cmdresp.c 28.7 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
/**
  * This file contains the handling of command
  * responses as well as events generated by firmware.
  */
#include <linux/delay.h>
#include <linux/if_arp.h>
#include <linux/netdevice.h>

#include <net/iw_handler.h>

#include "host.h"
#include "decl.h"
#include "defs.h"
#include "dev.h"
#include "join.h"
#include "wext.h"

/**
 *  @brief This function handles disconnect event. it
 *  reports disconnect to upper layer, clean tx/rx packets,
 *  reset link state etc.
 *
23
 *  @param priv    A pointer to struct lbs_private structure
24 25
 *  @return 	   n/a
 */
26
void lbs_mac_event_disconnected(struct lbs_private *priv)
27
{
28
	struct lbs_adapter *adapter = priv->adapter;
29 30
	union iwreq_data wrqu;

31
	if (adapter->connect_status != LBS_CONNECTED)
32 33
		return;

34
	lbs_deb_enter(LBS_DEB_CMD);
35 36 37 38 39 40 41 42 43 44

	memset(wrqu.ap_addr.sa_data, 0x00, ETH_ALEN);
	wrqu.ap_addr.sa_family = ARPHRD_ETHER;

	/*
	 * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
	 * It causes problem in the Supplicant
	 */

	msleep_interruptible(1000);
45
	wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
46 47 48 49 50 51

	/* Free Tx and Rx packets */
	kfree_skb(priv->adapter->currenttxskb);
	priv->adapter->currenttxskb = NULL;

	/* report disconnect to upper layer */
52 53
	netif_stop_queue(priv->dev);
	netif_carrier_off(priv->dev);
54 55 56 57 58 59 60 61 62

	/* reset SNR/NF/RSSI values */
	memset(adapter->SNR, 0x00, sizeof(adapter->SNR));
	memset(adapter->NF, 0x00, sizeof(adapter->NF));
	memset(adapter->RSSI, 0x00, sizeof(adapter->RSSI));
	memset(adapter->rawSNR, 0x00, sizeof(adapter->rawSNR));
	memset(adapter->rawNF, 0x00, sizeof(adapter->rawNF));
	adapter->nextSNRNF = 0;
	adapter->numSNRNF = 0;
63
	lbs_deb_cmd("current SSID '%s', length %u\n",
64 65 66
	            escape_essid(adapter->curbssparams.ssid,
	                         adapter->curbssparams.ssid_len),
	            adapter->curbssparams.ssid_len);
67

68
	adapter->connect_status = LBS_DISCONNECTED;
69

70 71 72 73
	/* Clear out associated SSID and BSSID since connection is
	 * no longer valid.
	 */
	memset(&adapter->curbssparams.bssid, 0, ETH_ALEN);
74 75
	memset(&adapter->curbssparams.ssid, 0, IW_ESSID_MAX_SIZE);
	adapter->curbssparams.ssid_len = 0;
76 77 78

	if (adapter->psstate != PS_STATE_FULL_POWER) {
		/* make firmware to exit PS mode */
79
		lbs_deb_cmd("disconnected, so exit PS mode\n");
80
		lbs_ps_wakeup(priv, 0);
81
	}
82
	lbs_deb_leave(LBS_DEB_CMD);
83 84 85 86 87
}

/**
 *  @brief This function handles MIC failure event.
 *
88
 *  @param priv    A pointer to struct lbs_private structure
89 90 91
 *  @para  event   the event id
 *  @return 	   n/a
 */
92
static void handle_mic_failureevent(struct lbs_private *priv, u32 event)
93 94 95
{
	char buf[50];

96
	lbs_deb_enter(LBS_DEB_CMD);
97 98 99 100 101 102 103 104 105 106
	memset(buf, 0, sizeof(buf));

	sprintf(buf, "%s", "MLME-MICHAELMICFAILURE.indication ");

	if (event == MACREG_INT_CODE_MIC_ERR_UNICAST) {
		strcat(buf, "unicast ");
	} else {
		strcat(buf, "multicast ");
	}

107
	lbs_send_iwevcustom_event(priv, buf);
108
	lbs_deb_leave(LBS_DEB_CMD);
109 110
}

111
static int lbs_ret_reg_access(struct lbs_private *priv,
112 113
			       u16 type, struct cmd_ds_command *resp)
{
114
	int ret = 0;
115
	struct lbs_adapter *adapter = priv->adapter;
116

117
	lbs_deb_enter(LBS_DEB_CMD);
118 119

	switch (type) {
120
	case CMD_RET(CMD_MAC_REG_ACCESS):
121
		{
122
			struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
123

124 125
			adapter->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
			adapter->offsetvalue.value = le32_to_cpu(reg->value);
126 127 128
			break;
		}

129
	case CMD_RET(CMD_BBP_REG_ACCESS):
130
		{
131
			struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
132

133
			adapter->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
134 135 136 137
			adapter->offsetvalue.value = reg->value;
			break;
		}

138
	case CMD_RET(CMD_RF_REG_ACCESS):
139
		{
140
			struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
141

142
			adapter->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
143 144 145 146 147
			adapter->offsetvalue.value = reg->value;
			break;
		}

	default:
148
		ret = -1;
149 150
	}

151
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
152
	return ret;
153 154
}

155
static int lbs_ret_get_hw_spec(struct lbs_private *priv,
156 157 158 159
				struct cmd_ds_command *resp)
{
	u32 i;
	struct cmd_ds_get_hw_spec *hwspec = &resp->params.hwspec;
160
	struct lbs_adapter *adapter = priv->adapter;
161
	int ret = 0;
162
	DECLARE_MAC_BUF(mac);
163

