cmdresp.c 23.8 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
/**
  * This file contains the handling of command
  * responses as well as events generated by firmware.
  */
#include <linux/delay.h>
#include <linux/if_arp.h>
#include <linux/netdevice.h>

#include <net/iw_handler.h>

#include "host.h"
#include "decl.h"
#include "defs.h"
#include "dev.h"
#include "join.h"
#include "wext.h"

/**
 *  @brief This function handles disconnect event. it
 *  reports disconnect to upper layer, clean tx/rx packets,
 *  reset link state etc.
 *
23
 *  @param priv    A pointer to struct lbs_private structure
24 25
 *  @return 	   n/a
 */
26
void lbs_mac_event_disconnected(struct lbs_private *priv)
27 28 29
{
	union iwreq_data wrqu;

30
	if (priv->connect_status != LBS_CONNECTED)
31 32
		return;

33
	lbs_deb_enter(LBS_DEB_ASSOC);
34 35 36 37 38 39 40 41 42 43

	memset(wrqu.ap_addr.sa_data, 0x00, ETH_ALEN);
	wrqu.ap_addr.sa_family = ARPHRD_ETHER;

	/*
	 * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
	 * It causes problem in the Supplicant
	 */

	msleep_interruptible(1000);
44
	wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
45 46

	/* Free Tx and Rx packets */
47 48
	kfree_skb(priv->currenttxskb);
	priv->currenttxskb = NULL;
49 50

	/* report disconnect to upper layer */
51 52
	netif_stop_queue(priv->dev);
	netif_carrier_off(priv->dev);
53 54

	/* reset SNR/NF/RSSI values */
55 56 57 58 59 60 61 62
	memset(priv->SNR, 0x00, sizeof(priv->SNR));
	memset(priv->NF, 0x00, sizeof(priv->NF));
	memset(priv->RSSI, 0x00, sizeof(priv->RSSI));
	memset(priv->rawSNR, 0x00, sizeof(priv->rawSNR));
	memset(priv->rawNF, 0x00, sizeof(priv->rawNF));
	priv->nextSNRNF = 0;
	priv->numSNRNF = 0;
	priv->connect_status = LBS_DISCONNECTED;
63

64 65 66
	/* Clear out associated SSID and BSSID since connection is
	 * no longer valid.
	 */
67 68 69
	memset(&priv->curbssparams.bssid, 0, ETH_ALEN);
	memset(&priv->curbssparams.ssid, 0, IW_ESSID_MAX_SIZE);
	priv->curbssparams.ssid_len = 0;
70

71
	if (priv->psstate != PS_STATE_FULL_POWER) {
72
		/* make firmware to exit PS mode */
73
		lbs_deb_cmd("disconnected, so exit PS mode\n");
74
		lbs_ps_wakeup(priv, 0);
75
	}
76
	lbs_deb_leave(LBS_DEB_CMD);
77 78 79 80 81
}

/**
 *  @brief This function handles MIC failure event.
 *
82
 *  @param priv    A pointer to struct lbs_private structure
83 84 85
 *  @para  event   the event id
 *  @return 	   n/a
 */
86
static void handle_mic_failureevent(struct lbs_private *priv, u32 event)
87 88 89
{
	char buf[50];

90
	lbs_deb_enter(LBS_DEB_CMD);
91 92 93 94 95 96 97 98 99 100
	memset(buf, 0, sizeof(buf));

	sprintf(buf, "%s", "MLME-MICHAELMICFAILURE.indication ");

	if (event == MACREG_INT_CODE_MIC_ERR_UNICAST) {
		strcat(buf, "unicast ");
	} else {
		strcat(buf, "multicast ");
	}

101
	lbs_send_iwevcustom_event(priv, buf);
102
	lbs_deb_leave(LBS_DEB_CMD);
103 104
}

105
static int lbs_ret_reg_access(struct lbs_private *priv,
106 107
			       u16 type, struct cmd_ds_command *resp)
{
108
	int ret = 0;
109

110
	lbs_deb_enter(LBS_DEB_CMD);
111 112

	switch (type) {
113
	case CMD_RET(CMD_MAC_REG_ACCESS):
114
		{
115
			struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
116

117 118
			priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
			priv->offsetvalue.value = le32_to_cpu(reg->value);
119 120 121
			break;
		}

122
	case CMD_RET(CMD_BBP_REG_ACCESS):
123
		{
124
			struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
125

126 127
			priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
			priv->offsetvalue.value = reg->value;
128 129 130
			break;
		}

131
	case CMD_RET(CMD_RF_REG_ACCESS):
132
		{
133
			struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
134

