3 Broadcom B43 wireless driver
5 Copyright (c) 2005 Martin Langer <martin-langer@gmx.de>
6 Copyright (c) 2005 Stefano Brivio <stefano.brivio@polimi.it>
7 Copyright (c) 2005, 2006 Michael Buesch <mb@bu3sch.de>
8 Copyright (c) 2005 Danny van Dyk <kugelfang@gentoo.org>
9 Copyright (c) 2005 Andreas Jaggi <andreas.jaggi@waterwave.ch>
11 Some parts of the code in this file are derived from the ipw2200
12 driver Copyright(c) 2003 - 2004 Intel Corporation.
14 This program is free software; you can redistribute it and/or modify
15 it under the terms of the GNU General Public License as published by
16 the Free Software Foundation; either version 2 of the License, or
17 (at your option) any later version.
19 This program is distributed in the hope that it will be useful,
20 but WITHOUT ANY WARRANTY; without even the implied warranty of
21 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
22 GNU General Public License for more details.
24 You should have received a copy of the GNU General Public License
25 along with this program; see the file COPYING. If not, write to
26 the Free Software Foundation, Inc., 51 Franklin Steet, Fifth Floor,
27 Boston, MA 02110-1301, USA.
31 #include <linux/delay.h>
32 #include <linux/init.h>
33 #include <linux/moduleparam.h>
34 #include <linux/if_arp.h>
35 #include <linux/etherdevice.h>
36 #include <linux/version.h>
37 #include <linux/firmware.h>
38 #include <linux/wireless.h>
39 #include <linux/workqueue.h>
40 #include <linux/skbuff.h>
41 #include <linux/dma-mapping.h>
42 #include <asm/unaligned.h>
54 MODULE_DESCRIPTION("Broadcom B43 wireless driver");
55 MODULE_AUTHOR("Martin Langer");
56 MODULE_AUTHOR("Stefano Brivio");
57 MODULE_AUTHOR("Michael Buesch");
58 MODULE_LICENSE("GPL");
61 static int modparam_bad_frames_preempt
;
62 module_param_named(bad_frames_preempt
, modparam_bad_frames_preempt
, int, 0444);
63 MODULE_PARM_DESC(bad_frames_preempt
,
64 "enable(1) / disable(0) Bad Frames Preemption");
66 static char modparam_fwpostfix
[16];
67 module_param_string(fwpostfix
, modparam_fwpostfix
, 16, 0444);
68 MODULE_PARM_DESC(fwpostfix
, "Postfix for the .fw files to load.");
70 static int modparam_hwpctl
;
71 module_param_named(hwpctl
, modparam_hwpctl
, int, 0444);
72 MODULE_PARM_DESC(hwpctl
, "Enable hardware-side power control (default off)");
74 static int modparam_nohwcrypt
;
75 module_param_named(nohwcrypt
, modparam_nohwcrypt
, int, 0444);
76 MODULE_PARM_DESC(nohwcrypt
, "Disable hardware encryption.");
78 static const struct ssb_device_id b43_ssb_tbl
[] = {
79 SSB_DEVICE(SSB_VENDOR_BROADCOM
, SSB_DEV_80211
, 5),
80 SSB_DEVICE(SSB_VENDOR_BROADCOM
, SSB_DEV_80211
, 6),
81 SSB_DEVICE(SSB_VENDOR_BROADCOM
, SSB_DEV_80211
, 7),
82 SSB_DEVICE(SSB_VENDOR_BROADCOM
, SSB_DEV_80211
, 9),
83 SSB_DEVICE(SSB_VENDOR_BROADCOM
, SSB_DEV_80211
, 10),
84 SSB_DEVICE(SSB_VENDOR_BROADCOM
, SSB_DEV_80211
, 11),
85 SSB_DEVICE(SSB_VENDOR_BROADCOM
, SSB_DEV_80211
, 13),
89 MODULE_DEVICE_TABLE(ssb
, b43_ssb_tbl
);
91 /* Channel and ratetables are shared for all devices.
92 * They can't be const, because ieee80211 puts some precalculated
93 * data in there. This data is the same for all devices, so we don't
94 * get concurrency issues */
95 #define RATETAB_ENT(_rateid, _flags) \
97 .rate = B43_RATE_TO_BASE100KBPS(_rateid), \
102 static struct ieee80211_rate __b43_ratetable
[] = {
103 RATETAB_ENT(B43_CCK_RATE_1MB
, IEEE80211_RATE_CCK
),
104 RATETAB_ENT(B43_CCK_RATE_2MB
, IEEE80211_RATE_CCK_2
),
105 RATETAB_ENT(B43_CCK_RATE_5MB
, IEEE80211_RATE_CCK_2
),
106 RATETAB_ENT(B43_CCK_RATE_11MB
, IEEE80211_RATE_CCK_2
),
107 RATETAB_ENT(B43_OFDM_RATE_6MB
, IEEE80211_RATE_OFDM
),
108 RATETAB_ENT(B43_OFDM_RATE_9MB
, IEEE80211_RATE_OFDM
),
109 RATETAB_ENT(B43_OFDM_RATE_12MB
, IEEE80211_RATE_OFDM
),
110 RATETAB_ENT(B43_OFDM_RATE_18MB
, IEEE80211_RATE_OFDM
),
111 RATETAB_ENT(B43_OFDM_RATE_24MB
, IEEE80211_RATE_OFDM
),
112 RATETAB_ENT(B43_OFDM_RATE_36MB
, IEEE80211_RATE_OFDM
),
113 RATETAB_ENT(B43_OFDM_RATE_48MB
, IEEE80211_RATE_OFDM
),
114 RATETAB_ENT(B43_OFDM_RATE_54MB
, IEEE80211_RATE_OFDM
),
117 #define b43_a_ratetable (__b43_ratetable + 4)
118 #define b43_a_ratetable_size 8
119 #define b43_b_ratetable (__b43_ratetable + 0)
120 #define b43_b_ratetable_size 4
121 #define b43_g_ratetable (__b43_ratetable + 0)
122 #define b43_g_ratetable_size 12
124 #define CHANTAB_ENT(_chanid, _freq) \
129 .flag = IEEE80211_CHAN_W_SCAN | \
130 IEEE80211_CHAN_W_ACTIVE_SCAN | \
131 IEEE80211_CHAN_W_IBSS, \
132 .power_level = 0xFF, \
133 .antenna_max = 0xFF, \
135 static struct ieee80211_channel b43_2ghz_chantable
[] = {
136 CHANTAB_ENT(1, 2412),
137 CHANTAB_ENT(2, 2417),
138 CHANTAB_ENT(3, 2422),
139 CHANTAB_ENT(4, 2427),
140 CHANTAB_ENT(5, 2432),
141 CHANTAB_ENT(6, 2437),
142 CHANTAB_ENT(7, 2442),
143 CHANTAB_ENT(8, 2447),
144 CHANTAB_ENT(9, 2452),
145 CHANTAB_ENT(10, 2457),
146 CHANTAB_ENT(11, 2462),
147 CHANTAB_ENT(12, 2467),
148 CHANTAB_ENT(13, 2472),
149 CHANTAB_ENT(14, 2484),
151 #define b43_2ghz_chantable_size ARRAY_SIZE(b43_2ghz_chantable)
154 static struct ieee80211_channel b43_5ghz_chantable
[] = {
155 CHANTAB_ENT(36, 5180),
156 CHANTAB_ENT(40, 5200),
157 CHANTAB_ENT(44, 5220),
158 CHANTAB_ENT(48, 5240),
159 CHANTAB_ENT(52, 5260),
160 CHANTAB_ENT(56, 5280),
161 CHANTAB_ENT(60, 5300),
162 CHANTAB_ENT(64, 5320),
163 CHANTAB_ENT(149, 5745),
164 CHANTAB_ENT(153, 5765),
165 CHANTAB_ENT(157, 5785),
166 CHANTAB_ENT(161, 5805),
167 CHANTAB_ENT(165, 5825),
169 #define b43_5ghz_chantable_size ARRAY_SIZE(b43_5ghz_chantable)
172 static void b43_wireless_core_exit(struct b43_wldev
*dev
);
173 static int b43_wireless_core_init(struct b43_wldev
*dev
);
174 static void b43_wireless_core_stop(struct b43_wldev
*dev
);
175 static int b43_wireless_core_start(struct b43_wldev
*dev
);
177 static int b43_ratelimit(struct b43_wl
*wl
)
179 if (!wl
|| !wl
->current_dev
)
181 if (b43_status(wl
->current_dev
) < B43_STAT_STARTED
)
183 /* We are up and running.
184 * Ratelimit the messages to avoid DoS over the net. */
185 return net_ratelimit();
188 void b43info(struct b43_wl
*wl
, const char *fmt
, ...)
192 if (!b43_ratelimit(wl
))
195 printk(KERN_INFO
"b43-%s: ",
196 (wl
&& wl
->hw
) ? wiphy_name(wl
->hw
->wiphy
) : "wlan");
201 void b43err(struct b43_wl
*wl
, const char *fmt
, ...)
205 if (!b43_ratelimit(wl
))
208 printk(KERN_ERR
"b43-%s ERROR: ",
209 (wl
&& wl
->hw
) ? wiphy_name(wl
->hw
->wiphy
) : "wlan");
214 void b43warn(struct b43_wl
*wl
, const char *fmt
, ...)
218 if (!b43_ratelimit(wl
))
221 printk(KERN_WARNING
"b43-%s warning: ",
222 (wl
&& wl
->hw
) ? wiphy_name(wl
->hw
->wiphy
) : "wlan");
228 void b43dbg(struct b43_wl
*wl
, const char *fmt
, ...)
233 printk(KERN_DEBUG
"b43-%s debug: ",
234 (wl
&& wl
->hw
) ? wiphy_name(wl
->hw
->wiphy
) : "wlan");
240 static void b43_ram_write(struct b43_wldev
*dev
, u16 offset
, u32 val
)
244 B43_WARN_ON(offset
% 4 != 0);
246 macctl
= b43_read32(dev
, B43_MMIO_MACCTL
);
247 if (macctl
& B43_MACCTL_BE
)
250 b43_write32(dev
, B43_MMIO_RAM_CONTROL
, offset
);
252 b43_write32(dev
, B43_MMIO_RAM_DATA
, val
);
255 static inline void b43_shm_control_word(struct b43_wldev
*dev
,
256 u16 routing
, u16 offset
)
260 /* "offset" is the WORD offset. */
264 b43_write32(dev
, B43_MMIO_SHM_CONTROL
, control
);
267 u32
b43_shm_read32(struct b43_wldev
*dev
, u16 routing
, u16 offset
)
269 struct b43_wl
*wl
= dev
->wl
;
273 spin_lock_irqsave(&wl
->shm_lock
, flags
);
274 if (routing
== B43_SHM_SHARED
) {
275 B43_WARN_ON(offset
& 0x0001);
276 if (offset
& 0x0003) {
277 /* Unaligned access */
278 b43_shm_control_word(dev
, routing
, offset
>> 2);
279 ret
= b43_read16(dev
, B43_MMIO_SHM_DATA_UNALIGNED
);
281 b43_shm_control_word(dev
, routing
, (offset
>> 2) + 1);
282 ret
|= b43_read16(dev
, B43_MMIO_SHM_DATA
);
288 b43_shm_control_word(dev
, routing
, offset
);
289 ret
= b43_read32(dev
, B43_MMIO_SHM_DATA
);
291 spin_unlock_irqrestore(&wl
->shm_lock
, flags
);
296 u16
b43_shm_read16(struct b43_wldev
* dev
, u16 routing
, u16 offset
)
298 struct b43_wl
*wl
= dev
->wl
;
302 spin_lock_irqsave(&wl
->shm_lock
, flags
);
303 if (routing
== B43_SHM_SHARED
) {
304 B43_WARN_ON(offset
& 0x0001);
305 if (offset
& 0x0003) {
306 /* Unaligned access */
307 b43_shm_control_word(dev
, routing
, offset
>> 2);
308 ret
= b43_read16(dev
, B43_MMIO_SHM_DATA_UNALIGNED
);
314 b43_shm_control_word(dev
, routing
, offset
);
315 ret
= b43_read16(dev
, B43_MMIO_SHM_DATA
);
317 spin_unlock_irqrestore(&wl
->shm_lock
, flags
);
322 void b43_shm_write32(struct b43_wldev
*dev
, u16 routing
, u16 offset
, u32 value
)
324 struct b43_wl
*wl
= dev
->wl
;
327 spin_lock_irqsave(&wl
->shm_lock
, flags
);
328 if (routing
== B43_SHM_SHARED
) {
329 B43_WARN_ON(offset
& 0x0001);
330 if (offset
& 0x0003) {
331 /* Unaligned access */
332 b43_shm_control_word(dev
, routing
, offset
>> 2);
333 b43_write16(dev
, B43_MMIO_SHM_DATA_UNALIGNED
,
334 (value
>> 16) & 0xffff);
335 b43_shm_control_word(dev
, routing
, (offset
>> 2) + 1);
336 b43_write16(dev
, B43_MMIO_SHM_DATA
, value
& 0xffff);
341 b43_shm_control_word(dev
, routing
, offset
);
342 b43_write32(dev
, B43_MMIO_SHM_DATA
, value
);
344 spin_unlock_irqrestore(&wl
->shm_lock
, flags
);
347 void b43_shm_write16(struct b43_wldev
*dev
, u16 routing
, u16 offset
, u16 value
)
349 struct b43_wl
*wl
= dev
->wl
;
352 spin_lock_irqsave(&wl
->shm_lock
, flags
);
353 if (routing
== B43_SHM_SHARED
) {
354 B43_WARN_ON(offset
& 0x0001);
355 if (offset
& 0x0003) {
356 /* Unaligned access */
357 b43_shm_control_word(dev
, routing
, offset
>> 2);
358 b43_write16(dev
, B43_MMIO_SHM_DATA_UNALIGNED
, value
);
363 b43_shm_control_word(dev
, routing
, offset
);
364 b43_write16(dev
, B43_MMIO_SHM_DATA
, value
);
366 spin_unlock_irqrestore(&wl
->shm_lock
, flags
);
370 u32
b43_hf_read(struct b43_wldev
* dev
)
374 ret
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_HOSTFHI
);
376 ret
|= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_HOSTFLO
);
381 /* Write HostFlags */
382 void b43_hf_write(struct b43_wldev
*dev
, u32 value
)
384 b43_shm_write16(dev
, B43_SHM_SHARED
,
385 B43_SHM_SH_HOSTFLO
, (value
& 0x0000FFFF));
386 b43_shm_write16(dev
, B43_SHM_SHARED
,
387 B43_SHM_SH_HOSTFHI
, ((value
& 0xFFFF0000) >> 16));
390 void b43_tsf_read(struct b43_wldev
*dev
, u64
* tsf
)
392 /* We need to be careful. As we read the TSF from multiple
393 * registers, we should take care of register overflows.
394 * In theory, the whole tsf read process should be atomic.
395 * We try to be atomic here, by restaring the read process,
396 * if any of the high registers changed (overflew).
398 if (dev
->dev
->id
.revision
>= 3) {
399 u32 low
, high
, high2
;
402 high
= b43_read32(dev
, B43_MMIO_REV3PLUS_TSF_HIGH
);
403 low
= b43_read32(dev
, B43_MMIO_REV3PLUS_TSF_LOW
);
404 high2
= b43_read32(dev
, B43_MMIO_REV3PLUS_TSF_HIGH
);
405 } while (unlikely(high
!= high2
));
413 u16 test1
, test2
, test3
;
416 v3
= b43_read16(dev
, B43_MMIO_TSF_3
);
417 v2
= b43_read16(dev
, B43_MMIO_TSF_2
);
418 v1
= b43_read16(dev
, B43_MMIO_TSF_1
);
419 v0
= b43_read16(dev
, B43_MMIO_TSF_0
);
421 test3
= b43_read16(dev
, B43_MMIO_TSF_3
);
422 test2
= b43_read16(dev
, B43_MMIO_TSF_2
);
423 test1
= b43_read16(dev
, B43_MMIO_TSF_1
);
424 } while (v3
!= test3
|| v2
!= test2
|| v1
!= test1
);
438 static void b43_time_lock(struct b43_wldev
*dev
)
442 macctl
= b43_read32(dev
, B43_MMIO_MACCTL
);
443 macctl
|= B43_MACCTL_TBTTHOLD
;
444 b43_write32(dev
, B43_MMIO_MACCTL
, macctl
);
445 /* Commit the write */
446 b43_read32(dev
, B43_MMIO_MACCTL
);
449 static void b43_time_unlock(struct b43_wldev
*dev
)
453 macctl
= b43_read32(dev
, B43_MMIO_MACCTL
);
454 macctl
&= ~B43_MACCTL_TBTTHOLD
;
455 b43_write32(dev
, B43_MMIO_MACCTL
, macctl
);
456 /* Commit the write */
457 b43_read32(dev
, B43_MMIO_MACCTL
);
460 static void b43_tsf_write_locked(struct b43_wldev
*dev
, u64 tsf
)
462 /* Be careful with the in-progress timer.
463 * First zero out the low register, so we have a full
464 * register-overflow duration to complete the operation.