164
	lbs_deb_enter(LBS_DEB_CMD);
165 166 167

	adapter->fwcapinfo = le32_to_cpu(hwspec->fwcapinfo);

168
	memcpy(adapter->fwreleasenumber, hwspec->fwreleasenumber, 4);
169

170
	lbs_deb_cmd("GET_HW_SPEC: firmware release %u.%u.%up%u\n",
171 172
		    adapter->fwreleasenumber[2], adapter->fwreleasenumber[1],
		    adapter->fwreleasenumber[0], adapter->fwreleasenumber[3]);
173 174
	lbs_deb_cmd("GET_HW_SPEC: MAC addr %s\n",
		    print_mac(mac, hwspec->permanentaddr));
175
	lbs_deb_cmd("GET_HW_SPEC: hardware interface 0x%x, hardware spec 0x%04x\n",
176 177
	       hwspec->hwifversion, hwspec->version);

178 179 180 181 182
	/* Clamp region code to 8-bit since FW spec indicates that it should
	 * only ever be 8-bit, even though the field size is 16-bit.  Some firmware
	 * returns non-zero high 8 bits here.
	 */
	adapter->regioncode = le16_to_cpu(hwspec->regioncode) & 0xFF;
183 184 185

	for (i = 0; i < MRVDRV_MAX_REGION_CODE; i++) {
		/* use the region code to search for the index */
186
		if (adapter->regioncode == lbs_region_code_to_index[i]) {
187 188 189 190 191 192 193
			break;
		}
	}

	/* if it's unidentified region code, use the default (USA) */
	if (i >= MRVDRV_MAX_REGION_CODE) {
		adapter->regioncode = 0x10;
194
		lbs_pr_info("unidentified region code; using the default (USA)\n");
195 196
	}

197 198
	if (adapter->current_addr[0] == 0xff)
		memmove(adapter->current_addr, hwspec->permanentaddr, ETH_ALEN);
199

200
	memcpy(priv->dev->dev_addr, adapter->current_addr, ETH_ALEN);
201
	if (priv->mesh_dev)
202
		memcpy(priv->mesh_dev->dev_addr, adapter->current_addr, ETH_ALEN);
203

204
	if (lbs_set_regiontable(priv, adapter->regioncode, 0)) {
205 206 207 208
		ret = -1;
		goto done;
	}

209
	if (lbs_set_universaltable(priv, 0)) {
210 211 212 213
		ret = -1;
		goto done;
	}

214 215
done:
	lbs_deb_enter_args(LBS_DEB_CMD, "ret %d", ret);
216 217 218
	return ret;
}

219
static int lbs_ret_802_11_sleep_params(struct lbs_private *priv,
220 221 222
					struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_sleep_params *sp = &resp->params.sleep_params;
223
	struct lbs_adapter *adapter = priv->adapter;
224

225
	lbs_deb_enter(LBS_DEB_CMD);
226

227 228
	lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, calcontrol 0x%x "
		    "extsleepclk 0x%x\n", le16_to_cpu(sp->error),
229 230 231
		    le16_to_cpu(sp->offset), le16_to_cpu(sp->stabletime),
		    sp->calcontrol, sp->externalsleepclk);

232 233 234
	adapter->sp.sp_error = le16_to_cpu(sp->error);
	adapter->sp.sp_offset = le16_to_cpu(sp->offset);
	adapter->sp.sp_stabletime = le16_to_cpu(sp->stabletime);
235 236
	adapter->sp.sp_calcontrol = sp->calcontrol;
	adapter->sp.sp_extsleepclk = sp->externalsleepclk;
237 238
	adapter->sp.sp_reserved = le16_to_cpu(sp->reserved);

239
	lbs_deb_enter(LBS_DEB_CMD);
240 241 242
	return 0;
}

243
static int lbs_ret_802_11_stat(struct lbs_private *priv,
244 245
				struct cmd_ds_command *resp)
{
246
	lbs_deb_enter(LBS_DEB_CMD);
247 248 249
/*	currently adapter->wlan802_11Stat is unused

	struct cmd_ds_802_11_get_stat *p11Stat = &resp->params.gstat;
250
	struct lbs_adapter *adapter = priv->adapter;
251 252 253 254 255

	// TODO Convert it to Big endian befor copy
	memcpy(&adapter->wlan802_11Stat,
	       p11Stat, sizeof(struct cmd_ds_802_11_get_stat));
*/
256
	lbs_deb_leave(LBS_DEB_CMD);
257 258 259
	return 0;
}

260
static int lbs_ret_802_11_snmp_mib(struct lbs_private *priv,
261 262 263 264 265 266
				    struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_snmp_mib *smib = &resp->params.smib;
	u16 oid = le16_to_cpu(smib->oid);
	u16 querytype = le16_to_cpu(smib->querytype);

267
	lbs_deb_enter(LBS_DEB_CMD);
268

269
	lbs_deb_cmd("SNMP_RESP: oid 0x%x, querytype 0x%x\n", oid,
270
	       querytype);
271
	lbs_deb_cmd("SNMP_RESP: Buf size %d\n", le16_to_cpu(smib->bufsize));
272

