cmd.c 55.6 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13
/**
  * This file contains the handling of command.
  * It prepares command and sends it to firmware when it is ready.
  */

#include <net/iw_handler.h>
#include "host.h"
#include "hostcmd.h"
#include "decl.h"
#include "defs.h"
#include "dev.h"
#include "join.h"
#include "wext.h"
14
#include "cmd.h"
15

16 17
static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv);
static void lbs_set_cmd_ctrl_node(struct lbs_private *priv,
18
		    struct cmd_ctrl_node *ptempnode,
19
		    void *pdata_buf);
20

21 22

/**
23
 *  @brief Checks whether a command is allowed in Power Save mode
24 25
 *
 *  @param command the command ID
26
 *  @return 	   1 if allowed, 0 if not allowed
27
 */
28
static u8 is_command_allowed_in_ps(u16 cmd)
29
{
30 31 32 33 34
	switch (cmd) {
	case CMD_802_11_RSSI:
		return 1;
	default:
		break;
35 36 37 38
	}
	return 0;
}

39 40 41 42 43 44 45 46
/**
 *  @brief Updates the hardware details like MAC address and regulatory region
 *
 *  @param priv    	A pointer to struct lbs_private structure
 *
 *  @return 	   	0 on success, error on failure
 */
int lbs_update_hw_spec(struct lbs_private *priv)
47
{
48 49 50 51
	struct cmd_ds_get_hw_spec cmd;
	int ret = -1;
	u32 i;
	DECLARE_MAC_BUF(mac);
52

53
	lbs_deb_enter(LBS_DEB_CMD);
54

55 56 57
	memset(&cmd, 0, sizeof(cmd));
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
	memcpy(cmd.permanentaddr, priv->current_addr, ETH_ALEN);
58
	ret = lbs_cmd_with_response(priv, CMD_GET_HW_SPEC, &cmd);
59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92
	if (ret)
		goto out;

	priv->fwcapinfo = le32_to_cpu(cmd.fwcapinfo);
	memcpy(priv->fwreleasenumber, cmd.fwreleasenumber, 4);

	lbs_deb_cmd("GET_HW_SPEC: firmware release %u.%u.%up%u\n",
		    priv->fwreleasenumber[2], priv->fwreleasenumber[1],
		    priv->fwreleasenumber[0], priv->fwreleasenumber[3]);
	lbs_deb_cmd("GET_HW_SPEC: MAC addr %s\n",
		    print_mac(mac, cmd.permanentaddr));
	lbs_deb_cmd("GET_HW_SPEC: hardware interface 0x%x, hardware spec 0x%04x\n",
		    cmd.hwifversion, cmd.version);

	/* Clamp region code to 8-bit since FW spec indicates that it should
	 * only ever be 8-bit, even though the field size is 16-bit.  Some firmware
	 * returns non-zero high 8 bits here.
	 */
	priv->regioncode = le16_to_cpu(cmd.regioncode) & 0xFF;

	for (i = 0; i < MRVDRV_MAX_REGION_CODE; i++) {
		/* use the region code to search for the index */
		if (priv->regioncode == lbs_region_code_to_index[i])
			break;
	}

	/* if it's unidentified region code, use the default (USA) */
	if (i >= MRVDRV_MAX_REGION_CODE) {
		priv->regioncode = 0x10;
		lbs_pr_info("unidentified region code; using the default (USA)\n");
	}

	if (priv->current_addr[0] == 0xff)
		memmove(priv->current_addr, cmd.permanentaddr, ETH_ALEN);
93

94 95 96 97 98 99 100 101 102 103 104 105 106 107 108
	memcpy(priv->dev->dev_addr, priv->current_addr, ETH_ALEN);
	if (priv->mesh_dev)
		memcpy(priv->mesh_dev->dev_addr, priv->current_addr, ETH_ALEN);

	if (lbs_set_regiontable(priv, priv->regioncode, 0)) {
		ret = -1;
		goto out;
	}

	if (lbs_set_universaltable(priv, 0)) {
		ret = -1;
		goto out;
	}

out:
109
	lbs_deb_leave(LBS_DEB_CMD);
110
	return ret;
111 112
}

113
int lbs_host_sleep_cfg(struct lbs_private *priv, uint32_t criteria)
114 115 116 117
{
	struct cmd_ds_host_sleep cmd_config;
	int ret;

118
	cmd_config.hdr.size = cpu_to_le16(sizeof(cmd_config));
119
	cmd_config.criteria = cpu_to_le32(criteria);
120 121
	cmd_config.gpio = priv->wol_gpio;
	cmd_config.gap = priv->wol_gap;
122

123
	ret = lbs_cmd_with_response(priv, CMD_802_11_HOST_SLEEP_CFG, &cmd_config);
124 125 126 127
	if (!ret) {
		lbs_deb_cmd("Set WOL criteria to %x\n", criteria);
		priv->wol_criteria = criteria;
	} else {
128 129
		lbs_pr_info("HOST_SLEEP_CFG failed %d\n", ret);
	}
130

131 132 133 134
	return ret;
}
EXPORT_SYMBOL_GPL(lbs_host_sleep_cfg);

135
static int lbs_cmd_802_11_ps_mode(struct lbs_private *priv,
136 137 138 139 140
				   struct cmd_ds_command *cmd,
				   u16 cmd_action)
{
	struct cmd_ds_802_11_ps_mode *psm = &cmd->params.psmode;

141
	lbs_deb_enter(LBS_DEB_CMD);
142

143
	cmd->command = cpu_to_le16(CMD_802_11_PS_MODE);
144 145
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_ps_mode) +
				S_DS_GEN);
146 147
	psm->action = cpu_to_le16(cmd_action);
	psm->multipledtim = 0;
148
	switch (cmd_action) {
149
	case CMD_SUBCMD_ENTER_PS:
150
		lbs_deb_cmd("PS command:" "SubCode- Enter PS\n");
151

152
		psm->locallisteninterval = 0;
153
		psm->nullpktinterval = 0;
154
		psm->multipledtim =
155
		    cpu_to_le16(MRVDRV_DEFAULT_MULTIPLE_DTIM);
156 157
		break;

158
	case CMD_SUBCMD_EXIT_PS:
159
		lbs_deb_cmd("PS command:" "SubCode- Exit PS\n");
160 161
		break;

162
	case CMD_SUBCMD_SLEEP_CONFIRMED:
163
		lbs_deb_cmd("PS command: SubCode- sleep confirm\n");
164 165 166 167 168 169
		break;

	default:
		break;
	}

170
	lbs_deb_leave(LBS_DEB_CMD);
171 172 173
	return 0;
}

174 175
int lbs_cmd_802_11_inactivity_timeout(struct lbs_private *priv,
				      uint16_t cmd_action, uint16_t *timeout)
176
{
177 178
	struct cmd_ds_802_11_inactivity_timeout cmd;
	int ret;
179

180 181
	lbs_deb_enter(LBS_DEB_CMD);

182 183
	cmd.hdr.command = cpu_to_le16(CMD_802_11_INACTIVITY_TIMEOUT);
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
184

185
	cmd.action = cpu_to_le16(cmd_action);
186

187 188
	if (cmd_action == CMD_ACT_SET)
		cmd.timeout = cpu_to_le16(*timeout);
189
	else
190
		cmd.timeout = 0;
191

192 193 194 195 196 197
	ret = lbs_cmd_with_response(priv, CMD_802_11_INACTIVITY_TIMEOUT, &cmd);

	if (!ret)
		*timeout = le16_to_cpu(cmd.timeout);

	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
198 199 200
	return 0;
}

201 202
int lbs_cmd_802_11_sleep_params(struct lbs_private *priv, uint16_t cmd_action,
				struct sleep_params *sp)
203
{
204 205
	struct cmd_ds_802_11_sleep_params cmd;
	int ret;
206

207
	lbs_deb_enter(LBS_DEB_CMD);
208

209
	if (cmd_action == CMD_ACT_GET) {
210 211 212 213 214 215 216 217
		memset(&cmd, 0, sizeof(cmd));
	} else {
		cmd.error = cpu_to_le16(sp->sp_error);
		cmd.offset = cpu_to_le16(sp->sp_offset);
		cmd.stabletime = cpu_to_le16(sp->sp_stabletime);
		cmd.calcontrol = sp->sp_calcontrol;
		cmd.externalsleepclk = sp->sp_extsleepclk;
		cmd.reserved = cpu_to_le16(sp->sp_reserved);
218
	}
219 220
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
	cmd.action = cpu_to_le16(cmd_action);
221

222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239
	ret = lbs_cmd_with_response(priv, CMD_802_11_SLEEP_PARAMS, &cmd);

	if (!ret) {
		lbs_deb_cmd("error 0x%x, offset 0x%x, stabletime 0x%x, "
			    "calcontrol 0x%x extsleepclk 0x%x\n",
			    le16_to_cpu(cmd.error), le16_to_cpu(cmd.offset),
			    le16_to_cpu(cmd.stabletime), cmd.calcontrol,
			    cmd.externalsleepclk);

		sp->sp_error = le16_to_cpu(cmd.error);
		sp->sp_offset = le16_to_cpu(cmd.offset);
		sp->sp_stabletime = le16_to_cpu(cmd.stabletime);
		sp->sp_calcontrol = cmd.calcontrol;
		sp->sp_extsleepclk = cmd.externalsleepclk;
		sp->sp_reserved = le16_to_cpu(cmd.reserved);
	}

	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
240 241 242
	return 0;
}

243 244
int lbs_cmd_802_11_set_wep(struct lbs_private *priv, uint16_t cmd_action,
			   struct assoc_request *assoc)
245
{
246
	struct cmd_ds_802_11_set_wep cmd;
247 248
	int ret = 0;

249
	lbs_deb_enter(LBS_DEB_CMD);
250

251 252
	cmd.hdr.command = cpu_to_le16(CMD_802_11_SET_WEP);
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
253

254
	cmd.action = cpu_to_le16(cmd_action);
255

256 257
	if (cmd_action == CMD_ACT_ADD) {
		int i;
258 259

		/* default tx key index */
260 261
		cmd.keyindex = cpu_to_le16(assoc->wep_tx_keyidx &
					   CMD_WEP_KEY_INDEX_MASK);
262 263 264

		/* Copy key types and material to host command structure */
		for (i = 0; i < 4; i++) {
265
			struct enc_key *pkey = &assoc->wep_keys[i];
266 267 268

			switch (pkey->len) {
			case KEY_LEN_WEP_40:
269 270
				cmd.keytype[i] = CMD_TYPE_WEP_40_BIT;
				memmove(cmd.keymaterial[i], pkey->key, pkey->len);
271
				lbs_deb_cmd("SET_WEP: add key %d (40 bit)\n", i);
272 273
				break;
			case KEY_LEN_WEP_104:
274 275
				cmd.keytype[i] = CMD_TYPE_WEP_104_BIT;
				memmove(cmd.keymaterial[i], pkey->key, pkey->len);
276
				lbs_deb_cmd("SET_WEP: add key %d (104 bit)\n", i);
277 278 279 280
				break;
			case 0:
				break;
			default:
281
				lbs_deb_cmd("SET_WEP: invalid key %d, length %d\n",
282
					    i, pkey->len);
283 284 285 286 287
				ret = -1;
				goto done;
				break;
			}
		}
288
	} else if (cmd_action == CMD_ACT_REMOVE) {
289 290 291
		/* ACT_REMOVE clears _all_ WEP keys */