466 if (dev
->dev
->id
.revision
>= 3) {
467 u32 lo
= (tsf
& 0x00000000FFFFFFFFULL
);
468 u32 hi
= (tsf
& 0xFFFFFFFF00000000ULL
) >> 32;
470 b43_write32(dev
, B43_MMIO_REV3PLUS_TSF_LOW
, 0);
472 b43_write32(dev
, B43_MMIO_REV3PLUS_TSF_HIGH
, hi
);
474 b43_write32(dev
, B43_MMIO_REV3PLUS_TSF_LOW
, lo
);
476 u16 v0
= (tsf
& 0x000000000000FFFFULL
);
477 u16 v1
= (tsf
& 0x00000000FFFF0000ULL
) >> 16;
478 u16 v2
= (tsf
& 0x0000FFFF00000000ULL
) >> 32;
479 u16 v3
= (tsf
& 0xFFFF000000000000ULL
) >> 48;
481 b43_write16(dev
, B43_MMIO_TSF_0
, 0);
483 b43_write16(dev
, B43_MMIO_TSF_3
, v3
);
485 b43_write16(dev
, B43_MMIO_TSF_2
, v2
);
487 b43_write16(dev
, B43_MMIO_TSF_1
, v1
);
489 b43_write16(dev
, B43_MMIO_TSF_0
, v0
);
493 void b43_tsf_write(struct b43_wldev
*dev
, u64 tsf
)
496 b43_tsf_write_locked(dev
, tsf
);
497 b43_time_unlock(dev
);
501 void b43_macfilter_set(struct b43_wldev
*dev
, u16 offset
, const u8
* mac
)
503 static const u8 zero_addr
[ETH_ALEN
] = { 0 };
510 b43_write16(dev
, B43_MMIO_MACFILTER_CONTROL
, offset
);
514 b43_write16(dev
, B43_MMIO_MACFILTER_DATA
, data
);
517 b43_write16(dev
, B43_MMIO_MACFILTER_DATA
, data
);
520 b43_write16(dev
, B43_MMIO_MACFILTER_DATA
, data
);
523 static void b43_write_mac_bssid_templates(struct b43_wldev
*dev
)
527 u8 mac_bssid
[ETH_ALEN
* 2];
531 bssid
= dev
->wl
->bssid
;
532 mac
= dev
->wl
->mac_addr
;
534 b43_macfilter_set(dev
, B43_MACFILTER_BSSID
, bssid
);
536 memcpy(mac_bssid
, mac
, ETH_ALEN
);
537 memcpy(mac_bssid
+ ETH_ALEN
, bssid
, ETH_ALEN
);
539 /* Write our MAC address and BSSID to template ram */
540 for (i
= 0; i
< ARRAY_SIZE(mac_bssid
); i
+= sizeof(u32
)) {
541 tmp
= (u32
) (mac_bssid
[i
+ 0]);
542 tmp
|= (u32
) (mac_bssid
[i
+ 1]) << 8;
543 tmp
|= (u32
) (mac_bssid
[i
+ 2]) << 16;
544 tmp
|= (u32
) (mac_bssid
[i
+ 3]) << 24;
545 b43_ram_write(dev
, 0x20 + i
, tmp
);
549 static void b43_upload_card_macaddress(struct b43_wldev
*dev
)
551 b43_write_mac_bssid_templates(dev
);
552 b43_macfilter_set(dev
, B43_MACFILTER_SELF
, dev
->wl
->mac_addr
);
555 static void b43_set_slot_time(struct b43_wldev
*dev
, u16 slot_time
)
557 /* slot_time is in usec. */
558 if (dev
->phy
.type
!= B43_PHYTYPE_G
)
560 b43_write16(dev
, 0x684, 510 + slot_time
);
561 b43_shm_write16(dev
, B43_SHM_SHARED
, 0x0010, slot_time
);
564 static void b43_short_slot_timing_enable(struct b43_wldev
*dev
)
566 b43_set_slot_time(dev
, 9);
570 static void b43_short_slot_timing_disable(struct b43_wldev
*dev
)
572 b43_set_slot_time(dev
, 20);
576 /* Enable a Generic IRQ. "mask" is the mask of which IRQs to enable.
577 * Returns the _previously_ enabled IRQ mask.
579 static inline u32
b43_interrupt_enable(struct b43_wldev
*dev
, u32 mask
)
583 old_mask
= b43_read32(dev
, B43_MMIO_GEN_IRQ_MASK
);
584 b43_write32(dev
, B43_MMIO_GEN_IRQ_MASK
, old_mask
| mask
);
589 /* Disable a Generic IRQ. "mask" is the mask of which IRQs to disable.
590 * Returns the _previously_ enabled IRQ mask.
592 static inline u32
b43_interrupt_disable(struct b43_wldev
*dev
, u32 mask
)
596 old_mask
= b43_read32(dev
, B43_MMIO_GEN_IRQ_MASK
);
597 b43_write32(dev
, B43_MMIO_GEN_IRQ_MASK
, old_mask
& ~mask
);
602 /* Synchronize IRQ top- and bottom-half.
603 * IRQs must be masked before calling this.
604 * This must not be called with the irq_lock held.
606 static void b43_synchronize_irq(struct b43_wldev
*dev
)
608 synchronize_irq(dev
->dev
->irq
);
609 tasklet_kill(&dev
->isr_tasklet
);
612 /* DummyTransmission function, as documented on
613 * http://bcm-specs.sipsolutions.net/DummyTransmission
615 void b43_dummy_transmission(struct b43_wldev
*dev
)
617 struct b43_phy
*phy
= &dev
->phy
;
618 unsigned int i
, max_loop
;
631 buffer
[0] = 0x000201CC;
636 buffer
[0] = 0x000B846E;
643 for (i
= 0; i
< 5; i
++)
644 b43_ram_write(dev
, i
* 4, buffer
[i
]);
647 b43_read32(dev
, B43_MMIO_MACCTL
);
649 b43_write16(dev
, 0x0568, 0x0000);
650 b43_write16(dev
, 0x07C0, 0x0000);
651 value
= ((phy
->type
== B43_PHYTYPE_A
) ? 1 : 0);
652 b43_write16(dev
, 0x050C, value
);
653 b43_write16(dev
, 0x0508, 0x0000);
654 b43_write16(dev
, 0x050A, 0x0000);
655 b43_write16(dev
, 0x054C, 0x0000);
656 b43_write16(dev
, 0x056A, 0x0014);
657 b43_write16(dev
, 0x0568, 0x0826);
658 b43_write16(dev
, 0x0500, 0x0000);
659 b43_write16(dev
, 0x0502, 0x0030);
661 if (phy
->radio_ver
== 0x2050 && phy
->radio_rev
<= 0x5)
662 b43_radio_write16(dev
, 0x0051, 0x0017);
663 for (i
= 0x00; i
< max_loop
; i
++) {
664 value
= b43_read16(dev
, 0x050E);
669 for (i
= 0x00; i
< 0x0A; i
++) {
670 value
= b43_read16(dev
, 0x050E);
675 for (i
= 0x00; i
< 0x0A; i
++) {
676 value
= b43_read16(dev
, 0x0690);
677 if (!(value
& 0x0100))
681 if (phy
->radio_ver
== 0x2050 && phy
->radio_rev
<= 0x5)
682 b43_radio_write16(dev
, 0x0051, 0x0037);
685 static void key_write(struct b43_wldev
*dev
,
686 u8 index
, u8 algorithm
, const u8
* key
)
693 /* Key index/algo block */
694 kidx
= b43_kidx_to_fw(dev
, index
);
695 value
= ((kidx
<< 4) | algorithm
);
696 b43_shm_write16(dev
, B43_SHM_SHARED
,
697 B43_SHM_SH_KEYIDXBLOCK
+ (kidx
* 2), value
);
699 /* Write the key to the Key Table Pointer offset */
700 offset
= dev
->ktp
+ (index
* B43_SEC_KEYSIZE
);
701 for (i
= 0; i
< B43_SEC_KEYSIZE
; i
+= 2) {
703 value
|= (u16
) (key
[i
+ 1]) << 8;
704 b43_shm_write16(dev
, B43_SHM_SHARED
, offset
+ i
, value
);
708 static void keymac_write(struct b43_wldev
*dev
, u8 index
, const u8
* addr
)
710 u32 addrtmp
[2] = { 0, 0, };
711 u8 per_sta_keys_start
= 8;
713 if (b43_new_kidx_api(dev
))
714 per_sta_keys_start
= 4;
716 B43_WARN_ON(index
< per_sta_keys_start
);
717 /* We have two default TX keys and possibly two default RX keys.
718 * Physical mac 0 is mapped to physical key 4 or 8, depending
719 * on the firmware version.
720 * So we must adjust the index here.
722 index
-= per_sta_keys_start
;
725 addrtmp
[0] = addr
[0];
726 addrtmp
[0] |= ((u32
) (addr
[1]) << 8);
727 addrtmp
[0] |= ((u32
) (addr
[2]) << 16);
728 addrtmp
[0] |= ((u32
) (addr
[3]) << 24);
729 addrtmp
[1] = addr
[4];
730 addrtmp
[1] |= ((u32
) (addr
[5]) << 8);
733 if (dev
->dev
->id
.revision
>= 5) {
734 /* Receive match transmitter address mechanism */
735 b43_shm_write32(dev
, B43_SHM_RCMTA
,
736 (index
* 2) + 0, addrtmp
[0]);
737 b43_shm_write16(dev
, B43_SHM_RCMTA
,
738 (index
* 2) + 1, addrtmp
[1]);
740 /* RXE (Receive Engine) and
741 * PSM (Programmable State Machine) mechanism
744 /* TODO write to RCM 16, 19, 22 and 25 */
746 b43_shm_write32(dev
, B43_SHM_SHARED
,
747 B43_SHM_SH_PSM
+ (index
* 6) + 0,
749 b43_shm_write16(dev
, B43_SHM_SHARED
,
750 B43_SHM_SH_PSM
+ (index
* 6) + 4,
756 static void do_key_write(struct b43_wldev
*dev
,
757 u8 index
, u8 algorithm
,
758 const u8
* key
, size_t key_len
, const u8
* mac_addr
)
760 u8 buf
[B43_SEC_KEYSIZE
] = { 0, };
761 u8 per_sta_keys_start
= 8;
763 if (b43_new_kidx_api(dev
))
764 per_sta_keys_start
= 4;
766 B43_WARN_ON(index
>= dev
->max_nr_keys
);
767 B43_WARN_ON(key_len
> B43_SEC_KEYSIZE
);
769 if (index
>= per_sta_keys_start
)
770 keymac_write(dev
, index
, NULL
); /* First zero out mac. */
772 memcpy(buf
, key
, key_len
);
773 key_write(dev
, index
, algorithm
, buf
);
774 if (index
>= per_sta_keys_start
)
775 keymac_write(dev
, index
, mac_addr
);
777 dev
->key
[index
].algorithm
= algorithm
;
780 static int b43_key_write(struct b43_wldev
*dev
,
781 int index
, u8 algorithm
,
782 const u8
* key
, size_t key_len
,
784 struct ieee80211_key_conf
*keyconf
)
789 if (key_len
> B43_SEC_KEYSIZE
)
791 for (i
= 0; i
< dev
->max_nr_keys
; i
++) {
792 /* Check that we don't already have this key. */
793 B43_WARN_ON(dev
->key
[i
].keyconf
== keyconf
);
796 /* Either pairwise key or address is 00:00:00:00:00:00
797 * for transmit-only keys. Search the index. */
798 if (b43_new_kidx_api(dev
))
802 for (i
= sta_keys_start
; i
< dev
->max_nr_keys
; i
++) {
803 if (!dev
->key
[i
].keyconf
) {
810 b43err(dev
->wl
, "Out of hardware key memory\n");
814 B43_WARN_ON(index
> 3);
816 do_key_write(dev
, index
, algorithm
, key
, key_len
, mac_addr
);
817 if ((index
<= 3) && !b43_new_kidx_api(dev
)) {
819 B43_WARN_ON(mac_addr
);
820 do_key_write(dev
, index
+ 4, algorithm
, key
, key_len
, NULL
);
822 keyconf
->hw_key_idx
= index
;
823 dev
->key
[index
].keyconf
= keyconf
;
828 static int b43_key_clear(struct b43_wldev
*dev
, int index
)
830 if (B43_WARN_ON((index
< 0) || (index
>= dev
->max_nr_keys
)))
832 do_key_write(dev
, index
, B43_SEC_ALGO_NONE
,
833 NULL
, B43_SEC_KEYSIZE
, NULL
);
834 if ((index
<= 3) && !b43_new_kidx_api(dev
)) {
835 do_key_write(dev
, index
+ 4, B43_SEC_ALGO_NONE
,
836 NULL
, B43_SEC_KEYSIZE
, NULL
);
838 dev
->key
[index
].keyconf
= NULL
;
843 static void b43_clear_keys(struct b43_wldev
*dev
)
847 for (i
= 0; i
< dev
->max_nr_keys
; i
++)
848 b43_key_clear(dev
, i
);
851 void b43_power_saving_ctl_bits(struct b43_wldev
*dev
, unsigned int ps_flags
)
859 B43_WARN_ON((ps_flags
& B43_PS_ENABLED
) &&
860 (ps_flags
& B43_PS_DISABLED
));
861 B43_WARN_ON((ps_flags
& B43_PS_AWAKE
) && (ps_flags
& B43_PS_ASLEEP
));
863 if (ps_flags
& B43_PS_ENABLED
) {
865 } else if (ps_flags
& B43_PS_DISABLED
) {
868 //TODO: If powersave is not off and FIXME is not set and we are not in adhoc
869 // and thus is not an AP and we are associated, set bit 25
871 if (ps_flags
& B43_PS_AWAKE
) {
873 } else if (ps_flags
& B43_PS_ASLEEP
) {
876 //TODO: If the device is awake or this is an AP, or we are scanning, or FIXME,
877 // or we are associated, or FIXME, or the latest PS-Poll packet sent was
878 // successful, set bit26
881 /* FIXME: For now we force awake-on and hwps-off */
885 macctl
= b43_read32(dev
, B43_MMIO_MACCTL
);
887 macctl
|= B43_MACCTL_HWPS
;
889 macctl
&= ~B43_MACCTL_HWPS
;
891 macctl
|= B43_MACCTL_AWAKE
;
893 macctl
&= ~B43_MACCTL_AWAKE
;
894 b43_write32(dev
, B43_MMIO_MACCTL
, macctl
);
896 b43_read32(dev
, B43_MMIO_MACCTL
);
897 if (awake
&& dev
->dev
->id
.revision
>= 5) {
898 /* Wait for the microcode to wake up. */
899 for (i
= 0; i
< 100; i
++) {
900 ucstat
= b43_shm_read16(dev
, B43_SHM_SHARED
,
901 B43_SHM_SH_UCODESTAT
);
902 if (ucstat
!= B43_SHM_SH_UCODESTAT_SLEEP
)
909 /* Turn the Analog ON/OFF */
910 static void b43_switch_analog(struct b43_wldev
*dev
, int on
)
912 b43_write16(dev
, B43_MMIO_PHY0
, on
? 0 : 0xF4);
915 void b43_wireless_core_reset(struct b43_wldev
*dev
, u32 flags
)
920 flags
|= B43_TMSLOW_PHYCLKEN
;
921 flags
|= B43_TMSLOW_PHYRESET
;
922 ssb_device_enable(dev
->dev
, flags
);
923 msleep(2); /* Wait for the PLL to turn on. */
925 /* Now take the PHY out of Reset again */
926 tmslow
= ssb_read32(dev
->dev
, SSB_TMSLOW
);
927 tmslow
|= SSB_TMSLOW_FGC
;
928 tmslow
&= ~B43_TMSLOW_PHYRESET
;
929 ssb_write32(dev
->dev
, SSB_TMSLOW
, tmslow
);
930 ssb_read32(dev
->dev
, SSB_TMSLOW
); /* flush */
932 tmslow
&= ~SSB_TMSLOW_FGC
;
933 ssb_write32(dev
->dev
, SSB_TMSLOW
, tmslow
);
934 ssb_read32(dev
->dev
, SSB_TMSLOW
); /* flush */
938 b43_switch_analog(dev
, 1);
940 macctl
= b43_read32(dev
, B43_MMIO_MACCTL
);
941 macctl
&= ~B43_MACCTL_GMODE
;
942 if (flags
& B43_TMSLOW_GMODE
)
943 macctl
|= B43_MACCTL_GMODE
;
944 macctl
|= B43_MACCTL_IHR_ENABLED
;
945 b43_write32(dev
, B43_MMIO_MACCTL
, macctl
);
948 static void handle_irq_transmit_status(struct b43_wldev
*dev
)
952 struct b43_txstatus stat
;
955 v0
= b43_read32(dev
, B43_MMIO_XMITSTAT_0
);
956 if (!(v0
& 0x00000001))
958 v1
= b43_read32(dev
, B43_MMIO_XMITSTAT_1
);
960 stat
.cookie
= (v0
>> 16);
961 stat
.seq
= (v1
& 0x0000FFFF);
962 stat
.phy_stat
= ((v1
& 0x00FF0000) >> 16);
963 tmp
= (v0
& 0x0000FFFF);
964 stat
.frame_count
= ((tmp
& 0xF000) >> 12);
965 stat
.rts_count
= ((tmp
& 0x0F00) >> 8);
966 stat
.supp_reason
= ((tmp
& 0x001C) >> 2);
967 stat
.pm_indicated
= !!(tmp
& 0x0080);
968 stat
.intermediate
= !!(tmp
& 0x0040);
969 stat
.for_ampdu
= !!(tmp
& 0x0020);
970 stat
.acked
= !!(tmp
& 0x0002);
972 b43_handle_txstatus(dev
, &stat
);
976 static void drain_txstatus_queue(struct b43_wldev
*dev
)
980 if (dev
->dev
->id
.revision
< 5)
982 /* Read all entries from the microcode TXstatus FIFO
983 * and throw them away.