273
	if (querytype == CMD_ACT_GET) {
274
		switch (oid) {
275
		case FRAGTHRESH_I:
276
			priv->adapter->fragthsd =
277
				le16_to_cpu(*((__le16 *)(smib->value)));
278
			lbs_deb_cmd("SNMP_RESP: frag threshold %u\n",
279
				    priv->adapter->fragthsd);
280
			break;
281
		case RTSTHRESH_I:
282
			priv->adapter->rtsthsd =
283
				le16_to_cpu(*((__le16 *)(smib->value)));
284
			lbs_deb_cmd("SNMP_RESP: rts threshold %u\n",
285
				    priv->adapter->rtsthsd);
286
			break;
287
		case SHORT_RETRYLIM_I:
288
			priv->adapter->txretrycount =
289
				le16_to_cpu(*((__le16 *)(smib->value)));
290
			lbs_deb_cmd("SNMP_RESP: tx retry count %u\n",
291
				    priv->adapter->rtsthsd);
292 293 294 295 296 297
			break;
		default:
			break;
		}
	}

298
	lbs_deb_enter(LBS_DEB_CMD);
299 300 301
	return 0;
}

302
static int lbs_ret_802_11_key_material(struct lbs_private *priv,
303 304 305 306
					struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_key_material *pkeymaterial =
	    &resp->params.keymaterial;
307
	struct lbs_adapter *adapter = priv->adapter;
308 309
	u16 action = le16_to_cpu(pkeymaterial->action);

310
	lbs_deb_enter(LBS_DEB_CMD);
311 312

	/* Copy the returned key to driver private data */
313
	if (action == CMD_ACT_GET) {
314 315 316 317 318 319
		u8 * buf_ptr = (u8 *) &pkeymaterial->keyParamSet;
		u8 * resp_end = (u8 *) (resp + le16_to_cpu(resp->size));

		while (buf_ptr < resp_end) {
			struct MrvlIEtype_keyParamSet * pkeyparamset =
			    (struct MrvlIEtype_keyParamSet *) buf_ptr;
320
			struct enc_key * pkey;
321 322
			u16 param_set_len = le16_to_cpu(pkeyparamset->length);
			u16 key_len = le16_to_cpu(pkeyparamset->keylen);
323 324 325
			u16 key_flags = le16_to_cpu(pkeyparamset->keyinfo);
			u16 key_type = le16_to_cpu(pkeyparamset->keytypeid);
			u8 * end;
326 327 328 329 330 331 332 333

			end = (u8 *) pkeyparamset + sizeof (pkeyparamset->type)
			                          + sizeof (pkeyparamset->length)
			                          + param_set_len;
			/* Make sure we don't access past the end of the IEs */
			if (end > resp_end)
				break;

334
			if (key_flags & KEY_INFO_WPA_UNICAST)
335
				pkey = &adapter->wpa_unicast_key;
336
			else if (key_flags & KEY_INFO_WPA_MCAST)
337 338 339 340 341
				pkey = &adapter->wpa_mcast_key;
			else
				break;

			/* Copy returned key into driver */
342
			memset(pkey, 0, sizeof(struct enc_key));
343 344
			if (key_len > sizeof(pkey->key))
				break;
345 346 347
			pkey->type = key_type;
			pkey->flags = key_flags;
			pkey->len = key_len;
348 349 350 351 352 353
			memcpy(pkey->key, pkeyparamset->key, pkey->len);

			buf_ptr = end + 1;
		}
	}

354
	lbs_deb_enter(LBS_DEB_CMD);
355 356 357
	return 0;
}

358
static int lbs_ret_802_11_mac_address(struct lbs_private *priv,
359 360 361
				       struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_mac_address *macadd = &resp->params.macadd;
362
	struct lbs_adapter *adapter = priv->adapter;
363

364
	lbs_deb_enter(LBS_DEB_CMD);
365 366 367

	memcpy(adapter->current_addr, macadd->macadd, ETH_ALEN);

368
	lbs_deb_enter(LBS_DEB_CMD);
369 370 371
	return 0;
}

372
static int lbs_ret_802_11_rf_tx_power(struct lbs_private *priv,
373 374 375
				       struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_rf_tx_power *rtp = &resp->params.txp;
376
	struct lbs_adapter *adapter = priv->adapter;
377

378
	lbs_deb_enter(LBS_DEB_CMD);
379 380 381

	adapter->txpowerlevel = le16_to_cpu(rtp->currentlevel);

382
	lbs_deb_cmd("TX power currently %d\n", adapter->txpowerlevel);
383

384
	lbs_deb_leave(LBS_DEB_CMD);
385 386 387
	return 0;
}

388
static int lbs_ret_802_11_rate_adapt_rateset(struct lbs_private *priv,
389 390
					      struct cmd_ds_command *resp)
{
391
	struct cmd_ds_802_11_rate_adapt_rateset *rates = &resp->params.rateset;
392
	struct lbs_adapter *adapter = priv->adapter;
393

394
	lbs_deb_enter(LBS_DEB_CMD);
395

396
	if (rates->action == CMD_ACT_GET) {
397 398
		adapter->enablehwauto = le16_to_cpu(rates->enablehwauto);
		adapter->ratebitmap = le16_to_cpu(rates->bitmap);
399 400
	}

401
	lbs_deb_leave(LBS_DEB_CMD);
402 403 404
	return 0;
}

405
static int lbs_ret_802_11_data_rate(struct lbs_private *priv,
406 407 408
				     struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_data_rate *pdatarate = &resp->params.drate;
409
	struct lbs_adapter *adapter = priv->adapter;
410

411
	lbs_deb_enter(LBS_DEB_CMD);
412

413
	lbs_deb_hex(LBS_DEB_CMD, "DATA_RATE_RESP", (u8 *) pdatarate,
414
		sizeof(struct cmd_ds_802_11_data_rate));
415