135 136
			priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
			priv->offsetvalue.value = reg->value;
137 138 139 140
			break;
		}

	default:
141
		ret = -1;
142 143
	}

144
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
145
	return ret;
146 147
}

148
static int lbs_ret_802_11_sleep_params(struct lbs_private *priv,
149 150 151 152
					struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_sleep_params *sp = &resp->params.sleep_params;

153
	lbs_deb_enter(LBS_DEB_CMD);
154

155 156
	lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, calcontrol 0x%x "
		    "extsleepclk 0x%x\n", le16_to_cpu(sp->error),
157 158 159
		    le16_to_cpu(sp->offset), le16_to_cpu(sp->stabletime),
		    sp->calcontrol, sp->externalsleepclk);

160 161 162 163 164 165
	priv->sp.sp_error = le16_to_cpu(sp->error);
	priv->sp.sp_offset = le16_to_cpu(sp->offset);
	priv->sp.sp_stabletime = le16_to_cpu(sp->stabletime);
	priv->sp.sp_calcontrol = sp->calcontrol;
	priv->sp.sp_extsleepclk = sp->externalsleepclk;
	priv->sp.sp_reserved = le16_to_cpu(sp->reserved);
166

167
	lbs_deb_enter(LBS_DEB_CMD);
168 169 170
	return 0;
}

171
static int lbs_ret_802_11_stat(struct lbs_private *priv,
172 173
				struct cmd_ds_command *resp)
{
174
	lbs_deb_enter(LBS_DEB_CMD);
175
/*	currently priv->wlan802_11Stat is unused
176 177 178 179

	struct cmd_ds_802_11_get_stat *p11Stat = &resp->params.gstat;

	// TODO Convert it to Big endian befor copy
180
	memcpy(&priv->wlan802_11Stat,
181 182
	       p11Stat, sizeof(struct cmd_ds_802_11_get_stat));
*/
183
	lbs_deb_leave(LBS_DEB_CMD);
184 185 186
	return 0;
}

187
static int lbs_ret_802_11_snmp_mib(struct lbs_private *priv,
188 189 190 191 192 193
				    struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_snmp_mib *smib = &resp->params.smib;
	u16 oid = le16_to_cpu(smib->oid);
	u16 querytype = le16_to_cpu(smib->querytype);

194
	lbs_deb_enter(LBS_DEB_CMD);
195

196
	lbs_deb_cmd("SNMP_RESP: oid 0x%x, querytype 0x%x\n", oid,
197
	       querytype);
198
	lbs_deb_cmd("SNMP_RESP: Buf size %d\n", le16_to_cpu(smib->bufsize));
199

200
	if (querytype == CMD_ACT_GET) {
201
		switch (oid) {
202
		case FRAGTHRESH_I:
203
			priv->fragthsd =
204
				le16_to_cpu(*((__le16 *)(smib->value)));
205
			lbs_deb_cmd("SNMP_RESP: frag threshold %u\n",
206
				    priv->fragthsd);
207
			break;
208
		case RTSTHRESH_I:
209
			priv->rtsthsd =
210
				le16_to_cpu(*((__le16 *)(smib->value)));
211
			lbs_deb_cmd("SNMP_RESP: rts threshold %u\n",
212
				    priv->rtsthsd);
213
			break;
214
		case SHORT_RETRYLIM_I:
215
			priv->txretrycount =
216
				le16_to_cpu(*((__le16 *)(smib->value)));
217
			lbs_deb_cmd("SNMP_RESP: tx retry count %u\n",
218
				    priv->rtsthsd);
219 220 221 222 223 224
			break;
		default:
			break;
		}
	}

225
	lbs_deb_enter(LBS_DEB_CMD);
226 227 228
	return 0;
}

229
static int lbs_ret_802_11_key_material(struct lbs_private *priv,
230 231 232 233 234 235
					struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_key_material *pkeymaterial =
	    &resp->params.keymaterial;
	u16 action = le16_to_cpu(pkeymaterial->action);