986 dummy
= b43_read32(dev
, B43_MMIO_XMITSTAT_0
);
987 if (!(dummy
& 0x00000001))
989 dummy
= b43_read32(dev
, B43_MMIO_XMITSTAT_1
);
993 static u32
b43_jssi_read(struct b43_wldev
*dev
)
997 val
= b43_shm_read16(dev
, B43_SHM_SHARED
, 0x08A);
999 val
|= b43_shm_read16(dev
, B43_SHM_SHARED
, 0x088);
1004 static void b43_jssi_write(struct b43_wldev
*dev
, u32 jssi
)
1006 b43_shm_write16(dev
, B43_SHM_SHARED
, 0x088, (jssi
& 0x0000FFFF));
1007 b43_shm_write16(dev
, B43_SHM_SHARED
, 0x08A, (jssi
& 0xFFFF0000) >> 16);
1010 static void b43_generate_noise_sample(struct b43_wldev
*dev
)
1012 b43_jssi_write(dev
, 0x7F7F7F7F);
1013 b43_write32(dev
, B43_MMIO_MACCMD
,
1014 b43_read32(dev
, B43_MMIO_MACCMD
) | B43_MACCMD_BGNOISE
);
1015 B43_WARN_ON(dev
->noisecalc
.channel_at_start
!= dev
->phy
.channel
);
1018 static void b43_calculate_link_quality(struct b43_wldev
*dev
)
1020 /* Top half of Link Quality calculation. */
1022 if (dev
->noisecalc
.calculation_running
)
1024 dev
->noisecalc
.channel_at_start
= dev
->phy
.channel
;
1025 dev
->noisecalc
.calculation_running
= 1;
1026 dev
->noisecalc
.nr_samples
= 0;
1028 b43_generate_noise_sample(dev
);
1031 static void handle_irq_noise(struct b43_wldev
*dev
)
1033 struct b43_phy
*phy
= &dev
->phy
;
1039 /* Bottom half of Link Quality calculation. */
1041 B43_WARN_ON(!dev
->noisecalc
.calculation_running
);
1042 if (dev
->noisecalc
.channel_at_start
!= phy
->channel
)
1043 goto drop_calculation
;
1044 *((__le32
*)noise
) = cpu_to_le32(b43_jssi_read(dev
));
1045 if (noise
[0] == 0x7F || noise
[1] == 0x7F ||
1046 noise
[2] == 0x7F || noise
[3] == 0x7F)
1049 /* Get the noise samples. */
1050 B43_WARN_ON(dev
->noisecalc
.nr_samples
>= 8);
1051 i
= dev
->noisecalc
.nr_samples
;
1052 noise
[0] = limit_value(noise
[0], 0, ARRAY_SIZE(phy
->nrssi_lt
) - 1);
1053 noise
[1] = limit_value(noise
[1], 0, ARRAY_SIZE(phy
->nrssi_lt
) - 1);
1054 noise
[2] = limit_value(noise
[2], 0, ARRAY_SIZE(phy
->nrssi_lt
) - 1);
1055 noise
[3] = limit_value(noise
[3], 0, ARRAY_SIZE(phy
->nrssi_lt
) - 1);
1056 dev
->noisecalc
.samples
[i
][0] = phy
->nrssi_lt
[noise
[0]];
1057 dev
->noisecalc
.samples
[i
][1] = phy
->nrssi_lt
[noise
[1]];
1058 dev
->noisecalc
.samples
[i
][2] = phy
->nrssi_lt
[noise
[2]];
1059 dev
->noisecalc
.samples
[i
][3] = phy
->nrssi_lt
[noise
[3]];
1060 dev
->noisecalc
.nr_samples
++;
1061 if (dev
->noisecalc
.nr_samples
== 8) {
1062 /* Calculate the Link Quality by the noise samples. */
1064 for (i
= 0; i
< 8; i
++) {
1065 for (j
= 0; j
< 4; j
++)
1066 average
+= dev
->noisecalc
.samples
[i
][j
];
1072 tmp
= b43_shm_read16(dev
, B43_SHM_SHARED
, 0x40C);
1073 tmp
= (tmp
/ 128) & 0x1F;
1083 dev
->stats
.link_noise
= average
;
1085 dev
->noisecalc
.calculation_running
= 0;
1089 b43_generate_noise_sample(dev
);
1092 static void handle_irq_tbtt_indication(struct b43_wldev
*dev
)
1094 if (b43_is_mode(dev
->wl
, IEEE80211_IF_TYPE_AP
)) {
1097 if (1 /*FIXME: the last PSpoll frame was sent successfully */ )
1098 b43_power_saving_ctl_bits(dev
, 0);
1100 if (b43_is_mode(dev
->wl
, IEEE80211_IF_TYPE_IBSS
))
1104 static void handle_irq_atim_end(struct b43_wldev
*dev
)
1106 if (dev
->dfq_valid
) {
1107 b43_write32(dev
, B43_MMIO_MACCMD
,
1108 b43_read32(dev
, B43_MMIO_MACCMD
)
1109 | B43_MACCMD_DFQ_VALID
);
1114 static void handle_irq_pmq(struct b43_wldev
*dev
)
1121 tmp
= b43_read32(dev
, B43_MMIO_PS_STATUS
);
1122 if (!(tmp
& 0x00000008))
1125 /* 16bit write is odd, but correct. */
1126 b43_write16(dev
, B43_MMIO_PS_STATUS
, 0x0002);
1129 static void b43_write_template_common(struct b43_wldev
*dev
,
1130 const u8
* data
, u16 size
,
1132 u16 shm_size_offset
, u8 rate
)
1135 struct b43_plcp_hdr4 plcp
;
1138 b43_generate_plcp_hdr(&plcp
, size
+ FCS_LEN
, rate
);
1139 b43_ram_write(dev
, ram_offset
, le32_to_cpu(plcp
.data
));
1140 ram_offset
+= sizeof(u32
);
1141 /* The PLCP is 6 bytes long, but we only wrote 4 bytes, yet.
1142 * So leave the first two bytes of the next write blank.
1144 tmp
= (u32
) (data
[0]) << 16;
1145 tmp
|= (u32
) (data
[1]) << 24;
1146 b43_ram_write(dev
, ram_offset
, tmp
);
1147 ram_offset
+= sizeof(u32
);
1148 for (i
= 2; i
< size
; i
+= sizeof(u32
)) {
1149 tmp
= (u32
) (data
[i
+ 0]);
1151 tmp
|= (u32
) (data
[i
+ 1]) << 8;
1153 tmp
|= (u32
) (data
[i
+ 2]) << 16;
1155 tmp
|= (u32
) (data
[i
+ 3]) << 24;
1156 b43_ram_write(dev
, ram_offset
+ i
- 2, tmp
);
1158 b43_shm_write16(dev
, B43_SHM_SHARED
, shm_size_offset
,
1159 size
+ sizeof(struct b43_plcp_hdr6
));
1162 static void b43_write_beacon_template(struct b43_wldev
*dev
,
1164 u16 shm_size_offset
, u8 rate
)
1166 unsigned int i
, len
, variable_len
;
1167 const struct ieee80211_mgmt
*bcn
;
1171 bcn
= (const struct ieee80211_mgmt
*)(dev
->wl
->current_beacon
->data
);
1172 len
= min((size_t) dev
->wl
->current_beacon
->len
,
1173 0x200 - sizeof(struct b43_plcp_hdr6
));
1175 b43_write_template_common(dev
, (const u8
*)bcn
,
1176 len
, ram_offset
, shm_size_offset
, rate
);
1178 /* Find the position of the TIM and the DTIM_period value
1179 * and write them to SHM. */
1180 ie
= bcn
->u
.beacon
.variable
;
1181 variable_len
= len
- offsetof(struct ieee80211_mgmt
, u
.beacon
.variable
);
1182 for (i
= 0; i
< variable_len
- 2; ) {
1183 uint8_t ie_id
, ie_len
;
1190 /* This is the TIM Information Element */
1192 /* Check whether the ie_len is in the beacon data range. */
1193 if (variable_len
< ie_len
+ 2 + i
)
1195 /* A valid TIM is at least 4 bytes long. */
1200 tim_position
= sizeof(struct b43_plcp_hdr6
);
1201 tim_position
+= offsetof(struct ieee80211_mgmt
, u
.beacon
.variable
);
1204 dtim_period
= ie
[i
+ 3];
1206 b43_shm_write16(dev
, B43_SHM_SHARED
,
1207 B43_SHM_SH_TIMBPOS
, tim_position
);
1208 b43_shm_write16(dev
, B43_SHM_SHARED
,
1209 B43_SHM_SH_DTIMPER
, dtim_period
);
1215 b43warn(dev
->wl
, "Did not find a valid TIM IE in "
1216 "the beacon template packet. AP or IBSS operation "
1217 "may be broken.\n");
1221 static void b43_write_probe_resp_plcp(struct b43_wldev
*dev
,
1222 u16 shm_offset
, u16 size
, u8 rate
)
1224 struct b43_plcp_hdr4 plcp
;
1229 b43_generate_plcp_hdr(&plcp
, size
+ FCS_LEN
, rate
);
1230 dur
= ieee80211_generic_frame_duration(dev
->wl
->hw
,
1232 B43_RATE_TO_BASE100KBPS(rate
));
1233 /* Write PLCP in two parts and timing for packet transfer */
1234 tmp
= le32_to_cpu(plcp
.data
);
1235 b43_shm_write16(dev
, B43_SHM_SHARED
, shm_offset
, tmp
& 0xFFFF);
1236 b43_shm_write16(dev
, B43_SHM_SHARED
, shm_offset
+ 2, tmp
>> 16);
1237 b43_shm_write16(dev
, B43_SHM_SHARED
, shm_offset
+ 6, le16_to_cpu(dur
));
1240 /* Instead of using custom probe response template, this function
1241 * just patches custom beacon template by:
1242 * 1) Changing packet type
1243 * 2) Patching duration field
1246 static const u8
* b43_generate_probe_resp(struct b43_wldev
*dev
,
1247 u16
*dest_size
, u8 rate
)
1251 u16 src_size
, elem_size
, src_pos
, dest_pos
;
1253 struct ieee80211_hdr
*hdr
;
1256 src_size
= dev
->wl
->current_beacon
->len
;
1257 src_data
= (const u8
*)dev
->wl
->current_beacon
->data
;
1259 /* Get the start offset of the variable IEs in the packet. */
1260 ie_start
= offsetof(struct ieee80211_mgmt
, u
.probe_resp
.variable
);
1261 B43_WARN_ON(ie_start
!= offsetof(struct ieee80211_mgmt
, u
.beacon
.variable
));
1263 if (B43_WARN_ON(src_size
< ie_start
))
1266 dest_data
= kmalloc(src_size
, GFP_ATOMIC
);
1267 if (unlikely(!dest_data
))
1270 /* Copy the static data and all Information Elements, except the TIM. */
1271 memcpy(dest_data
, src_data
, ie_start
);
1273 dest_pos
= ie_start
;
1274 for ( ; src_pos
< src_size
- 2; src_pos
+= elem_size
) {
1275 elem_size
= src_data
[src_pos
+ 1] + 2;
1276 if (src_data
[src_pos
] == 5) {
1277 /* This is the TIM. */
1280 memcpy(dest_data
+ dest_pos
, src_data
+ src_pos
,
1282 dest_pos
+= elem_size
;
1284 *dest_size
= dest_pos
;
1285 hdr
= (struct ieee80211_hdr
*)dest_data
;
1287 /* Set the frame control. */
1288 hdr
->frame_control
= cpu_to_le16(IEEE80211_FTYPE_MGMT
|
1289 IEEE80211_STYPE_PROBE_RESP
);
1290 dur
= ieee80211_generic_frame_duration(dev
->wl
->hw
,
1291 dev
->wl
->vif
, *dest_size
,
1292 B43_RATE_TO_BASE100KBPS(rate
));
1293 hdr
->duration_id
= dur
;
1298 static void b43_write_probe_resp_template(struct b43_wldev
*dev
,
1300 u16 shm_size_offset
, u8 rate
)
1302 const u8
*probe_resp_data
;
1305 size
= dev
->wl
->current_beacon
->len
;
1306 probe_resp_data
= b43_generate_probe_resp(dev
, &size
, rate
);
1307 if (unlikely(!probe_resp_data
))
1310 /* Looks like PLCP headers plus packet timings are stored for
1311 * all possible basic rates
1313 b43_write_probe_resp_plcp(dev
, 0x31A, size
, B43_CCK_RATE_1MB
);
1314 b43_write_probe_resp_plcp(dev
, 0x32C, size
, B43_CCK_RATE_2MB
);
1315 b43_write_probe_resp_plcp(dev
, 0x33E, size
, B43_CCK_RATE_5MB
);
1316 b43_write_probe_resp_plcp(dev
, 0x350, size
, B43_CCK_RATE_11MB
);
1318 size
= min((size_t) size
, 0x200 - sizeof(struct b43_plcp_hdr6
));
1319 b43_write_template_common(dev
, probe_resp_data
,
1320 size
, ram_offset
, shm_size_offset
, rate
);
1321 kfree(probe_resp_data
);
1324 /* Asynchronously update the packet templates in template RAM.
1325 * Locking: Requires wl->irq_lock to be locked. */
1326 static void b43_update_templates(struct b43_wl
*wl
, struct sk_buff
*beacon
)
1328 /* This is the top half of the ansynchronous beacon update.
1329 * The bottom half is the beacon IRQ.
1330 * Beacon update must be asynchronous to avoid sending an
1331 * invalid beacon. This can happen for example, if the firmware
1332 * transmits a beacon while we are updating it. */
1334 if (wl
->current_beacon
)
1335 dev_kfree_skb_any(wl
->current_beacon
);
1336 wl
->current_beacon
= beacon
;
1337 wl
->beacon0_uploaded
= 0;
1338 wl
->beacon1_uploaded
= 0;
1341 static void b43_set_ssid(struct b43_wldev
*dev
, const u8
* ssid
, u8 ssid_len
)
1346 len
= min((u16
) ssid_len
, (u16
) 0x100);
1347 for (i
= 0; i
< len
; i
+= sizeof(u32
)) {
1348 tmp
= (u32
) (ssid
[i
+ 0]);
1350 tmp
|= (u32
) (ssid
[i
+ 1]) << 8;
1352 tmp
|= (u32
) (ssid
[i
+ 2]) << 16;
1354 tmp
|= (u32
) (ssid
[i
+ 3]) << 24;
1355 b43_shm_write32(dev
, B43_SHM_SHARED
, 0x380 + i
, tmp
);
1357 b43_shm_write16(dev
, B43_SHM_SHARED
, 0x48, len
);
1360 static void b43_set_beacon_int(struct b43_wldev
*dev
, u16 beacon_int
)
1363 if (dev
->dev
->id
.revision
>= 3) {
1364 b43_write32(dev
, 0x188, (beacon_int
<< 16));
1366 b43_write16(dev
, 0x606, (beacon_int
>> 6));
1367 b43_write16(dev
, 0x610, beacon_int
);
1369 b43_time_unlock(dev
);
1372 static void handle_irq_beacon(struct b43_wldev
*dev
)
1374 struct b43_wl
*wl
= dev
->wl
;
1377 if (!b43_is_mode(wl
, IEEE80211_IF_TYPE_AP
))
1380 /* This is the bottom half of the asynchronous beacon update. */
1382 cmd
= b43_read32(dev
, B43_MMIO_MACCMD
);
1383 if (!(cmd
& B43_MACCMD_BEACON0_VALID
)) {
1384 if (!wl
->beacon0_uploaded
) {
1385 b43_write_beacon_template(dev
, 0x68, 0x18,
1387 b43_write_probe_resp_template(dev
, 0x268, 0x4A,
1389 wl
->beacon0_uploaded
= 1;
1391 cmd
|= B43_MACCMD_BEACON0_VALID
;
1393 if (!(cmd
& B43_MACCMD_BEACON1_VALID
)) {
1394 if (!wl
->beacon1_uploaded
) {
1395 b43_write_beacon_template(dev
, 0x468, 0x1A,
1397 wl
->beacon1_uploaded
= 1;
1399 cmd
|= B43_MACCMD_BEACON1_VALID
;
1401 b43_write32(dev
, B43_MMIO_MACCMD
, cmd
);
1404 static void handle_irq_ucode_debug(struct b43_wldev
*dev
)
1409 /* Interrupt handler bottom-half */
1410 static void b43_interrupt_tasklet(struct b43_wldev
*dev
)
1413 u32 dma_reason
[ARRAY_SIZE(dev
->dma_reason
)];
1414 u32 merged_dma_reason
= 0;
1416 unsigned long flags
;
1418 spin_lock_irqsave(&dev
->wl
->irq_lock
, flags
);
1420 B43_WARN_ON(b43_status(dev
) != B43_STAT_STARTED
);
1422 reason
= dev
->irq_reason
;
1423 for (i
= 0; i
< ARRAY_SIZE(dma_reason
); i
++) {
1424 dma_reason
[i
] = dev
->dma_reason
[i
];
1425 merged_dma_reason
|= dma_reason
[i
];
1428 if (unlikely(reason
& B43_IRQ_MAC_TXERR
))
1429 b43err(dev
->wl
, "MAC transmission error\n");
1431 if (unlikely(reason
& B43_IRQ_PHY_TXERR
)) {
1432 b43err(dev
->wl
, "PHY transmission error\n");
1434 if (unlikely(atomic_dec_and_test(&dev
->phy
.txerr_cnt
))) {
1435 atomic_set(&dev
->phy
.txerr_cnt
,
1436 B43_PHY_TX_BADNESS_LIMIT
);
1437 b43err(dev
->wl
, "Too many PHY TX errors, "
1438 "restarting the controller\n");
1439 b43_controller_restart(dev
, "PHY TX errors");
1443 if (unlikely(merged_dma_reason
& (B43_DMAIRQ_FATALMASK
|
1444 B43_DMAIRQ_NONFATALMASK
))) {
1445 if (merged_dma_reason
& B43_DMAIRQ_FATALMASK
) {
1446 b43err(dev
->wl
, "Fatal DMA error: "
1447 "0x%08X, 0x%08X, 0x%08X, "
1448 "0x%08X, 0x%08X, 0x%08X\n",
1449 dma_reason
[0], dma_reason
[1],
1450 dma_reason
[2], dma_reason
[3],
1451 dma_reason
[4], dma_reason
[5]);
1452 b43_controller_restart(dev
, "DMA error");
1454 spin_unlock_irqrestore(&dev
->wl
->irq_lock
, flags
);
1457 if (merged_dma_reason