416 417 418
	/* FIXME: get actual rates FW can do if this command actually returns
	 * all data rates supported.
	 */
419
	adapter->cur_rate = lbs_fw_index_to_data_rate(pdatarate->rates[0]);
420
	lbs_deb_cmd("DATA_RATE: current rate 0x%02x\n", adapter->cur_rate);
421

422
	lbs_deb_leave(LBS_DEB_CMD);
423 424 425
	return 0;
}

426
static int lbs_ret_802_11_rf_channel(struct lbs_private *priv,
427 428
				      struct cmd_ds_command *resp)
{
429
	struct cmd_ds_802_11_rf_channel *rfchannel = &resp->params.rfchannel;
430
	struct lbs_adapter *adapter = priv->adapter;
431 432 433
	u16 action = le16_to_cpu(rfchannel->action);
	u16 newchannel = le16_to_cpu(rfchannel->currentchannel);

434
	lbs_deb_enter(LBS_DEB_CMD);
435

436
	if (action == CMD_OPT_802_11_RF_CHANNEL_GET
437
	    && adapter->curbssparams.channel != newchannel) {
438
		lbs_deb_cmd("channel switch from %d to %d\n",
439 440 441 442 443 444
		       adapter->curbssparams.channel, newchannel);

		/* Update the channel again */
		adapter->curbssparams.channel = newchannel;
	}

445
	lbs_deb_enter(LBS_DEB_CMD);
446 447 448
	return 0;
}

449
static int lbs_ret_802_11_rssi(struct lbs_private *priv,
450 451 452
				struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_rssi_rsp *rssirsp = &resp->params.rssirsp;
453
	struct lbs_adapter *adapter = priv->adapter;
454

455 456
	lbs_deb_enter(LBS_DEB_CMD);

457 458
	/* store the non average value */
	adapter->SNR[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->SNR);
459
	adapter->NF[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->noisefloor);
460 461

	adapter->SNR[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgSNR);
462
	adapter->NF[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgnoisefloor);
463 464 465 466 467 468 469 470 471

	adapter->RSSI[TYPE_BEACON][TYPE_NOAVG] =
	    CAL_RSSI(adapter->SNR[TYPE_BEACON][TYPE_NOAVG],
		     adapter->NF[TYPE_BEACON][TYPE_NOAVG]);

	adapter->RSSI[TYPE_BEACON][TYPE_AVG] =
	    CAL_RSSI(adapter->SNR[TYPE_BEACON][TYPE_AVG] / AVG_SCALE,
		     adapter->NF[TYPE_BEACON][TYPE_AVG] / AVG_SCALE);

472 473
	lbs_deb_cmd("RSSI: beacon %d, avg %d\n",
	       adapter->RSSI[TYPE_BEACON][TYPE_NOAVG],
474 475
	       adapter->RSSI[TYPE_BEACON][TYPE_AVG]);

476
	lbs_deb_leave(LBS_DEB_CMD);
477 478 479
	return 0;
}

480
static int lbs_ret_802_11_eeprom_access(struct lbs_private *priv,
481 482
				  struct cmd_ds_command *resp)
{
483
	struct lbs_adapter *adapter = priv->adapter;
484 485
	struct lbs_ioctl_regrdwr *pbuf;
	pbuf = (struct lbs_ioctl_regrdwr *) adapter->prdeeprom;
486

487
	lbs_deb_enter_args(LBS_DEB_CMD, "len %d",
488 489 490
	       le16_to_cpu(resp->params.rdeeprom.bytecount));
	if (pbuf->NOB < le16_to_cpu(resp->params.rdeeprom.bytecount)) {
		pbuf->NOB = 0;
491
		lbs_deb_cmd("EEPROM read length too big\n");
492 493 494 495 496 497 498
		return -1;
	}
	pbuf->NOB = le16_to_cpu(resp->params.rdeeprom.bytecount);
	if (pbuf->NOB > 0) {

		memcpy(&pbuf->value, (u8 *) & resp->params.rdeeprom.value,
		       le16_to_cpu(resp->params.rdeeprom.bytecount));
499
		lbs_deb_hex(LBS_DEB_CMD, "EEPROM", (char *)&pbuf->value,
500 501
			le16_to_cpu(resp->params.rdeeprom.bytecount));
	}
502
	lbs_deb_leave(LBS_DEB_CMD);
503 504 505
	return 0;
}

506
static int lbs_ret_get_log(struct lbs_private *priv,
507 508
			    struct cmd_ds_command *resp)
{
509
	struct cmd_ds_802_11_get_log *logmessage = &resp->params.glog;
510
	struct lbs_adapter *adapter = priv->adapter;
511

512
	lbs_deb_enter(LBS_DEB_CMD);
513

514 515
	/* Stored little-endian */
	memcpy(&adapter->logmsg, logmessage, sizeof(struct cmd_ds_802_11_get_log));
516

517
	lbs_deb_leave(LBS_DEB_CMD);
518 519 520
	return 0;
}

521
static int lbs_ret_802_11_enable_rsn(struct lbs_private *priv,
522 523 524
                                          struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_enable_rsn *enable_rsn = &resp->params.enbrsn;
525
	struct lbs_adapter *adapter = priv->adapter;
526 527 528 529
	u32 * pdata_buf = adapter->cur_cmd->pdata_buf;

	lbs_deb_enter(LBS_DEB_CMD);

