cmdresp.c 22.8 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
/**
  * This file contains the handling of command
  * responses as well as events generated by firmware.
  */
#include <linux/delay.h>
#include <linux/if_arp.h>
#include <linux/netdevice.h>

#include <net/iw_handler.h>

#include "host.h"
#include "decl.h"
#include "defs.h"
#include "dev.h"
#include "join.h"
#include "wext.h"

/**
 *  @brief This function handles disconnect event. it
 *  reports disconnect to upper layer, clean tx/rx packets,
 *  reset link state etc.
 *
23
 *  @param priv    A pointer to struct lbs_private structure
24 25
 *  @return 	   n/a
 */
26
void lbs_mac_event_disconnected(struct lbs_private *priv)
27 28 29
{
	union iwreq_data wrqu;

30
	if (priv->connect_status != LBS_CONNECTED)
31 32
		return;

33
	lbs_deb_enter(LBS_DEB_ASSOC);
34 35 36 37 38 39 40 41 42 43

	memset(wrqu.ap_addr.sa_data, 0x00, ETH_ALEN);
	wrqu.ap_addr.sa_family = ARPHRD_ETHER;

	/*
	 * Cisco AP sends EAP failure and de-auth in less than 0.5 ms.
	 * It causes problem in the Supplicant
	 */

	msleep_interruptible(1000);
44
	wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);
45 46

	/* report disconnect to upper layer */
47 48
	netif_stop_queue(priv->dev);
	netif_carrier_off(priv->dev);
49

50 51 52 53 54
	/* Free Tx and Rx packets */
	kfree_skb(priv->currenttxskb);
	priv->currenttxskb = NULL;
	priv->tx_pending_len = 0;

55
	/* reset SNR/NF/RSSI values */
56 57 58 59 60 61 62 63
	memset(priv->SNR, 0x00, sizeof(priv->SNR));
	memset(priv->NF, 0x00, sizeof(priv->NF));
	memset(priv->RSSI, 0x00, sizeof(priv->RSSI));
	memset(priv->rawSNR, 0x00, sizeof(priv->rawSNR));
	memset(priv->rawNF, 0x00, sizeof(priv->rawNF));
	priv->nextSNRNF = 0;
	priv->numSNRNF = 0;
	priv->connect_status = LBS_DISCONNECTED;
64

65 66 67
	/* Clear out associated SSID and BSSID since connection is
	 * no longer valid.
	 */
68 69 70
	memset(&priv->curbssparams.bssid, 0, ETH_ALEN);
	memset(&priv->curbssparams.ssid, 0, IW_ESSID_MAX_SIZE);
	priv->curbssparams.ssid_len = 0;
71

72
	if (priv->psstate != PS_STATE_FULL_POWER) {
73
		/* make firmware to exit PS mode */
74
		lbs_deb_cmd("disconnected, so exit PS mode\n");
75
		lbs_ps_wakeup(priv, 0);
76
	}
77
	lbs_deb_leave(LBS_DEB_CMD);
78 79 80 81 82
}

/**
 *  @brief This function handles MIC failure event.
 *
83
 *  @param priv    A pointer to struct lbs_private structure
84 85 86
 *  @para  event   the event id
 *  @return 	   n/a
 */
87
static void handle_mic_failureevent(struct lbs_private *priv, u32 event)
88 89 90
{
	char buf[50];

91
	lbs_deb_enter(LBS_DEB_CMD);
92 93 94 95 96 97 98 99 100 101
	memset(buf, 0, sizeof(buf));

	sprintf(buf, "%s", "MLME-MICHAELMICFAILURE.indication ");

	if (event == MACREG_INT_CODE_MIC_ERR_UNICAST) {
		strcat(buf, "unicast ");
	} else {
		strcat(buf, "multicast ");
	}

102
	lbs_send_iwevcustom_event(priv, buf);
103
	lbs_deb_leave(LBS_DEB_CMD);
104 105
}

106
static int lbs_ret_reg_access(struct lbs_private *priv,
107 108
			       u16 type, struct cmd_ds_command *resp)
{
109
	int ret = 0;
110

111
	lbs_deb_enter(LBS_DEB_CMD);
112 113

	switch (type) {
114
	case CMD_RET(CMD_MAC_REG_ACCESS):
115
		{
116
			struct cmd_ds_mac_reg_access *reg = &resp->params.macreg;
117

118 119
			priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
			priv->offsetvalue.value = le32_to_cpu(reg->value);
120 121 122
			break;
		}

123
	case CMD_RET(CMD_BBP_REG_ACCESS):
124
		{
125
			struct cmd_ds_bbp_reg_access *reg = &resp->params.bbpreg;
126