		/* default tx key index */
292 293
		cmd.keyindex = cpu_to_le16(priv->wep_tx_keyidx &
					   CMD_WEP_KEY_INDEX_MASK);
294
		lbs_deb_cmd("SET_WEP: remove key %d\n", priv->wep_tx_keyidx);
295 296
	}

297
	ret = lbs_cmd_with_response(priv, CMD_802_11_SET_WEP, &cmd);
298
done:
299
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
300 301 302
	return ret;
}

303
static int lbs_cmd_802_11_enable_rsn(struct lbs_private *priv,
304
				      struct cmd_ds_command *cmd,
305 306
				      u16 cmd_action,
				      void * pdata_buf)
307 308
{
	struct cmd_ds_802_11_enable_rsn *penableRSN = &cmd->params.enbrsn;
309
	u32 * enable = pdata_buf;
310 311

	lbs_deb_enter(LBS_DEB_CMD);
312

313
	cmd->command = cpu_to_le16(CMD_802_11_ENABLE_RSN);
314
	cmd->size = cpu_to_le16(sizeof(*penableRSN) + S_DS_GEN);
315
	penableRSN->action = cpu_to_le16(cmd_action);
316

317
	if (cmd_action == CMD_ACT_SET) {
318
		if (*enable)
319
			penableRSN->enable = cpu_to_le16(CMD_ENABLE_RSN);
320
		else
321
			penableRSN->enable = cpu_to_le16(CMD_DISABLE_RSN);
322
		lbs_deb_cmd("ENABLE_RSN: %d\n", *enable);
323 324
	}

325
	lbs_deb_leave(LBS_DEB_CMD);
326 327 328 329
	return 0;
}


330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375
static ssize_t lbs_tlv_size(const u8 *tlv, u16 size)
{
	ssize_t pos = 0;
	struct mrvlietypesheader *tlv_h;
	while (pos < size) {
		u16 length;
		tlv_h = (struct mrvlietypesheader *) tlv;
		if (tlv_h->len == 0)
			return pos;
		length = le16_to_cpu(tlv_h->len) +
			sizeof(struct mrvlietypesheader);
		pos += length;
		tlv += length;
	}
	return pos;
}


static void lbs_cmd_802_11_subscribe_event(struct lbs_private *priv,
	struct cmd_ds_command *cmd, u16 cmd_action,
	void *pdata_buf)
{
	struct cmd_ds_802_11_subscribe_event *events =
		(struct cmd_ds_802_11_subscribe_event *) pdata_buf;

	/* pdata_buf points to a struct cmd_ds_802_11_subscribe_event and room
	 * for various Marvell TLVs */

	lbs_deb_enter(LBS_DEB_CMD);

	cmd->size = cpu_to_le16(sizeof(*events)
			- sizeof(events->tlv)
			+ S_DS_GEN);
	cmd->params.subscribe_event.action = cpu_to_le16(cmd_action);
	if (cmd_action == CMD_ACT_GET) {
		cmd->params.subscribe_event.events = 0;
	} else {
		ssize_t sz = lbs_tlv_size(events->tlv, sizeof(events->tlv));
		cmd->size = cpu_to_le16(le16_to_cpu(cmd->size) + sz);
		cmd->params.subscribe_event.events = events->events;
		memcpy(cmd->params.subscribe_event.tlv, events->tlv, sz);
	}

	lbs_deb_leave(LBS_DEB_CMD);
}

376
static void set_one_wpa_key(struct MrvlIEtype_keyParamSet * pkeyparamset,
377
                            struct enc_key * pkey)
378
{
379 380
	lbs_deb_enter(LBS_DEB_CMD);

381
	if (pkey->flags & KEY_INFO_WPA_ENABLED) {
382
		pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_ENABLED);
383 384 385
	}
	if (pkey->flags & KEY_INFO_WPA_UNICAST) {
		pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_UNICAST);
386 387
	}
	if (pkey->flags & KEY_INFO_WPA_MCAST) {
388 389 390 391
		pkeyparamset->keyinfo |= cpu_to_le16(KEY_INFO_WPA_MCAST);
	}

	pkeyparamset->type = cpu_to_le16(TLV_TYPE_KEY_MATERIAL);
392
	pkeyparamset->keytypeid = cpu_to_le16(pkey->type);
393 394 395 396 397 398
	pkeyparamset->keylen = cpu_to_le16(pkey->len);
	memcpy(pkeyparamset->key, pkey->key, pkey->len);
	pkeyparamset->length = cpu_to_le16(  sizeof(pkeyparamset->keytypeid)
	                                        + sizeof(pkeyparamset->keyinfo)
	                                        + sizeof(pkeyparamset->keylen)
	                                        + sizeof(pkeyparamset->key));
399
	lbs_deb_leave(LBS_DEB_CMD);
400 401
}

402
static int lbs_cmd_802_11_key_material(struct lbs_private *priv,
403 404 405 406 407 408
					struct cmd_ds_command *cmd,
					u16 cmd_action,
					u32 cmd_oid, void *pdata_buf)
{
	struct cmd_ds_802_11_key_material *pkeymaterial =
	    &cmd->params.keymaterial;
409
	struct assoc_request * assoc_req = pdata_buf;
410 411 412
	int ret = 0;
	int index = 0;

413
	lbs_deb_enter(LBS_DEB_CMD);
414

415
	cmd->command = cpu_to_le16(CMD_802_11_KEY_MATERIAL);
416 417
	pkeymaterial->action = cpu_to_le16(cmd_action);

418
	if (cmd_action == CMD_ACT_GET) {
419
		cmd->size = cpu_to_le16(S_DS_GEN + sizeof (pkeymaterial->action));
420 421 422 423 424 425
		ret = 0;
		goto done;
	}

	memset(&pkeymaterial->keyParamSet, 0, sizeof(pkeymaterial->keyParamSet));

426
	if (test_bit(ASSOC_FLAG_WPA_UCAST_KEY, &assoc_req->flags)) {
427
		set_one_wpa_key(&pkeymaterial->keyParamSet[index],
428
		                &assoc_req->wpa_unicast_key);
429 430 431
		index++;
	}

432
	if (test_bit(ASSOC_FLAG_WPA_MCAST_KEY, &assoc_req->flags)) {
433
		set_one_wpa_key(&pkeymaterial->keyParamSet[index],
434
		                &assoc_req->wpa_mcast_key);
435 436 437 438
		index++;
	}

	cmd->size = cpu_to_le16(  S_DS_GEN
439 440
	                        + sizeof (pkeymaterial->action)
	                        + (index * sizeof(struct MrvlIEtype_keyParamSet)));
441 442 443 444

	ret = 0;

done:
445
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
446 447 448
	return ret;
}

449
static int lbs_cmd_802_11_reset(struct lbs_private *priv,
450 451 452 453
				 struct cmd_ds_command *cmd, int cmd_action)
{
	struct cmd_ds_802_11_reset *reset = &cmd->params.reset;

454 455
	lbs_deb_enter(LBS_DEB_CMD);

456
	cmd->command = cpu_to_le16(CMD_802_11_RESET);
457 458 459
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_reset) + S_DS_GEN);
	reset->action = cpu_to_le16(cmd_action);

460
	lbs_deb_leave(LBS_DEB_CMD);
461 462 463
	return 0;
}

464
static int lbs_cmd_802_11_get_log(struct lbs_private *priv,
465 466
				   struct cmd_ds_command *cmd)
{
467
	lbs_deb_enter(LBS_DEB_CMD);
468
	cmd->command = cpu_to_le16(CMD_802_11_GET_LOG);
469 470 471
	cmd->size =
		cpu_to_le16(sizeof(struct cmd_ds_802_11_get_log) + S_DS_GEN);

472
	lbs_deb_leave(LBS_DEB_CMD);
473 474 475
	return 0;
}

476
static int lbs_cmd_802_11_get_stat(struct lbs_private *priv,
477 478
				    struct cmd_ds_command *cmd)
{
479
	lbs_deb_enter(LBS_DEB_CMD);
480
	cmd->command = cpu_to_le16(CMD_802_11_GET_STAT);
481
	cmd->size =
482
	    cpu_to_le16(sizeof(struct cmd_ds_802_11_get_stat) + S_DS_GEN);
483

484
	lbs_deb_leave(LBS_DEB_CMD);
485 486 487
	return 0;
}

488
static int lbs_cmd_802_11_snmp_mib(struct lbs_private *priv,
489 490 491 492 493 494 495
				    struct cmd_ds_command *cmd,
				    int cmd_action,
				    int cmd_oid, void *pdata_buf)
{
	struct cmd_ds_802_11_snmp_mib *pSNMPMIB = &cmd->params.smib;
	u8 ucTemp;

496
	lbs_deb_enter(LBS_DEB_CMD);
497

498
	lbs_deb_cmd("SNMP_CMD: cmd_oid = 0x%x\n", cmd_oid);
499

500
	cmd->command = cpu_to_le16(CMD_802_11_SNMP_MIB);
501
	cmd->size = cpu_to_le16(sizeof(*pSNMPMIB) + S_DS_GEN);
502 503 504 505

	switch (cmd_oid) {
	case OID_802_11_INFRASTRUCTURE_MODE:
	{
506
		u8 mode = (u8) (size_t) pdata_buf;
507 508
		pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
		pSNMPMIB->oid = cpu_to_le16((u16) DESIRED_BSSTYPE_I);
H
Holger Schurig 已提交
509
		pSNMPMIB->bufsize = cpu_to_le16(sizeof(u8));
510
		if (mode == IW_MODE_ADHOC) {
511
			ucTemp = SNMP_MIB_VALUE_ADHOC;
512 513 514 515
		} else {
			/* Infra and Auto modes */
			ucTemp = SNMP_MIB_VALUE_INFRA;
		}
516 517 518 519 520 521 522 523 524 525

		memmove(pSNMPMIB->value, &ucTemp, sizeof(u8));

		break;
	}

	case OID_802_11D_ENABLE:
		{
			u32 ulTemp;

526
			pSNMPMIB->oid = cpu_to_le16((u16) DOT11D_I);
527

528
			if (cmd_action == CMD_ACT_SET) {
H
Holger Schurig 已提交
529 530
				pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
				pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
531
				ulTemp = *(u32 *)pdata_buf;
532
				*((__le16 *)(pSNMPMIB->value)) =
533 534 535 536 537 538 539 540 541
				    cpu_to_le16((u16) ulTemp);
			}
			break;
		}

	case OID_802_11_FRAGMENTATION_THRESHOLD:
		{
			u32 ulTemp;

542
			pSNMPMIB->oid = cpu_to_le16((u16) FRAGTHRESH_I);
543

544 545 546 547
			if (cmd_action == CMD_ACT_GET) {
				pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
			} else if (cmd_action == CMD_ACT_SET) {
				pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
548
				pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
549
				ulTemp = *((u32 *) pdata_buf);
550
				*((__le16 *)(pSNMPMIB->value)) =
551 552 553 554 555 556 557 558 559 560 561
				    cpu_to_le16((u16) ulTemp);

			}

			break;
		}

	case OID_802_11_RTS_THRESHOLD:
		{

			u32 ulTemp;
H
Holger Schurig 已提交
562
			pSNMPMIB->oid = cpu_to_le16(RTSTHRESH_I);
563

