2 * drivers/net/wireless/mwl8k.c
3 * Driver for Marvell TOPDOG 802.11 Wireless cards
5 * Copyright (C) 2008, 2009, 2010 Marvell Semiconductor Inc.
7 * This file is licensed under the terms of the GNU General Public
8 * License version 2. This program is licensed "as is" without any
9 * warranty of any kind, whether express or implied.
12 #include <linux/init.h>
13 #include <linux/interrupt.h>
14 #include <linux/module.h>
15 #include <linux/kernel.h>
16 #include <linux/sched.h>
17 #include <linux/spinlock.h>
18 #include <linux/list.h>
19 #include <linux/pci.h>
20 #include <linux/delay.h>
21 #include <linux/completion.h>
22 #include <linux/etherdevice.h>
23 #include <linux/slab.h>
24 #include <net/mac80211.h>
25 #include <linux/moduleparam.h>
26 #include <linux/firmware.h>
27 #include <linux/workqueue.h>
29 #define MWL8K_DESC "Marvell TOPDOG(R) 802.11 Wireless Network Driver"
30 #define MWL8K_NAME KBUILD_MODNAME
31 #define MWL8K_VERSION "0.13"
33 /* Module parameters */
34 static bool ap_mode_default
;
35 module_param(ap_mode_default
, bool, 0);
36 MODULE_PARM_DESC(ap_mode_default
,
37 "Set to 1 to make ap mode the default instead of sta mode");
39 /* Register definitions */
40 #define MWL8K_HIU_GEN_PTR 0x00000c10
41 #define MWL8K_MODE_STA 0x0000005a
42 #define MWL8K_MODE_AP 0x000000a5
43 #define MWL8K_HIU_INT_CODE 0x00000c14
44 #define MWL8K_FWSTA_READY 0xf0f1f2f4
45 #define MWL8K_FWAP_READY 0xf1f2f4a5
46 #define MWL8K_INT_CODE_CMD_FINISHED 0x00000005
47 #define MWL8K_HIU_SCRATCH 0x00000c40
49 /* Host->device communications */
50 #define MWL8K_HIU_H2A_INTERRUPT_EVENTS 0x00000c18
51 #define MWL8K_HIU_H2A_INTERRUPT_STATUS 0x00000c1c
52 #define MWL8K_HIU_H2A_INTERRUPT_MASK 0x00000c20
53 #define MWL8K_HIU_H2A_INTERRUPT_CLEAR_SEL 0x00000c24
54 #define MWL8K_HIU_H2A_INTERRUPT_STATUS_MASK 0x00000c28
55 #define MWL8K_H2A_INT_DUMMY (1 << 20)
56 #define MWL8K_H2A_INT_RESET (1 << 15)
57 #define MWL8K_H2A_INT_DOORBELL (1 << 1)
58 #define MWL8K_H2A_INT_PPA_READY (1 << 0)
60 /* Device->host communications */
61 #define MWL8K_HIU_A2H_INTERRUPT_EVENTS 0x00000c2c
62 #define MWL8K_HIU_A2H_INTERRUPT_STATUS 0x00000c30
63 #define MWL8K_HIU_A2H_INTERRUPT_MASK 0x00000c34
64 #define MWL8K_HIU_A2H_INTERRUPT_CLEAR_SEL 0x00000c38
65 #define MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK 0x00000c3c
66 #define MWL8K_A2H_INT_DUMMY (1 << 20)
67 #define MWL8K_A2H_INT_BA_WATCHDOG (1 << 14)
68 #define MWL8K_A2H_INT_CHNL_SWITCHED (1 << 11)
69 #define MWL8K_A2H_INT_QUEUE_EMPTY (1 << 10)
70 #define MWL8K_A2H_INT_RADAR_DETECT (1 << 7)
71 #define MWL8K_A2H_INT_RADIO_ON (1 << 6)
72 #define MWL8K_A2H_INT_RADIO_OFF (1 << 5)
73 #define MWL8K_A2H_INT_MAC_EVENT (1 << 3)
74 #define MWL8K_A2H_INT_OPC_DONE (1 << 2)
75 #define MWL8K_A2H_INT_RX_READY (1 << 1)
76 #define MWL8K_A2H_INT_TX_DONE (1 << 0)
78 /* HW micro second timer register
79 * located at offset 0xA600. This
80 * will be used to timestamp tx
84 #define MWL8K_HW_TIMER_REGISTER 0x0000a600
86 #define MWL8K_A2H_EVENTS (MWL8K_A2H_INT_DUMMY | \
87 MWL8K_A2H_INT_CHNL_SWITCHED | \
88 MWL8K_A2H_INT_QUEUE_EMPTY | \
89 MWL8K_A2H_INT_RADAR_DETECT | \
90 MWL8K_A2H_INT_RADIO_ON | \
91 MWL8K_A2H_INT_RADIO_OFF | \
92 MWL8K_A2H_INT_MAC_EVENT | \
93 MWL8K_A2H_INT_OPC_DONE | \
94 MWL8K_A2H_INT_RX_READY | \
95 MWL8K_A2H_INT_TX_DONE | \
96 MWL8K_A2H_INT_BA_WATCHDOG)
98 #define MWL8K_RX_QUEUES 1
99 #define MWL8K_TX_WMM_QUEUES 4
100 #define MWL8K_MAX_AMPDU_QUEUES 8
101 #define MWL8K_MAX_TX_QUEUES (MWL8K_TX_WMM_QUEUES + MWL8K_MAX_AMPDU_QUEUES)
102 #define mwl8k_tx_queues(priv) (MWL8K_TX_WMM_QUEUES + (priv)->num_ampdu_queues)
104 /* txpriorities are mapped with hw queues.
105 * Each hw queue has a txpriority.
107 #define TOTAL_HW_TX_QUEUES 8
109 /* Each HW queue can have one AMPDU stream.
110 * But, because one of the hw queue is reserved,
111 * maximum AMPDU queues that can be created are
112 * one short of total tx queues.
114 #define MWL8K_NUM_AMPDU_STREAMS (TOTAL_HW_TX_QUEUES - 1)
118 void (*rxd_init
)(void *rxd
, dma_addr_t next_dma_addr
);
119 void (*rxd_refill
)(void *rxd
, dma_addr_t addr
, int len
);
120 int (*rxd_process
)(void *rxd
, struct ieee80211_rx_status
*status
,
121 __le16
*qos
, s8
*noise
);
124 struct mwl8k_device_info
{
129 struct rxd_ops
*ap_rxd_ops
;
133 struct mwl8k_rx_queue
{
136 /* hw receives here */
139 /* refill descs here */
146 DEFINE_DMA_UNMAP_ADDR(dma
);
150 struct mwl8k_tx_queue
{
151 /* hw transmits here */
154 /* sw appends here */
158 struct mwl8k_tx_desc
*txd
;
160 struct sk_buff
**skb
;
166 AMPDU_STREAM_IN_PROGRESS
,
170 struct mwl8k_ampdu_stream
{
171 struct ieee80211_sta
*sta
;
178 struct ieee80211_hw
*hw
;
179 struct pci_dev
*pdev
;
182 struct mwl8k_device_info
*device_info
;
188 const struct firmware
*fw_helper
;
189 const struct firmware
*fw_ucode
;
191 /* hardware/firmware parameters */
193 struct rxd_ops
*rxd_ops
;
194 struct ieee80211_supported_band band_24
;
195 struct ieee80211_channel channels_24
[14];
196 struct ieee80211_rate rates_24
[14];
197 struct ieee80211_supported_band band_50
;
198 struct ieee80211_channel channels_50
[4];
199 struct ieee80211_rate rates_50
[9];
200 u32 ap_macids_supported
;
201 u32 sta_macids_supported
;
203 /* Ampdu stream information */
205 spinlock_t stream_lock
;
206 struct mwl8k_ampdu_stream ampdu
[MWL8K_MAX_AMPDU_QUEUES
];
207 struct work_struct watchdog_ba_handle
;
209 /* firmware access */
210 struct mutex fw_mutex
;
211 struct task_struct
*fw_mutex_owner
;
212 struct task_struct
*hw_restart_owner
;
214 struct completion
*hostcmd_wait
;
216 atomic_t watchdog_event_pending
;
218 /* lock held over TX and TX reap */
221 /* TX quiesce completion, protected by fw_mutex and tx_lock */
222 struct completion
*tx_wait
;
224 /* List of interfaces. */
226 struct list_head vif_list
;
228 /* power management status cookie from firmware */
230 dma_addr_t cookie_dma
;
237 * Running count of TX packets in flight, to avoid
238 * iterating over the transmit rings each time.
242 struct mwl8k_rx_queue rxq
[MWL8K_RX_QUEUES
];
243 struct mwl8k_tx_queue txq
[MWL8K_MAX_TX_QUEUES
];
244 u32 txq_offset
[MWL8K_MAX_TX_QUEUES
];
247 bool radio_short_preamble
;
248 bool sniffer_enabled
;
251 /* XXX need to convert this to handle multiple interfaces */
253 u8 capture_bssid
[ETH_ALEN
];
254 struct sk_buff
*beacon_skb
;
257 * This FJ worker has to be global as it is scheduled from the
258 * RX handler. At this point we don't know which interface it
259 * belongs to until the list of bssids waiting to complete join
262 struct work_struct finalize_join_worker
;
264 /* Tasklet to perform TX reclaim. */
265 struct tasklet_struct poll_tx_task
;
267 /* Tasklet to perform RX. */
268 struct tasklet_struct poll_rx_task
;
270 /* Most recently reported noise in dBm */
274 * preserve the queue configurations so they can be restored if/when
275 * the firmware image is swapped.
277 struct ieee80211_tx_queue_params wmm_params
[MWL8K_TX_WMM_QUEUES
];
279 /* To perform the task of reloading the firmware */
280 struct work_struct fw_reload
;
281 bool hw_restart_in_progress
;
283 /* async firmware loading state */
287 struct completion firmware_loading_complete
;
289 /* bitmap of running BSSes */
293 #define MAX_WEP_KEY_LEN 13
294 #define NUM_WEP_KEYS 4
296 /* Per interface specific private data */
298 struct list_head list
;
299 struct ieee80211_vif
*vif
;
301 /* Firmware macid for this vif. */
304 /* Non AMPDU sequence number assigned by driver. */
310 u8 key
[sizeof(struct ieee80211_key_conf
) + MAX_WEP_KEY_LEN
];
311 } wep_key_conf
[NUM_WEP_KEYS
];
316 /* A flag to indicate is HW crypto is enabled for this bssid */
317 bool is_hw_crypto_enabled
;
319 #define MWL8K_VIF(_vif) ((struct mwl8k_vif *)&((_vif)->drv_priv))
320 #define IEEE80211_KEY_CONF(_u8) ((struct ieee80211_key_conf *)(_u8))
322 struct tx_traffic_info
{
327 #define MWL8K_MAX_TID 8
329 /* Index into station database. Returned by UPDATE_STADB. */
332 struct tx_traffic_info tx_stats
[MWL8K_MAX_TID
];
334 #define MWL8K_STA(_sta) ((struct mwl8k_sta *)&((_sta)->drv_priv))
336 static const struct ieee80211_channel mwl8k_channels_24
[] = {
337 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2412, .hw_value
= 1, },
338 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2417, .hw_value
= 2, },
339 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2422, .hw_value
= 3, },
340 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2427, .hw_value
= 4, },
341 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2432, .hw_value
= 5, },
342 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2437, .hw_value
= 6, },
343 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2442, .hw_value
= 7, },
344 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2447, .hw_value
= 8, },
345 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2452, .hw_value
= 9, },
346 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2457, .hw_value
= 10, },
347 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2462, .hw_value
= 11, },
348 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2467, .hw_value
= 12, },
349 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2472, .hw_value
= 13, },
350 { .band
= IEEE80211_BAND_2GHZ
, .center_freq
= 2484, .hw_value
= 14, },
353 static const struct ieee80211_rate mwl8k_rates_24
[] = {
354 { .bitrate
= 10, .hw_value
= 2, },
355 { .bitrate
= 20, .hw_value
= 4, },
356 { .bitrate
= 55, .hw_value
= 11, },
357 { .bitrate
= 110, .hw_value
= 22, },
358 { .bitrate
= 220, .hw_value
= 44, },
359 { .bitrate
= 60, .hw_value
= 12, },
360 { .bitrate
= 90, .hw_value
= 18, },
361 { .bitrate
= 120, .hw_value
= 24, },
362 { .bitrate
= 180, .hw_value
= 36, },
363 { .bitrate
= 240, .hw_value
= 48, },
364 { .bitrate
= 360, .hw_value
= 72, },
365 { .bitrate
= 480, .hw_value
= 96, },
366 { .bitrate
= 540, .hw_value
= 108, },
367 { .bitrate
= 720, .hw_value
= 144, },
370 static const struct ieee80211_channel mwl8k_channels_50
[] = {
371 { .band
= IEEE80211_BAND_5GHZ
, .center_freq
= 5180, .hw_value
= 36, },
372 { .band
= IEEE80211_BAND_5GHZ
, .center_freq
= 5200, .hw_value
= 40, },
373 { .band
= IEEE80211_BAND_5GHZ
, .center_freq
= 5220, .hw_value
= 44, },
374 { .band
= IEEE80211_BAND_5GHZ
, .center_freq
= 5240, .hw_value
= 48, },
377 static const struct ieee80211_rate mwl8k_rates_50
[] = {
378 { .bitrate
= 60, .hw_value
= 12, },
379 { .bitrate
= 90, .hw_value
= 18, },
380 { .bitrate
= 120, .hw_value
= 24, },
381 { .bitrate
= 180, .hw_value
= 36, },
382 { .bitrate
= 240, .hw_value
= 48, },
383 { .bitrate
= 360, .hw_value
= 72, },
384 { .bitrate
= 480, .hw_value
= 96, },
385 { .bitrate
= 540, .hw_value
= 108, },
386 { .bitrate
= 720, .hw_value
= 144, },
389 /* Set or get info from Firmware */
390 #define MWL8K_CMD_GET 0x0000
391 #define MWL8K_CMD_SET 0x0001
392 #define MWL8K_CMD_SET_LIST 0x0002
394 /* Firmware command codes */
395 #define MWL8K_CMD_CODE_DNLD 0x0001
396 #define MWL8K_CMD_GET_HW_SPEC 0x0003
397 #define MWL8K_CMD_SET_HW_SPEC 0x0004
398 #define MWL8K_CMD_MAC_MULTICAST_ADR 0x0010
399 #define MWL8K_CMD_GET_STAT 0x0014
400 #define MWL8K_CMD_RADIO_CONTROL 0x001c
401 #define MWL8K_CMD_RF_TX_POWER 0x001e
402 #define MWL8K_CMD_TX_POWER 0x001f
403 #define MWL8K_CMD_RF_ANTENNA 0x0020
404 #define MWL8K_CMD_SET_BEACON 0x0100 /* per-vif */
405 #define MWL8K_CMD_SET_PRE_SCAN 0x0107
406 #define MWL8K_CMD_SET_POST_SCAN 0x0108
407 #define MWL8K_CMD_SET_RF_CHANNEL 0x010a
408 #define MWL8K_CMD_SET_AID 0x010d
409 #define MWL8K_CMD_SET_RATE 0x0110
410 #define MWL8K_CMD_SET_FINALIZE_JOIN 0x0111
411 #define MWL8K_CMD_RTS_THRESHOLD 0x0113
412 #define MWL8K_CMD_SET_SLOT 0x0114
413 #define MWL8K_CMD_SET_EDCA_PARAMS 0x0115
414 #define MWL8K_CMD_SET_WMM_MODE 0x0123
415 #define MWL8K_CMD_MIMO_CONFIG 0x0125
416 #define MWL8K_CMD_USE_FIXED_RATE 0x0126
417 #define MWL8K_CMD_ENABLE_SNIFFER 0x0150
418 #define MWL8K_CMD_SET_MAC_ADDR 0x0202 /* per-vif */
419 #define MWL8K_CMD_SET_RATEADAPT_MODE 0x0203
420 #define MWL8K_CMD_GET_WATCHDOG_BITMAP 0x0205
421 #define MWL8K_CMD_DEL_MAC_ADDR 0x0206 /* per-vif */
422 #define MWL8K_CMD_BSS_START 0x1100 /* per-vif */
423 #define MWL8K_CMD_SET_NEW_STN 0x1111 /* per-vif */
424 #define MWL8K_CMD_UPDATE_ENCRYPTION 0x1122 /* per-vif */
425 #define MWL8K_CMD_UPDATE_STADB 0x1123
426 #define MWL8K_CMD_BASTREAM 0x1125
428 static const char *mwl8k_cmd_name(__le16 cmd
, char *buf
, int bufsize
)
430 u16 command
= le16_to_cpu(cmd
);
432 #define MWL8K_CMDNAME(x) case MWL8K_CMD_##x: do {\
433 snprintf(buf, bufsize, "%s", #x);\
436 switch (command
& ~0x8000) {
437 MWL8K_CMDNAME(CODE_DNLD
);
438 MWL8K_CMDNAME(GET_HW_SPEC
);
439 MWL8K_CMDNAME(SET_HW_SPEC
);
440 MWL8K_CMDNAME(MAC_MULTICAST_ADR
);
441 MWL8K_CMDNAME(GET_STAT
);
442 MWL8K_CMDNAME(RADIO_CONTROL
);
443 MWL8K_CMDNAME(RF_TX_POWER
);
444 MWL8K_CMDNAME(TX_POWER
);
445 MWL8K_CMDNAME(RF_ANTENNA
);
446 MWL8K_CMDNAME(SET_BEACON
);
447 MWL8K_CMDNAME(SET_PRE_SCAN
);
448 MWL8K_CMDNAME(SET_POST_SCAN
);
449 MWL8K_CMDNAME(SET_RF_CHANNEL
);
450 MWL8K_CMDNAME(SET_AID
);
451 MWL8K_CMDNAME(SET_RATE
);
452 MWL8K_CMDNAME(SET_FINALIZE_JOIN
);
453 MWL8K_CMDNAME(RTS_THRESHOLD
);
454 MWL8K_CMDNAME(SET_SLOT
);
455 MWL8K_CMDNAME(SET_EDCA_PARAMS
);
456 MWL8K_CMDNAME(SET_WMM_MODE
);
457 MWL8K_CMDNAME(MIMO_CONFIG
);
458 MWL8K_CMDNAME(USE_FIXED_RATE
);
459 MWL8K_CMDNAME(ENABLE_SNIFFER
);
460 MWL8K_CMDNAME(SET_MAC_ADDR
);
461 MWL8K_CMDNAME(SET_RATEADAPT_MODE
);
462 MWL8K_CMDNAME(BSS_START
);
463 MWL8K_CMDNAME(SET_NEW_STN
);
464 MWL8K_CMDNAME(UPDATE_ENCRYPTION
);
465 MWL8K_CMDNAME(UPDATE_STADB
);
466 MWL8K_CMDNAME(BASTREAM
);
467 MWL8K_CMDNAME(GET_WATCHDOG_BITMAP
);
469 snprintf(buf
, bufsize
, "0x%x", cmd
);
476 /* Hardware and firmware reset */
477 static void mwl8k_hw_reset(struct mwl8k_priv
*priv
)
479 iowrite32(MWL8K_H2A_INT_RESET
,
480 priv
->regs
+ MWL8K_HIU_H2A_INTERRUPT_EVENTS
);
481 iowrite32(MWL8K_H2A_INT_RESET
,
482 priv
->regs
+ MWL8K_HIU_H2A_INTERRUPT_EVENTS
);
486 /* Release fw image */
487 static void mwl8k_release_fw(const struct firmware
**fw
)
491 release_firmware(*fw
);
495 static void mwl8k_release_firmware(struct mwl8k_priv
*priv
)
497 mwl8k_release_fw(&priv
->fw_ucode
);
498 mwl8k_release_fw(&priv
->fw_helper
);
501 /* states for asynchronous f/w loading */
502 static void mwl8k_fw_state_machine(const struct firmware
*fw
, void *context
);
505 FW_STATE_LOADING_PREF
,
506 FW_STATE_LOADING_ALT
,
510 /* Request fw image */
511 static int mwl8k_request_fw(struct mwl8k_priv
*priv
,
512 const char *fname
, const struct firmware
**fw
,
515 /* release current image */
517 mwl8k_release_fw(fw
);
520 return request_firmware_nowait(THIS_MODULE
, 1, fname
,
521 &priv
->pdev
->dev
, GFP_KERNEL
,
522 priv
, mwl8k_fw_state_machine
);
524 return request_firmware(fw
, fname
, &priv
->pdev
->dev
);
527 static int mwl8k_request_firmware(struct mwl8k_priv
*priv
, char *fw_image
,
530 struct mwl8k_device_info
*di
= priv
->device_info
;
533 if (di
->helper_image
!= NULL
) {
535 rc
= mwl8k_request_fw(priv
, di
->helper_image
,
536 &priv
->fw_helper
, true);
538 rc
= mwl8k_request_fw(priv
, di
->helper_image
,
539 &priv
->fw_helper
, false);
541 printk(KERN_ERR
"%s: Error requesting helper fw %s\n",
542 pci_name(priv
->pdev
), di
->helper_image
);
550 * if we get here, no helper image is needed. Skip the
551 * FW_STATE_INIT state.
553 priv
->fw_state
= FW_STATE_LOADING_PREF
;
554 rc
= mwl8k_request_fw(priv
, fw_image
,
558 rc
= mwl8k_request_fw(priv
, fw_image
,
559 &priv
->fw_ucode
, false);
561 printk(KERN_ERR
"%s: Error requesting firmware file %s\n",
562 pci_name(priv
->pdev
), fw_image
);
563 mwl8k_release_fw(&priv
->fw_helper
);
570 struct mwl8k_cmd_pkt
{
583 mwl8k_send_fw_load_cmd(struct mwl8k_priv
*priv
, void *data
, int length
)
585 void __iomem
*regs
= priv
->regs
;
589 dma_addr
= pci_map_single(priv
->pdev
, data
, length
, PCI_DMA_TODEVICE
);
590 if (pci_dma_mapping_error(priv
->pdev
, dma_addr
))
593 iowrite32(dma_addr
, regs
+ MWL8K_HIU_GEN_PTR
);
594 iowrite32(0, regs
+ MWL8K_HIU_INT_CODE
);
595 iowrite32(MWL8K_H2A_INT_DOORBELL
,
596 regs
+ MWL8K_HIU_H2A_INTERRUPT_EVENTS
);
597 iowrite32(MWL8K_H2A_INT_DUMMY
,
598 regs
+ MWL8K_HIU_H2A_INTERRUPT_EVENTS
);
604 int_code
= ioread32(regs
+ MWL8K_HIU_INT_CODE
);
605 if (int_code
== MWL8K_INT_CODE_CMD_FINISHED
) {
606 iowrite32(0, regs
+ MWL8K_HIU_INT_CODE
);
614 pci_unmap_single(priv
->pdev
, dma_addr
, length
, PCI_DMA_TODEVICE
);
616 return loops
? 0 : -ETIMEDOUT
;
619 static int mwl8k_load_fw_image(struct mwl8k_priv
*priv
,
620 const u8
*data
, size_t length
)
622 struct mwl8k_cmd_pkt
*cmd
;
626 cmd
= kmalloc(sizeof(*cmd
) + 256, GFP_KERNEL
);
630 cmd
->code
= cpu_to_le16(MWL8K_CMD_CODE_DNLD
);
637 int block_size
= length
> 256 ? 256 : length
;
639 memcpy(cmd
->payload
, data
+ done
, block_size
);
640 cmd
->length
= cpu_to_le16(block_size
);
642 rc
= mwl8k_send_fw_load_cmd(priv
, cmd
,
643 sizeof(*cmd
) + block_size
);
648 length
-= block_size
;
653 rc
= mwl8k_send_fw_load_cmd(priv
, cmd
, sizeof(*cmd
));
661 static int mwl8k_feed_fw_image(struct mwl8k_priv
*priv
,
662 const u8
*data
, size_t length
)
664 unsigned char *buffer
;
665 int may_continue
, rc
= 0;
666 u32 done
, prev_block_size
;
668 buffer
= kmalloc(1024, GFP_KERNEL
);
675 while (may_continue
> 0) {
678 block_size
= ioread32(priv
->regs
+ MWL8K_HIU_SCRATCH
);
679 if (block_size
& 1) {
683 done
+= prev_block_size
;
684 length
-= prev_block_size
;
687 if (block_size
> 1024 || block_size
> length
) {
697 if (block_size
== 0) {
704 prev_block_size
= block_size
;
705 memcpy(buffer
, data
+ done
, block_size
);
707 rc
= mwl8k_send_fw_load_cmd(priv
, buffer
, block_size
);
712 if (!rc
&& length
!= 0)
720 static int mwl8k_load_firmware(struct ieee80211_hw
*hw
)
722 struct mwl8k_priv
*priv
= hw
->priv
;
723 const struct firmware
*fw
= priv
->fw_ucode
;
727 if (!memcmp(fw
->data
, "\x01\x00\x00\x00", 4)) {
728 const struct firmware
*helper
= priv
->fw_helper
;
730 if (helper
== NULL
) {
731 printk(KERN_ERR
"%s: helper image needed but none "
732 "given\n", pci_name(priv
->pdev
));
736 rc
= mwl8k_load_fw_image(priv
, helper
->data
, helper
->size
);
738 printk(KERN_ERR
"%s: unable to load firmware "
739 "helper image\n", pci_name(priv
->pdev
));
744 rc
= mwl8k_feed_fw_image(priv
, fw
->data
, fw
->size
);
746 rc
= mwl8k_load_fw_image(priv
, fw
->data
, fw
->size
);
750 printk(KERN_ERR
"%s: unable to load firmware image\n",
751 pci_name(priv
->pdev
));
755 iowrite32(MWL8K_MODE_STA
, priv
->regs
+ MWL8K_HIU_GEN_PTR
);
761 ready_code
= ioread32(priv
->regs
+ MWL8K_HIU_INT_CODE
);
762 if (ready_code
== MWL8K_FWAP_READY
) {
765 } else if (ready_code
== MWL8K_FWSTA_READY
) {
774 return loops
? 0 : -ETIMEDOUT
;
778 /* DMA header used by firmware and hardware. */
779 struct mwl8k_dma_data
{
781 struct ieee80211_hdr wh
;
785 /* Routines to add/remove DMA header from skb. */
786 static inline void mwl8k_remove_dma_header(struct sk_buff
*skb
, __le16 qos
)
788 struct mwl8k_dma_data
*tr
;
791 tr
= (struct mwl8k_dma_data
*)skb
->data
;
792 hdrlen
= ieee80211_hdrlen(tr
->wh
.frame_control
);
794 if (hdrlen
!= sizeof(tr
->wh
)) {
795 if (ieee80211_is_data_qos(tr
->wh
.frame_control
)) {
796 memmove(tr
->data
- hdrlen
, &tr
->wh
, hdrlen
- 2);
797 *((__le16
*)(tr
->data
- 2)) = qos
;
799 memmove(tr
->data
- hdrlen
, &tr
->wh
, hdrlen
);
803 if (hdrlen
!= sizeof(*tr
))
804 skb_pull(skb
, sizeof(*tr
) - hdrlen
);
807 #define REDUCED_TX_HEADROOM 8
810 mwl8k_add_dma_header(struct mwl8k_priv
*priv
, struct sk_buff
*skb
,
811 int head_pad
, int tail_pad
)
813 struct ieee80211_hdr
*wh
;
816 struct mwl8k_dma_data
*tr
;
819 * Add a firmware DMA header; the firmware requires that we
820 * present a 2-byte payload length followed by a 4-address
821 * header (without QoS field), followed (optionally) by any
822 * WEP/ExtIV header (but only filled in for CCMP).