127 128
			priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
			priv->offsetvalue.value = reg->value;
129 130 131
			break;
		}

132
	case CMD_RET(CMD_RF_REG_ACCESS):
133
		{
134
			struct cmd_ds_rf_reg_access *reg = &resp->params.rfreg;
135

136 137
			priv->offsetvalue.offset = (u32)le16_to_cpu(reg->offset);
			priv->offsetvalue.value = reg->value;
138 139 140 141
			break;
		}

	default:
142
		ret = -1;
143 144
	}

145
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
146
	return ret;
147 148
}

149
static int lbs_ret_802_11_stat(struct lbs_private *priv,
150 151
				struct cmd_ds_command *resp)
{
152
	lbs_deb_enter(LBS_DEB_CMD);
153
/*	currently priv->wlan802_11Stat is unused
154 155 156 157

	struct cmd_ds_802_11_get_stat *p11Stat = &resp->params.gstat;

	// TODO Convert it to Big endian befor copy
158
	memcpy(&priv->wlan802_11Stat,
159 160
	       p11Stat, sizeof(struct cmd_ds_802_11_get_stat));
*/
161
	lbs_deb_leave(LBS_DEB_CMD);
162 163 164
	return 0;
}

165
static int lbs_ret_802_11_snmp_mib(struct lbs_private *priv,
166 167 168 169 170 171
				    struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_snmp_mib *smib = &resp->params.smib;
	u16 oid = le16_to_cpu(smib->oid);
	u16 querytype = le16_to_cpu(smib->querytype);

172
	lbs_deb_enter(LBS_DEB_CMD);
173

174
	lbs_deb_cmd("SNMP_RESP: oid 0x%x, querytype 0x%x\n", oid,
175
	       querytype);
176
	lbs_deb_cmd("SNMP_RESP: Buf size %d\n", le16_to_cpu(smib->bufsize));
177

178
	if (querytype == CMD_ACT_GET) {
179
		switch (oid) {
180
		case FRAGTHRESH_I:
181
			priv->fragthsd =
182
				le16_to_cpu(*((__le16 *)(smib->value)));
183
			lbs_deb_cmd("SNMP_RESP: frag threshold %u\n",
184
				    priv->fragthsd);
185
			break;
186
		case RTSTHRESH_I:
187
			priv->rtsthsd =
188
				le16_to_cpu(*((__le16 *)(smib->value)));
189
			lbs_deb_cmd("SNMP_RESP: rts threshold %u\n",
190
				    priv->rtsthsd);
191
			break;
192
		case SHORT_RETRYLIM_I:
193
			priv->txretrycount =
194
				le16_to_cpu(*((__le16 *)(smib->value)));
195
			lbs_deb_cmd("SNMP_RESP: tx retry count %u\n",
196
				    priv->rtsthsd);
197 198 199 200 201 202
			break;
		default:
			break;
		}
	}

203
	lbs_deb_enter(LBS_DEB_CMD);
204 205 206
	return 0;
}

207
static int lbs_ret_802_11_key_material(struct lbs_private *priv,
208 209 210 211 212 213
					struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_key_material *pkeymaterial =
	    &resp->params.keymaterial;
	u16 action = le16_to_cpu(pkeymaterial->action);

214
	lbs_deb_enter(LBS_DEB_CMD);
215 216

	/* Copy the returned key to driver private data */
217
	if (action == CMD_ACT_GET) {
218 219 220 221 222 223
		u8 * buf_ptr = (u8 *) &pkeymaterial->keyParamSet;
		u8 * resp_end = (u8 *) (resp + le16_to_cpu(resp->size));

		while (buf_ptr < resp_end) {
			struct MrvlIEtype_keyParamSet * pkeyparamset =
			    (struct MrvlIEtype_keyParamSet *) buf_ptr;
224
			struct enc_key * pkey;
225 226
			u16 param_set_len = le16_to_cpu(pkeyparamset->length);
			u16 key_len = le16_to_cpu(pkeyparamset->keylen);
227 228 229
			u16 key_flags = le16_to_cpu(pkeyparamset->keyinfo);
			u16 key_type = le16_to_cpu(pkeyparamset->keytypeid);
			u8 * end;
230 231 232 233 234 235 236 237

			end = (u8 *) pkeyparamset + sizeof (pkeyparamset->type)
			                          + sizeof (pkeyparamset->length)
			                          + param_set_len;
			/* Make sure we don't access past the end of the IEs */
			if (end > resp_end)
				break;