236
	lbs_deb_enter(LBS_DEB_CMD);
237 238

	/* Copy the returned key to driver private data */
239
	if (action == CMD_ACT_GET) {
240 241 242 243 244 245
		u8 * buf_ptr = (u8 *) &pkeymaterial->keyParamSet;
		u8 * resp_end = (u8 *) (resp + le16_to_cpu(resp->size));

		while (buf_ptr < resp_end) {
			struct MrvlIEtype_keyParamSet * pkeyparamset =
			    (struct MrvlIEtype_keyParamSet *) buf_ptr;
246
			struct enc_key * pkey;
247 248
			u16 param_set_len = le16_to_cpu(pkeyparamset->length);
			u16 key_len = le16_to_cpu(pkeyparamset->keylen);
249 250 251
			u16 key_flags = le16_to_cpu(pkeyparamset->keyinfo);
			u16 key_type = le16_to_cpu(pkeyparamset->keytypeid);
			u8 * end;
252 253 254 255 256 257 258 259

			end = (u8 *) pkeyparamset + sizeof (pkeyparamset->type)
			                          + sizeof (pkeyparamset->length)
			                          + param_set_len;
			/* Make sure we don't access past the end of the IEs */
			if (end > resp_end)
				break;

260
			if (key_flags & KEY_INFO_WPA_UNICAST)
261
				pkey = &priv->wpa_unicast_key;
262
			else if (key_flags & KEY_INFO_WPA_MCAST)
263
				pkey = &priv->wpa_mcast_key;
264 265 266 267
			else
				break;

			/* Copy returned key into driver */
268
			memset(pkey, 0, sizeof(struct enc_key));
269 270
			if (key_len > sizeof(pkey->key))
				break;
271 272 273
			pkey->type = key_type;
			pkey->flags = key_flags;
			pkey->len = key_len;
274 275 276 277 278 279
			memcpy(pkey->key, pkeyparamset->key, pkey->len);

			buf_ptr = end + 1;
		}
	}

280
	lbs_deb_enter(LBS_DEB_CMD);
281 282 283
	return 0;
}

284
static int lbs_ret_802_11_mac_address(struct lbs_private *priv,
285 286 287 288
				       struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_mac_address *macadd = &resp->params.macadd;

289
	lbs_deb_enter(LBS_DEB_CMD);
290

291
	memcpy(priv->current_addr, macadd->macadd, ETH_ALEN);
292

293
	lbs_deb_enter(LBS_DEB_CMD);
294 295 296
	return 0;
}

297
static int lbs_ret_802_11_rf_tx_power(struct lbs_private *priv,
298 299 300 301
				       struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_rf_tx_power *rtp = &resp->params.txp;

302
	lbs_deb_enter(LBS_DEB_CMD);
303

304
	priv->txpowerlevel = le16_to_cpu(rtp->currentlevel);
305

306
	lbs_deb_cmd("TX power currently %d\n", priv->txpowerlevel);
307

308
	lbs_deb_leave(LBS_DEB_CMD);
309 310 311
	return 0;
}

312
static int lbs_ret_802_11_rate_adapt_rateset(struct lbs_private *priv,
313 314
					      struct cmd_ds_command *resp)
{
315
	struct cmd_ds_802_11_rate_adapt_rateset *rates = &resp->params.rateset;
316

317
	lbs_deb_enter(LBS_DEB_CMD);
318

319
	if (rates->action == CMD_ACT_GET) {
320 321
		priv->enablehwauto = le16_to_cpu(rates->enablehwauto);
		priv->ratebitmap = le16_to_cpu(rates->bitmap);
322 323
	}

324
	lbs_deb_leave(LBS_DEB_CMD);
325 326 327
	return 0;
}

328
static int lbs_ret_802_11_rssi(struct lbs_private *priv,
329 330 331 332
				struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_rssi_rsp *rssirsp = &resp->params.rssirsp;

333 334
	lbs_deb_enter(LBS_DEB_CMD);

335
	/* store the non average value */
336 337
	priv->SNR[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->SNR);
	priv->NF[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->noisefloor);
338

339 340
	priv->SNR[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgSNR);
	priv->NF[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgnoisefloor);
341

342 343 344
	priv->RSSI[TYPE_BEACON][TYPE_NOAVG] =
	    CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_NOAVG],
		     priv->NF[TYPE_BEACON][TYPE_NOAVG]);
345

346 347 348
	priv->RSSI[TYPE_BEACON][TYPE_AVG] =
	    CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_AVG] / AVG_SCALE,
		     priv->NF[TYPE_BEACON][TYPE_AVG] / AVG_SCALE);
349

350
	lbs_deb_cmd("RSSI: beacon %d, avg %d\n",
351 352
	       priv->RSSI[TYPE_BEACON][TYPE_NOAVG],
	       priv->RSSI[TYPE_BEACON][TYPE_AVG]);
353

354
	lbs_deb_leave(LBS_DEB_CMD);
355 356 357
	return 0;
}

358
static int lbs_ret_802_11_eeprom_access(struct lbs_private *priv,
359 360
				  struct cmd_ds_command *resp)
{
361
	struct lbs_ioctl_regrdwr *pbuf;
362
	pbuf = (struct lbs_ioctl_regrdwr *) priv->prdeeprom;
363