824 wh
= (struct ieee80211_hdr
*)skb
->data
;
826 hdrlen
= ieee80211_hdrlen(wh
->frame_control
);
829 * Check if skb_resize is required because of
830 * tx_headroom adjustment.
832 if (priv
->ap_fw
&& (hdrlen
< (sizeof(struct ieee80211_cts
)
833 + REDUCED_TX_HEADROOM
))) {
834 if (pskb_expand_head(skb
, REDUCED_TX_HEADROOM
, 0, GFP_ATOMIC
)) {
836 wiphy_err(priv
->hw
->wiphy
,
837 "Failed to reallocate TX buffer\n");
840 skb
->truesize
+= REDUCED_TX_HEADROOM
;
843 reqd_hdrlen
= sizeof(*tr
) + head_pad
;
845 if (hdrlen
!= reqd_hdrlen
)
846 skb_push(skb
, reqd_hdrlen
- hdrlen
);
848 if (ieee80211_is_data_qos(wh
->frame_control
))
849 hdrlen
-= IEEE80211_QOS_CTL_LEN
;
851 tr
= (struct mwl8k_dma_data
*)skb
->data
;
853 memmove(&tr
->wh
, wh
, hdrlen
);
854 if (hdrlen
!= sizeof(tr
->wh
))
855 memset(((void *)&tr
->wh
) + hdrlen
, 0, sizeof(tr
->wh
) - hdrlen
);
858 * Firmware length is the length of the fully formed "802.11
859 * payload". That is, everything except for the 802.11 header.
860 * This includes all crypto material including the MIC.
862 tr
->fwlen
= cpu_to_le16(skb
->len
- sizeof(*tr
) + tail_pad
);
865 static void mwl8k_encapsulate_tx_frame(struct mwl8k_priv
*priv
,
868 struct ieee80211_hdr
*wh
;
869 struct ieee80211_tx_info
*tx_info
;
870 struct ieee80211_key_conf
*key_conf
;
874 wh
= (struct ieee80211_hdr
*)skb
->data
;
876 tx_info
= IEEE80211_SKB_CB(skb
);
879 if (ieee80211_is_data(wh
->frame_control
))
880 key_conf
= tx_info
->control
.hw_key
;
883 * Make sure the packet header is in the DMA header format (4-address
884 * without QoS), and add head & tail padding when HW crypto is enabled.
886 * We have the following trailer padding requirements:
887 * - WEP: 4 trailer bytes (ICV)
888 * - TKIP: 12 trailer bytes (8 MIC + 4 ICV)
889 * - CCMP: 8 trailer bytes (MIC)
892 if (key_conf
!= NULL
) {
893 head_pad
= key_conf
->iv_len
;
894 switch (key_conf
->cipher
) {
895 case WLAN_CIPHER_SUITE_WEP40
:
896 case WLAN_CIPHER_SUITE_WEP104
:
899 case WLAN_CIPHER_SUITE_TKIP
:
902 case WLAN_CIPHER_SUITE_CCMP
:
907 mwl8k_add_dma_header(priv
, skb
, head_pad
, data_pad
);
911 * Packet reception for 88w8366 AP firmware.
913 struct mwl8k_rxd_8366_ap
{
917 __le32 pkt_phys_addr
;
918 __le32 next_rxd_phys_addr
;
922 __le32 hw_noise_floor_info
;
931 #define MWL8K_8366_AP_RATE_INFO_MCS_FORMAT 0x80
932 #define MWL8K_8366_AP_RATE_INFO_40MHZ 0x40
933 #define MWL8K_8366_AP_RATE_INFO_RATEID(x) ((x) & 0x3f)
935 #define MWL8K_8366_AP_RX_CTRL_OWNED_BY_HOST 0x80
937 /* 8366 AP rx_status bits */
938 #define MWL8K_8366_AP_RXSTAT_DECRYPT_ERR_MASK 0x80
939 #define MWL8K_8366_AP_RXSTAT_GENERAL_DECRYPT_ERR 0xFF
940 #define MWL8K_8366_AP_RXSTAT_TKIP_DECRYPT_MIC_ERR 0x02
941 #define MWL8K_8366_AP_RXSTAT_WEP_DECRYPT_ICV_ERR 0x04
942 #define MWL8K_8366_AP_RXSTAT_TKIP_DECRYPT_ICV_ERR 0x08
944 static void mwl8k_rxd_8366_ap_init(void *_rxd
, dma_addr_t next_dma_addr
)
946 struct mwl8k_rxd_8366_ap
*rxd
= _rxd
;
948 rxd
->next_rxd_phys_addr
= cpu_to_le32(next_dma_addr
);
949 rxd
->rx_ctrl
= MWL8K_8366_AP_RX_CTRL_OWNED_BY_HOST
;
952 static void mwl8k_rxd_8366_ap_refill(void *_rxd
, dma_addr_t addr
, int len
)
954 struct mwl8k_rxd_8366_ap
*rxd
= _rxd
;
956 rxd
->pkt_len
= cpu_to_le16(len
);
957 rxd
->pkt_phys_addr
= cpu_to_le32(addr
);
963 mwl8k_rxd_8366_ap_process(void *_rxd
, struct ieee80211_rx_status
*status
,
964 __le16
*qos
, s8
*noise
)
966 struct mwl8k_rxd_8366_ap
*rxd
= _rxd
;
968 if (!(rxd
->rx_ctrl
& MWL8K_8366_AP_RX_CTRL_OWNED_BY_HOST
))
972 memset(status
, 0, sizeof(*status
));
974 status
->signal
= -rxd
->rssi
;
975 *noise
= -rxd
->noise_floor
;
977 if (rxd
->rate
& MWL8K_8366_AP_RATE_INFO_MCS_FORMAT
) {
978 status
->flag
|= RX_FLAG_HT
;
979 if (rxd
->rate
& MWL8K_8366_AP_RATE_INFO_40MHZ
)
980 status
->flag
|= RX_FLAG_40MHZ
;
981 status
->rate_idx
= MWL8K_8366_AP_RATE_INFO_RATEID(rxd
->rate
);
985 for (i
= 0; i
< ARRAY_SIZE(mwl8k_rates_24
); i
++) {
986 if (mwl8k_rates_24
[i
].hw_value
== rxd
->rate
) {
987 status
->rate_idx
= i
;
993 if (rxd
->channel
> 14) {
994 status
->band
= IEEE80211_BAND_5GHZ
;
995 if (!(status
->flag
& RX_FLAG_HT
))
996 status
->rate_idx
-= 5;
998 status
->band
= IEEE80211_BAND_2GHZ
;
1000 status
->freq
= ieee80211_channel_to_frequency(rxd
->channel
,
1003 *qos
= rxd
->qos_control
;
1005 if ((rxd
->rx_status
!= MWL8K_8366_AP_RXSTAT_GENERAL_DECRYPT_ERR
) &&
1006 (rxd
->rx_status
& MWL8K_8366_AP_RXSTAT_DECRYPT_ERR_MASK
) &&
1007 (rxd
->rx_status
& MWL8K_8366_AP_RXSTAT_TKIP_DECRYPT_MIC_ERR
))
1008 status
->flag
|= RX_FLAG_MMIC_ERROR
;
1010 return le16_to_cpu(rxd
->pkt_len
);
1013 static struct rxd_ops rxd_8366_ap_ops
= {
1014 .rxd_size
= sizeof(struct mwl8k_rxd_8366_ap
),
1015 .rxd_init
= mwl8k_rxd_8366_ap_init
,
1016 .rxd_refill
= mwl8k_rxd_8366_ap_refill
,
1017 .rxd_process
= mwl8k_rxd_8366_ap_process
,
1021 * Packet reception for STA firmware.
1023 struct mwl8k_rxd_sta
{
1027 __le32 pkt_phys_addr
;
1028 __le32 next_rxd_phys_addr
;
1040 #define MWL8K_STA_RATE_INFO_SHORTPRE 0x8000
1041 #define MWL8K_STA_RATE_INFO_ANTSELECT(x) (((x) >> 11) & 0x3)
1042 #define MWL8K_STA_RATE_INFO_RATEID(x) (((x) >> 3) & 0x3f)
1043 #define MWL8K_STA_RATE_INFO_40MHZ 0x0004
1044 #define MWL8K_STA_RATE_INFO_SHORTGI 0x0002
1045 #define MWL8K_STA_RATE_INFO_MCS_FORMAT 0x0001
1047 #define MWL8K_STA_RX_CTRL_OWNED_BY_HOST 0x02
1048 #define MWL8K_STA_RX_CTRL_DECRYPT_ERROR 0x04
1049 /* ICV=0 or MIC=1 */
1050 #define MWL8K_STA_RX_CTRL_DEC_ERR_TYPE 0x08
1051 /* Key is uploaded only in failure case */
1052 #define MWL8K_STA_RX_CTRL_KEY_INDEX 0x30
1054 static void mwl8k_rxd_sta_init(void *_rxd
, dma_addr_t next_dma_addr
)
1056 struct mwl8k_rxd_sta
*rxd
= _rxd
;
1058 rxd
->next_rxd_phys_addr
= cpu_to_le32(next_dma_addr
);
1059 rxd
->rx_ctrl
= MWL8K_STA_RX_CTRL_OWNED_BY_HOST
;
1062 static void mwl8k_rxd_sta_refill(void *_rxd
, dma_addr_t addr
, int len
)
1064 struct mwl8k_rxd_sta
*rxd
= _rxd
;
1066 rxd
->pkt_len
= cpu_to_le16(len
);
1067 rxd
->pkt_phys_addr
= cpu_to_le32(addr
);
1073 mwl8k_rxd_sta_process(void *_rxd
, struct ieee80211_rx_status
*status
,
1074 __le16
*qos
, s8
*noise
)
1076 struct mwl8k_rxd_sta
*rxd
= _rxd
;
1079 if (!(rxd
->rx_ctrl
& MWL8K_STA_RX_CTRL_OWNED_BY_HOST
))
1083 rate_info
= le16_to_cpu(rxd
->rate_info
);
1085 memset(status
, 0, sizeof(*status
));
1087 status
->signal
= -rxd
->rssi
;
1088 *noise
= -rxd
->noise_level
;
1089 status
->antenna
= MWL8K_STA_RATE_INFO_ANTSELECT(rate_info
);
1090 status
->rate_idx
= MWL8K_STA_RATE_INFO_RATEID(rate_info
);
1092 if (rate_info
& MWL8K_STA_RATE_INFO_SHORTPRE
)
1093 status
->flag
|= RX_FLAG_SHORTPRE
;
1094 if (rate_info
& MWL8K_STA_RATE_INFO_40MHZ
)
1095 status
->flag
|= RX_FLAG_40MHZ
;
1096 if (rate_info
& MWL8K_STA_RATE_INFO_SHORTGI
)
1097 status
->flag
|= RX_FLAG_SHORT_GI
;
1098 if (rate_info
& MWL8K_STA_RATE_INFO_MCS_FORMAT
)
1099 status
->flag
|= RX_FLAG_HT
;
1101 if (rxd
->channel
> 14) {
1102 status
->band
= IEEE80211_BAND_5GHZ
;
1103 if (!(status
->flag
& RX_FLAG_HT
))
1104 status
->rate_idx
-= 5;
1106 status
->band
= IEEE80211_BAND_2GHZ
;
1108 status
->freq
= ieee80211_channel_to_frequency(rxd
->channel
,
1111 *qos
= rxd
->qos_control
;
1112 if ((rxd
->rx_ctrl
& MWL8K_STA_RX_CTRL_DECRYPT_ERROR
) &&
1113 (rxd
->rx_ctrl
& MWL8K_STA_RX_CTRL_DEC_ERR_TYPE
))
1114 status
->flag
|= RX_FLAG_MMIC_ERROR
;
1116 return le16_to_cpu(rxd
->pkt_len
);
1119 static struct rxd_ops rxd_sta_ops
= {
1120 .rxd_size
= sizeof(struct mwl8k_rxd_sta
),
1121 .rxd_init
= mwl8k_rxd_sta_init
,
1122 .rxd_refill
= mwl8k_rxd_sta_refill
,
1123 .rxd_process
= mwl8k_rxd_sta_process
,
1127 #define MWL8K_RX_DESCS 256
1128 #define MWL8K_RX_MAXSZ 3800
1130 static int mwl8k_rxq_init(struct ieee80211_hw
*hw
, int index
)
1132 struct mwl8k_priv
*priv
= hw
->priv
;
1133 struct mwl8k_rx_queue
*rxq
= priv
->rxq
+ index
;
1141 size
= MWL8K_RX_DESCS
* priv
->rxd_ops
->rxd_size
;
1143 rxq
->rxd
= pci_alloc_consistent(priv
->pdev
, size
, &rxq
->rxd_dma
);
1144 if (rxq
->rxd
== NULL
) {
1145 wiphy_err(hw
->wiphy
, "failed to alloc RX descriptors\n");
1148 memset(rxq
->rxd
, 0, size
);
1150 rxq
->buf
= kcalloc(MWL8K_RX_DESCS
, sizeof(*rxq
->buf
), GFP_KERNEL
);
1151 if (rxq
->buf
== NULL
) {
1152 pci_free_consistent(priv
->pdev
, size
, rxq
->rxd
, rxq
->rxd_dma
);
1156 for (i
= 0; i
< MWL8K_RX_DESCS
; i
++) {
1160 dma_addr_t next_dma_addr
;
1162 desc_size
= priv
->rxd_ops
->rxd_size
;
1163 rxd
= rxq
->rxd
+ (i
* priv
->rxd_ops
->rxd_size
);
1166 if (nexti
== MWL8K_RX_DESCS
)
1168 next_dma_addr
= rxq
->rxd_dma
+ (nexti
* desc_size
);
1170 priv
->rxd_ops
->rxd_init(rxd
, next_dma_addr
);
1176 static int rxq_refill(struct ieee80211_hw
*hw
, int index
, int limit
)
1178 struct mwl8k_priv
*priv
= hw
->priv
;
1179 struct mwl8k_rx_queue
*rxq
= priv
->rxq
+ index
;
1183 while (rxq
->rxd_count
< MWL8K_RX_DESCS
&& limit
--) {
1184 struct sk_buff
*skb
;
1189 skb
= dev_alloc_skb(MWL8K_RX_MAXSZ
);
1193 addr
= pci_map_single(priv
->pdev
, skb
->data
,
1194 MWL8K_RX_MAXSZ
, DMA_FROM_DEVICE
);
1198 if (rxq
->tail
== MWL8K_RX_DESCS
)
1200 rxq
->buf
[rx
].skb
= skb
;
1201 dma_unmap_addr_set(&rxq
->buf
[rx
], dma
, addr
);
1203 rxd
= rxq
->rxd
+ (rx
* priv
->rxd_ops
->rxd_size
);
1204 priv
->rxd_ops
->rxd_refill(rxd
, addr
, MWL8K_RX_MAXSZ
);
1212 /* Must be called only when the card's reception is completely halted */
1213 static void mwl8k_rxq_deinit(struct ieee80211_hw
*hw
, int index
)
1215 struct mwl8k_priv
*priv
= hw
->priv
;
1216 struct mwl8k_rx_queue
*rxq
= priv
->rxq
+ index
;
1219 if (rxq
->rxd
== NULL
)
1222 for (i
= 0; i
< MWL8K_RX_DESCS
; i
++) {
1223 if (rxq
->buf
[i
].skb
!= NULL
) {
1224 pci_unmap_single(priv
->pdev
,
1225 dma_unmap_addr(&rxq
->buf
[i
], dma
),
1226 MWL8K_RX_MAXSZ
, PCI_DMA_FROMDEVICE
);
1227 dma_unmap_addr_set(&rxq
->buf
[i
], dma
, 0);
1229 kfree_skb(rxq
->buf
[i
].skb
);
1230 rxq
->buf
[i
].skb
= NULL
;
1237 pci_free_consistent(priv
->pdev
,
1238 MWL8K_RX_DESCS
* priv
->rxd_ops
->rxd_size
,
1239 rxq
->rxd
, rxq
->rxd_dma
);
1245 * Scan a list of BSSIDs to process for finalize join.
1246 * Allows for extension to process multiple BSSIDs.
1249 mwl8k_capture_bssid(struct mwl8k_priv
*priv
, struct ieee80211_hdr
*wh
)
1251 return priv
->capture_beacon
&&
1252 ieee80211_is_beacon(wh
->frame_control
) &&
1253 ether_addr_equal(wh
->addr3
, priv
->capture_bssid
);
1256 static inline void mwl8k_save_beacon(struct ieee80211_hw
*hw
,
1257 struct sk_buff
*skb
)
1259 struct mwl8k_priv
*priv
= hw
->priv
;
1261 priv
->capture_beacon
= false;
1262 memset(priv
->capture_bssid
, 0, ETH_ALEN
);
1265 * Use GFP_ATOMIC as rxq_process is called from
1266 * the primary interrupt handler, memory allocation call
1269 priv
->beacon_skb
= skb_copy(skb
, GFP_ATOMIC
);
1270 if (priv
->beacon_skb
!= NULL
)
1271 ieee80211_queue_work(hw
, &priv
->finalize_join_worker
);
1274 static inline struct mwl8k_vif
*mwl8k_find_vif_bss(struct list_head
*vif_list
,
1277 struct mwl8k_vif
*mwl8k_vif
;
1279 list_for_each_entry(mwl8k_vif
,
1281 if (memcmp(bssid
, mwl8k_vif
->bssid
,
1289 static int rxq_process(struct ieee80211_hw
*hw
, int index
, int limit
)
1291 struct mwl8k_priv
*priv
= hw
->priv
;
1292 struct mwl8k_vif
*mwl8k_vif
= NULL
;
1293 struct mwl8k_rx_queue
*rxq
= priv
->rxq
+ index
;
1297 while (rxq
->rxd_count
&& limit
--) {
1298 struct sk_buff
*skb
;
1301 struct ieee80211_rx_status status
;
1302 struct ieee80211_hdr
*wh
;
1305 skb
= rxq
->buf
[rxq
->head
].skb
;
1309 rxd
= rxq
->rxd
+ (rxq
->head
* priv
->rxd_ops
->rxd_size
);
1311 pkt_len
= priv
->rxd_ops
->rxd_process(rxd
, &status
, &qos
,
1316 rxq
->buf
[rxq
->head
].skb
= NULL
;
1318 pci_unmap_single(priv
->pdev
,
1319 dma_unmap_addr(&rxq
->buf
[rxq
->head
], dma
),
1320 MWL8K_RX_MAXSZ
, PCI_DMA_FROMDEVICE
);
1321 dma_unmap_addr_set(&rxq
->buf
[rxq
->head
], dma
, 0);
1324 if (rxq
->head
== MWL8K_RX_DESCS
)
1329 wh
= &((struct mwl8k_dma_data
*)skb
->data
)->wh
;
1332 * Check for a pending join operation. Save a
1333 * copy of the beacon and schedule a tasklet to
1334 * send a FINALIZE_JOIN command to the firmware.
1336 if (mwl8k_capture_bssid(priv
, (void *)skb
->data
))
1337 mwl8k_save_beacon(hw
, skb
);
1339 if (ieee80211_has_protected(wh
->frame_control
)) {
1341 /* Check if hw crypto has been enabled for
1342 * this bss. If yes, set the status flags
1345 mwl8k_vif
= mwl8k_find_vif_bss(&priv
->vif_list
,
1348 if (mwl8k_vif
!= NULL
&&
1349 mwl8k_vif
->is_hw_crypto_enabled
) {
1351 * When MMIC ERROR is encountered
1352 * by the firmware, payload is
1353 * dropped and only 32 bytes of
1354 * mwl8k Firmware header is sent
1357 * We need to add four bytes of
1358 * key information. In it
1359 * MAC80211 expects keyidx set to
1360 * 0 for triggering Counter
1361 * Measure of MMIC failure.
1363 if (status
.flag
& RX_FLAG_MMIC_ERROR
) {
1364 struct mwl8k_dma_data
*tr
;
1365 tr
= (struct mwl8k_dma_data
*)skb
->data
;
1366 memset((void *)&(tr
->data
), 0, 4);
1370 if (!ieee80211_is_auth(wh
->frame_control
))
1371 status
.flag
|= RX_FLAG_IV_STRIPPED
|
1373 RX_FLAG_MMIC_STRIPPED
;
1377 skb_put(skb
, pkt_len
);
1378 mwl8k_remove_dma_header(skb
, qos
);
1379 memcpy(IEEE80211_SKB_RXCB(skb
), &status
, sizeof(status
));
1380 ieee80211_rx_irqsafe(hw
, skb
);
1390 * Packet transmission.
1393 #define MWL8K_TXD_STATUS_OK 0x00000001
1394 #define MWL8K_TXD_STATUS_OK_RETRY 0x00000002
1395 #define MWL8K_TXD_STATUS_OK_MORE_RETRY 0x00000004
1396 #define MWL8K_TXD_STATUS_MULTICAST_TX 0x00000008
1397 #define MWL8K_TXD_STATUS_FW_OWNED 0x80000000
1399 #define MWL8K_QOS_QLEN_UNSPEC 0xff00
1400 #define MWL8K_QOS_ACK_POLICY_MASK 0x0060
1401 #define MWL8K_QOS_ACK_POLICY_NORMAL 0x0000
1402 #define MWL8K_QOS_ACK_POLICY_BLOCKACK 0x0060
1403 #define MWL8K_QOS_EOSP 0x0010
1405 struct mwl8k_tx_desc
{
1410 __le32 pkt_phys_addr
;
1412 __u8 dest_MAC_addr
[ETH_ALEN
];
1413 __le32 next_txd_phys_addr
;
1420 #define MWL8K_TX_DESCS 128
1422 static int mwl8k_txq_init(struct ieee80211_hw
*hw
, int index
)
1424 struct mwl8k_priv
*priv
= hw
->priv
;
1425 struct mwl8k_tx_queue
*txq
= priv
->txq
+ index
;
1433 size
= MWL8K_TX_DESCS
* sizeof(struct mwl8k_tx_desc
);
1435 txq
->txd
= pci_alloc_consistent(priv
->pdev
, size
, &txq
->txd_dma
);
1436 if (txq
->txd
== NULL
) {
1437 wiphy_err(hw
->wiphy
, "failed to alloc TX descriptors\n");
1440 memset(txq
->txd
, 0, size
);
1442 txq
->skb
= kcalloc(MWL8K_TX_DESCS
, sizeof(*txq
->skb
), GFP_KERNEL
);
1443 if (txq
->skb
== NULL
) {
1444 pci_free_consistent(priv
->pdev
, size
, txq
->txd
, txq
->txd_dma
);
1448 for (i
= 0; i
< MWL8K_TX_DESCS
; i
++) {
1449 struct mwl8k_tx_desc
*tx_desc
;
1452 tx_desc
= txq
->txd
+ i
;
1453 nexti
= (i
+ 1) % MWL8K_TX_DESCS
;
1455 tx_desc
->status
= 0;
1456 tx_desc
->next_txd_phys_addr
=
1457 cpu_to_le32(txq
->txd_dma
+ nexti
* sizeof(*tx_desc
));
1463 static inline void mwl8k_tx_start(struct mwl8k_priv
*priv
)
1465 iowrite32(MWL8K_H2A_INT_PPA_READY
,
1466 priv
->regs
+ MWL8K_HIU_H2A_INTERRUPT_EVENTS
);
1467 iowrite32(MWL8K_H2A_INT_DUMMY
,
1468 priv
->regs
+ MWL8K_HIU_H2A_INTERRUPT_EVENTS
);
1469 ioread32(priv
->regs
+ MWL8K_HIU_INT_CODE
);
1472 static void mwl8k_dump_tx_rings(struct ieee80211_hw
*hw
)
1474 struct mwl8k_priv
*priv
= hw
->priv
;
1477 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++) {
1478 struct mwl8k_tx_queue
*txq
= priv
->txq
+ i
;
1484 for (desc
= 0; desc
< MWL8K_TX_DESCS
; desc
++) {
1485 struct mwl8k_tx_desc
*tx_desc
= txq
->txd
+ desc
;
1488 status
= le32_to_cpu(tx_desc
->status
);
1489 if (status
& MWL8K_TXD_STATUS_FW_OWNED
)
1494 if (tx_desc
->pkt_len
== 0)
1498 wiphy_err(hw
->wiphy
,
1499 "txq[%d] len=%d head=%d tail=%d "
1500 "fw_owned=%d drv_owned=%d unused=%d\n",
1502 txq
->len
, txq
->head
, txq
->tail
,
1503 fw_owned
, drv_owned
, unused
);
1508 * Must be called with priv->fw_mutex held and tx queues stopped.