238
			if (key_flags & KEY_INFO_WPA_UNICAST)
239
				pkey = &priv->wpa_unicast_key;
240
			else if (key_flags & KEY_INFO_WPA_MCAST)
241
				pkey = &priv->wpa_mcast_key;
242 243 244 245
			else
				break;

			/* Copy returned key into driver */
246
			memset(pkey, 0, sizeof(struct enc_key));
247 248
			if (key_len > sizeof(pkey->key))
				break;
249 250 251
			pkey->type = key_type;
			pkey->flags = key_flags;
			pkey->len = key_len;
252 253 254 255 256 257
			memcpy(pkey->key, pkeyparamset->key, pkey->len);

			buf_ptr = end + 1;
		}
	}

258
	lbs_deb_enter(LBS_DEB_CMD);
259 260 261
	return 0;
}

262
static int lbs_ret_802_11_mac_address(struct lbs_private *priv,
263 264 265 266
				       struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_mac_address *macadd = &resp->params.macadd;

267
	lbs_deb_enter(LBS_DEB_CMD);
268

269
	memcpy(priv->current_addr, macadd->macadd, ETH_ALEN);
270

271
	lbs_deb_enter(LBS_DEB_CMD);
272 273 274
	return 0;
}

275
static int lbs_ret_802_11_rf_tx_power(struct lbs_private *priv,
276 277 278 279
				       struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_rf_tx_power *rtp = &resp->params.txp;

280
	lbs_deb_enter(LBS_DEB_CMD);
281

282
	priv->txpowerlevel = le16_to_cpu(rtp->currentlevel);
283

284
	lbs_deb_cmd("TX power currently %d\n", priv->txpowerlevel);
285

286
	lbs_deb_leave(LBS_DEB_CMD);
287 288 289
	return 0;
}

290
static int lbs_ret_802_11_rate_adapt_rateset(struct lbs_private *priv,
291 292
					      struct cmd_ds_command *resp)
{
293
	struct cmd_ds_802_11_rate_adapt_rateset *rates = &resp->params.rateset;
294

295
	lbs_deb_enter(LBS_DEB_CMD);
296

297
	if (rates->action == CMD_ACT_GET) {
298 299
		priv->enablehwauto = le16_to_cpu(rates->enablehwauto);
		priv->ratebitmap = le16_to_cpu(rates->bitmap);
300 301
	}

302
	lbs_deb_leave(LBS_DEB_CMD);
303 304 305
	return 0;
}

306
static int lbs_ret_802_11_rssi(struct lbs_private *priv,
307 308 309 310
				struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_rssi_rsp *rssirsp = &resp->params.rssirsp;

311 312
	lbs_deb_enter(LBS_DEB_CMD);

313
	/* store the non average value */
314 315
	priv->SNR[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->SNR);
	priv->NF[TYPE_BEACON][TYPE_NOAVG] = le16_to_cpu(rssirsp->noisefloor);
316

317 318
	priv->SNR[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgSNR);
	priv->NF[TYPE_BEACON][TYPE_AVG] = le16_to_cpu(rssirsp->avgnoisefloor);
319

320 321 322
	priv->RSSI[TYPE_BEACON][TYPE_NOAVG] =
	    CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_NOAVG],
		     priv->NF[TYPE_BEACON][TYPE_NOAVG]);
323

324 325 326
	priv->RSSI[TYPE_BEACON][TYPE_AVG] =
	    CAL_RSSI(priv->SNR[TYPE_BEACON][TYPE_AVG] / AVG_SCALE,
		     priv->NF[TYPE_BEACON][TYPE_AVG] / AVG_SCALE);
327

328
	lbs_deb_cmd("RSSI: beacon %d, avg %d\n",
329 330
	       priv->RSSI[TYPE_BEACON][TYPE_NOAVG],
	       priv->RSSI[TYPE_BEACON][TYPE_AVG]);
331

332
	lbs_deb_leave(LBS_DEB_CMD);
333 334 335
	return 0;
}

336
static int lbs_ret_802_11_eeprom_access(struct lbs_private *priv,
337 338
				  struct cmd_ds_command *resp)
{
339
	struct lbs_ioctl_regrdwr *pbuf;
340
	pbuf = (struct lbs_ioctl_regrdwr *) priv->prdeeprom;
341