& B43_DMAIRQ_NONFATALMASK
) {
1458 b43err(dev
->wl
, "DMA error: "
1459 "0x%08X, 0x%08X, 0x%08X, "
1460 "0x%08X, 0x%08X, 0x%08X\n",
1461 dma_reason
[0], dma_reason
[1],
1462 dma_reason
[2], dma_reason
[3],
1463 dma_reason
[4], dma_reason
[5]);
1467 if (unlikely(reason
& B43_IRQ_UCODE_DEBUG
))
1468 handle_irq_ucode_debug(dev
);
1469 if (reason
& B43_IRQ_TBTT_INDI
)
1470 handle_irq_tbtt_indication(dev
);
1471 if (reason
& B43_IRQ_ATIM_END
)
1472 handle_irq_atim_end(dev
);
1473 if (reason
& B43_IRQ_BEACON
)
1474 handle_irq_beacon(dev
);
1475 if (reason
& B43_IRQ_PMQ
)
1476 handle_irq_pmq(dev
);
1477 if (reason
& B43_IRQ_TXFIFO_FLUSH_OK
)
1479 if (reason
& B43_IRQ_NOISESAMPLE_OK
)
1480 handle_irq_noise(dev
);
1482 /* Check the DMA reason registers for received data. */
1483 if (dma_reason
[0] & B43_DMAIRQ_RX_DONE
)
1484 b43_dma_rx(dev
->dma
.rx_ring0
);
1485 if (dma_reason
[3] & B43_DMAIRQ_RX_DONE
)
1486 b43_dma_rx(dev
->dma
.rx_ring3
);
1487 B43_WARN_ON(dma_reason
[1] & B43_DMAIRQ_RX_DONE
);
1488 B43_WARN_ON(dma_reason
[2] & B43_DMAIRQ_RX_DONE
);
1489 B43_WARN_ON(dma_reason
[4] & B43_DMAIRQ_RX_DONE
);
1490 B43_WARN_ON(dma_reason
[5] & B43_DMAIRQ_RX_DONE
);
1492 if (reason
& B43_IRQ_TX_OK
)
1493 handle_irq_transmit_status(dev
);
1495 b43_interrupt_enable(dev
, dev
->irq_savedstate
);
1497 spin_unlock_irqrestore(&dev
->wl
->irq_lock
, flags
);
1500 static void b43_interrupt_ack(struct b43_wldev
*dev
, u32 reason
)
1502 b43_write32(dev
, B43_MMIO_GEN_IRQ_REASON
, reason
);
1504 b43_write32(dev
, B43_MMIO_DMA0_REASON
, dev
->dma_reason
[0]);
1505 b43_write32(dev
, B43_MMIO_DMA1_REASON
, dev
->dma_reason
[1]);
1506 b43_write32(dev
, B43_MMIO_DMA2_REASON
, dev
->dma_reason
[2]);
1507 b43_write32(dev
, B43_MMIO_DMA3_REASON
, dev
->dma_reason
[3]);
1508 b43_write32(dev
, B43_MMIO_DMA4_REASON
, dev
->dma_reason
[4]);
1509 b43_write32(dev
, B43_MMIO_DMA5_REASON
, dev
->dma_reason
[5]);
1512 /* Interrupt handler top-half */
1513 static irqreturn_t
b43_interrupt_handler(int irq
, void *dev_id
)
1515 irqreturn_t ret
= IRQ_NONE
;
1516 struct b43_wldev
*dev
= dev_id
;
1522 spin_lock(&dev
->wl
->irq_lock
);
1524 if (b43_status(dev
) < B43_STAT_STARTED
)
1526 reason
= b43_read32(dev
, B43_MMIO_GEN_IRQ_REASON
);
1527 if (reason
== 0xffffffff) /* shared IRQ */
1530 reason
&= b43_read32(dev
, B43_MMIO_GEN_IRQ_MASK
);
1534 dev
->dma_reason
[0] = b43_read32(dev
, B43_MMIO_DMA0_REASON
)
1536 dev
->dma_reason
[1] = b43_read32(dev
, B43_MMIO_DMA1_REASON
)
1538 dev
->dma_reason
[2] = b43_read32(dev
, B43_MMIO_DMA2_REASON
)
1540 dev
->dma_reason
[3] = b43_read32(dev
, B43_MMIO_DMA3_REASON
)
1542 dev
->dma_reason
[4] = b43_read32(dev
, B43_MMIO_DMA4_REASON
)
1544 dev
->dma_reason
[5] = b43_read32(dev
, B43_MMIO_DMA5_REASON
)
1547 b43_interrupt_ack(dev
, reason
);
1548 /* disable all IRQs. They are enabled again in the bottom half. */
1549 dev
->irq_savedstate
= b43_interrupt_disable(dev
, B43_IRQ_ALL
);
1550 /* save the reason code and call our bottom half. */
1551 dev
->irq_reason
= reason
;
1552 tasklet_schedule(&dev
->isr_tasklet
);
1555 spin_unlock(&dev
->wl
->irq_lock
);
1560 static void b43_release_firmware(struct b43_wldev
*dev
)
1562 release_firmware(dev
->fw
.ucode
);
1563 dev
->fw
.ucode
= NULL
;
1564 release_firmware(dev
->fw
.pcm
);
1566 release_firmware(dev
->fw
.initvals
);
1567 dev
->fw
.initvals
= NULL
;
1568 release_firmware(dev
->fw
.initvals_band
);
1569 dev
->fw
.initvals_band
= NULL
;
1572 static void b43_print_fw_helptext(struct b43_wl
*wl
, bool error
)
1576 text
= "You must go to "
1577 "http://linuxwireless.org/en/users/Drivers/b43#devicefirmware "
1578 "and download the latest firmware (version 4).\n";
1585 static int do_request_fw(struct b43_wldev
*dev
,
1587 const struct firmware
**fw
)
1589 char path
[sizeof(modparam_fwpostfix
) + 32];
1590 struct b43_fw_header
*hdr
;
1597 snprintf(path
, ARRAY_SIZE(path
),
1599 modparam_fwpostfix
, name
);
1600 err
= request_firmware(fw
, path
, dev
->dev
->dev
);
1602 b43err(dev
->wl
, "Firmware file \"%s\" not found "
1603 "or load failed.\n", path
);
1606 if ((*fw
)->size
< sizeof(struct b43_fw_header
))
1608 hdr
= (struct b43_fw_header
*)((*fw
)->data
);
1609 switch (hdr
->type
) {
1610 case B43_FW_TYPE_UCODE
:
1611 case B43_FW_TYPE_PCM
:
1612 size
= be32_to_cpu(hdr
->size
);
1613 if (size
!= (*fw
)->size
- sizeof(struct b43_fw_header
))
1616 case B43_FW_TYPE_IV
:
1627 b43err(dev
->wl
, "Firmware file \"%s\" format error.\n", path
);
1631 static int b43_request_firmware(struct b43_wldev
*dev
)
1633 struct b43_firmware
*fw
= &dev
->fw
;
1634 const u8 rev
= dev
->dev
->id
.revision
;
1635 const char *filename
;
1639 tmshigh
= ssb_read32(dev
->dev
, SSB_TMSHIGH
);
1641 if ((rev
>= 5) && (rev
<= 10))
1642 filename
= "ucode5";
1643 else if ((rev
>= 11) && (rev
<= 12))
1644 filename
= "ucode11";
1646 filename
= "ucode13";
1649 err
= do_request_fw(dev
, filename
, &fw
->ucode
);
1654 if ((rev
>= 5) && (rev
<= 10))
1660 err
= do_request_fw(dev
, filename
, &fw
->pcm
);
1664 if (!fw
->initvals
) {
1665 switch (dev
->phy
.type
) {
1667 if ((rev
>= 5) && (rev
<= 10)) {
1668 if (tmshigh
& B43_TMSHIGH_HAVE_2GHZ_PHY
)
1669 filename
= "a0g1initvals5";
1671 filename
= "a0g0initvals5";
1673 goto err_no_initvals
;
1676 if ((rev
>= 5) && (rev
<= 10))
1677 filename
= "b0g0initvals5";
1679 filename
= "lp0initvals13";
1681 goto err_no_initvals
;
1684 if ((rev
>= 11) && (rev
<= 12))
1685 filename
= "n0initvals11";
1687 goto err_no_initvals
;
1690 goto err_no_initvals
;
1692 err
= do_request_fw(dev
, filename
, &fw
->initvals
);
1696 if (!fw
->initvals_band
) {
1697 switch (dev
->phy
.type
) {
1699 if ((rev
>= 5) && (rev
<= 10)) {
1700 if (tmshigh
& B43_TMSHIGH_HAVE_2GHZ_PHY
)
1701 filename
= "a0g1bsinitvals5";
1703 filename
= "a0g0bsinitvals5";
1704 } else if (rev
>= 11)
1707 goto err_no_initvals
;
1710 if ((rev
>= 5) && (rev
<= 10))
1711 filename
= "b0g0bsinitvals5";
1715 goto err_no_initvals
;
1718 if ((rev
>= 11) && (rev
<= 12))
1719 filename
= "n0bsinitvals11";
1721 goto err_no_initvals
;
1724 goto err_no_initvals
;
1726 err
= do_request_fw(dev
, filename
, &fw
->initvals_band
);
1734 b43_print_fw_helptext(dev
->wl
, 1);
1739 b43err(dev
->wl
, "No microcode available for core rev %u\n", rev
);
1744 b43err(dev
->wl
, "No PCM available for core rev %u\n", rev
);
1749 b43err(dev
->wl
, "No Initial Values firmware file for PHY %u, "
1750 "core rev %u\n", dev
->phy
.type
, rev
);
1754 b43_release_firmware(dev
);
1758 static int b43_upload_microcode(struct b43_wldev
*dev
)
1760 const size_t hdr_len
= sizeof(struct b43_fw_header
);
1762 unsigned int i
, len
;
1763 u16 fwrev
, fwpatch
, fwdate
, fwtime
;
1767 /* Upload Microcode. */
1768 data
= (__be32
*) (dev
->fw
.ucode
->data
+ hdr_len
);
1769 len
= (dev
->fw
.ucode
->size
- hdr_len
) / sizeof(__be32
);
1770 b43_shm_control_word(dev
, B43_SHM_UCODE
| B43_SHM_AUTOINC_W
, 0x0000);
1771 for (i
= 0; i
< len
; i
++) {
1772 b43_write32(dev
, B43_MMIO_SHM_DATA
, be32_to_cpu(data
[i
]));
1777 /* Upload PCM data. */
1778 data
= (__be32
*) (dev
->fw
.pcm
->data
+ hdr_len
);
1779 len
= (dev
->fw
.pcm
->size
- hdr_len
) / sizeof(__be32
);
1780 b43_shm_control_word(dev
, B43_SHM_HW
, 0x01EA);
1781 b43_write32(dev
, B43_MMIO_SHM_DATA
, 0x00004000);
1782 /* No need for autoinc bit in SHM_HW */
1783 b43_shm_control_word(dev
, B43_SHM_HW
, 0x01EB);
1784 for (i
= 0; i
< len
; i
++) {
1785 b43_write32(dev
, B43_MMIO_SHM_DATA
, be32_to_cpu(data
[i
]));
1790 b43_write32(dev
, B43_MMIO_GEN_IRQ_REASON
, B43_IRQ_ALL
);
1791 b43_write32(dev
, B43_MMIO_MACCTL
,
1792 B43_MACCTL_PSM_RUN
|
1793 B43_MACCTL_IHR_ENABLED
| B43_MACCTL_INFRA
);
1795 /* Wait for the microcode to load and respond */
1798 tmp
= b43_read32(dev
, B43_MMIO_GEN_IRQ_REASON
);
1799 if (tmp
== B43_IRQ_MAC_SUSPENDED
)
1803 b43err(dev
->wl
, "Microcode not responding\n");
1804 b43_print_fw_helptext(dev
->wl
, 1);
1810 b43_read32(dev
, B43_MMIO_GEN_IRQ_REASON
); /* dummy read */
1812 /* Get and check the revisions. */
1813 fwrev
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_UCODEREV
);
1814 fwpatch
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_UCODEPATCH
);
1815 fwdate
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_UCODEDATE
);
1816 fwtime
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_UCODETIME
);
1818 if (fwrev
<= 0x128) {
1819 b43err(dev
->wl
, "YOUR FIRMWARE IS TOO OLD. Firmware from "
1820 "binary drivers older than version 4.x is unsupported. "
1821 "You must upgrade your firmware files.\n");
1822 b43_print_fw_helptext(dev
->wl
, 1);
1823 b43_write32(dev
, B43_MMIO_MACCTL
, 0);
1827 b43dbg(dev
->wl
, "Loading firmware version %u.%u "
1828 "(20%.2i-%.2i-%.2i %.2i:%.2i:%.2i)\n",
1830 (fwdate
>> 12) & 0xF, (fwdate
>> 8) & 0xF, fwdate
& 0xFF,
1831 (fwtime
>> 11) & 0x1F, (fwtime
>> 5) & 0x3F, fwtime
& 0x1F);
1833 dev
->fw
.rev
= fwrev
;
1834 dev
->fw
.patch
= fwpatch
;
1836 if (b43_is_old_txhdr_format(dev
)) {
1837 b43warn(dev
->wl
, "You are using an old firmware image. "
1838 "Support for old firmware will be removed in July 2008.\n");
1839 b43_print_fw_helptext(dev
->wl
, 0);
1846 static int b43_write_initvals(struct b43_wldev
*dev
,
1847 const struct b43_iv
*ivals
,
1851 const struct b43_iv
*iv
;
1856 BUILD_BUG_ON(sizeof(struct b43_iv
) != 6);
1858 for (i
= 0; i
< count
; i
++) {
1859 if (array_size
< sizeof(iv
->offset_size
))
1861 array_size
-= sizeof(iv
->offset_size
);
1862 offset
= be16_to_cpu(iv
->offset_size
);
1863 bit32
= !!(offset
& B43_IV_32BIT
);
1864 offset
&= B43_IV_OFFSET_MASK
;
1865 if (offset
>= 0x1000)
1870 if (array_size
< sizeof(iv
->data
.d32
))
1872 array_size
-= sizeof(iv
->data
.d32
);
1874 value
= be32_to_cpu(get_unaligned(&iv
->data
.d32
));
1875 b43_write32(dev
, offset
, value
);
1877 iv
= (const struct b43_iv
*)((const uint8_t *)iv
+
1883 if (array_size
< sizeof(iv
->data
.d16
))
1885 array_size
-= sizeof(iv
->data
.d16
);
1887 value
= be16_to_cpu(iv
->data
.d16
);
1888 b43_write16(dev
, offset
, value
);
1890 iv
= (const struct b43_iv
*)((const uint8_t *)iv
+
1901 b43err(dev
->wl
, "Initial Values Firmware file-format error.\n");
1902 b43_print_fw_helptext(dev
->wl
, 1);
1907 static int b43_upload_initvals(struct b43_wldev
*dev
)
1909 const size_t hdr_len
= sizeof(struct b43_fw_header
);
1910 const struct b43_fw_header
*hdr
;
1911 struct b43_firmware
*fw
= &dev
->fw
;
1912 const struct b43_iv
*ivals
;
1916 hdr
= (const struct b43_fw_header
*)(fw
->initvals
->data
);
1917 ivals
= (const struct b43_iv
*)(fw
->initvals
->data
+ hdr_len
);
1918 count
= be32_to_cpu(hdr
->size
);
1919 err
= b43_write_initvals(dev
, ivals
, count
,
1920 fw
->initvals
->size
- hdr_len
);
1923 if (fw
->initvals_band
) {
1924 hdr
= (const struct b43_fw_header
*)(fw
->initvals_band
->data
);
1925 ivals
= (const struct b43_iv
*)(fw
->initvals_band
->data
+ hdr_len
);
1926 count
= be32_to_cpu(hdr
->size
);
1927 err
= b43_write_initvals(dev
, ivals
, count
,
1928 fw
->initvals_band
->size
- hdr_len
);
1937 /* Initialize the GPIOs
1938 * http://bcm-specs.sipsolutions.net/GPIO
1940 static int b43_gpio_init(struct b43_wldev
*dev
)
1942 struct ssb_bus
*bus
= dev
->dev
->bus
;
1943 struct ssb_device
*gpiodev
, *pcidev
= NULL
;
1946 b43_write32(dev
, B43_MMIO_MACCTL
, b43_read32(dev
, B43_MMIO_MACCTL
)
1947 & ~B43_MACCTL_GPOUTSMSK
);
1949 b43_write16(dev
, B43_MMIO_GPIO_MASK
, b43_read16(dev
, B43_MMIO_GPIO_MASK
)
1954 if (dev
->dev
->bus
->chip_id
== 0x4301) {
1958 if (0 /* FIXME: conditional unknown */ ) {
1959 b43_write16(dev
, B43_MMIO_GPIO_MASK
,
1960 b43_read16(dev
, B43_MMIO_GPIO_MASK
)
1965 if (dev
->dev
->bus
->sprom
.boardflags_lo
& B43_BFL_PACTRL
) {
1966 b43_write16(dev
, B43_MMIO_GPIO_MASK
,
1967 b43_read16(dev
, B43_MMIO_GPIO_MASK
)
1972 if (dev
->dev
->id
.revision
>= 2)
1973 mask
|= 0x0010; /* FIXME: This is redundant. */
1975 #ifdef CONFIG_SSB_DRIVER_PCICORE
1976 pcidev
= bus
->pcicore
.dev
;
1978 gpiodev
= bus
->chipco
.dev
? : pcidev
;
1981 ssb_write32(gpiodev
, B43_GPIO_CONTROL
,
1982 (ssb_read32(gpiodev
, B43_GPIO_CONTROL
)
1988 /* Turn off all GPIO stuff. Call this on module unload, for example. */
1989 static void b43_gpio_cleanup(struct b43_wldev
*dev
)
1991 struct ssb_bus
*bus
= dev
->dev
->bus
;
1992 struct ssb_device
*gpiodev
, *pcidev
= NULL
;
1994 #ifdef CONFIG_SSB_DRIVER_PCICORE
1995 pcidev
= bus
->pcicore
.dev
;
1997 gpiodev
= bus
->chipco
.dev
? : pcidev
;
2000 ssb_write32(gpiodev
, B43_GPIO_CONTROL
, 0);
2003 /* http://bcm-specs.sipsolutions.net/EnableMac */
2004 void b43_mac_enable(struct b43_wldev
*dev
)
2006 dev
->mac_suspended
--;
2007 B43_WARN_ON(dev
->mac_suspended
< 0);
2008 B43_WARN_ON(irqs_disabled());
2009 if (dev
->mac_suspended
== 0) {
2010 b43_write32(dev
, B43_MMIO_MACCTL
,
2011 b43_read32(dev
, B43_MMIO_MACCTL
)
2012 | B43_MACCTL_ENABLED
);
2013 b43_write32(dev
, B43_MMIO_GEN_IRQ_REASON
,