1510 #define MWL8K_TX_WAIT_TIMEOUT_MS 5000
1512 static int mwl8k_tx_wait_empty(struct ieee80211_hw
*hw
)
1514 struct mwl8k_priv
*priv
= hw
->priv
;
1515 DECLARE_COMPLETION_ONSTACK(tx_wait
);
1521 /* Since fw restart is in progress, allow only the firmware
1522 * commands from the restart code and block the other
1523 * commands since they are going to fail in any case since
1524 * the firmware has crashed
1526 if (priv
->hw_restart_in_progress
) {
1527 if (priv
->hw_restart_owner
== current
)
1533 if (atomic_read(&priv
->watchdog_event_pending
))
1537 * The TX queues are stopped at this point, so this test
1538 * doesn't need to take ->tx_lock.
1540 if (!priv
->pending_tx_pkts
)
1546 spin_lock_bh(&priv
->tx_lock
);
1547 priv
->tx_wait
= &tx_wait
;
1550 unsigned long timeout
;
1552 oldcount
= priv
->pending_tx_pkts
;
1554 spin_unlock_bh(&priv
->tx_lock
);
1555 timeout
= wait_for_completion_timeout(&tx_wait
,
1556 msecs_to_jiffies(MWL8K_TX_WAIT_TIMEOUT_MS
));
1558 if (atomic_read(&priv
->watchdog_event_pending
)) {
1559 spin_lock_bh(&priv
->tx_lock
);
1560 priv
->tx_wait
= NULL
;
1561 spin_unlock_bh(&priv
->tx_lock
);
1565 spin_lock_bh(&priv
->tx_lock
);
1568 WARN_ON(priv
->pending_tx_pkts
);
1570 wiphy_notice(hw
->wiphy
, "tx rings drained\n");
1574 if (priv
->pending_tx_pkts
< oldcount
) {
1575 wiphy_notice(hw
->wiphy
,
1576 "waiting for tx rings to drain (%d -> %d pkts)\n",
1577 oldcount
, priv
->pending_tx_pkts
);
1582 priv
->tx_wait
= NULL
;
1584 wiphy_err(hw
->wiphy
, "tx rings stuck for %d ms\n",
1585 MWL8K_TX_WAIT_TIMEOUT_MS
);
1586 mwl8k_dump_tx_rings(hw
);
1587 priv
->hw_restart_in_progress
= true;
1588 ieee80211_queue_work(hw
, &priv
->fw_reload
);
1592 priv
->tx_wait
= NULL
;
1593 spin_unlock_bh(&priv
->tx_lock
);
1598 #define MWL8K_TXD_SUCCESS(status) \
1599 ((status) & (MWL8K_TXD_STATUS_OK | \
1600 MWL8K_TXD_STATUS_OK_RETRY | \
1601 MWL8K_TXD_STATUS_OK_MORE_RETRY))
1603 static int mwl8k_tid_queue_mapping(u8 tid
)
1610 return IEEE80211_AC_BE
;
1614 return IEEE80211_AC_BK
;
1618 return IEEE80211_AC_VI
;
1622 return IEEE80211_AC_VO
;
1630 /* The firmware will fill in the rate information
1631 * for each packet that gets queued in the hardware
1632 * and these macros will interpret that info.
1635 #define RI_FORMAT(a) (a & 0x0001)
1636 #define RI_RATE_ID_MCS(a) ((a & 0x01f8) >> 3)
1639 mwl8k_txq_reclaim(struct ieee80211_hw
*hw
, int index
, int limit
, int force
)
1641 struct mwl8k_priv
*priv
= hw
->priv
;
1642 struct mwl8k_tx_queue
*txq
= priv
->txq
+ index
;
1646 while (txq
->len
> 0 && limit
--) {
1648 struct mwl8k_tx_desc
*tx_desc
;
1651 struct sk_buff
*skb
;
1652 struct ieee80211_tx_info
*info
;
1654 struct ieee80211_sta
*sta
;
1655 struct mwl8k_sta
*sta_info
= NULL
;
1657 struct ieee80211_hdr
*wh
;
1660 tx_desc
= txq
->txd
+ tx
;
1662 status
= le32_to_cpu(tx_desc
->status
);
1664 if (status
& MWL8K_TXD_STATUS_FW_OWNED
) {
1668 ~cpu_to_le32(MWL8K_TXD_STATUS_FW_OWNED
);
1671 txq
->head
= (tx
+ 1) % MWL8K_TX_DESCS
;
1672 BUG_ON(txq
->len
== 0);
1674 priv
->pending_tx_pkts
--;
1676 addr
= le32_to_cpu(tx_desc
->pkt_phys_addr
);
1677 size
= le16_to_cpu(tx_desc
->pkt_len
);
1679 txq
->skb
[tx
] = NULL
;
1681 BUG_ON(skb
== NULL
);
1682 pci_unmap_single(priv
->pdev
, addr
, size
, PCI_DMA_TODEVICE
);
1684 mwl8k_remove_dma_header(skb
, tx_desc
->qos_control
);
1686 wh
= (struct ieee80211_hdr
*) skb
->data
;
1688 /* Mark descriptor as unused */
1689 tx_desc
->pkt_phys_addr
= 0;
1690 tx_desc
->pkt_len
= 0;
1692 info
= IEEE80211_SKB_CB(skb
);
1693 if (ieee80211_is_data(wh
->frame_control
)) {
1695 sta
= ieee80211_find_sta_by_ifaddr(hw
, wh
->addr1
,
1698 sta_info
= MWL8K_STA(sta
);
1699 BUG_ON(sta_info
== NULL
);
1700 rate_info
= le16_to_cpu(tx_desc
->rate_info
);
1701 /* If rate is < 6.5 Mpbs for an ht station
1702 * do not form an ampdu. If the station is a
1703 * legacy station (format = 0), do not form an
1706 if (RI_RATE_ID_MCS(rate_info
) < 1 ||
1707 RI_FORMAT(rate_info
) == 0) {
1708 sta_info
->is_ampdu_allowed
= false;
1710 sta_info
->is_ampdu_allowed
= true;
1716 ieee80211_tx_info_clear_status(info
);
1718 /* Rate control is happening in the firmware.
1719 * Ensure no tx rate is being reported.
1721 info
->status
.rates
[0].idx
= -1;
1722 info
->status
.rates
[0].count
= 1;
1724 if (MWL8K_TXD_SUCCESS(status
))
1725 info
->flags
|= IEEE80211_TX_STAT_ACK
;
1727 ieee80211_tx_status_irqsafe(hw
, skb
);
1735 /* must be called only when the card's transmit is completely halted */
1736 static void mwl8k_txq_deinit(struct ieee80211_hw
*hw
, int index
)
1738 struct mwl8k_priv
*priv
= hw
->priv
;
1739 struct mwl8k_tx_queue
*txq
= priv
->txq
+ index
;
1741 if (txq
->txd
== NULL
)
1744 mwl8k_txq_reclaim(hw
, index
, INT_MAX
, 1);
1749 pci_free_consistent(priv
->pdev
,
1750 MWL8K_TX_DESCS
* sizeof(struct mwl8k_tx_desc
),
1751 txq
->txd
, txq
->txd_dma
);
1755 /* caller must hold priv->stream_lock when calling the stream functions */
1756 static struct mwl8k_ampdu_stream
*
1757 mwl8k_add_stream(struct ieee80211_hw
*hw
, struct ieee80211_sta
*sta
, u8 tid
)
1759 struct mwl8k_ampdu_stream
*stream
;
1760 struct mwl8k_priv
*priv
= hw
->priv
;
1763 for (i
= 0; i
< MWL8K_NUM_AMPDU_STREAMS
; i
++) {
1764 stream
= &priv
->ampdu
[i
];
1765 if (stream
->state
== AMPDU_NO_STREAM
) {
1767 stream
->state
= AMPDU_STREAM_NEW
;
1770 wiphy_debug(hw
->wiphy
, "Added a new stream for %pM %d",
1779 mwl8k_start_stream(struct ieee80211_hw
*hw
, struct mwl8k_ampdu_stream
*stream
)
1783 /* if the stream has already been started, don't start it again */
1784 if (stream
->state
!= AMPDU_STREAM_NEW
)
1786 ret
= ieee80211_start_tx_ba_session(stream
->sta
, stream
->tid
, 0);
1788 wiphy_debug(hw
->wiphy
, "Failed to start stream for %pM %d: "
1789 "%d\n", stream
->sta
->addr
, stream
->tid
, ret
);
1791 wiphy_debug(hw
->wiphy
, "Started stream for %pM %d\n",
1792 stream
->sta
->addr
, stream
->tid
);
1797 mwl8k_remove_stream(struct ieee80211_hw
*hw
, struct mwl8k_ampdu_stream
*stream
)
1799 wiphy_debug(hw
->wiphy
, "Remove stream for %pM %d\n", stream
->sta
->addr
,
1801 memset(stream
, 0, sizeof(*stream
));
1804 static struct mwl8k_ampdu_stream
*
1805 mwl8k_lookup_stream(struct ieee80211_hw
*hw
, u8
*addr
, u8 tid
)
1807 struct mwl8k_priv
*priv
= hw
->priv
;
1810 for (i
= 0; i
< MWL8K_NUM_AMPDU_STREAMS
; i
++) {
1811 struct mwl8k_ampdu_stream
*stream
;
1812 stream
= &priv
->ampdu
[i
];
1813 if (stream
->state
== AMPDU_NO_STREAM
)
1815 if (!memcmp(stream
->sta
->addr
, addr
, ETH_ALEN
) &&
1822 #define MWL8K_AMPDU_PACKET_THRESHOLD 64
1823 static inline bool mwl8k_ampdu_allowed(struct ieee80211_sta
*sta
, u8 tid
)
1825 struct mwl8k_sta
*sta_info
= MWL8K_STA(sta
);
1826 struct tx_traffic_info
*tx_stats
;
1828 BUG_ON(tid
>= MWL8K_MAX_TID
);
1829 tx_stats
= &sta_info
->tx_stats
[tid
];
1831 return sta_info
->is_ampdu_allowed
&&
1832 tx_stats
->pkts
> MWL8K_AMPDU_PACKET_THRESHOLD
;
1835 static inline void mwl8k_tx_count_packet(struct ieee80211_sta
*sta
, u8 tid
)
1837 struct mwl8k_sta
*sta_info
= MWL8K_STA(sta
);
1838 struct tx_traffic_info
*tx_stats
;
1840 BUG_ON(tid
>= MWL8K_MAX_TID
);
1841 tx_stats
= &sta_info
->tx_stats
[tid
];
1843 if (tx_stats
->start_time
== 0)
1844 tx_stats
->start_time
= jiffies
;
1846 /* reset the packet count after each second elapses. If the number of
1847 * packets ever exceeds the ampdu_min_traffic threshold, we will allow
1848 * an ampdu stream to be started.
1850 if (jiffies
- tx_stats
->start_time
> HZ
) {
1852 tx_stats
->start_time
= 0;
1857 /* The hardware ampdu queues start from 5.
1858 * txpriorities for ampdu queues are
1859 * 5 6 7 0 1 2 3 4 ie., queue 5 is highest
1860 * and queue 3 is lowest (queue 4 is reserved)
1865 mwl8k_txq_xmit(struct ieee80211_hw
*hw
,
1867 struct ieee80211_sta
*sta
,
1868 struct sk_buff
*skb
)
1870 struct mwl8k_priv
*priv
= hw
->priv
;
1871 struct ieee80211_tx_info
*tx_info
;
1872 struct mwl8k_vif
*mwl8k_vif
;
1873 struct ieee80211_hdr
*wh
;
1874 struct mwl8k_tx_queue
*txq
;
1875 struct mwl8k_tx_desc
*tx
;
1882 struct mwl8k_ampdu_stream
*stream
= NULL
;
1883 bool start_ba_session
= false;
1884 bool mgmtframe
= false;
1885 struct ieee80211_mgmt
*mgmt
= (struct ieee80211_mgmt
*)skb
->data
;
1886 bool eapol_frame
= false;
1888 wh
= (struct ieee80211_hdr
*)skb
->data
;
1889 if (ieee80211_is_data_qos(wh
->frame_control
))
1890 qos
= le16_to_cpu(*((__le16
*)ieee80211_get_qos_ctl(wh
)));
1894 if (skb
->protocol
== cpu_to_be16(ETH_P_PAE
))
1897 if (ieee80211_is_mgmt(wh
->frame_control
))
1901 mwl8k_encapsulate_tx_frame(priv
, skb
);
1903 mwl8k_add_dma_header(priv
, skb
, 0, 0);
1905 wh
= &((struct mwl8k_dma_data
*)skb
->data
)->wh
;
1907 tx_info
= IEEE80211_SKB_CB(skb
);
1908 mwl8k_vif
= MWL8K_VIF(tx_info
->control
.vif
);
1910 if (tx_info
->flags
& IEEE80211_TX_CTL_ASSIGN_SEQ
) {
1911 wh
->seq_ctrl
&= cpu_to_le16(IEEE80211_SCTL_FRAG
);
1912 wh
->seq_ctrl
|= cpu_to_le16(mwl8k_vif
->seqno
);
1913 mwl8k_vif
->seqno
+= 0x10;
1916 /* Setup firmware control bit fields for each frame type. */
1919 if (ieee80211_is_mgmt(wh
->frame_control
) ||
1920 ieee80211_is_ctl(wh
->frame_control
)) {
1922 qos
|= MWL8K_QOS_QLEN_UNSPEC
| MWL8K_QOS_EOSP
;
1923 } else if (ieee80211_is_data(wh
->frame_control
)) {
1925 if (is_multicast_ether_addr(wh
->addr1
))
1926 txstatus
|= MWL8K_TXD_STATUS_MULTICAST_TX
;
1928 qos
&= ~MWL8K_QOS_ACK_POLICY_MASK
;
1929 if (tx_info
->flags
& IEEE80211_TX_CTL_AMPDU
)
1930 qos
|= MWL8K_QOS_ACK_POLICY_BLOCKACK
;
1932 qos
|= MWL8K_QOS_ACK_POLICY_NORMAL
;
1935 /* Queue ADDBA request in the respective data queue. While setting up
1936 * the ampdu stream, mac80211 queues further packets for that
1937 * particular ra/tid pair. However, packets piled up in the hardware
1938 * for that ra/tid pair will still go out. ADDBA request and the
1939 * related data packets going out from different queues asynchronously
1940 * will cause a shift in the receiver window which might result in
1941 * ampdu packets getting dropped at the receiver after the stream has
1944 if (unlikely(ieee80211_is_action(wh
->frame_control
) &&
1945 mgmt
->u
.action
.category
== WLAN_CATEGORY_BACK
&&
1946 mgmt
->u
.action
.u
.addba_req
.action_code
== WLAN_ACTION_ADDBA_REQ
&&
1948 u16 capab
= le16_to_cpu(mgmt
->u
.action
.u
.addba_req
.capab
);
1949 tid
= (capab
& IEEE80211_ADDBA_PARAM_TID_MASK
) >> 2;
1950 index
= mwl8k_tid_queue_mapping(tid
);
1955 if (priv
->ap_fw
&& sta
&& sta
->ht_cap
.ht_supported
&& !eapol_frame
&&
1956 ieee80211_is_data_qos(wh
->frame_control
)) {
1958 mwl8k_tx_count_packet(sta
, tid
);
1959 spin_lock(&priv
->stream_lock
);
1960 stream
= mwl8k_lookup_stream(hw
, sta
->addr
, tid
);
1961 if (stream
!= NULL
) {
1962 if (stream
->state
== AMPDU_STREAM_ACTIVE
) {
1963 WARN_ON(!(qos
& MWL8K_QOS_ACK_POLICY_BLOCKACK
));
1964 txpriority
= (BA_QUEUE
+ stream
->idx
) %
1966 if (stream
->idx
<= 1)
1967 index
= stream
->idx
+
1968 MWL8K_TX_WMM_QUEUES
;
1970 } else if (stream
->state
== AMPDU_STREAM_NEW
) {
1971 /* We get here if the driver sends us packets
1972 * after we've initiated a stream, but before
1973 * our ampdu_action routine has been called
1974 * with IEEE80211_AMPDU_TX_START to get the SSN
1975 * for the ADDBA request. So this packet can
1976 * go out with no risk of sequence number
1977 * mismatch. No special handling is required.
1980 /* Drop packets that would go out after the
1981 * ADDBA request was sent but before the ADDBA
1982 * response is received. If we don't do this,
1983 * the recipient would probably receive it
1984 * after the ADDBA request with SSN 0. This
1985 * will cause the recipient's BA receive window
1986 * to shift, which would cause the subsequent
1987 * packets in the BA stream to be discarded.
1988 * mac80211 queues our packets for us in this
1989 * case, so this is really just a safety check.
1991 wiphy_warn(hw
->wiphy
,
1992 "Cannot send packet while ADDBA "
1993 "dialog is underway.\n");
1994 spin_unlock(&priv
->stream_lock
);
1999 /* Defer calling mwl8k_start_stream so that the current
2000 * skb can go out before the ADDBA request. This
2001 * prevents sequence number mismatch at the recepient
2002 * as described above.
2004 if (mwl8k_ampdu_allowed(sta
, tid
)) {
2005 stream
= mwl8k_add_stream(hw
, sta
, tid
);
2007 start_ba_session
= true;
2010 spin_unlock(&priv
->stream_lock
);
2012 qos
&= ~MWL8K_QOS_ACK_POLICY_MASK
;
2013 qos
|= MWL8K_QOS_ACK_POLICY_NORMAL
;
2016 dma
= pci_map_single(priv
->pdev
, skb
->data
,
2017 skb
->len
, PCI_DMA_TODEVICE
);
2019 if (pci_dma_mapping_error(priv
->pdev
, dma
)) {
2020 wiphy_debug(hw
->wiphy
,
2021 "failed to dma map skb, dropping TX frame.\n");
2022 if (start_ba_session
) {
2023 spin_lock(&priv
->stream_lock
);
2024 mwl8k_remove_stream(hw
, stream
);
2025 spin_unlock(&priv
->stream_lock
);
2031 spin_lock_bh(&priv
->tx_lock
);
2033 txq
= priv
->txq
+ index
;
2035 /* Mgmt frames that go out frequently are probe
2036 * responses. Other mgmt frames got out relatively
2037 * infrequently. Hence reserve 2 buffers so that
2038 * other mgmt frames do not get dropped due to an
2039 * already queued probe response in one of the
2043 if (txq
->len
>= MWL8K_TX_DESCS
- 2) {
2044 if (!mgmtframe
|| txq
->len
== MWL8K_TX_DESCS
) {
2045 if (start_ba_session
) {
2046 spin_lock(&priv
->stream_lock
);
2047 mwl8k_remove_stream(hw
, stream
);
2048 spin_unlock(&priv
->stream_lock
);
2050 spin_unlock_bh(&priv
->tx_lock
);
2051 pci_unmap_single(priv
->pdev
, dma
, skb
->len
,
2058 BUG_ON(txq
->skb
[txq
->tail
] != NULL
);
2059 txq
->skb
[txq
->tail
] = skb
;
2061 tx
= txq
->txd
+ txq
->tail
;
2062 tx
->data_rate
= txdatarate
;
2063 tx
->tx_priority
= txpriority
;
2064 tx
->qos_control
= cpu_to_le16(qos
);
2065 tx
->pkt_phys_addr
= cpu_to_le32(dma
);
2066 tx
->pkt_len
= cpu_to_le16(skb
->len
);
2068 if (!priv
->ap_fw
&& sta
!= NULL
)
2069 tx
->peer_id
= MWL8K_STA(sta
)->peer_id
;
2073 if (priv
->ap_fw
&& ieee80211_is_data(wh
->frame_control
) && !eapol_frame
)
2074 tx
->timestamp
= cpu_to_le32(ioread32(priv
->regs
+
2075 MWL8K_HW_TIMER_REGISTER
));
2080 tx
->status
= cpu_to_le32(MWL8K_TXD_STATUS_FW_OWNED
| txstatus
);
2083 priv
->pending_tx_pkts
++;
2086 if (txq
->tail
== MWL8K_TX_DESCS
)
2089 mwl8k_tx_start(priv
);
2091 spin_unlock_bh(&priv
->tx_lock
);
2093 /* Initiate the ampdu session here */
2094 if (start_ba_session
) {
2095 spin_lock(&priv
->stream_lock
);
2096 if (mwl8k_start_stream(hw
, stream
))
2097 mwl8k_remove_stream(hw
, stream
);
2098 spin_unlock(&priv
->stream_lock
);
2106 * We have the following requirements for issuing firmware commands:
2107 * - Some commands require that the packet transmit path is idle when
2108 * the command is issued. (For simplicity, we'll just quiesce the
2109 * transmit path for every command.)
2110 * - There are certain sequences of commands that need to be issued to
2111 * the hardware sequentially, with no other intervening commands.
2113 * This leads to an implementation of a "firmware lock" as a mutex that
2114 * can be taken recursively, and which is taken by both the low-level
2115 * command submission function (mwl8k_post_cmd) as well as any users of
2116 * that function that require issuing of an atomic sequence of commands,
2117 * and quiesces the transmit path whenever it's taken.
2119 static int mwl8k_fw_lock(struct ieee80211_hw
*hw
)
2121 struct mwl8k_priv
*priv
= hw
->priv
;
2123 if (priv
->fw_mutex_owner
!= current
) {
2126 mutex_lock(&priv
->fw_mutex
);
2127 ieee80211_stop_queues(hw
);
2129 rc
= mwl8k_tx_wait_empty(hw
);
2131 if (!priv
->hw_restart_in_progress
)
2132 ieee80211_wake_queues(hw
);
2134 mutex_unlock(&priv
->fw_mutex
);
2139 priv
->fw_mutex_owner
= current
;
2142 priv
->fw_mutex_depth
++;
2147 static void mwl8k_fw_unlock(struct ieee80211_hw
*hw
)
2149 struct mwl8k_priv
*priv
= hw
->priv
;
2151 if (!--priv
->fw_mutex_depth
) {
2152 if (!priv
->hw_restart_in_progress
)
2153 ieee80211_wake_queues(hw
);
2155 priv
->fw_mutex_owner
= NULL
;
2156 mutex_unlock(&priv
->fw_mutex
);
2160 static void mwl8k_enable_bsses(struct ieee80211_hw
*hw
, bool enable
,
2164 * Command processing.
2167 /* Timeout firmware commands after 10s */
2168 #define MWL8K_CMD_TIMEOUT_MS 10000
2170 static int mwl8k_post_cmd(struct ieee80211_hw
*hw
, struct mwl8k_cmd_pkt
*cmd
)
2172 DECLARE_COMPLETION_ONSTACK(cmd_wait
);
2173 struct mwl8k_priv
*priv
= hw
->priv
;
2174 void __iomem
*regs
= priv
->regs
;
2175 dma_addr_t dma_addr
;
2176 unsigned int dma_size
;
2178 unsigned long timeout
= 0;
2182 wiphy_dbg(hw
->wiphy
, "Posting %s [%d]\n",
2183 mwl8k_cmd_name(cmd
->code
, buf
, sizeof(buf
)), cmd
->macid
);
2185 /* Before posting firmware commands that could change the hardware
2186 * characteristics, make sure that all BSSes are stopped temporary.