342
	lbs_deb_enter_args(LBS_DEB_CMD, "len %d",
343 344 345
	       le16_to_cpu(resp->params.rdeeprom.bytecount));
	if (pbuf->NOB < le16_to_cpu(resp->params.rdeeprom.bytecount)) {
		pbuf->NOB = 0;
346
		lbs_deb_cmd("EEPROM read length too big\n");
347 348 349 350 351 352 353
		return -1;
	}
	pbuf->NOB = le16_to_cpu(resp->params.rdeeprom.bytecount);
	if (pbuf->NOB > 0) {

		memcpy(&pbuf->value, (u8 *) & resp->params.rdeeprom.value,
		       le16_to_cpu(resp->params.rdeeprom.bytecount));
354
		lbs_deb_hex(LBS_DEB_CMD, "EEPROM", (char *)&pbuf->value,
355 356
			le16_to_cpu(resp->params.rdeeprom.bytecount));
	}
357
	lbs_deb_leave(LBS_DEB_CMD);
358 359 360
	return 0;
}

361
static int lbs_ret_get_log(struct lbs_private *priv,
362 363
			    struct cmd_ds_command *resp)
{
364
	struct cmd_ds_802_11_get_log *logmessage = &resp->params.glog;
365

366
	lbs_deb_enter(LBS_DEB_CMD);
367

368
	/* Stored little-endian */
369
	memcpy(&priv->logmsg, logmessage, sizeof(struct cmd_ds_802_11_get_log));
370

371
	lbs_deb_leave(LBS_DEB_CMD);
372 373 374
	return 0;
}

375 376 377 378 379 380 381 382 383
static int lbs_ret_802_11_bcn_ctrl(struct lbs_private * priv,
					struct cmd_ds_command *resp)
{
	struct cmd_ds_802_11_beacon_control *bcn_ctrl =
	    &resp->params.bcn_ctrl;

	lbs_deb_enter(LBS_DEB_CMD);

	if (bcn_ctrl->action == CMD_ACT_GET) {
384 385
		priv->beacon_enable = (u8) le16_to_cpu(bcn_ctrl->beacon_enable);
		priv->beacon_period = le16_to_cpu(bcn_ctrl->beacon_period);
386 387 388 389 390 391
	}

	lbs_deb_enter(LBS_DEB_CMD);
	return 0;
}

392 393
static inline int handle_cmd_response(struct lbs_private *priv,
				      unsigned long dummy,
394
				      struct cmd_header *cmd_response)
395
{
396
	struct cmd_ds_command *resp = (struct cmd_ds_command *) cmd_response;
397 398
	int ret = 0;
	unsigned long flags;
399
	uint16_t respcmd = le16_to_cpu(resp->command);
400

401 402
	lbs_deb_enter(LBS_DEB_HOST);

403
	switch (respcmd) {
404 405 406
	case CMD_RET(CMD_MAC_REG_ACCESS):
	case CMD_RET(CMD_BBP_REG_ACCESS):
	case CMD_RET(CMD_RF_REG_ACCESS):
407
		ret = lbs_ret_reg_access(priv, respcmd, resp);
408 409
		break;

410
	case CMD_RET(CMD_802_11_SCAN):
411
		ret = lbs_ret_80211_scan(priv, resp);
412 413
		break;

414
	case CMD_RET(CMD_802_11_GET_LOG):
415
		ret = lbs_ret_get_log(priv, resp);
416 417
		break;

418
	case CMD_RET_802_11_ASSOCIATE:
419 420
	case CMD_RET(CMD_802_11_ASSOCIATE):
	case CMD_RET(CMD_802_11_REASSOCIATE):
421
		ret = lbs_ret_80211_associate(priv, resp);
422 423
		break;

424 425
	case CMD_RET(CMD_802_11_DISASSOCIATE):
	case CMD_RET(CMD_802_11_DEAUTHENTICATE):
426
		ret = lbs_ret_80211_disassociate(priv, resp);
427 428
		break;

429 430
	case CMD_RET(CMD_802_11_AD_HOC_START):
	case CMD_RET(CMD_802_11_AD_HOC_JOIN):
431
		ret = lbs_ret_80211_ad_hoc_start(priv, resp);
432 433
		break;

434
	case CMD_RET(CMD_802_11_GET_STAT):
435
		ret = lbs_ret_802_11_stat(priv, resp);
436 437
		break;

438
	case CMD_RET(CMD_802_11_SNMP_MIB):
439
		ret = lbs_ret_802_11_snmp_mib(priv, resp);
440 441
		break;

442
	case CMD_RET(CMD_802_11_RF_TX_POWER):
443
		ret = lbs_ret_802_11_rf_tx_power(priv, resp);
444 445
		break;

446 447
	case CMD_RET(CMD_802_11_SET_AFC):
	case CMD_RET(CMD_802_11_GET_AFC):
448
		spin_lock_irqsave(&priv->driver_lock, flags);
449
		memmove((void *)priv->cur_cmd->callback_arg, &resp->params.afc,
450
			sizeof(struct cmd_ds_802_11_afc));
451
		spin_unlock_irqrestore(&priv->driver_lock, flags);
452 453 454

		break;