2014 B43_IRQ_MAC_SUSPENDED
);
2016 b43_read32(dev
, B43_MMIO_MACCTL
);
2017 b43_read32(dev
, B43_MMIO_GEN_IRQ_REASON
);
2018 b43_power_saving_ctl_bits(dev
, 0);
2020 /* Re-enable IRQs. */
2021 spin_lock_irq(&dev
->wl
->irq_lock
);
2022 b43_interrupt_enable(dev
, dev
->irq_savedstate
);
2023 spin_unlock_irq(&dev
->wl
->irq_lock
);
2027 /* http://bcm-specs.sipsolutions.net/SuspendMAC */
2028 void b43_mac_suspend(struct b43_wldev
*dev
)
2034 B43_WARN_ON(irqs_disabled());
2035 B43_WARN_ON(dev
->mac_suspended
< 0);
2037 if (dev
->mac_suspended
== 0) {
2038 /* Mask IRQs before suspending MAC. Otherwise
2039 * the MAC stays busy and won't suspend. */
2040 spin_lock_irq(&dev
->wl
->irq_lock
);
2041 tmp
= b43_interrupt_disable(dev
, B43_IRQ_ALL
);
2042 spin_unlock_irq(&dev
->wl
->irq_lock
);
2043 b43_synchronize_irq(dev
);
2044 dev
->irq_savedstate
= tmp
;
2046 b43_power_saving_ctl_bits(dev
, B43_PS_AWAKE
);
2047 b43_write32(dev
, B43_MMIO_MACCTL
,
2048 b43_read32(dev
, B43_MMIO_MACCTL
)
2049 & ~B43_MACCTL_ENABLED
);
2050 /* force pci to flush the write */
2051 b43_read32(dev
, B43_MMIO_MACCTL
);
2052 for (i
= 40; i
; i
--) {
2053 tmp
= b43_read32(dev
, B43_MMIO_GEN_IRQ_REASON
);
2054 if (tmp
& B43_IRQ_MAC_SUSPENDED
)
2058 b43err(dev
->wl
, "MAC suspend failed\n");
2061 dev
->mac_suspended
++;
2064 static void b43_adjust_opmode(struct b43_wldev
*dev
)
2066 struct b43_wl
*wl
= dev
->wl
;
2070 ctl
= b43_read32(dev
, B43_MMIO_MACCTL
);
2071 /* Reset status to STA infrastructure mode. */
2072 ctl
&= ~B43_MACCTL_AP
;
2073 ctl
&= ~B43_MACCTL_KEEP_CTL
;
2074 ctl
&= ~B43_MACCTL_KEEP_BADPLCP
;
2075 ctl
&= ~B43_MACCTL_KEEP_BAD
;
2076 ctl
&= ~B43_MACCTL_PROMISC
;
2077 ctl
&= ~B43_MACCTL_BEACPROMISC
;
2078 ctl
|= B43_MACCTL_INFRA
;
2080 if (b43_is_mode(wl
, IEEE80211_IF_TYPE_AP
))
2081 ctl
|= B43_MACCTL_AP
;
2082 else if (b43_is_mode(wl
, IEEE80211_IF_TYPE_IBSS
))
2083 ctl
&= ~B43_MACCTL_INFRA
;
2085 if (wl
->filter_flags
& FIF_CONTROL
)
2086 ctl
|= B43_MACCTL_KEEP_CTL
;
2087 if (wl
->filter_flags
& FIF_FCSFAIL
)
2088 ctl
|= B43_MACCTL_KEEP_BAD
;
2089 if (wl
->filter_flags
& FIF_PLCPFAIL
)
2090 ctl
|= B43_MACCTL_KEEP_BADPLCP
;
2091 if (wl
->filter_flags
& FIF_PROMISC_IN_BSS
)
2092 ctl
|= B43_MACCTL_PROMISC
;
2093 if (wl
->filter_flags
& FIF_BCN_PRBRESP_PROMISC
)
2094 ctl
|= B43_MACCTL_BEACPROMISC
;
2096 /* Workaround: On old hardware the HW-MAC-address-filter
2097 * doesn't work properly, so always run promisc in filter
2098 * it in software. */
2099 if (dev
->dev
->id
.revision
<= 4)
2100 ctl
|= B43_MACCTL_PROMISC
;
2102 b43_write32(dev
, B43_MMIO_MACCTL
, ctl
);
2105 if ((ctl
& B43_MACCTL_INFRA
) && !(ctl
& B43_MACCTL_AP
)) {
2106 if (dev
->dev
->bus
->chip_id
== 0x4306 &&
2107 dev
->dev
->bus
->chip_rev
== 3)
2112 b43_write16(dev
, 0x612, cfp_pretbtt
);
2115 static void b43_rate_memory_write(struct b43_wldev
*dev
, u16 rate
, int is_ofdm
)
2121 offset
+= (b43_plcp_get_ratecode_ofdm(rate
) & 0x000F) * 2;
2124 offset
+= (b43_plcp_get_ratecode_cck(rate
) & 0x000F) * 2;
2126 b43_shm_write16(dev
, B43_SHM_SHARED
, offset
+ 0x20,
2127 b43_shm_read16(dev
, B43_SHM_SHARED
, offset
));
2130 static void b43_rate_memory_init(struct b43_wldev
*dev
)
2132 switch (dev
->phy
.type
) {
2136 b43_rate_memory_write(dev
, B43_OFDM_RATE_6MB
, 1);
2137 b43_rate_memory_write(dev
, B43_OFDM_RATE_12MB
, 1);
2138 b43_rate_memory_write(dev
, B43_OFDM_RATE_18MB
, 1);
2139 b43_rate_memory_write(dev
, B43_OFDM_RATE_24MB
, 1);
2140 b43_rate_memory_write(dev
, B43_OFDM_RATE_36MB
, 1);
2141 b43_rate_memory_write(dev
, B43_OFDM_RATE_48MB
, 1);
2142 b43_rate_memory_write(dev
, B43_OFDM_RATE_54MB
, 1);
2143 if (dev
->phy
.type
== B43_PHYTYPE_A
)
2147 b43_rate_memory_write(dev
, B43_CCK_RATE_1MB
, 0);
2148 b43_rate_memory_write(dev
, B43_CCK_RATE_2MB
, 0);
2149 b43_rate_memory_write(dev
, B43_CCK_RATE_5MB
, 0);
2150 b43_rate_memory_write(dev
, B43_CCK_RATE_11MB
, 0);
2157 /* Set the TX-Antenna for management frames sent by firmware. */
2158 static void b43_mgmtframe_txantenna(struct b43_wldev
*dev
, int antenna
)
2165 ant
|= B43_TXH_PHY_ANT0
;
2168 ant
|= B43_TXH_PHY_ANT1
;
2171 ant
|= B43_TXH_PHY_ANT2
;
2174 ant
|= B43_TXH_PHY_ANT3
;
2176 case B43_ANTENNA_AUTO
:
2177 ant
|= B43_TXH_PHY_ANT01AUTO
;
2183 /* FIXME We also need to set the other flags of the PHY control field somewhere. */
2186 tmp
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_BEACPHYCTL
);
2187 tmp
= (tmp
& ~B43_TXH_PHY_ANT
) | ant
;
2188 b43_shm_write16(dev
, B43_SHM_SHARED
, B43_SHM_SH_BEACPHYCTL
, tmp
);
2190 tmp
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_ACKCTSPHYCTL
);
2191 tmp
= (tmp
& ~B43_TXH_PHY_ANT
) | ant
;
2192 b43_shm_write16(dev
, B43_SHM_SHARED
, B43_SHM_SH_ACKCTSPHYCTL
, tmp
);
2193 /* For Probe Resposes */
2194 tmp
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_PRPHYCTL
);
2195 tmp
= (tmp
& ~B43_TXH_PHY_ANT
) | ant
;
2196 b43_shm_write16(dev
, B43_SHM_SHARED
, B43_SHM_SH_PRPHYCTL
, tmp
);
2199 /* This is the opposite of b43_chip_init() */
2200 static void b43_chip_exit(struct b43_wldev
*dev
)
2202 b43_radio_turn_off(dev
, 1);
2203 b43_gpio_cleanup(dev
);
2204 /* firmware is released later */
2207 /* Initialize the chip
2208 * http://bcm-specs.sipsolutions.net/ChipInit
2210 static int b43_chip_init(struct b43_wldev
*dev
)
2212 struct b43_phy
*phy
= &dev
->phy
;
2217 b43_write32(dev
, B43_MMIO_MACCTL
,
2218 B43_MACCTL_PSM_JMP0
| B43_MACCTL_IHR_ENABLED
);
2220 err
= b43_request_firmware(dev
);
2223 err
= b43_upload_microcode(dev
);
2225 goto out
; /* firmware is released later */
2227 err
= b43_gpio_init(dev
);
2229 goto out
; /* firmware is released later */
2231 err
= b43_upload_initvals(dev
);
2233 goto err_gpio_clean
;
2234 b43_radio_turn_on(dev
);
2236 b43_write16(dev
, 0x03E6, 0x0000);
2237 err
= b43_phy_init(dev
);
2241 /* Select initial Interference Mitigation. */
2242 tmp
= phy
->interfmode
;
2243 phy
->interfmode
= B43_INTERFMODE_NONE
;
2244 b43_radio_set_interference_mitigation(dev
, tmp
);
2246 b43_set_rx_antenna(dev
, B43_ANTENNA_DEFAULT
);
2247 b43_mgmtframe_txantenna(dev
, B43_ANTENNA_DEFAULT
);
2249 if (phy
->type
== B43_PHYTYPE_B
) {
2250 value16
= b43_read16(dev
, 0x005E);
2252 b43_write16(dev
, 0x005E, value16
);
2254 b43_write32(dev
, 0x0100, 0x01000000);
2255 if (dev
->dev
->id
.revision
< 5)
2256 b43_write32(dev
, 0x010C, 0x01000000);
2258 b43_write32(dev
, B43_MMIO_MACCTL
, b43_read32(dev
, B43_MMIO_MACCTL
)
2259 & ~B43_MACCTL_INFRA
);
2260 b43_write32(dev
, B43_MMIO_MACCTL
, b43_read32(dev
, B43_MMIO_MACCTL
)
2261 | B43_MACCTL_INFRA
);
2263 /* Probe Response Timeout value */
2264 /* FIXME: Default to 0, has to be set by ioctl probably... :-/ */
2265 b43_shm_write16(dev
, B43_SHM_SHARED
, 0x0074, 0x0000);
2267 /* Initially set the wireless operation mode. */
2268 b43_adjust_opmode(dev
);
2270 if (dev
->dev
->id
.revision
< 3) {
2271 b43_write16(dev
, 0x060E, 0x0000);
2272 b43_write16(dev
, 0x0610, 0x8000);
2273 b43_write16(dev
, 0x0604, 0x0000);
2274 b43_write16(dev
, 0x0606, 0x0200);
2276 b43_write32(dev
, 0x0188, 0x80000000);
2277 b43_write32(dev
, 0x018C, 0x02000000);
2279 b43_write32(dev
, B43_MMIO_GEN_IRQ_REASON
, 0x00004000);
2280 b43_write32(dev
, B43_MMIO_DMA0_IRQ_MASK
, 0x0001DC00);
2281 b43_write32(dev
, B43_MMIO_DMA1_IRQ_MASK
, 0x0000DC00);
2282 b43_write32(dev
, B43_MMIO_DMA2_IRQ_MASK
, 0x0000DC00);
2283 b43_write32(dev
, B43_MMIO_DMA3_IRQ_MASK
, 0x0001DC00);
2284 b43_write32(dev
, B43_MMIO_DMA4_IRQ_MASK
, 0x0000DC00);
2285 b43_write32(dev
, B43_MMIO_DMA5_IRQ_MASK
, 0x0000DC00);
2287 value32
= ssb_read32(dev
->dev
, SSB_TMSLOW
);
2288 value32
|= 0x00100000;
2289 ssb_write32(dev
->dev
, SSB_TMSLOW
, value32
);
2291 b43_write16(dev
, B43_MMIO_POWERUP_DELAY
,
2292 dev
->dev
->bus
->chipco
.fast_pwrup_delay
);
2295 b43dbg(dev
->wl
, "Chip initialized\n");
2300 b43_radio_turn_off(dev
, 1);
2302 b43_gpio_cleanup(dev
);
2306 static void b43_periodic_every120sec(struct b43_wldev
*dev
)
2308 struct b43_phy
*phy
= &dev
->phy
;
2310 if (phy
->type
!= B43_PHYTYPE_G
|| phy
->rev
< 2)
2313 b43_mac_suspend(dev
);
2314 b43_lo_g_measure(dev
);
2315 b43_mac_enable(dev
);
2316 if (b43_has_hardware_pctl(phy
))
2317 b43_lo_g_ctl_mark_all_unused(dev
);
2320 static void b43_periodic_every60sec(struct b43_wldev
*dev
)
2322 struct b43_phy
*phy
= &dev
->phy
;
2324 if (phy
->type
!= B43_PHYTYPE_G
)
2326 if (!b43_has_hardware_pctl(phy
))
2327 b43_lo_g_ctl_mark_all_unused(dev
);
2328 if (dev
->dev
->bus
->sprom
.boardflags_lo
& B43_BFL_RSSI
) {
2329 b43_mac_suspend(dev
);
2330 b43_calc_nrssi_slope(dev
);
2331 if ((phy
->radio_ver
== 0x2050) && (phy
->radio_rev
== 8)) {
2332 u8 old_chan
= phy
->channel
;
2334 /* VCO Calibration */
2336 b43_radio_selectchannel(dev
, 1, 0);
2338 b43_radio_selectchannel(dev
, 13, 0);
2339 b43_radio_selectchannel(dev
, old_chan
, 0);
2341 b43_mac_enable(dev
);
2345 static void b43_periodic_every30sec(struct b43_wldev
*dev
)
2347 /* Update device statistics. */
2348 b43_calculate_link_quality(dev
);
2351 static void b43_periodic_every15sec(struct b43_wldev
*dev
)
2353 struct b43_phy
*phy
= &dev
->phy
;
2355 if (phy
->type
== B43_PHYTYPE_G
) {
2356 //TODO: update_aci_moving_average
2357 if (phy
->aci_enable
&& phy
->aci_wlan_automatic
) {
2358 b43_mac_suspend(dev
);
2359 if (!phy
->aci_enable
&& 1 /*TODO: not scanning? */ ) {
2360 if (0 /*TODO: bunch of conditions */ ) {
2361 b43_radio_set_interference_mitigation
2362 (dev
, B43_INTERFMODE_MANUALWLAN
);
2364 } else if (1 /*TODO*/) {
2366 if ((aci_average > 1000) && !(b43_radio_aci_scan(dev))) {
2367 b43_radio_set_interference_mitigation(dev,
2368 B43_INTERFMODE_NONE);
2372 b43_mac_enable(dev
);
2373 } else if (phy
->interfmode
== B43_INTERFMODE_NONWLAN
&&
2375 //TODO: implement rev1 workaround
2378 b43_phy_xmitpower(dev
); //FIXME: unless scanning?
2379 //TODO for APHY (temperature?)
2381 atomic_set(&phy
->txerr_cnt
, B43_PHY_TX_BADNESS_LIMIT
);
2385 static void do_periodic_work(struct b43_wldev
*dev
)
2389 state
= dev
->periodic_state
;
2391 b43_periodic_every120sec(dev
);
2393 b43_periodic_every60sec(dev
);
2395 b43_periodic_every30sec(dev
);
2396 b43_periodic_every15sec(dev
);
2399 /* Periodic work locking policy:
2400 * The whole periodic work handler is protected by
2401 * wl->mutex. If another lock is needed somewhere in the
2402 * pwork callchain, it's aquired in-place, where it's needed.
2404 static void b43_periodic_work_handler(struct work_struct
*work
)
2406 struct b43_wldev
*dev
= container_of(work
, struct b43_wldev
,
2407 periodic_work
.work
);
2408 struct b43_wl
*wl
= dev
->wl
;
2409 unsigned long delay
;
2411 mutex_lock(&wl
->mutex
);
2413 if (unlikely(b43_status(dev
) != B43_STAT_STARTED
))
2415 if (b43_debug(dev
, B43_DBG_PWORK_STOP
))
2418 do_periodic_work(dev
);
2420 dev
->periodic_state
++;
2422 if (b43_debug(dev
, B43_DBG_PWORK_FAST
))
2423 delay
= msecs_to_jiffies(50);
2425 delay
= round_jiffies_relative(HZ
* 15);
2426 queue_delayed_work(wl
->hw
->workqueue
, &dev
->periodic_work
, delay
);
2428 mutex_unlock(&wl
->mutex
);
2431 static void b43_periodic_tasks_setup(struct b43_wldev
*dev
)
2433 struct delayed_work
*work
= &dev
->periodic_work
;
2435 dev
->periodic_state
= 0;
2436 INIT_DELAYED_WORK(work
, b43_periodic_work_handler
);
2437 queue_delayed_work(dev
->wl
->hw
->workqueue
, work
, 0);
2440 /* Check if communication with the device works correctly. */
2441 static int b43_validate_chipaccess(struct b43_wldev
*dev
)
2445 backup
= b43_shm_read32(dev
, B43_SHM_SHARED
, 0);
2447 /* Check for read/write and endianness problems. */
2448 b43_shm_write32(dev
, B43_SHM_SHARED
, 0, 0x55AAAA55);
2449 if (b43_shm_read32(dev
, B43_SHM_SHARED
, 0) != 0x55AAAA55)
2451 b43_shm_write32(dev
, B43_SHM_SHARED
, 0, 0xAA5555AA);
2452 if (b43_shm_read32(dev
, B43_SHM_SHARED
, 0) != 0xAA5555AA)
2455 b43_shm_write32(dev
, B43_SHM_SHARED
, 0, backup
);
2457 if ((dev
->dev
->id
.revision
>= 3) && (dev
->dev
->id
.revision
<= 10)) {
2458 /* The 32bit register shadows the two 16bit registers
2459 * with update sideeffects. Validate this. */
2460 b43_write16(dev
, B43_MMIO_TSF_CFP_START
, 0xAAAA);
2461 b43_write32(dev
, B43_MMIO_TSF_CFP_START
, 0xCCCCBBBB);
2462 if (b43_read16(dev
, B43_MMIO_TSF_CFP_START_LOW
) != 0xBBBB)
2464 if (b43_read16(dev
, B43_MMIO_TSF_CFP_START_HIGH
) != 0xCCCC)
2467 b43_write32(dev
, B43_MMIO_TSF_CFP_START
, 0);
2469 v
= b43_read32(dev
, B43_MMIO_MACCTL
);
2470 v
|= B43_MACCTL_GMODE
;
2471 if (v
!= (B43_MACCTL_GMODE
| B43_MACCTL_IHR_ENABLED
))
2476 b43err(dev
->wl
, "Failed to validate the chipaccess\n");
2480 static void b43_security_init(struct b43_wldev
*dev
)
2482 dev
->max_nr_keys
= (dev
->dev
->id
.revision
>= 5) ? 58 : 20;
2483 B43_WARN_ON(dev
->max_nr_keys
> ARRAY_SIZE(dev
->key
));
2484 dev
->ktp
= b43_shm_read16(dev
, B43_SHM_SHARED
, B43_SHM_SH_KTP
);
2485 /* KTP is a word address, but we address SHM bytewise.