2187 * Enable these stopped BSSes after completion of the commands
2190 rc
= mwl8k_fw_lock(hw
);
2194 if (priv
->ap_fw
&& priv
->running_bsses
) {
2195 switch (le16_to_cpu(cmd
->code
)) {
2196 case MWL8K_CMD_SET_RF_CHANNEL
:
2197 case MWL8K_CMD_RADIO_CONTROL
:
2198 case MWL8K_CMD_RF_TX_POWER
:
2199 case MWL8K_CMD_TX_POWER
:
2200 case MWL8K_CMD_RF_ANTENNA
:
2201 case MWL8K_CMD_RTS_THRESHOLD
:
2202 case MWL8K_CMD_MIMO_CONFIG
:
2203 bitmap
= priv
->running_bsses
;
2204 mwl8k_enable_bsses(hw
, false, bitmap
);
2209 cmd
->result
= (__force __le16
) 0xffff;
2210 dma_size
= le16_to_cpu(cmd
->length
);
2211 dma_addr
= pci_map_single(priv
->pdev
, cmd
, dma_size
,
2212 PCI_DMA_BIDIRECTIONAL
);
2213 if (pci_dma_mapping_error(priv
->pdev
, dma_addr
))
2216 priv
->hostcmd_wait
= &cmd_wait
;
2217 iowrite32(dma_addr
, regs
+ MWL8K_HIU_GEN_PTR
);
2218 iowrite32(MWL8K_H2A_INT_DOORBELL
,
2219 regs
+ MWL8K_HIU_H2A_INTERRUPT_EVENTS
);
2220 iowrite32(MWL8K_H2A_INT_DUMMY
,
2221 regs
+ MWL8K_HIU_H2A_INTERRUPT_EVENTS
);
2223 timeout
= wait_for_completion_timeout(&cmd_wait
,
2224 msecs_to_jiffies(MWL8K_CMD_TIMEOUT_MS
));
2226 priv
->hostcmd_wait
= NULL
;
2229 pci_unmap_single(priv
->pdev
, dma_addr
, dma_size
,
2230 PCI_DMA_BIDIRECTIONAL
);
2233 wiphy_err(hw
->wiphy
, "Command %s timeout after %u ms\n",
2234 mwl8k_cmd_name(cmd
->code
, buf
, sizeof(buf
)),
2235 MWL8K_CMD_TIMEOUT_MS
);
2240 ms
= MWL8K_CMD_TIMEOUT_MS
- jiffies_to_msecs(timeout
);
2242 rc
= cmd
->result
? -EINVAL
: 0;
2244 wiphy_err(hw
->wiphy
, "Command %s error 0x%x\n",
2245 mwl8k_cmd_name(cmd
->code
, buf
, sizeof(buf
)),
2246 le16_to_cpu(cmd
->result
));
2248 wiphy_notice(hw
->wiphy
, "Command %s took %d ms\n",
2249 mwl8k_cmd_name(cmd
->code
,
2255 mwl8k_enable_bsses(hw
, true, bitmap
);
2257 mwl8k_fw_unlock(hw
);
2262 static int mwl8k_post_pervif_cmd(struct ieee80211_hw
*hw
,
2263 struct ieee80211_vif
*vif
,
2264 struct mwl8k_cmd_pkt
*cmd
)
2267 cmd
->macid
= MWL8K_VIF(vif
)->macid
;
2268 return mwl8k_post_cmd(hw
, cmd
);
2272 * Setup code shared between STA and AP firmware images.
2274 static void mwl8k_setup_2ghz_band(struct ieee80211_hw
*hw
)
2276 struct mwl8k_priv
*priv
= hw
->priv
;
2278 BUILD_BUG_ON(sizeof(priv
->channels_24
) != sizeof(mwl8k_channels_24
));
2279 memcpy(priv
->channels_24
, mwl8k_channels_24
, sizeof(mwl8k_channels_24
));
2281 BUILD_BUG_ON(sizeof(priv
->rates_24
) != sizeof(mwl8k_rates_24
));
2282 memcpy(priv
->rates_24
, mwl8k_rates_24
, sizeof(mwl8k_rates_24
));
2284 priv
->band_24
.band
= IEEE80211_BAND_2GHZ
;
2285 priv
->band_24
.channels
= priv
->channels_24
;
2286 priv
->band_24
.n_channels
= ARRAY_SIZE(mwl8k_channels_24
);
2287 priv
->band_24
.bitrates
= priv
->rates_24
;
2288 priv
->band_24
.n_bitrates
= ARRAY_SIZE(mwl8k_rates_24
);
2290 hw
->wiphy
->bands
[IEEE80211_BAND_2GHZ
] = &priv
->band_24
;
2293 static void mwl8k_setup_5ghz_band(struct ieee80211_hw
*hw
)
2295 struct mwl8k_priv
*priv
= hw
->priv
;
2297 BUILD_BUG_ON(sizeof(priv
->channels_50
) != sizeof(mwl8k_channels_50
));
2298 memcpy(priv
->channels_50
, mwl8k_channels_50
, sizeof(mwl8k_channels_50
));
2300 BUILD_BUG_ON(sizeof(priv
->rates_50
) != sizeof(mwl8k_rates_50
));
2301 memcpy(priv
->rates_50
, mwl8k_rates_50
, sizeof(mwl8k_rates_50
));
2303 priv
->band_50
.band
= IEEE80211_BAND_5GHZ
;
2304 priv
->band_50
.channels
= priv
->channels_50
;
2305 priv
->band_50
.n_channels
= ARRAY_SIZE(mwl8k_channels_50
);
2306 priv
->band_50
.bitrates
= priv
->rates_50
;
2307 priv
->band_50
.n_bitrates
= ARRAY_SIZE(mwl8k_rates_50
);
2309 hw
->wiphy
->bands
[IEEE80211_BAND_5GHZ
] = &priv
->band_50
;
2313 * CMD_GET_HW_SPEC (STA version).
2315 struct mwl8k_cmd_get_hw_spec_sta
{
2316 struct mwl8k_cmd_pkt header
;
2318 __u8 host_interface
;
2320 __u8 perm_addr
[ETH_ALEN
];
2325 __u8 mcs_bitmap
[16];
2326 __le32 rx_queue_ptr
;
2327 __le32 num_tx_queues
;
2328 __le32 tx_queue_ptrs
[MWL8K_TX_WMM_QUEUES
];
2330 __le32 num_tx_desc_per_queue
;
2334 #define MWL8K_CAP_MAX_AMSDU 0x20000000
2335 #define MWL8K_CAP_GREENFIELD 0x08000000
2336 #define MWL8K_CAP_AMPDU 0x04000000
2337 #define MWL8K_CAP_RX_STBC 0x01000000
2338 #define MWL8K_CAP_TX_STBC 0x00800000
2339 #define MWL8K_CAP_SHORTGI_40MHZ 0x00400000
2340 #define MWL8K_CAP_SHORTGI_20MHZ 0x00200000
2341 #define MWL8K_CAP_RX_ANTENNA_MASK 0x000e0000
2342 #define MWL8K_CAP_TX_ANTENNA_MASK 0x0001c000
2343 #define MWL8K_CAP_DELAY_BA 0x00003000
2344 #define MWL8K_CAP_MIMO 0x00000200
2345 #define MWL8K_CAP_40MHZ 0x00000100
2346 #define MWL8K_CAP_BAND_MASK 0x00000007
2347 #define MWL8K_CAP_5GHZ 0x00000004
2348 #define MWL8K_CAP_2GHZ4 0x00000001
2351 mwl8k_set_ht_caps(struct ieee80211_hw
*hw
,
2352 struct ieee80211_supported_band
*band
, u32 cap
)
2357 band
->ht_cap
.ht_supported
= 1;
2359 if (cap
& MWL8K_CAP_MAX_AMSDU
)
2360 band
->ht_cap
.cap
|= IEEE80211_HT_CAP_MAX_AMSDU
;
2361 if (cap
& MWL8K_CAP_GREENFIELD
)
2362 band
->ht_cap
.cap
|= IEEE80211_HT_CAP_GRN_FLD
;
2363 if (cap
& MWL8K_CAP_AMPDU
) {
2364 hw
->flags
|= IEEE80211_HW_AMPDU_AGGREGATION
;
2365 band
->ht_cap
.ampdu_factor
= IEEE80211_HT_MAX_AMPDU_64K
;
2366 band
->ht_cap
.ampdu_density
= IEEE80211_HT_MPDU_DENSITY_NONE
;
2368 if (cap
& MWL8K_CAP_RX_STBC
)
2369 band
->ht_cap
.cap
|= IEEE80211_HT_CAP_RX_STBC
;
2370 if (cap
& MWL8K_CAP_TX_STBC
)
2371 band
->ht_cap
.cap
|= IEEE80211_HT_CAP_TX_STBC
;
2372 if (cap
& MWL8K_CAP_SHORTGI_40MHZ
)
2373 band
->ht_cap
.cap
|= IEEE80211_HT_CAP_SGI_40
;
2374 if (cap
& MWL8K_CAP_SHORTGI_20MHZ
)
2375 band
->ht_cap
.cap
|= IEEE80211_HT_CAP_SGI_20
;
2376 if (cap
& MWL8K_CAP_DELAY_BA
)
2377 band
->ht_cap
.cap
|= IEEE80211_HT_CAP_DELAY_BA
;
2378 if (cap
& MWL8K_CAP_40MHZ
)
2379 band
->ht_cap
.cap
|= IEEE80211_HT_CAP_SUP_WIDTH_20_40
;
2381 rx_streams
= hweight32(cap
& MWL8K_CAP_RX_ANTENNA_MASK
);
2382 tx_streams
= hweight32(cap
& MWL8K_CAP_TX_ANTENNA_MASK
);
2384 band
->ht_cap
.mcs
.rx_mask
[0] = 0xff;
2385 if (rx_streams
>= 2)
2386 band
->ht_cap
.mcs
.rx_mask
[1] = 0xff;
2387 if (rx_streams
>= 3)
2388 band
->ht_cap
.mcs
.rx_mask
[2] = 0xff;
2389 band
->ht_cap
.mcs
.rx_mask
[4] = 0x01;
2390 band
->ht_cap
.mcs
.tx_params
= IEEE80211_HT_MCS_TX_DEFINED
;
2392 if (rx_streams
!= tx_streams
) {
2393 band
->ht_cap
.mcs
.tx_params
|= IEEE80211_HT_MCS_TX_RX_DIFF
;
2394 band
->ht_cap
.mcs
.tx_params
|= (tx_streams
- 1) <<
2395 IEEE80211_HT_MCS_TX_MAX_STREAMS_SHIFT
;
2400 mwl8k_set_caps(struct ieee80211_hw
*hw
, u32 caps
)
2402 struct mwl8k_priv
*priv
= hw
->priv
;
2404 if ((caps
& MWL8K_CAP_2GHZ4
) || !(caps
& MWL8K_CAP_BAND_MASK
)) {
2405 mwl8k_setup_2ghz_band(hw
);
2406 if (caps
& MWL8K_CAP_MIMO
)
2407 mwl8k_set_ht_caps(hw
, &priv
->band_24
, caps
);
2410 if (caps
& MWL8K_CAP_5GHZ
) {
2411 mwl8k_setup_5ghz_band(hw
);
2412 if (caps
& MWL8K_CAP_MIMO
)
2413 mwl8k_set_ht_caps(hw
, &priv
->band_50
, caps
);
2417 static int mwl8k_cmd_get_hw_spec_sta(struct ieee80211_hw
*hw
)
2419 struct mwl8k_priv
*priv
= hw
->priv
;
2420 struct mwl8k_cmd_get_hw_spec_sta
*cmd
;
2424 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2428 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_GET_HW_SPEC
);
2429 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2431 memset(cmd
->perm_addr
, 0xff, sizeof(cmd
->perm_addr
));
2432 cmd
->ps_cookie
= cpu_to_le32(priv
->cookie_dma
);
2433 cmd
->rx_queue_ptr
= cpu_to_le32(priv
->rxq
[0].rxd_dma
);
2434 cmd
->num_tx_queues
= cpu_to_le32(mwl8k_tx_queues(priv
));
2435 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++)
2436 cmd
->tx_queue_ptrs
[i
] = cpu_to_le32(priv
->txq
[i
].txd_dma
);
2437 cmd
->num_tx_desc_per_queue
= cpu_to_le32(MWL8K_TX_DESCS
);
2438 cmd
->total_rxd
= cpu_to_le32(MWL8K_RX_DESCS
);
2440 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2443 SET_IEEE80211_PERM_ADDR(hw
, cmd
->perm_addr
);
2444 priv
->num_mcaddrs
= le16_to_cpu(cmd
->num_mcaddrs
);
2445 priv
->fw_rev
= le32_to_cpu(cmd
->fw_rev
);
2446 priv
->hw_rev
= cmd
->hw_rev
;
2447 mwl8k_set_caps(hw
, le32_to_cpu(cmd
->caps
));
2448 priv
->ap_macids_supported
= 0x00000000;
2449 priv
->sta_macids_supported
= 0x00000001;
2457 * CMD_GET_HW_SPEC (AP version).
2459 struct mwl8k_cmd_get_hw_spec_ap
{
2460 struct mwl8k_cmd_pkt header
;
2462 __u8 host_interface
;
2465 __u8 perm_addr
[ETH_ALEN
];
2476 __le32 fw_api_version
;
2478 __le32 num_of_ampdu_queues
;
2479 __le32 wcbbase_ampdu
[MWL8K_MAX_AMPDU_QUEUES
];
2482 static int mwl8k_cmd_get_hw_spec_ap(struct ieee80211_hw
*hw
)
2484 struct mwl8k_priv
*priv
= hw
->priv
;
2485 struct mwl8k_cmd_get_hw_spec_ap
*cmd
;
2489 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2493 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_GET_HW_SPEC
);
2494 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2496 memset(cmd
->perm_addr
, 0xff, sizeof(cmd
->perm_addr
));
2497 cmd
->ps_cookie
= cpu_to_le32(priv
->cookie_dma
);
2499 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2504 api_version
= le32_to_cpu(cmd
->fw_api_version
);
2505 if (priv
->device_info
->fw_api_ap
!= api_version
) {
2506 printk(KERN_ERR
"%s: Unsupported fw API version for %s."
2507 " Expected %d got %d.\n", MWL8K_NAME
,
2508 priv
->device_info
->part_name
,
2509 priv
->device_info
->fw_api_ap
,
2514 SET_IEEE80211_PERM_ADDR(hw
, cmd
->perm_addr
);
2515 priv
->num_mcaddrs
= le16_to_cpu(cmd
->num_mcaddrs
);
2516 priv
->fw_rev
= le32_to_cpu(cmd
->fw_rev
);
2517 priv
->hw_rev
= cmd
->hw_rev
;
2518 mwl8k_set_caps(hw
, le32_to_cpu(cmd
->caps
));
2519 priv
->ap_macids_supported
= 0x000000ff;
2520 priv
->sta_macids_supported
= 0x00000100;
2521 priv
->num_ampdu_queues
= le32_to_cpu(cmd
->num_of_ampdu_queues
);
2522 if (priv
->num_ampdu_queues
> MWL8K_MAX_AMPDU_QUEUES
) {
2523 wiphy_warn(hw
->wiphy
, "fw reported %d ampdu queues"
2524 " but we only support %d.\n",
2525 priv
->num_ampdu_queues
,
2526 MWL8K_MAX_AMPDU_QUEUES
);
2527 priv
->num_ampdu_queues
= MWL8K_MAX_AMPDU_QUEUES
;
2529 off
= le32_to_cpu(cmd
->rxwrptr
) & 0xffff;
2530 iowrite32(priv
->rxq
[0].rxd_dma
, priv
->sram
+ off
);
2532 off
= le32_to_cpu(cmd
->rxrdptr
) & 0xffff;
2533 iowrite32(priv
->rxq
[0].rxd_dma
, priv
->sram
+ off
);
2535 priv
->txq_offset
[0] = le32_to_cpu(cmd
->wcbbase0
) & 0xffff;
2536 priv
->txq_offset
[1] = le32_to_cpu(cmd
->wcbbase1
) & 0xffff;
2537 priv
->txq_offset
[2] = le32_to_cpu(cmd
->wcbbase2
) & 0xffff;
2538 priv
->txq_offset
[3] = le32_to_cpu(cmd
->wcbbase3
) & 0xffff;
2540 for (i
= 0; i
< priv
->num_ampdu_queues
; i
++)
2541 priv
->txq_offset
[i
+ MWL8K_TX_WMM_QUEUES
] =
2542 le32_to_cpu(cmd
->wcbbase_ampdu
[i
]) & 0xffff;
2553 struct mwl8k_cmd_set_hw_spec
{
2554 struct mwl8k_cmd_pkt header
;
2556 __u8 host_interface
;
2558 __u8 perm_addr
[ETH_ALEN
];
2563 __le32 rx_queue_ptr
;
2564 __le32 num_tx_queues
;
2565 __le32 tx_queue_ptrs
[MWL8K_MAX_TX_QUEUES
];
2567 __le32 num_tx_desc_per_queue
;
2571 /* If enabled, MWL8K_SET_HW_SPEC_FLAG_ENABLE_LIFE_TIME_EXPIRY will cause
2572 * packets to expire 500 ms after the timestamp in the tx descriptor. That is,
2573 * the packets that are queued for more than 500ms, will be dropped in the
2574 * hardware. This helps minimizing the issues caused due to head-of-line
2575 * blocking where a slow client can hog the bandwidth and affect traffic to a
2578 #define MWL8K_SET_HW_SPEC_FLAG_ENABLE_LIFE_TIME_EXPIRY 0x00000400
2579 #define MWL8K_SET_HW_SPEC_FLAG_GENERATE_CCMP_HDR 0x00000200
2580 #define MWL8K_SET_HW_SPEC_FLAG_HOST_DECR_MGMT 0x00000080
2581 #define MWL8K_SET_HW_SPEC_FLAG_HOSTFORM_PROBERESP 0x00000020
2582 #define MWL8K_SET_HW_SPEC_FLAG_HOSTFORM_BEACON 0x00000010
2584 static int mwl8k_cmd_set_hw_spec(struct ieee80211_hw
*hw
)
2586 struct mwl8k_priv
*priv
= hw
->priv
;
2587 struct mwl8k_cmd_set_hw_spec
*cmd
;
2591 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2595 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_HW_SPEC
);
2596 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2598 cmd
->ps_cookie
= cpu_to_le32(priv
->cookie_dma
);
2599 cmd
->rx_queue_ptr
= cpu_to_le32(priv
->rxq
[0].rxd_dma
);
2600 cmd
->num_tx_queues
= cpu_to_le32(mwl8k_tx_queues(priv
));
2603 * Mac80211 stack has Q0 as highest priority and Q3 as lowest in
2604 * that order. Firmware has Q3 as highest priority and Q0 as lowest
2605 * in that order. Map Q3 of mac80211 to Q0 of firmware so that the
2606 * priority is interpreted the right way in firmware.
2608 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++) {
2609 int j
= mwl8k_tx_queues(priv
) - 1 - i
;
2610 cmd
->tx_queue_ptrs
[i
] = cpu_to_le32(priv
->txq
[j
].txd_dma
);
2613 cmd
->flags
= cpu_to_le32(MWL8K_SET_HW_SPEC_FLAG_HOST_DECR_MGMT
|
2614 MWL8K_SET_HW_SPEC_FLAG_HOSTFORM_PROBERESP
|
2615 MWL8K_SET_HW_SPEC_FLAG_HOSTFORM_BEACON
|
2616 MWL8K_SET_HW_SPEC_FLAG_ENABLE_LIFE_TIME_EXPIRY
|
2617 MWL8K_SET_HW_SPEC_FLAG_GENERATE_CCMP_HDR
);
2618 cmd
->num_tx_desc_per_queue
= cpu_to_le32(MWL8K_TX_DESCS
);
2619 cmd
->total_rxd
= cpu_to_le32(MWL8K_RX_DESCS
);
2621 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2628 * CMD_MAC_MULTICAST_ADR.
2630 struct mwl8k_cmd_mac_multicast_adr
{
2631 struct mwl8k_cmd_pkt header
;
2634 __u8 addr
[0][ETH_ALEN
];
2637 #define MWL8K_ENABLE_RX_DIRECTED 0x0001
2638 #define MWL8K_ENABLE_RX_MULTICAST 0x0002
2639 #define MWL8K_ENABLE_RX_ALL_MULTICAST 0x0004
2640 #define MWL8K_ENABLE_RX_BROADCAST 0x0008
2642 static struct mwl8k_cmd_pkt
*
2643 __mwl8k_cmd_mac_multicast_adr(struct ieee80211_hw
*hw
, int allmulti
,
2644 struct netdev_hw_addr_list
*mc_list
)
2646 struct mwl8k_priv
*priv
= hw
->priv
;
2647 struct mwl8k_cmd_mac_multicast_adr
*cmd
;
2652 mc_count
= netdev_hw_addr_list_count(mc_list
);
2654 if (allmulti
|| mc_count
> priv
->num_mcaddrs
) {
2659 size
= sizeof(*cmd
) + mc_count
* ETH_ALEN
;
2661 cmd
= kzalloc(size
, GFP_ATOMIC
);
2665 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_MAC_MULTICAST_ADR
);
2666 cmd
->header
.length
= cpu_to_le16(size
);
2667 cmd
->action
= cpu_to_le16(MWL8K_ENABLE_RX_DIRECTED
|
2668 MWL8K_ENABLE_RX_BROADCAST
);
2671 cmd
->action
|= cpu_to_le16(MWL8K_ENABLE_RX_ALL_MULTICAST
);
2672 } else if (mc_count
) {
2673 struct netdev_hw_addr
*ha
;
2676 cmd
->action
|= cpu_to_le16(MWL8K_ENABLE_RX_MULTICAST
);
2677 cmd
->numaddr
= cpu_to_le16(mc_count
);
2678 netdev_hw_addr_list_for_each(ha
, mc_list
) {
2679 memcpy(cmd
->addr
[i
], ha
->addr
, ETH_ALEN
);
2683 return &cmd
->header
;
2689 struct mwl8k_cmd_get_stat
{
2690 struct mwl8k_cmd_pkt header
;
2694 #define MWL8K_STAT_ACK_FAILURE 9
2695 #define MWL8K_STAT_RTS_FAILURE 12
2696 #define MWL8K_STAT_FCS_ERROR 24
2697 #define MWL8K_STAT_RTS_SUCCESS 11
2699 static int mwl8k_cmd_get_stat(struct ieee80211_hw
*hw
,
2700 struct ieee80211_low_level_stats
*stats
)
2702 struct mwl8k_cmd_get_stat
*cmd
;
2705 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2709 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_GET_STAT
);
2710 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2712 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2714 stats
->dot11ACKFailureCount
=
2715 le32_to_cpu(cmd
->stats
[MWL8K_STAT_ACK_FAILURE
]);
2716 stats
->dot11RTSFailureCount
=
2717 le32_to_cpu(cmd
->stats
[MWL8K_STAT_RTS_FAILURE
]);
2718 stats
->dot11FCSErrorCount
=
2719 le32_to_cpu(cmd
->stats
[MWL8K_STAT_FCS_ERROR
]);
2720 stats
->dot11RTSSuccessCount
=
2721 le32_to_cpu(cmd
->stats
[MWL8K_STAT_RTS_SUCCESS
]);
2729 * CMD_RADIO_CONTROL.