530
	if (enable_rsn->action == cpu_to_le16(CMD_ACT_GET)) {
531 532 533 534
		if (pdata_buf)
			*pdata_buf = (u32) le16_to_cpu(enable_rsn->enable);
	}

535
	lbs_deb_leave(LBS_DEB_CMD);
536 537 538
	return 0;
}

539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556
static int lbs_ret_802_11_bcn_ctrl(struct lbs_private * priv,
					struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_beacon_control *bcn_ctrl =
	    &resp->params.bcn_ctrl;
	struct lbs_adapter *adapter = priv->adapter;

	lbs_deb_enter(LBS_DEB_CMD);

	if (bcn_ctrl->action == CMD_ACT_GET) {
		adapter->beacon_enable = (u8) le16_to_cpu(bcn_ctrl->beacon_enable);
		adapter->beacon_period = le16_to_cpu(bcn_ctrl->beacon_period);
	}

	lbs_deb_enter(LBS_DEB_CMD);
	return 0;
}

557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576
static int lbs_ret_802_11_subscribe_event(struct lbs_private *priv,
	struct cmd_ds_command *resp)
{
	struct lbs_adapter *adapter = priv->adapter;
	struct cmd_ds_802_11_subscribe_event *cmd_event =
		&resp->params.subscribe_event;
	struct cmd_ds_802_11_subscribe_event *dst_event =
		adapter->cur_cmd->pdata_buf;

	lbs_deb_enter(LBS_DEB_CMD);

	if (dst_event->action == cpu_to_le16(CMD_ACT_GET)) {
		dst_event->events = le16_to_cpu(cmd_event->events);
		memcpy(dst_event->tlv, cmd_event->tlv, sizeof(dst_event->tlv));
	}

	lbs_deb_leave(LBS_DEB_CMD);
	return 0;
}

577 578
static inline int handle_cmd_response(u16 respcmd,
				      struct cmd_ds_command *resp,
579
				      struct lbs_private *priv)
580 581 582
{
	int ret = 0;
	unsigned long flags;
583
	struct lbs_adapter *adapter = priv->adapter;
584

585 586
	lbs_deb_enter(LBS_DEB_HOST);

587
	switch (respcmd) {
588 589 590
	case CMD_RET(CMD_MAC_REG_ACCESS):
	case CMD_RET(CMD_BBP_REG_ACCESS):
	case CMD_RET(CMD_RF_REG_ACCESS):
591
		ret = lbs_ret_reg_access(priv, respcmd, resp);
592 593
		break;

594
	case CMD_RET(CMD_GET_HW_SPEC):
595
		ret = lbs_ret_get_hw_spec(priv, resp);
596 597
		break;

598
	case CMD_RET(CMD_802_11_SCAN):
599
		ret = lbs_ret_80211_scan(priv, resp);
600 601
		break;

602
	case CMD_RET(CMD_802_11_GET_LOG):
603
		ret = lbs_ret_get_log(priv, resp);
604 605
		break;

606
	case CMD_RET_802_11_ASSOCIATE:
607 608
	case CMD_RET(CMD_802_11_ASSOCIATE):
	case CMD_RET(CMD_802_11_REASSOCIATE):
609
		ret = lbs_ret_80211_associate(priv, resp);
610 611
		break;

612 613
	case CMD_RET(CMD_802_11_DISASSOCIATE):
	case CMD_RET(CMD_802_11_DEAUTHENTICATE):
614
		ret = lbs_ret_80211_disassociate(priv, resp);
615 616
		break;

617 618
	case CMD_RET(CMD_802_11_AD_HOC_START):
	case CMD_RET(CMD_802_11_AD_HOC_JOIN):
619
		ret = lbs_ret_80211_ad_hoc_start(priv, resp);
620 621
		break;

622
	case CMD_RET(CMD_802_11_GET_STAT):
623
		ret = lbs_ret_802_11_stat(priv, resp);
624 625
		break;

626
	case CMD_RET(CMD_802_11_SNMP_MIB):
627
		ret = lbs_ret_802_11_snmp_mib(priv, resp);
628 629
		break;

630
	case CMD_RET(CMD_802_11_RF_TX_POWER):
631
		ret = lbs_ret_802_11_rf_tx_power(priv, resp);
632 633
		break;

634 635
	case CMD_RET(CMD_802_11_SET_AFC):
	case CMD_RET(CMD_802_11_GET_AFC):
636
		spin_lock_irqsave(&adapter->driver_lock, flags);
637
		memmove(adapter->cur_cmd->pdata_buf, &resp->params.afc,
638 639 640 641 642
			sizeof(struct cmd_ds_802_11_afc));
		spin_unlock_irqrestore(&adapter->driver_lock, flags);

		break;

643 644 645 646 647 648 649
	case CMD_RET(CMD_MAC_MULTICAST_ADR):
	case CMD_RET(CMD_MAC_CONTROL):
	case CMD_RET(CMD_802_11_SET_WEP):
	case CMD_RET(CMD_802_11_RESET):
	case CMD_RET(CMD_802_11_AUTHENTICATE):
	case CMD_RET(CMD_802_11_RADIO_CONTROL):
	case CMD_RET(CMD_802_11_BEACON_STOP):
650 651
		break;

652
	case CMD_RET(CMD_802_11_ENABLE_RSN):
653
		ret = lbs_ret_802_11_enable_rsn(priv, resp);
654 655
		break;

