main.c 38.4 KB
Newer Older
1 2 3 4 5 6
/**
  * This file contains the major functions in WLAN
  * driver. It includes init, exit, open, close and main
  * thread etc..
  */

7
#include <linux/moduleparam.h>
8 9 10 11
#include <linux/delay.h>
#include <linux/etherdevice.h>
#include <linux/netdevice.h>
#include <linux/if_arp.h>
12
#include <linux/kthread.h>
13 14

#include <net/iw_handler.h>
15
#include <net/ieee80211.h>
16 17 18 19 20 21 22

#include "host.h"
#include "decl.h"
#include "dev.h"
#include "wext.h"
#include "debugfs.h"
#include "assoc.h"
23
#include "join.h"
24
#include "cmd.h"
25

26
#define DRIVER_RELEASE_VERSION "323.p0"
27
const char lbs_driver_version[] = "COMM-USB8388-" DRIVER_RELEASE_VERSION
28 29 30 31 32
#ifdef  DEBUG
    "-dbg"
#endif
    "";

33 34

/* Module parameters */
35 36 37
unsigned int lbs_debug;
EXPORT_SYMBOL_GPL(lbs_debug);
module_param_named(libertas_debug, lbs_debug, int, 0644);
38 39


40 41 42 43 44
/* This global structure is used to send the confirm_sleep command as
 * fast as possible down to the firmware. */
struct cmd_confirm_sleep confirm_sleep;


45 46 47 48 49
#define LBS_TX_PWR_DEFAULT		20	/*100mW */
#define LBS_TX_PWR_US_DEFAULT		20	/*100mW */
#define LBS_TX_PWR_JP_DEFAULT		16	/*50mW */
#define LBS_TX_PWR_FR_DEFAULT		20	/*100mW */
#define LBS_TX_PWR_EMEA_DEFAULT	20	/*100mW */
50 51 52 53

/* Format { channel, frequency (MHz), maxtxpower } */
/* band: 'B/G', region: USA FCC/Canada IC */
static struct chan_freq_power channel_freq_power_US_BG[] = {
54 55 56 57 58 59 60 61 62 63 64
	{1, 2412, LBS_TX_PWR_US_DEFAULT},
	{2, 2417, LBS_TX_PWR_US_DEFAULT},
	{3, 2422, LBS_TX_PWR_US_DEFAULT},
	{4, 2427, LBS_TX_PWR_US_DEFAULT},
	{5, 2432, LBS_TX_PWR_US_DEFAULT},
	{6, 2437, LBS_TX_PWR_US_DEFAULT},
	{7, 2442, LBS_TX_PWR_US_DEFAULT},
	{8, 2447, LBS_TX_PWR_US_DEFAULT},
	{9, 2452, LBS_TX_PWR_US_DEFAULT},
	{10, 2457, LBS_TX_PWR_US_DEFAULT},
	{11, 2462, LBS_TX_PWR_US_DEFAULT}
65 66 67 68
};

/* band: 'B/G', region: Europe ETSI */
static struct chan_freq_power channel_freq_power_EU_BG[] = {
69 70 71 72 73 74 75 76 77 78 79 80 81
	{1, 2412, LBS_TX_PWR_EMEA_DEFAULT},
	{2, 2417, LBS_TX_PWR_EMEA_DEFAULT},
	{3, 2422, LBS_TX_PWR_EMEA_DEFAULT},
	{4, 2427, LBS_TX_PWR_EMEA_DEFAULT},
	{5, 2432, LBS_TX_PWR_EMEA_DEFAULT},
	{6, 2437, LBS_TX_PWR_EMEA_DEFAULT},
	{7, 2442, LBS_TX_PWR_EMEA_DEFAULT},
	{8, 2447, LBS_TX_PWR_EMEA_DEFAULT},
	{9, 2452, LBS_TX_PWR_EMEA_DEFAULT},
	{10, 2457, LBS_TX_PWR_EMEA_DEFAULT},
	{11, 2462, LBS_TX_PWR_EMEA_DEFAULT},
	{12, 2467, LBS_TX_PWR_EMEA_DEFAULT},
	{13, 2472, LBS_TX_PWR_EMEA_DEFAULT}
82 83 84 85
};

/* band: 'B/G', region: Spain */
static struct chan_freq_power channel_freq_power_SPN_BG[] = {
86 87
	{10, 2457, LBS_TX_PWR_DEFAULT},
	{11, 2462, LBS_TX_PWR_DEFAULT}
88 89 90 91
};

/* band: 'B/G', region: France */
static struct chan_freq_power channel_freq_power_FR_BG[] = {
92 93 94 95
	{10, 2457, LBS_TX_PWR_FR_DEFAULT},
	{11, 2462, LBS_TX_PWR_FR_DEFAULT},
	{12, 2467, LBS_TX_PWR_FR_DEFAULT},
	{13, 2472, LBS_TX_PWR_FR_DEFAULT}
96 97 98 99
};

/* band: 'B/G', region: Japan */
static struct chan_freq_power channel_freq_power_JPN_BG[] = {
100 101 102 103 104 105 106 107 108 109 110 111 112 113
	{1, 2412, LBS_TX_PWR_JP_DEFAULT},
	{2, 2417, LBS_TX_PWR_JP_DEFAULT},
	{3, 2422, LBS_TX_PWR_JP_DEFAULT},
	{4, 2427, LBS_TX_PWR_JP_DEFAULT},
	{5, 2432, LBS_TX_PWR_JP_DEFAULT},
	{6, 2437, LBS_TX_PWR_JP_DEFAULT},
	{7, 2442, LBS_TX_PWR_JP_DEFAULT},
	{8, 2447, LBS_TX_PWR_JP_DEFAULT},
	{9, 2452, LBS_TX_PWR_JP_DEFAULT},
	{10, 2457, LBS_TX_PWR_JP_DEFAULT},
	{11, 2462, LBS_TX_PWR_JP_DEFAULT},
	{12, 2467, LBS_TX_PWR_JP_DEFAULT},
	{13, 2472, LBS_TX_PWR_JP_DEFAULT},
	{14, 2484, LBS_TX_PWR_JP_DEFAULT}
114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130
};

/**
 * the structure for channel, frequency and power
 */
struct region_cfp_table {
	u8 region;
	struct chan_freq_power *cfp_BG;
	int cfp_no_BG;
};

/**
 * the structure for the mapping between region and CFP
 */
static struct region_cfp_table region_cfp_table[] = {
	{0x10,			/*US FCC */
	 channel_freq_power_US_BG,
131
	 ARRAY_SIZE(channel_freq_power_US_BG),
132 133 134 135
	 }
	,
	{0x20,			/*CANADA IC */
	 channel_freq_power_US_BG,
136
	 ARRAY_SIZE(channel_freq_power_US_BG),
137 138 139
	 }
	,
	{0x30, /*EU*/ channel_freq_power_EU_BG,
140
	 ARRAY_SIZE(channel_freq_power_EU_BG),
141 142 143
	 }
	,
	{0x31, /*SPAIN*/ channel_freq_power_SPN_BG,
144
	 ARRAY_SIZE(channel_freq_power_SPN_BG),
145 146 147
	 }
	,
	{0x32, /*FRANCE*/ channel_freq_power_FR_BG,
148
	 ARRAY_SIZE(channel_freq_power_FR_BG),
149 150 151
	 }
	,
	{0x40, /*JAPAN*/ channel_freq_power_JPN_BG,
152
	 ARRAY_SIZE(channel_freq_power_JPN_BG),
153 154 155 156 157 158
	 }
	,
/*Add new region here */
};

/**
159
 * the table to keep region code
160
 */
161
u16 lbs_region_code_to_index[MRVDRV_MAX_REGION_CODE] =
162
    { 0x10, 0x20, 0x30, 0x31, 0x32, 0x40 };
163 164