455 456 457 458 459
	case CMD_RET(CMD_MAC_MULTICAST_ADR):
	case CMD_RET(CMD_MAC_CONTROL):
	case CMD_RET(CMD_802_11_RESET):
	case CMD_RET(CMD_802_11_AUTHENTICATE):
	case CMD_RET(CMD_802_11_BEACON_STOP):
460 461
		break;

462
	case CMD_RET(CMD_802_11_RATE_ADAPT_RATESET):
463
		ret = lbs_ret_802_11_rate_adapt_rateset(priv, resp);
464 465
		break;

466
	case CMD_RET(CMD_802_11_RSSI):
467
		ret = lbs_ret_802_11_rssi(priv, resp);
468 469
		break;

470
	case CMD_RET(CMD_802_11_MAC_ADDRESS):
471
		ret = lbs_ret_802_11_mac_address(priv, resp);
472 473
		break;

474
	case CMD_RET(CMD_802_11_AD_HOC_STOP):
475
		ret = lbs_ret_80211_ad_hoc_stop(priv, resp);
476 477
		break;

478
	case CMD_RET(CMD_802_11_KEY_MATERIAL):
479
		ret = lbs_ret_802_11_key_material(priv, resp);
480 481
		break;

482
	case CMD_RET(CMD_802_11_EEPROM_ACCESS):
483
		ret = lbs_ret_802_11_eeprom_access(priv, resp);
484 485
		break;

486
	case CMD_RET(CMD_802_11D_DOMAIN_INFO):
487
		ret = lbs_ret_802_11d_domain_info(priv, resp);
488 489
		break;

490
	case CMD_RET(CMD_802_11_TPC_CFG):
491
		spin_lock_irqsave(&priv->driver_lock, flags);
492
		memmove((void *)priv->cur_cmd->callback_arg, &resp->params.tpccfg,
493
			sizeof(struct cmd_ds_802_11_tpc_cfg));
494
		spin_unlock_irqrestore(&priv->driver_lock, flags);
495
		break;
496
	case CMD_RET(CMD_802_11_LED_GPIO_CTRL):
497
		spin_lock_irqsave(&priv->driver_lock, flags);
498
		memmove((void *)priv->cur_cmd->callback_arg, &resp->params.ledgpio,
499
			sizeof(struct cmd_ds_802_11_led_ctrl));
500
		spin_unlock_irqrestore(&priv->driver_lock, flags);
501
		break;
502

503
	case CMD_RET(CMD_802_11_PWR_CFG):
504
		spin_lock_irqsave(&priv->driver_lock, flags);
505
		memmove((void *)priv->cur_cmd->callback_arg, &resp->params.pwrcfg,
506
			sizeof(struct cmd_ds_802_11_pwr_cfg));
507
		spin_unlock_irqrestore(&priv->driver_lock, flags);
508 509 510

		break;

511
	case CMD_RET(CMD_GET_TSF):
512
		spin_lock_irqsave(&priv->driver_lock, flags);
513
		memcpy((void *)priv->cur_cmd->callback_arg,
514
		       &resp->params.gettsf.tsfvalue, sizeof(u64));
515
		spin_unlock_irqrestore(&priv->driver_lock, flags);
516
		break;
517
	case CMD_RET(CMD_BT_ACCESS):
518
		spin_lock_irqsave(&priv->driver_lock, flags);
519 520
		if (priv->cur_cmd->callback_arg)
			memcpy((void *)priv->cur_cmd->callback_arg,
521
			       &resp->params.bt.addr1, 2 * ETH_ALEN);
522
		spin_unlock_irqrestore(&priv->driver_lock, flags);
523
		break;
524
	case CMD_RET(CMD_FWT_ACCESS):
525
		spin_lock_irqsave(&priv->driver_lock, flags);
526 527
		if (priv->cur_cmd->callback_arg)
			memcpy((void *)priv->cur_cmd->callback_arg, &resp->params.fwt,
528
			       sizeof(resp->params.fwt));
529
		spin_unlock_irqrestore(&priv->driver_lock, flags);
530
		break;
531 532 533 534
	case CMD_RET(CMD_802_11_BEACON_CTRL):
		ret = lbs_ret_802_11_bcn_ctrl(priv, resp);
		break;

535
	default:
536
		lbs_deb_host("CMD_RESP: unknown cmd response 0x%04x\n",
537
			     le16_to_cpu(resp->command));
538 539
		break;
	}
540
	lbs_deb_leave(LBS_DEB_HOST);
541 542 543
	return ret;
}