2731 struct mwl8k_cmd_radio_control
{
2732 struct mwl8k_cmd_pkt header
;
2739 mwl8k_cmd_radio_control(struct ieee80211_hw
*hw
, bool enable
, bool force
)
2741 struct mwl8k_priv
*priv
= hw
->priv
;
2742 struct mwl8k_cmd_radio_control
*cmd
;
2745 if (enable
== priv
->radio_on
&& !force
)
2748 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2752 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_RADIO_CONTROL
);
2753 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2754 cmd
->action
= cpu_to_le16(MWL8K_CMD_SET
);
2755 cmd
->control
= cpu_to_le16(priv
->radio_short_preamble
? 3 : 1);
2756 cmd
->radio_on
= cpu_to_le16(enable
? 0x0001 : 0x0000);
2758 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2762 priv
->radio_on
= enable
;
2767 static int mwl8k_cmd_radio_disable(struct ieee80211_hw
*hw
)
2769 return mwl8k_cmd_radio_control(hw
, 0, 0);
2772 static int mwl8k_cmd_radio_enable(struct ieee80211_hw
*hw
)
2774 return mwl8k_cmd_radio_control(hw
, 1, 0);
2778 mwl8k_set_radio_preamble(struct ieee80211_hw
*hw
, bool short_preamble
)
2780 struct mwl8k_priv
*priv
= hw
->priv
;
2782 priv
->radio_short_preamble
= short_preamble
;
2784 return mwl8k_cmd_radio_control(hw
, 1, 1);
2790 #define MWL8K_RF_TX_POWER_LEVEL_TOTAL 8
2792 struct mwl8k_cmd_rf_tx_power
{
2793 struct mwl8k_cmd_pkt header
;
2795 __le16 support_level
;
2796 __le16 current_level
;
2798 __le16 power_level_list
[MWL8K_RF_TX_POWER_LEVEL_TOTAL
];
2801 static int mwl8k_cmd_rf_tx_power(struct ieee80211_hw
*hw
, int dBm
)
2803 struct mwl8k_cmd_rf_tx_power
*cmd
;
2806 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2810 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_RF_TX_POWER
);
2811 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2812 cmd
->action
= cpu_to_le16(MWL8K_CMD_SET
);
2813 cmd
->support_level
= cpu_to_le16(dBm
);
2815 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2824 #define MWL8K_TX_POWER_LEVEL_TOTAL 12
2826 struct mwl8k_cmd_tx_power
{
2827 struct mwl8k_cmd_pkt header
;
2833 __le16 power_level_list
[MWL8K_TX_POWER_LEVEL_TOTAL
];
2836 static int mwl8k_cmd_tx_power(struct ieee80211_hw
*hw
,
2837 struct ieee80211_conf
*conf
,
2840 struct ieee80211_channel
*channel
= conf
->channel
;
2841 struct mwl8k_cmd_tx_power
*cmd
;
2845 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2849 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_TX_POWER
);
2850 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2851 cmd
->action
= cpu_to_le16(MWL8K_CMD_SET_LIST
);
2853 if (channel
->band
== IEEE80211_BAND_2GHZ
)
2854 cmd
->band
= cpu_to_le16(0x1);
2855 else if (channel
->band
== IEEE80211_BAND_5GHZ
)
2856 cmd
->band
= cpu_to_le16(0x4);
2858 cmd
->channel
= cpu_to_le16(channel
->hw_value
);
2860 if (conf
->channel_type
== NL80211_CHAN_NO_HT
||
2861 conf
->channel_type
== NL80211_CHAN_HT20
) {
2862 cmd
->bw
= cpu_to_le16(0x2);
2864 cmd
->bw
= cpu_to_le16(0x4);
2865 if (conf
->channel_type
== NL80211_CHAN_HT40MINUS
)
2866 cmd
->sub_ch
= cpu_to_le16(0x3);
2867 else if (conf
->channel_type
== NL80211_CHAN_HT40PLUS
)
2868 cmd
->sub_ch
= cpu_to_le16(0x1);
2871 for (i
= 0; i
< MWL8K_TX_POWER_LEVEL_TOTAL
; i
++)
2872 cmd
->power_level_list
[i
] = cpu_to_le16(pwr
);
2874 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2883 struct mwl8k_cmd_rf_antenna
{
2884 struct mwl8k_cmd_pkt header
;
2889 #define MWL8K_RF_ANTENNA_RX 1
2890 #define MWL8K_RF_ANTENNA_TX 2
2893 mwl8k_cmd_rf_antenna(struct ieee80211_hw
*hw
, int antenna
, int mask
)
2895 struct mwl8k_cmd_rf_antenna
*cmd
;
2898 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2902 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_RF_ANTENNA
);
2903 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2904 cmd
->antenna
= cpu_to_le16(antenna
);
2905 cmd
->mode
= cpu_to_le16(mask
);
2907 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2916 struct mwl8k_cmd_set_beacon
{
2917 struct mwl8k_cmd_pkt header
;
2922 static int mwl8k_cmd_set_beacon(struct ieee80211_hw
*hw
,
2923 struct ieee80211_vif
*vif
, u8
*beacon
, int len
)
2925 struct mwl8k_cmd_set_beacon
*cmd
;
2928 cmd
= kzalloc(sizeof(*cmd
) + len
, GFP_KERNEL
);
2932 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_BEACON
);
2933 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
) + len
);
2934 cmd
->beacon_len
= cpu_to_le16(len
);
2935 memcpy(cmd
->beacon
, beacon
, len
);
2937 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
2946 struct mwl8k_cmd_set_pre_scan
{
2947 struct mwl8k_cmd_pkt header
;
2950 static int mwl8k_cmd_set_pre_scan(struct ieee80211_hw
*hw
)
2952 struct mwl8k_cmd_set_pre_scan
*cmd
;
2955 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2959 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_PRE_SCAN
);
2960 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2962 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2969 * CMD_SET_POST_SCAN.
2971 struct mwl8k_cmd_set_post_scan
{
2972 struct mwl8k_cmd_pkt header
;
2974 __u8 bssid
[ETH_ALEN
];
2978 mwl8k_cmd_set_post_scan(struct ieee80211_hw
*hw
, const __u8
*mac
)
2980 struct mwl8k_cmd_set_post_scan
*cmd
;
2983 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
2987 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_POST_SCAN
);
2988 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
2990 memcpy(cmd
->bssid
, mac
, ETH_ALEN
);
2992 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
2999 * CMD_SET_RF_CHANNEL.
3001 struct mwl8k_cmd_set_rf_channel
{
3002 struct mwl8k_cmd_pkt header
;
3004 __u8 current_channel
;
3005 __le32 channel_flags
;
3008 static int mwl8k_cmd_set_rf_channel(struct ieee80211_hw
*hw
,
3009 struct ieee80211_conf
*conf
)
3011 struct ieee80211_channel
*channel
= conf
->channel
;
3012 struct mwl8k_cmd_set_rf_channel
*cmd
;
3015 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3019 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_RF_CHANNEL
);
3020 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3021 cmd
->action
= cpu_to_le16(MWL8K_CMD_SET
);
3022 cmd
->current_channel
= channel
->hw_value
;
3024 if (channel
->band
== IEEE80211_BAND_2GHZ
)
3025 cmd
->channel_flags
|= cpu_to_le32(0x00000001);
3026 else if (channel
->band
== IEEE80211_BAND_5GHZ
)
3027 cmd
->channel_flags
|= cpu_to_le32(0x00000004);
3029 if (conf
->channel_type
== NL80211_CHAN_NO_HT
||
3030 conf
->channel_type
== NL80211_CHAN_HT20
)
3031 cmd
->channel_flags
|= cpu_to_le32(0x00000080);
3032 else if (conf
->channel_type
== NL80211_CHAN_HT40MINUS
)
3033 cmd
->channel_flags
|= cpu_to_le32(0x000001900);
3034 else if (conf
->channel_type
== NL80211_CHAN_HT40PLUS
)
3035 cmd
->channel_flags
|= cpu_to_le32(0x000000900);
3037 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3046 #define MWL8K_FRAME_PROT_DISABLED 0x00
3047 #define MWL8K_FRAME_PROT_11G 0x07
3048 #define MWL8K_FRAME_PROT_11N_HT_40MHZ_ONLY 0x02
3049 #define MWL8K_FRAME_PROT_11N_HT_ALL 0x06
3051 struct mwl8k_cmd_update_set_aid
{
3052 struct mwl8k_cmd_pkt header
;
3055 /* AP's MAC address (BSSID) */
3056 __u8 bssid
[ETH_ALEN
];
3057 __le16 protection_mode
;
3058 __u8 supp_rates
[14];
3061 static void legacy_rate_mask_to_array(u8
*rates
, u32 mask
)
3067 * Clear nonstandard rates 4 and 13.
3071 for (i
= 0, j
= 0; i
< 14; i
++) {
3072 if (mask
& (1 << i
))
3073 rates
[j
++] = mwl8k_rates_24
[i
].hw_value
;
3078 mwl8k_cmd_set_aid(struct ieee80211_hw
*hw
,
3079 struct ieee80211_vif
*vif
, u32 legacy_rate_mask
)
3081 struct mwl8k_cmd_update_set_aid
*cmd
;
3085 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3089 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_AID
);
3090 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3091 cmd
->aid
= cpu_to_le16(vif
->bss_conf
.aid
);
3092 memcpy(cmd
->bssid
, vif
->bss_conf
.bssid
, ETH_ALEN
);
3094 if (vif
->bss_conf
.use_cts_prot
) {
3095 prot_mode
= MWL8K_FRAME_PROT_11G
;
3097 switch (vif
->bss_conf
.ht_operation_mode
&
3098 IEEE80211_HT_OP_MODE_PROTECTION
) {
3099 case IEEE80211_HT_OP_MODE_PROTECTION_20MHZ
:
3100 prot_mode
= MWL8K_FRAME_PROT_11N_HT_40MHZ_ONLY
;
3102 case IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED
:
3103 prot_mode
= MWL8K_FRAME_PROT_11N_HT_ALL
;
3106 prot_mode
= MWL8K_FRAME_PROT_DISABLED
;
3110 cmd
->protection_mode
= cpu_to_le16(prot_mode
);
3112 legacy_rate_mask_to_array(cmd
->supp_rates
, legacy_rate_mask
);
3114 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3123 struct mwl8k_cmd_set_rate
{
3124 struct mwl8k_cmd_pkt header
;
3125 __u8 legacy_rates
[14];
3127 /* Bitmap for supported MCS codes. */
3133 mwl8k_cmd_set_rate(struct ieee80211_hw
*hw
, struct ieee80211_vif
*vif
,
3134 u32 legacy_rate_mask
, u8
*mcs_rates
)
3136 struct mwl8k_cmd_set_rate
*cmd
;
3139 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3143 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_RATE
);
3144 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3145 legacy_rate_mask_to_array(cmd
->legacy_rates
, legacy_rate_mask
);
3146 memcpy(cmd
->mcs_set
, mcs_rates
, 16);
3148 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3155 * CMD_FINALIZE_JOIN.
3157 #define MWL8K_FJ_BEACON_MAXLEN 128
3159 struct mwl8k_cmd_finalize_join
{
3160 struct mwl8k_cmd_pkt header
;
3161 __le32 sleep_interval
; /* Number of beacon periods to sleep */
3162 __u8 beacon_data
[MWL8K_FJ_BEACON_MAXLEN
];
3165 static int mwl8k_cmd_finalize_join(struct ieee80211_hw
*hw
, void *frame
,
3166 int framelen
, int dtim
)
3168 struct mwl8k_cmd_finalize_join
*cmd
;
3169 struct ieee80211_mgmt
*payload
= frame
;
3173 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3177 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_FINALIZE_JOIN
);
3178 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3179 cmd
->sleep_interval
= cpu_to_le32(dtim
? dtim
: 1);
3181 payload_len
= framelen
- ieee80211_hdrlen(payload
->frame_control
);
3182 if (payload_len
< 0)
3184 else if (payload_len
> MWL8K_FJ_BEACON_MAXLEN
)
3185 payload_len
= MWL8K_FJ_BEACON_MAXLEN
;
3187 memcpy(cmd
->beacon_data
, &payload
->u
.beacon
, payload_len
);
3189 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3196 * CMD_SET_RTS_THRESHOLD.
3198 struct mwl8k_cmd_set_rts_threshold
{
3199 struct mwl8k_cmd_pkt header
;
3205 mwl8k_cmd_set_rts_threshold(struct ieee80211_hw
*hw
, int rts_thresh
)
3207 struct mwl8k_cmd_set_rts_threshold
*cmd
;
3210 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3214 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_RTS_THRESHOLD
);
3215 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3216 cmd
->action
= cpu_to_le16(MWL8K_CMD_SET
);
3217 cmd
->threshold
= cpu_to_le16(rts_thresh
);
3219 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3228 struct mwl8k_cmd_set_slot
{
3229 struct mwl8k_cmd_pkt header
;
3234 static int mwl8k_cmd_set_slot(struct ieee80211_hw
*hw
, bool short_slot_time
)
3236 struct mwl8k_cmd_set_slot
*cmd
;
3239 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3243 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_SLOT
);
3244 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3245 cmd
->action
= cpu_to_le16(MWL8K_CMD_SET
);
3246 cmd
->short_slot
= short_slot_time
;
3248 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3255 * CMD_SET_EDCA_PARAMS.
3257 struct mwl8k_cmd_set_edca_params
{
3258 struct mwl8k_cmd_pkt header
;
3260 /* See MWL8K_SET_EDCA_XXX below */
3263 /* TX opportunity in units of 32 us */
3268 /* Log exponent of max contention period: 0...15 */
3271 /* Log exponent of min contention period: 0...15 */
3274 /* Adaptive interframe spacing in units of 32us */
3277 /* TX queue to configure */
3281 /* Log exponent of max contention period: 0...15 */
3284 /* Log exponent of min contention period: 0...15 */
3287 /* Adaptive interframe spacing in units of 32us */
3290 /* TX queue to configure */
3296 #define MWL8K_SET_EDCA_CW 0x01
3297 #define MWL8K_SET_EDCA_TXOP 0x02
3298 #define MWL8K_SET_EDCA_AIFS 0x04
3300 #define MWL8K_SET_EDCA_ALL (MWL8K_SET_EDCA_CW | \
3301 MWL8K_SET_EDCA_TXOP | \
3302 MWL8K_SET_EDCA_AIFS)
3305 mwl8k_cmd_set_edca_params(struct ieee80211_hw
*hw
, __u8 qnum
,
3306 __u16 cw_min
, __u16 cw_max
,
3307 __u8 aifs
, __u16 txop
)
3309 struct mwl8k_priv
*priv
= hw
->priv
;
3310 struct mwl8k_cmd_set_edca_params
*cmd
;
3313 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3317 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_EDCA_PARAMS
);
3318 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3319 cmd
->action
= cpu_to_le16(MWL8K_SET_EDCA_ALL
);
3320 cmd
->txop
= cpu_to_le16(txop
);
3322 cmd
->ap
.log_cw_max
= cpu_to_le32(ilog2(cw_max
+ 1));
3323 cmd
->ap
.log_cw_min
= cpu_to_le32(ilog2(cw_min
+ 1));
3324 cmd
->ap
.aifs
= aifs
;
3327 cmd
->sta
.log_cw_max
= (u8
)ilog2(cw_max
+ 1);
3328 cmd
->sta
.log_cw_min
= (u8
)ilog2(cw_min
+ 1);
3329 cmd
->sta
.aifs
= aifs
;
3330 cmd
->sta
.txq
= qnum
;
3333 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3342 struct mwl8k_cmd_set_wmm_mode
{
3343 struct mwl8k_cmd_pkt header
;
3347 static int mwl8k_cmd_set_wmm_mode(struct ieee80211_hw
*hw
, bool enable
)
3349 struct mwl8k_priv
*priv
= hw
->priv
;
3350 struct mwl8k_cmd_set_wmm_mode
*cmd
;
3353 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3357 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_WMM_MODE
);
3358 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3359 cmd
->action
= cpu_to_le16(!!enable
);
3361 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3365 priv
->wmm_enabled
= enable
;
3373 struct mwl8k_cmd_mimo_config
{
3374 struct mwl8k_cmd_pkt header
;
3376 __u8 rx_antenna_map
;
3377 __u8 tx_antenna_map
;
3380 static int mwl8k_cmd_mimo_config(struct ieee80211_hw
*hw
, __u8 rx
, __u8 tx
)
3382 struct mwl8k_cmd_mimo_config
*cmd
;
3385 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3389 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_MIMO_CONFIG
);
3390 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3391 cmd
->action
= cpu_to_le32((u32
)MWL8K_CMD_SET
);
3392 cmd
->rx_antenna_map
= rx
;
3393 cmd
->tx_antenna_map
= tx
;
3395 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3402 * CMD_USE_FIXED_RATE (STA version).
3404 struct mwl8k_cmd_use_fixed_rate_sta
{
3405 struct mwl8k_cmd_pkt header
;
3407 __le32 allow_rate_drop
;
3411 __le32 enable_retry
;
3420 #define MWL8K_USE_AUTO_RATE 0x0002
3421 #define MWL8K_UCAST_RATE 0
3423 static int mwl8k_cmd_use_fixed_rate_sta(struct ieee80211_hw
*hw
)
3425 struct mwl8k_cmd_use_fixed_rate_sta
*cmd
;
3428 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3432 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_USE_FIXED_RATE
);
3433 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3434 cmd
->action
= cpu_to_le32(MWL8K_USE_AUTO_RATE
);
3435 cmd
->rate_type
= cpu_to_le32(MWL8K_UCAST_RATE
);
3437 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3444 * CMD_USE_FIXED_RATE (AP version).
3446 struct mwl8k_cmd_use_fixed_rate_ap
{
3447 struct mwl8k_cmd_pkt header
;
3449 __le32 allow_rate_drop
;
3451 struct mwl8k_rate_entry_ap
{
3453 __le32 enable_retry
;
3458 u8 multicast_rate_type
;
3463 mwl8k_cmd_use_fixed_rate_ap(struct ieee80211_hw
*hw
, int mcast
, int mgmt
)
3465 struct mwl8k_cmd_use_fixed_rate_ap
*cmd
;
3468 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3472 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_USE_FIXED_RATE
);
3473 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3474 cmd
->action
= cpu_to_le32(MWL8K_USE_AUTO_RATE
);
3475 cmd
->multicast_rate
= mcast
;
3476 cmd
->management_rate
= mgmt
;
3478 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3485 * CMD_ENABLE_SNIFFER.
3487 struct mwl8k_cmd_enable_sniffer
{
3488 struct mwl8k_cmd_pkt header
;
3492 static int mwl8k_cmd_enable_sniffer(struct ieee80211_hw
*hw
, bool enable
)
3494 struct mwl8k_cmd_enable_sniffer
*cmd
;
3497 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3501 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_ENABLE_SNIFFER
);
3502 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3503 cmd
->action
= cpu_to_le32(!!enable
);
3505 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3511 struct mwl8k_cmd_update_mac_addr
{
3512 struct mwl8k_cmd_pkt header
;
3516 __u8 mac_addr
[ETH_ALEN
];
3518 __u8 mac_addr
[ETH_ALEN
];
3522 #define MWL8K_MAC_TYPE_PRIMARY_CLIENT 0
3523 #define MWL8K_MAC_TYPE_SECONDARY_CLIENT 1
3524 #define MWL8K_MAC_TYPE_PRIMARY_AP 2
3525 #define MWL8K_MAC_TYPE_SECONDARY_AP 3
3527 static int mwl8k_cmd_update_mac_addr(struct ieee80211_hw
*hw
,
3528 struct ieee80211_vif
*vif
, u8
*mac
, bool set
)
3530 struct mwl8k_priv
*priv
= hw
->priv
;
3531 struct mwl8k_vif
*mwl8k_vif
= MWL8K_VIF(vif
);
3532 struct mwl8k_cmd_update_mac_addr
*cmd
;
3536 mac_type
= MWL8K_MAC_TYPE_PRIMARY_AP
;
3537 if (vif
!= NULL
&& vif
->type
== NL80211_IFTYPE_STATION
) {
3538 if (mwl8k_vif
->macid
+ 1 == ffs(priv
->sta_macids_supported
))
3540 mac_type
= MWL8K_MAC_TYPE_SECONDARY_CLIENT
;
3542 mac_type
= MWL8K_MAC_TYPE_PRIMARY_CLIENT
;
3544 mac_type
= MWL8K_MAC_TYPE_SECONDARY_CLIENT
;
3545 } else if (vif
!= NULL
&& vif
->type
== NL80211_IFTYPE_AP
) {
3546 if (mwl8k_vif
->macid
+ 1 == ffs(priv
->ap_macids_supported
))
3547 mac_type
= MWL8K_MAC_TYPE_PRIMARY_AP
;
3549 mac_type
= MWL8K_MAC_TYPE_SECONDARY_AP
;
3552 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3557 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_MAC_ADDR
);
3559 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_DEL_MAC_ADDR
);
3561 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3563 cmd
->mbss
.mac_type
= cpu_to_le16(mac_type
);
3564 memcpy(cmd
->mbss
.mac_addr
, mac
, ETH_ALEN
);
3566 memcpy(cmd
->mac_addr
, mac
, ETH_ALEN
);
3569 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
3576 * MWL8K_CMD_SET_MAC_ADDR.
3578 static inline int mwl8k_cmd_set_mac_addr(struct ieee80211_hw
*hw
,
3579 struct ieee80211_vif
*vif
, u8
*mac
)
3581 return mwl8k_cmd_update_mac_addr(hw
, vif
, mac
, true);
3585 * MWL8K_CMD_DEL_MAC_ADDR.
3587 static inline int mwl8k_cmd_del_mac_addr(struct ieee80211_hw
*hw
,
3588 struct ieee80211_vif
*vif
, u8
*mac
)
3590 return mwl8k_cmd_update_mac_addr(hw
, vif
, mac
, false);
3594 * CMD_SET_RATEADAPT_MODE.
3596 struct mwl8k_cmd_set_rate_adapt_mode
{
3597 struct mwl8k_cmd_pkt header
;
3602 static int mwl8k_cmd_set_rateadapt_mode(struct ieee80211_hw
*hw
, __u16 mode
)
3604 struct mwl8k_cmd_set_rate_adapt_mode
*cmd
;
3607 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3611 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_RATEADAPT_MODE
);
3612 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3613 cmd
->action
= cpu_to_le16(MWL8K_CMD_SET
);
3614 cmd
->mode
= cpu_to_le16(mode
);
3616 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3623 * CMD_GET_WATCHDOG_BITMAP.