/**
165
 * 802.11b/g supported bitrates (in 500Kb/s units)
166
 */
167
u8 lbs_bg_rates[MAX_RATES] =
168 169
    { 0x02, 0x04, 0x0b, 0x16, 0x0c, 0x12, 0x18, 0x24, 0x30, 0x48, 0x60, 0x6c,
0x00, 0x00 };
170 171

/**
172 173 174
 * FW rate table.  FW refers to rates by their index in this table, not by the
 * rate value itself.  Values of 0x00 are
 * reserved positions.
175
 */
176 177 178 179
static u8 fw_data_rates[MAX_RATES] =
    { 0x02, 0x04, 0x0B, 0x16, 0x00, 0x0C, 0x12,
      0x18, 0x24, 0x30, 0x48, 0x60, 0x6C, 0x00
};
180 181

/**
182 183 184 185
 *  @brief use index to get the data rate
 *
 *  @param idx                The index of data rate
 *  @return 	   		data rate or 0
186
 */
187
u32 lbs_fw_index_to_data_rate(u8 idx)
188 189 190 191 192 193 194 195 196 197 198 199
{
	if (idx >= sizeof(fw_data_rates))
		idx = 0;
	return fw_data_rates[idx];
}

/**
 *  @brief use rate to get the index
 *
 *  @param rate                 data rate
 *  @return 	   		index or 0
 */
200
u8 lbs_data_rate_to_fw_index(u32 rate)
201 202 203 204 205 206 207 208 209 210 211 212
{
	u8 i;

	if (!rate)
		return 0;

	for (i = 0; i < sizeof(fw_data_rates); i++) {
		if (rate == fw_data_rates[i])
			return i;
	}
	return 0;
}
213 214 215 216 217 218

/**
 * Attributes exported through sysfs
 */

/**
219
 * @brief Get function for sysfs attribute anycast_mask
220
 */
221
static ssize_t lbs_anycast_get(struct device *dev,
D
Dan Williams 已提交
222 223
		struct device_attribute *attr, char * buf)
{
224
	struct lbs_private *priv = to_net_dev(dev)->priv;
225
	struct cmd_ds_mesh_access mesh_access;
226
	int ret;
227 228

	memset(&mesh_access, 0, sizeof(mesh_access));
229 230 231 232

	ret = lbs_mesh_access(priv, CMD_ACT_MESH_GET_ANYCAST, &mesh_access);
	if (ret)
		return ret;
233

234
	return snprintf(buf, 12, "0x%X\n", le32_to_cpu(mesh_access.data[0]));
235 236 237
}

/**
238
 * @brief Set function for sysfs attribute anycast_mask
239
 */
240
static ssize_t lbs_anycast_set(struct device *dev,
D
Dan Williams 已提交
241 242
		struct device_attribute *attr, const char * buf, size_t count)
{
243
	struct lbs_private *priv = to_net_dev(dev)->priv;
244
	struct cmd_ds_mesh_access mesh_access;
245
	uint32_t datum;
246
	int ret;
247 248

	memset(&mesh_access, 0, sizeof(mesh_access));
249
	sscanf(buf, "%x", &datum);
250 251
	mesh_access.data[0] = cpu_to_le32(datum);

252 253 254 255
	ret = lbs_mesh_access(priv, CMD_ACT_MESH_SET_ANYCAST, &mesh_access);
	if (ret)
		return ret;

256 257 258
	return strlen(buf);
}

259 260
static int lbs_add_rtap(struct lbs_private *priv);
static void lbs_remove_rtap(struct lbs_private *priv);
261 262
static int lbs_add_mesh(struct lbs_private *priv);
static void lbs_remove_mesh(struct lbs_private *priv);
263

264 265 266 267

/**
 * Get function for sysfs attribute rtap
 */
268
static ssize_t lbs_rtap_get(struct device *dev,
269 270
		struct device_attribute *attr, char * buf)
{
271
	struct lbs_private *priv = to_net_dev(dev)->priv;
272
	return snprintf(buf, 5, "0x%X\n", priv->monitormode);
273 274 275 276 277
}

/**
 *  Set function for sysfs attribute rtap
 */
278
static ssize_t lbs_rtap_set(struct device *dev,
279 280 281
		struct device_attribute *attr, const char * buf, size_t count)
{
	int monitor_mode;
282
	struct lbs_private *priv = to_net_dev(dev)->priv;
283 284

	sscanf(buf, "%x", &monitor_mode);
285 286
	if (monitor_mode) {
		if (priv->monitormode == monitor_mode)
287
			return strlen(buf);
288
		if (!priv->monitormode) {
289 290
			if (priv->infra_open || priv->mesh_open)
				return -EBUSY;
291
			if (priv->mode == IW_MODE_INFRA)
292
				lbs_send_deauthentication(priv);
293
			else if (priv->mode == IW_MODE_ADHOC)
294 295
				lbs_stop_adhoc_network(priv);
			lbs_add_rtap(priv);
296
		}
297
		priv->monitormode = monitor_mode;
298 299 300
	}

	else {
301
		if (!priv->monitormode)
302
			return strlen(buf);
303
		priv->monitormode = 0;
304
		lbs_remove_rtap(priv);
D
David Woodhouse 已提交
305

306 307 308
		if (priv->currenttxskb) {
			dev_kfree_skb_any(priv->currenttxskb);
			priv->currenttxskb = NULL;
D
David Woodhouse 已提交
309 310 311 312
		}

		/* Wake queues, command thread, etc. */
		lbs_host_to_card_done(priv);
313 314
	}

315
	lbs_prepare_and_send_command(priv,
316
			CMD_802_11_MONITOR_MODE, CMD_ACT_SET,
317
			CMD_OPTION_WAITFORRSP, 0, &priv->monitormode);
318 319 320 321
	return strlen(buf);
}

/**
322 323
 * lbs_rtap attribute to be exported per ethX interface
 * through sysfs (/sys/class/net/ethX/lbs_rtap)
324
 */
325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351
static DEVICE_ATTR(lbs_rtap, 0644, lbs_rtap_get, lbs_rtap_set );

/**
 * Get function for sysfs attribute mesh
 */
static ssize_t lbs_mesh_get(struct device *dev,
		struct device_attribute *attr, char * buf)
{
	struct lbs_private *priv = to_net_dev(dev)->priv;
	return snprintf(buf, 5, "0x%X\n", !!priv->mesh_dev);
}

/**
 *  Set function for sysfs attribute mesh
 */
static ssize_t lbs_mesh_set(struct device *dev,
		struct device_attribute *attr, const char * buf, size_t count)
{
	struct lbs_private *priv = to_net_dev(dev)->priv;
	int enable;
	int ret;

	sscanf(buf, "%x", &enable);
	enable = !!enable;
	if (enable == !!priv->mesh_dev)
		return count;

352
	ret = lbs_mesh_config(priv, enable, priv->curbssparams.channel);
353 354
	if (ret)
		return ret;
355

356 357 358 359 360 361 362 363 364 365 366 367 368
	if (enable)
		lbs_add_mesh(priv);
	else
		lbs_remove_mesh(priv);

	return count;
}

/**
 * lbs_mesh attribute to be exported per ethX interface
 * through sysfs (/sys/class/net/ethX/lbs_mesh)
 */
static DEVICE_ATTR(lbs_mesh, 0644, lbs_mesh_get, lbs_mesh_set);
369

370
/**
371 372
 * anycast_mask attribute to be exported per mshX interface
 * through sysfs (/sys/class/net/mshX/anycast_mask)
373
 */
374
static DEVICE_ATTR(anycast_mask, 0644, lbs_anycast_get, lbs_anycast_set);
375

376
static struct attribute *lbs_mesh_sysfs_entries[] = {
377 378 379 380
	&dev_attr_anycast_mask.attr,
	NULL,
};

381 382
static struct attribute_group lbs_mesh_attr_group = {
	.attrs = lbs_mesh_sysfs_entries,
383 384
};