544
int lbs_process_rx_command(struct lbs_private *priv)
545
{
546
	uint16_t respcmd, curcmd;
547
	struct cmd_header *resp;
548
	int ret = 0;
549 550
	unsigned long flags;
	uint16_t result;
551

552
	lbs_deb_enter(LBS_DEB_HOST);
553

554 555
	mutex_lock(&priv->lock);
	spin_lock_irqsave(&priv->driver_lock, flags);
556

557
	if (!priv->cur_cmd) {
558
		lbs_deb_host("CMD_RESP: cur_cmd is NULL\n");
559
		ret = -1;
560
		spin_unlock_irqrestore(&priv->driver_lock, flags);
561 562
		goto done;
	}
563

564
	resp = (void *)priv->upld_buf;
565

566 567
	curcmd = le16_to_cpu(resp->command);

568 569 570
	respcmd = le16_to_cpu(resp->command);
	result = le16_to_cpu(resp->result);

571 572
	lbs_deb_host("CMD_RESP: response 0x%04x, seq %d, size %d, jiffies %lu\n",
		     respcmd, le16_to_cpu(resp->seqnum), priv->upld_len, jiffies);
573
	lbs_deb_hex(LBS_DEB_HOST, "CMD_RESP", (void *) resp, priv->upld_len);
574

575
	if (resp->seqnum != priv->cur_cmd->cmdbuf->seqnum) {
576
		lbs_pr_info("Received CMD_RESP with invalid sequence %d (expected %d)\n",
577
			    le16_to_cpu(resp->seqnum), le16_to_cpu(priv->cur_cmd->cmdbuf->seqnum));
578
		spin_unlock_irqrestore(&priv->driver_lock, flags);
579 580 581
		ret = -1;
		goto done;
	}
582 583 584 585 586 587 588 589
	if (respcmd != CMD_RET(curcmd) &&
	    respcmd != CMD_802_11_ASSOCIATE && curcmd != CMD_RET_802_11_ASSOCIATE) {
		lbs_pr_info("Invalid CMD_RESP %x to command %x!\n", respcmd, curcmd);
		spin_unlock_irqrestore(&priv->driver_lock, flags);
		ret = -1;
		goto done;
	}

590 591 592 593 594 595 596 597 598 599
	if (resp->result == cpu_to_le16(0x0004)) {
		/* 0x0004 means -EAGAIN. Drop the response, let it time out
		   and be resubmitted */
		lbs_pr_info("Firmware returns DEFER to command %x. Will let it time out...\n",
			    le16_to_cpu(resp->command));
		spin_unlock_irqrestore(&priv->driver_lock, flags);
		ret = -1;
		goto done;
	}

600 601
	/* Now we got response from FW, cancel the command timer */
	del_timer(&priv->command_timer);
602 603 604 605 606 607
	priv->cmd_timed_out = 0;
	if (priv->nr_retries) {
		lbs_pr_info("Received result %x to command %x after %d retries\n",
			    result, curcmd, priv->nr_retries);
		priv->nr_retries = 0;
	}
608 609

	/* Store the response code to cur_cmd_retcode. */
610
	priv->cur_cmd_retcode = result;
611

612
	if (respcmd == CMD_RET(CMD_802_11_PS_MODE)) {
613
		struct cmd_ds_802_11_ps_mode *psmode = (void *) &resp[1];
614
		u16 action = le16_to_cpu(psmode->action);
615

616 617
		lbs_deb_host(
		       "CMD_RESP: PS_MODE cmd reply result 0x%x, action 0x%x\n",
618
		       result, action);
619 620

		if (result) {
621
			lbs_deb_host("CMD_RESP: PS command failed with 0x%x\n",
622 623 624 625
				    result);
			/*
			 * We should not re-try enter-ps command in
			 * ad-hoc mode. It takes place in
626
			 * lbs_execute_next_command().
627
			 */
628
			if (priv->mode == IW_MODE_ADHOC &&
629
			    action == CMD_SUBCMD_ENTER_PS)
630
				priv->psmode = LBS802_11POWERMODECAM;
631
		} else if (action == CMD_SUBCMD_ENTER_PS) {
632 633
			priv->needtowakeup = 0;
			priv->psstate = PS_STATE_AWAKE;
634

635
			lbs_deb_host("CMD_RESP: ENTER_PS command response\n");
636
			if (priv->connect_status != LBS_CONNECTED) {
637 638 639 640
				/*
				 * When Deauth Event received before Enter_PS command
				 * response, We need to wake up the firmware.
				 */
641
				lbs_deb_host(
642
				       "disconnected, invoking lbs_ps_wakeup\n");
643