2486 * So multiply by two.
2489 if (dev
->dev
->id
.revision
>= 5) {
2490 /* Number of RCMTA address slots */
2491 b43_write16(dev
, B43_MMIO_RCMTA_COUNT
, dev
->max_nr_keys
- 8);
2493 b43_clear_keys(dev
);
2496 static int b43_rng_read(struct hwrng
*rng
, u32
* data
)
2498 struct b43_wl
*wl
= (struct b43_wl
*)rng
->priv
;
2499 unsigned long flags
;
2501 /* Don't take wl->mutex here, as it could deadlock with
2502 * hwrng internal locking. It's not needed to take
2503 * wl->mutex here, anyway. */
2505 spin_lock_irqsave(&wl
->irq_lock
, flags
);
2506 *data
= b43_read16(wl
->current_dev
, B43_MMIO_RNG
);
2507 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
2509 return (sizeof(u16
));
2512 static void b43_rng_exit(struct b43_wl
*wl
)
2514 if (wl
->rng_initialized
)
2515 hwrng_unregister(&wl
->rng
);
2518 static int b43_rng_init(struct b43_wl
*wl
)
2522 snprintf(wl
->rng_name
, ARRAY_SIZE(wl
->rng_name
),
2523 "%s_%s", KBUILD_MODNAME
, wiphy_name(wl
->hw
->wiphy
));
2524 wl
->rng
.name
= wl
->rng_name
;
2525 wl
->rng
.data_read
= b43_rng_read
;
2526 wl
->rng
.priv
= (unsigned long)wl
;
2527 wl
->rng_initialized
= 1;
2528 err
= hwrng_register(&wl
->rng
);
2530 wl
->rng_initialized
= 0;
2531 b43err(wl
, "Failed to register the random "
2532 "number generator (%d)\n", err
);
2538 static int b43_op_tx(struct ieee80211_hw
*hw
,
2539 struct sk_buff
*skb
,
2540 struct ieee80211_tx_control
*ctl
)
2542 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
2543 struct b43_wldev
*dev
= wl
->current_dev
;
2548 if (unlikely(b43_status(dev
) < B43_STAT_STARTED
))
2550 /* DMA-TX is done without a global lock. */
2551 err
= b43_dma_tx(dev
, skb
, ctl
);
2554 return NETDEV_TX_BUSY
;
2555 return NETDEV_TX_OK
;
2558 static int b43_op_conf_tx(struct ieee80211_hw
*hw
,
2560 const struct ieee80211_tx_queue_params
*params
)
2565 static int b43_op_get_tx_stats(struct ieee80211_hw
*hw
,
2566 struct ieee80211_tx_queue_stats
*stats
)
2568 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
2569 struct b43_wldev
*dev
= wl
->current_dev
;
2570 unsigned long flags
;
2575 spin_lock_irqsave(&wl
->irq_lock
, flags
);
2576 if (likely(b43_status(dev
) >= B43_STAT_STARTED
)) {
2577 b43_dma_get_tx_stats(dev
, stats
);
2580 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
2585 static int b43_op_get_stats(struct ieee80211_hw
*hw
,
2586 struct ieee80211_low_level_stats
*stats
)
2588 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
2589 unsigned long flags
;
2591 spin_lock_irqsave(&wl
->irq_lock
, flags
);
2592 memcpy(stats
, &wl
->ieee_stats
, sizeof(*stats
));
2593 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
2598 static const char *phymode_to_string(unsigned int phymode
)
2613 static int find_wldev_for_phymode(struct b43_wl
*wl
,
2614 unsigned int phymode
,
2615 struct b43_wldev
**dev
, bool * gmode
)
2617 struct b43_wldev
*d
;
2619 list_for_each_entry(d
, &wl
->devlist
, list
) {
2620 if (d
->phy
.possible_phymodes
& phymode
) {
2621 /* Ok, this device supports the PHY-mode.
2622 * Now figure out how the gmode bit has to be
2623 * set to support it. */
2624 if (phymode
== B43_PHYMODE_A
)
2637 static void b43_put_phy_into_reset(struct b43_wldev
*dev
)
2639 struct ssb_device
*sdev
= dev
->dev
;
2642 tmslow
= ssb_read32(sdev
, SSB_TMSLOW
);
2643 tmslow
&= ~B43_TMSLOW_GMODE
;
2644 tmslow
|= B43_TMSLOW_PHYRESET
;
2645 tmslow
|= SSB_TMSLOW_FGC
;
2646 ssb_write32(sdev
, SSB_TMSLOW
, tmslow
);
2649 tmslow
= ssb_read32(sdev
, SSB_TMSLOW
);
2650 tmslow
&= ~SSB_TMSLOW_FGC
;
2651 tmslow
|= B43_TMSLOW_PHYRESET
;
2652 ssb_write32(sdev
, SSB_TMSLOW
, tmslow
);
2656 /* Expects wl->mutex locked */
2657 static int b43_switch_phymode(struct b43_wl
*wl
, unsigned int new_mode
)
2659 struct b43_wldev
*up_dev
;
2660 struct b43_wldev
*down_dev
;
2665 err
= find_wldev_for_phymode(wl
, new_mode
, &up_dev
, &gmode
);
2667 b43err(wl
, "Could not find a device for %s-PHY mode\n",
2668 phymode_to_string(new_mode
));
2671 if ((up_dev
== wl
->current_dev
) &&
2672 (!!wl
->current_dev
->phy
.gmode
== !!gmode
)) {
2673 /* This device is already running. */
2676 b43dbg(wl
, "Reconfiguring PHYmode to %s-PHY\n",
2677 phymode_to_string(new_mode
));
2678 down_dev
= wl
->current_dev
;
2680 prev_status
= b43_status(down_dev
);
2681 /* Shutdown the currently running core. */
2682 if (prev_status
>= B43_STAT_STARTED
)
2683 b43_wireless_core_stop(down_dev
);
2684 if (prev_status
>= B43_STAT_INITIALIZED
)
2685 b43_wireless_core_exit(down_dev
);
2687 if (down_dev
!= up_dev
) {
2688 /* We switch to a different core, so we put PHY into
2689 * RESET on the old core. */
2690 b43_put_phy_into_reset(down_dev
);
2693 /* Now start the new core. */
2694 up_dev
->phy
.gmode
= gmode
;
2695 if (prev_status
>= B43_STAT_INITIALIZED
) {
2696 err
= b43_wireless_core_init(up_dev
);
2698 b43err(wl
, "Fatal: Could not initialize device for "
2699 "newly selected %s-PHY mode\n",
2700 phymode_to_string(new_mode
));
2704 if (prev_status
>= B43_STAT_STARTED
) {
2705 err
= b43_wireless_core_start(up_dev
);
2707 b43err(wl
, "Fatal: Coult not start device for "
2708 "newly selected %s-PHY mode\n",
2709 phymode_to_string(new_mode
));
2710 b43_wireless_core_exit(up_dev
);
2714 B43_WARN_ON(b43_status(up_dev
) != prev_status
);
2716 wl
->current_dev
= up_dev
;
2720 /* Whoops, failed to init the new core. No core is operating now. */
2721 wl
->current_dev
= NULL
;
2725 /* Check if the use of the antenna that ieee80211 told us to
2726 * use is possible. This will fall back to DEFAULT.
2727 * "antenna_nr" is the antenna identifier we got from ieee80211. */
2728 u8
b43_ieee80211_antenna_sanitize(struct b43_wldev
*dev
,
2733 if (antenna_nr
== 0) {
2734 /* Zero means "use default antenna". That's always OK. */
2738 /* Get the mask of available antennas. */
2740 antenna_mask
= dev
->dev
->bus
->sprom
.ant_available_bg
;
2742 antenna_mask
= dev
->dev
->bus
->sprom
.ant_available_a
;
2744 if (!(antenna_mask
& (1 << (antenna_nr
- 1)))) {
2745 /* This antenna is not available. Fall back to default. */
2752 static int b43_antenna_from_ieee80211(struct b43_wldev
*dev
, u8 antenna
)
2754 antenna
= b43_ieee80211_antenna_sanitize(dev
, antenna
);
2756 case 0: /* default/diversity */
2757 return B43_ANTENNA_DEFAULT
;
2758 case 1: /* Antenna 0 */
2759 return B43_ANTENNA0
;
2760 case 2: /* Antenna 1 */
2761 return B43_ANTENNA1
;
2762 case 3: /* Antenna 2 */
2763 return B43_ANTENNA2
;
2764 case 4: /* Antenna 3 */
2765 return B43_ANTENNA3
;
2767 return B43_ANTENNA_DEFAULT
;
2771 static int b43_op_config(struct ieee80211_hw
*hw
, struct ieee80211_conf
*conf
)
2773 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
2774 struct b43_wldev
*dev
;
2775 struct b43_phy
*phy
;
2776 unsigned long flags
;
2777 unsigned int new_phymode
= 0xFFFF;
2782 mutex_lock(&wl
->mutex
);
2784 /* Switch the PHY mode (if necessary). */
2785 switch (conf
->phymode
) {
2786 case MODE_IEEE80211A
:
2787 new_phymode
= B43_PHYMODE_A
;
2789 case MODE_IEEE80211B
:
2790 new_phymode
= B43_PHYMODE_B
;
2792 case MODE_IEEE80211G
:
2793 new_phymode
= B43_PHYMODE_G
;
2798 err
= b43_switch_phymode(wl
, new_phymode
);
2800 goto out_unlock_mutex
;
2801 dev
= wl
->current_dev
;
2804 /* Disable IRQs while reconfiguring the device.
2805 * This makes it possible to drop the spinlock throughout
2806 * the reconfiguration process. */
2807 spin_lock_irqsave(&wl
->irq_lock
, flags
);
2808 if (b43_status(dev
) < B43_STAT_STARTED
) {
2809 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
2810 goto out_unlock_mutex
;
2812 savedirqs
= b43_interrupt_disable(dev
, B43_IRQ_ALL
);
2813 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
2814 b43_synchronize_irq(dev
);
2816 /* Switch to the requested channel.
2817 * The firmware takes care of races with the TX handler. */
2818 if (conf
->channel_val
!= phy
->channel
)
2819 b43_radio_selectchannel(dev
, conf
->channel_val
, 0);
2821 /* Enable/Disable ShortSlot timing. */
2822 if ((!!(conf
->flags
& IEEE80211_CONF_SHORT_SLOT_TIME
)) !=
2824 B43_WARN_ON(phy
->type
!= B43_PHYTYPE_G
);
2825 if (conf
->flags
& IEEE80211_CONF_SHORT_SLOT_TIME
)
2826 b43_short_slot_timing_enable(dev
);
2828 b43_short_slot_timing_disable(dev
);
2831 dev
->wl
->radiotap_enabled
= !!(conf
->flags
& IEEE80211_CONF_RADIOTAP
);
2833 /* Adjust the desired TX power level. */
2834 if (conf
->power_level
!= 0) {
2835 if (conf
->power_level
!= phy
->power_level
) {
2836 phy
->power_level
= conf
->power_level
;
2837 b43_phy_xmitpower(dev
);
2841 /* Antennas for RX and management frame TX. */
2842 antenna
= b43_antenna_from_ieee80211(dev
, conf
->antenna_sel_tx
);
2843 b43_mgmtframe_txantenna(dev
, antenna
);
2844 antenna
= b43_antenna_from_ieee80211(dev
, conf
->antenna_sel_rx
);
2845 b43_set_rx_antenna(dev
, antenna
);
2847 /* Update templates for AP mode. */
2848 if (b43_is_mode(wl
, IEEE80211_IF_TYPE_AP
))
2849 b43_set_beacon_int(dev
, conf
->beacon_int
);
2851 if (!!conf
->radio_enabled
!= phy
->radio_on
) {
2852 if (conf
->radio_enabled
) {
2853 b43_radio_turn_on(dev
);
2854 b43info(dev
->wl
, "Radio turned on by software\n");
2855 if (!dev
->radio_hw_enable
) {
2856 b43info(dev
->wl
, "The hardware RF-kill button "
2857 "still turns the radio physically off. "
2858 "Press the button to turn it on.\n");
2861 b43_radio_turn_off(dev
, 0);
2862 b43info(dev
->wl
, "Radio turned off by software\n");
2866 spin_lock_irqsave(&wl
->irq_lock
, flags
);
2867 b43_interrupt_enable(dev
, savedirqs
);
2869 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
2871 mutex_unlock(&wl
->mutex
);
2876 static int b43_op_set_key(struct ieee80211_hw
*hw
, enum set_key_cmd cmd
,
2877 const u8
*local_addr
, const u8
*addr
,
2878 struct ieee80211_key_conf
*key
)
2880 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
2881 struct b43_wldev
*dev
;
2882 unsigned long flags
;
2886 DECLARE_MAC_BUF(mac
);
2888 if (modparam_nohwcrypt
)
2889 return -ENOSPC
; /* User disabled HW-crypto */
2891 mutex_lock(&wl
->mutex
);
2892 spin_lock_irqsave(&wl
->irq_lock
, flags
);
2894 dev
= wl
->current_dev
;
2896 if (!dev
|| b43_status(dev
) < B43_STAT_INITIALIZED
)
2902 if (key
->keylen
== 5)
2903 algorithm
= B43_SEC_ALGO_WEP40
;
2905 algorithm
= B43_SEC_ALGO_WEP104
;
2908 algorithm
= B43_SEC_ALGO_TKIP
;
2911 algorithm
= B43_SEC_ALGO_AES
;
2917 index
= (u8
) (key
->keyidx
);
2923 if (algorithm
== B43_SEC_ALGO_TKIP
) {
2924 /* FIXME: No TKIP hardware encryption for now. */
2929 if (is_broadcast_ether_addr(addr
)) {
2930 /* addr is FF:FF:FF:FF:FF:FF for default keys */
2931 err
= b43_key_write(dev
, index
, algorithm
,
2932 key
->key
, key
->keylen
, NULL
, key
);
2935 * either pairwise key or address is 00:00:00:00:00:00
2936 * for transmit-only keys
2938 err
= b43_key_write(dev
, -1, algorithm
,
2939 key
->key
, key
->keylen
, addr
, key
);
2944 if (algorithm
== B43_SEC_ALGO_WEP40
||
2945 algorithm
== B43_SEC_ALGO_WEP104
) {
2946 b43_hf_write(dev
, b43_hf_read(dev
) | B43_HF_USEDEFKEYS
);
2949 b43_hf_read(dev
) & ~B43_HF_USEDEFKEYS
);
2951 key
->flags
|= IEEE80211_KEY_FLAG_GENERATE_IV
;
2954 err
= b43_key_clear(dev
, key
->hw_key_idx
);
2963 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
2964 mutex_unlock(&wl
->mutex
);
2966 b43dbg(wl
, "%s hardware based encryption for keyidx: %d, "
2968 cmd
== SET_KEY
? "Using" : "Disabling", key
->keyidx
,
2969 print_mac(mac
, addr
));
2974 static void b43_op_configure_filter(struct ieee80211_hw
*hw
,
2975 unsigned int changed
, unsigned int *fflags
,
2976 int mc_count
, struct dev_addr_list
*mc_list
)
2978 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
2979 struct b43_wldev
*dev
= wl
->current_dev
;
2980 unsigned long flags
;
2987 spin_lock_irqsave(&wl
->irq_lock
, flags
);
2988 *fflags
&= FIF_PROMISC_IN_BSS
|
2994 FIF_BCN_PRBRESP_PROMISC
;
2996 changed
&= FIF_PROMISC_IN_BSS
|
3002 FIF_BCN_PRBRESP_PROMISC
;
3004 wl
->filter_flags
= *fflags
;
3006 if (changed
&& b43_status(dev
) >= B43_STAT_INITIALIZED
)
3007 b43_adjust_opmode(dev
);
3008 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
3011 static int b43_op_config_interface(struct ieee80211_hw
*hw
,
3012 struct ieee80211_vif
*vif
,
3013 struct ieee80211_if_conf
*conf
)
3015 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
3016 struct b43_wldev
*dev
= wl
->current_dev
;
3017 unsigned long flags
;
3021 mutex_lock(&wl
->mutex
);
3022 spin_lock_irqsave(&wl
->irq_lock
, flags
);
3023 B43_WARN_ON(wl
->vif
!= vif
);
3025 memcpy(wl
->bssid
, conf
->bssid
, ETH_ALEN
);
3027 memset(wl
->bssid
, 0, ETH_ALEN
);
3028 if (b43_status(dev
) >= B43_STAT_INITIALIZED
) {
3029 if (b43_is_mode(wl
, IEEE80211_IF_TYPE_AP
)) {
3030 B43_WARN_ON(conf
->type
!= IEEE80211_IF_TYPE_AP
);
3031 b43_set_ssid(dev
, conf
->ssid
, conf
->ssid_len
);
3033 b43_update_templates(wl
, conf
->beacon
);
3035 b43_write_mac_bssid_templates(dev
);
3037 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
3038 mutex_unlock(&wl
->mutex
);
3043 /* Locking: wl->mutex */
3044 static void b43_wireless_core_stop(struct b43_wldev
*dev
)
3046 struct b43_wl
*wl
= dev
->wl
;
3047 unsigned long flags
;
3049 if (b43_status(dev
) < B43_STAT_STARTED
)
3052 /* Disable and sync interrupts. We must do this before than
3053 * setting the status to INITIALIZED, as the interrupt handler
3054 * won't care about IRQs then. */
3055 spin_lock_irqsave(&wl
->irq_lock
, flags
);
3056 dev
->irq_savedstate
= b43_interrupt_disable(dev
, B43_IRQ_ALL
);
3057 b43_read32(dev
, B43_MMIO_GEN_IRQ_MASK
); /* flush */
3058 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
3059 b43_synchronize_irq(dev
);
3061 b43_set_status(dev
, B43_STAT_INITIALIZED
);
3063 mutex_unlock(&wl
->mutex
);
3064 /* Must unlock as it would otherwise deadlock. No races here.