385
/**
386
 *  @brief This function opens the ethX or mshX interface
387 388
 *
 *  @param dev     A pointer to net_device structure
389
 *  @return 	   0 or -EBUSY if monitor mode active
390
 */
391
static int lbs_dev_open(struct net_device *dev)
392
{
393 394
	struct lbs_private *priv = (struct lbs_private *) dev->priv ;
	int ret = 0;
395

396 397
	lbs_deb_enter(LBS_DEB_NET);

398
	spin_lock_irq(&priv->driver_lock);
399

400
	if (priv->monitormode) {
401 402 403
		ret = -EBUSY;
		goto out;
	}
404

405 406 407 408 409 410
	if (dev == priv->mesh_dev) {
		priv->mesh_open = 1;
		priv->mesh_connect_status = LBS_CONNECTED;
		netif_carrier_on(dev);
	} else {
		priv->infra_open = 1;
411

412 413
		if (priv->connect_status == LBS_CONNECTED)
			netif_carrier_on(dev);
414
		else
415
			netif_carrier_off(dev);
416
	}
417

418 419 420
	if (!priv->tx_pending_len)
		netif_wake_queue(dev);
 out:
421

422
	spin_unlock_irq(&priv->driver_lock);
423
	lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
424
	return ret;
425 426 427 428 429 430 431 432
}

/**
 *  @brief This function closes the mshX interface
 *
 *  @param dev     A pointer to net_device structure
 *  @return 	   0
 */
433
static int lbs_mesh_stop(struct net_device *dev)
434
{
435
	struct lbs_private *priv = (struct lbs_private *) (dev->priv);
436

437
	lbs_deb_enter(LBS_DEB_MESH);
438 439
	spin_lock_irq(&priv->driver_lock);

440
	priv->mesh_open = 0;
441 442 443 444
	priv->mesh_connect_status = LBS_DISCONNECTED;

	netif_stop_queue(dev);
	netif_carrier_off(dev);
445

446
	spin_unlock_irq(&priv->driver_lock);
447 448

	lbs_deb_leave(LBS_DEB_MESH);
449
	return 0;
450 451 452 453 454 455 456 457
}

/**
 *  @brief This function closes the ethX interface
 *
 *  @param dev     A pointer to net_device structure
 *  @return 	   0
 */
458
static int lbs_eth_stop(struct net_device *dev)
459
{
460
	struct lbs_private *priv = (struct lbs_private *) dev->priv;
461

462
	lbs_deb_enter(LBS_DEB_NET);
463

464
	spin_lock_irq(&priv->driver_lock);
465
	priv->infra_open = 0;
466 467
	netif_stop_queue(dev);
	spin_unlock_irq(&priv->driver_lock);
468 469

	lbs_deb_leave(LBS_DEB_NET);
470
	return 0;
471 472
}

473
static void lbs_tx_timeout(struct net_device *dev)
474
{
475
	struct lbs_private *priv = (struct lbs_private *) dev->priv;
476

477
	lbs_deb_enter(LBS_DEB_TX);
478

479
	lbs_pr_err("tx watch dog timeout\n");
480 481 482

	dev->trans_start = jiffies;

483
	if (priv->currenttxskb) {
484 485
		priv->eventcause = 0x01000000;
		lbs_send_tx_feedback(priv);
486
	}
487 488 489
	/* XX: Shouldn't we also call into the hw-specific driver
	   to kick it somehow? */
	lbs_host_to_card_done(priv);
490

491 492 493 494 495 496 497
	/* More often than not, this actually happens because the
	   firmware has crapped itself -- rather than just a very
	   busy medium. So send a harmless command, and if/when
	   _that_ times out, we'll kick it in the head. */
	lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
				     0, 0, NULL);

498
	lbs_deb_leave(LBS_DEB_TX);
499 500
}

501 502
void lbs_host_to_card_done(struct lbs_private *priv)
{
503 504
	unsigned long flags;

505 506
	lbs_deb_enter(LBS_DEB_THREAD);

507
	spin_lock_irqsave(&priv->driver_lock, flags);
508 509 510 511

	priv->dnld_sent = DNLD_RES_RECEIVED;

	/* Wake main thread if commands are pending */
512
	if (!priv->cur_cmd || priv->tx_pending_len > 0)
513 514
		wake_up_interruptible(&priv->waitq);

515
	spin_unlock_irqrestore(&priv->driver_lock, flags);
516
	lbs_deb_leave(LBS_DEB_THREAD);
517 518 519
}
EXPORT_SYMBOL_GPL(lbs_host_to_card_done);

520 521 522
/**
 *  @brief This function returns the network statistics
 *
523
 *  @param dev     A pointer to struct lbs_private structure
524 525
 *  @return 	   A pointer to net_device_stats structure
 */
526
static struct net_device_stats *lbs_get_stats(struct net_device *dev)
527
{
528
	struct lbs_private *priv = (struct lbs_private *) dev->priv;
529

530
	lbs_deb_enter(LBS_DEB_NET);
531 532 533
	return &priv->stats;
}

534
static int lbs_set_mac_address(struct net_device *dev, void *addr)
535 536
{
	int ret = 0;
537
	struct lbs_private *priv = (struct lbs_private *) dev->priv;
538
	struct sockaddr *phwaddr = addr;
539
	struct cmd_ds_802_11_mac_address cmd;
540

541
	lbs_deb_enter(LBS_DEB_NET);
542

543
	/* In case it was called from the mesh device */
544
	dev = priv->dev;
545

546 547 548
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
	cmd.action = cpu_to_le16(CMD_ACT_SET);
	memcpy(cmd.macadd, phwaddr->sa_data, ETH_ALEN);
549

550
	ret = lbs_cmd_with_response(priv, CMD_802_11_MAC_ADDRESS, &cmd);
551
	if (ret) {
552
		lbs_deb_net("set MAC address failed\n");
553 554 555
		goto done;
	}

556 557
	memcpy(priv->current_addr, phwaddr->sa_data, ETH_ALEN);
	memcpy(dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
558
	if (priv->mesh_dev)
559
		memcpy(priv->mesh_dev->dev_addr, phwaddr->sa_data, ETH_ALEN);
560 561

done:
562
	lbs_deb_leave_args(LBS_DEB_NET, "ret %d", ret);
563 564 565
	return ret;
}

566
static int lbs_copy_multicast_address(struct lbs_private *priv,
567 568 569 570 571 572
				     struct net_device *dev)
{
	int i = 0;
	struct dev_mc_list *mcptr = dev->mc_list;

	for (i = 0; i < dev->mc_count; i++) {
573
		memcpy(&priv->multicastlist[i], mcptr->dmi_addr, ETH_ALEN);
574 575 576 577 578
		mcptr = mcptr->next;
	}
	return i;
}

579
static void lbs_set_multicast_list(struct net_device *dev)
580
{
581
	struct lbs_private *priv = dev->priv;
582
	int old_mac_control;
583
	DECLARE_MAC_BUF(mac);
584

585
	lbs_deb_enter(LBS_DEB_NET);
586

587
	old_mac_control = priv->mac_control;
588 589

	if (dev->flags & IFF_PROMISC) {
590
		lbs_deb_net("enable promiscuous mode\n");
591
		priv->mac_control |=
592
		    CMD_ACT_MAC_PROMISCUOUS_ENABLE;
593
		priv->mac_control &=
594 595
		    ~(CMD_ACT_MAC_ALL_MULTICAST_ENABLE |
		      CMD_ACT_MAC_MULTICAST_ENABLE);
596 597
	} else {
		/* Multicast */
598
		priv->mac_control &=
599
		    ~CMD_ACT_MAC_PROMISCUOUS_ENABLE;
600 601 602

		if (dev->flags & IFF_ALLMULTI || dev->mc_count >
		    MRVDRV_MAX_MULTICAST_LIST_SIZE) {
603
			lbs_deb_net( "enabling all multicast\n");
604
			priv->mac_control |=
605
			    CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
606
			priv->mac_control &=
607
			    ~CMD_ACT_MAC_MULTICAST_ENABLE;
608
		} else {
609
			priv->mac_control &=
610
			    ~CMD_ACT_MAC_ALL_MULTICAST_ENABLE;
611 612

			if (!dev->mc_count) {
613 614
				lbs_deb_net("no multicast addresses, "
				       "disabling multicast\n");
615
				priv->mac_control &=
616
				    ~CMD_ACT_MAC_MULTICAST_ENABLE;
617 618 619
			} else {
				int i;