644 645
				spin_unlock_irqrestore(&priv->driver_lock, flags);
				mutex_unlock(&priv->lock);
646
				lbs_ps_wakeup(priv, 0);
647 648
				mutex_lock(&priv->lock);
				spin_lock_irqsave(&priv->driver_lock, flags);
649
			}
650
		} else if (action == CMD_SUBCMD_EXIT_PS) {
651 652
			priv->needtowakeup = 0;
			priv->psstate = PS_STATE_FULL_POWER;
653
			lbs_deb_host("CMD_RESP: EXIT_PS command response\n");
654
		} else {
655
			lbs_deb_host("CMD_RESP: PS action 0x%X\n", action);
656 657
		}

658
		lbs_complete_command(priv, priv->cur_cmd, result);
659
		spin_unlock_irqrestore(&priv->driver_lock, flags);
660 661 662 663 664 665 666

		ret = 0;
		goto done;
	}

	/* If the command is not successful, cleanup and return failure */
	if ((result != 0 || !(respcmd & 0x8000))) {
667 668
		lbs_deb_host("CMD_RESP: error 0x%04x in command reply 0x%04x\n",
		       result, respcmd);
669 670 671 672
		/*
		 * Handling errors here
		 */
		switch (respcmd) {
673 674
		case CMD_RET(CMD_GET_HW_SPEC):
		case CMD_RET(CMD_802_11_RESET):
675
			lbs_deb_host("CMD_RESP: reset failed\n");
676 677 678
			break;

		}
679
		lbs_complete_command(priv, priv->cur_cmd, result);
680
		spin_unlock_irqrestore(&priv->driver_lock, flags);
681 682 683 684 685

		ret = -1;
		goto done;
	}

686
	spin_unlock_irqrestore(&priv->driver_lock, flags);
687

688 689
	if (priv->cur_cmd && priv->cur_cmd->callback) {
		ret = priv->cur_cmd->callback(priv, priv->cur_cmd->callback_arg,
690
				resp);
691
	} else
692
		ret = handle_cmd_response(priv, 0, resp);
693

694
	spin_lock_irqsave(&priv->driver_lock, flags);
695

696
	if (priv->cur_cmd) {
697
		/* Clean up and Put current command back to cmdfreeq */
698
		lbs_complete_command(priv, priv->cur_cmd, result);
699
	}
700
	spin_unlock_irqrestore(&priv->driver_lock, flags);
701 702

done:
703
	mutex_unlock(&priv->lock);
704
	lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
705 706 707
	return ret;
}

708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731
static int lbs_send_confirmwake(struct lbs_private *priv)
{
	struct cmd_header *cmd = &priv->lbs_ps_confirm_wake;
	int ret = 0;

	lbs_deb_enter(LBS_DEB_HOST);

	cmd->command = cpu_to_le16(CMD_802_11_WAKEUP_CONFIRM);
	cmd->size = cpu_to_le16(sizeof(*cmd));
	cmd->seqnum = cpu_to_le16(++priv->seqnum);
	cmd->result = 0;

	lbs_deb_host("SEND_WAKEC_CMD: before download\n");

	lbs_deb_hex(LBS_DEB_HOST, "wake confirm command", (void *)cmd, sizeof(*cmd));

	ret = priv->hw_host_to_card(priv, MVMS_CMD, (void *)cmd, sizeof(*cmd));
	if (ret)
		lbs_pr_alert("SEND_WAKEC_CMD: Host to Card failed for Confirm Wake\n");

	lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
	return ret;
}

732
int lbs_process_event(struct lbs_private *priv)
733 734 735 736
{
	int ret = 0;
	u32 eventcause;

737 738
	lbs_deb_enter(LBS_DEB_CMD);

739 740 741
	spin_lock_irq(&priv->driver_lock);
	eventcause = priv->eventcause >> SBI_EVENT_CAUSE_SHIFT;
	spin_unlock_irq(&priv->driver_lock);
742

743
	lbs_deb_cmd("event cause %d\n", eventcause);
744

745
	switch (eventcause) {
746
	case MACREG_INT_CODE_LINK_SENSED:
747
		lbs_deb_cmd("EVENT: MACREG_INT_CODE_LINK_SENSED\n");
748 749 750
		break;

	case MACREG_INT_CODE_DEAUTHENTICATED:
751
		lbs_deb_cmd("EVENT: deauthenticated\n");
752
		lbs_mac_event_disconnected(priv);
753 754 755
		break;

	case MACREG_INT_CODE_DISASSOCIATED:
756
		lbs_deb_cmd("EVENT: disassociated\n");
757
		lbs_mac_event_disconnected(priv);
758 759
		break;