564 565 566 567
			if (cmd_action == CMD_ACT_GET) {
				pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
			} else if (cmd_action == CMD_ACT_SET) {
				pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
568 569 570
				pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
				ulTemp = *((u32 *)pdata_buf);
				*(__le16 *)(pSNMPMIB->value) =
571 572 573 574 575 576
				    cpu_to_le16((u16) ulTemp);

			}
			break;
		}
	case OID_802_11_TX_RETRYCOUNT:
577
		pSNMPMIB->oid = cpu_to_le16((u16) SHORT_RETRYLIM_I);
578

579 580 581 582
		if (cmd_action == CMD_ACT_GET) {
			pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_GET);
		} else if (cmd_action == CMD_ACT_SET) {
			pSNMPMIB->querytype = cpu_to_le16(CMD_ACT_SET);
583
			pSNMPMIB->bufsize = cpu_to_le16(sizeof(u16));
584
			*((__le16 *)(pSNMPMIB->value)) =
585
			    cpu_to_le16((u16) priv->txretrycount);
586 587 588 589 590 591 592
		}

		break;
	default:
		break;
	}

593
	lbs_deb_cmd(
594
	       "SNMP_CMD: command=0x%x, size=0x%x, seqnum=0x%x, result=0x%x\n",
595 596
	       le16_to_cpu(cmd->command), le16_to_cpu(cmd->size),
	       le16_to_cpu(cmd->seqnum), le16_to_cpu(cmd->result));
597

598
	lbs_deb_cmd(
599
	       "SNMP_CMD: action 0x%x, oid 0x%x, oidsize 0x%x, value 0x%x\n",
600 601 602
	       le16_to_cpu(pSNMPMIB->querytype), le16_to_cpu(pSNMPMIB->oid),
	       le16_to_cpu(pSNMPMIB->bufsize),
	       le16_to_cpu(*(__le16 *) pSNMPMIB->value));
603

604
	lbs_deb_leave(LBS_DEB_CMD);
605 606 607
	return 0;
}

608
static int lbs_cmd_802_11_rf_tx_power(struct lbs_private *priv,
609 610 611 612 613 614
				       struct cmd_ds_command *cmd,
				       u16 cmd_action, void *pdata_buf)
{

	struct cmd_ds_802_11_rf_tx_power *prtp = &cmd->params.txp;

615
	lbs_deb_enter(LBS_DEB_CMD);
616 617

	cmd->size =
618
	    cpu_to_le16((sizeof(struct cmd_ds_802_11_rf_tx_power)) + S_DS_GEN);
619
	cmd->command = cpu_to_le16(CMD_802_11_RF_TX_POWER);
620
	prtp->action = cpu_to_le16(cmd_action);
621

622 623 624
	lbs_deb_cmd("RF_TX_POWER_CMD: size:%d cmd:0x%x Act:%d\n",
		    le16_to_cpu(cmd->size), le16_to_cpu(cmd->command),
		    le16_to_cpu(prtp->action));
625 626

	switch (cmd_action) {
627 628
	case CMD_ACT_TX_POWER_OPT_GET:
		prtp->action = cpu_to_le16(CMD_ACT_GET);
629 630 631
		prtp->currentlevel = 0;
		break;

632 633 634
	case CMD_ACT_TX_POWER_OPT_SET_HIGH:
		prtp->action = cpu_to_le16(CMD_ACT_SET);
		prtp->currentlevel = cpu_to_le16(CMD_ACT_TX_POWER_INDEX_HIGH);
635 636
		break;

637 638 639
	case CMD_ACT_TX_POWER_OPT_SET_MID:
		prtp->action = cpu_to_le16(CMD_ACT_SET);
		prtp->currentlevel = cpu_to_le16(CMD_ACT_TX_POWER_INDEX_MID);
640 641
		break;

642 643
	case CMD_ACT_TX_POWER_OPT_SET_LOW:
		prtp->action = cpu_to_le16(CMD_ACT_SET);
644 645 646
		prtp->currentlevel = cpu_to_le16(*((u16 *) pdata_buf));
		break;
	}
647 648

	lbs_deb_leave(LBS_DEB_CMD);
649 650 651
	return 0;
}

652
static int lbs_cmd_802_11_monitor_mode(struct lbs_private *priv,
653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671
				      struct cmd_ds_command *cmd,
				      u16 cmd_action, void *pdata_buf)
{
	struct cmd_ds_802_11_monitor_mode *monitor = &cmd->params.monitor;

	cmd->command = cpu_to_le16(CMD_802_11_MONITOR_MODE);
	cmd->size =
	    cpu_to_le16(sizeof(struct cmd_ds_802_11_monitor_mode) +
			     S_DS_GEN);

	monitor->action = cpu_to_le16(cmd_action);
	if (cmd_action == CMD_ACT_SET) {
		monitor->mode =
		    cpu_to_le16((u16) (*(u32 *) pdata_buf));
	}

	return 0;
}

672
static int lbs_cmd_802_11_rate_adapt_rateset(struct lbs_private *priv,
673 674 675 676 677 678
					      struct cmd_ds_command *cmd,
					      u16 cmd_action)
{
	struct cmd_ds_802_11_rate_adapt_rateset
	*rateadapt = &cmd->params.rateset;

679
	lbs_deb_enter(LBS_DEB_CMD);
680 681 682
	cmd->size =
	    cpu_to_le16(sizeof(struct cmd_ds_802_11_rate_adapt_rateset)
			     + S_DS_GEN);
683
	cmd->command = cpu_to_le16(CMD_802_11_RATE_ADAPT_RATESET);
684

685
	rateadapt->action = cpu_to_le16(cmd_action);
686 687
	rateadapt->enablehwauto = cpu_to_le16(priv->enablehwauto);
	rateadapt->bitmap = cpu_to_le16(priv->ratebitmap);
688

689
	lbs_deb_leave(LBS_DEB_CMD);
690 691 692
	return 0;
}

693 694 695 696 697 698 699 700
/**
 *  @brief Get the current data rate
 *
 *  @param priv    	A pointer to struct lbs_private structure
 *
 *  @return 	   	The data rate on success, error on failure
 */
int lbs_get_data_rate(struct lbs_private *priv)
701
{
702 703
	struct cmd_ds_802_11_data_rate cmd;
	int ret = -1;
704

705
	lbs_deb_enter(LBS_DEB_CMD);
706

707 708 709 710
	memset(&cmd, 0, sizeof(cmd));
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
	cmd.action = cpu_to_le16(CMD_ACT_GET_TX_RATE);

711
	ret = lbs_cmd_with_response(priv, CMD_802_11_DATA_RATE, &cmd);
712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754
	if (ret)
		goto out;

	lbs_deb_hex(LBS_DEB_CMD, "DATA_RATE_RESP", (u8 *) &cmd, sizeof (cmd));

	ret = (int) lbs_fw_index_to_data_rate(cmd.rates[0]);
	lbs_deb_cmd("DATA_RATE: current rate 0x%02x\n", ret);

out:
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
	return ret;
}

/**
 *  @brief Set the data rate
 *
 *  @param priv    	A pointer to struct lbs_private structure
 *  @param rate  	The desired data rate, or 0 to clear a locked rate
 *
 *  @return 	   	0 on success, error on failure
 */
int lbs_set_data_rate(struct lbs_private *priv, u8 rate)
{
	struct cmd_ds_802_11_data_rate cmd;
	int ret = 0;

	lbs_deb_enter(LBS_DEB_CMD);

	memset(&cmd, 0, sizeof(cmd));
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));

	if (rate > 0) {
		cmd.action = cpu_to_le16(CMD_ACT_SET_TX_FIX_RATE);
		cmd.rates[0] = lbs_data_rate_to_fw_index(rate);
		if (cmd.rates[0] == 0) {
			lbs_deb_cmd("DATA_RATE: invalid requested rate of"
			            " 0x%02X\n", rate);
			ret = 0;
			goto out;
		}
		lbs_deb_cmd("DATA_RATE: set fixed 0x%02X\n", cmd.rates[0]);
	} else {
		cmd.action = cpu_to_le16(CMD_ACT_SET_TX_AUTO);
755
		lbs_deb_cmd("DATA_RATE: setting auto\n");
756 757
	}

758
	ret = lbs_cmd_with_response(priv, CMD_802_11_DATA_RATE, &cmd);
759 760 761 762 763 764 765 766 767 768 769 770 771 772
	if (ret)
		goto out;

	lbs_deb_hex(LBS_DEB_CMD, "DATA_RATE_RESP", (u8 *) &cmd, sizeof (cmd));

	/* FIXME: get actual rates FW can do if this command actually returns
	 * all data rates supported.
	 */
	priv->cur_rate = lbs_fw_index_to_data_rate(cmd.rates[0]);
	lbs_deb_cmd("DATA_RATE: current rate is 0x%02x\n", priv->cur_rate);

out:
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
	return ret;
773 774
}

775
static int lbs_cmd_mac_multicast_adr(struct lbs_private *priv,
776 777 778 779 780
				      struct cmd_ds_command *cmd,
				      u16 cmd_action)
{
	struct cmd_ds_mac_multicast_adr *pMCastAdr = &cmd->params.madr;

781
	lbs_deb_enter(LBS_DEB_CMD);
782
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_mac_multicast_adr) +
783
			     S_DS_GEN);
784
	cmd->command = cpu_to_le16(CMD_MAC_MULTICAST_ADR);
785

786
	lbs_deb_cmd("MULTICAST_ADR: setting %d addresses\n", pMCastAdr->nr_of_adrs);
787 788
	pMCastAdr->action = cpu_to_le16(cmd_action);
	pMCastAdr->nr_of_adrs =
789 790 791
	    cpu_to_le16((u16) priv->nr_of_multicastmacaddr);
	memcpy(pMCastAdr->maclist, priv->multicastlist,
	       priv->nr_of_multicastmacaddr * ETH_ALEN);
792

793
	lbs_deb_leave(LBS_DEB_CMD);
794 795 796
	return 0;
}

797 798 799 800 801 802 803 804
/**
 *  @brief Get the radio channel
 *
 *  @param priv    	A pointer to struct lbs_private structure
 *
 *  @return 	   	The channel on success, error on failure
 */
int lbs_get_channel(struct lbs_private *priv)
805
{
806 807
	struct cmd_ds_802_11_rf_channel cmd;
	int ret = 0;
808

809
	lbs_deb_enter(LBS_DEB_CMD);
810

811 812
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
	cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_GET);
813

814
	ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
815 816
	if (ret)
		goto out;
817

818 819
	ret = le16_to_cpu(cmd.channel);
	lbs_deb_cmd("current radio channel is %d\n", ret);
820 821 822 823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845

out:
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
	return ret;
}

/**
 *  @brief Set the radio channel
 *
 *  @param priv    	A pointer to struct lbs_private structure
 *  @param channel  	The desired channel, or 0 to clear a locked channel
 *
 *  @return 	   	0 on success, error on failure
 */
int lbs_set_channel(struct lbs_private *priv, u8 channel)
{
	struct cmd_ds_802_11_rf_channel cmd;
	u8 old_channel = priv->curbssparams.channel;
	int ret = 0;

	lbs_deb_enter(LBS_DEB_CMD);