620
				priv->mac_control |=
621
				    CMD_ACT_MAC_MULTICAST_ENABLE;
622

623 624
				priv->nr_of_multicastmacaddr =
				    lbs_copy_multicast_address(priv, dev);
625

626
				lbs_deb_net("multicast addresses: %d\n",
627 628 629
				       dev->mc_count);

				for (i = 0; i < dev->mc_count; i++) {
630
					lbs_deb_net("Multicast address %d: %s\n",
631
					       i, print_mac(mac,
632
					       priv->multicastlist[i]));
633
				}
634
				/* send multicast addresses to firmware */
635
				lbs_prepare_and_send_command(priv,
636 637
						      CMD_MAC_MULTICAST_ADR,
						      CMD_ACT_SET, 0, 0,
638 639 640 641 642
						      NULL);
			}
		}
	}

643 644
	if (priv->mac_control != old_mac_control)
		lbs_set_mac_control(priv);
645

646
	lbs_deb_leave(LBS_DEB_NET);
647 648 649
}

/**
650
 *  @brief This function handles the major jobs in the LBS driver.
651 652
 *  It handles all events generated by firmware, RX data received
 *  from firmware and TX data sent from kernel.
653
 *
654
 *  @param data    A pointer to lbs_thread structure
655 656
 *  @return 	   0
 */
657
static int lbs_thread(void *data)
658
{
659
	struct net_device *dev = data;
660
	struct lbs_private *priv = dev->priv;
661 662 663
	wait_queue_t wait;
	u8 ireg = 0;

664
	lbs_deb_enter(LBS_DEB_THREAD);
665 666 667 668

	init_waitqueue_entry(&wait, current);

	for (;;) {
669 670
		int shouldsleep;

671
		lbs_deb_thread( "main-thread 111: intcounter=%d currenttxskb=%p dnld_sent=%d\n",
672
				priv->intcounter, priv->currenttxskb, priv->dnld_sent);
673

674
		add_wait_queue(&priv->waitq, &wait);
675
		set_current_state(TASK_INTERRUPTIBLE);
676
		spin_lock_irq(&priv->driver_lock);
677

678
		if (kthread_should_stop())
679
			shouldsleep = 0;	/* Bye */
680 681
		else if (priv->surpriseremoved)
			shouldsleep = 1;	/* We need to wait until we're _told_ to die */
682 683 684 685
		else if (priv->psstate == PS_STATE_SLEEP)
			shouldsleep = 1;	/* Sleep mode. Nothing we can do till it wakes */
		else if (priv->intcounter)
			shouldsleep = 0;	/* Interrupt pending. Deal with it now */
686 687
		else if (priv->cmd_timed_out)
			shouldsleep = 0;	/* Command timed out. Recover */
688 689
		else if (!priv->fw_ready)
			shouldsleep = 1;	/* Firmware not ready. We're waiting for it */
690 691
		else if (priv->dnld_sent)
			shouldsleep = 1;	/* Something is en route to the device already */
692 693
		else if (priv->tx_pending_len > 0)
			shouldsleep = 0;	/* We've a packet to send */
694 695 696 697 698 699 700 701
		else if (priv->cur_cmd)
			shouldsleep = 1;	/* Can't send a command; one already running */
		else if (!list_empty(&priv->cmdpendingq))
			shouldsleep = 0;	/* We have a command to send */
		else
			shouldsleep = 1;	/* No command */

		if (shouldsleep) {
702
			lbs_deb_thread("main-thread sleeping... Conn=%d IntC=%d PS_mode=%d PS_State=%d\n",
703 704 705
				       priv->connect_status, priv->intcounter,
				       priv->psmode, priv->psstate);
			spin_unlock_irq(&priv->driver_lock);
706 707
			schedule();
		} else
708
			spin_unlock_irq(&priv->driver_lock);
709

710
		lbs_deb_thread("main-thread 222 (waking up): intcounter=%d currenttxskb=%p dnld_sent=%d\n",
711
			       priv->intcounter, priv->currenttxskb, priv->dnld_sent);
712 713

		set_current_state(TASK_RUNNING);
714
		remove_wait_queue(&priv->waitq, &wait);
715

716
		lbs_deb_thread("main-thread 333: intcounter=%d currenttxskb=%p dnld_sent=%d\n",
717
			       priv->intcounter, priv->currenttxskb, priv->dnld_sent);
718

719 720
		if (kthread_should_stop()) {
			lbs_deb_thread("main-thread: break from main thread\n");
721 722 723
			break;
		}

724 725 726 727
		if (priv->surpriseremoved) {
			lbs_deb_thread("adapter removed; waiting to die...\n");
			continue;
		}
728

729
		spin_lock_irq(&priv->driver_lock);
730

731
		if (priv->intcounter) {
732
			u8 int_status;
733

734
			priv->intcounter = 0;
735
			int_status = priv->hw_get_int_status(priv, &ireg);
736 737

			if (int_status) {
738
				lbs_deb_thread("main-thread: reading HOST_INT_STATUS_REG failed\n");
739
				spin_unlock_irq(&priv->driver_lock);
740 741
				continue;
			}
742
			priv->hisregcpy |= ireg;
743 744
		}

745
		lbs_deb_thread("main-thread 444: intcounter=%d currenttxskb=%p dnld_sent=%d\n",
746
			       priv->intcounter, priv->currenttxskb, priv->dnld_sent);
747 748

		/* command response? */
749
		if (priv->hisregcpy & MRVDRV_CMD_UPLD_RDY) {
750
			lbs_deb_thread("main-thread: cmd response ready\n");
751

752 753
			priv->hisregcpy &= ~MRVDRV_CMD_UPLD_RDY;
			spin_unlock_irq(&priv->driver_lock);
754
			lbs_process_rx_command(priv);
755
			spin_lock_irq(&priv->driver_lock);
756 757
		}

758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777
		if (priv->cmd_timed_out && priv->cur_cmd) {
			struct cmd_ctrl_node *cmdnode = priv->cur_cmd;

			if (++priv->nr_retries > 10) {
				lbs_pr_info("Excessive timeouts submitting command %x\n",
					    le16_to_cpu(cmdnode->cmdbuf->command));
				lbs_complete_command(priv, cmdnode, -ETIMEDOUT);
				priv->nr_retries = 0;
			} else {
				priv->cur_cmd = NULL;
				lbs_pr_info("requeueing command %x due to timeout (#%d)\n",
					    le16_to_cpu(cmdnode->cmdbuf->command), priv->nr_retries);

				/* Stick it back at the _top_ of the pending queue
				   for immediate resubmission */
				list_add(&cmdnode->list, &priv->cmdpendingq);
			}
		}
		priv->cmd_timed_out = 0;

778
		/* Any Card Event */
779
		if (priv->hisregcpy & MRVDRV_CARDEVENT) {
780
			lbs_deb_thread("main-thread: Card Event Activity\n");
781

782
			priv->hisregcpy &= ~MRVDRV_CARDEVENT;
783

784
			if (priv->hw_read_event_cause(priv)) {
785
				lbs_pr_alert("main-thread: hw_read_event_cause failed\n");
786
				spin_unlock_irq(&priv->driver_lock);
787 788
				continue;
			}
789
			spin_unlock_irq(&priv->driver_lock);
790
			lbs_process_event(priv);
791
		} else
792
			spin_unlock_irq(&priv->driver_lock);
793