364
	lbs_deb_enter_args(LBS_DEB_CMD, "len %d",
365 366 367
	       le16_to_cpu(resp->params.rdeeprom.bytecount));
	if (pbuf->NOB < le16_to_cpu(resp->params.rdeeprom.bytecount)) {
		pbuf->NOB = 0;
368
		lbs_deb_cmd("EEPROM read length too big\n");
369 370 371 372 373 374 375
		return -1;
	}
	pbuf->NOB = le16_to_cpu(resp->params.rdeeprom.bytecount);
	if (pbuf->NOB > 0) {

		memcpy(&pbuf->value, (u8 *) & resp->params.rdeeprom.value,
		       le16_to_cpu(resp->params.rdeeprom.bytecount));
376
		lbs_deb_hex(LBS_DEB_CMD, "EEPROM", (char *)&pbuf->value,
377 378
			le16_to_cpu(resp->params.rdeeprom.bytecount));
	}
379
	lbs_deb_leave(LBS_DEB_CMD);
380 381 382
	return 0;
}

383
static int lbs_ret_get_log(struct lbs_private *priv,
384 385
			    struct cmd_ds_command *resp)
{
386
	struct cmd_ds_802_11_get_log *logmessage = &resp->params.glog;
387

388
	lbs_deb_enter(LBS_DEB_CMD);
389

390
	/* Stored little-endian */
391
	memcpy(&priv->logmsg, logmessage, sizeof(struct cmd_ds_802_11_get_log));
392

393
	lbs_deb_leave(LBS_DEB_CMD);
394 395 396
	return 0;
}

397
static int lbs_ret_802_11_enable_rsn(struct lbs_private *priv,
398 399 400
                                          struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_enable_rsn *enable_rsn = &resp->params.enbrsn;
401
	u32 * pdata_buf = priv->cur_cmd->pdata_buf;
402 403 404

	lbs_deb_enter(LBS_DEB_CMD);

405
	if (enable_rsn->action == cpu_to_le16(CMD_ACT_GET)) {
406 407 408 409
		if (pdata_buf)
			*pdata_buf = (u32) le16_to_cpu(enable_rsn->enable);
	}

410
	lbs_deb_leave(LBS_DEB_CMD);
411 412 413
	return 0;
}

414 415 416 417 418 419 420 421 422
static int lbs_ret_802_11_bcn_ctrl(struct lbs_private * priv,
					struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_beacon_control *bcn_ctrl =
	    &resp->params.bcn_ctrl;

	lbs_deb_enter(LBS_DEB_CMD);

	if (bcn_ctrl->action == CMD_ACT_GET) {
423 424
		priv->beacon_enable = (u8) le16_to_cpu(bcn_ctrl->beacon_enable);
		priv->beacon_period = le16_to_cpu(bcn_ctrl->beacon_period);
425 426 427 428 429 430
	}

	lbs_deb_enter(LBS_DEB_CMD);
	return 0;
}

431 432 433 434 435 436
static int lbs_ret_802_11_subscribe_event(struct lbs_private *priv,
	struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_subscribe_event *cmd_event =
		&resp->params.subscribe_event;
	struct cmd_ds_802_11_subscribe_event *dst_event =
437
		priv->cur_cmd->pdata_buf;
438 439 440 441

	lbs_deb_enter(LBS_DEB_CMD);

	if (dst_event->action == cpu_to_le16(CMD_ACT_GET)) {
H
Holger Schurig 已提交
442
		dst_event->events = cmd_event->events;
443 444 445 446 447 448 449
		memcpy(dst_event->tlv, cmd_event->tlv, sizeof(dst_event->tlv));
	}

	lbs_deb_leave(LBS_DEB_CMD);
	return 0;
}

450 451
static inline int handle_cmd_response(struct lbs_private *priv,
				      unsigned long dummy,
452
				      struct cmd_header *cmd_response)
453
{
454
	struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
455 456
	int ret = 0;
	unsigned long flags;
457
	uint16_t respcmd = le16_to_cpu(resp->command);
458

459 460
	lbs_deb_enter(LBS_DEB_HOST);

461
	switch (respcmd) {
462 463 464
	case CMD_RET(CMD_MAC_REG_ACCESS):
	case CMD_RET(CMD_BBP_REG_ACCESS):
	case CMD_RET(CMD_RF_REG_ACCESS):
465
		ret = lbs_ret_reg_access(priv, respcmd, resp);
466 467
		break;