760
	case MACREG_INT_CODE_LINK_LOST_NO_SCAN:
761
		lbs_deb_cmd("EVENT: link lost\n");
762
		lbs_mac_event_disconnected(priv);
763 764 765
		break;

	case MACREG_INT_CODE_PS_SLEEP:
766
		lbs_deb_cmd("EVENT: sleep\n");
767 768

		/* handle unexpected PS SLEEP event */
769
		if (priv->psstate == PS_STATE_FULL_POWER) {
770
			lbs_deb_cmd(
771
			       "EVENT: in FULL POWER mode, ignoreing PS_SLEEP\n");
772 773
			break;
		}
774
		priv->psstate = PS_STATE_PRE_SLEEP;
775

776
		lbs_ps_confirm_sleep(priv, (u16) priv->psmode);
777 778 779

		break;

780 781 782 783 784
	case MACREG_INT_CODE_HOST_AWAKE:
		lbs_deb_cmd("EVENT: HOST_AWAKE\n");
		lbs_send_confirmwake(priv);
		break;

785
	case MACREG_INT_CODE_PS_AWAKE:
786
		lbs_deb_cmd("EVENT: awake\n");
787
		/* handle unexpected PS AWAKE event */
788
		if (priv->psstate == PS_STATE_FULL_POWER) {
789
			lbs_deb_cmd(
790 791 792 793
			       "EVENT: In FULL POWER mode - ignore PS AWAKE\n");
			break;
		}

794
		priv->psstate = PS_STATE_AWAKE;
795

796
		if (priv->needtowakeup) {
797 798 799
			/*
			 * wait for the command processing to finish
			 * before resuming sending
800
			 * priv->needtowakeup will be set to FALSE
801
			 * in lbs_ps_wakeup()
802
			 */
803
			lbs_deb_cmd("waking up ...\n");
804
			lbs_ps_wakeup(priv, 0);
805 806 807 808
		}
		break;

	case MACREG_INT_CODE_MIC_ERR_UNICAST:
809
		lbs_deb_cmd("EVENT: UNICAST MIC ERROR\n");
810 811 812 813
		handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_UNICAST);
		break;

	case MACREG_INT_CODE_MIC_ERR_MULTICAST:
814
		lbs_deb_cmd("EVENT: MULTICAST MIC ERROR\n");
815 816 817 818 819 820 821
		handle_mic_failureevent(priv, MACREG_INT_CODE_MIC_ERR_MULTICAST);
		break;
	case MACREG_INT_CODE_MIB_CHANGED:
	case MACREG_INT_CODE_INIT_DONE:
		break;

	case MACREG_INT_CODE_ADHOC_BCN_LOST:
822
		lbs_deb_cmd("EVENT: ADHOC beacon lost\n");
823 824 825
		break;

	case MACREG_INT_CODE_RSSI_LOW:
826
		lbs_pr_alert("EVENT: rssi low\n");
827 828
		break;
	case MACREG_INT_CODE_SNR_LOW:
829
		lbs_pr_alert("EVENT: snr low\n");
830 831
		break;
	case MACREG_INT_CODE_MAX_FAIL:
832
		lbs_pr_alert("EVENT: max fail\n");
833 834
		break;
	case MACREG_INT_CODE_RSSI_HIGH:
835
		lbs_pr_alert("EVENT: rssi high\n");
836 837
		break;
	case MACREG_INT_CODE_SNR_HIGH:
838
		lbs_pr_alert("EVENT: snr high\n");
839 840
		break;

841
	case MACREG_INT_CODE_MESH_AUTO_STARTED:
842 843 844 845 846
		/* Ignore spurious autostart events if autostart is disabled */
		if (!priv->mesh_autostart_enabled) {
			lbs_pr_info("EVENT: MESH_AUTO_STARTED (ignoring)\n");
			break;
		}
847
		lbs_pr_info("EVENT: MESH_AUTO_STARTED\n");
848
		priv->mesh_connect_status = LBS_CONNECTED;
849
		if (priv->mesh_open) {
850
			netif_carrier_on(priv->mesh_dev);
851 852
			if (!priv->tx_pending_len)
				netif_wake_queue(priv->mesh_dev);
853
		}
854
		priv->mode = IW_MODE_ADHOC;
855
		schedule_work(&priv->sync_channel);
856 857
		break;

858
	default:
859
		lbs_pr_alert("EVENT: unknown event id %d\n", eventcause);
860 861 862
		break;
	}

863 864 865
	spin_lock_irq(&priv->driver_lock);
	priv->eventcause = 0;
	spin_unlock_irq(&priv->driver_lock);
866

867
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
868 869
	return ret;
}