794 795 796
		if (!priv->fw_ready)
			continue;

797
		/* Check if we need to confirm Sleep Request received previously */
798 799 800
		if (priv->psstate == PS_STATE_PRE_SLEEP &&
		    !priv->dnld_sent && !priv->cur_cmd) {
			if (priv->connect_status == LBS_CONNECTED) {
801
				lbs_deb_thread("main_thread: PRE_SLEEP--intcounter=%d currenttxskb=%p dnld_sent=%d cur_cmd=%p, confirm now\n",
802
					       priv->intcounter, priv->currenttxskb, priv->dnld_sent, priv->cur_cmd);
803

804
				lbs_ps_confirm_sleep(priv);
805 806 807 808 809 810
			} else {
				/* workaround for firmware sending
				 * deauth/linkloss event immediately
				 * after sleep request; remove this
				 * after firmware fixes it
				 */
811
				priv->psstate = PS_STATE_AWAKE;
812
				lbs_pr_alert("main-thread: ignore PS_SleepConfirm in non-connected state\n");
813 814 815 816 817 818
			}
		}

		/* The PS state is changed during processing of Sleep Request
		 * event above
		 */
819 820
		if ((priv->psstate == PS_STATE_SLEEP) ||
		    (priv->psstate == PS_STATE_PRE_SLEEP))
821 822 823
			continue;

		/* Execute the next command */
824
		if (!priv->dnld_sent && !priv->cur_cmd)
825
			lbs_execute_next_command(priv);
826 827

		/* Wake-up command waiters which can't sleep in
828
		 * lbs_prepare_and_send_command
829
		 */
830 831
		if (!list_empty(&priv->cmdpendingq))
			wake_up_all(&priv->cmd_pending);
832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853

		spin_lock_irq(&priv->driver_lock);
		if (!priv->dnld_sent && priv->tx_pending_len > 0) {
			int ret = priv->hw_host_to_card(priv, MVMS_DAT,
							priv->tx_pending_buf,
							priv->tx_pending_len);
			if (ret) {
				lbs_deb_tx("host_to_card failed %d\n", ret);
				priv->dnld_sent = DNLD_RES_RECEIVED;
			}
			priv->tx_pending_len = 0;
			if (!priv->currenttxskb) {
				/* We can wake the queues immediately if we aren't
				   waiting for TX feedback */
				if (priv->connect_status == LBS_CONNECTED)
					netif_wake_queue(priv->dev);
				if (priv->mesh_dev &&
				    priv->mesh_connect_status == LBS_CONNECTED)
					netif_wake_queue(priv->mesh_dev);
			}
		}
		spin_unlock_irq(&priv->driver_lock);
854 855
	}

856 857
	del_timer(&priv->command_timer);
	wake_up_all(&priv->cmd_pending);
858

859
	lbs_deb_leave(LBS_DEB_THREAD);
860 861 862
	return 0;
}

863 864 865
static int lbs_suspend_callback(struct lbs_private *priv, unsigned long dummy,
				struct cmd_header *cmd)
{
866
	lbs_deb_enter(LBS_DEB_FW);
867 868 869 870 871 872

	netif_device_detach(priv->dev);
	if (priv->mesh_dev)
		netif_device_detach(priv->mesh_dev);

	priv->fw_ready = 0;
873
	lbs_deb_leave(LBS_DEB_FW);
874 875 876 877 878 879 880 881
	return 0;
}

int lbs_suspend(struct lbs_private *priv)
{
	struct cmd_header cmd;
	int ret;

882 883
	lbs_deb_enter(LBS_DEB_FW);

884 885 886 887 888
	if (priv->wol_criteria == 0xffffffff) {
		lbs_pr_info("Suspend attempt without configuring wake params!\n");
		return -EINVAL;
	}

889
	memset(&cmd, 0, sizeof(cmd));
890

891 892 893 894 895
	ret = __lbs_cmd(priv, CMD_802_11_HOST_SLEEP_ACTIVATE, &cmd,
			sizeof(cmd), lbs_suspend_callback, 0);
	if (ret)
		lbs_pr_info("HOST_SLEEP_ACTIVATE failed: %d\n", ret);

896
	lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
897 898 899 900 901 902
	return ret;
}
EXPORT_SYMBOL_GPL(lbs_suspend);

int lbs_resume(struct lbs_private *priv)
{
903 904
	lbs_deb_enter(LBS_DEB_FW);

905 906 907 908 909 910 911 912 913 914 915
	priv->fw_ready = 1;

	/* Firmware doesn't seem to give us RX packets any more
	   until we send it some command. Might as well update */
	lbs_prepare_and_send_command(priv, CMD_802_11_RSSI, 0,
				     0, 0, NULL);

	netif_device_attach(priv->dev);
	if (priv->mesh_dev)
		netif_device_attach(priv->mesh_dev);

916
	lbs_deb_leave(LBS_DEB_FW);
917 918 919 920
	return 0;
}
EXPORT_SYMBOL_GPL(lbs_resume);

H
Holger Schurig 已提交
921 922 923 924 925
/**
 *  @brief This function downloads firmware image, gets
 *  HW spec from firmware and set basic parameters to
 *  firmware.
 *
926
 *  @param priv    A pointer to struct lbs_private structure
H
Holger Schurig 已提交
927 928
 *  @return 	   0 or -1
 */
929
static int lbs_setup_firmware(struct lbs_private *priv)
H
Holger Schurig 已提交
930 931 932 933 934 935 936 937
{
	int ret = -1;

	lbs_deb_enter(LBS_DEB_FW);

	/*
	 * Read MAC address from HW
	 */
938
	memset(priv->current_addr, 0xff, ETH_ALEN);
939
	ret = lbs_update_hw_spec(priv);
H
Holger Schurig 已提交
940 941 942 943 944
	if (ret) {
		ret = -1;
		goto done;
	}

945
	lbs_set_mac_control(priv);
H
Holger Schurig 已提交
946

947 948
	ret = lbs_get_data_rate(priv);
	if (ret < 0) {
H
Holger Schurig 已提交
949 950 951 952 953 954 955 956 957 958 959 960 961 962 963 964
		ret = -1;
		goto done;
	}

	ret = 0;
done:
	lbs_deb_leave_args(LBS_DEB_FW, "ret %d", ret);
	return ret;
}

/**
 *  This function handles the timeout of command sending.
 *  It will re-send the same command again.
 */
static void command_timer_fn(unsigned long data)
{
965
	struct lbs_private *priv = (struct lbs_private *)data;
H
Holger Schurig 已提交
966 967
	unsigned long flags;

968
	lbs_deb_enter(LBS_DEB_CMD);
969
	spin_lock_irqsave(&priv->driver_lock, flags);
H
Holger Schurig 已提交
970

971 972 973
	if (!priv->cur_cmd) {
		lbs_pr_info("Command timer expired; no pending command\n");
		goto out;
H
Holger Schurig 已提交
974 975
	}

976
	lbs_pr_info("Command %x timed out\n", le16_to_cpu(priv->cur_cmd->cmdbuf->command));
H
Holger Schurig 已提交
977

978
	priv->cmd_timed_out = 1;
H
Holger Schurig 已提交
979
	wake_up_interruptible(&priv->waitq);
980
out:
981
	spin_unlock_irqrestore(&priv->driver_lock, flags);
982
	lbs_deb_leave(LBS_DEB_CMD);
H
Holger Schurig 已提交
983 984
}

985 986 987 988 989 990 991 992 993 994 995 996
static void lbs_sync_channel_worker(struct work_struct *work)
{
	struct lbs_private *priv = container_of(work, struct lbs_private,
		sync_channel);

	lbs_deb_enter(LBS_DEB_MAIN);
	if (lbs_update_channel(priv))
		lbs_pr_info("Channel synchronization failed.");
	lbs_deb_leave(LBS_DEB_MAIN);
}