468
	case CMD_RET(CMD_802_11_SCAN):
469
		ret = lbs_ret_80211_scan(priv, resp);
470 471
		break;

472
	case CMD_RET(CMD_802_11_GET_LOG):
473
		ret = lbs_ret_get_log(priv, resp);
474 475
		break;

476
	case CMD_RET_802_11_ASSOCIATE:
477 478
	case CMD_RET(CMD_802_11_ASSOCIATE):
	case CMD_RET(CMD_802_11_REASSOCIATE):
479
		ret = lbs_ret_80211_associate(priv, resp);
480 481
		break;

482 483
	case CMD_RET(CMD_802_11_DISASSOCIATE):
	case CMD_RET(CMD_802_11_DEAUTHENTICATE):
484
		ret = lbs_ret_80211_disassociate(priv, resp);
485 486
		break;

487 488
	case CMD_RET(CMD_802_11_AD_HOC_START):
	case CMD_RET(CMD_802_11_AD_HOC_JOIN):
489
		ret = lbs_ret_80211_ad_hoc_start(priv, resp);
490 491
		break;

492
	case CMD_RET(CMD_802_11_GET_STAT):
493
		ret = lbs_ret_802_11_stat(priv, resp);
494 495
		break;

496
	case CMD_RET(CMD_802_11_SNMP_MIB):
497
		ret = lbs_ret_802_11_snmp_mib(priv, resp);
498 499
		break;

500
	case CMD_RET(CMD_802_11_RF_TX_POWER):
501
		ret = lbs_ret_802_11_rf_tx_power(priv, resp);
502 503
		break;

504 505
	case CMD_RET(CMD_802_11_SET_AFC):
	case CMD_RET(CMD_802_11_GET_AFC):
506 507
		spin_lock_irqsave(&priv->driver_lock, flags);
		memmove(priv->cur_cmd->pdata_buf, &resp->params.afc,
508
			sizeof(struct cmd_ds_802_11_afc));
509
		spin_unlock_irqrestore(&priv->driver_lock, flags);
510 511 512

		break;

513 514 515 516 517 518 519
	case CMD_RET(CMD_MAC_MULTICAST_ADR):
	case CMD_RET(CMD_MAC_CONTROL):
	case CMD_RET(CMD_802_11_SET_WEP):
	case CMD_RET(CMD_802_11_RESET):
	case CMD_RET(CMD_802_11_AUTHENTICATE):
	case CMD_RET(CMD_802_11_RADIO_CONTROL):
	case CMD_RET(CMD_802_11_BEACON_STOP):
520 521
		break;

522
	case CMD_RET(CMD_802_11_ENABLE_RSN):
523
		ret = lbs_ret_802_11_enable_rsn(priv, resp);
524 525
		break;

526
	case CMD_RET(CMD_802_11_RATE_ADAPT_RATESET):
527
		ret = lbs_ret_802_11_rate_adapt_rateset(priv, resp);
528 529
		break;

530
	case CMD_RET(CMD_802_11_RSSI):
531
		ret = lbs_ret_802_11_rssi(priv, resp);
532 533
		break;

534
	case CMD_RET(CMD_802_11_MAC_ADDRESS):
535
		ret = lbs_ret_802_11_mac_address(priv, resp);
536 537
		break;

538
	case CMD_RET(CMD_802_11_AD_HOC_STOP):
539
		ret = lbs_ret_80211_ad_hoc_stop(priv, resp);
540 541
		break;

542
	case CMD_RET(CMD_802_11_KEY_MATERIAL):
543
		ret = lbs_ret_802_11_key_material(priv, resp);
544 545
		break;

546
	case CMD_RET(CMD_802_11_EEPROM_ACCESS):
547
		ret = lbs_ret_802_11_eeprom_access(priv, resp);
548 549
		break;

550
	case CMD_RET(CMD_802_11D_DOMAIN_INFO):
551
		ret = lbs_ret_802_11d_domain_info(priv, resp);
552 553
		break;

554
	case CMD_RET(CMD_802_11_SLEEP_PARAMS):
555
		ret = lbs_ret_802_11_sleep_params(priv, resp);
556
		break;
557
	case CMD_RET(CMD_802_11_INACTIVITY_TIMEOUT):
558 559
		spin_lock_irqsave(&priv->driver_lock, flags);
		*((u16 *) priv->cur_cmd->pdata_buf) =
560
		    le16_to_cpu(resp->params.inactivity_timeout.timeout);
561
		spin_unlock_irqrestore(&priv->driver_lock, flags);
562 563
		break;