656
	case CMD_RET(CMD_802_11_DATA_RATE):
657
		ret = lbs_ret_802_11_data_rate(priv, resp);
658
		break;
659
	case CMD_RET(CMD_802_11_RATE_ADAPT_RATESET):
660
		ret = lbs_ret_802_11_rate_adapt_rateset(priv, resp);
661
		break;
662
	case CMD_RET(CMD_802_11_RF_CHANNEL):
663
		ret = lbs_ret_802_11_rf_channel(priv, resp);
664 665
		break;

666
	case CMD_RET(CMD_802_11_RSSI):
667
		ret = lbs_ret_802_11_rssi(priv, resp);
668 669
		break;

670
	case CMD_RET(CMD_802_11_MAC_ADDRESS):
671
		ret = lbs_ret_802_11_mac_address(priv, resp);
672 673
		break;

674
	case CMD_RET(CMD_802_11_AD_HOC_STOP):
675
		ret = lbs_ret_80211_ad_hoc_stop(priv, resp);
676 677
		break;

678
	case CMD_RET(CMD_802_11_KEY_MATERIAL):
679
		ret = lbs_ret_802_11_key_material(priv, resp);
680 681
		break;

682
	case CMD_RET(CMD_802_11_EEPROM_ACCESS):
683
		ret = lbs_ret_802_11_eeprom_access(priv, resp);
684 685
		break;

686
	case CMD_RET(CMD_802_11D_DOMAIN_INFO):
687
		ret = lbs_ret_802_11d_domain_info(priv, resp);
688 689
		break;

690
	case CMD_RET(CMD_802_11_SLEEP_PARAMS):
691
		ret = lbs_ret_802_11_sleep_params(priv, resp);
692
		break;
693
	case CMD_RET(CMD_802_11_INACTIVITY_TIMEOUT):
694 695 696 697 698 699
		spin_lock_irqsave(&adapter->driver_lock, flags);
		*((u16 *) adapter->cur_cmd->pdata_buf) =
		    le16_to_cpu(resp->params.inactivity_timeout.timeout);
		spin_unlock_irqrestore(&adapter->driver_lock, flags);
		break;

700
	case CMD_RET(CMD_802_11_TPC_CFG):
701
		spin_lock_irqsave(&adapter->driver_lock, flags);
702
		memmove(adapter->cur_cmd->pdata_buf, &resp->params.tpccfg,
703 704 705
			sizeof(struct cmd_ds_802_11_tpc_cfg));
		spin_unlock_irqrestore(&adapter->driver_lock, flags);
		break;
706
	case CMD_RET(CMD_802_11_LED_GPIO_CTRL):
707
		spin_lock_irqsave(&adapter->driver_lock, flags);
708
		memmove(adapter->cur_cmd->pdata_buf, &resp->params.ledgpio,
709 710 711
			sizeof(struct cmd_ds_802_11_led_ctrl));
		spin_unlock_irqrestore(&adapter->driver_lock, flags);
		break;
712 713 714 715
	case CMD_RET(CMD_802_11_SUBSCRIBE_EVENT):
		ret = lbs_ret_802_11_subscribe_event(priv, resp);
		break;

716
	case CMD_RET(CMD_802_11_PWR_CFG):
717
		spin_lock_irqsave(&adapter->driver_lock, flags);
718
		memmove(adapter->cur_cmd->pdata_buf, &resp->params.pwrcfg,
719 720 721 722 723
			sizeof(struct cmd_ds_802_11_pwr_cfg));
		spin_unlock_irqrestore(&adapter->driver_lock, flags);

		break;

724
	case CMD_RET(CMD_GET_TSF):
725 726 727 728 729
		spin_lock_irqsave(&adapter->driver_lock, flags);
		memcpy(priv->adapter->cur_cmd->pdata_buf,
		       &resp->params.gettsf.tsfvalue, sizeof(u64));
		spin_unlock_irqrestore(&adapter->driver_lock, flags);
		break;
730
	case CMD_RET(CMD_BT_ACCESS):
731 732 733 734 735 736
		spin_lock_irqsave(&adapter->driver_lock, flags);
		if (adapter->cur_cmd->pdata_buf)
			memcpy(adapter->cur_cmd->pdata_buf,
			       &resp->params.bt.addr1, 2 * ETH_ALEN);
		spin_unlock_irqrestore(&adapter->driver_lock, flags);
		break;
737
	case CMD_RET(CMD_FWT_ACCESS):
738 739
		spin_lock_irqsave(&adapter->driver_lock, flags);
		if (adapter->cur_cmd->pdata_buf)
740 741
			memcpy(adapter->cur_cmd->pdata_buf, &resp->params.fwt,
			       sizeof(resp->params.fwt));
742 743
		spin_unlock_irqrestore(&adapter->driver_lock, flags);
		break;
744
	case CMD_RET(CMD_MESH_ACCESS):
745
		if (adapter->cur_cmd->pdata_buf)
746
			memcpy(adapter->cur_cmd->pdata_buf, &resp->params.mesh,
747 748
			       sizeof(resp->params.mesh));
		break;
749 750 751 752
	case CMD_RET(CMD_802_11_BEACON_CTRL):
		ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
		break;

753
	default:
754
		lbs_deb_host("CMD_RESP: unknown cmd response 0x%04x\n",
755
			    resp->command);
756 757
		break;
	}
758
	lbs_deb_leave(LBS_DEB_HOST);
759 760 761
	return ret;
}

762
int lbs_process_rx_command(struct lbs_private *priv)
763 764 765
{
	u16 respcmd;
	struct cmd_ds_command *resp;
766
	struct lbs_adapter *adapter = priv->adapter;
767 768 769 770
	int ret = 0;
	ulong flags;
	u16 result;