997
static int lbs_init_adapter(struct lbs_private *priv)
998
{
H
Holger Schurig 已提交
999
	size_t bufsize;
1000
	int i, ret = 0;
H
Holger Schurig 已提交
1001

1002 1003
	lbs_deb_enter(LBS_DEB_MAIN);

H
Holger Schurig 已提交
1004 1005
	/* Allocate buffer to store the BSSID list */
	bufsize = MAX_NETWORK_COUNT * sizeof(struct bss_descriptor);
1006 1007
	priv->networks = kzalloc(bufsize, GFP_KERNEL);
	if (!priv->networks) {
H
Holger Schurig 已提交
1008
		lbs_pr_err("Out of memory allocating beacons\n");
1009 1010
		ret = -1;
		goto out;
H
Holger Schurig 已提交
1011 1012
	}

1013
	/* Initialize scan result lists */
1014 1015
	INIT_LIST_HEAD(&priv->network_free_list);
	INIT_LIST_HEAD(&priv->network_list);
1016
	for (i = 0; i < MAX_NETWORK_COUNT; i++) {
1017 1018
		list_add_tail(&priv->networks[i].list,
			      &priv->network_free_list);
1019
	}
H
Holger Schurig 已提交
1020

1021
	memset(priv->current_addr, 0xff, ETH_ALEN);
H
Holger Schurig 已提交
1022

1023 1024 1025 1026 1027
	priv->connect_status = LBS_DISCONNECTED;
	priv->mesh_connect_status = LBS_DISCONNECTED;
	priv->secinfo.auth_mode = IW_AUTH_ALG_OPEN_SYSTEM;
	priv->mode = IW_MODE_INFRA;
	priv->curbssparams.channel = DEFAULT_AD_HOC_CHANNEL;
1028
	priv->mac_control = CMD_ACT_MAC_RX_ON | CMD_ACT_MAC_TX_ON;
1029 1030 1031 1032 1033
	priv->radioon = RADIO_ON;
	priv->auto_rate = 1;
	priv->capability = WLAN_CAPABILITY_SHORT_PREAMBLE;
	priv->psmode = LBS802_11POWERMODECAM;
	priv->psstate = PS_STATE_FULL_POWER;
H
Holger Schurig 已提交
1034

1035
	mutex_init(&priv->lock);
H
Holger Schurig 已提交
1036

1037
	setup_timer(&priv->command_timer, command_timer_fn,
1038
		(unsigned long)priv);
H
Holger Schurig 已提交
1039

1040 1041
	INIT_LIST_HEAD(&priv->cmdfreeq);
	INIT_LIST_HEAD(&priv->cmdpendingq);
H
Holger Schurig 已提交
1042

1043 1044
	spin_lock_init(&priv->driver_lock);
	init_waitqueue_head(&priv->cmd_pending);
H
Holger Schurig 已提交
1045

1046
	/* Allocate the command buffers */
1047
	if (lbs_allocate_cmd_buffer(priv)) {
1048 1049 1050
		lbs_pr_err("Out of memory allocating command buffers\n");
		ret = -1;
	}
H
Holger Schurig 已提交
1051

1052
out:
1053 1054
	lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);

1055 1056
	return ret;
}
H
Holger Schurig 已提交
1057

1058
static void lbs_free_adapter(struct lbs_private *priv)
1059
{
1060
	lbs_deb_enter(LBS_DEB_MAIN);
H
Holger Schurig 已提交
1061

1062
	lbs_free_cmd_buffer(priv);
1063 1064 1065
	del_timer(&priv->command_timer);
	kfree(priv->networks);
	priv->networks = NULL;
1066 1067

	lbs_deb_leave(LBS_DEB_MAIN);
H
Holger Schurig 已提交
1068 1069
}

1070 1071
/**
 * @brief This function adds the card. it will probe the
1072
 * card, allocate the lbs_priv and initialize the device.
1073 1074
 *
 *  @param card    A pointer to card
1075
 *  @return 	   A pointer to struct lbs_private structure
1076
 */
1077
struct lbs_private *lbs_add_card(void *card, struct device *dmdev)
1078 1079
{
	struct net_device *dev = NULL;
1080
	struct lbs_private *priv = NULL;
1081

1082
	lbs_deb_enter(LBS_DEB_MAIN);
1083 1084

	/* Allocate an Ethernet device and register it */
1085 1086
	dev = alloc_etherdev(sizeof(struct lbs_private));
	if (!dev) {
1087
		lbs_pr_err("init ethX device failed\n");
1088
		goto done;
1089
	}
1090
	priv = dev->priv;
1091

1092
	if (lbs_init_adapter(priv)) {
1093 1094 1095 1096
		lbs_pr_err("failed to initialize adapter structure.\n");
		goto err_init_adapter;
	}

1097 1098
	priv->dev = dev;
	priv->card = card;
1099 1100 1101 1102
	priv->mesh_open = 0;
	priv->infra_open = 0;

	/* Setup the OS Interface to our functions */
1103
	dev->open = lbs_dev_open;
1104
	dev->hard_start_xmit = lbs_hard_start_xmit;
1105
	dev->stop = lbs_eth_stop;
1106 1107 1108
	dev->set_mac_address = lbs_set_mac_address;
	dev->tx_timeout = lbs_tx_timeout;
	dev->get_stats = lbs_get_stats;
1109
	dev->watchdog_timeo = 5 * HZ;
1110
	dev->ethtool_ops = &lbs_ethtool_ops;
1111
#ifdef	WIRELESS_EXT
1112
	dev->wireless_handlers = (struct iw_handler_def *)&lbs_handler_def;
1113 1114
#endif
	dev->flags |= IFF_BROADCAST | IFF_MULTICAST;
1115
	dev->set_multicast_list = lbs_set_multicast_list;
1116

1117 1118
	SET_NETDEV_DEV(dev, dmdev);

1119
	priv->rtap_net_dev = NULL;
1120 1121 1122

	lbs_deb_thread("Starting main thread...\n");
	init_waitqueue_head(&priv->waitq);
1123
	priv->main_thread = kthread_run(lbs_thread, dev, "lbs_main");
1124 1125
	if (IS_ERR(priv->main_thread)) {
		lbs_deb_thread("Error creating main thread.\n");
1126
		goto err_init_adapter;
1127 1128
	}

1129 1130 1131
	priv->work_thread = create_singlethread_workqueue("lbs_worker");
	INIT_DELAYED_WORK(&priv->assoc_work, lbs_association_worker);
	INIT_DELAYED_WORK(&priv->scan_work, lbs_scan_worker);
1132
	INIT_WORK(&priv->sync_channel, lbs_sync_channel_worker);
1133

1134 1135 1136
	sprintf(priv->mesh_ssid, "mesh");
	priv->mesh_ssid_len = 4;

1137 1138 1139
	priv->wol_criteria = 0xffffffff;
	priv->wol_gpio = 0xff;

1140 1141
	goto done;

1142
err_init_adapter:
1143
	lbs_free_adapter(priv);
1144
	free_netdev(dev);
1145
	priv = NULL;
1146

1147
done:
1148
	lbs_deb_leave_args(LBS_DEB_MAIN, "priv %p", priv);
1149 1150
	return priv;
}
1151
EXPORT_SYMBOL_GPL(lbs_add_card);
1152

1153

1154
int lbs_remove_card(struct lbs_private *priv)
1155
{
1156
	struct net_device *dev = priv->dev;
1157
	union iwreq_data wrqu;
1158 1159

	lbs_deb_enter(LBS_DEB_MAIN);
1160

1161
	lbs_remove_mesh(priv);
1162
	lbs_remove_rtap(priv);
1163

1164
	dev = priv->dev;
1165

1166 1167 1168
	cancel_delayed_work(&priv->scan_work);
	cancel_delayed_work(&priv->assoc_work);
	destroy_workqueue(priv->work_thread);
1169