3625 struct mwl8k_cmd_get_watchdog_bitmap
{
3626 struct mwl8k_cmd_pkt header
;
3630 static int mwl8k_cmd_get_watchdog_bitmap(struct ieee80211_hw
*hw
, u8
*bitmap
)
3632 struct mwl8k_cmd_get_watchdog_bitmap
*cmd
;
3635 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3639 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_GET_WATCHDOG_BITMAP
);
3640 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3642 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
3644 *bitmap
= cmd
->bitmap
;
3651 #define MWL8K_WMM_QUEUE_NUMBER 3
3653 static void mwl8k_destroy_ba(struct ieee80211_hw
*hw
,
3656 static void mwl8k_watchdog_ba_events(struct work_struct
*work
)
3659 u8 bitmap
= 0, stream_index
;
3660 struct mwl8k_ampdu_stream
*streams
;
3661 struct mwl8k_priv
*priv
=
3662 container_of(work
, struct mwl8k_priv
, watchdog_ba_handle
);
3663 struct ieee80211_hw
*hw
= priv
->hw
;
3669 rc
= mwl8k_cmd_get_watchdog_bitmap(priv
->hw
, &bitmap
);
3673 spin_lock(&priv
->stream_lock
);
3675 /* the bitmap is the hw queue number. Map it to the ampdu queue. */
3676 for (i
= 0; i
< TOTAL_HW_TX_QUEUES
; i
++) {
3677 if (bitmap
& (1 << i
)) {
3678 stream_index
= (i
+ MWL8K_WMM_QUEUE_NUMBER
) %
3680 streams
= &priv
->ampdu
[stream_index
];
3681 if (streams
->state
== AMPDU_STREAM_ACTIVE
) {
3682 ieee80211_stop_tx_ba_session(streams
->sta
,
3684 spin_unlock(&priv
->stream_lock
);
3685 mwl8k_destroy_ba(hw
, stream_index
);
3686 spin_lock(&priv
->stream_lock
);
3691 spin_unlock(&priv
->stream_lock
);
3693 atomic_dec(&priv
->watchdog_event_pending
);
3694 status
= ioread32(priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK
);
3695 iowrite32((status
| MWL8K_A2H_INT_BA_WATCHDOG
),
3696 priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK
);
3697 mwl8k_fw_unlock(hw
);
3705 struct mwl8k_cmd_bss_start
{
3706 struct mwl8k_cmd_pkt header
;
3710 static int mwl8k_cmd_bss_start(struct ieee80211_hw
*hw
,
3711 struct ieee80211_vif
*vif
, int enable
)
3713 struct mwl8k_cmd_bss_start
*cmd
;
3714 struct mwl8k_vif
*mwl8k_vif
= MWL8K_VIF(vif
);
3715 struct mwl8k_priv
*priv
= hw
->priv
;
3718 if (enable
&& (priv
->running_bsses
& (1 << mwl8k_vif
->macid
)))
3721 if (!enable
&& !(priv
->running_bsses
& (1 << mwl8k_vif
->macid
)))
3724 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3728 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_BSS_START
);
3729 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3730 cmd
->enable
= cpu_to_le32(enable
);
3732 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
3737 priv
->running_bsses
|= (1 << mwl8k_vif
->macid
);
3739 priv
->running_bsses
&= ~(1 << mwl8k_vif
->macid
);
3744 static void mwl8k_enable_bsses(struct ieee80211_hw
*hw
, bool enable
, u32 bitmap
)
3746 struct mwl8k_priv
*priv
= hw
->priv
;
3747 struct mwl8k_vif
*mwl8k_vif
, *tmp_vif
;
3748 struct ieee80211_vif
*vif
;
3750 list_for_each_entry_safe(mwl8k_vif
, tmp_vif
, &priv
->vif_list
, list
) {
3751 vif
= mwl8k_vif
->vif
;
3753 if (!(bitmap
& (1 << mwl8k_vif
->macid
)))
3756 if (vif
->type
== NL80211_IFTYPE_AP
)
3757 mwl8k_cmd_bss_start(hw
, vif
, enable
);
3765 * UPSTREAM is tx direction
3767 #define BASTREAM_FLAG_DIRECTION_UPSTREAM 0x00
3768 #define BASTREAM_FLAG_IMMEDIATE_TYPE 0x01
3770 enum ba_stream_action_type
{
3779 struct mwl8k_create_ba_stream
{
3784 u8 peer_mac_addr
[6];
3790 u8 reset_seq_no_flag
;
3792 u8 sta_src_mac_addr
[6];
3795 struct mwl8k_destroy_ba_stream
{
3800 struct mwl8k_cmd_bastream
{
3801 struct mwl8k_cmd_pkt header
;
3804 struct mwl8k_create_ba_stream create_params
;
3805 struct mwl8k_destroy_ba_stream destroy_params
;
3810 mwl8k_check_ba(struct ieee80211_hw
*hw
, struct mwl8k_ampdu_stream
*stream
,
3811 struct ieee80211_vif
*vif
)
3813 struct mwl8k_cmd_bastream
*cmd
;
3816 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3820 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_BASTREAM
);
3821 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3823 cmd
->action
= cpu_to_le32(MWL8K_BA_CHECK
);
3825 cmd
->create_params
.queue_id
= stream
->idx
;
3826 memcpy(&cmd
->create_params
.peer_mac_addr
[0], stream
->sta
->addr
,
3828 cmd
->create_params
.tid
= stream
->tid
;
3830 cmd
->create_params
.flags
=
3831 cpu_to_le32(BASTREAM_FLAG_IMMEDIATE_TYPE
) |
3832 cpu_to_le32(BASTREAM_FLAG_DIRECTION_UPSTREAM
);
3834 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
3842 mwl8k_create_ba(struct ieee80211_hw
*hw
, struct mwl8k_ampdu_stream
*stream
,
3843 u8 buf_size
, struct ieee80211_vif
*vif
)
3845 struct mwl8k_cmd_bastream
*cmd
;
3848 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3853 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_BASTREAM
);
3854 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3856 cmd
->action
= cpu_to_le32(MWL8K_BA_CREATE
);
3858 cmd
->create_params
.bar_thrs
= cpu_to_le32((u32
)buf_size
);
3859 cmd
->create_params
.window_size
= cpu_to_le32((u32
)buf_size
);
3860 cmd
->create_params
.queue_id
= stream
->idx
;
3862 memcpy(cmd
->create_params
.peer_mac_addr
, stream
->sta
->addr
, ETH_ALEN
);
3863 cmd
->create_params
.tid
= stream
->tid
;
3864 cmd
->create_params
.curr_seq_no
= cpu_to_le16(0);
3865 cmd
->create_params
.reset_seq_no_flag
= 1;
3867 cmd
->create_params
.param_info
=
3868 (stream
->sta
->ht_cap
.ampdu_factor
&
3869 IEEE80211_HT_AMPDU_PARM_FACTOR
) |
3870 ((stream
->sta
->ht_cap
.ampdu_density
<< 2) &
3871 IEEE80211_HT_AMPDU_PARM_DENSITY
);
3873 cmd
->create_params
.flags
=
3874 cpu_to_le32(BASTREAM_FLAG_IMMEDIATE_TYPE
|
3875 BASTREAM_FLAG_DIRECTION_UPSTREAM
);
3877 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
3879 wiphy_debug(hw
->wiphy
, "Created a BA stream for %pM : tid %d\n",
3880 stream
->sta
->addr
, stream
->tid
);
3886 static void mwl8k_destroy_ba(struct ieee80211_hw
*hw
,
3889 struct mwl8k_cmd_bastream
*cmd
;
3891 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3895 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_BASTREAM
);
3896 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3897 cmd
->action
= cpu_to_le32(MWL8K_BA_DESTROY
);
3899 cmd
->destroy_params
.ba_context
= cpu_to_le32(idx
);
3900 mwl8k_post_cmd(hw
, &cmd
->header
);
3902 wiphy_debug(hw
->wiphy
, "Deleted BA stream index %d\n", idx
);
3910 struct mwl8k_cmd_set_new_stn
{
3911 struct mwl8k_cmd_pkt header
;
3917 __le32 legacy_rates
;
3920 __le16 ht_capabilities_info
;
3921 __u8 mac_ht_param_info
;
3923 __u8 control_channel
;
3932 #define MWL8K_STA_ACTION_ADD 0
3933 #define MWL8K_STA_ACTION_REMOVE 2
3935 static int mwl8k_cmd_set_new_stn_add(struct ieee80211_hw
*hw
,
3936 struct ieee80211_vif
*vif
,
3937 struct ieee80211_sta
*sta
)
3939 struct mwl8k_cmd_set_new_stn
*cmd
;
3943 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3947 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_NEW_STN
);
3948 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3949 cmd
->aid
= cpu_to_le16(sta
->aid
);
3950 memcpy(cmd
->mac_addr
, sta
->addr
, ETH_ALEN
);
3951 cmd
->stn_id
= cpu_to_le16(sta
->aid
);
3952 cmd
->action
= cpu_to_le16(MWL8K_STA_ACTION_ADD
);
3953 if (hw
->conf
.channel
->band
== IEEE80211_BAND_2GHZ
)
3954 rates
= sta
->supp_rates
[IEEE80211_BAND_2GHZ
];
3956 rates
= sta
->supp_rates
[IEEE80211_BAND_5GHZ
] << 5;
3957 cmd
->legacy_rates
= cpu_to_le32(rates
);
3958 if (sta
->ht_cap
.ht_supported
) {
3959 cmd
->ht_rates
[0] = sta
->ht_cap
.mcs
.rx_mask
[0];
3960 cmd
->ht_rates
[1] = sta
->ht_cap
.mcs
.rx_mask
[1];
3961 cmd
->ht_rates
[2] = sta
->ht_cap
.mcs
.rx_mask
[2];
3962 cmd
->ht_rates
[3] = sta
->ht_cap
.mcs
.rx_mask
[3];
3963 cmd
->ht_capabilities_info
= cpu_to_le16(sta
->ht_cap
.cap
);
3964 cmd
->mac_ht_param_info
= (sta
->ht_cap
.ampdu_factor
& 3) |
3965 ((sta
->ht_cap
.ampdu_density
& 7) << 2);
3966 cmd
->is_qos_sta
= 1;
3969 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
3975 static int mwl8k_cmd_set_new_stn_add_self(struct ieee80211_hw
*hw
,
3976 struct ieee80211_vif
*vif
)
3978 struct mwl8k_cmd_set_new_stn
*cmd
;
3981 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
3985 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_NEW_STN
);
3986 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
3987 memcpy(cmd
->mac_addr
, vif
->addr
, ETH_ALEN
);
3989 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
3995 static int mwl8k_cmd_set_new_stn_del(struct ieee80211_hw
*hw
,
3996 struct ieee80211_vif
*vif
, u8
*addr
)
3998 struct mwl8k_cmd_set_new_stn
*cmd
;
3999 struct mwl8k_priv
*priv
= hw
->priv
;
4003 spin_lock(&priv
->stream_lock
);
4004 /* Destroy any active ampdu streams for this sta */
4005 for (i
= 0; i
< MWL8K_NUM_AMPDU_STREAMS
; i
++) {
4006 struct mwl8k_ampdu_stream
*s
;
4007 s
= &priv
->ampdu
[i
];
4008 if (s
->state
!= AMPDU_NO_STREAM
) {
4009 if (memcmp(s
->sta
->addr
, addr
, ETH_ALEN
) == 0) {
4010 if (s
->state
== AMPDU_STREAM_ACTIVE
) {
4012 spin_unlock(&priv
->stream_lock
);
4013 mwl8k_destroy_ba(hw
, idx
);
4014 spin_lock(&priv
->stream_lock
);
4015 } else if (s
->state
== AMPDU_STREAM_NEW
) {
4016 mwl8k_remove_stream(hw
, s
);
4022 spin_unlock(&priv
->stream_lock
);
4024 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
4028 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_SET_NEW_STN
);
4029 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
4030 memcpy(cmd
->mac_addr
, addr
, ETH_ALEN
);
4031 cmd
->action
= cpu_to_le16(MWL8K_STA_ACTION_REMOVE
);
4033 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
4040 * CMD_UPDATE_ENCRYPTION.
4043 #define MAX_ENCR_KEY_LENGTH 16
4044 #define MIC_KEY_LENGTH 8
4046 struct mwl8k_cmd_update_encryption
{
4047 struct mwl8k_cmd_pkt header
;
4056 struct mwl8k_cmd_set_key
{
4057 struct mwl8k_cmd_pkt header
;
4066 __u8 key_material
[MAX_ENCR_KEY_LENGTH
];
4067 __u8 tkip_tx_mic_key
[MIC_KEY_LENGTH
];
4068 __u8 tkip_rx_mic_key
[MIC_KEY_LENGTH
];
4069 __le16 tkip_rsc_low
;
4070 __le32 tkip_rsc_high
;
4071 __le16 tkip_tsc_low
;
4072 __le32 tkip_tsc_high
;
4079 MWL8K_ENCR_REMOVE_KEY
,
4080 MWL8K_ENCR_SET_GROUP_KEY
,
4083 #define MWL8K_UPDATE_ENCRYPTION_TYPE_WEP 0
4084 #define MWL8K_UPDATE_ENCRYPTION_TYPE_DISABLE 1
4085 #define MWL8K_UPDATE_ENCRYPTION_TYPE_TKIP 4
4086 #define MWL8K_UPDATE_ENCRYPTION_TYPE_MIXED 7
4087 #define MWL8K_UPDATE_ENCRYPTION_TYPE_AES 8
4095 #define MWL8K_KEY_FLAG_TXGROUPKEY 0x00000004
4096 #define MWL8K_KEY_FLAG_PAIRWISE 0x00000008
4097 #define MWL8K_KEY_FLAG_TSC_VALID 0x00000040
4098 #define MWL8K_KEY_FLAG_WEP_TXKEY 0x01000000
4099 #define MWL8K_KEY_FLAG_MICKEY_VALID 0x02000000
4101 static int mwl8k_cmd_update_encryption_enable(struct ieee80211_hw
*hw
,
4102 struct ieee80211_vif
*vif
,
4106 struct mwl8k_cmd_update_encryption
*cmd
;
4109 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
4113 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_UPDATE_ENCRYPTION
);
4114 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
4115 cmd
->action
= cpu_to_le32(MWL8K_ENCR_ENABLE
);
4116 memcpy(cmd
->mac_addr
, addr
, ETH_ALEN
);
4117 cmd
->encr_type
= encr_type
;
4119 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
4125 static int mwl8k_encryption_set_cmd_info(struct mwl8k_cmd_set_key
*cmd
,
4127 struct ieee80211_key_conf
*key
)
4129 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_UPDATE_ENCRYPTION
);
4130 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
4131 cmd
->length
= cpu_to_le16(sizeof(*cmd
) -
4132 offsetof(struct mwl8k_cmd_set_key
, length
));
4133 cmd
->key_id
= cpu_to_le32(key
->keyidx
);
4134 cmd
->key_len
= cpu_to_le16(key
->keylen
);
4135 memcpy(cmd
->mac_addr
, addr
, ETH_ALEN
);
4137 switch (key
->cipher
) {
4138 case WLAN_CIPHER_SUITE_WEP40
:
4139 case WLAN_CIPHER_SUITE_WEP104
:
4140 cmd
->key_type_id
= cpu_to_le16(MWL8K_ALG_WEP
);
4141 if (key
->keyidx
== 0)
4142 cmd
->key_info
= cpu_to_le32(MWL8K_KEY_FLAG_WEP_TXKEY
);
4145 case WLAN_CIPHER_SUITE_TKIP
:
4146 cmd
->key_type_id
= cpu_to_le16(MWL8K_ALG_TKIP
);
4147 cmd
->key_info
= (key
->flags
& IEEE80211_KEY_FLAG_PAIRWISE
)
4148 ? cpu_to_le32(MWL8K_KEY_FLAG_PAIRWISE
)
4149 : cpu_to_le32(MWL8K_KEY_FLAG_TXGROUPKEY
);
4150 cmd
->key_info
|= cpu_to_le32(MWL8K_KEY_FLAG_MICKEY_VALID
4151 | MWL8K_KEY_FLAG_TSC_VALID
);
4153 case WLAN_CIPHER_SUITE_CCMP
:
4154 cmd
->key_type_id
= cpu_to_le16(MWL8K_ALG_CCMP
);
4155 cmd
->key_info
= (key
->flags
& IEEE80211_KEY_FLAG_PAIRWISE
)
4156 ? cpu_to_le32(MWL8K_KEY_FLAG_PAIRWISE
)
4157 : cpu_to_le32(MWL8K_KEY_FLAG_TXGROUPKEY
);
4166 static int mwl8k_cmd_encryption_set_key(struct ieee80211_hw
*hw
,
4167 struct ieee80211_vif
*vif
,
4169 struct ieee80211_key_conf
*key
)
4171 struct mwl8k_cmd_set_key
*cmd
;
4176 struct mwl8k_vif
*mwl8k_vif
= MWL8K_VIF(vif
);
4178 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
4182 rc
= mwl8k_encryption_set_cmd_info(cmd
, addr
, key
);
4188 if (key
->flags
& IEEE80211_KEY_FLAG_PAIRWISE
)
4189 action
= MWL8K_ENCR_SET_KEY
;
4191 action
= MWL8K_ENCR_SET_GROUP_KEY
;
4193 switch (key
->cipher
) {
4194 case WLAN_CIPHER_SUITE_WEP40
:
4195 case WLAN_CIPHER_SUITE_WEP104
:
4196 if (!mwl8k_vif
->wep_key_conf
[idx
].enabled
) {
4197 memcpy(mwl8k_vif
->wep_key_conf
[idx
].key
, key
,
4198 sizeof(*key
) + key
->keylen
);
4199 mwl8k_vif
->wep_key_conf
[idx
].enabled
= 1;
4202 keymlen
= key
->keylen
;
4203 action
= MWL8K_ENCR_SET_KEY
;
4205 case WLAN_CIPHER_SUITE_TKIP
:
4206 keymlen
= MAX_ENCR_KEY_LENGTH
+ 2 * MIC_KEY_LENGTH
;
4208 case WLAN_CIPHER_SUITE_CCMP
:
4209 keymlen
= key
->keylen
;
4216 memcpy(cmd
->key_material
, key
->key
, keymlen
);
4217 cmd
->action
= cpu_to_le32(action
);
4219 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
4226 static int mwl8k_cmd_encryption_remove_key(struct ieee80211_hw
*hw
,
4227 struct ieee80211_vif
*vif
,
4229 struct ieee80211_key_conf
*key
)
4231 struct mwl8k_cmd_set_key
*cmd
;
4233 struct mwl8k_vif
*mwl8k_vif
= MWL8K_VIF(vif
);
4235 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
4239 rc
= mwl8k_encryption_set_cmd_info(cmd
, addr
, key
);
4243 if (key
->cipher
== WLAN_CIPHER_SUITE_WEP40
||
4244 key
->cipher
== WLAN_CIPHER_SUITE_WEP104
)
4245 mwl8k_vif
->wep_key_conf
[key
->keyidx
].enabled
= 0;
4247 cmd
->action
= cpu_to_le32(MWL8K_ENCR_REMOVE_KEY
);
4249 rc
= mwl8k_post_pervif_cmd(hw
, vif
, &cmd
->header
);
4256 static int mwl8k_set_key(struct ieee80211_hw
*hw
,
4257 enum set_key_cmd cmd_param
,
4258 struct ieee80211_vif
*vif
,
4259 struct ieee80211_sta
*sta
,
4260 struct ieee80211_key_conf
*key
)
4265 struct mwl8k_vif
*mwl8k_vif
= MWL8K_VIF(vif
);
4266 struct mwl8k_priv
*priv
= hw
->priv
;
4268 if (vif
->type
== NL80211_IFTYPE_STATION
&& !priv
->ap_fw
)
4276 if (cmd_param
== SET_KEY
) {
4277 rc
= mwl8k_cmd_encryption_set_key(hw
, vif
, addr
, key
);
4281 if ((key
->cipher
== WLAN_CIPHER_SUITE_WEP40
)
4282 || (key
->cipher
== WLAN_CIPHER_SUITE_WEP104
))
4283 encr_type
= MWL8K_UPDATE_ENCRYPTION_TYPE_WEP
;
4285 encr_type
= MWL8K_UPDATE_ENCRYPTION_TYPE_MIXED
;
4287 rc
= mwl8k_cmd_update_encryption_enable(hw
, vif
, addr
,
4292 mwl8k_vif
->is_hw_crypto_enabled
= true;
4295 rc
= mwl8k_cmd_encryption_remove_key(hw
, vif
, addr
, key
);
4307 struct ewc_ht_info
{
4313 struct peer_capability_info
{
4314 /* Peer type - AP vs. STA. */
4317 /* Basic 802.11 capabilities from assoc resp. */
4320 /* Set if peer supports 802.11n high throughput (HT). */
4323 /* Valid if HT is supported. */
4325 __u8 extended_ht_caps
;
4326 struct ewc_ht_info ewc_info
;
4328 /* Legacy rate table. Intersection of our rates and peer rates. */
4329 __u8 legacy_rates
[12];
4331 /* HT rate table. Intersection of our rates and peer rates. */
4335 /* If set, interoperability mode, no proprietary extensions. */
4339 __le16 amsdu_enabled
;
4342 struct mwl8k_cmd_update_stadb
{
4343 struct mwl8k_cmd_pkt header
;
4345 /* See STADB_ACTION_TYPE */
4348 /* Peer MAC address */
4349 __u8 peer_addr
[ETH_ALEN
];
4353 /* Peer info - valid during add/update. */
4354 struct peer_capability_info peer_info
;
4357 #define MWL8K_STA_DB_MODIFY_ENTRY 1
4358 #define MWL8K_STA_DB_DEL_ENTRY 2
4360 /* Peer Entry flags - used to define the type of the peer node */
4361 #define MWL8K_PEER_TYPE_ACCESSPOINT 2
4363 static int mwl8k_cmd_update_stadb_add(struct ieee80211_hw
*hw
,
4364 struct ieee80211_vif
*vif
,
4365 struct ieee80211_sta
*sta
)
4367 struct mwl8k_cmd_update_stadb
*cmd
;
4368 struct peer_capability_info
*p
;
4372 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
4376 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_UPDATE_STADB
);
4377 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
4378 cmd
->action
= cpu_to_le32(MWL8K_STA_DB_MODIFY_ENTRY
);
4379 memcpy(cmd
->peer_addr
, sta
->addr
, ETH_ALEN
);
4381 p
= &cmd
->peer_info
;
4382 p
->peer_type
= MWL8K_PEER_TYPE_ACCESSPOINT
;
4383 p
->basic_caps
= cpu_to_le16(vif
->bss_conf
.assoc_capability
);
4384 p
->ht_support
= sta
->ht_cap
.ht_supported
;
4385 p
->ht_caps
= cpu_to_le16(sta
->ht_cap
.cap
);
4386 p
->extended_ht_caps
= (sta
->ht_cap
.ampdu_factor
& 3) |
4387 ((sta
->ht_cap
.ampdu_density
& 7) << 2);
4388 if (hw
->conf
.channel
->band
== IEEE80211_BAND_2GHZ
)
4389 rates
= sta
->supp_rates
[IEEE80211_BAND_2GHZ
];
4391 rates
= sta
->supp_rates
[IEEE80211_BAND_5GHZ
] << 5;
4392 legacy_rate_mask_to_array(p
->legacy_rates
, rates
);
4393 memcpy(p
->ht_rates
, sta
->ht_cap
.mcs
.rx_mask
, 16);
4395 p
->amsdu_enabled
= 0;
4397 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
4405 static int mwl8k_cmd_update_stadb_del(struct ieee80211_hw
*hw
,
4406 struct ieee80211_vif
*vif
, u8
*addr
)
4408 struct mwl8k_cmd_update_stadb
*cmd
;
4411 cmd
= kzalloc(sizeof(*cmd
), GFP_KERNEL
);
4415 cmd
->header
.code
= cpu_to_le16(MWL8K_CMD_UPDATE_STADB
);
4416 cmd
->header
.length
= cpu_to_le16(sizeof(*cmd
));
4417 cmd
->action
= cpu_to_le32(MWL8K_STA_DB_DEL_ENTRY
);
4418 memcpy(cmd
->peer_addr
, addr
, ETH_ALEN
);
4420 rc
= mwl8k_post_cmd(hw
, &cmd
->header
);
4428 * Interrupt handling.
4430 static irqreturn_t
mwl8k_interrupt(int irq
, void *dev_id
)
4432 struct ieee80211_hw
*hw
= dev_id
;
4433 struct mwl8k_priv
*priv
= hw
->priv
;
4436 status
= ioread32(priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS
);
4440 if (status
& MWL8K_A2H_INT_TX_DONE
) {
4441 status
&= ~MWL8K_A2H_INT_TX_DONE
;
4442 tasklet_schedule(&priv
->poll_tx_task
);
4445 if (status
& MWL8K_A2H_INT_RX_READY
) {
4446 status
&= ~MWL8K_A2H_INT_RX_READY
;
4447 tasklet_schedule(&priv
->poll_rx_task
);
4450 if (status
& MWL8K_A2H_INT_BA_WATCHDOG
) {
4451 iowrite32(~MWL8K_A2H_INT_BA_WATCHDOG
,
4452 priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK
);
4454 atomic_inc(&priv
->watchdog_event_pending
);
4455 status
&= ~MWL8K_A2H_INT_BA_WATCHDOG
;
4456 ieee80211_queue_work(hw
, &priv
->watchdog_ba_handle
);
4460 iowrite32(~status
, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS
);
4462 if (status
& MWL8K_A2H_INT_OPC_DONE
) {
4463 if (priv
->hostcmd_wait
!= NULL
)
4464 complete(priv
->hostcmd_wait
);
4467 if (status
& MWL8K_A2H_INT_QUEUE_EMPTY
) {
4468 if (!mutex_is_locked(&priv
->fw_mutex
) &&
4469 priv
->radio_on
&& priv
->pending_tx_pkts
)
4470 mwl8k_tx_start(priv
);
4476 static void mwl8k_tx_poll(unsigned long data
)
4478 struct ieee80211_hw
*hw
= (struct ieee80211_hw
*)data
;
4479 struct mwl8k_priv
*priv
= hw
->priv
;
4485 spin_lock_bh(&priv
->tx_lock
);
4487 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++)
4488 limit
-= mwl8k_txq_reclaim(hw
, i
, limit
, 0);
4490 if (!priv
->pending_tx_pkts
&& priv
->tx_wait
!= NULL
) {
4491 complete(priv
->tx_wait
);
4492 priv
->tx_wait
= NULL
;
4495 spin_unlock_bh(&priv
->tx_lock
);
4498 writel(~MWL8K_A2H_INT_TX_DONE
,
4499 priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS
);
4501 tasklet_schedule(&priv
->poll_tx_task
);
4505 static void mwl8k_rx_poll(unsigned long data
)
4507 struct ieee80211_hw
*hw
= (struct ieee80211_hw
*)data
;
4508 struct mwl8k_priv
*priv
= hw
->priv
;
4512 limit
-= rxq_process(hw
, 0, limit
);
4513 limit
-= rxq_refill(hw
, 0, limit
);
4516 writel(~MWL8K_A2H_INT_RX_READY
,
4517 priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS
);
4519 tasklet_schedule(&priv
->poll_rx_task
);
4525 * Core driver operations.
4527 static void mwl8k_tx(struct ieee80211_hw
*hw
,
4528 struct ieee80211_tx_control
*control
,
4529 struct sk_buff
*skb
)
4531 struct mwl8k_priv
*priv
= hw
->priv
;
4532 int index
= skb_get_queue_mapping(skb
);
4534 if (!priv
->radio_on
) {
4535 wiphy_debug(hw
->wiphy
,
4536 "dropped TX frame since radio disabled\n");
4541 mwl8k_txq_xmit(hw
, index
, control
->sta
, skb
);
4544 static int mwl8k_start(struct ieee80211_hw
*hw
)
4546 struct mwl8k_priv
*priv
= hw
->priv
;
4549 rc
= request_irq(priv
->pdev
->irq
, mwl8k_interrupt
,
4550 IRQF_SHARED
, MWL8K_NAME
, hw
);
4553 wiphy_err(hw
->wiphy
, "failed to register IRQ handler\n");
4556 priv
->irq
= priv
->pdev
->irq
;
4558 /* Enable TX reclaim and RX tasklets. */
4559 tasklet_enable(&priv
->poll_tx_task
);
4560 tasklet_enable(&priv
->poll_rx_task
);
4562 /* Enable interrupts */
4563 iowrite32(MWL8K_A2H_EVENTS
, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_MASK
);
4564 iowrite32(MWL8K_A2H_EVENTS
,
4565 priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK
);
4567 rc
= mwl8k_fw_lock(hw
);
4569 rc
= mwl8k_cmd_radio_enable(hw
);
4573 rc
= mwl8k_cmd_enable_sniffer(hw
, 0);
4576 rc
= mwl8k_cmd_set_pre_scan(hw
);
4579 rc
= mwl8k_cmd_set_post_scan(hw
,
4580 "\x00\x00\x00\x00\x00\x00");
4584 rc
= mwl8k_cmd_set_rateadapt_mode(hw
, 0);
4587 rc
= mwl8k_cmd_set_wmm_mode(hw
, 0);
4589 mwl8k_fw_unlock(hw
);
4593 iowrite32(0, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_MASK
);
4594 free_irq(priv
->pdev
->irq
, hw
);
4596 tasklet_disable(&priv
->poll_tx_task
);
4597 tasklet_disable(&priv
->poll_rx_task
);
4599 ieee80211_wake_queues(hw
);
4605 static void mwl8k_stop(struct ieee80211_hw
*hw
)
4607 struct mwl8k_priv
*priv
= hw
->priv
;
4610 if (!priv
->hw_restart_in_progress
)
4611 mwl8k_cmd_radio_disable(hw
);
4613 ieee80211_stop_queues(hw
);
4615 /* Disable interrupts */
4616 iowrite32(0, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_MASK
);
4617 if (priv
->irq
!= -1) {
4618 free_irq(priv
->pdev
->irq
, hw
);
4622 /* Stop finalize join worker */
4623 cancel_work_sync(&priv
->finalize_join_worker
);
4624 cancel_work_sync(&priv
->watchdog_ba_handle
);
4625 if (priv
->beacon_skb
!= NULL
)
4626 dev_kfree_skb(priv
->beacon_skb
);
4628 /* Stop TX reclaim and RX tasklets. */
4629 tasklet_disable(&priv
->poll_tx_task
);
4630 tasklet_disable(&priv
->poll_rx_task
);
4632 /* Return all skbs to mac80211 */
4633 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++)
4634 mwl8k_txq_reclaim(hw
, i
, INT_MAX
, 1);
4637 static int mwl8k_reload_firmware(struct ieee80211_hw
*hw
, char *fw_image
);
4639 static int mwl8k_add_interface(struct ieee80211_hw
*hw
,
4640 struct ieee80211_vif
*vif
)
4642 struct mwl8k_priv
*priv
= hw
->priv
;
4643 struct mwl8k_vif
*mwl8k_vif
;
4644 u32 macids_supported
;
4646 struct mwl8k_device_info
*di
;
4649 * Reject interface creation if sniffer mode is active, as
4650 * STA operation is mutually exclusive with hardware sniffer
4651 * mode. (Sniffer mode is only used on STA firmware.)