564
	case CMD_RET(CMD_802_11_TPC_CFG):
565 566
		spin_lock_irqsave(&priv->driver_lock, flags);
		memmove(priv->cur_cmd->pdata_buf, &resp->params.tpccfg,
567
			sizeof(struct cmd_ds_802_11_tpc_cfg));
568
		spin_unlock_irqrestore(&priv->driver_lock, flags);
569
		break;
570
	case CMD_RET(CMD_802_11_LED_GPIO_CTRL):
571 572
		spin_lock_irqsave(&priv->driver_lock, flags);
		memmove(priv->cur_cmd->pdata_buf, &resp->params.ledgpio,
573
			sizeof(struct cmd_ds_802_11_led_ctrl));
574
		spin_unlock_irqrestore(&priv->driver_lock, flags);
575
		break;
576 577 578 579
	case CMD_RET(CMD_802_11_SUBSCRIBE_EVENT):
		ret = lbs_ret_802_11_subscribe_event(priv, resp);
		break;

580
	case CMD_RET(CMD_802_11_PWR_CFG):
581 582
		spin_lock_irqsave(&priv->driver_lock, flags);
		memmove(priv->cur_cmd->pdata_buf, &resp->params.pwrcfg,
583
			sizeof(struct cmd_ds_802_11_pwr_cfg));
584
		spin_unlock_irqrestore(&priv->driver_lock, flags);
585 586 587

		break;

588
	case CMD_RET(CMD_GET_TSF):
589 590
		spin_lock_irqsave(&priv->driver_lock, flags);
		memcpy(priv->cur_cmd->pdata_buf,
591
		       &resp->params.gettsf.tsfvalue, sizeof(u64));
592
		spin_unlock_irqrestore(&priv->driver_lock, flags);
593
		break;
594
	case CMD_RET(CMD_BT_ACCESS):
595 596 597
		spin_lock_irqsave(&priv->driver_lock, flags);
		if (priv->cur_cmd->pdata_buf)
			memcpy(priv->cur_cmd->pdata_buf,
598
			       &resp->params.bt.addr1, 2 * ETH_ALEN);
599
		spin_unlock_irqrestore(&priv->driver_lock, flags);
600
		break;
601
	case CMD_RET(CMD_FWT_ACCESS):
602 603 604
		spin_lock_irqsave(&priv->driver_lock, flags);
		if (priv->cur_cmd->pdata_buf)
			memcpy(priv->cur_cmd->pdata_buf, &resp->params.fwt,
605
			       sizeof(resp->params.fwt));
606
		spin_unlock_irqrestore(&priv->driver_lock, flags);
607
		break;
608 609 610 611
	case CMD_RET(CMD_802_11_BEACON_CTRL):
		ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
		break;

612
	default:
613
		lbs_deb_host("CMD_RESP: unknown cmd response 0x%04x\n",
614
			     le16_to_cpu(resp->command));
615 616
		break;
	}
617
	lbs_deb_leave(LBS_DEB_HOST);
618 619 620
	return ret;
}

621
int lbs_process_rx_command(struct lbs_private *priv)
622
{
623
	uint16_t respcmd, curcmd;
624
	struct cmd_header *resp;
625
	int ret = 0;
626 627
	unsigned long flags;
	uint16_t result;
628

629
	lbs_deb_enter(LBS_DEB_HOST);
630

631 632
	mutex_lock(&priv->lock);
	spin_lock_irqsave(&priv->driver_lock, flags);
633

634
	if (!priv->cur_cmd) {
635
		lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
636
		ret = -1;
637
		spin_unlock_irqrestore(&priv->driver_lock, flags);
638 639
		goto done;
	}
640 641 642

	curcmd = le16_to_cpu(priv->cur_cmd->cmdbuf->command);

643
	resp = priv->cur_cmd->cmdbuf;
644 645 646 647

	respcmd = le16_to_cpu(resp->command);
	result = le16_to_cpu(resp->result);

648 649
	lbs_deb_host("CMD_RESP: response 0x%04x, seq %d, size %d, jiffies %lu\n",
		     respcmd, le16_to_cpu(resp->seqnum), priv->upld_len, jiffies);
650
	lbs_deb_hex(LBS_DEB_HOST, "CMD_RESP", (void *) resp, priv->upld_len);
651

