462
2463void
2464il3945_hw_handler_setup(struct il_priv *il)
2465{
2466	il->handlers[C_TX] = il3945_hdl_tx;
2467	il->handlers[N_3945_RX] = il3945_hdl_rx;
2468}
2469
2470void
2471il3945_hw_setup_deferred_work(struct il_priv *il)
2472{
2473	INIT_DELAYED_WORK(&il->_3945.thermal_periodic,
2474			  il3945_bg_reg_txpower_periodic);
2475}
2476
2477void
2478il3945_hw_cancel_deferred_work(struct il_priv *il)
2479{
2480	cancel_delayed_work(&il->_3945.thermal_periodic);
2481}
2482
2483/* check contents of special bootstrap uCode SRAM */
2484static int
2485il3945_verify_bsm(struct il_priv *il)
2486{
2487	__le32 *image = il->ucode_boot.v_addr;
2488	u32 len = il->ucode_boot.len;
2489	u32 reg;
2490	u32 val;
2491
2492	D_INFO("Begin verify bsm\n");
2493
2494	/* verify BSM SRAM contents */
2495	val = il_rd_prph(il, BSM_WR_DWCOUNT_REG);
2496	for (reg = BSM_SRAM_LOWER_BOUND; reg < BSM_SRAM_LOWER_BOUND + len;
2497	     reg += sizeof(u32), image++) {
2498		val = il_rd_prph(il, reg);
2499		if (val != le32_to_cpu(*image)) {
2500			IL_ERR("BSM uCode verification failed at "
2501			       "addr 0x%08X+%u (of %u), is 0x%x, s/b 0x%x\n",
2502			       BSM_SRAM_LOWER_BOUND, reg - BSM_SRAM_LOWER_BOUND,
2503			       len, val, le32_to_cpu(*image));
2504			return -EIO;
2505		}
2506	}
2507
2508	D_INFO("BSM bootstrap uCode image OK\n");
2509
2510	return 0;
2511}
2512
2513/******************************************************************************
2514 *
2515 * EEPROM related functions
2516 *
2517 ******************************************************************************/
2518
2519/*
2520 * Clear the OWNER_MSK, to establish driver (instead of uCode running on
2521 * embedded controller) as EEPROM reader; each read is a series of pulses
2522 * to/from the EEPROM chip, not a single event, so even reads could conflict
2523 * if they weren't arbitrated by some ownership mechanism.  Here, the driver
2524 * simply claims ownership, which should be safe when this function is called
2525 * (i.e. before loading uCode!).
2526 */
2527static int
2528il3945_eeprom_acquire_semaphore(struct il_priv *il)
2529{
2530	_il_clear_bit(il, CSR_EEPROM_GP, CSR_EEPROM_GP_IF_OWNER_MSK);
2531	return 0;
2532}
2533
2534static void
2535il3945_eeprom_release_semaphore(struct il_priv *il)
2536{
2537	return;
2538}
2539
2540 /**
2541  * il3945_load_bsm - Load bootstrap instructions
2542  *
2543  * BSM operation:
2544  *
2545  * The Bootstrap State Machine (BSM) stores a short bootstrap uCode program
2546  * in special SRAM that does not power down during RFKILL.  When powering back
2547  * up after power-saving sleeps (or during initial uCode load), the BSM loads
2548  * the bootstrap program into the on-board processor, and starts it.
2549  *
2550  * The bootstrap program loads (via DMA) instructions and data for a new
2551  * program from host DRAM locations indicated by the host driver in the
2552  * BSM_DRAM_* registers.  Once the new program is loaded, it starts
2553  * automatically.
2554  *
2555  * When initializing the NIC, the host driver points the BSM to the
2556  * "initialize" uCode image.  This uCode sets up some internal data, then
2557  * notifies host via "initialize alive" that it is complete.
2558  *
2559  * The host then replaces the BSM_DRAM_* pointer values to point to the
2560  * normal runtime uCode instructions and a backup uCode data cache buffer
2561  * (filled initially with starting data values for the on-board processor),
2562  * then triggers the "initialize" uCode to load and launch the runtime uCode,
2563  * which begins normal operation.
2564  *
2565  * When doing a power-save shutdown, runtime uCode saves data SRAM into
2566  * the backup data cache in DRAM before SRAM is powered down.
2567  *
2568  * When powering back up, the BSM loads the bootstrap program.  This reloads
2569  * the runtime uCode instructions and the backup data cache into SRAM,
2570  * and re-launches the runtime uCode from where it left off.