4653 if (priv
->sniffer_enabled
) {
4654 wiphy_info(hw
->wiphy
,
4655 "unable to create STA interface because sniffer mode is enabled\n");
4659 di
= priv
->device_info
;
4660 switch (vif
->type
) {
4661 case NL80211_IFTYPE_AP
:
4662 if (!priv
->ap_fw
&& di
->fw_image_ap
) {
4663 /* we must load the ap fw to meet this request */
4664 if (!list_empty(&priv
->vif_list
))
4666 rc
= mwl8k_reload_firmware(hw
, di
->fw_image_ap
);
4670 macids_supported
= priv
->ap_macids_supported
;
4672 case NL80211_IFTYPE_STATION
:
4673 if (priv
->ap_fw
&& di
->fw_image_sta
) {
4674 if (!list_empty(&priv
->vif_list
)) {
4675 wiphy_warn(hw
->wiphy
, "AP interface is running.\n"
4676 "Adding STA interface for WDS");
4678 /* we must load the sta fw to
4679 * meet this request.
4681 rc
= mwl8k_reload_firmware(hw
,
4687 macids_supported
= priv
->sta_macids_supported
;
4693 macid
= ffs(macids_supported
& ~priv
->macids_used
);
4697 /* Setup driver private area. */
4698 mwl8k_vif
= MWL8K_VIF(vif
);
4699 memset(mwl8k_vif
, 0, sizeof(*mwl8k_vif
));
4700 mwl8k_vif
->vif
= vif
;
4701 mwl8k_vif
->macid
= macid
;
4702 mwl8k_vif
->seqno
= 0;
4703 memcpy(mwl8k_vif
->bssid
, vif
->addr
, ETH_ALEN
);
4704 mwl8k_vif
->is_hw_crypto_enabled
= false;
4706 /* Set the mac address. */
4707 mwl8k_cmd_set_mac_addr(hw
, vif
, vif
->addr
);
4709 if (vif
->type
== NL80211_IFTYPE_AP
)
4710 mwl8k_cmd_set_new_stn_add_self(hw
, vif
);
4712 priv
->macids_used
|= 1 << mwl8k_vif
->macid
;
4713 list_add_tail(&mwl8k_vif
->list
, &priv
->vif_list
);
4718 static void mwl8k_remove_vif(struct mwl8k_priv
*priv
, struct mwl8k_vif
*vif
)
4720 /* Has ieee80211_restart_hw re-added the removed interfaces? */
4721 if (!priv
->macids_used
)
4724 priv
->macids_used
&= ~(1 << vif
->macid
);
4725 list_del(&vif
->list
);
4728 static void mwl8k_remove_interface(struct ieee80211_hw
*hw
,
4729 struct ieee80211_vif
*vif
)
4731 struct mwl8k_priv
*priv
= hw
->priv
;
4732 struct mwl8k_vif
*mwl8k_vif
= MWL8K_VIF(vif
);
4734 if (vif
->type
== NL80211_IFTYPE_AP
)
4735 mwl8k_cmd_set_new_stn_del(hw
, vif
, vif
->addr
);
4737 mwl8k_cmd_del_mac_addr(hw
, vif
, vif
->addr
);
4739 mwl8k_remove_vif(priv
, mwl8k_vif
);
4742 static void mwl8k_hw_restart_work(struct work_struct
*work
)
4744 struct mwl8k_priv
*priv
=
4745 container_of(work
, struct mwl8k_priv
, fw_reload
);
4746 struct ieee80211_hw
*hw
= priv
->hw
;
4747 struct mwl8k_device_info
*di
;
4750 /* If some command is waiting for a response, clear it */
4751 if (priv
->hostcmd_wait
!= NULL
) {
4752 complete(priv
->hostcmd_wait
);
4753 priv
->hostcmd_wait
= NULL
;
4756 priv
->hw_restart_owner
= current
;
4757 di
= priv
->device_info
;
4761 rc
= mwl8k_reload_firmware(hw
, di
->fw_image_ap
);
4763 rc
= mwl8k_reload_firmware(hw
, di
->fw_image_sta
);
4768 priv
->hw_restart_owner
= NULL
;
4769 priv
->hw_restart_in_progress
= false;
4772 * This unlock will wake up the queues and
4773 * also opens the command path for other
4776 mwl8k_fw_unlock(hw
);
4778 ieee80211_restart_hw(hw
);
4780 wiphy_err(hw
->wiphy
, "Firmware restarted successfully\n");
4784 mwl8k_fw_unlock(hw
);
4786 wiphy_err(hw
->wiphy
, "Firmware restart failed\n");
4789 static int mwl8k_config(struct ieee80211_hw
*hw
, u32 changed
)
4791 struct ieee80211_conf
*conf
= &hw
->conf
;
4792 struct mwl8k_priv
*priv
= hw
->priv
;
4795 if (conf
->flags
& IEEE80211_CONF_IDLE
) {
4796 mwl8k_cmd_radio_disable(hw
);
4800 rc
= mwl8k_fw_lock(hw
);
4804 rc
= mwl8k_cmd_radio_enable(hw
);
4808 if (changed
& IEEE80211_CONF_CHANGE_CHANNEL
) {
4809 rc
= mwl8k_cmd_set_rf_channel(hw
, conf
);
4814 if (conf
->power_level
> 18)
4815 conf
->power_level
= 18;
4819 if (conf
->flags
& IEEE80211_CONF_CHANGE_POWER
) {
4820 rc
= mwl8k_cmd_tx_power(hw
, conf
, conf
->power_level
);
4827 rc
= mwl8k_cmd_rf_tx_power(hw
, conf
->power_level
);
4830 rc
= mwl8k_cmd_mimo_config(hw
, 0x7, 0x7);
4834 mwl8k_fw_unlock(hw
);
4840 mwl8k_bss_info_changed_sta(struct ieee80211_hw
*hw
, struct ieee80211_vif
*vif
,
4841 struct ieee80211_bss_conf
*info
, u32 changed
)
4843 struct mwl8k_priv
*priv
= hw
->priv
;
4844 u32 ap_legacy_rates
= 0;
4845 u8 ap_mcs_rates
[16];
4848 if (mwl8k_fw_lock(hw
))
4852 * No need to capture a beacon if we're no longer associated.
4854 if ((changed
& BSS_CHANGED_ASSOC
) && !vif
->bss_conf
.assoc
)
4855 priv
->capture_beacon
= false;
4858 * Get the AP's legacy and MCS rates.
4860 if (vif
->bss_conf
.assoc
) {
4861 struct ieee80211_sta
*ap
;
4865 ap
= ieee80211_find_sta(vif
, vif
->bss_conf
.bssid
);
4871 if (hw
->conf
.channel
->band
== IEEE80211_BAND_2GHZ
) {
4872 ap_legacy_rates
= ap
->supp_rates
[IEEE80211_BAND_2GHZ
];
4875 ap
->supp_rates
[IEEE80211_BAND_5GHZ
] << 5;
4877 memcpy(ap_mcs_rates
, ap
->ht_cap
.mcs
.rx_mask
, 16);
4882 if ((changed
& BSS_CHANGED_ASSOC
) && vif
->bss_conf
.assoc
&&
4884 rc
= mwl8k_cmd_set_rate(hw
, vif
, ap_legacy_rates
, ap_mcs_rates
);
4888 rc
= mwl8k_cmd_use_fixed_rate_sta(hw
);
4892 if ((changed
& BSS_CHANGED_ASSOC
) && vif
->bss_conf
.assoc
&&
4897 /* Use AP firmware specific rate command.
4899 idx
= ffs(vif
->bss_conf
.basic_rates
);
4903 if (hw
->conf
.channel
->band
== IEEE80211_BAND_2GHZ
)
4904 rate
= mwl8k_rates_24
[idx
].hw_value
;
4906 rate
= mwl8k_rates_50
[idx
].hw_value
;
4908 mwl8k_cmd_use_fixed_rate_ap(hw
, rate
, rate
);
4912 if (changed
& BSS_CHANGED_ERP_PREAMBLE
) {
4913 rc
= mwl8k_set_radio_preamble(hw
,
4914 vif
->bss_conf
.use_short_preamble
);
4919 if ((changed
& BSS_CHANGED_ERP_SLOT
) && !priv
->ap_fw
) {
4920 rc
= mwl8k_cmd_set_slot(hw
, vif
->bss_conf
.use_short_slot
);
4925 if (vif
->bss_conf
.assoc
&& !priv
->ap_fw
&&
4926 (changed
& (BSS_CHANGED_ASSOC
| BSS_CHANGED_ERP_CTS_PROT
|
4928 rc
= mwl8k_cmd_set_aid(hw
, vif
, ap_legacy_rates
);
4933 if (vif
->bss_conf
.assoc
&&
4934 (changed
& (BSS_CHANGED_ASSOC
| BSS_CHANGED_BEACON_INT
))) {
4936 * Finalize the join. Tell rx handler to process
4937 * next beacon from our BSSID.
4939 memcpy(priv
->capture_bssid
, vif
->bss_conf
.bssid
, ETH_ALEN
);
4940 priv
->capture_beacon
= true;
4944 mwl8k_fw_unlock(hw
);
4948 mwl8k_bss_info_changed_ap(struct ieee80211_hw
*hw
, struct ieee80211_vif
*vif
,
4949 struct ieee80211_bss_conf
*info
, u32 changed
)
4953 if (mwl8k_fw_lock(hw
))
4956 if (changed
& BSS_CHANGED_ERP_PREAMBLE
) {
4957 rc
= mwl8k_set_radio_preamble(hw
,
4958 vif
->bss_conf
.use_short_preamble
);
4963 if (changed
& BSS_CHANGED_BASIC_RATES
) {
4968 * Use lowest supported basic rate for multicasts
4969 * and management frames (such as probe responses --
4970 * beacons will always go out at 1 Mb/s).
4972 idx
= ffs(vif
->bss_conf
.basic_rates
);
4976 if (hw
->conf
.channel
->band
== IEEE80211_BAND_2GHZ
)
4977 rate
= mwl8k_rates_24
[idx
].hw_value
;
4979 rate
= mwl8k_rates_50
[idx
].hw_value
;
4981 mwl8k_cmd_use_fixed_rate_ap(hw
, rate
, rate
);
4984 if (changed
& (BSS_CHANGED_BEACON_INT
| BSS_CHANGED_BEACON
)) {
4985 struct sk_buff
*skb
;
4987 skb
= ieee80211_beacon_get(hw
, vif
);
4989 mwl8k_cmd_set_beacon(hw
, vif
, skb
->data
, skb
->len
);
4994 if (changed
& BSS_CHANGED_BEACON_ENABLED
)
4995 mwl8k_cmd_bss_start(hw
, vif
, info
->enable_beacon
);
4998 mwl8k_fw_unlock(hw
);
5002 mwl8k_bss_info_changed(struct ieee80211_hw
*hw
, struct ieee80211_vif
*vif
,
5003 struct ieee80211_bss_conf
*info
, u32 changed
)
5005 if (vif
->type
== NL80211_IFTYPE_STATION
)
5006 mwl8k_bss_info_changed_sta(hw
, vif
, info
, changed
);
5007 if (vif
->type
== NL80211_IFTYPE_AP
)
5008 mwl8k_bss_info_changed_ap(hw
, vif
, info
, changed
);
5011 static u64
mwl8k_prepare_multicast(struct ieee80211_hw
*hw
,
5012 struct netdev_hw_addr_list
*mc_list
)
5014 struct mwl8k_cmd_pkt
*cmd
;
5017 * Synthesize and return a command packet that programs the
5018 * hardware multicast address filter. At this point we don't
5019 * know whether FIF_ALLMULTI is being requested, but if it is,
5020 * we'll end up throwing this packet away and creating a new
5021 * one in mwl8k_configure_filter().
5023 cmd
= __mwl8k_cmd_mac_multicast_adr(hw
, 0, mc_list
);
5025 return (unsigned long)cmd
;
5029 mwl8k_configure_filter_sniffer(struct ieee80211_hw
*hw
,
5030 unsigned int changed_flags
,
5031 unsigned int *total_flags
)
5033 struct mwl8k_priv
*priv
= hw
->priv
;
5036 * Hardware sniffer mode is mutually exclusive with STA
5037 * operation, so refuse to enable sniffer mode if a STA
5038 * interface is active.
5040 if (!list_empty(&priv
->vif_list
)) {
5041 if (net_ratelimit())
5042 wiphy_info(hw
->wiphy
,
5043 "not enabling sniffer mode because STA interface is active\n");
5047 if (!priv
->sniffer_enabled
) {
5048 if (mwl8k_cmd_enable_sniffer(hw
, 1))
5050 priv
->sniffer_enabled
= true;
5053 *total_flags
&= FIF_PROMISC_IN_BSS
| FIF_ALLMULTI
|
5054 FIF_BCN_PRBRESP_PROMISC
| FIF_CONTROL
|
5060 static struct mwl8k_vif
*mwl8k_first_vif(struct mwl8k_priv
*priv
)
5062 if (!list_empty(&priv
->vif_list
))
5063 return list_entry(priv
->vif_list
.next
, struct mwl8k_vif
, list
);
5068 static void mwl8k_configure_filter(struct ieee80211_hw
*hw
,
5069 unsigned int changed_flags
,
5070 unsigned int *total_flags
,
5073 struct mwl8k_priv
*priv
= hw
->priv
;
5074 struct mwl8k_cmd_pkt
*cmd
= (void *)(unsigned long)multicast
;
5077 * AP firmware doesn't allow fine-grained control over
5078 * the receive filter.
5081 *total_flags
&= FIF_ALLMULTI
| FIF_BCN_PRBRESP_PROMISC
;
5087 * Enable hardware sniffer mode if FIF_CONTROL or
5088 * FIF_OTHER_BSS is requested.
5090 if (*total_flags
& (FIF_CONTROL
| FIF_OTHER_BSS
) &&
5091 mwl8k_configure_filter_sniffer(hw
, changed_flags
, total_flags
)) {
5096 /* Clear unsupported feature flags */
5097 *total_flags
&= FIF_ALLMULTI
| FIF_BCN_PRBRESP_PROMISC
;
5099 if (mwl8k_fw_lock(hw
)) {
5104 if (priv
->sniffer_enabled
) {
5105 mwl8k_cmd_enable_sniffer(hw
, 0);
5106 priv
->sniffer_enabled
= false;
5109 if (changed_flags
& FIF_BCN_PRBRESP_PROMISC
) {
5110 if (*total_flags
& FIF_BCN_PRBRESP_PROMISC
) {
5112 * Disable the BSS filter.
5114 mwl8k_cmd_set_pre_scan(hw
);
5116 struct mwl8k_vif
*mwl8k_vif
;
5120 * Enable the BSS filter.
5122 * If there is an active STA interface, use that
5123 * interface's BSSID, otherwise use a dummy one
5124 * (where the OUI part needs to be nonzero for
5125 * the BSSID to be accepted by POST_SCAN).
5127 mwl8k_vif
= mwl8k_first_vif(priv
);
5128 if (mwl8k_vif
!= NULL
)
5129 bssid
= mwl8k_vif
->vif
->bss_conf
.bssid
;
5131 bssid
= "\x01\x00\x00\x00\x00\x00";
5133 mwl8k_cmd_set_post_scan(hw
, bssid
);
5138 * If FIF_ALLMULTI is being requested, throw away the command
5139 * packet that ->prepare_multicast() built and replace it with
5140 * a command packet that enables reception of all multicast
5143 if (*total_flags
& FIF_ALLMULTI
) {
5145 cmd
= __mwl8k_cmd_mac_multicast_adr(hw
, 1, NULL
);
5149 mwl8k_post_cmd(hw
, cmd
);
5153 mwl8k_fw_unlock(hw
);
5156 static int mwl8k_set_rts_threshold(struct ieee80211_hw
*hw
, u32 value
)
5158 return mwl8k_cmd_set_rts_threshold(hw
, value
);
5161 static int mwl8k_sta_remove(struct ieee80211_hw
*hw
,
5162 struct ieee80211_vif
*vif
,
5163 struct ieee80211_sta
*sta
)
5165 struct mwl8k_priv
*priv
= hw
->priv
;
5168 return mwl8k_cmd_set_new_stn_del(hw
, vif
, sta
->addr
);
5170 return mwl8k_cmd_update_stadb_del(hw
, vif
, sta
->addr
);
5173 static int mwl8k_sta_add(struct ieee80211_hw
*hw
,
5174 struct ieee80211_vif
*vif
,
5175 struct ieee80211_sta
*sta
)
5177 struct mwl8k_priv
*priv
= hw
->priv
;
5180 struct mwl8k_vif
*mwl8k_vif
= MWL8K_VIF(vif
);
5181 struct ieee80211_key_conf
*key
;
5184 ret
= mwl8k_cmd_update_stadb_add(hw
, vif
, sta
);
5186 MWL8K_STA(sta
)->peer_id
= ret
;
5187 if (sta
->ht_cap
.ht_supported
)
5188 MWL8K_STA(sta
)->is_ampdu_allowed
= true;
5193 ret
= mwl8k_cmd_set_new_stn_add(hw
, vif
, sta
);
5196 for (i
= 0; i
< NUM_WEP_KEYS
; i
++) {
5197 key
= IEEE80211_KEY_CONF(mwl8k_vif
->wep_key_conf
[i
].key
);
5198 if (mwl8k_vif
->wep_key_conf
[i
].enabled
)
5199 mwl8k_set_key(hw
, SET_KEY
, vif
, sta
, key
);
5204 static int mwl8k_conf_tx(struct ieee80211_hw
*hw
,
5205 struct ieee80211_vif
*vif
, u16 queue
,
5206 const struct ieee80211_tx_queue_params
*params
)
5208 struct mwl8k_priv
*priv
= hw
->priv
;
5211 rc
= mwl8k_fw_lock(hw
);
5213 BUG_ON(queue
> MWL8K_TX_WMM_QUEUES
- 1);
5214 memcpy(&priv
->wmm_params
[queue
], params
, sizeof(*params
));
5216 if (!priv
->wmm_enabled
)
5217 rc
= mwl8k_cmd_set_wmm_mode(hw
, 1);
5220 int q
= MWL8K_TX_WMM_QUEUES
- 1 - queue
;
5221 rc
= mwl8k_cmd_set_edca_params(hw
, q
,
5228 mwl8k_fw_unlock(hw
);
5234 static int mwl8k_get_stats(struct ieee80211_hw
*hw
,
5235 struct ieee80211_low_level_stats
*stats
)
5237 return mwl8k_cmd_get_stat(hw
, stats
);
5240 static int mwl8k_get_survey(struct ieee80211_hw
*hw
, int idx
,
5241 struct survey_info
*survey
)
5243 struct mwl8k_priv
*priv
= hw
->priv
;
5244 struct ieee80211_conf
*conf
= &hw
->conf
;
5249 survey
->channel
= conf
->channel
;
5250 survey
->filled
= SURVEY_INFO_NOISE_DBM
;
5251 survey
->noise
= priv
->noise
;
5256 #define MAX_AMPDU_ATTEMPTS 5
5259 mwl8k_ampdu_action(struct ieee80211_hw
*hw
, struct ieee80211_vif
*vif
,
5260 enum ieee80211_ampdu_mlme_action action
,
5261 struct ieee80211_sta
*sta
, u16 tid
, u16
*ssn
,
5266 struct mwl8k_priv
*priv
= hw
->priv
;
5267 struct mwl8k_ampdu_stream
*stream
;
5268 u8
*addr
= sta
->addr
, idx
;
5269 struct mwl8k_sta
*sta_info
= MWL8K_STA(sta
);
5271 if (!(hw
->flags
& IEEE80211_HW_AMPDU_AGGREGATION
))
5274 spin_lock(&priv
->stream_lock
);
5275 stream
= mwl8k_lookup_stream(hw
, addr
, tid
);
5278 case IEEE80211_AMPDU_RX_START
:
5279 case IEEE80211_AMPDU_RX_STOP
:
5281 case IEEE80211_AMPDU_TX_START
:
5282 /* By the time we get here the hw queues may contain outgoing
5283 * packets for this RA/TID that are not part of this BA
5284 * session. The hw will assign sequence numbers to these
5285 * packets as they go out. So if we query the hw for its next
5286 * sequence number and use that for the SSN here, it may end up
5287 * being wrong, which will lead to sequence number mismatch at
5288 * the recipient. To avoid this, we reset the sequence number
5289 * to O for the first MPDU in this BA stream.