	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
	cmd.action = cpu_to_le16(CMD_OPT_802_11_RF_CHANNEL_SET);
	cmd.channel = cpu_to_le16(channel);

846
	ret = lbs_cmd_with_response(priv, CMD_802_11_RF_CHANNEL, &cmd);
847 848 849
	if (ret)
		goto out;

850 851 852
	priv->curbssparams.channel = (uint8_t) le16_to_cpu(cmd.channel);
	lbs_deb_cmd("channel switch from %d to %d\n", old_channel,
		priv->curbssparams.channel);
853 854 855 856

out:
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
	return ret;
857 858
}

859
static int lbs_cmd_802_11_rssi(struct lbs_private *priv,
860 861 862
				struct cmd_ds_command *cmd)
{

863
	lbs_deb_enter(LBS_DEB_CMD);
864
	cmd->command = cpu_to_le16(CMD_802_11_RSSI);
865
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_rssi) + S_DS_GEN);
866
	cmd->params.rssi.N = cpu_to_le16(DEFAULT_BCN_AVG_FACTOR);
867 868

	/* reset Beacon SNR/NF/RSSI values */
869 870 871 872 873 874
	priv->SNR[TYPE_BEACON][TYPE_NOAVG] = 0;
	priv->SNR[TYPE_BEACON][TYPE_AVG] = 0;
	priv->NF[TYPE_BEACON][TYPE_NOAVG] = 0;
	priv->NF[TYPE_BEACON][TYPE_AVG] = 0;
	priv->RSSI[TYPE_BEACON][TYPE_NOAVG] = 0;
	priv->RSSI[TYPE_BEACON][TYPE_AVG] = 0;
875

876
	lbs_deb_leave(LBS_DEB_CMD);
877 878 879
	return 0;
}

880
static int lbs_cmd_reg_access(struct lbs_private *priv,
881 882 883
			       struct cmd_ds_command *cmdptr,
			       u8 cmd_action, void *pdata_buf)
{
884
	struct lbs_offset_value *offval;
885

886
	lbs_deb_enter(LBS_DEB_CMD);
887

888
	offval = (struct lbs_offset_value *)pdata_buf;
889

H
Holger Schurig 已提交
890
	switch (le16_to_cpu(cmdptr->command)) {
891
	case CMD_MAC_REG_ACCESS:
892 893 894 895
		{
			struct cmd_ds_mac_reg_access *macreg;

			cmdptr->size =
896 897
			    cpu_to_le16(sizeof (struct cmd_ds_mac_reg_access)
					+ S_DS_GEN);
898 899 900 901 902 903 904 905 906 907 908
			macreg =
			    (struct cmd_ds_mac_reg_access *)&cmdptr->params.
			    macreg;

			macreg->action = cpu_to_le16(cmd_action);
			macreg->offset = cpu_to_le16((u16) offval->offset);
			macreg->value = cpu_to_le32(offval->value);

			break;
		}

909
	case CMD_BBP_REG_ACCESS:
910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926 927
		{
			struct cmd_ds_bbp_reg_access *bbpreg;

			cmdptr->size =
			    cpu_to_le16(sizeof
					     (struct cmd_ds_bbp_reg_access)
					     + S_DS_GEN);
			bbpreg =
			    (struct cmd_ds_bbp_reg_access *)&cmdptr->params.
			    bbpreg;

			bbpreg->action = cpu_to_le16(cmd_action);
			bbpreg->offset = cpu_to_le16((u16) offval->offset);
			bbpreg->value = (u8) offval->value;

			break;
		}

928
	case CMD_RF_REG_ACCESS:
929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950
		{
			struct cmd_ds_rf_reg_access *rfreg;

			cmdptr->size =
			    cpu_to_le16(sizeof
					     (struct cmd_ds_rf_reg_access) +
					     S_DS_GEN);
			rfreg =
			    (struct cmd_ds_rf_reg_access *)&cmdptr->params.
			    rfreg;

			rfreg->action = cpu_to_le16(cmd_action);
			rfreg->offset = cpu_to_le16((u16) offval->offset);
			rfreg->value = (u8) offval->value;

			break;
		}

	default:
		break;
	}

951
	lbs_deb_leave(LBS_DEB_CMD);
952 953 954
	return 0;
}

955
static int lbs_cmd_802_11_mac_address(struct lbs_private *priv,
956 957 958 959
				       struct cmd_ds_command *cmd,
				       u16 cmd_action)
{

960
	lbs_deb_enter(LBS_DEB_CMD);
961
	cmd->command = cpu_to_le16(CMD_802_11_MAC_ADDRESS);
962
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_mac_address) +
963 964 965 966 967
			     S_DS_GEN);
	cmd->result = 0;

	cmd->params.macadd.action = cpu_to_le16(cmd_action);

968
	if (cmd_action == CMD_ACT_SET) {
969
		memcpy(cmd->params.macadd.macadd,
970 971
		       priv->current_addr, ETH_ALEN);
		lbs_deb_hex(LBS_DEB_CMD, "SET_CMD: MAC addr", priv->current_addr, 6);
972 973
	}

974
	lbs_deb_leave(LBS_DEB_CMD);
975 976 977
	return 0;
}

978
static int lbs_cmd_802_11_eeprom_access(struct lbs_private *priv,
979 980 981
					 struct cmd_ds_command *cmd,
					 int cmd_action, void *pdata_buf)
{
982
	struct lbs_ioctl_regrdwr *ea = pdata_buf;
983

984
	lbs_deb_enter(LBS_DEB_CMD);
985

986
	cmd->command = cpu_to_le16(CMD_802_11_EEPROM_ACCESS);
987 988
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_eeprom_access) +
				S_DS_GEN);
989 990 991 992 993 994 995
	cmd->result = 0;

	cmd->params.rdeeprom.action = cpu_to_le16(ea->action);
	cmd->params.rdeeprom.offset = cpu_to_le16(ea->offset);
	cmd->params.rdeeprom.bytecount = cpu_to_le16(ea->NOB);
	cmd->params.rdeeprom.value = 0;

996
	lbs_deb_leave(LBS_DEB_CMD);
997 998 999
	return 0;
}

1000
static int lbs_cmd_bt_access(struct lbs_private *priv,
1001 1002 1003 1004
			       struct cmd_ds_command *cmd,
			       u16 cmd_action, void *pdata_buf)
{
	struct cmd_ds_bt_access *bt_access = &cmd->params.bt;
1005
	lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1006

1007
	cmd->command = cpu_to_le16(CMD_BT_ACCESS);
1008
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_bt_access) + S_DS_GEN);
1009 1010 1011 1012
	cmd->result = 0;
	bt_access->action = cpu_to_le16(cmd_action);

	switch (cmd_action) {
1013
	case CMD_ACT_BT_ACCESS_ADD:
1014
		memcpy(bt_access->addr1, pdata_buf, 2 * ETH_ALEN);
1015
		lbs_deb_hex(LBS_DEB_MESH, "BT_ADD: blinded MAC addr", bt_access->addr1, 6);
1016
		break;
1017
	case CMD_ACT_BT_ACCESS_DEL:
1018
		memcpy(bt_access->addr1, pdata_buf, 1 * ETH_ALEN);
1019
		lbs_deb_hex(LBS_DEB_MESH, "BT_DEL: blinded MAC addr", bt_access->addr1, 6);
1020
		break;
1021
	case CMD_ACT_BT_ACCESS_LIST:
1022 1023
		bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
		break;
1024
	case CMD_ACT_BT_ACCESS_RESET:
1025
		break;
1026
	case CMD_ACT_BT_ACCESS_SET_INVERT:
1027 1028
		bt_access->id = cpu_to_le32(*(u32 *) pdata_buf);
		break;
1029
	case CMD_ACT_BT_ACCESS_GET_INVERT:
1030
		break;
1031 1032 1033
	default:
		break;
	}
1034
	lbs_deb_leave(LBS_DEB_CMD);
1035 1036 1037
	return 0;
}

1038
static int lbs_cmd_fwt_access(struct lbs_private *priv,
1039 1040 1041 1042
			       struct cmd_ds_command *cmd,
			       u16 cmd_action, void *pdata_buf)
{
	struct cmd_ds_fwt_access *fwt_access = &cmd->params.fwt;
1043
	lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1044

1045
	cmd->command = cpu_to_le16(CMD_FWT_ACCESS);
1046
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_fwt_access) + S_DS_GEN);
1047 1048 1049 1050 1051 1052 1053 1054 1055
	cmd->result = 0;

	if (pdata_buf)
		memcpy(fwt_access, pdata_buf, sizeof(*fwt_access));
	else
		memset(fwt_access, 0, sizeof(*fwt_access));

	fwt_access->action = cpu_to_le16(cmd_action);

1056
	lbs_deb_leave(LBS_DEB_CMD);
1057 1058 1059
	return 0;
}

1060 1061
int lbs_mesh_access(struct lbs_private *priv, uint16_t cmd_action,
		    struct cmd_ds_mesh_access *cmd)
1062
{
1063 1064
	int ret;

1065
	lbs_deb_enter_args(LBS_DEB_CMD, "action %d", cmd_action);
1066

1067
	cmd->hdr.command = cpu_to_le16(CMD_MESH_ACCESS);
1068
	cmd->hdr.size = cpu_to_le16(sizeof(*cmd));
1069
	cmd->hdr.result = 0;
1070

1071
	cmd->action = cpu_to_le16(cmd_action);
1072

1073
	ret = lbs_cmd_with_response(priv, CMD_MESH_ACCESS, cmd);
1074

1075
	lbs_deb_leave(LBS_DEB_CMD);
1076
	return ret;
1077
}
1078
EXPORT_SYMBOL_GPL(lbs_mesh_access);
1079

1080
int lbs_mesh_config(struct lbs_private *priv, uint16_t enable, uint16_t chan)
1081 1082 1083 1084 1085
{
	struct cmd_ds_mesh_config cmd;

	memset(&cmd, 0, sizeof(cmd));
	cmd.action = cpu_to_le16(enable);
1086
	cmd.channel = cpu_to_le16(chan);
1087
	cmd.type = cpu_to_le16(priv->mesh_tlv);
1088
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
1089

1090 1091 1092 1093
	if (enable) {
		cmd.length = cpu_to_le16(priv->mesh_ssid_len);
		memcpy(cmd.data, priv->mesh_ssid, priv->mesh_ssid_len);
	}
1094
	lbs_deb_cmd("mesh config enable %d TLV %x channel %d SSID %s\n",
1095
		    enable, priv->mesh_tlv, chan,
1096
		    escape_essid(priv->mesh_ssid, priv->mesh_ssid_len));
1097
	return lbs_cmd_with_response(priv, CMD_MESH_CONFIG, &cmd);
1098 1099
}

1100 1101 1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113
static int lbs_cmd_bcn_ctrl(struct lbs_private * priv,
				struct cmd_ds_command *cmd,
				u16 cmd_action)
{
	struct cmd_ds_802_11_beacon_control
		*bcn_ctrl = &cmd->params.bcn_ctrl;

	lbs_deb_enter(LBS_DEB_CMD);
	cmd->size =
	    cpu_to_le16(sizeof(struct cmd_ds_802_11_beacon_control)
			     + S_DS_GEN);
	cmd->command = cpu_to_le16(CMD_802_11_BEACON_CTRL);

	bcn_ctrl->action = cpu_to_le16(cmd_action);
1114 1115
	bcn_ctrl->beacon_enable = cpu_to_le16(priv->beacon_enable);
	bcn_ctrl->beacon_period = cpu_to_le16(priv->beacon_period);
1116 1117 1118 1119 1120

	lbs_deb_leave(LBS_DEB_CMD);
	return 0;
}

1121 1122
static void lbs_queue_cmd(struct lbs_private *priv,
			  struct cmd_ctrl_node *cmdnode)
1123 1124
{
	unsigned long flags;
1125
	int addtail = 1;
1126