2571  */
2572static int
2573il3945_load_bsm(struct il_priv *il)
2574{
2575	__le32 *image = il->ucode_boot.v_addr;
2576	u32 len = il->ucode_boot.len;
2577	dma_addr_t pinst;
2578	dma_addr_t pdata;
2579	u32 inst_len;
2580	u32 data_len;
2581	int rc;
2582	int i;
2583	u32 done;
2584	u32 reg_offset;
2585
2586	D_INFO("Begin load bsm\n");
2587
2588	/* make sure bootstrap program is no larger than BSM's SRAM size */
2589	if (len > IL39_MAX_BSM_SIZE)
2590		return -EINVAL;
2591
2592	/* Tell bootstrap uCode where to find the "Initialize" uCode
2593	 *   in host DRAM ... host DRAM physical address bits 31:0 for 3945.
2594	 * NOTE:  il3945_initialize_alive_start() will replace these values,
2595	 *        after the "initialize" uCode has run, to point to
2596	 *        runtime/protocol instructions and backup data cache. */
2597	pinst = il->ucode_init.p_addr;
2598	pdata = il->ucode_init_data.p_addr;
2599	inst_len = il->ucode_init.len;
2600	data_len = il->ucode_init_data.len;
2601
2602	il_wr_prph(il, BSM_DRAM_INST_PTR_REG, pinst);
2603	il_wr_prph(il, BSM_DRAM_DATA_PTR_REG, pdata);
2604	il_wr_prph(il, BSM_DRAM_INST_BYTECOUNT_REG, inst_len);
2605	il_wr_prph(il, BSM_DRAM_DATA_BYTECOUNT_REG, data_len);
2606
2607	/* Fill BSM memory with bootstrap instructions */
2608	for (reg_offset = BSM_SRAM_LOWER_BOUND;
2609	     reg_offset < BSM_SRAM_LOWER_BOUND + len;
2610	     reg_offset += sizeof(u32), image++)
2611		_il_wr_prph(il, reg_offset, le32_to_cpu(*image));
2612
2613	rc = il3945_verify_bsm(il);
2614	if (rc)
2615		return rc;
2616
2617	/* Tell BSM to copy from BSM SRAM into instruction SRAM, when asked */
2618	il_wr_prph(il, BSM_WR_MEM_SRC_REG, 0x0);
2619	il_wr_prph(il, BSM_WR_MEM_DST_REG, IL39_RTC_INST_LOWER_BOUND);
2620	il_wr_prph(il, BSM_WR_DWCOUNT_REG, len / sizeof(u32));
2621
2622	/* Load bootstrap code into instruction SRAM now,
2623	 *   to prepare to load "initialize" uCode */
2624	il_wr_prph(il, BSM_WR_CTRL_REG, BSM_WR_CTRL_REG_BIT_START);
2625
2626	/* Wait for load of bootstrap uCode to finish */
2627	for (i = 0; i < 100; i++) {
2628		done = il_rd_prph(il, BSM_WR_CTRL_REG);
2629		if (!(done & BSM_WR_CTRL_REG_BIT_START))
2630			break;
2631		udelay(10);
2632	}
2633	if (i < 100)
2634		D_INFO("BSM write complete, poll %d iterations\n", i);
2635	else {
2636		IL_ERR("BSM write did not complete!\n");
2637		return -EIO;
2638	}
2639
2640	/* Enable future boot loads whenever power management unit triggers it
2641	 *   (e.g. when powering back up after power-save shutdown) */
2642	il_wr_prph(il, BSM_WR_CTRL_REG, BSM_WR_CTRL_REG_BIT_START_EN);
2643
2644	return 0;
2645}
2646
2647const struct il_ops il3945_ops = {
2648	.txq_attach_buf_to_tfd = il3945_hw_txq_attach_buf_to_tfd,
2649	.txq_free_tfd = il3945_hw_txq_free_tfd,
2650	.txq_init = il3945_hw_tx_queue_init,
2651	.load_ucode = il3945_load_bsm,
2652	.dump_nic_error_log = il3945_dump_nic_error_log,
2653	.apm_init = il3945_apm_init,
2654	.send_tx_power = il3945_send_tx_power,