5292 if (stream
== NULL
) {
5293 /* This means that somebody outside this driver called
5294 * ieee80211_start_tx_ba_session. This is unexpected
5295 * because we do our own rate control. Just warn and
5298 wiphy_warn(hw
->wiphy
, "Unexpected call to %s. "
5299 "Proceeding anyway.\n", __func__
);
5300 stream
= mwl8k_add_stream(hw
, sta
, tid
);
5302 if (stream
== NULL
) {
5303 wiphy_debug(hw
->wiphy
, "no free AMPDU streams\n");
5307 stream
->state
= AMPDU_STREAM_IN_PROGRESS
;
5309 /* Release the lock before we do the time consuming stuff */
5310 spin_unlock(&priv
->stream_lock
);
5311 for (i
= 0; i
< MAX_AMPDU_ATTEMPTS
; i
++) {
5313 /* Check if link is still valid */
5314 if (!sta_info
->is_ampdu_allowed
) {
5315 spin_lock(&priv
->stream_lock
);
5316 mwl8k_remove_stream(hw
, stream
);
5317 spin_unlock(&priv
->stream_lock
);
5321 rc
= mwl8k_check_ba(hw
, stream
, vif
);
5323 /* If HW restart is in progress mwl8k_post_cmd will
5324 * return -EBUSY. Avoid retrying mwl8k_check_ba in
5327 if (!rc
|| rc
== -EBUSY
)
5330 * HW queues take time to be flushed, give them
5336 spin_lock(&priv
->stream_lock
);
5338 wiphy_err(hw
->wiphy
, "Stream for tid %d busy after %d"
5339 " attempts\n", tid
, MAX_AMPDU_ATTEMPTS
);
5340 mwl8k_remove_stream(hw
, stream
);
5344 ieee80211_start_tx_ba_cb_irqsafe(vif
, addr
, tid
);
5346 case IEEE80211_AMPDU_TX_STOP_CONT
:
5347 case IEEE80211_AMPDU_TX_STOP_FLUSH
:
5348 case IEEE80211_AMPDU_TX_STOP_FLUSH_CONT
:
5350 if (stream
->state
== AMPDU_STREAM_ACTIVE
) {
5352 spin_unlock(&priv
->stream_lock
);
5353 mwl8k_destroy_ba(hw
, idx
);
5354 spin_lock(&priv
->stream_lock
);
5356 mwl8k_remove_stream(hw
, stream
);
5358 ieee80211_stop_tx_ba_cb_irqsafe(vif
, addr
, tid
);
5360 case IEEE80211_AMPDU_TX_OPERATIONAL
:
5361 BUG_ON(stream
== NULL
);
5362 BUG_ON(stream
->state
!= AMPDU_STREAM_IN_PROGRESS
);
5363 spin_unlock(&priv
->stream_lock
);
5364 rc
= mwl8k_create_ba(hw
, stream
, buf_size
, vif
);
5365 spin_lock(&priv
->stream_lock
);
5367 stream
->state
= AMPDU_STREAM_ACTIVE
;
5370 spin_unlock(&priv
->stream_lock
);
5371 mwl8k_destroy_ba(hw
, idx
);
5372 spin_lock(&priv
->stream_lock
);
5373 wiphy_debug(hw
->wiphy
,
5374 "Failed adding stream for sta %pM tid %d\n",
5376 mwl8k_remove_stream(hw
, stream
);
5384 spin_unlock(&priv
->stream_lock
);
5388 static const struct ieee80211_ops mwl8k_ops
= {
5390 .start
= mwl8k_start
,
5392 .add_interface
= mwl8k_add_interface
,
5393 .remove_interface
= mwl8k_remove_interface
,
5394 .config
= mwl8k_config
,
5395 .bss_info_changed
= mwl8k_bss_info_changed
,
5396 .prepare_multicast
= mwl8k_prepare_multicast
,
5397 .configure_filter
= mwl8k_configure_filter
,
5398 .set_key
= mwl8k_set_key
,
5399 .set_rts_threshold
= mwl8k_set_rts_threshold
,
5400 .sta_add
= mwl8k_sta_add
,
5401 .sta_remove
= mwl8k_sta_remove
,
5402 .conf_tx
= mwl8k_conf_tx
,
5403 .get_stats
= mwl8k_get_stats
,
5404 .get_survey
= mwl8k_get_survey
,
5405 .ampdu_action
= mwl8k_ampdu_action
,
5408 static void mwl8k_finalize_join_worker(struct work_struct
*work
)
5410 struct mwl8k_priv
*priv
=
5411 container_of(work
, struct mwl8k_priv
, finalize_join_worker
);
5412 struct sk_buff
*skb
= priv
->beacon_skb
;
5413 struct ieee80211_mgmt
*mgmt
= (void *)skb
->data
;
5414 int len
= skb
->len
- offsetof(struct ieee80211_mgmt
, u
.beacon
.variable
);
5415 const u8
*tim
= cfg80211_find_ie(WLAN_EID_TIM
,
5416 mgmt
->u
.beacon
.variable
, len
);
5417 int dtim_period
= 1;
5419 if (tim
&& tim
[1] >= 2)
5420 dtim_period
= tim
[3];
5422 mwl8k_cmd_finalize_join(priv
->hw
, skb
->data
, skb
->len
, dtim_period
);
5425 priv
->beacon_skb
= NULL
;
5434 #define MWL8K_8366_AP_FW_API 3
5435 #define _MWL8K_8366_AP_FW(api) "mwl8k/fmimage_8366_ap-" #api ".fw"
5436 #define MWL8K_8366_AP_FW(api) _MWL8K_8366_AP_FW(api)
5438 static struct mwl8k_device_info mwl8k_info_tbl
[] = {
5440 .part_name
= "88w8363",
5441 .helper_image
= "mwl8k/helper_8363.fw",
5442 .fw_image_sta
= "mwl8k/fmimage_8363.fw",
5445 .part_name
= "88w8687",
5446 .helper_image
= "mwl8k/helper_8687.fw",
5447 .fw_image_sta
= "mwl8k/fmimage_8687.fw",
5450 .part_name
= "88w8366",
5451 .helper_image
= "mwl8k/helper_8366.fw",
5452 .fw_image_sta
= "mwl8k/fmimage_8366.fw",
5453 .fw_image_ap
= MWL8K_8366_AP_FW(MWL8K_8366_AP_FW_API
),
5454 .fw_api_ap
= MWL8K_8366_AP_FW_API
,
5455 .ap_rxd_ops
= &rxd_8366_ap_ops
,
5459 MODULE_FIRMWARE("mwl8k/helper_8363.fw");
5460 MODULE_FIRMWARE("mwl8k/fmimage_8363.fw");
5461 MODULE_FIRMWARE("mwl8k/helper_8687.fw");
5462 MODULE_FIRMWARE("mwl8k/fmimage_8687.fw");
5463 MODULE_FIRMWARE("mwl8k/helper_8366.fw");
5464 MODULE_FIRMWARE("mwl8k/fmimage_8366.fw");
5465 MODULE_FIRMWARE(MWL8K_8366_AP_FW(MWL8K_8366_AP_FW_API
));
5467 static DEFINE_PCI_DEVICE_TABLE(mwl8k_pci_id_table
) = {
5468 { PCI_VDEVICE(MARVELL
, 0x2a0a), .driver_data
= MWL8363
, },
5469 { PCI_VDEVICE(MARVELL
, 0x2a0c), .driver_data
= MWL8363
, },
5470 { PCI_VDEVICE(MARVELL
, 0x2a24), .driver_data
= MWL8363
, },
5471 { PCI_VDEVICE(MARVELL
, 0x2a2b), .driver_data
= MWL8687
, },
5472 { PCI_VDEVICE(MARVELL
, 0x2a30), .driver_data
= MWL8687
, },
5473 { PCI_VDEVICE(MARVELL
, 0x2a40), .driver_data
= MWL8366
, },
5474 { PCI_VDEVICE(MARVELL
, 0x2a41), .driver_data
= MWL8366
, },
5475 { PCI_VDEVICE(MARVELL
, 0x2a42), .driver_data
= MWL8366
, },
5476 { PCI_VDEVICE(MARVELL
, 0x2a43), .driver_data
= MWL8366
, },
5479 MODULE_DEVICE_TABLE(pci
, mwl8k_pci_id_table
);
5481 static int mwl8k_request_alt_fw(struct mwl8k_priv
*priv
)
5484 printk(KERN_ERR
"%s: Error requesting preferred fw %s.\n"
5485 "Trying alternative firmware %s\n", pci_name(priv
->pdev
),
5486 priv
->fw_pref
, priv
->fw_alt
);
5487 rc
= mwl8k_request_fw(priv
, priv
->fw_alt
, &priv
->fw_ucode
, true);
5489 printk(KERN_ERR
"%s: Error requesting alt fw %s\n",
5490 pci_name(priv
->pdev
), priv
->fw_alt
);
5496 static int mwl8k_firmware_load_success(struct mwl8k_priv
*priv
);
5497 static void mwl8k_fw_state_machine(const struct firmware
*fw
, void *context
)
5499 struct mwl8k_priv
*priv
= context
;
5500 struct mwl8k_device_info
*di
= priv
->device_info
;
5503 switch (priv
->fw_state
) {
5506 printk(KERN_ERR
"%s: Error requesting helper fw %s\n",
5507 pci_name(priv
->pdev
), di
->helper_image
);
5510 priv
->fw_helper
= fw
;
5511 rc
= mwl8k_request_fw(priv
, priv
->fw_pref
, &priv
->fw_ucode
,
5513 if (rc
&& priv
->fw_alt
) {
5514 rc
= mwl8k_request_alt_fw(priv
);
5517 priv
->fw_state
= FW_STATE_LOADING_ALT
;
5521 priv
->fw_state
= FW_STATE_LOADING_PREF
;
5524 case FW_STATE_LOADING_PREF
:
5527 rc
= mwl8k_request_alt_fw(priv
);
5530 priv
->fw_state
= FW_STATE_LOADING_ALT
;
5534 priv
->fw_ucode
= fw
;
5535 rc
= mwl8k_firmware_load_success(priv
);
5539 complete(&priv
->firmware_loading_complete
);
5543 case FW_STATE_LOADING_ALT
:
5545 printk(KERN_ERR
"%s: Error requesting alt fw %s\n",
5546 pci_name(priv
->pdev
), di
->helper_image
);
5549 priv
->fw_ucode
= fw
;
5550 rc
= mwl8k_firmware_load_success(priv
);
5554 complete(&priv
->firmware_loading_complete
);
5558 printk(KERN_ERR
"%s: Unexpected firmware loading state: %d\n",
5559 MWL8K_NAME
, priv
->fw_state
);
5566 priv
->fw_state
= FW_STATE_ERROR
;
5567 complete(&priv
->firmware_loading_complete
);
5568 device_release_driver(&priv
->pdev
->dev
);
5569 mwl8k_release_firmware(priv
);
5572 #define MAX_RESTART_ATTEMPTS 1
5573 static int mwl8k_init_firmware(struct ieee80211_hw
*hw
, char *fw_image
,
5576 struct mwl8k_priv
*priv
= hw
->priv
;
5578 int count
= MAX_RESTART_ATTEMPTS
;
5581 /* Reset firmware and hardware */
5582 mwl8k_hw_reset(priv
);
5584 /* Ask userland hotplug daemon for the device firmware */
5585 rc
= mwl8k_request_firmware(priv
, fw_image
, nowait
);
5587 wiphy_err(hw
->wiphy
, "Firmware files not found\n");
5594 /* Load firmware into hardware */
5595 rc
= mwl8k_load_firmware(hw
);
5597 wiphy_err(hw
->wiphy
, "Cannot start firmware\n");
5599 /* Reclaim memory once firmware is successfully loaded */
5600 mwl8k_release_firmware(priv
);
5603 /* FW did not start successfully;
5604 * lets try one more time
5607 wiphy_err(hw
->wiphy
, "Trying to reload the firmware again\n");
5615 static int mwl8k_init_txqs(struct ieee80211_hw
*hw
)
5617 struct mwl8k_priv
*priv
= hw
->priv
;
5621 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++) {
5622 rc
= mwl8k_txq_init(hw
, i
);
5626 iowrite32(priv
->txq
[i
].txd_dma
,
5627 priv
->sram
+ priv
->txq_offset
[i
]);
5632 /* initialize hw after successfully loading a firmware image */
5633 static int mwl8k_probe_hw(struct ieee80211_hw
*hw
)
5635 struct mwl8k_priv
*priv
= hw
->priv
;
5640 priv
->rxd_ops
= priv
->device_info
->ap_rxd_ops
;
5641 if (priv
->rxd_ops
== NULL
) {
5642 wiphy_err(hw
->wiphy
,
5643 "Driver does not have AP firmware image support for this hardware\n");
5645 goto err_stop_firmware
;
5648 priv
->rxd_ops
= &rxd_sta_ops
;
5651 priv
->sniffer_enabled
= false;
5652 priv
->wmm_enabled
= false;
5653 priv
->pending_tx_pkts
= 0;
5654 atomic_set(&priv
->watchdog_event_pending
, 0);
5656 rc
= mwl8k_rxq_init(hw
, 0);
5658 goto err_stop_firmware
;
5659 rxq_refill(hw
, 0, INT_MAX
);
5661 /* For the sta firmware, we need to know the dma addresses of tx queues
5662 * before sending MWL8K_CMD_GET_HW_SPEC. So we must initialize them
5663 * prior to issuing this command. But for the AP case, we learn the
5664 * total number of queues from the result CMD_GET_HW_SPEC, so for this
5665 * case we must initialize the tx queues after.
5667 priv
->num_ampdu_queues
= 0;
5669 rc
= mwl8k_init_txqs(hw
);
5671 goto err_free_queues
;
5674 iowrite32(0, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS
);
5675 iowrite32(0, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_MASK
);
5676 iowrite32(MWL8K_A2H_INT_TX_DONE
|MWL8K_A2H_INT_RX_READY
|
5677 MWL8K_A2H_INT_BA_WATCHDOG
,
5678 priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_CLEAR_SEL
);
5679 iowrite32(MWL8K_A2H_INT_OPC_DONE
,
5680 priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_STATUS_MASK
);
5682 rc
= request_irq(priv
->pdev
->irq
, mwl8k_interrupt
,
5683 IRQF_SHARED
, MWL8K_NAME
, hw
);
5685 wiphy_err(hw
->wiphy
, "failed to register IRQ handler\n");
5686 goto err_free_queues
;
5690 * When hw restart is requested,
5691 * mac80211 will take care of clearing
5692 * the ampdu streams, so do not clear
5693 * the ampdu state here
5695 if (!priv
->hw_restart_in_progress
)
5696 memset(priv
->ampdu
, 0, sizeof(priv
->ampdu
));
5699 * Temporarily enable interrupts. Initial firmware host
5700 * commands use interrupts and avoid polling. Disable
5701 * interrupts when done.
5703 iowrite32(MWL8K_A2H_EVENTS
, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_MASK
);
5705 /* Get config data, mac addrs etc */
5707 rc
= mwl8k_cmd_get_hw_spec_ap(hw
);
5709 rc
= mwl8k_init_txqs(hw
);
5711 rc
= mwl8k_cmd_set_hw_spec(hw
);
5713 rc
= mwl8k_cmd_get_hw_spec_sta(hw
);
5716 wiphy_err(hw
->wiphy
, "Cannot initialise firmware\n");
5720 /* Turn radio off */
5721 rc
= mwl8k_cmd_radio_disable(hw
);
5723 wiphy_err(hw
->wiphy
, "Cannot disable\n");
5727 /* Clear MAC address */
5728 rc
= mwl8k_cmd_set_mac_addr(hw
, NULL
, "\x00\x00\x00\x00\x00\x00");
5730 wiphy_err(hw
->wiphy
, "Cannot clear MAC address\n");
5734 /* Configure Antennas */
5735 rc
= mwl8k_cmd_rf_antenna(hw
, MWL8K_RF_ANTENNA_RX
, 0x3);
5737 wiphy_warn(hw
->wiphy
, "failed to set # of RX antennas");
5738 rc
= mwl8k_cmd_rf_antenna(hw
, MWL8K_RF_ANTENNA_TX
, 0x7);
5740 wiphy_warn(hw
->wiphy
, "failed to set # of TX antennas");
5743 /* Disable interrupts */
5744 iowrite32(0, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_MASK
);
5745 free_irq(priv
->pdev
->irq
, hw
);
5747 wiphy_info(hw
->wiphy
, "%s v%d, %pm, %s firmware %u.%u.%u.%u\n",
5748 priv
->device_info
->part_name
,
5749 priv
->hw_rev
, hw
->wiphy
->perm_addr
,
5750 priv
->ap_fw
? "AP" : "STA",
5751 (priv
->fw_rev
>> 24) & 0xff, (priv
->fw_rev
>> 16) & 0xff,
5752 (priv
->fw_rev
>> 8) & 0xff, priv
->fw_rev
& 0xff);
5757 iowrite32(0, priv
->regs
+ MWL8K_HIU_A2H_INTERRUPT_MASK
);
5758 free_irq(priv
->pdev
->irq
, hw
);
5761 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++)
5762 mwl8k_txq_deinit(hw
, i
);
5763 mwl8k_rxq_deinit(hw
, 0);
5766 mwl8k_hw_reset(priv
);
5772 * invoke mwl8k_reload_firmware to change the firmware image after the device
5773 * has already been registered
5775 static int mwl8k_reload_firmware(struct ieee80211_hw
*hw
, char *fw_image
)
5778 struct mwl8k_priv
*priv
= hw
->priv
;
5779 struct mwl8k_vif
*vif
, *tmp_vif
;
5782 mwl8k_rxq_deinit(hw
, 0);
5785 * All the existing interfaces are re-added by the ieee80211_reconfig;
5786 * which means driver should remove existing interfaces before calling
5787 * ieee80211_restart_hw
5789 if (priv
->hw_restart_in_progress
)
5790 list_for_each_entry_safe(vif
, tmp_vif
, &priv
->vif_list
, list
)
5791 mwl8k_remove_vif(priv
, vif
);
5793 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++)
5794 mwl8k_txq_deinit(hw
, i
);
5796 rc
= mwl8k_init_firmware(hw
, fw_image
, false);
5800 rc
= mwl8k_probe_hw(hw
);
5804 if (priv
->hw_restart_in_progress
)
5807 rc
= mwl8k_start(hw
);
5811 rc
= mwl8k_config(hw
, ~0);
5815 for (i
= 0; i
< MWL8K_TX_WMM_QUEUES
; i
++) {
5816 rc
= mwl8k_conf_tx(hw
, NULL
, i
, &priv
->wmm_params
[i
]);
5824 printk(KERN_WARNING
"mwl8k: Failed to reload firmware image.\n");
5828 static const struct ieee80211_iface_limit ap_if_limits
[] = {
5829 { .max
= 8, .types
= BIT(NL80211_IFTYPE_AP
) },
5830 { .max
= 1, .types
= BIT(NL80211_IFTYPE_STATION
) },
5833 static const struct ieee80211_iface_combination ap_if_comb
= {
5834 .limits
= ap_if_limits
,
5835 .n_limits
= ARRAY_SIZE(ap_if_limits
),
5836 .max_interfaces
= 8,
5837 .num_different_channels
= 1,
5841 static int mwl8k_firmware_load_success(struct mwl8k_priv
*priv
)
5843 struct ieee80211_hw
*hw
= priv
->hw
;
5846 rc
= mwl8k_load_firmware(hw
);
5847 mwl8k_release_firmware(priv
);
5849 wiphy_err(hw
->wiphy
, "Cannot start firmware\n");
5854 * Extra headroom is the size of the required DMA header
5855 * minus the size of the smallest 802.11 frame (CTS frame).
5857 hw
->extra_tx_headroom
=
5858 sizeof(struct mwl8k_dma_data
) - sizeof(struct ieee80211_cts
);
5860 hw
->extra_tx_headroom
-= priv
->ap_fw
? REDUCED_TX_HEADROOM
: 0;
5862 hw
->channel_change_time
= 10;
5864 hw
->queues
= MWL8K_TX_WMM_QUEUES
;
5866 /* Set rssi values to dBm */
5867 hw
->flags
|= IEEE80211_HW_SIGNAL_DBM
| IEEE80211_HW_HAS_RATE_CONTROL
;
5870 * Ask mac80211 to not to trigger PS mode
5871 * based on PM bit of incoming frames.
5874 hw
->flags
|= IEEE80211_HW_AP_LINK_PS
;
5876 hw
->vif_data_size
= sizeof(struct mwl8k_vif
);
5877 hw
->sta_data_size
= sizeof(struct mwl8k_sta
);
5879 priv
->macids_used
= 0;
5880 INIT_LIST_HEAD(&priv
->vif_list
);
5882 /* Set default radio state and preamble */
5883 priv
->radio_on
= false;
5884 priv
->radio_short_preamble
= false;
5886 /* Finalize join worker */
5887 INIT_WORK(&priv
->finalize_join_worker
, mwl8k_finalize_join_worker
);
5888 /* Handle watchdog ba events */
5889 INIT_WORK(&priv
->watchdog_ba_handle
, mwl8k_watchdog_ba_events
);
5890 /* To reload the firmware if it crashes */
5891 INIT_WORK(&priv
->fw_reload
, mwl8k_hw_restart_work
);
5893 /* TX reclaim and RX tasklets. */
5894 tasklet_init(&priv
->poll_tx_task
, mwl8k_tx_poll
, (unsigned long)hw
);
5895 tasklet_disable(&priv
->poll_tx_task
);
5896 tasklet_init(&priv
->poll_rx_task
, mwl8k_rx_poll
, (unsigned long)hw
);
5897 tasklet_disable(&priv
->poll_rx_task
);
5899 /* Power management cookie */
5900 priv
->cookie
= pci_alloc_consistent(priv
->pdev
, 4, &priv
->cookie_dma
);
5901 if (priv
->cookie
== NULL
)
5904 mutex_init(&priv
->fw_mutex
);
5905 priv
->fw_mutex_owner
= NULL
;
5906 priv
->fw_mutex_depth
= 0;
5907 priv
->hostcmd_wait
= NULL
;
5909 spin_lock_init(&priv
->tx_lock
);
5911 spin_lock_init(&priv
->stream_lock
);
5913 priv
->tx_wait
= NULL
;
5915 rc
= mwl8k_probe_hw(hw
);
5917 goto err_free_cookie
;
5919 hw
->wiphy
->interface_modes
= 0;
5921 if (priv
->ap_macids_supported
|| priv
->device_info
->fw_image_ap
) {
5922 hw
->wiphy
->interface_modes
|= BIT(NL80211_IFTYPE_AP
);
5923 hw
->wiphy
->interface_modes
|= BIT(NL80211_IFTYPE_STATION
);
5924 hw
->wiphy
->iface_combinations
= &ap_if_comb
;
5925 hw
->wiphy
->n_iface_combinations
= 1;
5928 if (priv
->sta_macids_supported
|| priv
->device_info
->fw_image_sta
)
5929 hw
->wiphy
->interface_modes
|= BIT(NL80211_IFTYPE_STATION
);
5931 rc
= ieee80211_register_hw(hw
);
5933 wiphy_err(hw
->wiphy
, "Cannot register device\n");
5934 goto err_unprobe_hw
;
5940 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++)
5941 mwl8k_txq_deinit(hw
, i
);
5942 mwl8k_rxq_deinit(hw
, 0);
5945 if (priv
->cookie
!= NULL
)
5946 pci_free_consistent(priv
->pdev
, 4,
5947 priv
->cookie
, priv
->cookie_dma
);
5951 static int mwl8k_probe(struct pci_dev
*pdev
,
5952 const struct pci_device_id
*id
)
5954 static int printed_version
;
5955 struct ieee80211_hw
*hw
;
5956 struct mwl8k_priv
*priv
;
5957 struct mwl8k_device_info
*di
;
5960 if (!printed_version
) {
5961 printk(KERN_INFO
"%s version %s\n", MWL8K_DESC
, MWL8K_VERSION
);
5962 printed_version
= 1;
5966 rc
= pci_enable_device(pdev
);
5968 printk(KERN_ERR
"%s: Cannot enable new PCI device\n",
5973 rc
= pci_request_regions(pdev
, MWL8K_NAME
);
5975 printk(KERN_ERR
"%s: Cannot obtain PCI resources\n",
5977 goto err_disable_device
;
5980 pci_set_master(pdev
);
5983 hw
= ieee80211_alloc_hw(sizeof(*priv
), &mwl8k_ops
);
5985 printk(KERN_ERR
"%s: ieee80211 alloc failed\n", MWL8K_NAME
);
5990 SET_IEEE80211_DEV(hw
, &pdev
->dev
);
5991 pci_set_drvdata(pdev
, hw
);
5996 priv
->device_info
= &mwl8k_info_tbl
[id
->driver_data
];
5999 priv
->sram
= pci_iomap(pdev
, 0, 0x10000);
6000 if (priv
->sram
== NULL
) {
6001 wiphy_err(hw
->wiphy
, "Cannot map device SRAM\n");
6007 * If BAR0 is a 32 bit BAR, the register BAR will be BAR1.
6008 * If BAR0 is a 64 bit BAR, the register BAR will be BAR2.
6010 priv
->regs
= pci_iomap(pdev
, 1, 0x10000);
6011 if (priv
->regs
== NULL
) {
6012 priv
->regs
= pci_iomap(pdev
, 2, 0x10000);
6013 if (priv
->regs
== NULL
) {
6014 wiphy_err(hw
->wiphy
, "Cannot map device registers\n");
6021 * Choose the initial fw image depending on user input. If a second
6022 * image is available, make it the alternative image that will be
6023 * loaded if the first one fails.
6025 init_completion(&priv
->firmware_loading_complete
);
6026 di
= priv
->device_info
;
6027 if (ap_mode_default
&& di
->fw_image_ap
) {
6028 priv
->fw_pref
= di
->fw_image_ap
;
6029 priv
->fw_alt
= di
->fw_image_sta
;
6030 } else if (!ap_mode_default
&& di
->fw_image_sta
) {
6031 priv
->fw_pref
= di
->fw_image_sta
;
6032 priv
->fw_alt
= di
->fw_image_ap
;
6033 } else if (ap_mode_default
&& !di
->fw_image_ap
&& di
->fw_image_sta
) {
6034 printk(KERN_WARNING
"AP fw is unavailable. Using STA fw.");
6035 priv
->fw_pref
= di
->fw_image_sta
;
6036 } else if (!ap_mode_default
&& !di
->fw_image_sta
&& di
->fw_image_ap
) {
6037 printk(KERN_WARNING
"STA fw is unavailable. Using AP fw.");
6038 priv
->fw_pref
= di
->fw_image_ap
;
6040 rc
= mwl8k_init_firmware(hw
, priv
->fw_pref
, true);
6042 goto err_stop_firmware
;
6044 priv
->hw_restart_in_progress
= false;
6046 priv
->running_bsses
= 0;
6051 mwl8k_hw_reset(priv
);
6054 if (priv
->regs
!= NULL
)
6055 pci_iounmap(pdev
, priv
->regs
);
6057 if (priv
->sram
!= NULL
)
6058 pci_iounmap(pdev
, priv
->sram
);
6060 pci_set_drvdata(pdev
, NULL
);
6061 ieee80211_free_hw(hw
);
6064 pci_release_regions(pdev
);
6067 pci_disable_device(pdev
);
6072 static void mwl8k_remove(struct pci_dev
*pdev
)
6074 struct ieee80211_hw
*hw
= pci_get_drvdata(pdev
);
6075 struct mwl8k_priv
*priv
;
6082 wait_for_completion(&priv
->firmware_loading_complete
);
6084 if (priv
->fw_state
== FW_STATE_ERROR
) {
6085 mwl8k_hw_reset(priv
);
6089 ieee80211_stop_queues(hw
);
6091 ieee80211_unregister_hw(hw
);
6093 /* Remove TX reclaim and RX tasklets. */
6094 tasklet_kill(&priv
->poll_tx_task
);
6095 tasklet_kill(&priv
->poll_rx_task
);
6098 mwl8k_hw_reset(priv
);
6100 /* Return all skbs to mac80211 */
6101 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++)
6102 mwl8k_txq_reclaim(hw
, i
, INT_MAX
, 1);
6104 for (i
= 0; i
< mwl8k_tx_queues(priv
); i
++)
6105 mwl8k_txq_deinit(hw
, i
);
6107 mwl8k_rxq_deinit(hw
, 0);
6109 pci_free_consistent(priv
->pdev
, 4, priv
->cookie
, priv
->cookie_dma
);
6112 pci_iounmap(pdev
, priv
->regs
);
6113 pci_iounmap(pdev
, priv
->sram
);
6114 pci_set_drvdata(pdev
, NULL
);
6115 ieee80211_free_hw(hw
);
6116 pci_release_regions(pdev
);
6117 pci_disable_device(pdev
);
6120 static struct pci_driver mwl8k_driver
= {
6122 .id_table
= mwl8k_pci_id_table
,
6123 .probe
= mwl8k_probe
,
6124 .remove
= mwl8k_remove
,
6127 module_pci_driver(mwl8k_driver
);
6129 MODULE_DESCRIPTION(MWL8K_DESC
);
6130 MODULE_VERSION(MWL8K_VERSION
);
6131 MODULE_AUTHOR("Lennert Buytenhek <buytenh@marvell.com>");
6132 MODULE_LICENSE("GPL");