1127
	lbs_deb_enter(LBS_DEB_HOST);
1128

1129 1130
	if (!cmdnode) {
		lbs_deb_host("QUEUE_CMD: cmdnode is NULL\n");
1131 1132
		goto done;
	}
1133 1134 1135 1136
	if (!cmdnode->cmdbuf->size) {
		lbs_deb_host("DNLD_CMD: cmd size is zero\n");
		goto done;
	}
1137
	cmdnode->result = 0;
1138 1139

	/* Exit_PS command needs to be queued in the header always. */
1140
	if (le16_to_cpu(cmdnode->cmdbuf->command) == CMD_802_11_PS_MODE) {
1141
		struct cmd_ds_802_11_ps_mode *psm = (void *) &cmdnode->cmdbuf[1];
1142

1143
		if (psm->action == cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1144
			if (priv->psstate != PS_STATE_FULL_POWER)
1145 1146 1147 1148
				addtail = 0;
		}
	}

1149
	spin_lock_irqsave(&priv->driver_lock, flags);
1150

1151
	if (addtail)
1152
		list_add_tail(&cmdnode->list, &priv->cmdpendingq);
1153
	else
1154
		list_add(&cmdnode->list, &priv->cmdpendingq);
1155

1156
	spin_unlock_irqrestore(&priv->driver_lock, flags);
1157

1158
	lbs_deb_host("QUEUE_CMD: inserted command 0x%04x into cmdpendingq\n",
1159
		     le16_to_cpu(cmdnode->cmdbuf->command));
1160 1161

done:
1162
	lbs_deb_leave(LBS_DEB_HOST);
1163 1164
}

1165 1166
static void lbs_submit_command(struct lbs_private *priv,
			       struct cmd_ctrl_node *cmdnode)
1167 1168
{
	unsigned long flags;
1169
	struct cmd_header *cmd;
1170 1171 1172 1173
	uint16_t cmdsize;
	uint16_t command;
	int timeo = 5 * HZ;
	int ret;
1174

1175
	lbs_deb_enter(LBS_DEB_HOST);
1176

1177
	cmd = cmdnode->cmdbuf;
1178

1179 1180 1181 1182
	spin_lock_irqsave(&priv->driver_lock, flags);
	priv->cur_cmd = cmdnode;
	priv->cur_cmd_retcode = 0;
	spin_unlock_irqrestore(&priv->driver_lock, flags);
1183

1184 1185
	cmdsize = le16_to_cpu(cmd->size);
	command = le16_to_cpu(cmd->command);
1186

1187 1188 1189 1190 1191
	/* These commands take longer */
	if (command == CMD_802_11_SCAN || command == CMD_802_11_ASSOCIATE ||
	    command == CMD_802_11_AUTHENTICATE)
		timeo = 10 * HZ;

1192 1193
	lbs_deb_host("DNLD_CMD: command 0x%04x, seq %d, size %d, jiffies %lu\n",
		     command, le16_to_cpu(cmd->seqnum), cmdsize, jiffies);
1194
	lbs_deb_hex(LBS_DEB_HOST, "DNLD_CMD", (void *) cmdnode->cmdbuf, cmdsize);
1195

1196
	ret = priv->hw_host_to_card(priv, MVMS_CMD, (u8 *) cmd, cmdsize);
1197

1198 1199
	if (ret) {
		lbs_pr_info("DNLD_CMD: hw_host_to_card failed: %d\n", ret);
1200 1201 1202 1203 1204 1205
		/* Let the timer kick in and retry, and potentially reset
		   the whole thing if the condition persists */
		timeo = HZ;
	} else
		lbs_deb_cmd("DNLD_CMD: sent command 0x%04x, jiffies %lu\n",
			    command, jiffies);
1206 1207

	/* Setup the timer after transmit command */
1208
	mod_timer(&priv->command_timer, jiffies + timeo);
1209

1210
	lbs_deb_leave(LBS_DEB_HOST);
1211 1212
}

1213
static int lbs_cmd_mac_control(struct lbs_private *priv,
1214 1215 1216 1217
				struct cmd_ds_command *cmd)
{
	struct cmd_ds_mac_control *mac = &cmd->params.macctrl;

1218
	lbs_deb_enter(LBS_DEB_CMD);
1219

1220
	cmd->command = cpu_to_le16(CMD_MAC_CONTROL);
1221
	cmd->size = cpu_to_le16(sizeof(struct cmd_ds_mac_control) + S_DS_GEN);
1222
	mac->action = cpu_to_le16(priv->currentpacketfilter);
1223

1224
	lbs_deb_cmd("MAC_CONTROL: action 0x%x, size %d\n",
1225
		    le16_to_cpu(mac->action), le16_to_cpu(cmd->size));
1226

1227
	lbs_deb_leave(LBS_DEB_CMD);
1228 1229 1230 1231 1232
	return 0;
}

/**
 *  This function inserts command node to cmdfreeq
1233
 *  after cleans it. Requires priv->driver_lock held.
1234
 */
1235
static void __lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
1236
					 struct cmd_ctrl_node *cmdnode)
1237
{
1238 1239 1240 1241 1242 1243 1244
	lbs_deb_enter(LBS_DEB_HOST);

	if (!cmdnode)
		goto out;

	cmdnode->callback = NULL;
	cmdnode->callback_arg = 0;
1245

1246
	memset(cmdnode->cmdbuf, 0, LBS_CMD_BUFFER_SIZE);
1247

1248 1249 1250
	list_add_tail(&cmdnode->list, &priv->cmdfreeq);
 out:
	lbs_deb_leave(LBS_DEB_HOST);
1251 1252
}

1253 1254
static void lbs_cleanup_and_insert_cmd(struct lbs_private *priv,
	struct cmd_ctrl_node *ptempcmd)
1255 1256 1257
{
	unsigned long flags;

1258
	spin_lock_irqsave(&priv->driver_lock, flags);
1259
	__lbs_cleanup_and_insert_cmd(priv, ptempcmd);
1260
	spin_unlock_irqrestore(&priv->driver_lock, flags);
1261 1262
}

1263 1264 1265 1266 1267
void lbs_complete_command(struct lbs_private *priv, struct cmd_ctrl_node *cmd,
			  int result)
{
	if (cmd == priv->cur_cmd)
		priv->cur_cmd_retcode = result;
1268

1269
	cmd->result = result;
1270 1271 1272
	cmd->cmdwaitqwoken = 1;
	wake_up_interruptible(&cmd->cmdwait_q);

1273 1274
	if (!cmd->callback)
		__lbs_cleanup_and_insert_cmd(priv, cmd);
1275 1276 1277
	priv->cur_cmd = NULL;
}

1278
int lbs_set_radio_control(struct lbs_private *priv)
1279 1280
{
	int ret = 0;
1281
	struct cmd_ds_802_11_radio_control cmd;
1282

1283
	lbs_deb_enter(LBS_DEB_CMD);
1284

1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301
	cmd.hdr.size = cpu_to_le16(sizeof(cmd));
	cmd.action = cpu_to_le16(CMD_ACT_SET);

	switch (priv->preamble) {
	case CMD_TYPE_SHORT_PREAMBLE:
		cmd.control = cpu_to_le16(SET_SHORT_PREAMBLE);
		break;

	case CMD_TYPE_LONG_PREAMBLE:
		cmd.control = cpu_to_le16(SET_LONG_PREAMBLE);
		break;

	case CMD_TYPE_AUTO_PREAMBLE:
	default:
		cmd.control = cpu_to_le16(SET_AUTO_PREAMBLE);
		break;
	}
1302

1303 1304 1305 1306 1307 1308 1309 1310 1311
	if (priv->radioon)
		cmd.control |= cpu_to_le16(TURN_ON_RF);
	else
		cmd.control &= cpu_to_le16(~TURN_ON_RF);

	lbs_deb_cmd("RADIO_SET: radio %d, preamble %d\n", priv->radioon,
		    priv->preamble);

	ret = lbs_cmd_with_response(priv, CMD_802_11_RADIO_CONTROL, &cmd);
1312

1313
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1314 1315 1316
	return ret;
}

1317
int lbs_set_mac_packet_filter(struct lbs_private *priv)
1318 1319 1320
{
	int ret = 0;

1321
	lbs_deb_enter(LBS_DEB_CMD);
1322 1323

	/* Send MAC control command to station */
1324
	ret = lbs_prepare_and_send_command(priv,
1325
				    CMD_MAC_CONTROL, 0, 0, 0, NULL);
1326

1327
	lbs_deb_leave_args(LBS_DEB_CMD, "ret %d", ret);
1328 1329 1330 1331 1332 1333
	return ret;
}

/**
 *  @brief This function prepare the command before send to firmware.
 *
1334
 *  @param priv		A pointer to struct lbs_private structure
1335 1336 1337 1338 1339 1340 1341
 *  @param cmd_no	command number
 *  @param cmd_action	command action: GET or SET
 *  @param wait_option	wait option: wait response or not
 *  @param cmd_oid	cmd oid: treated as sub command
 *  @param pdata_buf	A pointer to informaion buffer
 *  @return 		0 or -1
 */
1342
int lbs_prepare_and_send_command(struct lbs_private *priv,
1343 1344 1345 1346 1347 1348 1349 1350 1351
			  u16 cmd_no,
			  u16 cmd_action,
			  u16 wait_option, u32 cmd_oid, void *pdata_buf)
{
	int ret = 0;
	struct cmd_ctrl_node *cmdnode;
	struct cmd_ds_command *cmdptr;
	unsigned long flags;

1352
	lbs_deb_enter(LBS_DEB_HOST);
1353

1354 1355
	if (!priv) {
		lbs_deb_host("PREP_CMD: priv is NULL\n");
1356 1357 1358 1359
		ret = -1;
		goto done;
	}

1360
	if (priv->surpriseremoved) {
1361
		lbs_deb_host("PREP_CMD: card removed\n");
1362 1363 1364 1365
		ret = -1;
		goto done;
	}

1366
	cmdnode = lbs_get_cmd_ctrl_node(priv);
1367 1368

	if (cmdnode == NULL) {
1369
		lbs_deb_host("PREP_CMD: cmdnode is NULL\n");
1370 1371

		/* Wake up main thread to execute next command */
1372
		wake_up_interruptible(&priv->waitq);
1373 1374 1375 1376
		ret = -1;
		goto done;
	}

1377
	lbs_set_cmd_ctrl_node(priv, cmdnode, pdata_buf);
1378

1379
	cmdptr = (struct cmd_ds_command *)cmdnode->cmdbuf;
1380

1381
	lbs_deb_host("PREP_CMD: command 0x%04x\n", cmd_no);
1382 1383

	/* Set sequence number, command and INT option */
1384 1385
	priv->seqnum++;
	cmdptr->seqnum = cpu_to_le16(priv->seqnum);
1386