771
	lbs_deb_enter(LBS_DEB_HOST);
772 773 774 775 776 777 778 779

	/* Now we got response from FW, cancel the command timer */
	del_timer(&adapter->command_timer);

	mutex_lock(&adapter->lock);
	spin_lock_irqsave(&adapter->driver_lock, flags);

	if (!adapter->cur_cmd) {
780
		lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
781 782 783 784 785 786 787 788 789
		ret = -1;
		spin_unlock_irqrestore(&adapter->driver_lock, flags);
		goto done;
	}
	resp = (struct cmd_ds_command *)(adapter->cur_cmd->bufvirtualaddr);

	respcmd = le16_to_cpu(resp->command);
	result = le16_to_cpu(resp->result);

790 791 792 793
	lbs_deb_host("CMD_RESP: response 0x%04x, size %d, jiffies %lu\n",
		respcmd, priv->upld_len, jiffies);
	lbs_deb_hex(LBS_DEB_HOST, "CMD_RESP", adapter->cur_cmd->bufvirtualaddr,
		    priv->upld_len);
794 795

	if (!(respcmd & 0x8000)) {
796
		lbs_deb_host("invalid response!\n");
797
		adapter->cur_cmd_retcode = -1;
798
		__lbs_cleanup_and_insert_cmd(priv, adapter->cur_cmd);
799 800 801 802 803 804 805 806
		adapter->nr_cmd_pending--;
		adapter->cur_cmd = NULL;
		spin_unlock_irqrestore(&adapter->driver_lock, flags);
		ret = -1;
		goto done;
	}

	/* Store the response code to cur_cmd_retcode. */
807
	adapter->cur_cmd_retcode = result;;
808

809
	if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
810 811
		struct cmd_ds_802_11_ps_mode *psmode = &resp->params.psmode;
		u16 action = le16_to_cpu(psmode->action);
812

813 814
		lbs_deb_host(
		       "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
815
		       result, action);
816 817

		if (result) {
818
			lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
819 820 821 822
				    result);
			/*
			 * We should not re-try enter-ps command in
			 * ad-hoc mode. It takes place in
823
			 * lbs_execute_next_command().
824 825
			 */
			if (adapter->mode == IW_MODE_ADHOC &&
826
			    action == CMD_SUBCMD_ENTER_PS)
827
				adapter->psmode = LBS802_11POWERMODECAM;
828
		} else if (action == CMD_SUBCMD_ENTER_PS) {
829 830 831
			adapter->needtowakeup = 0;
			adapter->psstate = PS_STATE_AWAKE;

832
			lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
833
			if (adapter->connect_status != LBS_CONNECTED) {
834 835 836 837
				/*
				 * When Deauth Event received before Enter_PS command
				 * response, We need to wake up the firmware.
				 */
838
				lbs_deb_host(
839
				       "disconnected, invoking lbs_ps_wakeup\n");
840 841

				spin_unlock_irqrestore(&adapter->driver_lock, flags);
842
				mutex_unlock(&adapter->lock);
843
				lbs_ps_wakeup(priv, 0);
844 845 846
				mutex_lock(&adapter->lock);
				spin_lock_irqsave(&adapter->driver_lock, flags);
			}
847
		} else if (action == CMD_SUBCMD_EXIT_PS) {
848 849
			adapter->needtowakeup = 0;
			adapter->psstate = PS_STATE_FULL_POWER;
850
			lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
851
		} else {
852
			lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
853 854
		}

855
		__lbs_cleanup_and_insert_cmd(priv, adapter->cur_cmd);
856 857 858 859 860 861 862 863 864 865
		adapter->nr_cmd_pending--;
		adapter->cur_cmd = NULL;
		spin_unlock_irqrestore(&adapter->driver_lock, flags);

		ret = 0;
		goto done;
	}

	if (adapter->cur_cmd->cmdflags & CMD_F_HOSTCMD) {
		/* Copy the response back to response buffer */
866 867
		memcpy(adapter->cur_cmd->pdata_buf, resp,
		       le16_to_cpu(resp->size));
868 869 870 871 872
		adapter->cur_cmd->cmdflags &= ~CMD_F_HOSTCMD;
	}

	/* If the command is not successful, cleanup and return failure */
	if ((result != 0 || !(respcmd & 0x8000))) {
873 874
		lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
		       result, respcmd);
875 876 877 878
		/*
		 * Handling errors here
		 */
		switch (respcmd) {
879 880
		case CMD_RET(CMD_GET_HW_SPEC):
		case CMD_RET(CMD_802_11_RESET):
881
			lbs_deb_host("CMD_RESP: reset failed\n");
882 883 884 885
			break;

		}

886
		__lbs_cleanup_and_insert_cmd(priv, adapter->cur_cmd);
887 888 889 890 891 892 893 894 895 896 897 898 899 900 901
		adapter->nr_cmd_pending--;
		adapter->cur_cmd = NULL;
		spin_unlock_irqrestore(&adapter->driver_lock, flags);

		ret = -1;
		goto done;
	}

	spin_unlock_irqrestore(&adapter->driver_lock, flags);

	ret = handle_cmd_response(respcmd, resp, priv);

	spin_lock_irqsave(&adapter->driver_lock, flags);
	if (adapter->cur_cmd) {
		/* Clean up and Put current command back to cmdfreeq */
902
		__lbs_cleanup_and_insert_cmd(priv, adapter->cur_cmd);
903 904 905 906 907 908 909 910
		adapter->nr_cmd_pending--;
		WARN_ON(adapter->nr_cmd_pending > 128);
		adapter->cur_cmd = NULL;
	}
	spin_unlock_irqrestore(&adapter->driver_lock, flags);

done:
	mutex_unlock(&adapter->lock);
911
	lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
912 913 914
	return ret;
}