1170 1171
	if (priv->psmode == LBS802_11POWERMODEMAX_PSP) {
		priv->psmode = LBS802_11POWERMODECAM;
1172
		lbs_ps_wakeup(priv, CMD_OPTION_WAITFORRSP);
1173 1174
	}

1175 1176 1177 1178 1179
	memset(wrqu.ap_addr.sa_data, 0xaa, ETH_ALEN);
	wrqu.ap_addr.sa_family = ARPHRD_ETHER;
	wireless_send_event(priv->dev, SIOCGIWAP, &wrqu, NULL);

	/* Stop the thread servicing the interrupts */
1180
	priv->surpriseremoved = 1;
1181 1182
	kthread_stop(priv->main_thread);

1183
	lbs_free_adapter(priv);
1184 1185 1186 1187 1188 1189 1190

	priv->dev = NULL;
	free_netdev(dev);

	lbs_deb_leave(LBS_DEB_MAIN);
	return 0;
}
1191
EXPORT_SYMBOL_GPL(lbs_remove_card);
1192 1193


1194
int lbs_start_card(struct lbs_private *priv)
1195 1196 1197 1198 1199 1200 1201
{
	struct net_device *dev = priv->dev;
	int ret = -1;

	lbs_deb_enter(LBS_DEB_MAIN);

	/* poke the firmware */
1202
	ret = lbs_setup_firmware(priv);
1203 1204 1205 1206
	if (ret)
		goto done;

	/* init 802.11d */
1207
	lbs_init_11d(priv);
1208 1209

	if (register_netdev(dev)) {
1210
		lbs_pr_err("cannot register ethX device\n");
1211
		goto done;
1212
	}
1213 1214
	if (device_create_file(&dev->dev, &dev_attr_lbs_rtap))
		lbs_pr_err("cannot register lbs_rtap attribute\n");
1215 1216 1217

	lbs_update_channel(priv);

1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244
	/* 5.0.16p0 is known to NOT support any mesh */
	if (priv->fwrelease > 0x05001000) {
		/* Enable mesh, if supported, and work out which TLV it uses.
		   0x100 + 291 is an unofficial value used in 5.110.20.pXX
		   0x100 + 37 is the official value used in 5.110.21.pXX
		   but we check them in that order because 20.pXX doesn't
		   give an error -- it just silently fails. */

		/* 5.110.20.pXX firmware will fail the command if the channel
		   doesn't match the existing channel. But only if the TLV
		   is correct. If the channel is wrong, _BOTH_ versions will
		   give an error to 0x100+291, and allow 0x100+37 to succeed.
		   It's just that 5.110.20.pXX will not have done anything
		   useful */

		priv->mesh_tlv = 0x100 + 291;
		if (lbs_mesh_config(priv, 1, priv->curbssparams.channel)) {
			priv->mesh_tlv = 0x100 + 37;
			if (lbs_mesh_config(priv, 1, priv->curbssparams.channel))
				priv->mesh_tlv = 0;
		}
		if (priv->mesh_tlv) {
			lbs_add_mesh(priv);

			if (device_create_file(&dev->dev, &dev_attr_lbs_mesh))
				lbs_pr_err("cannot register lbs_mesh attribute\n");
		}
1245
	}
1246

1247
	lbs_debugfs_init_one(priv, dev);
1248

1249 1250
	lbs_pr_info("%s: Marvell WLAN 802.11 adapter\n", dev->name);

1251
	ret = 0;
1252

1253
done:
1254 1255 1256
	lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
	return ret;
}
1257
EXPORT_SYMBOL_GPL(lbs_start_card);
1258 1259


1260
int lbs_stop_card(struct lbs_private *priv)
1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271
{
	struct net_device *dev = priv->dev;
	int ret = -1;
	struct cmd_ctrl_node *cmdnode;
	unsigned long flags;

	lbs_deb_enter(LBS_DEB_MAIN);

	netif_stop_queue(priv->dev);
	netif_carrier_off(priv->dev);

1272
	lbs_debugfs_remove_one(priv);
1273
	device_remove_file(&dev->dev, &dev_attr_lbs_rtap);
1274 1275
	if (priv->mesh_tlv)
		device_remove_file(&dev->dev, &dev_attr_lbs_mesh);
1276 1277

	/* Flush pending command nodes */
1278 1279
	spin_lock_irqsave(&priv->driver_lock, flags);
	list_for_each_entry(cmdnode, &priv->cmdpendingq, list) {
1280
		cmdnode->result = -ENOENT;
1281 1282 1283
		cmdnode->cmdwaitqwoken = 1;
		wake_up_interruptible(&cmdnode->cmdwait_q);
	}
1284
	spin_unlock_irqrestore(&priv->driver_lock, flags);
1285 1286 1287 1288

	unregister_netdev(dev);

	lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
1289
	return ret;
1290
}
1291
EXPORT_SYMBOL_GPL(lbs_stop_card);
1292

1293

1294 1295 1296
/**
 * @brief This function adds mshX interface
 *
1297
 *  @param priv    A pointer to the struct lbs_private structure
1298 1299
 *  @return 	   0 if successful, -X otherwise
 */
1300
static int lbs_add_mesh(struct lbs_private *priv)
1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315
{
	struct net_device *mesh_dev = NULL;
	int ret = 0;

	lbs_deb_enter(LBS_DEB_MESH);

	/* Allocate a virtual mesh device */
	if (!(mesh_dev = alloc_netdev(0, "msh%d", ether_setup))) {
		lbs_deb_mesh("init mshX device failed\n");
		ret = -ENOMEM;
		goto done;
	}
	mesh_dev->priv = priv;
	priv->mesh_dev = mesh_dev;

1316
	mesh_dev->open = lbs_dev_open;
1317
	mesh_dev->hard_start_xmit = lbs_hard_start_xmit;
1318
	mesh_dev->stop = lbs_mesh_stop;
1319 1320 1321
	mesh_dev->get_stats = lbs_get_stats;
	mesh_dev->set_mac_address = lbs_set_mac_address;
	mesh_dev->ethtool_ops = &lbs_ethtool_ops;
1322 1323
	memcpy(mesh_dev->dev_addr, priv->dev->dev_addr,
			sizeof(priv->dev->dev_addr));
1324

1325
	SET_NETDEV_DEV(priv->mesh_dev, priv->dev->dev.parent);
1326

1327
#ifdef	WIRELESS_EXT
1328
	mesh_dev->wireless_handlers = (struct iw_handler_def *)&mesh_handler_def;
1329 1330 1331 1332 1333 1334 1335 1336
#endif
	/* Register virtual mesh interface */
	ret = register_netdev(mesh_dev);
	if (ret) {
		lbs_pr_err("cannot register mshX virtual interface\n");
		goto err_free;
	}

1337
	ret = sysfs_create_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354
	if (ret)
		goto err_unregister;

	/* Everything successful */
	ret = 0;
	goto done;

err_unregister:
	unregister_netdev(mesh_dev);

err_free:
	free_netdev(mesh_dev);

done:
	lbs_deb_leave_args(LBS_DEB_MESH, "ret %d", ret);
	return ret;
}
1355

1356
static void lbs_remove_mesh(struct lbs_private *priv)
1357 1358 1359 1360 1361
{
	struct net_device *mesh_dev;


	mesh_dev = priv->mesh_dev;
1362
	if (!mesh_dev)
1363
		return;
1364

1365
	lbs_deb_enter(LBS_DEB_MESH);
1366
	netif_stop_queue(mesh_dev);
1367
	netif_carrier_off(priv->mesh_dev);
1368
	sysfs_remove_group(&(mesh_dev->dev.kobj), &lbs_mesh_attr_group);
1369
	unregister_netdev(mesh_dev);
1370
	priv->mesh_dev = NULL;
1371
	free_netdev(mesh_dev);
1372
	lbs_deb_leave(LBS_DEB_MESH);
1373 1374
}