3065 * Cancel the possibly running self-rearming periodic work. */
3066 cancel_delayed_work_sync(&dev
->periodic_work
);
3067 mutex_lock(&wl
->mutex
);
3069 ieee80211_stop_queues(wl
->hw
); //FIXME this could cause a deadlock, as mac80211 seems buggy.
3071 b43_mac_suspend(dev
);
3072 free_irq(dev
->dev
->irq
, dev
);
3073 b43dbg(wl
, "Wireless interface stopped\n");
3076 /* Locking: wl->mutex */
3077 static int b43_wireless_core_start(struct b43_wldev
*dev
)
3081 B43_WARN_ON(b43_status(dev
) != B43_STAT_INITIALIZED
);
3083 drain_txstatus_queue(dev
);
3084 err
= request_irq(dev
->dev
->irq
, b43_interrupt_handler
,
3085 IRQF_SHARED
, KBUILD_MODNAME
, dev
);
3087 b43err(dev
->wl
, "Cannot request IRQ-%d\n", dev
->dev
->irq
);
3091 /* We are ready to run. */
3092 b43_set_status(dev
, B43_STAT_STARTED
);
3094 /* Start data flow (TX/RX). */
3095 b43_mac_enable(dev
);
3096 b43_interrupt_enable(dev
, dev
->irq_savedstate
);
3097 ieee80211_start_queues(dev
->wl
->hw
);
3099 /* Start maintainance work */
3100 b43_periodic_tasks_setup(dev
);
3102 b43dbg(dev
->wl
, "Wireless interface started\n");
3107 /* Get PHY and RADIO versioning numbers */
3108 static int b43_phy_versioning(struct b43_wldev
*dev
)
3110 struct b43_phy
*phy
= &dev
->phy
;
3118 int unsupported
= 0;
3120 /* Get PHY versioning */
3121 tmp
= b43_read16(dev
, B43_MMIO_PHY_VER
);
3122 analog_type
= (tmp
& B43_PHYVER_ANALOG
) >> B43_PHYVER_ANALOG_SHIFT
;
3123 phy_type
= (tmp
& B43_PHYVER_TYPE
) >> B43_PHYVER_TYPE_SHIFT
;
3124 phy_rev
= (tmp
& B43_PHYVER_VERSION
);
3131 if (phy_rev
!= 2 && phy_rev
!= 4 && phy_rev
!= 6
3139 #ifdef CONFIG_B43_NPHY
3149 b43err(dev
->wl
, "FOUND UNSUPPORTED PHY "
3150 "(Analog %u, Type %u, Revision %u)\n",
3151 analog_type
, phy_type
, phy_rev
);
3154 b43dbg(dev
->wl
, "Found PHY: Analog %u, Type %u, Revision %u\n",
3155 analog_type
, phy_type
, phy_rev
);
3157 /* Get RADIO versioning */
3158 if (dev
->dev
->bus
->chip_id
== 0x4317) {
3159 if (dev
->dev
->bus
->chip_rev
== 0)
3161 else if (dev
->dev
->bus
->chip_rev
== 1)
3166 b43_write16(dev
, B43_MMIO_RADIO_CONTROL
, B43_RADIOCTL_ID
);
3167 tmp
= b43_read16(dev
, B43_MMIO_RADIO_DATA_LOW
);
3168 b43_write16(dev
, B43_MMIO_RADIO_CONTROL
, B43_RADIOCTL_ID
);
3169 tmp
|= (u32
)b43_read16(dev
, B43_MMIO_RADIO_DATA_HIGH
) << 16;
3171 radio_manuf
= (tmp
& 0x00000FFF);
3172 radio_ver
= (tmp
& 0x0FFFF000) >> 12;
3173 radio_rev
= (tmp
& 0xF0000000) >> 28;
3174 if (radio_manuf
!= 0x17F /* Broadcom */)
3178 if (radio_ver
!= 0x2060)
3182 if (radio_manuf
!= 0x17F)
3186 if ((radio_ver
& 0xFFF0) != 0x2050)
3190 if (radio_ver
!= 0x2050)
3194 if (radio_ver
!= 0x2055)
3201 b43err(dev
->wl
, "FOUND UNSUPPORTED RADIO "
3202 "(Manuf 0x%X, Version 0x%X, Revision %u)\n",
3203 radio_manuf
, radio_ver
, radio_rev
);
3206 b43dbg(dev
->wl
, "Found Radio: Manuf 0x%X, Version 0x%X, Revision %u\n",
3207 radio_manuf
, radio_ver
, radio_rev
);
3209 phy
->radio_manuf
= radio_manuf
;
3210 phy
->radio_ver
= radio_ver
;
3211 phy
->radio_rev
= radio_rev
;
3213 phy
->analog
= analog_type
;
3214 phy
->type
= phy_type
;
3220 static void setup_struct_phy_for_init(struct b43_wldev
*dev
,
3221 struct b43_phy
*phy
)
3223 struct b43_txpower_lo_control
*lo
;
3226 memset(phy
->minlowsig
, 0xFF, sizeof(phy
->minlowsig
));
3227 memset(phy
->minlowsigpos
, 0, sizeof(phy
->minlowsigpos
));
3229 phy
->aci_enable
= 0;
3230 phy
->aci_wlan_automatic
= 0;
3231 phy
->aci_hw_rssi
= 0;
3233 phy
->radio_off_context
.valid
= 0;
3235 lo
= phy
->lo_control
;
3237 memset(lo
, 0, sizeof(*(phy
->lo_control
)));
3241 phy
->max_lb_gain
= 0;
3242 phy
->trsw_rx_gain
= 0;
3243 phy
->txpwr_offset
= 0;
3246 phy
->nrssislope
= 0;
3247 for (i
= 0; i
< ARRAY_SIZE(phy
->nrssi
); i
++)
3248 phy
->nrssi
[i
] = -1000;
3249 for (i
= 0; i
< ARRAY_SIZE(phy
->nrssi_lt
); i
++)
3250 phy
->nrssi_lt
[i
] = i
;
3252 phy
->lofcal
= 0xFFFF;
3253 phy
->initval
= 0xFFFF;
3255 phy
->interfmode
= B43_INTERFMODE_NONE
;
3256 phy
->channel
= 0xFF;
3258 phy
->hardware_power_control
= !!modparam_hwpctl
;
3260 /* PHY TX errors counter. */
3261 atomic_set(&phy
->txerr_cnt
, B43_PHY_TX_BADNESS_LIMIT
);
3263 /* OFDM-table address caching. */
3264 phy
->ofdmtab_addr_direction
= B43_OFDMTAB_DIRECTION_UNKNOWN
;
3267 static void setup_struct_wldev_for_init(struct b43_wldev
*dev
)
3271 /* Assume the radio is enabled. If it's not enabled, the state will
3272 * immediately get fixed on the first periodic work run. */
3273 dev
->radio_hw_enable
= 1;
3276 memset(&dev
->stats
, 0, sizeof(dev
->stats
));
3278 setup_struct_phy_for_init(dev
, &dev
->phy
);
3280 /* IRQ related flags */
3281 dev
->irq_reason
= 0;
3282 memset(dev
->dma_reason
, 0, sizeof(dev
->dma_reason
));
3283 dev
->irq_savedstate
= B43_IRQ_MASKTEMPLATE
;
3285 dev
->mac_suspended
= 1;
3287 /* Noise calculation context */
3288 memset(&dev
->noisecalc
, 0, sizeof(dev
->noisecalc
));
3291 static void b43_bluetooth_coext_enable(struct b43_wldev
*dev
)
3293 struct ssb_sprom
*sprom
= &dev
->dev
->bus
->sprom
;
3296 if (!(sprom
->boardflags_lo
& B43_BFL_BTCOEXIST
))
3298 if (dev
->phy
.type
!= B43_PHYTYPE_B
&& !dev
->phy
.gmode
)
3301 hf
= b43_hf_read(dev
);
3302 if (sprom
->boardflags_lo
& B43_BFL_BTCMOD
)
3303 hf
|= B43_HF_BTCOEXALT
;
3305 hf
|= B43_HF_BTCOEX
;
3306 b43_hf_write(dev
, hf
);
3310 static void b43_bluetooth_coext_disable(struct b43_wldev
*dev
)
3314 static void b43_imcfglo_timeouts_workaround(struct b43_wldev
*dev
)
3316 #ifdef CONFIG_SSB_DRIVER_PCICORE
3317 struct ssb_bus
*bus
= dev
->dev
->bus
;
3320 if (bus
->pcicore
.dev
&&
3321 bus
->pcicore
.dev
->id
.coreid
== SSB_DEV_PCI
&&
3322 bus
->pcicore
.dev
->id
.revision
<= 5) {
3323 /* IMCFGLO timeouts workaround. */
3324 tmp
= ssb_read32(dev
->dev
, SSB_IMCFGLO
);
3325 tmp
&= ~SSB_IMCFGLO_REQTO
;
3326 tmp
&= ~SSB_IMCFGLO_SERTO
;
3327 switch (bus
->bustype
) {
3328 case SSB_BUSTYPE_PCI
:
3329 case SSB_BUSTYPE_PCMCIA
:
3332 case SSB_BUSTYPE_SSB
:
3336 ssb_write32(dev
->dev
, SSB_IMCFGLO
, tmp
);
3338 #endif /* CONFIG_SSB_DRIVER_PCICORE */
3341 /* Write the short and long frame retry limit values. */
3342 static void b43_set_retry_limits(struct b43_wldev
*dev
,
3343 unsigned int short_retry
,
3344 unsigned int long_retry
)
3346 /* The retry limit is a 4-bit counter. Enforce this to avoid overflowing
3347 * the chip-internal counter. */
3348 short_retry
= min(short_retry
, (unsigned int)0xF);
3349 long_retry
= min(long_retry
, (unsigned int)0xF);
3351 b43_shm_write16(dev
, B43_SHM_SCRATCH
, B43_SHM_SC_SRLIMIT
,
3353 b43_shm_write16(dev
, B43_SHM_SCRATCH
, B43_SHM_SC_LRLIMIT
,
3357 /* Shutdown a wireless core */
3358 /* Locking: wl->mutex */
3359 static void b43_wireless_core_exit(struct b43_wldev
*dev
)
3361 struct b43_phy
*phy
= &dev
->phy
;
3363 B43_WARN_ON(b43_status(dev
) > B43_STAT_INITIALIZED
);
3364 if (b43_status(dev
) != B43_STAT_INITIALIZED
)
3366 b43_set_status(dev
, B43_STAT_UNINIT
);
3369 b43_rng_exit(dev
->wl
);
3372 b43_radio_turn_off(dev
, 1);
3373 b43_switch_analog(dev
, 0);
3374 if (phy
->dyn_tssi_tbl
)
3375 kfree(phy
->tssi2dbm
);
3376 kfree(phy
->lo_control
);
3377 phy
->lo_control
= NULL
;
3378 if (dev
->wl
->current_beacon
) {
3379 dev_kfree_skb_any(dev
->wl
->current_beacon
);
3380 dev
->wl
->current_beacon
= NULL
;
3383 ssb_device_disable(dev
->dev
, 0);
3384 ssb_bus_may_powerdown(dev
->dev
->bus
);
3387 /* Initialize a wireless core */
3388 static int b43_wireless_core_init(struct b43_wldev
*dev
)
3390 struct b43_wl
*wl
= dev
->wl
;
3391 struct ssb_bus
*bus
= dev
->dev
->bus
;
3392 struct ssb_sprom
*sprom
= &bus
->sprom
;
3393 struct b43_phy
*phy
= &dev
->phy
;
3397 B43_WARN_ON(b43_status(dev
) != B43_STAT_UNINIT
);
3399 err
= ssb_bus_powerup(bus
, 0);
3402 if (!ssb_device_is_enabled(dev
->dev
)) {
3403 tmp
= phy
->gmode
? B43_TMSLOW_GMODE
: 0;
3404 b43_wireless_core_reset(dev
, tmp
);
3407 if ((phy
->type
== B43_PHYTYPE_B
) || (phy
->type
== B43_PHYTYPE_G
)) {
3409 kzalloc(sizeof(*(phy
->lo_control
)), GFP_KERNEL
);
3410 if (!phy
->lo_control
) {
3415 setup_struct_wldev_for_init(dev
);
3417 err
= b43_phy_init_tssi2dbm_table(dev
);
3419 goto err_kfree_lo_control
;
3421 /* Enable IRQ routing to this device. */
3422 ssb_pcicore_dev_irqvecs_enable(&bus
->pcicore
, dev
->dev
);
3424 b43_imcfglo_timeouts_workaround(dev
);
3425 b43_bluetooth_coext_disable(dev
);
3426 b43_phy_early_init(dev
);
3427 err
= b43_chip_init(dev
);
3429 goto err_kfree_tssitbl
;
3430 b43_shm_write16(dev
, B43_SHM_SHARED
,
3431 B43_SHM_SH_WLCOREREV
, dev
->dev
->id
.revision
);
3432 hf
= b43_hf_read(dev
);
3433 if (phy
->type
== B43_PHYTYPE_G
) {
3437 if (sprom
->boardflags_lo
& B43_BFL_PACTRL
)
3438 hf
|= B43_HF_OFDMPABOOST
;
3439 } else if (phy
->type
== B43_PHYTYPE_B
) {
3441 if (phy
->rev
>= 2 && phy
->radio_ver
== 0x2050)
3444 b43_hf_write(dev
, hf
);
3446 b43_set_retry_limits(dev
, B43_DEFAULT_SHORT_RETRY_LIMIT
,
3447 B43_DEFAULT_LONG_RETRY_LIMIT
);
3448 b43_shm_write16(dev
, B43_SHM_SHARED
, B43_SHM_SH_SFFBLIM
, 3);
3449 b43_shm_write16(dev
, B43_SHM_SHARED
, B43_SHM_SH_LFFBLIM
, 2);
3451 /* Disable sending probe responses from firmware.
3452 * Setting the MaxTime to one usec will always trigger
3453 * a timeout, so we never send any probe resp.
3454 * A timeout of zero is infinite. */
3455 b43_shm_write16(dev
, B43_SHM_SHARED
, B43_SHM_SH_PRMAXTIME
, 1);
3457 b43_rate_memory_init(dev
);
3459 /* Minimum Contention Window */
3460 if (phy
->type
== B43_PHYTYPE_B
) {
3461 b43_shm_write16(dev
, B43_SHM_SCRATCH
, B43_SHM_SC_MINCONT
, 0x1F);
3463 b43_shm_write16(dev
, B43_SHM_SCRATCH
, B43_SHM_SC_MINCONT
, 0xF);
3465 /* Maximum Contention Window */
3466 b43_shm_write16(dev
, B43_SHM_SCRATCH
, B43_SHM_SC_MAXCONT
, 0x3FF);
3468 err
= b43_dma_init(dev
);
3475 b43_write16(dev
, 0x0612, 0x0050);
3476 b43_shm_write16(dev
, B43_SHM_SHARED
, 0x0416, 0x0050);
3477 b43_shm_write16(dev
, B43_SHM_SHARED
, 0x0414, 0x01F4);
3480 b43_bluetooth_coext_enable(dev
);
3482 ssb_bus_powerup(bus
, 1); /* Enable dynamic PCTL */
3483 memset(wl
->bssid
, 0, ETH_ALEN
);
3484 memset(wl
->mac_addr
, 0, ETH_ALEN
);
3485 b43_upload_card_macaddress(dev
);
3486 b43_security_init(dev
);
3489 b43_set_status(dev
, B43_STAT_INITIALIZED
);
3498 if (phy
->dyn_tssi_tbl
)
3499 kfree(phy
->tssi2dbm
);
3500 err_kfree_lo_control
:
3501 kfree(phy
->lo_control
);
3502 phy
->lo_control
= NULL
;
3504 ssb_bus_may_powerdown(bus
);
3505 B43_WARN_ON(b43_status(dev
) != B43_STAT_UNINIT
);
3509 static int b43_op_add_interface(struct ieee80211_hw
*hw
,
3510 struct ieee80211_if_init_conf
*conf
)
3512 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
3513 struct b43_wldev
*dev
;
3514 unsigned long flags
;
3515 int err
= -EOPNOTSUPP
;
3517 /* TODO: allow WDS/AP devices to coexist */
3519 if (conf
->type
!= IEEE80211_IF_TYPE_AP
&&
3520 conf
->type
!= IEEE80211_IF_TYPE_STA
&&
3521 conf
->type
!= IEEE80211_IF_TYPE_WDS
&&
3522 conf
->type
!= IEEE80211_IF_TYPE_IBSS
)
3525 mutex_lock(&wl
->mutex
);
3527 goto out_mutex_unlock
;
3529 b43dbg(wl
, "Adding Interface type %d\n", conf
->type
);
3531 dev
= wl
->current_dev
;
3533 wl
->vif
= conf
->vif
;
3534 wl
->if_type
= conf
->type
;
3535 memcpy(wl
->mac_addr
, conf
->mac_addr
, ETH_ALEN
);
3537 spin_lock_irqsave(&wl
->irq_lock
, flags
);
3538 b43_adjust_opmode(dev
);
3539 b43_upload_card_macaddress(dev
);
3540 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
3544 mutex_unlock(&wl
->mutex
);
3549 static void b43_op_remove_interface(struct ieee80211_hw
*hw
,
3550 struct ieee80211_if_init_conf
*conf
)
3552 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
3553 struct b43_wldev
*dev
= wl
->current_dev
;
3554 unsigned long flags
;
3556 b43dbg(wl
, "Removing Interface type %d\n", conf
->type
);
3558 mutex_lock(&wl
->mutex
);
3560 B43_WARN_ON(!wl
->operating
);
3561 B43_WARN_ON(wl
->vif
!= conf
->vif
);
3566 spin_lock_irqsave(&wl
->irq_lock
, flags
);
3567 b43_adjust_opmode(dev
);
3568 memset(wl
->mac_addr
, 0, ETH_ALEN
);
3569 b43_upload_card_macaddress(dev
);
3570 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
3572 mutex_unlock(&wl
->mutex
);
3575 static int b43_op_start(struct ieee80211_hw
*hw
)
3577 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
3578 struct b43_wldev
*dev
= wl
->current_dev
;
3582 /* First register RFkill.