1387
	cmdptr->command = cpu_to_le16(cmd_no);
1388 1389 1390
	cmdptr->result = 0;

	switch (cmd_no) {
1391
	case CMD_802_11_PS_MODE:
1392
		ret = lbs_cmd_802_11_ps_mode(priv, cmdptr, cmd_action);
1393 1394
		break;

1395
	case CMD_802_11_SCAN:
1396
		ret = lbs_cmd_80211_scan(priv, cmdptr, pdata_buf);
1397 1398
		break;

1399
	case CMD_MAC_CONTROL:
1400
		ret = lbs_cmd_mac_control(priv, cmdptr);
1401 1402
		break;

1403 1404
	case CMD_802_11_ASSOCIATE:
	case CMD_802_11_REASSOCIATE:
1405
		ret = lbs_cmd_80211_associate(priv, cmdptr, pdata_buf);
1406 1407
		break;

1408
	case CMD_802_11_DEAUTHENTICATE:
1409
		ret = lbs_cmd_80211_deauthenticate(priv, cmdptr);
1410 1411
		break;

1412
	case CMD_802_11_AD_HOC_START:
1413
		ret = lbs_cmd_80211_ad_hoc_start(priv, cmdptr, pdata_buf);
1414
		break;
1415
	case CMD_CODE_DNLD:
1416 1417
		break;

1418
	case CMD_802_11_RESET:
1419
		ret = lbs_cmd_802_11_reset(priv, cmdptr, cmd_action);
1420 1421
		break;

1422
	case CMD_802_11_GET_LOG:
1423
		ret = lbs_cmd_802_11_get_log(priv, cmdptr);
1424 1425
		break;

1426
	case CMD_802_11_AUTHENTICATE:
1427
		ret = lbs_cmd_80211_authenticate(priv, cmdptr, pdata_buf);
1428 1429
		break;

1430
	case CMD_802_11_GET_STAT:
1431
		ret = lbs_cmd_802_11_get_stat(priv, cmdptr);
1432 1433
		break;

1434
	case CMD_802_11_SNMP_MIB:
1435
		ret = lbs_cmd_802_11_snmp_mib(priv, cmdptr,
1436 1437 1438
					       cmd_action, cmd_oid, pdata_buf);
		break;

1439 1440 1441
	case CMD_MAC_REG_ACCESS:
	case CMD_BBP_REG_ACCESS:
	case CMD_RF_REG_ACCESS:
1442
		ret = lbs_cmd_reg_access(priv, cmdptr, cmd_action, pdata_buf);
1443 1444
		break;

1445
	case CMD_802_11_RF_TX_POWER:
1446
		ret = lbs_cmd_802_11_rf_tx_power(priv, cmdptr,
1447 1448 1449
						  cmd_action, pdata_buf);
		break;

1450
	case CMD_802_11_RATE_ADAPT_RATESET:
1451
		ret = lbs_cmd_802_11_rate_adapt_rateset(priv,
1452 1453 1454
							 cmdptr, cmd_action);
		break;

1455
	case CMD_MAC_MULTICAST_ADR:
1456
		ret = lbs_cmd_mac_multicast_adr(priv, cmdptr, cmd_action);
1457 1458
		break;

1459
	case CMD_802_11_MONITOR_MODE:
1460
		ret = lbs_cmd_802_11_monitor_mode(priv, cmdptr,
1461 1462 1463
				          cmd_action, pdata_buf);
		break;

1464
	case CMD_802_11_AD_HOC_JOIN:
1465
		ret = lbs_cmd_80211_ad_hoc_join(priv, cmdptr, pdata_buf);
1466 1467
		break;

1468
	case CMD_802_11_RSSI:
1469
		ret = lbs_cmd_802_11_rssi(priv, cmdptr);
1470 1471
		break;

1472
	case CMD_802_11_AD_HOC_STOP:
1473
		ret = lbs_cmd_80211_ad_hoc_stop(priv, cmdptr);
1474 1475
		break;

1476
	case CMD_802_11_ENABLE_RSN:
1477
		ret = lbs_cmd_802_11_enable_rsn(priv, cmdptr, cmd_action,
1478
				pdata_buf);
1479 1480
		break;

1481
	case CMD_802_11_KEY_MATERIAL:
1482
		ret = lbs_cmd_802_11_key_material(priv, cmdptr, cmd_action,
1483
				cmd_oid, pdata_buf);
1484 1485
		break;

1486
	case CMD_802_11_PAIRWISE_TSC:
1487
		break;
1488
	case CMD_802_11_GROUP_TSC:
1489 1490
		break;

1491
	case CMD_802_11_MAC_ADDRESS:
1492
		ret = lbs_cmd_802_11_mac_address(priv, cmdptr, cmd_action);
1493 1494
		break;

1495
	case CMD_802_11_EEPROM_ACCESS:
1496
		ret = lbs_cmd_802_11_eeprom_access(priv, cmdptr,
1497 1498 1499
						    cmd_action, pdata_buf);
		break;

1500 1501
	case CMD_802_11_SET_AFC:
	case CMD_802_11_GET_AFC:
1502 1503

		cmdptr->command = cpu_to_le16(cmd_no);
1504 1505
		cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_802_11_afc) +
					   S_DS_GEN);
1506 1507 1508 1509 1510 1511 1512

		memmove(&cmdptr->params.afc,
			pdata_buf, sizeof(struct cmd_ds_802_11_afc));

		ret = 0;
		goto done;

1513
	case CMD_802_11D_DOMAIN_INFO:
1514
		ret = lbs_cmd_802_11d_domain_info(priv, cmdptr,
1515 1516 1517
						   cmd_no, cmd_action);
		break;

1518 1519
	case CMD_802_11_TPC_CFG:
		cmdptr->command = cpu_to_le16(CMD_802_11_TPC_CFG);
1520 1521 1522 1523 1524 1525 1526 1527 1528
		cmdptr->size =
		    cpu_to_le16(sizeof(struct cmd_ds_802_11_tpc_cfg) +
				     S_DS_GEN);

		memmove(&cmdptr->params.tpccfg,
			pdata_buf, sizeof(struct cmd_ds_802_11_tpc_cfg));

		ret = 0;
		break;
1529
	case CMD_802_11_LED_GPIO_CTRL:
1530 1531 1532 1533 1534 1535 1536 1537 1538 1539
		{
			struct mrvlietypes_ledgpio *gpio =
			    (struct mrvlietypes_ledgpio*)
			    cmdptr->params.ledgpio.data;

			memmove(&cmdptr->params.ledgpio,
				pdata_buf,
				sizeof(struct cmd_ds_802_11_led_ctrl));

			cmdptr->command =
1540
			    cpu_to_le16(CMD_802_11_LED_GPIO_CTRL);
1541 1542 1543

#define ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN 8
			cmdptr->size =
H
Holger Schurig 已提交
1544 1545 1546 1547
			    cpu_to_le16(le16_to_cpu(gpio->header.len)
				+ S_DS_GEN
				+ ACTION_NUMLED_TLVTYPE_LEN_FIELDS_LEN);
			gpio->header.len = gpio->header.len;
1548 1549 1550 1551

			ret = 0;
			break;
		}
1552 1553 1554 1555
	case CMD_802_11_SUBSCRIBE_EVENT:
		lbs_cmd_802_11_subscribe_event(priv, cmdptr,
			cmd_action, pdata_buf);
		break;
1556 1557
	case CMD_802_11_PWR_CFG:
		cmdptr->command = cpu_to_le16(CMD_802_11_PWR_CFG);
1558 1559 1560 1561 1562 1563 1564 1565
		cmdptr->size =
		    cpu_to_le16(sizeof(struct cmd_ds_802_11_pwr_cfg) +
				     S_DS_GEN);
		memmove(&cmdptr->params.pwrcfg, pdata_buf,
			sizeof(struct cmd_ds_802_11_pwr_cfg));

		ret = 0;
		break;
1566
	case CMD_BT_ACCESS:
1567
		ret = lbs_cmd_bt_access(priv, cmdptr, cmd_action, pdata_buf);
1568 1569
		break;

1570
	case CMD_FWT_ACCESS:
1571
		ret = lbs_cmd_fwt_access(priv, cmdptr, cmd_action, pdata_buf);
1572 1573
		break;

1574 1575
	case CMD_GET_TSF:
		cmdptr->command = cpu_to_le16(CMD_GET_TSF);
1576 1577
		cmdptr->size = cpu_to_le16(sizeof(struct cmd_ds_get_tsf) +
					   S_DS_GEN);
1578 1579
		ret = 0;
		break;
1580 1581 1582
	case CMD_802_11_BEACON_CTRL:
		ret = lbs_cmd_bcn_ctrl(priv, cmdptr, cmd_action);
		break;
1583
	default:
1584
		lbs_deb_host("PREP_CMD: unknown command 0x%04x\n", cmd_no);
1585 1586 1587 1588 1589 1590
		ret = -1;
		break;
	}

	/* return error, since the command preparation failed */
	if (ret != 0) {
1591
		lbs_deb_host("PREP_CMD: command preparation failed\n");
1592
		lbs_cleanup_and_insert_cmd(priv, cmdnode);
1593 1594 1595 1596 1597 1598
		ret = -1;
		goto done;
	}

	cmdnode->cmdwaitqwoken = 0;

1599
	lbs_queue_cmd(priv, cmdnode);
1600
	wake_up_interruptible(&priv->waitq);
1601

1602
	if (wait_option & CMD_OPTION_WAITFORRSP) {
1603
		lbs_deb_host("PREP_CMD: wait for response\n");
1604 1605 1606 1607 1608
		might_sleep();
		wait_event_interruptible(cmdnode->cmdwait_q,
					 cmdnode->cmdwaitqwoken);
	}

1609 1610
	spin_lock_irqsave(&priv->driver_lock, flags);
	if (priv->cur_cmd_retcode) {
1611
		lbs_deb_host("PREP_CMD: command failed with return code %d\n",
1612 1613
		       priv->cur_cmd_retcode);
		priv->cur_cmd_retcode = 0;
1614 1615
		ret = -1;
	}
1616
	spin_unlock_irqrestore(&priv->driver_lock, flags);
1617 1618

done:
1619
	lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1620 1621
	return ret;
}
1622
EXPORT_SYMBOL_GPL(lbs_prepare_and_send_command);
1623 1624 1625 1626 1627

/**
 *  @brief This function allocates the command buffer and link
 *  it to command free queue.
 *
1628
 *  @param priv		A pointer to struct lbs_private structure
1629 1630
 *  @return 		0 or -1
 */
1631
int lbs_allocate_cmd_buffer(struct lbs_private *priv)
1632 1633
{
	int ret = 0;
1634
	u32 bufsize;
1635
	u32 i;
1636
	struct cmd_ctrl_node *cmdarray;
1637

1638
	lbs_deb_enter(LBS_DEB_HOST);
1639

1640 1641 1642
	/* Allocate and initialize the command array */
	bufsize = sizeof(struct cmd_ctrl_node) * LBS_NUM_CMD_BUFFERS;
	if (!(cmdarray = kzalloc(bufsize, GFP_KERNEL))) {
1643
		lbs_deb_host("ALLOC_CMD_BUF: tempcmd_array is NULL\n");
1644 1645 1646
		ret = -1;
		goto done;
	}
1647
	priv->cmd_array = cmdarray;
1648