1375 1376 1377 1378 1379 1380 1381 1382 1383
/**
 *  @brief This function finds the CFP in
 *  region_cfp_table based on region and band parameter.
 *
 *  @param region  The region code
 *  @param band	   The band
 *  @param cfp_no  A pointer to CFP number
 *  @return 	   A pointer to CFP
 */
1384
struct chan_freq_power *lbs_get_region_cfp_table(u8 region, int *cfp_no)
1385 1386 1387
{
	int i, end;

1388
	lbs_deb_enter(LBS_DEB_MAIN);
1389

1390
	end = ARRAY_SIZE(region_cfp_table);
1391 1392

	for (i = 0; i < end ; i++) {
1393
		lbs_deb_main("region_cfp_table[i].region=%d\n",
1394 1395 1396
			region_cfp_table[i].region);
		if (region_cfp_table[i].region == region) {
			*cfp_no = region_cfp_table[i].cfp_no_BG;
1397
			lbs_deb_leave(LBS_DEB_MAIN);
1398 1399 1400 1401
			return region_cfp_table[i].cfp_BG;
		}
	}

1402
	lbs_deb_leave_args(LBS_DEB_MAIN, "ret NULL");
1403 1404 1405
	return NULL;
}

1406
int lbs_set_regiontable(struct lbs_private *priv, u8 region, u8 band)
1407
{
1408
	int ret = 0;
1409 1410 1411 1412 1413
	int i = 0;

	struct chan_freq_power *cfp;
	int cfp_no;

1414
	lbs_deb_enter(LBS_DEB_MAIN);
1415

1416
	memset(priv->region_channel, 0, sizeof(priv->region_channel));
1417

1418
	cfp = lbs_get_region_cfp_table(region, &cfp_no);
1419 1420 1421 1422 1423 1424 1425 1426
	if (cfp != NULL) {
		priv->region_channel[i].nrcfp = cfp_no;
		priv->region_channel[i].CFP = cfp;
	} else {
		lbs_deb_main("wrong region code %#x in band B/G\n",
		       region);
		ret = -1;
		goto out;
1427
	}
1428 1429 1430 1431
	priv->region_channel[i].valid = 1;
	priv->region_channel[i].region = region;
	priv->region_channel[i].band = band;
	i++;
1432 1433 1434
out:
	lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
	return ret;
1435 1436 1437 1438 1439 1440 1441 1442 1443 1444
}

/**
 *  @brief This function handles the interrupt. it will change PS
 *  state if applicable. it will wake up main_thread to handle
 *  the interrupt event as well.
 *
 *  @param dev     A pointer to net_device structure
 *  @return 	   n/a
 */
1445
void lbs_interrupt(struct lbs_private *priv)
1446
{
1447
	lbs_deb_enter(LBS_DEB_THREAD);
1448

1449
	lbs_deb_thread("lbs_interrupt: intcounter=%d\n", priv->intcounter);
1450
	priv->intcounter++;
1451
	if (priv->psstate == PS_STATE_SLEEP)
1452
		priv->psstate = PS_STATE_AWAKE;
1453
	wake_up_interruptible(&priv->waitq);
1454

1455
	lbs_deb_leave(LBS_DEB_THREAD);
1456
}
1457
EXPORT_SYMBOL_GPL(lbs_interrupt);
1458

1459
static int __init lbs_init_module(void)
1460
{
1461
	lbs_deb_enter(LBS_DEB_MAIN);
1462 1463 1464 1465
	memset(&confirm_sleep, 0, sizeof(confirm_sleep));
	confirm_sleep.hdr.command = cpu_to_le16(CMD_802_11_PS_MODE);
	confirm_sleep.hdr.size = cpu_to_le16(sizeof(confirm_sleep));
	confirm_sleep.action = cpu_to_le16(CMD_SUBCMD_SLEEP_CONFIRMED);
1466
	lbs_debugfs_init();
1467 1468
	lbs_deb_leave(LBS_DEB_MAIN);
	return 0;
1469 1470
}

1471
static void __exit lbs_exit_module(void)
1472
{
1473
	lbs_deb_enter(LBS_DEB_MAIN);
1474
	lbs_debugfs_remove();
1475
	lbs_deb_leave(LBS_DEB_MAIN);
1476 1477
}

1478 1479 1480 1481
/*
 * rtap interface support fuctions
 */

1482
static int lbs_rtap_open(struct net_device *dev)
1483
{
1484
	/* Yes, _stop_ the queue. Because we don't support injection */
1485 1486 1487 1488 1489
	lbs_deb_enter(LBS_DEB_MAIN);
	netif_carrier_off(dev);
	netif_stop_queue(dev);
	lbs_deb_leave(LBS_DEB_LEAVE);
	return 0;
1490 1491
}

1492
static int lbs_rtap_stop(struct net_device *dev)
1493
{
1494 1495 1496
	lbs_deb_enter(LBS_DEB_MAIN);
	lbs_deb_leave(LBS_DEB_MAIN);
	return 0;
1497 1498
}

1499
static int lbs_rtap_hard_start_xmit(struct sk_buff *skb, struct net_device *dev)
1500
{
1501 1502
	netif_stop_queue(dev);
	return NETDEV_TX_BUSY;
1503 1504
}

1505
static struct net_device_stats *lbs_rtap_get_stats(struct net_device *dev)
1506
{
1507
	struct lbs_private *priv = dev->priv;
1508
	lbs_deb_enter(LBS_DEB_NET);
1509
	return &priv->stats;
1510 1511 1512
}


1513
static void lbs_remove_rtap(struct lbs_private *priv)
1514
{
1515
	lbs_deb_enter(LBS_DEB_MAIN);
1516 1517 1518
	if (priv->rtap_net_dev == NULL)
		return;
	unregister_netdev(priv->rtap_net_dev);
1519
	free_netdev(priv->rtap_net_dev);
1520
	priv->rtap_net_dev = NULL;
1521
	lbs_deb_leave(LBS_DEB_MAIN);
1522 1523
}

1524
static int lbs_add_rtap(struct lbs_private *priv)
1525
{
1526
	int ret = 0;
1527
	struct net_device *rtap_dev;
1528

1529 1530 1531 1532 1533
	lbs_deb_enter(LBS_DEB_MAIN);
	if (priv->rtap_net_dev) {
		ret = -EPERM;
		goto out;
	}
1534

1535
	rtap_dev = alloc_netdev(0, "rtap%d", ether_setup);
1536 1537 1538 1539
	if (rtap_dev == NULL) {
		ret = -ENOMEM;
		goto out;
	}
1540

1541
	memcpy(rtap_dev->dev_addr, priv->current_addr, ETH_ALEN);
1542 1543 1544 1545 1546 1547 1548
	rtap_dev->type = ARPHRD_IEEE80211_RADIOTAP;
	rtap_dev->open = lbs_rtap_open;
	rtap_dev->stop = lbs_rtap_stop;
	rtap_dev->get_stats = lbs_rtap_get_stats;
	rtap_dev->hard_start_xmit = lbs_rtap_hard_start_xmit;
	rtap_dev->set_multicast_list = lbs_set_multicast_list;
	rtap_dev->priv = priv;
1549

1550 1551
	ret = register_netdev(rtap_dev);
	if (ret) {
1552
		free_netdev(rtap_dev);
1553
		goto out;
1554
	}
1555
	priv->rtap_net_dev = rtap_dev;
1556

1557 1558 1559
out:
	lbs_deb_leave_args(LBS_DEB_MAIN, "ret %d", ret);
	return ret;
1560 1561 1562
}


1563 1564
module_init(lbs_init_module);
module_exit(lbs_exit_module);
1565

1566
MODULE_DESCRIPTION("Libertas WLAN Driver Library");
1567 1568
MODULE_AUTHOR("Marvell International Ltd.");
MODULE_LICENSE("GPL");