2655	.is_valid_rtc_data_addr = il3945_hw_valid_rtc_data_addr,
2656	.eeprom_acquire_semaphore = il3945_eeprom_acquire_semaphore,
2657	.eeprom_release_semaphore = il3945_eeprom_release_semaphore,
2658
2659	.rxon_assoc = il3945_send_rxon_assoc,
2660	.commit_rxon = il3945_commit_rxon,
2661
2662	.get_hcmd_size = il3945_get_hcmd_size,
2663	.build_addsta_hcmd = il3945_build_addsta_hcmd,
2664	.request_scan = il3945_request_scan,
2665	.post_scan = il3945_post_scan,
2666
2667	.post_associate = il3945_post_associate,
2668	.config_ap = il3945_config_ap,
2669	.manage_ibss_station = il3945_manage_ibss_station,
2670
2671	.send_led_cmd = il3945_send_led_cmd,
2672};
2673
2674static const struct il_cfg il3945_bg_cfg = {
2675	.name = "3945BG",
2676	.fw_name_pre = IL3945_FW_PRE,
2677	.ucode_api_max = IL3945_UCODE_API_MAX,
2678	.ucode_api_min = IL3945_UCODE_API_MIN,
2679	.sku = IL_SKU_G,
2680	.eeprom_ver = EEPROM_3945_EEPROM_VERSION,
2681	.mod_params = &il3945_mod_params,
2682	.led_mode = IL_LED_BLINK,
2683
2684	.eeprom_size = IL3945_EEPROM_IMG_SIZE,
2685	.num_of_queues = IL39_NUM_QUEUES,
2686	.pll_cfg_val = CSR39_ANA_PLL_CFG_VAL,
2687	.set_l0s = false,
2688	.use_bsm = true,
2689	.led_compensation = 64,
2690	.wd_timeout = IL_DEF_WD_TIMEOUT,
2691
2692	.regulatory_bands = {
2693		EEPROM_REGULATORY_BAND_1_CHANNELS,
2694		EEPROM_REGULATORY_BAND_2_CHANNELS,
2695		EEPROM_REGULATORY_BAND_3_CHANNELS,
2696		EEPROM_REGULATORY_BAND_4_CHANNELS,
2697		EEPROM_REGULATORY_BAND_5_CHANNELS,
2698		EEPROM_REGULATORY_BAND_NO_HT40,
2699		EEPROM_REGULATORY_BAND_NO_HT40,
2700	},
2701};
2702
2703static const struct il_cfg il3945_abg_cfg = {
2704	.name = "3945ABG",
2705	.fw_name_pre = IL3945_FW_PRE,
2706	.ucode_api_max = IL3945_UCODE_API_MAX,
2707	.ucode_api_min = IL3945_UCODE_API_MIN,
2708	.sku = IL_SKU_A | IL_SKU_G,
2709	.eeprom_ver = EEPROM_3945_EEPROM_VERSION,
2710	.mod_params = &il3945_mod_params,
2711	.led_mode = IL_LED_BLINK,
2712
2713	.eeprom_size = IL3945_EEPROM_IMG_SIZE,
2714	.num_of_queues = IL39_NUM_QUEUES,
2715	.pll_cfg_val = CSR39_ANA_PLL_CFG_VAL,
2716	.set_l0s = false,
2717	.use_bsm = true,
2718	.led_compensation = 64,
2719	.wd_timeout = IL_DEF_WD_TIMEOUT,
2720
2721	.regulatory_bands = {
2722		EEPROM_REGULATORY_BAND_1_CHANNELS,
2723		EEPROM_REGULATORY_BAND_2_CHANNELS,
2724		EEPROM_REGULATORY_BAND_3_CHANNELS,
2725		EEPROM_REGULATORY_BAND_4_CHANNELS,
2726		EEPROM_REGULATORY_BAND_5_CHANNELS,
2727		EEPROM_REGULATORY_BAND_NO_HT40,
2728		EEPROM_REGULATORY_BAND_NO_HT40,
2729	},
2730};
2731
2732const struct pci_device_id il3945_hw_card_ids[] = {
2733	{IL_PCI_DEVICE(0x4222, 0x1005, il3945_bg_cfg)},
2734	{IL_PCI_DEVICE(0x4222, 0x1034, il3945_bg_cfg)},
2735	{IL_PCI_DEVICE(0x4222, 0x1044, il3945_bg_cfg)},
2736	{IL_PCI_DEVICE(0x4227, 0x1014, il3945_bg_cfg)},
2737	{IL_PCI_DEVICE(0x4222, PCI_ANY_ID, il3945_abg_cfg)},
2738	{IL_PCI_DEVICE(0x4227, PCI_ANY_ID, il3945_abg_cfg)},
2739	{0}
2740};
2741
2742MODULE_DEVICE_TABLE(pci, il3945_hw_card_ids);