1649 1650 1651 1652
	/* Allocate and initialize each command buffer in the command array */
	for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
		cmdarray[i].cmdbuf = kzalloc(LBS_CMD_BUFFER_SIZE, GFP_KERNEL);
		if (!cmdarray[i].cmdbuf) {
1653
			lbs_deb_host("ALLOC_CMD_BUF: ptempvirtualaddr is NULL\n");
1654 1655 1656 1657 1658
			ret = -1;
			goto done;
		}
	}

1659 1660 1661
	for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
		init_waitqueue_head(&cmdarray[i].cmdwait_q);
		lbs_cleanup_and_insert_cmd(priv, &cmdarray[i]);
1662 1663
	}
	ret = 0;
1664 1665

done:
1666
	lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1667 1668 1669 1670 1671 1672
	return ret;
}

/**
 *  @brief This function frees the command buffer.
 *
1673
 *  @param priv		A pointer to struct lbs_private structure
1674 1675
 *  @return 		0 or -1
 */
1676
int lbs_free_cmd_buffer(struct lbs_private *priv)
1677
{
1678
	struct cmd_ctrl_node *cmdarray;
1679 1680
	unsigned int i;

1681
	lbs_deb_enter(LBS_DEB_HOST);
1682 1683

	/* need to check if cmd array is allocated or not */
1684
	if (priv->cmd_array == NULL) {
1685
		lbs_deb_host("FREE_CMD_BUF: cmd_array is NULL\n");
1686 1687 1688
		goto done;
	}

1689
	cmdarray = priv->cmd_array;
1690 1691

	/* Release shared memory buffers */
1692 1693 1694 1695
	for (i = 0; i < LBS_NUM_CMD_BUFFERS; i++) {
		if (cmdarray[i].cmdbuf) {
			kfree(cmdarray[i].cmdbuf);
			cmdarray[i].cmdbuf = NULL;
1696 1697 1698 1699
		}
	}

	/* Release cmd_ctrl_node */
1700 1701 1702
	if (priv->cmd_array) {
		kfree(priv->cmd_array);
		priv->cmd_array = NULL;
1703 1704 1705
	}

done:
1706
	lbs_deb_leave(LBS_DEB_HOST);
1707 1708 1709 1710 1711 1712 1713
	return 0;
}

/**
 *  @brief This function gets a free command node if available in
 *  command free queue.
 *
1714
 *  @param priv		A pointer to struct lbs_private structure
1715 1716
 *  @return cmd_ctrl_node A pointer to cmd_ctrl_node structure or NULL
 */
1717
static struct cmd_ctrl_node *lbs_get_cmd_ctrl_node(struct lbs_private *priv)
1718 1719 1720 1721
{
	struct cmd_ctrl_node *tempnode;
	unsigned long flags;

1722 1723
	lbs_deb_enter(LBS_DEB_HOST);

1724
	if (!priv)
1725 1726
		return NULL;

1727
	spin_lock_irqsave(&priv->driver_lock, flags);
1728

1729 1730
	if (!list_empty(&priv->cmdfreeq)) {
		tempnode = list_first_entry(&priv->cmdfreeq,
1731 1732
					    struct cmd_ctrl_node, list);
		list_del(&tempnode->list);
1733
	} else {
1734
		lbs_deb_host("GET_CMD_NODE: cmd_ctrl_node is not available\n");
1735 1736 1737
		tempnode = NULL;
	}

1738
	spin_unlock_irqrestore(&priv->driver_lock, flags);
1739

1740
	lbs_deb_leave(LBS_DEB_HOST);
1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753
	return tempnode;
}

/**
 *  @brief This function cleans command node.
 *
 *  @param ptempnode	A pointer to cmdCtrlNode structure
 *  @return 		n/a
 */

/**
 *  @brief This function initializes the command node.
 *
1754
 *  @param priv		A pointer to struct lbs_private structure
1755 1756 1757 1758
 *  @param ptempnode	A pointer to cmd_ctrl_node structure
 *  @param pdata_buf	A pointer to informaion buffer
 *  @return 		0 or -1
 */
1759 1760
static void lbs_set_cmd_ctrl_node(struct lbs_private *priv,
				  struct cmd_ctrl_node *ptempnode,
1761
				  void *pdata_buf)
1762
{
1763
	lbs_deb_enter(LBS_DEB_HOST);
1764 1765 1766 1767

	if (!ptempnode)
		return;

1768
	ptempnode->callback = NULL;
1769
	ptempnode->callback_arg = (unsigned long)pdata_buf;
1770

1771
	lbs_deb_leave(LBS_DEB_HOST);
1772 1773 1774 1775 1776 1777 1778
}

/**
 *  @brief This function executes next command in command
 *  pending queue. It will put fimware back to PS mode
 *  if applicable.
 *
1779
 *  @param priv     A pointer to struct lbs_private structure
1780 1781
 *  @return 	   0 or -1
 */
1782
int lbs_execute_next_command(struct lbs_private *priv)
1783 1784
{
	struct cmd_ctrl_node *cmdnode = NULL;
1785
	struct cmd_header *cmd;
1786 1787 1788
	unsigned long flags;
	int ret = 0;

1789
	// Debug group is LBS_DEB_THREAD and not LBS_DEB_HOST, because the
1790
	// only caller to us is lbs_thread() and we get even when a
1791 1792
	// data packet is received
	lbs_deb_enter(LBS_DEB_THREAD);
1793

1794
	spin_lock_irqsave(&priv->driver_lock, flags);
1795

1796
	if (priv->cur_cmd) {
1797
		lbs_pr_alert( "EXEC_NEXT_CMD: already processing command!\n");
1798
		spin_unlock_irqrestore(&priv->driver_lock, flags);
1799 1800 1801 1802
		ret = -1;
		goto done;
	}

1803 1804
	if (!list_empty(&priv->cmdpendingq)) {
		cmdnode = list_first_entry(&priv->cmdpendingq,
1805
					   struct cmd_ctrl_node, list);
1806 1807
	}

1808
	spin_unlock_irqrestore(&priv->driver_lock, flags);
1809 1810

	if (cmdnode) {
1811
		cmd = cmdnode->cmdbuf;
1812

1813
		if (is_command_allowed_in_ps(le16_to_cpu(cmd->command))) {
1814 1815
			if ((priv->psstate == PS_STATE_SLEEP) ||
			    (priv->psstate == PS_STATE_PRE_SLEEP)) {
1816 1817
				lbs_deb_host(
				       "EXEC_NEXT_CMD: cannot send cmd 0x%04x in psstate %d\n",
1818
				       le16_to_cpu(cmd->command),
1819
				       priv->psstate);
1820 1821 1822
				ret = -1;
				goto done;
			}
1823
			lbs_deb_host("EXEC_NEXT_CMD: OK to send command "
1824 1825
				     "0x%04x in psstate %d\n",
				     le16_to_cpu(cmd->command), priv->psstate);
1826
		} else if (priv->psstate != PS_STATE_FULL_POWER) {
1827 1828 1829
			/*
			 * 1. Non-PS command:
			 * Queue it. set needtowakeup to TRUE if current state
1830
			 * is SLEEP, otherwise call lbs_ps_wakeup to send Exit_PS.
1831 1832 1833 1834 1835 1836 1837
			 * 2. PS command but not Exit_PS:
			 * Ignore it.
			 * 3. PS command Exit_PS:
			 * Set needtowakeup to TRUE if current state is SLEEP,
			 * otherwise send this command down to firmware
			 * immediately.
			 */
1838
			if (cmd->command != cpu_to_le16(CMD_802_11_PS_MODE)) {
1839 1840
				/*  Prepare to send Exit PS,
				 *  this non PS command will be sent later */
1841 1842
				if ((priv->psstate == PS_STATE_SLEEP)
				    || (priv->psstate == PS_STATE_PRE_SLEEP)
1843 1844 1845
				    ) {
					/* w/ new scheme, it will not reach here.
					   since it is blocked in main_thread. */
1846
					priv->needtowakeup = 1;
1847
				} else
1848
					lbs_ps_wakeup(priv, 0);
1849 1850 1851 1852 1853 1854 1855 1856

				ret = 0;
				goto done;
			} else {
				/*
				 * PS command. Ignore it if it is not Exit_PS.
				 * otherwise send it down immediately.
				 */
1857
				struct cmd_ds_802_11_ps_mode *psm = (void *)&cmd[1];
1858

1859 1860
				lbs_deb_host(
				       "EXEC_NEXT_CMD: PS cmd, action 0x%02x\n",
1861 1862
				       psm->action);
				if (psm->action !=
1863
				    cpu_to_le16(CMD_SUBCMD_EXIT_PS)) {
1864 1865
					lbs_deb_host(
					       "EXEC_NEXT_CMD: ignore ENTER_PS cmd\n");
1866
					list_del(&cmdnode->list);
1867 1868 1869
					spin_lock_irqsave(&priv->driver_lock, flags);
					lbs_complete_command(priv, cmdnode, 0);
					spin_unlock_irqrestore(&priv->driver_lock, flags);
1870 1871 1872 1873 1874

					ret = 0;
					goto done;
				}

1875 1876
				if ((priv->psstate == PS_STATE_SLEEP) ||
				    (priv->psstate == PS_STATE_PRE_SLEEP)) {
1877 1878
					lbs_deb_host(
					       "EXEC_NEXT_CMD: ignore EXIT_PS cmd in sleep\n");
1879
					list_del(&cmdnode->list);
1880 1881 1882
					spin_lock_irqsave(&priv->driver_lock, flags);
					lbs_complete_command(priv, cmdnode, 0);
					spin_unlock_irqrestore(&priv->driver_lock, flags);
1883
					priv->needtowakeup = 1;
1884 1885 1886 1887 1888

					ret = 0;
					goto done;
				}

1889 1890
				lbs_deb_host(
				       "EXEC_NEXT_CMD: sending EXIT_PS\n");
1891 1892
			}
		}
1893
		list_del(&cmdnode->list);
1894
		lbs_deb_host("EXEC_NEXT_CMD: sending command 0x%04x\n",
1895
			    le16_to_cpu(cmd->command));
1896
		lbs_submit_command(priv, cmdnode);
1897 1898 1899 1900 1901
	} else {
		/*
		 * check if in power save mode, if yes, put the device back
		 * to PS mode
		 */
1902 1903 1904 1905 1906 1907
		if ((priv->psmode != LBS802_11POWERMODECAM) &&
		    (priv->psstate == PS_STATE_FULL_POWER) &&
		    ((priv->connect_status == LBS_CONNECTED) ||
		    (priv->mesh_connect_status == LBS_CONNECTED))) {
			if (priv->secinfo.WPAenabled ||
			    priv->secinfo.WPA2enabled) {
1908
				/* check for valid WPA group keys */
1909 1910
				if (priv->wpa_mcast_key.len ||
				    priv->wpa_unicast_key.len) {
1911
					lbs_deb_host(
1912 1913
					       "EXEC_NEXT_CMD: WPA enabled and GTK_SET"
					       " go back to PS_SLEEP");
1914
					lbs_ps_sleep(priv, 0);
1915 1916
				}
			} else {
1917 1918 1919
				lbs_deb_host(
				       "EXEC_NEXT_CMD: cmdpendingq empty, "
				       "go back to PS_SLEEP");
1920
				lbs_ps_sleep(priv, 0);
1921 1922 1923 1924 1925 1926
			}
		}
	}

	ret = 0;
done:
1927
	lbs_deb_leave(LBS_DEB_THREAD);
1928 1929 1930
	return ret;
}