652 653 654
	if (resp->seqnum != priv->cur_cmd->cmdbuf->seqnum) {
		lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
			    le16_to_cpu(resp->seqnum), le16_to_cpu(priv->cur_cmd->cmdbuf->seqnum));
655
		spin_unlock_irqrestore(&priv->driver_lock, flags);
656 657 658
		ret = -1;
		goto done;
	}
659 660 661 662 663 664 665 666 667 668
	if (respcmd != CMD_RET(curcmd) &&
	    respcmd != CMD_802_11_ASSOCIATE && curcmd != CMD_RET_802_11_ASSOCIATE) {
		lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd, curcmd);
		spin_unlock_irqrestore(&priv->driver_lock, flags);
		ret = -1;
		goto done;
	}

	/* Now we got response from FW, cancel the command timer */
	del_timer(&priv->command_timer);
669 670

	/* Store the response code to cur_cmd_retcode. */
671
	priv->cur_cmd_retcode = result;
672

673
	if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
674
		struct cmd_ds_802_11_ps_mode *psmode = (void *) resp;
675
		u16 action = le16_to_cpu(psmode->action);
676

677 678
		lbs_deb_host(
		       "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
679
		       result, action);
680 681

		if (result) {
682
			lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
683 684 685 686
				    result);
			/*
			 * We should not re-try enter-ps command in
			 * ad-hoc mode. It takes place in
687
			 * lbs_execute_next_command().
688
			 */
689
			if (priv->mode == IW_MODE_ADHOC &&
690
			    action == CMD_SUBCMD_ENTER_PS)
691
				priv->psmode = LBS802_11POWERMODECAM;
692
		} else if (action == CMD_SUBCMD_ENTER_PS) {
693 694
			priv->needtowakeup = 0;
			priv->psstate = PS_STATE_AWAKE;
695

696
			lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
697
			if (priv->connect_status != LBS_CONNECTED) {
698 699 700 701
				/*
				 * When Deauth Event received before Enter_PS command
				 * response, We need to wake up the firmware.
				 */
702
				lbs_deb_host(
703
				       "disconnected, invoking lbs_ps_wakeup\n");
704

705 706
				spin_unlock_irqrestore(&priv->driver_lock, flags);
				mutex_unlock(&priv->lock);
707
				lbs_ps_wakeup(priv, 0);
708 709
				mutex_lock(&priv->lock);
				spin_lock_irqsave(&priv->driver_lock, flags);
710
			}
711
		} else if (action == CMD_SUBCMD_EXIT_PS) {
712 713
			priv->needtowakeup = 0;
			priv->psstate = PS_STATE_FULL_POWER;
714
			lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
715
		} else {
716
			lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
717 718
		}

719 720 721
		__lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
		priv->cur_cmd = NULL;
		spin_unlock_irqrestore(&priv->driver_lock, flags);
722 723 724 725 726 727 728

		ret = 0;
		goto done;
	}

	/* If the command is not successful, cleanup and return failure */
	if ((result != 0 || !(respcmd & 0x8000))) {
729 730
		lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
		       result, respcmd);
731 732 733 734
		/*
		 * Handling errors here
		 */
		switch (respcmd) {
735 736
		case CMD_RET(CMD_GET_HW_SPEC):
		case CMD_RET(CMD_802_11_RESET):
737
			lbs_deb_host("CMD_RESP: reset failed\n");
738 739 740 741
			break;

		}

742 743 744
		__lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
		priv->cur_cmd = NULL;
		spin_unlock_irqrestore(&priv->driver_lock, flags);
745 746 747 748 749

		ret = -1;
		goto done;
	}

750
	spin_unlock_irqrestore(&priv->driver_lock, flags);
751

752 753
	if (priv->cur_cmd && priv->cur_cmd->callback) {
		ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
754
				resp);
755
	} else
756
		ret = handle_cmd_response(priv, 0, resp);
757

758
	spin_lock_irqsave(&priv->driver_lock, flags);
759

760
	if (priv->cur_cmd) {
761
		/* Clean up and Put current command back to cmdfreeq */
762 763
		__lbs_cleanup_and_insert_cmd(priv, priv->cur_cmd);
		priv->cur_cmd = NULL;
764
	}
765
	spin_unlock_irqrestore(&priv->driver_lock, flags);
766 767

done:
768
	mutex_unlock(&priv->lock);
769
	lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
770 771 772
	return ret;
}

773
int lbs_process_event(struct lbs_private *priv)
774 775 776 777
{
	int ret = 0;
	u32 eventcause;

778 779
	lbs_deb_enter(LBS_DEB_CMD);

780 781 782
	spin_lock_irq(&priv->driver_lock);
	eventcause = priv->eventcause >> SBI_EVENT_CAUSE_SHIFT;
	spin_unlock_irq(&priv->driver_lock);
783