915
int lbs_process_event(struct lbs_private *priv)
916 917
{
	int ret = 0;
918
	struct lbs_adapter *adapter = priv->adapter;
919 920
	u32 eventcause;

921 922
	lbs_deb_enter(LBS_DEB_CMD);

923 924 925 926
	spin_lock_irq(&adapter->driver_lock);
	eventcause = adapter->eventcause;
	spin_unlock_irq(&adapter->driver_lock);

927
	lbs_deb_cmd("event cause 0x%x\n", eventcause);
928 929 930

	switch (eventcause >> SBI_EVENT_CAUSE_SHIFT) {
	case MACREG_INT_CODE_LINK_SENSED:
931
		lbs_deb_cmd("EVENT: MACREG_INT_CODE_LINK_SENSED\n");
932 933 934
		break;

	case MACREG_INT_CODE_DEAUTHENTICATED:
935
		lbs_deb_cmd("EVENT: deauthenticated\n");
936
		lbs_mac_event_disconnected(priv);
937 938 939
		break;

	case MACREG_INT_CODE_DISASSOCIATED:
940
		lbs_deb_cmd("EVENT: disassociated\n");
941
		lbs_mac_event_disconnected(priv);
942 943 944
		break;

	case MACREG_INT_CODE_LINK_LOSE_NO_SCAN:
945
		lbs_deb_cmd("EVENT: link lost\n");
946
		lbs_mac_event_disconnected(priv);
947 948 949
		break;

	case MACREG_INT_CODE_PS_SLEEP:
950
		lbs_deb_cmd("EVENT: sleep\n");
951 952 953

		/* handle unexpected PS SLEEP event */
		if (adapter->psstate == PS_STATE_FULL_POWER) {
954
			lbs_deb_cmd(
955
			       "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
956 957 958 959
			break;
		}
		adapter->psstate = PS_STATE_PRE_SLEEP;

960
		lbs_ps_confirm_sleep(priv, (u16) adapter->psmode);
961 962 963 964

		break;

	case MACREG_INT_CODE_PS_AWAKE:
965
		lbs_deb_cmd("EVENT: awake\n");
966 967 968

		/* handle unexpected PS AWAKE event */
		if (adapter->psstate == PS_STATE_FULL_POWER) {
969
			lbs_deb_cmd(
970 971 972 973 974 975 976 977 978 979 980
			       "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
			break;
		}

		adapter->psstate = PS_STATE_AWAKE;

		if (adapter->needtowakeup) {
			/*
			 * wait for the command processing to finish
			 * before resuming sending
			 * adapter->needtowakeup will be set to FALSE
981
			 * in lbs_ps_wakeup()
982
			 */
983
			lbs_deb_cmd("waking up ...\n");
984
			lbs_ps_wakeup(priv, 0);
985 986 987 988
		}
		break;

	case MACREG_INT_CODE_MIC_ERR_UNICAST:
989
		lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
990 991 992 993
		handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_UNICAST);
		break;

	case MACREG_INT_CODE_MIC_ERR_MULTICAST:
994
		lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
995 996 997 998 999 1000 1001
		handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_MULTICAST);
		break;
	case MACREG_INT_CODE_MIB_CHANGED:
	case MACREG_INT_CODE_INIT_DONE:
		break;

	case MACREG_INT_CODE_ADHOC_BCN_LOST:
1002
		lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
1003 1004 1005
		break;

	case MACREG_INT_CODE_RSSI_LOW:
1006
		lbs_pr_alert("EVENT: rssi low\n");
1007 1008
		break;
	case MACREG_INT_CODE_SNR_LOW:
1009
		lbs_pr_alert("EVENT: snr low\n");
1010 1011
		break;
	case MACREG_INT_CODE_MAX_FAIL:
1012
		lbs_pr_alert("EVENT: max fail\n");
1013 1014
		break;
	case MACREG_INT_CODE_RSSI_HIGH:
1015
		lbs_pr_alert("EVENT: rssi high\n");
1016 1017
		break;
	case MACREG_INT_CODE_SNR_HIGH:
1018
		lbs_pr_alert("EVENT: snr high\n");
1019 1020
		break;

1021
	case MACREG_INT_CODE_MESH_AUTO_STARTED:
1022 1023 1024 1025 1026
		/* Ignore spurious autostart events if autostart is disabled */
		if (!priv->mesh_autostart_enabled) {
			lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
			break;
		}
1027
		lbs_pr_info("EVENT: MESH_AUTO_STARTED\n");
1028
		adapter->mesh_connect_status = LBS_CONNECTED;
1029
		if (priv->mesh_open == 1) {
1030 1031
			netif_wake_queue(priv->mesh_dev);
			netif_carrier_on(priv->mesh_dev);
1032
		}
1033
		adapter->mode = IW_MODE_ADHOC;
1034
		schedule_work(&priv->sync_channel);
1035 1036
		break;

1037
	default:
1038
		lbs_pr_alert("EVENT: unknown event id 0x%04x\n",
1039 1040 1041 1042 1043 1044 1045
		       eventcause >> SBI_EVENT_CAUSE_SHIFT);
		break;
	}

	spin_lock_irq(&adapter->driver_lock);
	adapter->eventcause = 0;
	spin_unlock_irq(&adapter->driver_lock);
1046

1047
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1048 1049
	return ret;
}