1931
void lbs_send_iwevcustom_event(struct lbs_private *priv, s8 *str)
1932 1933 1934 1935
{
	union iwreq_data iwrq;
	u8 buf[50];

1936
	lbs_deb_enter(LBS_DEB_WEXT);
1937 1938 1939 1940 1941 1942 1943 1944 1945

	memset(&iwrq, 0, sizeof(union iwreq_data));
	memset(buf, 0, sizeof(buf));

	snprintf(buf, sizeof(buf) - 1, "%s", str);

	iwrq.data.length = strlen(buf) + 1 + IW_EV_LCP_LEN;

	/* Send Event to upper layer */
1946 1947 1948
	lbs_deb_wext("event indication string %s\n", (char *)buf);
	lbs_deb_wext("event indication length %d\n", iwrq.data.length);
	lbs_deb_wext("sending wireless event IWEVCUSTOM for %s\n", str);
1949

1950
	wireless_send_event(priv->dev, IWEVCUSTOM, &iwrq, buf);
1951

1952
	lbs_deb_leave(LBS_DEB_WEXT);
1953 1954
}

1955
static int sendconfirmsleep(struct lbs_private *priv, u8 *cmdptr, u16 size)
1956 1957 1958 1959
{
	unsigned long flags;
	int ret = 0;

1960
	lbs_deb_enter(LBS_DEB_HOST);
1961

1962
	lbs_deb_host("SEND_SLEEPC_CMD: before download, cmd size %d\n",
1963 1964
	       size);

1965
	lbs_deb_hex(LBS_DEB_HOST, "sleep confirm command", cmdptr, size);
1966

1967
	ret = priv->hw_host_to_card(priv, MVMS_CMD, cmdptr, size);
1968

1969 1970
	spin_lock_irqsave(&priv->driver_lock, flags);
	if (priv->intcounter || priv->currenttxskb)
1971
		lbs_deb_host("SEND_SLEEPC_CMD: intcounter %d, currenttxskb %p\n",
1972 1973
		       priv->intcounter, priv->currenttxskb);
	spin_unlock_irqrestore(&priv->driver_lock, flags);
1974 1975 1976 1977 1978

	if (ret) {
		lbs_pr_alert(
		       "SEND_SLEEPC_CMD: Host to Card failed for Confirm Sleep\n");
	} else {
1979 1980 1981
		spin_lock_irqsave(&priv->driver_lock, flags);
		if (!priv->intcounter) {
			priv->psstate = PS_STATE_SLEEP;
1982
		} else {
1983
			lbs_deb_host("SEND_SLEEPC_CMD: after sent, intcounter %d\n",
1984
			       priv->intcounter);
1985
		}
1986
		spin_unlock_irqrestore(&priv->driver_lock, flags);
1987

1988
		lbs_deb_host("SEND_SLEEPC_CMD: sent confirm sleep\n");
1989 1990
	}

1991
	lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
1992 1993 1994
	return ret;
}

1995
void lbs_ps_sleep(struct lbs_private *priv, int wait_option)
1996
{
1997
	lbs_deb_enter(LBS_DEB_HOST);
1998 1999 2000 2001 2002 2003

	/*
	 * PS is currently supported only in Infrastructure mode
	 * Remove this check if it is to be supported in IBSS mode also
	 */

2004
	lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
2005
			      CMD_SUBCMD_ENTER_PS, wait_option, 0, NULL);
2006

2007
	lbs_deb_leave(LBS_DEB_HOST);
2008 2009 2010
}

/**
2011
 *  @brief This function sends Exit_PS command to firmware.
2012
 *
2013
 *  @param priv    	A pointer to struct lbs_private structure
2014 2015 2016
 *  @param wait_option	wait response or not
 *  @return 	   	n/a
 */
2017
void lbs_ps_wakeup(struct lbs_private *priv, int wait_option)
2018
{
2019
	__le32 Localpsmode;
2020

2021
	lbs_deb_enter(LBS_DEB_HOST);
2022

2023
	Localpsmode = cpu_to_le32(LBS802_11POWERMODECAM);
2024

2025
	lbs_prepare_and_send_command(priv, CMD_802_11_PS_MODE,
2026
			      CMD_SUBCMD_EXIT_PS,
2027 2028
			      wait_option, 0, &Localpsmode);

2029
	lbs_deb_leave(LBS_DEB_HOST);
2030 2031 2032 2033 2034 2035
}

/**
 *  @brief This function checks condition and prepares to
 *  send sleep confirm command to firmware if ok.
 *
2036
 *  @param priv    	A pointer to struct lbs_private structure
2037 2038 2039
 *  @param psmode  	Power Saving mode
 *  @return 	   	n/a
 */
2040
void lbs_ps_confirm_sleep(struct lbs_private *priv, u16 psmode)
2041 2042 2043 2044
{
	unsigned long flags =0;
	u8 allowed = 1;

2045
	lbs_deb_enter(LBS_DEB_HOST);
2046

2047
	if (priv->dnld_sent) {
2048
		allowed = 0;
2049
		lbs_deb_host("dnld_sent was set\n");
2050 2051
	}

2052 2053
	spin_lock_irqsave(&priv->driver_lock, flags);
	if (priv->cur_cmd) {
2054
		allowed = 0;
2055
		lbs_deb_host("cur_cmd was set\n");
2056
	}
2057
	if (priv->intcounter > 0) {
2058
		allowed = 0;
2059
		lbs_deb_host("intcounter %d\n", priv->intcounter);
2060
	}
2061
	spin_unlock_irqrestore(&priv->driver_lock, flags);
2062 2063

	if (allowed) {
2064
		lbs_deb_host("sending lbs_ps_confirm_sleep\n");
2065
		sendconfirmsleep(priv, (u8 *) & priv->lbs_ps_confirm_sleep,
2066 2067
				 sizeof(struct PS_CMD_ConfirmSleep));
	} else {
2068
		lbs_deb_host("sleep confirm has been delayed\n");
2069 2070
	}

2071
	lbs_deb_leave(LBS_DEB_HOST);
2072
}
2073 2074


2075 2076 2077 2078 2079 2080 2081 2082 2083 2084 2085
/**
 *  @brief Simple callback that copies response back into command
 *
 *  @param priv    	A pointer to struct lbs_private structure
 *  @param extra  	A pointer to the original command structure for which
 *                      'resp' is a response
 *  @param resp         A pointer to the command response
 *
 *  @return 	   	0 on success, error on failure
 */
int lbs_cmd_copyback(struct lbs_private *priv, unsigned long extra,
2086
		     struct cmd_header *resp)
2087 2088 2089 2090 2091 2092 2093 2094
{
	struct cmd_header *buf = (void *)extra;
	uint16_t copy_len;

	lbs_deb_enter(LBS_DEB_CMD);

	copy_len = min(le16_to_cpu(buf->size), le16_to_cpu(resp->size));
	lbs_deb_cmd("Copying back %u bytes; command response was %u bytes, "
2095 2096
		    "copy back buffer was %u bytes\n", copy_len,
		    le16_to_cpu(resp->size), le16_to_cpu(buf->size));
2097 2098 2099 2100 2101
	memcpy(buf, resp, copy_len);

	lbs_deb_leave(LBS_DEB_CMD);
	return 0;
}
2102
EXPORT_SYMBOL_GPL(lbs_cmd_copyback);
2103

2104 2105 2106 2107
struct cmd_ctrl_node *__lbs_cmd_async(struct lbs_private *priv, uint16_t command,
				      struct cmd_header *in_cmd, int in_cmd_size,
				      int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
				      unsigned long callback_arg)
2108 2109 2110 2111 2112
{
	struct cmd_ctrl_node *cmdnode;

	lbs_deb_enter(LBS_DEB_HOST);

2113
	if (priv->surpriseremoved) {
2114
		lbs_deb_host("PREP_CMD: card removed\n");
2115
		cmdnode = ERR_PTR(-ENOENT);
2116 2117 2118 2119 2120 2121 2122 2123 2124
		goto done;
	}

	cmdnode = lbs_get_cmd_ctrl_node(priv);
	if (cmdnode == NULL) {
		lbs_deb_host("PREP_CMD: cmdnode is NULL\n");

		/* Wake up main thread to execute next command */
		wake_up_interruptible(&priv->waitq);
2125
		cmdnode = ERR_PTR(-ENOBUFS);
2126 2127 2128
		goto done;
	}

2129
	cmdnode->callback = callback;
2130
	cmdnode->callback_arg = callback_arg;
2131

2132
	/* Copy the incoming command to the buffer */
2133
	memcpy(cmdnode->cmdbuf, in_cmd, in_cmd_size);
2134

2135
	/* Set sequence number, clean result, move to buffer */
2136
	priv->seqnum++;
2137 2138 2139 2140
	cmdnode->cmdbuf->command = cpu_to_le16(command);
	cmdnode->cmdbuf->size    = cpu_to_le16(in_cmd_size);
	cmdnode->cmdbuf->seqnum  = cpu_to_le16(priv->seqnum);
	cmdnode->cmdbuf->result  = 0;
2141 2142 2143 2144 2145 2146 2147

	lbs_deb_host("PREP_CMD: command 0x%04x\n", command);

	/* here was the big old switch() statement, which is now obsolete,
	 * because the caller of lbs_cmd() sets up all of *cmd for us. */

	cmdnode->cmdwaitqwoken = 0;
2148
	lbs_queue_cmd(priv, cmdnode);
2149 2150
	wake_up_interruptible(&priv->waitq);

2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164 2165 2166 2167 2168 2169 2170 2171 2172 2173
 done:
	lbs_deb_leave_args(LBS_DEB_HOST, "ret %p", cmdnode);
	return cmdnode;
}

int __lbs_cmd(struct lbs_private *priv, uint16_t command,
	      struct cmd_header *in_cmd, int in_cmd_size,
	      int (*callback)(struct lbs_private *, unsigned long, struct cmd_header *),
	      unsigned long callback_arg)
{
	struct cmd_ctrl_node *cmdnode;
	unsigned long flags;
	int ret = 0;

	lbs_deb_enter(LBS_DEB_HOST);

	cmdnode = __lbs_cmd_async(priv, command, in_cmd, in_cmd_size,
				  callback, callback_arg);
	if (IS_ERR(cmdnode)) {
		ret = PTR_ERR(cmdnode);
		goto done;
	}

2174 2175 2176
	might_sleep();
	wait_event_interruptible(cmdnode->cmdwait_q, cmdnode->cmdwaitqwoken);

2177
	spin_lock_irqsave(&priv->driver_lock, flags);
2178 2179 2180 2181
	ret = cmdnode->result;
	if (ret)
		lbs_pr_info("PREP_CMD: command 0x%04x failed: %d\n",
			    command, ret);
2182

2183
	__lbs_cleanup_and_insert_cmd(priv, cmdnode);
2184
	spin_unlock_irqrestore(&priv->driver_lock, flags);
2185 2186 2187 2188 2189

done:
	lbs_deb_leave_args(LBS_DEB_HOST, "ret %d", ret);
	return ret;
}
2190
EXPORT_SYMBOL_GPL(__lbs_cmd);
2191 2192