3583 * LEDs that are registered later depend on it. */
3584 b43_rfkill_init(dev
);
3586 mutex_lock(&wl
->mutex
);
3588 if (b43_status(dev
) < B43_STAT_INITIALIZED
) {
3589 err
= b43_wireless_core_init(dev
);
3591 goto out_mutex_unlock
;
3595 if (b43_status(dev
) < B43_STAT_STARTED
) {
3596 err
= b43_wireless_core_start(dev
);
3599 b43_wireless_core_exit(dev
);
3600 goto out_mutex_unlock
;
3605 mutex_unlock(&wl
->mutex
);
3610 static void b43_op_stop(struct ieee80211_hw
*hw
)
3612 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
3613 struct b43_wldev
*dev
= wl
->current_dev
;
3615 b43_rfkill_exit(dev
);
3617 mutex_lock(&wl
->mutex
);
3618 if (b43_status(dev
) >= B43_STAT_STARTED
)
3619 b43_wireless_core_stop(dev
);
3620 b43_wireless_core_exit(dev
);
3621 mutex_unlock(&wl
->mutex
);
3624 static int b43_op_set_retry_limit(struct ieee80211_hw
*hw
,
3625 u32 short_retry_limit
, u32 long_retry_limit
)
3627 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
3628 struct b43_wldev
*dev
;
3631 mutex_lock(&wl
->mutex
);
3632 dev
= wl
->current_dev
;
3633 if (unlikely(!dev
|| (b43_status(dev
) < B43_STAT_INITIALIZED
))) {
3637 b43_set_retry_limits(dev
, short_retry_limit
, long_retry_limit
);
3639 mutex_unlock(&wl
->mutex
);
3644 static int b43_op_beacon_set_tim(struct ieee80211_hw
*hw
, int aid
, int set
)
3646 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
3647 struct sk_buff
*beacon
;
3648 unsigned long flags
;
3650 /* We could modify the existing beacon and set the aid bit in
3651 * the TIM field, but that would probably require resizing and
3652 * moving of data within the beacon template.
3653 * Simply request a new beacon and let mac80211 do the hard work. */
3654 beacon
= ieee80211_beacon_get(hw
, wl
->vif
, NULL
);
3655 if (unlikely(!beacon
))
3657 spin_lock_irqsave(&wl
->irq_lock
, flags
);
3658 b43_update_templates(wl
, beacon
);
3659 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
3664 static int b43_op_ibss_beacon_update(struct ieee80211_hw
*hw
,
3665 struct sk_buff
*beacon
,
3666 struct ieee80211_tx_control
*ctl
)
3668 struct b43_wl
*wl
= hw_to_b43_wl(hw
);
3669 unsigned long flags
;
3671 spin_lock_irqsave(&wl
->irq_lock
, flags
);
3672 b43_update_templates(wl
, beacon
);
3673 spin_unlock_irqrestore(&wl
->irq_lock
, flags
);
3678 static const struct ieee80211_ops b43_hw_ops
= {
3680 .conf_tx
= b43_op_conf_tx
,
3681 .add_interface
= b43_op_add_interface
,
3682 .remove_interface
= b43_op_remove_interface
,
3683 .config
= b43_op_config
,
3684 .config_interface
= b43_op_config_interface
,
3685 .configure_filter
= b43_op_configure_filter
,
3686 .set_key
= b43_op_set_key
,
3687 .get_stats
= b43_op_get_stats
,
3688 .get_tx_stats
= b43_op_get_tx_stats
,
3689 .start
= b43_op_start
,
3690 .stop
= b43_op_stop
,
3691 .set_retry_limit
= b43_op_set_retry_limit
,
3692 .set_tim
= b43_op_beacon_set_tim
,
3693 .beacon_update
= b43_op_ibss_beacon_update
,
3696 /* Hard-reset the chip. Do not call this directly.
3697 * Use b43_controller_restart()
3699 static void b43_chip_reset(struct work_struct
*work
)
3701 struct b43_wldev
*dev
=
3702 container_of(work
, struct b43_wldev
, restart_work
);
3703 struct b43_wl
*wl
= dev
->wl
;
3707 mutex_lock(&wl
->mutex
);
3709 prev_status
= b43_status(dev
);
3710 /* Bring the device down... */
3711 if (prev_status
>= B43_STAT_STARTED
)
3712 b43_wireless_core_stop(dev
);
3713 if (prev_status
>= B43_STAT_INITIALIZED
)
3714 b43_wireless_core_exit(dev
);
3716 /* ...and up again. */
3717 if (prev_status
>= B43_STAT_INITIALIZED
) {
3718 err
= b43_wireless_core_init(dev
);
3722 if (prev_status
>= B43_STAT_STARTED
) {
3723 err
= b43_wireless_core_start(dev
);
3725 b43_wireless_core_exit(dev
);
3730 mutex_unlock(&wl
->mutex
);
3732 b43err(wl
, "Controller restart FAILED\n");
3734 b43info(wl
, "Controller restarted\n");
3737 static int b43_setup_modes(struct b43_wldev
*dev
,
3738 bool have_2ghz_phy
, bool have_5ghz_phy
)
3740 struct ieee80211_hw
*hw
= dev
->wl
->hw
;
3741 struct ieee80211_hw_mode
*mode
;
3742 struct b43_phy
*phy
= &dev
->phy
;
3745 /* XXX: This function will go away soon, when mac80211
3746 * band stuff is rewritten. So this is just a hack.
3747 * For now we always claim GPHY mode, as there is no
3748 * support for NPHY and APHY in the device, yet.
3749 * This assumption is OK, as any B, N or A PHY will already
3750 * have died a horrible sanity check death earlier. */
3752 mode
= &phy
->hwmodes
[0];
3753 mode
->mode
= MODE_IEEE80211G
;
3754 mode
->num_channels
= b43_2ghz_chantable_size
;
3755 mode
->channels
= b43_2ghz_chantable
;
3756 mode
->num_rates
= b43_g_ratetable_size
;
3757 mode
->rates
= b43_g_ratetable
;
3758 err
= ieee80211_register_hwmode(hw
, mode
);
3761 phy
->possible_phymodes
|= B43_PHYMODE_G
;
3766 static void b43_wireless_core_detach(struct b43_wldev
*dev
)
3768 /* We release firmware that late to not be required to re-request
3769 * is all the time when we reinit the core. */
3770 b43_release_firmware(dev
);
3773 static int b43_wireless_core_attach(struct b43_wldev
*dev
)
3775 struct b43_wl
*wl
= dev
->wl
;
3776 struct ssb_bus
*bus
= dev
->dev
->bus
;
3777 struct pci_dev
*pdev
= bus
->host_pci
;
3779 bool have_2ghz_phy
= 0, have_5ghz_phy
= 0;
3782 /* Do NOT do any device initialization here.
3783 * Do it in wireless_core_init() instead.
3784 * This function is for gathering basic information about the HW, only.
3785 * Also some structs may be set up here. But most likely you want to have
3786 * that in core_init(), too.
3789 err
= ssb_bus_powerup(bus
, 0);
3791 b43err(wl
, "Bus powerup failed\n");
3794 /* Get the PHY type. */
3795 if (dev
->dev
->id
.revision
>= 5) {
3798 tmshigh
= ssb_read32(dev
->dev
, SSB_TMSHIGH
);
3799 have_2ghz_phy
= !!(tmshigh
& B43_TMSHIGH_HAVE_2GHZ_PHY
);
3800 have_5ghz_phy
= !!(tmshigh
& B43_TMSHIGH_HAVE_5GHZ_PHY
);
3804 dev
->phy
.gmode
= have_2ghz_phy
;
3805 tmp
= dev
->phy
.gmode
? B43_TMSLOW_GMODE
: 0;
3806 b43_wireless_core_reset(dev
, tmp
);
3808 err
= b43_phy_versioning(dev
);
3811 /* Check if this device supports multiband. */
3813 (pdev
->device
!= 0x4312 &&
3814 pdev
->device
!= 0x4319 && pdev
->device
!= 0x4324)) {
3815 /* No multiband support. */
3818 switch (dev
->phy
.type
) {
3830 if (dev
->phy
.type
== B43_PHYTYPE_A
) {
3832 b43err(wl
, "IEEE 802.11a devices are unsupported\n");
3836 dev
->phy
.gmode
= have_2ghz_phy
;
3837 tmp
= dev
->phy
.gmode
? B43_TMSLOW_GMODE
: 0;
3838 b43_wireless_core_reset(dev
, tmp
);
3840 err
= b43_validate_chipaccess(dev
);
3843 err
= b43_setup_modes(dev
, have_2ghz_phy
, have_5ghz_phy
);
3847 /* Now set some default "current_dev" */
3848 if (!wl
->current_dev
)
3849 wl
->current_dev
= dev
;
3850 INIT_WORK(&dev
->restart_work
, b43_chip_reset
);
3852 b43_radio_turn_off(dev
, 1);
3853 b43_switch_analog(dev
, 0);
3854 ssb_device_disable(dev
->dev
, 0);
3855 ssb_bus_may_powerdown(bus
);
3861 ssb_bus_may_powerdown(bus
);
3865 static void b43_one_core_detach(struct ssb_device
*dev
)
3867 struct b43_wldev
*wldev
;
3870 wldev
= ssb_get_drvdata(dev
);
3872 cancel_work_sync(&wldev
->restart_work
);
3873 b43_debugfs_remove_device(wldev
);
3874 b43_wireless_core_detach(wldev
);
3875 list_del(&wldev
->list
);
3877 ssb_set_drvdata(dev
, NULL
);
3881 static int b43_one_core_attach(struct ssb_device
*dev
, struct b43_wl
*wl
)
3883 struct b43_wldev
*wldev
;
3884 struct pci_dev
*pdev
;
3887 if (!list_empty(&wl
->devlist
)) {
3888 /* We are not the first core on this chip. */
3889 pdev
= dev
->bus
->host_pci
;
3890 /* Only special chips support more than one wireless
3891 * core, although some of the other chips have more than
3892 * one wireless core as well. Check for this and
3896 ((pdev
->device
!= 0x4321) &&
3897 (pdev
->device
!= 0x4313) && (pdev
->device
!= 0x431A))) {
3898 b43dbg(wl
, "Ignoring unconnected 802.11 core\n");
3903 wldev
= kzalloc(sizeof(*wldev
), GFP_KERNEL
);
3909 b43_set_status(wldev
, B43_STAT_UNINIT
);
3910 wldev
->bad_frames_preempt
= modparam_bad_frames_preempt
;
3911 tasklet_init(&wldev
->isr_tasklet
,
3912 (void (*)(unsigned long))b43_interrupt_tasklet
,
3913 (unsigned long)wldev
);
3914 INIT_LIST_HEAD(&wldev
->list
);
3916 err
= b43_wireless_core_attach(wldev
);
3918 goto err_kfree_wldev
;
3920 list_add(&wldev
->list
, &wl
->devlist
);
3922 ssb_set_drvdata(dev
, wldev
);
3923 b43_debugfs_add_device(wldev
);
3933 static void b43_sprom_fixup(struct ssb_bus
*bus
)
3935 /* boardflags workarounds */
3936 if (bus
->boardinfo
.vendor
== SSB_BOARDVENDOR_DELL
&&
3937 bus
->chip_id
== 0x4301 && bus
->boardinfo
.rev
== 0x74)
3938 bus
->sprom
.boardflags_lo
|= B43_BFL_BTCOEXIST
;
3939 if (bus
->boardinfo
.vendor
== PCI_VENDOR_ID_APPLE
&&
3940 bus
->boardinfo
.type
== 0x4E && bus
->boardinfo
.rev
> 0x40)
3941 bus
->sprom
.boardflags_lo
|= B43_BFL_PACTRL
;
3944 static void b43_wireless_exit(struct ssb_device
*dev
, struct b43_wl
*wl
)
3946 struct ieee80211_hw
*hw
= wl
->hw
;
3948 ssb_set_devtypedata(dev
, NULL
);
3949 ieee80211_free_hw(hw
);
3952 static int b43_wireless_init(struct ssb_device
*dev
)
3954 struct ssb_sprom
*sprom
= &dev
->bus
->sprom
;
3955 struct ieee80211_hw
*hw
;
3959 b43_sprom_fixup(dev
->bus
);
3961 hw
= ieee80211_alloc_hw(sizeof(*wl
), &b43_hw_ops
);
3963 b43err(NULL
, "Could not allocate ieee80211 device\n");
3968 hw
->flags
= IEEE80211_HW_HOST_GEN_BEACON_TEMPLATE
|
3969 IEEE80211_HW_RX_INCLUDES_FCS
;
3970 hw
->max_signal
= 100;
3971 hw
->max_rssi
= -110;
3972 hw
->max_noise
= -110;
3973 hw
->queues
= 1; /* FIXME: hardware has more queues */
3974 SET_IEEE80211_DEV(hw
, dev
->dev
);
3975 if (is_valid_ether_addr(sprom
->et1mac
))
3976 SET_IEEE80211_PERM_ADDR(hw
, sprom
->et1mac
);
3978 SET_IEEE80211_PERM_ADDR(hw
, sprom
->il0mac
);
3980 /* Get and initialize struct b43_wl */
3981 wl
= hw_to_b43_wl(hw
);
3982 memset(wl
, 0, sizeof(*wl
));
3984 spin_lock_init(&wl
->irq_lock
);
3985 spin_lock_init(&wl
->leds_lock
);
3986 spin_lock_init(&wl
->shm_lock
);
3987 mutex_init(&wl
->mutex
);
3988 INIT_LIST_HEAD(&wl
->devlist
);
3990 ssb_set_devtypedata(dev
, wl
);
3991 b43info(wl
, "Broadcom %04X WLAN found\n", dev
->bus
->chip_id
);
3997 static int b43_probe(struct ssb_device
*dev
, const struct ssb_device_id
*id
)
4003 wl
= ssb_get_devtypedata(dev
);
4005 /* Probing the first core. Must setup common struct b43_wl */
4007 err
= b43_wireless_init(dev
);
4010 wl
= ssb_get_devtypedata(dev
);
4013 err
= b43_one_core_attach(dev
, wl
);
4015 goto err_wireless_exit
;
4018 err
= ieee80211_register_hw(wl
->hw
);
4020 goto err_one_core_detach
;
4026 err_one_core_detach
:
4027 b43_one_core_detach(dev
);
4030 b43_wireless_exit(dev
, wl
);
4034 static void b43_remove(struct ssb_device
*dev
)
4036 struct b43_wl
*wl
= ssb_get_devtypedata(dev
);
4037 struct b43_wldev
*wldev
= ssb_get_drvdata(dev
);
4040 if (wl
->current_dev
== wldev
)
4041 ieee80211_unregister_hw(wl
->hw
);
4043 b43_one_core_detach(dev
);
4045 if (list_empty(&wl
->devlist
)) {
4046 /* Last core on the chip unregistered.
4047 * We can destroy common struct b43_wl.
4049 b43_wireless_exit(dev
, wl
);
4053 /* Perform a hardware reset. This can be called from any context. */
4054 void b43_controller_restart(struct b43_wldev
*dev
, const char *reason
)
4056 /* Must avoid requeueing, if we are in shutdown. */
4057 if (b43_status(dev
) < B43_STAT_INITIALIZED
)
4059 b43info(dev
->wl
, "Controller RESET (%s) ...\n", reason
);
4060 queue_work(dev
->wl
->hw
->workqueue
, &dev
->restart_work
);
4065 static int b43_suspend(struct ssb_device
*dev
, pm_message_t state
)
4067 struct b43_wldev
*wldev
= ssb_get_drvdata(dev
);
4068 struct b43_wl
*wl
= wldev
->wl
;
4070 b43dbg(wl
, "Suspending...\n");
4072 mutex_lock(&wl
->mutex
);
4073 wldev
->suspend_init_status
= b43_status(wldev
);
4074 if (wldev
->suspend_init_status
>= B43_STAT_STARTED
)
4075 b43_wireless_core_stop(wldev
);
4076 if (wldev
->suspend_init_status
>= B43_STAT_INITIALIZED
)
4077 b43_wireless_core_exit(wldev
);
4078 mutex_unlock(&wl
->mutex
);
4080 b43dbg(wl
, "Device suspended.\n");
4085 static int b43_resume(struct ssb_device
*dev
)
4087 struct b43_wldev
*wldev
= ssb_get_drvdata(dev
);
4088 struct b43_wl
*wl
= wldev
->wl
;
4091 b43dbg(wl
, "Resuming...\n");
4093 mutex_lock(&wl
->mutex
);
4094 if (wldev
->suspend_init_status
>= B43_STAT_INITIALIZED
) {
4095 err
= b43_wireless_core_init(wldev
);
4097 b43err(wl
, "Resume failed at core init\n");
4101 if (wldev
->suspend_init_status
>= B43_STAT_STARTED
) {
4102 err
= b43_wireless_core_start(wldev
);
4104 b43_wireless_core_exit(wldev
);
4105 b43err(wl
, "Resume failed at core start\n");
4109 mutex_unlock(&wl
->mutex
);
4111 b43dbg(wl
, "Device resumed.\n");
4116 #else /* CONFIG_PM */
4117 # define b43_suspend NULL
4118 # define b43_resume NULL
4119 #endif /* CONFIG_PM */
4121 static struct ssb_driver b43_ssb_driver
= {
4122 .name
= KBUILD_MODNAME
,
4123 .id_table
= b43_ssb_tbl
,
4125 .remove
= b43_remove
,
4126 .suspend
= b43_suspend
,
4127 .resume
= b43_resume
,
4130 static int __init
b43_init(void)
4135 err
= b43_pcmcia_init();
4138 err
= ssb_driver_register(&b43_ssb_driver
);
4140 goto err_pcmcia_exit
;
4151 static void __exit
b43_exit(void)
4153 ssb_driver_unregister(&b43_ssb_driver
);
4158 module_init(b43_init
)
4159 module_exit(b43_exit
)