784
	lbs_deb_cmd("event cause %d\n", eventcause);
785

786
	switch (eventcause) {
787
	case MACREG_INT_CODE_LINK_SENSED:
788
		lbs_deb_cmd("EVENT: MACREG_INT_CODE_LINK_SENSED\n");
789 790 791
		break;

	case MACREG_INT_CODE_DEAUTHENTICATED:
792
		lbs_deb_cmd("EVENT: deauthenticated\n");
793
		lbs_mac_event_disconnected(priv);
794 795 796
		break;

	case MACREG_INT_CODE_DISASSOCIATED:
797
		lbs_deb_cmd("EVENT: disassociated\n");
798
		lbs_mac_event_disconnected(priv);
799 800
		break;

801
	case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
802
		lbs_deb_cmd("EVENT: link lost\n");
803
		lbs_mac_event_disconnected(priv);
804 805 806
		break;

	case MACREG_INT_CODE_PS_SLEEP:
807
		lbs_deb_cmd("EVENT: sleep\n");
808 809

		/* handle unexpected PS SLEEP event */
810
		if (priv->psstate == PS_STATE_FULL_POWER) {
811
			lbs_deb_cmd(
812
			       "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
813 814
			break;
		}
815
		priv->psstate = PS_STATE_PRE_SLEEP;
816

817
		lbs_ps_confirm_sleep(priv, (u16) priv->psmode);
818 819 820 821

		break;

	case MACREG_INT_CODE_PS_AWAKE:
822
		lbs_deb_cmd("EVENT: awake\n");
823 824

		/* handle unexpected PS AWAKE event */
825
		if (priv->psstate == PS_STATE_FULL_POWER) {
826
			lbs_deb_cmd(
827 828 829 830
			       "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
			break;
		}

831
		priv->psstate = PS_STATE_AWAKE;
832

833
		if (priv->needtowakeup) {
834 835 836
			/*
			 * wait for the command processing to finish
			 * before resuming sending
837
			 * priv->needtowakeup will be set to FALSE
838
			 * in lbs_ps_wakeup()
839
			 */
840
			lbs_deb_cmd("waking up ...\n");
841
			lbs_ps_wakeup(priv, 0);
842 843 844 845
		}
		break;

	case MACREG_INT_CODE_MIC_ERR_UNICAST:
846
		lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
847 848 849 850
		handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_UNICAST);
		break;

	case MACREG_INT_CODE_MIC_ERR_MULTICAST:
851
		lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
852 853 854 855 856 857 858
		handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_MULTICAST);
		break;
	case MACREG_INT_CODE_MIB_CHANGED:
	case MACREG_INT_CODE_INIT_DONE:
		break;

	case MACREG_INT_CODE_ADHOC_BCN_LOST:
859
		lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
860 861 862
		break;

	case MACREG_INT_CODE_RSSI_LOW:
863
		lbs_pr_alert("EVENT: rssi low\n");
864 865
		break;
	case MACREG_INT_CODE_SNR_LOW:
866
		lbs_pr_alert("EVENT: snr low\n");
867 868
		break;
	case MACREG_INT_CODE_MAX_FAIL:
869
		lbs_pr_alert("EVENT: max fail\n");
870 871
		break;
	case MACREG_INT_CODE_RSSI_HIGH:
872
		lbs_pr_alert("EVENT: rssi high\n");
873 874
		break;
	case MACREG_INT_CODE_SNR_HIGH:
875
		lbs_pr_alert("EVENT: snr high\n");
876 877
		break;

878
	case MACREG_INT_CODE_MESH_AUTO_STARTED:
879 880 881 882 883
		/* Ignore spurious autostart events if autostart is disabled */
		if (!priv->mesh_autostart_enabled) {
			lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
			break;
		}
884
		lbs_pr_info("EVENT: MESH_AUTO_STARTED\n");
885
		priv->mesh_connect_status = LBS_CONNECTED;
886
		if (priv->mesh_open == 1) {
887 888
			netif_wake_queue(priv->mesh_dev);
			netif_carrier_on(priv->mesh_dev);
889
		}
890
		priv->mode = IW_MODE_ADHOC;
891
		schedule_work(&priv->sync_channel);
892 893
		break;

894
	default:
895
		lbs_pr_alert("EVENT: unknown event id %d\n", eventcause);
896 897 898
		break;
	}

899 900 901
	spin_lock_irq(&priv->driver_lock);
	priv->eventcause = 0;
	spin_unlock_irq(&priv->driver_lock);
902

903
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
904 905
	return ret;
}